skysight-inc/HackerNews huggingface dataset:
I wouldn't mind being able to start the car just due to the presence of my phone. Just one less thing to carry. And if the phone's what's allowing the car to run, it's a built-in software anti-theft device.
That is an amazing story.

But... it kinda sounds like Pipino and Palmiso were running a two man confidence racket. Pipino would steal, Palmiso wouldn't catch him but would manage to recover something priceless that had been taken.
Wifi calling is especially amazing if you're in a foreign country and you need to take a conference call in your hotel room.
Rotonde De Cartier Astrocalendaire Perpetual Calendar: A Greek in French Couture
How to judge a ’bot; why it’s covered
I may be going on rampage here but "It does contain a fair bit of math" really grinds my gears!

Of course it does, it is about square roots and inversions.

In most of the cases, in order to optimize an algorithm or solve a problem, mathematics will do it for you, and that ranges from simple arithmetic properties to base changing theorems in linear algebra.

You just can not tackle such subjects without expecting it to contain a fair bit of math .
I made my comment about one particular aspect of his argument. I'm frankly rather irritated with your and his insistence that I should structure my arguments to suit someone else's point of view rather than the part I found particularly interesting. It was never my intention to refute his entire argument, just to point out that one aspect of it was flawed.
Heartbeat: EMC by Urwerk
This is a challenge for individual developers too who are moving up to team leads or senior positions. It's hard to delegate when you can't judge the potential for success or failure (for example, when some members of the team need more training in order to be successful on a project)
11 Tricks to Get Software Engineers to Sort of Respect You
That is pretty bad advice. RSA is slow, needs a lot of memory and is difficult to get right. Just go with AES in CTR mode if you absolutely have to. And remember that encryption != authentication.
+1 on the comment.

I'd still give it a spin though. We've been looking for a way to make github work better for us, and this looks like it's going to hit the mark.
Jack Ma’s AliPay Might Partner with Apple Pay
Poll: Who is your mentor?
I believe having a mentor like figure in your life is very important, whom you can go to whenever you need advice or one who can guide you in your tough times. Do you have a mentor? Do you think it's important?
College professor
Colleague
A Friend
An Industry personnel
Spouse
None, I don't have a mentor
None, I don't need a mentor
That's awfully complicated for a hardware RNG. A channel-hopping receiver? The classic solution is a radiation source, which quantum mechanics says is random.

http://www.fourmilab.ch/hotbits/hardware3.html
Yes. That's a completely different challenge. Making your client understand the ROI. One way of doing it is offering a "light" version which previews your full service. A product you buy once but functions to funnel you into the main service.
If anyone wants a fast atan2 that I wrote a while ago (2007), for making a microcontroller navigate, it's at http://robots-everywhere.com/portfolio/math/
loads of things do not require math (in the sort of "doing stuff with functions in (R -> R), or multiplications/division).

Pretty much no sorting algorithm requires mathematical knowledge to work through, nor do many data structure algorithms. Concurrency resolution issues neither.

This is of course, so long as you consider math to be "do stuff with these numbers." Group theory and the like can help guide your results on a more abstract level.

EDIT: what I meant by this is the sort of "number-y" math that people usually mean when saying "warning: Math ahead". I realise that abstract modeling is also a part of mathematics, but that's not what people usually _mean_ when said in the context of what parent post was mentioning
Last time I checked (about a year ago), support for PSK was pretty abysmal on the server side of things.
That's a nice readme. Too bad it doesn't give any examples of how to actually make use of it?
How to get clients to buy into your ideas
Yep. Phones would be the interface, through either smartphone app, SMS or voice.
Well, I'm happy to see that for once, they understand that the single most important thing is that it's verifiable.

So many crypto-related systems ask you to trust the provider implicitly it's not even funny.

I don't care who you are, if I can't look at the source (all the way down) of your product and build it myself, it's not going to make the cut as a "secure" system. You can provide additional guarantees and proofs, but showing me the source is item number 0.

Sure, it's not perfect, but it's much closer to perfect than any alternatives.
You got the key point extactly! This is why we choosed Chinese comments in Wide :-)
I like this post because it really shows the different point of view of Angular from both generations of coders.

I'm personnaly the kind of old one, the one we were told to not put inline js in our html, to ban the onclick="" lines etc.

Now AngularJS does the same, and it's the main reason why I haven't tried it yet, despite it's popularity.

The comment from @fetbaffe says it all about Angular :

-----------
Yes, the Google Cargo cult is frightening. Things that previously where scorned at is now raised to the skies.
But we have to remember that is also a completely new generation of developers out there who have not lived thru the entire painful history of web development, so therefore the same mistakes will repeat it selves.
It should be obvious now by most rational people that Angular 1.x is a dead end and if you build your own architecture around it you will continue to dig yourselves a deeper and deeper hole that will become harder and harder to get up from.
Angular 2 looks more promising with it's modularity and that should be the lessoned learned.
The web is just a way too fast moving target that any framework can keep up with, because the idea of a framework is the opposite for fast moving progress, i.e. stabilization of risks. And thats why so many javascript frameworks have already died even thou the web is really young.
The road ahead must be modularity and not the the way of the monolithic frameworks. Interoperability and interchangeability. Things we ought to have learned after the Prototype.js years. Or after the Dojo years. Or after the ExtJS years. Or ...
-----------
(link : https://news.ycombinator.com/item?id=8510735)
DewDrop: A formal language for social networks
I used to have a "homely mutt"[1] kind of setup but eventually got tired of offline imap, msmtp, and all that.

Now I use mutt only directly on the server running exim. Painless support for multiple domains, completely arbitrary from addresses with no configuration necessary, no imap, no magic directories showing up for no reason, no weird certificates, just pure ssh... It's the way to do it.

Otherwise, I stick to generic clients (Google webmail and Android app).

[1] http://stevelosh.com/blog/2012/10/the-homely-mutt/
When the docs are still in such bad shape and the number of books doesn't even come close to other niches of our industry, it's really bad timing.

They need to solidify what they have and make sure they're the stable choice.

With the latest announcements, I'm tempted to check out React and just fall back to jQuery because the learning curve is too steep. I even run the Learning AngularJS newsletter and I'm saying this! :(
Link quality evaluation criteria by Penguin
What part is in fact that complicated?
Yeah, people who think individual developers at Microsoft were trying be evil just aren't thinking clearly. Now upper management, on the other hand....
"Which profiling tool do you use to target your optimizations?", but then again I am a 2.97% hater ....
Fun rap about Poetic Devices
I misread and was really wondering what the Met Police would do with a GBP 97M supercomputer.
I'm not confident!
> ...math (in the sort of "doing stuff with functions in (R -> R), or multiplications/division")

This is not what math is. It's more what calculus is and math is a lot more than calculus. Most mathematics is not about numbers at all.

BTW: Interesting results about sorting algorithms (e.g. the lower bound of O(nlogn) complexity for comparison-based sorts) require maths (specifically combinatorics, permutations etc). Concurrency involves math, too. See the famous happens-before relationship which involves notions of sets (of executions), transitivity, partial ordering, etc.
More ways to integrate with Office 365
Interesting that you are talking about RAM, but it's hard to beat Firefox memory usage among major browsers. I'm impressed on my computers how Firefox takes ~750 MB of RAM and Chrome with the same tabs takes ~1.4 GB RAM.

Kudos to the developers.
> Concurrency resolution issues neither.

I beg to differ on this one. Proving, or at least reasoning about, concurrent algorithm does involve wrapping your head around happened before model, logical clocks, state machines and such. Most of these concepts are grounded in discrete math; group theory, partial ordering and so on.
It's much much easier to build from cheap parts than something with a radiation source.
A good CS-PRNG can take a modest amount of entropy and store it in a way (internal state) that you trust it can't be recovered by the attacker. From this they can generate a nearly endless supply of random output. That, as I understand it, is /dev/random vs. /dev/urandom/.

So it's nice to have a good reliable source of entropy, but you can also consider how protected is the internal state, aka the place you stick that entropy? The better protected the CS-PRNG state, the less entropy you actually need.

If you trust the CS-PRNG state, then hardware entropy sources won't matter much to you, because you just don't need that much entropy. When you start streaming entropy from many sources, it's probably to consistently update internal state over time because you don't fully trust that the state is secure.

It should make no difference either way in the quality of the output (directly pulling entropy versus CS-PRNG output). Because the necessary amount of output to reverse-engineer state is almost infinite, the output of a properly implemented CS-PRNG is highly trusted. And they're really nice algorithms that have well reviewed implementations.
"During the visit to Dreadnought, the visitors had repeatedly shown amazement or appreciation by exclaiming "Bunga! Bunga!".[7] In 1915 during the First World War, HMS Dreadnought rammed and sank a German submarine—the only battleship ever to do so. Among the telegrams of congratulation was one that read "BUNGA BUNGA"."
Maybe it is more complicated as a concept, but the implementation is much more simple. They're using a MCU with integrated radio, it's almost free to add the RF source to the base system only using the avalanche diode.

A HV geiger tube and embedding a radiation source would be much more complicated / expensive to build, especially on small scale.
Every single case is different, but with with Microsoft it was corporate policy to do so - "Embrace, Extend, (Extinguish)", and it was executed again (MS-DOS vs. DR-DOS) and again (IE and Frontweb) and again.

The old saying was "Windows is not done until Lotus won't run", and the DR-DOS case shows it might not have been an exaggeration
New UK weather supercomputer
> See the famous happens-before relationship which involves notions of sets (of executions), transitivity, partial ordering, etc.

[OT] What's the probability of two comments with very similar views appearing at the same time :-). I too did comment almost exactly same thing!

PS: Ducks from down-votes.
- We still havn't really hit on a solution for internal documentation. I'm something of a heretic on this point to be honest, as i try to actually deliver the 'code as doc' idea, which i think you can realize with a combination of compojure routes and schema definitions.

- We did look at Liberator a while ago, but it didn't seem mature at the time. To be honest we get by perfectly find with compojure, having created our own middleware to deal with any fiddly bits.

- The Joy of Clojure, for me, is the one. It's focus is on why Clojure is such fun to work with and doesn't get bogged down in trying to teach you every little function, it's not a reference book. A good read of that, coupled with the clojure cheatsheet, mix in 'The Little Schema' to get you lisping and then practice (4clojure, exercism.io, euler), which is key.
I'm not sure about you, but I don't really think I'd want to keep even the minor sources of radiation described on that page in my pocket.
I used one of these for years when I lived in an apartment (didn't like using the laundry facilities everyone else used).

https://www.lehmans.com/p-4444-breathing-hand-washer.aspx?sh...

I had a big tub I put in the bathtub and it took about 5 minutes to wash a small load of laundry. It was a bit of a workout but that's ok too. It used no power and cost $20.

Then I put the clothes in this, hung them, and in the morning they were dry.

http://www.amazon.com/Centrifugal-Clothes-Portable-Spin-Drye...

Now I have a house and a regular washer and dryer but I would recommend one of these breather washers for someone with limited access to power or no washer hook ups. They really get your clothes cleaner than a conventional washer.
Can you really blame them? We in the tech industry are used to fat margins. Retail margins are thinner than the new iPad. If you were running a business like that, wouldn't you love to get an extra 2 - 5% of your revenue back, and exert considerable effort to do so?
OneGet unified package management for Windows
View Custom 59FIFTY Hats Outlet in Specail Style
OMG I saw that folder a while back on my phone and ignored it thinking some sony app uses it and it's included in case I set the phone language to Chinese. But I never thought a Japanese company would be sending anything back to a Chinese IP address!
I imagine the baidu folder is set up due to baidu search or social network integration.

The connections to IP addresses have been seen on other phones so it's probably some software people have installed http://forum.xda-developers.com/showthread.php?t=2509815
If you are on your phone, open the site in Desktop mode.
This comes down to your definition of "support".

Unlike SpiderMonkey, V8 doesn't have a special mode for "use asm" code, as far as I know. E.g. it still does JIT compilation, unlike SpiderMonkey, which does AOT compilation.

But the V8 team is certainly working on making asm.js code fast. This is clear from the fact that V8's performance on asm.js benchmarks has increased significantly since asm.js was first announced. (As you note, they put an asm.js test in their own benchmark suite.)

And even if V8 doesn't have a special mode for asm.js, they're benefitting from asm.js's existence, because asm.js makes clear exactly which subset of JavaScript they need to be optimizing for.
Why Copyblogger Is Killing Its Facebook Page
The results we have from Facebook are very mixed. One of the actual problems I have is customers requesting support via Facebook rather than just emailing support. As a result we have to be on Facebook but would much prefer users to use the official channels.
Ahşap Hasta Karyolası
Having something like 1Password for bookmarks across browsers would be sweet. Perhaps with client-side encryption too, for increased privacy.
Hasta Yatağı Fiyat
"As You Like It" by William Shakespeare

Act 5, Scene 1:

[...]The fool doth think he is wise, but the wise man knows himself to be a fool[...]

I try to keep that quote in mind at all times. I believe it holds a great deal of wisdom, especially for me. For I am loud and opinionated. But I still fail when I need it most, at times when I am surrounded by (people who IMHO are extreme) idiots.
That's a feature of most "cloud" services that allow multi-device synchronisation.

It could be said Google already have your browsing history (of sites that they serve adverts on, or that use their analytics). I doubt Chrome's syncing data would give them any more information than what they have already.
How to fix IBM
Seriously, computer science itself is a branch of mathematics. Or is mathematics a branch of computer science...?

It's not always weird bit-level arithmetic, but if you aren't using math at some level, you're not programming; you're just futzing around with a text editor.
This seems sound. However, I'm in doubt about some of their points:

> You can ask it to dump the current firmware to you

It can dump the firmware but it can still execute something else than this (or in addition to) this firmware, can't it?

> You can see all the components on the board

The fact that I can see these tiny thingies doesn't do much good either? Can I, seeing them, tell what they do? No.

Building one of these yourself seems to solve both problems. Not trying to undermine it or anything, just curious what others think of it.
To sketch the magnitude of the problem: potentially, the Chinese governmnet can:
...
Prevent your device from entering sleep mode
...

Oh well I'm screwed.
Hacking on Clang to demistify temporary objects
The point of getting in last, after other projects have been evaluated, is strong. Just, not too far last, it would seem.
The point is - you can verify it yourself. Without trusting anybody else.

Dumping the firmware means you can ensure it's not been modified (presumably from when you uploaded it to the device yourself).

Being able to inspect components means you can ensure it's still exactly as you built it. And if you haven't, you can visually check that it does what it says it does.

If you're not technically competent to make this verification, you can ask somebody you trust and who is to do it for you.
Try out NodeJS and Angular... You'll learn a lot. Don't forget to pickup the basics of HTML on the side ;-)

Ow yeah, i could advise for RoR also, but there isn't much talk about it anymore.
My solution to this issue is to use DuckDuckGo along with their bang commands [1]. So if you were to look for a replacement Wacom stylus on amazon, you would input "!a wacom stylus".

DDG bangs works with all large website or search engine (!g for google, !w for wikipedia), and with smaller, specialized one as well (I can look up words definition in the Trésors de la Langue Française Informatisé with !tlfi , and a particular protein in the Protein DataBase with !pdb).

If you use the official extension[2], you also get search suggestion out of the search box

[1] https://duckduckgo.com/bang.html
[2] https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-fo...
> Building one of these yourself seems to solve both problems.

I'd love to see a 3D printer that specifically built verifiably secure hardware.
What's cool is that there is a legitimate push to make Jinja a first class citizen in Django, with other third party templating engines being available via a new API.
I am not so concerned about the folder itself but my phone now has a constant connection to an IP address in Beijing which I am not too happy about.
How I explained “Decimal places” and “Currency in multiples of” to my client
I came in thinking that this was going to be about the Baidu IME Japanese language input (which caused quite a stir earlier this year iirc, for the same kind of logging and tracking -- though I think the information wasn't as extensive as this). Lo and behold, it's much worse than that.

Wasn't it Sony that installed some kind of spyware in its VAIO machines or its anti-piracy SW or something along those lines? When will they ever learn? And there will likely never be an explanation for what they were trying to do here.

They are already in a precarious position in the smartphone market with most of their sales coming from Japan (and Sony Ericsson becoming just Sony Mobile back in 2012). What were they going to do if shit really hit the fan and this went to mass media in Japan as the "Chinese spyware phone" given the tension between the two countries, especially given Japanese QE over the last 1.5+ years? Consumer sentiment is pretty irrational. I can easily see a situation where they get labeled as a "traitorous company" and a boycott starts, at least vs their mobile division. Shortsightedness at its finest.

I want to root for this company so badly yet every few years they do boneheaded things like this and make me utterly despise their stupidity.

edit: On further thought I bet this is created by some pre-installed default Baidu app that Sony QA didn't vet properly or didn't give a damn about. Or maybe QA found the folder + the connection to China, but it was quashed by management for "strategic reasons". The latter seems more likely, since the engineers I know at Sony (at least in SCEI) are pretty damn good.
Portable bucket-mounted washing machine for $60
xmarks.com not too bad for that, I only know about it because of lastpass
No, no it's not.

I just spent an hour trying to figure out why ff freezes on the partner's computer. Yay 780mb sqlite wal. Who the fuck knows what that's doing. Why on earth does using a browser require vaccuming sqlite files? Dunno, because there's no good reason.

If she'll finally switch to chrome I'll stop hearing complaints the internet is slow.
I'm pretty sure that for the Kimmel segments, they ask the interviewees different questions and later edit in a different question that makes the original answer seem funny.
...Otherwise you will be made sign up through a LONG and HORRIBLE sign up process :O
Indeed, I would not personally consider using KASUMI to be a positive change worthy of the title of "hardening".
From the same site, quantitative analysis:

"The chi-square test is the most commonly used test for the randomness of data, and is extremely sensitive to errors in pseudorandom sequence generators. The chi-square distribution is calculated for the stream of bytes in the file and expressed as an absolute number and a percentage which indicates how frequently a truly random sequence would exceed the value calculated. We interpret the percentage as the degree to which the sequence tested is suspected of being non-random. If the percentage is greater than 99% or less than 1%, the sequence is almost certainly not random. If the percentage is between 99% and 95% or between 1% and 5%, the sequence is suspect. Percentages between 90% and 95% and 5% and 10% indicate the sequence is “almost suspect”. Note that our JPEG file, while very dense in information, is far from random as revealed by the chi-square test.

Applying this test to the output of various pseudorandom sequence generators is interesting. The low-order 8 bits returned by the standard Unix rand() function, for example, yields:

Chi square distribution for 500000 samples is 0.01, and randomly would exceed this value more than 99.99 percent of the times.

While an improved generator [Park & Miller] reports:

Chi square distribution for 500000 samples is 212.53, and randomly would exceed this value 97.53 percent of the times.

Thus, the standard Unix generator (or at least the low-order bytes it returns) is unacceptably non-random, while the improved generator is much better but still sufficiently non-random to cause concern for demanding applications. Contrast both of these software generators with the chi-square result of a genuine random sequence created by timing radioactive decay events.

Chi square distribution for 500000 samples is 249.51, and randomly would exceed this value 40.98 percent of the times. "

- http://www.fourmilab.ch/random/
I believe you are referring to the Sony BMG copy protection rootkit scandal [0]

[0] http://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootki...
I don't think it has anything to do with Sony, the folder is created by lots of apps - wechat, MIUI themes. http://forum.xda-developers.com/showpost.php?p=55033304&post... suggests it's also created by ES File Explorer.