skysight-inc/HackerNews huggingface dataset:
>One of my pet peeves is developers using int (instead of unsigned ints) for primary keys in database tables.

Seems like a pretty ignorant pet peeve considering that's the only option for every database that doesn't auto-corrupt data.
Am I the only one who thinks that Google is posting this bug(!) just to make the Google plus post popular ?
So talking about something that happens on a very very small scale as if it should happen on a large one? You sound like Depak Chopra.

But don't worry we will have something similar to this in the not so distant future when editing video footage quickly and with picture perfect results makes it hard to determine if evidence is real.
I suggest someone write a browser add-in that re-plays this 100s of time when machines are idle to do massive distributed viewcount attack and force YouTube upgrade to 64-bit unsigned int now!
Ask HN: Is Bitcoin still hot?  The hype seems to have died down
As difficult as it may seem right now, property is replaceable. Even your passport will get replaced (with some trouble). The part you will likely most remember is the sense of violation from the theft.

At some point later in your life, someone you dearly love will die or be severely injured. Or you will witness something tragic. Then you might reconsider what is your saddest day.
The solution is the same. The server does sha256(token) and then looks that up in its magic table.
Never mind, I think I see it now. For posterity:

I still don't follow. Good authentication tokens make extremely sparse use of their numeric domain; they are e.g. 128 bit numbers, of which only ~15-20 bits are needed. It doesn't look like there's enough information in the indices to incrementally attack them, which is how timing attacks work.

I buy that I'm just missing something here. I'm just looking for someone to reframe this issue in terms of what an attacker actually does.

The canonical example of the target you're referring to is a Java JSESSIONID cookie. So: what's the timing attack against JSESSIONID?
we don't get too many vampire-related posts on HN; the OP here is from a scholarly journal and describes particular burial practices in medieval Poland intended to prevent "re-animation" of the dead. Vlad Tepes (aka "Vlad the Impaler", whose castle still stands in Brasov, Romania) is not surprisingly mentioned in this article. Another nugget from this article, "uber" was at that time (perhaps still is) the word for "witch"

the article's findings--various attributes of these irregular burials--are summarized in spreadsheets available for download, so that you can cross-tabulate deviant burials by for instance, the presence of iron bars on the coffin, whether the corpse was decapitated, and so on.
In fairness, almost nobody actually does this; they directly index the token itself.
I think the ultimate goal with space travel is to reduce the risk of human extinction, which is a distinct possibility when we are confined to a single planet or planetary system.

Transporting and then returning humans to a "distant" destination will be a worthy milestone that will teach us a lot. We have to start somewhere.

Perhaps you're right: maybe we can more quickly achieve distribution of humanity by solely focusing on robotic exploration. But I just wanted to point out that satisfying science fiction fanboys isn't the only reason to travel to Mars.
Thanks for the talk, I enjoyed the video. Do you have any good pointers to building a named entity extractor with NLTK?
It absolutely, positively hurts local labor - naturalized citizens - etc. Without a doubt.

I agree. But that's not a bad thing. That's the market operating more efficiently. The flipside is that it absolutely, positively helps foreign labor. Or alternatively, the overabundance of US citizens absolutely, positively hurts each other's labor.

What makes naturalized citizens so privileged? Surely they themselves are 2nd class citizens to native born Americans, who are in turn less deserving than descendants of actual American Indians. Drawing the line between "naturalized citizen" and "H1B visa holder" is quite arbitrary. It's still discrimination akin to racism or sexism.

Relevant quotes from recently posted article on Pavel Durov:

"Me myself, I’m not a big fan of the idea of countries"

"I consider myself a legal citizen of the world."
Very nice indeed, I likewise have been looking for something like this and couldn't find a solution that's not either over-simplistic, or over-engineered "enterprisy" and expensive... until this.
> Right now, supposedly "unpopular" shows are cancelled, and then immediately get a successful Kickstarter from what turns out to be millions of fans who happened to be watching only through Netflix, or iTunes, or DVD box sets.

Can you name any examples of this?

The closest thing I can think of is Veronica Mars which was Kickstarted many years later and raised ~5 million dollars from 91,000 backers to make a single movie.

I think perhaps the "alternate consumption streams" viewers are not as lucrative as you think.
I actually think you'll find many "audiophiles" enamored of the Sansa Clip Plus and Zip, which fall into that price range. Probably the most highly thought of MP3 players after the iPod classic 5.5.
Sure, and the post explicitly mentions that solution multiple times.
I guarantee you that people felt quite certain that SpaceX was going to at least have the possibility of making loads of money. No one invests capital or starts a business, much less an aerospace business, if they don't honestly believe it will make money. Even if you have a bunch of idealists who want to see humanity achieve it's destiny and reach for the stars, they would be fools to invest so much time and money in something that they believe was destined to fail.

Whatever Elon Musk is, he's not a complete fool.
Did I say the people are dumb? No, I said the rules are dumb and the system that formulated those rules is dumb. Extending this to the people running the system was an inference you made, not something I actually said.

As it turns out, the current rules are actually very effective if what you want is a system tailor made to produce large and profitable overages after any danger of losing a contract to a competing contractor has been mitigated.
But at its' core, it is the process of logic to determine an appropriate answer. Affected by past insights. There may be a lot, or a little precedent for the parts of a given case, but just the same, it should follow a logical outcome.

Where things really get wonky is applying those precedents in the context of the legal wrangling that has been enacted into law since said rulings. Combined with some practices it can be made more straight forward, or much less so.
Even if found at fault it just amounts to the cost of doing business for Apple.
Hover over the counter in PSY's video to see a little math magic
Total guess and not the original poster but I'm guessing NY
There is Easter Egg in the video counter. Hover with your mouse.
https://www.youtube.com/watch?v=9bZkp7q19f0
Hello, there!

Location: Massachusetts.

Remote: Yes. Preferred.

Willing to relocate: Yes.

Technologies: Specialized in front-end web development. Experienced in JavaScript, Ruby, C#, HTML, and CSS. Some experience with Java, Python, Perl, and PHP.

Resume/CV: Available upon request.

Email: hnjob a-t thirdtruck.org.

Full-time programmer for over five years. Three times that experience in life-long learning. Looking for another senior software developer position or the like.

If you're in Massachusetts, let's grab coffee. I'm eager to meet fellow tech folks up here.
LINE is ubiquitous in Japan. Although it's not a startup anymore I guess.
There are a lot of flawed zero-sum arguments going on in this thread.

Do the people that are so vocally against the H1B program really believe that the US tech industry would be where it is without H1B workers?

Simply put, giving US companies access to the best and the brightest from around the world has made the US the global hub for technology. Any wage suppressive influences should be weighed against the overall growth of the industry as a whole. Google, Microsoft, Apple, Facebook. ALL of them have been hugely impacted by foreign workers. Our industry would be much much smaller than what it is without the H1B program. As a tech worker, your take is of a MUCH MUCH larger pie because of the ability to hire the best in the world in one place.

To the extent that there are companies out there that exploit the H1B program to hire indentured "slave" labor. We should be directing our criticism at those bad apples. Discuss ways to crack down on that, instead of channeling pseudo racist, xenophobia at non-american workers.

Also... the entire premise of "us versus them" seems ridiculous to me. Why not make the "them" be "us". You have highly educated, skilled people wanting to become tax paying and productive citizens. H1B is a road to a green card, and eventually naturalization. It's better for America to increase the population of motivated, skilled, and intelligent people. This drives the economy!
Steve Jobs on the Megahertz Myth
Slightly larger driver, slightly heavier, supposedly has a greatly-extended frequency range of 5Hz - 80 KHz vs 10hz - 20Khz in the 7506. Of course your typical D/A converter won't even render such low frequencies due to DC coupling, and if they were there you'd want to EQ them away pronto as they would eat all your headroom. While I continue to enjoy excellent high-frequency hearing even in my mid 40s (to my surprise), neither I nor anyone else needs a tweeter that goes to 80 KHz.

The MDR-7509 and its successors the 7910 and 7920 have a lower impedance than the 7506 (24 vs 63 ohms) so if you plug them into the same sound source the higher-numbered models will be a bit louder - and as we all know, 'louder = better' for most people. This plus the larger driver is somewhat helpful for DJs, who work in very loud environments, but that's a fast track to hearing damage.

http://en.wikipedia.org/wiki/Sony_MDR-V6

Why I like the 7506 so much: on film sets I give them to eople to listen in and they say 'is it on? I don't hear anything.' Then I turn the volume down or make a small noise next to the boom microphone and jaws drop. Plugged into a quality microphone like a Schoeps, which has a very flat frequency response, it's like there's nothing there. I always have two pairs now because if one gets damaged I can't deal with other brands at all.
I think people finally realized that Bitcoin is never gonna be a mass-market thing... especially after Apple Pay.
A tiny bit south in San Juan Batista is Fremont Peak Observatory. Come and meet some sky geeks, and look through their telescopes!

http://www.fpoa.net/tips.html
I might work as a developer, but I trained as a 3D animation. I'll have to give this position a look!
Ionic is stable yet? Last time I tried it, I could get the default generated app up and running on my browser but not on the emulator or the phone.
hi jjb123, thanks for the thoughtful reply. Yes I can see how payments vs. donations are different. I didn't mean to say what you did isn't useful. I'm a developer too so I can appreciate what it took to make your thing a reality. I guess I'm just saying you don't make the difference clear to the user. The only difference I see with Stripe's is Tilt's monthly donation checkbox. I guess investigating further, you differentiate with Stripe in making your modal for the non-developer. Still a layperson will have to inject two lines of code, but then they don't have to do all the customization by writing more code and can instead use Tilt's GUI.

TL;DR; It would be good to make it more clear to the end user what's new about this. Perhaps a better title for this HN post is "Accept donations on your site without writing code". The word "instantly" obviously never can be true and seems like overhype.
GitHub blocked in Russia
I sometimes wonder if in the 2030s, people will be complaining about how all the interesting stuff was really invented back in the 2010s.

But yes, the available computing power has been a huge limitation for much AI research.
The True Story of the Kids Who Beat MIT’s Best Robots, Coming Soon to Theaters
> As best I can tell, they don't see alternative options.

I think that's pretty much it. I certainly knew people who had majored in "Classics" or whatever--at a good school--but didn't feel they had the ability/connections/whatever to parlay that into a decent paying career. And given that realization, law school was one of the obvious paths--and didn't tend to require full-time work experience as the better MBA programs did.
Writer of both code and stories here. Are remote positions available?
I always found it hard to get behind as an idea because I've never known anyone except one person to ever use Bitcoin to pay for anything.

It seems very complicated and techie to me.
Not if the random variable distribution changed over time. Calculate a new mean and variance every now and then, based on some hash of current time or whatever you want, maybe view count of Gangam Style Videos :-). Joking, but that would work.
But who would have JSON files bigger than 4GB? ;)
Technically, things are only worth what people will pay for them. Accordingly, you could also argue that the value of the company cannot be known unless and until it is wholly acquired. But these kinds of arguments are somewhat pedantic. They have built a tremendous amount of value. Whether it's $1 billion or $3.5 billion, it's more value than virtually everyone upvoting your comment has built.
Is future good for theoretical cryptography?
The trend of apps, quick solutions, start-ups is here.
Is it possible to have a career as theoretical cryptographer? Is theoretical cryptography or research dead?
If you are unable to make good decision between different number types you better don't write software, IMHO. How do you reason about the operations you apply to your data if you are ignorant of the possible values?
Is it still alive?
I think it would've helped to separate the sales/marketing form the how to talk to investors portion, as this lecture seemed to pack a lot of material into a short period.

Having said that, I think the sales and marketing part was done pretty well. It didn't cover a lot of sales tactics, but the fact that it was highly focused on the $0-1M in revenue portion of a company was important. There is lots of 'startup' sales advice out there that is more focussed on scaling sales and sales process, which is generally more useful for companies greater than $5M in Rev.

Anyhow here are 33 if my top quotes from the lecture published here: https://medium.com/how-to-start-a-startup/33-quotes-on-start...
That's a whole lot of words you used to get the point across, you could have said the same thing in only fourteen.
>Given whenever I stand near someone on a train with them I can hear a fair amount of their music (not anywhere near as bad as Apple earbuds though), I assume they can't be that great - that or the listener has very bad hearing.

This makes the mistaken assumption that isolation and good sound are related, which -- as open headphones and speakers can attest -- is not true. The goal of a speaker or headphone is to reproduce music faithfully. Unless you are familiar with the music's origin or it has real instruments who's sounds you can easily identify, it's impossible for most people to tell if the music is reproduced "faithfully". So there are a couple of general rules that most "audiophiles" will consider when dealing with volume:

1. Music played at louder volumes generally sounds better than that at lower volumes. You can hear more of what you are intended to hear.

2. Music often goes up and down in volume, so you want to hear the broadest range of volume.

3. The best listening devices both allow high volumes without clipping and low volumes with clarity.

The point is, just because you can hear it, doesn't mean they are bad headphones.

It also doesn't mean they are good headphones or that the people aren't inconsiderate. It simply means that "sound leakage" isn't really a decent criteria unless it's something that important to you.
do these problems disappear with unsigned arithmetic?
tablet == no mouse
:(
It's obvious, but fraud has definitely been an issue with all the simple Bitcoin donation buttons/GUIs that have popped up in the last year or so.
> how many of his claims and ideas were false, misleading, or inaccurate?

A century has passed and his work has been analyzed by a variety of academics. Pointers to capable critiques would be welcome.
But only because asm.js works hard to make JavaScript differentiate between integers and floating point numbers.
Its pretty stable and very easy to use if you are good with AngularJS .. little bit of confusion around cordova plugins integration but easy to figure out .. Recently I have developed and app built on Ionic and it works perfectly -- https://play.google.com/store/apps/details?id=com.lowendapp.... .. also its been mentioned on ionic website
"The definition of stupidity is doing the same thing over and over again and expecting different results."
"Profit" should be a dirty word in higher education. Primary and secondary too.
It hurts because of how H1-B visas are structured. If there was free-flow movement of these high-skilled workers (and none of this indentured servitude to the company), then salaries would raise equivalently.

But for now it hurts local labor because it gives companies a pool of employees without rights (notably the right to walk away from a toxic environment without having to leave the country).
I have a different theory.

Originally Docker was going to be a container and CoreOS was a platform to run containers. They were both pieces in a traditional software stack.

Docker had a round of funding and the investors pushed Docker in a different direction: App store. Docker was no longer just a piece in the stack and CoreOS could see the writing on the wall: libOS. Docker would marginalize CoreOS the same way LXC was marginalized.

CoreOS is going on the offensive because they were tipped off on Docker's hand.

Occam's Razor.
I've handled the fundraising site for an alumni organization for several years. One thing we find essential is displaying "progress" by plugging into our templates the amount raised so far by each different campaign. On the API page https://github.com/Crowdtilt/crowdtilt-api-spec/#get-campaig... this appears to be a simple ajax call. And you don't have to touch paypal. Well done!
I don't know about comparing digital to digital, but I know I can tell the difference between a 320kbs mp3 and a good quality LP record. Its in the treble. I guess any kind of digital just ruins that.
The key to why the space race worked is competition between nations. It's because the fallout from World War 2 was a strong sense of national identity. The same thing that made McCarthyism work is what made the space race work.

We don't have that anymore. It was probably a worthwhile trade: there are other vectors we can get technological advance from: but if Obama made a speech about beating China to Mars tomorrow as a proof of how America is a great nation, the Republicans would assemble on the dot to burn him at the stake for it.

There's still a sense of national identity, such as can be seen in the Olympics, but it's barely an echo of what it was 50 years ago. Before we lost in Vietnam. Before the Civil War was re-enacted to gain universal suffrage. Before Reaganomics. Before Cuba. Before Bosnia. Before 9/11 and Iraq. Before Snowden. Before Ferguson.
For the price of Bose noise-cancelling headphones you can get headphones from the three brands the parent mentioned (throw in AKG for good measure) that sound better in 'lab conditions'. But if your discerning feature is 'noise-cancelling', i.e. headphones that sound excellent in noisy environments like trains, coffeeshops or open work environments I believe Bose is the king and will be as long as their patents are enforced.
>If you are going to reduce them to the basest level of what the purpose for a speaker or headphone is, to reproduce the input sound, then yes, they are shitty, because they are not good at that.

Though I don't personally like the cold, base heavy sound of Beats, I don't really get how you could know this, because most people have no idea what a piece of music should sound like. They know how they think it should sound, they know how they like it to sound, but very few know how it should sound. The only real exception to this is music with "real" instruments like pianos who's sound is familiar to enough people that their reproduction can be reliably determined. Even then, however, unless you know the piece well, it's unlikely most of us are in a good position to make a judgement about the speaker's quality.

So what factors are you using to determine if the sound is reproduces correctly?
Charging more doesn't mean you're creating more value on an intrinsic level, it just means somebody's getting richer.
That doesn't tell me anything. :/

As far as I can tell, you're implying an attacker can determine a password using timing of hash comparisons. How is this any different (just more complicated) than a regular brute force attack?
Sorry to nitpick, but I think you're getting your metaphors mixed:

You can put lipstick on a pig, but its still a pig
http://en.wikipedia.org/wiki/Lipstick_on_a_pig

You cant polish a turd
http://en.wiktionary.org/wiki/you_can%27t_polish_a_turd
Indeed. I am also surprised that no one mentioned Tom Murphy's Sigbovik paper from April 1st 2013 - "The First Level of Super Mario Bros. is Easy with Lexicographic
Orderings and Time Travel ... after that it gets a little tricky"
http://www.cs.cmu.edu/~tom7/mario/mario.pdf

Murphy created an agent that can play arbitrary games by inspecting the RAM and attempting to maximize the score.

See also this writeup on Ars Technica - http://arstechnica.com/gaming/2013/04/this-ai-solves-super-m...
I must write code that is just too simple and uninteresting because I never use generics. I also really enjoy go.
Data Visualization and D3.js Newsletter Issue 107
This is really good news for society. Law is important but it is not productive. Also, hopefully this means fewer divorce attorneys.
Any time you say "I'd hire a local over a foreigner", you're effectively being racist.

And if someone says "I'd hire a foreigner over a local", what does that make those hiring managers? What if that is the prevailing opinion in SV?
> The first step in demystifying quantum "teleportation" is to stop calling it "teleportation", which is a term that is made to be misleading.

> No photon, no atom, no thing has ever been "teleported" nor ever will be. Only the quantum state gets "teleported", and the quantum state most decidedly does not have the ontology of a "thing".

I used to think the same thing as you, but if you accept quantum mechanics as complete and accurate, then the quantum state describes the totality of the system. There is nothing more than the state -- no other hidden variables.

So it comes down to the philosophical question: if you can make a perfect copy of something, except you have to delete the original version in the process (see the no-cloning theorem), is the new version the original "thing"? I would argue yes, it is. It's completely indistinguishable in every way.

(Now do I actually believe quantum mechanics is complete? I'm not sure I do. But if I assume that it is, then quantum teleportation is really teleportation.)
That (using ==) is what py-bcrypt does, written by Damien Miller, a fairly well-known OpenSSH and OpenBSD hacker. It has definitely attracted some "smart" comments from "experts," as does anything that uses == in a security setting, no matter the actual context.

Sure, it's usually poignant critique, but anyone who actually knows anything about this subject agrees that doing a non-constant-time-compare on what is essentially a random oracle leaks nothing of value to an attacker, and people are just parroting a catch phrase without understanding it. It's the evolution of the fan favorite "That's security through obscurity!" applied outside cryptography.