skysight-inc/HackerNews huggingface dataset:
Actually they give bounties on minor security bugs as well - the award depends on severity. A bug like you describe will most certainly get something (if Canary is an eligible target).
Heheh just read this - it 'turns out'. Love it. See, it turns out use of the phrase is still going strong after all these years.
I think the pattern is that if the name is relevant data to what the form is used for it's broken out, possibly to aid with data entry. When the name is attached to a signature then it's just so that there's a legible version.

With the I-9 specifically section one is done by the employee, section two and three are done by the employer. All of the data in the form pertains to the employees work eligibility and there are rules about what the name in section one says when compared to the documents that are presented for section two or three. So the name in section one is data. The name in section two doesn't really matter as it's just a witness, the company is ultimately responsible for errors in the form, unless there's a criminal issue (document abuse, fraud, perjury, etc). So as with pretty much every form they ask for the printed name since there's a good chance the signature will be illegible. The new name in section three also isn't really important as it's rarely used. You only update the I-9 form and fill in section three on a name change if the persons work eligibility documents need to be updated. Since it's a small percentage of the cases that section three will be used for the government doesn't care too much. What's more interesting to me is they don't even ask for the print name of the person signing section three.
Certainly, putting this URL on a page for other people to read is a very bad idea -- like tossing your (physical) wallet out your car window.

The intent of the URL is that you should bookmark it and otherwise keep it private.

Unless you know of some way for an attacker to get at the browser's bookmark list (which I'd be interested to know about; I'm certainly not enough of an expert to be sure that no such attack exists) then this seems fairly secure.
>Worse than that, I’m nostalgic.

Good lord. He says it, but I don't think he knows it. Those glasses aren't just rose tinted, he's looking straight into the flower and believing he's looking at the world in the past.

If he'd been born ±X years ago, he'd be saying the same thing about 32+X years ago. It doesn't mean the world's going to shit and all you people suck except the ones that don't, it means you've discovered something crappy about the world you didn't realize before, and you've failed to apply it to the past. Just because you didn't notice it before doesn't mean it didn't exist before. Jeez, if you're going to have an epiphany, go all the way with it; otherwise it's worthless.
People have trouble understanding the gravity = acceleration bit. However, I find if you walk someone though the idea of ground effects vs high altitude flight they can quickly grasp the downdraft issue.

AKA ground effects means the air is acting like a pole and supporting the craft due to an increase in pressure on the bottom of the craft AND and increase in pressure on the ground.

High altitude flight means there is no direct increase in pressure below the craft just a downdraft of air under it. Granted that motion eventually bounces off the earth but it can take a while and and the path need not be directly down (ex: crosswind) and it need not be the same width as the airplane, but it does flow from the airplane all the way down to the ground.
> What’s cool is keeping your soul, whatever the financial cost.

I knew a kid when he was knee-high who grew up to graduate at the top of his high school class. In his valedictory speech, full of chestnuts that were a bit too optimistic and ungrounded, he said the following:

"Work doesn't necessarily make you happy but it may give you the means to do the stuff that makes you happy."

I've always been struck by the simple wisdom of his statement. I think we can't always get everything from one area of life (job/career/startup). And that's fine.

Life is a balancing act, which implies it is dynamic. Sometimes we sway too far and fall and our friends catch us. And we get back on.
Continuous deployment sounds right to me in principle, but I have yet to see a system to handle rollback in the face of database handling (one slide mentioned this briefly). When you have a bug (say you delete the wrong data), how do you rollback this ?

The only solution I can see is one where databases are handled differently (they generally are anyway at the deployment stage), and IMO, this is the challenging issue. Continuously deploying app servers is not trivial, but I would consider it a mostly solved problem.
No, in the case the problem is that the URL is essentially the private key!
"In other words, these technological wunderkinds were supposed to be better than the robber barons of old - a new breed of entrepreneur... getting rich and making the world better while they're at it."

Well I never bought into that narrative from the get go so I wasn't taken aback by something like this taking place. Science & technology are tools. Those wielding the tools still have the ultimate say in whether or not a company does good or evil. And as there were a hundred years (or more) ago, there will be folks that abuse this power and those who empower others with it.
This is a reasonable opinion - if you don't agree, please state your case rather than trying to suppress.
Though the reasons he recommends emulating a role model aren't that obvious. It's a hack to beat procrastination by making you more confident in your plan. Since the same plan was used successfully by someone else, you're more likely to stick with it. It seems like the quality of the plan isn't what matters, but that it actually worked at least once. A plan you've come up with on your own is unproven, so is more susceptible to procrastination.
I don't even buy the Facebook argument. They just made a cleaner, consistent MySpace.
Why Entrepreneurs Should Never Meet VCs Unless They're Formally Pitching
I found a bug on pcmag.com -- how much is their bounty?
Accd to the article, Hulu didn't know that the ID was the same between sites, and (imho) probably didn't care. The fact that it's the same was revealed by Wired, and users of KissMetrics appear to have not known. It sounds like KissMetrics didn't do much more than could be gained from a referrer in their linking between sites, though clearly more could be done if they wanted to be bad. (Yes, I understand the bad in placing an "unkillable" cookie even on folks who didn't want to be tracked; I'm referring to the specific concern you raised).

There is no evidence in the article that Kissmetrics stitched these together in any way other than what is available in standard referrers. If you hand typed the info in, referrer is blank, and I don't think Kissmetrics imputed the referrer from their data. I don't use the tool, however; can actual customers let HN know if it actually does what Zed thinks it does? Because that would clearly be stepping some bounds if it did this even on "do not track" folks.

And is the fact that it CAN do this is different from the fact that it CAN but isn't (well, if it actually isn't, see previous paragraph)? If they are, then let's yell. But if it's just possibility, then it's like yelling about Google seeing all my searches. The answer: Yes, they do. I can choose not to use Google, or I can benefit from their tech at the cost of sharing some info.

Instead of believing that no one has any right to collect any data on my usage in a world where we leave digital tracks all over the place, lets instead work to minimize risk and maximize value for users. There is always data leakage, and that data can actually help folks if treated with respect and ethics.

And yes, actually, Hulu could use that data to improve their product. But if you don't want to tracked, it's none of their business and they'll have to find another way.
What's the argument they're making? And even if there is one, it's lost in the "the past rules, the present sucks, and the future will suck more" that permeates every sentence. Heck, arguably, every rant has an argument - having one doesn't make it not-a-rant.

edit: I'm actually curious what you think it is, I don't see one aside from "don't lose your soul" - but that's not an argument. That's advice. Who, or what, are they arguing against, and what is their counter-argument?
We've looked into this at Social Fortress and while Homomorphic Encryption could have interesting uses there are more practical approaches for the enterprise in the use cases presented in this paper.

Kudos to the researchers as there is valuable information contained.
Here’s How U.S. Spies Will Find You Through Your Pics
I'm sorry, I didn't meant to snap at you.

And I imagine that putting $100 towards a startup and $5k towards a move to a guaranteed job are vastly different - startups can, and often do, fail. A job offer is much more steady - and if he has a family, stability is important.
It seems likely in this case that this is more a result of none of this being news to you than a problem with the article itself. It wasn't news to me either, but I know people to whom it would be.
> Seems empirically like you are the most knowledgeable on the thread on this topic

A disappointing conclusion. Welcome to HN on a weekend I suppose.

> What is the definition of 'practicality' at this point (i.e. how efficient does this need to be)?

Hard to tell, but probably a good goal for practicality would be looking at the number of computations it takes to do an operation on ciphertext needs to be a reasonably low enough number that it actually makes sense to put it in the cloud. If it takes 10,000 computers to do the work of one, then it doesn't make much sense to use the cloud instead of just buying a machine. The only real answer to your question is to look at the relative costs of buying a machine vs. using the cloud and figure out how big of a factor difference that is, that's going to be slightly different for every org, but not likely to be larger than say... maybe 5-10x?

So if you accept that as being a reasonable benchmark, then you'd want to see a homomorphic scheme that allows 5-10 computers using homomorphic encryption operations to keep up with one doing operations on plaintext.

Maybe there's some absurd circumstances where 100x is still practical, but there's obviously a limit.

> What is the current efficiency (and how is it being measured, big O notation per key length?, something else) ?

Not entirely sure what the current state of the art is. I haven't really checked on this since reading Gentry's thesis. I understand there were some advanced and some simplifications since then, but I believe we started out in the realm of it being about 10^6x times more complex to do homomorphic operations than plaintext operations with Gentry's first scheme that showed it was even possible.

So even if this has gone down quite a bit, we've got a long way to go before we're talking only a 10x - 100x hit.

Here's what I found with a quick Google, but I didn't quite find the numbers I could translate into anything reasonable, so maybe you can make sense of it: http://eurocrypt2010rump.cr.yp.to/9854ad3cab48983f7c2c5a2258...

Edit: Looking through this one now: http://eprint.iacr.org/2010/520.pdf

Editx2: Oh, I suppose the real problem I should have mentioned is the more complex things you want to do, the worse it gets and "complex" here means "how many multiplies" which for a lot of things people want to do is "a lot." So for each scheme, the overhead changes somewhat wildly based on how you encode what you want to do into adds and multiples, or whatever basic blocks it's using.
I'm more curious than angry, I want to know AirBnb's side of the story.

Unfortunately brianchesky's comments here are brief and he ignores the replies:

http://news.ycombinator.com/threads?id=brianchesky

AirBnb are giving low-key responses given the coverage it's received. Perhaps this is for privacy or legal reasons, or for PR / reputation reasons, or they don't think their response will be perceived as adequate by the so-called "angry mob" here. Maybe it's just they don't think it's any of our business how they deal with this situation.

The incomplete information you mention is frustrating. I'm sure many people here like me would like to know how a company should deal with this kind of PR - and personal - crisis, and were hopeful we'd see more of this played out in public after EJ's blog. The visibility this story has received from the upvotes on the TechCrunch, FT, and blog post stories has led to us getting more information than we otherwise would have had.

Are we really being manipulated or "faked out" into voting, or is it not a rational response given that the visibility tends to lead to more information leaking out?
If you're able and/or willing to go to Silicon Valley, which is where I think your best bet is (note: I don't live there, but if I was near homeless that's probably where I would go), then I will figure out a way to get you a plane ticket with few strings attached. The strings would be around timing and departure location: I need enough time to get a decent fare. I would expect you to have a plan. I would ask that you fly out of a major airport for competitive fares. That's pretty much it. My email in my profile.
For me, this whole situation comes down to personal responsibility. It was EJ's decision to let a stranger stay in her home. No one made her do this. While it is unfortunate that this happened to her, she should have realized the risk. If others don't like the risk/reward they should not use the service.

If AirBnb were to bail her out, it would send signal that any future/past cases like this would be met with a similar reaction (hello US GOV!). I don't think this is a road they want to go down.

EJ's problem is her own. AirBnb's problem existed long before EJ.
It's hard to generalize this. Probably not when you've just started and probably not six years in.

The point is largely to get a kick in the pants and a clearer sense of direction. So you probably want to be far enough along that you've thoroughly explored the issues and made initial attempts at development. You also tend to want a relatively cohesive team that's used to working together.

You can reapply, so "when you get accepted" may be the easiest answer. If nothing else, the application process may help you refine your ideas.
My understanding is that fully homomorphic encryption allows proprietary logic to stay hidden by allowing a company to perform its proprietary logic on a customer's data without seeing the data.

If I have a function f and you have some data x, and you want to compute f(x), then without fully homomorphic encryption, either I have to give you my function or you have to give me your data. With fully homomorphic encryption, you can give me your encrypted data and I can use that as input to my function, so that you don't learn what my function is and I don't learn what your data is. I give you the output of the function, and you can decrypt it to learn what f(x) is without learning f.
"We take it for granted now that the most popular online publications rely on search engine traffic for their survival."

"..blindly approve any headline that name-checks a trending topic or two."

"..we are reminded of the grimy truth: making money with online content is a question of attracting millions of eyeballs, whatever the moral cost."

I can't believe I just read that on TechCrunch.
Added to the op - I knew about secrets, but had long ago forgotten about it.
Microsoft's Live.com Exposes Your Laptop, Phone Locations
Scroll Reverser for Mac OS X
After reading this and all of eli's posts below, I believe this is referring to the way Instawallet works, and not the "green address" system. But to both of you: WTF, be more specific. It sounds precisely like you're referring to the use of a single bitcoin address as being some horribly insecure concept, and somehow relating to a URL in a way that makes no sense.

Instawallet (appears like it) works by giving you a bitcoin address, and a unique URL which gives you access to send money from that address. From that perspective, I agree: horrible, horrible idea for safety purposes. Bookmarks rarely (ever?) have secure storage.
I've been pricing local real estate, so I can move some money across from my AUD assets and buy up some cheap property just in case the US dollar gets really low.

I'm neither an optimist or a pessimist. If I have a bias, it's the belief that the future will look way more like the past than you think it will -- i.e. things pass.
The total amount of these bounties are more or less meaningless. No one can make a living, 1st world wage with them - at least not consistently. All of the programs will pay you significantly less than what you'd get paid for an equivalent number of hours at a straight job.

What's more, most bugs will sell for 10x the bounty price on the black market.

Bug bounties aren't intended to be competitive compensation. They are intended to be tokens of appreciation given to people who would be reporting the bugs anyway. In this context, $500 vs. $1000 (a more typical reward from the chrome program) isn't too meaningful.

Whether this works for the researcher or not is up to them.
I believe Halcyon Molecular is doing long-reads using an electron microscope probe - which should be able to read longer sequences.

Also, if we identify specific mutations using the HM approach, I'd think that a test could be developed and run in parallel with a specific long base-pair probe that could be detected - correct me if I'm wrong.
With one machine on Lion and another on Snow Leopard, I was going crazy. (But not crazy enough to revert the Lion machine to legacy scrolling.) This free app does the trick.
The problem is that some people have a vested interest in seeing CFS as an organic problem. These proponents of CFS are notorious for mounting hate campaigns against mainstream researchers. That is one of the reasons why CFS has been delegated to the shadowlands of fringe medicine.
This is a much better explanation, thank you.
For those just tuning in, Paul Carr has been bashing AirBnB since last summer:

http://techcrunch.com/2010/07/25/fawlty-logic/

And has a vested interest in their failure:

Disclosure: I like hotels a lot – and I’ve spent much of my
life in them. Both of my parents are career-long hoteliers,
first managing large corporate chain units and now owning
their own hotel in the UK.

And now he's accusing these poor guys of "losing their souls". This whole internet lynch mob thing is scary. Let's remember that they didn't trash the apartment, they just set up a CRUD site with a good UI that got really popular. How exactly are they more responsible than Faith Clifton, the criminal who ransacked the apartment and who they helped SFPD arrest?

Seriously, some extreme hyperbole here.
Thanks so much for the detailed answer? Is there anywhere to learn more about this besides wikipedia? Every time I try to learn this I end up there and it confuses the bejesus out of me.

What are mate pairs? How does that help with sequencing?
Occasional Dispatches from the Republic of Anhedonia
It’s Year 2011, Why Aren’t People More Open-minded?
Along similar lines (geddit?) but a little later was "cablese": http://www.time.com/time/magazine/article/0,9171,786319,00.h...

Which, if you don't want to click through, looked like this: Wales Parisward smorning omnistation cheered stop he said friendship proFrance unceasing.
The Clock Is Ticking
In Metropolitan France, rosbif is a term of endearment (or contempt - depending on how you take it!) for a Brit.
And yet the author chides the Huffington Post itself. It's harder to cry out "hypocrisy!" in this case. (I don't know to what degree Paul Carr would represent TechCrunch in general. At the very least Mr. Carr is not a corporate cog--or so I hope.)
I've had a go. It is hard because they don't define what a letter is (a-z, alphanumeric, non-whitespace). I tried with A-Za-z and got the correct answers for the test, but the incorrect answer for the website. Due to the way that the problem works that isn't too unlikely as all the letter function has to do is give the same answers on things like even-ness and whether it has a common factor with another number, things that aren't unlikely given the small amount of test data given.
Yes, C# is way better for games because you can write mixed format display buffers, but Java isn't that bad as long as its JITed. It limits you to post 2.2 droids, but if doesn't have 2.2 on it, it probably has the shitest of graphics hardware anyway.

I dont get your other complaints though. Show me a developer guide for a console platform that doesn't have outright lies in it and I'll show you my unicorn.

There is a single cross-platform engine, btw, its called Unity, and if you can live with its constraints, then off you go.

Its not in the platform creators best interest to make it compatible with other platforms. So dont hold your breath for write-once that doesnt suck.
Which, by the way, is all scientifically unsubstantiated bullshit this statement is too bold to continue any reasonable discussion. ^_^

Freud was extended and popularized the theory of unconscious mental dynamics which need not to be explained to any educated person. It covers almost anything from cognitive tasks and linguistics to somatic processes.

Secondly, he developed theory of therapist-patient relationships which was extended after him to anything from propaganda and advertisements to NLP and other influental techniques.

Of course, unconsciousness was known since Upanishads, but Freud was popularisator.
Is this a joke? Any halfway credible criminal would make sure to strip that info out before posting (or use a device that doesn't capture it).
Its completely contradictory what Airbnb says and EJ says. Both being in SF should not be a big deal for Airbnb guys to meet her in person and sort out this thing. Why is this thing being pulled for more than a month? Airbnb should have taken the proper initiatives to deal with this in person than blogging or whatever or even on phone telling EJ to take down her blog etc. Meet in person and sort this out guys than pointing fingers.
Safari 5.1 uninstalling Disconnect and Like+1 extensions?
Because people are psychologically much the same as they were 10,000 years ago. Because "open-minded" is generally code for "agrees with my preconceptions." Take your pick.