skysight-inc/HackerNews huggingface dataset:
But more amazing than this is their similarity

They're all somewhat MIPS-like, and that's mostly due to their heritage and the relative ease of creating them. What's more, they all seem to have similar (not so great) performance characteristics. Currently the only "RISC" ISA that has good performance/efficiency characteristics is the ARM, and that one has some very un-MIPS-like predicated instructions, combined shifts, and more complex addressing modes (including post-inc/decrement.)

Meanwhile, what AMD and Intel have done with x86 both in terms of performance and efficiency has been quite amazing, so I think what would be interesting to see is an OpenCISC/x86 that draws some inspiration from them, or at least something more ambitious and imaginative than yet-another-MIPS-clone. Otherwise, seeing all these projects attempting to revive the RISC fad, which is long over, feels rather misguided.
Government open standards – the curious case of Microsoft and the minister
Let's hope their search correction mechanisms are better than this. On second thought, never mind.
I get the desire for DIY but why not just adopt an existing low cost hardware device and hack at it until it is extremely well documented?

Commercial hardware always becomes dirt cheap compared to small production custom stuff.

This month for the holidays there are $10 arm based smartphones that are pretty darn powerful (dual core 1.2ghz). No DIY project could ever match that.
That's a nice summary of things I didn't have time to watch and should probably go back to at some point.

As for some feedback – I'd rather see the title un-truncated, or at least see a tooltip with a full title on hover. It's a problem because of all the sequels having similar titles.

It would also be nice if thumbnails were of bigger size on bigger screens.
From the standpoint of someone with root access to a
dedi with OpenVZ vms, finding hidden services that are
hosted by customers is a matter of looking for files
named private_key anywhere under the /vz folder.

[...]

2. Cross your fingers and pray really, really hard that
the money trail is correctly obscured.

Hetzner is a popular German hoster and as far as I know payment requires either a valid credit card or a German bank account. How is it possible to obscure the money trail at all?
Wow, I just read that essay you wrote and it was damn good. This is the kind of stuff I wish made HP.

Thanks so much for taking the time to write this.
Good, teach a man to fish... :) (Sorry if I was rude!)
> given the circumstances we believe that taking the Django project's servers offline to investigate was the correct response

But that's how you get DOSed with Photoshop and bullshit. There must be a better policy than disappearing for 2 hours while you investigate.
Can you use a prepaid credit card?
> Downside: if you want to write a consumer, you're stuck in .NET land.

Powershell has access to the whole .NET features, meaning you can also expose DLL and COM objects into your Powershell session.
Indeed. Cygwin is fantastic, but one must always remember: once you go there, you can never go back. If you mix native Windows binaries with ones from Cygwin, all kinds of weird things can happen. I mostly work with native Windows binaries from ezwinports nowadays, together with ConEmu, Eclipse and a native Emacs; I can use normal Windows paths and things Just Work. Granted, it's more cumbersome to set this up than just installing Cygwin, but people are working on that (see for instance: MSYS2 at http://msys2.github.io/)
What I don't fully understand is why it's necessary for an adversary to have access to all nodes on the complete path from his DDoS machine to the target IP he's trying to unmask.

Wouldn't it only be necessary that I have shared knowledge of what packet I'm sending between the machine that I'm sending my DDoS from and my relay which I'm hoping is the last one that my target is connecting to? Or perhaps I don't understand Tor well enough.
> http://moronlab.blogspot.co.uk/2010/01/urbit-functional-prog...

My brain did not enjoy any wall of text that much since I read the bitcoin whitepaper. Now I want to learn more and be up to date.
Linux Distributions and Open Source Projects
A Sybil attack is any attack that involves attacking by brute forcing the number of identities. The identity need not be based on cryptographic systems -- it could simply be the number of IP addresses.
Comments so far focused on bias in judging capability based on past startup results. I'd really wish see the other angle explored: "Is someone who's used to being boss of the company going to handle taking orders?"

When reviewing resumes do you expect the founder to just want to recover for a year before founding another startup?
It seems you can get them anonymously:

https://www.reddit.com/r/Frugal/comments/1zjdob/you_can_get_...
> First off, because you simply don't have that ability in SHA-2 or SHA-3. If you're designing a new system, don't use MD5 or SHA-1;

Then don't mention MD5 and SHA1 in the first place. The sooner they leave everyone's mind as valid alternatives the better.

> For binary formats like images and PDFs, it's easy to put a large amount of unrendered data in the file format that isn't visible in a viewer

MD5 collisions have gotten much shorter in the past years [1].

> For program code, having a bunch of arbitrary data in the middle of the function would look extremely suspicious. (Obviously you shouldn't design the metadata format of your functions to permit enough arbitrary data,

And you trust the designers of these formats to know this "obvious" fact? You reference code normalization, but there was talk in this thread about keys that are to be associated with the functions to allow updates (and thus included in the hash) and I think it is perfectly valid to include graphics in the documentation of a function.

> My argument is just that even the "broken" hashes really aren't very broken, so if you're using the non-broken ones, you should basically assume they're perfectly secure.

My point is that this "structured collision resistance" is used far too often as a handwave argument why their specific protocol can continue to use a broken hash. (Remember how CAs said the same things about X.509 certificates before Appelbaum, Molnar et al. [2] presented an actual proof-of-concept?) Software developers already have difficulties to distinguish pre-image resistance from collision resistance. Giving them yet another argument to shoot themselves in the foot with is not a good idea.

[1] http://www.win.tue.nl/hashclash/SingleBlock/ and http://marc-stevens.nl/research/md5-1block-collision/

[2] http://www.win.tue.nl/hashclash/rogue-ca/
From their payments page [1]:

The following credit cards are accepted through this
payment facility: Visa, Master, Diners and Amex.

I don't know if any of those companies offers prepaid credit cards.

[1] http://www.hetzner.co.za/helpcentre/index.php/articles/conte...
So leaving potentially compromised packages online while investigating would have been more appropriate? I can see where you're coming from, but what would you have recommended instead?

If this was an actual compromise, and they had of remained online for hours while investigating, there'd be lynch mobs out to get them.
I too tried using Autolayout when developing my 3rd party iOS Keyboard. It took a good 2-3 seconds for my keyboard to load on an iPhone 4s when using Autolayout. Autolayout doesn't seem to be an ideal solution for views with many elements.
Tor works by obfuscating traffic, jumping through 3 or more nodes before exiting the tor network. If an attacker controls those three nodes it is possible for them to determine the source.
Originally Windows had the concept of personalities and three were available Win32, OS/2 and POSIX.

OS/2 went away, as soon as, OS/2 stopped being relevant.

POSIX was there mostly to get the foot into the door of US government, due to its requirements in POSIX compatibility.

I guess when this stopped being required and Win32 was accepted as viable platform, there wasn't a business case to keep on spending resources in POSIX support.

After all, Windows is not alone in lack of full POSIX support when one looks to embedded and mainframe OS as well.
You're not going to know the contents of the packet unless you also control the machine in the previous hop.
Why can't apps modify the original HTTP error message, for example using "403 Not Enough Credit" instead of "403 Forbidden", in their first use case?
Sure but Sybil generally refers to obscuring identity as opposed to actually actively breaking into systems... This seems like a much more active attack if it involves forged packets.
They already basically have all of the above, as a working tech demo. They actually had it like a year ago or more, but bits are missing or in progress still.
Right. Missed that one, my bad.

Nevertheless, that was not the best presentation on some issue and it didn't help to explain that issue any better.
What you type is what you see (on any device)
I think this is about debit cards, probably not accepted by Hetzner.
I know Visa and Amex do. Recent darkweb busts have displayed a level of arrogance that is somewhat disturbing.
There seems to be a difference between typing and swiping. If I peck it out one character at a time, no problem.
What if there were two reasons to forbid the request?
And even if its only the money flow graph...
Regardless of source graph attacks are one of the oldest LEO techniques, even if they don't fit the modern definition...
These guys are ridiculously misguided.

UEFI, and not coreboot which is used in all of the arm chromebooks. A server chip in a laptop at 12W.

Yawn. Great idea but I'm not holding my breath.
The next generation of DIYBio tools are coming
yuck, a pulp sculpture
just realized I don't want to know how modern food is made
As one of the mods on the Pi forum, I can categorically say - if you had a post deleted and your username banned, it was down to your behaviour, NOT criticism.

We simply do not delete posts or accounts unless the poster is overly rude or clearly trolling. The forum is frequented by a lot of children, so it is essential that things are kept polite.

This is reflected in the number of people banned from the forum in the last 3 years which is less than 50 (excluding spammers), and the excellent reports back we get from people of the high quality of forum etiquette and postings.

So, I would have to take issue with your comments on the forum. If you were banned, you brought in on yourself.

Can I also suggest that if your daughters school has some Pi's that are not being used, then the school send a teacher to a Picademy session - they are two day courses, free, held at the Raspberry Pi offices, specifically for teachers to give them ideas on how to use Pi's in the classroom. Lack of use usually means lack of knowledge of what is possible, rather than lack of ability in the device itself.
"Despite messages between ships being encrypted, the founders state that they've purposely designed the network to make it as easy as possible for governments to regulate and control. It's not entirely clear why this is supposed to be a good thing."
Interview with Stefan Karpinski on Julia (Oredev 2014)
CSS tips and tricks #16 – CSS Atribute selector demistified
When you went back on the job market, did you have something to show off for your failed startup? I know that all hiring managers are not completely rational, but IMHO if you can say: "I worked at X, we were building X.com, and I implemented the core mechanisms to do Y, for example, you can create an account and try this feature. Well, do you know how the system know Z? It requires some machine learning that I am gonna explain you...", I would expect the hiring manager to be at least curious, and impressed if that feature is impressive - that's how I would react, but I am not in a position of hiring anybody.

On the other hand, if the website is taken down and you cannot show what you did, your position would be much weaker.
Oh, wow. I don't run windows anymore, but that's quite an amazing little tool. My work mates who use windows are going to be stoked with this, thanks. Currently they're all use cmder, but some struggle with the impedance mismatch of a GNU/NT system like that. This with native binaries will be an amazing setup!
It's probably the second time that I come across Urbit and found it attention worthy, but... how hard would it be to explain at least some of the concepts in plain English and with some nice intuitive drawings/schemas on the side, really?

I mean, this http://doc.urbit.org/doc/hoon/tut/1/ is supposed to be a "tutorial" but it's definitely not what anyone else would call a "tutorial". It's more like a "philosophical introduction" to a PhD paper, which would be ok if labeled as such. A tutorial should be about "how do I do X using Y, without bothering to really understand Y" because this is what a tutorial is about, a "mostly wrong" "mental shortcut" that you take in order to gain some kind of "feel for how something works" before actually delving deeper and reading up on the theory.
I don't recall which case this was in, but the court in one of the early API cases noted that allowing copyright of APIs would give the copyright owner control over the use of their software that is almost the same as the control a patent gives a patentee over the use of their invention--except for a much much longer term, and without any requirement of novelty or non-obviousness.

Copyright is supposed to protect just the expression of an idea, not the underlying idea itself. With API copyrights, there isn't room left for others to express the same idea.
Due to DRM issues, HDMI input on any device is rare. You can buy HDMI input chips that convert HDMI to CSI-2 so they can be plugged in to a camera socket - I've got a prototype that works on a Raspberry Pi. But it won't work for encrypted HDMI in, so you are very limited in what you can take in. And enabling DCHP is a very expensive proposition.
It's odly been hard to get reddit interested in the app.
The combination of DataFrames and multi-threading will be really amazing, when we get there. I personally use it quite regularly for production work, over pandas - and as John says above, with Julia 0.4, DataFrames will be much better.

I think that being not faster than Pandas is pretty good, since it is written in C and heavily optimized.
Most Thinkpad T/X/W models (well, ones that haven't been turned into cheap Macbook clones by Lenovo) do this. Same for older Dell Latitudes and IIRC some HPs.

The machine I'm writing from (a Thinkpad X220) has had its' screen changed to an IPS, the HDD replaced with an SSD, they keyboard replaced to one with a different layout (GB->US), the RAM increased to 16G, the battery replaced to a 9-cell, a 3G modem added and 2x USB3.0 ports added via a ExpressCard module. All done based on a service manual from Lenovo.

High-end and professional laptops used to be very servicable and upgradeable, until the recent trend of form-over-function became popular (I'm looking at you, Macbooks and Intel Ultrabooks).
same. very interesting article, and interesting to hear about the distribution between income from adds and people paying to remove adds. But I for one would be also interested to get a rough estimation of what finding a nice little niche space like this could bring you in terms of revenue
Just a small note... when I changed my bootloader from Chameleon (BIOS) to Clover (EFI), I stopped encountering upgrade issues. Clover lets you do "native" OS updates without resorting to messing around with the bootloader. I upgraded to each 10.9.x release and have been on the public yosemite betas since beta 1, all without touching any boot flags or kexts or anything like that. iMessage and the app store have continued to function too.
Why not just contribute to Yi[0]? Yi has seen a lot of development activity lately, and I'm sure your contributions would be welcome.

0: https://github.com/yi-editor/yi
Long shadow with JavaScript
You might be able to use statistics instead. If you flood Tor with requests for a particular service, that service's address should become more common at the relays you control.
Hi, author here.

> Bit confused on one point -- so SoundCloud revised their ToS to deny downloads, but they kept the download URL in the API response? Amazing that after two different illegal take-downs it just kept getting back on top of the listings.

I think they eat their own dogfood here. As far as I can tell, they have no special privileges for their owned and operated clients. If you for example look into the network panel when using the web client, you'll see that they directly access `api.soundcloud.com`.

> Random Android question: When the app was taken down, I guess you lose app storing listing and IAP. But existing users would still be able to run it, and the developer would still get ad impressions and ad revenue?

Yes indeed. I'm surprised how much of a long tail the app has. Even though it's now been almost two months since I've taken down the app and SoundCloud has also revoked the API key, I'm still getting a sizeable amount of ad impressions in a completely dysfunctional app. :/

> I don't quite understand SoundCloud's rationale... Why is it OK for me to do an HTTP GET from one user agent but not another? How is that something they have legal standing to dictate?

It's their platform, they can do whatever they want. As operator of a platform like this, it's natural wanting to control the experience. I think it's remarkable how open SoundCloud remained over the years whereby most other platforms leverage their APIs as a way to find initial adoption and then quickly close them down as soon as they reached a certain point.

> Hartig seems perfectly happy to let his obviously well liked software be stomped into oblivion? SoundCloud could perfectly well provide the equivalent functionality, but instead they snuff out an honest developer?

I'm certainly not happy about this, quite the contrary. But I see and understand their rationale, learned a lot along the way and SoundCloud has always treated me fair.

> How does SoundCloud get Google to nuke an app for properly using this interface?

I'm quite interested in the exact process myself. I presume that this all works under the ominous "copyright" umbrella.
Don't get me wrong, they definitely handled this in an appropriate manner. "Better safe than sorry", but I just wonder about these sorts of situations. It reminds me of the ridiculous "SWATting" craze; wasting time and resources on something that turns out to be a false alarm. Good way to stir up a bunch of hysteria without any heavy lifting.
> encourages breaking large systems into small services

That's as much of a curse as it is a blessing. To some extent, small services are handy for dev/ops type folks, as they can quickly see which specific part of an application is misbehaving with memory or cpu or diskspace, so they like it.

But small services means that you lock down the interface between parts of the system by using another language to specify the communications protocol (e.g. protobuf, json, ...) and 2 different codebases have to understand it. And even if you manage to get the code to change, now you have the problem of migrating the running program.

In other words, the interface is now set in stone. Nobody will ever touch it again. This is exactly what you do not want to happen. Small services are the enemy of large, flexible programs.

Contrast this to Java/C# (and, somewhat less perfectly, C++) and their refactoring tools. What a difference. Changing an interface is something that is mainly done by computer code, not by a programmer, and all parts are modified and all problems identified.

There are points where this is not a problem, like a file system interface, or a socket interface, that sort of thing (and even there you may change your mind ...). Places where flexibility is not needed or wanted (I would argue, looking at linux file systems, that the POSIX API is not, in fact, a good API for quite a few file systems, but looking at the kernel I can see why this is not going to change. Of course, half the distributed file systems are user space libraries, partly for this reason). This is exactly the sort of thing C programmers deal with.
Ask HN: Failed startups – wasted talent?
Sorry for bringing up a somewhat heretical point here but reading all the comments here https://news.ycombinator.com/item?id=8578514 made me wonder - all this talent is being "wasted" on failed startups instead of using this workforce on creating real value for society... Is it inevitable?
RoarEngine used to do it in 2011 - but seems like dead now.

What do you use for your apps?

What would have ZimRide used to find friend of friends across social networks?
Noizio – Your Subtle Companion! FREE App on Mac App Store
7k downloads per day... At one point 1/3 of revenue from the in-app purchase to remove ads.
ED?
Failed, job, startup -success...gave up company because of co- founder,started again.. startup- success...amazing journey first 3 years...next 4 years hell with business partner.

I have failed in the year 2011 after 7 long years at my bootstrapped company. My business partner didn't want me around, I was pretty emotional after so many years, I felt it's time to accept fate n move forward.

Broke up with my gf, I quit my company(gave my 67% to partner if he split debt). So I pretty much walked out with million dollars debt and nothing on hand, life was tough.

I started again,my small business was ok, my burn rate was low,I was ramen profitable ...burning $2000 per month but all customers money, hired employees fired lazy ones.

I just couldn't cope with debt sold my house, my car, my dads house , my aunts house, fortunately n unfortunately I am from india, here people threaten with dire consequences and people give all their life earnings for loved ones. So all the assests cleared about 500k usd dollars.

I earned 200k usd doing consulting, mobile apps, web apps, sentiment analysis ,paid 60k usd salaries. Now I have another 200,000 usd to clear on track to clear it but ....something beautiful happened , I married my gf after 3 years of break, my ex-business partner wants to do business with me again since he saw how I came out of rat hole,...

.I just have one thing to say "don't give up and hang in there with logic and common sense"

I feel I will succeed financially in 2015 , Our product is coming beautifully...then perhaps I can write a book...till then I have midnight oil to burn..
Huge problem or not, the Congressional response was—in retrospect—an unmitigated disaster. The actions recently taken to reduce the disparity between crack and coke sentencing guidelines helps, but does not solve the problem.
Unfortunately having a code formatter does not make up for basic deficiencies in the language itself when it comes to datatypes. Basic example :

http://stackoverflow.com/questions/19946992/sorting-a-map-of...

(shortest way to sort an array of a custom datatype in go is around 50 lines of code, and requires you to write a custom sorting class)
Spinning Wing (Magnus Effect) Airliner and why it was never produced?
Sorry, I can't link you to a source, but they gave a talk at DroidCon UK where they mentioned that 65% is native mobile listening.
If in fact the sentence I highlighted is true, it is very much heavy-handedness on the part of Apple. From the context, it is unlikely to be false, though possible.