skysight-inc/HackerNews huggingface dataset:
Well, there's always

http://en.wikipedia.org/wiki/Off-the-Record_Messaging

which gives "perfect" forward secrecy
HDCP keys can be revoked. It just won't do any good - this matrix lets you create _new_ keys, just as valid as all pre-existing ones.
Thanks so much for jumping into the thread.

As a former systems person, I thought of all the ways I could divine that an account was related. IP address of course came to mind, but I dismissed it, because so many networks use NAT, etc.
(Especially at high schools, there must be so many accounts with the same IP. But I get that the student goes home at night...)

So you're basically saying this SRE made an educated guess. It does make me feel better about that part :D

Much of my professional life is evangelizing Google Apps. I know and advocate the party line about security. And I have experienced the customer support staff who have access when helping me troubleshoot. (I'm glad they have access.)

I guess I just assumed/heard that SRE's weren't involved in troubleshooting user stuff, as they were in deep disk i/o, networking, performance stuff. (Translation: was hoping they couldn't access user stuff.)

As for internal auditing, it would be cool if there was an alert any time user data was accessed that didn't have a corresponding trouble ticket.

Thanks again for jumping in the thread.
Okay. I think those sources are descriptive, but to be sure, here is the American Heritage Dictionary (http://dictionary.reference.com/browse/irony), an explicitly descriptive dictionary about American usage. It seems to agree with the other sources that irony can be and is often used in this case.

On the other hand, one can reasonably believe that every dictionary is, by its nature as a reference book, primarily prescriptive (and proscriptive) and therefore cannot be reliably descriptive. If so, then it seems we do have to go only with personal observations.

In terms of personal observations, I agree with you that many Americans I know would use "sarcasm" in this case and not use "irony." I think I (along with many other Americans, maybe fewer than the other group?) would use "irony" and probably not use "sarcasm" because it doesn't have that particular, hard-to-miss sarcastic tone of voice.
8===================D~~~
It's very much not silly to count on the bonuses. 20% extra? Try 100-300% or more in most of the positions on the trading floor. As you rise in the ranks, it's much, much more. The bonus at every level above Analyst is easily larger than the base, which, as Antonio says, is generally not that impressive. This is true at every big bank on Wall St.

Among my friends, we represented every large investment bank in NYC and many of the smaller hedge funds, so I'm sure it's representative.

Not sure how compensation is in the IT depts. at those banks, though, if that's what you're talking about. IT is probably not representative of why people go to work on Wall St, though, since it's viewed as a cost center in most banks, and it's not what Antonio is talking about in the post.
And here come the T-Shirts http://www.cafepress.com/HDCP
Perhaps he should have used more objective references. I believe the author does not find much worth in porn. Your subjective opinion is clearly different. How is having "issues" related with his viewpoint?
Don't trust 247wallst.com's summaries of other sources to be the full and balanced story. Compare this summary of the eBay-Craigslist ruling -- http://247wallst.com/2010/09/09/ebay-gores-craigslist/ -- with a more detailed analysis of what the ruling actually meant:

http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2010/09/11/...

Perhaps Consumer Reports is no more 'savaging' the iPhone in its latest reporting than eBay 'gored' Craigslist?
At the risk of sounding both lazy and naive, if i want to utlize replica sets, do i have to separate each mongodb instance onto a separate hardware box? put another way, if i want to deploy a durable mongodb installation, do i need three or four EC2 instances (for example) running at the same time, all the time?
You could start pronouncing lambda like the Greek.

They say lam-tha, th as in the. Come to think of it, I wonder how that stray 'b' found its way in the romanization of the word.
Ah, I haven't checked recently, but back when I first heard about consumer reports saying this, I went and checked their website directly.

Just found a recent confirmation:
http://blogs.consumerreports.org/electronics/2010/09/apple-i...

Despite having great reception, they reiterated that they continue not to recommend the iphone 4.

I continue to say they have no integrity.
5 things you didn't know about.. Everyday Java tools
As of 2 days ago they still were:
http://blogs.consumerreports.org/electronics/2010/09/apple-i...
Precisely. If you could so easily change your users' behavior to suit your needs you would simply get them to pay you money for sitting at home playing Halo:Reach. People pay money to companies that either solve their problems or entertain them.
This isn't a problem with 150 tabs. An example of this problem is the firefox GWT developer mode plugin. When your app is compiling in this mode, which can take upwards of 30 seconds, the entire browser, including all tabs and windows, locks up. If for some reason the plugin screws up, you have to kill and restart the entire browser.
Capistrano Scripts for node.js on EC2
Agree with the iPhone app. We do have a basic Facebook integration that allows users to post to their feed. Also agree with deemphasizing the calorie/health aspects, though overtime, I still believe the stronger value prop for an app like this is to become the mint.com of eating rather than another food porn site. But, yes, in the near term more emphasis on social, food porn, etc is prob the way to go
The Quest to Find the First Soundscape
The issue here is that Zuck's IM buddy probably logged the conversation and then released to the media or as part of the law suit later. So calling is nice but there is plenty of equally efficient skype plugins for recording voice. duh.
You can have the attitude of "just a job" and still be a valuable asset to a company. To some people, work is "just work" and sometimes the "just a job" mentality is an extension of that.

If you ask me, its called life balance. It's just a job. It's just school. It's just money. That's just life.
> made an educated guess

Grandparent deleted their post, but, assuming they just said "they correlated across IP" -- it's actually easy to guess, since the snoop would be able to detect and ignore a NAT IP -- it would be accessing thousands of accounts.

AFAIK Google's SRE's are more fancy sysadmins than performance engineers. Sysadmins often have the keys to the kingdom, though one would hope a sysadmin on project X only has the keys to project X.
Awesome! That was great fun night. We've tried to hold true to our roots with quantified self/personal tracking. However, most feedback (here and from friends) suggests we pivot away from this
I am not much of a crypto but I'd be curious to know if this is open to goverment monitoring. Do you know?
We didn't have an app initially due to resources and an early belief that we could be device agnostic by leveraging email
I'm glad somebody made some Kanban planning software. Nice and simple UI which brings focus on the features.
Fair enough. I wouldn't mind except reading it so often gives me anxiety about my decisions. This site can be like Cosmo for nerds... I can't stop reading it, but its not uncommon that I walk away feeling 10 pounds fatter.
My problem is that I'm not a data storage expert. Do I now have to specialize in this field to be able to choose the appropriate persistence technology for a given problem? I have yet to see a good explanation of when different technologies are more appropriate, as most of the discussions I see usually devolve into some sort of SQL-NoSQL flame war. I would like a good, fair resource to explain the pros and cons of different persistence technologies more clearly.
It's possible. One thing we looked at was working with personal trainers, or programs like weight watchers. Another variation was to use mechanical turk to 'guesstimate' calorie counts and charge as a premium service
excellent point
I have the feeling that Y-Combinator is a great fit young engineers who build a web consumer product/app that monetize quickly. If you or your idea doesn't fit into the brackets than another path is most likely much more promising :)
Also, given the number of 'fans' on the Internet, I suspect that such a tool would have serious issues with users tweaking the benchmark and uploading fake data.
You're looking for a lot of money fast for little effort and your first lesson in school is going to be that pretty much nothing in life is that simple. Try and find a flexible part time job - they do exist, especially on campus. I worked two development jobs on campus that paid pretty well (for a student, anyway) - there was never any shortage of $12-15 an hour web development gigs here, which is more than your friends will be making as janitors or bookstore cashiers. I was also allowed to work remotely, and I gained experience and made a lot of useful university contacts this way. You can try things like contracting, but be ready for it to be a lot more work than you thought - when you have to deal with people it's almost never easy money. Whatever you choose to do, you're probably going to have to earn every penny.
The New Twitter is an Attack on All Desktop Apps
In some cases I agree that eliminating all tests is bad, especially if nothing else changes. It's especially bad when tests are eliminated without teachers changing their style. If you're going to change one you have to change the other.

Children do need to be assessed and challenged. Sitting a child down with a pencil and paper is not the only method of assessing a child, and most definitely not the most effective.
Impossible currently because browsers themselves don't support that. However if they did, I don't see how this is different from having a transparent background.
I've never met an iPhone 4 owner who wasn't immensely satisfied with the device, and not because they are brain dead Apple fanboys. It has its imperfections but it seems to be an all around incredibly solid device. The antenna issues don't seem to be as big a problem in practice as one might be led to believe from all the press.

Overall, I don't think this is a very good issue for CR to stake it's credibility on.
Sounds to me like they're startup enthusiasts, and want eat.ly to get bigger and better without sacrificing the stability they have right now, with their full-time jobs.

In other comments, people are saying the iPhone app is important. I think they already know this, and what would be more interesting to them is any shortcuts they could take to build their iPhone app.

I think they ought to find an iPhone developer who has developed an app similar to what would be needed for eat.ly, and is in a similar position where they are enthusiastic about startups but not doing it full-time.
We're definitely aware that site is uuuber slow. Because we're 100% bootstrapped (and not generating revenue) we recently scaled down from Engine Yard to a small instance on Slicehost. We figured we'd cut our costs while deciding what to do. EY was about $240/mth but 10x faster
End of the day, probably users and a self-sustaining business model. This was/is a side project among friends so we're not expecting anything too crazy
>After all, the price is right. Just costs your privacy.

It is worth pointing out that payable cloud services may also cost you your privacy. It has happened before, various data leaks, stolen passwords, etc.
Yes. I actually bought and read the book because her character was so moving. Turns out it's just her whole person.
Exactly Linux is a prime example of this.
If you are interested in a partnership, drop me an email, we can work together, I have a twitter high paying follower niche community of ca. 21000+ peoples (growing), I have trouble monetizing it. (email in profile)
Therefore we recommend that the current HDCP cryptosystem should be abandoned and replaced with standard cryptographic primitives.

So does this mean that all new equipment will quickly switch to DisplayPort, necessitating another round of TV/monitor upgrades? Or will the HDMI organization add DPCP (AES) to the HDMI standard?

[Edit: it was mentioned elsewhere* in the thread that HDCP 2.0 uses AES]

* http://news.ycombinator.com/item?id=1691794
I work at ITA and review puzzle submissions. I can't say what practices were 10 years ago (before we had our first customer!), but I would be shocked if this happened today or even several years ago when I joined. All of us did a puzzle to get an interview and we respect the time and effort it takes.
With regards to encouraging users to contribute photos: Have you thought about creating a few short blog posts about good ways to photograph food? Things like lighting, angles, how to try to take a decent picture using a smartphone, etc?

Food is pretty hard to photograph well, we tend to have overly high standards for what a good food photo looks like because of all the food porn around these days. Just like regular porn, the real thing is going to look a little different. If your users hate the pictures they're getting when they take pictures of their food, they're never going to upload them. They'll probably give up completely after a couple of attempts.
You realize Thunderbird supports feeds, right?
I like reading http://www.mcsquare.me/ for news updates.
searches through Yahoo.com don't generate any revenue for Microsoft do they? Ie they show Yahoo ads, not ones that give Microsoft $$? I could be wrong about the deal specifics though.

Also, Microsoft doesn't really want people searching through Yahoo.com, in a few years time they could power their results through Google and Microsoft wouldn't be better off. They want brand recognition for Bing, so gaining market share for Bing itself is better for them.
You can buy a Palm Pre if you don't like the iphone? Nice that the author of this article disposed of all the smatterings of leftover credibility in the that last little morsel of a sentence.
This sounds like a good move from Google, do something akin to Facebook instant personalization in their other products, rather than creating the next facebook/myspace/bebo clone.
Did you ever see the full quote of the "change your name" stuff?

> Mr. Schmidt is surely right, though, that the questions go far beyond Google. "I don't believe society understands what happens when everything is available, knowable and recorded by everyone all the time," he says. He predicts, apparently seriously, that every young person one day will be entitled automatically to change his or her name on reaching adulthood in order to disown youthful hijinks stored on their friends' social media sites.

Which makes sense to me. Hell, I wish I could delete some videos and/or photos of me on various sites.

Lately Schmidt has been making statements like this though; they are reasonable when complete, but some reporters snip out five words (or, just paraphrase or interpret) and create a news storm. CEOs are supposed to be good at avoiding that sort of thing.

> equivalent HIPPA act for ALL data personally identifiable

We ought to start with getting the same level of laws for voip, IM, and email that phone and mail have. "All PII" is too vague, but those seem like a slam dunk.
My roommate from my freshman year tried the online poker thing. Made $100 the first day. $1k the first month. $5k the second. Then he won some $30,000 tourney. Then he dropped out.

He's been pursuing it full time for the last 4 years. He'll go into casinos and play for 50 hours straight without even realizing it. For awhile, he was dating a 35 year old women during one of his 3-month stints in Vegas. Then her husband showed up and punched him the face. He says he made around 110k last year.

The first day we met, he said he wanted to be either a zookeeper or a weatherman. Funny how quickly your life can change.
This is exactly what I don't want, more stuff forced onto me through my Gmail account. Stop using Gmail as a trojan horse please Google. They should just make a standalone clone Facebook that can integrate with Google's services, if desired. I really disliked the way Buzz was forced onto me and I really don't like the way that the new chat box won't go away and you have to manually hide each contact. Just buy Twitter and use their talent, you've got the cash and it's not really in Google's genetics for social.
Well version 1 was really not meant to be about the quality of photos (i.e. food porn), but if we do move in this direction it's a great suggestion
Professors and Patches: For a Betterrrr R
Discussion on R continued
I'm really interested to see how this goes. It's been a long time since Google released a "killer service." I'm really hoping Me is more than just a Facebook clone, and that they learned some lessons from Buzz (and Wave?).
Eric Schmidt ratcheting up the Internet giant's rivalry with Facebook.com
I actually have a bit of a penchant for watches, but that's it. :)
B2B Customer Development
Bespoke design 
Comprehensive Electronics Solutions! Camis Electronics specialises in the design, development & manufacture of electromechanical products.
Viable? Time will tell, but Philips has something on the horizon:

http://pulse.philips.com/blog/2010/08/31/philips-gogear-conn...
Pretty sure craigslist closed that section.
Note - The title is misleading. It's a zero day vulnerability on all platforms, but the exploits hit XP Vista and W7. It's still prudent to kill Flash on all though.

http://www.theregister.co.uk/2010/09/13/adobe_flash_0day_vul...

It is easy to turn off Flash in the Firefox plugins, and running the Better Privacy extension which kills the Flash hidden cookies normal cookie management doesn't touch. (One stalks you keeping track of every site you've visited with Flash) Better Privacy isn't yet compatible with the Firefox 4 beta but is fine with 3.x

NoScript is still a good idea for many reasons.

The malware is worse this year than last...
http://www.gdatasoftware.co.uk/about-g-data/press-centre/new...
Without the "duh" this is a good comment. Why sully it?
>Maybe provide a way to rate things by delicious-looking-ness? (You might want to think of a better word than delicious-looking-ness.) People could compete to have the most delicious-looking food on the entire site (like hotornot but without quite as much potential for ego shattering).

The app wasn't entirely appealing to me until I saw this. If you did this, I'd use it. (not sure if there are other players in this space)
Just checked, it's still 32c per minute to call the UK.

When will there be a UK operation?
There's already a lot of calorie-counting apps out there if that's what somebody is interested in. dailyburn.com, for instance, is pretty good. It's also a lot of work to replicate one of these since you'll need to enter a huge database of possible foods.

The problem with them is that counting calories is too damn much work, so adding an extra step, where you take a photo of your food and then count the calories in it, doesn't seem like a huge gain. On the other hand, I suppose if you had photos of everything you'd eaten you could more easily count the calories only once every couple of days.

Still, I think you'll need to decide between "food porn" and "healthy eating" rather than try both, since they're pretty much opposed.
> It just strikes me as a very broken interviewing system when you have developers interviewing sysadmins.

Sounds like your recruiter messed up.
Giving people responsible for performance tuning access to user data is almost inevitable if you run anything remotely like unix. After all, it may require tweaking kernel parameters, changing init sctripts or reinstalling applications compiled with different optimizer settings. All of these operations require root, which is an all or nothing affair in unix. (You can do some tricks with /etc/sudoers to restrict what else people who need root for a specific task can do as root, but writing a sudoers file that allows serious performance tuning and is still airtight might prove a challenge.)
This has in fact been criticized as a major design flaw of the unix authorization model. To prevent problems like these you need a more fine grained authorization model that separates access to the system and its configuration from access to the data, so that even if I can replace an application with something else, I still cannot make it write data to a location of my choice. This would reduce the number of people who I need to absolutely trust from everybody who may need to change some minor configuration file to the handful of people managing the security kernel of the OS.
Systems like that are possible, but not easy to implement and mange correctly and sometimes inconvenient to use, so peole go the easy way and assume that everyone that is a member of a group mentioned in /etc/sudoers is trustworthy or at least lack the criminal energy to bypass the restrictions sudo can enforce. Most of the time, this works.
Wow, a quick comment generated so many downvotes and spawned a meta mini-thread. Downvotes are perfectly fine as I'm no stranger to them. Would I change my comment style to please the hivemind? No, having different viewpoint however unpopular is important.

As for the bladder comment, yes, that's the first thing came to my mind when I read it. Guy Steele stressed strongly about they didn't take a break during the entire time of the 10 hours. I thought, not even a bathroom break? these guys must have strong bladders, or the story was embellished to make it superhuman interesting.

Note that I have enormous respect for both GS and RMS. Sure I could have said how awesome their hacking session was, but that's just being part of the echo chamber. I rather posted my honest reaction. You can read it as an admiration for their superhuman effort or as a questioning of the absurdity of a folklore.
Kindle takes a jab at iPad's glossy screen and high price
Treat Life As An Experiment - Tom Kelley
It doesn't completely render BD+ useless, as BD+ can be used to watermark the video signal according to the player model (and hypothetically other variables, like location, IP address, or player serial number). So, to avoid identification, pirates would need to crack BD+, or combine the output from multiple players to obscure the watermarking.

Another problem with cracking the transport instead of the storage medium, is that to rip from HDMI you have to play the movie at normal speed, while ripping straight from disc can be done much faster.
Trojan horse? Strawman, baby!

Using your gmail as a username isn't bad. It makes it easy to know where to send you emails for account details and such. However, I think GMail needs a revamp if it's going to be the focal point of many integrated systems. What I don't want is another Facebook clone. A developer-centric social layer, to integrate various components of their developer infrastructure (google code/analytics/adsense, etc), could work. Could. They've got a bad track-record at "social".
Click on any of the components and it will explain the benchmark and give the source (which is heavily documented).
I have a consumer-y, low-tech site - http://WinScrabble.com - where Google is only about 75%, Bing is ~10%, and Yahoo is ~9%.

However, on http://Encosia.com, Google is 97% and Bing/Yahoo are less than 3% combined.

It's all about the site's audience.
My gawd, HN is turning into Slashdot. :(