skysight-inc/HackerNews huggingface dataset:
> every single one of those cost growth curves is a close match for the early part of the exponential growth curves

The early part of a logistic growth curve (https://en.wikipedia.org/wiki/Logistic_function) also looks exponential.
Since it's a capacitive touch device, you really just need something conductive to touch the pad and connect it to "ground".

Maybe someone you know could take the yubikey device, attach a wire to it, then connect up a relay or something that could be controlled (using whatever interface you already have - I'm not that familiar with such medical devices) to activate the relay. When the switch contacts close, the other side of the relay could be connected to an earth-grounded point. That should activate the yubikey (I believe).

Note that the wire and relay and such will need to be shielded as well (to prevent stray capacitance - like somebody walking by or such - activating it). Coaxial cable like that used for oscilloscope leads would be great, and put the relay inside a metal box (and connect the shielding of the cable to the box).

Hmm - this is getting more complicated than I thought - but I think the basics are there. Here are some other links that might help as well:

http://playground.arduino.cc/Main/CapacitiveSensor (has a nice diagram/schematic of how these form a "circuit" for the microcontroller - this may or may not be what the yubikey uses)

A couple of PDF app notes from Texas Instruments on implementing capacitive sensing:

http://www.ti.com/lit/an/snoa952/snoa952.pdf

http://www.ti.com/lit/an/snoa926a/snoa926a.pdf

Good luck, and I hope this helps or leads somewhere for you!
That works when it's a commuter train, but you can't plan on just showing up minutes before a high-speed train that assigns seats. Because you can't just hop on the next one.

That's most of the reason why you can't just show up at the gate of your airplane 5 minutes before they shut the doors.

Security is the only big difference. You gotta plan on it possibly taking 30 minutes.
Seeker, sure. Guru, no.

[p.s.]

The Sufi master Attar [1] wrote an entire book [2] -- using the symbol of "flyers" or "birds" -- describing the stages of seekers' path to enlightenment. The mataphor used was 'seven valleys of love' [3] encountered on the way to the 'King of the Birds', each with their own distinct psyho-spiritual state and requirements.

The journey has stages but for some there is a 'successful' end.

"If he who sets out on this way will not engage himself wholly and completely he will never be free from the sadness and melancholy which weigh him down."

[1]: https://en.wikipedia.org/wiki/Attar_of_Nishapur

[2]: "Expression-Logic of the Birds" aka "Conference of the Birds"
https://en.wikipedia.org/wiki/The_Conference_of_the_Birds

[3]: http://chippit.tripod.com/seven_valleys.html
> good luck not messing up the formatting with a modern client

I wonder how 'modern' a client can be if it can't even post source code properly.
My theory is that most people don't want to have to make small talk with random strangers whose #1 form of entertainment is making small talk with random strangers in public places. Such people have and always will exist, and they will always complain that they can't get people to talk to them/entertain them because for some mysterious reason everyone around them has their nose in a book/newspaper/screen/etc. :)
Bingo! I would pay just about anything for that CD...
Collectie App 1.2 – Your Personal Galaxy of Inspiration
How-to: Spectator View, a new tool to help others see what you see in HoloLens
You would still leak unencrypted headers, which in SMTP are numerous and interesting. A client could minimize the useful content of the message headers, but you're always going to have at least the envelope headers available to every intermediate mail host.

I do not know enough to be sure about your point about forward secrecy. You may be right.
We've banned this account. It's an abuse of HN to use it primarily for political or ideological battle.

HN exists for intellectual curiosity (https://news.ycombinator.com/newsguidelines.html). Political flamewars destroy this, so we can't have both kinds of site.
>> Also, it looks you've been using HN primarily for political and ideological arguments (at least recently).

We're all pretty sick of your badgering everyone with differing opinions, dang.

If you want a safe space insulated from intellectual diversity, try NeoGaf.
> - Although Medium launched with the promise of helping to launch undiscovered writers and rewarding attention minutes, in practice this has actually ended up being 'he or she who has the most Twitter followers wins'. This means that the same folks who win on Twitter, and Medium simply ends up being another outlet for their voice.

Yep, I know what you mean here. Medium has basically just become another platform for the already popular to get more popular.

There is pretty much zero interest from the staff in regards to helping upcoming publications and writers get any attention. Heck, the best 'way' I've seen suggested to get popular on Medium is literally buying Twitter and Facebook ads for your stories and tagging them with Medium.

And based on how the beta programs and stuff are being implemented, this only seems to be getting worse there. Want to make money from your work? Then you apparently need to be a currently popular publication owner associated with a large media business with its own major following:

https://blog.medium.com/revenue-on-medium-5e7e6218f70c#.6qmu...

So now if you're unpopular there, you both have no obvious way to get noticed and no way to make money from their services. It's like Medium is trying to go the YouTube route... focus all the attention on existing brands and celebrities, do little for the smaller creators that made it worth visiting to begin with.
My friend, if you could find me an operating system that can do that, and then once inside the OS enable me to use every single function of the operating system like an able-bodied person in the way the Apple's does I'll give you a small prize.

I would absolutely love to use free and open source software for both my operating system and everything else, but only Apple provides an experience for people with profound disabilities that even comes close to the experience normal people have with their computers.

This reply might come across as snarky, but it isn't and I really have tried to find other operating systems that would allow me to do this. Not found any yet in a decade.
Nikon “extraordinary loss” kills DL cameras and slashes jobs
Technology Adoption Case Study: Using Transit Encryption by Default
Both sides committed crimes in Kosovo, you know. History rarely is as black and white as you would want it to be.

https://en.wikipedia.org/wiki/War_crimes_in_the_Kosovo_War#K...
I only do TOTP on my phone. The Yubi Authenticator app is a drop-in replacement for Google Authenticator, but it adds significant security because the keys are stored offline in the yubikey and the crypto is done in the fob. Your phone is relegated to sending the time and displaying the OTP, which greatly reduces the attack surface of a standard OTP app.

The actual usage is exactly the same as Google Authenticator with 1 more step (NFC with NEO or plugging in the yubikey 4) to get the OTP.
How freemium nearly caused our business to implode
Isn't the grandparent quote stating the opposite of what you've said here?
a) The key management UX is even worse than GPG, at least IME.

b) If you're willing to trust the CA system the advantages of using email rather than any transport-encrypted messenger (e.g. facebook messenger) seem decidedly marginal
I have tried using AWS and Digital Ocean for personal stuff, and Azure at work.

AWS for me personally was too complicated interface wise. It was easy to lose track of running instances and being billed for things, the vast amount of types of things you can spin up also made it sometimes hard to navigate without lots of reading. I think if one of my side projects ever gets to a point where it needs a CDN, scalable EC2 instances and things like that, I'd research AWS, but probably only move to it if I had to. With all this said I do use Amazon SES for my newsletters I run as it's so cheap, I send a 4k subscriber list an email a week, costs about 60p a month.

Digital Ocean is my go to. It's stupidly easy to use, a great UI, genuinely a pleasure to use even compared to work VMWare enterprise stuff. I've been thinking lately about AWS due to load balancing being built in without me having to run my own keepalived stuff, but DO have announced load balancers are almost ready, so I'm rethinking. Here's a shameless referral link that'll give you some free credit: https://m.do.co/c/f24e8a65668a

Azure is Ok. It's not great, it could be worse. The original interface is now called 'legacy', and that's good because it was pretty bad. The new one is a lot nicer to use, but as someone who's biased towards Mac/Linux for the desktop, it feels like Microsoft designed it. It can be a bit clunky, it can be difficult to figure out what the IP of something is instead of its hostname or to jump between different places without having to go through tons of breadcrumbs.

Price wise you can figure that out yourself using publicly available calculators, specific to your needs. DO is probably slightly more than AWS, but for the instant VM spin up from a really nice drag-drop UI (with lots of prebuilt images), easy automated backup, auto SSH key deployment and so on - I can't see myself leaving DO unless I have a specific requirement they can't meet.
I don't know what kind of Linux the author is using but, on Debian/Ubuntu/Mint/etc., you should really be doing:

sudo apt-get install enigmail

rather than go hunting for installers.
> It may be, but there's no guarantee it behaves the way it claims to. There's no guarantee it's not backdoored. There are powerful actors involved in these areas.

It renders your point about source code moot though, doesn't it. Security is ultimately the art of trust propagation.

> Care to cite some of this literature?

The most famous discourse here is the "untrustworthy compiler problem." Most famous citation is by none other than Thompson: https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thomp...

Trust chains are their weakest link, and people often put a lot of trust in compilers without really asking what it is doing. Not unlike crypto, we're told not to roll our own.

People have proposed ways around this, but they're not very good (http://imgur.com/a/BWbnU#0). The moral of the story is that at some point, you extend trust to someone. Security is never absolute.
> Guess why the kernel community keeps pushing away drive-bys?

Because drive-by contributions to the kernel are likely to be more trouble than they're worth? This is code which will run on every Linux device out there, from thermostats to WiFi access points to individual computers to Google's & Facebook's data centres: it had better come from someone who knows his stuff, inside & out, and it's probably a Good Thing™ if he's not afraid of a command line and email.
If the only argument for a soda tax is the externalised costs of obesity healthcare, why not just charge people for obesity healthcare?

After all, someone who drinks soda and does a lot of exercise or hard work might not impose any cost on the health system - and someone who eats a lot of bacon or home-baked cakes might get obese without drinking any soda.
To be fair ...

"UAC is always-in-your-face about everything..."

Not true: UAC only pops up for apps that need to access a file/registry key, etc. that affects system-wide behavior

"... often unexpectedly - it hijacks your desktops at inopportune times ..."

This isn't true: UAC pops up precisely when an app is launched that needs to access/modify a system-wide resource. If you're running apps that OFTEN need to access system-wide resources, you could choose to run them as admin and avoid the UAC pop-ups ... while also hoping that those apps are not malicious or over-enthusiastic about "helping".

"and there's no way to tell it "Yes, this software can do this again for the next 15 minutes without asking me again"."

There kinda is - just run the app as Admin. It'll then run with admin rights until you close it.

Of course, without specific examples of what you see as erroneous behavior, I've posted what are, I am sure, inadequate responses to your specific issues. If you'd like to share you specifc issues, I am sure we could have a more fruitful dialog and who knows, I may be able to carry your case internally to see if we can improve things in future OS releases (no guarantees here other than my trying my best).
You should be vetting those sites anyway, especially since you probably were also asked for a password. And it's not exactly hard - just glance up at the address bar.

>The available data

source?
IE 8 that is
When I starting building websites in ~1998, I looked at what was on the web, it inspired ideas, and I built things.

If I were starting now, my inspiration would possibly be things like: responsive, single-page apps, with ajax, websockets, etc.

I was going everywhere and viewing source and you could basically figure out how everything was made. Now--not so much.

It's not so much 'success' as similarity with popular projects.
Researchers have found more evidence that butter is heart-healthy
I think I'm not understanding the problem. I have cloned keys (for backup + two locations), with Yubico Authenticator. Is the problem NFC on iOS or that you don't want to clone your keys?
Environmentally Adaptive Devices
Rockstar Engineers
This title really bothers me. I don't believe in the KKK's cause nor do I consider myself any sort of racist but the fact that somebody died is not good news. Just because you don't agree with him doesn't mean his life is worth any less than yours or mine.

/soapbox
Thanks for the links, they look really useful and it's only just occurred to me when you pointed it out that when a person such as the key they are completing a circuit. If I could do that in someway that could be unique to me, then that might just be possible to do. I just need to find somebody to do the soldering!. :-)
We never trusted Microsoft with their practice of Embrace-Extend-Extinguish. Why should we trust Facebook here?

If Facebook were collaborating with the NSA I see no reason they'd operate differently than we see from the outside now.
Perhaps, though I hear that part of the reason those stereotypical Medium 'inspiration' pieces are so common is because they're the easiest type of content to make popular on the service.

In some sense, the issue is that Medium seems to be rewarding this content at the expense of deeper, more interesting stories.
The very existence of TweeNaCl indicates that DJB would have answered "yes". And I do have a couple minor advantages over TweetNaCl…
As of this morning Disqus doesn't seem to be loading at all on my blog (http://blog.mattcrampton.com). It was working fine a week ago.
https://xkcd.com/810/

Seriously, though, do you have any evidence that this guy is a bot?
Why biotechnology does not need yet another “disruptive startup.”
America is sort of the Byzantine British Empire
Internet ADs in real life would be like having cardboard banners appear in the middle of the street, and you would need to change car every 5 years as the banners get thicker and harder to penetrate.
I just published my new app called foodRemind Check it out
Me and a friend decided to develop an app that reminds you to eat, first i thought it was stupid "who forgets to eat?" but then i tried reminding myself to eat with google alarms and i realize i am facing that problem everyday, when i wake up and go to school 90% of the time i forget to eat my breakfast so i felt like i needed to make a move and help others that are facing my problem thats why i decided to make and app try it out!
Me and a friend decided to develop an app that reminds you to eat, first i thought it was stupid "who forgets to eat?" but then i tried reminding myself to eat with google alarms and i realize i am facing that problem everyday, when i wake up and go to school 90% of the time i forget to eat my breakfast so i felt like i needed to make a move and help others that are facing my problem thats why i decided to make and app try it out!
Me and a friend decided to develop an app that reminds you to eat, first i thought it was stupid "who forgets to eat?" but then i tried reminding myself to eat with google alarms and i realize i am facing that problem everyday, when i wake up and go to school 90% of the time i forget to eat my breakfast so i felt like i needed to make a move and help others that are facing my problem thats why i decided to make and app try it out! https://play.google.com/store/apps/details?id=com.apphallinc.danielazulay.foodremindbeta
There is a presentation[1] by grugq on how to communicate securely. Using gpg with email is hard. Anecdotally, people reply in cleartext quoting the encrypted message. If you can train and test your co-conspirators before sending them incriminating evidence about yourself, maybe it can be done. But mistakes happen so often, people who have secrets that can get them killed or jailed for a long time just switched to Signal. That's what tptacek means.

1 - https://grugq.github.io/presentations/COMSEC%20beyond%20encr...
Batch Renormalization - Better Batch Normalization for Training Deep NN
I thought of this when the Yubikey first came out, but apparently it needs to be your finger that makes the connection. I'm not sure if that's still the case, because like you I just assumed I could extend the key somewhere around my chin controller and then use the tip of my nose to activate the key. I believe the tip of your nose is actually fairly unique FYI.

But yes, that would be one solution and great minds think alike. :-)
Verisign probed by US Dept of Justice over $135m .web auction
I think the article is overemphasizing the money that the people earned with the project but instead people got disillusioned with the project and since they amassed enough money then that is why they departed the project. They even state this in the article.
Do you mean the text? I was writing the text for me, as some kind of project log. Actually, I found a couple of errors in the design while writing which I wouldn't have found if I haven't written the text.

The text may only be interesting for people building or thinking about building a retro microcomputer.
Because the feedback of the world at large would be terribly outdated and terribly mismatched.

"Should we spend the next 30 years using the internet and supercomputers to increase the world's food supply through targeted genetic modifications?"

"No, I need food and water today."
Get ready for world temperatures to start going down! Now the sun is calming down. Of course you wont hear about it though!
I agree, online ads are annoying for a number of reasons. I'm curious what pay model you're envisioning. Content providers paying Disqus? Disqus users? I can see the former possibly working, as Disqus is providing the service to them.
i feel like we do this every other year?

yet somehow surveillance/privacy laws don't have to be renewed for years on end?
> Even people within the tech community debate over the woes of information overload, device overuse, increasing reliance on inherently insecure systems, etc, and even then those are debates about what has already come to pass.

And I would say those are all relatively minor concerns compared to the sheer power disbalances that technology might cause that further increase the divide between those who decide and those who suffer the consequence.

Our primary problems should be politics, ethics, and government, and AI won't help you there, it's likely to just make things worse.
hmm, they have a paid plan WITHOUT ads. Isn't it the kind of model everybody wants? free with ads, paid without ads?
Java CyclicBarrier Tutorial
Is it really a complete alternative? It looks like you have to host it yourself (one of the main appeals of Disqus was that you could add comments to any static page).

Also, it would be nice if they supported a SQLite backend, which would probably make more sense for small blogs running on very weak shared servers.
I wrote a blog post on using mailvelope to send/receive encrypted emails via existing mail providers such as Google mail ... Linked into my post about getting a private/public key pair using keybase.io I'd like to think they explain it fairly well but I hadn't considered the implications of people believing they're more secure than they actually are ... Until I read the comments here - disclaimer: not claiming encrypted email is super secure or even necessarily that using mailvelope is super secure but just wanted to make it look less scary to the uninitiated
Excellent journalism - anonymous sources speculate as to what might have caused people to leave a company.

Also pushes the new business-friendly narrative that it's good for companies to pay their engineers less.

Well done, I hope the author's boss is proud.
I have used the mono sourcecode as a goto reference for poorly documented .Net framework code, because usually it was clean and quality code. Some quick comparisons with the coreclr and .net reference sources also supported my impression. (a lot of code is being merged from mono now)
I am definitely in that overlap! I think food/water security is going to be vital in the next few years, particularly with some of the predicted challenges with global warming. I think that we NEED both advances in synthetic meat AND crop production. But then, I'm one of those crazies that think that Monsanto is only as bad as can be expected of a company of it's size.
theres something screwy with the images on the testimonials part of the page: http://i.imgur.com/RFoqpKwl.png
Fera the Serval
Because ad block plus is the de facto standard and ublock Origin is compatible with adblock plus subscriptions.
Examples and best practices for using Google's analytics.js
I think you are absolutely correct, and it's a really good reason not to switch the accessibility APIs on until the OS is fully decrypted and loaded.

Yep, right there with you and agree and everything. Still, sucks balls to be disabled in this situation and I'm also fairly sure that Apple has the engineering talent to make this possible. One would hope, anyway!
>It renders your point about source code moot though, doesn't it. Security is ultimately the art of trust propagation.

I don't see how that follows. If I can audit the source code and confirm that the same code is running on the device, the weak link is reduced to my ability to aduit it (combined with everyone else who's auditing it as well and might publish their findings).

>The most famous discourse here is the "untrustworthy compiler problem."

I thought this might be what you're talking about, but this is ridiculous. Do you really think that the Yubikey folks have backdoored my copy of gcc? Dude.
> Mailing lists are supposed to be read in your email client. If you want an archive, use NNTP archive like gmane.

Of course, GMANE went down, and when it came back old GMANE URLs are now broken.

I do read all my email in gnus, though, precisely because newsgroup-style mailing lists are so awesome. It's another one of those things: I'm amazed by the lengths people go to in order to justify using inferior solutions like web browsers and web mail when emacs & decades-old software is so much better.
For the web, yes, but I don't know any native apps that use it. I still need an app password for gmail, for example.
Secure wireless charging stops pads from frying your phone
Serverless C# on AWS Lambda Pt. 2: Handling HTTP Events
There are mechanisms to use out of band communication to verify a key:

https://github.com/WhisperSystems/Signal-iOS/wiki/FAQ#can-i-...

https://support.wire.com/hc/en-us/articles/207692235-How-can...