skysight-inc/HackerNews huggingface dataset:
Property tax is assessed based upon on the value of the property, which is often in large part determined by the value of the land it is built upon. Same house in SF and the Midwest - the Midwest one is 5x cheaper. ~80% of the value of the house is the value of the land.

LVT is a tax that is intended to tax 100% of the value of the land and 0% of the value of the property built upon it, so in theory the house in the midwest would cost the same as the one in SF, but the tax you'd pay to live in SF would be higher.

Property tax would discourage this type of behavior (which is good). LVT would eliminate it entirely.
I've reviewed the code of several of these libraries (I won't say which ones I have which levels of confidence in), and: short summary: if you want to be the site that reincarnates 1990s RSA bugs or 2000's-era curve bugs, go ahead and use a TLS library nobody else uses.
Mandatory read about an old nice and innocent man with an ice-cream cone...

http://www.publicintegrity.org/2015/04/03/17024/warren-buffe...
... and then it ended up at the top of HN anyway.
As a small-time reverser I can tell you, even without having heard of this program before now, that it is insecure.

The rule of thumb: If it runs on the client's device or if the client can read it then it can be cracked, inspected, seen, analyzed and decoded. There is nothing you can do to protect code/data you send to the client's device (for long).
Some of the risks have in fact happened... When someone who works in a high government office is slut-shamed out of their position because their personal email was gobbled up that's a pretty big concern.

The doesn't even go to show how many people were shamed into doing things other than quit their job... Or stand down as a political opposition... or shut up. That's just part of it.

These things are happening and you just don't think about them, or hear about them, because for the most part people have short term memories or are completely complacent. Hell, look at the celebrities whose accounts were hacked, and embarrassing, personal photos leaked, not by the govt in this case, but our governments have this same information. You don't think they'd use it to get you to spy on someone, or inform on others?

When you have a surveillance state, everyone is an agent of oppression.
> Avoid: constructions with huge keys, cipher "cascades"

Can anyone please explain what's wrong with e.g. 4096 bit keys (instead of 1024 bit) and piling 2-3 different or same encryption passes? Performance implications are obvious; what are security implications?
150% to 300€ sports betting bonus
If emacs expects 3 modifier keys, and emacs is wildly popular with programmers, then why hasn't someone made a keyboard with the windows key renamed and remapped to the missing meta key?
Well, Tet showed that the USG had either consistently lied or was consistently misinformed about the actual strength of the North Vietnamese forces, so it shook public confidence in Washington; the US casualties were far higher than confident military forecasts; and the American public found the US airpower tactics horrifying and the wanton brutality of ARVN "allies" reprehensible. (North Vietnamese forces were no less brutal, they just didn't have embedded reporters in their units.)

In many ways, the Tet Offensive just reinforced the lessons of Ia Drang, from half a decade prior: US forces could use vertical envelopment, precision artillery and CAS to do a hell of a number on North Vietnamese units (though I Corps was almost completely cut off logistically by NVA activity, forcing a major airlift to keep operations going); but the Viet Cong/NLF forces could, operating autonomously in the countryside and even in cities (as seen by the NLF siege of the Saigon AMEMB), still inflict significant casualties on US forces by using ambushes, traps and rush-to-close engagement tactics to neutralize US technology.

Arguably, had the US "held the line" instead of engaging in theatre force reductions, then perhaps the North Vietnamese threat could have been contained, and perhaps even rolled back -- but at the cost of decades of combat, massive American casualties, the utter desolation of most of Vietnam, and domestic unrest in CONUS. And, even then, the ineffective, delegitmized and corrupt South Vietnamese military and government would have faced decades more of revolutionary violence that it was unequipped to face militarily, socially or politically. Saigon had as good a chance of long-term survival as Rhodesia or French Algeria did, and the US was simply wasting youth and treasure trying to keep the Communists out.
Extensive discussion yesterday: https://news.ycombinator.com/item?id=9592038
I'm reading Philip Cafaro's book on US Immigration from University Of Chicago Press
http://www.amazon.com/gp/product/022619065X

He's progressive but tackles a subject many liberals and libertarians avoid: that overpopulation (from immigration) makes many problems worse, drives down workers’ wages, drives up inequality, drives up unemployment, leads to political disempowerment, and creates sprawling suburbs which destroy habitats.

These problems, he argues, fall disproportionally on the immigrants themselves and resident poor. He also talks about US policies which are causing problems outside the US, motivating people to move here in the first place.

So far its a compassionate treatment of the subject. He doesn't favor border control, and does favor amnesty to those here already.

It seems hard to talk about societies problems without talking about overpopulation.
Explore/Exploit
What I start thinking after reading that is - how could an individual investor do this in a way that felt/seemed less sleazy and might actually help people? Most people's go-to seems to be to try to keep the rent low, but that doesn't really accomplish anything but keeping the same people in the same slightly less grinding poverty for the rest of their lives. What if you raised the rent like they say, but put some of the money towards some kind of education or life-counseling class on-premises instead of just pocketing it all?

I thought of that when I remembered a recent discussion on debt collectors where one collector decided that, instead of just hounding and threatening the debtors with dire consequences, they would actually help them make more money to pay the debits by giving them career counseling, resume help, interview practice, help finding jobs they could do, etc. You get your money and improve their lives at the same time.

Why not try the same thing here? I bet a lot of the people there could be making more money if there was somebody there to teach them things, train them in new skills, help them out with logistics, transportation, contacts, etc. Why not dream up new ways to help them instead of new ways to fuck them over?
Google Adds Traffic Alerts to Maps
Firefox tracking protection decreases page load time by 44%
If a former employer or colleague ever gave any of this information without me giving them as references I would be pissed. Maybe it is a cultural/personal thing (no FB, no G+, no twitter) but I take privacy VERY seriously and I expect people I deal with to do as well. If I have to provide a reference, I always contact the person first and ask if it is ok to give their details to the company that will contact them. I actually had a few people that asked me not to give their details (not due to the reference, but because of sharing contact details with people they don't know). On the other hand, I've been in the Bay Area for a bit, and seems everyone and their mother is happy to let everyone know every minute of their fucking lives, so I can understand why people think it isn't a big deal.
I didn't see a problem with it. The magazine is "The Atlantic" which has a general readership.

If one writes a program to analyze Shakespeare text, he might describe it as "converted the text into a multi-dimensional vector space" or "mapped ngrams into a point cloud" -- and that would be acceptable lexicon for a Dr Dobbs Programming Journal or possibly ArsTechnica. However, for The Atlantic, it seems reasonble for a journalist/editor to write that as "convert the plays into data."

Yes, Shakespeare the text itself was already "data" so in a pedantic analysis, saying "converting data to data" seems pointless but that's not the level of indirection the general readership is at.
> no proof of customer base

What are you basing this on?

> is literally more work than walking down to the supermarket and picking up a pack of precooked chicken

Have you used Munchery before? If so, how exactly is it more work?
This is in the context of symmetric keys, so I'm guessing "huge keys" is a reference to the fact that "448-bit crypto" is a giant red flag because it screams "we're using blowfish".
I don't care how hipster you are, making coffee requires a lot less intelligence than brain surgery. That intelligence should be compensated.
"Moth cave" http://r.weavesilk.com/?v=4&id=rya105c4jxy
These people are not building anything, there are the same amount of houses before and after they buy them.
Using your palms to press the ctrl keys is only seriously possible on some curved keyboards. Everyone else, who prefers to touch keys with their fingers, like they were meant to, is going to do the sensible stuff and put the more frequently used modifier in the more easily-reachable place.

All this press-ctrl-with-your-palms fad is a problem solved in the wrong place.

And I have to say I dislike the tone of that page, too:

> Swapped but never had a problem [...]
> Because you don't actually type that much.

Right.
On the stop-motion video with your kid - that's totally awesome!!

I'd love to do something like that with my daughter. What software did you use to put it together?
Teenagers have a minimum wage, it is just different (lower).

I actually don't understand your second point, but markets can't exist without the rule of law; markets require a notion of property rights, how can anyone think otherwise?

In a well governed society laws exist to facilitate the exchange of goods and services, how can exchange occur if people cannot trust the contract they engage in will be upheld? As difficult as it might be for you to imagine, laws and arbitration can exist without a government which centrally plans the minutiae of everyday life.

Again, your argument seems to be that by the snap of fingers and the degree of those with power, walmart can just magically raise wages. That's a childish belief.
How history repeats. A company takes a BSD-licenced work, closes the source, and makes money selling "improvements" while the original authors get nothing.

Instances like this is why the GPL has the teeth people complain about. Without them, GNU would've been cannibalized decades ago.
Put Ctrl on left Alt. And left Alt und right Alt (Alt-Gr). Then you are free to finally map Caps Lock to Escape. After that map left Ctrl such that left Ctrl+E/S/D/F is Up, Left, Down and Right.
Human: http://r.weavesilk.com/?v=4&id=ugu105c8448
But let's really get down to plain English. What is the best analogy to use when explaining public key cryptography to an educated, non-technical audience? I've used the door-with-2-locks analogy previously. Is there a clearer analogy?
For every person that "makes it", there are probably a million or two who do not.

Find your passion, do the best you can, learn, improve your skills and you might get lucky one day or just live a good life. Money is nice but its not everything.
Here are some google queries that will keep you reading for literally weeks on end:

* 'diy hydrophonics'
* 'arduino garden automation'
* 'computerized garden controller'
* 'build aquaphonics system'

I live in the Netherlands and around my corner is a growshop - basically selling all sorts of technology for growing plants indoors, with the main intended audience being marihuana growers. The demo setup they have, contains chili peppers though, for legal reasons. Anyway, their book sales section has 3-4 meters of books on the subject (not marihuana specifically, just all sorts of automated/high-yield/indoor plant growing). Spending, say, 100$ on books from this result page http://www.abebooks.com/servlet/SearchResults?kn=hydrophonic... will get you 50 cms of reading, yourself (I see there's even a book called 'Chemical Gardening for the Amateur' from 1939 on there - I'm tempted to buy that one myself...)
yes in that case, the uniqueness is the valuable thing. if an artifact is one of many, like a chinese terracotta solider - it is less valuable than something more unique.
I didn't read the article that you vaguely describe, but much of what you're suggesting sounds like gimmicks that would detract from, not enhance, understanding. The written word is the most effective communication medium for real understanding, because it's the only one that's actually designed. Images and sounds work at the animal level; words let us convey intelligent thought. Videos and songs... if you want them, they're out there, but you'll learn much less from them.

Much of the rest is the sort of thing that the browser can, and should, handle generically - I can click on a word and look it up in Wikipedia, or on a place and look up its pronunciation, because I use Konqueror and it has these tools (and has for a decade, but sadly very few people seem to use it). It would be a waste for an individual site to build that in.
And what is your last comment about and how does The comment make HN or the internet better? There are lots of places where typical internet behavior is typically acceptable and often encouraged. HN, for better or worse, is not one of them. That means it can't meet everyone's expectations.
Good move, that is essentially a default.
I thought TET was mostly VC and the USA held back in built up area's instead of deploying Berlin or Stalingrad style tactics.
This is very cool looking. Can anyone explain how these images are created? Or know if the source code to something similar is available on Github?
You could say the same thing for any "on-demand" startup out there. It's this kind of intellectual laziness ("It failed in the past so it couldn't possibly succeed now.") that prevented electric cars from happening sooner.

Some on-demand startups will work out magnificently and many others will not because the economics just don't make sense. In the case of Munchery, I think their valuation is very reasonable when you consider it's an order of magnitude less than that of one of their indirect competitors Blue Apron who is seeking a $2 billion valuation (as mentioned in the article).
I would imagine that it's good because it doesn't require any more information that what a song sounds like. A user hears a song they like, records it there and then and that shows 'interest'. Twitter on the other hand needs a name / artist.. you can't really analyse a tweet saying "I like that song that goes du du dud dud dahhh"... but Shazam actually can.
i think she is saying that irrespective of consumers reason for avoiding industrial produce - the author is challenging industrial producers to do better.

casting a wide lens over consumers past and present, she uses her understanding of history to critique present day tastes as ahistorical and challenges consumers and producers alike to evaluate food on a case by case basis - rather than behaving a certain way because of assumptions that are just too general.
PolarSSL and MatrixSSL definitely seem far off the beaten path, but many projects use GnuTLS (both as one of the more well-known non-OpenSSL codebases and because it has a GPL-compatible license). I'd be interested to know if you're concerned about it in particular.
> There is a class of crypto implementation bugs that arises from how you feed data to your MAC, so, if you're designing a new system from scratch, Google "crypto canonicalization bugs".

I get a whole bunch of links about javax.xml.crypto.dsig throwing exceptions, which wasn't terribly illuminating.

I think the reference is to the bugs discussed on page 21 here: http://www.contextis.com/documents/33/Exploiting_XML_Digital...
but I'm not sure.
> Owner is saving for a couch (Kevin Rose said this after his cover story in a magazine)

Not that I didn't believe you, but I wanted to hear it for myself. I finally found it on Diggnation:
http://revision3.com/diggnation/2006-08-03/

06:30 - They start talking BusinessWeek's cover story: "How [Kevin Rose] made $60 million in 18 months"

06:50 - Rose: "Here's the deal - I don't have 60 million dollars. I don't have 1 million dollars. I don't have any thousands of dollars."

Note: they bring up the couch because the episode starts off talking about Kevin moving out and the lack of furniture in his new place.
* If you're concerned about attacker data hitting the AES core, Salcha20+Poly1305 doesn't have that problem, and is generally preferable to AES-GCM in every scenario anyways. There is no scenario I can think of where you can do CTR+HMAC and can't do Salcha20+Poly1305. If you have to stick with standards-grade crypto, GCM is your best bet.

* The track record of userspace RNGs vs. kernel RNGs speaks pretty loudly. In any case, we should be clear that you're advocating for "bootstrap with /dev/urandom and then expand in-process", not, like, havaged or dakarand. We're closer on this than people think.

* I'm not even talking about people writing their own RSA. Do I need to say that? If so, recommendation #1: don't write your own RSA. I'm saying that all else equal, if you're using good libraries, still avoid RSA, for the reasons I listed.

* In fairness, the CTR problem you had is also a threat to GCM. This used to be why I recommended CBC a few years ago: because we kept finding gameover CTR bugs in client code, and not so often CBC bugs. My opinion on this has changed completely in the last year or so.
I've read it. I think if I were born in 1950 it would be worth its weight in gold. Someday someone will write a similar book that would have worked perfectly for people who were born in 1980; unfortunately, by then it will be too late for us and instead the next generation will debate its (in)applicability to their lives.

It's not fatalistic. As I've been saying all along, you have some control of some things. Exercising that control constructively is necessary. It simply is not sufficient.
I went through this recently and was very put off by it. A team member left for a (dramatically better paying) position elsewhere. The day after that team member left, our manager was making it very clear that they had left us to work on something trivial (and maybe they did, but it's no one else's business) while we were left behind working on Things That Really Matter (medical devices). It wasn't the first time that a Senior Manager at this place was trying to convince the team that "...what we do is making a difference."
Here’s How to Make Millions as an Art Forger
Direct link to image: https://upload.wikimedia.org/wikipedia/commons/4/46/Diffie-H...
Anatomy of Some Slashdottings
I live in an equity lifestyles mobile home park near denver. My job pays me income in the 87th percentile of all workers in america. Not a sex offender park here.

The article does not mention it of course but the reason parks and apartment landlords are able to rip off the poor is because the zoning laws all over america have closed off the opportunity to build more mobile home parks and cheap apartments. The fact that over 50% of all voters live in their own homes means that the politicians are able to sell themselves out to landlords and create zoning laws that prevent developing land that would allow placement of mobile homes. It's all about driving up property values and exploiting those who are at the bottom.

America is not really about the american dream of capitalism and entrepreneurship. The american dream of about using the government to put the squeeze on the unprotected ones.

I would go further and comment on trailer park demographics, but I don't want to get downvoted.
Rocket launch: http://r.weavesilk.com/?v=4&id=jpw105cfr2t
It reminded me of Cialdini's "Influence: The Psychology of Persuasion." I'm curious if it's also the work of a similarly calculating social psychologist.
Persistence of Long-Term Memory in Vitrified and Revived C. elegans worms
> Can anyone explain how these images are created?

It's using JavaScript (D3) and Canvas. There's an interesting mix of JavaScript libraries included in addition to D3: jQuery, Underscore, Knockout...
Adobe Illustrator CC 2015 Crack and Serial Number Full Free Download
Universitas 21 Ranking 2015 results
> Why couldn't that happen today? Presumably Wal-Mart could lower their executive pay and undercut Target in the current wage environment, and yet they don't.

You're really asking why executives don't cut their own pay?

> If you raise the minimum wage, it will raise the costs of all businesses in a market by the same amount, assuming that they all have the same cost structure (same basic wage and worker efficiency).

They don't all have the same cost structure, so it would be rather silly to assume that.

There are many companies that are not gigantic corporations with overpaid CEOs. If you only care about Walmart and Target, then yes, prices will rise uniformly. But employee-owned cooperatives, for example, will be completely unaffected. Places that already pay their employees a living wage would also be unaffected.
great study...I hope the cycling program will continue and expand in the number of students affected.
I found myself getting into the same old dull routine, purely out of habit.

So I wrote a 5 year plan.

It forced me to think through what I wanted to accomplish in the next five years, and what made me happy.

Every five years or so, I revisit it.

Having goals in mind helps.
If you already know vi then keeping them as you move over to Emacs makes sense. Otherwise I'd recommend not doing this, as vi keybindings are an airbrake for productivity.
I think the core point here is that they're not evading British taxes - it quotes a tax bill of many millions of pounds...
because it's registered in the name of an off-shore company? pretty much any HNWI doesn't bank in high tax jurisdictions so yeah they're all tax evaders. the richer you get the less tax you pay.
I went throught the hassle of not doing what you recommended, unaware, and it is funny how often you look for stuff to simplify Emacs usage and you find bbatsov.
>I fail to see, however, how actively restricting building, i.e. supply, is going to alleviate tensions in the market. Anti-development people use an argument that is very similar to "build it and they will come", only in reverse: if you don't build it, they won't come. Believing that they will be able to deplete demand by restricting supply.

Well, it keeps turning out that 80% of new housing construction targets the ultra-high-end luxury market. You would think this would push down the prices of lower-end housing through supply/demand, but then the luxury apartments get turned into ghost apartments for investment purposes, leaving even the high-income without a place to actually live, with the result that sometimes increased housing construction actually increases prices.

And that's terrible.
RxMarbles – Interactive Diagrams of Rx Observables
See I just write 1/5th of a recommendation and leave it open-ended so Colin or 'pbsd can make it look like I was smart to begin with. Yeah... Blowfish... that's what I meant... :)
Student Evaluations: Feared, Loathed, and Not Going Anywhere
There was a GnuTLS vulnerability introduced in 2000 was discovered in 2014 due to an audit. To summarize there was a refactoring that had no accompanying test coverage that had the effect of inverting a check.

Bugs happen to everyone, but the process that led to this one is really concerning. (OpenSSL certainly has bad process too but as the GP mentions, more people are hammering on it.)

This blog post has more (including an LWN article about it):

http://gehrcke.de/2014/03/gnutls-vulnerability-is-unit-testi...
Any love for LibreSSL?