skysight-inc/HackerNews huggingface dataset:
There's a difference between checking if root access can be granted and gaining root access. If Uber were to use this access, the superuser app would prompt the user to approve it. The user would then have to grant permission.

There's no proof in this article that they are uploading this data to their servers, just speculation. The snippet of some methods he showed doesn't even make sense, because they don't ask for permissions for your SMS, MMS or other permissions required for these things.
Everyone in tech may know it, but it's still as tech companies as an argument for more visas.
What's not-ok about linking a do-everything platform library?
How do you know that Nth Degree Technologies is one and the same as Rohinni? Searching and reading through all the articles I was not able to establish any link between the two companies.
The world is more subtle than good and bad.

This is ofcourse subjective. I choose to believe that he is both a good person and someone who says bad things.

I however, place more value one what people do rather than what they say.
Gaming in Dhaka
Ask HN: State of the art for web apps without trusting servers?
A current HN front page item has once again brought up the old issue about how Javascript-implemented crypto in web apps could be modified by the web server operator at any time.

https://news.ycombinator.com/item?id=8659456

That is, even if the server operator does a good job implementing the web app and the publicly-audited open source code prevents the server operator from seeing plaintext, the user doesn't know that the version served just now is the safe, audited version, as opposed to a modified, backdoored version.

So, if the server gets compromised, or the server operator decides to spy on a particular user, or a government manages to order the operator to change the code for a particular user

http://blogs.wsj.com/digits/2014/11/25/case-suggests-how-government-may-get-around-phone-encryption/

then the user is out of luck. Of course this is a fairly well-known concern (highlighted over the years by tptacek and others) and I've heard of three or four projects to try to address it. They have in common the concept of creating some mechanism for browsers to verify, pin, and/or require independent certification of the contents when rendering a page containg a web app, so that the page just won't load if its contents have been changed in any way. (That also means you have to verify that the code can never dynamically load or eval new additional code, which might be enforced by auditors rather than by the browser.)

Who is working on proposals for such mechanisms, which ones are making progress, and how far along are they?
I sometimes think my mental processes must be very weird because I can't even figure out what "You are your thoughts" would mean, yet I'm guessing from your parenthetical remark that it is an idea people find not only meaningful but plausible?
I think too simple a take-away. Partially that, partially new immigrant (or nostalgic immigrant) support - high touch, caring, personal service.
That was a metaphore. Also, as you are certainly aware, Android apps don't ask for permissions through code, they request them in various metadata manifests.
That doesn't mean it's good for users or for users or for Android's reputation as an app ghetto. Some means of scoring apps down for needless permissions would be a good thing.
Live ClojureScript Game Editor
Amazon Local – Amazon's Competitor to Angie's List, Yelp, Etc.
Huh, really? That sounds almost like something Apple would do.
I do this with Facebook also.
The GloVe vs word2vec is not as clear-cut as that - see https://plus.google.com/114479713299850783539/posts/BYvhAbgG..., https://docs.google.com/document/d/1ydIujJ7ETSZ688RGfU5IMJJs... for more discussion.
We don't have politicians on most of our bank notes here in Australia either - we mostly have notable historic people:
https://en.wikipedia.org/wiki/Banknotes_of_the_Australian_do...
More details from Yahoo Finance: Starting in 15 cities -- including New York City, Miami, Seattle, San Francisco, among others -- local service providers can sign up for a listing with Amazon, paying 15% to 20% of the revenue they earn back to Amazon for the referrals. The fee covers payment processing, online scheduling and other needed bits and pieces to help the service providers list online. Those listed by Amazon don’t pay for referrals or leads, just the commission on fees for services.
That's fair, although I had a pretty early AIM-65 (roughly contemporary to the KIM-1) that had FORTH in ROM. So yes, there was a time in the 6502 history where ASM was pretty much the only option, but lots of other options came along quickly.

P.S. - The Altair had a floppy option pretty much from introduction ('76 or '77, at least) as well as a cassette tape setup, so while you often bootstrapped with the front panel (unless you added a bootstrap ROM someplace; many did), you didn't have to load all your software that way. I had friends who even had paper tape readers on their Altairs, which were pretty cool.
The article is mostly about visual art, but religious music is also very enjoyable IMO.

https://www.youtube.com/watch?v=TkAa3Zdx6Ro

The "Dies Irae" theme is used a lot in classical music, for example this Totentanz by Liszt:

https://www.youtube.com/watch?v=QUMR_D6G_Sw

Gesualdo's Madrigals are sublime, too.
4) So they can redirect all users to a non-HTTPS site. That's interesting.

What youre saying is ridiculous, it's nothing to do with "completely" trustless, you're not trustworthy at all. The "we promise we wont serve malicious code" is the same securi

Basically your users have to trust:
-You
-Your staff
-Cloudflare
-Google
-Any computer used to design, build or login to your web app
-Anyone with access to any of these computers
-Every single CA in existence (including the US and Chinese government)
-Anyone with resources to spoof a CA SHA-1 signature (anyone with ~$700,000 [0])
-The authors of the JS OTR library and any other code you use

Do you see the problem here? There are literally millions of people in your trust chain.

Libpurple sucks, but browsers are the #1 target for exploit writers, not to mention the HUGE attack surface they pose. There are just so many angles of attack for your service. Anything hosted on a shared server is not secure. The word cloud and security should not be in the same sentence. No offense, but you guys really do not seem like cryptography experts and there are so many pitfalls here that I would not recommend trying to promote this until you completely re-design everything.

As far as WebCrypto.. I'm just going to leave this here:
http://tonyarcieri.com/whats-wrong-with-webcrypto
http://matasano.com/articles/javascript-cryptography/

[0] https://www.schneier.com/blog/archives/2012/10/when_will_we_...
This is called LitCoat and more information is on litcoat.com
LitCoat is nano coating and consist of spray paint layers working together:

(1) Conductive -
(2) Dielectric -
(3) EL (Electroluminescent) -
(4) Conductive layer and then you seal it off with the
(5) Top layer. (Once applied save to touch)

From principle it can be applied on everything but it is depending on the under-layer trace thickness and uniformity. In case of irregularity of the surface it would require treatment for a more homogeneous surface.

DIY:
http://www.litcoat.com/product/litcoat-electroluminescent-pa...
It would feel strange to me - American dollars are a uniquely American thing, created and backed by the American government. Seems right to celebrate the history of the government on there, just as it would seem right to see the Queen on some British coin, or Gandhi on an Indian bill. Scientific advances don't seem like the kind of thing that should be printed on money. Do statues, or dedications!
As long as we're nitpicking, none of: Benjamin Franklin, Sacajawea, or Susan B. Anthony were president.
Can confirm they're both different from mine.
I got a palindrome problem.
> Lastly, this technology is not the work of Rohinni. They bought some pieces from Nth Degree, and what their business plan is, who knows. They did not invent it, legally cannot produce it, and it is doubtful they have the the technical knowhow to do so anyway.

Well, these seem like some pretty definite claims that should be easy to back up with evidence?
Let's jump this over to a topical thought experiment.

A new programmer is hired in your office, who happens to be a woman.

She seems to doing ok in her new job, getting things done. She seems fine with it. Her boss seems fine with it. Neither her nor her boss show any signs of dissatisfaction with her work situation.

Do you go by every now and then while she's working and ask "Hey, do you need any help?" You don't habitually ask anyone else that question.

Do you see how that could be a negative? Do you understand why she might take it as condescending?
I got offer for PhD in Cryptography – should I leave my Senior Developer role?
I landed in a Senior Developer role in couple of months and there is a huge opportunity to lead the company's development team within a year. Pay is good as well.
However, yesterday I got an offer for PhD in cryptography. I've always wanted to do PhD but I'm not sure if this will be a bad decision. I'm already 30 years old and married. very confused. If I continue job, there'll be financial security, I can buy house, have kids....on the other hand I feel I should go for PhD because I've always wanted to do it.
It takes all of a minute to download the APK from the store and check for yourself. I just did and SMSLog is present in it and does grab all your SMS metadata starting with the most recent ones, saving for each message:

- checked at (timestamp when read?), to number, service number, sms at (timestamp received?), sms type

Now I can't tell you if it does actually transmit that data, but the remainder of the code looks for the world like it. In the end, of course, it doesn't actually matter. That's like arguing if malware that lies dormant actually exists.
I'll definitely buy this when it ships in 1-2 years.
Show HN: oh my giraffe – An iOS and Android game I made to learn programming
Perhaps more useful information can be found here:
http://www.marketwatch.com/story/litcoat-takes-paint-to-a-ne...
http://www.12newsnow.com/story/26828656/litcoat-announces-av...
http://www.prnewswire.com/news-releases/litcoat-revolutioniz...
The sacredness is hardly in the art. In the presence of sacred art there are no secular people. (Meaning that "the sacred" is precisely that which moves you beyond the mundane.)
<i>As for your quip about 68000 not being easier if you knew 6502, do you just arrogantly dismiss everything out of hand? No evidence given?</i>

Well, 8-bit, accumulator-based, limited addressing modes, numerous quirky features required for good performance (e.g. zero page) vs. 32-bit, register-based, numerous, generally orthogonal addressing modes, privilege separation, etc. So other than 'programmed in assembly', not much similar between the two. I know when I jumped from processors like the 6502 to the 68000, I had to forget more about the 6502 to really get the 68000 than I kept. Maybe you could take your own advice and describe the architectural similarities of one processor that made you so much more prepared to understand the other? You know, give some evidence.

As to the rest of your snotty, self-indulgent, anti-American rant...it's a real shame you didn't get to play with the cool toys that existed at the time. That doesn't mean they didn't exist and we didn't use them. We'll get right on that pity party for you.
So with the system of mirrors that is in place with distributing some open source software (e.g. debian, ubuntu, etc.) this is less true. A local mirror could selectively serve bad packages (and serve the correct packages to the verification bots).
> I don't see the big OMG SECRET MALWARE scariness.

This is the definition of malware:

n.	Malicious computer software that interferes with normal computer functions or sends personal data about the user to unauthorized parties over the Internet.

I'm all for people taking responsibility for their privacy but this is basically what you are saying to people:

"Hey you accepted that list of permissions (or Terms of Service)! What? you didn't expect that your Taxi app is not going to retrieve and store your call logs and other personal information? How silly of you."

This rational among tech people is why there is zero privacy. The myth of consumer choice in the matter. The average person doesn't reasonably expect Uber to be mining this information about them. Merely assuming it is a function of the application.

We in technology know that they can but the average user? Who has responsibility here then? Noone? Uber has an ethical responsibility not to actually abuse this trust from their users IMO. Which is why the inclusion of this library deserves scrutiny.
It's a joke, "Dumbass!" is shown after clicking it.
Ask HN: Google PageSpeed Insights Speed Fluctuation
I've been playing with the PageSpeed tool here: https://developers.google.com/speed/pagespeed/insights/

I'm testing a variety of pages and have my speed score for specific pages fluctuate. One page goes from 77 to 90 to 78 to 91. It's quite odd. I leave a few minutes between each test as to make sure that each run avoids the 30sec cached results. Anyone else experience this? All the stackoverflow and google forum replies seem to provide incomplete explanations.
Interesting.

As I said in my other comment, one of the strengths of Word2Vec is how robust it is against various metrics.

While it looks like GloVe's advantages over Word2Vec may be not as much as initially claimed, it is mostly as robust (which is good). However, the jump in Word+Context over just Word vectors when evaluated on semantic relations is interesting.

(To be clear: I'm very interested be being able to use the same system over diverse datasets, without having to tune it differently for each system - hence my interest in the robustness of the methodologies)

Edit: Were you and Smerity at Sydney Uni at the same time?
I don't think you can rightfully accuse me of making simplistic judgements after reading my comment, but you are right that my reservations are subjective. My reservations say something about me and my values.

> I choose to believe that he is both a good person and someone who says bad things.

You probably won't be surprised when I say I can't square that.

Let's for a moment evaluate a hypothetical about good and bad people, since you chose those labels. Assume you got two people. One is "a good person who says good things" and the other is "a good person who says bad things". Which of the two is a better person? Your answer seems to be: that depends entirely on the goodness part. My answer is: it also depends on the quality and quantity of the badness part. What they say is a part of who they are.

> I however, place more value one what people do rather than what they say.

Thoughts do matter. When choosing your heroes, their ideology counts.

It's also a point of debate on what counts as "doing" something on the internet. Expressing beliefs and values is as much an action in itself as writing code.
What's going to happen when his parents pass away?
I can't find any mention on the site to the surfaces it supports - turns out its powered by magnets, so only works on magnetic surfaces.
Business Experts. This is for you
It would still be all about the Benjamin's, surely ?
The Pragmatic Programmer Review
It is in Canada.
That wraps it up for end-to-end
Looks like it's time to turn on memcached...
Interesting article. Worth reading all the way through.

FTA:

> The repeated “success, scale, fail” experience of the last 20 years of development practice suggests something super boring: Development projects thrive or tank according to the specific dynamics of the place in which they’re applied. It’s not that you test something in one place, then scale it up to 50. It’s that you test it in one place, then test it in another, then another. No one will ever be invited to explain that in a TED talk.

On the contrary, I think this idea would be an excellent topic for a TED talk.
Franklin is the closest thing we have to a scientist on our currency now -- so, maybe.
Yes, I forgot Franklin.

The other two have only appeared on coins, no?
Well, it's both really; one side is a cultural or scientific icon, and the other is the Queen or a prime minister.

I am pretty proud of our $5 though: http://farm9.staticflickr.com/8542/8694157272_8990e8bcca_z.j...
Yeah they seem to hide that info well. The "Hover engine" is basically just a big electromagnet.

"Hendo hover board uses a magnetic field architecture to transmit electromagnetic energy. One downside here is that it needs a metal surface to hover"

That's a pretty big downside. Not only that but it seems to hover barely even an inch even with the giant metal surface and seems to just scrape the surface half the time they're standing on it in the video.
Why is it good for ship engines to be so low rev? I imagine part of it is fuel savings, but with cylinders that big ...

Does it burn more fuel to run a small engine at higher revs, or a big engine at lower revs?

The only other thing I can imagine being a factor is torque. Do low-rev engines have higher torque?
"I cannae unroll the Sellotape fast enough capt'n! "

I can see that red shirt might come to a sticky end however. But at least the plot holes could be patched up.
You know, when I started this discussion, I didn't expect if to lead to someone comparing being a woman to being mentally ill, or I wouldn't have said anything. Maybe this is what pg meant that "forums can't be trusted with certain topics."
And a peach was never president.
Your cultural bias is showing. Without the right background nothing inherently separates religious and secular art. And there is nothing universal about what moves people.

Note: There are a few preferences that show up across cultures on average, but there not universal within a culture.
Buffer overflow and other minor issues in GnuPG and libksba (Fuzzing Project)
Unless, as the article points out, the attacker has your private SSL key (perhaps leaked via Heartbleed).

Without cert pinning here's also the problem of the attacker convincing some browser-trusted CA to issue an SSL cert for addons.mozilla.org, then MITMing you with that.

(And with 600+ trusted roots, many of which are owned by various governments, against state level attackers an ssl connection's claim of authenticity has to be considered very close to worthless...)
Also I've made a bookmarklet for anyone who wants it, which re-colors the faded comments with shades of red. In my opinion this is a much better user experience, as these comments are appropriately flagged but still readable without much effort:

https://github.com/guscost/bookmarklets/

Load the bookmarklets.html in a browser and then drag "Re-Color HN" to your bookmarks.

The faded down-voted comments are my least favorite part of the UI here (it's like "this comment is now 75% censored").
Someone better tell these guys to stop selling SSL MITM hardware, then.

http://www.wired.com/2010/03/packet-forensics
Yes, coins only. The title of the article mentions "money".
Wow that is interesting. I guess it's pretty intuitive if I think about it, why would extreme opinions be expressed differently. That would make a great data set to analyze though.
OLED Lighting is LED 2.0. LG [1] is already pushing this into production.

[1] https://www.youtube.com/watch?v=aeoJEog1XYE
If you find that your money is already designed to celebrate science, you are probably in the UK.

We've had loads of scientists and engineers on banknotes, including Charles Darwin, Issac Newton, Matthew Boulton, James Watt, Michael Faraday, Alexander Graham Bell, Adam Smith, George Stephenson, Florence Nightingale and Christopher Wren.

Also the coins regularly have geeky stuff on them. Like the current £2 coin which features gears and circuitry with Newtons 'shoulders of giants' comment written around the edge. - https://www.thelondoncoincompany.com/coinimages/1329309475-2...

---

edit - This Northern Irish £5 featuring the space shuttle is awesome and is probably the coolest Stirling note ever.

It is also in portrait like the designs suggested in the article and could well be the inspiration for them.

http://www.banknotes.com/IEN203.JPG
Nobody wants to weigh in on support and/or lack thereof?

I've used a number of very expensive "Enterprise Level" products, and they generally had good support.

But, dollar for dollar, I've always admired the very tiny vendors. I've paid them a mere pittance for personal computer software, and yet they have provided exemplary support for it. Programs like Carbon Copy Cloner and VueScan come to mind. Enterprise level support at double-digit prices!
Our Cats, Ourselves
He seems to be asserting that they are _not_ the same entity.
You know, when I made my post, I considered you might try to defensively avoid it with precisely this tactic.

But then I decided to give you the benefit of the doubt.

I see now this was a mistake.

You said you couldn't see how "Do you need any help?" could possibly be negative. I tried to offer a scenario that could help you understand. I did so in good faith.

I don't really appreciate you turning that into an attack.
That does seem kind of limiting, but realistically what else can we expect in the next ten years or so? At our current level of physics understanding, a board must either interact with fields that most of the boarding environment doesn't naturally generate, or it must move a lot of mass downward very quickly. The former will always be lame (like TFA) while the latter must see radical miniaturization before it will be practical.
Exactly. We can't even start to try to think about the topic out loud in public.
Sort of. The surface is copper, not "magnetic" in the commonly-understood sense.

http://www.wired.com/2014/10/physics-hendo-hoverboard/
For those who asked, yes it was Pask. Cheers biot. I first heard about it in the book "The Cybernetic Brain: Sketches of Another Future" by Andrew Pickering, which contains other eye-opening gems.
That's the basic idea, but we can run it at 3GHz if we do DDR, or 1.5GHz doing QDR. There is some extra magic there which I don't want to talk publicly about just yet ;)

The biggest problem (even with our solutions for skew and crosstalk) is just the number of pins/traces on the board, but that's not unsolvable... nothing a ~10 layer PCB can't solve.
I imagined a much more abstract take of the title. What if 'money' was designed so that it gravitated towards achievers of scientific accomplishments rather than towards weilders of power.
Show HN: pandas-ply – cleaner data manipulation with pandas
So level 1 has only one problem, 48 hours. Level 2 has two problems, 72 hours apiece.

Edit: Level 3: 3 puzzles, 96 hours apiece. How deep does this go?
How do you deal with apps that have in-app preferences to toggle certain notifications on/off? Or is this just for notifications that are enabled by default?
Reddit's r/ferguson
FYI, active discussion at https://news.ycombinator.com/item?id=8656028

This post used the "canonical" URL, but lost out to a later post with slightly different URL.
You seem to be making the same point I was attempting to make.
So put it behind haproxy, or any number of other reverse proxies. There are many ways of doing it, depending on how "fancy" you want to be, but haproxy's stats socket gives you plenty of options for how aggressively to shunt traffic away from a backend. You can then restart your backend however you want.
A former classmate of mine keeps a personal website with a section that has a very thorough list of scientists and mathematicians who appear on various currencies with full-res scans of most of his collection:

http://www-personal.umich.edu/~jbourj/money.htm
Australia used to have mostly scientists, botanists and astronomers on our bills prior to 1990:

http://en.wikipedia.org/wiki/Banknotes_of_the_Australian_dol...

Now we have mostly politicians, authors and entertainers :-(