skysight-inc/HackerNews huggingface dataset:
Legal drugs cause their fair share of trouble. Consider the social ills brought to us by Philip Morris, Budweiser, and 17th century British opium trade. Profit making companies have an incentive to promote addiction as do governments who base too much revenue on drug taxes.

Finding a happy medium between black market and free market is a tricky problem. I suspect it will continue to require a complex set of regulations. I'm quite happy to see states in America experimenting with various policies towards marijuana. Hopefully one of them will land on something not worse than what's happening right now. Hopefully too, the attitudes of the WHO will encourage even more experimentation.
You don't think maybe people just responded naturally to a comment that started "The similarity to Rust should scare the hell out of Rust's creators and proponents" and went downhill from there? You instead think your slightly downvoted comment is evidence of systemic bias?
On the one hand, this makes sense.

On the other hand, my github profile is full of personal projects which I have the luxury of slacking off on if I want to, and I don't want to have to consider how that looks to HR people looking for reasons to filter me into the wastebasket.
Fashion Photographer Gavin Glave
Please don't use language like "People will get fucked" when critiquing a cryptosystem. HN is better than that.

Tarsnap has no restrictions on passphrase entropy whatsoever, yet people have no problem with Tarsnap. It's interesting that people are singling out Minilock for this feature. Is this the worst thing that can be said about Minilock?

EDIT: I accidentally said Tarsnap; I meant Scrypt.
I've seen that happen, and you'll never believe what happens next:

The people on the thread, being adults, write a couple sentences about how the story there were commenting on used to say something else.

For many of us, this infinitesimal inconvenience is more than offset by the improved experience of not clicking through blogspam to get to the right sources. Nine times out of ten, when this happens, the original submission is awful compared to the one we end up with.
It would be worth mentioning Opera's acquisition of FastMail, and FastMail's subsequent split from them.
sequence of still images from jpeg frames is still an improvement over gif for that usecase. Plus, all the same optimisations (and more) that have been available to gif for that use case are also available to SVG. Just not in any authoring software.
I beg to disagree. On all of the motherboards I have, it was present in every single one of them - but on some it "didn't show", ie there was no warning message when entering the bios, so it I believe it was not activated or something. But the option rom was present on the X60 tablet. You may want to check yours.

Also, which tool would you use to remove this option rom? CBMROM does not works on phoenix firstbios, and the phoenix editor tools don't work on the 2 Mb image.

I'd be delighted to know, just because I have that it's still there on my "reference" motherboard (used to test whether issues are due to coreboot or not)
You might be interested in this book:

http://codingthematrix.com/

Also, Strang's 16.02 lectures on Youtube were incredibly useful for me, far more so than any book.
Some of this is covered by the WebP FAQ:

https://developers.google.com/speed/webp/faq
The Future of Robot Caregivers
Tarsnap does not allow anyone who has your public key to attempt to crack your paraphrase. Minilock does, and in fact you can load all public keys into a bloom filter and crack them simultaniously with nearly the same speed as a single key. The design of this system is simply irresponsible. Saying people will be fucked is entirely appropriate here.
Glad to help! Hope you like it.
Just to add some perspective... for most of the world lack of support for Linux isn't an extreme disadvantage. For most it's not a disadvantage at all. I have a Linux machine and use Linux servers just like you, but welcome to the HN bubble...
This was beautiful. Just moved from Chicago to Austin, and this article articulates everything I miss about Chicago better than I ever could. Spot-on.

The conclusion w.r.t "smart" cities was curious, though. I'd see "smartifying" as something that would add to the tangle, not subtract from it. Another layer on top of all the others.
dat weissman score
Halt and Catch Fire: I/O, AMC mini series about Compaq?
Although it is never mentioned in the series, the chain of events and procedures reminds me of the early years of Compaq Computers when IBM PC ruled the earth.

In the series they had team A (dirty team) to reverse engineer the IBM BIOS and then team B (clean team) to develop an OS based on team A’s research.
Mosaic Science is a pretty solid source of long-form science articles. I think someone should repost this one with a better-for-HN title—that is, an accurate and neutral title—and perhaps email hn@ycombinator.com so we can turn off user flags.
One first step might be to filter out all opinions that are contrary to a set of known facts.
> Cisco (Linksys from time to time) and others who have had a hub

The hub didn't include low power wireless which is essential for IOT.
>Companies today don't see employees as long-term investments, and that's one of the prime reasons for the lack of people with the specific skills that those companies need.

I've personally interviewed multiple dozens of graduates from top-notch computer science programs. Of those I've had the opportunity to interview, only a very small percentage (1-2%, give or take?) seem to even have the right aptitude to learn the more advanced skills.

Sure if you're hiring for web development you can train anyone with even mild programming aptitude on your stack in a month or two. But there are quantum levels of aptitude: If you just hiring someone because they're competent in one task with the intent to "train them" on another, there's no guarantee that you'll hit that 1-2% who can hack it.

It's far safer to find someone who has (at a minimum!) proven they can do something of similar complexity. And guess what? The kinds of skills I'm talking about can be self-taught (that's where I got them!), so it's the potential employees who need to take their future into their own hands and just learn the niche skills that interest them. (Or better, the ones in high demand.)
If you're entering your passphrase on systems you don't control, it's already game over for that passphrase.
Does cat poop parasite play a role in curing cancer?
Agree. It wouldn't be hard for it have a little "originally" link/flag that pops up what was actually submitted prior to the mods fiddling with it. The attribution could also be changed from "username" to "modname via username", providing additional clarification about where it came from.
Sure, I guess what I meant was, they were well situated to be the IoT hub but didn't add the radios and software needed.
JavaScript (and Node) Best Practices
A quick Google finds $439k as the average salary for a neurosurgeon. That's more than I make, but I've heard of salaries at some companies (COUGHgoogleCOUGH) going higher than that.
"Possible", in that it cannot be categorically ruled out over scenarios and timescales, sure.

But a lack of "net neutrality" isn't going to cause broadband providers to magically freeze their prices either. So it's a choice between a one time "possibly more expensive", and continual raising every time providers buy more advanced dpi gear, segment offerings into more proprietarily-priced "services", and slowly dismantle the end-to-end principle.
Tarsnap generates a key file - your password is not used directly to derive the key. A password is used for your account, and for encrypting the key file.
>Why??

It hurts innovation. People that good will be locked (with golden handcuffs) into large companies that can afford them.

Start-ups rarely can offer large fractions of a million dollars a year in salaries. Maybe they need to bring the entire initial development team on board as co-founders; I don't know. But right now getting good people to work with you in a start-up is harder than it ever has been before.
Hmm, I meant Scrypt. You can use Scrypt to encrypt files using a passphrase with no entropy restrictions. It doesn't use keys. People never raised this concern about Scrypt, and certainly didn't say people would get fucked for using it. What am I missing here? Why does Minilock warrant this outrage, but not Scrypt?

https://www.tarsnap.com/scrypt.html
This is an example of what you can do with eCryptfs and Overlayfs. http://www.onarlioglu.com/privexec/
Ask HN: Most useful travel accessories
Curious what useful accessories people recommend for traveling?
If there are no media with your secret key, it can't be stolen.

Of course, if your computer is cracked into, or your adversaries are using rubber-hose cryptanalysis, all bets are off. But this scenario is usually less probable than having your physical wallet or keychain stolen.
Sorry, if you're there after the company's been around for 6 months, and after a seed round has been raised - you can't call yourself a founder. Not to be negative.... I wish you all the best of luck.
> seem to have their URL/title changed, even though it doesn't "violate" the guidelines

Posting original sources is an HN guideline, and an important one.
Ape Acting: Dawn of the Planet of the Apes
Mind blown indeed. But don't these need special CPU instructions? Which x86 instructions do this? (Or is this done through a special hardware pin on the CPU?)
Malaysia MH17 crash: 10 questions Russia wants Ukraine to answer
[Not Tech] Current Events – Gaza Mushroom Cloud
It took me awhile to figure out what zxcvbn referred to. I even looked at the source code which was in the repository and found 'zxcvbn' in the weak password list.

Finally, whilst on my tablet, I noticed that it was as obvious as the "QWERTY" keyboard that showed up on screen. As a primarily-dvorak user, such a silly stroke of keys had not occurred to me and gave me a bit of a laugh.
Similar situation with a nanny refusing to leave.

http://time.com/2941176/nightmare-nanny-leaving/

Like any business decision you do need to risk manage it. Extremes like this are rare, which is why it's in the news but you do need to be aware of what you're investing in and the risks involved.
RT, realy?
Help a guatemalan girl get to Berkeley AwesomeMath
You've asked this several times, so I'm not sure where to put the answer. Let's try here.

(By the way, one reason we ask people to send moderation questions to hn@ycombinator.com is that then we're sure to see them. We can't possibly read every post to the site. We miss most of them, in fact.)

The story fell off the front page because of a moderator penalty, though user flags caused the fall to be more dramatic.

We're not trying to suppress surveillance stories [1]. We're trying to balance it so the major ones get attention but the me-toos don't crowd out other things. A moderator thought this was a me-too rather than a major. I might have made the opposite call, but it was probably a borderline case. For one thing, the article was shorter, and that's usually but not always correlated with lesser substance. Since we can't come close to reading everything, we're forced to rely on such heuristics. They're miserable, but they mostly work.

We moderate this way not because of personal opinion (I'm personally more inclined the other way, for what that's worth), but because if we didn't, the site would skew heavily toward these stories and there would be many more complaints (remember "Why has Hacker News turned into NSA News"?) than there currently are. The HN community is in disagreement here. Our job is to mediate that. Which of course is impossible. So we try to fail less badly.

We're open to suggestions about how to get the balance better. We do need to balance it somehow. The idea that votes can just determine everything—without irrevocably changing the character of the site—is sadly, utterly wrong.

Some of the most vocal feedback we're getting on the surveillance stories is from people who seem only to care about this one issue and would happily have it dominate HN. That feedback isn't so helpful, because it's at odds with what this site is. But if those of you who follow this issue closely would help us make better editorial distinctions between the major stories and the pilers-on, we'd be grateful. We're not domain experts on any of this.

1. To pick an obvious example, https://news.ycombinator.com/item?id=8058362 has been on the front page all day.
Do you guys only use OS X over there, or are there equivalent setups for other systems?
They are doing this already, but you're not going to see a more secure software stack until the laws change.
“Typical rebels” might be unlikely to be able to shoot down a high-altitude plane. But the rebels in Eastern Ukraine had just demonstrated that they could shoot down a plane at 21000 ft. With that information who would conclude that there was less than a 1% chance the rebels were capable of downing a plane at 33,000 ft?

And even the most well-trained military force in the world has shown that it can mistakenly target civilian planes: http://en.wikipedia.org/wiki/Iran_Air_Flight_655
​Get Free Airport Wi-Fi Using Chrome or Firefox's Developer Tools
It would nice if you could also show a chart/graph of which companies and acquisition count. So I think Yahoo is leading the way close to 5 acquisitions or so
The key is "supposed". Inflation rates are always political.
Utility doesn't make money. I'm all for cool apps, what I'm not for is overvaluing and expecting returns on companies with no revenue streams and realistically no way to create revenue streams. Even advertising would be difficult with Yo. The best your band can use it for is to literally annoy users.
It's possible to view images in certain terminals, with w3m.

https://mediacru.sh/rML4x537Mf0o

Screenshot is xterm. Also supposedly works with urxvt, but I can't get it to work correctly.
Exercise: This padding scheme will not hide the length of the file name as intended. Why?
long long time to load (over a minute). But it worked well once loaded. You can move through the floor...
That he posted four links does not mean, that all what he says (as much I see, he draws conclusions, that need not necessarily be proved inside his links) is true.

I also can post several links, some with truth, some with lies or speculations. Who will decide. Numbers mean nothing.
I'm not sure what that is, let's hope for mankind it wasn't a nuke.
> A number of those laws already exist, but are ignored or have exploitable loopholes.

You need to replace Congress to close loopholes. You need to replace the President & Congress to replace the Supreme Court & enforce the laws.

Seems all politics to me.
yeah, the difference there aren't indian businessman stopping you from using their services or letting you work there. and there aren't indian admissions officers not letting you in because they don't like white people. so there is a little difference.
Might be, but they will run in tremendous health problems, given the current rate of environmental pollution.

Also (again): Compared to western standards, the Chinese median earnings are still laughable.
Color me excited when we have similar sized batteries that can power smartphones for a week.
TrueCrypt in linux has a serious security issue discussed below and i hope you guys will address this.

TrueCrypt has a serious security bug that allows a person who can mount TrueCrypt volumes to get root shell or run any command as root user because it mount its volumes with "suid" option instead of "nosuid" option.

You can get the below program to test locally if you have a linux box around.

http://pastebin.com/vT4G7nU0
Be realistic. What's the likelihood it's a bomb vs the likelihood of propaganda ?
Missing Mailgun & Rackspace.
> Having a pre-filled form you could look over and send back is suggested occasionally, but seems never to pass.

This is the norm in New Zealand, simplified greatly by our tax code which is inifnitely less complicated.

> The nefarious explanation for why is that Intuit has good lobbyists [1], but I'm not sure how true that is.

I've seen the topic come up on left-leaning US sites like Metafilter and it seems that in the US even nominal lefties who approve of big government are paranoid they'll miss out on their tax dodges if the IRS prepare the form for them as a first step.
But wait… if the entire key is derived from the passphrase, if two people both choose the passphrase "password", would they not then get the same public and private keys? Can I not brute force people's private keys by taking millions of common passwords¹ and generating public keys from them, and then seeing which ones match my friends?

Am I wrong? Doesn't this seem much easier to brute force than a RSA key? (Presuming the private key hasn't been compromised; if it has, it's likely protected by a password, and then these two are about equal.)

¹accepting that some will get rejected because of "uses the zxcvbn library in order to impose a strict limit on the amount of detected entropy present in entered passphrases. miniLock will not allow passphrases that fall below the threshold of 100 bits of entropy"
And what to do with the executive? And what do you with the legislative? Only the supreme court can be replaced by politicians.

There's no other way out than start telling people the truth. Which might start with independent media and education. But US people are already even more indoctrinated than in the 30ies with Goebbels.

Seems all press and misinformation to me.
Or regular sized batteries that can power smartphones for a month.
First question on the list:

Why would a Wookiee, an 8-foot-tall Wookiee, want to live on Endor, with a bunch of 2-foot-tall Ewoks?
I can't speak for the others, but w3m definitely has graphics support.
fixed. added Mailgun and FastMail.
I think it crosses some sort of a line away from favour or courtship when one party thinks buying a meal means they are _entitled_.

“You’re not inviting me in? But I bought you dinner!”

I find that sort of logic and thinking very disturbing.
Does it matter? Given the context, 99.9% of people will infer the correct meaning regardless of the capitalization.
I am not a cryptographer, but I'll offer some advice, if I may: don't let people choose a passphrase, generate one for them. People are very bad at creating good passphrases, but decent at memorizing a good one.

I say that because I don't trust the zxcvbn library. It underestimates the entropy of "aaaaa" as 7 bits [log(26 * 5)], not the correct value of 23 bits [log(26) * 5], for example. In this instance, it's to your advantage, but it doesn't inspire confidence in its other calculations.
That was the goal, but Parrot failed to meet that goal and P6 is years away from being usable.
At altitude, it's got more time to slow down, and if the crew had any control, they would have been trying to bring it down as safely as possible.
>We're open to suggestions about how to get the balance better. We do need to balance it somehow.

At the risk of suggesting the site become more like reddit, the site should maybe become a scosh more like reddit. Since the HN community has become more diverse in its interests than the structure of the site was perhaps intended for, it needs to be possible to group posts not just by votes, but contextually, either with tags or through sub-boards. This wouldn't necessarily have to affect the way the site appears to function[0], for users who like things the way they are now - but users who want to see more NSA related content could choose (maybe through their account page) to have NSA related content bubble up for them, regardless of their actual gravity.

[0] although to prevent certain stories from overwhelming the site anyway, it might be necessary to sort the frontpage by trending tags/groups when multiple stories of the same type exist... I don't know.

Furthermore, I think it might help to alleviate the suspicions of people like discostrings if there were some automatic feedback to actually show the effect of user/mod flags on a thread over time... surely "mostly killed by user flags" is something that could be graphed somewhere.
Texing "yo" to someone sucks. Texting "yo" to my co-workers sucks. You really want me to go and make some group MMS crap so I can send yo? Yo is way faster and more streamlined than all of those things. That's like saying Facebook is stupid and banal because you could just set up a Geocities page to share your pictures.

Sounds like you've got a bad case of the sour grapes, friend. It's not too late though, the Yo API is really slick and there's a lot of potential for interop there. I'm working on a few Yo-related projects right now.
In addition the number of reporting developers, is it managing a cost center or a profit center, and most importantly, how much can you get from another employer.
That tool generates a random salt, so passphrase cracking time is O(n) where n is the number of files being cracked vs O(1) for Minilock public keys. Additionally, encrypted files are generally still not "public", whereas Minilock public keys likely would be.
Bitcoin at a Crossroads – Tackling the BitLicense
As a Sikh American that wears a turban every day [https://www.facebook.com/satjot], it's great to see a positive piece on Turbans in the US. For the most part I've dealt with comments like, "Hey Osama", "You Towel Head", "Taliban!"...
Fascinating. Reading the article they mentioned what surely has to be the oddest medicine ever: powdered mummies.
We have created a bridge with LinkedIn, so you can create a baseline resume which you can then enhance: http://www.summagram.com/ (click on 'create resume' button: The whole thing is in early beta, so you will be helping out the testing quite a bit by doing this).
The raw data in json format is available as well. Summagram is intended for any kind of document, so the schema is a bit generic.
>doesn't loop when you share the URL directly

You can deal with that server-side by checking referrers and other headers and serving HTML.
What makes Instagram better than emailing pictures to people?
To be fair, every accusation thrown at RT can be thrown at other broadcasters. It's all a matter of perspective.

In this specific case, who else is reporting the ten questions? I haven't seen any other coverage. Are the answers not important enough for the BBC, CNN, FOX, SKY to cover?

I didn't include MSNBC because it appears they're too busy making fools of themselves...

http://www.youtube.com/watch?v=JEDH2Z2_6Zw
https://developer.mozilla.org/en-US/docs/Web/HTML/Supported_...

There isn’t a single video format that is supported by all major browsers.
I'm a big fan of KeyPassX which you use can easily store locally or sync via Dropbox.
This. One of the common stories in accessibility circles is "curb cuts", the ramps from streets to sidewalks that allow disabled people easier access than a stepped curb. They have utility for non-disabled persons towing roller luggage, pushing strollers, pulling hand-carts, etc. While they were put in place due to accessibility concerns, they benefit everyone.

Accessibility facilities that enable UI automation are the "curb cuts" of software.
No, that is actually the job of law enforcement. That is what Bruce Schneier means when he talks about good intelligence work and good law enforcement work as protection against terrorism, as opposed to security theatre.

Or, put another way: planning to commit a crime (criminal conspiracy) is itself a crime. Being a suspect of a crime is a valid reason for law enforcement to watch someone. Associating closely with someone who's part of a conspiracy could very reasonably put you under suspicion for being part of the conspiracy (although it's not evidence against you, of course).

Of course, the lines between when people are reasonably suspected of crimes has been moved far and fast in the wrong direction and needs to be pushed back.
My favorite by far (or, well, the other one that comes to mind) is No Evidence of Disease. I've recommended it to all my friends.

http://idlewords.com/2012/09/no_evidence_of_disease.htm