skysight-inc/HackerNews huggingface dataset:
Call it knee-jerk but I personally dislike systems that refer to themselves as hacker proof. I can't help but feel that the people who make that claim misunderstand the fundamentals of information security.

You only have to look at password handling procedures to see recent examples of things once thought hacker-proof that are no longer. MD5 used to be widely used for hashing passwords but it is now considered cryptographically weak and there are many more examples like it throughout the industry. Most (all?) of these hacker-proof like things tend to be based on computational infeasibility or perfect implementation of certain features. In this case, the protocol seems to rely heavily on two things:

- self-destructing database records - Self destructing data is a hard problem that is more likely to be solved using a time-based destruction rather than a read-based destruction (how can you ensure with 100% atomicity that the data will be 100% deleted when it is read?). A good example of a time-based self-destruction is Vanish [1].

- dynamic procedure that is not accessible from memory - The CPU cannot communicate directly with anything but memory/internal caches [2] so the only way I can think that you'd solve this is by having a custom piece of hardware that does all the computation internally and only returns the result. This is also not an easy problem as it introduces hardware level complexities.

I understand that the author may have just been trying to make it sound more interesting but there are better words that don't leave such a bad taste in the readers mouth ("Secure" is a very commonly used one for example). This is especially important when trying to be taken seriously by the security community who are the most likely to take an irrational dislike to something claiming to be hacker-proof.

[1] http://vanish.cs.washington.edu/pubs/usenixsec09-geambasu.pd...

[2] http://wpcontent.answcdn.com/wikipedia/commons/thumb/b/bd/Mo...
Thank you. Burying this one as a dupe.
Da vinci 1.0 3D printer is being given away
Matz: My vague plan for Ruby GIL
You can be on God's side or the other side. You want to fight God.
I just wanted to say thank you for writing this up. My sister has Downs Syndrome and is very low functioning. She blossomed into a really happy and loving individual once our family stopped focusing mainly on 'normalizing' her. Thanks for sharing your experience.
NASA: Engine Using Microwaves Bouncing in a Closed Container Works
IMO this is the most realistic and cost effective solution to problem. Most restaurant POS systems that handles reservation, seating and billing should be able to provide needed info.

Any RFID or sensor base system will be complex, cumbersome and costly. Any passive sensor will require manual scanning. Any active sensor system with receiver will be expensive specially for restaurant with large seating area.

Another option may be an incentive based passive RFID sticker. A guest receives a sticker upon arrival and gets some sort of incentive/reward on scanning the sticker at exit. Then you can capture the time in the restaurant or on the table.
I debated posting this, but there is one part of the article that really resonated with me:

I asked him if there was anything he missed about being autistic. “I miss the excitement,” he said. “When I was little, pretty often I was the happiest a person could be. It was the ultimate joy, this rush in your entire body, and you can’t contain it. That went away when my sister started teasing me and I realized flapping wasn’t really acceptable.

I have a son that "flaps" and we have been concerned about autism for about a year and a half now, since he turned two. He has some autism signs, but our developmental ped says not the classic signs. He can do eye contact, he is social, but he didn't speak, he did have the "daydream gaze."

We've been doing speech therapy now since he turned 2 and we've added an additional speech therapist since he turned 3. His progress has been remarkable, I can have a real conversation with him sometimes (granted, I have to infer a lot, but it's huge from where he was!). He has issues "taking turns", waiting in lines for camel rides at the zoo or getting on the carousel is really hard for him.

So, the flapping thing. My kid is great! I love him as he is! I want the best for him, I want him to be as "normal" as possible. But if he says what this kid says, that he was happier flapping, then I really hope he doesn't lose that. I love him as he is and I want nothing more for him than to be happy. We are extremely fortunate that he's not been diagnosed with debilitating autism and might have what's known as sensory perception disorder instead. But in the end, it doesn't matter, he's a great kid and he's happy and I want to keep it that way.
also the feature was built a long time ago.

current standards for sites not using persona are here: https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines
Leanpub – Publish Early, Publish Often
The article did say that the ice is kept below ground. Perhaps, if it is economically efficient, it is because below-grade real estate is less valuable? I'd imagine the ice could be in places that are difficult to use for other purposes.
I'd suggest you become acquainted a few heterodox economists - Keynes, Steve Keene, and some of the other names who haven't been corrupted by Chicagoism - and then perhaps you'll see why transferability is not the problem.

The point remains - giving vulture speculators the ability to hold entire populations hostage is political special pleading, not sound growth-based economics.
Why does it need to upload all my data and track my location on their server?
A process failed, and the DB dump that is published to help contributors improve the MDN site got out unsanitized. The sanitization/publication process will be redesigned to include stricter controls. For now, it is shut down.

MDN has been using persona for a while now, meaning that most accounts don't have passwords in the database. But older accounts still had the SHA256 salted hash that Django creates.

We traced back as much as we could. Access logs, netflow data, etc... We found that the tar.gz containing the DB dump had been downloaded only a small number of times. Mostly by known contributors. But we can't rule out that someone with malicious intentions got access to it.
Ditto. I'm well past the age where a diagnosis can officially be made, but I know several people with autism or Aspergers at varying degrees of functionality, and they will tell me that they think I've got Aspergers.

I went through a long period where I kind of mostly knew how to fake normal, and be sociable, and hate it, but I've mostly gotten past that. I attribute it to getting really lucky with friends- high school had a lot* of people who were just as weird as me in different ways, so we could all tolerate each others weirdness together and not feel awkward about figuring out social skills. And then I got even luckier in college to get noticed by people who actually did invite me to go hang out and go to parties, generally show that they cared, even if I didn't end up going half the time.
Things like making eye contact, figuring out how small talk works, conversational turn-taking, reading other people's facial expressions / other body language steel feel like consciously applied skills that do not come naturally, but with a few years of practice with that kind of background, it is no longer actively miserable to do.

The biggest influence in all that, though, was my wife. I really lucked out on finding a nice understanding, mutually introverted young lady who decided she wanted to marry me and let me skip trying to figure out how dating works! She's a big help with interfacing with the Real World.

*Uh, by the standards of my typical preferred introverted circle-of-friends size. Like, 5.
I was gonna say something similar but you said it best. Moving to a lower cost city is actually a competitive advantage because the scope of the project determines its pricing.
Saved as toread. Just wanted to say I love the title.
It was requested in https://bugzilla.mozilla.org/show_bug.cgi?id=932869
> When Alex Pineda’s bosses decided their employees could work wherever they wanted, the web developer didn’t park his laptop at home or at the neighbourhood coffee shop. He left for Paris.
> “If it doesn’t really matter where I am,” he figured, “then why am I in my own apartment instead of a place in Europe?”

What are the legal implications of this? Technically, this would mean this guy's employer is now employing someone in France (or Germany, Netherlands or Spain which are mentioned later). From the employee's perspective as well, they are almost certainly violating that country's laws if they're on a normal tourism visa.

Remote work seems to be an area where laws (in most or all western countries, as far as I can tell) have not kept up. In the above example, you've got a Canadian remotely working for a Canadian company, but living in a foreign country and spending his money there. Assuming he's using a tourism visa like most would be doing in this position, he's breaking the law but this kind of activity is nothing but beneficial to the foreign country, since he is spending money in the local economy, not competing in the local labor market and not drawing any welfare benefits.
Here is to another 30 years of Emacs.
I'm pretty sure "Rank2 type + Show a =>" suffices for your "print" use-case.
Deal Breakers, Red Flags, and Hand Grenades: Relationship Building 101
Motoric cognitive risk syndrome
I doubt they'r renting out office space in the sub-basements.
Ask HN: How would you design a reporting API? How would you research it?
I'm trying to design a reporting API for our company (we do real time bidding on advertising). I'm not sure how to structure it and what conventions to use. (for example, there's really nothing to "set" in terms of reporting).

How would you design this API? Are there any good books or resources covering this?
Three myths about the brain
Is this why you see a lot of web pages that are some mid-shade grey background with another mid-shade grey text, resulting in extremely low contrast and increased difficulty in reading?
Americans fear pandemic as Ebola patients evacuate to Atlanta #News -
I believe this is what tptacek is referring to: https://news.ycombinator.com/item?id=8104407
Does Chrome on Mac have smooth scrolling? Chrome on Windows does not. I assume the scrolling animation designs are only popular becuase it looks pretty on the macs that the designers are using to create them.
Its not really killing anything its just migrating to devops.. If you are the just i rake and stack servers.. ya its harder and harder to find a job. If you are more the devops linux admin type then its extremely easy to find a job. My advice, don't be like mainframe guys.. you need to always keep skill sets new.
I've been using Picasa since version 1 but I disagree that G+ Photos is worse. I think the service has got quite a bit faster, smoother and easier to use over the last year.
I have been through concerns about autism with my son who is now three. My wife and I have had long conversations about it. My attitude has always been "let's do our best for him, but in the end he is who he is." I think he's going to be fine, but if it had turned out otherwise, I really hope that I could stick by what I said and be the person that Jackie is. She clearly loves her son as much as I hope I love my son.
Everyone seems to go out of their way to have their skybox code screw up 3dVision.
I can't speak for other people with similar experiences, but that's how I operate right now. As I grew up I learned how I'm supposed to interact with other people and how to control myself in certain situations. I don't think I'm "cured" by any means, but I'm able to do normal social interaction and my autism isn't apparent at all.
The website should be completely functional with JS disabled (and it is for me), what issues do you get?

Note: I'm not in charge of the tox.im website, if it were up to me there would be no javascript at all.
Does only the one-time signalling handshake go to a TCP node (NAT hole punching) or does all traffic? Are these TCP nodes similar to Skype "super-peers" - how are they selected?

Virtually all consumers are behind NAT devices.
time based leads to logistical problems. 'Oops, we deleted your money! Sorry!'
imo, the dark knight is a good movie despite it being a comic book superhero movie. v for vendetta too.
I didn't downvote, but it's incorrect. They're confusing the GPL (which requires release regardless of static or dynamic linking) vs LGPL (which allows no release if only dynamically linked).
now, this is a much better worded question. I stand corrected, the question is not stupid. The scenario was not the best one.
Oh, believe me, I'm no stranger to fights. Luckily never had to kill someone before, though.
He's said scarier things about it in the past too, IIRC.
There were probably other deciding factors beyond economics, such as carbon footprint.
Ideally, one would combine the protocol with some sort of address exchange criteria. You hold an address with $100 worth of bitcoins. The coffee costs $2. The coffee shop holds an address with $98 worth of bitcoins. You initiate the transaction, effectively swapping the addresses and paying for the coffee. Of course, this presupposes a preset group of prepaid addresses. But what is to stop ys from generating hundreds of prepaid addresses (other than the required finances of course), each ranging from say $50 to $120, and promoting their their general circulation, for the purposes of easier exchange?
loved the dial up modem one. what a throwback.
>“When I wanted to flap, I’d put my hands in my pockets. I think I came up with that on my own. It was frustrating for those two years. It was like smiling and then someone telling you that you shouldn’t smile, that smiling was wrong. Remembering to put my hands in my pockets made me less excited because I had to think about it so much. But as time goes on, you get in the habit. So by the time I was 10 or 11, I wasn’t even feeling the urge to flap.”

I didn't understand what flapping was until I read your comment and searched the op for clarification. Coming across the above quote was...I'm not sure what it was. I do feel a bit more sad about the situation after reading it though.

Please (and I recognize this is likely moot as you seem quite aware) consider what "normal" means and what its worth might be.
Django 1.3 or lower. Django uses PBKDF2 [1] since 1.4 (March 23, 2012) [2].

[1] https://docs.djangoproject.com/en/1.5/topics/auth/passwords/...

[2] https://docs.djangoproject.com/en/dev/releases/1.4/
I agree. When I see "hacker proof", I usually assume it's a corporation that's paid some mid-rate contractor to create a system that's "hacker proof" per their specification (which probably uses those exact words).

I've not seen many serious projects use this term.

This may well be an exception -- it's possible that the authors are not native-English speakers and fail to appreciate the term's nuances. All in all, it looks like a very interesting project, but I'd urge the author to use more different terminology to describe their system.
Omg! wow this is insane. nice job guys! :)
Ask HN: How to get motivated to code?
Hello HN,

I haven't touched code in a few months. In the beginning, it was because I got burned out. I realized I needed to take a break so I did -- had a little vacation away from home for a bit. I'm back now but I still can't get myself to write even a line of code. How do I get started? I need that initial motivation. How do you guys do it?
Thank you for the link. I was wandering why would a site write about an app but not link to it?
SEEKING WORK - Remote or on-site Chicago near loop.

I WILL BUILD YOUR MVP FOR YOU.

I have 3.5 years of Ruby on Rails experience and 2.5 years of Clojure. I like working with SaaS and building MVP's, especially SaaS MVP's. I've built a ton of MVP's for my own startup ideas and can build yours.

Don't need an MVP built? I can still do the general Rails work, help you migrate off of Heroku, etc.

What you get working with me:

I will help you get your site ready for an awesome launch so you can beat your competitors and start making money.

Hassle-free hosting so you will save time. You don't have to worry about backups, etc.

Reliability. If I decide to take on a project with you, you’ll have my number and can reach me. I can start right away and will give you updates as often as you'd like.

Save tons of time. I don't really like being micromanaged. If you're the type of person to micro manage then it’s not going to be a good fit. I like being free to work on the project and complete the tasks as I see fit and you can just not worry about me getting it done.

Transparency: My rate is 3000 a week. I won't bullshit your time away and we'll get things done quickly. My rate also increases quickly.

Email me at: christopher.d.bui@gmail.com or whatever email I have in my profile.

My Github: https://github.com/christopher-bui
It was fixed from 1994 to 1998 if I remember correctly, it became floating after the Asiatic crisis.
As a point of history, this may be of interest

https://en.wikipedia.org/wiki/Plausible_deniability

Plausible deniability is a term coined by the CIA in the early 1960s to describe the withholding of information from senior officials in order to protect them from repercussions in the event that illegal or unpopular activities by the CIA became public knowledge.

You are dealing with purposeful behaviour. One mans 'obliviousness' is another man's 'innocence'. In other words, it helps to not mis-understand this situation as the work of the ill-informed or 'incompetent'. It sort of does a dis-service to the complexity of the problem, here.

(And I'm certainly not arguing about the existence of a problem).
'Thatcher gene' key to thriving on less sleep
> I don't understand: surely with pencil and paper you are able to see the code you are editing?

Indeed, that is the meaning of the exchange. brandonhsiao said (https://news.ycombinator.com/item?id=8122592):

> You used to... not be able to see your code verbatim as you were editing it?

and Sharlin, affecting to disagree, said (https://news.ycombinator.com/reply?id=8122773):

> Sure you could [meaning, you could see your code verbatim]. You just used pencil and paper.
Eponysterical (http://metachat.org/index.php/2005/11/16/did_we_ever_decide#...)?
As is XMPP. Does Tox actually offer any advantages?
How is it superior to existing IM protocols (eg: XMPP)?

The article comapres it to skype, which is popular, but, techonologically, one of the worst protocols around.
This is an updated version of the report originally discussed in https://news.ycombinator.com/item?id=7956796

Some memory debugging options were inadvertently left enabled in the original investigation. This report covers the testing redone with the diagnostics disabled.
Someday, I hope someone will say "Am I reading this right? You used to not be able to see your code execute as you were editing it? My god, that sounds horrible."

There is a lot of technology advancement (in software and hardware) that we just take for granted today, and will tomorrow!
I didn't mean to imply that time-based was a better solution here, simply that there exists a functional proof of it. I haven't seen a working read-based self-destruction proof (if someone knows of one I'd love to see it).

That being said, I like the idea in general I'm just skeptical of protocols/ideas that rely on things that don't yet exist (unless they go into detail on how they plan to implement them of course).
This paper is a tour de force. Well worth the read.

Two things I wonder about:

1. Is the extra overhead of the fast path worth incurring on every call for most use cases or should you only stall with a Postgres system?

2. What were the false starts in his analysis? How did he bail from them? What are the insurmountable bottlenecks?
You should work on the Linux kernel.
It's easy to hedge an answer, but I'll risk being provocative (and I'm sure will be down voted despite the rules) and say:
Yes it is a bubble.
It exists because central banks have pushed interest rates too low which punishes savers. Those who don't want to incur debt to exploit the current environment are desperate for vehicles that will return them favorable results better than (real) inflation (not state reported CPI).

It is easy to believe that the big banks are pocketing a lot of profits having this market mostly locked in. However, if you actually read the blogs of people who were documenting their experience with Prosper and P2P lending over the past 9 years or so, you'll find that because of defaults, the rate the big banks charge for unsecured credit is not that far off from what you need to charge people yourself if you hope to keep pace with inflation.
In case anyone is looking for this: https://nicolasamiot.wordpress.com/2013/07/25/inkscape-nativ...
From what I understand, XMPP is decentralized, whereas Tox is distributed.

http://cffn.ca/img/articles/Centralized-Decentralized-And-Di...
Samwer brothers planning IPO
Oh man, thanks for that. The v.22bis (2400bps) one made me flashback hard.
A mobile app for timing your stretches. My daughter had to do some physical therapy so I did the stretches with her and got tired of counting and keeping track. Should be in the play store Monday.
Is there a TV/Movie equivalent to http://en.m.wikipedia.org/wiki/MusicBrainz ?
The majority of NATs can be hole punched.

If you can't hole punch then you will connect to your friend through a couple TCP nodes. They act like relays.

TCP nodes are pretty much randomly selected by peers and anyone can host them.

Everything is encrypted and TCP nodes are regarded as being possibly hostile so there should not be any security issues.
How to Rip DVD for Mobile Phone with DVDFab DVD Ripper
It was way oversimplified, but I was not trying to write a PHD dissertation on economics. :-)

Both plans were perceived by the laymen as a new currency worth 1 dollar and that helped stopping the inertial indexation of their economies (there! somebody from a stable economy will hardly understand what indexation was like).
For me, I think for a while until I find something that I really want to make, or something that bugs me that I can fix, and even if it's something really very small, that motivation powers my first steps back into coding. It doesn't matter if someone's done it before, just do it your way.
Can you compare ZeroTier with Skype's P2P design?

Edit: The 1400-page "Handbook of Peer to Peer Networking" (2010) has a good list of relevant papers. Even though the book itself is expensive, many of the papers are available elsewhere.

http://link.springer.com/book/10.1007/978-0-387-09751-0
> who have virtually no interest in evolving the human race

Well, I've successfully reproduced. It's not much, but as far as evolution goes, it's probably the best I can do.
Initial code will be available on GitHub Sunday evening.
> The characteristics of Python you just mentioned are only specific to it in cases when they are erroneous.

They are explicit at the official documentation, if they got there by error, they are official features now.

> They basically all evaluate to "Python isn't type-safe."

Yes, they do. They are at the opposite extreme from type-safety. That's why I used them to exemplify how it's the languages that apply better to some problems.

> So again, show me a program that is best represented in a non-type-safe way, and I will concede the point.

Well, any Django[1] CRUD would do. They are quite trivial, in there's little meaning in specifying exactly the manipulated data. Yes, Haskell has tools for displaying data at the web, and querying a database; no they are simply not as powerful when applied to that problem.

[1] In other frameworks they are about as simple, but you asked for one example.
I'm curious how many others here on HN are doing something similar? I.e. Making a living on their own as an indie/contractor at a rate that allows a comfortable lifestyle vs what seems more talked about/pursued in getting a large cash out.