skysight-inc/HackerNews huggingface dataset:
Wrong.

The OpenSSH model implies that you check the fingerprint of the public key before you send encrypted data using that key. That is why SSH shows you the fingerprint of the server key when you first connect, and you have to answer "yes" in order to accept the key and add it to your keyring. You are supposed to have talked to the person managing the system and that person should have given you the fingerprint of the key.

It is virtually impossible for the ISP to intercept and sniff the stream without changing the fingerprint.

The user still has to trust its SSH client.
Buffer Proofs to Increase Clicks on Your Tweets by 200%
They may not be able to access it but they will not mistakenly trust the wrong certificate if they take the steps that Thomas outlined.
Pacman is beautiful IMHO. The ABS (Arch Build System) is also an elegantly simply way to create package build scripts for packages. Package build scripts are in a single file (a "PKGBUILD") that is extremely easy to edit or create for new packages.

Here's an example that demonstrates the beauty of simplicity:

http://www.archlinux.org/pacman/PKGBUILD.5.html#_example

I've found it to be a magnitude simpler than creating DEB packages.

With ABS, it really brings the best features of the from-source based distros to the table without having to compile your ENTIRE system from source and having recompile stuff for every new software install or upgrade.

The power of Arch Linux really lies within its simplicity.
Every time a judge does something like this I have some hope that we will move past the current copyright legislation to something more appropriate for the digital age.

I'm sure that copyright has had its use, and in many ways still has uses today. But I'm also sure that the time of 'easy money' by the simple act of reproduction will come to an end, and as far as I'm concerned that can't happen fast enough.

Copyright, like any tool is a two edged sword, and the one edge has been systematically blunted whereas the other has been systematically sharpened. There was a balance where there is now a very strong imbalance and judges like this help to at least temporarily restore that balance, until we can move past the current implementation.

I hope it will happen somewhere in the next 50 years, sooner is better. The closer we are to a balance the bigger the chance that we can move on. So thanks to this judge.
Assuming he is talking about languages like C, and you don't use inline assembly, I don't see how you can have any control. For anything complex, your compiler will probably do a much better job then you in creating fast assembly.In the case you can do better, you would just inline the code, so you only have control over that small part.
I love "Send To". I keep a link to Notepad2 and a hex editor in there (and sometimes Emacs) so that I can easily use a real editor or get a hex dump. It's kind of like "Open With..." except that it's always in the menu and somehow Open With... might not pick up the program you want, so you have to waste time traversing the directory tree.
Survival Guide to a Hospital NICU
"Wrong! Random people will totally verify key fingerprints when they're logging into Google Mail at Starbucks! After all, that's what every sysadmin does with SSH, right!"
"Are you telling me that there are many people out there resourceful enough to be successful entrepreneurs but not resourceful enough to cover that gap?"

Yes. Because it's clearly not an all-or-nothing question.

When I started at Justin.tv, I had a six-ish month gap where I had to get private coverage, and it was a total disaster: they found so many reasons to over-charge and under-deliver for care that it was essentially useless. I had no faith that I would be covered in the event of an emergency. A serious accident at that point in my life probably would have bankrupted me, lost my job, and given me no ability to recover from the loss. If I had a family to insure, I never would have worked for Justin.tv. So tell me again how it's not a source of friction for startups.

I have female friends who literally cannot get private coverage, because they have a uterus, and the usual problems associated therewith. I have other friends who have families, and can't afford the private coverage premium (which is much higher than group rates). All of these people are bright, young, hard-working -- candidate entrepreneurs, all -- and chained to a job so that they can get health care.

Is government support necessary for entrepreneurs? No, of course not. But if we're going to propose useless things (like, say...eliminating the capital gains tax), we might as well put some scrutiny on legitimate entrepreneurial problems as well.
Responsibility = criminal matter.

This should not be about the money at all.
Well, rephrased, what I am led to believe is that Websense can read HTTPS traffic without sparking a certificate warning.

I don't have details on that, unfortunately.
Samsung is not a M&A company. That really hurts the chances of this happening even if there are forces within Samsung and HP pushing for it. The top management is skeptical of successful mergers, and at a tightly controlled company such as Samsung that makes a big difference.

I still contend the best buyer of webOS would be Google. The patents are gold, the price is probably right, it eliminates the possibility of a partner turning into a competitor, and the talent would integrate easily. Everyone's already in the valley. Just shut down webOS for good, put the developers on Android or ChromeOS, and tell consumers to look forward to great webOS features making it into future Android and ChromeOS releases.
Libyan Investment Authority - $70B Sovereign Wealth Fund
Wait, I don't get it. If you have such skills and an idea that you truly believe in why haven't you started coding it yet? It doesn't have to be much, perhaps you can't even do all of it yourself, but you should at least TRY. If your skills with C#/Java/DBs aren't an exaggeration, I don't see any reason why you shouldn't at least start.

It's great that you're looking for a co-founder, this is a great start, but just don't jump head first into a relationship without getting to know them first. You should keep doing what you've been doing by meeting up with a lot of potential co-founders, discussing your idea, gauging their enthusiasm, skillset, and how well you think you'll get along.
A 3rd party level editor would go a long way in remedying this. But then again, part of the fun of Portal comes from its 3D nature...
I love using Arch. The rolling release means there's no eventual super-painful process for updating; you just update everything and your system is up to date. It does break sometimes, but in recent years developments in both the installers and pacman have made it a lot easier to get a system that Just Works (for many things). I was pleasantly surprised to learn about KMS, which lets graphics drivers deal with the console/X resolution (so I don't have to remember which vga=0xsomething I need).
I'm Didier Lafforgue, the guy behind LocomotiveCMS, one of the 2 first open source projects handled by Bushi.do. So I will speak for the open source developer inside me.
I won't say that building an open source project is quite easy but the coding part is definitively the easiest one for me. Unfortunately, a developer does not live with fresh water and (coding) love.
So when Sean and Kevin came to me and shared with me their vision about monetizing open source projects, it was obvious I had no choice than to say yes. Simply because their idea is brillant.
Actually, it lets the freedom for the authors of open source web applications to continue their development roadmap and at the same time, Bushi.do provides all the tools to promote and monetize the applications. I see that as a win-win situation.
And to go further, that could be become a game changer in the world of the open source web applications.
One last thing, the 2 guys behind Bushi.do are developers first and very nice guys....
It is crazy that you're even entertaining the thought that the entire security model of the world wide web has been circumvented by WebSense. I guess they just really know how to keep a secret?
Mac OS X already has that, but I still would not like to see the filesystem hidden from me. It's just too valuable idea for it to go away and it takes us further away from general computing to turning our computers into appliances owned by our OS vendor.
True, but it seems to be a hassle. From what I've read, it doesn't sound like everything is compatible with that method either (might be wrong on that though).

I'd still like to tinker with node anywhere via Nide though, and Nide seems integrated with NPM.
And this is one of the reasons why Wintel depresses me so much - I wouldn't have much use for the 18 cores, but I would love to have (and there is good reason to assume it would be an improvement) transactional memory.

Yet, nobody will have it in mainstream (read cheap) computers before Microsoft decides to support it and that won't come before Windows 9 or 10, 8 years from now.
Out of curiosity, is there anything in Sprockets 2.0 that's enticing you towards switching over -- apart from being the Rails 3.1 default?
there is a very knowledgeable ycombinator international mailing list. i wouldn't worry about it.
> The holy grail would be having TM with multiple CPU.

Well... This chip has 18 cores.
If your communications can land you in jail or get you killed don't use the internet (or even a computer, keystroke loggers are easy to install and very hard to detect), no matter how clever you think you are, and no matter how many 'lock' icons appear in your browser.

In such cases paranoia is perfectly justified.

It's a real pity this requires a code update because that means that the change will take long to propagate and will likely never be really complete, at the same time I'm sure there are good reasons for that and that an automated process to revoke just any certificate could itself probably be used as an attack vector.

What would happen if they simply revoked the root certificate that was used to sign this fake?
> Making the initial learning curve simple will have implications on the overall feel & appeal of the operating system, but this is something that is difficult to quantify with simple software metrics.

Ok, but the file system metaphor with its files and folders is unintuitive. New users get lost or just don't get that metaphor. You won't make anything easier for them by putting bigger buttons into the toolbar when they can't imagine for what those buttons might be used.

Alone the metaphor of "copying" a file is so unintuitive. If my mother wants to take a look at the photos she took with her cam she sure won't think about "copying" them.

My point is: MS is trying to fix the wrong problem. They should think about getting rid of end user facing file systems instead of bolting bigger and brighter buttons onto a horribly user unfriendly application like the explorer.
Balistic Missile Launch Off California Coast By Chinese Submarine
It's weird, isn't it? From zero to accepted fact on the basis of some guys assumption mentioned in the title of a pastebin dump. The only other original source I've been able to find is this:

http://www.google.com/support/forum/p/gmail/thread?tid=2da61...

He even invokes the Comodo incident, which as we know turned out to be the work of a single individual and NOT Iran.

Propaganda spreads quickly, even in the HN circle where people usually pride themselves on requiring evidence as a prerequisite to belief.
fwiw, chrome 15.x has some issues with the voucher input box. Problem doesn't occur with Firefox.
I think the underlying, unstated point - that the industry is disrupted - holds, but misses out on a bigger, more interesting point: There is a huge need and opportunity to help craft the total experience, and those skills are costly and go way beyond what you can get at the budget freelance sites.

I can guarantee you that neither Foursquare nor Zappos used a $500 stock or contest design, and I'd bet even money that MyTown, so deeply derided, spent more on design and art than either of those (not including salaried employees).

There's been undercutting forces in design for years. A decade ago a penny-pinching retailer picked a punk high school kid to do his website (disclosure: I was the kid) to save a few bucks and got a servicable if uneven product. Today he'd do 99designs and get the same. Real designers learn how to create, communicate and sell their value in tangible ways.
gmaslov is clearly talking about the OpenSSH trust model. You are confusing it with the Trust On First Use model, which is not the same thing.
Nuts for Nikon - YouTube
And Asciiportal: http://cymonsgames.com/asciiportal/
Steve jobs: first tv interview prep
负压风机厂
BoltJS: Another Secret Piece Of Facebook’s Spartan Puzzle?
No, the concept is not the same. C programs aren't designed to execute code from third parties.
Someone from svvply creates reading.am: what are you reading?
I'm getting "permission denied" when going to the URL in the title. Where has the document gone?
I very much like Portal in 2D. A similar game, with much simpler graphics (actually just ASCII) but much more challenging, is ASCII Portal.

http://cymonsgames.com/asciiportal/
Search HN: looking for a Vancouver-based mentor for our project
Hello HN,

We are a couple of Vancouver (Canada)-based engineers who developed a technology and intend to convert it to a (probably micro-franchise-type) business.

In short, it is printing as a service in a public place. You pay online and can send files to the printer (situated in a university building, library, coffee shop). Something along the lines of Mac AirPrint or Google Cloud Print as an external service, except that you can use it from anything that has a browser and is simply better.

I believe, we are great with the technology. However, we are somewhat fuzzy with the business side of matters.

If there is a Vancouver-based entrepreneur out there with relevant experience who is willing to mentor us on such matters, could you please contact us at tihoutrom at gmail.

Thank you.
Things To Do After Installing Wordpress
This is also an example of someone with creative vision. It's akin to Led Zeppelin sitting around jamming for 10 hrs straight and coming up with "Good Times, Bad Times" or "Kashmir". It's a work of art and also a blessing when you know what you want to create, and you have the ability and skills to create it.

I imagine the streaming video of him doing expense reports will involve a lot more web surfing.
I have no idea what you are trying to express here. "Trust On First Use" is a synonym for key continuity. The fact that you have to type "yes" when SSH does it and click a series of buttons when a browser does it doesn't change anything.

I think you think that "Trust On First Use" means "automatically accept keys the first time you hit a site". In fact, that's only true in practice. Presumably everyone's going to get the "Watch Out! This Could Be Iran!" dialog from their browser, too.
The problem with the Google story is that Google really didn't have a designer at the time. Even Marissa didn't have a design background, despite some using her name due to her fashion sense. And I bet you that Yahoo, Lycos, AV, MSN, and AOL all had designers on staff yet none of them said, "Kill the portal -- just a search box".

I'm sure there are great designers, but a lot of designers seem to just be really good at churning out polished versions of whatever is hot now.
Pretty Little Liars Season 2 Episode 12 | News in the world
Zynga IPO delayed due to slow sales, founder greed
Assuming the usage data is from Windows 7, the nonexistent usage of menu is probably largely because the menu is entirely hidden unless you know that hitting 'alt' brings it up. And that is a much newer hidden feature (Win7 era, maybe Vista with early signals in XP) than context menus (at least since Win95).

Besides touch-friendliness, ribbons have huge benefits in discoverability. People can't use features they don't know exist; ribbons organize features into browsable, meaningful panels so they can be found, related to each other, and used. The article seems to entirely miss this point.
Tool to Predict Tech Startup Success
Wouldn't it be neat if there was a dialog somewhere in your browser that gave you the option of trusting anything Colin Percival trusted, or anything that the EFF trusted?
I don't think you can make a blanket statement that easily. For some people, being a solo founder is a decision and can be best suited for them. If they have a great skillset to do it on their own, I don't they need to depend on a co-founder.
Developer Q&A: Syllable OS
There's a huge difference between have never used and will never use. Microsoft's data is about past usage; the article makes an unjustified extrapolation from that to future message. This extrapolation is particularly relevant when discussing a feature that largely serves to improve discoverability - if the features make sense together, putting them together and making them visible may help users get more out of the software.

It would be interesting to find out how many people say "I never knew the file manager could do that" when they fire up Windows 8, even when the feature has been there since NT4.
I find kj easier to type, since it's an outward muscle movement.

Warning: If you do this you will wind up typing those characters by memory nearly everywhere.kj
I don't know how is in Iran, but I can tell you how it was in Romania before 1989 (and I guess that's pretty close to what is happening there).

It was close to impossible to emigrate legally, they would use anything to stop you. They would make you lose your job (or even do that to members of your family), they would interrogate you and members of your family (and don't think about any human rights).

A friend of my father was shot on the spot when they saw he was using a boat to cross the Danube to Yugoslavia.

It's not that simple to escape, especially with your family. You're living in a different world.

Edit: spelling
Surely the Mario version should shoot orange and blue pipes?
Thanks for the tip. I'll pass this on to the folks at Manning.
I certainly would assume the same holds true, yes; I didn't intend to imply otherwise. It still seems like the right long-term solution, just a very difficult one.
1) I think you're too worried about the dev not being a "mobile dev." There really aren't any developers with 5 yrs experience on the currently dominant mobile platforms b/c they haven't been around that long. Good developers can pick up new technologies at a reasonably quick speed. A web developer has some server/client experience. Good enough.

2) IMO you don't need to worry that the developer is more interested in a paying gig. Being treated as a valuable professional who is compensated for their time is not a bad angle to keep the dev's head in the game. Act grateful that he's helping you do something you consider important and then pay him. That can still go a long way.

3) I'm biased (because I'm a developer not a V.C.), but I'd say "what you can do beforehand" is mainly just getting the product as far along as possible. It sounds like you've already taken the leap of faith so just try to get to v1.0 quickly. Building a product and then selling it is not as unreasonable as some market pre-validation advocates say it is.

4) If you really have taken the leap of faith, act like it. You are going to build this product and sell it. You're just going to have some meetings to see if the V.C.'s want to come along for the ride.

5) To paraphrase Sh*t My Dad Says: "Son, let women figure out why they won't date you, don't do it for them." Applies here as well. In a less coarse example, when I was 25 and working at my first startup I was frantically trying to get all our ducks in a row before some big meetings with V.C.'s and potential enterprise clients. The CEO told me, "Don't worry about it. At some point you have to stand up and say what you have to say and let them challenge you on it. That's where we're at."
Congrats again guys! I've already picked up a bunch of tricks from the first few chapters that are available, so it's immediately paid for itself in my mind.
"Really? I can't say I read the comments comprehensively, but the main poster called her a 'bitch' a couple of lines in, and there was a lot of discussion about her breasts."

Is not the same thing as targeting her specifically because she is a woman. Had the target been a man, they would likely have accused him of having a small penis. It's not right, it's excessively personal, but it's hardly what she described in her post. I didn't personally detect credible death threats and unless you can, I think it's a non-issue.
Yes, absolutely. There is almost no reason to touch wifi and bluetooth settings on iOS devices. I have wifi enabled all the time, and battery life is still excellent.

Android devices on the other hand, need constant fiddling. My Droid would barely last a day with everything turned off, and with wifi, etc. turned on, it would die after only about 6 hours.
I am a little confused by the disparity between your statements and the statements here:

http://security.stackexchange.com/questions/2914/can-my-comp...

It sounds pretty clear to me that with some work on the adversary's part and lack of checking of the certificate chain, TLS can be subverted.
If you work in financial,medical, government or with any employee data (ie, corporate HR systems) and use a laptop, it's often a good idea for the laptop-issuing organization to mandate full disk encryption to prevent unintentional sensitive data loss (an inside job will bypass this protection).
As an entrepreneur, I do not necessarily see it as a win when you imply that part of your life's goal is to convince otherwise contented users that I need to spend more money on typography.
Now this is a good point.

We (http://muckrock.com) launched our web app with a $30 stock theme and it was, in my opinion, the right decision at the right time. We still happily use it, and when we shopped around for designers, they were asking hundreds at the low end for work we found subpar.

On the other hand, a media site a friend runs recently invested heavily in design after years of frugality because advertisers demanded it, and the investment's paid off in dividends.

Ultimately, outside experts shouldn't dictate your company, whether they are designers, strategists, or even lawyers. You should, and in many cases forging ahead with a budget design, plain-english ToS or other off-the-path choice is the best one for your business.
Seems like an awesome plan, but making it scale requires a lot of work. In this system, how do banks ensure their site shows up as secure in people's browsers? How do random sites of varying popularity?

Actually, for many people their bank seems like a good start for the trust chain; visit them in person and get the information you need for your trust root. And unlike the certificate companies, banks have end-users as their customers, not people who want certificates.
Venturocket Launches An AdWords-Inspired Jobs Marketplace To Kill The Resume
Boots for women
real good snow boots, new and fashion brand women boots.
I think the idea of the parent poster is that there would be no file system (at least not in the sense of a tree hierarchy of directories), just a large database with some SQL like language exposed through the GUI.
Falsely issued Google SSL certificate in the wild for more than 5 weeks
Exactly. Does the app save an hour of an agent's time/sanity per month? If so, it's worth it.
No operating sytem that I know of supports hard links across device boundaries. Symbolic links are really the right solution there, and that many apps don't work with them is a shame.
Learning new languages is valuable but consider also that this time could be spent learning a new problem domain. Coding a music synthesizer or a simple web server or learning OpenGL can pay more dividends than learning one more language that you'll never really use.