skysight-inc/HackerNews huggingface dataset:
The main crux of this whole post is that PGP is still good it's just that it's hard to use and there's no mobile support. Unfortunately for whiteout, there are many different mobile PGP implementations that do everything these guys are planning to (like automatic key lookup) that already exist today. Notably among them K9 + OpenKeychain, which already support keybase.io and HKPS.

People who say that security is meant to be hard are missing the point, OTR has been around for a long time and is not only much more secure than PGP but more useable. If you want truly secure asynchronous messaging you should checkout Pond by Adam Langley, which is arguably the only traffic analysis and metadata resistant messaging protocol on the planet. Unfortunately PGP has been designed in a way that careful key management is pretty much a requirement if you want. PGP key verification is extremely painful on every implementation I've ever seen, and unless you do it you are vulnerable to extremely potent attacks which are the result of plaintext key sharing algorithms like HKP and LDAP.

I'm with moxie on this one, I get sad that people are still trying to build modern 'secure' architecture based on a ~20 year old cryptosystem. It sets everyone who cares about useable security back because you are continually encouraging people to cling on to the old paradigm. Unfortunately there is no clear, universal successor to the PGP kingdom... yet.
After contributing money to Obama's campaign and voting for him twice, this is annoying.

At the risk of boring the few dozen family and friends I am closest with, I have been SPAMing them with emails about TPP and links to complain to their Congress-critters.
If you completely dismiss their product then you would have missed Microsoft because it's highly likely that at that point their marketing etc wasn't great. That's the trap the article is warning against.

The more expert you are at something the more likely you will dismiss things. PG recognises this bias and is trying to keep his mind open. You have fallen straight into your own trap which is narrow mindedness presenting itself to you as expertise.

They did have a product and they did go on to build many products. Many of them are far from crap and solved really difficult problems including running on all kinds of hardware, maintaining backward compatibility, rewriting their main OS from scratch. Microsoft is not Coca Cola. PG is trying to see that in other companies at a very early stage. (not giving him a free pass - I think he still has other blind spots that annoy me - I have many more no doubt)

edit: No doubt, it's probably that combination of being an expert at something but having a somewhat open mind that got PG started on his adventures in the first place.
I initially misread the footed as "Make love with a keyboard" :P
Better!

(Thanks—added.)
Look at GPIO expander chips like the MCP23008. They're only a couple bucks and give you GPIO pins you can control over the Pi's I2C bus. You can run a few of them off an I2C bus using different addresses too. Can see the chip and some tutorials for using it here: https://www.adafruit.com/product/593
The second option, that all apps have a higher level of sandboxing. Until iOS 8 apps couldn't do anything to modify the OS besides adding push notifications and maybe a page in the settings.
Last week's TPP discussion with 80+ comments: https://news.ycombinator.com/item?id=9078954
The Qt model is basically so that people can pay a license fee and not have to follow the terms of GPL and have to make their source available.
...and then sign in via your fav nsa snitch. brilliant idea! excellent software. chapeau.
Only the first page, the rest is blurred and has to be paid for.
More "sandboxed" in the sense that iOS apps start in a small sandbox that gets progressively and opportunistically larger. Instead of demanding all permissions upon installation, they demand them contemporaneously with attempted access to certain resources. The idea is that user consent is more informed.

In contrast, Android apps demand all of their permissions up front.
I honestly don't care that much about package management: that's only symptomatic of the deeper issues with Go.

> Weird that in this case it's an equivalent of npm or Rubygems, which are nice tools for beginners but a complete pain in the ass for serious projects; essentially, you're disqualifying Golang for not reinventing DLL Hell like everyone else.

npm and RubyGems have two basic problems:

1. Curation of package sources.
2. People installing packages they shouldn't have.

Curation of package sources: notice that people don't complain nearly as much about dpkg/apt packages: they're curated much more carefully than npm/RubyGems packages (which is to say, they are curated).

People installing packages they shouldn't have: often the problems people run into with package management are self-inflicted. The adage is old: "Libraries from CPAN should not be treated as if they were part of the core." "Everyone else", as you say, is not experiencing DLL hell. I have zero difficulty with package management, because I use mature libraries and specify versions in my package configurations. There's no excuse to be experiencing DLL hell these days. The people who experience DLL hell are the ones who don't check in package configurations and then are surprised when the 0.1 alpha package they installed makes a breaking change and they don't know which version their code works with.

This is a problem in the Ruby community in particular because part of the draw of Ruby is "there's a package for everything". Newbie devs get caught up in the ecstatic frenzy of solving all their problems with gems without researching or testing those gems at all. But that's not a problem solved by Go's lack of a package manager, it's a problem solved by looking more carefully at what dependencies you introduce before introducing them.
Small Introduction to Markov Chains, after all
That's going to be a crucial place for solar when the industry explodes over the next decade. Good bet.
Things like this make me very skeptical that the accepted model is correct.
This is a really interesting and problematic area. There is increasing amount of apps that claim to do health measurements with the help of "propriety algorithms" It should be noted that the writer is both a physicist AND a digital health evangelist, so I assume that he provides a balanced view that would take potential benefits of these kind of apps into account, if they had them.

The following excerpt is pretty damning:

"I practice Emergency Medicine in a Level 1 trauma center. I see what poor blood pressure management does on a daily basis. I see people arrive to my ER non-responsive, on the verge of dying, due to hemorrhagic strokes secondary to blood pressure that isn’t controlled. I frequently see hypertension become so bad that it causes flash pulmonary edema, and patients literally arrive drowning in their own lungs and unable to breath. I’ve talked to family members telling them how their loved one died because their blood pressure was too high, resulting in a catastrophic failure of their organs.

Blood pressure management is not for “recreational purposes”. This is not entertainment. This is real life."
Gamifying daily activities interest me. I would not mind giving $10 for an interesting date. Yet it looks complicated at first. A simple explanation or a demo can get you some traction.
If you're doing a startup outside of software/web, one of the things VC's ask you about is IP protection. The development cycles are longer, the costs are higher, each prototype is precious. Once you have succeeded, the VC needs to know that a large company cannot swoop in and make the exact same product as you.

Let's say I'm working at a university and come up with a new type of GPU, it's 10x faster than NVIDIA's & AMD's. If I have a patent, I can raise VC funding and take on NVIDIA/AMD because NVIDIA/AMD cannot make the same thing and sell it in the USA (a large market). Now there is NVIDIA, AMD, and QUANTICLES selling in the market. The products are improved because QUANTICLES is 10x faster, and NVIDIA and AMD have their own selling points. EDIT: The public benefits here because improved products are on the market and jobs are created in the USA.

Let's say I'm working at a university and come up with a new GPU but cannot patent it because University Patents Are Evil. Now NVIDIA/AMD are free to pursue it, or not, if they chose. Likely they wont because there is a significant ground to cover between university project and actual product. Usually there are many issues and tradeoffs to solve, solving these issues/tradeoffs is risky, and NVIDIA/AMD cannot take on the risk or are not aware they should.

Main point: startups are a proving ground for new ideas that big companies can't afford to take on, or choose not to. The university comes up with the idea and then the startup tries to prove that it works in a commercial environment. If there is no protection for that company after it's proven then investment is a losing bet.

Software/Web companies have a different sort of protection than hardware companies: users. A user is a customer that gets entrenched in a product. For example, how often do you change email services? How often do you change online photo catalogs? Each year I do my taxes on the same site since I can import my settings from the previous year and I know how to use it.

Hardware companies do not get entrenched as easily. Many times hardware can be switched in and out with other hardware (for example, GPUs). This also creates a feast or famine environment - you either have big sales because you're best product on the market, or you have none because you don't. If a startup cannot protect itself then it may not be worth investing in.
There's lots of travel sites popping up all the time, including accommodations sites. That's why I built http://AllTheRooms.com, which aggregates all the different accommodations sites and deals sites, like Expedia, Groupon, Hotwire, and Airbnb
You created a throwaway account just to insult me? I'll take it as a compliment :-)
Sounds like the same or similarish business model to SCTY
Thank you for the very detailed history of this.

Amazing how some things have changed in just the last decade between the browser makers.
I tried to address this in my reply to Bjartr
I agree with the point about cryto, but I'm not sure your general point about society being unable to contain anything is sound.

Guns are controlled in many countries quite effectively. Not completely of course, but compare for example gun crime in the UK with the US.

There are fewer (if any) examples of drugs being controlled effectively (in non repressive regimes) I'll agree though.
Their hotels searching is still pretty rough. It's not very googly, in that it's mostly pay to play. You have to look hard to find nonpaid content. It also leaves out all the lower cost options like Airbnb. I built http://AllTheRooms.com to aggregate everything, including sites that don't pay, because Google wasn't really doing its job in the accommodations space.
3 Al Jazeera journalists detained in Paris for flying drone
We don't commit directly master. We have a master branch and a dev branch. We commit directly to dev, and when we are ready to push to production with cut from dev and merge into master, then push master to prod. Pushing directly to dev keeps our repos up to date, and keeps us honest with our commits. As long as you are always pushing green tests, you can be confident in your work, and so can your team.
> It's not as easy as "publicly funded research should be free", I agree. As I said, it's that funded research should benefit the funders.

It does benefit the funders in the case of government grants. The NSF gives a researcher a grant to scientifically study some specific thing. The researcher makes scientific discoveries about the thing.

The researcher publishes the research, and also (possibly in collaboration with people who were not involved in the research) thinks about how the new science can be applied to produce real world products. The research gets patents on some of those real world applications of the research results.

Note that the public that contributed to funding the research did benefit. The research was released, and they can use it as the basis of further research, or think up useful applications for it (and patent those if someone hasn't already).

I think people tend to confuse the research (which is often paid for by government grants, at least in part), and development of practical commercial applications for the results of the research, which is generally not paid for by government grants.

Note that if the researcher had not worked on coming up with practical applications and patented them, but instead just published the research and moved on to the next project, that doesn't mean there would not be patents. Anyone would be free to take the published research, figure out how to apply it to practical problems, and likely get a patent on that use of the research results. Their patents would not cover the underlying research--just the use of it as described in their patent.
Differentiation is much broader than just the product. It could be in targeting a particular geographic niche, offering different financing, more convenient packaging, etc.

In marketing, they have a concept of the "four Ps" - product price place (distribution) promotion; all of these can be fertile ground to set yourself apart from the competition.
Awesome, we need all the help we can get to make more people aware about this since the mainstream media isn't covering it all. If only John Oliver did a take on this for us... :]
- author of this blog post
The trouble with TPP and other such "advances":

Big corporations are pulling strings in the background, to annul democratic control. With bigger institutions (e.g. Washington, Brussels, ...) it becomes simpler and simpler to find people that are far enough from the voters and corrupted enough to support such endeavors. The result are secret proceedings and parliaments that become pressed to vote for big legislation where the effects for democracy and nations can not be foreseen.

In effect, those lobbies have their way (at least oftentimes in the last decades) and destroy democratic control and control of the big corporations. So it comes, that big corporations have a "free hand" to do what they want but are liable for nearly nothing.

The worst thing about this is, that when one "advance" is rejected by democracy -- no trouble, just give it a different name, make it a little different and give it an other 3 or 4 letters acronym ... and bring it back next year!
I don't use Soylent 100% of the time, but usually for one to two meals a day. I have used it for a week straight.

I generally agree, I crave "real" food immensely when I'm eating Soylent a majority of the time, but...

I have pretty severe TMJ and everything I have to chew increases the overall pain that I feel, and it's not temporary pain, it's persistent pain that is actually distracting.

Drinking Soylent helps alleviate this to some degree, to the extent that I'm willing to make a trade off.
It's overkill. Completing a lower is doable with normal shop tools. DD is making a point, not a product.
I wonder if we'll still be stuck with our puny data caps when this arrives. Blowing through your monthly quota in a minute might be astounding from a technical point of view, but it only takes one broken page with an ajax infinite loop to get you.
Apple has a minority market share.
thx for the advice, I gonna look into it.
How do you suggest going about this? The existing ranch homes with 3 parking spaces are privately owned by somebody.
http://en.wikipedia.org/wiki/Accidental_Empires
I think you're right that you can't win, because the entire point of the issue is that we should spend less time wondering whether a guy is winning or losing. There are other perspectives on life.

I think the lesson is clear: if you want to help people, listen to them carefully. Vivek Wadhwa got slammed because he could not take criticism from the very people he was claiming he wanted to help: women. It can't be an ego thing.
Where are the houses that are close to the amphitheater?
Israeli company Face-Six promises to ID faces in photos with machine learning
San Diego Hacker News Meetup 59 Friday (2/27)
Let it load...
Thank you for at least not writing another Brainfuck clone.
A bus station is a where a bus stops. A train station is where a train stops. So what is the purpose of a workstation? And more importantly, what is the purpose of a PlayStation? ;).
You are right in your observation that the exchange of secrets through Sharelock.io is only secure if you trust the integrity of the service and the people behind it. To mitigate this concern we offer Sharelock as an open source project on GitHub, which allows anyone to create their own island of trust by hosting an instance and controlling cryptographic keys.

There are many ways to organize a secure exchange of secrets, each of them with different trade offs between usability and allocation of trust. With Sharelock we aspired to create a system that is maximally usable by leveraging existing social identity providers and remaining agnostic to the mechanism used to transfer ciphertext. We believe this approach makes Sharelock.io more widely applicable to a broad range of scenarios.
Because of its mass, its luminosity, or its age?

Several black holes have already been identified with masses of this magnitude. However, it seems that the age of this black hole is indeed problematic, as indicated by the article:

> For the black hole to grow to such a staggering size in less than a billion years, the astronomers posit, it must have been pulling in interstellar mass from its surroundings at the maximum rate the whole time. Even so, the radiation of the quasar formed by the black hole should have started to limit that mass accumulation before such a size was reached.
It's JSON lists as s-exps, which means (as I understand it) that the author doesn't need to implement parsing, only traversal and evaluation. (Which can essentially be a big-ass case statement.)

["def", "foo", 1]
["fn", "foo", ["a", "b"], […]]

It's not the most attractive Lisp I've seen…
Open-ended destination is great, but I've sometimes wished for open-ended source. My usecase is something like a casual multi-stop trip, where you have an eventual destination in mind, but would like to save money, or see where else you can go along the way for a similar amount of money.

I've worked around it by manually checking nearby routes, or getting a feel for options with open-ended reverse flights and then searching the reverse again.
haha nice :)
I made wifi power meter using $15 chinese plug watt meter and ESP8266. No api no fancy stuff, just a webpage with three numbers.
Nice. Can you give us some details about how this was made?
Our lazy friends who give money to (Netflix, iTunes, etc) are directly supporting this.
I want to see that: "How many solar masses is it from Paris to London again?" (115... it's actually a kind of convenient unit, quite close to half an English league and just a bit larger than a Roman league.)

Or: "Man! I stepped on the scales today and I've put on another ten million Planck lengths!"
> Rating service having problems? Don't show user ratings. Search service offline for updates? Disable search

As an example of a (probably?) bad way to organize services, I worked on a project that had factored a role-based access control system into its own service. Every single web request hit this service, which made it a single point of failure, performance critical, impossible to temporarily disable, etc.
The US is offering $3M for information on this notorious Russian hacker
How many times do you get kicked in the groin before you don't go there again? That's the point I guess I'm failing to make. There's a lot of emotion riding on this issue; if you're a guy, somebody's going to try to make you look bad. Never mind what good you might have been doing; Especially if you're getting some traction, you get torn apart. Because there's points to be scored.
I don't even get 4G speeds almost ever. Bandwidth is always massively oversold. Often I can't even successfully load a random web page when I have 4+ bars of "4G".
A nice read. I am going to adopt alot of practices from this article. And yes i think alot of times you just get lucky in a few things that can make or break your product. Good affiliations early on can give your product good PR.
I was going to make this argument, though it also occurs to me that it's unlikely for biological life to make that decision. Even smallish groups of humans seem unable to agree unanimously on almost anything.

Potentially what sama was trying to convey was that machine life will reason about things more logically (or at least more consistently) than biological life, and come to that conclusion. Biological life may not be capable of that conclusion due to an inability to agree with other biological life.
Can we see it with less than a million bucks (or a trip to Wyoming)?
To be fair, I haven't used 1.9. These days I'm mostly in Tower, which felt like SourceTree with some added features (the way it does stashing is pretty nice)
Hi, forgive me if this is a bit of a "noob" question, but could someone explain in layman's terms, what is going on in this website? What's the purpose? I'm having a hard time following the point of the discussion on this page, and frankly it also makes me feel uncomfortable.

One example snippet from the page:

>So much for the basic theory. Now, when he was at Pearl Harbor, he discovered something that, in retrospect, should have been profoundly disquieting. Namely, that ejaculations obtained in a whorehouse (i.e., provided by the ministrations of an actual human female) seemed to drop [sigma] below the level that Waterhouse could achieve through executing a Manual Override. In other words, the post-ejaculatory horniness level was not always equal to zero, as the naive theory propounded above assumes, but to some other quantity dependent upon whether the ejaculation was induced by Self or Other: [sigma] =[sigma sub self] after masturbation but [sigma]=[sigma sub other] upon leaving a whorehouse, where [sigma sub self] > [sigma sub other] an inequality to which Waterhouse’s notable successes in breaking certain Nip naval codes at Station Hypo were directly attributable, in that the many convenient whorehouses nearby made it possible for him to go somewhat longer between ejaculations.
> Fees can get up to over $4,000 USD in the hot month of August when not subsidized, according to the Mexican Federal Electric Commission.

The site lists the price in Mexican pesos, not in USD, so it's arround 267 USD.
More like a theorem. And Dan Geer is totally worth reading.

http://geer.tinho.net/geer.rsa.28ii14.txt

https://encrypted.google.com/search?hl=en&q=site%3Ahttp%3A%2...
No, exactly thanks to Google and Android is just as bad as IE6.

When I do web development projects, most customers think Safari and Android use Webkit based browsers, so mobile === Webkit.

Whithout understanding that Safari and Chrome aren't really 100% equal, that Chrome is no longer Webkit based, or that there are actually other alternatives.

Thus making on their eyes Webkit the new IE6.

Just as side note, on my home country, with a minimum wage of 450 euros, there are more Windows Phone devices than iOS ones.