skysight-inc/HackerNews huggingface dataset:
DH is used to ensure that every connection between every pair of weave router nodes that ever gets established uses a unique session key. Yes, the public key is exchanged in the clear, and yes, that is MITMable. But as you say, the subsequent combination of the result of the DH with the non-exchanged password solves that.

What is the weakness with this approach? Is your point that there's nothing gained from doing the DH - you may as well just generate a secret key randomly, exchange that between the peers in the clear, and still have them combine that with the password secret, and the level of information exposed is the same?

I think there is a difference. Say you have a captured stream of traffic and you want to decrypt it. With the simpler non-DH scheme, you already have the basic key, so all you need to do is guess the password, and run that through sha256 and then you can decrypt the entire stream. Now you have the password, you can decrypt every stream you capture from now on. But with the DH scheme, you have to both guess the password, and the ephemeral private keys which are never exchanged (either that, or break Curve25519). Even once you've done that, you only get access to that one captured stream - sure, you now know the password, but every connection between weave routers will use different random private keys to their DH, so you'll still have to brute force those for every stream you capture (or, again, break Curve25519). So ISTM there is a substantial difference there. That, to me, is the point of using the DH. But maybe I'm missing something... I'm slightly wondering whether people here are considering the use of DH and Public Key crypto by weave in the context of the usual "generate keys once and save them". This is just not the case in weave - weave generates fresh public and private keys for EVERY connection between routers.

There is no requirement for weave that the password is human readable. It can be supplied through a file, so you can happily dd if=/dev/random of=/my/weave/passwd bs=1k count=1 to create a suitable weave password
Bill Gross Wasn't Short Enough German Bonds
The human brain may indeed be beyond all computers.

On the other hand, the brain and eyes of the fruit fly do amazing things. I think it's reasonable to say that vision is lacking both hardware and algorithms at this point.
What is a "hot zone"? People obstructing traffic and breaking a few windows merits recording the location of every cell phone (basically every person over the age of 10) for an extended period of time? That's textbook "unnecessary dragnet surveillance".

EDIT: How do you separate out:

1. People in the streets participating in marches. (maybe articuable suspicion)

2. People in the streets not participating in marches. (ipso facto no articuable suspicion)

3. People in their homes with their cell phones on. (ipso facto no articuable suspicion)
Going though this thread, so far we have fpp, selecta, peco, percol, numberwang, fzf... Wewh! They are all, how could we call it, command line selector tools? What I'd love to read is a nice comparative review of these tools.

Although I kind of enjoy the process of going though each one and studying how the features fit my own workflow.
Maybe the simplest way to establish a permanent presence is actually a space station in Martian orbit.

That would build the launch and transit infrastructure necessary for sustaining a permanent settlement.

It also has some interesting advantages:

* Low latency connection to rovers and manned landers giving a near instant mission control capability.

* Trips to the surface could be made as a short excursion rather than the sole purpose of the mission. This would allow for failure of individual landings without jeopardising the entire program.

* Could build on what was developed for the ISS.

The biggest advantage is that it would require a long term political commitment instead of a one time mission that would be cancelled on return.
The most likely buyer will be Tripadvisor or Priceline. They both are flush with cash and Tripadvisor has been aggressively getting into the restaurant review space and has much broader penetration abroad in all the places Yelp isn't at. Tripadvisor also bought reservations tool LaFourchette and Yelp could be a way to get more into the US game.

Priceline owns OpenTable and Yelp could be an interesting way to build out more reviews and get more restaurants using OpenTable.
Talking Machines: Interdisciplinary Data, with David Blei
> I don't get why the world thinks software engineers are so rich...

Everybody know how much a programmer makes in Silicon Valley, and think everyone in the industry is paid accordingly. Also, high cost of living in SF area is not that well known (or at least, not understood to be correlated) by the masses.

It's a bit like saying every football/basketball player is a millionaire. Those that play in the professional leagues, yes. The ones that end up coaching pee-whee teams, not so much.
Ditto. I more or less refuse to use Sourceforge.

There's an up to date clone on GitHub at https://github.com/ThomasAdam/tmux

Can't send patches to it, but it's great if you're just building it.
Depends where you live. We've had gunshots in our neighborhood every day (or very nearly so) for 2+ weeks. I lost count of fatalities sometime around 9. Bit of a gang war going on here.

The ShotSpotter they put in last fall is definitely seeing some use here.
Indeed. Couldn't they have supported it for a small part of users like they're doing with ChaCha20-Poly1305?
"We charge less than we pay our upstream, but it's ok because we'll make it up in volume."

Seriously though, they're saying that most deployments use less than 18 hours per day, and if they just let them stay up 24/7 regardless of that, they're basically leaving money on the table. Heroku pays Amazon for all of what we're getting for free. Their free tier is a loss-leader.

If they don't spin down your app when it's idle, it absolutely costs them more than if they do. Regardless of how much (or even whether) they bill you for it.
We're open to remote workers. There's a little less demand (not all YC companies are hiring remote workers), but we have no problem with it.
> And I didn't know it was just derived from it; I thought asm.js was idempotent with llvm ir!

LLVM IR is SSA and strongly typed, while asm.js is non-SSA and only has a simple, machine-level type system, just to name two large differences.
from the employee or employer?
I have't worn a watch for at least 20 years. I can't remember a single case of wishing I had one to tell time or date. If your life revolves around computers the time is right in front of you constantly. With any kind of phone the time is also readily available. If you are watching TV you are one button click away from seeing time and date. Heck, even when I am swimming at the local olympic pool time is right there on the wall for everyone to see. I wear a swim watch while swimming but it stays in my gym bag when not in the pool.

To me this is conclusive proof that watches are jewelry rather than a necessary device. All the other uses are simply "toy grade". Now, if someone is into toys, that's OK, whatever floats your boat.
There is alot of similarity between this story, making iOS apps and making AdSense websites 7-8 years ago. One could slap a website together in a week, and one would see the revenue slowly but surely coming in and going up. The strategy of "making a website every week", and the total will make up for it worked too, for a while. Nowadays, every niche is crowded, and often more professionalised with several persons working on it, Google taking drastic measures to penalise spam-techniques... and the 1-week effort websites (even if you have good, quality content -- but it's just little) will get you nowhere anymore. It is almost, exactly the same story.
In fact, you are actually the one who is grossly misguided. Per that exact quote,

The GPL permits anyone to make a modified version and use it without ever distributing it to others. What this company is doing is a special case of that. Therefore, the company does not have to release the modified sources.

Specifically

Therefore, the company does not have to release the modified sources.

The faq is explicitly stating that the GPL would not require releasing modified source, and that if you want to force the releasing of modified sources, you should use the AGPL, as it has a clause to cover network server software
Screen has both 'c' and 'C-c' set to new window by default. tmux only has 'c' by default.

From https://www.gnu.org/software/screen/manual/html_node/Default...:

C-a c
C-a C-c
(screen)
Create a new window with a shell and switch to that window. See Screen Command.

Edit: d'oh. I had to reread the original comment. You already know this, but by adding 'C-c' I don't have to release the Ctrl button.

You can add this to tmux.conf to get screen-like behavior:

# New Window
bind C-c new-window
Y Combinator does seem to be generally anti-remote, at least for early stage startups:

http://blog.samaltman.com/how-to-hire

Agree it's a shame.
Fair enough, I slightly amended my post, but I think asking for fizzbuzz with generic syntax highlighting is fair enough. As I think it's simple enough to write tool agnostic, because I'd expect you to be able to write it in any language you like, ignoring fatal syntax errors.

It's really just fizzbuzz, not an approximation of real life world, we had on site interviews for that (Switzerland is quite small, not sure how that'd apply to the US).
Yeah, plunder some salons, get things fixed.

It is apparent that many societies unlearn how to get things done. Instead we learned to mourn things we can not right.
Hard to innovate when your main business idea is to scam money out of small businesses in the name of demoting negative reviews.
AngiesList should buy them
Why Cops Like Me Are Quiet
Hey guys, great tool. Just want to point out it doesn't play well with ack (a better grep) because ack does not prepend a "./" to the file list returned from "ack -l 'foo'". Any way to make it work with the following:

junk/foo/bar.txt

instead of just

./junk/foo/bar.txt

?
Does anyone know if the bulk download feature applies only to photos in the camera roll, or can one bulk download one's photostream, galleries and albums too? Even in the camera roll page, I have yet to find any button or link to bulk download whether photos are selected or not. Anyone have any luck?
Or, they could go one step further and do it like WinSCP.

That is, WinSCP has an own website that contains ads with fake download buttons. It's really nasty, but at least the advertisement payments go directly to the project, rather than just to the hosting service.
Does anyone remember when the world's first <$100 computer was revealed, so we can estimate when the world's first $<1 computer will be revealed?
I think the problem a lot of people have is with the "mass" part, not the "surveillance" part, of mass-surveillance.
Such a bummer it is only for people having a US Visa already.
Per his LinkedIn page, he was CTO but left Monsoon in August 2014.

https://www.linkedin.com/pub/andrew-hunzekerhesed/1a/361/320
Dave Ramsey fan?
Oh sure, and as long as devs aren't leaving (they aren't) apple is likely not doing anything "wrong".

They have unashamedly said their order of doing things is

1. Good for apple

2. Good for users

3. Good for devs (distant third too)

They have been nice lately though. I'm really excited about the App Store analytics and all that entails. It's really nice that they've finally added that for us.
There was no state secrets assertion in that case and the court decided it on constitutional grounds (under which the government won) rather than statutory grounds (like here, under which the government lost).

Davis: there's no fourth amendment obstacle to the government getting cellphone location data (of particular people)

Clapper: the government's interpretation of part of the Patriot Act's supposedly allowing it to easily get everyone's phone calling records is mistaken

I guess the fact that Davis undermines our privacy rights and Clapper protects them might seem incongruous if you expect a nationwide trend of all Federal courts either protecting or failing to protect privacy. But these were two different courts in different parts of the country applying different legal theories to different legal questions, not just something like "is privacy good?" or "is government surveillance out of control/sketchy/terrifying?".
"There's not much political support for that, especially in Manhattan,"

Either fix laws or enforce them. There should not be other options save for failed states.
One cool innovation I've seen is converting from a % upfront model to a % recurring model (Ex. instead of 25% upfront convert to 2% over 12 months).

It benefits start-ups because they don't have a large cash outlay at once and aligns the incentives of the firm to find great candidates that will stick. It also creates a more predictable revenue stream in the form of monthly recurring revenue.
The critical difference, in my view, is that Google et al. do not have the authority to incarcerate people.
Investigated: Why Was Project Ara Competitor Fonkraft Suspended from Indiegogo
The interactive model is insanely cool. When building a toy game engine a while back (https://github.com/orthecreedence/ghostie) I saved probably half the development time by being able to redefine functions/values while the game was running.

The old way of lisping is to prototype in lisp, then build in a "real" language (c/java). However nowadays the lisp implementations (CCL/SBCL specifically) are fast/advanced enough to the point where you can prototype in lisp, then just use add some type specifiers and boom there's your app. Hell, with ECL you can even embed your lisp program into another one, while still achieving compiled speeds.
But in reality that's not the prosecutors call to make. In the US laws are challenged in the court system, or overturned by lawmakers. I would say that the current government in the US is not going to be open to changing these things so that requires charges to be brought and a trial to be convened and then let the process move from there.

A presidential pardon solves Snowdens issue, but does not change the law.
Certainly many more would die. But many more would live. There are lots of low-tech, poor farmers out there who wouldn't be too affected.
Yeah to an extent. I do think envelope budgeting and debt snowball methods work well.
I don't think so at all, but you should investigate the company to make sure they're actually hiring first. If you sent me your resume now, I'd say "Huh. Cool." but then send you an email saying we're not hiring, check back in 6 months...
Sounds like the sandbox-escaping game is going to get pretty intense in the coming years.
It's true, if Google wants GCP to be good, they will have to use it themselves. I definitely don't trust public bug reports to fix issues. At least if you have a support plan they are good at responding and sometimes fixing things. There's no way anyone in Google uses URLFetch, which explains why it's so bad.
This could be adjusted for other reviews a person does... a lot of fake review accounts don't have many reviews, and tend to lean towards all 5 or 1 stars respectively. It there's a variety of 2-4 star reviews, and actually insightful responses it adds weight even without anonymity. I really wish Amazon would add such weighting to reviews in terms of computing the average stars for a given product since they have this feedback data.

There's very little reason others can't do the same... extending location reviews to more than a "like" would go a long way towards helping too.
I haven't shopped for a new car so didn't realize that they had changed the labeling. The motivation for the cost estimates is clear enough from their literature:

http://www.fueleconomy.gov/feg/label/learn-more-gasoline-lab...

(If you have a tiny screen, make sure to scroll down to the "MPG Illusion" plot.)

Edit: You conclude: " i.e., the ones that have good numbers on their own usage patterns that they are going to calculate out from to get a personalized estimate -- MPG and gal/100mi are exactly equal in utility.".

What else did you take "For everything else it just introduces some trivial difference in the arithmetic." to mean?
I didn't, but I'm assume he's familiar with the PGP debacle (and if he's not, I just emailed him).
Unfortunately, no. Good try, though :)
> I'm particularly interested in this as a startup filter. There are a lot of startups out there, many that I don't know about. I'm wondering if Triplebyte could help me find something I'm interested in by filtering out startups that I'm unlikely to be interested in.

That's exactly what we're going to do. There's an increasing number of tools to help investors find startups to invest in and the same should exist for applicants, since that's essentially what they're doing with their time.
To me the Apple Watch is over engineered. Good engineering is like ergonomics for your mind. When you find the most beautiful solution to a problem, you know it in your guts. But with the Apple Watch, looking at it I don't know what problem it solves, and I don't see anything in the design that intuitively maps to its function.
Thats not the same kind of rewriting history because its local to you and hasn't yet been pushed out to others.

Git allows you to push commits to other people and then rewrite history, which is different
And Sushi. Unless the fish is literally rotting on the plate, Americans will pretty much give high marks to just about any Sushi hut.
From what I understand, this tools build a container and push it to the registry for every change, where as when you are using the registry alone, you have to push the images manually?

Am I right?
Fitbit files for $100M IPO
lol, someone's gonna be disappointed trying fpp for the first time
That's how they chose to monetize but it wasn't the original vision for the site – they just horked the business model and didn't think deeply about it at all. Not that they're alone in that.
you cannot work on it yet.
À La Carte TV Channels Agitate Fox Executive
> switching jobs (or having none) doesn't affect whether a hospital will treat you or not

From an american perspective, that sounds like some sort of unattainable utopia.
brew install tmux

to install on osx. If you already had tmux

brew unlink tmux; brew install tmux
What makes you think you need a degree to work for a large company?
I think Ron was referring to the development process, rather than the finished program. The way Lisp languages and environments handle REPL-based interactive development is significantly more powerful and flexible than e.g., Rubython or even Haskell.

Modifying a running program to make a change as you develop it is an incredible speedup, relative to (recompiling and) restarting all the time, and even relative to reloading whole changed files.
Google has done a number of optimizations that enhance asm.js performance while not specifically targeting asm.js. This results in real time performance that sometimes beats Firefox, which has asm.js built in. While I would like to see more effort to the areas of asm.js that are slow, I can't discount the Chrome/v8 team's approach.
Millions of WordPress sites risk hijacking due to flaw in default theme
Which lisp do you use? I've used SBCL and tried using mocl and ECL on mobile platforms, but without any real luck. Too much work getting them set up.
I honestly just wish the filters worked. Half the time I set a $ or distance filter the results come up random and wrong, even including things I've explicitly filtered out.
One of my best friends does this. He's a FTE at a medium-sized company, and his freelance work is approaching his normal FTE salary (which is already considerable, imo). He's been so overworked with the freelance stuff that he's been considering cutting it down. What he wound up doing was hiring a bookkeeper (online service) to manage invoices, taxes, etc, and a virtual assistant (zirtual.com I think) to respond to emails and such. He's been doing both for about a month, and he's cut back his hours immensely while still making the same amount of money. If you're concerned about having to choose, you might want to look into hiring virtual assistants to help you out.

Good luck! Personally, I'm jealous. I can't stand dealing with clients and I'm not disciplined enough to make anywhere close to 60K/year on freelance work. Keep it up (as long as you're happy)!
Indeed,

The graph is almost an essay in "how little raw data can tell you". Are the areas of more women from emigration, age, areas from which many men have been taken to prison, something else?
At $500, even for someone on minimum wage it's not even 1 month wage after taxes. You have to get a pretty fancy one before it starts getting expensive.

This betrays a misunderstanding of how disposable income works. For monthly wages below some n (where is n is determined by the cost of living in your city), a person's disposable income is effectively $0. In other words, someone making $1200/month doesn't have twice as much disposable income as somebody making $0/month. They both have zero disposable income.
Just telling people to choose 5 seems really flawed. You are both telling people that being interested in working at many different places is wrong, and telling them they need to choose 5 (because programmers are going to try to optimize).

The obvious good solution would be to algorithmically recommend startups based on a quick survey. The better solution is to have somebody whose job it is to know all about every YC startup, their teams, culture, and needs spend 5 minutes with you and give a few good recommendations.
The word "vector" just means an element of a vector space: a collection of "things" that you can add together and multiply by numbers. The vector space R^n is defined as the collection of all lists of n real numbers, so you are right in that sense.

But usually when people say that a vector "is" a list of numbers, they mean that if you choose a coordinate system, then the coordinates of a vector uniquely identify it. This is exactly analogous to locations on the earth being uniquely identified by their latitude and longitude: we first have to make a (somewhat arbitrary) choice of coordinates. You wouldn't say that a point on the earth "is" a pair of numbers, though. The case of R^n is confusing, because if you choose the usual coordinate system, then the coordinates of a vector are the same list of numbers as the vector itself.

I like to think of tensors as functions that map some number of vectors to some other number of vectors. But you can add together two tensors (with the same number of inputs and outputs) or multiply a tensor by a number, so you can also think of them as vectors in some other vector space.
You could do worse than use my git-based DNS host, which uses amazon's route53 on the back-end.

But anything scriptable would work.
> We don't care where you went to school or which companies you've worked at. We only care if you can code.

Filtering candidates by pedigree is one of the biggest mistakes companies make, particularly in Silicon Valley, but filtering by coding ability (as measured primarily by online tests) is just as naive.

There are tons of people who can code themselves out of a maze but struggle to ship code that solves real problems and creates real value.

A lot of startups would do better with mediocre engineers who can see the big picture than superb engineers who can't see beyond their monitor.

From https://triplebyte.com/manifesto:

> Companies should not have to make recruiting a core competency.

This is incredibly flawed, especially for startups. Recruiting is a two-way street. If an early-stage startup can't effectively sell itself to candidates, chances are it won't be able to sell itself to customers, partners, etc.
I don't use an editor that runs in the terminal so I only ever want a tool like this for the command mode. When you use it right it's pretty nice, but the first time I was unceremoniously dumped into vim. (Yes I know about the EDITOR variable)