skysight-inc/HackerNews huggingface dataset:
I don't know about D&D, but Wizards keeps an incredible archive of Magic products. I would also put money on it being TSR that lost things, if in fact things were lost.
> Which, I believe, has been basis of computer "fraud" cases.

This can't be true. Surely the argument for why, say, a WSJ-paywall-bypassing-tool causes damage (in the legal sense) to WSJ is that it allows people who would otherwise pay for content to get it for free, thus depriving WSJ of income.

Moreover, I don't think prosecutors need to prove that you caused harm in order to charge you with computer fraud, since, for example, CFAA falls under criminal law.
I use feedly (http://feedly.com/) daily. My list of RSS feeds needs some curation, but I find it easier than going to the sites directly.
I have a feeling nobody really understands Tumblr (definitely not its own staff). Of all the social networks, it's the absolute champion at connecting you to people who think alike. So for you, whoever you are, Tumblr will be a particular thing. And it won't be a bit like that for the person next door. Every variation of "Tumblr is full of ..." just lays bare who it is you choose to find and follow.
and it gives you logging as well
Putin’s Next Land Grab: The Suwalki Gap
Then how can you get into the situation that the shipped binary packages can't be built with the shipped toolchain or shipped dependencies - isn't that what the build daemons do, use the system to build itself? I mean if they use the previous release or something that's fine too. Whichever way they do it, surely it's documented internally, because it's the kind of thing developers would need to know when developing. I can't believe it would be a case of "if the build doesn't build ssh into the build daemons and update them until it does".

I mean a developer working at Canonical, trying to make a change to one of the packages they're preparing for distribution, has to have some way to answer the question "what version of gcc is being used to build this package". Whether that information is kept in the source tree, on their wiki, or on a post-it on the employee fridge - in any case, it's part of the source in the preferred form for making modifications, because it's, well, part of what the employees use to make modifications.
> We have been working with federal authorities on these matters and their criminal investigations are ongoing.

I cringe when I see companies say this. As if we're supposed to feel like the "hack" was somehow more sophisticated than spearfishing or social engineering because there's feds on the case.

There's a hole in your security. Diligently look for that hole. If it's a mistake own up to it fully and apologize. Make your system robust. If you don't have the talent in your organization to do this, then hire more talented engineers. Compete with other companies for good people.
On Eating People or How to Find the Next Big Thing
Google Increasing Results with Four Ads on Top, Reducing Right-Column Ads
Stateless vs. stateful web apps
A truly powerful statement is powerful regardless of the background of the person who wrote it.

Sometimes statements can be powerful because of who said it... but dismissing a quote just because someone has a certain background? I don't like an idea being discredited because of a person's impact of society.

I really appreciated reading both of these quotes. I'm glad they were contributed.
This analogy is garbage. No building is being destroyed. The FBI is asking for a key to this one unit, and the fact that Apple even has the ability to make the key should be evidence that the system isn't as secure as you think.

Inside the storage unit is yet another invincible locked container, but the FBI is betting on the key being easy to guess.
I'd certainly pay quite a bit for the original drawing/painting for the Tarrasque[0]

[0] - http://www.monkeyinthecage.com/wp-content/uploads/2012/07/Ta...
Perhaps in terms of gates, but LUTs represent a much larger fraction of resources on an FPGA than the block RAMs. In other words, if you wanted to pack a lot of these onto an FPGA you'd run out of LUTs before block RAM.
Agree, edited.

It feels like they have no clue at all how it happened, but want to fix some issues nevertheless.

I'm not sure if they thought this would bring confidence back. Because if so, they failed hard.
This is an odd debate. Let's say a restaurant declares "veterans eat free." This blog post is like a friend telling you "Hey if you tell this restaurant you're a vet they'll give you a free meal." No one said it's legal or ethical. It's lying to trick someone into giving you something at their expense.

I think the relevant point, underscored by the author's last sentence, is it doesn't matter who you open a back door for - it opens the possibility for anyone to barge through.
Caterpillar's New S60 Smartphone with FLIR Thermal Imaging Built Right In
It sounds like this is exactly what Facebook plans on doing?

> Therefore, we're committed to making it easy for most components and libraries built on top of React to be compatible with two major versions at the same time. We will do this by introducing new APIs before completely removing the old ones, thereby avoiding those cliffs.

As long as they provide deprecation warnings for APIs that will be removed in the next version, it'll work exactly like you say.
Your DVD can have now beautiful cover
And then we're back to the bad old colonial days which the west gets so criticised for...
It appears that the firmwire of the Secure Enclave can be updated with the Apple private key. It isn't iOS, but for the purposes of this, it might as well be.
I registered my email with so many services, that if I changed my email to a different one I can't change my email on each account because I got some I can't remember.

Is your service free?
It is easier for a "failed" CEO to become CEO of a new company, than it is for a non CEO to become a CEO (of a publicly traded company of significant size)
> It seems the Justice Department admits that Apple's reputation for privacy and security is of great value to the company.

in China.

Can you imagine what a reputation for standing upto governments (in a democracy, but with most of your employees as taxpayers) will look like?
https://skeptics.stackexchange.com/questions/28350/are-these...
Disclaimer: Linode employee

Regardless of the severity of the means, the fact is that this sort of attack is entirely illegal and involving law enforcement is a clear requirement.
> The other obvious choice I would think would be to call the paramedics! Is there some reason that a person having this kind of a crisis shouldn't have an ambulance called?

In a lot of jurisdictions you'll get both with the same call if it's a mental-health crisis. The dividing line between what's a "police" matter and what's an "EMS" matter varies. Generally in the US (at least in places where I've lived), EMS can offer to take you to the hospital, but, broadly, they can't take someone who doesn't want to go. Compelling someone to go to the hospital who doesn't want to go is often a judicial matter devolved to the police, with all the attendant problems (e.g. high-velocity lead poisoning) that involving the police carries.

What we really need more widely in the US are some sort of cross-functional "mental health crisis responders" who are mainly medical (rather than law-enforcement) personnel, but are given just enough of the necessary police powers to legally compel a person presenting a threat to themselves or others to go to the hospital if it's necessary. That would allow the police to remain uninvolved in a large percentage of routine mental-health emergencies.

It is ironic that the movie / Broadway trope of having "men in white suits with nets" come after you if you start acting funny is actually better than the current situation that exists, where you run a good risk of being shot with impunity.
I missed that part. I guess you're right.
Show HN: The Safeweb Engine (A new cybersecurity platform)
Make something of your ridiculous domains
Uber Drivers Up Against the App
I think Google's project is less about preserving the book, and more about indexing the content which is a subtly different goal. They care less about high fidelity reproduction and more about content acquisition.
I'm probably not a good person to ask on this.

I must confess, I rarely do anything professionally that I don't want to do anyway. In other words, I don't have to "make" myself do something - I do it 'cause I want to. I'm super curious.

That said, I need to learn Javascript for a side project. I don't find learning a JS very interesting in itself but combine it with something that do find interesting (3D graphics, Three.js) and it becomes fun. Sort of like spending time in France and learning French "accidentally".
Clearly Apple's security has market value but that needs to be balanced against the benefits to society as a whole. Just restricting this to US law it seems Apple is not defending an existing right to privacy of the "man's home is his castle" sort. Those have been limited from the beginning by warrants and other acknowledged mechanisms of government to poke its nose into people's private affairs in the interest of the general welfare. The "right" that Apple is defending seems new and much more absolute--that you may possess devices may not be opened under any circumstances whatsoever.

The question of whether such rights exist is separate from the question of whether breaking into one device threatens security of all others. If true that seems to call into question the assumptions on which data protection algorithms are based. In other words, assuming you can create truly unbreakable encryption and it only works if there are no backdoors, is that really a data protection strategy that meets the needs of society as a whole? You could argue it's flawed even if the mathematics work perfectly.
Harper Lee (played by the great Catherine Keener) is a major supporting character in the film Capote.
TL;DR: just a rant, about that flickr feels to be plateaued and better options are rising, even though it's still rather good platform to keep and share your photos.

Flickr is great (with its 1TB of storage), though I recently tried to join '500px', since then flickr looks like desert with tumbleweed. It's a bit of exaggeration, though 500px is way more exciting, your photos are more easily shown to the public. People are encouraged to rate each other, etc. Also it has a marketplace. All in all 500px let's to improve my photography, whereas in flickr 90% people who've seen my photos are people, to who I've shown them. Also flickr's home page have the same set of pictures on carousel for weeks, where in 500px it's always fresh.
We just launched the first version of our Safeweb Engine, it lets you set up a cloud on commodity hardware and deploy non-persistent desktops and browsers.

We call these disposable instances, users surf the internet on them without compromising their local machine or network.
Polonius: Neither a borrower nor a lender be,
For loan oft loses both itself and friend,
And borrowing dulls the edge of husbandry.
I would if Google Reader still existed.
Semi related question: One has to be an accredited (i.e. wealthy) investor to invest in startups, but this does not apply to employees exercising options. Does that mean that employees who do not meet the wealth requirements to be accredited are only ever able to sell ownership, and only to accredited investors?
One problem: Debit cards are automatically paid down at zero all the time. None of the credit cards I've ever had have made it easy to automatically pay down to zero. You have to do it manually - you remember most of the time, then you're a bit late one month, and it's enraging. Credit card companies have every reason to make this difficult.
It may be achievable to build a phone case ,that connects to the USB, and some storage and a touchpad that achieves something similar to the secure enclave(and the pass code),in a more open fashion.
Also, in the early days, Apple basically said "buy a new phone". They got some bad PR about it and came up with the repair program. I think it well predates the 5S though.
Measuring the Leakage of Onion at the Root:

https://www.petsymposium.org/2014/papers/Thomas.pdf
Yeah, that's what I was referring to. There was old D&D material on DriveThruRPG for a few years before Wizards up and made them pull it. This was back in 2009, a good while after D&D 4th Edition had come out. The PDFs weren't available for purchase legally again until the beginning of 2013.

I ain't gonna speculate on motivations, but the timing of these events sure does line up with certain publishing decisions that Wizards was making.
Tax authorities now loosely define the sale as "change of ownership". In some other municipalities they have some ridiculously high property tax rates (e.g. NYC's reaches 19.554% http://www1.nyc.gov/site/finance/taxes/property-tax-rates.pa... ), which they then exempt (e.g., Texas homestead exemption), but exemption is only granted to natural persons, not companies, which makes the whole setup costly.
Doesn't this just prove that CFAA (and similar laws in other jurisdictions) is massively over-broad and needs to be narrowed. I'm surprised there is not more campaigning for CFAA repeal and replacement with far narrower legislation.

If someone hasn't exploited a security bug (I mean a real security bug, like a buffer overflow, I don't consider behaviour such as serving up content to certain User-Agents only a genuine "security bug"), and they haven't bruteforced/cracked/acquired a password or private key, and they aren't sending unreasonable amounts of traffic ((D)DOS), it should not be a crime, and the law should be changed to reflect that principle. The law should reflect the common sense of the technically literate, but it doesn't, because it was written by the technically illiterate.
He is not a squatter. Stop with the arbitrary use of squatter for anyone who owns a domain and isn't willing to give it to a company which didn't even exist at the time of original registration.

Separately buying and selling domains is a legitimate business (and there are companies that do this on the stock exchanges).

Squatter dates back to a few cases in the 90's where tech guys held their companies names ransome or certain people tried to register unique trademarks with the clear intention of holding out for large sums of money.

Nothing gives Tesla the god given right to just get that name because they are Tesla (in these particular circumstances).
If Atticus were a one-dimensional character, then a complex analysis like this one couldn't have been written:

http://www.newyorker.com/magazine/2009/08/10/the-courthouse-...

He wasn't one-dimensional, he was very complex and real.
Searching public data is already decentralized: anyone can run a web crawler and search engine. Search engines, recommendation systems, and AI assistants that use private data are harder to decentralize, but they're also where all the gains come from: I'm stuck with Google unless I want to move all my data somewhere else, and that's hard.

To decentralize private search, we'll build protocols for publishing your private data to cloud services that represent your interests. For some purposes, you'll publish data to services that keep your data isolated. You might even publish that data to your own machines. This works for email and cloud storage like Dropbox. Other purposes require data to be combined to add value, like recommendation systems and AI doctors. Services will compete with each other for your trust so you'll pick them. The bigger they are, the more useful they will be, so they're vulnerable to collapsing back into a monopoly. Anti-monopolists will give their business to competitors to keep them alive.
> Given the goal of protecting the user's data, it would make a lot of sense for the Secure Enclave to refuse to apply any software update unless the device has already been unlocked with the user's passcode.

This is also speculation, but perhaps this is why you have to enter the passcode on device reboot. This may be simply a software protection (see talk about being compelled to provide a fingerprint), but it may actually be a necessary step for the secure enclave to boot as well.

I also suspect that Tim Cook's announcement doesn't mean to imply that such a theoretical attack currently exists, but rather than one may exist in the future that Apple could be compelled to comply with.
Cryptocat's usability was also problematic; it was usable because it cut corners. Because of that, the "bar" they "set" wasn't entirely helpful.
It isn't possible to open source the hardware. If the secure enclave is really secure, it has parts that by definition cannot be examined or verified. So hardware specs can be open, but you'll never have any guarantee that's what you're getting because hardware is always a compiled blob.
Fair point. Intent matters. However must it be demonstrated that there is some specific malicious intent behind changing a request header versus simply changing your user agent for the heck of it?

In a related point, some news sites load a modal and prevent scrolling over an article asking you to sign up. However if the full article is included in the response and I read it by simply viewing the response body (HTML) is that circumventing security? Actual example. In this case modifying how the response is rendered in my browser, I can bypass their intentions.

Obviously the better way of doing this would be to not send the entire article content until they've determined I should be able to view it.
I interviewed at Linode. They are really nice guys, but they are located in a really odd area of New Jersey.

This is fine, but no remote jobs. I actually would have taken the job if they offered remote employment.

I've also only ready bad things about the executive level management. I asked the interviewer about it, they did seem to confirm my suspicions in this regard, but he did say that they had some great new technical leadership that will be driving the company forward.

Seems they really have very flippant executives, or it's just their CEO.
Go contributors did an AMA
This superficially reminds me of Metallica's recent request for fans to send in old materials, which have been compiled into large box sets for the reissues of Kill 'Em All and Ride the Lightenting which were, in their heydey, bolstered by fan passion and tape trading. Now that the material has been curated / massaged / etc, fans can get ahold of the box sets for the one-time fee of $149.99. Each.
SF Entrepreneur's Open Letter Saying He Shouldn't Have to See Homeless People
The Zenefits Scandal Is What Happens When Start-Ups ‘Disrupt’ a Regulated Sector
Block RAMs are 2-port. You can up it to 4 ports by doubling their clock rate, if the rest is merely crawling on 100mhz. Yet, each core would eat up one port for reading its microcode every clock cycle, so you can only have up to 4 cores for each group of 4 brams with stored microcode.
I don't think (not a lawyer) that they could do anything if you put a disclaimer that it is a parody of their "creative work."

That should allow use of slightly changed (LessAdsDailyMail) trademarks, and proper citations could handle the rest.
They are so awesome they basically took over the OS by creating systemd.
If Apple doesn't really care about privacy for its own sake, and this public support for customer privacy is just a cynical ploy to get my dollars... Fine.

Let's hope more "greedy corporations" seek out my business by supporting human rights. I'll buy that.
It's also the only practical thing to do if the status quo is against you.
I use Evernote (paid plan), but it's been my impression that the level of intuitiveness of the UX has steadily declined, to the point where I have no idea what to click to make it do what I want.

Like Yahoo, some companies are very challenged when it comes to building intuitive UI/UX. It's too bad the market focuses on financial performance and market share rather than more fundamental aspects of competence.
I think you've hit the nail on the head here. People like to feel part of a collective group, and the Internet's biggest collective group is outraged people. In this case, outraged nerds. We collectively 'agree' that outsiders (that is, idiots) use Comic Sans. Then we attack the style, rather than the substance, because they didn't know of the unwritten rules of our subculture.
But peering into your cybernetic mind extension would be more akin to compelling you to testify against yourself, which is constitutionally prohibited.
Types in JavaScript
On Avoiding The Major Cliff:

The reasoning for the strategy is sound, but does anyone know the rough cost of leaving in the deprecated apis from the previous version, in terms of additional gzipped file size percentage? Say from 13 to 14 as an example?

Further to that, anyone know how effective various dead code elimination tools are at stripping out those unused deprecated apis, for bundled apps that don't have any dependencies requiring anything less than the latest react version?
I too have a Kinesis Advantage and have had one for years: http://jakeseliger.com/2011/07/17/further-thoughts-on-the-ki.... So far it appears remarkably durable, and I much prefer it over conventional keyboards (though I still use laptop keyboards when I'm traveling).
> Curious what your point is?

I took his point as: Some people buy an expensive car they can ill afford when they could buy a cheaper one that will do the same job.

Like my TV example, but with a car.
If they make sending your DNA a requirement of consuming their content, then yes, you send it to them if you want their content. That's their right, as owners of something, to dictate its use.

You aren't entitled to WSJ.com, NBC, or Fox.
That used to be a marketing thing and the engineering version was always 1.x, but starting with 9 or 10 can't remember which it's going to be x.0.
Is that significantly different from viewing google's cached result of their legitimate access? The result is the same.
Even Tiobe will give you better data than that
I feel DO's level of service is on-bar. I've gotten multiple discounts from DO for "annoyances" I wasn't even annoyed by.
Has any HNer participated in such a secondary sale? I think it could be informative to describe the experience, whom you dealt with, how a price was agreed upon, how your company discussed secondary sales, etc.
> This is more money than the typical American 40 year old has saved up their entire life (including retirement accounts)

Seriously? I feel like an old man. I had that much money saved in less than a year from starting my first part time coding job.

In fact the whole not saving money thing seems a bit strange to me. My monthly cost have remained relatively stable for almost a decade while my salary keeps going up.
I chose the words "search provider" carefully.

In any case, the point stands: a studio buying Yahoo almost certainly doesn't want to expend time and energy maintaining Yahoo's foothold in Internet search. But that part of their business isn't for sale independent of the search business unit.
I think this issue is important and I hope Apple prevails over the FBI. However, I'm also left feeling that they're subject to this request only because of what amounts to a security flaw in their own devices.

How/when can I run a phone OS that simply isn't subject to such known flaws and corporate manipulation? What are my options?
> Experimental code doesn't have to go to a package manager.

Just because code is experimental doesn't mean it doesn't need to go in a package manager or, more to the point, doesn't mean it won't benefit from having version numbers.
I find working out or playing computer games meditating as I can completely let my thoughts go.
Is this entirely automated?
A Flood of Data
Thanks! Glad that you like it :)