skysight-inc/HackerNews huggingface dataset:
But this isn't disk encryption! Filesystems have metadata: which is where a MAC can go, next to the filename.

There's just no way this should be unauthenticated XTS, this is simply the wrong mode to use, you should use an AEAD. ChaCha20_Poly1305 - RFC7539: https://datatracker.ietf.org/doc/rfc7539/ - makes much more sense. Faster, too, on the target mobile devices which have poor crypt performance.

I don't think this should be merged early or as-is. Unauthenticated encryption is against good advice and a bad idea. Standardising that is an even worse idea.

Edit: I do see that they're intending this as a minimum viable patch for Android 'M' and they intend to add GCM support later (again, I'd point to CC20 as a newer, better alternative), they're just waiting on a transactional update first. I do question whether shipping it broadly with this design as-is should happen in the vanilla kernel, however: Android uses its own patches anyway. Maybe let this one mature a bit first before merging upstream?
> I'm impressed and somewhat surprised that the U.S. would be the entity to enforce this given the relative lack of presence FIFA has in the U.S.

The cudgel FIFA uses to prevent anyone looking too closely at how it does business is to threaten any member country with suspension from international competition if there is "political interference in football."
Mesosphere and HashiCorp
Ask HN: Will Yahoo BOSS New Non-Free API Hurt DuckDuckGo/meta-search-engines?
Full Web Web Search results only $1.80 Price/1000 Queries (USD)

Limited Web Discontinued as of June 1st, 2015

https://developer.yahoo.com/boss/search/#pricing
Not in time to prevent the nonsense of the Qatar world cup (nor to save the lives of the migrant workers being sacrificed to consummate that nonsense)
Benchmarking is hard and a lot of reports are bogus. However they are still very useful for a lot of developers.

Benchmarking programming languages got better. E.g.: http://benchmarksgame.alioth.debian.org/ gives roughly idea about performance of programing languages.

I wish something similar existed for databases. I think exact figures would be hard to get, but I believe there are many 2x 10x differences that we should be aware of.
Thanks for the tip! Too bad that I run Ubuntu, not Windows or OSX. I'll keep it bookmarked in case I ever switch again though :)
If you can do it with .NET Micro Framework, Java (Atego, MicroEJ, J9, ...) and Oberon (Astrobe), surely Go is also welcomed.
Being in an abusive relationship is bad for people.
Partly because Hitler ordered that specific cultural sites shouldn't be targeted. Partly because a lot of buildings in London actually were destroyed then rebuilt close enough to what they were that most people can't tell the difference. For example the whole south side of Fleet Street was reduced to rubble near Temple Bar but you wouldn't know it now.
> Also, I have never heard the term "anti civil liberty agenda" before, especially not as an antonym of "pro federal agenda"

Believing in this so called "anti civil liberties agenda" could be a symptom of lead poisoning...
Link: https://developer.yahoo.com/boss/search/#pricing

and https://duck.co/help/results/sources , http://en.wikipedia.org/wiki/DuckDuckGo
True.. but to me great music is not so much about hitting the right notes. Putting emotions and groove into your playing makes it great. Something I never managed to do. I can hit all the notes perfectly on my guitar but it still sounds crappy. So does great mathematically ability also lead to a deeper understanding of music and the ability to get the original intent of the composer across?
Well, you could always emigrate to Belgium: 33.99% corporate income tax, 37.84% social security contributions, 53.5% personal income tax most labour income above a cleaner's wage, 21% VAT, 10% real estate sales tax, 25% dividend tax, spectacular inheritance tax, combined with far too complex rules and regulations.

That's for your regular, main job. Side job income is burdened with taxes and rules more heavily...
Where is your 46% coming from? Also, you might grossly underestimate how much of an absolute mess American taxes are to deal with. If you're complaining about paying your accountant 2000 euros a year...
Does Romanian also have an -er agentive suffix?
You still completely miss the point of the passage.
Translation: We are going to collect your data. Give it to us, or else. If it's stolen, that's your problem. You dont get to choose.
My lack of knowledge resulted in downvotes. Thanks for the reply.
Is my relationship with Facebook an abusive relationship? Only tongue-in-cheek.
IRS breached, hackers access data of more 100,000 taxpayers
Probably the only C++ program he ever wrote.
If you don't care about executing the code, you can save the slides to a PDF. I did this in Chrome many times and it works well.
I have had a similar thought about something related.

Why doesn't every person with a computer have all the world's open source software on their machine? The entire Debian repository can fit 10 times over on a 1TB hard drive [1].

Why not leverage that tremendous body of free knowledge and work?

The answer I've come up with is that the state of software security is holding us back. Even though we have all this free knowledge, it's not worth it for us to just try new stuff. I remember as a kid I would download new stuff from BBSes and just try it. But no more.

I just stick with a small set of well worn programs that address my needs. Perhaps this is a habit from the Windows days, where installing a new piece of software could break ANY existing piece of installed software. But the risk is still non-zero on Linux distros.

We need operating systems that treat programs as adversarial rather than trusted, and then every computer could have every piece of software installed locally. If you wanted to try out 100 different audio editing programs, you'd be free to do so.

Or perhaps there would be no monetization model for that. Just a thought.

[1] https://www.debian.org/mirror/size
nice story! How did you get your first few clients/customers. Did you get investor funding for Datanyze?
3rd place in Top 20. Still you haven't answered how many of those are effectively running ChromeOS.

Looking at Germany, which was was I mentioned on my post, the scenario doesn't look like that anyway.
The same was true during the Microsoft Build event, the difference was that a lot of Microsoft employees registered a new (green) HN account. Not that I'm complaining but it looked more like a coordinated effort than Go language which has minimal PR from Google but is used by many devs around the world and is very big in Asia.
I don't think people weren't aware of the danger involved, eve in the 40s/50s. Especially as the experiments mentioned in the article were performed especially to get better data about the criticality state. If they had known nothing at all the spheres would have started the chain reaction much earlier, or not at all...

IAEA has quite a lot of reports on criticality accidents, just search their library[]. It's almost always sloppy experimenters not following their rules to get their work done faster and "easier". So, even if I don't get to work with fissible(?) material, it's a good lesson to learn for everyone working with dangerous machinery.

Most of their reading material is very good, and it's all free downloads!
But you know that servers host data shared by many persons, right?
Also, android can have multiple users. I imagine chromebooks can also have multiple users.
5 Alternatives to the Fizzbuzz Test for Hiring Programmers
> UEFI BIOS. 3D, printer, sound

Have you been away for the last decade? This is pretty standard for decent linux distributions. UEFI support has been around for a few years now (I first used it almost three years ago). 3D has worked fine for a very long time unless you're on ati or nouveau.
That could be because sets aren't ordered (even though it looks odd in this context).
Direct link to audio: http://traffic.libsyn.com/freelancetransformation/FT_009_-_B...
Small lies like that are a huge part of everyday communications. No one should feel overly guilty about them and we need to be able to make them. They can be a kind of courtesy.
> I expect to be able to click on a table and see the rows inside - like all the tools out there for Mongo, MySQL, PostgreSQL, etc.

He does have a point there. It is slightly annoying having to type out a query when I just want to browse the data. (No real biggie though..)
Try this https://github.com/geosoft1/tools (related blog post: http://www.webupd8.org/2014/09/easily-install-latest-golang-...)
benchmark = marketing (more times than not)
Yep, but its not easy to escape from abuse. Until people accept they are being abused they will deny it.
Just wanted to re-iterate what the parent comment mentioned.

The very first thing I wanted to see was more videos after watching your stunning home page video, as it was absolutely enticing and mesmerizing.
Who is worse off because Bill Gates has earned tens of billions of dollars? Who is worse of because Steve Jobs had earned billions of dollars?

I'd argue we are all dramatically better of due to Microsoft and Apple.
As someone who has ADD: yes, font lingo. It has to do with render alignment and the fact that pixels aren't round. It is amazing the level of complexity underlying font rendering, look at the internals for lcd filter weights some time.

http://en.wikipedia.org/wiki/Font_hinting
Not surprised at all.

And here we have the prime example, why the Docker-model of building and distributing containers is horrible when it comes to security and maintenance.

Bundling dependencies for production environments has always been and always will be a terrible idea.
There are a lot of MS employees on HN normally, no need for green accounts. Also, where is Go popular in Asia? I haven't heard much about it in China (it isn't a resume point yet).
An anonymous council member points to examples:

http://irclogs.ubuntu.com/2015/03/19/%23ubuntu-meeting.html#...

https://lists.ubuntu.com/archives/ubuntu-community-team/2015...

To me it seems that there is a frustration at the lack of progress in the answering of legal questions. That in turn has created friction.

The truth is that they are all correct from their own points of view. Jonathan Riddell is complaining that the council are not doing enough, whilst the council are waiting on lawyers but still keeping things active.

My biggest question on this would be whether Jonathan Riddell could quit and claim constructive dismissal? If this were a company (and its kind of mixed in) it could be considered that technically he's done nothing wrong in a legal sense to earn a demotion. He would have had to have been given a couple of official warning first.
I'm not sure I follow what you're saying, mind explaining this bit:

"

People opposed to regulations because they're stringent and apparently protect a monopoly don't bother with the exact same regulators that enforce their rights because it takes too much time to file a complaint?
"
Google Chrome New Tab now in Material Design
I'm no designer, but this looks great nontheless! Good job.

One thing I noted while reading on here was that currently, non-chrome users are "blocked" (if I understood correctly) by a "not supported" message. I understand you want to focus on Chrome first, but why don't you simply put up that message as "Your browser is unsupported, atomic.io might not function properly" (or a banner on top of the page), but make it available nonetheless? It might not work 100% yet, but when working on cross-browser support you will already have a bunch of people who tested your software on their browsers. These will know the rough edges and can point you into the right direction.

If it's open to every browser I'm sorry I missunderstood this thread. Nevermind my post then.
"Containers have revolutionized software development by providing a very efficient path to take software written by developers and run it in production in a matter of minutes or hours, rather than days or months using traditional approaches."

FUD. The technology of deployment does not change 'minutes or hours' into 'days or months' - it's management red tape that does that. In fact, in my use case, Docker takes a similar time to build as a normal package (.deb) using an up-to-date base image, but is actually slower to deploy, since now my servers have to download a stupidly large container with build-essential (npm doesn't really survive without it), python (because npm maintainers use python frequently), and graphicsmagick (for the in-house app), instead of 'just the app' that's in a normal package.

If your environment is simple enough that you don't have to be concerned with testing in 'staging' against staging databases or similar, then you're definitely not saving 'days', because your env just isn't that complicated.
Absolutely correct. Notional is an absolutely meaningless figure. If anything it is comparable to the total notional of derivatives ever traded: contracts are rarely torn up (1), more usually offsetting derivatives are entered into in order to cut the exposure.

And anyway notional tells you nothing about the risk or exposure. 1bn of 30y is a lot riskier than a 1bn of 1y etc.

1 - End customer trades do sometimes get torn up. Also trade compression services between street counterparts also result in bulk tear-ups from time to time. But still the vast majority of trades are legacy and largely offset each other.
A bit overstated. They definition of security vulnerable == got package which is vulnerable.

However, merely having some packages with vulnerabilities may not be enough. E.g. you have security in package manager (apt), but you never use it after building the image. Or even shellshock is no flyer, if you don't use CGI scripts and don't have ssh access.

In Virtual Machines this problem also exists. I guess it is more about how often you update your software than Docker itself.
Hence "benchmarketing".
The red zone has pretty much been cleared in urban areas. I actually live exactly in it, west of Lille, and all the area is either built up or farmed.

I believe it's mostly in the more sparsely uninhabited Aisne and Ardennes that there are still no-go zones. In the Nord they are less common (though they do exist, like around Vimy).

I think WWI leftover ammunition in the north is actually less a problem today than all the unexploded US and British bombs from WWII (which are usually around city centers).
That will happen as soon as Android team decides to scrap all development of Android and rewrite it in Go.
And then you remember where Facebook's initial funding sources came from....
On that note, I recommend Mark Twain's On The Decay Of The Art Of Lying: http://www.gutenberg.org/cache/epub/2572/pg2572.html
Yes, it is. Maybe not physically abusive, but definitely emotionally and trust-ly abusive.

You think you are in a relationship with facebook, but facebook is secretly also in a relationship with all kinds of three letter agencies, state actors and advertisers - and tells them everything you told facebook.
The question is: Why use Powerpoint to present the findings of a consulting project? Handout-only would probably be superior. Amazon does it like this.

http://conorneill.com/2012/11/30/amazon-staff-meetings-no-po...
I'm playing "with the big boys" i.e. 500 million market cap enterprise financial. I'm not sure why I do this other than it's easy to disappear into the noise occasionally and put my feet up. In fact if we disappeared tomorrow there would be a chorus of "meh".

The space shuttle we have is, to paraphrase [1], made from piss-soaked snowflakes and we are crossing fingers that it isn't all going to melt in our hands overnight.

Sometimes it does dissolve in our hands and at that point, that's when the extensive hordes of ancillary staff roll out to lick butt.

So when you think that you're playing with wooden blocks, you're right, but you're probably doing it a bit better than piling them up randomly for the highest margin to support a massive hierarchy of unnecessary staff. And you're right, it is pretending. But it makes money, and that's all they care about at the end of the day.

Good luck for you still have hope of doing an honest job.

[1] http://www.stilldrinking.org/programming-sucks
I thought that at first too, but even then the exception seems spurious. It would be more inline with existing Python behavior to evaluate it as undefined/indeterminate assignment order (though this would be pretty useless).

>>> a, b, c, d = {1, 2, 3, 'a'}

>>> a

'a'

Regardless, it shouldn't be surprising when writing insane code, that the language starts acting insane. Python as a whole is pretty decent when it comes to handling syntactic edge cases.
Not sure what's worse here - people relying on third party benchmarks (hint: always do your own; see how a tool performs on your data, on your hardware, for your problem set), or the fanboy-ish panic when they are unsettled that a benchmark might make their chosen toy less shiny?
But that doesn't really answer the question of why sending your location to everyone BY DEFAULT is a good idea.
Not every time, surely? A sample is randomly taken, so there will be variation. Even if it's unbiased, your samples will swing between all possible extremes. So you need to take a very large number of small samples.
Ex Machina portrait
Use Go's "present" tool: https://godoc.org/golang.org/x/tools/present
Premii is a great example of spending a great deal of effort to fuck up basic native behaviour like scrolling. The inertia is completely wrong.
That's odd, from within the Go community it's understood that there's a rather large followership in China. At least, speaking for myself.
Rust for Python Programmers
....__class__ # Python 3 only
Which funding do you mean? They seem to be quite normal, open companies and people with interest in these kind of startups. For people interested in this [1].

[1] http://en.wikipedia.org/wiki/History_of_Facebook#Initial_fun...
International businesses prefer to hire people who speak more than one language. China has become a huge market, and business leaders are looking for people who can speak Chinese and operate successfully in a Chinese cultural context. Apply now for Chinese learning on Skype through http://preply.com/en/chinese-by-skype
Unless I missed it, it is surprising the lack of benchmarks or mentioning how compile speed compares with the previous iteration.

I'm not saying it would be necessary slower than a compiler written in C, if they wrote the more critical parts in assembler, but you would think compiling speed would be one of the outstanding discussion points, after a major rewrite.
Thanks for the downvote. Obviously you do not agree with simple facts, but just in case you think I'm making my point up: http://machinedesign.com/archive/proper-film-thickness-key-b...

Let me quote a key passage: "Engineers must check that films are sufficiently thick so asperities — peaks of surface roughness between mating surfaces — don't touch. Otherwise, bearings can rapidly wear and fail."
Feature request: auto-click-on every conversation you've had in messenger when you navigate to /messages so you don't need to do it manually. Considering it doesn't persist past a reload...
I've heard this to, but haven't observed it in my part of the industry (systems/PL research with lots of undergrad and grad interns from top ranked schools, who are usually the PL early adopters). Scala has been getting more interest lately, and there is growing interest in Rust.
> Which would also imply that you cannot communicate with a person who jumped in right after you did

That doesn't follow at all. It's conceivable we could drop three things into a black hole one after another, and at some point the first two could send a message to each other, and so could the last two, but the first and last could not (in a situation similar to the cosmological horizon.)

> the entire outside universe presents an infinitesimally small target

No. There is literally no direction you could fire a photon that could take it out of the black hole. You can talk to someone falling behind you only because they can "fall onto" your transmissions. Light cannot go uphill at all.
I've been working with RethinkDB recently on some slightly unusual things and the Rethink team has been first class. They've got great support on IRC and GitHub and are open and friendly. I highly recommend them.
Zero chance? Yeah... no. Many people would be very surprised how quickly manufacturers start to ditch google once windows10 gets out.
xxx›
Everyone likes to see how their tool of choice performs against other tools.

And it's an important (albeit just one part) of deciding which product to use.
Yeah, I guess so. Beyond the malicious reasons, there could just be the thought that the utility outweighs the privacy costs for the user experience. Especially considering your FB friends are supposedly people you know in real life and trust (at least more than people you might have on other IM services).

I can understand the divisiveness, but I can also imagine people working on messenger (who probably use it a lot more than you or I) being on this, and genuinely believing it leads to a better user experience for most people (see read receipts).
Chrome for Android finally Open Source
Where can I sell a brandable .com and Twitter handle?
I have a 7-letter brandable .com, and twitter handle that I can't see myself using in future. I know of sites like sedo for selling the domain, but is there anywhere that you can sell domain(s) and social media accounts as a package?
Indeed, the title is a bit misleading.
He was involved in http://en.wikipedia.org/wiki/Fusion-io
I'm talking more about filtering on the message content than filtering based on account settings. For example, if a message is 90% the same as the previous 3 messages the user sent just silently redirect it to /dev/null. Users would quickly learn that a cut'n'paste approach gets rapidly diminishing returns. That alone would slow down a lot of the men who just spam messages to every woman on the site, improving the experience for them while leaving the genuine men on the site unaffected. But I'm sure OKCupid could do much cleverer things.
While I do agree with being able to make small lies, but why would you tell someone whose waiting for you that you are 5 minutes away if you are clearly not. Maybe it's just me, but when someone says 5 minutes, I don't expect 10, 15, or 30. I expect 5 minutes. This is especially true in Asian cultures.
I've been using http://www.paymoapp.com for some time now and it fits my needs to track time and also do project management (tasks and tasks lists). The desktop widget is awesome, I know how much time I've spent working or doing something else.
I'm under the impression that the fundamentals of engineering didn't change a lot. Creativity under constraints.
Yes we have a couple of H-1b employees and we are starting to process their green cards now. We also look for people who are willing to take any internship opportunities just like I did back in the days.
SpaceX cleared for US military launches
Great icon stuff! And most important, you can start with free set then get premium at the later time.

Best,
Tony, co - founder of www.WooRockets.com
In the connectivity business, there is a new 3S: sensors, software, and services
What makes you say that? I think this actually puts a large cloud over the Qatar world cup.
It was bootstrapped to a pretty significant (>$1m) revenue and then we raised some money. I'll write about it one day - another crazy story.
The accessibility tree
very cool little tool for when our team cannot decide where to go to lunch again :). Love it and hunted it on Product Hunt .. hope it makes it to the homepage -- on the upcoming list now.. http://www.producthunt.com/upcoming
Yes. It means that anytime you want to add a new supported architecture, you'll need to bootstrap through Go 1.4.

Otherwise, I'm guessing that for Go 1.6, they'll rely on you having a binary distribution of 1.5 (probably from your distribution, or their website), etc.