skysight-inc/HackerNews huggingface dataset:
Thanks for the information, that's really interesting, and a shame it didn't work out! I did see that the sound of a clap had been imaged, but I imagine that's a somewhat extreme case.

> The research paper you link to almost surely uses the heat differences to see the jets of air coming out of the mouth, and not actual sound waves.

Regarding the paper, while I can't read it myself, I imagine they chose to look at fricatives precisely because they're the result of turbulent airflow which is probably ideal for Schlieren imaging rather than a different speech sound which would be more wave-like. If the image is the result of heat differences, I wonder if it could be improved further by changing ambient temperature or temperature inside the mouth, or alternatively if the subject could be asked to inhale sulphur hexafluoride first to increase the density differential? (Edit: Or, perhaps, introduce a 'uniform' (laminar) thermal source along the direction you're interested in, so that when a sound wave propagates, the resulting density differences would be much more pronounced? I'm not sure if that makes any sense, as a layperson this is pure speculation on my part...)

I believe this is an image from the paper: http://www.sciencephoto.com/media/89151/view

Thanks again for the info though, really fascinating. Hopefully we haven't reached the limits of this technique yet, and it can still be taken further.
#13 seems easy and there exist apps for it. Not that the team would WANT to do this, but if you had a sufficiently compelling use case the problem doesn't seem difficult.

For instance, if everyone on his team carries a smartphone (iOS or Android) they can all install google+ and turn on background location sharing so he can see them on a map.

https://support.google.com/plus/answer/3302509?hl=en

There's also Apple's "Find My Friends" cloud feature, and a bunch of 3rd-party apps that do the same.

If they don't carry a cellphone then...um...give them one and tell them to carry it. :-)
>You points seem pretty obvious.

It was not obvious to Rob Pike (who if not the "leader" of Plan 9 was at least the developer with the highest status).

Pike seemed to lack an understanding of how to entice users whose motivations and interests are different from his own to go through the trouble of actually learning and acclimating to his software. A general lack of marketing savvy, perhaps.

Here is another example of that:

In an post to the plan 9 mailing list (9fans) written in the 1990s, Pike seemed genuinely confused as to why some browser maker (Opera maybe?) did not respond positively to Pike's invitation to port their browser to Plan 9.

This was at a time when on a really good day Plan 9 had fewer than 200 users (most of whom were researchers at Bell Labs and maybe coworkers of those researchers). "I never even received the courtesy of a reply," is how Pike ended the post.

I did not mean to focus so long on one personality. The important point is that there's a lot of things one has to pay attention to if one expects a particular piece of software to gain widespread adoption. In particular, it is not enough to show that you are a very impressive person surrounded by other impressive people with some very innovative idea.
The last time I tried x265, about half a year I was really disappointed. For what I tried (a low bitrate encode with a very slow encode, Hi10p profile for x264) x264 was only slightly worse for the same crf (witch x264 and x265 share) - less than 15% worse, but the encoding time for x264 was practical (on my machine about 2 frames per second) while x265 was simply to slow for real-world use for me (about 0.1 fps). My Computer is somewhat old, but I doubt that newer PCs would to so much better. I can't even image how long it takes to encode 8k.
Jack Appelbaum suggests that US sponsored cyberweapons tend to use RC6 (http://www.youtube.com/watch?v=b0w36GAyZIA&feature=youtu.be&...) for whatever weight that adds to the case that this isn't the US.
Show HN: Yet another code injection library for OS X
There was basically zero chance of the first iteration of something that radical being accepted, but there was pretty strong support for the general idea of f(x,y) being callable as x.f(y).
Drop your age on your webpage. It's not just that you are 18 years old, which not only doesn't help you present your skills, but it sounds immature (as only young people measure themselves by age). I would hesitate to trust you to get things done right and on time just on that. Not all 18 years olds are unreliable of course, but why play the odds when I don't have to?
VPNs may be forced to log as well under this bill.
That was a beautiful video, thanks. I think I'm going to make a handsome donation to NPR right now.
As a student of statistics, I'm kind of split on R. On one hand, it's just not a very well-designed language. The fact that it has three (!) independent object systems is a testament to this. On the other hand, as vegabook also mentions, working with vectors and matrices is just a lot more natural in R than in general-purpose languages like Python, because R's syntax has been built from the ground up to work with the kind of structures you usually work with in science.

I'm hoping Julia might become a good alternative to R and Python, but I can't see it catching on in the statistical community anytime soon given how many people are still using relics like SAS and Stata. The raw fact is that statisticians (considered as a group) just aren't very good at programming (and many older statisticians can't program at all), which means that a well-designed programming language may not necessarily be easy to use for a member of the statistical community used to point-and-click statistics suites.
I guess this might be interesting on the matter of why new operating systems didn't succeed:

http://doc.cat-v.org/bell_labs/utah2000/utah2000.html

Bottom line is unix is good enough and no one is interested in the effort/risk it'd take to develop something significantly better.
Symantec Finds New Nation State Malware Regin
Phones and the apps that run on them have adapted to run reasonably with intermittently available, slow, pricey networks and relatively low amounts of power. Does Plan 9 have a smart way to deal with these network and power constraints? It seems unlikely since it wasn't designed for it.
I know we don't reward snarky humor 'round these parts, but I was about to say the same thing. Python seems to own this space and the ecosystem around Python and math/stats/analysis is exceptionally healthy. If there's a specific place where R kicks ass please speak up -- it's fallen off my radar.
> Most GPU vendors don't have massive patent war chests of their own.

The largest by marketshare, nVidia and ATI (by belonging to AMD) certainly have a sh.tload of patents. Do correct me, but aren't IMG/PowerVR and nVidia holding the majority of the mobile GPU market share anyways?
Turning off javascript gives a blank page. Absolutely blank, not a single piece of content, not even - and this would still be terrible, just a tiny, tiny bit better than downright ridiculous - a message saying "you need javascript enabled to view this content". Say what you like about webapps requiring javascript (an argument for another day), there is no excuse for a blog requiring it.
Actually I like that idea. If patent holders were required to state an expected value for their claims and had to pay property taxes on that expected value every year, we'd see far fewer stupid patents held by unproductive trolls. (And fewer outlandish damage awards since the expected value could be cited in court.)
Ask HN: What not-programming-related YouTube channels are you watching?
Ahah, I did not know what that means.
I'd like to disagree with that because Minecraft ends up turning into a different experience once you're working at that scale.

Similar to EVE, which goes from spaceship simulator to corporate management simulator depending on how deep you get into it, Minecraft turns from house building simulator into project management simulation if you're building things of such size. There's a planning stage, there's a stage in which you aquire resources, people working on the project together need to be coordinated, the area needs to be prepared, and the actual building has to take place. Regarding large projects, this might also require preliminary buildings, such as stone generators, xp farms to improve tooling, complex smelting setups to create glass or lumber farms.

Modded minecraft will bring even more complexity to the table, from automated mining rigs, power production, ore processing, large scale agricultural work and making a disjoint set of technologies from different mods do exactly what you want them to do.

The project I'm working on on our server right now is building a world spanning road network (we have a 30km x 10km world) with safehouses every 500m and access points every 100m. After researching options and testing several designs, i arrived at a design that is both feasible and secure. One of the things I worked on before that is full automation of food production where I took this [http://imgur.com/Np6Ftaj] and converted it into a factory. Or building a computer controlled pebble bed reactor.

But since "that's pretty neat" isn't an argument, my experience managing personal projects outside of the game has also broadened considerably. It's taught me to vigorously test sub components, track figures and validate them, to detail the entire process before jumping into it, and a whole range of other useful planning skills.

I think for something that calls itself a game, that's a lot of use I'm getting out of it.
Antifragility, Evolution, and Entrepreneurship
Attempt to Use Salvaged Display with Raspberry Pi
What a robot.
The secrets contained in drivers and firmware aren't valuable, merely dangerous. Having the source to a graphics driver doesn't make it much easier to design graphics hardware, but it does make it a lot easier to identify and prove patent infringement, and it makes it easier to circumvent arbitrary restrictions that exist for purposes like product segmentation or DRM.
I have yet to see a solution that provides acceptable levels of client data and accuracy that completely avoids parsing the User Agent string. Feature detection alone won't cut it, and the converse is true as well.

So for the time being, the most effective method to optimize your website for the widest variety of clients, is to employ both User Agent parsing (server side) and feature detection (client side).
> China as a target is a hard one. ... and because the number of juicy targets is rather limited (government mostly).

China is one of the world's largest markets for many industries. Why not industrial espionage against them?
Right on. While I'm dubious about this being a US trojan, candor requires me to say that some of these observations are also things friends of mine pointed out to me about Stuxnet when I was doubting that was a US project. You probably can look at a raw assembly dump and get a sense of how many different people worked on it, and, if it's a lot, sure, maybe it's a defense contractor.
Github has some nice features that chromium.googlesource.com lacks, like being able to list all of the commits that have changed files in a specific sub directory.

Synchronising a mirror automatically is pretty trivial so I imagine they're usually pretty up to date.
How are these things named?

Is "Regin" or "Stuxnet" a string somewhere? Do the researchers make the names up?

(And, what do the creators think of the name their tool is given vs. what they called it.)
How to become a Hacker

http://www.catb.org/~esr/faqs/hacker-howto.html
You've probably also got a perfectly good text editor, so you're not the target audience.
Private property is a system that's useful to reduce conflicts that arise from two properties of land: rivalry and scarcity. Ideas and other creations need to such system, since they can be shared infinitely and concurrently.

Also, the "wholly their creation" is often untrue, especially when it comes to patents. It's often just a result of having the money and/or knowledge to submit it. Multiple people can and have came up with the same patentable concept independently.
Same guy but content is different
It's Jacob, not Jack.

I'm really not sure how much credence I give crypto comments from Appelbaum. The idea doesn't make much sense: the NSA has access to tons of different ciphers; why would they use a patented commercial cipher nobody else uses? It's all the downside of COTS (a public target for cryptanalytic research and an idiosyncratic choice that makes it easier to attribute attacks to them) but none of the upside. With RC6 you don't even get good open source library support.

But either way: RC5 and RC6 are very different things.
Crowdsourcing transit info for Myanmar, Bangladesh, Sri Lanke, etc.
This ~prevents people from modifying the binary that you download, but doesn't prevent them from knowing that you downloaded it.
Now it looks like you are trying to structure things to make it look like I'm a bad person by stepping on you when you're down.

Three months ago, https://news.ycombinator.com/item?id=8187802 you wrote that you are 35 years old, have recently switched jobs, and "feeling like I'm home."

35 is not a mid-life crisis.

One of your HN questions is "Sorcerer, mage, wizard, magician, what's the difference?" You also asked it at http://rpg.stackexchange.com/questions/50672/sorcerer-mage-w... .

That has nothing to do with an alignment of anything.

According to your questions, you are working on a lot of things, from C64 to BDD and Kanban, from genetic algorithms to photo backups, etc. For examples, "I bucket-listed a simple game dev project for myself and looking for inspiration", "Genetic Algorithms side project? As a hobby, what would you build?".

Don't think you need to be inspired. That's a great way to failure. Just start doing it. Don't worry if it's not good enough for anyone else to see, or even care about.

If you are in a depressed state, and unsure about what to do in life, you are not alone. My experience is that many people are that way. The best approach I know of is to talk with people, in real life, about it, or to start doing things you want to do without worrying about long-term goals. There is also professional advice for these matters - which can surely provide more helpful feedback than replies from HN strangers like me.
I agree. But their "choice" to accep TARP or not was not really a choice. They could accept the terms of the bailout, or die (go bankrupt). Whether or not it was their own fault that they were in that situation is irrelevant.
What a refreshing journalistic style. Mostly just the plain quotes from people.
> Can't speak for MS, but GS was not going bankrupt, they were the only one's who were making money...

That's a bit misleading. GS had a huge exposure via AIG. Many people in the industry think that GS was essentially bailed out via AIG.
But "ancient" astronomers would have been even less accurate, and headlines need words that people can instantly recognize.
Cool site! I have applications that would benefit from a deeper fuzz testing suite, so the site will come in handy for me.

Are you taking submissions for fuzzing tools? I recently released Binspector as a standalone tool for binary file analysis. One of the features it has is a strategic fuzzing system, which is used to construct attack files from a known good file with analyzed weak points.

The source is on GitHub: https://github.com/binspector/binspector

And a blog post that briefly covers the fuzzing portion of the tool is here:

http://binspector.github.io/blog/2014/10/13/a-hairbrained-ap...

If you have any questions/comments/concerns, just ask.
Still no opus?
The idea seems novel. But without the filter I am left at the mercy of the system to guess what is good. Btw what is the default setting ?
Forcing all traffic through a bastion host (especially for things like logging) can be a good practice -- especially if it's uncommon for users to need to be able to log into machines (e.g. a production network), but where you want to retain access.

For something where it's more "lots of users need to connect to lots of boxes regularly", I'd prefer kerberos or LDAP/AD (to manage keys).

There's also a good argument against ssh keys anyway -- they don't have expiration dates, don't necessarily provide 2fa, don't have good secure storage on client devices, etc.

(In the long run I'd probably go with a client-device managed credential, some kind of client-device-specific biometric or other auth through a secure path, and some scheme to ensure users don't authenticate via a tampered client device. It's a hard problem in a mobile/laptop environment.)
The smart against the dumb: The new Cold War
Let's not jump to conclusions. If Symantec's characterization of the sophistication of this malware is accurate, then surely they could have afforded some crypto expertise.

First, can we agree that any encryption algorithm better than a Caesar cipher is good enough for this particular application? That's because nobody who's analyzing this malware is going to bother with cryptanalysis because there's an easier approach. The encrypted data has to get decrypted before it runs. Therefore, you watch the execution with a debugger until it gets decrypted and executed, and then just capture the plaintext data (and the key if you want).

Given that resisting serious cryptanalysis is off the table, I can suggest several reasons for RC5:

- It has much smaller code size (500 bytes vs 15000 for AES).

- It's less vulnerable to fingerprinting. That is, anti-virus software might have checks for AES but not RC5. The malware writer would know this because they actually tested their malware against all the anti-virus products and found that none of them have signature or heuristic checks for RC5 but do against AES. (I'm just fleshing out the thought; I don't know if AV software checks for AES and RC5.)

- AES runs faster than RC5 in general, but maybe the particular platform or instruction set for this malware makes RC5 faster.
In the WordNik API i am ensuring the word has a dictionary defintion.

Then i am searching Amazon using the "All" category. When the results come back i am filtering out "books" and "ebooks", and then from whatever is left i show the first product.

So at the moment its just an open slather.
Fix Yourself Before Fixing the Masses
>It seems overly defensive.

Based upon this one instance where he shows up and correct misgivings ? Seriously ?

If anything you come across annoyed that your uninformed ranting was corrected.
Bidirectional Type Checkers for λ→ and λΠ
OMG SPOILERS

But seriously, I was following this like a TV show, kind of hoping Anand would win for the extra drama it would create.

Congrats to Carlsen, clearly an amazing player but...

#Caruana2016
In Australia, if you apply for a 457 visa as a software developer, you must show 3-5-10 years of experience in software development, "or a closely related field". It's much easier to be in the first situation than having to demonstrate the field is closely related, e.g. they don't specify DBA nor team lead on that list.

Of course if you apply with humans, they may understand that a master of Linux and Java dev adds a lot of value to a dev team. But HRs aren't humans.
The Brave New World of Bodacious Assumptions in Cryptography (2010) [pdf]
I'm having trouble parsing this comment. Your suggestion is that the author is sophisticated and that's why they chose RC5? RC5 is a broken 1990s cipher. If the authors wanted to minimize code size, they'd have used a native stream cipher, not a 64-bit block cipher.

I'm also having trouble with the idea that the author of this trojan might be GCHQ or NSA (or sponsored by them), but that cryptanalytic techniques from the late 1970s are off the table.
I can't even imagine how much penises they had build in this time
It's been a real treat watching Carlsen play these past few years in his rise to fame - He has a fundamental understanding of endgame far above anyone else playing at his level. It's fun watching the latest generation of players add to the skill of the game, with Carlsen atop that list.
In CSS, “px” is not an angular measurement and it is not non-linear[1]

http://omnicognate.wordpress.com/2013/01/07/in-css-px-is-not...
Wow, the extensive comment section is eye-opening to me, in how little consensus there exists about the validity of models, line-fitting, and prediction.
Holy cow this looks awesome
> whereas dbus and systemd and gstreamer can move fast and break things

I think you will find that this attitude is exactly the opposite of what is expected at the plumbing layer. Move fast and break things is fine when no layers depend on you to remain stable (see also, the Web). Imagine how hellish life would be if Linus et al. took this attitude towards kernel development.
Ask HN: Companies hiring rails interns
Which companies hire/are hiring Rails interns?

I'm a first year computer science student who'll be looking for a summer internship and then a year-long placement after my second year. What opportunities are out there?

A shop primarily using Rails would be my first choice; it's what I've used for side projects, and I spend enough time working with Java (eugh) for coursework.

I'm a Brit, so the company would have to be based in the UK, open to hiring foreigners, or happy with remote workers.

P.S. This is my first post, so this is a pre-empted apology just in case I've broken a well-known rule. :)
From page 18:

- But it [Unix] lacked an active data model
- Farber suggested this in 1978 and we all thought it made no sense
- He was right, as usual

Does anyone know what this refers to?

Any articles on it I could read?
FreeIPA has provided this for a while:

https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_...

More recently the AuthorizedKeysCommand patch has made it's way into Ubuntu's sshd, similarly allowing sshd to call script that looks up a user's authorized keys from LDAP.
NVidia is a minor player in the non-laptop mobile space. PowerVR and Qualcomm have the most popular GPUs, followed by Vivante and ARM's Mali as the second tier. NVidia's mobile GPUs are only used in their own SoCs, and the Tegra has never been that successful.
R is in some ways more forgiving to newcomers. Sure, there's all sorts of weirdness around how vectors and matrices work, and don't get me started on the cryptic function naming, but (1) almost all batteries are included -- hardly ever a need to hunt around for packages, (2) RStudio is really nice, with graphics, a shell, a text editor, documentation etc. all in one place, (3) it's mature and well-tested.

I prefer Python myself, but after spending a couple of months with R I do understand why people like it.

(OTOH I'll be a happy person if I never ever have to work with SAS ever again.)
Depends how long your string is.
You could virtually hear the nerves cracking on move 27. I feel like this game will be burned in my brain for a long time and serve as a constant reminder to think objectively in moments of stress.
I run FreeBSD with ZFS as root and it doesn't suffer from those issues. But then ZFS is quite significantly more mature than Btrfs anyway.

It's also worth noting that ZFS has been available as a root file system long before FreeBSD added ZFS to RELEASE. I remember running OpenSolaris (and some of it's forks, eg Nexenta) with ZFS root about 6 years ago. Possibly longer actually.

The issue with ZFS as root was more of a problem with the boot menu than the OS. OpenSolaris used GRUB where as FreeBSD obviously doesn't, so FreeBSD needs to either port their ZFS drivers to their bootloader, or employ a hacky method of having a UFS boot volume that then points to a ZFS root partition (which, sadly, is how FreeBSD currently works).

Interestingly, since GRUB is GPL, it meant that technically there were GPL ZFS drivers even before Btrfs started life (never mind the various Linux ports of CDDL-licenced ZFS drivers that have appeared since). Albeit those GPL ZFS drivers were read only