skysight-inc/HackerNews huggingface dataset:
I myself think hearing about cold-call reference checks from past coworkers when getting a job would make me think twice about an employer. It's annoying, perhaps inconsiderate -- that doesn't mean it's unethical, or a show of power of all things. The main reason is that here my friends are getting annoyed, and to a small degree the information leakage. (You could probably also get in touch with a set of people you select, without going around the candidate.) A non-cold-call check, between people that know each other, is different because it lacks this factor.

I think you, informally, have a reasonable expectation of privacy that people won't go broadcasting stuff about your behavior in an office, but not a reasonable expectation that people would not help individual colleagues avoid wasting five or six figures of money, not to mention a lot of personal stress and annoyance, by trading money for time with a certain person. The office is not a confession booth, or even a private household. You're probably willing to share details about how you got treated by sellers on eBay -- likewise, the workplace is not a completely personal situation.
Most lives already end with a disease. You don't die from old age.

Investing in things other than not-freaking-dying - now that's awkward.
Show HN: Everedu – Make classroom more interactive
I would love for Mozilla to find other means of funding online content besides advertising. In either case I'd love to see them take a hard stance on privacy and against tracking.

They should block trackers that have no effect on website features and restrict and monitor the ones that do effect features.

...and this is another reason Mozilla needs to have their own search engine. They could have much greater influence on these this things if they had the ability to punish bad behaving websites.
Researchers Predicted in 1971 That Debit Cards Would Become Ultimate Spy Tool
ublock is more about ads, and this is tracking.

While they usually come hand in hand, Facebook ads (eg: while on facebook) don't add additional tracking.
>Why would you ask that?

Maybe because the two comments are verbatim and posted at roughly the same time?

If OP didn't want there to be a connection between the two accounts, they shouldn't have copy-pasted content between them.
There's also water privatization.
Not worth getting excited about. I started this sub-thread because I thought it was an intriguing, somewhat counter-intuitive explanation for the experiment's results. I think that the discussion in the sub-thread has provided pretty ample evidence of at least the meta-point I was trying to explore. But I don't bear any personal ill-will toward other commenters here; other peoples' perspectives are their own, and part of the point of the Internet is to share them.
Becoming rich within 1000 years is more plausible than within ~80 years. Unless the concept of being "rich" disappears due to progress.
> We do NOT need this free market.

The article says it is difficult to establish new trailer parks, as the authorities will not give permissions. So I don't think it is a free market. It is artificially created scarcity.
> Avoid if possible. The code was written by a colony of drunk monkeys, in an era before anyone understood the basics of modern cryptography; I'm really not sure which is worse between gnupg and OpenSSL. Of course, GPG is the standard for encrypted email, just like SSL/TLS is the standard for web sites, so you may have no choice...

Are there any viable FOSS implementations of the OpenPGP standard other than GPG? Detached GPG signatures seem to be the most common mechanism to validate software distribution and similar.
Unless there is something I'm not understanding here, the income isn't tax free. It's just taxed at the individual rather than corporate level.
Ask HN: What do you think about cloning startups?
Let's say a startup company is offering a service to other companies in U.S. and becomes succesful. I want to do the same work they do in U.S. in France.

Both in legal and ethical terms do you think this is a good thing to do?
So...basically, the days of Flash apps and navigation, like when local restaurants would pay some dev godknowshowmuch to make a whizbang Flash app that made it impossible to find just the phone number or address without clicking some obscure button placed in an erratic location?

The technology to make what you want is possible. It's been arguably possible for a very long time. But it's hard to make, and hard to design. And that's even before considering mass usability aspects.

I may be getting old but text with graphics and linear scrolling are just fine. I expect to be entertained by linear movies and TV shows and podcasts for a very long time. We've had the technology and capacity to store "choose-your-own-ending" movies on DVDs for a very long time...and yet, that almost never happens, for reasons of usability, consumer enjoyment, and production overhead.

Hell, we've had the ability to do pop-ups and choose-your-own-adventure books for centuries now. And I'm glad most novels and books have been linear page turners.
Illegal-sounding + extremely popular + not actually illegal = Often great investments.
A 5 minute interview [1] is only 845 bytes. This is brilliant.

EDIT: I was wrong, it's not actually the whole file, just a pointer to the online resource. http://file.org/extension/wax

[1] http://thin.npr.org/s.php?sId=408987225&rid=7
> scrypt has nice properties that bcrypt doesn't, and gets those properties by design; it turns out that in practice right now bcrypt has some nice properties too, though they seem accidental.

Can you elaborate on what you mean by "nice properties"?

> If using GPG means you can delegate away all your crypto design, use GPG.

Using which key types, ciphers, etc? The most common recommendation seems to be for 4096R keys and SHA2 hashes; the latter is consistent with the recommendations posted here, but the former seems to disagree with the comment to not use RSA for asymmetric crypto.
California Healthcare Hotspotting
Blade Runner: anatomy of a classic
Apple is supposedly getting into the search engine business. It'd be great if they and Mozilla got together, both companies believe in user privacy and could complement each other in getting things down
Housing for Israelis isn't a big problem; housing for the dislodged Palestinians is a different question.
As I understand it, this depends on the what the attacker has. If they have a FPGA or GPU, you need many rounds of PBKDF2. If you use scrypt, which was designed by cperciva to negate some of the advantages of FPGA and GPU, you don't need so many rounds to keep it hard to crack. Use https://hashcat.net/oclhashcat/ to benchmark.
What would you recommend that isn't derived from the OpenSSL codebase, for C projects that can't use OpenSSL for license reasons?

Your recommendation for TLS elsewhere in the thread was:

> You should use BoringSLL, LibreSSL, Go crypto/tls, or OpenSSL, in roughly that order.

Three of those are based on OpenSSL, and Go crypto/tls presumably only works with Go.
That's cool, as long as everyone has both options.

Thousand years later, first colonists in a different galaxy:

- Remember that dude from our childhood?

- Yeah, choosing to live a mere 70 years - so weird...

- Never mind, let's keep Terra-forming..."
> Advertising does not make content free. It merely externalizes the costs in a way that incentivizes malicious or incompetent players to build things like Superfish, infect 1 in 20 machines with ad injection malware, and create sites that require unsafe plugins and take twice as many resources to load, quite expensive in terms of bandwidth, power, and stability.

That's a good point. Reminds me of "coal energy is cheap"...except for the millions of people it's killing or the billions of dollars paid in healthcare costs. And that's without mentioning coal is usually heavily subsidized by taxpayer money.

In the same way advertising that's more and more focused on monitoring everything you do or say online (thanks to all the companies that don't want to enable end-to-end encryption in their IM's - Google, Microsoft, etc) is causing a lot of harm as well.
> As shitty as it is, people should have the right to do something like cheat on their spouse without some government official waving the evidence in your face for compliance.

A lot of these avenues of privacy were only really enabled by the growth of large metropolitan areas.

In smaller districts, you can't go to the inn and sleep with another woman because the innkeeper went to highschool with you and will tell your wife.

For the vast majority of human society, you had to try a lot harder to hide your activities if you wanted to go against the current social mores. It's not really clear to me that the level of privacy we can easily attain today, even if it is a social good, is not outweighed by the group benefits of social cohesion, and newly found benefits of catching criminals after the fact that CCTV would provide/encourage.
Social security requires 40 quarters (10 years, not necessarily consecutive) of pay-in, then bases it on your maximum wages. (It may be more complex than that).

However, many statements assume that he's making no income and paying no social security taxes in the interim. He wrote a book, presumably received royalties, and has done other "side jobs".

He may very well have continued paying social security taxes in his "retirement."
Show HN: Pext – Turn Messages into Memes
Any non-market action will distort market forces. What he means is that the EITC is a softer kind of distortion. Since the EITC is essentially a matching contribution to the employee's earnings, it still allows decisions about wages to be made at the margin, as opposed to a minimum wage which mandates a hard cutoff.
tax-free compensation

IANATaxLawyer, but this seems like a misrepresentation. Those who own REITs do pay taxes on any income they receive from those. It's just that the REIT itself is not paying tax first. Are you actually objecting that REIT income is not subject to "double" corporate taxation about which tax reformers occasionally complain? This seems silly, in light of how many corporations arrange to pay "zero" income tax.
Optimized ASM means code that only very few people are able to review, and only with considerable time and effort.
If security is the primary concern, I would argue that optimized ASM becomes a liability.
The lack of justifications makes this as useful as anybody else out there claiming "use X. Don't use Y".

Eg:
> Avoid: AES-CBC, AES-CTR by itself, block ciphers with 64-bit blocks --- most especially Blowfish, which is inexplicably popular, OFB mode. Don't ever use RC4, which is comically broken.

Why not 64-bit blocks? What's wrong with them? How do they affect us?

Mind you, I'm not saying the statement is incorrect, but with no justification for it, I'm not convinced why I should avoid them.
Apple believes in user privacy.

Your naïveté is touching.
Google obviously have systems in place to allow employee access for absolute emergencies - but alarmed in case of unauthorised access.

in any case, the analytics data is anonymised and as such cannot be used to identify you. google goes to huge lengths anonymising data to aggregate you as a user into groups of millions for advertisers to bid on, you are simply not a big enough fish for special treatment.

edit: an explanation for downvoting is customary.
The Basic Income Guarantee (2013)
This strikes me as an amazingly rational approach to build vs buy. Including trying to estimate the entire cost.

A solution you build yourself costs more than just the time of the engineer to build the first version, the work revolving around maintenance and improving it, when that could be borne by an outside company, could be quite high. Also, when an outside company makes it, they can amortize the cost of a new feature across multiple customers. And people will often build things that work with that product, saving you even more effort.

The cost of buying though, is also of course not just the money you pay (free and open source still have a significant cost). How complex is the bought system vs the one you would build? How hard is it to replace with something else? How well tested is it? I've done the 'buy' approach with some open source things and services before and super regretted it when it took longer to debug than writing my own and maintaining it would have.
They were desperate to release something ASAP. The enemy is at the gates.
jobserve is where I get my contracts from. Bare in mind contracting is different from freelancing.
i am either part of the solution or part of the problem
the four strategies also reminds me of the pressures facing those living on low incomes in the USA, not just those working in salons.
Instead of condescension, please provide some sources and state your beliefs in a productive way.
Oh I realise that, I used to use them, I do roughly recall their benefits ;)

I was just asking out of idle curiosity, nothing more.
And in case anyone is wondering, turning on Firefox's experimental Tracking Protection feature does block Google Analytics on Mozilla's own web site.
Would have profound impact on how we value our own lives (and others). If you are 60 you might get a motorcycle because what the hell. Worse case you crash and lose 20-30 years of which only 10-15 are good. With aging out out the window you could have centuries to lose.
So perhaps it's more like ghostery than an adblocker.
Which policies, and how?
Has anyone checked https://github.com/google/end-to-end ? I want to believe google did their due diligence.
Hrm. I can't draw, but it seems everything I try ends up looking like some kind of bug: http://r.weavesilk.com/?v=4&id=lwe105ew7vm
Actually, I'm quite aware that the output half of my "social skills" is horrible.
This seems great as a learning resource. Looking forward to a TCPPPL-like comprehensive reference.
Yes, that was my intention with 'tested'. I'm sure IBM have the resources to jazz up something a bit more application specific if they really wanted.
Heh, this is a blast from the past. Back in the day Chris Lampton and I wrote a character editor for Might and Magic 3, and I was surprised to discover not long ago that it is still in use by MM3 fans. This is a program that was written in C++ in the early 90's if I recall correctly. http://shrines.rpgclassics.com/pc/mm3/downloads.shtml
But people won't use slow code. Look at RSA-1024 on DNSSec.
I have a q5 (the least powerfull bb10) and boot time is not that horrible. A little long yes but still less than 5 minute. I don't mind. Overall, it is a good phone (with glitch, yes but does other phone os don't have some ?).

I will probably switch to android however because of some app missing. The there is no app on blackberry is not true anymore, but still many are missing (uber, skype is buggy...).
Well, Apple makes most money with hardware. Unlike Google who makes most money with ads. So at least in theory Apple can more easily invest in privacy.

EDIT: Check their last quarter's results, Apple makes only 6% of their revenue with online services: https://www.apple.com/pr/pdf/q1fy15datasum.pdf
> > However, some users didn't like having to think about whether the source and destination were on the same mountpoint

> That's actually a good thing, because it makes scripts more composable.

I argue that it actually precludes any form of composability:

http://jstimpfle.de/fun/composability.html
You get to watch Sam Zell screw over the employees of the Tribune Corporation, use their pension money and assets to service the debt, then run the corporation into the ground while Mr. Zell plays publisher and CEO?
IMO DuckDuckGo is the obvious choice of who to partner with. DDG already focuses on privacy as a defining feature, its why I use then as my primary search engine.

Seems like a win win for both Mozilla and DDG.
Most of is is handwritten. D3 for example is only used for the colour picker.
Or worse, the CEO says he still likes to get involved in writing the code.
Fun stuff. classes.dex in the apk has some interesting strings:

select * from js_injection where name=?
select * from pwd where hid>=? and hid<? order by hid

CREATE TABLE IF NOT EXISTS local_ap_info ( hid integer primary key autoincrement, ssid text, bssid text, security_level text,
pwd text, x_user text, x_pwd text, stat text, lati text, longi text, type text, html text, create_dt text, last_update_dt text)

CREATE TABLE IF NOT EXISTS private_ap_info(ID integer primary key autoincrement,ssid text,bssid text,security_level text,
pwd text,hid text,create_dt text,last_update_dt text,last_update_opr text,wkflg char(8))

CREATE TABLE IF NOT EXISTS unlock_ap(id integer primary key autoincrement,ssid text,bssid text,security_level text,
pwd text,uploaded integer(1))

Cleaned up your sqlite commands:

sqlite> .tables
pwd
sqlite> .schema pwd
CREATE TABLE "pwd" ("password" TEXT NOT NULL );
sqlite> SELECT * FROM pwd;
a30e502c125899a41cb562a7a36b4bd0 c58675db0ba9266fb5307982e4368ab0 5631e619f6e280c0740704a25a8298f6 ...

Looks like it may not be fully seeded on install?

Edit:

Getting a different result for the database in the apk:

$ sqlite3 ap8.db
SQLite version 3.8.10.1 2015-05-09 12:14:55
Enter ".help" for usage hints.
sqlite> .tables
android_metadata ap_info js_injection pwd
sqlite> .schema pwd
CREATE TABLE pwd(hid integer primary key autoincrement,pwd text);
sqlite> select * from pwd;
1|df5b74fb19b8b150bcf07bbb4e43456d
2|a1b574f8cf46c461f1e15fa52e3b2110
3|c8c28c03de3e02d7814d86b14dfcf1f5
4|7635726149e6d0f0e8f3e9224b8109dc

Most "pwd" are 32 chars long, some are 64 chars, and a few are 96 chars for some odd reason.

ap_info, and js_injection tables are empty so you'd have to get at it after syncing to their servers.
and yet you still can't buy one in a store and online orders are late June early July.

Someone doesn't have their facts correct and I don't think its Apple hiding stock somewhere to pretend they are selling out.
There's also an O'Reilly book available for preorder, authored by Mozilla's Jim Blandy: http://www.oreilly.com/pub/e/3291?reminder

Packt also has a book on Rust which should be available soon, though I've never heard of the author and so I can't speak as to the quality: https://www.packtpub.com/application-development/rust-essent...

There's also this draft of a Kickstarter for a book on Rust, though again I've not heard of the author before: https://www.kickstarter.com/projects/1712125778/1409335994?t...

Oh, and there's at least one more book in the pipe, and this one in particular is being developed by members of the Rust community... expect an announcement soon. :)
Having used Haskell a lot, I still feel pretty fine about C++ or C# type systems.

It's Java's that drives me absolutely insane. Type erasure makes me want to pull my hair out.
so, this is adblock?
It's pretty hypocritical to talk down like that, "it's not how you want reality to be," while at the same time asserting that the resources of wealthy Americans are used for purely productive purposes. Somehow putting money into houses is "consuming" it whereas letting the wealthy get richer from finiancial instruments is "productive purposes."

Maybe you should join the rest of us in reality someday.
I think the point is that this is a USB drive that looks to the computer like a keyboard, so it will run without confirmation.
I understood copy and paste without any problem.
Thanks. It was a bit of a pain to make the status panel GIF; I hadn't kept the camera stationary, so I had to do a lot of image correction. So I'm glad to hear someone liked it.
Seems a bit hyped up - my gran had a similar lens inserted in her eyes years ago. I'm not sure how it's 'bionic' - just looks like a well made plastic lens.
First to the races doesn't necessarily mean quality.
Where using Bitcoin is a bad idea
This should be doable for well-written trackers like Google Analytics that use script tags with the "async" attribute. In fact, those are probably already likely to load after the main content.

For ads or trackers that are embedded as img or iframe elements, I think this is also viable and could speed up page load time.

For ads or trackers that use inline scripts or non-"async" script tags to load content, the web browser has to block while loading/running the script, or risk breaking the page. Otherwise things like document.write() would have incorrect results when the script runs later.
> scrypt is asymptotically much more expensive to crack.

How so? The cost of password cracking generally scales completely linearly, is there an attack on bcrypt that makes the cost sublinear? I would agree that scrypt probably has a better constant factor on typical hardware.
More along the lines of that joke about "wifi" being added at the bottom of Maslow's hierarchy. [0]

The sooner we stop this nonsense about access to the network being restricted geographically by anything other than a complete lack of infrastructure the better off we'll all be.

People won't want to do stupid things like layering a separate network onto their customers access points ( hi xfinity ) or having open networks ( too many small businesses ) or having wifi passwords on a sign by the barista ( please tip the barista ).

0. http://www.daisydowntown.com/blog/2014/2/19/maslows-hierarch...
I agree. I personally found these two blog posts to be useful introductions to ownership and borrowing:

http://blog.skylight.io/rust-means-never-having-to-close-a-s...

http://arthurtw.github.io/2014/11/30/rust-borrow-lifetimes.h...
CCleaner Pro v4.19.4867 Final Crack Plus Serial Key Full Download
I think that was more or less the point of the GP minus the condescension bit. Making unqualified statements about what you believe about a large corporation is roughly on par with contesting that particular belief.
C++17 Fold Expressions
Pardon my ignorance, but is the NaCl referred to in the gist this NaCl? http://nacl.cr.yp.to/ Or does it refer to libsodium here? https://github.com/jedisct1/libsodium

I realize that the library is probably available via my package manager, but it'd be nice if the install page (http://nacl.cr.yp.to/install.html) linked to an archive over HTTPS and had some signatures to compare hosted elsewhere.