skysight-inc/HackerNews huggingface dataset:
> At the end of the day is anyone arguing it was a bad thing that the Americans got to the bomb (and used it) before the Germans

The moral justification for the bomb was a concern that Germany was working on a similar project after they stopped exports of uranium[1]. Japan and Russia had little to do with the decision.

In fact, several people working on the Manhattan project later commented they regretted the decision to develop the bomb, especially after hostilities ended in the European Theater abating the threat of Nazi Germany developing the bomb first.

Feynman has commented[2] specifically that his focus on the work had totally blinded him to this change in moral justification. "What I did immorally, I would say, was not to remember the reason I said I was doing it, so that when the reason changed, which was that Germany was defeated, not the single thought came to my mind at all about that; that that meant now that I had to reconsider why I'm continuing to do this."

Just because something is possible doesn't mean it should be done, even if there was a justification in the past.

Also, the tools that the NSA wields may not be as bloody - with some exceptions[3] - but the cost in terms of the number of people affected already exceeded the losses due to the bomb, and will continue to grow in the future. Personal-scale tools that can do their work mostly hidden from public view have very little cost to the attacker. People notice and might get angry about using the bomb, while blackmail, threats, and bribery can continue for years and years before enough people notice. (and small casual racism or sexism can continue for centuries, even after people start to think the problem is "fixed")

[1] http://en.wikipedia.org/wiki/Einstein%E2%80%93Szil%C3%A1rd_l...

[2] https://www.youtube.com/watch?v=Bgaw9qe7DEE#t=986

[3] http://www.theguardian.com/us-news/2014/nov/24/-sp-us-drone-...
This biases the hiring pipeline to people who do not have jobs currently. Its possible that you want that bias in your process, but I doubt it.
Modern workstations and servers implicitly trust hard disks
to act as well-behaved block devices. This paper analyzes
the catastrophic loss of security that occurs when hard disks
are not trustworthy. First, we show that it is possible to
compromise the firmware of a commercial off-the-shelf hard
drive, by resorting only to public information and reverse
engineering. Using such a compromised firmware, we present a
stealth rootkit that replaces arbitrary blocks from the disk
while they are written, providing a data replacement backdoor.

Zaddach et al. (2014) Implementation and Implications of a Stealth Hard-Drive Backdoor

http://www.s3.eurecom.fr/docs/acsac13_zaddach.pdf
An often overlooked pattern in React is controller-views. When using Flux (or really, with any external-to-the-component data) you should put this Store logic in the nearest parent to the components who use it. This component is the "controller" which gets the data and passes it as properties to the child components (who pass it as required to their children down the hierarchy).

This keeps your child components pure (fast, renders directly from props, uses PureRenderMixin) and keeps data access centralised to the nearest common controller-view component. It's okay to have a parent component that simply collects data to pass directly into a single child within the render() call — the parent fetches data and sets props, the child re-renders only when the props update, and there's a clear separation of responsibility between the two.
Tensegrity structures don't have any internal bending forces, just tension and compression. Those tents appear to be based on bent or curved struts exerting forces in several directions, so I doubt they're actually tensegrity structures.
Ask HN: Why don't we have P2P based CA or SSL fingerprint consensus?
How the hell are normal people to validate an SSL fingerprint? Could any one of us really spot the man-in-the-middle attack?

Why doesn't something like a P2P consensus protocol or blockchain facilitate certificate authority or even more simply validating SSL fingerprints?
Do you run those nodes you hop through? Also.. congrats on finding people to communicate with securely-as-possible.
> It's American foreign policy that created anti-american Islamic extremism.

That's a very reductionist analysis. The Muslim Brotherhood has existed since the 1920s. However, it was a secular, Marxist, anti-colonialist ideology that was most successful in the Arab world for the next few generations. Then these secular Arab states lost the Six Day War, and failed to provide either good governance or economic opportunities for their populations.

The reason that Islamists have become so powerful is that the governments of many Arab countries have proven themselves to be completely bankrupt. If you're young (and the population pyramids in places like Egypt are very fat on the bottom), and you have very few economic opportunities, and your society is incredibly corrupt, then a radical change becomes very appealing, particularly if the people advocating that change are seen as pure and uncorrupt. The fact that Islamist groups oppose the US is one aspect of their appeal, but it's really only one factor. The fact that Hezbollah and Hamas are actively opposing Israel, while Egypt made peace with Israel in 79 is also a factor.
I was referring to academics specifically. While I agree 'bad' isn't an unfair way to feel about the market, I would say it's because expectations have been set by boomer mentors (in their 50s and 60s) that graduated into a job market that was expanding and could absorb them.

Now we have hit equilibrium, and there isn't demand for people who study Foucault, Jung, or build a career around authors from 1850-1950 anymore. The gig is up, and graduating from anything other than a the most famous names just want get you a job anymore.

Not 'good' or 'bad', but certainly 'is', for better or worse.
Even that's not enough, though; the girlfriend might just lean over from the passenger seat. This is based on third hand information I've heard, not on anybody I actually know.
DKIM is essentially signing outgoing e-mail at the server-level. Receiving MTAs are supposed to verify the signature using the public key available through DNS.

I can't find any examples now, but I swear I've seen gmail say "Verified Sender" or something to that extent on some random messages I've received before. I don't know if that was due to domain keys or something else..

This would still only be signing; I agree it'd be better if e-mail was more commonly encrypted.
Sorry if that wasn't clear in the post, I'll revisit it. The university took down that URL when I presented the vulnerability to them. So that site has been down for roughly a year.
I'm surprised that tenure has survived as long as it has. Certainly professors with tenure want to maintain the status quo, but it seems like the supplicants are still willing to drink the Kool-Aid.

A recent article titled

Stripping a Professor of Tenure
Over a Blog Post

didn't get any discussion on HN. The professor seemingly was stripped of tenure on the whims of his dean. https://news.ycombinator.com/item?id=9024754

OTOH a clown like Ward Churchill probably deserved to be fired. There's a place for legitimate "dissent" but IMO Churchill didn't deserve that protection. http://en.wikipedia.org/wiki/Ward_Churchill
The latest Core i7 still has all the same instructions as a 386 or 486, so while these days you'd probably use SIMD instructions, the code will still run and run very, very fast.
Use CSS to Specify the Aspect Ratio of a Fluid Element
Transcript: NSA Director Mike Rogers vs. Yahoo on Encryption Back Doors
I've implemented gzip... I found that implementing the decompressor first (with a very verbose --debug flag) was critical to understanding the bitstream well enough to implement compression :)
A good start would be to not actively push women away with a hostile work environment: http://www.latimes.com/business/la-fi-women-tech-20150222-st...
That makes it look like the EFF has been bought and paid for by Mark Cuban.

Who's Mark Cuban? See Wikipedia.[1] His expertise is in promoting sales-oriented companies and getting them acquired by bigger companies. His first big deal was selling Micro Solutions (a reseller of boxed software) to CompuServ. Then he got into sports webcasting ("broadcast.com") and sold that to Yahoo during the first dot-com boom. In each case, someone else created the content, and Cuban marked it up and resold it. That's his business model.

Wikipedia on "broadcast.com": "The record IPO made instant financial successes out of the company's employees through stock options, making 100 employees millionaires on paper (although most of them were unable to exercise their options and sell their shares before the stock price dropped) and founders Cuban and Wagner billionaires."

So that's who's behind this.

[1] https://en.wikipedia.org/wiki/Mark_Cuban
You could audit the Go source and then use the diverse double compiling technique[0] to verify that the binary you're using corresponds to that source code.

[0] http://www.dwheeler.com/trusting-trust/dissertation/html/whe...
Just my friends who are engineering managers. They manage teams here and overseas in China and India. Their views are, overall, the engineers from overseas are of lower quality than the engineers here. But they cost less especially overseas, they can hire 2-3 times as many engineers as over here.
The Power of ES6
Thanks for the clarification.

> "...so is economically not a good idea for them."

This would imply that the trust model itself would have to undergo a fundamental shift (and likely has done). There are now entities you have to trust, rather than the system itself -- at which point the decentralised aspect is less of a defining feature.
My gut reaction to this was so what we've all seen DNA generated faces our whole lives... and nobody finds that in any way remarkable...
David’s Health Weekly #46: heart attack drones, breathalysers to call cabs
Notes on Managing Remote Teams
OpenBSD for embedded? I used NetBSD in the past for that but is OpenBSD really for embedded? Interesting thought though.

On the other hand, the issues are also in the soft-realtime-ness, the hardware drivers, the embedded community,etc.

Indeed for Desktop or Server, *BSD might do it just fine, though many OSS development env these days are tested by default on Ubuntu/Debian etc instead of BSDs.
As someone who has experienced schools in both top 10 and 11-20 range, I can tell you it's a lot like the challenges faced by kids from lower socio-economic circumstances in K-12 schooling, and that the quality of the students alone are not enough to account for the differences.

The top universities often:

1. Send grad students to conferences (including travel costs) whether or not they have results to present that year. (If you're at a slightly suboptimal school, you might only get to go if you have results to present, which you probably don't your first year. My labmates and I would volunteer and spent a day and a half stuffing swag bags and registering attendees/handing out badges for a conference so that we could get access. Students from better schools just had their tickets covered by their schools.)

2. Hire lab techs and admins, giving grad students more time to do actual research or write papers. (Otherwise, you might spend more than 40% of your time doing work that doesn't move the needle for you, professionally. You may be picking up your professor's dry cleaning, or taking care of administrivia around getting them a visa for their next talk in another country, or booking them plane tickets.)

3. The name of the school makes it more likely that the student gets a grant proposal accepted by the NIH/NSF/other agency, even if the quality of the grant proposal itself is the same. Getting a grant/fellowship/award on your CV makes a HUGE difference when applying to post-docs or faculty positions. (You'll also have access to more people who will give you more valuable feedback for how to write a better grant proposal.)

4. Top schools often protect students from bureaucracy and streamline the procedures in place for everything from getting access to a new facility, to what happens when you need to replace your student ID. (See (2) above.)

5. You're more likely to get a smarter or harder working undergraduate student to mentor and help out with your research. This matters more in the life sciences and fields with "benchwork," (e.g., wielding pipettes) but it applies to tasks that involve coding as well. In better schools, a larger percentage of undergraduates opt to get some experience in a research group, and you get both someone to delegate actual research tasks to, and you get to level-up in people-management.

Essentially, if you opted for a school in the 8-15 range for personal reasons (e.g., family, proximity to significant other, other obligations), you've opted into playing on super-hard mode, where you have to work twice as hard and be twice as good to get as far as someone who opted for the best school to which they were accepted.

And if you're female, you'll get extra pressure from family, friends, significant other, etc., to choose the school that is close to them. And there are no extra points for playing in hard mode. I definitely don't think I would have appreciated the difference if I hadn't experienced both in such a short time frame.

(Sorry for slight repetition from my comment in a thread lower down. Edited for clarity.)
Porsche launches 3.5-inch navigation for classic 911s
Hawkings and Musk should stick to making comments on topics they understand.
Mozilla uses server-hosted JavaScript to 'secure' user passwords
Like standardized testing, whiteboarding problems is another good data point. It provides a well-understood test given in a well-understood context. It shouldn't stand alone, but it might be the case that a person who can't do a simple to intermediate algorithm at a whiteboard in front of others under a pressure isn't a good fit.

Personally, I usually find questions about basic networking and the fundamentals of programming to be most revealing. You usually don't need to dig very deep to find out if a person really has a clue.
(more-or-less reposting the comment I had posted on the article, apologies if that's against HN rules)

I'm of two minds about this article. On the one hand, I think it does a great job of emphasizing that AI can turn out to be really different from humanity, and may not end up like a "human-in-a-box" like typical popular culture imagines AI. You don't get human values for free in any intelligence; the space of all possible minds is huge, and the space of minds that is human-like is very small.

However, I think the author fails in truly appreciating just how different an AI could be. I think there's a sort of Star Trek style of thinking about other types of intelligence, where aliens are humans except for bumpy foreheads and behavior that is still plausible for some hypothetical human culture. The article's emphasis on rights-based Enlightenment-style universalism still makes a lot of assumptions about the similarity of all possible minds.

I'd encourage him to read Eliezer Yudkowsky's article "Value is Fragile" ( http://lesswrong.com/lw/y3/value_is_fragile/ ) :

---

>We can't relax our grip on the future - let go of the steering wheel - and still end up with anything of value.

>And those who think we can -

>- they're trying to be cosmopolitan. I understand that. I read those same science fiction books as a kid: The provincial villains who enslave aliens for the crime of not looking just like humans. The provincial villains who enslave helpless AIs in durance vile on the assumption that silicon can't be sentient. And the cosmopolitan heroes who understand that minds don't have to be just like us to be embraced as valuable -

>You do have values, even when you're trying to be "cosmopolitan", trying to display a properly virtuous appreciation of alien minds. Your values are then faded further into the invisible background - they are less obviously human. Your brain probably won't even generate an alternative so awful that it would wake you up, make you say "No! Something went wrong!" even at your most cosmopolitan. E.g. "a nonsentient optimizer absorbs all matter in its future light cone and tiles the universe with paperclips". You'll just imagine strange alien worlds to appreciate.

>Trying to be "cosmopolitan" - to be a citizen of the cosmos - just strips off a surface veneer of goals that seem obviously "human"."

---

A lot of science fiction isn't really about the future or the setting, it's about the present and our society. This article is similar in that it's less about AI itself -- at least I hope so because if not, then it makes the error of only going halfway on the strangeness of minds that is the whole risk when it comes to AI.
Moore first made his claim in 1965. Assuming we have at least 5 more years wringing out efficiencies with the move to 10nm that's 55 years of continuous innovation. It's mind boggling. Maybe there will be a gap until the next major breakthrough but an entirely new process will come along eventually.
The site is being served over Akamai and the certificate for www.whitehouse.gov is being served by Akamai but appears the certificate does not have www.whitehouse.gov for the issued domains. Secure actions are redirected to petitions.whitehouse.gov.

It may also be possible that they have setup the frontend of the site to only serve the SSL site from certain IPs (Example from authorized site administrator networks, VPN, etc.) if the IP is not authorized redirect to http which would disable the ability for anyone to login that should not be able to login and/or require PIV certs from authorized IPs. So if you are not hitting the site from an authorized IP you can never login and if you do not have a PIV cert you can never login.

By taking a quick look around, the site is powered by Drupal, the CSS and JavaScript are compressed but the entire site(s) are served behind Akamai for the internet. It may be possible they are serving out statically compiled pages over Akamai that the internet can get to and the dynamic site might only be accessible internally, which is a good practice for large sites.

Also note if you find any weird issues you should be able to call or email the General Services Administration (GSA) who manages the .gov domains registry - https://www.dotgov.gov/portal/web/dotgov/whois if that fails or it is a security issue you can contact US-CERT - http://www.dhs.gov/report-incidents#2 / https://www.us-cert.gov/ which is apart of the Department of Homeland security which appear to be responsible for protecting the networks of the .gov domains or centralizing the reports of security issues for the .gov domains.
Grothendieck apparently died recently:

https://en.wikipedia.org/wiki/Alexander_Grothendieck#Retirem...
I'm totally willing to accept being wrong and own up to that. Can you let me know me where I've misspoken, though?

To continue on what I said above,

* One can always increase the size of the key. There's no stopping that. The fact that they can intercept and understand the bulk of communication currently is only due to the fact that we're largely not using encryption. (The idea being, they can collect huge amounts of encrypted information and years down the line decrypt it with supercomputers... But we can always generate larger keys and increase the difficulty by an order of magnitude. It is much easier to generate keys than it is to guess them.)

Not that it's necessary. We have sufficiently large keys already. We just have to start encrypting. [1]

* The NSA has difficulty with GPG and Tor. [2]

[1]: http://security.stackexchange.com/posts/25392/revisions

[2]: http://www.theverge.com/2014/12/28/7458159/encryption-standa...
Having watched MIT and Stanford lectures online, I was quite taken by the level of depth that is expected, so I understand your comment regarding that.

That's the beauty of those online courses, I suppose. I now know exactly what is required at Stanford and MIT.
It's amazing that they expect tech companies to take them seriously regarding responsible/legitimate use of "bypassing" encryption after they've demonstrated their complete disregard for these same companies by hacking them.

"SSL added and removed here :^)"

Yeah, you can't just joke about this with a smiley and then pretend we're on the same team after you get caught with your pants down. They have only themselves to blame for their access going dark.

Aside from showing no respect for the customers involved, this stuff has real, financial consequences. They're spending billions of our tax money to attack the businesses we built, destroying company reputations and moving stock prices. If anyone else caused this kind of financial harm, they'd be in prison and be obligated to pay damages.
That's great. A "one year later" update would be fun to read. I'm curious what changes(if any) came about from this.
Unless I've misunderstood you, it's really not considered bad form at all. It's considered pretty standard amongst professional poker players that most everyone (at least the professionals) are all using some form of HUD (heads-up display) that will overlay stats next to each opponent's name, detailing all sorts of useful information about the player's tendencies. It's almost mandatory to use a HUD if you like to multi-table more than 4 tables at once.
This means that at any time Mozilla can replace that JavaScript and steal end-user passwords. Anyone who can successfully MITM Mozilla (i.e., anyone with a trusted certificate: this includes CNNIC, the Government of the Netherlands, the Government of Spain and others, as indicated in https://wiki.mozilla.org/CA:IncludedCAs) can successfully do the same.

And yes, this means that anyone with a Lenovo laptop who changed his Firefox Account password must now change every single password he has ever synced, even if he's never logged onto a particular site with that laptop.
You missed the whole point. It doesn't matter whether or not the person actually is ignorant when it comes to the topic. If someone doesn't want to waste the limited time in their life arguing about this stuff, they don't have to. When every other article is related to it, it's pretty exclusionary.
How to Get Rid of Cellulite and Look So Good
Man! VNNIC now has EPP Gateway http://www.vnnic.vn/en/domain/eppgateway?lang=en
The Rhetorical Presidency (2007) [pdf]
Interesting to see these are so high-end. My experience in Shanghai is that food models exist, but only restaurants in mall food courts use them (where a food court is defined as a collection of restaurants that all accept a special-purpose payment card). Higher-end independent restaurants (for example, maybe there's a collection of restaurants on floor B1 that don't all accept a shared special-purpose payment card) just use photos, and street shops have a forbidding text-only menu on the wall.
I think I played a little over a million hands online and probably have a dataset with millions more on top of that. If you want it, I can probably find it and send it to you. Email is in my profile.
>Moore's law is stopping hard.

I don't know.. people said the same thing when clock rates got close to 4Ghz. We always seem to find ways to work around physical limits.
That seems self defeating. None of the advantages of a decentralized system are realized by centralizing the blockchain
Link to the Super Ball Bot video from the NIAC conference:

http://new.livestream.com/viewnow/NIAC2015/videos/75238510

at 33:03 into the video.