skysight-inc/HackerNews huggingface dataset:
The money was raised to audit TrueCrypt before the developers abandoned it. The money must go toward that audit. The fact that the TrueCrypt devs abandoned the project changes what we should expect from it. Specifically, we should expect that moving forward, it's going to be a bad idea to use it.

This viewpoint isn't just tptacek's. When the TrueCrypt devs shut down TrueCrypt, they posted in big red letters "TRUECRYPT SHOULD BE CONSIDERED INSECURE" or something to that effect. They did that because, like tptacek, they are responsible crypto devs and are doing their duty: when no one is actively maintaining a project, it is inherently insecure because the security landscape changes so rapidly.

If the TrueCrypt devs were to step out of the shadows with some money to audit TrueCrypt's current codebase, yet maintained their stance that not having an active dev team makes the project insecure, would you aggressively badger them for their "contradictory beliefs"?

There is value to be had in auditing an insecure project's open source codebase. If any security problems are discovered, users will be able to assess their potential impact based on how they were previously using TrueCrypt. If they have old images laying around which are discovered to be decryptable, users will be able to delete them before someone else discovers that flaw and steals their data.

Secondly, if the codebase survives the audit relatively unscathed, then it serves as an example of how to write production crypto code (at the time it was written, not presently!) similar to how tarsnap is currently such an exemplar. The TrueCrypt code can't be used directly due to licensing issues, but it nonetheless serves as a "here is how to use these arcane Windows APIs in the context of security." Such guidance will be extremely valuable for future similar projects.

Lastly, I am kind of afraid to talk to you at all in case I incur your bullying wrath somehow, because if that were to happen, you'd kill the fun of HN for me. I imagine you're killing the fun of HN for tptacek.
Yes, It is $29 for 10,000 subscribers + $1 per 10,000 email sent via Amazon SES.

Here is a simple calculation. If you send 5 broadcasts to all your audience of 10,000 people.

It would be
$29 + $5 = $34

Here $29 is a recurring cost and $5 is a variable cost depending upon number of emails sent any month. Amazon SES charges $1 per 10,000 emails through them.
HTTP/1.1 is only complicated if you want to support all of the optional features.
As I said earlier, what do you think the function of this comment is?

Of course you'd say something to this effect. The purpose of a comment would be to elaborate on why what I said was wrong; providing examples or evidence to the contrary is a great way to further any conversation.

I, unfortunately, have no evidence. So it's just my word. I realize that's not super valuable, but that's what I've got.
It didn't even plausibly happen. There isn't even a set of things that happened that would allow you to make this claim in error.
Pakistan is in Northern Europe?
The author's just talking about plain-old procrastination, a fear of _actually_ committing to the project (and all the big nasty stuff that it implies) by actually writing that first line of code.

Just write the first line of code. It won't hurt. I promise =)
These are real concerns. Asm.js is not a perfect solution. I am not Alon Zakai, but I'll try to answer to the best of my understanding.

1. Asm.js is not an alternative for a hypothetical high-performance, human-readable language in the browser. Ex: It's not competing with the idea of a C#-in-HTML JIT compiler. It is competing with Silverlight -where the browser is already downloading inscrutable binaries.

2. Emscripten has so far received the most man-years of effort, but the idea of other systems using asm.js as a compilation target is very attractive and it's not so difficult as to be a huge barrier for competition. For example https://rfk.id.au/blog/entry/pypy-js-faster-than-cpython/ (for a specific benchmark, after jit warmup). Personally, I'm excited about the idea of hooking the emscripten backend into http://terralang.org/ Terralang is a system for building custom, high-performance languages on top of LLVM.

3. Asm.js runs on any standards-compliant JS interpreter with no special support required. Even if the interpreter ignores the "use asm" directive, you can expect to see speed benefits simply from the fact that asm.js code is JS in a style that is easy to JIT very well. In order for phones, consoles, smart TVs ect... to fully benefit, it will of course require the platform holders to put in the effort to respond to "use asm". "Open Platform" doesn't mean "Works perfectly before the platform holder even implements it" ;) Also, Asm.js is not targeted to compete with native, installed executables. It is just trying to get the capabilities of HTML apps on all platforms to be closer to those of native executables.
The Mozilla VR Team
coincidentally, our most disgruntled clients come from civiCRM. That's actually how we at Giveffect even learnt of CiviCRM (through their former nonprofit clients eager to jump on ship with our software because of product and customer support issues). ps: I'm the founder and ceo of Giveffect. Happy to answer any questions about our product.
React.js Conf Round-up 2015
If women had been in power for all of history and used that power to keep men subjugated, yes, I would appreciate calling an office full of women a titfest. History and context matter, unless you are part of the "men's movement".
is vera crypt good or no.
Lenovo Pre-installed malware
Ok I'm sold on the idea that Philz has the means to compete against Starbucks in malls across America, but I'm less convinced that third-wave coffee is going to be impacted in its core urban market.

When you said that Philz would give "third-wave coffee a run for their money" did you more mean that you're skeptical that Blue Bottle will be able to take their brand national? I agree with that, that that could be hard. I think their best bet for non-urban areas would probably be to closely follow areas where Whole Foods has made inroads. Regarding expansion to urban areas, I wonder if too much good real estate for third wave coffee places is already taken up by local independents.

From what I've seen SF has surprisingly few third wave coffee shops. In Vancouver there are often several Blue Bottle quality independent coffee shops in each neighbourhood. When I saw that Blue Bottle got funding I wondered how successful they'd be in expanding to areas with well established locals. There's really not that much that they do different from others.
The proper way, in 1996, to insure that your program would not run under Windows 95, was to make it run under Windows NT 3.51, which was available and stable at the time. Under NT, you could use OpenGL, NTFS, security features, and TCP/IP networking (that was an add-on called "Plus!" in Win95) which consumer-grade Win95 didn't support. You could run high-end applications such as Softimage|3D. You could even run NT 3.51 as a network server.

NT 3.51 also offered a nice feature known as "not crashing". It was a far more reliable OS than Win95, which had a huge amount of legacy and backwards-compatibility code. On NT 3.51, the 16-bit subsystem could be disabled at boot time, and everything ran fine without it.

Windows 8 still has the 16-bit subsystem.
This is an online contest open to public to win US$500 and other prizes.
Marlon Moonglow's Animator
Vi and Vim Stack Exchange
hey there, would be happy to chat and show you a bit more of our solution. One thing to clarify: our solution isn't just the back-end CRM, it is also front-end fundraising (like crowdfunding, ticket sales, marathons, galas etc) as well as volunteer admin. The part clients love most about our system is that the CRM is automated - meaning all the donor data is automatically collected and imported into their CRM powered by us. I started my journey in the nonprofit space as a Dev Director before starting Giveffect. The inspiration behind GE was to create turn-key, streamlined software for nonprofits, with a true understanding of the sector's needs.
> Democracy survived the Supreme Court upholding internment of US citizens of Japanese descent, and it will survive this.

In what sense is that democracy surviving? I suppose it is, given that Japanese Americans were a minority of Americans.
Pretty sure Starbucks shows the calory count for their drinks right on the board with the prices.
As others have mentioned we are working on getting a hierarchy viewer built now.
The post mentions iOS a few times.
You might be accidentally mistaking a platform for a language target - Haxe generates C++ (which can be used for iOS). That C++ is usable anywhere with any compiler toolchain. The backend (hxcpp) comes with a bunch of toolchains already set up, and builds against the iOS toolchain for you without a problem (armv6,armv7,armv7s,arm64 and simulator i386, x86_64). It also includes a few more obscure ones like WindowsRT, Blackberry, Tizen and so on.

(It's actually all right there in the link :))
What's implausible about what I said?

I'm growing tired of you just saying wild things and then refusing to elaborate.
If your disk is mounted when your computer is stolen or confiscated, your data is accessible.

If your adversaries want your data, FDE will help them and not you. If you have secrets that would put you in danger if revealed, you would now be danger.

The alternative is file-level encryption. The only accessible files at any given time are the ones you're using, so if you are relieved of your laptop on short notice, not all beans will be spilt.

File-level encryption is a pain in the neck to work with. FDE is much more convenient, and a pretty good answer if your threat model doesn't include "drive by laptop snatching" as a major concern. This is most people.
I'm so very glad I read the whole article before watching the video. The journey to get to that duel is incredible.
Yeah--I think it'll be hard for third-wave coffee shops to scale. The last number I heard about Blue Bottle was that they were making about $20M. That's a drop in the bucket compared to Starbucks' $15B, and Blue Bottle is very well known.

Truth be told, Blue Bottle's coffee and espresso quality has suffered from expansion.

I think big cities contribute to plenty of revenue, but Starbucks has built itself as common as a convenience store. That's really hard to compete, even with third-wave and Philz types. Even Tim Horton's revenue is $3B!

Hit me up next time you're in San Francisco--I don't think you got a very good tour of coffee here :) Aron Tzimas documents latte art around SF on his Instagram.
What is that you see as unwelcoming about Blue Bottle?
The biggest difference is you dont need to add debug code deploy, you just connect.

For things like the network traffic it is really hard to see request/response for a particular thing.

For the dumpers - those are basically a main method inside your program that you can run whenever. Its a nice way to change (or dump) state of the program, similar to adb shell dumpsys, but also allows a richer interface for changing state.
Web Development Tips: A to Z
User Story: Meet Donnie Wang, the Superstar That Startups Dream Of
Very useful list and I kind of like the idea of having "tech lead" be a project-based role, rather than your job description. It will definitely force more accountability.
I'd never heard him before:

Jackson C. Frank (1965) (Full Album)

https://www.youtube.com/watch?v=0va3F2PWBJc
They tried, but I'm not convinced that they succeeded. Their video resembles Street Fighter in the way that https://youtu.be/-2gJamguN04 resembles Football. It's possible that their mapping works, in that there's some non-unpleasant piano sequence that maps to at least superficially convincing gameplay, but their video didn't show it.

The connection of analog (piano) to digital is impressive. The additional claim of having mapped music to fighting is not yet substantiated.
You can see breakdowns for various subtests on awfy. Of possible interest are http://arewefastyet.com/#machine=28&view=breakdown&suite=asm... and http://arewefastyet.com/#machine=28&view=breakdown&suite=asm... as well as http://arewefastyet.com/#machine=28&view=breakdown&suite=oct...
Its not a proxy, it requires that you build hooks into your http engine (OkHttp/HttpUrlConnection) to forward events to the NetworkEventReporter interface.
Recursion is looping. Some iterative loops can be expressed recursively - these are the ones that can be tail call optimized. SICP has a good explanation:

https://mitpress.mit.edu/sicp/full-text/sicp/book/node15.htm...

The advantage of using recursive definitions for loops is that it avoids modifying places in favor of returning values. Rich Hickey gives a good talk on the subject in The Value of Values:

http://www.infoq.com/presentations/Value-Values
Would you expect to see a for loop in a mathematical equation? You're correct in noticing that a lot of the reasons why you'd use a for loop are taken care of with basic functions such as map (to perform some action on different elements in a list), reduce (to do some sort of aggregation).

So you kinda just don't need for loops anymore and they're inherently imperative because you need to setup some sort of condition to say keep performing this sequence of actions (which is the main idea behind imperative programming) until this condition is no longer satisfied.
I agree, but I also think Starbucks tastes pretty bad. Philz seems to have a well defined market, and their customers seem really devoted. Perhaps they'll be successful.
You can use forM. As for why for loops are imperative or if they are... Not sure. A few thoughts come to mind:

For loops dont return a value, whereas forM and even forM_ both return values. They are normal functions rather than just control structures.
I don't think I said Blue Bottle was unwelcoming. I just think it will be hard for them to scale like Starbucks without becoming Starbucks. Philz has a formula that is different from Starbucks but just might take massive market share from Starbucks.
Lenovo Pre-Instaling Adware/spam – Superfish – Powerd by VisualSearch
Exactly!

With regards to the flat trend it's deeper than just everything suddenly being flat. What Google and Apple is trying to develop is a visual/interaction language where the content itself becomes both the content and the interface at the same time.

It's not just about how it looks its as much about how it moves, the choreography so to speak. It's as much driven by trial and error as it is by data and thats exactly how it should be.
phil on philz
I wish there was a page on mozilla.org with the title, 'This is how Mozilla makes money'.
Let's not forget getting rid of basic text cues, often in the name of internationalizing.
An app updates and suddenly basic actions are thrown to random corners of the screen as ambiguous symbols. Google docs is a great example with the big plus inside a circle in the lower right corner as a replacement for the "new" functionality.
That's a pretty narrow view of "accessibility". For example, you just assumed that your user can't see (or can't see very well?) but can hear.

Users who are deaf and blind? Out of luck. Users who are deaf and not blind but need your thing zoomed to a larger size? Maybe out of luck maybe not (depends on whether the WebGL app detects browser zoom and actively works to defeat it like some do). Users who are deaf and not particularly blind but happen to not be able to tell apart the colors you chose to use in your WebGL? Also out of luck.

What the DOM gives you is a semantic representation that the user can then have their user agent present to them in a way that works best for them. Reproducing that on top of WebGL or canvas really is quite a bit of effort if you really want to target all users and not just a favored few groups.
Only at a critical mass. Below that, enough civil cooperation from others following said unjust laws buries the voice, and hides the effort.
Sounds all to familiar. I discussed and still discuss this problem with my peers offline a lot, and thought about creating (haha, new project there) a platform where people with this exact problem can pair up and in a way play supervisor for someone else.

The point is that my procrastination immediately stops if i make a commitment to someone else: if i promise a friend to deliver xy, I do. Social pressure seems to be working for me better than the will to suceed.

so, a platform where you can define your goals and have someone else check on your goals regularly, asking why it didn't work – while you do the exact same thing for the other person. while it's nice project wise, it could also provide helpful advice for whatever it is you're building.

just an idea though.
This is just sensationalism.

"<Popular product> shouldn't be relied on!" What he doesn't say is exactly what you just said, that it works for the majority of use cases. It all hinges on this liberal interpretation of the word "rely".

"Top 10 things your cryptographer doesn't want you to know!"

It's marketing, and it's annoying. TrueCrypt is just fine for the majority use case, and Thomas knows that, but that doesn't get attention. Saying bombastic things like, "Don't use TrueCrypt!" gets attention.

So I gave him some attention. Hope that's what he wanted.
I was thinking the same thing today. I agree.
> Since this is basically Windows, Mac OS X, and Linux, your native applications are going to work just fine on those platforms.

But, you need people to download and install your app in that case. The reason major game companies are investing in asm.js ports, even though their engines work great natively, is because the web is a very good distribution platform. That's really all there is to it - no one controls the web, there's no charge to ship a game there.
Steven Pressfield talks about this in The War of Art - http://www.amazon.com/The-War-Art-Through-Creative/dp/193689... - referring to it as "resistance". It's the force that stops you from actually getting stuck into work. It's all the little reasons, distractions, and shiny baubles that stop you from knuckling down and just doing the work.

I've found over years of starting and rarely finishing personal projects, that making a list of three targets for your session (the amount of time you can dedicate, right now, to the project) helps. Start at the top and crunch through it. Don't get caught up with what you should be doing, just get right to the doing. Code now, optimise later. You'll quickly learn how to prioritise tasks, and the act of ticking off a completed item gives you such positive feedback that it becomes the norm.

You are in a good place right now. You are realising the futility of your current method, and you can see the elements that are holding you back. Right now, dedicate that time to three top tasks in your latest idea and crunch through them. Do the work right now, and then look back and review.

Get to it, you have ideas to realise!
It's tough to read that post and not think 'how do these people make money?' Not as though there's some reason why they shouldn't — it's just not clear how it works.
gah...I lost my appetite. central obesity is no joke http://en.wikipedia.org/wiki/Abdominal_obesity
Ask HN: Which are some of the successful startups who operated in stealth mode?
And what advantages they gained by doing so?
In which kind of business landscape would you choose to operate in stealth mode?
Some people have extremely poor night vision, but for most people a single candle in a small to mid sized room provides plenty of light to get around. With some effort you can even read by a single candle. Further, on a clear night you can probably walk around with just starlight.

So, generally night time was less dark than you might think. Though, in comparison city's often have enough light pollution that it never really get's 'dark'.
I can't reply to bzbarsky for some reason, but:

I assumed we were talking about vision impairment, because that's what the comment I replied to mentioned. Of course you can implement whatever else you want as well.

I question this "semantic DOM" idea: the trend has been towards filling the DOM with tons of crap in order to make applications, not documents. Do accessibility agents even work well on JavaScript heavy sites today?

Accessibility can and will be had without the DOM; while it is a concern, it shouldn't prevent things like WebGL + asm.js apps on the web.
Yes, they already are. That framework is called the DOM. People keep complaining about it and trying to come up with replacement frameworks that end up slower and less capable...

The DOM definitely has its problems, mind you. Investing some time in designing a proper replacement for it is worth it, as long as people understand going in that the project might well fail.
I don't know, but they both anticipated unicode.
Congrats Anisa!
Miami cops enter false data into Waze app as revenge for revealing locations
U.S. Marshals to auction off 50,000 Bitcoins forfeited by Silk Road founder
I feel like I've seen this video many years ago...
Pre-industrial workers had a shorter workweek than today's (1992)
Why would Microsoft even allow Lenovo to license OEM Windows if they treat customers to an Out-Of-The-Box experience like this? No wonder macs are popping up everywhere I go...
https://www.mozilla.org/en-US/foundation/annualreport/2013/f...

> How does Mozilla generate revenue?

> The majority of Mozilla’s revenue is generated from search and commerce functionality included in our Firefox product through all major search partners including Google, Bing, Yahoo, Yandex, Amazon, eBay and others. Mozilla’s reported revenues also include very important individual and corporate donations and grants, as well as other forms of income from our investable assets.
Try: https://www.mozilla.org/en-US/foundation/documents/

It has their financial statements.
It is the case the grandparent is referencing with IE bundling in Windows. It reapplies the antitrust laws to monopolies selling bits.
If Google is found to have a monopoly in market X and uses that control to gain control of market Y by forcing out competitors without really competing, that is the type of monopoly that's being targeted. This is what the grandparent is talking about. It is different from a simple monopoly the parent refers to.

Having a monopoly isn't illegal. Abusing or attaining the status in certain ways are. Walled gardens can certainly be considered a form of monopoly, but that means nothing in the eyes of the law unless they use abuse their monopoly status.
The Mozilla Foundation publishes an annual report[1] on that, which includes statements on its subsidiary, the Mozilla Corporation.

[1] https://www.mozilla.org/en-US/foundation/annualreport/2013/
Two of the best air-rail connections are Narita and Schiphol.

The transitions are so seamless that you can disembark and accidently end up on the train platform without even trying.

Two of the worst are in the USA: Honolulu and SFO.

Honolulu has the ideal topology for a light rail (straight line from airport to Waikiki), but won't build a light rail to the airport because then all of the taxi drivers would become unemployable.

SFO is breathtakingly bad. Just try transferring the first time from Caltrain => BART San Bruno => BART SFO on a cold weekday to really appreciate how awful it is. I just tell people to take a taxi from Millbrae.
Periodic reality checks. What's my goal -- my real goal? Is what I'm currently doing meaningfully advancing me to that goal? If not, stop that shit. Close the cat video. Put off theme dinking till your coffee break. You have to go back and do this time and time again. Pain in the ass but it's called discipline and it's how humans get shit done.