skysight-inc/HackerNews huggingface dataset:
"he's saying putting a layer of security in front of SSH, protected only by a 3 character password, is not a great idea"

He seems to be missing the point that this is only equivalent to a password if the attacker knows that it's there and can measure whether they've guessed correctly. Sure, if I tell someone that I've used a 48-bit password and allow them to get instantaneous feedback for each attempt, and don't block them completely after N guesses, it's not much of a barrier. On the other hand, if all they see is a non-responsive port and I make timing a factor and I do block them for guessing, it can significantly hamper their ability to make any guesses at the next (ssh) layer. Nobody's suggesting that the three-letter port knocking sequence should be the only security measure taken. It's purely an adjunct or enhancer for other measures, and for that it can be quite effective.
I heavily suspect this claim is wrong due to some amateurish mistakes. In particular, I believe the author is confusing the concepts of "checking" a solution and "searching" for one. At some points in the paper, their use of the word "detecting" (an ESS) is equivalent to "checking", but the logic of the argument (very simple, might I add) seems to equivocate it to "searching for" an ESS. The distinction between these two tasks is exactly the distinction between P and NP. So I'm inclined to blame this on lack of reading comprehension on the author's part when piecing together information from other works.

Assuming that the author wasn't inconsistent in the meaning of the term "detection", then they are probably claiming that there is some sort of polynomial time reduction taking place between recognizing a solution to an ESS problem (coNP-complete) and recognizing a strict local maximum in a quadratic program (NP-hard according to the author). I don't see this explicitly done in the paper and doubt what they have yields one even if I had more of the context. Unfortunately, I wasn't able to evaluate all of the citations since they are behind paywalls. I wish there was enough information in the actual paper to determine this.
From TFA: "They are sample chips/test chips in preparation for mass production, which requires the product designs to be completed."
Wow, this comment is sooo crazy. I am really surprised to read it.
How should programmers share ideas?
Depending on your perspective, you could accuse anyone refusing to pay taxes as evading taxes for financial gain.
It appears that they do, however, get a warrant before collecting information via Stingrays.
"Fast," "Breeder," or "Salt" reactors breed weapons grade fissionable material (Ie. Plutonium 239) from relatively un-enriched materials (Ie. Uranium 238 and Thorium).

Fast reactors make nuclear weapons as byproduct. Thats why we don't use them.
Everything is 'upcoming' with this company.
If you have your N private keys all stored on the same device (such as side-by-side in your ~/.ssh/keys directory, as in ryan-c's example upthread), under what scenario would just one of those keys get compromised?

You only need one private key per device to be secure. The benefit of using separate keys per service is privacy - it prevents the various service providers from colluding to determine that you're a user of all the services (but if you're not careful you're probably leaking other information to them that would let them learn this anyways).
The Sodium reactor is a standard solid core Uranium fueled design that uses liquid sodium as a coolant.

The molten salt design is completely and utterly different. In a molten salt reactor the fuel itself is molten (in salt form), which turns out to offer a variety of benefits.
Additionally, popping up GUI dialog windows over slow network links will get very old very fast.
Also, Why does it require me to be an US citizen?
Sadly, there seems to be a big difference between "determines are not foreign intelligence information" and "does not determine is foreign intelligence information." Oops, we didn't have the resources to verify that this wasn't a target, so we'll just keep it around until it's proven innocent.

Or am I just being paranoid? I don't really know anything about this.
Very likely I will get downvotes for this but: I suspect we will find there was far less quackery in some of the eastern medicine practices than we thought.
Can you provide a reputable source to prove that President Obama is not a disguised lizard alien? ☺ I mean the original article was so obviously nonsense on the face of it that no refutation should be necessary.
> There is a big difference between arguing that radical life extension could have serious social and environmental costs, and arguing that we should execute the elderly.

I agree. Discussing ways to solve those problems would be an aspect of the former, which is completely reasonable. However, at the point where you suggested that society could ban life extension, you started arguing for the latter.

Follow your argument to its logical conclusion. What are you proposing, and what would the effect be? You suggested intentionally withholding a cure for a degenerative disease (namely, aging). How else could that possibly be interpreted?

> Death is not an unmitigated evil, nor is eternal youth an unmitigated good. I don't think that's a radical argument.

It's safe to say that's our fundamental point of disagreement.

Personally, I plan to address that disagreement by continuing to donate to fund the development of effective treatments for aging, as well as the development of longer-term cures for mortality. At the point where those treatments become more widely available, arguments against them will start looking a lot sillier.
Functionally, this is a loss.

This bill codifies the bulk collection of metadata for the first time. It gives power to the deeply corrupt telecoms, and is very similar to CISPA in its philosophy.

But there's one important point: even though this reform is a complete and utter falsehood, it was caused by the programs Snowden brought to light.

If Snowden hadn't come forward as a whistleblower, none of this would have happened. So while this bill is a failure, it is a massive vindication for Snowden.

This bill demonstrates the massive need for whistleblower reform. This fight isn't over. But we can still win it.
I have lots of trouble with this one too... "government is a charity" creates a lot of mischief.
Here is a rebuttal to the "why not" argument:

http://www.cipherdyne.org/blog/2013/10/port-knocking-why-you...
Well... the draconian overreach of the third party doctrine, including the in praxis requirement to backdoor services sold to the public, is and certainly has been controversial, as have tap and trace laws.

In fact, the only reason the Section 215 even had a sunset clause was because the legislature was so uncertain about the legislation that they wanted to put in an escape clause.
If ISIS is a product of US foreign policy, than the responsibility falls square on the US government to clean up its mess.
It's called code review. Unless you have stupid time constraints, you don't let that happen.
Given you and most people reading this very likely carry a phone in your pocket that can track most of above fairly well, its already been here for years. I like the benefits of my phone despite the potential for abuse.

Challenges of advancement is nothing new for humans. Just like when cave men discovered how to make fire. It's incredibly beneficial when used well. It's incredibly harmful if used without control.
How is this example special, compared to the general notion:

F = (\x -> Z (x x))
Y f = (\x -> f (x x)) (\x -> f (x x))
Y Z = F F

so, any set F that is defined in terms of how sets (functions) relate to themselves, fits into the Y combinator. Which is expected, since Y is the essence of recursion.
Resident Evil 4 mastered in-game difficulty (By shutting up about it)
"again"?
Saiga is a little like the tasman tiger in that almost all zoos had some in the last 60 years but lost its animals gradually. Is a gregarious animal that needs a lot of space to be itself and is very fragile also, living short lives in zoos (less than 5 years). In the reproductive season males seem prone to forget all except sex, stop to eat and die easily (bassically sacrifice itselves for giving a better survival probability to pregnant females). Females have only one or very few babies in its entire live when in zoos.

ISIS (the International Species Information System) is a software/database used to trace all rare animals captive in zoos all around the world.

http://www2.isis.org/

After ISIS this species could be very rare in zoos currently with an entire world zoo population of maybe 2-4 specimens only: A couple of females in Moscow at least. Dallas, Cologne, Seoul, New Jersey, Beijing, Berlin and San Diego had saigas in the past but it seems that no one survived until today.

The species does much better in semi-captive environments. At least a place in Ukraine (and maybe other in Roskow and Palmyra) have small herds of 50-250 animals running free in big enclosures. The problem is that we know that those herds can be entirely wipped in the blink of an eye.

Illegal poachers also killed in 2014 the equivalent to many times the entire captive world population.
This isn't really right. The FBI does perform surveillance, but they aren't in charge of signals collection. The NSA is in charge of these capabilities - and also the protection of the Gov networks.

The FBI also spies, but it is not taking over the NSA's spy role.

They both spy. Neither is decreasing.
Why I Dislike Time-Based Tasks
What I really HATE about things like this one is that United will not refund us (I was heavily affected yesterday), or will offer offensive amounts of dollars/miles as refund.
nmap the whole internet isn't very fast
Are you talking about how factoring will take more time than anyone has available, or something?
Disgusting homophobic propaganda
Given the previous belief that there are no lymph vessels connecting to the brain, what was the hypothesis for how lymphoma can spread to the brain?
The "world's best investments"? From what I can tell you can only replicate what others are doing on your site right?
Not sure. My intuition is that photos are completely read-only; I don't think it will ever change them, so tags might be stored in some other opaque storage.

I do know that Carousel uses the DateTimeOriginal EXIF tag to set the date. You can use this command to re-tag photos, for example:

exiftool -DateTimeOriginal="2009:01:01 00:00:06" DSCF0038.JPG
Why BNSF Railway is using drones to inspect thousands of miles of rail lines
Want to learn something new? There's a newsletter for that
Yes, thank you for pointing that out.

I had recently installed new certs, but failed to point it to the ssl-bundled cert and instead it was just the main cert without the intermediates.

Things are happier now: https://www.ssllabs.com/ssltest/analyze.html?d=diff.io&hideR... "A+"
Which eastern practices, and why?
Can it actually do that?
What ever happened to good old :) ?
It would be nice to see AI technology used for more than just sifting through videos and posts, but I guess with regards to Facebook there isn't much else is there?

That was an interesting read by the way. Thanks!
It isn't Blink-Diff, but I had looked at that project at one point. It has some interesting options. :)
Ask HN: Individual and team email addresses for a domain
Scenario: I register newco.com, and want to have joe@newco.com and bob@newco.com forward to two of my team members (say they use Gmail), and setup a team@newco.com as a simple mailing list.

I used to do this with Google Apps, but it's a bit annoying (and cost-prohibitive) now that they charge $5/month/address. I checked out Fastmail but it doesn't seem to handle multiple users (without having to purchase multiple accounts) or lists.

There must be a cheap, simple solution for this problem, right?
And the irony is that the taxes in Seoul are much much lower than NYC.
You're right, I was wrong. Sorry!
The voluntary gifts aspect is interesting. In the FAQ, there's mention of the option to tip someone whose investments you've shadowed, if you've been successful. If you capitalise on this social, community aspect, I'd be interested in seeing what comes of this. Patreon-esque community involvement is pretty novel for the space, and if you could pull it off it would go a good way to humanizing what's seen as a cold hyper-competitive space.

Because these things need a standard disclaimer: If you have 1000 people flipping a coin every six months or so, at the end of that 3 year slice, you'll have ~15 people very proud of their coinflipping ability assuring everyone else of their judgement on the next flip. After all, their results speak for themselves.
I am not, and despise exploitative use of law. I believe human behavior is so complex, that defining what is acceptable or not in paper for all the possible cases is borderline impossible. Written, clear laws have their place, as does human judgement.

That being said, it really seems clear in this case.

Compensation for work is one of the things defined at the beginning of a work relationship, comfortable for both parties. Minecraft was already big when anyone was hired, I assume that if any extra compensation besides salary was expected, it would be asked for when the work started. Disgruntlement seems a bit out of place, and seems to be used in the piece to adorn a non-story.

Plus, note that my course of action would be talking to your employer to try and find a solution that works, not just "suck it up".
And I didn't imply you said that.

Your "some people choose a life of poverty/beggary and have a good time with that" thing is just plain silly.
If you do this, keep it in the privileged range (< 1024) or you run the risk of your ssh server crashing and some malicious normal user binds to your unprivileged port with a fake sshd and grabs your root password.
Wild guess on "FP": fission product?
Wiring diagram and lots more details here http://www.anandtech.com/show/9331/intel-announces-thunderbo...
rip putty
[member on the devtools team]
A strategy and implementation for source maps across all tools is something we're actively working on. It's frustrating for us as well when working on side projects, if that is any indication of how much we'd like to get source maps everywhere
half of my steam game library qualifies for this.
EmTech Digital: Where Is AI Taking Us?
It's still atrocious, at least with online banking.
So, all the "it's called a public key for a reason!" people: when are you going to submit a patch for OpenSSH allowing unauthenticated users to query arbitrary users' public keys, and maybe a list of users while you're at it? You vehemently support one particular operator of an SSH server doing it, citing good security practice, so why not do it everywhere?

Edit: to be fair, there is the difference that GitHub has already added it and probably didn't have to write C code to do it. So maybe this feature should be requested for things like, say, cPanel, and users' $HOME/.ssh/authorized_keys should be world-readable by default. Still, maybe it's worth doing in OpenSSH so everyone can get the huge benefits of this currently only enjoyed by GitHub's users.
How does the discovery that one culture's beliefs about medicine were less accurate than expected, make you think that a different culture's beliefs are more accurate? It's not like eastern and western medicine are binary opposites, where if one is wrong the other must be right. Especially since this inaccuracy was only discovered through careful dissection and observation: what comparable practices did historical eastern medicine use, that should make it any more accurate than the equivalent old western superstitions? If "western" medicine has missed this detail up until now, I highly doubt that "eastern" medicine somehow accounted for it.
/r/sysadmin is more populated by the winadmins who would give up their gui only after death.
I setup SeedWise on MailGun and then created forwarding rules for the team emails. Might want to check that out
>Sunlight

Did your dad ever come into your room and throw open the curtains to get you to get your lazy ass out of bed?

Today you know he was probably right, but how did you feel about it when it was happening? Probably not very good.
that would be in line with the new, hip, cool microsoft. i'd love actual C support. not just colouring keywords.
It means 96% of the uranium fuel undergoes fission (gets its nuclear potential energy converted to heat). When they separate out fission products (waste) by chemical processing, about 4% of the fuel gets dragged into the waste stream. It looks like a cost/benefit decision not to recover it:

Of the 200 kilogram lanthanide mass removed by liquid metal
extraction, we estimate that approximately 20 kilograms will
be actinide contaminant with a longer half-life similar to
SNF. It may be most practical to leave such a small quantity
embedded in the ceramic granules, as it would be well
distributed and would not materially extend the time for the
overall waste form to reach background levels. If desired,
however, the actinides can be further separated offsite with
additional post-processing techniques.

[pdf] http://www.transatomicpower.com/wp-content/uploads/2015/04/t...

The mass flow is 500 kg/year fuel in, and 500 kg/year waste out -- of which, 20 kg (4%) is unrecovered actinide fuel.
Show HN: The to-do list that helps you form good habits
Well you're leaving the middle columns there, then on your first keystrokes it would be acutally {+down+left as Sublime does not put cursor back at beginning of line when going down. In all I used 26 keystrokes in Sublime, and 27 in Vim. Also, if you understand Vim's vocabulary, the "cognitive overhead" is, as you put it "far less" in Vim's favor. IMO.
Thinking in Systems: A Primer

http://www.amazon.com/Thinking-Systems-Primer-Meadows-Donell...
This is nothing new, and my comment was made with all of this in mind.

Here's a thought experiment however, ask someone why they watch the news, buy a news paper or visit sites like the new york times. Then re-read your comment and see where the differences are. :)
Show HN: Use wealthbot.io to easily setup your own portfolio management platform
As long as we're being overly literal and pedantic, I'd like to point out that wireless connections are still physical, in that they utilize physics to make the connection.
I really don't understand why Schneier is so popular. The article in the link doesn't have a clear audience - some of it is written for complete security naives, other parts are for power users ('turn off autorun services'), and some fundamental parts are flat-out wrong for both audiences ('you can't set up a computer without connecting it to the internet') or misleading (implying a 'small' USB pendrive of only 1GB will help).

And if you want to 'leave no space', why fill up a disk with 'random files' rather than just a single file that uses up all the space? If you're going to the lengths of encryption + airgap + cloudantivirus (!) + etc, you're a power user at this point, so why not just consume all space rather than just collect together files?

And hell, if you're being that paranoid, then use the paranoid OS for your desktop, OpenBSD. Why go to all the effort in the article and not take the extra step to get familiar with an OS that has an earned reputation for security, and that most exploit-writers don't target? I mean, OpenBSD does OOo and pdfs as indicated in the article - what's this airgapped PC going to be doing that requires Windows in particular?

It's ironic that this author people turn to for commentary against 'security theatre' writes articles doing the same.
Please make my father happy by listening to his interpretation of Love Letters
As much as I like live-coding languages/runtimes (lisp, smalltalk, goal, etc.), i've been hearing how the system admins, site reliability engineers, package maintainers, etc. would hate them because there is no reproducible environment for example. They much better restart the whole app, process, os, etc.
We're already seeing that with integrated, "soldered-on" graphics cards, and with frameworks like OpenCL, and higher-level abstractions like Theano, Torch7, etc.
Good article. Very detailed and thoughtful!
The NSA can and has, the other side may have limitations. http://techcrunch.com/2015/02/06/ipt-nsa-gchq-ruling/

Note the actual judgement is linked on the bottom.
96% of fissile material converted to non-fissile material, and that energy is then converted to electricity at normal steam turbine efficiency, 30% or something. This as opposed to less than 1% for Gen III reactors.

Edit: I posted that fuel handling is a batch process, not continuous – that might not be true for molten salt, not sure.
It is. Still, we're slightly ahead of where we were the day before yesterday.

If you're a cup-is-half-full type of person, that would be enough reason to celebrate a bit.
Scanning the internet isn't that slow

https://www.youtube.com/watch?v=UOWexFaRylM
But in real-world terms, some users are less likely to be compromised if GitHub hadn't published them. In that light, I don't think it's advisable for GitHub to go out of their way to publish them without the user's knowledge.

I think the "security through obscurity" principle ought to, if it doesn't already include this, say that added measures or core design principles should not be based on obscurity. This should not mean that all obscurity must be removed. In this case, GitHub have added anti-obscurity, and the defense is mainly dogmatic mis-application of the principle IMO.
Why would anyone downvote you for this?
This
Is
Awesome! ヽ(⌒∇⌒)ﾉ
There already was a Show HN for this yesterday, by a different account?

https://news.ycombinator.com/item?id=9642598
Probably the same reason Germany shutdown its power plants after Fukushima. Despite Fukushima being a huge success story [1] some people are scared, some unthinking, almost all irrational and unable to handle probability at all. Nuclear power seems magical and shares a word with scary weapons. It's not "natural" for mediocre definitions of natural.

1: Seriously. Fukushima did everything wrong. Huge earthquake and tsunami. Older design. Then they tried to cover stuff up. And the repair crews showed up with wrong equipment. More denial. And all that with no loss of life. Just a bit of "lost" land for a while, and extra costs. So many people freak out about it, but that US carmaker with the stupid ignition killed more people and we aren't giving up cars. Fukushima screams "hey, wee couldn't fuck this up, even given perfect conditions and terrible management". But hey, why take a rational approach when you can " go green ".
Yeah, I whitelist IPs, and just drop all other packets, so I'm not really worried, but thanks for the advice, it's always good to get other peoples opinions on best practices.
I think people forget that Congress are people — with their own secrets — too.
\_( ͡° ͜ʖ ͡°)_/
command+opt+i opens tools on OSX
Why not just use one of the many other languages available.

You could use ipython if you wanted object handling. Now i wonder what would have happened if they didn't have gates or ballmer upstairs and they wanted to implement a new shell.
Ok thanks, that's dispositive. Url changed from https://www.khanacademy.org/test-prep/sat.

(Sorry khirasaki; I get what you meant now.)
Also, watch Mushishi.
Also true of using Sqlite without CoreData in Swift
Waste heat dissipation is a problem for all thermal power generation schemes. The use of CHP to provide residual heat for nearby residential heating/industrial use boosts the overall efficiency of the system, but with higher upfront costs.
I thought the point was that this provides another channel (etiology?) for materialist explanations of "Eastern" medicine.

I'm not taking a position on that question, as I haven't studied it sufficiently (though acupuncture, for example, seems more compelling that reiki).