skysight-inc/HackerNews huggingface dataset:
"Biggest" only for the media coverage this could get, i would not be surprised if they had exploited a common vulnerability. At least when we are discussing about publicly accessible sites, "security-illiterate" is the perfect definition for these government agencies (and the external companies that realize the sites they need).

Will this kind of things make the general public at least a bit more security conscious?
"It’s even more telling that Microsoft hired a firm, ContextIS, to create this bogus FUD so they’d have someone to hide behind. It’s pretty convenient that only a few minutes after ContextIS’s latest post Microsoft already had a well manicured response. If ContextIS had any credibility they’d be posting about the same issues on Silverlight5 (warning: might crash your machine), Flash 11 and Unity3D.
"

I always wondered about those IDC and Gartner predictions that WP7 will become #2 mobile OS by 2015, when it can't even get past 2% right now and its growth is slowing down. How did they get those numbers all of the sudden, when they couldn't even predict half of Android's growth when Android was actually growing fast. So that seemed very fishy to me at the time.

If Microsoft is paying companies to do this kind of "publicity" that favors them, then I wouldn't be surprised if they are behind those so called predictions either.
SQL injections seem to be the prominent exploit by them.

Not in any order of popularity:

1. Brute-force (or not) cracking of weak or default usernames/passwords

2. Privilege escalation

3. Exploiting unused and unnecessary database services and functionality

4. Targeting unpatched database vulnerabilities

5. SQL injection

6. Stolen backup (unencrypted) tapes

http://mobile.darkreading.com/9289/show/8506121498da7d8ae483...
It would be just another excuse to get the Internet ID implemented. MAFIAA has been pushing for Internet ID since years now and a number of politicians are in favour. Must admit that every time I read about the latest Lulsec activity I cannot help but think that MAFIAA is behind all this.
I gave SpiderOak a shot but had to give up quickly because their OSX client was an unmitigated disaster.

It may be possible to ignore the horrible UI once it's set up, but I couldn't ignore that it randomly decided to stop syncing individual files or entire folders.

On the second day I even set it up from scratch again, as I figured I might have done something wrong the first time. But on day 3 my laptop and desktop were desynced again, so I went back to unison...
And I bet there are hundres of other users loging in at that time as well.
er... I dont think they care, its for the Lulz.... apparently :-\
There may not be anything in there to embarass me but there is unequivocally enough in there for someone to steal my identity and ruin a credit rating I've been working extremely hard to build over the last three years.
An update, also on PasteBin: http://pastebin.com/g1C7d82G
Isn't there a rather fundamental problem with the study? It's not blinded. It's pretty obvious to both the subject and the experimenter if the bed is rocking ...
In my experience the expense of a security consultant is rarely correlated with their skill level.
Knowing a little of the internals of ONS...

It may take them a while to figure out what a "computer" is and how it might be "hacked". You could be waiting some time :)

ahem.
If you read the article or the pastebin:

We’re keeping them under lock and key though… so don’t worry about your privacy (…until we finish re-formatting them for release)

So, given they really arer LulzSec, they are hinting that they won't publish the data un-redacted.
Medical Marijuana Cards, Marijuana Doctors
You may qualify for a medical marijuana cards, THC Support help you to get legal medical marijuana. Find marijuana doctors, medical marijuana dispensaries and clinics. THC Support providing information about marijuana states laws.
But aren't they using pretty old exploits, SQL injections and DDoS?
I filled in the UK census online, but I can't actually remember what compulsory data was requested. Is there a copy of it somewhere?
"This could get to the point whereby the skill level required to protect an application or server goes way higher than the skill level of many developers."

We reached that point quite a while ago. What we are seeing now is the result of that point being reached, without anyone realising at the time.
We built an image-through-sound sharing app at IPO48 hackathon this february - one of mentors there was trying to convince us to upscale that from funny entartainment utility to an e-commerce, but we didn't see a business oportunity... Our bad :)

If you are interested, see our demo Android app at http://www.youtube.com/watch?v=ElkmzoqD9PM (or search Soundwise on Android market).

Tomas Kafka from MobReactor
For those who are interested, these are the questions:
http://www.ons.gov.uk/census/2011-census/2011-census-questio...
The vast majority of people wouldn't disable their plugin even if it was all over the web that the plugin's security is seriously compromised.
Ask HN: Is PHP dead for startups? Could PHP revive?
New PHP frameworks like Lithium or Symfony 2 are awesome, but it is hard to see new startups on PHP. Could PHP revive for startups? I would like to know the thoughts of HN community about this.
How Not to Deliver Bad News: Dropbox CTO Arash Ferdowsi
I was thinking more in terms of reactions. Governments rarely admit their own faults and weaknesses. They will react claiming computer terrorists must be stopped now and that more control on the Internet is needed to protect everybody.
Installing Nginx With PHP5 (And PHP-FPM) And MySQL Support On Ubuntu 11.04
If their servers have been compromised to leak the data, should be. They ran the survey and UK and European data protection law makes data leaks the responsibility of the data holder.
Yes, they will probably be the information controller under the DPA and have to be extreamlly careful that our data is safe. Even keeping a copy in a non EU country is very hard.
Or they're just literally formatting it for organization and readability. They've released damaging info before on innocent users.
If this is true (and it seems it's probably not) then the people to get angry with are the UK government and their contractors Lockheed-Martin. WTF are we using a US-based company for anyway?
Opera celebrating today: Manchester Small-Scale Experimental Machine
Why would jurisdiction enter into someone in the UK suing the company that processed the UK census data? Thier data. I don't know if antihero is in the UK, but if they aren't, people in the UK should do it instead. I am disturbed that my data could leak like this.
Presumably they put it out for tender and got the best package that they could.

Isn't that what we'd expect a Government to do? Tender jobs out to the private sector and choose the provider that offers the best value for money?

It's not as if Lockheed Martin are a particularly insecure or untrustworthy company to hold private data.
Inductive Logic
I love being pseudo-anonymous on the Internet. The only issue I have ever had with maintaining it is using PayPal.
They were one of the first companies to admit that the RSA SecurID exploit compromised them over the past months, too.

Link to story: http://www.networkworld.com/news/2011/052611-lockheed-martin...
Watch bridesmaids online free megavideo
watch bridesmaids online free megavideo
bridesmaids watching comedy in America directed by Paul Feig and produced by Judd Apatow Barry Mendel and Clayton Townsend Plot centers on Annie Kristen Wiig and experience as a Maid of Honor in Maya Rudolphpernikahan Lillia
More likely that common development tools and frameworks will become much more intrinsically security conscious.
LulzSec steal millions of records from the UK 2011 Census
Future phones may send data and apps via photography
Holiday Packages India,Tour & Travel Packages India
Mast Holiday offer Budget Holiday Packages India, Tour Packages india, Travel Packages India check online for booking. India Tour Packages, Weekend packages from delhi and Honeymoon Package.
Relationship Marketing Is Not What You Think
Microsoft is known to hire other companies for such things, but they aren't really hiding it.

And I am sure that the ContextIS report is accurate and that WebGL represents a security risk, but TFA is also right - if WebGL is a security risk, than so are Silverlight 5 and Flash and Java applets, which are and will be everywhere anyway.

But because WebGL will get multiple competing implementations and everything is in public review, I'm also sure that it will be just better than the various other browser plugins that allow access to the GPU. The only problem with this picture would be IExplorer, since it has such awful upgrade cycles, that's why I'm kind of hoping they won't implement WebGL instead of coming up with something half-baked that ruins the experience for everybody.

I also couldn't care less about Gartner and IDC predictions: they never predicted anything worthwhile anyway. But WP7 will be popular. Maybe less than both Android and iOS, but popular nonetheless.
Houston Limousine 14 Passenger Van
Passenger Van Houston Company Rentals Services Passenger Van Houston and Limousine 14 Seating Passenger Van Houston to Airport, Hotels, Resorts with CD Player and Dual AC.
I understand your point (it is potentially true for more than just the security domain of application development) but I think your premise in this case is false. SQLI (XSS, CSRF, ...) attacks are neither sophisticated nor new. SQLI has been known since at least 1998 (Phrack 54).

SQLI protection at least should be abstracted away from the developer's concerns by use of default parametrized queries. Technical difficulty is not the problem here.
does anyone know of any other inexpensive ssl cert providers?
The video on that page was very amusing.

They ripped the style of the Apple product videos so perfectly (all the way down to an "every once in a while" opening) that it felt like a parody.

I was almost expecting a "One more thing..." in the end.
> I don't think having more pixel-perfect control or slightly faster JavaScript makes the web any better.

I think the point for making ie7 deprecated legacy is more about its hideous bugs in the parsing, internal document representation and rendering bugs.

It is the things that makes proper code unable to be displayed properly without the tedious work of understanding the dysfunctions to circumvent them properly. To me, the old IE rendering engines alone has slowed web innovation for at least several years all by themselves.
I'd say the opposite will happen. The government will not be able to set up anything which requires a massive secure database for quite a few years. Every time they claim they can set up a secure database, the 2011 census leak will be brought up.
The original tweet by @opera: http://twitter.com/#!/opera/status/83119985144233985
I would really like to know the exact details of what happened.

Ideally I'd like to see the actual bug in code.
5 Ridiculously Easy Ways To Unblock Writer's Block
Lessons in Longevity, From I.B.M.
I don't remember salary being requested on the UK census...
Samsung solar-powered laptop – One hour use per two hours charging?
There'll be some interesting mashups if this is true.
This cancer vaccine is already on the market and it already works: http://en.wikipedia.org/wiki/Sipuleucel-T

The study mentioned in the i09.com article is just public relations -- in particular, b/c mouse cancer models are often not predictive of human results.
It's possible that some of the addresses that donated to the EFF were single-use throwaway addresses which the original owners may not still have the keys for
Have a look at twig, it is flexible and allows for changing the syntax:

http://www.twig-project.org/doc/recipes.html#customizing-the...
If they will implement the Internet ID in the same way as they implement their current security (assuming the leak is real), then there is no need to worry...
Hämorrhoiden Behandlung
Hier finden Sie Natürliche Heilung für Hämorrhoiden, Hämorrhiden, Hämorhoiden, hämoriden behandlung. Der große Ratgeber, um Hämorrhoiden dauerhaft los zu werden.
i agree and i have to say the meego and and nokia dev and designer's have done a spectacular job... its a sexy device and a great platform (qt :D).

the problems are all management not technology... which is sad because those eggs in the meego basket are looking pretty cool.
Also, saying "Dog and Bone" anywhere outside of London will get you laughed at. I'm presuming this is mostly the case in London too. Cockney rhyming slang != British, and no - we don't all use it.

Spotify is awesome, so much so that even though their recent restrictions were a little upsetting - I decided I love the service too much, and started paying. Two months in and I'm still very happy with it. If you sign-in from a mobile device the 7 day trial extends to 30 days, so you can make your own choice with plenty of time too.

Is it a little annoying they don't have everything on there, sure... but it's a damn good service. And for everything else, you still have your old methods.

I'm sorry you guys across the pond haven't got to try it yet, but the tech blogs are excited about this one for a reason.
It did ask for the household annual income. It also asks for the job title of the various householders so with a small bit of market info you could easily discern who earns what. Regardless, salary info would be the least of my concerns.
I'm kind of glad this happened as it's forced me to finally get an AES volume setup on Dropbox using TrueCrypt.
Aap Ka Saaya Hindi Movie Free Desktop Download | Aap Ka Saaya Movies Poster,
Supposedly, census data should be anonymous. This means the records should be anonymized as soon as possible and should not just be stored.
Oh. I can't see that question on

http://www.ons.gov.uk/census/2011-census/2011-census-questio...
This makes sense in that I have always found I sleep really well on small boats. I always assumed it was the sound of water lapping the hull lulling ones brain but the rocking of the boat might be what does it.
http://www.ons.gov.uk/census/2011-census/2011-census-questio...
Hardly. His method is steady state repeatable. Yours is progressive.
I wonder how bitcoin would change this. Consumer use of GPGPU has probably spiked well enough to draw the attention of AMD.
Found the questions (pdf):
http://www.ons.gov.uk/census/2011-census/2011-census-questio...
"I'd like to see the actual bug in code"

That makes it sound like it was primarily the fault of the developer who created the bug - things like this indicate an inadequate process or culture not simply a mistake at the developer level.

Edit: Does Dropbox have any testers or is all testing based on automated tests created by the development team?
Just got off the phone to them. Issuing a statement very soon. Will update both the article and on HN.
Why a bit of prudence over LulzSec could go a long way
I believe that most databases are secure, especially the open source ones.

What you should be careful about is the things surrounding the database: the .php files (or whatever) that read/write the database, and the system it is running on.

Basic security practice for the web: NEVER trust user input: check and recheck all the GET/POST variables, check that numbers are numbers, that strings are correct strings (they have no funny characters, such as " or ; (for databases) or <>"&' (for HTML) or . (for paths)). Check all input into the databases (to prevent SQL injections) and all output for to the user (for XSS).

Basic security practice for sysadmins: Use up-to-date OS and software. Use strong passwords. Almost never run root. Make remote access hard.

This seems easy, and for the most part, it is. It's just so many things that people forget to check for them all.
You're right. I must have been confusing it with the litany of forms & processes I went through after our son was born. Good find.
What info from the census would enable someone to steal an identity? From the looks of it there's only DoB and address in terms of personal info...
I always wondered about those IDC and Gartner predictions ...

Here is an entertaining flame about the analysts:

http://crankypm.com/2006/08/streetwalkers-in-disguise/
"All it takes is a swipe". Interesting choice of tagline.
Uk office stationery online 
Oneclick Stationery Store offers a wide range of office supplies, office stationery suppliers all at highly competitive prices.
Our startup is built on PHP and it's quite amazing how many people look at it and then say "I assume it's build on Rails?". I know a lot of people running new startups and a fair few of them are running on PHP versus something like Ruby.

I wouldn't stay it's dead by any means.
Update from whom? It's just an anonymous message.
RV Storage in Corona California
McBride’s RV Storage provides Affordable Boat Storage for all types of RV’s and commercial vehicles including many amenities in Chino, Ontario, Corona and Orange County.
IPhone Apps Development - Your Flexible Solution In The Mobile Market
Sad to say it but the reason the HPV vaccines haven't been more popular has little to do with anti-vaccination propaganda, and much more to do with anti-sexual-promiscuity propaganda. Lots of people -- including many, many, many women -- think that vaccinating their daughters against HPV will encourage them to be promiscuous and that it is somehow preferable to risk their lives.
I'm in the UK and for some crazy reason filled out my census correctly, so yeah, I think there's grounds for DPI lawsuit action.
Essentially if every person in the UK was open to identity theft then this would be an extremely serious issue. Which it could be.
Look at Nokia's recent past to get an idea of how you cannot just swap one platform for another on a whim. It looks like flailing frmo the outside and IME creates conflict and chaos within the company.

If this is successful -- which I imagine will depend on which carriers run it and how they push it -- I think you'd see a strategy to converge the experience somewhat so there could be a natural successor to this phone.

If they are as tightly wound as it seems, it could come in the form of changes to WP7 (tho of course that application grid would have to go!).

But what's far more likely I think is a layer not unlike HTC Sense. That would be a brilliant little way to bring people on over to a strange and foreign land of WP7. And many many people i'm sure wouldn't even realize that the underlying platform is different: If their web browser, calendar, social feeds, etc, are the same, then it looks just like an upgrade.
What you don't know about the summer solstice
I don't have any startup cred but I do fun personal projects. Here's my take ...

I used to code web apps in Python. Started playing with PHP about a year ago and enjoyed it. I had a hard time figuring out the right framework to use. There's just a ton of choices ... each with some good ideas. Perhaps it was that or my own fault, but I would just hack out projects with straight PHP - no frameworks! This wasn't the fastest thing in the world but works well enough.

Two weeks ago, I did a hackathon where my partner did his piece in RubyOnRails and I did mine in straight PHP. Needless to say, I was shocked at our productivity difference. Since then, I've been learning RoR and have been blown away. Why am I okay learning the rails framework as opposed to frameworks in PHP (or for that matter, Python). I think it is because there is just one. It means a more focused community, and gives me more confidence in investing in learning and adapting to the framework.

So ... less choice is good in my opinion (and others - there's even a book about it ... "Paradox of Choice").
I read an article recently saying that many VCs basically have hard ons for things like Rails etc, regardless of any merits each language may or may not have for the application being built.

Once again, corporate suits are driving technology decisions with little or no relevant experience or training.
Raytheon plans microwave warhead to fry air defences
When in rome... :)
Theory of Constraints in Software Development
Probably for the tone of my post. The phone does look very nicely done, but that first shot with the little grid of brightly colored icons is an almost exact dup of every iPhone picture I have ever seen. They even use the exact same color and icons for phone and messages. Seriously open up Apple's and Nokia's pages side by side They really look like the same family of devices.
Did My Brother Invent E-Mail With Tom Van Vleck? (Part One)
Yes, let's secure our databases against O'Reillys and AT&Ts submitting their funny names! <g>

It's not characters that get you, it's lack of escaping or escaping for the wrong context (e.g. magic_quotes won't work for HTML)

• For SQL use prepared statements exclusively (never let "oh, it's just a number so I don't need to" fool you)

• Escaping doesn't differ between "trusted" and "untrusted" data (and these boundaries are too easy to break eventually).

Just escape everything, always. In PHP it means every `echo $var` is a likely vulnerability and `echo htmlspecialchars($var, ENT_QUOTES)` (in HTML except script) or `json_encode($var)` (in script) is a must.

Obviously, you should do defense in depth, so input validation is great and some filtering just-in-case may be warranted, but escaping alone (assuming done well) is sufficient for security, while filtering alone is not.
Childrens names & DoB, previous addresses, employment status, national insurance number. That info alone is enough for someone experienced to do damage.
I assume you mean 'MQ' rather than 'MG'. I'd recommend learning to use patch queues via the command line first:

http://mercurial.selenic.com/wiki/MqTutorial

Once you've done that, using the GUI should be straightforward.
"I agree that this thing you have given me has value."

Can we agree saying this is measurably different from saying, "I would prefer it if you paid me this way."?

OP from way back when was claiming the second thing, not the first thing.
Well, the crazy reason is the threatened fine of up to £1000.
10 Best Practice Tips to get your Sales team using your CRM
The MtGox RPG
Looks like Sophos are instigating PR damage control already: https://twitter.com/#!/gcluley/status/83121318723194880
Choosing rails because there is only one well known framework for ruby seems awesomely flawed for me.

If rails doesn't work the way you want, or makes something unnecessarily difficult/complex, your options are a) bend to the will of rails or b) switch language and framework, which means any existing code is basically useless after switching over.

Choice is not a bad thing. If people are seriously using the lack of choices with ruby as a positive argument there is something truly wrong with the world.
I just use Assembla for "dead" projects. Unlimited free Git repos, as long as you don't need any of the fancy management stuff: http://offers.assembla.com/free-git-repo/
Why would you be terrified? There isn't that much information on the census form - name, age, address, nationality and employer, roughly.
Phonescoop says N9 Brings MeeGo to Life!

http://www.phonescoop.com/articles/article.php?a=8360
Unfortunately, every add-on I need doesn't work with FF5 (same as it was with FF4), tried it last week with (FF5) beta.
Its a great platform but I am still finding the animations to be slow and buttons to be a little less responsive, particularly on the blackberrry platform but also on the iOS platform. This is forcing me to explore Sencha Touch. I would rather stick to jQuery mobile (for simplicity) than learn a new framework. Hopefully when its out of beta?
What Startups Should Worry About - And What They Shouldn't