skysight-inc/HackerNews huggingface dataset:
I don't know anyone who has ever taken "don't roll your own crypto" to mean "don't write things that use crypto".
That first contact with the ground... jesus. It was difficult for me to believe that the chick they showed at the end was the same one that took the plunge. That camera shot wouldn't have been nearly as remarkable if the chick had died.
Meet Bob: World's worst investor. What if You Only Invested at Market Peaks?
That's the very thing you're presenting though. A viable business model. You're there to present a viable idea, not how well your gorgeous code works.

My team won a startup weekend here in Santa Cruz. And we didn't have working code, just a nicely made HTML page that looked like a fully fledged site. But we presented it in such a way that made sense from a business stand point and we won because of it.
I thought MySQL AB was already extracting money, and lots of it, when it sold? Like $100 million in revenue?
Some "IANAL, but I try to pay attention" questions below. From the re/code article:

Britto’s “distinctive style of artwork has become so famous and pervasive as to constitute a distinctive trade dress that identifies the highly-coveted lifestyle brand,” the complaint said.

From the complaint[1]:

This is an action for trade dress infringement, unfair competition and false designation of origin or sponsorship/endorsement under the Lanham Act, 15 U.S.C. § 1125(a); trade dress dilution under the Lanham Act, 15 U.S.C. § 1125(c); trade dress infringement, trade
dress dilution, unfair competition, and deceptive and
unfair trade practices under Florida law; and
copyright infringement under the U.S. Copyright Act, 17 U.S.C. §§ 106 and 501, arising from Defendants’ blatant and repeated unauthorized use of the artwork of world-famous visual artist, Romero Britto, in their products, stores, marketing, and promotion

I'm reasonably familiar with the basic landscape of copyright vs. trademark vs. patent law, but not the trade dress matters brought up in this complaint. Can anyone summarize what the plaintiffs will have to prove in order to make their case re: the trade dress issues in the complaint? Likewise, I'd appreciate a pointer to a good primer on the subject if anyone can recommend such.

[1] (PDF): http://pdfserver.amlaw.com/dbr/Britto-Apple041315.pdf
6 Vulnerability Exploit Trends You Need to Know About
Just because I was confused and others might be as well:

LLVMSharp provides C# bindings to LLVM's C interface. It does not allow LLVM projects to use dotnet code.
I use LinqPad for writing small to medium size F# programs. There is also another IDE called Tsunami for F#, its useful and lightweight. MonoDevelop does run F# but you have to get that as a plug-in after installing on Linux and OS X. Atom has a F# package, but I have not used it. Of course, fsi (interactive) is probably best kept secret while learning the language or playing a new library.
So if your neighbor is offended that you wear blue shirts and insists that you should wear green shirts, will you change your behavior? After all, they are offended and you care about them.
Thanks, changed from http://uk.businessinsider.com/the-17-hottest-tech-startups-i....
3D printing to be a $20B global industry by 2019
Seems more appropriate to call these Table Driven Tests:
https://github.com/golang/go/wiki/TableDrivenTests

As they are not truth tables:
http://en.wikipedia.org/wiki/Truth_table
Nope. :)

Thank you for the links.
This. It really depends how you use it.

In some ways they've introduced some powerful features bringing it on par with other languages, but the reality is that performance varies wildly in the real world because opcaches are finicky dependent on the data/request type/frequency and automated GC/circular-reference optimization is far from perfect.

Between HHVM (to effectively make memory growth linear vs logarithmic when approaching higher request concurrency) and sensible opcache tweaks you can make that runtime a bit less stochastic at scale, however if you don't know what you're doing PHP makes it so easy to go in the complete opposite direction without any indications you're running toward a cliff...
any plans of releasing officially supported Java driver? For most enterprise oriented apps, having officially supported Java driver will be great.
Surely script and meta elements aren't markup?
Maybe; but handing a MAC to generalist developers is going to end in a timing attack, like http://rdist.root.org/2009/05/28/timing-attack-in-google-key.... (And Keyczar is not amateur hour!)
I've been to many that don't fit into those. But I think it's because the title was 3 harmful types of hackathon. Not "the 3 types of hackathons. The ones you and I have been too were nothing like this and were simply not in the harmful category.
Thank you for your work on this. I always found the existing ones to be a little underwhelming, hope this works out!
People have been doing that with PHP for years.

Yes, it's true that there's a ton of really bad code out there. But that's a measure of it's popularity.

There's also a ton of bad C and Java out there.

And yet, no one dismisses those languages because of that.
See my edit:

> Quick edit: Just wanted to say that I see this more as my failing to understand what SW was instead of me blaming SW for not meeting my incorrect expectations. SW is fine but it's just probably not for me.

I now understand this to be the case I just didn't know that going in so for me it was a bit of a disappointment but I have no one to blame but myself and thats the only person I do blame. I do not personally like the way SW does it but that doesn't mean I think they are a bad thing just not for me.
What do you want to do? Do you want to use C, or do you want to do web programming? C is by far not the best tool for doing web programming. Yes, it can be done, but it will be much more pain than necessary.

Or are you in a situation where for some reason you have to use C, and you still need to do web programming?
Also my ancient and somewhat creaky engine, but perhaps a starting point: http://langintro.com/js-vine/ (there's a github link on that page), and this more advanced one that uses canvas: https://github.com/loner02/vn-canvas
The name "Truth Tables" in already firmly established in logic to refer to enumerations of all combinations of boolean inputs and outputs.

I think a better name for these testing constructs would be Expectation Tables.
> DKIM signs the message and provides a body hash which is validated against the public key in DNS

And how do you make sure the public key is correct then ? Well, just use DNSSEC !
I was the last student at my college to receive a master's degree in Computer Science; the program was eliminated. At the time, the movement was towards cross-discipline graduate programs, e.g. a Robotics and Intelligent Autonomous Systems degree that combined studies in AI, ML, Electrical Engineering, Mechanical Engineering, etc. At the time this seemed like a smart way to get a more practical focus while herding more students into fewer graduate programs.

I wonder today if even that approach is viable, or if, as this article suggests, the new-model education will continue to take market share from traditional university programs.
Developer Relations conference for London
Github was founded 7 years ago and now does "millions of dollars a year" [1], NPM was founded 6 years ago (and only became a company last year).

There are 140,362 total packages (where github was in 2010-2011) on NPM and 21 million repositories on Github now. Javascript is growing, NPM is the hub for all things javascript, so as long as things keep going the way they are, I don't think it is a stretch that NPM can be making that Github money.

[1] https://www.quora.com/How-much-money-does-GitHub-make

[2] https://growthhackers.com/companies/github/
Moley Robotics
Is it a big deal if they break/leak? Are there any theoretical problems that I, as not-an-oceanic non-nuclear-waste expert, am not aware of? Not just over 5 or 10 years, but over hundreds of years? Are we able to monitor them for these problems? How difficult or expensive is it to fix any problems?

I ask because I genuinely don't know. I'd be OK with it if scientific consensus and consultation between the ocean and nuke people said we know enough about them to say there aren't issues. I don't want to just say "lets just dump them in a place I don't personally care about that's really far from me".
Astroturfed votes and comments are not allowed on Hacker News.
In what world do you live where a meaningful 3 year relationship is easy? Thanks for belittling essentially all unmarried people plus some married couples.
Samsung, Nvidia may collaborate on 14nm GPUs – but on what type of silicon?
Controlling Browsers' Spatial Navigation
The NSA can take any one of their trusted root keys, which I don't think it would be healthy to doubt they are in possession of, and sign a certificate today.

With DNSSEC, they'd have to subvert the entire DNS infrastructure, signed from the top all the way down to the particular domain they want to falsify. But it is somehow this infrastructure you wish to label "NSA controlled"?
Ask HN: HN for DIY'ers? Is there such a thing?
I was wondering if anyone here knew of a "feed" type site like HN that was for DIY-related topics.

I love building stuff and learning about building stuff. Would be cool to see something like this platform, but all about fun DIY projects.

The Instructables home page is pretty cool, but not quite what I was looking for.
Open Source Tutorials
The numbers were measured on SSD. If the active/hot dataset fits into RAM, the numbers between SSD and rotational don't change much. If the active dataset doesn't fit into RAM, RethinkDB performs significantly worse on rotational.
I don't think so. If they were happy enough not to quit before, they are even happier now.

In fact, they might be so happy with their job that they want to improve so they aren't replaced with the better candidates the job is going to attract now that it is paying much more.
> note that OP said "indirectly"

The indirectly comment is referring to the CIA itself. Funding by IQT would thus be indirect versus funding by the CIA. The problem is there's no credible evidence of either, just fairly weak circumstantial stuff at best.
That's actually the point, though. People that do this for a living will agree with me on this. They don't have the knowledge individually to make secure crypto. Secure crypto comes from lots of smart people and a lot of battle testing; the idea of one person making secure crypto protocols/implementations is completely ludicrous.
Music Identification with Shazam
Failed Startup, Useful Product – Free Publishing Platform for You
When we started our startup, it was our second company and first startup. And we didn't know anything about startups so we made pretty much every single mistake in the book.

Of all the mistakes we made, one sticks out the most which is spending an entire year trying to convince companies from the likes of Coca Cola to medium enterprises to do something they're already doing differently or doing something new they aren't doing yet.

We now learned the difference between making something people "need" vs "want". When you are not making something people want, it doesn't matter how polished you make your product or how much they need the product.

We now accept our failure. However we have a useful and polished product in our hands that we really want to see used by people. So we're finally opening up our platform to everyone, not just companies (we restricted access to companies and about a single topic only).

It's a publishing platform. I haven't finished transforming the product from the first idea/product, but it's well-tested and ready to be used.

It's completely free for now until one day we have enough demand for a paid model. But there will always be a free option.

If anyone's interested, please visit https://goodethos.com. I'm also going to release almost all of my code to open source hopefully in a month+ time.

DEMO TO SEE: https://goodethos.com/bdqworks

DEMO LOGIN: username: demo-public, password: demo-public

Things holding me back from releasing it open-source now are:

1. I'm still developing parts of the product;

2. Lots of the text/words are still wrong (I need to convert the words to be consumer-centric);

3. I have to remove signup option in order to make it a standalone product;

4. My fonts providers are not open-source so I have to find alternatives.
We did a couple of scalability improvements in 2.0, but didn't optimize groups and counts specifically.

Would you mind writing me an email with your query or opening an issue at https://github.com/rethinkdb/rethinkdb/issues (unless you have already?)? I'd like to look into it to see how we can best improve this.

We're planning to implemented a faster count algorithm that might help with this (https://github.com/rethinkdb/rethinkdb/issues/3949), but it's not completely trivial and will take us slightly longer to implement.
It's completely trivial to write a "consumes-100%-CPU" JS script. I'm sure people usually don't do it intentionally, but I happened to encounter two such scripts on two separate domains today[1]. The surprising thing is Firefox managed to kill the first one, but not the second one -- after being completely unresponsive for 30s, mind you. It just hung when I pressed the "Stop script" (or whatever the button was labeled). Had to kill the whole FF process and restart it, being quick to close the two tabs that were causing trouble.

This is absurd. Apart from anything else FF needs to be better at protecting its users, and that includes separate-process-per-tab. (Ideally, it should be sandboxes, but honestly I'd settle for "separate processes" at this point in time.)

[1] One of them was http://www.xojane.com/
This is a common practice and more often than not the data is reused, so it is provided by a "data provider", a method living in the test code, which returns a structure with inputs and expected results.

For example, in PHPUnit: https://phpunit.de/manual/current/en/writing-tests-for-phpun...

It would actually be even more elegant if the data where extracted out of the test methods in my opinion. Though it would effectively double the number of methods, it cleans things up significantly within the test methods, provides an outlet for extension and the only expense is the addition of declaration & closing lines.
To fingerprint the connection/data by the used cipher they would need to break KC. If they are able to break KC they can fingerprint you also when you only use KC.
It's really not that hard, huh? Do you have some evidence or solid reasoning? Given that this is a hard question to get objectivity on, do you think you have more experience with crypto than daeken? If no, you should probably update your beliefs to consider daeken's opinion, rather than repeat your own without substantiation.
Related question: how do "pros" write web pages. Do they do it by hand or do they use some type of wysiwyg editor?

I know the basics of HTML/CSS too (I suppose all programmers do), but still I don't feel qualified to make a web page. It seems to me that it's more a designer than a programmer task, am I wrong?
> can I spend 48hrs building a mini hydroponic lab powered by a raspberry pi and arduino?

I don't see why not. Here's your pitch: recreational marijuana has been legalized in 5 states, but commercial sale is only legal in two, while cultivation for personal use is legal in all five. Additionally, if black market sales are included, marijuana is the biggest cash crop in the US with $35 billion annually. So there is BIG money in the market. A rpi/arduino hydroponic system is the first prototype of a product you can sell to consumers so they can grow their own in areas where they can't buy it. It's like Nest, but for growing pot.

Now have some business nerd spend an hour making a few slides and you're done. You have articulated the problem, the size of the market and the product you're creating. You don't actually have to make the product beyond the prototype stage, you just have to pitch it like you could.
If anyone uses what I built for their own personal use, I appreciate any feedback sent to me by email at hello[at]goodethos.com or jason.saeho[at]gmail.com.

Also if you're using the platform and want a new feature inside it. You let me know. I'll probably build it for you as long as you make good use of what I made.

One more reason why I'm doing this is because I'm a huge Meteor.JS advocate. Meteor.JS is great. You should use it.

Lastly I'm now looking for new cool projects to participate in or even a job. Please contact me if you're interested.
Yes, it is a stretch.

A huge % of individual programmers want private source control as a quick and easy backup of their code. It is also completely language agnostic and will only fall into jeopardy if a new, better source control system comes out (and then they subsequently don't support it).

That is not the case with npm and never will be.
I agree with this initiative and think anything that assists people in an often small step up from a tough situation, is something all communities than can do... should do.

The only concern that comes to mind however is one of perception, as demonstrated 3 years ago at SXSW - http://www.wired.com/2012/03/the-damning-backstory-behind-ho...

I'm not passing opinion here on the right/wrong element of BBH Labs in this instance, more commenting that with vulnerable sections of society, trying something new can be so problematic and potentially brand damaging that it puts people off in taking a risk or trying something new.
The comments here are all valid, I just think some consideration should be given to those brave enough to take the risk. The SXSW backlash caused many people / companies to 'back off' from these sorts of issues, which surely can't be a good thing.
What difference does it make whether the program they run to carry out this attack is 100 lines long or 400 lines long? DNSSEC gives NSA and GCHQ this level of control by design. It is a PKI, based on delegations from a root, where the top of the tree is literally controlled by the US and UK governments.
Naming is hard! Thanks for suggesting "Expectation Tables".
Human languages don't work like programming languages, you can't always derive the meaning of a phrase from its parts. There are large groups of English speakers among whom, men and women alike, "you guys" is an idiom independent in meaning from the word "guy", and is used as a gender neutral plural second person pronoun. If one is in the company of such speakers there is nothing wrong with using it.
One difference is that the Enum library works on anything that implements Enumerable. rpc.pmap only works on lists.
It's asking me to sign up to read the suggestions, Quora-style. Yucky yucky. Consider removing that please.
I can't remember exactly if it was te first or the second wipeout for playstation 1. But, I remember poking around the CD in good old norton commander and I've stumbled upon those textures in compressed filea as well into which I have entered as if in normal zip file. I have also found NC batch files for compilation or something like that, meaning psygnosis also used NC and forgot to purge those files from final build.
Heading tags also have extreme usability and accessibility features. Screen readers love using them to jump around pages.
Fun hack, but - yet another stupid large bank/corporation, probably underpaying their devs and not reviewing code ever. Any other ideas on why this happens so often?
In this stupid hypothetical (stupid because we're talking about the very real problem of anti-woman sexism in tech, and you're comparing it to someone having an irrational reaction to the color of a shirt), I'd ask my neighbor, "why? Why does my blue shirt bother you?"

My neighbor responds, "because the blue-shirted security forces in the dictatorship where I grew up killed my family when I was young, and it's very troubling to be reminded of that, even now."

Done, I stop wearing blue shirts.

To continue with the stupid analogy, I'm crediting my neighbor with not being irrational, and putting in the effort to listen and hear them out.

Just like I credit women, back in the real world, with not being irrational, and I hear them out about their complaints/frustrations/laments about sexism in tech.
That's basically right. Our system observed the URL elsewhere on the web - not on a private messaging service. We've offered to share those details with Bosnadev.

RE: whether these comments really are from the RF team, we're about to post the same info on our own blog.
Gecko too for a while (because there was concern that VBScript would catch on, AFAIK), though it was eventually removed. The nsIProgrammingLanguage enum is the last vestige of this support: https://dxr.mozilla.org/mozilla-central/source/xpcom/base/ns...
It's not realistic, because you will never consider every possible attack scenario. You may have considered timing attacks, but if you don't consider the way that the processor uses power when running through your algorithm, you may have just leaked key material. This sounds like an obscure case, right? Except that the Trezor bitcoin security appliance was just broken in that way last week.

Secure crypto comes from a lot of smart people repeatedly trying to destroy an algorithm and its implementation. It doesn't come from a super smart person building a cryptosystem; that's how we end up with DVD CSS.
It's because as much as we want to believe that we don't, largely because we are fed a constant barrage of self-congratulatory propaganda ourselves, we live under a similar type of regime as those we chastise all over the world. The only difference really is that we are far more sophisticated in our propaganda methods and can largely leverage our size and resources to defer challenge and realization that we live under such a regime. Essentially it's a matter of the best way to convince someone of something is to get them to believe it was their idea.

As you have pointed out, Cuba has been a great vacation destination for such inclined for decades and essentially in an unimpeded manner for basically everyone else in the world besides the USA.

What's kind of sad is that I have a really bad feeling about how this will go for Cuba. No, I don't think they should remain stuck in the past and play the role of a quaint, impoverished Caribbean island, but I also hope they can stave off the immense pressure that will come down to bear on Cuba that will attempt to sabotage, undermine, corrupt, and exploit every little opportunity that represents itself to dominate the island and its residents. I would not be surprised if within 20 years the whole island is essentially a replica of something like the USVI or Bahamas, where the vast majority of native residents are essentially nothing more than live-in local service staff in grotesque resorts and harbors of cruise ship tourist shipments.
int t = (data[c] - 128) >> 31;
sum += ~t & data[c];

> They've gone to plaid