skysight-inc/HackerNews huggingface dataset:
I perhaps used the wrong term. I meant straight-up collision with a modified length.

The known MD5 collision attack needs to modify the length of the message; finding a collision with the same length is extremely difficult. It would be reasonable to assume that attacks on other hashing algorithms would suffer the same constraint.

Wouldn't having the length specified in the integrity attribute help reduce chances of a future attack? The cost of specifying the length is negligible; about 12 bytes for a base-64 encoded 64-bit unsigned int.
No, your time doesn't become less value because you're unemployed, but you have more of it and more of an incentive to participate in the "inefficient three-ring circus" process.
StartSSL is free and simple to use unless they changed recently. The only downside is that certain UAs don't trust the StartSSL CA, notably Java.
The first use case that came to my mind has been the one I've had difficulty with for the longest - marking/unmarking my music files to sync with my Android phone. I've heard Rhythmbox is good for that but what I'm looking for is a window which shows all my music with those that are also on my phone marked somehow (maybe a differently colored icon or something like that). I should be able to right click or use a shortcut to mark/unmark the music and once done, the music on my phone is updated. Files previously present and now unmarked are deleted, files newly marked are copied.

I can see using TMSU for this with following approach:

1. Mount the VFS, to e.g. mount point "mp"

2. Using Nemo Actions (I use Linux Mint), call a script that upon executing on the selected file will do the following:

- toggles the "sync" tag (so all files with "sync" will show-up under "mp/tags/sync")

- If the file already has a "sync" tag, untag it (can it be done by doing an rm on "mp/tags/sync/<filename>"?)

- Based on tag being present or not, toggle file icon to visually indicate if the file is marked/unmarked. I don't know how this can be done.

3. Once done, we can run a simple rsync script that syncs "mp/tags/sync/*" to the sdcard on the phone.

Not sure when I will get around to actually implenting this :)
I know about the work hours but the industry is responsible for many great things and I do not want such an event to be a deciding factor to come out of it.

Moreover, the indie option has always been at the back of my mind.
yeah I read that as part of my research on them for my interview.
I worked in the industry in California for four years before going indie. No, that is not normal. There are good teams out there; aim for them. You want to make friends in the industry more than you want a famous company on your resume, and the two aren't mutually exclusive.
Heavy on retro nostalgia, but there are good hardcore hacking bits in the talk.

I found it interesting both Capcom and later Sega used custom security scheme that encrypted specific address ranges used for code, and how it was defeated. Very same method is used to this day* in Bluray drives, and is as "easy" to defeat.

* Micah Scott is working on reverse engineering USB bluray recorder firmware. She found encrypted procedures in firmware running on one of the processors inside the drive, and was able to decrypt it using similar trick(pushing own code after decryption, but before execution over jtag)

http://vimeo.com/channels/coastermelt/111417458 talk about decrypting AACS DRM function starts at ~10:00 minutes.
Govt moves to keep Barrett Brown case secret as sentencing looms
This is the price of "HTTPS Everywhere" security theater.

HTTPS everywhere isn't security theater. It prevents ISPs and coffee shop wifi snoopers from intercepting unencrypted traffic. Combined with certificate pinning et al., it also protects users against those governments that don't control the CDN that serves the HTTPS traffic.
Purely Functional REST APIs with Finch
I have been told about this so many times before...
What baffles me is the number of programmers who use technology like cars, cell phones, fridges, planes, trains and advanced medicine without understanding what makes the underlying technology possible.

/s Be nicer.
Why would you go through a recruitment company when hundreds of startups are scouring Angel List everyday? I'm genuinely curious. I happen to be an in-house recruiter for a YC startup, and I always wonder why talented people don't just approach us directly, or post their resume in a public place...
Honestly, i'm curious as to what the jokes/taunts were. Maybe you just stumbled across something that's weird german humor? Since i am german i might be able to give you an inside perspective. (Or confirm they're asshats.)
I did not even know about DAILY WTF before you mentioned it.
Think of SSL like vaccination. It provides necessary immunity for those rare cases where something bad would happen.
Because of a single pseudonymous post on HN?
Great work, it looks awesome.
Good to hear - building a project on Ember now and it (Ember) is an absolute joy to work with. Keep it going!
Yup. It's the same idea as Seth Roberts' "Shangri-la Diet" where you drink a tbsp of olive oil or something first thing in the morning which supposedly reduces hunger the rest of the day.
This is absolutely fascinating. I want to stop everything I'm doing and contribute to science.

I've had this impulse my entire life, yet the economics of doing a PhD are so dystopian that the urge passes after a few minutes of rational thinking. So, what is HN's answer to the decline of institutional science? Projects like this will take decades, so crowdfunding is out.

A dozen Janelia Farms with long term funding from VCs would be great right about now.
Telling the user nothing would not impart a false sense of safety.

Heck, why not mark HTTP as insecure, don't mark self-signed HTTPS, and mark CA HTTPS as 'secure'?

Of course, CA HTTPS is not really secure at all, but that's another discussion entirely.
You shouldn't assume that the actual reasons behind a policy are the same as the stated ones.

You also shouldn't assume that the reasons that some random guy on the Internet gives for the policy are the real ones.

This is the big problem with believing in conspiracy theories: yes, you are being lied to by people in power. You are also being lied to by people not in power. They are being lied to by the people whose actions they use to build the theories that they espouse to everyone else.

Eventually, you realize that the only course of action that keeps you sane is to realize that society is built upon lies and misdirection, and it doesn't matter. We make the best inferences we can with the data we have available to us. And if we're wrong - well, so is everybody else, so the goal is just to be a bit less wrong than everyone else. Usually you get there by discounting everyone else's analyses and listening to their data and personal experiences only.
I'm in favor of remote work as a partial solution. I work remotely from Myrtle Beach, SC, and my wife is currently unemployed and seeking remote employment leveraging her nursing degree and background along with her interest in technology. It's hard. Even tech companies who have remote positions which are a great fit, which she qualifies for, and they want to interview her... End up not working out for one reason or another. Example: twice now Flatiron Health decided they didn't actually want the position remote after they screened her and began the interview process.
Shen: pattern matching, lambda calculus, macros, lazy, static
One possibility for a gradual approach: sites which have both HTTP and HTTPS servers, are marked insecure when user browses to the HTTP version. The knowledge about the presence of both HTTP and HTTPS can be hard-coded for popular websites* and/or inferred from history in the client.

* I mean popular websites that don't send HSTS header, such as reddit.com. Those that send the HSTS header would anyway be subjected to automatic redirection.

PS. We are considering this option in the gngr browser (https://gngr.info). We are also considering going further and not loading the HTTP page automatically. The user would need to press "OK" to proceed.
But you don't get satiated with just caffeine. And you don't get it for long with carbs and not as long from protein. Carbless fat is more satiating.
Compatibility is most of the complexity: http://invisible-island.net/ncurses/terminfo.ti.html
Yes, that's more or less the lump of labor fallacy. I'm still not sure why it's relevant here.

Here's the full quote from the nytimes article:

"Some countries have developed policies that encourage older people to leave the labor force, so they do not “crowd out” younger workers. But studies across countries and time suggest that crowding-out may not actually be a problem. Economies do not appear to have a fixed number of jobs. When more older people are working, they are earning money that they will then spend in ways that may create more jobs for young people, for example."

So in this case, I don't disagree with you, but it seems that the times article identifies the lump of labor fallacy immediately after the quote you provided.
What would one hope to gain from such a lawsuit?
Yes and no. Crytek is a very unusual company with its own distinct personality. If you're a graphics engine programmer or an artist, it would not hurt your resume to work at Crytek. They make beautiful, sexy shit. If you're just about anything else, there are a lot of good reasons not to work at Crytek. They've spent a lot of time and money without having seen commensurate returns.

Joking around in sometimes very non-politically-correct territory is not at all uncommon in the game industry, but it is also not that uncommon in lots of other industries. The things people say when they think they aren't being heard are generally very different from what they say when they know they're being watched/recorded. The typical butt of jokes in just about any industry is whoever isn't in the room.

To be honest, I wouldn't worry much about racism. I'm not saying it isn't an issue with some folks, but on the whole, if the game industry is anything, it's a meritocracy. If you've got a fucking cool demo, you can open just about any door with it. Many people of profoundly different colours, nationalities, sexes (including indeterminate), behaviours, and smells have paved the way for you.

It's very unlike film, for example, where there are strict hierarchies of who you are and aren't allowed to talk to, and contacting the right people is extremely difficult without the right introduction.

Actual talent and what you do with your time is so important to the game industry that it eclipses just about everything else, including professionalism. I'd definitely get used to that. They really don't want to interview you. They want to make games. They don't want you to do tests. They want to make games. They just want to know whether you're a fucking bad-ass coder, to see whether they want you to make games with them. If you can prove this in some other way (a great demo/game w/ source), you can also drop any pretense of professionalism and tell them you're not going to do their tests or interviews. Great coders with demonstrable proof of same are in such short supply that you will still be seriously considered at most places.
Not even remotely realistic, in my experience.
"If it’s hard, it’s wrong."

Some problems are actually hard to solve. And those are the ones that make software development interesting rather than just drudgery.

"Don’t start coding until you know exactly what needs to be done."

Coding a prototype or a simplified version of the problem can frequently give you traction on problems that are hard enough that you don't understand them yet.

"The best code is no code at all."

That one I can definitely agree with.
ASK HN: When did using open sores software become so much like joining the Communist Party?
Its not an issue of motivation, but one of competing goals and interest groups creating deadlock.

Just considering goals, you have listed a lot of (very good) ideas for improvement. But everyone from voter up to politician is going to have their own pet ideas they want to do first and spend the most money on. Everyone gets to arguing and nothing gets done.

Not to mention the many interest groups with a vested interest in maintaining the status quo. Public sector unions represent nearly half of union members nowadays and are very resistant to change.

Education reform and police reform are often blocked or made politically unviable by their respective unions.

Healthcare reform in a way that would benefit all including young people is overpowered by large groups like the AARP.

These groups all have a created interest in maintaining their power and increasing the benefits paid to their members.

A politician, however idealistic, usually just ends up running into a wall and giving up.
I'm assuming you're a few years out of university?

No, run..not walk..run from the game industry.

You should make $80-90k fresh out of college

Big demand. If you're smart and you know you're smart, demand 120k

After that, be a hero! and not a zero!
Don't worry about racism because the game industry is a meritocracy? I don't understand the logic here, can you elaborate?
Is this a serious post?

""When you think "racist," there is a non-negligible chance that you envision something completely different from the situation that actually occurred here.""

What, exactly, does that mean?

Are you going to tell me about how you make racist jokes all the time, but it's okay because you have a black friend?
I don't have a spare $100k
They said some engineers made a racist joke, not that the company is racist. Why wouldn't we assume the author is telling the truth, especially since they are looking for guidance and help.
You know, given that we have computers to perform the calculations, my own mad dream is to return to solar hours: twelve hours from sunrise to sunset, and twelve from sunset to sunrise. Thus summer hours would be longer and winter days would be shorter. Ditto minutes and seconds.

Science would of course need to have a standardised second almost always different from the current second, but that's no different from having a standardised temperature and pressure almost always different from the current temperature and pressure.
This should be called "SIRC" ^_^ If anyone else has "Permission denied" run this command: ssh-keygen -t rsa -f ~/.ssh/id_rsa
you are right, I should have not mentioned their name in the post. I did not mean to smear them. Personally, I just wanted some generalist opinions of the industry.
Why isn't Google facing the same issues Microsoft faced back in the Windows + IE dominant days?
That's definitely not what his comment says. He's quite clearly talking about !g (not other bangs) and saying (incorrectly) that another entity (DDG) is doing the Google search so Google can't build a profile around you.
Well, the author of this article mentions he has a book on the same topic called "A Planet of Viruses." So that might be worth checking out. (I haven't read it myself.)
I think the best I can do here is my usual answer: take some time every week to work on a problem that is a little bit harder than what you already know how to do. It requires discipline, and it's hard, but it reliably results in levelling up.

It also helps with humility: if you're constantly working on things that are too hard for you to do, it's hard to build up an unhealthy belief in your own abilities. And humility will keep you open to unexpected learnings from collaborators and people working on related things.
The article is a reminder that groups of people make decisions like primates, even the most intellectual people. The criticisms are purely subjective (slashes mine):

- "To some staffers, /it felt as if/ Hughes had sent Vidra to scare them into writing more, buzzier Web items"

- "Vidra made his first appearance...It was /just terrifying rhetoric/ about change without any substance to back it up."

However the author couldn't come up with any specific examples where Hughes or Vidra are unreasonable people:

- Hughes removed "Attack of the Crybabies:" from an article title "Why Hedge Fund Honchos Turned Against Obama” (Hughes was going for /less/ "buzzy").

- Foer wanted to make Amazon’s suspension of advertising public, but Hughes insisted that he not. (Again, Hughes is the one avoiding "buzziness")

- Hughes asks questions like, "Has anyone, including this article, said what they did was illegal?" (a reasonable question about objectivity)

- “The only compliment [Hughes] or [Vidra] ever said about a piece was that it ‘did well,’ or it ‘travelled well,’ ”

Just about the only useful takeaway from this article is: don't try to manage a politically sensitive situation by video conference.
This is a reprint of Steve Yegge's famous "Google Platforms Rant" from 2011.

The original HN discussion from 2011 can be found here:

https://news.ycombinator.com/item?id=3101876
In my opinion Rails is the fastest way to build web applications, and the best framework for iterating as you react to new business knowledge. I don't see that changing soon.

Investing in a JS framework seems like a natural complement to your existing skills. Angular & Ember are great fits with Rails. I also like Knockout, which has an easier learning curve.

Another great fit would be Chef, which would leverage your Ruby skills and let you improve how you're deploying the Rails apps you're building.

If you don't have a lot of experience in low-level languages, I'd explore those for the learning. C is a lot of fun and very different than Ruby. iOS would be a practical choice, and apps make very rewarding side projects, although it might be a big change of focus for you. If you want to stay on the server side, I'd find something you can optimize with C or Rust: some critical code, or maybe a Postgres stored procedure.
read Daily WTF and http://clientsfromhell.net to prepare yourself for a career in consulting. Clients from Hell is a designer-centric site but it mirrors the IT side way too well.
I use Chrome and occasionally log in to my old Yahoo mail...I can't imagine it's that much better than the experience on Firefox. Half the time the page just randomly decides to cut off the search bar (which I use a lot).
> Anyone who has worked on date-time problems (not even libraries, just trying to correct for the special cases, cultural differences or just plain weirdness that the library of your choice doesn't deal with) will recognize the horrible truth of the joke, "I used to be in favour of space-travel, then I realized what effect it will have on date-time libraries."

...I think you just killed a piece of my soul... I understood that perfectly. :(
People make racist, nationalist, sexist, and all other kinds of off-colour jokes in the game industry, particularly when they don't think they're in earshot of the butt of their jokes (obviously with some notable exceptions), but it doesn't have much effect on whether you'll get or keep a job as a coder. If you write sweet code, you write sweet code. End of story. People will want to hire you.
Something I don't quite get is why we seem to think that two income households should be the goal. Seems to me that the net effect of multi-income households is to make housing more expensive which in turn forces families to have two incomes and in the end everyone is just working a lot more for the same thing and a lesser quality of life.
unfortunately eugenics is immoral or something
I'm seeing stack overflows (not a problem with tail-call optimization) as the biggest problem here. There are equally dangerous problems, though. Buffer overflows are a very real concern, especially in embedded software; but that doesn't mean that people don't ever use pointers. Everything about software has risks. Yes, they probably shouldn't have used recursion there in that car; but honestly, it's just a stack. Enough calls and some state could have been frozen. They should have put mitigations in place to stop the potential for a stack overflow to have actual, detrimental results. Do you refuse to ever make a function call for fear that you might be at the top of the stack somehow? After all, how can you know that you haven't accidentally created a state machine with function calls and are at the peak of it now, and end up causing the same problem. Recursion may have been the final manifestation, but it's certainly not the only place that failed.

I argue against your thought that recursion is useless, as well. It's a natural and intuitive solution for a lot of problems. The very concept of a dynamic programming solution starts with a recurrence relationship. It starts with recursion. Sorting algorithms are intutively recursive in many cases, Quicksort and Mergesort are just two examples.

And, 'dangerous' is an interesting term. I understand you've worked in embedded systems and hardware, and so those things are often critical systems that have to be super secure and completely bug free. Not every system is like that, though.

I want to understand why you believe that recursion is both useless and dangerous. Could you give some broad examples of the dangers of recursion from your years of experience?
Waist slimming triple threat green smoothie
Because cultural differences and biases in perception are a real concern. Just to give a small example, a friend of mine, from japan, once wore to a conference in the USA (quite innocently) a red armband, as is commonly used over there to mark group leadership. The result were accusations of her being a nazi sympathizer due to lack of knowledge of that custom.
$120k for a college grad?
There is something deeply tragicomic about Vidra's role in this. I know nothing about the man, and it would be too easy to disparage him on this basis of this report; one should presume that he has management and organizational skills well suited to an executive position, and one should not forget that he seems to have been completely hamstrung by the owner's ill-fated activism and engagement with the magazine, whatever his own faults might be.

That said, two items strike me. The first is that he comes across as stunningly tone deaf in this circumstance; unless I am reading pure calumny, it seems that he did not consider what a corrosive effect a jargon-heavy, non-committal communication style would have when dealing with people who were deeply, professionally engaged with the meaning of words. Nor does he seem to have understood that he was in a situation where he was starting with zero social credibility and would need to establish social credibility in order to do his job.

The second is that this was a situation in which he was facing the least fungible workers imaginable. All TNR had, besides the cheques for the current subscriptions, was the culture and society that had built up around it: most specifically that this particular small social network, consisting of these people, had as its central focus, source of wider status, and raison d'etre the writing down of words in exchange for money under the masthead of this particular little magazine. There are no factories, nor even inventories. There are no repositories of source code. There are no patents or significant intellectual property rights. The people he alienated were completely integral to the product he was undertaking to make profitable.
If you're Scandanavian then chill at home for a couple years and work on the Unreal4 engine.

There is nothing better.

Work on some cool level-of-detail streaming. How can we massive streaming worlds?

Think of Carmack when he was a pup!
note for the future: Amazon is a tab away and will give you summaries and more of millions of books. mostly a solved problem. would not be surprised if Wikipedia had a summary of it too.
emacs-refactor: A refactoring system for Emacs
Two income households is a goal for my family because it 1) reduces the cost of living so that money can be used for other things; and,

I would encourage my life partner to pursue their dreams, especially if that includes having a career because, as my mother has put it, being at home all the time for some people is boooring