skysight-inc/HackerNews huggingface dataset:
It's not just the scheme that's important, it's also the implementation of it that's important. If I'm doing the smart thing and not rolling my own crypto, can I trust the existing implementation that I've chosen? It's hard to say. Does it have secure defaults or do I need to choose and why do I need to choose, why aren't the defaults secure? I'm not a crypto expert, I'm not qualified to judge and therefore I don't even care (as such) - why aren't the defaults secure?

For example, I'm writing an app that requires a password setup in Python so I was investigating this issue:

1. Passlib - https://pythonhosted.org/passlib/ - "implementations of over 30 password hashing algorithms" - What? I'm not qualified to judge what's secure so I don't even care, I just want something secure!

2. python bcrypt - https://pypi.python.org/pypi/bcrypt/1.0.1 - OK standard bcrypt, supposedly that's secure - "Author: Donald Stufft" - who is Donald Stufft? Is the code good? I don't know C and I'm not qualified to judge!

3. python scrypt - https://pypi.python.org/pypi/scrypt/ - OK it's Colin Percival's code, it's probably good, "Author: Magnus Hallin" - did Magnus Hallin screw it up though? "Burstaholic on Bitbucket provided the necessary changes to make the library build on Windows." Eh. Did "Burstaholic" ruin the crypto? Who knows.

Also, in my case I needed something cross-platform, primarily for Windows. bcrypt worked out of the box. The scrypt library required building on Windows with OpenSSL development headers or whatever and all that - I just said "pass".

Nacl is fantastic and simple to use, it can't get much easier than this: https://libnacl.readthedocs.org/en/latest/topics/public.html

Something similar should exist for passwords - I just want to call compare(password, storedhash) or whatever and be done with it, I'm not qualified to judge the crypto. And it should be cross-platform.
Stealth mode storage startup - San Francisco, CA

We are looking for backend and frontend engineers and an outbound product person to solve Petabytes-scale storage problems. We are currently a team of 3 including 2 technical founders who've worked at successful startups.

Email jobs@bouncestorage.com with your github profile if storage and distribution systems are your things!
Heres a great storytelling example from http://bost.ocks.org/mike/

http://www.nytimes.com/newsgraphics/2013/10/27/south-china-
sea/
Yes I seem to have added a decade somewhere...
To bypass paywall: https://www.google.ca/url?sa=t&rct=j&q=&esrc=s&source=web&cd...
From parent's website:
> We’re ... in San Francisco and San Jose.
Exactly this. I still remember the times when if I needed to change something in an application, I could just write to its process memory directly. Those were fun times...

What I want is to retain the ability to repurpose the software on my terms. To move data in and out of the software whether software's authors like it or not. It's becoming harder each day, as more and more tools move to the cloud and turn into apps. I'm happy we still have userscripts in the browser but how long will it take before they get banned too?

This problem has many names. "War on General-Purpose Computation" is one of them, but I suppose the "professionalization of programming" is another. How long will it take before you'll need an engineering license to be allowed to use a compiler, or work with a Turing-complete language?
"Apple patenting the patent" -> hahaha, that would be a great idea, coming from any major tech company hold thousands of patents :)
The intra-American political labels are probably less relevant on a global level than American vs eg Chinese.
> The only downside of server relief is that you need custom code on the client-side

That, and the major reason we do hashes even over TLS: if the server gets cracked and the attacker has access to the stored hashes, breaking a SHA256 is trivial (ie, brute-forcing b when knowing s = SHA256(b)). Then, the attacker can assume the identity of any individual whose SHA256 s got broken, by sending the bcrypt b directly from a crafted client, without having to find p where b = bcrypt(p).
I wonder if the mood stabilization effect has anything to do with blood sugar levels?
They better have a leet reader at hand, as they might get a lot of cover letters written in it.
Not all HTTPS connections are to your bank.

You're probably reading this page using https and there are quite a few extensions to modify the look and feel of hackernews.

Changing on-page content is just about the only reason extensions exist in the first place. Without that you could retire just about all of them.
What especially drives me crazy is when I put on LinkedIn that I work for a vendor (full time, mind you), I end up getting recruiter spam advertising a three-month contract job thousands of miles from where I live, for the same money that I'm making now (but no benefits and no vacation time).

Do they really expect to pull me away from a full-time position at the software vendor by tempting me with a short-term contract merely using the software that I'm developing now?
I believe Norway produces 140TWatt-Hr per year vs Costa Rica 9 GWatt-Hr per year. Norway produces a lot of aluminum that takes a lot of power to produce. Is this right 14 thousand times as much power generated by hydro in Norway than Costa Rica? National statistics can be very misleading.
>My wife takes fish-oil daily as a mood stabilizer.

This is why I take it as well. Its incredible how well it works. I hate to engage in conspiratorial thinking, but some of these overly critical analysis really seem to be coming from a big pharma "tell them the shit doesn't work" perspective. In a country with for-profit medicine, non-patented or low-profit treatments often get demonized. Especially by "useful idiots" who follow this ultra skeptical mindset where only what they hear from an authority like the government or academia, has any real value. They refuse to believe these institutions can have institutional fraud, incompetence, groupthink, or unfair motivators to getting published. As someone who works in a healthcare related field, its pretty obvious that industry controls the narrative, at least to me.

Or can be gamed by private industry and other benefactors who have a bias or agenda.
Same issues here in Panama. We love Waze in Panama!
haha, it's funny!
Your Complete Guide to Turmeric
Dancing Droplets: Mesmerizing Chemotaxis of Food Coloring Droplets Solved
Hi there - is remote OK?
In some ways you do want to freak people out a little. There are people that are a danger to themselves because they haven't the first clue what they are doing. They don't know that they need a good cold weather sleeping bag and not just some "sleepover sack" from Walmart. People can die when they don't know what they are doing or what they need. The stories I've heard from a couple SAR friends of mine... shudder
Bannerman (YC S14) Acquires LawnLove (YC S14)
http://www.freesbd.org/ A fun open source operating system.

Some C knowledge required.
> my ideal of a city is not a large archaeology

You mean arcology: http://en.wikipedia.org/wiki/Arcology
HL1 uses the GoldSrc engine, which is a heavily-modified version of the Quake engine.

GoldSrc was again heavily modified to become the Source engine, but it does retain direct lineage to Quake.

http://en.wikipedia.org/wiki/Source_%28game_engine%29#Origin...
iOS 8.2 cydia download using taig jailbreak – iOS jailbreakiOS jailbreak
I find Mercurial very easy to work with. You just need to know some 2.x Python.

Here's the repo:

http://selenic.com/hg

And here's their list of easy bugs:

http://bz.selenic.com/buglist.cgi?keywords=easy&list_id=5790

Contributor guidlines:

http://mercurial.selenic.com/wiki/ContributingChanges

If you're interested, I could mentor you through some of it.

Edit: Oh, and this appears to be our April Fool's Prank:

https://www.youtube.com/watch?v=qtAuQXeQrMQ
Something that annoys me about these articles is that they're basically saying "the world's densest cities should make themselves denser"

Maybe we should just copy what those cities did. Imagine what america's GDP would be like if it had ten cities like the current NYC.

I live in one of the densest neighborhoods in north America, the plateau in Montreal. It achieves this density with low rise buildings, and it's a very pleasant area.

People say we should build taller buildings here. But I say we should build more plateaus elsewhere.

The problem is that our current regulatory environment makes
it very difficult to build new versions of the world's most popular neighborhoods. So instead the call is to modify existing, successful neighborhoods.
Unlocking the golden handcuffs
It makes you sound insecure. You don't have to rip other people's work to legitimize your own. That's just childish.

I believe YC is the best as well, but I still respect what the others are doing.
Waze is very useful here in CR. Many businesses here even put a Waze link on their contact page.
They're a great resource, not limited to python projects though. Besides providing help on choosing a project, they also coach you on how to approach an open source project and what to expect in the open source world. They have a bunch of talks regarding the same which are worth checking out.
Has anyone used Ionic successfully? What were your thoughts?
I strongly recommend trying to contribute to a project that you personally use. Once you've been using it for awhile, you'll be better equipped to make changes to it + you'll maybe find bugs that you can fix. While you're doing this, mark yourself as a watcher of the project on Github, that way you can see bug reports come in and maybe fix them.

You can try to contribute to just any project someone here suggests, but I find it hard to get motivated + be skilled enough in that language/project to just start contributing. Can you talk about your current skills and what kind of languages/libraries you're using now, or are interested in learning?
And I've taken it daily, in sufficient quantities, for several months at a time, without noticing any difference at all.
Fiestas de Pascuas, ponen a la seguridad en crisis
Extensions MUST be able to modify content. Think about noscript or adblock - if ads were served over https, and you were not allowed or could not technically block them?
If analytics trackers were all over HTTPS and can't be blocked or disabled?
You can, but it prevents you from allowing changing the username (which might be fine, but why tie yourself?) and it provides less entropy - a username + password can be small enough to fit in a rainbow table, while a random salt can have whatever size you want.
I contributed to Firefox. The Mozilla guys are awesome.

But if you are used to Github/PRs their Bugzilla/Hg-Patches workflow feels like going back in time... way back to the old days.
I see, so basically it's like forcing users to make long, un-dictionary-attackable passwords, without requiring users to remember long, un-dictionary-attackable passwords.
SEEKING WORK - Remote/Freelance Python/Django/Mobile/Front-end, with extensive experience building e-commerce marketplaces. I've worked a lot over the years with AWS, and have a lot of sys admin experience with config management like Ansible, Chef, Docker. I have a research background in data analysis. I also have experience with Golang, Angular, Clojure.

Contact details are below. Here're some examples from my portfolio:

* http://www.grapevinelogic.com - A platform for advertisers to work with Youtube content creators. and many more

* http://turbotaxcpaselect.intuit.com - Turbotax CPA Select, to help select accountants.

* http://publish.saxo.com - publishing platform where anyone can publish e-books, and soon printed books (print on demand) and online courses.

Github: http://github.com/sidmitra

Homepage: http://www.sidmitra.com

Linkedin: http://www.linkedin.com/in/sidmitra

Email: sidmitra.del @@@@@@gmail.com
Author here. I wanted to share some of the early mistakes I made as a solo non-technical founder building a software company. I started learning to code after these early mistakes and it's been incredibly helpful. I can't thank HN enough for encouraging me to learn.
What's wrong with the licensing?
Bleacher Report • Frontend, Backend, or DevOps Engineers • San Francisco • full-time or contract

Bleacher Report, the 2nd largest digital sports destination in the U.S. with the #1 sports app by minutes/unique (comScore), is seeking mid-to-senior level engineers with experience designing, building, and shipping applications.

You’ll be helping us:

• Build robust and scalable applications using Ruby, Elixir, JavaScript

• Drive the evolution of our existing stack to a service-oriented architecture

• Improve code quality with testing, automation, and code reviews

• Coordinate with our devops team on releases and the analysis of system performance

• Manage and optimize services within our continuous monitoring platform

Here’s the kind of experience we’re looking for:

• 3+ years using a language (not solely a framework), and the willingness to learn new technologies

• Creating solutions that are extensible, reusable and scalable

Bonus points for:

• Contributions to open-source communities

• Experience with AWS, Node.js, Erlang, Docker, Redis, PostgreSQL

• Formal computer science education

Read more about engineering at Bleacher Report on our blog http://eng.bleacherreport.com, careers page http://bleacherreport.com/careers/engineering, or contact us directly at eng@bleacherreport.com
A well balanced freak out certainly =)
They're called "Top Level Domains", so they are the root. com, net, and org are certainly arbitrary, but they're also predictable.

Soon we'll just have no consistency in domain names.
All points well taken. Still, people need to pack stuff into cookies. There are probably some modules for some environments that do this in unimpeachable fashion. How likely is the average developer to reliably pick those modules, or (haha) just code up the equivalent without using a module? At least a flawed consensus around JWT gets people looking at it.

So now what? The draft [0] hasn't expired yet, so it's possible they'll just rip out the public-key stuff. What should they add to answer your reservations about CTR+HMAC?

[0] http://self-issued.info/docs/draft-ietf-oauth-json-web-token...
Ask HN: What's a minimal subset of HTML that works everywhere?
Please post a set of tags that is guaranteed to work on +everything from the early days of the web, with some justification if it's a contentious case. Imagine no CSS, and no JavaScript. It's okay if it looks like a BBS (or prior), that's the point.

Your subset must likely work on differently-smart phones, and affordable smartphones popular in super-growth economic regions. You may also find it easier to post tags that can't be supported, rather than those that can, and assume that deprecated tags (like 'blink') are excluded by default. This is also ok. If something can be left out (its markup quality can be reproduced by another tag or combination) then it works to leave it out. This is the minimum viable subset of HTML that works everywhere. You might call it HTML 0, or HTMML (min) but maybe it's closer to HTML 1.618 -- an elegantly proportioned HTML with not an inch extra anywhere.

Finally, it's less important that it be "standards based" than that it works on the majority of devices. Remember when an Apple ][ rendered HN? That should be achievable with your subset. And remember "works" doesn't here mean pretty. It just means : displays information in a comprehensible way with the minimum amount of tags. All serious submissions appreciated -- it's not longer April 1 in my tz. :)

+feel free to specify your everything. It's probably okay as long as it's reasonably inclusive.
Your link is off[1]. For their guidelines on submitting and viewing existing bugs start here[2].

http://www.freebsd.org
https://www.freebsd.org/support.html
Primes ARE fundamentally predictable, in the following very strong sense: There is a deterministic polynomial time algorithm for checking whether a number is prime (i.e. the runtime is polynomial in the number of digits of the number being tested.) http://en.wikipedia.org/wiki/AKS_primality_test
actually, tumors are being immunosurveilled constantly, and when the immune system identifies those cells, it tries very hard to eliminate them. The immune system doesn't know or care that the cells are "foreign", just that the cells have properties, or tags that correlate with properties, that make those cells dangerous.

While I generally agree there will be no single silver bullet technology by which we "cure all cancer" in a general way with little to no side effects, I think it's not inconcievable that improving our ability to identify potentially damaging our cells will contribute a lot to keeping people cancer-free.

And while I also generally agree that cancer is inextricably intertwined with tissue growth, as an existence "proof", cancer has never been observed in naked mole rats; this observation alone is significant.
The most interesting part of this text is that 5% significance is "universally accepted" for medical meta-analyses.
This show has improving so much.
Fair enough, and it seems the same cost was used in this case!
http://passwords12.at.ifi.uio.no/Jeremi_Gosney_Password_Crac...
Do you know why they favor Waze over something like openstreetmaps.org? Is it related to the tooling? Did it just become popular first?
I love this: http://i.imgur.com/7qRyFBN.png
there are no high-quality virtual environments (except for killing each other)?

you literally cannot even throw an idea up on a whiteboard and have it be there two weeks later: there is no such thing online. (virtual second-life collaborative spaces.)

online collaborative meetings are a joke compared to real life - as a piece of evidence, if they weren't you wouldn't have teams having to scramble to move to silicon valley, you would just have virtual incubators: in terms of its "manufacturing" output anything an online startup needs can be done over the wire. (phone and server costs are basically it.)
This Hacker News app for Android is relatively small and readable, plus it would be great to get some more contribution going.

Look into it.

https://github.com/dinosaurwithakatana/hacker-news-android
Yes, but here in Costa Rica we do not need to spend energy warming our buildings in winter. Many businesses use air conditioner in the warmer zones, though. For example, in Guanacaste and Puntarenas.
Atlantis – Our First Underwater Datacenter
Aren't you guys a live streaming video company recently acquired by Twitter?
If you are pointing out how university news departments are hype machines, you are right. I've seen that this is particularly true of MIT. I don't track these things, but I've seen too many over-hyped research stories coming out of MIT news and Tech Review. Granted, they're not the same organizations, but somehow they both have this common trait.
> We need to change the wrong headed notion that dense urbanity is somehow bad for the environment.

Dense urbanity is bad for the local environment and, particularly, for human health in it. That's the cost of the lower per-capita impact on the global environment that it provides. We need to learn from what works (and what doesn't) in both dense and sparse environments to build lower-global-impact environments that remain high quality environments for human health and quality of life.
Yes, of course it would have. It's not like this required executive approval to do. It was probably some WP team that wanted to have a little fun.
I do not understand what's happening here. How does it resolve to a 127.0 address?
Tails 1.3.2 is released
Mathematicians Chase Moonhshine's Shadow
I really enjoyed Effective Modern C++. It covered the interesting stuff I wanted to know, and skipped the introductory "in case you've never programmed before" fluff.

http://shop.oreilly.com/product/0636920033707.do
Would it be possible to replace the shoe fitting flouroscopes with ultrasound?
SpaceX COO Gwynne Shotwell compared Falcon's cost of low orbit "on the order of $80 million to $90 million" and "$150 million to $160 million" for a Falcon Heavy with all the trimmings.

"In contrast, ULA charges taxpayers $400 million every time it launches a rocket into space."

SpaceX's math gives you the 75%.

The rest is arguing about whether SpaceX minimized the actual deliveries to arrive at that the $400 million per launch price.
Thanks! I'm the guy on the right and this is my first youtube show. Suggestions and constructive feedback appreciated. (There's also an anonymous feedback form linked in the youtube comments.)
I really hope not to see that day. So, how to avoid it and not be open to security issues like these?

It used to be that you could get a lot of use out of a computer all by itself, nowadays that's changed and the trend to 'always on, always online' translates into having your machine potentially under attack 24/7.

Being vigilant against enabling the war on general purpose computation is very good, it is the biggest threat in the longer term and one of the reasons why I think that all these large silos are a very bad development.

I don't think we have much to fear from the 'professionalization of programming', not if the kind of code I see on a daily basis is anything to go by ;)

There have been numerous attempts at slapping a gateway on the ability to write software for the hardware that you already own, the only environment where this has taken hold is on mobile platforms, I sincerely hope that that is a development that we will sooner or later be able to revert.

But in order to revert it you'd have to come up with a solution for the pandemonium that would ensue if everybody and their brother would use the likes
of 'download.com' or some equivalent to install their software from. Maybe something along the lines of apt-get for phones would
be a starting point.
Your email address (based on your other posts) is not in jobscore (which we use to track applicants).

If you want to apply to something, go through jobscore, so it's in that system. Anything else tends to get lost :(
Start Small Stay Small by Rob Walling is the one that spoke to me in my position the most: http://smile.amazon.com/Start-Small-Stay-Developers-Launchin...

He has a podcast, Startups For the Rest of Us, that you can listen to for free on iTunes.
Official Nodejs Riak Client
You'll be glad to know that in GO, the ancient Japanese game which is played with black and white stones on a cross-hatched board, black goes first and has the advantage.
At first I thought "a build system which automatically figures out what to build and how to build it purely based on the source code" included figuring out library dependencies. It looks like I was wrong though and you still have to set linker and compiler flags yourself. I think actually understanding your dependencies (minimum versions, different build configurations and all) and handling them in a unified manner without too much special casing for the peculiarities. CMake already does this quite well, but there is still lots of room for improvement.
One clarification here. Drifty/Ionic is not native...it's "hybrid", which means it simply wrapping AngularJS into a native container.

React Native actually compiles Obj-C (much like Xamarin) which is what makes it fairly revolutionary. In other words, it would be very difficult to tell the difference between someone writing native Obj-C with someone compiling it from React Native. Drifty/Ionic is simply doing transitions, taps, using the JS engine of the phone.
Web2py Python framework was in fact originally created by a professor to assist in education. I'm a total novice and my contributions have been welcomed warmly.

https://github.com/web2py/web2py/