skysight-inc/HackerNews huggingface dataset:
> For most people HRM is a gimmick, not something they'll use every day.

HRM is a key to frictionless calorie consumption estimation; HRM may not directly be something a lot of users use every day, but frictionless calorie consumption estimation has a pretty wide audience, and HRM is the enabling technology for that.
This is a pretty easy solve...haproxy + consul + consul-template allows you to spin up a new container, register it with consul and have the consul-template watcher regenerate the haproxy config to route to the new port.

It's a little overkill if you're running it on a single machine, but in a real production environment, it's a pretty lightweight solution.
Valuing the privacy of your users can score loyalty points with said users. That has to be good for long term profits.

Privacy is one of the main points any facebook competitor can use to get an advantage. One day that could really hurt facebook.
Oral History of Bjarne Stroustrup (PDF Transcript)
So in many ways, this may be more of a 'fishing trip' thru the data than an actual indexing.
> Most of the responses seem to be talking about A -> Custom -Strong -> Unstrong -> Uncustom instead of A -> Strong -> Custom -> Uncustom -> Unstrong*.

Yes :(

> Some potential problems with applying a custom transform to the cyphertext:

> - The custom transform might have effects on cache that create opportunities for timing attacks

> - The custom transform might have a buffer-overflow (just like any other excess code)

This are for the point of my comment irrelevant implementation details. You could apply the custom transform on another computer.

> - The custom transform might support features exploitable in DOS attacks, like run-length encoding

The custom transform ought to be a bijective function on (blocksize of Strong) bits.

> - The custom transform might be slow, costing time and money

It was never meant as a suggestion for wide-spread usage.

> - Sometimes applying two transforms is equivalent to encrypting with a different key (e.g. DES has this property). Might create meet-in-the-middle attacks.

> - If the custom transform is given the same key as the strong crypto, as a lazy programmer might do, it could leak the key

The custom transform shouldn't know at all about anything of the strong cipher. Another implementation detail.

> - Switching the ordering of the transforms is a deadly mistake, but easy to glance over

Another implementation detail.

> - If the strong transform starts with an HMAC, as it should, that can be used to break the custom transform's key anyways (see the post we're commenting on)

I just wanted to show the common idea of "cryptography is black magic, you should never touch it, you can only do bad things" wrong.

My scheme adds security through obscurity which may be worth the trouble.
Absolutely, that's why everything I post is set to "Public" and the content is of the same nature.
Show HN: Meetzy – Find Amazing People to Meetup in Person
The Gap in Entrepreneurship That No One Wants to Publicize
Compared to this, the SpaceX solution to first stage recovery looks remarkably simple and elegant.

If the proposed design had been built, then the helicopter and payload would have had a combined weight of about 500 tons - about 10 times the largest helicopter in regular service, the Mi-26
I personally experience Elixir's syntax to be quite deceptive in that, for me personally, it lures me into assuming Ruby semantics and this just makes it feel uncanny.

It feels noisier in general and as if I lose some of the homoiconic feeling I get from Erlang where matching on literal data types is essential and can lead to very concise code.

I know that a lot of people find Erlang's syntax to be a pain point (I don't, I actually like it), but as a unique language it helps to have a fitting syntax that's easy on the mind for context switching to and from. And I'd say it's quite perfectly optimized for a language whose backbone is terms, processes and pattern matching.

It's also far less learning than most other functional languages, quite frankly. It probably has a lot to do with its culture that sees the FP aspect as a tool that fits into the paradigm of solving engineering problems related to high availability distributed systems, rather than FP being the end itself, although we need both kinds of languages.

But hey, anything to get BEAM into the spotlight is probably a good thing. I'd just prefer if it was pure Erlang.
Sorry, my mistake, it's SSL 3; I can't even load the Qualys SSL client test.
Linux Kernel 4.0 Features Live Kernel Patching, PS3 Support
I'd be curious how the state picked up on it. Sure there'd be evidence of the crime...if you knew to look. If not, it's just another win, and seemingly normal offline PC, and a few abnormal bytes of video storage out of the thousands and thousands of otherwise benign hours of footage. There must have been a tip off, or some other abnormality.

I highly doubt that info is forthcoming though, unless the state is forced to disclose it at trial. Gov probably doesn't want to give away its secrets.

Also, can't help but wonder if the guy would have gotten away with it had recruited someone else. Buying the ticket himself was a stupid idea if true, since the ticket can be traced to the machine it was purchased on and at what instant, so it's trivial to ask for the store surveillance footage. And having a company incorporated Belize claim the ticket at the last second would also raise eyebrows. But if he had recruited a trustworthy accomplice with no immediate connections, it would have been just another person claiming a prize.
Here's a link to the current project's source if anyone is interested: https://github.com/researchkit

Love that Apple is going open-source, and hopefully they do this for more of their code (pssssttt...Swift)
>quotes ranging in the $10,000's a month range for real-time data.

That sounds excessive. You basically either subscribe to individual exchanges or a consolidated feed from a 3rd party that typically incorporates multiple venues.

For applications that need something professional and reliable, but don't need direct exchange connections (i.e. can deal with ~1-200ms latency), I recommend IQfeed [1]. Depending on exchanges, cost is probably around $100/month

Source: I've been using them for fully automated trading for a couple of years

[1] http://www.iqfeed.net/
You asked why the downvotes. Not sure about others, but I downvoted you because you're asking people to open their eyes to the truth while repeating things that are easily verifiable as not true.

This:

> The (then) CEO of Google Inc. loudly declared the (constitutional) legalese that the users of his company's product have "no reasonable expectation of privacy".

never happened. You're conflating different events.

One is presumably Eric Schmidt warning users that Google is subject to the Patriot Act.

The other was a defense (I assume from one of their lawyers and well after Eric Schmidt stepped down from being CEO) that when people email a gmail account, they don't have reason to believe that gmail won't process their email.

From your conclusions: first, the lawsuit was in the context of non-gmail users, not the gmail account holders themselves, so doesn't apply to "users of his company's product". Second, the judge rejected that line of argument anyways. Finally, you're taking a limited defense (they were arguing within the confines of the Wiretap Act) and somehow spinning that off into a general loss of constitutional rights that doesn't follow.
Some more In-Q-Tel companies:

- Connectify: virtual router to broadcast wifi. Sees all traffic. Positioned perfectly for MITM SSL stripping. Closed source.

- FireEye (enterprise security)

- Palantir

Full list:

- http://en.wikipedia.org/wiki/In-Q-Tel

(This also seems like a fun time to note that Witopia, a VPN provider lists its office address in a building occupied by multiple CIA subdivisions.)

An apparent theme of In-Q-Tel investments is targeting security-related markets. Most consumers and small businesses cannot implement their own security, so they need to leverage the services of a security company, like one of In-Q-Tel's many investments. In-Q-Tel understands this need, and so do other investors. Security is hot right now.

When consumers evaluate security companies, trust is becoming an increasingly important factor. After all, why purchase security services from someone you cannot trust?

In-Q-Tel is a CIA fund. The "post-Snowden era" has damaged American's trust in government intelligence agencies like the CIA. With more Snowden/Greenwald leaks pending, trust will likely continue to erode.

If Americans do not trust US intelligence agencies, why would they choose a security company funded by a US intelligence agency? One does not have to be a conspiracy theorist to agree with the logic for purchasing a security product not funded by the CIA.

Given this fact, it also seems natural to assume security companies will no longer seek investment from In-Q-Tel, given the presumably negative customer reception. For security companies, In-Q-Tel investment could become a negative signal to consumers, and therefore also to other investors.

Will Intelligence agencies have trouble investing in winning security companies? What will be the repercussions for CIA investment strategy?
Is there anything about App Store guidelines? Curious if Apple is going to require any kind of IRB approval first.
Mark-to-market really is the best thing since sliced bread -- until you end up with a liquidity crisis and the only market left is fire-sale prices, in which case it just amplifies the crisis and (further?) undermines the entire notion of banks being risk-tolerant entities who are in business for the long haul instead of just chasing after the next quarter's results.

Much like in 2008.

This isn't a problem with an easy answer.
Toronto, ON; Vaughan, ON || Full stack engineers, Rails, generalists || REMOTE is possible

Nano Magnetics is at the cutting edge of magnet innovation. Driven by a mission to enhance people’s interaction with magnets, Nano is pioneering new ways to merge magnets and technology.

We are a small team of people who have to wear multiple hats every day. Everyone is expected to have an opinion, contribute and be accountable for what they do. You take charge of your time, your knowledge and your work. We encourage transparent communication and asking questions.

Your first task will be rewriting one of our social media style platform site from the ground up in Rails (currently it is in PHP + Doctrine + MySQL).

And even if you aren’t into Rails, get in touch. We are actively searching for general talent to build out our team.

Shoot me a line to discuss at david (at) nanomagnetics.com and mention you found this on HN.

Our office is currently located in Vaughan but we will be moving. Remote applicants can be considered, whether locally or internationally, but should have significant overlap with Eastern Standard Time business hours.

Ideal applicants must have a passion for technology, interactive and web trends, and a general curiosity for magnets.
It was there to illustrate a point. And of course if you read the blog post you'd realize what an Erlang process is. It is like an OS process in that memory is not shared but it is only a few KB of memory overhead because it is also a lightweight thread. Yes, it sounds like it is magic, that it is not possible, but it is.
Bitmessage doesn't scale well - almost by design. I'm sure it works fine for the occasional non-realtime message, like a voice-mail box.

But if you are ok with alpha-quality software and want encrypted chat similar to IM/Facebook chat you should stick to something like Pond https://pond.imperialviolet.org/
Do not Track: an online, interactive documentary about who’s watching you
> A significant portion of software engineers, never even had a scientific education(programming doesn't have to be scientific, though it can be...

Such people can't be called engineers then. I find it amusing when I see titles such as "JavaScript engineer" or "HTML engineer", etc.

> ...and almost every programmer calls himself a software engineer

This seems to be a culture in the USA mainly. From what I have seen, Canada is much more strict about having the proper credentials to be able to call yourself an engineer.
It depends on what the probability of getting away with it is. In other words, multiply the likelihood of success by $14 million. If the result is greater than $7500 plus however you choose to value the jail time and criminal record, go for it! :)
Two cups of coffee would be closer to 200 - 300mg of caffeine. (source: google and http://www.cspinet.org/new/cafchart.htm for more details).
Understood. We're planning to test with Jepsen soon.
This will happen once we have implemented fully automatic failover (at the moment it still requires manual intervention, even though it's usually straight forward). We have a first working implementation, but are still working on the details. It should become ready in the next ~2 months.

See the issue you mentioned https://github.com/rethinkdb/rethinkdb/issues/1493 for progress on this.
We wrote a blog post about how we're spending $55K on SaaS products
http://blog.sawhorsemedia.com/post/104076088572/how-were-spe...
No, sirclueless, I didn't change the scheme I wrote about.

Yes, it adds security through obscurity without losing security through well-known recommended ciphers.
Keywhiz: A system for distributing and managing secrets
For the rubyists out there check out http://nobrainer.io/
> Yeah, you see plain text, and you get plain text. Big deal.

Nope, not quite. @Tagging someone will suggest and highlight users. Not a full blown WYSIWYG but in the same calibre of technical problems and reasons why people stay away from WYSIWYG.
UFO'S GOD HERE BANDITS AT 11,OCLOCK ON DEVILS MOUNTAIN
Congrats guys, RethinkDB has been a joy to use so far, but the 3rd party .net driver needs some help. I filed an issue here: https://github.com/rethinkdb/rethinkdb/issues/3931
10-20 minute battery life is normal for quadrotor drones right now.
It's interesting that (in America at least) a lot of people who are not wealthy fight to keep taxes low for the wealthy because they assume they might be wealthy someday. Yet fewer people fight for entitlements for lazy bums despite the fact that becoming a lazy bum is a much more realizable aspiration.
Interesting quote:
If anything I was more convinced that I didn’t want to teach. I saw it as a trap for bright kids.
Also, I had developed the idea that there’s something fundamentally wrong if the teacher’s previous job is
student. It’s incestuous. There has to be some real world in there somewhere and often there isn’t for
teachers and professors. That weakens what is being taught and it weakens the credibility of the teacher
so the effectiveness of transmission of information to students is also worse.
Show HN: A fast append-only data store for Java 8
SNI wasn't put in to leak information.

The server sends the hostname in plaintext when it sends the certificate.
DigiCert Offers Continuous Monitoring of SSL Certificates to Defeat Fraud
I think the big differences here are that it's a third party scanning the IP address (though possibly one Facebook hired for security scanning, as someone else below guessed), but also that Skype chat was still being vaguely claimed as "secure" at the time, I believe. Facebook is up front about scanning chat messages for spam and they do the page screenshot thing.
Slava @ Rethink here.

This is a great point, and we're on it! We have a Raft implementation that unfortunately didn't make it into 2.0 (these things require an enormous amount of patient testing). The implementation is designed explicitly to support robust automatic failover, no interruptions during resharding, and all the edge cases exposed in the Jepsen tests (and many issues that aren't).

This should be out in a few months as we finish testing and polish, and will include the results of the Jepsen tests. (It's kind of unfortunate this didn't make it into 2.0, but distributed systems demand conservative treatment).
User tagging. It's not a traditional WYSIWYG editor feature, but it means the implementation of the actual editor input field faces the same problems WYSIWYG editors do.
That penalty seems surprisingly just to me actually. Sure, the amount would've been large if he had escaped with it, but this doesn't sound like a criminal that we should lock up for many years to remove him from society. He could go on to live a long productive life even with this stupid crime in his past.
Formulations with ibuprofen and other less toxic NSAIDs exist, though they all have their drawbacks. Look for them. There's really no reason to be ingesting Tylenol if you don't have to.
We don't agree on the effectiveness of security through obscurity.
Congrats Slava, Mike and the rest of the folks at RethinkDB!
I think it's a huge deal. I'm not offended by sexual language at all, but it usually isn't appropriate for a professional context as it can feel hostile and exclusionary, and in an industry with as few women as there are in tech, it's absolutely essential that we don't do this.
Persi Diaconis Mixes Math and Magic
Something else making it obsolete.
> What does it mean for a language to have memory leaks?

I'm not embroiled in the PHP-world, so I don't know how many alternate PHP runtimes exist, but I presume that the default PHP runtime itself was being referenced. Seeing as for a long time there was a single runtime paired with the language (I'm 99% sure that PHP4 didn't have alternate runtimes), I think that equating bugs in the runtime with bugs in the language is something that happens even if technically they are separate things.

> Your comment seems to simply cast doubt without much substance.

And your comment seems needlessly defensive. I made a comment about general sentiment that I've gotten from people that have actual working knowledge of large-scale PHP deployments. I'm sorry that in the middle of the conversation I didn't start immediately interrogating these people asking why they haven't filed bug reports if there are memory leaks.

Also, is it devoid of substance if I'm basically stating that I've talked to people "in the trenches" (and presumably know what they are talking about) who don't have the opinion that PHP is some beautiful, but misunderstood language that gets a bad rap?

> Also, what's the substance behind the "etc" in your comment? I'm not really sure what naturally follows in the sequence of "memory-leaks and so on...."

Maybe I should have phrased that as "(e.g. memory leaks)" to show that memory leaks weren't the only complaint, but my memory fails me on what the other complaints were.
Now make it efficiently parallel and show us the implementation. Then we could compare it with the Elixir snippet, which does just that.
Doesn't this mean there will need to be a dynamically detachable connector between every fuel/gas line and every electrical wire that runs between the tank and the engine?

Isn't that introducing quite a few potential points of failure? Or was this all thoroughly solved in the 60s and is boring and not an issue?
I've been deep in elixir for about the last 4 months and ventured into erlang a bit to go with it, and its seems like the metaprogramming possible in elixir is the game changer with regard to speed of development and growth of things like phoenix.
He never successfully claimed the prize. Even if he had claimed the prize it would probably be seized by the state.
Rectal-Numerical Generation...
Oklahoma City bombing: 20 years later, key questions remain unanswered
Am-C-D-F
I've used "Silex" and "Slim" in various small projects and API's. Then I found PhalconPHP.com I prefer using Micro+Volt now. New version 2.0 will be released on April 17th, 2015 So check it out, you may like "volt" template engine more :-)
As fun as it was I don't miss that time at all. But you never know where things will go in the future which makes it more fun.
This article is by the Reply All team.
>> There's no inherent economic law requiring such a shift to be a net drain on employment -

Yes, there is. I just presented it with the TCO thing. What has been happening so far is that the displaced workers were offered jobs somewhere else because there was another need they could fill. The net drain does happen. It happens within the set of people working at a company, and the industry. Only if there is unmet demand in the overall economy does it not affect unemployment by having people do something else entirely - and I don't mean maintaining the machines, I already showed that to require fewer people.

>> sometimes 100 people manning power looms can do something cheaper than 90 skilled weavers.

The human labor per item still went down. You just threw a capacity expansion on top of the efficiency increase. That just means a competitor will be out of business soon meaning fewer people employed, not more.

See this parking lot:
https://www.google.com/maps/@42.441312,-83.043004,80m/data=!...

It's full of product (all same model). Decades ago, prior to automation it was full of employee vehicles, and so was the overflow lot across the street to the west. The neighborhoods around there were thriving and now are quire run down.

We've been lucky in finding new things for people to do outside of industries where this happens. People can only consume so much in a day though, and as the labor hours required to fill human-need-hours goes down there will be a problem.
The "Don't roll your own crypto" mantra is overly ambiguous and enforces the culture of elitism in information security. I hope that something displaces this regurgitated "advice" with something more helpful. I know Moxie's article is a few years old but it is a step in the right direction regardless.

--EDIT--

I don't think I was perfectly clear in my original comment. I attempted to expand on my position in a follow-up comment: https://news.ycombinator.com/edit?id=9376131
Depends from project needs =)
I use Google for work and fb for friends, though I do know some people that just don't have Google+ so could be useful option.
Pocket raises $7m
I hear you talk a lot about real-time — I guess that's a niche that you noticed. But let me add to that: being "distributed" without major pain is also big. There is a niche to be filled on the (loosely defined) "distributed" spectrum between, say, Redis and Cassandra, and so far you seem to be heading right for that place. I like that a lot and plan to use RethinkDB for a number of projects in the near future.
People have the ability to willfully misunderstand any concept, no matter what it's called. That said, if MLP is a better term, I'd gladly adopt it. Go prove it.
There are a ton of chat clients. The issue is all these closed chat networks mean that even the best client can't talk to your facebook contacts, gmail chat contacts, etc (or you sort of can today in a nerfed way, but XMPP is going away soon for both).
Your assumption is not true, please see below:

You must also be enrolled part-time or full-time in a course of study, or be a member or alumni of one of the listed STEM organizations. [1]

-- Key word there is 'OR'

I'm only replying to this in order to help others; I think you should strongly reconsider your use of the word 'normal', especially when using it in a way that could be misconstrued as a comparison against minorities or other groups of people, i.e. excluding 'women, black and hispanic' from being 'normal'.

[1] - https://developer.apple.com/wwdc/scholarships/Scholarship-Gu...
Not even remotely. Even a week ago I didn't think we'd pass 500k.
Willingly and knowingly? How many people do you think know what everything Facebook, Google, Microsoft and others log and process about them? As far as I know, majority people believe that it's the omnipresent ads that make the service "free".