skysight-inc/HackerNews huggingface dataset:
What if you could see who downvoted you?

I'd be less annoyed by a downvote from pg, because I probably deserved it, than a downvote from someone completely random, who I might not care about.

In some ways, I also wish downvoting cost you a point like it does on stackoverflow.
<canvas> doesn't do anything by itself; you draw on it using JavaScript. Someone could argue that because JS can be embedded in HTML, it's really a part of HTML, which makes HTML a programming language; but the HTML standard does not require JS support, and most browsers have an option to disable support, so I think they are separable.
could you also keep track of viewers on a per-server basis and simply add those numbers together on the fronted?

like if

server 1abcdef is managing 300 sockets
server 2ghijkl is managing 200 sockets

then you just add those on the frontend
> And yet. This is novel

No.

EDIT: I've been told to elaborate.

This is just direct fallout from the way Merkle-Damgard hash functions work. MD hash functions look like this:

function MD(C, h, M):
M <- pad(M)
for m in blocks(M):
h <- C(h, m)
return h

The core of an MD hash is the compression function C, which takes an input state h and a message block m and produces a new state. When you find a collision in an MD hash function, you're really finding a collision in C. That is, some state h and some pair of message blocks m1 and m2 such that C(h, m1) = C(h, m2).

Now, HMAC. HMAC is defined over a hash function, and it looks like this:

function HMAC(H, k, M):
k1 <- ipad ^ k
k2 <- opad ^ k
return H(k2 || H(k1 || M))

Where "||" is the concatenation operator. A simplified view of HMAC is that the key is used to scramble the initial state of H. This prevents the attacker from finding collisions on the inner hash function, because they don't know any interior state h. (The outer hash prevents length-extension attacks.)

Which makes this article pretty silly: the whole point of HMAC is that the attacker doesn't get to know interior hash states. It pretty much goes without saying that if a) an attacker can find collisions on H for arbitrary states h and b) they know some interior state h of the HMAC, then it follows directly that they can find collisions on the HMAC.

Hey, want to see some more practical "attacks" on HMAC? Here we go!

In [11]: HMAC(b'\x00', b'chili dog', sha256).hexdigest()
Out[11]: '3128a12ed7dd6cd4ad9d2720126698d1c0c3e2d991ddbf73ebbecd947581acd9'

In [12]: HMAC(b'\x00\x00', b'chili dog', sha256).hexdigest()
Out[12]: '3128a12ed7dd6cd4ad9d2720126698d1c0c3e2d991ddbf73ebbecd947581acd9'

Whoaaa, what?! Again!

In [17]: HMAC(sha256(b'A'*500).digest(), b'chili dog', sha256).hexdigest()
Out[17]: '426b6ec9b0e6b5fae9d12924432c023e8bc3444aa3adc4c48fdc875357c54c2f'

In [18]: HMAC(b'A'*500, b'chili dog', sha256).hexdigest()
Out[18]: '426b6ec9b0e6b5fae9d12924432c023e8bc3444aa3adc4c48fdc875357c54c2f'

Oh nooo! HMAC!
> What's unkind is saying, "You're an idiot, and that's a ridiculous idea." Attacking people is not kind, but directness _can_ be kind.

I don't call people idiots at work but I can behave in a way some people view as "adversarial".

> On the other hand, you deserve to be shown some kindness too. If your coworkers don't listen to you, maybe it's time to start looking for a new job.

Oh, they listen they just don't agree. That is the problem with the general "kindness" bit. People simply assume if you are being kind about it that it isn't a big deal.

Many, many people operate on the "If you are not upset, this is not a serious issue". After all, if it only impacts them rarely...it isn't important to them personally.
You really don't. I switched a few months ago because Chrome was crashy, it took all of two days, and a few more until I stopped using Chrome completely.

What irks me about Firefox is that tabs aren't separate processes, so one sticky tab will make everything sluggish, but that's about it.
Looking at some of his example sites, he is no better than those outfits in India that call you at all hours toting their services. It looks like he threw these sites together in a day or two. I'm all for charging a fair rate, but it has to be fair for both parties.
Great point. Really helpful feedback. We will fix that.

We used to require calls (despite the irony of kicking off a social anxiety program with a call) because of how instrumental our early clients told us calls were. We have since learned that although many clients find the call key to their success, others can be successful without a call.
> If I could sacrifice the screaming passions of every marcher in Berkeley, every Black Panther in Oakland, and every OWS camper for another Gates Foundation

And I the opposite. The Gates Foundation is built on ill-gotten gains, the kind of abuse of power that makes the world the bad place it is. The marchers in Berkeley (my alma mater), the Black Panthers and OWS all had profound impacts on the social conversation and psyche. Would you trade Selma for The Gates Foundation too?

That you felt the world remained unmoved by your earlier efforts hints at the kind of arrogance or desire to play god that the current internet tech world is criticized for. Doing the right thing must be done because it is right, not because you get personal satisfaction or glory (or profit). Doesn't sound like you gained the wisdom that you believe you did. You probably don't get my points about integrity and walking the talk, that those "most people" you refer to aren't actually waling it. Certainly not Bill Gates.

Maybe you'll not get anything I'm saying.

Whatever helps you sleep better at night.
Good thing he wasn't kicked out then, and instead voluntarily resigned, right?
Distributed...PC's, "broadband", and mobile are early iterations of a ubiquitous computing mesh. This is not so much the internet of things but human controlled computing...that's where the margins are, not in industrial commodities. The next big thing will provide people with more computational power and more reach.
From the FAQ: http://hyperblimp.com/#faq

>HOW DO THESE AIRSHIPS HANDLE IN WINDS?

>Hyperblimps, like traditional planes, can handle winds according to the speed of the ship. Our top speed as of July 10, 2010, is 40 mph, enabling a skilled operator to fly in winds of about 15 mph. We hope to be surpassing that speed soon. As for crosswinds, the ship is simply “crabbed,” just as a traditional plane is.
Phree – Make the world your paper
Not that I know of, but I personally use "Tiny Braces" coupled with "Editor Guidelines" to get the visual appearance, at least.
Hey angrybits! My original plan was to spin my HN score counter down to zero by making true and blunt statements about the drivel posted on this site (which would, natch, be down voted).

Communication to me from a person identifying as a moderator suggests to me that the deplorable tone and content of this forum is managed and encouraged by moderators.

I have now lost interest in this site. I'm now hanging out lobste.rs which I find much more meaningful.
The article even shows a screenshot from Link's Awakening, which was intended to be displayed on an LCD with sharp pixels.
So most software is 95% of the sound. A lot of hardware is nostalgia + purpose + tactile feel. However there is definitely something to the school of thought that hardware is inherently limited vs software and that opens creative windows that staring at a computer screen may not. Since I have owned real 808s I know what they can do and they are certainly romanticized a large amount. However, the 808s sequencer has a small amount of swing to it which is emulated(but able to be disabled) in the tr-8. I've never heard this mentioned in software. Software emulations have very distinct advantages in that most have parameters that can be tweaked far outside of a real 808/whatever analog device. Where this kind of hardware shines is the fact that you know a certain type of beat/sound is easy to achieve. It's that magic moment that you make something original that the hardware wasn't intended for that makes it all worthwhile. I experience that way more often with hardware than software.
Oh, I'm definitely responding to the category of comment, and I totally believe you that you meant yours as a joke. But you're way, way overestimating how apparent that joke was.
I agree completely. But it's an improvement, which shows how bad the current state is, and strictly better than relying on just standardization or caution.

(By the way, if you still think it's broken, I'm ball to improve it. "Wrestling with pig"...)
http://discuss.bootstrapped.fm/ is a good forum for bootstrappers (people launching products without outside investment) and http://bootstrappers.io is more Hacker News-like in its style, basically upvoted links with comments.
Some people would, but many others would simply be priced out of the market (and/or build their own from individual components which have none of the required safety upgrades)
Charging base where it could land and somehow automatically change batteries (or switch with another drone?) would solve some of this. Hopefully battery tech will pick up a lot in the next 10-20 years!
seeing as how there are, in this very thead, people that consider OP to have been a dickhead, i think i'm going to go with the primary source on this one.
What are the limits on implementing the bittorrent protocol? A open source sync alternative seems doable (even if I had to resort to port knocking or something), maybe build it on top of owncloud and get the best of both worlds?
This story, yet again. Been hearing this for almost two decades, and it never happens. Most people will not eat bugs if other meat is available.
Amen break
Every single time rent in NYC or San Francisco is brought up, everyone makes comments like "I only pay $500 a month for my ten-bedroom house in Kansas!" And the reason that rent in NYC is higher than rent in Kansas or Pittsburgh, etc. is simply because more people want to live there. It's simple supply and demand.
Comments like the granparent's frustrate me. Often they're from people who have good reasons, but I feel that it paints a skewed picture. I have a PhD, but am no longer in Academia. However, I think the "systematic" problems with academia that people talk about stem from a misunderstanding about what research and peer review are.

A PhD has _nothing_ to do with coursework and _everything_ to do with conceptualizing, managing, and completing projects then finally _communicating_ the results. Yes, it's about original research, but that usually doesn't mean that it's done in isolation.

Yes, you need to be conversant in your field. Yes, that means being up to date with what other people are doing. At the end of the day, though, the key question is, "Can you convince other people to buy into your work?".

A large part of it, for better or worse, is salesmanship. (Also know as "communication".) That's by design. If you can convince several intelligent, skeptical, and yes, biased people that you are right, then there's a good chance that you are.

People are human. They have agendas. It's not a perfect system. Nonetheless, peer review mostly works. I think there are things we can do to improve it, but the picture most people seem to have of academia is overly pessimistic, i.m.o. I would argue that it works fairly well, for the most part.
I wonder how the community would evolve if commenting was simply turned off for a month? If karma could only be gained through up votes, you might see better submissions.
Cars kill 40k people per year in the US. Lets not forget "drones" have been around for 50+ years they were previously called "RC Helicopters" and "RC Airplanes" and have a pretty darn good safety record.
Imho, your latter statement would be true except for the inclusion of <canvas> which is there specifically to allow it to be manipulated by JS.

You are, of course, correct though, <canvas> is not actually Turing complete without JS; but then a Turing machine cannot operate without both the ticker tape and the pen to write on it. Given that, JS + <canvas> seems to be a near perfect analog to a Turing machine to me. (Though, I can think of numerous ways that someone might disagree.)

Either way, I would still like to see more in-depth analyses of this interaction; and I find it odd that a discussion of HTML as a programming language would make no mention of it whatsoever.
I wonder if they looked at riotjs[1] as an alternative. Deku is at ~10k, riotjs is at ~4k. They both seem to have similar goals: no legacy support, decent api, decent performance.

[1] https://github.com/muut/riotjs
Best of luck, let me know if you succeed :)
Show HN: Airship – Sync cloud saves between iCloud and Steam Cloud
And yet he attacks elitism with his particular kind of elitism.

I'm not sure this is at all useful.

"Go get some more education at an institution other than a glorified vocational training center."
Both are conflicts between two (or more) parties in which the ultimate question at hand is how resources be allocated.

If one side chooses to play dirty, your options are to:

1. Concede the battle and lose.

2. Walk away.

3. Up your game and win the best possible deal.
Syncing Trello Cards Across Boards
Cars kill 40k people per year in the US. Yes a falling drone "could kill someone" however falling coconuts actually kill a lot of people each year. [1] If you want 100% safety in life, build a bunker and never go outside.

[1] http://diaryofnumbers.blogspot.com/2010/11/death-by-coconut....
Learn from the best in their field
I use Chromium, I wish companies were more honest and gave explicit alerts to consumers when they choose to use DRM.
War doesn't equal battle.

The best victory is the one in which you do not actually fight.
Growing seattle startup looking for part time web developer or intern
Hm, I suppose if they wanted to avoid this (which makes sense), riotjs might not be a good fit. Eg:

https://github.com/muut/riotjs/blob/master/demo/todo.js

vs

https://github.com/segmentio/deku/blob/master/examples/todo/...

Does look like riotjs might be re-factored in some interesting ways, if they move it to ES6 though.
However it's not required for AI to distinguish good and evil to be harmful. It could be the very lack of this distinction that enables it to interpret a situation where the selected course of action is destructive to humanity.
Can you share a strong example track of the 909 sound? I don't know the difference at all, so I'd love to hear!
By this definition any input that a program processes would qualify, since inputs by definition "instruct" the program how to operate.

At that point you've robbed the term of any useful meaning.
I really like a presentation from Jeff Hackert in the subject:

https://twitter.com/jchackert/status/330674979198861314
2015 is shaping up to be the Year of Ubuntu
Telegram should be avoided. They do weird things with their security and ignored criticism on it. The key verification requires checking an image, so you can't do it over the phone. Plus closed source, so you're very likely entirely depending on trusting Telegram.

Their response to using AES IGM? It's along the lines of "yeah this strange mode no one uses has issues but not in the way we use it so whatever. We've got math PhDs, so trust us."

I'm no expert, but I get a really bad feeling about them, since it's the totally wrong attitude to take.
What hardware/software platforms and network protocols do you envision for the UC mesh? Distributed gossip protocols or centralized named-data and content-centric networking?
It's not so hard. You re-base the assessment rolls every 4-7 years, and allow owners to challenge unfair assessments in between.

The problem lies in the nature of politicians... Reassessments upset people whose assessments go up, so the big players lobby to defer the re-basing. Or in the case of California, you never revisit until the property changes hands.
> Ridiculous! He was hounded out, forced to resign and you damn well know it.

https://blog.mozilla.org/blog/2014/04/05/faq-on-ceo-resignat...

"On April 3, 2014 Brendan Eich voluntarily stepped down as CEO of Mozilla."

(I'm not going to, but) I can tell you to stop posting on HN every single day of the year indefinitely. But I can't make you. I don't have that power. If you choose to, it's your choice. Eich was not fired. He resigned of his own free will.

If a customer comes into your job, tells you that you should resign, and then your boss says, "ignore him, you can stay", and you resign anyway, can you really tell me that your boss fired you?

> Bigotry? What are you smoking?

Unlike you apparently, I'm not. Since I know what words mean.

http://dictionary.reference.com/browse/bigot

"a person who is utterly intolerant of any differing creed, belief, or opinion."

Eich was so intolerant of people who held a difference of opinion on what constitutes marriage, that he donated his own money to a cause whose sole purpose was to strip existing legal rights and protections, rights that he enjoyed himself, from a minority class through force of law. There is zero ambiguity here: I cannot possibly think of a clearer case of outright bigotry.

If you disagree, you might want to take a good, long, hard look in the mirror. Per the dictionary; I am selfish, tactless, and many other negative things. I don't pretend those words mean something that don't apply to me, just so I can feel better about myself.
Looks neat. But I was bummed out by this: "Frames are useful for statements, but they get unwieldy if you were to use them for expressions." I'd love to see an approach to this that works for languages that don't have a statement / expression distinction.
Yep, having two planks and two edges on the ground is a huge advantage.
> It is they who denied opening up MobileSafari for 3rd party plugins

...how is that arrogant? They wanted to only allow standard technologies? What is wrong with that?

> yet it supports 1st party plugins; in earlier versions you could even iterate the navigator.plugins property and see quicktime there

It had "quicktime" as a "plugin" but I believe that just launched the video player. Similarly, Apple replaced YouTube video embeds (Flash) with the video player. No plugins there.

> I remember seeing Adobe hinting heavily that they even had a working flash plugin (for jailbroken phones?) going internally.

Yes, Adobe did. It didn't work very well.

> I bet the real reason for blocking flash player in Mobile Safari was to block all the flash based ad banners of the day. It would have degraded battery life and the user experience quite a lot.

Flash period would ruin battery life. Similar to why iOS has no multitasking.
Are we reading the same article? Because the article I read seems to be arguing that linking property taxation to income (in the form of giving huge breaks to the ultrawealthy) is a bad idea.
In Mathematics at least this is very much not the case.
I thought it would record the exact place where everything was written and show to other people using the magic lens (the phone), but that would be too much.
So the DH does give you some degree of ephemerality, yes... but as used, only if you're not already being MITM'd. (If you are subject to MITM, then it degenerates to the case you describe where peers are just picking a random number and exchanging it in the clear.) You could upgrade this to not have that weakness under MITM at all by doing the DH after the KDF: use the KDF to key an HMAC, thus preventing MITMs by someone lacking the password at the time of the DH exchange. I don't think there are any additional expenses or drawbacks associated with doing this.
He resigned because of the clamour of the bullies, and because he didn't want the Mozilla Foundation to get hurt with it.
My rule is, don't mention the other person at all in HN comments. Address only the subject. I don't always succeed, but the comments I've made that folks like are always of this sort where I expand on the topic, instead of contradicting. The worst sin is trying to rephrase what was said before e.g. "You said blah blah". That is always unnecessary, and often folks take offence.
nothing. but tomorrow, when you are used to type git pull, you will run it on a branch with changes and you have no idea if it will rebase, merge, fast forward... and /then/ you will see the problem. (and open yet another stackoverflow question on how to undo the last merge :)
That's irrelevant. What you think of his principles is irrelevant. He did nothing wrong or illegal except take a position that did not coincide with that of a very loud and mean crowd. Even if you or I do not agree, it's indeed admirable he had the courage not to flip to save his skin.
I just used firebug to alter the page in my browser. I changed the first heading from "This page exists only if someone is looking at it" to "What happens if I use Firebug to alter this page in-situ. Do I end up with malware?".

Will this change propagate? Has anyone yet seen this modified page in their own browser?

Edit:

From the original page: "The server double checks the hash of the content it gets and then passes it along to the new person." I guess the answer is that the change won't propagate?
I don't think the upvote/downvote system here provides enough feedback to the person being voted. There just isn't the information there.

For the longest time I was confused at seeing down-voted comments because I mentally assumed that downvotes mean "this is a troll comment / this is some kind of abusive comment". Not so.

Also (and I've said this before so apologies for repeating myself!), if downvotes do mean 'disagreement', could we get rid of the graying out of down-voted comments, or maybe just make it an account preference? I'm interested in reading viewpoints that I might not agree with and graying out the comment makes it really hard to do so. It also seems to fit better with the model of "downvote = this comment shouldn't be in the conversation".
It's been a few years since I last read it but Menger's take was the first I've ever read that just makes sense: https://mises.org/sites/default/files/On%20the%20Origins%20o... (1892)
"It may take science some time to grudgingly test hypotheses drawn from mysticism and metaphysics"

Especially since the production of testable hypotheses from mysticism and metaphysics appears to have a time-constant larger than science's current age...
StartSSL is able to do it because they cut out the nickle and dimeing BS. They state it clearly on their page, it costs them practically nothing to issue their class 1 certificates because the process is automated, so they simply don't charge for it. I would guess it's easy for them to do it since it's their business anyway. As for the others, it's probably too much of a hassle to set up and maintain a public CA.
Exactly! He managed to put the company's best interests before his own, and chose to resign. But he wasn't fired: the Mozilla board did not ask for his resignation. He could have stayed if he wanted to.
Analyse Asia 29: Founder Institute in Southeast Asia with Jeff Paine
You might be interested in Guns, Germs, and Steel. It has a similar N-S vs. E-W thing going on.
Synopsis: Jeffrey Paine, founding partner of Golden Gate Ventures and director of the Founder Institute (FI), Singapore sits down with us to discuss the story behind Founder Institute in Asia and the state of venture capital in Southeast Asia. He start his story from the days of he first built the institute in Singapore and subsequently expanding to other parts of Asia. We also discuss the state of venture capital in Southeast Asia, and whether the ongoing large valuations are leading towards a bubble in the region.
How Marc Benioff tested Satya Nadella before deciding to cozy up with Microsoft