skysight-inc/HackerNews huggingface dataset:
A sobering and sad read. The tl;dr is that modern hoaxes are manufactured to appeal to a demographic of society that either doesn’t care if they are hoaxes, or is so cognitively biased that they won’t believe evidence debunking the hoax.

It’s the same mechanism behind denying evolution or climate change: Some people simply say that the “evidence” against their beliefs is manufactured by a conspiracy.

We saw this is the false murder statistics shared by Donald Trump: People shared them widely because they confirmed their fears about blacks.

When pinned down on the fact that the numbers were ridiculously wrong and that the source had been completely fabricated, they shrugged and said, “Well, its still useful to share because we need to have a conversation about the problem with black people in America.”
Mulgara: fast RDF database written entirely in Java
CISA passed the Senate with almost 3:1 bipartisan support in October.

PCNA, the House's (worse) version of CISA, passed with similar margins in April.

Obama has publicly supported the bill all year.

As much as HN and Twitter wants to believe CISA was enacted in some shady backroom deal, the process that actually occurred, including publicly available amendments and months-long review, is pretty close to "Schoolhouse Rocks".

The debate on CISA was over. Thankfully. The only debate left was how close CISA would come to PCNA, with its broader law enforcement ties and vaguer language (EFF claims PCNA would have in some cases authorized large private companies to "hack back" computers they believed had been trying to hack them). Instead, Senate's CISA is the law of land almost verbatim to what they passed --- in a drawn out, public process --- in October.

Later:

Someone downthread asked for a summary of the bill. I did my best to strip the legalese out of it:

https://news.ycombinator.com/item?id=10763827
Idle thought: I wonder how well DFW's The Pale King sells in Japan.
He has in fact publicly campaigned in favor of CISA.
Apache Jena 3.0.1 Released (building Semantic  Web and Linked Data Applications)
As a software engineer who have spent a fair amount of time building and modifying ensembles in Reaktor, I don't honestly see how these structures would be easier to build in code. Their conplexity comes not from environment, but from the meaning they represent; I doubt that connecting 5 LFOs, 3 oscillators and a step sequencer in VIM would be a much better user experience then dragging cords with a mouse.
Transit lights were standardized during the XX century. You won't find a place that uses them differently.

But there are cultures where red means good things.
But a majority of congress did like the wart. That's why the amendment adding the CISA text to the omnibus bill passed, and that's while it's very unlikely to be repealed later.

(Of course it's possible to repeal it later, as is true for all laws; they didn't pass a constitutional amendment.)

The public-choice situation as I understand it is that CISA was a bill that concentrated interests (large tech companies) liked but which the public as a whole did not like (insofar as they bothered to know about it). The key to passing such a bill is to minimize publicity and bundle it with a distraction.
Sharer.js tiny js lib to create custom share DOM elements
You are reading it correctly. CISA explicitly establishes by statute that private entities are never required to share data, but that the government is required to share with private entities.
Absolutely ! The difficult part is that too often managers confuse tracking activity with tracking results. Too many companies manage in a way suggesting that activity is the main driver of productivity.
Automate as much as possible to make it difficult to make a mistake. Check lists are a good start. Keep aggregate stats on overall quality and at regular team meetings set goals for improving the stats of the group overall in small increments. Give praise of each improvement and then make a new goal. Privately keep stats on individuals if there is someone who is an outlier in terms if mistakes talk with them privately about how they feel about the job in general and how it might be effecting their mistake performance if they don't improve you might have to find a replacement.

Realistically though there is always going to be some number of mistakes unless you have both automated double checking and a second human in the loop checking everything.
When you refer to Pipes-esque - are you talking about yahoo pipes?
This happened to me exactly. I was at a YC company and thriving and then they hired a "director of engineering" that was simply an arrogant asshole. I tried my best to continue performing but the last straw was when I was given a very complex task, told to make any bug fixes and escalations my top priority, and then blamed for not completing my task because I spent all my time on escalations.

I was gone within 2 months after that with half the other team.
Could you be more specific about the "liberal definitions" of "cybersecurity purpose, threat, and indicator"? I've read all the computer security legislation that's been proposed in the last 8 years or so, and CISA had the least egregious definitions I'd read.

They even inherited the CISPA amendment that established that terms of service violations weren't cybersecurity threats.
I'm honestly curious, do you know of any games that remained commercially successful after open sourcing, without having some secondary meta-game source of income (multiplayer servers, f2p, etc.)

Eldritch, I know is, but I'm not sure how commercially successful it was.
Juniper is using Dual EC....are you kidding me? Now I have zero doubt this is Juniper's fault because of its cooperation with NSA to keep backdoors in its systems.

If I remember correctly even tptacek was claiming initially that "Dual EC is not so bad...not that many companies use it anyway, because they would be stupid to use a 1000x slower algorithm". Yeah, except some of the biggest networking equipment makers in the world who do use it, and who sell products to many other small and large companies, too. Quite a bit of an attack surface for the NSA.

The point was always that Dual_EC should've never become a NIST standard, no matter how "bad it was and that probably nobody would use it anyway". It was made a standard for a reason by the NSA, to convince at least some of the big companies to use it. And they succeeded in that.

We can only hope that the good people who work in standard bodies will never allow something like that to happen again, because in the end backdoors always end up being used for "evil", whether by the initial creators or by someone else who finds them later.
I used to live in SF and work 40 miles away (in Santa Clara), and yes, that is more or less exactly how it was. The one advantage was that going out on weekends was somewhat easier, since I didn't have a car at the time, and weekend Caltrain takes absurdly long to get to SF (an hour and a half), and if you miss the last train back, it's an even slower bus ride.
Both CISA and PCNA passed with large amounts of publicity and long review periods.
I feel like I'm living in a twilight zone episode. I don't think we're ever going to see an end to this and I think its going to get worse and worse and no one is going to notice until there really is no way out. I'm sick of seeing comments about voting bad / good lawmakers out / in. Clearly that doesn't work because most citizens don't give a shit because they're too stupid to understand what is happening. Even when you educate them they're so shell shocked by the news that they're willing to let the powers that be shepherd them into servitude. We're all megafucked. Just wait until trump worms his way into office and uses this to round up whomever he hates at the moment. Imagine if bush had this level of power when he made the comments about atheists not being real citizens... i'm genuinely worried about the future.
In Brazil we saw a brief explosion of VPN use to get around Whatsapp ban.

Now we are getting reports of people intimate videos being uploaded to porn sites... (considering whatsapp is not much safe in first place, it is no surprise... I even tried to warn people and convince them to use Telegram instead but "network effect" is a strong thing...)
I didn't leave. I guess I used the wrong tense.
Google Ventures 2015 Year in Review
Not sure if something like this exist but what if you could use a system where people could subscribe to you (a bit like RSS) and get all your content (a bit like newsgroups, so that a third party would have a harder time to figure out at least some of the metadata) but the recipients could only decrypt what is addressed to them personally or to a group that they are part of...
This bill only allows companies to share data that fit the definition of "cybersecurity threat indicator", and that definition requires companies to not knowingly share personally identifying information. It is not a particularly effective vector for slurping messages out of Facebook.
I am surprised at the number of anecdotal experiences people are using here to describe depression as a non-disorder. It's unbelievable that people cannot distinguish between depression caused by environment factors and depression caused by physiological differences.
I'd love more reasons to hate Facebook, but is there any real sourcing for that? @Snowden seems to be linking to BoingBoing, who then links to Fight for the Future[1], which just claims secret sources. OK, but are they known to historically have had accurate secret info?

Their landing page has this quote "If CISA passes, all your photos, posts, relationships, and likes will have a path to government databases." Which, from what very little I understand, is not quite true. At a minimum, "government databases" already have such a path via subpoenas, NSLs and such right?

I want to believe FB is worse, yes. I'd just like a more convincing source to give people.

1: https://www.youbetrayedus.org/facebook/
All I can find from that Snowden tweet is https://www.youbetrayedus.org/facebook/ . Are there any news articles explaining what the source of this claim is? That's a big deal if true.
Google Cloud Shell – Free until end of 2016
Movie trailers are baits too. Every product/service has a "clickbait" why can't articles have them too?

Magazines with hot women on the covers are buy-baits too.

The point of writing stories is so that people read them. If as long as the content is satisfactory, clickbaits are more than logical.

People are just used to traditional news concluding everything in the title. What if we've always only clickbait titles? Would you feel the same way? Our next generation will probably see this as a norm.
Or a proxy registrar, unless they've changed that rule since I registered mine.
It also seems to be addressing, by "cybersecurity threats," the act of trying to hack into information systems. The law seems to be paving the legal way for facebook to work with google and ycombinator if there was a network attack by <insert cyber bad-guys> in order to set up defensive measures against the attack and perhaps share information as to who and where it is coming from. Personal information must be removed from such shared information, and if not the insulted party must be notified.

Specific details of how to do this must be decided in the next 90 (or was it 180)days and compliance oversight reports are required regularly.

I'm a little embarrassed, but I must have missed the part where this makes things worse. I'm being honest here: If I should be upset about this I need to know why, please.
It's useful to note that Paul Ryan gained his position by saying shady backroom deals like this, plus giving Congress almost no time to read and think about the bill themselves, were the exact things he promised to stop.

He did? I thought he got the job (after much cajoling) because he was the only candidate the moderate and right wings of the GOP could agree on.
> organization imperatives

That's my feeling as well. My sister has worked in tech since 1981, but it's not Silicon Valley tech. It's large company tech like IBM and Citigroup. I asked if she's ever felt discriminated against and she said never. The closest she's come is working for a company that had a bit of a military culture because most of the senior leadership were ex-military. But even there she never felt discriminated against for being a woman per se.
I have Ghostery installed and enabled (along with uBlock Origin) and I still saw the modal popup:

http://thumbsnap.com/i/PQ0bY923.png?1219
Wait, I've been googling gcal for the last 2(?) years when my calendar tab needs populated when I could have just been clicking on the chessboard thing in gmail??! I was wondering where the hell gcal went!

>> Google decided to hide other apps behind an unclear icon in the Gmail UI, they apparently got a stream of support requests, like “Where is my Google Calendar?” <<
I dunno how are your sourcing those parts:

http://pcpartpicker.com/p/wwhHP6

But you seem to be picking very overpriced components. Also You are bit of outlier if your motherboard supports only DDR2 RAM. DDR3 has been in market for like 10 years and it is pretty cheap.
Maybe if you actually worked in said industry you've have a better sense of the environment. I doubt the average nurse (male or female) knows much about how the tech industry works.
The 14 votes against, FWIW:

Baldwin (D-WI)
Booker (D-NJ)
Brown (D-OH)
Coons (D-DE)
Franken (D-MN)
Leahy (D-VT)
Markey (D-MA)
Menendez (D-NJ)
Merkley (D-OR)
Paul (R-KY)
Sanders (I-VT)
Udall (D-NM)
Warren (D-MA)
Wyden (D-OR)

https://www.techdirt.com/articles/20151022/10133932597/cisa-...
Right. It seems like it's essentially an object-space telecentric view (https://en.wikipedia.org/wiki/Telecentric_lens).
Kindling projects
FreeSlick
New development? Actually they have been doing that probably all around the world for years now.

A friend of mine in Germany also got such a letter once and wrote something back along the lines of "Wasn't me, don't know what you are talking about" and he never heard from them again.

They try to profit from the fear of everyday people who rather pay up front, because they don't want to risk that the case goes to court, no matter how unlikely this might be. And it's even understandable, ordinary folks probably really panic when they see such a letter and all the legal talk and underlying threats that are made.

It's as despicable as patent trolling.

First avoid such a situation:

-) use vpn if possible (check with their policies, whether they allow torrent traffic or maybe they ban it from certain servers, preferably use a provider that does not log)

-) quite simply never download newer material with big companies behind them from public trackers. most of the times these letters regard the newest Hollywood movies, a current album by a big pop star or the newest game everyone has been waiting for, not Taxi Driver, The Godfather Trilogy, Quake 3 or the weird Japanese pop band from the 80s you are into

and if you are in such a situation:

-) consult your lawyer or search on the Internet how to properly respond, do not just pay!
By default Telegram stores the plaintext of every message on their server?
Via https://twitter.com/tqbf/status/678065993587945472?ref_src=t...
It's great to see this type of event in Baghdad. Although a small event of 17 people, it looks like there were some big company names there or on conference call; Phizer, The State Department, Zain, etc.

I think these type of tech community events are important in building an open, collaborating tech environment. I hope they can continue to have these events and find more sponsors. It's a great way to introduce tech and programming to people who think it's too complicated to understand. Show them it is accessible, show them the resources available, and let them find the joy of building something.

Keep up the good work Ali and Marwan.
At least in Australia, the tin mine scenario would go like this:

an exploration company would peg an exploration lease-the monopoly right to explore for minerals on that land. They pay the (state) government for the privilege.

when an economic deposit is discovered, the company can apply for a mining lease-the monopoly right to exploit the tin deposit. The pay the government for the lease, and also a royalty on the minerals.

Whilst you can say that the mine was not there, and someone had to invest capital to exploit the deposit, the minerals themselves were always there, and once extracted are gone forever.

Perhaps the price at which the government sells monopoly mineral rights relative to the profits sets the boundary between rent seeking and not?
As a European constantly reading about total compensations in the 200k+ seems like FUCKING crazy to me, holy shit. What the hell.
Me too, fwiw.
Milk and semen are not symbolic to Catholics. Neither is urine.

the symbolism may be in their exclusion and denial from the catholic cult. in many of its strains catholicism is so exalted you're only supposed to have an eternal soul, your body is filthy.

which brings us back to modern art is just juvenile satire. my take on this is it's necessary (and won't stop being necessary as long as there are new people coming to this world) but in now way should be the only or the most cherished form of art.
I don't think price reduction was among the primary goals of this project.

Still, would you prefer to not have an option to disassemble the PC and replace it piecemeal? I know I wouldn't: more options is good. Also, in theory modularity creates possibilities for users to create uncommon configurations that would not otherwise be manufactured or cost impractically much (because of their rarity); it is not the case for Fairphone, but is the case for the PC and should be the case for Project Ara.

E.g. I have been modifying my PCs for low noise the way that should be outrageously expensive to buy serially. With Project Ara I should be able to assemble a high-end phone without the camera; a phone that goes all-out on battery life at all costs, etc. Fairphone has a noble goal to develop a smartphone with minimal harm to people and the planet, not necessarily a cheap or modular one: it is repairable (called modular here) only as a means to extend it useful life and thus reduce harm to the planet, even at the users' expense.
Borowitz is not as clever as he thinks he is, and the attempt to make a satirical analogy here in imaging Shkreli hoist on his own petard fails because lawyers lack the defining feature of drug patent law which made Shkreli's notoriety possible: if you need a particular patented drug, one company has a monopoly on it; in contrast, there are many lawyers you can hire to defend yourself. The analogy simply doesn't hold.
I'm honestly starting to think sander's is our last hope -- I was on the fence until seeing this. Meanwhile he is getting undermined by the media.
I generally agree, but consider that talking about a dick is not just about anatomy. If you call someone a dick, it means he's an overly aggressive asshole. If you call someone a pussy, it means he's weak. If you joke about the size of someone's dick, it means he's insecure. Etc.
DNC Voter Database Breach – NGP VAN?
I'm curious as to what reality is vs. mainstream media / DNC interpretation of how a "firewall" was dropped to expose Clinton voter records to the Sanders campaign. Anyone here have any knowledge of the software in question and NGP Van's stack? Or their workflow?? Was the data exposed in an API, or codebase, or user interface? Thanks in advance.
You're correct it's domestic sovereign debt.
Link to full text page: http://advances.sciencemag.org/content/1/11/e1500793.full
Sure.

CISA defines "cybersecurity threats" and "threat indicators", which are now legalese versions of the stuff Intrusion Detection Systems track: exploit code, vulnerability information, and wire traces of attacks.

Everyone already collects this stuff; that's most of what network security teams are paid to do. The government has several huge network security teams (they operate the largest IT system in the world), and, of course, the whole Fortune 500 does as well. All these organizations are collecting information about attacks and siloing it.

CISA requires the government to establish a process to share indicators with private companies. So when analysts or IPS systems or anomaly detection schemes running inside FedGov networks generate a signature for an attack, there will now be federal rules requiring them to submit that data to a process that will disseminate it to the private sector.

CISA allows the private sector to do the same thing in reverse, sharing their data with the government, which will in turn share a facsimile of that data back out to the rest of the private sector. The bill requires companies to have a process to ensure they aren't knowingly sharing any personally identifying information, and they are only allowed to share information that pertains to the types of attacks defined as "cybersecurity threats". Those attacks specifically exclude terms of service violations.

Unlike CISPA, which was a more benign bill, CISA explicitly allows local, state, and federal law enforcement to use threat indicators to prosecute crimes. CISA has a very short list of crimes whose prosecution can be assisted with shared indicators --- identity theft, espionage, and trade secret theft. PCNA, the (now dead) House version of CISA, had a broader list.

Unlike the law of the land before CISPA/CISA/PCNA was proposed, there is now a path for private companies to share data with the USG regardless of the other regulatory regimes they're under. This is good if you think sharing attack information is very important and bad if you think companies that work with regulated information (driving records, credit scores, medical data, student records, &c) should operate under different, stricter rules than other companies. Much of the impetus for these bills was to overcome objections from legal at BigCos that would never allow any information sharing out of fear that such sharing could get them sued. They are now immunized from those suits, so long as they're in good faith sharing only information about actual cybersecurity threats.

That's pretty much it, at a high level. It's a very short bill, just 30 pages, and most of the interesting stuff is in the definitions at the top of the bill. It's worth skimming.

https://www.govtrack.us/congress/bills/114/s754/text
As far as I know the 2010 attack isn't applicable to actually deciphering 3G in the real world. From the paper:

"However, the new attack uses both related keys and chosen messages, and thus it might not be applicable to the specific way in which KASUMI is used as the A5/3 encryption algorithm in third generation GSM telephony. Our main point was to show that contrary to the assurances of its designers, the transition from MISTY to KASUMI led to a much weaker cryptosystem, which should be avoided in any application in which related key attacks can be mounted"

The changes from MISTY to KASUMI were justified by the designers, they weren't random. The reasons were to make it easier to implement in hardware, and more efficient. They explicitly stated they thought the changes wouldn't make it more susceptible to related key attacks. I am skeptical it's the result of IC manipulation.

Additionally Hailstorm is supposed to work against 4G connections and those use AES instead of Kasumi.

I suspect Hailstorm is not doing anything more sophisticated than jamming 3G/4G frequencies to force a downgrade.