skysight-inc/HackerNews huggingface dataset:
> * SSL requires that you decide which certificate authorities you want to trust.

One subtle point is that governments can force seemingly great certificate authorities to give them a certificate so that they can do man-in-the-middle attacks and still have a reasonable "trust chain" that you can look at in your browser. More details of this "compelled certificate creation attack" at http://cryptome.org/ssl-mitm.pdf

If I had to bet, I'd say most serious attackers aren't bothering to break crypto math or even weak implementations but are rather focusing on this approach by getting a CA to give them a good cert to spoof another site and it'd go practically undetected.

Ultimately with crypto (or anything else) you have to implicitly trust somebody (e.g. Mozilla Foundation) or something (your processor to correctly execute a program or your quantum crypto box to not behave maliciously). As long as this is the case, you can't have perfect security.

Great paper of "Reflections on Trusting Trust" : http://cm.bell-labs.com/who/ken/trust.html
I'm in the same boat in Ottawa. Many Canadians have gone on to work for startups in the US. What I've always seen, from friends and family who've been down this road, is that US companies (big or small) wanting to hire Canadians have always been very helpful in the visa process. Of course, your mileage may vary.

I think your best bet is to throw your resume in, clearly indicating your current location.
Although one must expect at least a handful of complaints any time a company has 100s of 1000s of customers (oops, I meant 'students'), the type of abuse that is likely to occur when recruiters are pressured to meet quotas can be seen at Consumer Affairs:

http://consumeraffairs.com/education/phoenix.html
No, not possible for differences to cancel. The bitwise OR of a bunch of things is zero only if all of the individual things are zero. The difference between two things is zero only if they're equal. Therefore, the final value of x is zero only if all the elements of MAC_computed and MAC_received match.

(And -- the main point here -- how long it takes to do the calculation should be totally independent of what's actually in the arrays: no early termination, no operations that take different amounts of time depending on how many elements match, etc.)
> What if your bank decided to publish the activity on your accounts?

As something of an advocate for privacy and data protection, I have found it instructive to compare the recent behaviour at Facebook and Google with that of Mint, whose entire business basically depends on people trusting them with access codes to their bank accounts.

I'm not saying Mint's approach is perfect, but this is the first line in point 1 of their Privacy and Security Policy (http://www.mint.com/privacy/security-policy/):

"Simply put, we do not and will not sell or rent your personal information to anyone, for any reason, at any time."

(For the avoidance of doubt, I am in no way connected with Mint, Intuit or any related organisation. I'm just an interested observer of how privacy and security are handled by on-line businesses, and found them a useful example.)
Facebook Alternative: Ideas?
I am looking for a way to communicate with my friend/family/social network (messages, posts, photos, video)done on my terms with 100% total control of my information. I have my own server so I am looking for a grassroots solution which I can install and use. I then want to be able to share information with others who have a similar system set up on their server. No intermediary controlling our information -- just server A and B.

Does anyone know if anything like this exists? (I am not referring to identica or the current 4 college student Disparia* thingy)

thanks

edit: if people have any other ideas on designing a free facebook alternative where the user has more control over his/her personal information please contribute your ideas!
Did you watch the video? They suggested using fishing nets to gather the hay, bringing it to lined dumpsters at beaches and ports and then using it in incinerators with woodchips/etc to get energy from it.

Who knows if it would work out that well, but that's the idea.
it's one of the reasons that Esperanto works so well as one's first second language.

The parent comment to your comment expressed the idea that ANY previous language aids learning the next language. This has been my experience, after learning elements of about a dozen languages, with proficiency in Chinese such that I can support myself through interpreting Chinese into English or the other way round, or translating from Chinese into English.

For scientifically based information on Esperanto, see

http://www.xibalba.demon.co.uk/jbr/ranto/
Where the printf() Rubber Meets the Road
Ways for Effective Network Penetration Testing
That's a very Mediterranean take on things:-)

Joking aside though, I think that here in Italy, if you're going to live with your parents until later in life, you might as well have a go at a startup rather than working for low wages at a crappy job. There's not such a scramble to be "ramen profitable" when your parents (well, most likely mother) cook up delicious meals every day and your rent is covered.
The whole "once I land in a foreign country I'm going to stop speaking my native language" advice is only applicable to people with very specific personality types and life situations. To the rest of us, it's not inspirational, it's demoralising to the extent that many people living abroad simply never acquire any good command of their host society's language. You can easily find American bankers in Shanghai who speak poor Chinese, or Korean shopowners in Sydney who speak poor English, or whatever. And you can deride them as lazy immigrants who refuse to assimilate, or arrogant expats who are only there because they failed in New York, or whatever. Or you can try to help them.

The best advice I ever heard for learning foreign languages is: treat your brain the way it likes to be treated. This doesn't mean being lazy, but it does mean not putting yourself in situations that go against your personality type. And it means using learning methods that don't continually expose you to a sense of failure you hate feeling. Because otherwise your brain will just hate you later for putting it under stress, and take revenge by shutting down.

That means you give yourself the kind of intellectual, social, or physical stimulation that you need to feel happy during the time that you do devote to your target language, and ignore the people who think you are "stupid" for doing this. Read a book in your native language, talk with people in your mother tongue, eat food from your homeland every day for breakfast, lunch, and dinner. This is doubly important if you are learning your target language not because you LOVE LANGUAGES (like 100% of people who write language learning blogs) but because you need it for specific purposes.

And finally, if you are the kind of person who is very sensitive to embarassment, then you do not have an "inhibition" to be "overcome", you have an extremely good system for detecting when you are violating social norms --- and knowing social norms is just as important as conjugations & vocabulary. No one wants to communicate with a guy who is fluent in their language but rude and uncouth by their cultural standards. Don't deliberately try to suppress your embarassment just so you can get 10 minutes of horrid conversation practise with the impatient cashier at your local supermarket while the line builds up behind you.
ah, bitwise or, was thinking incorrectly for some reason. And early termination makes sense, thanks! Didn't think of that.
The data on related search terms "get facebook" and "sign up facebook" seems to suggest that the percentage of users seeking the way out doesn't change (supposing one can draw conclusions from these data anyway).

http://www.google.com/insights/search/#q=get%20facebook%2Cde...
It makes sure that it returns a boolean value as opposed to something truthy/falsy which could lead to oddness if you try and directly compare it with a boolean value.

According to the spec, media.canPlayType returns either "", "maybe" or "probably". An empty string "" is falsy in Javascript and a non-empty string is truthy, but if you try and compare them directly with booleans then you can get some odd behaviour:

if ("yes"){ // true }
if ("yes" == true){ // false }
if ("yes" === true){ // false }

if (""){ // false }
if ("" == false){ // true }
if ("" === false){ // false }

I personally prefer to make sure that any function which you're expecting the return value to be used as a boolean actually returns a boolean value. I know there are many people out there with a dislike of !! though.
just plain INTERESTING what a simple google search can tell you: www.cubeofm.com/todo/TodoListMaxKlein.pdf

PS: rather funny codename though
Slides look great and so is the presentation. May I ask what you used to prepare them?
Canonicalization, so that e.g. null and undefined turn into false and ordinary values (e.g. functions, arrays, numbers, objects) turn into true.

Try putting things like these into the address bar of your browser:

javascript:alert(!!null)
javascript:alert(!!undefined)
javascript:alert(!!{})
javascript:alert(!!Math.floor)
This is solid advice. I recently returned to vim after using TextMate for a while. The strategy of noticing when you are doing something that might benefit from automation (vs trying to learn every single command) is a good one. It takes a long time to master an editor like vim.

The only thing I haven't been able to get my head around is workin with lots of files in a Django or Rails project. Nerdtree just is not as usable as the TextMate project drawer. This is especially true for a web framework where you hop from js to HTML to Python and back.
He didn't escalate it, he was just stubborn. The S&S lawyer escalated with threats of a lawsuit. Then he countered by making the disagreement public.
I can recommend "The Sociopath Next Door":

http://www.amazon.com/Sociopath-Next-Door-Martha-Stout/dp/07...
I don't believe one must label every self-promoter a sociopath. And Aaron's post is foremostly a promotion for his self-published 2008 book, Authoritas, whose sales are currently lagging (http://www.amazon.com/Authoritas-Students-Admissions-Foundin...)
There was a video -- I think a TED talk, but I could be wrong -- linked from HN some time ago, demonstrating some clever (though perhaps evil) out-of-the-box thinking on this question.

Someone was teaching a class of business students, and set them the challenge: you have $10 and 48 hours; make as much money as you can. Afterwards, each team got to stand up in front of everyone else and say what they did.

The team that got the most money did so by completely ignoring the $10. They approached some local business and said "How much will you pay us for a 5-minute advertising slot in front of a roomful of future business leaders?". Then they used their presentation slot to plug that business, and collected a nice big pile of money for doing it.

EDIT: http://news.ycombinator.com/item?id=912105 ; I got a couple of unimportant details wrong.
Download SpeedFan 4.40 - AppHit.com
Ahh, thanks for that. Coercion to boolean.
Ah, right, thanks.
Can you really trust a list of "important contacts" that's auto-generated? If I send a single mail to, say, an investor, and they reply to me, I want that unanswered reply to be in the list - even if I've only emailed them once.

Can you force etacts to consider certain emails as important?
The audio book version is well done, too.
Android Just Passed iPhone in Sales – Alert the Guards
To fully understand the sales numbers we have to look at the variety of units that use the OS. The Open Handset Alliance of companies involved in a co-op of sorts will be able to present the Android OS to a larger amount of phones than Apple. The novelty of the Android also fueled the sales boost. The special promotions offered by Verizon also added to the sales boost in Q1.
This is one reason why developing for the browser is awesome. Even in the case of a browser extension, you can roll out changes so fast.
True, in fact a typical professor at a university devotes roughly 30% of effort to teaching. The rest is research effort (~ 60%) and service (reviewing papers, running conferences, etc).
Investigation: Apple vs Nokia vs Google vs HTC vs RIM
This isn't all that uncommon. The same was true of both my wife and of me; we both have Fall birthdays, and started kindergarten before we turned 5. I turned 18 several months into my freshman year of college.

FWIW, I don't recommend this, but (and I've faced this with my own kids now) there's really not much choice. I was already bored in school; if I'd been back another year, it would've been even worse.
Narcissistic and takes credit from other people. Sounds like the arch-typical PHB to me.
Link? If substantiated, you first paragraph would be interesting.
FOWA : Dublin 2010
Ask HN: Rate my App: ToDoLess.com
Hi HN,

ToDoLess.com is a simple approach to Project Management. It has Lists, Timelines (Gantt-like charts) and Texts. That's all.

You can access it there : http://todoless.com/beta

Here's a temporary user/password just for you guys : hackernews/hackernews

This is still in beta but i would like to know your opinions about it.

Thanks in advance!
Historic Apple Prototypes: Apple Mouse, Cube, Mac Tablet
clickable link: http://todoless.com/beta
Smack my BitSharp
Gulf Gusher Worst Case Scenario
That's the nature of the human mind. Everything is highly subjective. Until somebody invents an objective way to diagnose someone as being mentally ill it's what we have to work with.
Birth of the user experience designer
Best way to get Outdoor Clothing Equipment
Our new summer Outdoor Clothing Equipment are now coming in to our shop brands already here are OMM,Rab Jackets,Haglofs. Please come and visit us in our Glasgow store, where we have many more products that are not part of our web store.
I want an online persona manager
Wow, that's great! I'm going to run that script every time I'm considering opening a browser window. Perhaps this could be a Firefox add-on that would alert you every time your internet is not working... because you might not notice it otherwise and start browsing on a broken internet.
The file responsible for the annoying search feature is altClickToSearch.js. Here's my filter:

||nytimes.com/js/*/altClickToSearch.js
Exactly. My son was just born, and I fully plan on talking to him like an adult when possible, and not shying away from things like sex and politics just because he's young. That doesn't mean I'd describe graphic sexual acts to him, but talking frankly with honest language I think will be best.

I cringe when I see parents get upset when they have to explain something slightly embarrassing to their children.
What The F*** Should I Make For Dinner?
Or you could just highlight the current bar.
Your public Facebook status updates? Now publicly searchable outside Facebook
No no the other way round, write a python interpreter in Go. Everyone seems to love writing python implementations, why not me? ;)
Alt Text: How Neanderthal Are You? Take This Quiz to Find Out
Pasion for life
Facebook Announces New Security Against Login From Unauthorised Devices
I love this. Simple idea, but brilliant in its effect.

The pungency of the recommendation contrasts nicely with the delicacy of the actual dish.
In summary: routes served by multiple airlines will be cheaper.
Remember Zuckerberg's 60 minutes interview? Perhaps he was nervous, but there was something off about him. I don't think this is evidence that he's a sociopath, but if I squint my eyes and add a dash of the damming condemnations that are leaking out left and right these days, he certainly seems like a sociopath.

Who knows, but Facebook isn't just Mark, it's a large team of highly intelligent and talented (and in most cases PHD level) engineers who I'm sure want nothing more than to protect people's privacy, make a fantastic product, and above all help people connect with current and past friends.
the 10gbp seemed to play little to no role in most of their ventures. so what actually is the role of the "tenner"? is it some kind of misdirection?
Develop A Good Sexual Relationship In Your Marriage
I forgot to mention that I've used a cheap knockoff (and even goofier) model of these chairs for a couple of years. And it was quite comfortable indeed.
How kanban can help you increase your team's capacity
kanban is a pull system. You pull work only when there is capacity to handle it. This works well in a factory setting because you know exactly how much capacity you have. In knowledge work, however, it is likely that you do not really know what your team is capable of.
I would suggest there are a considerable range of use cases for this, for example you could want to automatically run this on connection to a wireless network.

Your lack of the need for this script does not excuse the short sightedness of your sarcasm. And I am glad you were brave enough to sign up to use a new account to make that comment, nice to see the dominion of the Internet troll extends it's stony fist into the halls of HN.
++ for New York
Maverick Money Makers - best coaching site on the internet
Join the number 1 best Internet Marketing club on the Internet
Never manually sublit to article directories ever again
Never manually create articles and submit them to multiple article directoriews individually ever again. This software is invaluable and has saved me tons of time:O)
You could take the beginning of habit 5 as complementary to Emacs. Has another program ever been extended to do more?

Towards the end of point 5, Bram really points out the strength of Vim over Emacs - it is small enough that it could be refactored to be embeddable. This is the real slight towards Emacs - Emacs will never be embeddable, not in a hundred years. It is the all-purpose consumer that provides little benefit to outside programs. I think Bram saw a niche in creating a 'libvim' that other programs could use
I suppose if you score a maximum on the test, you get put in charge of putting autoplay video ads on the site.
Okay, You’ve Declared E-Mail Bankruptcy. Now What?
I went back and re-read the article.

I took it at first to mean common ancestor in terms of a single ancestor for a particular species. But then you guys seem to think it means a common ancestor for all life.

I found it confusing. Meta: I have no idea why my comment was voted down so much. I did not understand it, and I still do not. Seems like an admission of that along with an explanation from other commenters would be a good thing, right? Saying I don't know and having people help me -- reason for the board, or not?
Pointless attack on Arington aside, what are you wishing your friend would send you?

Are you looking for a card, or a friend acknowledging that it is your birthday?
That's why humanity are becoming more stupid every new generation... you are not capable of taking your own decisions!
This has been posted, and flagged, here before. Like here: http://news.ycombinator.com/item?id=1344990
This is purely speculation, but I suspect the £10 could be a limit to prevent wealthy helicopter parents from giving their kids an advantage.

Or as another poster pointed out, it may have a pyschological purpose.

FWIW, when I did this in school in Ireland, there was no tenner.
Why did you choose to publish your slides in PDF when PDF documents are a main tool for security attacks?

Update: If PDFs are a major source of security attacks, and author cares about security, and author publishes document in PDF form, then why would you downvote this question?
I once got a new manager and found that he is a psycho. So I loose my job and other managers started loosing her jobs because of his manipulation. This story did not ended yet.
How to design a popular programming language
Well, I've summed up my gripes in other comments previously, it mostly boils down to that I consider the UI an utter abomination.

The shortlist (from top of head): text fields are way too small, I can't edit my own comments after posting, stuff jumps around randomly all the time (due to ajax and because stories move panes when changing status), the whole workflow abstraction is extremely leaky as story-interdependencies cannot be expressed, etc. etc.

For me PT is a toy at best ("Oh look, it updates in realtime when someone makes a change") but nowhere near a serious tool for keeping track of a project.

If you haven't yet then I can only suggest to take a close look at mantisbt. It's not flawless either, but it has 7+ years evolution under its belt and makes an awful lot of sense once you got over the arguably ugly (yet extremely efficient) UI.
Im about to move out with my girlfriend, and my realtor checked my background with Facebook.
I only knew about this because that guy turned out to have gone to high school with my boss, and my boss told me.

Even though im a programmer, the only thing i do in facebook is add friends, it already affected me to just have an account there.
The effect was neutral to good..this time.
I thinnk it's meant to say 'We heart Apple', not love.
I've recently booked a flight from the UK to Utah, getting the return was cheaper than getting the single (by a couple of $100). Remind me why the airlines are losing money again?
SVG is a good scratchpad for programmers
Take a look at ezbl.

Emacs doesn't even attempt to become embeddable. It instead takes the strategy of assimilating everything into a unified, tweakable UI.

Two completely different strategies, both useful in their own niches, and incredibly powerful for those who have mastered their esoteric incantations.

That being said, resistance is futile.
Bertie Wooster comes out of 21 Club late one night and sees Oofy Prosser staring intently at the pavement out front.

What's up?

I lost my favourite collar stud.

Right here?

No, somewhere down the street.

Then why are you looking for it here?

The light's better over here.

*

That being said, Bayesian Search works a little like this:

http://en.wikipedia.org/wiki/Bayesian_search_theory
I've never posted here before, just really felt the urge to do so this time. I promise I'll submit a comment the next time I see someone post a 1-paragraph article telling you that giving a presentation is not just reading from slides but also giving a performance.

I know, I'm trolling. I'm a bad person. Sorry.
Poly1305 is a fundamentally different class of authenticator than HMAC-SHA256: the addition of an nonce into the function makes it unsuitable for some environments. But given Intel's new instructions, GCM is looking like a more attractive polynomial MAC these days.
You would think that one would follow from the other. In fact you could guess that the very point of threatening to fire someone is to drive them towards tactics that people with a secure job wouldn't countenance.
I'm guessing you guys at github didn't start out as Objective J developers... how was transitioning to the framework? Any lessons to share with us?
Ask HN: Jumping into Android Development
I like taking a jump in the deep end approach.

I'm a Java developer turned iPhone developer.

What books do you recommend? When I first started iPhone development, I bought hundreds of dollars of books and it helped tremendously to have different teachers on paper. What are the best-of-class Android apps (in terms of user experience) that you like? What are your favorite apps? What is the best part about working with Android?

I'd like to port a fairly complicated iPhone application to Android. Since I want to support the widest range of Android devices, I'm targeting the G1 as the lowest common denominator. The existing iPhone application heavily relies on CoreData, and I feel that is the biggest hurdle. Are there are any CoreData like persistence frameworks? I, admit too, that I am scared of the "unholy mixture of XML and GridBagLayout" that is required to build UIs in Android - but that is a secondary concern.

Is three weeks, give or take a few days, too aggressive a deadline for doing a port from iPhone to Android? I will compromise where needed.