skysight-inc/HackerNews huggingface dataset:
The end-to-end encryption is only between protonmail addresses, in practice when you email people with gmail/hotmail/yahoo etc. it doesn't matter if protonmail can't read the e-mail, the other party can. (Their solution for that is to send an e-mail that contains a password-protected link with the actual message [0], I find this procedure inconvenient.)

Gmail could be as secure as Protonmail by using PGP yourself [1]. And then you can keep your desktop mail client.

Also Google won't need to pay criminals if they're DDOS attacked like Protonmail in the past: https://www.forbes.com/sites/thomasbrewster/2015/11/05/proto... (this is when I gave up on Protonmail)

[0]: https://protonmail.com/support/knowledge-base/encrypt-for-ou...

[1]: https://emailselfdefense.fsf.org/en/
VSO Downloader Ultimate 5.0.1 Crack Plus Keygen Free
The meaningful differences come with costs too.

“Zero knowledge” of email content means I can’t search my corpus of email without having all of that mail on a PC with a client that has a search feature.

What’s a bigger risk to you?

“End to end encryption” We’ve all had the PGP discussion. That adds a lot of complexity and a lot of cost and risk. Good luck searching it.

“TLS transport” Welcome to 2017, this isn’t meaningful.

It sounds like Proton Mail is a cool service. But that security comes at a capability cost and comes with other complexity that users may not understand.
They do for their new Advanced Protection Program[1]. The regular Gmail service is not really marketed to the security concious users.

It's like comparing Android to Qubes OS. Not really fair. For what they are, Google products are surprisingly secure.

[1] https://landing.google.com/advancedprotection/
> Maybe it's just a successful coping strategy I've developed to forget about being depressed

I wouldn't dare diagnose anyone but I can tell you from experience this is often what it is. My father for example is a highly depressed person, if he stops for any length of time to dwell on things he falls deeply into a deep depression. As a result he's learned how to add additions to the house, do his own roofing, build decks, fix his own vehicles.

He has a 1500 sq ft barn filled to the brim with tools and tractors that he uses regularly. He was a software engineer before retirement and taught himself how to use all this stuff.

He jokes about all the money he's saved doing these things for himself but I helped him inventory all his things and he's roughly spent 2x as much on tools and toys than he would have had he just hired a contractor. That depressed him until I explained that the gain he got from doing it himself off set that. Honestly, the man isn't happy unless his hands are cut up and dirty.
A missing threat model gives this more credit than it merits. You can replace 'zero knowledge' with 'military grade' and it will be just as meaningful (if somewhat more obviously poor).

Plus, you could say they are describing a threat model. If ProtonMail were compromised in this one particular way the confidentiality of your mail would be 'stronger' or 'improved'. This should be as reassuring as 'Switzerland', which is, of course, also trotted out.
If you want to quickly invert the colors, simply paste this in a custom Stylish userstyle :

html {
filter: invert(100%);
}
img,svg{
filter: invert(100%);
}
body {
background: white;
}
To make that more concrete, there are environmental externalities that no one is paying on gas, but whose cost is real. The first recent source I found on google [1] pegs the externalities at $3.80 per gallon of gas, which would more than double the cost of gas (in the US) if factored in.

More directly, if you drive your vehicle 100k miles at 20 MPG, that's $20,000 in environmental harm you're creating and passing on to be someone else's problem. To me, that makes electric cars (and other alternatives) seem more attractive.

[1] https://www.forbes.com/sites/tomzeller/2015/03/05/study-your...
I was literally going to say the exact same thing. +1
Any good open source tools for pentest
Hi,

Anyone have any good tools available for testing javacript vulnerabilities on web pages?

Cheers!
I've used ProtonMail for some small number of communications, and I really like it for limited use. I can't speak to using it for everyday email purposes.
Two-week-old Pixel 2 XL displays are already showing burn-in
‘Wolf of Wall Street’ warns of impending cryptocurrencies ‘scam’
What are the security guarantees when emailing someone who does not use ProtonMail? If there is an encrypted mode, can this mode be turned off? This is critically important, and yet most of these email providers who talk up their security fail to bring it up. This article is the same.
Would be interesting to see how you do this. If you can, write a blog post or something when you are done. Thank you in advanced.
I am referring to the points system and income requirements, which give priority to people who are young, healthy, well educated, in demand, and/or wealthy. This ensures that most who are approved will provide substantial funding into the system before needing to draw from the system. As a result, the immigration-driven population growth you point to actually helps support the system.
Reminds me of a quote I heard a while back, not sure the source, went something to the effect of:

"Winners never quit, and quitters never win. But a person who never wins and never quits is a fool."
From what I understand, there are two passwords; the Mailbox passwords, used for encrypting and signing emails, is in fact unrecoverable, and you'll lose your emails if you forget it: https://protonmail.com/support/knowledge-base/resetting-mail...
That's probably why the wealthy are buying Western cars, they're safer. Hard to be rich when you get crumpled like a tincan in a locally produced vehicle
lrzip is somewhat more polished implementation of same idea as rzip by Andrew Tridgell. That means: use rsync's rolling hashing algorithm to implement LZ78 with enormous dictionary size and compress output of that with some general purpose compression algorithm (bzip2 in rzip, IIRC in lrzip it is configurable)
Looks like we can throw all the existing invisibility cloak research out the window.
I briefly checked out fly.io as a solution for this. It worked brilliantly.

I chose not to use fly.io though, because I was ultimately putting control of the DNS settings for all of my SaaS's custom domains in their hands.
No. In fact, initially I put "unintuitive" there, but the spelling-checker marked it as an unknown word while it is perfectly valid English.
AlphaGo, trained using supervised learning using games from KGS:

https://storage.googleapis.com/deepmind-media/alphago/AlphaG...

AlphaGo scratch:
https://www.nature.com/articles/nature24270.epdf

I was specifically talking about AlphaGo, not AlphaGo scratch. Also, if you read the paper about AlphaGo scratch, the key innovation driving the self-learning is the use of MCTS as a policy improver, which couldn't have feasibly been done without AlphaGo and the supervised learning.

And I think Hinton is saying that we need fundamental breakthroughs for AI, and I don't think he is in favor of "traditional" modern neural network architectures. Anything that requires SGD, he doesn't like.
Non-paywall link:
https://archive.fo/MdvkL
Web based encryption. Pointless. If you trust them enough not to send you bad Javascript, you trust them not to read your emails. You trust them with your private keys.

If you trust them with all that why even encrypt the mail client side?
The extensible vi layer for Emacs
Show HN: Visually monitor changes for any webpage
Gmail isn't floating around any brochures on security though - it's pitch to the majority of its users is "It's Google and Mail and where most people have their emails. You don't want to be that one weirdo at @yahoo.com do you?" and that just about does it. ProtonMail is trying to recruit users with the brochure.

That said, even though the argument is a bit flawed here, I think most attracted by it would still prefer ProtonMail for other sound arguments.
One problem with internationalisation attempts is that most of the committees that have control over these things are from the Americas or Europe and so speak a Romance language natively and almost certainly speak English well (if not natively). There is nowhere near enough input from languages and cultures that might not fit European norms. There's a great article about a similar problem in Unicode:

https://modelviewculture.com/pieces/i-can-text-you-a-pile-of...
For me it has to do more with the idealized way to develop a project. You have a pretty plan & design, and want to see it executed. Unfortunately that rarely happens in real life. For example on my current project I wanted a very database driven design. Essentially just be able to update records in the database and everything on the site changes accordingly.

Last minute changes and exceptions to the rule made that impossible with the given deadline. You are absolutely correct in that the end result is completely fine and the world keeps spinning.

There are no real world consequences aside from needing to remember that there are hard coded exceptions in the code. Its just the hunt for the elusive "perfect execution and design."
Instead of grasping on semantics of his language, why don't you try understanding the meaning? At the end of the day what you propose limits human freedom for a greater collective "good". Good luck with that.
Yup! You are correct. Confusing it due to being recently exposed to `pack` which is a binary in the go toolchain that happens to interact with ar archives.
"The only way to equal or beat someone naturally talented is to put in many hours."

I totally agree with the sentiment. I work an extra 1-2 hours every day which gives me an additional 260-520 extra hours per year to outperform my peers. However, the older I get, the more I'm starting to think that being exceptional is overrated. Time is arguably the most valuable resource I have. Every extra hour you spend trying to become more skillful is one less hour to "live". The hardest part for me after college was to find this work life balance.
More importantly they give any government agency free access without any warrant to fulltext search any customer.

US law interpretation of IMAP. Only with a POP3 service you are safe.
Safest Home in America
The way I was going to do it personally was have customers point to a domain I control which then CNAMEs to the DNS record fly.io provides me. Not that I don't trust them or anything, but because I don't trust anyone completely :P In serious it was more to avoid any brand confusion.

At least that way I could in the worst case scenario cobble something together that replaces it in the event of a sunset or the likes
> The C compatibility test comes when you build your kernel, your toolchain, your browsers, your shells, your desktop applications, and run their test suites after each build. ;- )

But if we're talking about obscure applications being preserved for posterity, they're not going to get built.

Really I was talking about the other direction though: a way to confirm that a given program is written using only ANSI C. There's no testsuite for that, all you can do is test with the compilers that exist - and then sometimes your program suddenly stops working in the next version of the compiler.
This must be the 5th Google money API/interface to date. It doesn't seem like they learned from the previous attempts.
I just came here from the "Yosemite bolt replacement"-thread (https://news.ycombinator.com/item?id=15529497), where someone linekd the GP.

The company I'm with at the moment has some horrible, horrible code, but there's nothing quit like the satisfaction you get from deleting a bunch of it because you just made it OBSOLETE.

It's gotten to the point where my boss is joking that my favourite programming activity is deleting code. Cheers to us maintainers!
Your original seems to suggest that loss of revenue from software not working will be more severe for directly-paid software than for ad-supported software. It's not clear to me that's the case, especially given that some of the highest revenue software currently in use (consumer services from FB etc.) is ad-supported.

Anyway, this is tangential to this thread, so I won't go on about it.
Yes. But you enter the second password into the Proton webapp if you use it so it's not exactly beyond their reach.
Your comment is entirely consistent with that position :) I appreciate the irony of asking if you've written anything about your new communication paradigm, but, well, have you?
Personally I feel we might never get static typing for Ruby anytime soon, at least it won't be widely adopted in the community, so I'd settle on dynamic typing like this.

After all, Crystal is already quite good as a Ruby+static typing solution
Yeah, we use the beaker to mean unit tests. We like the icons because they keep the layout dense, but if the meanings aren’t clear that is good feedback for us
Improving the experience of reading at Hacker News
What's a Star Stock Analyst Really Worth?
> Money buys houses in good school districts (or a spot in a private school) which buys fewer highly-disruptive peers, a much better worst-probable-outcome for available peer groups, and a safer (=less stressful) environment

I think this might be a myth. This is anecdotal but my experience is that the "rich kids" have just as many problems as the poor ones. They just receive less scrutiny unless they are public figures.

I grew up in a middle class area outside SV. The supposedly rich kids were often just as messed up as the poor ones. Its like the stereotypical "Preachers Kid."
> zips/tarballs are generated on-demand and cached

Isn't that a deterministic process? I thought if you zipped the same directory twice, you'd get exactly the same bits in the two archives.
It's actually quite exciting science, because it means the nature of the difference between matter and antimatter could be something really unknown that is yet to be discovered. They're running out of candidates to test...

Super impressed with their antimatter containment solution though, I had no idea anybody could even get close to that kind of containment duration.
> "I don't want to lose access to my email" (remember that availability is a part of security!).

Really? You've heard just as many stories of unexpected Google account closures as I have.

I'm quite confident ProtonMail just don't do that. And if they did, you'd have a much more credible chance of talking to a human and rectifying the situation.
And where would these two programmers be now? The second one was investing to become faster in the future.
"Are we good because we want to be good, or are we good because we just don’t want to be punished?"

It's interesting he brings up this point. I once took a leadership class at my University, and in the class my teacher once said, "do you follow the speed limit because if you don't you'll get a ticket or because it is the right thing to do?" He then followed it by saying, "If you follow it because it's the right thing you're crazy." When I heard this I was just hoping he wasn't applying it to things other than the speed limit. Sometimes I feel you have to do the right thing, because it is the right thing.

Another similar case was when I was reading my economics book which said altruism only exists due to incentives, and it wouldn't exist otherwise; I personally believe there are people who act altruistically despite incentive going either way. Although, I also find personally if I do the right thing despite incentives for me to lie or do otherwise people will often make up the difference.
In some vague sense, any solver for an NP-complete problem, must either backtrack, or keep accumulating information and possibly exhaust memory. In practice every practical solver I know of for NP-complete problems backtracks.

Now, they often do all kinds of other clever things on top (learning, restarts, parallelisation, heuristics), but when the going gets tough, there is a lot of backtracking.
I wanted to touch this part: "And then you can keep your desktop mail client." . Actually you can use your desktop mail client with ProtonMail too. All you need to do, is install ProtonMail Bridge. It's in closed Beta right now, but it works pretty well (i'm using with Thunderbird).
It's a leading medical journal that has been publishing since the 1800s.

https://en.wikipedia.org/wiki/The_Lancet
Ideally there would be a better way to choose locale on a per-site basis rather than having it be baked into each app individually. Many apps have no settings page, and those that do often require you to log in to change the settings.

I have my browser language set to Dutch but every time I touch Wikipedia or MDN I have to append "english" to my search terms to get a version of the article that isn't strictly inferior.
> If you don't quit, maybe you'll never start the next thing that will succeed

In Agile this would be "fail fast". One of the few things I like about Agile personally.
My point remains that evolving your skillset and being successful is not exclusive from spending your evenings at leisure.
That's true, I had forgotten the trainwreck that was iOS 7. I still have scars from trying to learn Autolayout back then.

As to 4.2, that was before my time. Not an excuse, just an explanation.
I think what's telling here is that the blog post does not point to Protonmail's own threat model.

https://protonmail.com/blog/protonmail-threat-model/

Which says don't use it if you are up against state actors and:
"Sensitive business communications – You have sensitive business information that you want to make sure is protected from competitors and other malicious parties. For example, you fear a competitor may want to sue you under false pretenses to get access to sensitive data. In this case, ProtonMail offers a great deal of protection. ProtonMail will not release ANY data unless provided with an enforceable Swiss court order. To get such an order, the case must first work its way through the Swiss courts where stricter privacy laws might result in a different ruling. Even if an adversary went through the expensive and time consuming procedure of obtaining such an order, ProtonMail’s zero access cryptography means we would only be able to release data that is encrypted since we do NOT hold the decryption keys."

Given that they have Javascript to handle the decryption keys, couldn't they demand ProtonMail change the code delivered to your browser session to give up the keys? This would make the only extra security provided by this scheme would be the multiple court jurisdictions and the less tested legality of a court order making their product less secure, ala the FBI and Apple.
Is there a proposal of what "like a utility" would look like for social media platforms?
Fair enough :). I do find myself oddly relaxed when doing some of the menial stuff, especially when that stuff can't be easily automated away (if it can be, then tend to think about how to automate it instead).

I suppose I blended two distinct topics too much in my response. The whole dislike for going on autopilot through life came from various attempts at enforcing a structure on my day. At some point I always start to feel a strong discomfort for such routines. These days, when I plan days out, I treat those plans as kind of sane defaults, things to do if I don't have anything more important, and not as absolute commitments.
Adaptive regulation, leaner legal code, and regularly scheduled trust busting.
Here's my list of habits for effective text editing:

1) Observe other people edit text, then judge for yourself what is effective and what isn't, then decide for yourself what to learn and what not to.
Yet another babel CLI for the npm module creators
Sure they see the plaintext version in flight from the router.
That's where a warrant would install the TAP. Before it arrives the protonmail server, where it is encrypted and stored.

Outgoing mail similar, but there it can be encrypted, so the TAP would be directly at the server, before it is encrypted.

In contrast to gmail TAP's are installed by a warrant ordered by a judge and per customer only. With gmail warrants are not needed, data is just handed over, and search interfaces are available to any agency which wants it.
Why Facebook Shouldn’t Be Allowed to Buy Thb
Ruby is also taught in UMD's undergraduate PL classes, as a sort of transitional language for the functional paradigm (which we learn in OCaml).

I don't know what motivates Ruby research particularly, but those two languages make up a large chunk of our PL classes.
Aren't the use cases are the same as for any SSH server?
Hey, author here.

Last week I spent some time hacking up a CLI tool called `babel-multi-env`. Designed for the npm module creators, it can generate most up-to-date code targeting the library consumer’s node version. Of course, it's based on the babel-preset-env and some other babel counter parts to make it such an awesome work. I’d love to get some feedbacks
Wages aren't worth anything without purchasing power parity. You'll have trouble surviving on $10/day in the US (incl. housing) but will be fine in many other regions of the world, including most of India and China.
+1 for fastmail just works. good support, clean and fast web interface, plays nicely with mbsync + mutt. identities feature is a nice bonus.
Wow, shall we argue over whether tabs or spaces are better too? And after we solve that we can figure out how many angels can dance on the head of a pin!
Many cities hope self-driving vehicles can fix transit gaps
drilling into this a second -- and as someone who has been using vi for about 37 years -- why do you take this as a truth? Consider, e.g., intellij.
I would like to respectfully disagree about spam on Yahoo mail. I have so much spam there, you won't believe. And what irks me the most is that a lot of it is easy spam: viagra, etc.
Temperature is also a factor.

PV=nRT. T is temperature.

Titan is not only protected by Saturn's magnetic field, but it is also very cold. Some of the molecules that are gaseous on Earth are liquids on Titan. Cold gases have lower pressure, and less likelihood of bouncing a light molecule high enough up in the atmosphere that the solar wind can grab it and blow it away.

Earth has a hard time holding on to light molecules like H2 and He, but its He is replenished somewhat by alpha decay, and it takes a long time to get from the inside of a rock to the upper reaches of the atmosphere. Most of the hydrogen is attached to heavier molecules. But it happens eventually, and even the Earth's magnetic field and gravity can't keep them. Venus is almost as massive as Earth, but it is hotter than Mercury and has no core-generated magnetic field. So most of its water has already thermally dissociated (which happens slowly starting at around 800 degC) and the H, H2, He, and monoatomic O bounces high up into the atmosphere, ionizes, and blows away. So now Venus has about 90 bar of CO2 and barely any water left.

One of the terraforming proposals for Venus is to transport a large quantity of hydrogen from Jupiter to Venus, and use Fe catalyst to react it with the CO2, to get graphite C, H2O, and O2. That would strip off much of the greenhouse blanket, but the planet would still have to be cooled off and protected from the solar wind to keep all that hydrogen around on a geologic time scale.
Tried hard to create account on one of the server, everytime I am getting 'unknown error'.
In this particular case though, 24 hour time is common in Europe and even in the US it's somewhat common (I use it). I curious how they could have overlooked it (partially).
How do you get moving a block of code to take one second in notepad++? I don't know of a way to get it to take less than a few seconds, but maybe I'm missing something.
Mercedes handles the competition because it knows how to handle data, too