skysight-inc/HackerNews huggingface dataset:
yeah, the engineers didn't push for the right solution. That would have been apparent had, say, you read the quote. That I put in the comment. So you didn't even have to read the article.

as for your fear-spreading propaganda, in the real world, we've had a series of nuclear accidents that mostly haven't been much worse because of luck. Idiots think luck is a viable safety strategy. The rest of us -- post 3 mile island, post japan -- think the safety record is, charitably, checkered.
This is really cool. Is there a way to filter by artists that offer "Purchase Full Copyright" as an add-on?
Last I knew it was strongly suspected that Skype could look at your messages. imessage doesn't pass the mud puddle test indicating apple can look at your messages. Facetime should probably considered suspect but I don't know of any articles that demonstrate how the key exchange is handled. BlackBerry also modified their messaging app to be able to give info to LE. Telegram doesn't have open source server code and uses home rolled crypto. Was telegram even properly audited?

I would also recommend categories for what metadata is exposed; if messages are encrypted at rest on your device; cross platform ubiquity.

You should include bitmessage, and i2p-bote.

I am glad that this is only the first step but I do think that you shouldn't have done it alphabetically but rather by score and usability.
Oh right, how many gen 4 reactors are built? According to wiki, none.

Ooh, I figured out why they're safe!
Haha sorry, I really messed that one up.

I meant this: There's no knowledge in the machines. There is immense knowledge to be gained in a trip, I had just realized how little a machine could provide me while tripping.
ASK HN: I made up a word game back in high school. What do you think of it?
I made up a word game in high school that became popular with my friends - tell me what you think. Basically, you solve for one word. The clues are words that have at least one letter from the word, in order, that have something to do with the word.

As an example, this:

---

storm

weather

drip

falling

---

would be "rain".

---

Another one:

---

advanced

expensive

portable

technology

polished

---

This one is considerably harder:

---

fur

hibernate

claws

latin

brown

omnivores

---
Yes, correct. Poorly worded on my part.
At this point systemd has grown way beyond the mission parameters of upstart or similar.
For anyone looking for an Open Source alternative:

https://owncloud.org
Fiction: "Milk, Sulphate, and Albie Starvation" deals with someone who realises he is lactose intolerant, and who suggests giving up milk to a bunch of people. The Milk Marketing Board see the slump in sales and decide to act - by sending an assassin.

http://www.amazon.co.uk/gp/aw/d/094779591X/

I really liked it, but I read it many years ago.
You're right, I didn't choose my words well. I should have dropped "career" from the statement and just left "pursuit," something you do in a large part for its own sake. And maybe I should say "It's not brilliance that defines a good X," because clearly you can be a subpar artist/programmer/teacher/etc. and get by on some combination of luck, connections, politics, organizational apathy, and so on, but if you really want to be the best damn X you can be, it's going to involve a lot of elbow grease no matter what that X is.
> and had made it into a good number of other distros before systemd took over.

Including Red Hat, which is where systemd was developed!
Yeah my read from this article was a lot different. Seemed to imply that there was a nasty break up and they both sent nasty messages to each other afterwards. Also implied that she was only given the cofounder role because they were together in the first place.

Edit: Was referencing this article from the comments - http://www.forbes.com/sites/stevenbertoni/2014/11/04/exclusi...
A little old article, however still is useful. Great post.
For the record, we aren't endorsing CryptoCat or any of the other tools that got 7/7: ChatSecure, TextSecure, Signal/RedPhone, SilentText, SilentPhone, or the ones that are close like Pidgin+OTR, Subrosa, Surespot, Telegram, Threema or iMessage.

Getting those scores is a sign that those projects are taking the right approach. Lots of codebases have horrific bugs, including OpenSSL, older versions of the SSL and TLS protocol itself. We believe that focusing the community on the task of moving the best projects forward is more constructive than

Testing the tools that are scoring highest for usability, and doing deeper examinations of their designs and codebases, is going to be a future component of this campaign.
A blog post on the protocol built by Telegram: http://unhandledexpression.com/2013/12/17/telegram-stand-bac...

sigh
Does anyone know where to find the source code?
Upvote for you, I meant no real knowledge in the machines, not the drugs. That trip alone changed my life, and opened me up to many new things.

Just badly worded on my part. I think computers are a source of a ton of information, but no knowledge. I realized then that real knowledge comes from physical experience and thought, and never from studying.
Thats interesting, any links where I can find out more of Alan Kays ideas on this subject?
I got the impression that, for those emoji with multiple people (for example holding hands) there will be variations with the 5 skin color modifiers - that's 25 (if order matters) new characters to represent the permutations of one emotion.

We should go back to ":)"
Except that you don't really need to buy expensive and probably-hard-to-get-by stuff to turn the book with code into something useful (or munition, in the US government's eyes) whereas with nuclear weapons you somehow need to get a radioactive warhead or something.
>The Emojipedia itself is full of strange cultural assumptions.

You were not kidding. First sentence encountered on the site is:
"Emoji is the type of emoticon used on iPhone, iPad, Android, Mac OS X and Windows."
Easy to say for us straight, white men.

We've all been in situations that are uncomfortable, that's not news. But imagine a time when you suddenly realized you were the only white person in the room, or the only man in the room. That feeling of, "wait... am I not supposed to be here?"

I agree that we ought not to even notice, and I especially agree that we (all humans) shouldn't care. But in real life people do notice, and it's hard not to after someone points it out to you :/
This sounds like atypical behaviour. One option is to try resetting Firefox, which gives you a new profile while keeping your history, bookmarks, etc: https://support.mozilla.org/en-US/kb/reset-firefox-easily-fi.... It can fix a lot of weird problems.

If that still doesn't help, I'd be interested to see what about:memory says. Instructions are at the top of
https://developer.mozilla.org/en-US/docs/Mozilla/Performance.... Please file a bug in Bugzilla or email me. Thanks.
Haha, yes! Now we're cookin'! The "simple, but naive way" you describe above is pretty much the way boot does things. I'd say you could look at the boot cljs task to see this but setting up the environment for the CLJS compiler is pretty tricky so the code there isn't as clear and elegant as I'd like.

In boot tasks don't fish around in the filesystem to find things. Not for input nor output. Tasks obtain the list of files they can access via functions: boot.core/src-files, boot.core/tgt-files, et al. These functions return immutable sets of java.io.File objects. However, these Files are usually temp files managed by boot.

Boot does things like symlinking (actually we use hard links to get structural sharing, and the files are owned by boot so we don't have cross-filesystem issues to worry about), and we shuffle around with classpath directories and pods.

So stay tuned for the write-up of the filesystem stuff, I think it might be right up your alley!
Show HN: Protoplug 1.2, Create audio plugins on-the-fly with LuaJIT
So this makes Hackernews and this doesnt?
http://yro.slashdot.org/story/14/11/04/1339220/online-paymen...
WTF? When a character is rendered onto a bitmap it is either there or not. Where the heck does colour come from? (Aside from AA, Unicode doesn't define that anyway.) Why on earth is Unicode putting a picture into its encoding?
Hence the ellipsis ;)
Control over data profiles is about power, not privacy
Woe be the tortured genius.
So, when is necesary to let the garbage without clean it? For what is usefull?
Writing software is not a contest, period :) It may be for some, it may be for you, but you don't get to sign up other people for it without their consent.
My wife will be surprised to hear that she is hip.
But when will we have an option to change colour of suit in the MAN IN BUSINESS SUIT LEVITATING character?
I had all sorts of sync problems with OneDrive so I canned it. I now keep a central SVN repository with all my stuff in it.

I use svn because TortoiseSVN tooling allows diff/merge of documents, it is centralised so there is a single source of truth and it works over WevDAV/http so i can access it on my mobile device if need be (I avoid this where possible and just use it as a tether).
My last job hunt, I ended up talking to an awful lot of people who thought a good use of my time would be building data pipelines to some Hadoop atrocity.

What would you rather be doing with your higher education credentials? What is the hiring process for doing that?
*"but perhaps it is at least time to reevaluate whether we still deserve the back-patting reputation we so often award ourselves as a land that values second chances and mobility for all. That lowest rung on America’s socioeconomic ladder is looking awfully sticky these days."

When have Americans ever had such a reputation, even amongst ourselves? No, we're the land that inspired Hawthorne to write _The Scarlett Letter_, the land initially settled by stuck-up, nosy religious prigs because England had had enough of their type. It could be argued that America is a land of opportunity, of which you get one, and after that it transforms to a vengeful and vindictive lot who will make sure your transgressions aren't soon forgotten.

The U. S. has a lot of things going for it. Tolerance of mistakes among the lower classes is not one of them.
Benefits of using Email Templates
Things like the incident discussed at the top interest me, because the reaction is always directed at the "lazy" person for not working hard enough and taking advantage, but never at the organization for apparently being incapable of knowing what the hell its employees are up to.
>In July a former Tinder executive—and former Mateen girlfriend—named Whitney Wolfe went public with a salacious sexual harassment lawsuit that generated awful press and the CMO’s quick suspension.

it is simple - don't mix relationships and work. Reminds about that GitHub story too. And about a high-power couple and several low-power couples/relatives we have here across our organization too.
In other words, social skills. Maybe we can just add that to the curriculum? If a gifted child can attend to social cues and learn some beneficial behaviors (and they surely can), then the outcome could be much different?
Bison and Flex work fine - do they count as 'parser generators'?
Nice BLAKE2 article from HN in March, 2014

https://leastauthority.com/blog/BLAKE2-harder-better-faster-...
Why do I need to zero an image array if I am about render something into it? You spend time setting each byte to zero.
Detailed Report on Intel Subsidiary's Unauthorized Encryption Exports [pdf]
Am I the only one who keeps my Bluetooth and Wi-Fi turned off unless I am specifically using them? I do this both for security/privacy and battery reasons.
Reading that document a few years ago lead to an epiphany for me in realizing that there may actually be value in some of the BSing you're forced to do in school. I think human nature leads people to seek deeper meaning and explanations, and the BS assignments force you to create convincing rationalizations that satiate that need. This is particularly true when you're trying to justify spending a lot of money on more abstract things like, say, a logo redesign. From what I remember, Pepsi paid the firm that put together that presentation about a million dollars for that logo. Granted, I think it's a good logo and certainly an improvement on the old, but I don't think that the artist(s) actually looked to Da Vinci's Mona Lisa or the expanding rate of the universe for influence. That's just the BS rationalization that was added later to help them close the deal.
It's being actively worked on. https://wiki.mozilla.org/Firefox/win64 seems to be an up-to-date planning document.
> Just be a person.

https://en.wikipedia.org/wiki/Color_blindness_%28race%29_in_...

Also you just argued she has not been a person thus far and that her problems were her fault. Congrats on that.
On a completely unrelated note, is M.S. work in the CS world really: "fully supervised research work done in total peonage with little to no original input"?

For us, an M.S. thesis was supposed to be largely independent, publishable work. Is it that different in different fields?

At least in the geosciences, M.S. research is basically your adviser saying "Here's an idea/interesting problem that I haven't thought much about but looks promising. Have at it."

You do your M.S., publish, switch schools and start a Ph.D. (Or go into industry... An M.S. is a very common working degree in geology.)

A Ph.D. is "Come up with three different, relevant, original ideas that work* and see them through". (*Obviously, most don't work, so it's largely an exercise it trying different things until something does.)

I know we have a different academic culture than CS (and a wildly different industry culture), but is it really that different at the M.S. level?
The Meteoric Acceleration in Series A Valuations
You don't sell the steak, you sell the sizzle.
''"A new project will be setup at github.com/lxc/lxd."''

( source: http://osdir.com/ml/general/2014-11/msg06783.html )
when all you need is key-value memory caching, redis isn't needed.

Balderdash. memcached is actively hostile to modern infrastructure and it's not being actively developed except for routine maintenance.

The first time someone stores an entire data structure in a memcache key is the moment you've lost. Playing "read blob, deserialize, update, serialize, write blob" is just dumb when you can avoid it.

Other moments of great failure with memcached: needing to implement client-side or proxy-based replication, having the memcached process refuse to cache more things because a slabs become broken, the first time your developers don't understand memcached LRU is per-size category and not global, ....

Just Say No to Memcached.
That sounds like a good start - but I still think the way you're presenting this data is somewhat misleading. I agree that many codebases have horrific bugs, and ultimately exploits will eventually come to light in existing applications.. However instead of listing many different available applications, why not just list what works for "right now"?

For instance: "Encrypted so the provider can’t read it?" on Skype's messaging just isn't true. If a subpoena was issued to Microsoft for conversation data, it'd be available.

I think it'd be better to stand up what does things right, and for everything else say why you're not listing them as effective. Approach is all well and good, but to an anonymous journalist/source being pursued a groups - approach over execution could be the difference between freedom and imprisonment (or worse).
They are completely unrelated products, except for branding.

Yeah, I know. Sigh.
Indeed. I dislike the narrative that diversity is somehow desirable because it results in [better products|more productivity|better team cohesion], among many other cited reasons.

These may be true, but it misses the point: personal dignity is a worthwhile goal in and of itself.

I get that spinning it as a "this is scientifically better and has capitalistic/rationalistic superior outcomes" may be necessary to appeal to the self-described rationalists in our industry for whom "because people feel like shit in this environment" doesn't even register. But it does feel wrong.
Forth! (I haven't read the paper.)
It wasn't clear to us whether the NSA intercepts Skype by breaking the crypto, or by compelling injection of false public keys in order to perform a man in the middle attack. In the latter case it's the third checkmark (lack of ability to verify keys) that's their users' undoing. We're talking to Microsoft about that at the moment, and may revise that entry.

There's a weird case around iMessage and any tool that is provided by an OS vendor. I think we need to add a note about this, but in those cases that company could inject malware or a backdoor either in the messaging system or somewhere else in the OS. Since we're trying to tackle one hard problem at a time (secure messaging but not secure operating systems and software distribution) there should be an extra caveat about offerings from OS vendors.

The only tool that gives strong metadata protection right now is Pond, and we aren't listing unusable tools that aren't out of beta yet. We considered but haven't yet included bitmessage for the same reason.
> And by the way, except for two elections, voter turnout in the U.S. has hovered between 70% and 80% since the 60s.

Where are you getting this from? I was under the impression it's closer to 50%.
Sean Rad Out as Tinder CEO
Former NSA lawyer: the cyberwar is between tech firms and the US government
Bravo, Joe. Good job.
Isn’t that just a new buzzword for something experienced developers have always done? Each time you perform maintenance on any existing piece of software, you necessarily rewrite it to some extent. The rest is just a matter of scale.

Maybe you make a small change in a logical expression or modify a control structure. Maybe you reimplement an entire function using a new algorithm, or redesign a whole module with different internal data structures. Maybe you rebuild the whole system with the extra N years of insight you have gained from how the previous one worked plus knowing about N more years of evolving requirements than you did last time around.

One way or another, you are always looking for the scale where the benefits of rewriting the whole instead of adapting what is already there — in other words, instead of rewriting one or more smaller parts — outweigh the costs. If a project has reached the stage where the cost of working around an existing architecture is prohibitive, it’s time for a rewrite on an architectural scale.
Also 800.000 tables? Surely not in the sense I'm used to, that is, normalized forms where a table corresponds roughy to some business object/noun? Does table mean something else or are there 800k different types of data in there?
I believe the first universal remote was a couple of years before from Magnavox or Phillips and Woz invented the "programmable" remote a couple of years after this.
To my fellow hackers/programmers out there: I worked as a mentor on a startup for a while that taught people how to program. One thing that's really frustrating to a beginner to hear is "it's really not that hard." Actually I would argue this is the single biggest deterrent to people learning, and it's completely avoidable. Hackers like to say this to encourage people to learn how to code, I've seen it happen in casual conversations, but it has the unintended consequence of making the beginner think if it's hard, then they must be stupid because this other person told them it's not hard. It's actually really hard to learn to program, we just easily forget about that. And we also forget that we had other people help us along the way, we didn't learn it inside of a vacuum.

If you're a hacker, you owe it to a beginner to let them know it's difficult but if they persist they can overcome the learning curve (for some people it's steeper or wider, but it's still not easy no matter how you look at it). We're very honest about how difficult starting a startup is, so we should be equally honest when it comes to learning to code. Hope this helps anyone out there interested in learning.
This would be great advice if we didn't live in a world where many people are in the habit of projecting their subconscious assumptions onto others. One minute you're a complex unique individual treading your own distinctive path through the world and thinking your highly individual thoughts, next minute you're trying to deal with some clown who not only insists on expressing an asinine opinion about you but demands that you furnish a response of some sort.
more info from Stéphane Graber Ubuntu developer:

----------

'"

...

The concept is relatively simple, it's a daemon exporting an authenticated REST API both locally over a unix socket and over the network using https. There are then two clients for this daemon, one is an openstack plugin, the other a standalone command line tool. ''

The main features and I'm sure I'll be forgetting some are:

- Secure by default (unprivileged containers, apparmor, seccomp, ...)

- Image based workflow (no more locally built rootfs)

- Support for online snapshotting, including running state (with CRIU)

- Support for live migration

- A simpler command line experience

This work will be done in Go, using the great go-lxc binding from S.Çağlar.

Now as to what this means for LXC upstream:

- A new project will be setup at https://github.com/lxc/lxd .

- Code to this project will be contributed under an Apache2 license, no CLA is required but we will require contributors to Sign-off on their commits as always (DCO).

- Discussions about lxd will happen on lxc-devel and lxc-users.

- Contributions to github.com/lxc/lxd will happen through github pull requests only and reviews will happen on github too.

This is kept separate from the main tree because at least initially, I believe it best to have a separate release schedule for both of those and because it tends to be easier for Go-only projects to live in theirown branch.

...

In order to be a good hypervisor, we also need to make containers feel like they are their own system and so we'll be spending quite a bit of time figuring out how to improve the situation. Some of the work presented at Linux Plumbers is going to contribute to that, like cgmanagerfs to provide a reasonable view of /proc and a fake cgroupfs, Seth's unprivileged FUSE mounts and all the cool things mentioned in Serge's earlier post about

Now as for the next steps. We will be creating the repository on github over the next few hours with Serge and I as the initial maintainers. Once the project is properly started and active, we will promote some of the most active contributors to commiters.

The first few commits in there will be text versions of the
specifications we came up with until now. This should also serve as a good todo list for people who want to get involved.

Over the next few days/weeks, the existing code which was used for the demo at the OpenStack summit in Paris will be submitted through pull requests, reviewed and merge.

...

"

see more: https://lists.linuxcontainers.org/pipermail/lxc-devel/2014-N...

and check the thread here :

[lxc-users]: https://lists.linuxcontainers.org/pipermail/lxc-users/2014-N...

[lxc-devel]: https://lists.linuxcontainers.org/pipermail/lxc-devel/2014-N...
Heh. I just looked again and had misread their specs: I thought the shared secret went into their SHA-1. You are correct, they just take a digest.

So I can make any message look OK just by hashing the plaintext. Heh. Wonder what that KDF looks like...