skysight-inc/HackerNews huggingface dataset:
Apple would have to radically change their own TVBox interface as their app model is even more inelegant than XBox for quickly switching and searching channels for viewing content. The AppleTV needs a better controller (Siri is not the answer). The best interface I've seen so far is FanTV
https://www.youtube.com/watch?v=IKrowrz8fu4
Read this thread again. Your statement is not correct since CC never gets to see the plaintext. CC is just a bijective function on (blocksize of KC) bits.
Let the people own the machines, and the promise will be fulfilled :)

[requires socialism, indeed, and having been there, I vote yes -- with both hands, if this is about V 2.0]
Jump the queue to lower latency [pdf]
So is the service free right now? Or is there a fee per homework snap picture?
Absolutely - we have a lot of ambition around where we want to take Twilio Video in the future.

This is only the first step.
Rise of Community Media and Why Social Networks Can't Scale
The third-party does threat intelligence... I don't see how it's unreasonable to think that Facebook has hired them to perform malware/scam detection on links sent through chat. Given Facebook's policy, someone has to do it.
> Still, basic income isn't entirely good: it denies people the ability to meet a basic need - that of being valued for their contribution to society or some other enterprise.

No, it doesn't. Basic income does not prohibit people from working and being paid for their work; in fact, one of the arguments for BI is that it among the things it can replace is the minimum wage, allowing work that has positive value but which is not viable in an environment with a minimum wage to be done. Including, e.g., jobs that have a low short-term net value to the employer because they have a high investment in training, but which also prepare people for the higher-paying jobs which are available in society.

> In other words, it replaces the good feeling of doing honest work with a kind of glorified unemployment benefit.

BI is not anything like an unemployment benefit. Particularly, because you don't have to be unemployed to get it, and because it doesn't have the behavioral testing associated with unemployment insurance.
That is the long term plan.

We found 35.28% of participants need a custom website (21.55% probably and 13.73% definitely) while 31.78% of people definitely needed a template website and 29.78% probably needed a template website.

For the time being we're going to continue to collect data and plan on writing a full case study based upon our findings.
agreed. Maybe the courts haven't defined 'Private' yet? I'm not a user but is the word 'Private' pretty much removed from everything? wouldnt labeling something 'Private Chat' indicate that there are no unknown parties involved?

I'm a fan of sites like: https://twofactorauth.org/ (credit to davis) that call out this kind of stuff and list competitors next to each other.

Does anyone know of one similar for calling out privacy BS?
> 9. I'm not smart enough to understand what this argument means.

Thomas, I _think_ you are replying to this:

> 9. Wrong. SSH public keys, Email public keys, DKIM public keys... check your email headers from Google... they all have "unprotected key" because Google doesn't use DNSSEC -- the large provider host hiding problem is most likely why.

With which I'll agree with jocluteseh that the value DNSSEC can bring is far larger than only TLS certificates - although I agree with you that protection of TLS certs is one value it brings.

There are people using DNS/DNSSEC to secure the storage of SSH public keys, of PGP public keys and other similar public keys.

People are putting those keys in DNS and then using DNSSEC to ensure that someone retrieving those keys and performing DNSSEC validation can be sure they are getting the correct keys associated with that domain.
Google Malaysia Hacked by Bangladeshi Hacker Along with Yahoo and YouTube
Show Free Stock WatchFace
Yes, the registry url is configurable. As of npm 2.x, you can also specify a different registry url for specific scopes, so for example, `@foo/bar` can live at a different registry than `@baz/boo`. "Global" packages (ie, those without a scope designator) are always fetched from the top-level "registry" config.

https://docs.npmjs.com/misc/config
3 Proven Strategies to Help You Overcome Fear of Failure
Looking forward to hearing more about this on your website, That'll Never Work© News.
^ I wrote this article and would like anyone who has feedback on the matter to speak freely
> Raising money when the VCs are willing to throw it at you is a good strategy when you know you'll burn through alot.

Yes. Doesn't it also indicate that you are giving a lot of the company up at the current valuation? ie: you are betting that a (near-term) future valuation is lower, so you want to lock in the money now.
I think cascading ciphers might be a good idea, but if you're following Kerckhoff's rule, if your system achieves significant use and there is a cryptographic weakness, you should assume an adversary will exploit it even if it's different from the weaknesses of other systems.

I guess there's an economic argument to be made that millions or billions of pairs of communicating parties could develop their own individual means of at least obfuscating their communications so that nobody could expect to find searchable plaintext after decryption. But the economic effort that the pairs of parties invested in creating their obfuscations may have been wasted because if the same level of time or effort had instead been spent to improve mainstream cryptography, it might have yielded major qualitative security improvements for the "official" stuff.
Humans Have Been Hacking Their Bodies for Thousands of Years
ResearchKit Framework
I find it interesting that people have problem with the law-enforcing organizations spying on them, but if megacorporations whose sole purpose is to make money off its user base, that's OK.
This article is clearly written for the experts who are implementing cryptography.
It's interesting that the author mentions only one of the the error codes (0x000000aa) but not 0xdeadbeef, which was an obvious giveaway to me that this isn't a real error.
BSD license, more info here: http://researchkit.github.io/blog.html

Nice to see Apple using GitHub: to me, at least, it sends a message that they're serious about engaging with the community and ResearchKit genuinely being 'open source'.
How to Target Specific Mobile Apps in Adwords
Pixel Pushers
Why ? I think it really depends on the market and your product.
Yeah, it's not really possible and as others have said it's by far the silliest possible way to accomplish unique file fingerprints.
Thanks for agreeing that we don't lose security when using my construct.

> Any entity that can break AES at-scale will undoubtedly find any unreviewed cryptographic protocol trivial to break.

Yes, but it would involve highly paid cryptoanalysts. The reason for my first comment is first of all to disprove the root of this thread. Secondly, it makes surveillance more expensive while it's free for us.
> How about Less People. Most of the worlds problems would be reduced with fewer people.

Less people is not a policy, its a policy outcome.

(IIRC, the evidence suggest that the best policy to get fewer people and reduce natural rate of population increase is stronger social safety nets that reduce people's reliance on family -- usually children -- for security against financial misfortune. So, actually, the things discussed upthread like BI might reasonably be seen as likely to contribute to "less people".)
Lawyers are constrained, in that they cannot knowingly tell outright lies, and any intentional misrepresentations they may make are limited by the forbearance of the judge.

I'm quite certain that lawyers for the defense would have preferred to say that the seizure and search of the servers was the equivalent of kicking down the doors of 100 homes in your neighborhood, and taking 100 of your neighbors' laptops, merely on the suspicion that they might have unlicensed copies of movies and music on them. And your neighbors are good, hardworking people who already have piles of legitimately purchased CDs and DVDs next to their laptops. They care for their cute babies, and refrain from kicking puppies and kittens at all times. The smell of fresh-baked apple pies frequently wafts across your lawn from their windowsills, along with the sounds of the neighborhood kids playing sandlot baseball. But why would a wookiee live on Endor? It makes no sense!

At that time, the judge reminds the defense that Kim Dotcom is the accused, and you stop that crap right now, or you'll get sanctioned.
You're both correct, but coming at it from different levels. Most manufacturing businesses build things for other manufacturing businesses. In that light, the producer's first care is the "consumer" because his consumer isn't a person; it's another business. As long as that other business is profitable, the guy upstream can get paid and that's his primary concern.

It's only once you get to the factories building actual "consumer goods" that you see the real concern over "who is going to buy this."

The funny thing is that I spend a lot of time on a forum mainly populated by owners of small factories and I see this come up from time to time. The guys (and they're mostly owners & workers at small manufacturing businesses) are concerned about too much automation having an impact on society, but by far their primary concern is making sure that they automate enough to stay in business and be profitable. After all, it's their kids being able to eat that they're going to be mainly concerned with.
Intercom launches Live Chat
What is C in practice? A survey
we've made an attempt to make sure that scoped modules are supported in the npm-registry-couchapp:

https://www.npmjs.com/package/npm-registry-couchapp

npm's open-source project which lets you run your own registry on CouchDB.
Personally, I agree with you but how Dotcom gets there is very important. We cannot tolerate methods that are not only illegal but violate the basic of principals of our legal code and society. Kim Dotcom is as sleazy as it comes but he does have rights and if he loses his, we will lose ours.
I wrote this http://www.siptowebrtc.com/ that uses our SIP interfaces and PSTN to connect to our WebRTC client. I'm going to put the code up on Github after I clean it up but I'd be happy to talk through how it works. andrew at twilio dot com.
Technically, you're correct. In the real world, you're not.

This mythical protocol just encrypts a blob and sends it over the wire. But real protocols involving cryptography are significantly more complicated, because they often need to authenticate other parties, cryptographically bind all the messages in a session, preserve forward secrecy, preserve anonymity of one of the communicating parties, etc.

Now the problem isn't that you are simply applying your own cipher to the output of a strong cipher. It's that you've now got to implement a damn protocol, because nothing in the world supports your cipher. And that implementation is inevitably going to have more exploitable flaws than a well-maintained open-source project that doesn't implement your bogocipher.

Cryptography is hard, and it's not just the primitives that are ripe for gotchas. Combining primitives, implementing primitives, designing protocols, implementing protocols, and generally anything involving touching something anywhere in the entire stack is fraught with danger. As a rule, the more crypto-related lines of code you write, the more likely it is you have introduced weaknesses rather than added strength.
> people don't generally know what professions are like until they actually start working in them.

Which is exactly why stereotypes are so harmful because it puts people off ever trying and learning differently. Your story just reinforced the point, people often make judgements about careers based on stereotypes not actual data so it's detrimental to our industry to encourage these stereotypes.
I love the $ sign -- super easy to see variables versus just bare words where you just rely on case or naming convention.

Of course, my first language was Perl, so I've been in love with the $ for ages.
Interesting; however in my opinion I'd redesign that page. Having a lot of the information behind the interactive scrolling will cause it to be lost. Personally, and I know a lot of others, just scroll the page and look for the relevant information in paragraph form. Much easier to digest. This implementation forces me to stay on the page and is a bit frustrating.
600 MiB? That more than a complete OS install. Isn't an image supposed to be one application only? Do you store data in them, or why are they so big?
I didn't realize that we've made any progress towards extending the maximum human lifespan. It's probably a lot harder than we think. I guess we're at the point where Jules Verne was in the late 19th century; we like to dream big.
The first industrial revolution was entirely about replacing high-skilled manual laborers with relatively low-skilled factory workers. There's no inherent economic law requiring such a shift to be a net drain on employment - sometimes 100 people manning power looms can do something cheaper than 90 skilled weavers.

Sometimes not, though: the clothes end up just being cheaper as a result and net employment in the clothing industry drops, but if there's anything resembling competition in the market there'll be a drop in prices, and now everyone who was buying clothes will create a bit more aggregate demand for other things. That's the "work in other sectors of the economy" part that occasionally gets mentioned as a solution, and is in large part why we're at 95% employment despite 4 centuries of "job-killing" innovation.
What you (and the wiki link) are describing is plaintext -> CC (gzip) -> KC.

This is different than the argument you're replying to which is plaintext -> KC -> CC.
It has nothing to do with the integration difficulties.

Many ++ devs, me included, come from the C background and the amount of obfuscation Boost adds to the code is simply not worth any benefits it brings along. Yes, you can do a lot with a single line of Boost'ed code, but when it maps onto pages of simpler code, you basically lose a lot of control over the code. It also bloats the binary, which again may not even register as a viable concern with some, but which does have several long-reaching complications.
Looking forward to seeing the report!
JetBrains has finally released CLion – cross-platform IDE for C/C++ development
Is it possible to refute absolute truth without proving one absolute truth?
Yes. This procedure was used last year.

http://www.wired.com/2014/04/apple-wwdc-lottery-system/
People do amazing things with Ren'Py. Given that it now has some mobile reach, I have to say that I don't see what a fairly limited proprietary HTML5 engine could offer if I were to make a VN, though maybe I'd have some reasons if I did it as a business rather than a hobby.

edit: I hope this didn't come across as too negative, changed a bit to clarify.
Flashlight: Control Your Mac with a Keystroke
No, birth control is an option. Make it available to anyone who asks for it (permanent kinds included). China has a rather more authoritarian approach. I prefer voluntary methods (without incentives). It isn't a complete solution because: 1) there will always be variation in skills among people even if the population is reduced. 2) With few enough people (extreme case) mass production of goods is not necessary. 3) I think there's an old argument that with robots providing everything, eventually there is no incentive for people to even become smart enough to maintain them and the system falls into disrepair. I'm not sure when or what equilibrium might be reached. I am sure that less people would help the problem and does not require planetary emigration. It is a viable partial solution. It is not a complete solution.
Great beginners guide! Perhaps consider selling it, or adding a donate button. I've noticed that I always finish books I've actually paid for :)
That's quite a generalization. I think there's been plenty of social anxiety generated by the knowledge that Google, Amazon, etc are mining our data. A lot of people have written at length about this subject.
That's good advice, and I've given it myself, but that doesn't mean you shouldn't read and play around with cryptography if it interests you.

I implemented a simplified version of the referenced Vaudenay attack as part of Dan Boneh's Cryptography I course on courseara+. The course was very interesting, and also fun. I'm not ready to go out and implement my own cryptography, but knowing a bit about the subject makes me a more intelligent consumer of crypto libraries.

While warning people away from implementing their own cryptography we have to make sure we don't scare people off from the subject altogether. After all, absolute top experts have to start somewhere.

+ https://www.coursera.org/course/crypto
I know plenty of people who host non-infringing copyright items at Megaupload. What I mean is that they share personal files, which themselves have the copyright to. So I'm pretty sure not all of that money comes from hosting Big Corporates copyrighted material.

I don't understand why you put "business" within quotation marks, as a business is a business if it generates money - regardless of the legality of the business.
I think it is more nuanced than simply ULA's system is more complicated. I do however thing that the ULA system is a primarily-mechanical solution while SpaceX is using a primarily-computer based solution.

Background - I have a BS in mechanical engineering, work professionally as a software engineer now, and spent a few years in the defense industry working on nuclear submarines.

Both approaches have key mechanical and computer/control challenges. However ULA's primarily relies on increased mechanical complexity with relatively simple computers. They are adding separation between the tanks and the engines in the first stage. This is relatively proven tech - we separate stages all the time - but it will complicate the piping and structural design of the first stage considerably. There are also mechanical components related to the hyper cone and the parachutes. The whole thing then follows a relatively simple trajectory and then relies on the skill of human pilots to capture the falling engines. We have done this, but again they're using mechanical systems & proven techniques to recover the engines.

Meanwhile, the Falcon 9 doesn't use a whole lot of extra mechanical components to be reusuable. Arguably the only extra bits are the legs and the grid fins. The grid fins are very simple. The legs are a bit more complicated, but probably less than what it takes to separate the entire engine assembly. SpaceX puts all the complexity in the control software. The engines are re-firing multiple times, and during the last few minutes of landing the computer is doing some serious work to balance everything out. At the end of the day, there is no human interaction on the landing.

You often see this trade off between mechanical complexity and software complexity in systems that bridge the domains. I'd personally bet on the company using the primarily software driven approach nearly every time. Software is hard, but mechanical systems are even harder. The economics of software are also way better. Manufacturing costs are pretty much linear to number of rockets, there isn't that much scale in the current market to reduce unit costs. Software costs are relatively fixed compared to number of launches, plus lead times are dramatically different.
The CHERI capability model: Revisiting RISC in an age of risk [pdf]
I wouldn't worry too much about the pip and virtualenv tools. I would focus on learning the language, and building something that is interesting to you.

You will learn how to use pip, when you need to install a new Python library.

You will learn how to use virtualenv, when you share have 2 programs that use different sets of libraries, or you want to share(set up a dev environment) a program with somebody else, and you need to communicate the different requirements(libraries) for using that program.
Yeah, but this is so boring and oh-so-run-of-the-mill.

(If the mafiosi could read the following paper before rushing to click down-vote, then I'd be much obliged.
http://www.math.rutgers.edu/~zeilberg/mamarimY/DM85.pdf)
> ie: you are betting that a (near-term) future valuation is lower, so you want to lock in the money now.

Or, you know, you think the money now effects the long-term valuation such that, if the current owners are giving up x proportion of the company in the proposed round, with v0 as the anticipated future value of the company if the round doesn't happen and v1 as the anticipated future value if it does, the owners think that v0 < v1×(1-x)
It is possible if you go for an L-1 visa where a degree is not a prerequisite.

If you work for a subsidiary of a US company outside of the US for at least one year then you can transfer on the L-1 visa to their US office. Just be aware that you can't switch companies like you could on an H-1B. However, L-1 visa holders can still apply for a green card. Once you have that you're free to change employers.

One technicality: If you work for a big company (like Google) then you're basically guaranteed to get the L-1 after one year since those companies typically hold the so called L-1 blanket. Otherwise it's a more involved process where you might get rejected.

I have friends who are currently on an L-1 in SF through big companies (= L-1 blanket holders) and getting it was basically a formality.

The L-1 also has the advantage that there is no annual cap like there is on the H-1B. You get it or you don't. No lottery. One big startup that I interviewed with opened up an office in Vancouver specifically for H-1B rejects to get them to their main office in SF through the L-1 one year later.

More information on Wikipedia: http://en.wikipedia.org/wiki/L-1_visa
Indeed, one seemingly plausible outcome is that the 1% starts complaining about the .1% . That the trend is uncapped given sufficient production multiplication ability... until one person ends up with a robot army and ownership over everything.

We won't get there overnight, but how far we might get towards that extreme is worrying.
And a step beyond that, saying "amoral human" is redundant. ;)
On the Uses and Disadvantages of History for Life (1874) [pdf]
1: STEM faculty positions are dominated by men of all ages.

2: We fix this by hiring more women.

3: In 40 years STEM faculty positions are dominated by women of all ages.

We need to phase out the old guard, which consists mostly of men, while not hiring along gender lines for their replacements else we will be right back where we started.
You only have to see how fast Ruby was a darling and even now might be regarded on its swan song

By what metric, your personal preference?

Because the common statistics[1][2][3] don't quite support your remark.

And I'd say there's a 50/50 chance node will completely collapse within 10 years or so.

Again, just making random stuff up?

As much as I'd love for javascript to disappear, the idea of that happening within a decade is nothing short of ridiculous.

[1] http://langpop.com/

[2] http://githut.info/

[3] https://www.google.com/trends/explore#q=ruby%2C%20rails%2C%2...
Thats a pretty cool use of scroll to explain the product. Any details on how you guys built that? Is it completely custom or did you use some known JS/CSS lib/tricks?
Apple ResearchKit on GitHub
Did you edit your post? I'm not the only one who misread it. If KC is applied first to the plaintext, then assuming you didn't flub anything in implementation the combined scheme won't be less secure than KC, I agree. Applying CC effectively becomes security through obscurity, which is admittedly sometimes helpful.
These are Erlang VM processes which are actually quite fast.

Re ugly: well, eye of the beholder I suppose.