skysight-inc/HackerNews huggingface dataset:
Instead of keeping the key in a potentially vulnerable place, they're putting it in an oracle: pass ciphertext to the oracle, get plaintext back. I'm interested in the authentication between CloudFlare and the oracle. Cryptographic examples involving an oracle tend to refer to the oracle as a black box that just blindly accepts data, transforms it, and replies. Of course, then the oracle's content (a key, an algorithm) risks exposure through deduction if an attacker can submit limitless requests. See http://en.wikipedia.org/wiki/Chosen-plaintext_attack

I'm not at all suggesting that CF hasn't thought of this; rather I want to see their mitigation of the risk.
I want to go to space in a shrink-wrapped spacesuit.
The Bionic Man
You can have both. Frameworks like turf (a geospatial analysis library that I authored) have one high level convenience module[1]. You can require('turf'), then run any function from a single object (ie: turf.buffer(), turf.smooth(), etc.).

Finer control is often required, however, for all sorts of reasons. For these cases, turf is made up of a collection of sub-modules [2][3], and these can be required individually.

I like this approach, since it provides a nice curated framework for users simply wanting to get stuff done quickly, but it also allows for more tuned usage in production environments. It has been a bit more work to maintain (~70 repos, instead of 1), but I have been pleased with the approach so far.

[1] https://github.com/Turfjs/turf
[2] https://github.com/Turfjs/turf-buffer
[3] https://github.com/Turfjs/turf-smooth
I doubt they're talking about a new encoding format or anything like that. If I had to guess, I would be thinking more about something like the recentish NiN album that came with Garageband files so that you could remix the music yourself. Or which provides synchronised lyrics embedded in the music, or something like that.
On the other hand, I dealt with a company that was really deceptive and then looked at the online reviews (not on Yelp). They were all glowing. But when I looked more closely they all followed the same template and seemed to be posted at 9:xx am every morning - like its somebody's job.
Apple should buy Pono, Neil Young & Jon Hamm's music "high-resolution" 24-bit 192kHz audio company and have Neil play some real Rock & Roll at Apple events.
It would be cool if Home Depot had a 3D printer in their stores. That way you could upload your design and run by and pick it up 4 hours later.
Beyond the brokenness of certificate revocation, just the simple fact that a financial institution in the US must formally notify the Federal Reserve if any of their private SSL keys are compromised is a huge factor that is better mitigated by this strategy.

To me, the biggest question is whether they can keep the oracle highly available even in the face of a DDoS. It still seems like the weakest link, just slightly more difficult for the attacker to target since they don't have a publicly advertised direct connection to it.
That explanation looks real enough, but there's still something amiss.

You see, the "fact" that everybody is corrupt, and out to get you so you better trust the people near you, to death if needed is no more true than the "fact" that governments, elite, and any other form of leadership is automatically trustwothy, so comply and be happy, questioning is for radicals.

Both are complete fabrications, collectively created but with some obvious small-group direction and an intent. Knowledge is something else, not to be found here.
Yes, which is actually very useful once you start doing things like working with variables.
I'm browsing from a work computer, and the network has the gateway enabled. I would never do that by choice. But it struck me as weird that they had this site blacklisted.
A Value System for Code Reviews, and How to Scale Them for a Large Project
The new article says:

Tschinkel dug for termites in one or two circles and returned in 2007 to investigate, and hopefully prove, his hypothesis. “It took us about three days to establish, without a doubt, that termites were absolutely nothing to do with this,” Tschinkel says.
> it's not necessary to prove that all members of a category share those effects

You're assuming "artificial sweeteners" is a meaningful category, of the same kind as "snakes" or "liquids". Since the various substances in question are very different, chemically, I think that assumption requires more justification than just a bare assertion.
All of the example code appears to be JS?
Some potential ideas
- pay per listen, local cache
- embedded lyrics, photos
- extra sound bytes (exclusive to track owners)
- optional videos
- asynchronous Comms with the band: FAQs. News, interviews, etc

There are many things you can do that link purchased content with other content. Adding lyrics that appear in realtime would also be handy.

My ideas are now patented. Pay me 5% of all future sales please... Isn't that how patents work? State the obvious and rake in cash for doing very little?
My brain needs to decide to keep sleeping, and help me out with my damn insomnia.
I say this as a C++ programmer: I think a lot of these errors are non obvious because of the sheer amount of syntactic noise surrounding them. I also write a lot of python, and a lot of these errors are still possible but way more obvious. C++ is seriously the worst about surprising syntax causing temporary blindness from overload, excluding maybe Perl.

Static code analysis is fantastic for a language like this (if you can afford it; not sure what the pricing on this product is -- can't say I've ever seen a cheap static code analyzer though :-) )
We have iOS app: https://itunes.apple.com/ru/app/raindrop/id739939140?mt=8
But without English translation. Will be soon.
And don't forget the end-to-end project[1], which is the javascript crypto library by google.

The significance of these types of project extend beyond browser privacy. As crypto-currency become more prominent, we NEED better, carefully auditted javascript crypto-libraries.

Right now, all the crypto-code are home baked. e.g.: https://github.com/bitcoinjs/bitcoinjs-lib/blob/master/src/e...

While, I think they are all doing a fine job. It is not settling to think that these mission critical, crypto-code is not vetted by cryptographers.

In fact, a few months ago, there was a bug where the nonce for each signature was not set properly that basically meant you were able to work out the private key for 2 different signatures. Some users lost funds due to the bug.

These open initiatives will lay an important foundation.

[1]https://code.google.com/p/end-to-end/
Why would it be? iTunes tracks started transitioning to DRM-free 7 years ago - as far as I can see from some quick research they were one of if not the first music store offering DRM free music from any of the major labels, and absolutely gave immense weight to the DRM-free push before many of the current competing services even existed.

So, if your comment is going to follow the typical apple bashing, history ignoring model, just don't bother.
Hubspot adds CRM, but it isn't changing course
They are labeled (now).
Wow, that is just sad
ruby-core has a history of making sure Rails does not guide the direction of Ruby the language. Most of the time, advancements to Ruby the language will always have a positive impact on Rails the framework. Sometimes these changes to Ruby the language come to light because of Rails the framework. It's a very healthy relationships between the two.
A "hello world" Java program starts up fast, sure. But Clojure start-up time usually takes more than 1 second; it can be 10 seconds plus if you include many jars. I don't know whether that's more the fault of Clojure or the JVM.
I'm betting on Freemium DRM. Listen to the crummy version for free, or plug the file into a totalitarian DRM system to pay for and decrypt the good version.
It's a personal taste matter, of course, but //for me// the resolution on a Kindle has never been a problem, and I've been using them since the second-generation model. If you view a lot of PDFs or images on them, it might be an issue, but I just read ebooks.

The biggest factor, I think, is whether you want buttons for page turning or not. If you get a Paperwhite, the only way to turn the page is to tap (or swipe) the screen. If you get the Voyage that'll still work, but there are now sensors on the edge as well with some sort of haptic feedback.

If neither of these things sound important to you, get the Paperwhite and save $100. It's a great e-reader.
Unavoidable patterns in strings
Touch and Béziers curves ? It would be cool if Illustrator could use Flash/Freehand drawing tools, this would be a great start even for a non-touch environments.
Are we reinventing Kerberos again?
Not to mention sales of music downloads are tanking through the floor. Consumption is predominantly streaming now, and that's the way people like it.

I simply don't see any static, local file format succeeding regardless of DRM-encumbrance. It's simply less useful to mainstream users than the streaming equivalent.

The battle isn't about which format your files should be in, it's about whether or not you have any files at all.
What does this mean? I looked at the page and the Github repo and still can't tell if this is some kind of small app implementing a "wishlist" which I would guess is like a todo list, or something else?

Is this adding commonly-requested features to Bootstrap? If so...please add documentation saying exactly that.
Mobile app marketing: ASO, social and publicity
Battery-Free Chip for the ‘Internet of Things’ That’s the Size of an Ant
Thanks! Denied is currently for Macs only, sorry.
Netflix pays the content owners / studios for the content they serve, and so the screenwriters/directors/actors/producers get paid if you use Netflix.
I got the first one they showed me right, in that I identified the issue as a mismatch between conditional and code, but I clicked on the code line instead of the conditional line and it was wrong, so peace out.
Ouch. Good point.
Disagree. The whole point was not what she was listening to. The point is she was ignoring the world around her. It isn't a mode of information transmission issue - it is a human interaction issue.
At a glance, it appears that the non-ephemeral RSA signature is handled in the network, but the key exchange occurs at the endpoint.

What's new is the whole "edge calls home with a signing request" piece.
Something to consider: I don't know much about about Laura, but I anticipate my perspective on the subject to be slightly different from those two books in that I worked as an ACD/Copywriter on LeanUX and Agile Dev teams in a startup, and was in charge of maintaing the brand. (We noticed early that the brand was going to suffer using Lean if we weren't careful.)

That's where we developed my version of Lean Branding, so I assume it's a little more in the trenches and focuses more on the day-to-day building and curation side, and (total assumption) may be more actionable. I think they both approach it from more of a strategy perspective.

(These are assumptions based on observations, and I'm not saying either perspective has more value, just that they're likely going to be different.)
> They simply grew tired of the constant advertising inquiries from Yelp and what he dubs “blackmailing” and review manipulation. Sidenote: A judge recently ruled that Yelp has the power to manipulate reviews.

Hold on.

So let's say I run a highly-ranked software review website. I then proceed to "manipulate reviews" to force software developers advertise with me in exchange for not floating negative reviews to the top and not "filtering out" good ones.

Do I get Yelp's business model right? Ethics aside, how is this NOT the by-the-book racketeering?
Would it be enough to simply only allow connections from Cloudflare IP addresses?
Looks interesting. I have tried to use a few annotation tools before within the team but people were more comfortable and accustomed to emails and we ended up switching back.
This looks like a perfect solution
Crosswalk Runtime Overview
Breaking into a CloudFlare server does not get you this private key. CloudFlare does not keep this authentication key unencrypted on disk.
Parent is referring to the "demo application", though I personally disagree that one should worry about it on the demo app. The docs sure, but the demo app is readable enough even if you're not a coffeescript aficionado.
Surprising statement that the box might be the most expensive single element of the iPhone.
The latest PHP Weekly just out
The recording industry have tried the "above CD quality" thing to get people to re-buy their music several times before. Each time it flopped, and I fail to see why this time will be different.
Stopping development of IE is what led to the Great Browser Winter of the IE6 era. Things didn't start moving again until MS reversed course and went back to improving IE.

Defaults are powerful things, and as long as IE is the default browser on the most popular desktop operating system, there's going to be millions upon millions of people using it regardless of how good it is. Stopping development would just turn those people back into an anchor holding back the progress of the Web.
Sure, but the German account is more expensive.
“There is a tremendous sense of excitement that there is something really interesting going on and we want to know what that is,” says Professor Don Cowan, director of the Centre for Microbial Ecology and Genomics at the University of Pretoria, South Africa. “It is a desire to understand the system. What is going there? What is happening?”

Can't think of a better summary of science!
Show HN: Election Analytics from the University of Illinois
Think of it as a compromise: You can leverage CloudFlare's CDN to mitigate DDoS and other sorts of nasty attacks AND assure TLS is used with every connection, without giving up your RSA key.

"It's clearly worse than doing nothing." It's not very clear to me. Please explain.
Upgrading Rails 3.2 to 4.2
Django UI in 2005 vs. Django UI in 2014
"I think that as a culture ... We're society of " - you consider humans to be a single culture, a single society?

"just because he wanted to have sex with his wife" - it had been a while. He didn't shut down the global economy, just forced people to participate in it in person. Snake Plissken shut down the global economy.
Yet the page says "less than 0.00385% of customers had data disclosed due to government information requests."

So they ARE giving data to the government at their request...

BTW, that percentage of say, 100 million customers (which I'm sure Apple has, probably more) is 3850 people, not an insignificant number...

Anyhow, I personally wouldn't trust anyone anyway. Google, MS and Apple are all American corporations, and need to comply with US law, no matter how asinine.
Open: anything required to survive.
Prop: anything optional to survive.
Make go get work with GitHub private repos
Interestingly, I've been hearing a lot of native speakers making the same mistake lately. Maybe it's because I live in San Francisco, and we hear foreigners make this mistake all-day-long - now it's rubbing off on people.
Attempting to solve a cryptographic attack with a configuration policy doesn't sound like a wise move.
clang's static analyzer performs well and is exceedingly inexpensive
Google isn't going to let iCloud embed a decryption UI into their webmail tool.
I definitely felt the same but there's quite a few bits of tooling popping up now - lien-mies for a very quick first step, and more powerful bits like figwheel, which makes itterating in the browser with om really shine.
I would imagine that that link would be IP Restricted, VPN'd maybe, carefully monitored etc.
So, this is not actually keyless SSL but SSL using something like a Hardware Security Module over networked PKCS#11. Did I miss something?
Do you use per-site session ticket keys?
Vim-jira-complete
Google Online Security Blog: Security for the People
Agreed! That's exactly the "tiny thing" we ask people to build.
Hey HN! We're no Nate Silver, but the Election Analytics group at U of I has been working really hard on relaunching Election Analytics. It aims to be a bit more academic than the news org sponsored election insights. Can you give me some feedback? What rules, what drools, and what do you want to see in 2016? Check in often, we post daily updates as polls are released.

Thanks a ton!
Taylor
FYI: Tortuous interference is causing harm by unlawful means. Otherwise things like a union protest would be illegal.
Here's something I've always wanted: A consumer music file format that preserves all of the underlying tracks ('stems') so that they can be adjusted while you listen to the song.

Imagine listening to a recording and going "ooh, that bassline", and then turning up the bassist and turning down everything else to hear it better. Or easily "remixing" while you listen by eg. applying a filter to only the drums. You could even save presets to listen to "your" mix of the song again. Maybe this only appeals to hardcore music fans, but I know it's something I'd love to play with.

Of course it would have to be supported by major user-friendly software like iTunes, and would have to implement a nice interface for interacting with a tracks. But I've always thought Apple was very well positioned to take this on, if they wanted to.
You're not wrong, per se, but C++'s memory model tends to make refactoring this sort of thing a lot more painful than needed. If you introduce function you have to spend a lot of time thinking about how do the variables copy over the stack, is this data structure safe to pass to a function? And do I pass by reference? And do you return values from the stack or in allocated memory or write into a passed reference? Or do you get really gross and write a macro? And so on, until you just think "fuck it, copy-paste".

It's not an excuse, but languages definitely shape how you think, and C++ definitely encourages long functions and copy pasta.
Doctor prescribes fruits and vegetables transforming healthcare [video]
Make Money on the Side with App Reskinning
Igloo.com Acquires Aftermarket.com Domain Name Marketplace
Well, that's pretty simple: we'll need to consume far less per capita otherwise the system will collapse. The good news is that you can start that today.
In Scotland, tech firms fear independence vote
> But you can't deploy your Go to iOS.

Well, you can if you MUST: https://bitbucket.org/minux/goios/wiki/Home

> Or your Swift to Linux.

I suspect that'll be a different story next year.
Whatever it becomes it's going to have iTunes lock-in. So glad I never bought into that walled garden.
Bad Notes on Venture Capital
The key server only accepts mutually authenticated TLS 1.2 connections with a strong cipher suite. We also require both certificates to be signed by CloudFlare's internal Certificate Authority.
What stops them from using SSL between CloudFlare and the 'oracle'?
Monopoly is the real form of capitalism, competition is for losers
Have you looked at RemObjects Elements (http://www.remobjects.com/elements/)? With that (commercial) toolchain, you can write in either C# or Oxygene (an Object Pascal-derived language), and compile to .NET IL, JVM bytecode (and from there to Dex bytecode for Android), and even native code running atop the ObjC runtime for iOS and Mac.
I like the minimalistic nature of npm packages. It also encourages people to publish own packages. If you create an useful test assertion library, you don't need to turn it into full blown framework with all possible bells and whistles!
Formats should never be proprietary. That's just holding user data hostage.

Really, nothing should be proprietary, or at least not proprietary forever.Take note of Id Software's approach of open-sourcing their engines X years after release of the accompanying game.

If we keep releasing proprietary systems, nothing will be archived or usable in the future, if the source is never released. Hundreds of video games are going to be inaccessible in the future due to DRM servers, or proprietary backends.

I mean, I can ramble on forever, but it's pretty clear that non-free[1] software is bad for the future of people and society. Snowden proved RMS right.

[1]: Free as in freedom: http://www.gnu.org/philosophy/free-sw.html (You can still charge money for free software or related services. Not everyone can run their own Google, even if they open sourced it all. But that's a whole 'nother set or arguments.)
Hyperrealism Artist shows how to draw in HD
Ha! Like the old joke that McDonald's is a real estate company that sells hamburgers.
I liked the new U2 album, but the amount of compression used was absurd. A new high-resolution format won't be able to fix poor decisions made in the mastering booth.
Refraction Simulation
I imagine this being greeted with fury and lawsuits from the artists. I remember a company in Utah that made family-friendly cuts of popular movies being sued for the modifications.
I sometimes stay conscious while asleep.

The first time it happened I thought I was dead, because I felt completely conscious but could not control my body nor receive input from my senses. I kind of panicked, and with what felt like an extreme effort was able to become fully awake.

Since then it happens from time to time (I can't make it happen) and it's a very pleasant experience since you're in a dreamy state where you can pretty much decide what you dream about.

It's a state that is between awake and asleep; when in that state, it's very easy to fall into actual sleep (to lose consciousness), and very difficult (but possible) to awaken completely.

I keep good memory of the experience each time.

I would like to talk about it with people who experienced the same thing, but could never find anyone just by talking about it to friends around me. Where should I look? Does this thing have a name?
'Vinod' doesn't sound too american btw

And aren't there studies that confirm inmigrants are more likely to contribute to the wealth of a country?
Anecdote: I once came up with a joke in my dream and laughed so hard at it that it woke me up (and my girlfriend). I also sometimes speak in English in my dreams although it's not my native language. There's also several stories of famous writers and scientists who had their "haha" moments while sleeping (James Cameron claims the idea behind Terminator came in a dream).
"We’re excited for a future where people won’t have to choose between ease and security, and where tools that allow people to secure their communications, content, and online activity are as easy as choosing to use them."

That future is now according to Apple.

In any case the real issue is protecting people from Google itself.
Why RSS Needs a Follow Button
5 Reasons to Hire Your Mobile Device
The Tampa Bay Times [ formerly the St Petersburg Times ] is published by Times Publishing Company which is wholly owned by the Poynter Institute.

The Poynter Institute is dedicated to journalism.

[1] http://en.wikipedia.org/wiki/Tampa_Bay_Times

[2] http://www.tampabay.com/

[3] http://www.poynter.org/
It's very difficult to avoid sampling bias and confirmation bias when you're looking for historical and contemporary events that seem to fit your curve. What about all the men throughout history who didn't massacre their neighbors? How do you control for massive confounding factors such as religious brainwashing, economic circumstances, poor education, and individual idiosyncrasies?
ISIS cyber capability judged more 'aspirational' than operational – FCW
Given the big deal Apple made about dropping DRM, I doubt that. It'll probably be something to support extended content. iTunes has some packages that come with video, PDF, etc. content as well as the music already.
See also: http://en.wikipedia.org/wiki/Referential_transparency_%28com...
Just sent you an email, but for anyone else who's wondering the same thing: I'll plug Scalyr, which is a server monitoring service with an option to import CloudWatch metrics. https://www.scalyr.com/solutions/import-cloudwatch
That sounds a lot like sleep paralysis, which I've experienced while trying to induce lucid dreaming.