skysight-inc/HackerNews huggingface dataset:
But now you are asking terrorists to be good at encryption meanwhile even encryption vendors/developers get sloppy and wrong.

It's one thing to ask a cell member, hey, here's a phone, it only has this app on it. Don't mod it, don't do anything but use this app.

Versus, hey, please implement a secure encryption protocol and make sure there are no exploitable bugs.

Also, if the government controls the carriers, they ultimately control what can run on the handset [if they choose to be draconian].

Also, for a big enough growth market, I think they'd be willing to centralize encryption. They'll outwardly say, no impossible, can't be done. Host country will say, sorry, you can't sell here, can't be done. Secret high-level talks happen and mysteriously the handsets are available again.
While I certainly wouldn't let it be the thing I judge the project on, to your point, why is step 3 here:

http://spinnaker.io/documentation/getting_started.html

install the thing that's going to manage your whole deployment pipeline by curling a bash script from the 'net?
After Oct 1st 2015, whichever side that has not upgraded to chip (bank or merchant) eats the cost of any fraud. As more retailers upgrade, the risk for the bank's who haven't upgraded grows.
Facts and Statistics about Hotels in La Digue
It has for me.

When the Snowden revelations first came out, as an engineer, I was in awe of the NSA's capabilities.

But slowly, the awe has reduced to "meh, they're just another inept government agency" levels. If they were so capable, how does one explain the rise of groups like ISIS since 2003? It's hard to believe such a well trained well financed group can rise and take over vast territories without emails, IMs and mobile calls.
> the reaction is "You're fired!"

Is it really that bad? I'm not personally familiar with US office culture, but it seems like an exaggeration. Why would a boss throw away an otherwise functioning employee over something so minor? Why would someone choose to work under such a punitive regime?
The UPS ground delivery guys are Teamsters. You got a problem with that? :-)

Fedex ground is independent contractors. I wonder if the guy in this classic video was an independent, or if he was just seasonal? https://www.youtube.com/watch?v=iIsfBBx0GOs

Summary: they're an oligopoly. They don't care, they don't have to.
Oooh, these look cool! I wish I had a child or relative in school right now, because one of these would be a gret little tool to help ensure success.
I am confused, the wikipedia article you link to says "In October 2010, the postmortem—including the pathologist's 14-page report and the six-page toxicology report—was made public, re-iterating the conclusion of the Hutton report." The subtitle to the linked Guardian article is, "Government releases previously secret medical files on death of weapons inspector at centre of BBC's Iraq dossier story." What is it that you want to see?
That comes from the build tool and is auto generated: https://docs.gradle.org/current/userguide/gradle_wrapper.htm...
> meanwhile even encryption vendors get sloppy and wrong.

What is an encryption vendor, exactly?

Is Open Whisper Systems an encryption vendor? They're pioneers in secure messaging, and they give it away for free. https://itunes.apple.com/us/app/signal-private-messenger/id8...

Is Paragon Initiative Enterprises an encryption vendor? We published Halite, a PHP library to wrap libsodium and make it even harder to use incorrectly. (Users don't even have to know what a nonce is.) https://paragonie.com/project/halite

Or are you speaking about software vendors that erroneously implement their own cryptography features? If so, I totally agree. They do sloopy work.
Lines 140-149... I have mixed feelings about that. On one hand, the software developer in me keeps screaming "DRY! DRY! DRY!". On the other hand I find it really concise and understandable. I mean, can you look at this code and NOT know what it does? Now try to make the code better - do you still get the same effect? Probably not.

(disclaimer: I am arguing about this specific case, not about such code smells in general)

UPDATE: ...and if I missed something besides that the code is repeated, please correct me. Bash is not my strong point.
Also that would probably greatly simplify key management as opposed to having 10 apps all wanting you to use their own mechanism every time you move to another device.

Unfortunately so far things are moving in the opposite direction. After Chrome dropped Java support it appears there's no cross-browser way to do reasonably reliable crypto right now.
Presuming you are US based, https://en.wikipedia.org/wiki/EMV#United_States

POS // Retailers are having fraud and liability shifts forced on them from the payment networks and banks. If a POS // Retailer accepts a fraudulent swipe, they eat the bill now, fraudulent chip purchase (much harder), bank pays.
TSA employs a robust security system involving multiple layers of security, both seen and unseen, to protect the traveling public, including a well-trained frontline workforce

"Well trained" in the same sense that the guy making your burger at McDonalds is "well trained". And let's face it, most of these TSA goons probably would be working at Mickey D's if it weren't for the TSA. Not exactly America's best and brightest, that lot. What I can't see is why anybody is even surprised when this stuff happens.

I walked into an airport a year or so ago, headed to Chicago and halfway through the security line realized that I still had my folding knife clipped to my belt. I wasn't going to go all the way back to the car to stow it by that point, so I just jammed it in my bag and figured I'd take my chances. My bag went through the scanner without a peep and I carried the knife on the plane with me.

To their credit, the TSA crew in Chicago found it when I went through security on my way back. But the thing is, I wasn't really trying to conceal it. I just jammed it in randomly, making no special effort to obscure or hide it or anything. I really expect if I'd carefully wedged it in between my Nook and a USB harddrive or something, it would never have been found.
It's almost like they were ready and waiting with the talking points... Hmmm...

https://www.techdirt.com/articles/20150916/15570332276/havin...
I love how the whole story is basically love and questioning authority saved them.

CJ seems like a swell guy and Megan and Grace seems to be doing well. Good for them, the less hateful people in the work the better the world is.

edit:

Also wow, I'm not really a twitter user myself, but this story really paint how twitter is really a thing.
If you are looking for Seychelles Island vacation and luxury accommodation, Villa Authentique is the picture-perfect vacation resort that captures the unique and exotic lifestyle of La Digue. A fusion of authentic hospitality, stunning nature and typical laidback creole culture. For more information, call +248 4 234413 or visit www.villaauthentiquesc.com
The worst thing for me about the Snowden leaks wasn't that. It was the deliberate interference in secure protocols (e.g. the flawed random number generators), combined with the pressure to leave open accidental flaws.

This makes everyone vulnerable to J. Random Cybercriminal when those same flaws are finally discovered by the non-secret services.

Being a victim of an identity thief is a lot less terrifying than being in the middle of a automatic weapon massacre, but it's a lot more likely to happen.

The framing of the debate as "encryption = only used for evil" is not only wrong, but very dangerous from that point-of-view.

I don't have any easy answers that keeps everyone happy. But neither does anyone else.
Kind of a rant, sorry.

Chips are great, but in-store fraud transactions (from unauthorized purchases) have scaled downward, until...

Google Wallet, and Apple Pay.

In fact, it's now easier to perform in-store credit card fraud, thanks to such technologies.

This is important because stores are becoming more and more complacent with chip tech, when what they should really be doing is not allowing transactions via Google Wallet, Apple Pay, or any similar technologies.

We'll hear on the news that chips are a big deal — and don't get me wrong, they are — but with new technologies comes new opportunities, and it's now 100x easier to perform a fraudulent in-store transaction, it really makes me laugh how much of an afterthought we're giving these technologies when all you have to say is "chip" and everyone's like "oh okay that's safe."
Zenefits CEO responds to the rumors that his company is in trouble
The first couple of steps are actually the easiest. The last paragraph -- which is also your shortest -- is the hardest part, by far.

OP, you want to basically extract entities from documents without necessarily knowing them a priori ("companies can use different language to describe these things"). This might be even tougher if companies aren't required to report material weaknesses (are they? I'm unsure). If they don't report, then you'd also likely need to manually code training data for companies for which you have filings.

If companies are required to report material weaknesses, then you can likely rely on NLP for this job. Start by building a classifier using material weakness data as your labels and tf-idf vectorized documents as your features (check out parent's link, and pick up a general NLP book while you're at it).

For each of the 50-80 things you mention in your post, OP, you'll need to repeat this: (1) obtain labels and (2) figure out a way to train a machine learning algorithm to handle that task for you. The alternative is to rely on heuristics (eg. "I know from past experience that companies using such-and-such word in filings experienced X, so I'll encode that in business rules"), which is an ugly way to build something but likely faster than learning about machine learning or NLP.
Sort of.

http://sphincs.cr.yp.to

Not only is this a NEW cryptography technology, it's also the most hilarious academic web page I've ever read.
GooJS 3D WebGL Engine Is Now Open Source
As I commented on reddit;

I've not read much, but the start where it says

> There are two approaches to parallelizing a PRNG—multistream and substream—but both approaches have practical difficulties for conventional PRNGs.

just screams "use PCG random!" to me. PCG random numbers support good, independent random streams really easily and also support substream partitioning. These don't require any challenging seeding, and they're some of the fastest RNGs out there. They're also small - 64 bits for a 64 bit period, 128 for 128 bit period, etc. Probably double that if you need streams, unless you're using their address for stream splitting.

'Course, there was no option for this in 2011.

Also, I'd be interested to know if the PCG test in Figures 7 and 15 of the paper[1] can be applied to this generator and, if so, how it fares. It's the only test I know of that isn't pass-fail, so helps give extra context on how strong an RNG actually is.

Also, where it's said

> On the other hand, many of the most widely used PRNGs fail quite dramatically, including all of the linear congruential generators

do note that a 92 bit LCG outputting 32 bit integers, and a 128 bit LCG outputting 64 bit integers do in fact pass the statistical tests. LCGs are, in many ways, actually pretty good with larger state sizes. Not that implementers will take note :P.

[1] http://www.pcg-random.org/pdf/toms-oneill-pcg-family-v1.02.p...
It looks very pretty, but the image doesn't really show me how it integrates with Github. Perhaps I am missing something.

The About, FAQ, and T&C links all take me to the top of the home page, changing the URL path to /login# -- do I need to authenticate to find out what it does?
Slack Button for Cloud Telephony-Send SMS,Start Conference
This is a story. I'm going to need to see some data.
Cameron fast-tracks controversial net legislation after Paris attacks
And so, if you look at the pictures, you'll see an interesting number denoting the quantity of plutonium powering the device. It's not measured in grams, or even micrograms, or any unit of mass, as would be common with ordinary materials. Instead, the quantity of plutonium is measured in curies.

And is there a means of converting curies to mass?

Well, sort of... except radioactive decay generally means the original mass of a sample of material has been steadily converting itself into something else over time, so to provide a measurement of mass might not be a practical piece of information later on, and given the application in these circumstances, the gross weight of the device is more relevant than the mass of the plutonium therein, and the power provided by the plutonium, and how hot the slug is, turns out to be the more interesting number.

So what's a curie?

The term "specific activity" is defined as the amount
of radioactivity - or the decay rate - of a particular
radionuclide per unit mass of the radionuclide. For
example, the specific activity of Ra-226 is 1, meaning
that one gram of Ra-226 contains one (1) curie (assumed
to be uniformly distributed throughout that mass)

http://www.iem-inc.com/information/tools/specific-activities

And, so based on all those pictures, the devices seem to average ~2.0 to ~4.3 curies of plutonium.

The specific radioactivity of plutonium, according to the above source, is:

Pu-238 - 1.7E1

So, approximately one or two grams per device.

Based on all this information, I bet harvesting plutonium pacemakers would be way more lucrative than stealing kidneys.
100% predictable and predicted.
Über+Uns+|+Schlüsseldienst24+Stuttgart
A really good comment, I'd like to hear from downvoters their arguments against it.
Calibration for big data – Dean Foster [pdf]
But ARM is UK based. The article seems to suggest a US based company.
Oxford Dictionaries Word of the Year 2015 Is ‘Face with Tears of Joy’ Emoji
I think everyone here is well aware of the issue. It's getting the message to people outside of the tech bubble that's missing.
I have actually been on grant committees before and the basic problem is you only have enough funding for 10% to 15% of the proposals. Almost all of the applications are really good and from good people. The reason for this is it is so much work (at least 6 to 8 weeks full time) to write a grant application that only the really good people put them in. On top of this the universities will “pre-review” all the grant applications internally before they go in to make sure that all the weak proposal are weeded out and all the obvious flaws removed.

The end of this process is that almost every grant is really, really strong making it impossible to rank them consistently. The committee ends up ranking on trivia, or in the worse case on “old-boy” connections. We are asking these committees to do something that we know is impossible.

If we can’t rank grant applications by quality then lets stop pretending we can. Just decide if they are strong and then put all the strong ones into a lottery and fund as many as we can.
What damage will someone do? I guess you risk an occasional transaction you don't know about. Someone can hardly hit 100's of transactions quickly without flagging something. Also I'd be surprised if the banks don't already/shortly tie your location to the transaction as the swipe is increasing done from the phone (or they have your mobile banking app even if card based).

One thing I'm trying to change is get my partner to stop using a clone credit card they have of mine. It makes it hard for me to do my monthly scan of spending an know what what should/shouldn't be there.

Going forward I hope they get an e-ink screen on the card showing the last spend amount. I dislike when businesses swipe small transactions and you cant see the terminal amount. I generally ask for the receipt in these cases but having the most recent spend on the card would make things that little bit easier.
Confessions of an ISIS Spy
Future Visions: Original Science Fiction Stories Inspired by Microsoft
Nothing from the UN is worthwhile using.
I'm curious why did you drop Erlang in favor of Go?
But only if you also keep transmitting junk data over the same mediums. There is plenty of research available for detecting the presence of applied steganography by entropy measurements. [0, 1, lots of others]

If you only apply steganography when you have real[tm] communication needs, those transmissions will stand out. So, from information theoretic standpoint you need to ensure that transmission is undetectable from steady-state with no payload.

Incidentally this is also one part of Pond's threat model. [2]

0: https://ntrl.ntis.gov/NTRL/dashboard/searchResults/titleDeta...

1: https://www.blackhat.com/docs/asia-14/materials/Ortiz/Asia-1...

2: https://pond.imperialviolet.org/
Your ability to discern others' true emotions even as they apparently wallow in self-denial is remarkable. So perhaps you could enlighten us all further: is there any act of aggression that you believe would warrant a military response?
It would be interesting to use, but I do not understand why many of this GitHub integrations asks for "read code" permission.

I cannot share code on my private repositories, otherwise my company would make them public, hence I cannot use this service.

@gitlo: can you fix this?
SCOTLAND+JOINS+REBUFF+OF+MIGRANTS+WITH+FRANCE+-+YouTube
Well, but if the East has problems with terrorist attacks, then there's exactly zero reason why the West should be giving up their liberties because of that.
Compilers can generate a map file that associates relative addresses with variable and function names. They can also store such information in the compiled executable.
It sounds about as hopeless as many things in science. There are too many researchers and no good objective measurements of success. Even the author essentially said "I prefer to fund people according to whether they have recently published in a luxury closed access journal".

I had the same thought as danieltillet while reading it - if they're all equally good, then choose randomly instead of being consistently biased towards an arbitrary criterion that's going to skew the system.
The other day I read that someone has been purchasing bomb grade uranium from a source (or a chain of people) who have been traced back to a Russian General in charge of a nuclear weapons facility. I think I might have heard about it first via HN, but not entirely sure now. Anyway, it terrifies me to remember that there are people in the world who have known nothing of life's bright side and who were most likely psychologically damaged as kids living in the constant war zone of the middle east. Those who rise above it are usually brilliant people regardless of occupation and those who succumb to the darkness are the ones I worry about... They could feel a darkness so vast and so abysmal that the idea of stabbing the beast where it hurts (killing the civilians of nations that are partly responsible for what happened to them) is the only relief they have in a life where they've gotten no relief; only absolute terror and infinite trauma.

What could we do to identify such people and help change the course of human history?
That's actually quite interesting. I've never considered the possibility of genuinely being afraid of terrorists, since it seems like such a statistical impossibility, but I suppose that's not a particularly emotional reaction. I might feel differently if I lived in a commonly targeted city or somewhere outside the US.
There's really no issue. If your card is stolen and fraudulent charges made the bank will reverse them. Having used chip payments for years now, I couldn't imagine living without them.
> said it cost the average convenience store $26,000 to upgrade its gas pumps and point-of-sale terminals.

This seems backwards. Here in Australia we just pay a rental fee to the bank, for the pin pad human interface device. Everything else is business specific and shouldnt need upgrading...
But the world at the same time would migrate to dollars with liquid funds, causing for the near-term a drop in prices of other currencies in relation to the dollar.
American Medicine is worse than ISIS Terrorism
some special way the customer can swipe the card (pulling it out too quickly or something).

When chip cards were introduced here, the cards and the readers weren't very reliable, so the rule was "if the reader can't talk to the chip, you swipe the card instead". This would happen if the card wasn't fully inserted, if the contacts were dirty or corroded, etc.

That lasted maybe two years before the fraud increased and the reliability improved to the point that the fallback wasn't worthwhile. Now if a chip doesn't read the answer is "try it again" followed by "do you have a different card?"
> So my question is what leg does the EFF stand on when making this complaint?

The honorable Carol Yaggy, trial judge for the superior court of San Francisco.
http://www.courts.ca.gov/opinions/revpub/A125542M.PDF

If indeed DNA is being collected at birth, without consent, the EFF would have similar grounds to object to that. If an act is against the law, it doesn't matter that the state is breaking that same law in another instance. Breaking the law twice doesn't validate it, or, as my first grade teacher Mrs. Thompson might have said, two wrongs don't make a right.
It is not good for business. Journalists almost invariably corrupt any message one is trying to deliver. The return, on time and energy invested, ranges from "very poor" to "negative". It is the worst kind of market engagement, rarely attracting more than a herd of tyre-kickers. Good luck generating qualifiable leads from press coverage.

Sorry to hear that Jessica learned this the shittiest possible way. I had it easier, being simply misquoted on two occasions and seeing the pattern.

NB: Analysts are slightly better, because they take time to understand market structures, technology trends and value chains. This is because people pay them for information, rather than for column filler. It is not a coincidence that really good PR people move up to AR where they may actually see some benefit for their efforts.
I'm curious - which show did you use?
On that note, I am convinced that the fact I started GrantTree with my girlfriend (now wife) as a cofounder (or rather I was the cofounder, since she provided the unstoppable sales energy that shoved the business into existence) was an essential building block to creating this sort of culture. When you're literally dating your cofounder, unless you're the kind of person who keeps secrets from your partner/spouse or orders them about, it ensures the kind of transparent, respectful, balanced relationship which I think is likely to lead to what you describe.

Probably not a surefire way to achieve this - and certainly not the only one - but I thought I'd share.
Which unfortunately probably means almost everyone. Companies will cooperate, because it's unprofitable for them not to. The GenPop will cooperate because they don't understand any of it anyway.
If you think the link is cool, and you wish you had even one piece of it, you can build your own cloud chamber at home:

http://www.symmetrymagazine.org/article/january-2015/how-to-...
Unless ISIS, etc. have better crypto minds than the likes of firms who spend billions in that domain (and still make mistakes), you're asking a lot from foot soldier terrorists by asking them to produce, to borrow from oracle, "unbreakable" bug free comms platform.
Of course it's their strategy. That doesn't automatically mean that by obliging them the French would be "helping them win."
Xe tải Faw 4 chân – xe faw 4 chân máy Mỹ mui bạt
Xe tải veam vt250 – xe tải veam 2t5 máy hyundai
I found Hank through his blog, which another poster linked to, years ago and found him to be extremely interesting and insightful. I am very sad to hear about his death.
I think the word "noisy" can have multiple meanings :-)
> learn to read faster

I just can't do that. When i read, i visualise stuff, reading faster just brings me back in my room. Strange to see many people do that.