skysight-inc/HackerNews huggingface dataset:
This is not a true statement. CC may leak information about the plaintext in ways that KC can't handle, even without breaking it. For example, applying CC might deterministically affect the message length.

One of my favorite cryptographic attacks ever was of this form, known as the CRIME attack [1]. It was a "partial plaintext" attack, where the "CC" in question was plain old gzip. Basically the attackers controlled a small part of the plaintext (for example, a field in an HTTPS request they could send with CSRF) and they were able to use known properties of the CC to get some information to leak into the message length -- namely, if the message fragment they controlled appeared elsewhere in the request, the gzip encoding would be shorter, and hence the encrypted request would be shorter. This is something that happens even with a "perfect" KC that no one could break.

[1]: http://en.wikipedia.org/wiki/CRIME

This is one of the defining characteristics of cryptography to me -- there are no perfect cyphers, there are only good systems. Littering extra cryptography around nearly always decreases security. The most secure system is the simplest system that works.
A webcomic about being married to a programmer
Thank you!

Just like mook said, O₂ Engine is just a Kirikiri-compatible engine written in JS, so the site he introduced will provide you with useful information.

Anyway, we'll put sample scripts later!
Take a look at Magic of CSS: http://adamschwartz.co/magic-of-css/
ULA doesn't have a whole lot of choice on this one... They need to stop using RD-180's from Russia, which means Atlas is going away. Delta is too expensive to pick up the slack, and is also slated to be phased out.

I'm not optimistic about the BE-4's (I suspect ULA will end up going with an Aerojet engine), and they may ditch the engine recovery aspects, but I fully expect to see _some_ sort of new launch platform by the end of this decade. They don't have a whole lot of other choices...
Data Visualization and D3.js Newsletter Issue 126
> Does anyone know of any true market data sources that are not delayed, free and open for commercial use?

Short answer: No

Long answer: It depends on what you mean by "true market data". This requires understanding a lot more about how the market and bidding process actually functions, but there really isn't a single canonical price at any point, and there are many ways to define what you're looking for, depending on what you're referring to - all of which are valid according to different assumptions.

Think of it as a special kind of eventually-consistent database. Depending on the consistency model, you can't ask what the value of x is right now, because there are multiple possible values that are all valid. It's only after they converge (which takes time) that a single, canonical value emerges.

This is one of the reasons that quotes are always delayed - it's possible to talk about what the price was at some point in the past, because those ways of defining the price dynamically have all essentially converged to the same value, but it's not possible to pinpoint a single price in the present.

To get all of the various sources of real-time data that can be considered the "current price" requires a lot of low-latency connections to various market players. That's not cheap, so there's nothing that's not delayed and free and available for commercial use.
Elixir is great. It is built on an awesome industrial grade, battle tested VM with really unique features like lightweight but memory safe processes. Has a friendly syntax (although I personally like Erlang's syntax).

Another great thing about Elixir is the community -- it is helpful, friendly, oriented for learning and newcomers. Also Jose Valim is really an incredible guy.
Our business plans are all about a subscription support model (see http://rethinkdb.com/services/) and enterprise services on top of RethinkDB. The product will always be open source (hopefully the OSS community at large is past the world of closed source "extensions").
More information: http://www.laobserved.com/archive/2015/04/p-22_is_holed_up_u...

Including this bit: "P-22 is remarkable for having traversed the 405 and 101 freeways and many miles of inhabited terrain before reaching Griffith Park and being confirmed by trail cameras." The 405 is by some measures the busiest freeway in the country.

Another poignant detail is that, although there is a lot of wild space in LA near where the cat is, there is no known female there for him to mate with. He may have to cross the freeway again.
I'm very happy to see this milestone, even tho I haven't used it recently I remember 2/3 years ago we tried it (adtech) for some heavy production workload. Even if we chosen another product (cassandra) I was literally surprised how well performed! Congrats!
Make Your .NET Calendar Responsive for Mobile and Tablets
Why Are Political Groups Pretending to Be Debt Collectors?
My InvoiceXpress Postmortem
Common Lisp, SHOULD-TEST, yet another test framework
Look two items up in that link, under "source", where it is correctly identified as an anasthetic.

People without training conflate the two.
This is a serious advantage to other frameworks if this principal holds true. I think anyone working in PHP has had their tails burnt a little too often with all the framework churn.
Did you read the article that the author linked to, in regards to this? You wouldn't walk up to a woman and say "You're a really great guy!" What would happen if you went into a mixed-gendered room and asked all the "guys" to stand up? If someone said "everyone knows it's a guys' world" what would they mean?

If you went into a restaurant with cutely-named bathrooms, and went into the "guys" bathroom, you would probably be surprised to find women in there. If someone described The Spice Girls as a "group of guys" that would likely be more confusing than someone describing The Beatles as a "group of guys"

It might sound completely normal to your ears to use "guys" in reference to any group of people because you're so used to responding to it (and, yes, I Internet-stalked you a bit to confirm your gender). Having never personally identified with the word "guy," however, I, at least sub-consciously, and sometimes consciously, think it's odd when someone calls me a "guy." I mean, I'll absolutely respond, and won't say anything to the speaker, but I'll feel a tiny bit put-off, and maybe a little self-conscious, because I'm the only person in my company who isn't actually a "guy"

Like the author also brought up, there are plenty of alternatives to "guys"
This seems like a similar situation to "submarine patents."[1]

[1] http://en.wikipedia.org/wiki/Submarine_patent
+1

RethinkDB's realtime capabilities would fit perfectly with Meteor.
To be honest, HFS+ does suck, and I'd like to see OS X default to something better. I'm a big fan of ZFS (it backs all of our production machines), but it does seem like overkill for a desktop OS. Something like HAMMER or btrfs might be a better fit.
Such a livestreamer would have to use data connections with fallbacks from multiple mobile data providers and possible a satellite fallback, and a mobile signal booster to bring inside venues.
Vim web dev icons
Y8 Games lif serengeti
I've disabled them, too. But it is just plain negligent of Apple to transmit these unencrypted in the first place.
Kinda to that point. For that specific project we were mostly all in Emacs. So we had basic code formatting in Emacs and then the formatting tool took over to help make sure it was all standardized. It cut down the amount of annoying code format chatter in code reviews so we focused on the domain/code issues. Made us all more productive.
My own completely made up supposition:

Engineers are more likely to take a pragmatic approach instead of a sentimental "Oh no! He/She doesn't have exactly the same taste in vacations/home decor/friends/whatever, we must not be soulmates after all!"
It's so hard not to give a skeptics answer to this. When one hears FB, et al, talking about how many users they have, one can't help but think this is all business.
The routing engine is NikiC's excellent FastRoute: https://github.com/nikic/FastRoute

My understanding is that the majority of the advertised speed increase has to do with lazy initialization of the request/response stuff and the need to expressly ask for things like session support.

e: Here's an explanation from reddit, http://www.reddit.com/r/PHP/comments/32kajb/lumen_php_microf...
I'm not really in vehement disagreement with you -- I like the way you're looking at it. But, once a person has no cell phone, address, home, facilities for personal hygiene, bank account, credit, or income, getting those things with money alone is tremendously difficult. Many of them require at least one of the others. You'd end up giving them a lot more money just to get the things they need anyway.

For example, cell phones: if you have no address to send a bill to, no bank account, and no credit, what kind of options do you have for service? You're a lot better off getting access to a service designed especially for your situation.

...and, much as I'd like to sidestep this point, the reality is that a lot of homeless people don't have the best financial judgement. That's not to say they're bad people or will spend money they can't afford on drugs or alcohol (I don't think either of those is as true as most people seem to think it is), but prolonged homelessness is rarely caused by a single bad decision or stroke of poor luck.
Meetzy: Find Amazing People to Meetup in Person
Yes they are not recoverable but try google cache. Actually I've used google cache to bring back the headline article.
Has the First Person to Achieve Immortality Already Been Born?
What people will do? Probably finally get around all those things they really want to do but they don't have time because of their job and commute. People are generally creative and have dreams - even those who one would dismiss as dumb/lazy. It usually takes talking to them to discover it.

INB4: I don't believe people would sit all day in front of TV/Netflix - it's a kind of thing you do because after 8+ hours of working, some commute, making dinner and stuff you're really too tired to do anything else.
1.a.1 I think this is your main fault. You are assuming that end-to-end encrypted message content is equatable to 'insecure' SMTP. The clear text or encrypted content of an email message has nothing to do with validating that an email account belongs to a domain and is valid.

SPF validates that the email account holder is valid.

DKIM signs the message and provides a body hash which is validated against the public key in DNS.

DMARC allows the domain owner to say that the message should trashed or passed.

And DNSSEC allows the DNS root to say that the sending domain is the sending domain.

So -- I repeat -- with SPF, DKIM, DMARC, and DNSSEC email validated CA certificates are quite secure.

And, yet, you are unwilling to admit this...

I suggest you read the DKIM RFCs, particularly RFC5585

"2.3. Establishing Message Validity

Though man-in-the-middle attacks are historically rare in email, it is nevertheless theoretically possible for a message to be modified during transit. An interesting side effect of the cryptographic method used by DKIM is that it is possible to be certain that a signed message (or, if l= is used, the signed portion of a message) has not been modified between the time of signing and the time of verifying. If it has been changed in any way, then the message will not be verified successfully with DKIM."
Wow, this is a really touching question. Thank you for your courage. It's inspiring.

My advice is follows. I would recommend a programming language with the simplest syntax, without the unnecessary policing that most languages entail. Begin with the lambda calculus, or better yet combinatory logic. The best book to slowly work through is "To Mock a Mockingbird", by Raymond Smullyan. After that you'll have a conception of what computation is. All computation is is substituting something in place of something else, or forgetting it, in a systematic way. From that point, you can move to something like the programming language Racket, which has a very simple syntax that is close to the lambda calculus. After this, you ought to be experienced enough to follow whatever path you wish to, for example understanding Javascript and how HTML on a webpage is scripted by it in response to user actions.

My best wishes to you.
Would you like to explain that to all of the American banks who lost billions of dollars when housing prices crashed?

Also, when a customer defaults on a mortgage, the bank gets "one house", not the cash value of the house. The bank then has to care for the house, list it with a broker who takes a sales commission, pay property taxes on the house, fix any damages that the prior owner may have left, and sell the house (which in the US housing crash meant competing against dozens of other foreclosures on the market in the same neighborhood).
Cascade Ciphers were out of scope. Moxie was addressing the order of operations for authentication and encryption.
How painless is deploying a Lumen/Laravel application? I used to use PHP back in 2006 and I remember deploying was as easy as pushing a .php file via FTP.

Has the experience remained the same? PHP was incredibly simple to deploy.
I think to be able to apply for scholarship you need to be member of one of the listed STEM organizations. All of the listed STEM organizations seems to be only for women, black and hispanic. What about normal people from normal school?
What's so controversial about Javascript? I'm not denying your claims; I just started using it a bit and so far really like it. Then again, I'm coming from Java so maybe I just appreciate not having to use OOP and being able to use functions everywhere.

And isn't Ruby also controversial? At least it seems like people either really like it or don't like it. Everyone I have talked to seems to agree that the only reason Ruby really took off is due to Rails.
Don't worry, we're just as crooked as Americans.
You're right; I misread your construct as KC(CC(P)). Your construct [CC(KC(P))] shouldn't be weaker than KC, unless information or resources are shared by CC and KC (such as keys). Shared information or resources may introduce side channel attacks. Per the previous link, this is likely only practicable on entirely separate machines.

Any entity that can break AES at-scale will undoubtedly find any unreviewed cryptographic protocol trivial to break. Any such at-scale effort would already include attacks against typical bad-custom-crypto (because they're extremely easy and common), in addition to the AES attacks. Cascading ciphers, particularly weak ones, will not stop the NSA.

edit: addressed information leak if CC & KC share keys/resources
Nvidia's next architecture (Pascal?) will move GPU memory into the same package as the GPU itself, giving an instant ~3x boost.

http://blogs.nvidia.com/blog/2014/03/25/gpu-roadmap-pascal/
You mean the ingrained, often illogical set of biases everyone has as a matter of living?

Nah. Objective, verifiable info, please.
Will motion sickness really be a barrier to self-driving cars?
Facebook is completely switched over https as far as I have used.
and I use auto layout as much as possible

Did you mean as "little" as possible?
I've talked to people doing large-scale deployments in PHP that complain about things like memory-leaks, etc in the language, so I'm not entirely convinced that PHP is really an excellent language (and runtime) that just happens to get a bad rap.
MongoDB 3.0 first look: faster, more storage efficient, multi-model
It's only more secure between two parties that can reliably confirm their identities with each other out of band. A CA, however badly implemented in practice, is more secure by design because the worst case scenario (a subverted CA) is no different from a self-signed certificate from a client perspective.

In terms of what you're focusing on in this thread (verification of identity) I don't disagree. But a MitM attack on coffee shop wifi is a problem which is exacerbated by self signed certificates.
I've been doing something similar for the past few months[0], but via an app I made specifically for this kind of thing[1]. It's really cool to be able to play back my montage, and there really is a sort of voyeuristic pleasure from watching other people's "lifecasts."

[0] https://www.youtube.com/watch?v=izZkCTBI3Bo
[1] https://itunes.apple.com/us/app/beet-for-moments/id960913398...
You're downvoted because your comment implies that "just following orders" at companies with morally questionable business models might reflect back on the one taking orders.

For more downvotes, try suggesting that working for an adware and spyware based company could (and should!) lower your social status, even if not yet in the eyes of other people working for adware and spyware giants. But with growing awareness in the wider population, the outcome is inevitable.
Related discussion from Daniel Walsh at Redhat on security in Docker: https://www.youtube.com/watch?v=zWGFqMuEHdw
Why was this comment voted down? It challenged an uninformed speculation based on the title of a speculation.
Why does expanding the underlying data that way "substantially degrade the security of a block-based cipher"? Can you think of a generic way that an adversary can gain an advantage against the block cipher because of this transformation/restriction of the plaintext?

(I appreciate the link to Matthew Green's post; I don't think his analysis of the effect of composition is as pessimistic as yours.)
This.

It's a shame that XMPP never really took off; even more so as a lot of people seem to be taking it as proof that no distributed chat system will ever take off. I think there are quite a lot of reasons end users would really like distributed chat, one of which is very much security. We need to learn why XMPP didn't take off and either a) fix it, or b) learn and move on.

(Which is why I'm part of a team building http://matrix.org/, check it out!)

However, I don't necessarily think we're ever going to get to a world where everything is end-to-end encrypted. There will always be trade offs involved when using encryption, and sometimes the trade off aren't worth it (a stupid example being public group chats).
It would be nice, however, if chat apps and protocols in general made it clearer what level of security is involved. Just like the average user is slowly getting to grips with HTTP vs HTTPS (thanks in part to the nice and simple padlock icon on most browsers), there's no reason that users can't be made aware of the security of a given conversation and medium.

Facebook, for all its woes, is still easy/useful when trying to organize events, and I really don't care that much if they are spying on that. On the other hand I don't really use facebook messenger since I do care about those conversations.

We need to empower average users to be able to make those same informed choices on who they trust with what.
You're talking about the Facebook website, which is irrelevant to this discussion. If someone sends an insecure HTTP URL through Facebook chat, then Facebook has to make an insecure HTTP connection to that URL in order to scan it, which leaks the URL, even if the chat session was using HTTPS.
Most banks raise capital by holding deposits from customers. If the bank now tells me that it's going to charge me -1% for my savings account, I'm going to pull that money out and keep it in a safe.

Think about how aggressively banks compete on "no fee" accounts, and how aggressive customers are about moving their money to avoid fees. Mint, for example, practically sounds an alarm on my phone whenever I get charged a bank fee.
What does the Business Plan version cost?
> Watson cannot do simple arithmetic

Can you provide some sources? I assumed that if Watson could win at Jeopardy, it would be able to do simple math problems.

Edit: I am not sure what you mean about Watson's inability to do arithmetic.

"The two major goals for IBM and RPI are to improve Watson's mathematical ability and to aid its recognition and interpretation of new words."

http://www.gizmag.com/ibm-watson-supercomputer-rpi/26038/

All accounts seem to allude to Watson's ability to infer natural language and problem solve, including arithmetic. I have not found anything explicitly saying it can not perform simple arithmetic.
62% need template? That's surprising. I'd love to see a case study on that.
There are two concepts here:

1. $1 today might buy you less stuff than $1 tomorrow would. For example, maybe today $1 will buy you three today-apples, but tomorrow $1 will buy you five tomorrow-apples. This is arbitrary. The example shows deflation in apples, but there's no reason, a priori, that today should be better or worse than tomorrow, whether measured in apples or any other dimension. Maybe tomorrow $1 will get you two tomorrow-apples.

2. Under the assumption that the buying power of $1 is fixed and eternal, $1 today is necessarily better than $1 tomorrow because you have more options. Among other things, you might die later today. This phenomenon can't reverse, it can only make earlier money (or anything else) more valuable than later money. But it's not the same idea as #1.

Deflation is an idea related to concept #1. $1 today being better than $1 tomorrow is concept #2.
Apple products are very competitively priced for their target market. That doesn't mean that they're for everyone, but nobody is getting ripped off.
Yes, and even more so with https://envoyer.io/ - according to the website a Laravel product.
This is definitely a very cool feature and makes this a very good candidate for MVP's or prototypes. I'm not a huge Laravel fan, but this feature alone might sway my decision.
Yeah the black hole problem is definitely something a lot of people bump into. I hadn't actually come across Flipboard before, seems similar to Pinterest.
Looks somewhat ugly and also slow. (each element is processed in a separate process)
I would recommend rephrasing as "What about everybody else from all the other schools?"
Why You Should Replace Your Roofing in Spring – LGC Roofing Blog
The five biggest changes in Ubuntu 15.04, Vivid Vervet
The (then) CEO of Google Inc. loudly declared the (constitutional) legalese that the users of his company's product have "no reasonable expectation of privacy".

The Supreme Court is perfectly clear as to what rights we have when we don't have "reasonable expectation of privacy".

Finally, we are effectively coerced [in]to using these products -- unless you want to head to the woods and live the back to nature life.

Game is over.
Pretty much.

Laravel's strength is that it is batteries included but for some stuff this can be a weakness, API's where that 30-40ms load time matters for example.

I've spent a couple of years working with and on laravel projects and mostly I like it a great deal but it is a sledgehammer when sometimes you need a ballpein.
If anyone has any questions or thoughts on this. I am open to talking about additional methods and work I am doing in this area, including creating a tool to facilitate some of this as a streamed process
Dying Light Level Editor Released
You might think twice about the safe if you had to keep, say, $800,000 in there.
Writing Code Is (and Always Will Be) Personal
Please paste the link which debunks Pando's thesis. I'd like to read.
How available is IPv6 handset to handset connectivity? I understand that T-Mobile offers it, and Verizon can but it's usually disabled. If you have a true peer to peer connection without NAT, more options become possible.
I was at a creative agency in 2005 which was doing work for FastClick. We had the opportunity to buy "friends and family" shares in their IPO. A number of us did.
Lots of hard work has been poured into this release :)

Congrats to the RethinkDB team!
I think "Sign up with Facebook" it's better then "Sign up with Google")