skysight-inc/HackerNews huggingface dataset:
I take your point, but honestly I don't think at this time that Curve25519 (or properly implemented RSA-3072) will fall cryptologically in any reasonable timeframe without either a quantum computer or a really fundamental development in factoring/discrete logs that would probably threaten RSA-4096 roughly as badly.

Ed448-Goldilocks is great, and may indeed be a good contender for certificates as it seems to represent a good inflexion point of security versus performance.

The Crypto Forum Research Group at the IRTF is currently considering recommendations to make to the TLS Working Group (and perhaps to be used more widely) regarding elliptic curves: I've been a, um, vocal participant there already. I've raised this development there, as it may spur the discussion forward.

Goldilocks is one of the potential curves on the table there. There's potential enthusiasm for recommending two curves: one strong, fast curve with ≈128-bit workfactor (quite likely Curve25519 in my opinion) and one super-strength curve, at least 192-bit workfactor (possible candidates include MS Research "NUMS" P384/P512, Curve41417, Ed448-Goldilocks, and E-521). The option of generating entirely new Brainpool-style random curves isn't off the table either, and some have been asking for that, but I'm really not sold: the software performance of random curves is absolutely dreadful, the implementation can be the kind of hairball we want to avoid, those asking seem to be asking because they're heavily committed to hardware with aged generic (RSA-targeted) hardware multipliers with anti-side-channel blinding that is no longer great and doesn't work right over special primes - and besides, if we wanted Brainpool, we could just use Brainpool. (Brainpool is indeed in this GnuPG release if you want it.)

If I was not performance-sensitive and wanted the highest level of security I could reasonably get from curves, maybe I'd choose E-521, which has impressive rigidity, being independently discovered and confirmed by multiple research teams, and good performance for its class due to being a Mersenne prime. But you do pay quite a bit of performance to go from the ≈224-bit to the ≈250-bit+ range, and it's not clear to me that's particularly meaningful in all cases. (Of course, maybe PGP is one of those cases, and performance isn't usually a big deal there unless it's really bad.)

Regarding SPHINCS, 41KB signatures are remarkable for what they are, but not practically ideal for OpenPGP, especially with the way the keyservers are now, but you know, I could maybe live with it. I could see it start to get ugly for keys with a lot of verifying counter-signatures on them, however.

Do remember OpenPGP doesn't bring everything to the table: for example, forward security. And MUAs have a reputation for awful UX regarding it - operator error is extraordinarily frequent. But it seems to at least be Pretty Good in practice. Thanks Werner & team!
The goal of the cartels is not terror or using terror to achieve any political or ideological goals. The goal of the cartels is profit in most cases and local political power in some others. They are criminal enterprises for sure and warlords as well in many cases, but they are not terrorists. Whether profit-motivated un-accountable and violent criminal syndicates are more or less harmful than fundamentalist terrorists, well, that's a different question.
As someone who commutes 3 miles each way 4 days a week on a Yuneec E-GO, I'm laughing at the article's "Unfortunately its 1000 watts will only get you up to 18mph". Either the writer hasn't actually ridden it, or they're an experienced downhill longboarder :)

Even on the E-GO's (larger) 90mm wheels, 12 MPH is quite enough on a lot of the uneven pavement I encounter.

FWIW, the E-GO is a great deal for $700, and the range is considerably more. Maybe if I had to replace it I'd consider Boosted's product.
He bought a top end tesla with a $70,000 down payment in bitcoin a few months after taking over. You really want to contend that he "probably pays taxes on that money, too."?
I'm more and more skeptical of historical narratives that portray the knowledge and practices of past peoples as a strict subset of our own knowledge. Along the same lines, we seem to constantly underestimate the peoples of the past (ex: the long-time assumption that the pyramid was built by slave labor[0]). We are absolutely more developed in some areas (sanitation, mechanization), but some things elude us.[1][2][3]

[0] http://news.discovery.com/history/ancient-egypt/pyramids-tom...
[1] http://en.wikipedia.org/wiki/Damascus_steel
[2] http://www.korean-arts.com/about_korean_celadon.htm
[3] http://en.wikipedia.org/wiki/Roman_concrete
It wasn't a protocol issue/backdoor. It was social engineering.
He proposes event based and scroll based interfaces. The Mac Pro example is hideous, but Apple's retina iMac page is quite beautiful (and lives somewhere between the two, not using gestures but giving the user the impression that no scrolling is happening) http://www.apple.com/imac-with-retina/
worst job I can imagine to do

Come on.
Oh very nice about the IFTTT trigger being able to save. I had seen that on the website but had forgotten about it... was on my todo list to look into adding this to IFTTT.

The feature wouldn't have to be saving per se... emailing would be fine too as long as the size limits on email attachments don't kick in. But good that there's IFTTT (at least for people with the foresight to set it up in advance).

Yes I have a 6+ and had already tried the sliding with no luck before posting.

Thanks for the clarifications.
Wil Shipley says grim outcome if protest ratings continue
Physically qualify I believe, but either really works. Everyone would just grumble about all the health visits they would have to do in September and October to be ready.
i would check out the talks by patio11 he has some good insights to monitization, optionally: fire ceo, build another product, quit, dont work for a place that doesnt have a business plan/monitization strategy, sell it to another company on flippa
I think both of them don't need to send any data to the mothership and can process this phrase on device.

For instance, in airplane mode with no network access iPhone response to 'Hey Siri' is 'Siri is not available. Connect to internet'
Build automated sales and marketing workflows on top of existing cloud apps
Show HN: Beluga - A nice way to make lists and share tasks on your iPhone
Then again, these rules exist largely to prevent scenes like this:

http://1.bp.blogspot.com/-Wdm_lyaf5XQ/UBiioQwzsCI/AAAAAAAAC2...
Sorry, We Have No Imagery Here: When Google Earth Goes Blind
Can no longer edit my own comment but just a correction: you can actually start watching it just a few seconds after it starts recording.
It doesn't matter if you have nothing to hide. Other people do. Many of those people represent you in various official capacities, and you don't want them being coerced. Maybe some of your friends and family members have something to hide.

Also, I find it very difficult to relate to the whole, "I have nothing to hide, so fuck all the other people who do," attitude that many people seem to have.
Wil Shipley explains why Delicious Library 3 doesn't have sync and ends with, "The simple truth is that at 3 1⁄2 stars we will run out of money in a year. At 4 1⁄2 stars we stay in business. That's the ominous reality that tiny shops like ours work under."
I don't know about Dylan's implementation, but (at present) Julia uses a non-moving, non-generational accurate GC with a shadow stack, which works but doesn't perform all that well. There is some work underway to make it generational (https://github.com/JuliaLang/julia/pull/8699). However, JSC (which uses LLVM for the FTL JIT) implements a moving generational GC with a Bartlett collector, which is not fully accurate (it is accurate for heap objects but uses a conservative stack scanner) but evidently yields good performance. See https://www.webkit.org/blog/3362/introducing-the-webkit-ftl-... for further details. I don't think either of these approaches need explicit compiler support.
A simpler solution might be the ability to tweak the maximum charge percentage like you can do with a laptop.
Do you have any advice for someone who wants to begin doing CPA advertising? Where would you begin?
I used that example as it was easy, but I could also have said: "we should be able to say: when the user is logged in and clicks on submit, then create a new apartment" (you'll have recognized airbnb...) My point being it could be much more complicated than turning button to red.

Most people try to solve the issue with AI. I think it's one of the reasons why we haven't solved that problem (making programming more approachable) yet. I'd argue the first step is to make that it's readable in plain english. If we have this, then we can start thinking about AI. Why don't you have a look at Bubble (bubble.is). That's our approach
Mountain views everywhere - the whole town is only a few miles from the mountains, similar to Boulder. Tons of parks, trails, mountain biking, etc. The city is very bike-friendly. Whitewater rafting is also close by on the Cache La Poudre River, which exits the mountains ~10 miles NW of the city. Public access boating available on Horsetooth Reservoir.
These cookies are pretty delicious!
Or you can just get a new set of bearings for $10 or so. If you're in the market for their product, you can probably afford it.
Wil also comments in the thread about Amazon strong-arming him, "Amazon will disable Delicious Library if I re-release my iOS viewer app right now. They have told me this explicitly. I don't think it'd help you any if I release an iOS viewer and then immediately am forced to pull it and Delicious Library from the stores."
Would it be possible to arc it over an air gap? I.e. allow the energy be dissipated over the resistance of the air? I have no idea whether the power numbers work out, and maybe you'd need to step up the voltage, which adds complexity. Just a thought..
This is a problem I have seen first hand. But this is not really as big a problem as it is made out to be. The real issue here is that it is hard to predict of the given impression is a bot impression or a genuine impression. As a consequence any CPM based dealing is difficult. Difficult only means falling CPMs. That is what I have observed.

The advertisers will not have to put in more efforts to measure conversions and accordingly bid for the traffic.
How is it more accurate? Are they not using javascript? Do they do less sampling for larger properties?
Do they coincide unfortunately, or are they actually kind of the _same thing_? I'm not sure.
In depth knowledge of the problem matters with an ideas list. ... When I was doing my PhD, I had lots of ideas, but limited knowledge of the subject (Logistics) and limited knowledge of what needs to be in a thesis. So my lists of ideas were child like. They had little value. I soon moved on. After I had done lots of reading about logistics and what people expect to find in a thesis my ideas changed. I had a list of ideas that were connected to knowledge of the problem. It was very easy to rank the ideas and work out what gets done next and throw out the rubbish. The list of ideas were not some random guess, but informed and clear. These days I try to ensure my list of ideas is based on indepth knowledge and if not, then the top item is "get some indepth knowledge". This tends to mean the other items in my list have no value a all.
CPA simply doesn't make sense for all ad campaigns. When Lexus buys ads on a financial news site it's for branding -- they want to get their logo in front of their target demographic. The ads aren't optimized for clicks or leads -- sometimes there isn't even a clear call to action.
Yes, but cost of living must be incredibly cheap, maybe close to zero. I mean, what are you going to do with the money? You already live on site (rent is paid for), you eat food that is prepared at the research facility, and you can't exactly go out to bars on Saturday and buy women expensive drinks.
If I might suggest an alternative strategy - use tech while being cognisant of its potential for tracking individual lives retrospectively down to a microscopic quotidian level, and oppose the misuse of tech to track populations en masse, by corporations or governments, it's not very hard and it doesn't mean becoming a hermit. As an example of how this device might be misused -

Amazon, get me all the queries from the leeber household for the last 25 years containing the word 'drugs' or 'taxes' - perhaps you are the ex-girlfriend or potential partner of someone at the NSA, perhaps you just annoyed someone with access or got in the way of a project they think is vital for their org.

Amazon, please commence recording all audio activity on the leeber household device, using this handy secret global warrant from the FISA court, you don't need to know why, just that I ticked the box saying it is necessary for an ongoing investigation.

As for Amazon the corporation, this device would put you very much in their hands when you want to know anything about the world, be it about media, products or news, in the same way that relying exclusively on google search does for google. I imagine their motivation is having a huge amount of customer data about trending devices/brands/news etc in order to sell things to you better. Perhaps you'd be happy in the warm, smothering embrace of Amazon corp, but I prefer to limit my exposure to corps to small doses, and ideally not to ones which want to sell me everything I ever wanted, along with a few things I didn't know I wanted.

As for NOT everyone is...trying to enslave all humanity etc, your arguments would have more force if you resisted wrestling with tinfoil men of your own invention and talked about what is government agencies and corps actually do in the real world, instead of credulously repeating their excuses for working towards global realtime surveillance of all communications.
Virtual Tour of the ISS with a GoPro
Exactly right. Publisher's don't want to take a hit because of a crummy landing page they have no control over.
Thanls, I'm going to listen to those talks. Firing the CEO is too late :/ and I'm sure he had a good business plan otherwise the investors wouldn't have given us money.
Stack is just Three.js/Angular/PHP (Laravel)

Tried about 3 other methods for doing 3D in the browser, including 2 other plugins and just CSS3D. Three.js ended up being the best way because it can render WebGL & Canvas depending on browser version.

Works on mobile too.

http://threejs.org/docs/
> By the way: If the FBI is so successful using traditional police tactics to infiltrate "cybercrime syndicates," why do they need a "front door" to our devices?

Just like the old-fashioned police work they did here which you mentioned, the FBI in the past has been able to use warrants to obtain unilateral access to safe deposit boxes, drill open personal safes stored at home, search through a person's desks, closets, bedrooms, etc. for particular items, and more.

That is the level of access FBI Director Comey is saying that they need (the ability to enforce warrants for the same types of searches required for "papers and effects") for the same reasons that the FBI has needed such access for investigations in the past.

He isn't asking for the ability to conduct passive or mass surveillance, or even the ability for FBI to unilaterally enforce a warrant. He's asking for the ability of the device manufacturer themselves to be able to comply with a warrant if one is offered up. The cryptographic technology necessary to do so already exists, in a way that would limit access to the manufacturer, so that's not the issue.
The demo page starts with 'auto-resize', but resizing the demo page does not resize the demo layout.

"Once you have rendered layout into a container, it will attach a listener to the window and will make sure it takes up all the width and height available from the container."

This should be done with css media queries, not in javascript. Why would you want a window resize listener when all this can be done with css much more efficiently and with more fine-grained control?

Then going to the 'grid', I was expecting the search to be live search of the fields, but I had to click the 'search' button to get it to update.

I'm using Chrome 39 beta, no errors are coming up in my console.

With other modern tools, I don't see where w2ui is really offering.
New Scans of the Voynich Manuscript
Gmail Notifier – Chrome Extension
If you're really interested in a job with IceCube, you can watch http://icecube.wisc.edu/jobs

We'll be looking for a couple more winter-overs in mid-January. The newest winter-overs landed at the South Pole less than 24 hours ago! You can follow their exploits at http://icecube.wisc.edu/news/current
Apple-owned IP address is crawling the web with Go
Yes but there is a reason they chose the name to use with this product.
Wandealust Weekly: The Best Las Vegas Travel Deals for 11/6 to 11/13
Now they just need a Paul Bettany voice pack.
How would you say it compares against the less expensive, faster, and longer range Evolve boards? http://www.evolveskateboards.com/
I also had a problem with this example from OP. It is generally a good idea to implement the minimum amount of functionality to satisfy the requirements. I have seen many complex systems fail because it was over-engineered with the idea that 'we might need this down the road'.

When requirements change, you almost always have to rewrite the code. If you don't have to rewrite the code, you still have to go back and read it to make sure it satisfies the requirements. Less code to deal with will make this process easier. There is no reason to over-engineer today for what might happen tomorrow.

Code for the here and now, and aggressively delete code whenever possible.
Facebook: Global Government Requests Report 2014
It would be nice if Amazon offered a version in beige.
I'm not worried about memory protection, there is HW support for that and it can be done.
I'm slightly more worried about making sure that separate containers can't access each other's disks (via symlinks/hardlinks or overflowing some FS structures).

And I'm worried about the privileged kernel/hypervisor parsing/interpreting data from the unprivileged container.
In that sense the situation is not much different from a server: if you can exploit a bug in the server you can run/perform actions with the server's privileges.
Same situation with the kernel.

I'd wait until there are some more design/architecture docs about what LXD is exactly to say more though.
I would like to read some feedback from city users. I'm from Chicago and it's fun to think about getting a boosted board but $1200 dollars is a high price for something that I never read about.
Tasman Layout Engine (Internet Explorer for the Mac)
That's a very reasonable approach actually.
Why Facebook forced you to download the standalone Messenger app
How do Boosted Boards compare to Evolve Boards?

http://evolveskateboardsusa.com/collections/carbon-series-el...

Boosted seems to be slightly cheaper, but Evolve boards have longer range and replaceable wheels for different terrains.
They changed the default subreddits a while back, and also have done work to make sure no particular theme (such as funny pictures) outweighs the others.
One of the great instances of this (made the rounds, google "xbox ghost dad"):

Well, when i was 4, my dad bought a trusty XBox. you know, the first, ruggedy, blocky one from 2001. we had tons and tons and tons of fun playing all kinds of games together - until he died, when i was just 6.

i couldnt touch that console for 10 years.

but once i did, i noticed something.

we used to play a racing game, Rally Sports Challenge. actually pretty awesome for the time it came.

and once i started meddling around... i found a GHOST.

literaly.

you know, when a time race happens, that the fastest lap so far gets recorded as a ghost driver? yep, you guessed it - his ghost still rolls around the track today.

and so i played and played, and played, untill i was almost able to beat the ghost. until one day i got ahead of it, i surpassed it, and...

i stopped right in front of the finish line, just to ensure i wouldnt delete it.
Bliss.
tracking conversions isn't easy given cookie churn. lots of advertisers end up paying in a last-view attribution model, so that drives a lot of dirt cheap ad purchases. and regardless of whether most advertising is sold on a cpa model, much of it is evaluated on a cpa model. the structure of ad agencies seems to be that they run $x worth of advertising and take a fraction, so they're heavily incented (and hence incent the dsps) to spend all the money. nonetheless, the campaign is evaluated to determine next quarter's spending on a cpa basis.

further, it's not clear what an action would be for a brand campaign

finally, you can demonstrate, eg by geo-fencing, that display ads work, even if many or most of them don't lead to attributable conversions
Please add [2005] to the title.
No RSS feed... really?
Legalization with heavy regulation honestly seems like the best way forward at this point, to combat both the politico-economic (drug cartels) and health (addiction treatment) consequences of drugs that will always exist whether legal or not. From the perspective of someone who is from Mexico, I can attest that at least the general consensus is that the cartels derive the majority of their power from their interactions with the US market: most of their money from selling drugs north of the border, most of their strength from buying weapons from US sellers. They have some more local sources of income (extortion, protection rackets, kidnapping, theft) but in cash terms all of those pale compared with the drug business. As for weapons? They definitely don't have any local manufacturing capabilities and I doubt they have any suppliers not from the U.S. at the moment.

At this point, legalization won't be the full solution for the problems with the Mexican cartels, but it's probably the single best thing that can be done to combat the issue. More effective than armed intervention, faster and more reliable than any current attempts to boost the Mexican rural economy (lack of jobs and very low earnings from normal crops is part of what allows drug cartels to recruit enforcers easily and convince farmers to grow pot instead of wheat) and definitely easier to implement than any anti-corruption measure targeting the Mexican institutions (which have corruption as a very endemic historical problem and rooted in ways that most anglo-saxon countries cannot fully imagine).

Edit: That said, this is an interesting counterpoint: http://www.nytimes.com/2013/05/31/opinion/global/mexicos-dea... by a very respected subject expert (Dr. Buscaglia), arguing that larger and wealthier criminal organizations than the Mexican cartels exist in other countries, and that the main reason for the cartel-related violence in Mexico and not say in Russia, China or the U.S. is the relative weakness of the state and the job-generating economy.
Perhaps, but that kind of joke gets made all the time on the Internet without bringing down black helicopters.
My understanding is that only few representatives get close to state secrets, and they get them all from the executive branch (eg, the Intelligence Committee is relying on whatever the country's intelligence services deigns to tell them). Don't see why it should be different with randomly-selected lawmakers.
It's needed less frequently. Since the board is powered, you won't notice a bit of extra drag from dirty bearings.
this is perfect

i've always wanted all the jokes about obama listening to me masturbating to become technically possible
Last time I looked into it you don't pay for room, board, food, cold weather gear, or the flight down/back. So in reality your take home pay and savings are fairly high.
> and you can't exactly go out to bars on Saturday and buy women expensive drinks.

Alcoholism is a problem at Antartica.

http://www.funraniumlabs.com/2013/06/alcoholism-in-antarctic...