skysight-inc/HackerNews huggingface dataset:
Perhaps not this particular event, but definitely this period was a turning point. Multi-sig is a great example. Here's a chart on the amount of bitcoin stored in multi-sig addresses:

http://p2sh.info/p2sh-ratio

Nine months ago it was sub 0.1%. Three months ago it was sub 1%. Today it's over 6% and growing rapidly.

Multi-signature is just one example of potentially radically improved security versus the single key methods we had before.

We've also seen in the past 6 months 3 companies come out with proper insurance. Circle, Xapo, Coinbase. All at a sub 1% cost. (Coinbase and Circle free, Xapo I think 0.12% annually). Combined with multi-sig vault products from Coinbase, which has done a lot of interesting security stuff. (the basic 2fa stuff of course, but I think also things like finterprinting devices to detect stolen credentials from users.)

And with that, we're also seeing enterprise-products come out which offer bitcoin management in a secure way. I wouldn't be surprised if such a company like BitGo starts marketing insured warm wallets to exchanges on a percentage cost basis, and let exchanges offer users to pay for the option of this insurance.

And we've seen more steps taken regarding the bitcoin ETF on the NASDAQ, which settles manually twice a day and allows (industrial) trading and liquidity but gets rid of the issue that Bitstamp and everyone else has: running a warm wallet on a server that automates transactions. The vast majority of Bitstamp's coins were in cold storage, but if you want to run automated transactions you can't do it on cold storage.

So this period has definitely been a turning point I think. Will be interesting to see things develop the next few years.
I'll make an analogy that hopefully won't earn me flames. It's possible to install Guix as an "extra" package manager a bit like Brew in the OS X world, which is done by essentially git-clone'ing the sources and building it in user land. Instructions are here: https://www.gnu.org/software/guix/manual/html_node/Installat... . Basically you end up with your Linux system as before, plus Guix now managing packages installed in /gnu/store, which are made accessible via your $PATH. It is therefore relatively simple to try it out that way and blow it all away if you decide it sucks.

Otherwise, the images you talk about are for booting a full live system (the Guix OS if you will) which uses Guix as its package manager. This allows you to play around with it and/or install it. This works quite well in a virtual machine such as qemu.
So Serpent appears to be strongest, just slow? Is time really that big of an issue? I mean, why not spend a few extra seconds encrypting something if it is that much more secure?
Those figures show cars like a Honda Civic has a vehicle-to-passenger weight ratio of 18, and a Smart car is 12.

Both of these cars pass safety tests. The high average ratio has more to do with US preferences in cars (for large cars built as cheaply as possible) than safety standards on their own.

I think it's reasonable to point out that the Model T was much, much slower than modern cars, and unsafe even at the speeds it was driven.

Side intrusion protection and rollover protection are both fairly reasonable standards IMHO.
I thought turbo charger was the delay in throttle response. That's what wikipedia seems to think too: http://en.wikipedia.org/wiki/Turbocharger#Turbocharger_lag

but I guess in the end I see what you are saying and it's merely a matter of terminology
Seems to me that college is a lot of things to a lot of people, and it's probably important that these expectations and measures of results are explained as understandably and universally as possible between all these groups and interests. I'm not sure we're there yet. (Not disagreeing with your post, btw)
Totally agree. He who expends all his time working has no time left to improve. I think I got this from the pragmatic bookshelf...
Without going into any detail (it's late for me), it smacks of paying up-front for some sort of lifetime employment insurance policy. (Probably a bad analogy, but it's an attempt)
To be fair, rustc is also a pretty huge application that they (and any self-hosted language) developed in parallel with Rust :D

(I'm pretty sure I remember hearing that rustc has more code at this point then servo does, but don't quote me on that)
"If You’re Typing the Letters A-E-S Into Your Code You’re Doing It Wrong"

What if I'm signing a comment, "MAESTRO"?
But you can only make sense of it if you have the key... Or already know how to crack the code.
It's trivially easy to secure bitcoin, it's just data after all, a private key, one you could write on a dollar bill if you wanted and secure no different from a dollar bill.

The difference is securing bitcoins in high-risk environments: live automated servers. But that only goes for a small minority of bitcoins as only about 0.5% of bitcoins are traded on a daily basis, the rest can be in what is called cold-storage which is way, way easier to secure than a bunch of physical money, gold, diamonds, whatever. The 0.5% is a bit like the security of wallets in people's pockets: not very good and not comparable to bank-grade security of those same people's savings in a bank. Or comparable to lone ATMs which can be raided.

Beyond that, bitcoins exist on an open ledger. While it may be hard to trace that now, we're seeing blockchain analysis tools develop all the time. Who knows what they might uncover later? I certainly wouldn't be excited as a criminal to leave a permanently recorded trace of every single transaction ever since the moment of the theft, with the prospect of decades of cheap supercomputers doing analysis of this open source data set which might reveal yourself. Bitcoin is great for pseudo-anonymity when buying por n online, but it probably won't stand the test of time in protecting you from every criminal investigation, a bit like a randomly generated pseudonymous email address gives a large extent of privacy, but not if you're a criminal.
So because I'm poor, I don't (for cost reasons) pollute the environment but someone who is rich can pollute as much as they want.
Brief HN discussion on the same article: https://news.ycombinator.com/item?id=8124560

Recent HN discussion on another article about orchestral conductors: https://news.ycombinator.com/item?id=7687641
Hold them to their specs, to their agreements, etc. If you see work done that it sub-par, send out emails explaining your analysis and make sure your manager is aware. Everything in writing helps.

Also take on the mindset that as an employee you're there to own the product. The contractors are temporarily there to help but might not care at all about quality or consequences.

You only need to be courteous and professional. You're the customer here, and being upset and complaining if you didn't receive what you bought is expected. You shouldn't be nice and kind to someone who's ripping you off, yet being mean or rude is wrong and counterproductive (unless you're the one who actually hired or is responsible for these contractors in which case it's a judgment call).
Which you can't do if the MAC is within the encrypted message.
The Coursera one is amazing. I've been waiting for the second part for years. It's a twist a minute ("so how can you break X?" "okay yeah there is NO WAY to break this at all, I'm positive" "pretty simply: do Y" "goddamnit").
Show HN: ARTPart – Android's ART on Mac OS X
Because hash functions are really fast, so using them to derive keys from low-entropy sources is really bad: Someone could just iterate over the low-entropy source and get the SHA-1 of each one in virtually zero time.

Brute force is really fast, and hash functions don't help you make it slower at all.
First started using PasswordSafe on Windows long back. Since I prefer syncing the databases manually, I need compatible programs on other platforms. So, I have PasswdSafe on Android and Password Gorilla on Ubuntu. I'm satisfied with all three and never evaluated anything else.
I'm not sure what the usefulness of this is (apart from saving you from writing one or two functions yourself), isn't it just a parallel queue?
I know the cookie example was just an excuse to talk about cryptography but I found it strange that there was no mention of using a randomly generated session ID and a session store as most web frameworks do.
> I know engineers without a degree who pull $250k a year.

Call them specialists, experts, consultants, contractors, or whatever you want, but not engineers without an actual engineering degree.
For one, he's accomplished. Girls dig that.
Yes, but you can certainly automate the process to a large extent. For example, many sites simply don't have the functionality allow copyright infringement. Also many sites will have >99% false positives, whereas torrent sites will have >99% true positives.

They could hire a few people to get through as many computer sorted reviews as possible, and the rest of them fall through the cracks.
Why you should not go to medical school?

http://blogs.law.harvard.edu/abinazir/2005/05/23/why-you-sho...
Yes, it's hard to create. But after 35+ years writing software, I haven't just seen it all, I've done it all.

This topic is surprisingly well timed for me; just the other day I was reflecting on the fact that most times I'm moved to comment on something, it's sharp criticism. I was wondering if I've just got a massive negative attitude; I would prefer to be more positive in my approach to life. But this is the reality - most of what I'm criticizing really is stupid crap. And when something comes along that's actually praiseworthy, I acknowledge that accordingly too. It's just that those events are few and far between.

As for ideas presented by newbies, my initial reaction depends a lot on presentation. If it's an overly excited, enthusiastic "hey guys, look at this amazing new thing I've created" I'm more inclined to judge it harshly. If it's a more measured, "I think this could be interesting" I'll be more inclined to study it and evaluate it supportively. The message defines the messenger, and sometimes the messenger deserves to be shot.

Someone above commented about negative critique reflecting arrogance and ignorance from the critiquer. I think the case I just described is the opposite - it is arrogant and ignorant of the newbie to believe they've discovered something that no one has thought of before. Most of the time you can point them to previous solutions with no more than a few seconds' thought. Most of the time their approach demonstrates that they don't understand the system they're working with, and don't even understand the problem they think they've solved. A cautious presentation indicates that they've thought it through and are aware of their own limitations - I always encourage thoughtfulness. An over-excited presentation generally means the opposite, and I will discourage them strongly and harshly. There's no excuse for ignorance, not in this age of ubiquitous access to information.

This isn't kindergarten. Not everybody deserves a gold star.
There's one significant problem with these hybrid powertrains, and that is weight. Porsche admitted the electric addition to the 918 V8 engine weighs about 300kg, all considered. The 918 is a very heavy car for what it is, at 1700kg, compared to 1380kg for the Carrera GT (it's ancestor, in a way).

The Tesla Model S is also a very heavy car, at 2100kg. However that weight is somewhat offset by its placement, right near the road using a flat floorplan housing all drivetrain components.

While the weight can be cancelled out in a straight line because these hybrid drivetrains can provide monumental straight line performance, the weight is still there for turning and braking.

Turbos go around the weight issue - in fact, they can make for much lighter powertrains with a smaller displacement for a superior performance. The main problem with turbos, in Ferrari's perspective, mostly relates to the altered emotional connection with the car. No more 9k RPM revving motors with a godly sound, but something tamer (like the McLaren MP4-12C). If you ever got to drive a current generation Ferrari motor, you'd understand instantly why they are so adamant on preserving its character.
Of course. EtM is the only way to go. Just saying it can be applied to other areas, too.
I absolutely love go fmt. It's got me spamming ctrl+s in sublime text so much. Everything is clean and uniform.
Idk, is there something wrong with liking the simplicity and predictability of something with less computers and a big NA motor, like a Viper or a motorcycle? Enjoying driving is about much more than just speed and power-to-weight ratios, and the article makes a good point about their effective impact on air quality already being negligible. I'd rather see a bigger shift in industry standards such that e.g. power generation becomes more efficient vs the current trend of giving everyone who buys a Porsche 918[1], Tesla, or Prius a tax break for saving the planet.

1. http://www.fueleconomy.gov/feg/taxphevb.shtml because someone buying a $845,000 car which gets 20mpg city / 24 highway and carries 2 people definitely deserves a $3,667 tax break for reducing emissions
Multi-day planned downtime for maintenance is even fairly common in Big Old Companies, especially for customer- and employee-facing systems. They just turn the thing off for a weekend, warn users in advance, and that's that. My bank's online banking seems to use that strategy. A few times a year, it tells me: sorry, but due to planned maintenance you'll have to check back Sunday evening. It's kind of surprising to me every time, but seems to be common. Some big companies do it with employee infrastructure like corporate email or network drives too. Some kind of system migration (or even physical server move) will mean on a random Saturday there's no email or file access. Announced in advance, sure, but it's still down for the day.

Verizon telling you that some random servers are going to be down for two days admittedly might be worse than taking one of your own systems down for a maintenance window is, especially if you didn't expect in advance that such a thing was going to be a possibility, and made the mistake of putting really-can't-be-down stuff on Verizon's cloud.
No, that's the inherent state of things before a tax: if you buy 10x more of something (because you can afford it), you'll be responsible for 10x the environmental externalities, but won't be feeling 10x worse about it. A progressive tax tries to make the 10x purchase sting the rich person who made it more than the 1x purchase stings the poor person who made it.
The LCD he got for $200, is that actually the same as what's in the MacBook? That's not really clear from the first paragraph..
I wasn't sure if the link was to some new technology or a cartoon character.
Deny users by ip address using .htaccess
How to talk to customer support
That's not apples-to-apples, because clearly in today's world capitalism is more favored and has much more resources (taken by force). Not trying to argue whether one is better than the other, it's just that the current state of the world has a major bias for capitalism and against communism due to sheer quantity of people/power. Although I suppose that strength is a result of the differences between the two ideologies. I think it's mainly the result of the outcome of WW2 though, but that could be due to the differences as well! Maybe if they each had their own planets where they didn't have to fight we could find out...

Maybe the point that you are making is that communism is worse because if capitalism can also exist, it will take more resources and make communism miserable. Or, that if communism were widespread that life would be more miserable for everybody because we wouldn't have the capitalistic systems to make life more luxurious. Anyways, there's been plenty of debate on this topic, I just don't think there is any way to make a fair comparison in today's world. Even though these countries have similar ethnic makeup and size, I'd still say it's more of an apples-to-oranges comparison.
> Everyone thinks it's the most important thing

I think code review might be the next big thing programmer culture adopts as abolutely necessary. Like we are currently adopting continuous integration and have been adopting version control. This means version control is even more important but we have consensus so there is little to discuss. (just some central vs distributed tradeoffs)
I think this statement reflects that this is a period piece describing a time when you told people you had a computer and they would always inevitably ask you "but what are you going to DO with it?"
Store Your Files Online for FREE
> If nobody understands a mathematical proof, does it count?

That depends. If it deals with integers, yes. If it deals with real numbers, no.
I guess it is a parallel queue, It saves the trouble to worry about goroutines and channels and synchronizations, encapsulated the logic that talked in http://blog.golang.org/pipelines last part. To make use of that pattern easier.

I have quite a few use cases myself:

1. Say there is a article on the web, that contains dozens of images embed in the html. Which I want to crawl the article, and Also the images, and put the image into S3 for faster serve. I can use the fanout concurrency pattern to put upload all the images simultaneously to S3 to make it faster.

2. Say I have 20 mysql node sharded data, I want to fetch top 50 latest created data from all of them, and sort it to and show it to user after.
I tried to follow this (as a Clojure newb) and got stuck on the second code segment. Apparently nothing can find a "chan" function...
Someone with money gets to consume more than someone without. This isn't odd, and I'm not even sure it's particularly tied to a "system".

Being rich means you get to fly business class or first class, which means you get to pollute more. It means you get to upgrade your toxic electronics yearly instead of having to sacrifice and make them last 2 years. You can get to eat rarer and presumably more expensive food. You get to live in a bigger house, which destroyed more land, and takes more energy. You get a bigger wardrobe, and a greater number of watches. You can keep your house at 20C during summer instead of 30C. You get to drink imported beer instead of Budweiser.

Or, inverse: why does someone rich like you get to pollute with their car, when someone poor like me has to take the bus?

This is specifically what the tax tries to address. And even if the super-rich don't care, you end up with a lot of money (and it would be a lot), that can easily result in net gains; assuming your government isn't stupid (you know, like stop putting money into oil sands projects and establish yourself as a leader in practically any other technology).
Yup, this has always been the case. Also, if you have more money, you can and probably do travel more, which is also worse for the environment. You'll probably have a bigger house which uses more energy. You'll probably have more stuff which took energy to make. You'll likely eat out more, which involves transportation of you to a place to eat, other people there to prepare your food, ingredients to the place, waste from dishes, etc etc etc.

And if you're wealthy, you'll probably want to not just have all that die with you, so you'll likely do one of the worst things possible for the environment and have a kid or three, who will go on to pollute the world for the next 100+ years.
@DHH's startup school talk says it best.

"Scaling problems rule . . . "

http://www.youtube.com/watch?v=0CDXJ6bMkMY&t=23m34s

Sounds like you have the skills to grow this up to 500 to 1k paying customers on your own. Early on you can increase ram/cpu to handle any initial scaling issues.

Once you even have 1k customers you'll have revenue to hire experts to help you with scaling and security.

Good luck in 2015.
AskHN: Freelancing – Questions from a temporary freelancer
I'm in need of 2k, so I've decided to do some short 1-2 day contracts. I'm not looking for long-term commitment. This is my first time doing freelancing, and I found some interested parties on craigslist.

I've read a few helpful HN threads on this topic, with lots of comments about writing up a contract that clearly stipulates payment and project scope. I'll also hold copyright until last payment, and then I'll transfer the copyright. I am unclear on a few things though:

- I would like to avoid Paypal as I have read stories about clients doing chargebacks. Bank wire seems better. What personal information do I have to reveal to the client (effectively a random internet person) to receive payment through a bank transfer? I'm afraid of scammers who are only interested in mining personal info. So far this person does not seem the type, but I'd like to mitigate the risk if there's a way.

- One of the clients wants a web scraper to scrape some sites that have no api. The problem is he wants it to be "reliable". As we all know, web scrappers can fail if the site has a redesign. How can I avoid a false chargeback/dispute if the scraper is done and fails 2 weeks later because of a site change?

- For my own tax records(I'm in the US), how do I get my 'pay stub' from the client? Would I just print out a record of my bank transfer statement? Similarly for paypal, would I print out the paypal transfer?
it's a small abstraction, but I could see it being useful. My gripe, and I don't know how to say this without people saying I'm whining about generics, is the interface{} return. Such a pain.
Why You Will Never Be Happy
Wow, a blue login page and a registration form! How impressive!
Disney Builds an Adorable Robot to Etch Massive Pictures onto the Beach
On product/market fit for startups (Marc Andreessen)
> People open up to you because you're an impartial observer.

A friend-of-a-friend claims that this has been very useful for her as a psychologist who works in a country where she's a foreigner. A significant number of people, in her view, just feel more comfortable talking to a foreign psychologist, in part because foreigners seem less implicated in the local system of cultural norms (they might be implicated in some other system, but not the one that the patient is worried about). It's also not a very large city, so there may be an element of foreigners being perceived as safer confidantes, since they're not as strongly tied into the local web of social & family relationships.
Obligatory link if you really want to write A-E-S into your code: Matasano Crypto Challenge http://cryptopals.com/

The article author was involved there too.
The website I host on my home computer has better uptime than that.
And Stephen Hawking has a Pius XI gold medal for science. That first thing might not be all that related to the second.
I guess we can all surely expect to get a couple more of MongoDB mugs this year.
Why does this need to be a dependency that you bring on? This is a trivial pattern.
Blackhat 2015 – A New Hacking Movie Trailer
Twincharging[1] (belt-driven supercharger + exhaust-driven turbo(s)) is also a way to reduce lag, as are variable-vane turbos (less aggressive pitch (less load) to spool up quickly before adjusting to a more aggressive pitch to increase boost).

Another more gangster option is the old rally trick of letting some air/fuel mixture into the hot turbo to cause it to ignite and spin the turbo, aka ALS[2]. This is the popping you can hear in older rally cars when they're decelerating / going around turns at lower RPMs.

1. http://en.m.wikipedia.org/wiki/Twincharger VW TSI engines use this, and I thought Mercedes did too on an SUV, but I can't seem to find that anywhere.

2. http://www.rallycars.com/Cars/bangbang.html
>and there are infinite ways to formulate and look at it.

Of course there aren't. The best way is to know exactly the causal process generating the data, thus enabling you to predict your variable-of-interest perfectly from the limited data.

This isn't currently possible, of course, but there's one best way to interpret data, not an infinity.
Try mitro :)
https://www.mitro.co/
Oh, yes, there are lots of use cases for parallel queues, for sure.