skysight-inc/HackerNews huggingface dataset:
If you're interested in FP in javascript, you should check out the relatively new Ramda.js [1]. It switches from the underscore style collection first call pattern to a collection last pattern and automatically curries its functions. The combination allows for easier function composition.

[1] https://github.com/CrossEye/ramda

More info on the topic:

http://fr.umio.us/why-ramda/

http://www.youtube.com/watch?v=m3svKOdZijA

https://speakerdeck.com/raganwald/javascript-combinators
Makes me wonder what a sense deprivation tank workstation would be like. Insane productivity? Or just insanity?
> By comparison, OpenSSH still uses MD5 hashes for their private server and client keys. MD5 is practically broken. So, if you want to "do something", fix OpenSSH.

Did you mean to say OpenSSL there? OpenSSH uses PAM. PAM can use MD5 but OpenSSH has no control or oversight over that, the distribution you're using normally determines the hashing algorithm. You can also trivially reconfigure PAM to use something stronger if you so wish.

If you meant to say openSSL then your point is still quite confusing. MD5 is used in a few places around OpenSSL (e.g. digests, signatures, etc) none of which are weakened by MD5's weaknesses.
Yeah, that's the point. You would have to go through a lot of work slowly buying coins over several weeks to get to 30k and even then it would affect the price. So it makes sense to bid a little high and get them all in one go.
To save you from reading the whole conversation. Dual-EC took so long to remove that the specification for FIPS was done with dual-EC in it. Therefore, it's still there.

The conversation eventually turns into everyone bashing FIPS.
Specifically,

Now, imagine you’re a Game Boy developer. You want to add the
bullet point “Super Game Boy compatible!” to your box, because
it’ll help sell a few more copies. But not many people own one. If
you want to do something really neat, it’ll add entire days to the
project, require changing some art resources, and doing extra
testing on a completely different system. Going that extra
distance is going to cost a lot of money, and won’t help that much
because most people don’t own an SGB to see it. What are you going
to say?

Man, fuck the Super Game Boy!
You have to balance that with the fact that the doctor has the right to stay employed. If contents of the doctor's brain (including the medical history of his patients) are so critical that the practice would lose customers if the doctor left, then instead of pursuing legal action against the doctor if he leaves, the practice should ensure he is compensated enough that he has little incentive to leave.
You know what doesn't help someone who's depressed and using drugs to cope? Throwing them in jail.
iOS App for JavaScript developer
I find awareness of groovy very spotty depending on the crowd you travel in.

Enterprisey J2EE people regard it as a new fangled something they don't have time for.

More pragmatic, hip to it programmers seem to give more attention to scala, clojure, jruby.
> One teaspoon of the powder contains up to 1,600 milligrams of caffeine — about 70 cans of Red Bull.

Something is a bit off here.
They just worded it wrong, really... It should say it's 52.9% of what it was in 2013, meaning it is a 47.1% drop.

But linking to data for 5 months and then only using the 4 you want to use to skew numbers seems pretty ridiculous to me.

And then in the same page there's data for drug/narcotics violations which isn't even mentioned because it is going up (21% more) even though there are supposedly plummeting marijuana convictions. Also they stated that the crime rate in Denver is going down, yet the data shows the exact opposite.

Whole article seems like cherrypicking at its finest.
Cloudflare indiscriminately flags people for using privacy-enhancing software. Please do not use Cloudflare or privacy-conscious users will be unable to use your site.
To summarize:

Union Pros: Job safety, real cost of living increases, pension/retirement opportunity, some protection from unfair hiring/promotion practices.

Union Cons: Silly emails?
Or this, yes.

The problems I see, are, you have to get fluent in the new framework and sometimes this requires as much time as writing your own stuff :\
Until you have every losing bid, you can't make these claims.

Can't reply, so I'll add it to this comment. As stated by others, the only way to purchase a large amount of bitcoins without jacking up the price is to do it in one large sum. By bidding over market price, he ensured that he would get this chunk of 30k coins without affecting the market.
For more lols check out the trading API. There is no TIF for orders and there isn't any obvious way to get fills as they occur. I guess you just poll the api to check for fills but they also say they'll ban your IP if you poll too often. Nice. Also no mechanism for cancel on disconnect or whatever the HTTP equivalent of that would be.

Maybe there is some money to be made there, but it's hard to imagine trading with that kind of tech.

https://www.bitstamp.net/api/
One usually sees a list like this presented as debunking myths. The myths are given bold headings that state the opposite of what the author wants to say. This format is so much clearer because they state the position they are taking instead of the opposite of their position.
I had no idea what you were referencing; for those playing the home game:

http://www.urbandictionary.com/define.php?term=SJW

"A pejorative term for an individual who repeatedly and vehemently engages in arguments on social justice on the Internet, often in a shallow or not well-thought-out way, for the purpose of raising their own personal reputation."

I don't know whether or not that applies, but you learn something new everyday. I should go post about this on the kiktweet the kids are using these days.
Reminds me of this xkcd: http://www.xkcd.com/925/
Thanks for the referral. The $25 credit only applies (to me or you) when I book something with over a $75 base rate. So you won't get it today but next time I go on vacation for longer you will get it.
I wonder how much of that was due to the weather?

How much more severe was this winter compared to last year?
Reactive programming is functional programming for events. You can run but you can't hide.
By comparison, OpenSSH still uses MD5 hashes for their private server and client keys.

Can you clarify?
It's a long stretch to argue a decline in crime is attributed to drug use. Spin the numbers however you wish, it doesn't take a mathematician to figure out the truth... If I were in law enforcement, I'd feel pretty slighted that drug users figured out how to take credit for some of my work.
So the risk on that specific page is false then? The risk itself isn't false just because the information is leaked elsewhere..
DNSSEC Would Not Help Prevent Microsoft’s Seizure Of Domains
US =/= world. Solar is growing far far far quicker than nuclear.
That is a really poor analysis. RC4 is not "secure". RC4 is terribly broken, it's just not broken in a way that's likely to be relevant to Youtube. You should probably get your crypto analysis from Crypto Stack Exchange, not from Wikipedia.

The last widely publicized attacks on RC4 used browsers and session cookies as targets. The attacks are practical --- in fact, they're among the simplest of the low-level cryptanalytic attacks (the flaws are statistical, and statistically trivial). Our implementations of the attacks clock in at hundreds, not thousands, of lines of code.

RC4 isn't a hair-on-fire problem and I wouldn't really worry too much about it at Youtube. But if you were operating a bank or a payment processor, I would tell you to make sure you weren't using RC4.

MD5 is broken in that you can generate collisions for it. But HMAC-MD5 is not broken; there is no theoretical attack on MD5 that breaks HMAC-MD5. It takes more than a simple collision to break HMAC.

The risk that systems that use HMAC-MD5 (and things like it) are taking is different from the risk that systems that use RC4 are taking. MD5 is broken, but HMAC-MD5 is actually (to the best of our knowledge, and with a very low margin) secure. RC4 is not actually secure in any scenario. But the cost/benefit of exploiting RC4 to recover the plaintext of a publicly-available streaming video is not great.
It should be quite trivial to build something to browse your index on top of this project. In fact, I suppose the demo/tutorial already comes a long way. If you decide to give it a try don't hesitate to ping me for any help / questions!
A/B Test with Caution
The Drapers are quite bullish on Bitcoin. Adam Draper's accelerator, Boost VC, is investing in 100 Bitcoin companies over the next 3 years: http://www.coindesk.com/boost-vc-accelerate-100-bitcoin-comp...
Why more startups are sharing ideas without getting legal protection
Agree with everything you said, but there's one aspect you haven't touched well:

4) criticism provokes defensive counter measures, being a very human emotional reaction - being negative and attacking people or ideas or solutions with harsh words will almost never trigger the effects one desires, even when abstaining from attacking the person, since there's always somebody behind the championing of an idea, of a choice or a piece of code. This only works when the people attacked admire you, in which case you end up with point number (2) - making people afraid of trying out anything new.

And this happens because people invested time in championing an idea, choosing a certain tool, or writing a piece of code - and now you're coming saying to them that what they did was wrong and the time and effort invested was actually waisted. This is why people tend to get pretty fanatic about their programming languages, or IDEs, or operating systems, or whatever tool they invested a lot of time in - because they want their choice to be the "winner", such that their investment isn't in the end a bad one. The "Paradox of Choice" is very enlightening in this regard: https://en.wikipedia.org/wiki/The_Paradox_of_Choice

The culture we've created is one were harsh words are tolerated, even admired and the subject of amusement - I have smiled countless of times whenever I happened to read the rants of Linus Tolvards and the like. On one hand it's good, freedom of expression is good and sometimes it's healthy to name a turd for what it is. But this backfires and especially with these online communications that lack body expression (and the possibility of being slapped), it's turning out to be a rough industry to be in. No wonder women aren't interested.

Unfortunately while saying these words, I started thinking of how much of a dick I am sometimes, especially in code reviews.
> Sure, they don't see much of me because I'm building Yellow Yellow, but I want to be there when we can all enjoy the fruits of my labors.

Parody it may be but this is the way a lot of start up types seem to think
It'd be pretty impossible to port-scan a .onion... I can't imagine one circuit lasting as long as you'd need to find some random SSH listener.

It's much harder to find than an IP on the Internet; I've never seen brute-force attacks coming from even a standard-port ssh hidden service.
I didn't get that impression from the title. There are people who are interested in fp but feel that they are not smart enough to comprehend it. They are not luddites by any stretch.
The attacks are not "theoretical". They are in fact trivial to implement. What you mean to say here is that the attacks are difficult to launch in practice. That is true: while the code to attack RC4 is simple, the attack generates a huge amount of bandwidth.
It is also pretty easy to argue that the feds need to just make it legal and then let the states go from there. Just like with alcohol where various states have slightly different rules but, for the most part, you can get booze just about where ever and when ever you want.
Wait, is this intentional? What does the software do that throws up flags to Cloudflare?
Do people who're caught by the nets make further attempts? The reality of jumping off something tall could plausibly make a difference to people.
Re-prioritize running jobs with YARN schedulers
How about fixing the web app before adding more features? Their Ajax page loading hangs most of the time. Going straight to the URL works immediately, but it's not always possible.
It's just the first thing I honed in on when I was checking the article. I could start talking about significant digits but I don't think it's necessary to really put more work into this.
I thought the problem with drugs isn't the addiction but the black market.

The people get addicted anyway, but now the money needed to cure them goes where it can help and not to the mob.
Why Do You Need an Investor Pitch Deck, Anyway?
I don't follow this distinction, at least in terms of U.S. law.

Every kind of entity can receive orders under the Wiretap Act, whether it's "regulated" or not. My friend who runs the server where I have my e-mail could receive such an order.

Until the D.C. Circuit accepted law enforcement's reinterpretation of CALEA in 2006, ISPs were not required to buy or have wiretapping equipment, but they were required to comply with wiretap orders to the best of their ability.

Tor node operators are presumably also legally required to comply with wiretap orders to the best of their ability.

Does your theory suggest that ISPs' liability would have been different before 2006 because no specific regulation treated them differently from Tor node operators with respect to wiretap obligations then?
> You could argue the same about encryption, so should encryption be banned or deemed immoral now?

Sigh. This sounds just like the arguments about cars ("they can kill people, should we ban them too???"). Let's get real, the vast majority of Tor traffic is, shall we say, for nefarious purposes. Encryption has numerous applications which are perfectly legitimate and it could be argued that the legitimate applications outweigh the illegitimate ones. You might have a point if "encryption" meant "operating an open relay where anyone can encrypt anything for any purpose".

> You can still operate a TOR exit node safely by anonymously getting a server paid for with a cryptocurrency. It's perfectly safe.

Safe for whom? You as an individual, perhaps. Definitely not safe for the guy running the exit node.
How Tech Companies Beat the Competition
As a borderline ranter/troll myself, I recognize the sentiment that there is too much negativity in the developer sphere. But, the difference between what I say and what the typical mouth breathers spout on, say, political forums, is that I can point to specific examples and evidence of why the status quo sucks.

What the people with a positive slant on all this seem to miss is that it’s not just any one area of computer science that is facing difficulties, it’s all of it. For any technology or methodology, I immediately see flaws that range from merely annoying (semicolons in C, colons in Python) to downright devastating (shared mutable state between processes, the inability to statically analyze imperative code). Very little software has been written that is provably bug-free, and it came at great cost. Some of the control code that NASA has written comes to mind, or perhaps some of the early work in lisp, maybe a few other things like Excel that attempt to avoid programming altogether. Most everything else succumbs to an inability to scale, because code complexity grows exponentially while performance grows linearly. So code that works is generally small and modular. Unfortunately, when we try to tie everything together under umbrella frameworks like UNIX, something is lost and we’ve never solved that in a mainstream way, at least not to my satisfaction.

The great successes today have come in spite of existing technology, not because of it. I very much wish that the world would slow down for a moment, take a step back, and really assess the numerous ways that computing as we know it today has failed to deliver on the promises made by pioneers 50 years ago. It’s like the recent post on HN of how concurrency is the new memory management. While that’s true, it merely reveals the tip of the iceberg, not just in the fact that most languages fall down in the face of concurrency, but that even hardware has been unable to keep pace with the newest trends. It doesn’t even scratch the surface of the wetware issue, that generations of programmers have been raised on orthodoxy that can’t take us to the next level. I know that something is terribly wrong when I point out a problem and am met with such hostility, disguised as positivity. To me, this can be as damaging as excessive criticism. But it’s shielded behind the enormous profitability of the tech sector, where people would rather jump through hoops and make money than solve problems once and all for society and increase everyone’s wealth.
1: I write extensively about all my ideas.

2: I discard those that don't resonate with anybody else.

3: I then look for excitement and eagerness from discerning readers.

4: Then I start with whichever I'm most excited about, of those ideas.

I've never been in a situation where there's more than one idea at this point, but if there is, I'd focus on whichever I could execute faster.
ApartmentList deploys a fleet of photogs for 3D apartment tours
Yep.

http://en.wikipedia.org/wiki/District_of_Columbia_home_rule
Define "free service". It might be free as a beer, but definitely not free as in speech.
City forums
Disturbing the peace is up over 1000% YoY for all months except May.
Hmm, is there historical data of this sort for many companies? Sounds like it could make an interesting survival analysis project.
When you initiate a connection to an OpenSSH server, the server presents you with its public key, which is hashed with MD5, and the result displayed. You _should_ verify this with the server administrator that the fingerprints matched, and you are indeed connected to the server you intended, rather than a hijacked connection.

MD5 is resistant to 2nd preimage attacks, however. So technically, OpenSSH is fine using MD5 to display the fingerprint to you. With that said, I also don't see the problem moving to a stronger algorithm.
That explains a lot. In the UK the term midwife is more or less synonymous with obstetric-specialist nurse. The term for a tie-dyed woman who comes into your home and burns incense to help you through delivery in a birthing pool is a 'doula'.

actual doulas may not wear tye dye or burn incense and I'm sure many provide an excellent service to facilitate some mothers through the childbirth process. Every labor is different. They may also be qualified midwives. And many midwives will also facilitate home births where appropriate for the mother and child. Basically, the US hospital and OB doctor-centric system is ... weird.
Fishing for Hackers (Part 2): Quickly Identify Suspicious Activity With Sysdig
AHA! There is a big problem for my usability. I press the tab in chrome to get view my bookmarks and use them. now they are gone ! uninstall !
No. I meant OpenSSH. See a previous reply.
RoomVent 2014 – Congresso Internacional de Ventilação em Edifícios em São Paulo
I suspect the 0 is in err.
Why motion design is now a required skill for designers
Microsoft acquires SyntaxTree, creator of UnityVS plugin for Visual Studio
> Why would DC legalizing pot set up a battle with Congress - does Congress need to sign off on DC legislation?

Yes, all DC Council legislation is subject to Congressional review before it becomes law. (Government of the capital district is a Congressional power under Article I of the Constitution.)
I'm looking into this now. Had never had anyone complain before. I'm not going to get rid of cloudflare, my site has been up consistently after several hours on the front page, which obviously doesn't happen for everybody. Having their caching is worthwhile. But it does seem like it's possible to disable this challenge page going forward. [1]

I'll take a look when I'm off work later.

[1]: https://support.cloudflare.com/hc/en-us/articles/200170096-H...
That sounds great, find us anytime on the irc #iron if you want any advice or input.
There was a pretty informative round table on cannabis business hosted on Jason Calacanis' This Week in Startups https://www.youtube.com/watch?v=2zZ8RgfTFzA&feature=youtu.be...

One useful quote from there is not to get euphoric over revenue figures - first few months "people are not buying marijuana, people are buying freedom". A variety of things, such as novelty effect, natural curiosity and even social currency accumulation (people who live in Colorado/Washington brag to their friends outside of those states) motivate the first purchases, you have to look at longer timeline to properly extrapolate the expected sales.
I acknowledge your rebuttal. Those components are fine.

But that doesn't change overall argument that the open parts of Android aren't a complete solution to make a competitive modern phone. What Google calls 'Android' is not just AOSP. So while AOSP provides an open base for a phone platform. Android as Google uses the term, is not an open platform.
Somewhat similar to the 'office supply fraud': http://www.snopes.com/crime/fraud/supplies.asp

Or, for that matter, debt collection agencies sending notices for expired debt, and having small-print at the bottom explaining that you are under no obligation to repay this, but if you respond and/or make a payment, they'll be able to go after you for larger amounts. (I have one on my desk. I might frame it for when I need to look at something and have a chuckle.)
Tinder co-founder sues for sexual harassment
You could just email them a link to finalize registration. If it has already been used include that information in the email.
I don't think one has been pursued here yet, but it doesn't mean they can't or won't. Our conspiracy laws are very broad.

http://www.law.cornell.edu/uscode/text/18/371

That's the federal one, and each state has their own.
I've ended up using Bootstrap because numerous 3rd party things work with Bootstrap out of the box and don't always play nicely with Foundation.

I had wanted to use Foundation originally, but encountering similar but, slightly different, (though resolvable) hassles integrating it when lots of those things had out of the box integration with Bootstrap changed my mind.
> But on the plus side, you can't overdose on THC

Sure, but you can still have a pretty bad time if you take too much and/or are very sensitive. It's known to cause tachycardia in some people, which is not something to be taken lightly.
Honestly, a few of those folks were in grad school with me far before they were on the "other side" (actually this is true of "both" other sides). We thrash each other in meetings and can perfectly drop work over dinner.

That's the problem, it's a small world, and blurry lines, when you get to highly technical corners of it.
Funny. I'm getting the analysis from Daniel Bernstein and other cryptographers, not Wikipedia. I'm only showing Wikipedia, because it cites the references:

http://blog.cryptographyengineering.com/2013/03/attack-of-we...

http://www.isg.rhul.ac.uk/tls/

http://link.springer.com/chapter/10.1007%2F978-3-642-19574-7...

RC4 is not practically broken. It requires too many connections (about 16 million, give or take), getting identical data with different keys, and it requires GB of data for analysis.

EDITED TO ADD: I agree we should move off it, but as I understand the current attacks, only small pieces of information can be retrieved from RC4 in a practical attack. With that said, the practicality of the attack is on the edge of feasibility, and it's only going to improve over time. So move, but don't lose any sleep over it.
The rate of change slowed, but then, as we get closer to 1.0, the rate of change has sped back up again. We need to break as many things as possible as soon as possible, so that we can give the community some time to try it out before we christen a 1.0 release. Does that make sense?