skysight-inc/HackerNews huggingface dataset:
The way I see the distinction is that obscurity is about hiding the security mechanism, whereas a key is about hiding one part of the mechanism that can be mathematically analyzed to give an estimate of how long it will take to break it.

The major difference here is this: with security through obscurity, someone can reverse engineer one product and then they've broken all products. This is why someone upstream said "security through obscurity doesn't scale". Security through obscurity is often okay if you're protecting one thing, but if you're using it to protect a system (like a pacemaker) that is going to be used by a lot of people, the more people who use it, the more valuable a reverse engineering hack becomes. Security through obscurity can't be individualized to provide security to each individual--if one system is broken all systems are broken.

Compare this with key-based security--if each instance of the system has an individual, randomized key with a large enough keyspace, breaking a key will only get you into a single instance of the system. It scales because the reward for breaking the security doesn't grow as the number of system instances grows.

Note that the problem with security through obscurity is basically the same problem with master keys, i.e. those used for backdoors or DRM. If someone can obtain the master key for the system, they can break all the instances of the system.
Facebook does have a habit of switching things up often (not in the best way) but right now it's not too bad, here are some examples:

https://i.imgur.com/vxtiePM.png

https://i.imgur.com/1epcmNA.png
I think the single socket assumption is justified because they are talking about pairing each executing core with a checker core partner, right? So I don't think the paper is misleading for that use case.

(I do agree that they aren't really fairly representing prior work in this area, though, and that nobody optimizing for high performance on commodity hardware is likely to be using 4kb pages).
Yeah, I don't really by the "they planted rice and it was tedious, therefore they are good at math."

For a long time, Westerners were dominant in math.

It's only very recently that we have seen East Asians doing well. And, I don't know that it persists at the graduate/top level, it may only be at the high school and undergrad level.

I mean, East Asians have been growing rice for a really long time, so why does it mean now they are good at math.

Who knows, it's an interesting phenomena.
Yeah, it looks quite interesting. I saw it was crowdfunded, but I missed the campaign, since they added Linux support only later as a stretch goal (which was reached): https://www.kickstarter.com/projects/rockfishgames/everspace...
There are cheaper lenses and CCDs which might strike a better price/performance ratio too -- I think that was the original thought behind saying "100k is too expensive!".

Of course, those items you linked are beautiful machines of precision and quality. But maybe with a cheaper system, more targets can be tracked at the same time. So a $1k lens with a $1k sensor in a $500 tracker gets you 40 "telescopes" for $100k instead of 1~2.
Interesting points about the automotive world.... and I absolutely agree with you about the certification problems with a mix of safe/non-safe components.

I've never heard the 2xN = 1x(N+1) argument, but will that improve for >2 ? e.g. triply-redundant systems?

I think the root problem there is the "wishful thinking" isn't it?
yep- and let me keep my privacy too. FB makes about $1 per person per month in revenue. I would pay more. The "free" tier is maybe good for those situations where the user can't afford it.

Oh well, I've been suggesting this for a long time to no avail.
They mention the hardware used, shame there is no mention of the software used. Or any home brew software open sourced. :/
I do not think that ad blockers can win this cat and mouse game. Ads don't annoy a large-enough percentage of humans. And the ad industry is the lifeblood of several other business communities, each of which is many times the size of the ad blocking industry.

I had lunch with one well respected publishing CEO last week, who told me that his single largest advertiser was Smuckers. The peanut butter maker. Smuckers is a real business, supporting real people, making real stuff. They know their business better than anyone else. And every day of every month of every quarter, they seem to decide that they need advertising.

Once you start thinking about it that way, you start to understand why advertising is one of the oldest industries in the world.
Show HN: OpenLoops, plan and manage your projects effortlessly, while you chat
Last year I posted my startup (called OpenLoopz at the time) to Hacker News expecting it to be ignored. I was hoping for a few comments at very best, but to my surprise the response was outstanding. Sure, most of it was negative, but even the harshest feedback was intended as constructive and I took it that way. It was a massive learning experience for me and I was thankful to everyone who took the time to give feedback. Here is the link if anyone is interested: https://goo.gl/CbntXB.

Once things settled down, I followed the advice on HN and took some time away from the project. I found another contract and when I was ready, I started working on a more focused version of my app in my spare time. A year and a half later, the result is quite different but with the same fundamental idea: to provide a simpler, more developer-friendly way to manage software projects by focusing on improved team communication.

https://demo.openloops.io/about

It's not finished. I’m showing it as a demo for now while I test and refine it. I’m trying to go against my instincts and show it publicly earlier than before (another lesson I learned from the HN feedback).

I also have a separate instance that I am using to manage development of OLS which is public so you can view it without an account:

https://ols.openloops.io/dashboard/LuWSk44kKnSB56qu8

Please let me know what you think. Even if I get 5% of the feedback I got from the previous version, it will help massively.
Increase Your Website Conversions
Proxying ads would be a big security risk though since it means they would run within the same sandbox as the rest of the page, which might be why it hasn't often been done yet.
By that argument nobody needs any money. Why pay rent when you can have https://primitivetechnology.wordpress.com/. Why pay for groceries when https://primitivetechnology.wordpress.com/2016/05/20/sweet-p... feeds you just as well? We just "desire it"
> If FB decided to shut down some features to ad-blocking users, do you think that would be unfair?

I think "they're welcome to try" is exactly the right response here. Nothing is "fair" or "unfair", at least not in a way that advertisers or ad blockers care about.

No matter what they do it's entirely possible to trick their scripts into believing I'm displaying ads, because they run not on facebook's servers but on my computer. Where I get the control.
Mining natural resources on the moon and asteroids could really accelerate Fusion power options for the future.. Great list!
It depends on your definition of "power users", I suppose.

But they certainly don't want to shrink their network. The moment I meet a fellow like-minded geek and "add me on Facebook" isn't the default way to stay in touch, they're in trouble.

And I'm already at the point where I have to ask if they're on Facebook first, since many tech people have already jumped ship due to privacy concerns.
"while you were away" nonsense? A feature that shows you popular tweets from only people you follow. How is that nonsense?
Have you got data that supports the 5x difference of opiate use being solely a criminal justice victory?

Seems like there are many reasons why that might be true.
Indeed. In fact given the extremely specific and unusual fact pattern and mention of jurisdiction, that post itself might well end up used to launch an appeal.
You're in the ballpark, 5x profit is typically the absolute max and that's for something established with steady or growing revenue. If you're down 10% YOY for the last 18 months you'll be lucky to get half that.

That being said there are always exceptions - my current business partner bought a side project for 10x gross profit because he had a lot of contacts in the industry that the owner didn't and was still able to make a great return when he sold a few years later.
Apple's walled garden has been subjected to criticism from open source advocates. And Windows 10's telemetry triggers a lot of privacy concerns, too.

But in our current security environment, what if these walls become necessary for secure computing? By analogy, there's a reason that many ancient cities were circled by a wall.
More encryption means less privacy
Networking is so fragile. I feel like DNS failover to another AS in another datacenter is the only solution for web services to actually have resilience against such failures.
Facebook is the only site I turned of my adblock for: They know everything about me, so surely they could come up with some really useful ads for products that I really want to buy?

Nope. I keep it of only because the ads always give me a chockle: trying to sell me "magic" amulets (I noted that I am an atheist), getting me to get the exact the degree from the exact university I went to (and, which I proudly listed on facebook) and getting gas from a company 150+ miles from my home.

Ads online are a joke, doubly so on Facebook.
Cloudera: Securing Apache Spark Shuffle Using Apache Commons Crypto
You would also need proper shielding to prevent van Eck phreaking from PS/2, monitor, video card, sound card, internal memory bus, and other rf noise.
<evil-mode> I'd imagine you - by which I mean morally void publishing execs - take money for reduced ads and then charge a premium for reaching the people who are paying to remove ads.
This is why you need defense in depth: physical seals on components, either protecting cables or keeping them clearly visible where someone can notice tampering, and – above all – having the physical space setup to strictly limit someone's ability to bring arbitrary objects in or spend time alone with sensitive hardware.

Consider what someone with the time, skill, and access to do that could also do without that: opening the case and directly installing some sort of device, planting a camera which records you typing passwords in (“oops, left my cellphone sitting out. Won't happen again!”), planting a radio receiver which opens up all sorts of side channel attacks, installing a passive network tap, etc.

A guard with a metal detector and strict limits on what you can bring into the building or what tools you can use inside is going to do a better job preventing all of those.
Not sure how possible it is, but i've used Javascript from the web console to do some interaction with Facebook, perhaps they have restricted this though?

But if that is allowed that could be one route, getting all the elements by Xpath that are posts.

Otherwise automation with Selenium or similar could work?
Why Should I Care What Color the Bikeshed Is?
There will be a live chat with the author of the article, Nick Trefethen, on Thursday, August 18 from 12 noon - 1:00 p.m. ET through the comments page on the SIAM News site: https://sinews.siam.org/DetailsPage/TabId/900/ArtMID/2243/Ar... Be sure to join us and ask any questions of the author regarding this topic!
Sorry to burst your balloon, but this has nothing to do with zone plates, or even "holography" in the strict sense; no wave interference is taking place. The mechanism is purely geometric: a gleaming scintillation of reflected light in a scratch from a point source will exhibit apparent parallax if the scratch is horizontal and curved. The greater the curvature, the less the scintillation moves, and the less the apparent parallax.
Like how Microsoft wouldn't miss people that pirate windows?
"> programming well has a much higher barrier to entry than people realize."

"Yet there are people making the same salary as me that literally started programing 4 months ago."

That certainly sounds like a low barrier to entry to me. Compare with the barrier to entry to becoming a doctor, for instance. There, in many locations, you'll be looking at a decade of proving yourself to the club, with hundreds of thousands of dollars in costs to do that, before you are even allowed to start working. Four weeks, and maybe a computer that costs hundreds of dollars, is absolutely nothing in comparison.

> this is why some developers think (and probably should) get paid more. Relative to their co-workers if they can make half as many mistakes they save time both upfront, and bug catching.

But it still boils down to supply an demand, and if employers do not demand those with better bug fixing ability, there is going to be no corresponding premium for finding such people. What your post does indicate to me is that programmers have done a poor job of marketing the importance of bug fixing ability (or whatever features of an experienced developer you think is important) so that employers start demanding the subset of developers who have those skills.
I wonder if this "anxiety" is correlated to personality type. I personally find libraries extremely relaxing and I'm not particularly academic or intelligent albeit I appreciate the pursuits. I bet other INTP types are similar.

Same with museums. My wife finds them either boring or anxiety provoking as she feels it will take forever to cover all of exhibits. I on the other hand prefer to take my time and actually read the notes on the exhibits.

It sort of boils down to time. Libraries and museums make me feel I have all the time in the world to explore and learn with out judgement, pressure, and/or deadlines.
If Apple really cared about privacy they wouldn't ask for your data. But, they quickly realized they needed your data to even be remotely competitive. It's funny that they criticize Google and other companies for using your data, but seem to think their impervious to the criticism because they're using "differential privacy". Apple is no better than the other companies using your data and trying to cloak their objectives with a PR campaign to justify their actions is typical Apple hypocrisy.
Looks like somebody missed the point. Hawkins Lab was not an actual DoE installation, but instead presumed DoE affiliation was a cover (after all, MKULTRA was a CIA program with aid from the Navy & Air Force, not a DoE program -- it would be beyond their remit).
In my case, I use social media to keep up with people I know, not to look at advertisements. Ads make me not want to be there (and I hardly ever am).

For the follow up, I assume I agree with the parent post by reiterating that what Facebook does on its own site is its own business, but if the company lobbied for legislation that required people to look at ads online, then that would be a problem.

Besides, if Facebook made the experience so detestable that people were willing to leave for another social network, then Google and every other college freshman would leap at the opportunity to be the next big thing.
Agreed. One of the entertaining quirks of Facebook ads is seeing which of my "friends" are being invoked as supporters of this particular advertiser. There's a small tribe of people that cast ironic "Like" votes every now and then -- fashionistas who like WalMart ... that sort of thing.

I'm easily amused. Those nutty Likes tend to amuse me.
It'd also be a big risk in that it'd be easier to cheat the ads as they'd all come from the same connecting IP. I doubt advertisers would appreciate that much.
Social Media Event – How to Increase Website Traffic and Revenue
> User adoption of ad-blocking software has grown rapidly in recent years, particularly outside of the U.S. According to estimates by online advertising trade body the Interactive Advertising Bureau, 26% of U.S. internet users now use ad blockers on their desktop devices.

Well, where are the numbers backing "particularly outside of the U.S." then?

I had the impression it's the other way around, and ad blockers have much higher adoption in the U.S. so i'm interested.
What concerns me most here is not that FB is going to force ads, but that this sets both a precedent and a HOWTO manual on how to do it. (i.e., same-domain, random JS names, same-site URL redirects, etc.)

It won't be long before EVERYONE follows FB's lead and proxied attack vectors will simply be the norm.
Facebook already owns my personal data and any content that I publish. Why should I also have to look at ads?
I think you're making some assumptions here.

The logical end-game is that FB writes their own rendering engine in javascript and targets a single canvas element, handling all the interaction events themselves. In fact, I think it can go significantly further than that. Ad blockers will need to get much fancier to deal with that kind of weaponized ad delivery.
Yeah, or visual, anything with this CSS attributes applied (so even if they randomize names it can still be blocked) to it or something. Maybe even the element at this rendered location, which would pretty much guaranteed kill them unless they wanted to change ad locations randomly. In any case this is a pretty trivial problem.
Yup, once you take the job you are at a tremendous disadvantage. You can quit but then you need to find a new job. If you quit the CEO just works the remaining people harder until you are replaced
Because thats my twitter feed. Really I don't follow more people than i can keep up with, so I want to read _all_ their tweets.

Which is apparently a usage pattern nobody at twitter gets.
Time for Sketch to make the move
You have to research and implement new attacks to design its defense.
There are people that would like Twitter to just be a straight-up, chronological feed of tweets from people that you follow.

I'd love it if the infinite scrolling shit went away and I could look at tweets by last hour, last 12 hours, last 24 hours, etc, and then paginate by day after that.
You know, I don't mind Google search ads or even static display ads (ie BuySellAds). And even FB's somewhat annoying and usually poorly targeted display ads don't bother me too much, since they don't slow me down and (very) occasionally actually show me something of interest.

I draw the line with potential attack vectors/XSS injections, interstitials, youtube video ads, ads that keep me or slow me down from accessing content, auto-starting video, ad-block blocking interstitials, etc.

I can't imagine that I'm in a tiny minority, so why isn't there a uBlock list that only blocks the worst ads? (no, I'm not talking about ABP here.. but an actual privacy-aware ad list.)
I learned C and IBM APL2 around the same time for financial apps. For APL, i read the Polivka and Pakin book about 30 times, not this edition, but the red paperback I used is apparently impossible to buy. Excellent book, it got me to where i could be competitive in obfuscated APL contests: https://www.amazon.com/P-L-Prentice-Hall-automatic-computati...
At home servers are extra space and electricity, AND potential outages if your ISP isn't 100% stable. I had outages sporadically for 2 weeks because a squirrel chewed through some coax outside my house. Im glad I didn't sporadically bounce emails for 2 weeks during that time. I'm sure a major provider has redundancy and controls in place for failovers... a single server in your house probably doesn't.
Deploy 7 MB Go VMs Effortlessly to AWS
It is also good to acknowledge to yourself, who you are, and stop looking around at others, feeling guilty and making excuses. If you want to code 12 - 18 hours a day, and you are not neglecting other responsibilities, then go for it. Don’t apologize to yourself that you aren’t into biking, marital arts, cooking, or skydiving.

I’m speaking to myself, BTW. I have spent a good portion of my life of explaining it to others and questioning it myself. I started programming in the 80’s though, and I had to fight through a wall of people with the mindset that computers were inherently “evil” and treated with high suspicion because they were not commonly understood. Yes, I grew up in a backwater.
interesting. i often wonder how the Android SDK got the way it is too.

my hazy guess was that Google simply hired a bunch of extremely smart programmers and let them code whatever they wanted. but there is no equally smart architecture/design team to guide, organize and filter the work. there's just a build system.

maybe that's essentially the same as your theory.
I only have a sample size of one (me), but I left a couple of years ago and you're not getting me back with an attitude like this... I can't imagine I'm the only one, however, I'm also willing to bet that you're right often enough for this tactic to increase profits.
Reminds me of Total Resistance[0], written for the Swiss population in case of occupation by Warsaw Pact forces.

Besides the sections on guerrilla warfare tactics, there's also section civil disobedience. Generally this involves workers acting as incompetently as possible:

"Employees in plants and shops

Work slowly. Turn out poor quality goods and produce many rejects. Take a break often. Treat machinery, installations and engines carelessly. Cause excessive waste. Use excessive quantities of water, power, fuel and grease. Take excessive sick leave."

0. https://en.wikipedia.org/wiki/Total_Resistance_(book)
He doesn't want to see it and there's no option to hide it. FB is also full of attention catching crap like that, it's all engineered.
Maybe this is good. After all, mathematical abstractions may cause more philosophical problems than they solve. What if there is nothing infinite in this world? Having a firm grasp of reality before venturing into hypotheticals can be good.
It's impossible. A few years ago I manually went through and "deleted" all content. It probably took me five or six hours all told. A year or so later someone was showing me something on their profile, and I noticed a picture that I thought was gone. Digging around, everything I marked for deletion had re-appeared publicly. I've since "deactivated" my account (there's no apparent way to actually delete it) and refuse to use the service, much to my family's chagrin.

tl;dr: Even if you delete things, they will eventually reappear.
Machine Learning Trading Systems
Presumably, the first time they spend any effort trying to make their ads less trivial to block, it won't be so easy.
Good you found some. And "somewhat developing?" It's their main, mission-critical platform:

http://www8.hp.com/us/en/products/servers/integrity/nonstop/...

It's why they ditched OpenVMS. Both advertised similar things for similar markets and hence were competing products. Now, HP doesn't necessarily update NonStop fast as with any legacy acquisition they milk for cash. They are updating and promoting it, though.

Let me look at the manuals. I recall the OS was called Guardian. Found it! Here you go buddy:

http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c02543407...
How I Improved My Coding Speed in One Week
Three Ways to Use the Cosmic Stack
is that why Google scrambles everything?
they are hosted in the Netherlands:

https://soverin.net/
Somewhere here, Noam Chomsky is still kicking and saying "I told you so"

http://www.tor.com/2011/06/21/norvig-vs-chomsky-and-the-figh...
GST in india will make a difference. Still a US Company is needed to be formed?
GST in india will make a difference? Still a US Company is that a good option. Does YC will accept the Indian companies as there would be no double taxation to remain Indian one rather than turning into a US entity.
Must they? The uninformed layman probably already things the ads come from Facebook[.com] as that's the address site they're visiting.

I expect them still manage to hide behind "common carrier" arguments.
So you have spam filter disabled and read all those great ads in your inbox?