skysight-inc/HackerNews huggingface dataset:
They can make a fair guess at which websites you're accessing. A lot of websites that are related to your particular interests aren't behind shared IP addresses these days.

Consider this:
* Build a list of domains you're interested in. There's fun community build blocking lists that can help you, if you need it.

* Periodically resolve every domain. Odds are if you're an ISP your servers already have the records cached, but it isn't too hard to resolve them all.

* Dynamically adjust your routing to specifically re-route those IP addresses to your special infrastructure (or maybe null route it if you want to block access)

* Use your special infrastructure to build up whatever profile you want about the source IP address, which of course being an ISP you'll be able to link directly to a user. Your end user won't even know.

You'll know when they access sites, be able to build up patterns of websites they access, in which order, and spot variations in that pattern.

There's a lot you can infer from metadata without decrypting the traffic. Everything from which domains you access, ports used for the communication, what order, and what sort of size the payloads are. You could identify that someone has an email account they only access after visiting, say, the Ashley Madison website. By tracking the size of communication on that is being sent to figure out if someone is sending dick picks or some such, or if it's likely just plain text.
Oracle has done a lot of evil stuff. Should you stop using Java?

I mean, you should stop using Java, but not for that reason :)
> But bottom line, it's Google's service and I guess they can do what they want with it.

By the same token, everyone else can also do whatever they want. Including publicly criticizing Google for removing lawful information, advocating that everyone stop using their services until they change their policy, then using, promoting or creating competing services that don't censor, etc.
>It's nothing but an excuse to charge someone with something when you can't prove the thing they're actually supposed to be guilty of

This is exactly it.

If you want to stop a drug dealer, then prove they are dealing drugs, and put them in prison for that.

But it's too hard to prove they're dealing drugs, so create a law that criminalizes something that could potentially help a drug dealer cover his/her tracks, like concealing large transfers from the government. Now all of a sudden a new category of crime has been created that affects far more than drug dealers.

Anti-money-laundering laws are a blunt instrument for fighting crime that restricts the rights of millions of innocent people, in the name of stopping a small population of criminals.
That would make it a nonfree license, but I would use an MIT like license that does this for some projects.
Can you explain how 0-RTT might be used as a back door?

(... edit, actually, I recognize this username from previous nonsensical discussions about crypto and backdoors: https://news.ycombinator.com/item?id=13364173 )
'hga was also the poster who was banned for (too late, IMO) telling a Jewish person to "self-deport" because he didn't want them--you know, (((them)))--in his country.

https://news.ycombinator.com/item?id=13056816

He offered elsewhere a clearly reasonable return to the "pre-1965 demographics of the US." And so very positively spoke of "moving past the concept of equality before the law."

And he isn't alone.

There are some real scary correlations between the gun-fetishists--and I say that having grown up around firearms; I am not scared of them any more than I am scared of any other recklessly used tool with a toxic culture surrounding them--and generally toxic and antisocial worldviews. But the causation is not the guns, to be clear; the machismo-driven culture that leads to the guns is the cause.
Everything that exists in C++ also exists in Ada under a different name and syntax.

The separation of cpp and header files, classes, inheritance, different kinds of inheritance, virtual, pointers, references, pointers of pointers, exceptions, meaningless errors from the compiler, etc...

Personally, I find both languages to be a complete clusterfuck. The difference is that C++ will compile anything and crash for no apparent reason whereas Ada will refuse to compile anything.
Where do you get that Obama’s campaign had special access that other apps didn’t have?
Agreed that judges are not infallible, and we must keep watch, both in appointments being made and the judgements they make. That's why the Constitution is structured the way it is. It's important that we continue to do so, particularly now.

I also trust, unless proven otherwise, that these judges have studied the law and are acting in good faith, both as arbiters of justice and as American citizens. These aren't isolated, unique cases. On the whole, I would defer to them over my own opinion, as I would for many experts. And, without additional information about you, I'd defer to their opinion over yours, as I'd expect you to, in the same situation, as well.

I don't believe that there is some conspiracy across all of these judges and justices to systematically deprive citizens of rights. You are free to believe otherwise. I do believe that assuming bad faith across the board is a recipe for the destruction of community, society, and government. Perhaps you believe we're already at that point. I don't believe we are, at least not yet.
I hate these questions.

You need to put it in context. Is system ram under pressure? Poor memory performance is measured by swap i/o or bandwidth, not usage.

If you have 16gb of ram and little else using the ram then there is nothing to worry about. If you have 4gb of ram then a support ticket is probably your best course of action rather than whining to random forums.

To answer your question, runtimes will lazy garbage collect because you might want the data again. Decompressed images and frame buffers lead to faster under interface interaction. You're not using a terminal app, you're using an app that can render any font or image in complex ways to an image buffer, for rendering at 60fps with smooth scroll. Are you also on a retina display?
Creating Anoraks Adventure
Ada didn't take off (despite some decent level of enthusiasm in the industry) because a compiler cost $$$$. We're all using languages today that had a zero or near zero cost to use in the era that mattered (when 32-bit micros were being introduced). Or newer also free to use languages, obviously.
It's so transparent, it's anything but genius. They've taken a completely disingenuous stance in order to manipulate the less logical. Is their PR consultant Hannity?
Pied Piper has been used for that since Season 4, Episode 7!
Wouldn't any decent AV product catch this anyway? I mean Invoke-ReflectivePEInjection commandlet is from Powersploit and it's been around for like for 4-5 years if I'm not mistaken.
Post-SESTA/FOSTA Self-Censoring for Twitter, Reddit, and Other Social Media
When has this ever cycled? It's always been a one way slide towards centralization and control.
The Equifax thing didn't result in regulation and that was an actual scandal with real ramification not a pile-on by a press seeking to vilify an ad financed competitor.

Funny how the Times is using silly metafilter vernacular now:

"the consumer surveillance model" -- it's the same business model that's been supporting news publication for more than a century.

As for the GDPR it's similar to the recent digital tax proposal and numerous other initiatives by the EU intended to attack US businesses, the US government doesn't share that motivation and it must condemn and push against these EU actions.
If we continue demanding and building the tools that enable privacy, we will be able to get there. More cuz of the building than the demanding.
Not entirely true, you can use a vpn, but then you're placing trust in a vpn provider.
Understanding Variables, Scope, and Hoisting in JavaScript – DigitalOcean
Project Fin, a Raspberry Pi Industrial Carrier Board
Is Microsoft scarier than Google? Unlike Google, Microsoft tracks and profiles you online via their search engine and through all of the "telemetry" Windows sends back to them. Also, doesn't Microsoft operate their Azure cloud service in China that is run by a Chinese state run company?
Uh, Google and Mozilla and a handful of organizations are converting all web traffic to HTTPS through subtle manipulation of standards and user interface. They even proxy mobile traffic from their search engine. ISPs can't even see what IP you're visiting because it's all fronted by CloudFlare. Even your DNS is being hidden by an HTTPS tunnel in the browser.

Your ISP soon won't be able to see anything you do online. But Google will see it all.
Extremely awesome walk through. :)

Two questions, if that's ok?

* What was the bad experience that caused you to stop using a parting tool?

* What sort of mill are you using? (kind of thinking a 4th/5th axis being added might help too) :D
The first time you connect to a server, a "handshake" needs to be performed in order to generate a shared secret key. If you've already performed the handshake with a given server in the past, 0-Rtt allows you to skip it and use the key you generated before.
SESTA-FOSTA strikes again...
Has anybody actually seen an ISP tracking user behavior? I've worked for a few 1998-2005 and never witnessed it.. however I wouldn't be surprised if they had transformed in the years since. Just curious if anyone has ever leaked info about such a program.
How do you think that would work? Whatever you mean by "end of a civilization", it's going to have nearly zero effect on polygamy. Polygamy is a marriage practice that people will do, or not do, according to their culture; changes of government / technology / etc. don't change it.

Going back up to my original example, you see polygamy practiced in China in the warring states period (ca. 500 - 200 BC), in the early Han (ca. 200 BC - 0), and the later Han (ca. 0 - 200 AD), and the three kingdoms period (ca. 200 - 300), and the Tang dynasty (ca. 600 - 900), and the Song dynasty (960 - 1279), and the Yuan dynasty (1271-1368; wasn't even a Chinese government), and the Ming dynasty (ca. 1368-1644), and the Qing dynasty (1644-1912; also not a Chinese government. The Qing actually outlawed foot binding, though this was not effective.), as well as through all the other intermediate periods not mentioned in that list.

However you want to count the end of a civilization, there won't be any relationship at all to polygamy practice; one changes and the other doesn't.
After this media blitz dies down, they'll likely soon just start directly sending this to the FB servers from the application, without leaving behind any localized files...
This is the English link, as it seems to default to German:

https://www.openmovement.org/?konzept&lang=en

That aside, this looks pretty nifty. :)
Why would the government push an backdoor that would expose their own citizens to more hacking? Almost seems like they’re just trying to look tough on crime but won’t actually do it.
"[Facebook] came to office in the days following election recruiting & were very candid that they allowed us to do things they wouldn’t have allowed someone else to do because they were on our side." - Carol Davidsen, Former Obama Campign Director [1]

[1] https://twitter.com/cld276/status/975568208886484997
The rule of thumb I've heard many times is to take your rate as an employee and double it. The simplest way to do that is take your $K-per year and change the units to $-per hour. 100K per year become $100 per hour. I've also seen some stuff here on HN - and IRL - that suggests this is a minimum.
$6200 for an LS3 on eBay. Pull the heads and send them to advanced induction for their porting services. $1100 for that, then a matching cam from them.
Are you comparing books to porn? Lets go with the comparison... Nobody is burning books. It's more like the publisher is saying to aspiring author: "Your book contains pornographic content, we will not publish this. Please find another publisher. And by the way, we lost your manuscript, hope you have another one."
I have my browser set to only accept first party cookies, does this help?
> Except when sensible restrictions on gun buying are propsed

Because every "compromise" gets turned into something else to be attacked. That "Gun show loophole" was an explicit concession, that is something offered in compromise, is now being turned into something to be attacked and revoked.

There is no "compromise" - the goal is ban and confiscation. We've seen it time and time again. How many times must one put their hand on the iron before they realize it burns?
They are both scary enough to limit both of them. I don't think we should choose one or the other.
> This is such an irrelevant, derailing, and ultimately toxic viewpoint.

Toxic is a matter of opinion.
Pointing out the hypocrisy is relevant, insofar as it's relevant in every other forum between one actor accusing another of being a bad actor. How you take something to be derailing, when it's relevant, is beyond me.

A facile analysis, most definitely.
And what you described is basically the principle of due process, which the creation of money laundering as a category of crime totally undermines in spirit.
To be honest all a VPN does is add another layer of protection. It's not that secure because they can be subpoenaed or NSL'ed into giving data over, which is why a VPN's log policy is important to pay attention to. So in reality, you are mostly just trying to not reveal traffic to your ISP which the various LEA's can get access to far too easily (read: without a warrant).

For those really serious about privacy that's why I think actually owning a colo space where you own and control the hardware can be a preferable solution. For those who don't like that try setting up your own VPN on a VPS, etc.

One of the key things most people miss is DNS. I personally also suggest running your own DNS server, even if just a local dnsmasq that's outgoing to opendns or internic or something.

One more thing most people don't think about is attackers pivoting from other compromised devices on the internal network. If you think that Amazon/Apple/Microsoft etc device isn't sending checks out on the local network and then reporting back stuff like internal IP topology and MAC addresses you got another thing comin. Check your iptables or nftables (bpf?) and block internal hosts you know don't need access.
When you set up an Android phone you have the option of not using Google Services. Secondly, you can disable Google Play Services anytime you want. You can also turn off location history and tracking anytime you want so I'm not sure where you get the idea that none of these services or apps can be turned off or disabled.
No comment, just googling.

https://www.privateinternetaccess.com/blog/2016/12/comcast-s...

https://arstechnica.com/tech-policy/2013/04/how-a-banner-ad-...
Woolf University: college courses literally on the Ethereum blockchain
What part of a DoD contract requires whistleblowers? Are we going to arrest all of Lockheed Martin or Northrop Grumman?
> If there is no money and instead civilian egalitarism what or who decides who lives in a mansion on the beach or a small city appartment? How does Picards brother „own“ the family vineyard?

The usual answer when this question is raised is either "they inherited the land" or "a committee decided the the Picards were the best for tending the vineyard".

Not 100% convincing to me but there is no better answer AFAIK.

> And what do people do with their life? Is there a 5 hour work week?

That one is easy, though. Let me quote Jean-Luc Picard: "The acquisition of wealth is no longer the driving force in our lives. We work to better ourselves and the rest of humanity."

Such an endeavor takes time.
>I've done lots of work where I've been paid $1000 per hour when I break it down by time. Can you say the same?

Unfortunately it can go the other way too : you work for $10/hr.
Why do you think this? The manufacturer is obliged to maintain a backdoor, and give access on demand.

The US is a big enough market that they could force this to be built. Other countries will just write similar laws to get the same access to the same backdoors.
Forget scary. Let's talk about utility. Facebook gives you distraction but Google gives you information (YouTube, Google Search, GMail, Maps, Voice, Fiber, Project Fi, etc) and is more restrictive about how it lets partners use its platform to interact with users.
Basing your claim on what someone said to stroke the ego of a political operative, as communicated via a Tweet?

I’m totally convinced, no further evidence required!

(/s)
A quick thought is that the protocol could require a sequence number on 0-RTT and only accept newer ones.
>It's the same business model that's been supporting publication for more than a century.

I think there's an enormous difference between advertising in print, advertising on the internet, and what is currently the status quo, which is active surveillance of all information consumed and every movement that individuals make across the internet and in the real world by data linked through GPS/ cell phone location, credit card purchases, etc.

I'm aware that this is the new reality, but comparing it to print advertising (or even pop up ads of the early internet) is disingenuous at best.
One would hope that for phones sold in the US the keys would be escrowed somewhere that only the US could get to them. Likewise for other countries.
Windows didn't have a free C++ compiler for many years, but in general I think you're right.
> Is that true? I always assumed the fallacy was named for the already existing expression.

Funny! I'd never thought of that. For those curious, Wiktionary says that it's actually from the Latin, "fallere", to deceive [1].

[1] https://en.wiktionary.org/wiki/fallacy
That's certainly fair (and to be clear, when using Americas in English, the phrase is the Americas, including the definite article), though it would also be fair to restrict it to the English language, as names change depending on the the language. For example, Hungary in English is Ungarn in German (Deutsch) and Magyarország in Hungarian (Magyar). I'm not going to insist that Germans should use Hungary or Magyarország auf Deutsch.

As a first approximation using Google Translate, American translates as americano in both Portuguese and Spanish, while Mexican and Brazilian, for example, translate as mexicano and brasileño (Spanish) and brasileiro (Portuguese), respectively. I didn't find a way to limit this to particular locales as would be appropriate. These types of things can be subtle, and I'm interested to hear from good sources that can provide more insight.
With 3 & 5 yr old there is a lot to do and not much choice to do a tonne of leisure activities. If I get some spare minutes I'll do some hacking on some side projects, go for a walk, grab a coffee or something.
This is definitely the right attitude, and I’d add the critical step of talking about these issues with people who don’t know about them. It’s frustrating, it can be alienating and it definitely takes time, but it can pay off. Nothing beats building a useful tool (like Signal), but even useful tools require publicity.
Nah, just stop the greedy assholes who consume way more reaources than they need to, redistribute what we have, and kill capitalism not people.
Clucene was way too slow for body text, more than 1GB. I had my own header parser in C++ (though you can do that in Python easily).

I'm trying again on that 800GB with KISS DB (append-only hashtable), and Elasticsearch. Doesn't matter if GPL because it's a website.
That's why we get computers to calculate eigenvectors and plot the result in a nice graph that humans are fine at interpreting.
The NYT magazine article about this also mentions that the scale of the Obama campaign's data extraction tripped internal Facebook alerts which had to be overridden: http://www.nytimes.com/2013/06/23/magazine/the-obama-campaig... (Back in 2013, they of course spun this as a demonstration of just how impressive and well-done it was.)
>Oh learning can absolutely be fun (and exciting etc.) And some types of learning activities can be genuinely fun in the playing a game sense of the word. I just think that there’s a problem with the mindset that if you aren’t loving every minute you’re learning there’s something wrong.

Spot on, IMO. That mindset is encouraged or aggravated by kind of e-learning startups that seem to want to kidify / gamify / dumbify all their content. I've had interactions with some of them when they approached me for partnerships of some kind, or for content creation, often in Python. Have had to say no to some of them due to that mindset, which I do not think is good for either the students or the instructors / companies providing the instruction, from both a pedagogical and a business (profit) point of view.
One: They’re sneaking suicide in with the data, and then obfuscating that inclusion with rhetoric.

Alternative hypothesis: they’re including suicide data because it’s relevent. Suicide is homicide (not murder), and they’re including the copious accidental killings (also homicide, also not necessarily murders).
60% of users on TravelMap.net register with a social account.

60% Facebook / 40% Google

The stats seem to vary depending on the types of clients.
Cloudinary is this exactly. It’s great! https://cloudinary.com/
Yes, that is the correct title of the Chartrand book, thanks!
Print ads were always backed by market research and data brokerage (buying lists of magazine subscribers, club memberships etc).

As for storing data that is generated by their platform that is these companies' prerogative, it's their data as much as it is yours.
How the NSA is tracking people right now
Funnily enough, I vaguely remember there being articles on HN claiming that Facebook's lockdown of access to their social graph was an anti-competitive practice that needed to be stopped when it originally happened, though I can't seem to find them again so might be misremembering.
Why not create a Facebook or Google account just for these websites? Or is it the cross domain tracking that is worrying since everyone's sites are tagged?
I'm not saying anything about legal liability.

Youtube might have decided not to host porn as a pure business decision - e.g. so workplace and school content filters won't block youtube.com as pornographic. Khan Academy and suchlike couldn't host with youtube if it meant you couldn't access their videos from schools!

Once Google has made the business decision that they don't share pornographic videos on youtube.com, it seems reasonable they wouldn't allow them to be shared via drive.google.com either.
Search query to the void, but if anyone has archives of the umbc.* hierarchy, I'd be eternally grateful to see them.
All I can say is that, as a Brit (from a country where regular police don't even carry guns), I find the concept of average Joes owning guns of any description crazy. It seems like the outcome of a broken society in which people don't trust law enforcement to protect them. Maybe higher gun ownership rates don't directly lead to homicide, but that to me isn't even the issue - the elephant in the room is the massive cultural problem the US has with firearms, especially the way in which they have been politicised in such a bipartisan, black-or-white system.
People are talking about gun deaths and gun violence. Why would those be excluded from the debate? Why exclude injuries?

Lots of gun violence doesn’t result in death.