rsy96

Sounds a good idea. I'd like to see a more technical description of how it derives the public/private key pair from a password. In addition, the language choice of C# is probably going to limit its popularity, given how C# is still tied to Microsoft world (I know they are open sourcing .Net, but that has not matured yet).

How is this different from a VPN over UDP, like OpenVPN or Cisco Anyconnect?

One reason that Asians outperform other racial groups in the United States is overlooked in the article: the difficulty of immigration. Most whites and blacks are born within the US, and Hispanics are either born or move into the US by simply crossing a land border. For Asians to come to the US, they have to cross the Pacific Ocean. In order to do that, they have to be either rich (at least middle class), highly educated, or extremely adventurous and self motivating. The Pacific Ocean filters out many would-be Asian Americans that would have lowered the average of the "modelness" of the group.

> That would only be fairer if everyone has the same level of access to education up to that point.

So it is the socioeconomic difference that should be addressed, not racial difference.

Depends on how one defines Asians. Chinese are rare among the higher ranks in tech, but many corporations have Indians (India is in Asia, right?) as their CEO.

No. The official installers are signed, and are thus not prevented.

But I've found that many GUI applications do not take /usr/local/bin into account. It's like only terminal applications, which are rightly affected by terminal environments, care about it.

Because the default is in `/usr/local` and because the installation warns against changing prefix for possible software breakage.

Now since many people say they never run into problems with nonstandard homebrew path, I'd like to give it a try too.

If both legit and ad urls all look the same, and can only be distinguished by decrypting with a key, then adblockers may be unable to differentiate between the two.

Tons of apps to block ads come out this month on HN, but few of them are available on my country, China. I wonder if some can open source their code so that I can compile and install it on my iPhone by myself.

Shameless plug for my blog post on how the UX of Gatekeeper should be improved https://rsy96.github.io/blogs/2015/09/20/gatekeeper-should-b...

The "malware" can do two things: send tracking information to a server, and show popups (which may be spoofed as login dialogs). Both of these are entirely possible to be intended by the app authors, and in that case, it would be considered a feature. So it is almost impossible for anyone other than the app authors to find out it has been infected.

I scanned the post and it seemed the issues are regardless of the language.

Every textbook on math I have ever read always start with intuition behind the idea, and then present definitions and proofs. Only some reference books, intended for look ups only, only enumerate formulas. I never understand why anyone claims that they only learn math by memorizing formulas.

Xcode.app includes a digital signature, which can be checked with `codesign`. As all OS X comes bundled with Apple's root certificate, one can check for the validity of that application by oneself without any additional trusted source.

Or if the developers never disable GateKeeper and read the warning, they will know that the application is not genuine.

Regular ANNs are not deep learning.

> But I'm starting to fear "Deep Learning" is the new "Big Data" buzzword.

You spent several paragraph criticizing ANNs, but regular ANNs are not deep learning at all.

Deep learning is pretty much a field still being rapidly advanced by research. A book on it would become obsolete the day it is published.

Not because he is suggesting curl. But because he is suggesting curling without TLS.

> At the same time, less competitive students may get accepted because of donations/connections/preparatory schools.

That means their family is rich and/or has powerful connections. Thus they will be more likely to succeed after graduation.

> Well, I find whole thing rather controversial, so to say. Depends on what do one mean by "collection" and by "point", eg. if we take point literally: (x, y) \in RxR, then we have to assume that "collection" is uncountable (which seems counterintuitive, esp. from the school student's pov). OTOH, one could treat "point" as representation of that point, eg. pencil mark, so that point is no longer single element, but rather an uncountable subset containing the point of interest, along with its neighbourhood => our "collection" becomes countable, so we could think about it as bunch of indexed points (much more intuitive, isn't it?), shifting our attention towards mapping's representation from the mapping itself.

The whole paragraph does not make sense to me. For example, how is a collection uncountable somehow unintuitive? Why should a point not be a single element, but a subset or a pencil mark? Are you confusing the theoretical graph with the graph actually drawn (which has finite width)?

The revelation he has had looks trivial to me. Graphs as equations, equivalence of expressions or matrix as linear operators are all something I learned and understood from the very beginning.

I wonder if it has something to do with the textbooks. As a Chinese I often found American textbooks on mathematics so softcore. They have so many analogies, so many "real world" examples that masquerade the true mathematical meaning of the concept. Many of Chinese people argue that these are the reason that Americans are more creative, but I cannot help but wonder maybe the lack of rigor underlies some of problems with American math education.

Or maybe I am just the exception. Maybe other Chinese struggle with math just the same.

When I read that title, I automatically assumed it to be an extinct human-like race, filling in another gap of human evolution history. Maybe whoever wrote that title thought the same, and failed to realize that ordinary people would construe it otherwise.

Have Ed25519 or Ed448 been standardized into TLS? I've never seen a website with that before.

> An observer of the produced random numbers can potentially deduce the next numbers from the first 1024 random numbers.

By definition, a cryptographically secure pseudorandom number generator cannot be predicted like that by a computationally bounded attacker.

Thus if any attacker could deduce the next number from /dev/random by observing the numbers before, the algorithms they adopt is fundamentally wrong, and nothing could the save the security in that case.

Chrome is subject to analysis by much more people than Safari by virtue of its larger market share and cross-platform nature. In addition, Google pays a great deal for security researchers to actively find bugs in Chrome. I would take the higher number of CVEs of Chrome as a positive sign for its security, in that they are preemptively searching and fixing security vulnerabilities.

How will a Chrome extension prevent WebRTC ip leaking in Safari?

So now I have to find out how to disable WebRTC or just STUN to avoid my true public ip address leaking (while on VPN).

When you have multiple commands to run, chances are that only some of them require root privilege. Prefixing only those with `sudo` instead of executing all of them in a root shell allows you to reduce damage, should the "normal" commands are typed wrong or have bugs.

With root privilege you can erase all of the audit logs. A malicious attack probably would do so if he/she cares about that.