skysight-inc/HackerNews huggingface dataset:
Last time I tried OSFree they didn't have an ISO available just the source code. It has been a while as they have ISOs now:
http://www.osfree.org/doku/en:download

I just downloaded the latest ISO and set up a VirtualBox virtual machine for it. It boots into a command prompt but there is no fdisk.exe or other programs to format a hard drive and install it on a hard drive that I can see. It seems as if it runs limited DOS and OS/2 CLI programs and hasn't made the GUI available yet.

I can see in command line mode there is no mouse support yet. The L4 Kernel has an OS/2 personality and it looks like there is a doscalls.dll file to handle the DOS API calls. There are os2app os2fs and os2srv directories but they are empty. I assume they are for OS/2 apps, file system support, and server (LAN Manager, SMB) that haven't been added yet.

It has a long way to go but back when I last checked a few years ago they didn't even have an ISO yet. The ISO boots and goes into a command line mode and that is about all it does.

Yeah they aren't keeping up with the road map, the same thing happens with ReactOS and others.
very nice! I like your perspective.. so true also.. if you live your life in fear of what could happen, you'll miss out on some great experiences.. nice
I am curious as to how he caught these turtles and birds in the open sea while in his no doubt famished shape.

"shoved his arms into the water up to his shoulders . . . When a fish swam between his hands, he smashed them shut"

Seriously, this needs some mythbusters-style testing.
And/or the large players like eBay, Amazon, and PayPal need to do whatever it takes to make it easy for sellers to comply with current laws.
That refineries produce the heat by burning raw crude oil doesn't make the process sound any better for the environment.

I'm not sure how much oil needs to be burned to produce 6 kWh, but since a GGE is 33.4 kWh, I'd assume it's at least 1/6th of a gallon. Gasoline emissions need to account for the oil burned to produce that heat and all energy consumed in the gasoline's storage and distribution.
surely the perils of users using shoddy app stores and installers rather than developers using native libraries.

kudos to the devs for making the effort to workaround the issues though, its quite a heroic effort imo.
Thats a good point, thanks.
Banks are tripping over themselves to get out of the datacenter business and put all their files on Azure/Rackspace/AWS/what have you. It's embarrassing.
Is this true? It sounds very unlikely to me.
> Also, tell your clients to back their stuff up with their own methods, too, just in case you come under heavy attack

you would be shocked at the number of people who get upset when you advise them to make their own backups, and interpret this as an indictment of the reliability of your own backup procedures.

e.g. "isn't that what we pay you for???"

nevertheless, do it anyway and let them fume. there are no prerequisites for running a business and you'll find that many absolute morons are at the helm of some nominally successful businesses.
Unfortunately that's almost correct. See, if you sell to a Spanish citizen you now are unable to opt-out of VAT, because Spain does not have such a minimum. The whole VAT/sales tax situation in the EU is incredibly complex and it's little issues like the one you missed that can completely mess up your otherwise orderly run company.
Zero basis as to how Faraday is related to Apple.

Looking at available information, Jia Yueting, who is reported as being the Chief Executive, has been looking into electric cars.
He has been reported to be working on a concept, the Mule Car, due to be showcased in 2016.
His company, LeTV, has 400 staff in the US working on this concept car, similar to that of Faraday.
The company has announced a partnership with Aston Martin to explore electric cars.

If we are to speculate, it would be closer to reality that Jia Yueting, with the help of Aston Martin has realized the name "Mule Car" is not markatable and they have developed Faraday, in order to be more marketable and be competitive with Tesla.
If you can circle it back around to the Apple private equity fund then you might be the best journalist in town.
When I use my phone to pay for things in a shop, there's surely a lot of complicated security going on, and a bit of ugly technology is even exposed when it displays a QR code for the cashier to scan. But nowhere ever did it ask me any questions that required me to learn any weird technical concepts. I never had to choose a number of bits or know anything about what a "key" is. As soon as a user sees these things, they have to either make a random guess or go off for hours teaching themselves what it means. It's a complete fail.

The words "PGP/MIME" should never appear on a PGP email plugin! When you send a regular file attachment, you don't have to specify the MIME type. It's all silent and hidden.
Sure. But this is a great counter to the all-to-frequent dismissals framed as criticisms that Snowden should have done something more.

"Sure, I support valid whistle-blowers, but what Snowden did ..."

It's a simple way to show that to be hypocritical authoritarianism rather than valid criticism when they don't make the connection.
I wouldn't forget that communication is deeply entwined with regional culture. I would argue that it is much easier to hire a remote worker from the same country then it is from a third world country (which are frequently known for remote work). Everything from time zones, work hours (say western European countries accustomed to ~5-7 actual work hours /day), laws, religion, etc.
Paying ransom is never worth the long-term costs. Once you've proven to the criminal that you're someone who will pay, they usually try again in the future because you're an easy mark.

Not only that, there is a power imbalance that shouldn't be ignored: the criminal has more experience in these kinds of confrontations than you do. Sam Harris has a very good article on this topic[1]; while he is discussing violent interactions on a personal level (e.g. mugging), the principles apply to many situations. The short version is that the criminal is trying to draw you onto their turf and to play by their rules. Almost always you will only make your situation worse when you let the criminal set the rules.

[1] http://www.samharris.org/blog/item/the-truth-about-violence
I must correct you about one thing. Gold/silver wasn't used until fairly recently - 15th century IIRC and for a lot of the time the value of the coin was in no way correlated to the metal it was printed on. Gold caught on in a time of market crisis because the rulers thought that telling people that the metal itself was valuable it would give them more confidence in the currency. Also it's convenient for currency because it's both absolutely useless and rare (hard to counterfeit).
Which interview?
If you are a EU citizen, vote pirate in the EU elections.

We got Christian Engström last term, and we have Julia Reda this term. They're doing a ton of good. We need more.
Another Crowdfunded Gadget Company Collapses
Should we trust the implementation of AES-NI in this context?

http://arstechnica.com/security/2013/12/we-cannot-trust-inte...
Yep, that sure is a primitive image format.
Background: I wrote an image Metadata service for a large company.

Recognizing any feature at all in any image is a matter of levels of success. There is no algorithm which will successfully find ever a person, let alone a specific person or specific type of person in an image 100% of the time.

There are algorithms within the opencv project which do a very good job of finding certain male or female characteristics in an image. If you combine them I would say you could get a reasonable accuracy of 70-80%. If this is good enough for your application, then you win!
I was very taken with the portrayal of the Queng Ho in 'A Deepness in the Sky'. I liked the idea that a trading culture would foster technological development across a large swath of space by broadcasting "here's how you bootstrap an advanced civilization" instructions to anyone who got as far as inventing radios.
Then they'd wander around at relativistic speeds, trying to time their visits to each system to coincide with periods of high-tech development so they could do some trading (before each civilization inevitably choked on its own complexity. That part was a bummer)
""Even if the N.S.A. was listening in, they couldn't get his credit card number," said Daniel M. Kohn"

Oh boy.
5 minutes of google research demonstrates that this article is wild speculation and that the evidence points to something completely different.

reading it gives a pretty strong hint on its own tbh...

sensationalist garbage.
Obvious lie is obvious.

Also, if we did put his back to a wall it'd be our fault.
From the website: (https://www.enlis.com/personal_edition.html)

-----------------

Here are some of the differences and advantages of Enlis Genome Personal:

It's a full software application. Rather than just a webpage or single report, Enlis Genome Personal is a full application that you install on your computer and load your genome data.

Ability to load multiple genomes and compare them side-by-side. You can load all your family member genomes together, or load multiple copies of your own genome (i.e. you have data from 23andMe and Ancestry.com), or you can compare your genome to available sample data.

Ability to generate custom disease and trait PDFs, suitable for email or printing. A sample Macular Degeneration PDF is sent with every free genome report.

For a particular disease or trait, this software will tell you how many known disease positions were successfully sequenced in your data, and how many are missing. For example, if you are interested in a hereditary disease like Cystic Fibrosis, it will indicate there are 270 known variants that cause Cystic Fibrosis. Your data covers 101 of those positions, and there is missing data on 169 positions.

More extensive information on each SNP, like variant mammalian conservation, or variant deleterious predictions. Much more information on the function of genes and where in the body those genes are expressed.

User friendly interface that is easy to use. Includes a genome browser so you can see your data in the context of genes and chromosomes.

For 23andMe users - better quality control and more data:
We discovered over 500 SNPs with inaccurate data in the 23andMe results, and we automatically filter those out. See blog post here.
We are the only service to identify and analyze over 1,000 of 23andMe's proprietary insertions and deletions. Most of these can have a health impact. See blog post here.

For users with whole genome or exome data:
We give you the tools to make new discoveries about your data. Advanced variation filter, phenotype explorer, homozygous region analysis, and over 20,000 built-in gene categories.
An example - our founder used this software to discover a cause of a rare phenotype in his whole genome data. How long did it take? Less than 30 seconds.
I think the most likely scenerio is actually that the blackmailers are outsourcing the DDOSing so there was a communication delay and/or there is some latency/delay when issuing commands to the botnet.
For context, the US Army wouldn't hire you.
America, the Great Contradiction
Scientists Have Developed an Eye Drop That Can Dissolve Cataracts
Agreed. The difference is that with ransomware the act has already been done. You can think of it as negotiating with kidnappers vs. paying off the mob to not rough up your shop.
Backwards compatibility has nothing to do with it. No one can read GPG encrypted mail.

It isn't built into their clients, they don't by default get their own keypairs, it is simply straight up impossible to send encrypted email to even friends and family and have them be able to read it.

Everything else is window dressing to this problem.
Why would anyone be retarded enough to intentionally stick around to be subjected to what they've proved isn't justice?
for more research on the topic, see:
https://www.youtube.com/watch?v=2SqCaz6lsfE
I was obviously not making a claim about how LPs judge VCs, just stating my own opinion about how I think VCs should be judged.

Try to imagine every sentence in a comment is prefixed with "I think..." to test if you're just being snarky or not. In this case, you're just being snarky.

(And like most snarky comments, it's not even correct. There is in fact no official test for VCs. Some LPs are socially motivated and would rather lose money than invest in evil companies. Your test is not the one they use.)
> We've worked with every YC biotech company (except Ginkgo)...

Heh. After a brief glance at their website, they look like a better-funded version of the "herbal what-not" email that ends up in my spam folder.
AES-NI and RDRAND are different beasts. AES-NI is deterministic, and thus much more difficult to practically backdoor.
posted yesterday:
https://news.ycombinator.com/item?id=10522530
We are an incubator like environment in Palo Alto and SF with mostly stanford students and engineers and we all live together in a cool community. We have had several Y combinator Startups stay with us, and the founders are also applying to the next Y combinator opening. Hope to see you soon!
Look, I'm not comfortable discussing my own circumstances, but making it to mid-30s has been a huge blessing. Getting diagnosed after 40 years on this earth is a tough pill to swallow. I can't disagree that it feels like one of the most devastating things that could happen.

Yet, you know, there are actually cancers that strike kids before they even have a chance to reach puberty. One in particular is Rhabdomyosarcoma which is a cancer of muscle tissue that essentially is a death sentence. The treatments that exist are limited, and funding does exist to work on it, but it's not a well known issue until it hits a family, which means funding is pretty much dependent on foundations willing to spend money on a hard challenge that isn't glamorous.

What do I mean by glamorous? I mean breast cancer. Pancreatic cancer. Colon cancer. The things that are likely to hit a large group of people.

I sincerely hope the best for your sister, I really do. She's about to enter a world which is a new perspective on life. Over time I've learned that a lot of people don't value what they have until it's in jeopardy, and when the bubble gets burst, when mortality is staring strong, that's when it's time to get real, to bite down on the belt and take the pain if it means survival. Stay strong, and tomorrow holds a future that none of us can predict.
Honestly maybe they could have hired security consultants for a comprable fee? Fireye etc
Sorry if this is a dumb question, I'm just trying to think it through. It seems like it has to use the key you give it; it seems like the output stream has to be correct, or it just won't work.

I'm not really sure how this would work for network traffic, I guess for disks I would expect CBC mode, which would require an IV? Is that right?

So could the hardware be made to expose the key, or IV's, or leak information in some unexpected way?
Austin is more hype than substance. And it has gotten really expensive as well.

San Diego, for example, stomps all over Austin in terms of software jobs, and Austin's hardware scene is laughable.
> The only way spam will go away is if everybody will finally stop responding to spam.

Right, which is why "never pay extortion fees" doesn't make much more sense for combatting this stuff than "never click on spam links" makes for combating spam. It's unrealistic to think we will convince enough businesses to altruistically not pay extortionists, just like it's unrealistic to think you'll get your grandmother to stop clicking on spam links. You need another solution.
Cloudflare should have an emergency hotline for situations like this. Charge half the ransom to handle the traffic for the duration of the attack. Offer contract afterwards.
Questions I ask in interviews
Wow. The difference in quality between the NYT 20 years ago and today is simply astonishing. It seems that this prescient article ironically also marked the beginning of the end for the New York Times.
There's a line of investors out the door waiting to give successful startups growth funding. It's an easy way to extract wealth with very little risk, if you're positioned well. No one needs another firm doing this and it doesn't count as adding value.
The post was flagged by users and vouched for by other users. I think a moderator unkilled it at one point, but other than that no one here has touched it (or read it).
Eventually, we'll find out gold is not edible...
Wikipedia's rendition of the proof for the halting problem may be incorrect
I think this is a good question. Where does one go in order to find out about this topic?
Bomb their families instead?
Everything you say resonates with my experience too. And not to contradict myself but on the plus side for business in China, I found the expat entrepreneurs there to be pretty close-knit and more than happy to collaborate and help you out. That made things a lot easier and was probably the saving grace for many of my peers.

Having said that, after navigating those waters for awhile, I enjoy dealing with a clear legal framework, laws that are more often than not applied uniformly, and a government that doesn't stifle the free exchange of ideas on the internet to such a point that you need a pretty beefy VPN solution just to do a Google search.

Just my opinion though, good to hear you have been successful in your work - good luck and keep on trucking!
My idea has been to have a system that works on top of email but sends out "fraud" email to other participants in the network. The encrypted payload gets unencrypted at each endpoint and has a marker as to whether it was, what i call a "fuzzer" email, in which case it's discarded - otherwise it gets graduated to the users inbox.

Under this system, Eve will see Alice exchanging encrypted messages with Bob and Carol but won't know if they're automated dummy messages or authentic communication.

It lowers the information fidelity through an intentional introduction of noise.

The "fuzzing model" has wide use cases: for instance, a web browser can programmatically "browse" a variety of websites so that Eve can't tell what Alice is truly looking at. Every user in a system will have "red flag" websites in the "auto browse" list.
posted 6 days ago:
http://www.sciencemag.org/content/350/6259/369.full
So where's the CEO of NetMarket, Daniel Kohn, now?

https://www.linkedin.com/in/dankohn

* CTO of Spreemo, a healthcare marketplace

* previously the #2 person at the Linux Foundation

* dankohn1 on HN: https://news.ycombinator.com/user?id=dankohn1

Nice to see where pioneers end up.
> Paying ransom is never worth the long-term costs.

I am amazed about how many people are making this claim confidently in this thread. It's clearly wrong. Very, very often it's definitely worth the cost, because very often you will never see the same criminal again. Consider:

"Don't pay ransoms, because (1) you'll get extorted again once the criminal knows you're an easy mark and (2) if everyone always refuses to pay, criminals will have no incentives to try and extort."

versus

"Don't pay muggers, because (1) you'll get mugged again once the mugger knows you're an easy mark and (2) if everyone always refuses to pay muggers, muggers will have no incentive to mug."

Yes there are cases, like if you're the government, where you are very long-lived and your reputation is reliable such that having a stated, followed policy of not being extorted works. But for individuals, it's just not feasible most of the time. You probably won't see that mugger/extorter ever again, and it's very unlikely that most victims will refuse.
Node.js Foundation Individual Membership Now Open
Is that at the network level? My experience is that packet handling in Linux and FreeBSD does not make high speed IPsec feasible.
The point isn't for regulators to have to sift through code line by line or do something complicated like verifying compilers. I'd propose that the industry can pretty much do whatever they like in terms of technology, so long as it's inspectable and meets other regulations of course. If they can't provide repeatable instructions for building their code then they should not be working on something safety critical anyway.

I'm not familiar with exactly what software regulations exist today for the auto industry, but certifications for repeatable software processes (including build and deploy) are nothing new.

The point is that we should trust the industry to do the right thing, but also maintain our ability to double check. Until something like the VW defeat scandal happens it doesn't make sense to invest the resources needed to really dig in.

Updates and cheating can be detected by requiring service stations to pull software from randomly chosen vehicles during annual inspections. In the US we could use the standard highway funding threats to require states to enact such laws.
Birds and turtles are curious about drifting things, like boats. And both are easy to catch (well, relatively).

I haven't caught fish with my hands but at sea been in situations where it didn't seem impossible. And the fishermen I know in the area (I live there on a boat) are magicians.

So sure, everything needs testing but I have a bit of a frame of reference around this one and it raises no red flags for me at all. Plus it's inline with the other lost-at-sea books I've read.
Wendelstein 7-X – from Concept to Reality (2013) [video]
> Are you honestly so stupid

Personal attacks are not allowed on Hacker News. We ban people for this, so please don't do it again.
It's very formalized in Barcelona's Eixample - the streets are on a square grid and each block is mix-zoned in order that each is a mini community e.g. you probably have a cafe and restaurant on your block, don't need to go far for a laundry etc
> Although he didn’t know it, Alvarenga had washed ashore on Tile Islet, a small island that is part of the Ebon Atoll, on the southern tip of the 1,156 islands that make up the Republic of the Marshall Islands, one of the most remote spots on Earth.

As it took me a little while to find Tile Islet, here's the link on google maps for others' convenience:

https://www.google.com.au/maps/@4.6210188,168.7678056,15z
> So you're even more pretentious and shallow than it originally seemed. [...] you must be a joy at parties.

Personal attacks are not allowed on Hacker News. We ban people for this, so please don't do it again.
> also make a web client available. Make a new service which offers only encrypted e-mail by default

rainloop[1] already does this.

1. http://www.rainloop.net/
Cloudflare's $200/month business plan includes DDoS mitigation. It's self-serve and there's an "I'm Under Attack!" button in every account. There's no extra cost for the bandwidth.
Clojure Reader Conditionals by Example
How about S/MIME? At least, the programs that I use on a regular basis have it built in. (iOS and OS X Mail, Thunderbird, Outlook). It still does not help at all with the management and distribution of key pairs.
You're talking about specific people (your parents). I'm talking about society as a whole. Are there people who prefer living in an apartment? Sure, but most people, regardless of "cultural conditioning", will choose a large country dwelling over a small city apartment if they have the resources to do so. This is true everywhere, in every society and culture, and across all of known history.
Ask HN: What is your favorite startup that you are following right now?
There are so many awesome startups out there... what are some that people are consistently following?