skysight-inc/HackerNews huggingface dataset:
"Off the record" is meant strictly in a journalistic sense there (ignoring questions of whether Gizmodo constitutes journalism). He's saying that any response Jobs gives cannot be quoted or referenced by Gizmodo in an article. He doesn't mean "this e-mail will self-destruct in 60 seconds."
The most important for programmers. I'm thinking the ratio of web programmers to that of system programmers is overwhelmingly large.

C rocks, though. :)
Didn't know about it. The stuff will be there until tomorrow.
New York Times paywall goes up January 2011
Obama pledges to end the 'cosy relationship' between big oil and govn't
If you want something off the record with journalists you CALL THEM. E-mail is never, EVER, off the record.
css3 transition support. You could probably make something smaller, but this does work.

function checkForTransitionSupport()
{
var cssTransitionsSupported = false;
var div = document.createElement('div');
div.innerHTML = '<div style="-webkit-transition:color 1s linear;-o-transition:color 1s linear;-moz-transition:color 1s linear;"></div>';
cssTransitionsSupported =
(div.firstChild.style.webkitTransition !== undefined)
|| (div.firstChild.style.OTransition !== undefined)
|| (div.firstChild.style.MozTransition !== undefined);
delete div;
return cssTransitionsSupported;
}
Great. I would use it. Build it and I will come :)

Do you need help?
Is anyone else not terribly concerned about this? I wonder if this isn't an overreaction: I suspect I'd rather Google keep collecting wireless data and improving its location services. I'm vastly more concerned about, say, what Google is or isn't doing with my Google searches, my Google Reader behavior, my Gmail accounts...
Interesting reading, but way too many examples dilute the message.
Wouldn't mind one -- email is on my profile.
Check out the story, starting on page 16 of the embedded Scribd doc in this article, of the police making contact with the guys who found the phone. They allegedly tried to hide evidence in a church and a bush.
I definitely don't believe a degree is necessary. I work for a large company as a Senior (Linux) Systems Administrator at age 26. Most of the guys I work with don't have degrees. I went right into work and jumped companies and got promotions through hard work and self teaching. I agree that for some people it can be very beneficial but a degree is in no way indicative of your skill set and ability.
I believe Doritos takes entries from a bunch of amateur producers for their Superbowl ads, and then shows the ones that get the most votes.

So that ad may not have actually ever aired.
This bit made me do a double-take:

While in the residence, I observed Hogan utilize a black LG cellular telephone (bearing SN
911 KPFX363699) to make and receive telephone calls. Based upon my training and
experience, I know that persons who buy and sell stolen property often use cellular devices to
negotiate via telephone calls, email, and/or text message. I also know that the continued use of
the phone would likely overwrite and destroy evidence that currently exists on the phone.
Based upon the above facts and the fact that the cellular device was in plain view, I seized the
phone as evidence and to prevent any further destruction of the digital evidence.

But then Warner seems pretty sketchy:

A records check through County Communications revealed two (2) outstanding misdemeanor
warrants for Suspect Warner. Warner was subsequently arrested and handcuffed by Deputy
Jim Goulart of the Sheriff's Office for the outstanding warrants only. While seated in the back of
a patrol car, Warner made a spontaneous statement to Det. Josh McFall that he knew where
the missing flash drive was located. Det. McFall read a Miranda Advisement to Warner and
Warner waived his rights. Warner subsequently directed us to a bush located on the north side
of Harding Ave at the intersection of Lancaster Way, Redwood City. In the bush, I located a
512 MB Memorex thumb drive and a 1GB Lexar Media compact flash card. The Lexar 1GB
flash card appeared to be of the same type that would be utilized by the previously mentioned
and seized Canon SLR camera.

At approximately 0230 hours, I went to the Chevron Gas Station
located at 585 Whipple Avenue in Redwood City. I conducted a search of the premises and
located the missing Apple prototype sticker in the parking lot near the entrance

And this line was another odd one.

I therefore pray that a search warrant be issued.
Writing Portable HTML5 WebSocket Application using the Atmosphere Framework
"Ed told me that that software dump has been completed, and it's 'just a matter of time to determine which bit is flipped.'"

Can they not just diff it?
Its just a matter of time before somebody proposes through FB ad (imagine if it ends up going to the wrong girl ;))
I was going to mention when Jobs left Apple to create NeXT but creating the company that now is Apple is more or less going nuclear.
What if the system to guard against this itself got a flipped bit? What if the malfunction caused it to think bits in "normal" memory were flipped when they weren't, really?
"Pray" is a legal term. See definition (b) here:

http://www.lawyers.com/glossary/pray.html
Fair enough. I do nearly 100% web development, so I haven't messed with those yet.
They still don't give you anymore language interoperability than anything else, though.
Google Says It Inadvertently Collected Personal Data
On another forum I hang out there was a great long discussion about this when it surface - I was about the only one who thought it wasn't too massive an issue.

So there is concern out there; I'm glad they are being open about it. One less for the conspiracy theorists :)
My phone can record every conversation that goes through it. I suspect any modern phone can do that.
It's interesting to note that although the Voyager probes are sometimes depicted as small (compared to satellites like the Hubble, where images of it next to shuttle astronauts are common place), they're not. The diameter of the main dish, 3.7m, is nearly twice the height of an average adult, and height of the magnometer boom is comparable to that of a 3-storey house.

Even despite this size, the article mentions the current transmission rate, a measly 1.2kbs, despite what is probably the most ideal antenna size & placement feasible, both on Earth and on the probe. Doesn't this suggest there are pragmatic limits to the operational range of 2-way radio transmission throughout the solar system?

I am curious if future such deep-space science missions would be more effective if they instead launched swarms of micro-probes, where the probes arranged themselves radially around a center-point to effect a very large antenna, possibly up to 1km in diameter.

Also, having so many micro-satellite could allow for a substantial degree of redundancy to tolerate more rad damage, and ideally have less of the mission control acrobatics described in this article. (Which is not to discount the scientists' effort in any way, for it is amazing.)
I like to imagine a clenched fist and an utterance of 'crush them like insects' coming soon after in the story.
#1. Apple.

#2. Users.

#3. Developers.

You are last on Apple's list of priorities. If you are irritated by that, I empathize. Go write for a different device.
And Symbian has had Flash for at least 3-5 years.
I wasn't aware they were this hard to get. I've got 3 left for anyone that wants.
Gizmodo e-mail to Jobs: 'We have nothing to lose'
My university hands out unlimited .edu addresses to students that can be configured to forward to any email address...
Not to mitigate Brian Lam's douchiness. But while Apple's implicit filter on the media via "access journalism" might not be quite as blatant, it is far more evil.
I never started.
Political Correctness — The Revenge of Marxism
This is how a Privacy Policy should look
Exactly! I was going to say these folks better expect a buyout offer for their amazing real-time search tool until I realized that what it offers has been available on Facebook itself for a while, and nobody cares. I don't mean nobody cares that people's posts are public. I mean, nobody cares to search people's posts because doing so is NOT USEFUL.

Ironic how it appears that the catalyst for what people are calling Facebook's privacy violation was the tech media's echo chamber screaming "real-time search." Yes, take the current over-hyped BS (Twitter), combine it with yesterday's insanely successful business (Google), and that is the direction things must go in. And Facebook would be wise to get on board with the inevitable or risk loosing everything. But if they overdo it and sneakily encourage their users to act like attention hungry Twitter users (aka journalists), then they risk loosing everything via a backlash from violated users. Oh, and we're still waiting for either them or Twitter or Google to make bazillions with real-time search because won't that just be so amazing.

...right. I suppose that dismissing this concept now could be a bit premature, but, come on. It's been around for a while and has gone nowhere. Maybe when Facebook realizes that there's no money in this real-time search nonsense, they'll default everyone back to private. Of course, then the story will be that they rudely interrupted their attention hungry users' abilities to act like exhibitionists. And that is why Twitter will always have an edge.
Honestly, it's just the way things work. It's not specific to this phone or provider. You get a subsidized phone when you sign up a _new_ plan. It's part of the cost of the service you're agreeing to. If you're already a customer, in the middle of a contract, they don't "reward" you by subsidizing a phone any time you ask for it (i.e. when a new one comes out).

When the N1 came out, however, people were for some reason surprised about this. There's lots of news about it:
http://www.google.com/search?q=t-mobile+%22nexus+one%22+%22n...
Ask HN: Review My Startup, chuzer.com
We recently launched a social decision engine, www.chuzer.com, as a European entrant into the Q&A space with competitors such as Vark.com and Hunch.com.

Chuzer is a decision engine, enabled by SMS and the web, that channels the expertise of one's social network to help make decisions on anything from electronics to movies.

Decisions such as helping to choose a Mexican restaurant in West London to helping to choose which movie to watch at a theatre are allocated by the Chuzer engine to the people within your social network who could best answer the question. The users receives several recommendations and the user whose answer he or she chooses moves up the community ranking. The ranking feature and the European footprint are the main points of differentiation from Vark.com.

Would really appreciate your feedback and comments!
The average 18 yo considering college doesn't have bills yet. IMO they should aim for the life they want, and do their best to make it work out, not sacrifice 4 years to make a semi-OK possible future work out more smoothly.

BTW if you're going to take semi-lame jobs, you only have to get hired a few times in your life. Optimizing the job search part isn't a great use of time -- even if no college doubles your lifetime job search time, going to college would still be a loss in that respect.
Ask HN: Instapaper for audio?
Has anyone seen something like Instapaper for audio? As a DJ, I'm always listening to new music and mixes from a range of sources. Direct mp3 link, Soundcloud, YouTube, 8tracks, mixcloud, etc.

I'd love to click 'Listen later' and build an audio queue that I could stream to my mobile (which is key).

The closest thing I could find was huffduffer.com, but that is not what I'm looking for. Do I just have to build the thing?
Raising capital in Canada
With your three hands you clearly support the "Aliens messed with it" theory.
Yes, the phrase "Right now, we have nothing to lose." in particular stood out to me from the email - I think the author was being insufficiently imaginative.
Building Organs Using 'Biological Legos'
OK, first, if you find that link unbelievable, which I assume from your scare quotes, there are many others, e.g. http://www.last100.com/2007/06/01/youtube-to-re-encode-video.... This was big news in 2007, when Jobs demoed (the now kinda defunct but may be due for a comeback) Apple TV. As the quote by Apple VP David Moody says, the transcoding was done purely for Apple.

Now, to the question whether Apple paid Google: I don't think anybody saw them writing Google a big check, "paid" in this sense is making concessions to Google, like having Google as the default search engine. This was of course in the good old days when Schmidt was on the board. If you think about it, transcoding all those videos into H.264 is a huge effort, something that Google wouldn't have taken lightly. Of course, at that time YouTube was (and still is) under intense pressure to make profits so that may have helped Apple's hand.
"Extortion and coercion are clearly not their strength, though they seemed to think it was :)"

They should look it up in the dictionary. It's right next to money-laundering :)
A Bug?

The "Appointment Reminders" link below the slider should de-highlight when the user mouses over the link beside it, right?
These are my thoughts about the subject:
- Python and Ruby seem interesting. But JavaScript is going to be there nevertheless. Furthermore, it seems like 80% of the functionality in a RIA is going to happen in JavaScript anyway.

- JavaScript in client and server. I haven't done, My guess is that with JavaScript the talent of the developer to organize a big code base becomes critical.

- Java and GWT. I've tried this. It works nicely. Strong typing and a great IDE with Eclipse. Same language in the server and in the client.

- Scala and (Scala compiled into JavaScript? This could be nice. We just need somebody really smart to make it happen.
I can concoct a hundred different worst-case scenarios about how a bad guy can do exactly this. You can't protect against all of them.
Ubuntu 10.04 LTS Lucid Lynx / Google Chrome 5.0.375.38 beta
- works like a charm so far. Music plays well, I can start/stop and navigate to other songs. No issues.

Btw huge fan of mugasha! I used you guys everyday when you were in beta, but then I moved to shared office space where mugasha didn't seem to be able to stream =( [same computer, just would not stream] . Back home now though so glad to see you guys still rocking <3
Get free copies of your credit report from all 3 agencies (www.frecreditreport.com or your credit guard service). When you log in to each of the credit reports there will be a link to dispute entries. Following this link will take you to an online form that will allow you to submit your dispute online. You can include any supporting info (e.g. your home address vs the SF address). The dispute process usually takes a few weeks/months, but in my case the items were removed in a few business days. Keep watching your reports regularly in case it shows up on a different report a few months down the line.
Shady is right.

In fact one could say it is perilously close to blackmail.
The problem with STM: your languages still suck
> It looks terrible.

I was actually impressed by the appearance, and I don't see many other commenters italicizing their disgust, so this is probably an overstatement.
I'm always excited to read about STM. It is my opinion that a startup could make a decent living off STM, given that it wouldn't have to support a large, existing ecosystem like Microsoft. Lots of papers have been written, there are probably open-source implementations out there, and it's a very nice problem to work on.
So now we know why a search warrant was issued...

I wonder what was in the flash drives? Pictures of the iPhone? Seems like it would be easier to just format the drive instead of physically disposing it somewhere...
Anyone who's interested in working on #1, has some time, and can work with Rails3/Ruby, send me a note. Contact info in my profile.
To give them the benefit of the doubt, maybe Gizmodo was asking for proof that it was actually Apple's phone before they give it back. It would have (almost) been ok to state "give me proof." Instead, he rambled on about profits, and how this might hurt Apple, etc, which is pretty damning evidence IMHO - IANAL though.
hah. I'd give the same advice, but for the opposite reason. You can learn with or without school. However, if you don't go to school (I didn't) you will always be /different/ from your peers. I obviously don't understand what actually happens in school, as I didn't go, but I can tell you that it does change you socially. I am very different from my peers who do the same job for the same money I do. In many ways, I'm more different than the foreigners who were educated here.

Also, if you are counting on the paper to be worth something, you need the paper to come from a university with a reputation. None of the online degrees get any respect. Sure, if you actually know your shit, you are fine either way. There's always work for people who know what they are doing. But if you know what you are doing, having an online degree on top of that gives you almost no advantage over just knowing what you are doing.

So yeah, uh, my advice would be either to just buy the textbooks and teach yourself the relevant bits, ignoring the degree, or go all the way; go to a 4 year college that has a good reputation, live on or as close as possible to campus, and have the 'college experience'
Overall, I think this talk best applies as a starting point for learning about crypto. Take Colin's recommendations as signposts to underlying research. Why would he dislike DSA? Hint: it requires a secure RNG at signing time while RSA only requires one at key generation time.

http://rdist.root.org/2009/05/17/the-debian-pgp-disaster-tha...

However, I don't think he achieved the stated goal of teaching you enough to become a crypto implementer in 1 hour. I disagree with a lot of his conclusions. But you'd have to learn more than the slides hint at to have a discussion on the details why.

Some specific comments on the slides.

### Common failures and their causes (2):

I find it interesting that he characterized a timing attack in Keyczar as "stupidity" while a cache-based timing attack with HTT was "unusual environment". Same thing with SSL renegotiation. I think all of these were subtle flaws and easy to overlook. The SSL bug was around for at least 10 years. HMAC timing attacks were not as widely published as they are now, but instead were part of common lore to cryptographers.

The WEP vulnerability was almost certainly not "unusual environment". Sure, there were power and cost constraints in the WEP design, but what was unusual about it was that the crypto was obviously designed by a group with no crypto experience and no public review. Using a varying key with RC4, something it was known to be weak to, was an example of "using a tool wrong" and more similar to the AWS v1 signature bug you found.

The only "unusual environment" was that the specialized and closed field of IEEE wifi design led to non-cryptographers designing crypto. There was nothing unique to the environment that a good crypto person would have had an inherent problem with.

I don't think this list is a good categorization of types of crypto bugs.

### Authentication/Signing (5)

Confusing terminology. I use "integrity protection" or "authenticator" for MAC and "signature" only for public-key signatures. They are two very different processes, even though they share some goals.

### Hashes (8)

It was funny to see SHA-1 in the "don't use" list next to MD4, for example. I agree it's best not to use it for new designs, but there's a world of difference between SHA1 and MD4, especially if you have to use SHA1 for legacy compatibility.

### Symmetric authenticators (10)

I think CBC-MAC should be on a "don't use" list, not "avoid". If you put SHA1 on the "don't" list, it's even more important that CBC-MAC be put there. Which will be broken sooner: HMAC-SHA1 or an arbitrary CBC-MAC implementation or use?

### CTR mode (17)

Based on his previous comments, I think Colin advocates CTR mode due to its supposed resistance to side channel attacks. However, it is not a panacea. See this paper by Josh Jaffe on how to use side channel attacks against CTR mode. It's quite interesting how AES's structure makes it more vulnerable to his particular attack.

http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.93.6...
Against what, Voyager 1? :)

They've got a live memory image, tracking down a possibly bad bit is probably not trivial. Given the era the code was written there could be self-modifying code in there too.
Tell me about it :-) I guess there are some people who are very sensitive about this issue.

Fact of the matter is: Flash was necessary to access YouTube before Apple demanded the H.264 transcoding.
Velruse: A library to simplify third-party authentication for web applications.
Oh cool, will try to stop by then. Thanks.
As in the phrase "pray tell". I had no idea the archaic meaning survives in legalese. I wonder what other pieces of Middle English are floating in there.
Thanks for the information. I looked into your website. What I had in mind may not work for you, but I will still email you something that maybe interesting.

Thanks again.
No signatures yet. See this summary I wrote a while back for more info.

http://rdist.root.org/2009/07/14/nacl-djbs-new-crypto-librar...
The Way of the Samurai meets Entrepreneurialism
Tech Tidbits to Read This Weekend
stuff happening...
They do. Google isn't currently accepting port-ins.
Really love the iPhone app! Would be cool to see them connect your email to others apps as well.
"but if this takes off I'll make a Windows version too".

What if the Windows version was what it needs to take off?

Edit: I am currently using a PC and I would have automatically downloaded it (And you know how hard that is, but your video sold me). My first thought was "I will install this as soon as I get home".
He was part of the SHA-3 team that proposed Skein. I think he also coauthored a paper on some advances in attacks on hashes with Kelsey recently.
GlimmerBlocker has a better method: it is a general ad-blocker which can block http requests to Facebook from 3rd party sites. See the Facebook filter on http://glimmerblocker.org/wiki/Filters

GB can do more than just blocking requests: it can modify both the requests and responses.
They do. It's up to Google to start supporting it.
So ad's in its current shape aren't working.

A business model for Facebook that just might: Offer insurance companies to pay for repeated privacy option changes which you have to opt out of.

Or heck, just sell a feed to the firehose to them.

Yeah, I guess this is a troll. But I must say I'm getting pretty damn fed up with all this Facebook noise everywhere right now.
Let me see if I have this straight. It's alleged that Mr. Hogan was handed the phone in the bar by somebody else who thought it belonged to Mr. Hogan. Mr. Hogan then removed the phone, which didn't belong to him, from the bar, premises which didn't belong to him, without informing employees of the establishment where the phone was found and handed to him.

In what sense did Mr. Hogan "find" the phone?

I have previously suggested that removing a chattel that doesn't belong to you from property that doesn't belong to you is theft. Hearing these allegations doesn't change my view in any way. In the hypothetical case that someone hands you something that doesn't belong to you or to them, the correct thing to do on the spot is to refuse. Accepting something that doesn't belong to you is already wrong. The simplest and easiest thing to do is to simply say, "Not mine, but thanks."
> In the next stage of their research, the scientists are putting mite pockets into beds in 36 houses around the United Kingdom to test their computer model and will investigate how people's daily routines affect mite populations.

I realize I already have dust mites in my bed, but I would still have a hard time volunteering for this. Ignorance is bliss.