skysight-inc/HackerNews huggingface dataset:
Also available on his blog instead of Forbes' terrible website

https://www.schneier.com/blog/archives/2015/10/automatic_fac...
Hey! I'm an engineer on N1 and I can talk about (1) and (3):

1. Snoozing emails would be great. You could totally do this client-side in a plugin using our current developer APIs, by moving snoozed threads to a label/folder, and then moving them back after a prescribed time. Might be a fun project! Feel free to ping us on our community slack channel if you want to try.

3. N1 uses the exact same package structure as Atom, but we're using the CommandRegistry less, and introducing our own UI layer concepts like the ComponentRegistry (for dynamically injecting React elements.) There are probably a handful of Atom packages you could load into N1, but probably only well-contained ones with very minimal UI. Our composer unfortunately doesn't share any code with Atom's text view - we needed to do rich HTML editing, so we wrote our own composer based on `contenteditable`.

Vim keybindings for the composer are also a great idea. There's actually an API for creating `DraftStoreExtensions` (https://nylas.com/N1/docs/DraftStoreExtensions.html), and if you implement `onInput` in your extension you can probably re-create vim keyboard handling. Unfortunately, that's a bit low-level: right now, the composer is not as easy to extend as Atom's editor. We've put a lot more effort into extensibility of the thread / message panels and views.

Enjoy! Feel free to reach out on the community slack channel if you have any other questions.
I think most of your posts are very informative. But your lack of knowledge about OpenBSD surprises me. Perhaps it would save you and the reader some time if you spent a bit more reading about OpenBSD instead of reasoning about all theoretical directions OpenBSD could have taken.
Ha ha - I just read Seveneves, the Probst character was quite funny. While I've enjoyed Stephenson's novels in the past, I don't think Seveneves is his best. It's a little bit formulaic, far fetched and plodding. I preferred Reamde. It's the only thing I've ever read that gave me an insight into the mindset of the mid-west gun loving conservative that seems to maintain the status quo of gun law in the US.
I really like the philosophy of Redux (app state in a single object, pure components w only props, no state), but still think implementing this idea with observables would lend a couple extra benefits:

1. no magic or monkeypatching ( like connect does to container's props)

2. combine/merge make data dependencies much easier to reason about that a single node's state being updated by multiple 'case' statements.

ps: as a poc, I put together a tiny snippet the other night (http://plnkr.co/edit/JIm88A7k7O0TCgfZ0O9f?p=preview).
The cost of backdooring is put not on NSA but on hardware vendors. They have to add extra silicon and that stuff costs. And there is a huge market of reverse-engineered mostly-compatible clones, too.

My idea was that I'm practically sure that if I'd take a small-enough MCU or FPGA it'd be NSA-free. Just because putting a backdoor there (and that backdoor has to be quite smart and listen for signals on a lot of pins, while being discrete about that) would seriously increase complexity and cost of the device. And that would be noticeable. Just don't believe this would went unnoticed for any long.

As for SoCs - yes, they're complex enough and their interconnections are quite standardized. So, you're probably right.
I think Elon needs a stellar COO to run operations for Tesla so he can focus on overall vision and product. I think he's forced to be involved in so many day-to-day operation tasks that it crowds the little time he does have.
>> You can't just point to profit as a bad thing.
It depends on context. In this context it is a bad thing. I believe that industries like healthcare and prison–industrial complex should not be for profit.
The core of the problem is that it is for profit at least vast majority of it, including insurance, hospitals (most of them) and drug manufacturing.
no mobile though.

I had the crazy idea of sticking a cubietruck into a ten keyless mechanical keyboard, attaching it to a 10" tft/lcd and adding an adjustable kickstand.

I really do like to have a good keyboard when mobile. :\
Ask HN: It's 2015 and I still can't program
What I'm doing wrong? Where can I learn to program besides codeacademy that site bores me I want something more interactive and engaging. I want to become a Web developer or Software developer I have free time to study and learn.
How poignant given the end of the 3rd episode of Heroes Reborn that I just saw last night (don't worry, I won't spoil its awesomeness).
Did Obama ever come out and condemn pakistani actions?

Obama took big risks in the 2008 campaign to accuse Pakistan of harboring Usama ibn Laden. Hillary and McCain both condemned him for telling the truth.

The national media and national security PR machine attacked Obama for saying it but Obama stood firm. Obama also promised he'd go into Pakistan and kill ibn Laden whatever the diplomatic cost and then he did it.

Obama also told us exactly why the Iraq adventure would be a disaster in 2002.

I don't like the police state policies Obama enforces at home, but we're lucky to have him. The next few presidents are unlikely to be as brave, honest, visionary, or competent when it comes to foreign policy. The Washington insider machine will be back in power far too soon.
Reddit has a list of default subs to get people started. A lot just keep the main list, but some continue to add and subtract as their tastes change. Is that what you are proposing?
Exactly! I have a similar policy at the community I operate. Members have to sign up with a real-sounding pen name. I'm very flexible on that too. All that means is you can't sign up with a pen name like "CRaZzE BlOgGeR". I don't care if your pen name is your real name or not--it just can't sound like a dumb made-up internet username. And yet people still email me daily, enraged that they can't sign up for a professional online community with the pen name of "BitterDoll SweetBear".

This kind of policy goes a long way towards the perception of professionalism at any web site. You're probably not going to take a person named "Spazmo Jones" as seriously as you would "Amy Wong". It's a sort of broken window theory.

(And yes, all of the examples above are pen names people actually tried to sign up with!)
There's another ios accessibility setting that inverts video on the whole screen, which is surprisingly good for dark settings. I don't want the blinding white background to be dimmer, I want it not to use a white background in the first place.
That will happen anyway - see iOS where users nearly always accept permissions, or Windows where users just click OK.

It's not the frequency or importance of popups. Users simply don't read them. From watching users, the users who don't read them usually have an image in their minds of what they're trying to accomplish and an image of the screens they need to go through to get there. Any popup or notification screen is instantly dismissed so that they can see the screen behind and try work out if it's where they expect to be. It's maybe 25% of users who do this, but they do it constantly regardless of what the popup is.
The book was awful in all the right ways.

It was a perfect example of SV employees "going native" and surrendering their entire sense of self worth over to the desires of their employer. It tracked the ways startups indoctrinate naive employees into to their cults of personality pretty accurately. Company as Godhead. If the protagonist drank any more koolaid she would have become the koolaid man herself. After all, without that external sense of approval, you are worthless. One for all, and all for the billionaires.

It's a case study in trojan horsing your way to the top though. Company offers shiny service X, but with nefarious capabilities (surveillance, tracking, blackmail) nobody considers, because, hey, shiny selfies!!!

Sign up now for my 2016 course: Defense Against the Dark Software
I guess I did not realize that "cryptofascist" is unequivocally an "inflammatory epithet". I really do think the word captures the all-too-common construction of purporting freedom, while defining it in such a limited way as to make it useless. I would love to know of a synonym, so that we are not blind to a concept merely because the word that describes it is inflammatory.

You and tptacek are right in that my entire comment would have been better if it were much less personal. I ended up down that road because the comment I was replying to seemed to be hand waving away my point with a perspective that glossed over key points. I still can't necessarily see how I could have responded better in-the-large (local edits could obviously make it seem less personal), but I will take a step back next time.
I had one once upon a time.... The trackpoint on a mouse was truly great.
> I'm sincerely curious ... how is a social network like Facebook, which is built around connecting you with your real-world friends and acquaintances, supposed to work if you can't require users to identify themselves in a meaningful way?

"Hey, Steve, what's your Facebook name?" "Goku35179." "Cool, I'm friending you."

If your long-lost friends and former co-workers and classmates do not choose to be findable, that should be their decision to make. But that was always only a secondary use case for Facebook.
The EPA started really tightening up diesel emissions in the late 90's. The big jumps came with particulate filters in 2007, and urea injection in 2010.

Urea injection by the way, is the technology that VW decided to cheat instead of use.

The unique thing California has done is to require all vehicles be retrofitted with particulate filters.
This looks like a fantastic roundcube or rainloop competitor. Thank you!
> terrorism seems by definition be the underdog because official or state terrorism is excluded

While the definition may be nebulous, clearly the U.S. supported terrorism in Cuba and Nicaragua on massive scales that matches concretely what is called terrorism generally. E.g. death squads murdering and raping civilians, bombing airplanes hospitals and embassies, mining commercial harbors. Hard to believe if you're a patriot but you owe it to yourself to read up on the history: https://en.wikipedia.org/wiki/United_States_and_state-sponso...

Also, the U.S. Phoenix Program in Vietnam explicitly was terrorism in the eyes of its own perpetrators: https://en.wikipedia.org/wiki/Phoenix_Program

Arguably the drone assassination program going on right now in the Middle East is also a form of terrorism. Just imagine how you'd feel if China was flying drones over the U.S., killing people at their pleasure, without trial, sometimes wiping out hospitals and weddings and bystanders in the process. Even if you believed that China was trying to eliminate violent elements of a neo-Nazi insurrection which for some reason a collapsed U.S. government was powerless to stop.. how would you feel when you hear those Chinese death planes buzzing overhead? Might you be a bystander? Might you be targeted? Living with that generates resentment and resentment drives people to extremism (in this scenario, you'd probably be more likely to join an anti-China militant group, such as the hypothetical dominant hard-right one). Which ultimately supports the conclusion of the paper: that terrorism is counter-productive.

That is, unless the goal is actually not to stop terrorism, but to drive people to extremism.... something to think about.

(If you think that's far-fetched, would it be so difficult to believe that in this scenario China's motive was not really to stop neo-Nazism, but rather to justify increased intervention in the U.S. to prevent a strong competitive government from emerging? Just look at Israel for an example of this playbook on a smaller scale: provoking and driving Palestinians to extremism to further justify their oppression and taking more land. Just one example among many, but it's one the U.S. directly supports.)
Exactly. Everything in TI basic, least on the 82 I had way back in the day, is a keyword that you can pull in from a menu. Because of this, there was no need to remember what that function was named. Because of that, it was trivial to write all those little functions that just might be on the test, plus all those games and other diversions. I mean, what's a calculator without a game of craps on it?
The word was at least pop-culture-accessible enough to have been a Simpsons gag (the "Springfield Googolplex" movie theaters) years before Google existed.
Great article, albeit somewhat horrifying.
gateways don't help when you're a mobile user. which is why I have little snitch on my mac... I'm not _always_ going to be using my laptop at home- and that's increasingly true for my mobile phone which is almost never left home.
> I expect Reddit to be able to deliver...

That was sarcasm, right?
It says "Subscriptions for individuals are coming soon." on the pricing site.

https://www.meteor.com/why-meteor/pricing
As a non-twitter-using software engineer, when I land on a twitter page, I still find it fairly intimidating and requiring special knowledge. For example, why is there a dot before the @ in your example? (I actually know the answer to that because I looked it up once, but it's totally not obvious.) What's with all the slashes in numbered lists?

Because of the character limit, people use a lot of abbreviations and shorthand that I can usually figure out with some puzzling, but I shouldn't have to do that.

I still see url-shortener urls all over on twitter, when I should just see regular urls.

These may be minor points, but it adds up to giving off the feeling that there's an in-crowd and I'm not invited. It is much better than it was a few years ago, though, so maybe it'll get there.

(I'm not even getting into the difficulty of actually following a conversation on twitter! Reverse-chronological order plus the lack of linking replies to their parent messages make it nearly impossible, but that's a well-known issue.)
Show HN: Docman, documentation for Postman
Technological dark matter
I think you're confusing "a demanding atmosphere" with "an atmosphere of harsh personal criticism."

But I'm happy to hear where you're getting this stat that most high-profile projects operate with "an atmosphere of harsh personal criticism." Maybe some high-profile projects are like that, but my experience is that they're the shitty exception, not the rule.
I got the IBM keyboard that came with it on the IBM 300GL desktop. It's not a model M but it was pretty nifty anyway.
Well, enforcement of the old emissions standards was lacking. If "tightening" means "actually enforce the ones we have, even against the revealed gamesmanship", that's a very proper step.
You can. There's an option to turn off, but it starts on.
And that's before you even consider building Microsoft Exchange ActiveSync...
An offline signing key was proposed as TACK: http://tack.io

Unfortunately HPKP was adopted by the browsers and TACK has gotten no traction with the vendors, despite being a more flexible system.
> I've worked with IMAP, and it's not that bad.

I don't believe you.

Every email account provider is different in horrible, horrible ways.
Negotiations
It's true you can really DOS your own site if you don't follow best practices or have catastrophic data loss. Same with HSTS if you ever need to go back to HTTP.

On balance, yours is a solid decision for your company and for typical users. Just pointing out a complication with something new people are starting to use.

I've just started using it with a short TTL and several extra hashes I can fall back on in reserve. Works fine but I'm definitely not 'all in' yet.

Edit: Also, if my understanding is correct you _do_ create an offline 'key' to generate hashes with a backup CSR, though this won't help if your machine (with the backup CSR used to generate a new key & recover from a server compromise) is also compromised.
That's not the technique that was proposed at the start of this thread, to which I was responding, and so is entirely irrelevant to my comments.
Another interesting read in this space is http://spin.atomicobject.com/2013/07/31/greatest-c-testing-e...

(his header-only unit testing library is at https://github.com/silentbicycle/greatest)
Thank you for replying. I shared the same feeling as you describe when I sat on these steps [1] last summer!

[1]:https://en.wikipedia.org/wiki/File:Solvay_conference_1927.jp...
"Space War." Ahead of his time? ;)
Two hours after publishing a comment, I received two invitations in a row! Thanks a lot, guys. And sorry to the second guy, since I can only accept one invitation :)
Bundling the sync engine with the client works if you're willing to download your entire mail archive onto every device that connects to your mail. An implementation of the sync engine that allowed only syncing partial mailboxes would be very difficult to implement on top of (all of) IMAP, Exchange, and Gmail. By abstracting that away into a new cloud service, clients end up being both simpler and more flexible.
Well, they're not using the name you know because they don't want you or other casual acquaintances to find them.
DOM.js – A lightweight DOM manipulation library
It's not the Neo900's goal to be protected from high-profile targeted attacks. That's hardly feasible.

However, that doesn't make it pointless. Neo900 aims to protect as much as possible from fishnet style mash surveillance. On most devices you simply cannot protect yourself from that, since any E2E encryption you'd employ could be easily attacked by shared RAM access from the completely uncontrolled (and often known to be exploitable) modem firmware.

When you don't completely control your device, you cannot do anything to protect your privacy. When you do (and there are also other reasons to want it aside of privacy), you can start thinking about it. It won't help when you're specifically targeted by super secret agency, but it will in 99% of other, more common cases.
Also, even 18 year olds (minimum voting age in the US) are unlikely to be impacted by the college plan of any President they elect.

It's the parents of younger kids who should be paying attention.
Case Study: SoulCycle iOS App
That does sound underspecified, although I would think that it still makes sense to switch. If Monty reveals a winning door, it obviously doesn't matter whether you switch (both other doors are losers), but if he reveals a losing door you're better off switching because you're still essentially getting 2 doors instead of the 1 door you originally selected.
Forcing, yes. But they can still ask, and handing out a kill-password upon them asking would be tampering.
What made the world’s first cyber-weapon so destructive?
This is not an actual problem.

We disagree there. It's annoyance waiting to be solved. Here's a hypothetical, realistic interaction, and as a bonus, one that isn't any less useful due to the length limit:

>>@friend: Want to catch lunch today?
@friend: Sure, I'll set that up. Cya there!
@restaurant Reserve a table for 2 at noon for Karunamon
>>@restaurant: Confirmed, we'll see you at noon!
@traffic: How's the traffic between here and @restaurant?
>>@traffic: ETA 35 minutes, heavy traffic and construction along the optimal route.
@restaurant Change that last reservation to 12:30
>>@restaurant: Confirmed, your noon reservation has been moved to 12:30
@uber Pickup my location to the closest @restaurant
>>@uber: Driver is on its way. ETA: 5 minutes. Look for a grey Subaru, plates 1234-56.
@friend: Catching a ride there, see you in half an hour!

And this is pure user interaction, which is the least efficient way to do things possible. If you can't think up a usage for a widespread pub/sub notification system, kindly get your imagination serviced.

As far as the limit, it's up for revision by the sound of things anyways - and keep in mind the original purpose of that limitation was so a tweet would fit into an SMS. If the limit is what you think breaks this idea, you've disqualified SMS by the same rubric.
I was recently kicked off of Facebook for lack of an "Authentic Name." Humorously my name was my legal name.

Getting kicked off of Facebook was the best thing to happen to my productivity and mood. My only frustration is that there are several people on Facebook I have no easy method of giving alternative contact info to.
Damn. Was hoping I could just build it myself, but the bootstrap script is broken.

---> Cleaning apm via `apm clean`

dyld: lazy symbol binding failed: Symbol not found: _node_module_register
Referenced from: /Users/karl/tmp/N1/apm/node_modules/atom-package-manager/node_modules/keytar/build/Release/keytar.node
Expected in: dynamic lookup

dyld: Symbol not found: _node_module_register
Referenced from: /Users/karl/tmp/N1/apm/node_modules/atom-package-manager/node_modules/keytar/build/Release/keytar.node
Expected in: dynamic lookup

/Users/karl/tmp/N1/apm/node_modules/atom-package-manager/bin/apm: line 28: 27072 Trace/BPT trap: 5 "$binDir/$nodeBin" --harmony_collections "$binDir/../lib/cli.js" "$@"
I was saying that a particular technique was more effective than the originally posted one to which I responded.
> they can revoke on behalf of the "average pleb", Just like CloudFlare did.

Yes but the revocation infrastructure was totally overwhelmed by that and it's unclear if many of those revocations ever made it to users' browsers. E.g. Chrome only honors the revocation lists shipped with Chrome updates -- it does not query OCSP -- and browsers that do query OCSP will "fail open" if the servers don't reply (which they often don't).

(It sounds like you recognize this, just stating it for those who might not.)
Twitter has incredible value as a tool to break realtime news and events. The problem is, it buried in a veneer of fruitless and redundant tweets that nobody wants to dig through. If they can figure out how to surface the value 'there's gold in them hills!'
I wonder how differently the reaction here would be if the title/article didn't call them Engineers.
That's one way to do it. The scale of ThinkPad keyboards may be susceptible to alternative approaches since there's a product line aspect, i.e. many products with interchangeable parts produced over many years.
Since 6 months, I've got a couple application in production there. Got a couple bugs during the beta, which were quickly fixed apart from that everything is fine.
openvswitch is simply an interface which provides the ability to programmatically configure your network devices.

You could run it on OpenSwitch as the program/module which talks with a controller.
The qmail code and configuration are both quite unlike what many people are used to. It definitely wasn't being imported with the config/service model it uses, and reworking it to be like every other daemon would involve a lot of code changes.
Terrorism is a convenient term that has been so over- and mis-used that it means nothing anymore. As far as I understand it was supposed to mean the unofficial use of violence to achieve political aims. Now the establishment uses it for anyone it doesn't like. When I hear it all I can think is that the person using it has an agenda and is trying to mislead me (through the use of propaganda).