skysight-inc/HackerNews huggingface dataset:
In theory yes, in practice most people I know in places with strict firewalls use commercial VPNs rather than Tor (faster, easier).

Also if you're hosting on a site like Wordpress or Blogger all the government sees is an SSL connection to wordpress.com or google.com. They don't get to see if you're reading or composing. So in practice it's probably good enough.
I wouldn't call this reverse-engineering.

How are UUID and HASH are generated? Are they unique to every installation?
Art of Freemium Model
How to SEO Your Life – SujanPatel
Reminds me of "Worry is interest paid in advance on a debt that may never come due."
I think the author of the algorithm implementation would have benefited more from a patent than a BSD copyright notice.
Sabre has a free flight search API: https://developer.sabre.com/docs/read/REST_APIs
I don't see how his argument holds water, the BSD license is quite permissive, and porting software to another language sounds like a modification to me, assuming you keep all the copyright info intact. He still holds the copyright, but he's granted everyone a worldwide right to use the software with or without modification...

And apparently he doesn't know what the common meaning of "FOSS" even is.

"Metaphone3.java was released as part of the Open Refine Package under the BSD license" and then "It does not, contrary to popular belief, automatically declare the algorithm to be public domain, or the software to be FOSS. "
Can business take sustainability cues from the emerging markets?
How is it better than mitmproxy? Also, it's not free/open-source.
Can you?

Besides, I'm not sure what your point is. Societies don't tend to judge a thing by whether there's a single good use, somewhere. They weigh things up.

Hidden services can be enumerated, so it's not impossible to find one if there's some awesome hidden service somewhere. But such a site would get a lot of attention very quickly. It wouldn't be secret very long.

Hopefully this whole story will amount to nothing. It'd be very sad if Tor disappeared. But let's face it - when you have the Prime Minister of a technically advanced western country tasking one of the worlds most advanced intelligence agencies with "break the dark web" they were going to hit serious problems sooner or later anyway. And mostly that's because of hidden services. It'd be a crying shame if this one feature with hardly any legitimate usage caused the entire project to tank.
I expect to see a Ruby port by the end of this day.
I've tried this website on iPhone 6, and it redirects to the standard version of the website instead.
Yeah, at the risk of being "middle-brow", I didn't really learn much about "How to be an expert" from this.

Maybe, it's just a title issue, and "How to be among the first investors to spot an exploitable change" or something similar would have set my expectations properly, but I was hoping to get some useful tips that would apply to a significantly broader definition of "expert".
Best Physics Videos of 2014
We can learn from these animals Elephant caught cleaning up the trash
Nope. Can't copyright an algorithm. Would have to use patents and software patents are on highly shaky ground.
If only we could all be as perfect as Brian! I find it funny that he rants about choice. The thing I dislike most about systemd is that it is removing choice! I suppose I am just going to have to go and choose to use FreeBSD.
For others wondering what Metaphone is, here's the Wikipedia description:

"Metaphone is a phonetic algorithm, published by Lawrence Philips in 1990, for indexing words by their English pronunciation. It fundamentally improves on the Soundex algorithm by using information about variations and inconsistencies in English spelling and pronunciation to produce a more accurate encoding, which does a better job of matching words and names which sound similar. As with Soundex, similar sounding words should share the same keys. Metaphone is available as a built-in operator in a number of systems, including later versions of PHP."

Metaphone 3:

"A professional version was released in October 2009, developed by the same author, Lawrence Philips. It is a commercial product but is sold as source code. Metaphone 3 further improves phonetic encoding of words in the English language, non-English words familiar to Americans, and first names and family names commonly found in the United States."

http://en.wikipedia.org/wiki/Metaphone
Certificate pinning would help to prevent sniffing traffic with tools like mitmproxy, but once you decompile the binary, you can disable certificate validation.

I'm curious, in your case did you consider preventing using your API by third-party clients?
> What makes you think you can predict the consequences of an attack against SHA-512?

70 years of cryptographic history.

> Don't put all your eggs in one basket.

Don't use cryptographic primitives in ways they weren't designed for. That's a surefire recipe for disaster.
It's always surprising how little people understand the licenses they publish their code under. BSD does not make something public domain, but it does allow derivative works and inclusion in completely unrelated projects, without permission of the author. Rewriting it, from scratch, in another language generally completely bypasses even the requirement to reproduce the copyright notice (unless there are data structures being copied over, or similar, that copyright would apply to).

Algorithms are sometimes subject to patents, though I believe they shouldn't be, and if the author wanted this sort of control over the algorithm a patent is the path he should have taken, but as far as I can tell the author has not patented this particular algorithm (and I doubt it is novel, as it sounds similar to quite a few pre-existing tools in related fields).

This is just a sort of weird conversation. Why Open Source something if you don't want people to use it in interesting ways?
I've been to North Korea and confirm this is accurate. They have an internal intranet with message boards etc. Pretty dated.

Also when Indian contractors were brought in to work on the pyramid hotel in Pyongyang I was told that they had a special network provided by NK government which curiously had full access to everything e.g. Facebook etc.
I'd be curious to see how these results change with pen-driven technology, such as the Galaxy Note tablets, or the Livescribe pens (that simultaneously write to paper, create digital copies stored in Evernote, and also record an audio version of the lecture/meeting).

I've always felt that when I need to think through concepts, walking away from the computer & working with pen & paper was a more effective way to do it, at least for myself.
I'm not a legal expert, but I bet there is a clause in TOS to prevent that. I wonder if anyone actually got sued for violating TOS this way though.
Have you ever seen any evidence to prove his or his associates guilt? Just because he was charged with anything makes him not guilty. Basically he was imprisoned for about 10 years for alleged tax evasion + for "stealing" crude oil.

p.s. I have seen a lot of the original materials of the cases and I can assure you that State failed to prove his guilt.

With Navalny cases (yes, he and his associates have been charged with many things including stealing a picture) it has reached the whole new dimension.
"...we hope that now you have an impression of how to develop Java EE applications in IntelliJ IDEA."

We sure do now!
Looking into the Java 9 Money and Currency API (JSR 354)
A Year of Solar Panels – Open Data
Unfortunately, the author of the Metaphone code (lphillips) keeps talking about public domain as if that is what is the point of contention. When you license something as BSD you aren't putting the work into the "public domain" (as in the legal meaning) but you are giving a very permissive license to the subject of the license.

My guess is that Google requested use of the Metaphone 3 package, Lawrence perhaps didn't understand the what BSD meant, but was willing for Google to use it in their Google-Refine (now Open Refine) codebase so willfully let them pick the most permissive license.

I'm having a real difficult understanding him from his GitHub comments. It's clear that he never intended his algorithm to be re-useable or modifiable in any way, but if he intends to restrict the future use of his Metaphone 3 code or even prevent a port, he's going to find it impossible....

Lesson learnt... it's clear that a work of this magnitude would have taken thousand plus hours... if you don't intend it to be re-usable, then you shouldn't pick a permissive, open source license such as BSD.
nerd fights are funny
You just took what he said and completely reinterpreted it.

His attitude wasn't "don't do that there is already a bug report". It was "well you made bad decisions by (a) wanting to stop fsck in the first place and (b) not being prepared for it happening i.e. by setting up two GRUB options".
It's not just about testing, though that's where you tend to run into it first. Statics and constructors are both second-class citizens in Java: they can't conform to interfaces, so there's no way to separate interface and implementation when using them, no way to hide information, no way to invert control or any of the other principles of good design.

(Of course, Java was designed by people doing the best they could subject to particular constraints, and is now constrained by backwards compatibility. But other languages provide the same kind of features in better ways (or provide syntax that means builders and dependency injection are much less effort, depending on which way you look at it))

Pragmatically, good design is not the only concern; if you're not writing a library with binary-compatibility concerns, then IMO the syntactic overhead of builders is often a cost that outweighs the benefits. But the design costs of statics and constructors in Java are real enough, and there are very direct costs to using PowerMock (tests are harder to maintain and more brittle as they have to specify which classes they're rewriting, and it can conflict with other things that do bytecode manipulation e.g. test coverage tools).
Whilst testing like that seems to be possible for granular facts and most likely is a great way to handle these, what about conceptual understanding?

The only "surefire" way I've found to test that in myself is written condensing of the concept in a way that allows another person to understand the concept from my notes, or actually explaining the concept to another person.

That doesn't scale to 20-30 people in a class though since validating that number of explanations is not easy.

Random probing using application of the concept however encourages the cooking recipe approach. There's only a number n different types of problems you can generate, and by learning all of those is possible. They're easy to grade, but they don't guarantee full understanding.

Then there's using compound problems, where you start mixing concepts. If a student understands say momentum and friction, they should be able to work out a problem involving both. And those are the bane of students who did not invest in conceptual understanding since the number of recipes to learn suddenly increases exponentially. First midterm of physics 101 usually leads to a number of exasperated "This wasn't covered in class". Yes it was, just not this specific recipe. Now the issue with this type of problems is they cover a number of concepts, and pinning down the culprint/s isn't exactly straightforward. I guess you could tackle this through deduction based on a number of pairings (say momentum&impulse,momentum&friction&whatnot...), but noise would mess with that process.
At this point he's daring someone to do it at which point the only question will be who can afford to fight it. But seeing as how algorithms aren't subject to copyright in the first place...
Considering the last comment on github, the patent office would probably deny the application.
Name clashes are extremely common and almost inevitable, and unfortunately there's not much the first project's owner can do about it. The trademark office would likely consider "auto sales" and "media sharing site" to be as distant as possible, and there are multiple TLDs for a reason.
Right; but they were getting fucked over in the fiat world left and right up until that point too. Not saying they didn't over-promise and under-deliver but you can't really examine these things in a vacuum.
Re-writing the code using the original source as a guide means it is a derivative work if you want to get picky. Changing the programming language doesn't make it non-derivative.

If you want a non-derivative work you need to do something like a clean room implementation where the one writing the code doesn't have access to the code of the existing implementation: https://en.wikipedia.org/wiki/Clean_room_design

BTW this guy can not stop derivative works once he has released it as BSD.
It seems that this article was published next year.
I guess the tooling in this case is about as good as it gets - independent of the tools used, writing Java EE "by the spec" has traditionally been painful independent of the IDE used.
Alternative to locks and actors (slides/pdf)
How many zero-modulus solutions (and still using a loop, not just a long precomputed string) have you seen? In my experience, this is the rarest type. Of those who can write a correct FizzBuzz (which is already a pretty small fraction of the total candidates), I like to ask "how would you do this without any modulus" and very few of them can easily see the pattern that makes this possible.

Aside: it astounds me how many people, when asked to write a short snippet of code during an interview, have basic formatting problems and inconsistent code style.

If this is being done on paper or an absolutely "non-IDE" text editor then it's probably someone dependent on an IDE to do the right formatting for them. If they still do this in an auto-formatting IDE, it's probably a sign that they have no good idea of the structure/flow of the code.
A bit off topic but how does one learn the skills that Samy repeatedly uses to build/hack things like this? Any guide you could recommend?
I'm pretty sure the algorithm for Metaphone is not theirs, just this particular implementation. Which means there's nothing they can do here.
Yeah, he pretty much screams for the Streisand effect to take place there. I expect a number of ports this week just because he says they can't be done.
The real story is the toxic attitude of some people on debian-users mailing list.

If you use ZFS, you probably are on FreeBSD. Then you would not see the advocacy of systemd that sometimes borders on insane, as a problem.
TIL there isn't much professionalism in the systemd camp.
Good call. I totally forgot Malay.
Indeed, the copyright is asserted onto the written work. The algorithms, general idea, etc. are not copyright-able and except for US not even patentable.
In his example you have several missing value indicator that each contain some sort of reason as to why it's missing. Collapsing that to NA would lose data, which is why the post argue against it.
I believe the failing American education can be explained by the decline of handwriting.

Handwriting isn't declining; cursive handwriting is. I strongly believe that writing things by hand (handwriting) is an aid to learning, but I don't think learning two different, parallel scripts increases that learning. (I don't object to cursive as an art form--in fact I love it and practice it--but that is something for older kids in art class, not something for writing papers and taking notes while you're still new to writing.)

Those who print all the time can write just as quickly, draw the same diagrams, arrows, underlining, marginalia, and so on, as those who write in cursive or in both scripts. Using a single script instead of two will not lessen the benefits of writing by hand, but using a keyboard instead of printing by hand is more problematic.
I remember a couple of years back, when I was between jobs, I decided learning Java EE might improve my chances in the job market. I found a PDF book called "The Java EE Tutorial" (originally published by Addison-Wesley, don't remember the author(s)) on Sun's web site and fetched it.

I first was kind of shocked that a book with the word "Tutorial" in the title had about 1100 pages. What really made me walk away, though, was the freaking flow chart that accompanied the book's table of contents, showing how the reader should work his or her way through the book depending on prior knowledge.

There are probably situations where Java EE is the way to go, but those are probably the kind of situations where your application is going to be so huge and complex that the bloat and complexity of Java EE is not going to make much of a difference.
How is this different from computationally treating a missing value as 0?

Would this completely mess up anything that does averaging? A respondent not giving her age, doesn't mean she's a new born.
Am I missing something obvious here? What would change if this piece of software/algorithm was ported to Ruby? I mean Rubyists would get to use it, but what else would change? This whole thing seems very strange, like if someone would create a cure for a disease and give it out for free and tell everyone how it was made but insit that he be the one who injects every single patient personally.
I don't see how a state enforcing categorically insane policy, creating inevitable black market, creating an inevitable marketplace, creating an accidental king-pin, who has allegedly committed murder-for-fire has anything to do with the moral ground on which charlie shrem stands with laundering money for a drug dealer.

There are infinite silk roads and infinite drug dealers forever and always so long as drug policy remains like it is. The state itself is far, far more morally culpable for whatever true evil was actually brought on by Ulbricht than Shrem himself is.
Interesting. This just reinforces my opinion that they made a terrible decision with the original implementation of generics in Java. Basically they set themselves the constraint that generics would have to be implemented without touching the JVM, in the name of a completely unnecessary form of forward compatibility (basically you can compile generics-using code in Java 1.5 and run it on a 1.4 JVM).

The only upside was that the existing collection classes could be "upgraded" to generics, rather than having to create a new set of collections classes. When faced with the same decision, C# went ahead and did just that - eliciting complaints from exactly no-one - and in return gained powerful and robust support for generics at the VM level. Contrast that with the contortions being proposed in the article just to try to extend Java generics to fundamental types.
Ask HN: What SaaS provides both back end and front end for logins and payments?
I want to spend as much time possible developing my core product and as little as possible developing the generic services around paying customers. I want not only the backend APIs but also white-labeled template/widget/iframe that I can drop to my HTML, including login/register/forget password forms and recurring payment forms. Also I want some BaaS solution to store data against those customers.
Message to CEO of Sony – Michael Lynton
The sidebar and content alignment problem
https://pthree.org/2012/04/17/install-zfs-on-debian-gnulinux...
> BTW this guy can not stop derivative works once he has released it as BSD.

could he just remove the BSD license from all subsequent commits to the code base? The existing code base will still continue to be BSD licensed of course.
> BTW this guy can not stop derivative works once he has released it as BSD.

Aside: Isn't is possible to revoke a license?
Docker, Containers, Systemd: A Wedge Through the Concept of Linux Distributions
I'm willing to bet this isn't actually true and is misleading. The companies that got the bailout got other tax breaks and I think they got more money through other programs as well, which they then used to "pay back TARP". I really, really doubt the government came out net-positive with the loan.
Well, he does some good, sure, the kind that any generic country manager would do. Normal maintenance-mode deeds of good. But I can't recall any significant positive things that he did in the last few years, other than providing significant state support if you give birth to or adopt your second child ($10K I think). Maybe you can add Skolkovo to the list, but we are yet to see how that pans out. For now it feels like a money grab... but then again, what isn't.

On the flip side, rampant corruption makes government spending incredibly inefficient. Putin could kill all this off in a year if he wanted to, but he doesn't, because he knows how to work this kind of system. Be closer to the top, get more benefits to screw everyone else. That makes for a very stable power structure. No one will rise against him because all those with any sort of power are part of the scheme and treasure their position in the food chain.

So, even though Russia is filthy rich with oil money (50% of federal budget), they can only use a tiny fraction of that money for actual improvements to the country. Russia could by far surpass Eastern Europe in quality of life today if its government was working with any comparable efficiency, but that is the opposite of what is happening.
Offline filesystem integrety checks should not be stopped.There is a reason they take place to begin with. From the OP, it sounds like Eduardo takes every opportunity to stop filesystems checks from happening when booting. So long as he has a policy of doing them manually, and understand why they take place, that's fine. So, instead, he should just:

# tune2fs -c 0 /dev/sda1

Or whatever his filesystems are. Then again, this is risky, and the OP should understand why.
DMCA has an exception for "interoperability" to allow reverse-engineering, which AFAIK is meant specifically for this case.

However, I wouldn't consider this any real "reverse-engineering", but just inspecting network traffic --- and it should be absolutely legal to do so when the traffic is generated from an app you legally obtained, running on a device you own.

IANAL, etc.
so, we need systemd-fsckd.
I think the author has no clue about copyright law.

If he wanted to legally protect his algorithm he should have patented it and given a licence to use it only with his BSD-licensed implementation.

Still, IANAL.
No, not unless the original license text contained such a revocation clause, which isn't the case for BSD licenses.
The entirety of the license is the text of the license. If there is no revocation clause specifying how revocation would happen, the answer is no, it can't be revoked.

Assuming he holds the copyright for the entirety of the program, he could change the license for all future versions, and he also could stop distributing old versions under the old license (putting a new license on it, or simply discontinuing distribution). But, the old license has already granted thousands, or millions, of people, the right to distribute it under those terms.
> But moreover the US never managed to prove the money actually did come from cartels. Their case amounted to: there's lots of cash moving from Mexico to the USA via HSBC. It must obviously contain drug money. Therefore HSBC is guilty.

Mike, where do you get off? Rather.. where the hell are you coming from? Ad-hominem attacking Shrem for being related to the silk road and laundering money; and in the same thread defending HSBC with disinformation?

What's your angle here.

The case did not amount to anything like that. They were literally removing information on transactions that would warrant scrutiny, among many other things much more damning than 'there was a lot of money'.
For future modifications, yes, but you can not retroactively revoke a license. Although I am sure if you get a lawyer involved he can likely try to come p with reasons why it couldn't have legitimately been released as BSD in the first place, thus declare the first BSD licensing of the code as invalid.