skysight-inc/HackerNews huggingface dataset:
Crypto insecurity is just one of many concerns and it is missing somewhat of the point. There will always be debate over it.

There is a chilling effect that big tech companies in the US have been working on side channels for nearly any protocol that is ever developed. There needs to be research into side channel resistant crypto as well.

But what about the bigger growing trend in computing that is causing more troubles (dependency growing system wrappers)?:

Has anyone else noticed the trend for wrappers over increasingly larger and larger parts of operating systems? For example systemd (https://en.wikipedia.org/wiki/Systemd) while good for providing automation provides even more system administration power by controlling package managers.

Docker contains configuration information for the full app that is being deployed contained within that container as well. It will take quite some time to make docker more secure, and using it may contain some level of attacks.

And hypervisors as well are larger and larger in size as well. There is becoming an increasing standard for the amount of code in frameworks, platforms, operating systems and more for interoperability.

While these are good things that need to happen as fixes need to be quicker, they are also bad things in that they provide newer larger attack surfaces. Cloud computing is also becoming more and more rewarding for heavyset computation and sharing of resources. The ambiguity in choice of it all means that there will inevitably be a plethora of choices in the cloud.

The dependencies in frameworks and how we develop software has continously grown over the years as well to the point that people are using things like versioneye: https://www.versioneye.com/ to sort changes in it all.

While diversity is good and the cloud ecosystem is becoming more profitable. Why is there almost no security company focused on making the "cloud" tamper resistant? (i.e. monitoring docker containers and looking for misconfigurations etc even on github) There definitely should be a working effort in that retrospect.

It is also equally problematic that cloud software will be ambiguous in design. Cloud software that is built to be fast may use a custom in-house Just-In-Time code engine for faster database or code execution which may be harder to really address security wise.

In retrospect there are many security companies that are working towards securing the appstores, why should they not be working towards securing/integrating with cloud providers?

There should also be more opensource security anti-viruses besides just clamav. For people to be secure there should be a newer trend into opensourcing specific security modules and working towards a functioning operational level of configuration/management security as well as malware detection.
Why the IoT Has to Be Open Sourced: Developers Aren't Going Proprietary
They make awful servers.

Limited upgrade possibilities, tiny storage, poor airflow, not ECC RAM, no redundancy in network interfaces or power supplies, no remote console and you have to bastardise the things to get two disks in.

You can do a lot better for $50/month without the initial up front cost of the machine!
There were also some pretty big gaffes with the lottery process to allow the first stores to open. There was very little vetting of the participants and as a result many of the people who got picked were completely unprepared to open and run a retail business. Companies with experience and money to get a store open lost out to people who just wanted to put their name in the hat and have no intention or real capability of opening a store.
Apple's iPhone 6 could keep you warm and dry
Cydia Download iOS 8.1Download Pangu and latest jailbreak tools
Because he heard it was trendy on the internet, and doesn't know that the world's largest SQL deployments are all MySQL and Oracle.
MoOmer almost surely means http://www.soyoustart.com/us/offers/e3-ssd-2.xml this.
"Are expert evaluators subtly biased against new ideas?"

Maybe.

But in the case of the iPhone, the "experts" were simply underestimating the might of Apple's marketing prowess.

Products often don't win in the marketplace based on technical merits, features, or "innovation", but rather based on marketing, anti-competitive business practices, and the ignorance of the average consumer.

Witness the triumph of Apple, Java, and Microsoft.
And to answer your question even more specifically - here's a list of founders and ventures doing innovative things in this space:

Kit Maloney, Oactually http://oactually.com/

Cyan Banister, Zivity https://www.zivity.com/

Tina Gong, HappyPlaytime http://happyplaytime.com/

Sarah Jayne Kinney, UnboundBox https://unboundbox.com/

Dema Tio & Hermione Way, Vibease http://www.vibease.com/

Danny Wax & Tyler Elick, Spreadsheets http://spreadsheetsapp.com/

Akbar Dhanaliwala, MinnaLife http://www.minnalife.com/

Kathleen Funk & Alan Harris, XSync http://xsync.com/

Colin Hodge, Down https://www.downapp.com/

Ben Tao, Offbeatr http://offbeatr.com/

Kaitlin Prest & Mitra Kaboli, AudioSmut http://audiosmut.ca/

Roger McNulty, Gasm.org http://gasm.org/

Joe Nelson, TheyFit http://www.theyfit.co.uk/

Meika Hollender, Sustain http://sustaincondoms.com/

Sherif Maktabi, Glance http://www.glanceapp.info/

Cassie Robinson http://www.cassierobinson.net/

Kathy Harris, Slixa https://www.slixa.com/

Christian Thorn, Pinsex http://www.pinsex.com/
I've always considered using Mac only software a risk, because I have to depend on a single company. That's why I've mainly used software that is either free or available on cross platforms (Except of course software like XCode). What if my Mac suddenly stops working? I need to get another Mac to continue working. With non-Mac Computers, I can at least get a cheap temporary replacement to continue working. This move makes me even more dependend not only on their software, but now also much more on their price policy. For instance, say I need at least 16 gig of RAM for serious web development with VMs. Now I can't simply replace my broken MBP with an Mac Mini and upgrade with cheap RAM but I have to completely buy in. What if they suddenly hard solder HDDs as well? I can't even replace my broken hard drive quickly. As a freelancer, this dependency is too dangerous and I really hope that this move leads other customers to consider their dependency on a single vendor.
Ok, thank you. Now you got me thinking, what did I do wrong with this Oracle 9 DB several years ago? :/
Okay. I wish there was more visibility on these matters. I'm still, by and large, an outsider to all the going ons of the industry. :)
Who uses XHTML or HTML4?
At least a few people on HN use Lynx - they won't like you much for this!
I would say it was both a Linux and a application bug, you could just open an fd on both random and fallback onto urandom or even better supplement random with a prng such as haveged.
<br class=hidden-for-mobile>

:D
Full stack is more then a checkbox for your startup
That just deals with the variation in length of the texts, not the effect of translation quality or other possible problems with the experiment, like written -> spoken conversion.
I thought it was never updated for the latest VLC version. Would update my extension file then, thanks.
Why on earth would you use Lynx?
Recreating the 1918 Flu Virus That Killed 40M People
Just curious, why only 30 minutes to try out the premium features?
If you cut engine power hydraulic steering is basically dead, as are the brakes. The power assist on brakes usually uses engine vacuum and power steering is mostly driven by a hydraulic pump running off the motor. I'm not sure about the newer electric steering models.

But for most cars, simply having a stalled engine makes them nearly undriveable due to the weight of the controls.

I think that driver training should start with unassisted cars - no abs, power steering, power brakes and no stability control. And that early training should include skid control.

Once competency in those areas is gained, then move to bugger cars with power systems and electronics.

I'll always be grateful for learning to drive in a completely manual car with no power assist on anything. It means I can always tell when the car is doing something for me. I still drive an older car for fun which is completely 'analog'. It's mic more rewarding to make good progress by using skill rather than silicon.
* and workstations.

It's one of the reasons I do a lot of my work on a proper machine with ECC and SAS disks.

Due to some duff RAM a few years ago I lost a week of work. It silently corrupted filesystem buffers.
I like Apple a lot, but I find it more and more tiresome the fact that, if I want an OS X desktop that doesn't try to squeeze underpowered, overpriced laptop components into a tiny chassis, I would have to buy a Mac Pro. The fact that you can't even replace the RAM on these newest models is pretty grotesque.
Ask HN: Better missed connections
Hey HN,

I've always liked the missed connections on craigslist. It's when you come across random people around you, and you want to reach out to them but due to various reasons (confidence, circumstances, timing, etc) you didn't. But that feeling bothers you till you want to get it out somewhere.

I'm wondering if there's an app where people "subscribe" to these attributes, like "girl with red dress who was at caltrain station in Palo Alto", and if someone sends a message to these attributes and you would get notified. It's an interesting search and matching problem to solve, but do you guys think it's useful?

There are other use cases for a service like this when all the features are built. But I think missed connections would be a perfect fit as a MVP. Any thoughts?
Interestingly, the public perception that you're tainted can make your company a good investment for the savvy (/thick-skinned) investor:

http://www.canadianbusiness.com/investing/investing-in-sin-s...

Since a lot of people wont touch sex (or tobacco, oil, military, etc.) investments, you can get these at a discount compared to other companies with similar numbers but in a more mainstream category.
Irony: http://makelovenotporn.com/ wants to make sex and the discussion around it socially acceptable and socially shareable - our mission is to change the way the world has sex for the better, via socially-shared #realworldsex. As such, we operate completely openly, transparently, legally and ethically, and I can count the number of chargebacks we've had in 20 months of operating on the fingers of one hand (couples watch our videos together, our community isn't hiding etc etc). But the financial world refuses to even have a conversation about the fact we do business differently and don't encounter the same risks. Which is why people regularly tell me we need to find a politician/lobbyist who'll support us, a la bitcoin/Uber lobbying, to redefine what constitutes 'adult content' and the legislation around it.
You also may want the flexibility of both. For example:

<strong>Headline</strong><br>
The quick brown fox jumped<hr>
over the lazy dog.

And the code is clear and easy to read.
Oh boy, I hadn't seen this before. This is wonderful.

Paradox is known for making very complicated, somewhat buggy, but lofty and (in my opinion) very fun titles.

I swear their approach to games is "So they say 'a game is a series of interesting decisions,' lets see how many decisions we can pack into this one!"

The Hearts of Iron series is basically SimCity for World War 2. You pick any country and a starting year and just go. Decide on major events, pick your cabinet, how you allocate resources (industrial and brainpower), who you spy on, what you research, elections, and of course the whole war thing. Just everything. The game is huge fun if you like to sit down and plan things and I totally recommend it to anyone who loved the sim cities of old.

Hearts of Iron 3 is on Steam here: http://store.steampowered.com/app/25890/
Even for a lot of server workloads, ECC is just not that crucial.

Let's say you're building the next Twitter. It just doesn't matter that much if one out of every million tweets gets a bit flipped now and then. A lot of (most? nearly all?) online services are like that.

Would you notice if Twitter flipped a bit in one or two of your tweets a year? Or if YouTube flipped a bit in a few of the videos you watch every year?

I know, I know, it's gross. We're engineers. Thinking about bits getting flipped on us gives us the chills.
Freelance developers and designers Facebook group
I think that it'd be feasible to "teach" the firmware assignment of pins to rows/columns by pressing the keys in sequence upon first startup. You could probably even get away with pressing every key in any order in the "teaching" step if you installed some precisely chosen diodes in reverse.
As per my commment below, we get virtually no chargebacks at http://makelovenotporn.com/ because we are a different kind of business operating in a different kind of way - out in the open, socially acceptable/shareable - but the financial institutions' compliance departments won't even have that conversation. :(
It's good to see more people restoring these machines. I have a few of them myself. They can all be interfaced to computers. They use standard serial port data, 45 baud, 5 bits, no parity, 1.5 stop bits. (The signal level has to be converted, though.) A Windows machine with a classic serial port outputs the right waveform. Linux has some problems. Windows lets you set the baud rate as a number. UNIX/Linux has a set of constants for speeds left over from the PDP-11 era. A few USB to serial converters can be induced to run at that low baud rate, too.

I usually run them off of RSS or SMS input. See http://www.aetherltd.com and
https://vimeo.com/97062822 for info and video.

These machines aren't hard to get. They're on eBay all the time. In fact, there's a Model 15 keyboard on eBay right now, which the machine shown lacks. Unless they're seriously damaged, they can usually be brought back to full operation. They were designed to be fully maintainable; they can be taken apart down to individual parts and reassembled. No welds, no rivets, no glue; it's all put together with machine screws. All the maintenance documentation is available on line. There's a mailing list ("Greenkeys Digest") for people who restore them.

I'm currently restoring my fifth machine, a Model 15 that was in a garage for two decades after being lubricated with the wrong lubricant, dropped at least once, and operated with a bent typebar guide which damaged some typebars. It took a lot of cleaning and adjustment, but few new parts, to get it going. It's now working OK, except that the "X" typebar is damaged and won't print, and the print quality is bad. I'll be fixing that in a week or so.

http://brassgoggles.co.uk/forum/index.php/topic,43672.0.html

The construction quality of these machines was very high by modern standards.

I'm a little bothered seeing someone run one of those machines in a public setting with the covers off. There are pinch points, unguarded gears, exposed live electrical connections, and the typebars have considerable power behind them. I put steampunk cases, designed to show off the machine but keep fingers out of the gears, on mine.
I'm pretty sure they are exactly the same on many of the BSDs.

* OpenBSD: /dev/random + /dev/urandom are the same and use ChaCha20.

* FreeBSD: They are the same (via symlink) and use RC4. Soon will use ChaCha20.

* NetBSD: Unsure. Last I checked, /dev/random was broken/non-functional like on Linux, and /dev/urandom was slow, like on Linux.

* Dragonfly BSD: Somewhat unsure, but ChaCha output can be xor'd with another stream to produce the returned random numbers.

* Bitrig: when it is released, it will use ChaCha20 like OpenBSD.

Related: libbsd currently uses RC4 in its arc4random functions but has publicly stated a future switch to ChaCha20.
That's pretty damn cheap. What's the catch?

If there isn't one, I'll take two! Cheaper than Azure!
I can't help but think this offering is designed to make people not miss the Mini when it's discontinued in a year or two.

This article read really positive despite basically saying the Mini is a terrible purchase. If you want a toy Mac with no concern for performance, most models from the past few years will suit you if you can find a good deal on Craigslist.

I was on the fence because I really wanted a Mini and the new $700 version didn't seem terrible, but now with the knowledge that they put tamper-proof screws on it and bundled it with a 5400rpm HDD ($200 minimum to get an upgrade), I feel like they're not interested in customers like me.

I found an Asus form factor prefab (http://www.amazon.com/Asus-VivoPC-VM40B-02-ASUS-Desktop/dp/B...) that should handle the HTPC/Plex/quiet/price/value minimum requirements I have in case anyone else was looking for alternatives.
Idiot Falls into Water During Live Interview
Non-flame question here: what does running Mac OS as a server buy you?

I love my apple hardware and depend on my mbp as my primary computing device, but don't see the appeal of mac os X as a server environment. The things that make the mac great (for me) don't add value -- and in fact get in the way. I'm much much happier using Linux on my servers and much much happier NOT using it on my day-to-day machine.

I can imagine there could be some specialized cases in which running services on the mac make sense but I am astonished there are enough that macminicolo can make a business of it (and congrats to them for this by the way!). I assume this is a failure of imagination on my part, thus my question
Hi guys, author here, as far as I have tested it is working with Chrome and Firefox in desktop (where you can drag and drop)
It really depends on if the subtitle is in the Open Subtitles API or not, it tries to search for the best suitable subtitle there.
I've only tested with spanish and english languages but I am planning on improving the localization of the app.

Thanks for the feedback and glad some of you are finding use in it.
The memory scrolling doesn't work in FF - you can only see the initial 6 locations... And he's fixed that. Awesome!

Also - it would be very neat to have a "reset" on the Instruction Pointer, so that you don't have to refresh the current page if you want to start your program over...
It does, at least for me. There are things I have said, or have failed to do, which act as spurs to me even decades later. Without the emotional distress I would probably forget.

I don't see it as pathological -- it's not like I sit in my room sobbing over past failures. But I still feel regret and as a result am (I think) a better person.
My assumption was that these Macs were primarily used for automated headless testing of iOS applications; as a (relatively) cheap Mac that is able to run the simulator and whatnot, this could make sense.
Open Subtitles API, if there is no downloading maybe the subtitle does not exist there or it is a problem with the browser, I have only tested with Chrome and Firefox.
I also recently built an ergodox and it is definitely worth checking out. As far as assembly, I didn't bother with a magnifying glass or anything. Just my phone to act as a good bright light source and everything went smoothly.

I would recommend extra care with the diodes as I lost a few opening the packaging and had to get extras to finish the build.
That seems too good to be true. But I want to believe! They most definitely were not around last time I shopped around for this stuff.
Listening to Feynman talking about computers on a sunday evening. Life is good.
This is OVH. There's no catch AFAIK.
http://www.soyoustart.com/us/essential-servers/

OVH pricing gets you pretty close.
That depends on whether you buy specific hardware for a Hackintosh or try to force it on some existing parts you have laying around in the house.

Building a Hackintosh has been hassle free for a good while now. I've been running mine since Lion (2011).
Regret can be a very strong motivator. Cold retrospective analysis does not guarantee that the lesson will be imprinted in the consciousness. If you do regret something though, chances that you repeat the same mistake again are much smaller than if you just analysed the old situation.

You can look at the opposite of regret - say you really like doing something (for example - programming) - you will be doing it much better (via motivation) than if you just decided to do it because it is worth doing it (ie. via cold analysis of the potential outcome like good pay in the future).
Jaquard Loom
Sorry, are you being sarcastic or you really don't know that systemd is the other central piece of CoreOS, together with Docker?
In the spirit of repurposing old hardware with a Raspberry Pi, here's a project I did with an old rotary phone:

http://alexose.blogspot.com/2012/07/the-rotary-voip-phone.ht...
> What process happened that landed on Threefish for you?

I can't see why someone would advocate Threefish over ChaCha20 either. They serve different functions (one is a block cipher; the other a stream cipher). In my case, I needed a block cipher, hence my choice of Threefish.

I brought up Threefish not in conflict with the top parent's suggestion of using ChaCha20, but rather to suggest its place alongside ChaCha20, Poly1305, Curve25519, etc. in a modern crypto toolbox. In other words, I was saying "If someone is building an application that requires a block cipher, they should take a strong look at Threefish over AES; contrary to popular wisdom."

> A tweakable cipher core is a primitive that you use with other tweakable block cipher modes.

Indeed, but, for example, disk encryption requires less and simpler code using Threefish versus AES in XTS mode. Not to mention the caveats to XTS mode.

> I'm a little confused by your claim that Threefish got as much review as Salsa20

Off-hand, you're probably right that Salsa has more review than Threefish. But Threefish has more designers. And, Skein was one of the top SHA3 choices. Not that that conducts strength directly to Threefish, but it's a good sign. I mostly defer to Dmitry and Jon's comments here (http://crypto.stackexchange.com/questions/11725/has-threefis...).

> Finally, 6 cpb isn't great, is it?

Quick searching shows Salsa20 as ~3cpb, AES as 20-30cpb, and AES-NI as 3.5cpb. So 6 is great in my book, with Salsa20's 3 being amazing.
Because you are blind?
I've tried to make it really simple to use, after the first setup you should only visit the page for one use, drag and drop.
A really quick fix for trying with another language is opening the webapp in a incognito mode.
Ok that figures. Have dealt with OVH - never again!
I wonder if the names of people who put Marijuana in the strictest schedule of various laws and agreements are known.

I think someone should dig them up, so the world can know its heroes by name.
Yes, Stripe would love to. It's their bank that refuses. Patrick Collison really went to bat for us but couldn't win.:(

Ben Milne of Dwolla supports adult ventures, and we work with them, but unfortunately as a startup themselves they only operate in the US currently - we're global and need global solutions.
What if they suddenly hard solder HDDs as well?

I have a somewhat weird feeling that this is going to happen in a couple of years.
I hope it turns out better than the several versions of Cities XL did.
Yup that is happening when Open Subtitles API shutdown, I need to try catch the error, please try again ;)
Intel NUCs are really interesting small form factor PC kits - a nice medium between completely from scratch (which can be a real pain in SFF) and completely prebuilt. i3/i5 Broadwell NUCs are announced for early 2015.
Isn't misuse-resistance a property of the interface alone and doesn't it consequently transfer to libsodium? No argument on the other counts.