skysight-inc/HackerNews huggingface dataset:
Ah, yes...the usual conservative shopping list: de-regulation (eliminate Sarbanes-Oxley! Sunset regulations!), tax cuts for the rich (Who likes capital gains taxes? Certainly not the hard-scrabble "entrepreneur" managers of "small-company" hedge funds!), privatize shared knowledge (Make it easier for rich people to get patents, and commercialize academic research!). But somewhat unsurprisingly, the WSJ omitted an extremely important bullet:

* single-payer health care.

It's a huge problem. Gigantic. How many people in the US are putting off their entrepreneurial dreams because they're afraid of being waylaid by the costs of unexpected health problems? I'm not that old, and it worries me. It has to be terrifying to people with families.

Dear WSJ: if you want me to take your opinions about "entrepreneurship" seriously, you have to stop proposing things that benefit the old economic guard (I've yet to meet an entrepreneur who would start a business but for the capital gains tax), and start proposing things that benefit actual entrepreneurs. (And by "entrepreneur", of course, I mean "someone starting a business" -- not "someone managing a hedge fund".)

But, of course...I'm being willfully naïve. The WSJ doesn't really want to benefit entrepreneurs. They want to help the rich people who read the WSJ, and dress it up to look like they're helping entrepreneurs. Big difference.
If you want to dork with Facebook and see pictures of your neighbor's cat, that's fine, but in my opinion, it's not worth the risk (if any), and it's useless to want/expect meaningful security. I don't even know if seeing pictures of cats is a problem in Iran. :-)

If you want to communicate with other people securely, then, in my opinion, then everyone in that communications group needs to consider learning information security and operational security, and then applying it. It's not simple, it's not easy, but if you want to be secure, you're going to have to plan to be serious.
If you expect that you would only get targeted if you actively communicate about things your government doesn't like, but not just because you use a VPN or similar, then you should get a VPN in a country somewhat less likely to cause you problems.

If you expect that the use of secure encryption at all would get you disappeared, you're screwed. And the previous situation can turn into this one on a whim.

Either way, the long-term solution does not involve technology; it involves emigration.
Now, that doesn’t really change anything, does it?

You know, I like the ribbon and I think it’s great UI design, at least for certain tasks, but it is very, very ugly. There has to be a better way to put the elements together.
I would not use it, and I am a heavy Gmail and GAfyD user.
Note that the QAT functionality is available in all ribbon-based Office applications as well. And I completely agree with you - hate the ribbon, love the QAT.
Umm. What do you mean by work? If my ISP injects certain proxies in my route, they can unwrap the encrypted communication.
Yes I'd quite happily throw out 15+ years of intense study and research (inclusing SSL/TLS) as it occasionally breaks down and kicks you in the face (google for TLS MITM vulns).

There should be an explicit trust model where the service vendor ships your keys via an alternative side channel -or- a decentralised model which works on reputation or trust.

If it works, why do all the online banks use two-factor authentication these days?

Oh wait, there is the solution!
I don't know why you got downvoted, and I upvoted to try and offset, but ignoring that...

I think that you overstate the importance of turning off wifi and bluetooth. Those are power user options, for sure. When you're trying to conserve battery power, you're trying to streamline how you use the device, which to me, smacks of 'power user'.

The flipside to that argument is that it is ridiculously easy to browse a web site, check your email and play Words with Friends and Angry Birds. These are the things that the majority of people care about... not whether or not a given physical interface is active or not.
Very glad to hear this. It's getting harder and harder to compete with "the valley" the U.S. startup Visa was just going to make it even more attractive.
Security and convenience will always be at odds with one another. If you aren't going to take the precautions, your alternatives are to watch what you write or go to jail. Anything that relies upon any unencrypted traffic for bootstrapping, etc., is unreliable when you're against a state-level player like this, because they can do just what they're doing now and replace the real response with a fake one.

As such, the only way to ensure your electronic communications are safe is to get the information necessary to bootstrap the crypto from a medium where the government has no ability to poison, which means offline transmission (CDs/USB disks). And then you still have to be careful because if the government gets the private key of your compatriot all of your conversations will be readable.

The only way to provide security for the people of Iran in a reasonable manner is to educate them on PGP and key exchange. This is not the time to talk about fairy dust, because it's not going to help anyone at this point. When you're transmitting information that will get you thrown in jail or worse, you don't dink around -- they need something tried and true, and need to understand the risks and costs associated with the communications platforms they're using.
The target language doesn't have to be assembly or machine code.

Plus, that's just one of several steps, and not necessarily the most interesting.
>If Microsoft added a feature like this...
They have: http://www.officelabs.com/projects/searchcommands/Pages/defa... (not that I would use it).

>use keyboard shortcuts/search for everything...
But the quick access toolbar matters imho. Being able to e.g. add 'show/hide hidden' files is great and beats thousandthreehundred times the castrated Finder (which forces me to go to the terminal (and not even provides a context menu for this - lame)).
Mari0 - Super Mario Bros. + Portal
Nope it's just hacks. The script tag with JSONP and nested iframes is pretty much all we've got.
This comment is tautological. The verification you're talking about works on the same principle as X.509 (SSL/TLS) does; all it does is attempt to give individual DNS zone holders the ability to sign their own names. But every zone has a parent zone upon whose security it depends.

The reality is that DNSSEC is a lot more fragile than even that. Even on paper (DNSSEC hasn't been deployed in the large successfully) it has gaps. For instance, did you know that as conceived in the standards, your browser isn't even meant to speak DNSSEC? Your browser doesn't run a full recursive cache --- in other words, your browser isn't a full DNS name server, which is why your computer has to be configured with the address of a name server. DNSSEC doesn't secure the leg between your computer and its name server.

"No cryptographic system is perfect" is a worthless sentiment. Only in the rarest instances do we know whether any system, from "hello world" to the Tacoma Narrows, is absolutely sound. Our job as engineers is to make determinations about which system is sounder. DNSSEC takes approximately the same architectural problems that X.509 has, rebuilds them from scratch in the context of a protocol that has for 20 years been riven with security flaws, and then still requires HTTPS/TLS to function. It is less sound than HTTPS/TLS.
RISC processors with fixed instruction sizes and enforced 4-byte instruction alignment, are looking even saner than they did before I read this.
nope. VASCO is a NASDAQ-ed "Inc" and would have mentioned any additionally assumed materially important liabilities in the official press release.
funny 'cause now the first thing I see is - hey, they used the 'twitter bootstrap' look on this page
We already do, kind of. We know that a significant fraction of the groups we accept will change their idea, and that we can contribute as much of their new idea as necessary.

Sometimes we even tell people when we accept them that we'll accept them if they do something different. Greplin was one of those.
No they can't. That's not how TLS works. The problem we are talking about is not that SSL/TLS- the- protocol allows ISPs to decrypt traffic. It's that some browsers have been shipped with a certificate authority that is willing to sign Google CN's. Remove that CA's cert. What's your ISP going to do now?
You're only angry because you have to relearn it.

You're probably used to using the Alt-F-S type key shortcuts. The rest have pretty much been left unchanged (Ctrl+S) for example. Also don't forget the clusterfuck that was the menuing system from Office XP -> Office 2003 where every time you opened a menu, everything was in a different place.

Google Docs is no good for me when I have to deal with sensitive data that has to be kept in-shore as I have no idea where the hell in the world it's being stored.
Switched from Android to Symbian
That may be true, but you have no guarantee that the IP that is returned actually routes where it should, or that a resulting connection is to one of google's actual servers.

note: Nothing against dnssec. I think it is an improvement, but I don't see how it would have helped in the situation in question.
Can corporate employees become entrepreneurs?
"With SSL when you make a request to google.com you can verify the answer is actually from google.com."

That's exactly what SSL is supposed to do, and tptacek is saying DNSSEC has the same problems as any PKI, including SSL.

And more importantly, using DNSSEC without SSL, even if you know you have the right IP address you don't you're not being MITM'd.
If I were you I'd just use words in the way they're ordinarily used.
What I meant was there are mechanisms that let you determine that a DNS answer is correct.

I won't say more regarding this matter because you know a lot more about cryptography than I do. What do you think the best solution for this kind of problem is? PGP?
Show HN: SimpleUPC - Simplest Way to Add Product Lookup to Your Apps
At the current rate of discovery, every vulnerability in TLS should make you more confident in the protocol. We're running an average of 3-5 years between protocol-level discoveries in TLS. Each one is the product of, literally, millions and millions of dollars of adversarial research.

Psst. I've got news for you. adb56780a76686326612a1eb3c2b32053bbcf3d8. Ask a friendly vulnerability researcher what I probably meant by saying that. Guess what? More confident as a result of knowing it.

The rest of your comment is just pique. "Why do online banks use two-factor auth?" Because the alternative is passwords. "There should be an explicit trust model!" Go ahead and build it. Because TLS is well-designed, your new scheme will work just fine with it.
Bushido (YC S11): An App Store For The Web That Can Kickstart Your Side Projects
Mario Gets a Portal Gun in New Indie Game
Files without a dedicated application will be the exception rather than the rule. Movies, Photos, Documents, spreadsheets, databases, music, books; you will usually open in a dedicated application. It's not hard to envisage an improved UI for files that do not have a dedicated application: they could be presented in a view showing all the files that are not associated with a program, for manual association. From then on, the system would know which file types to present along with that application. In addition, it goes without saying that full access to the underlying file system should be possible for developers and those that need it (which will be a tiny fraction of the userbase).
I don't agree that Haskell is fringe.
Haskell is more than 20 years old. It is commonly used in finance, science and in complex projects (like pugs). The ability to program in a strict typed functional language is often a good indicator of programming skill.

Clojure in comparison is much younger. It does however leverage the JVM so I suppose it stands on the shoulders of giants. Again, the ability to develop with Lisp is a good indicator of programming skill as well.

That the industry has not innovated does not mean that your code base will lack innovations. a data-centric approach will more than likely find hidden data points that will allow your systems to leverage some aspects of the market (innovation for free?).

In hiring, you may want to hire for a broader skill-set, but look for Haskell or Clojure skills. That developers get bored should lead you to consider more autonomous management structures.

Incidentally, I think the market you picked is excellent. Innovating in that space will be easier. Marketing to them, much harder. I'd hire developers that understand platform development or systematic design.
Is it possible to have it all at once? Would a plugin for VS/Eclipse/whatever like the other poster suggested allow you to use a vim approach with all of the benefits of a cushy IDE?
Yes. It's almost a smell test--if you can't get your team to move, are you really committed?
The Startup Genome Compass
IPhone 5 deksler
Pakkepris leverer iPhone deksler og tilbehør av høy kvalitet til veldig gode priser! Sjekk vår nettbutikk.
Tell us what you think! If you have questions -- shoot me an email at jason@pushpinsapp.com.

We have over 120,000 products from 15,000 brands and nearly 5,000 manufacturers. The closest thing to this is from a company that charges nearly $100K/yr.

We want this to be accessible to app and web developers.
How do I vote? I'm told "Error could not vote".
I literally think 99.999% of the problem with HTTPS/TLS is UI. The UI for certificate management and validation is virtually unchanged since the 1990s. More importantly, Mozilla, Google, Apple, and Microsoft --- however well they mean --- are not appropriate stewards for the security of the whole fucking Internet. We need the secure UX required to outsource CA management to trusted third parties that unskilled users can reasonably choose among.

Back to DNSSEC:

What we do not need to do is take this extremely complex policy problem and bake it further into the Internet's infrastructure, so that only the greybeards at the IETF and the product managers at the five largest software companies in the world get to make choices about the Internet's security model.

Today's HTTPS debacle was brought to you by a policy mistake. When we originally deployed HTTPS/TLS, we did not understand enough about the forces acting on us to make totally safe policy decisions. What we need is more flexibility and more thought, not the exact same system we have now baked into one of the core protocols on the Internet.
I certainly am not claiming to be a Rockstar however I will answer your question in the best way I know how.

I believe in people truly adding value, I know from experience (knowing YC Alums) that YC adds value and can turn a good product into a great product. I am not too proud to know that there are lots of people out there who are Faster, Stronger, Smarter and probably better looking than me however I am also aware that if I am not actively seeking out those people (I believe YC has tons of them) then I am already a step behind those who are.

So while I truly believe with the right product and vision I will succeed no matter what I find no harm in trying to better myself via a program like YC.
If it works, why do all the online banks use two-factor authentication these days?

I don't know about where you are, but even if I show up at my bank branch in person, they do two-factor authentication (card + PIN).
My point is that this can be abstracted away to something more user friendly than a tree containing hundreds or thousands of folders and files.

It's apparently hard enough that no one's been able to provide a better solution to the general problem yet, only specific instances. (No, the iPad doesn't count because it doesn't even have a USB port.) So instead of researching pie-in-the-sky solutions (which is incidentally what MSR does), they've decided to invest resources in something that we know works to the extent that it does.
Event Deals website that automatically seats you with friends
It's a catch 22 when it comes to repressive regimes. You've swapped keys and are communicating with all your friends on a perfectly secure network. Now you and your friends are in jail on charges of conspiracy.

The only solution I can think of is a false door method, where you send some fake communication over one channel and somehow hide the encrypted channel.
I'm told Metasploit has some awesome Ruby code, but I've not looked at it myself, yet.
Oh please. Everyone knows the connotation of the word "draconian".

And "too little context"? Did you read the context? What do you think of the part that says open source licenses just "boost the egos of the original authors"? If that's not top grade nerd flamebait, then I don't know what is.

I'm just pointing out that it's fairly typical flamebait (as further evidenced by the response I got when I posted it here). I'm not offended by it, I'm amused by it.
Ok, didn't expect I had to do this on HN but here goes:

-> Write code,
-> Dump logs to app.log, app.err
-> Is there an err browsing app you're aware of ?

If that ever happened to someone on HN, the consequences:

-> If apple implemented something so broken, some nutter would explain to me what extension to use.
-> If MS implemented it, there would be a #1 post on HN with the title "MS file management is broken beyond repair and company is irrelevant"

I expect to be downvoted for this but it is impossible to have a fair discussion about Microsoft products.
I've made a similar transition (to the Intel 160); here's my input, in case it's useful:

> How long have you been running this drive

Since December 2010.

> And are you running Lion

I am now; prior to that, it was Snow Leopard

> How did the upgrade go?

The hardest part was trimming my 250 GB drive down to 160 GB; mostly this just involved wiping out old VMs, disk images, extra programs, etc. and only keeping a subset of my iTunes library (minus TV shows, etc) on the laptop.

> Did you need anything besides Time Machine?

I don't suppose I did, but for the sake of speed I just did an image of the drive (block copy, using Disk Utility).

> Do you use …, and if so any problems?

None at all. Things are generally much more responsive, especially in cases that involve scanning directories. Deleting large directories full of source code is dramatically faster. chown'ing the Linux kernel tree, for example, feels almost instantaneous in comparison.

One issue I did have that's worth mentioning: because I did a direct copy of my Snow Leopard install (which, in turn, had been upgraded from Leopard), I found that the performance of the system was not at all what I'd hoped. It wasn't unresponsive (beachballs disappeared entirely), but it certainly wasn't blazing fast.

When I took my current job, I imaged my SSD to a backup drive and imaged my new work laptop's fresh install to my SSD, and the difference was like night and day. Suddenly, my computer was a speed demon. If it weren't for having to type my password, I feel like it would have gone from power off to loaded desktop in ten to fifteen seconds or so. It was unbelievably fast.

So my suggestion is, image your old drive, do a fresh Lion install on the new drive, and then use the Migration Assistant or Time Machine restore to bring your user directory back (and get rid of all the junk your account loads when it starts up that it doesn't need to have).
I'll ignore your partisan bile and address your salient point (Yes, regulations do have costs. Sorry.).

My friend's startup was offering health insurance within 6 months after it was initially incorporated. Most of the founders had some sort of individual plan or COBRA before then. Are you telling me that there are many people out there resourceful enough to be successful entrepreneurs but not resourceful enough to cover that gap? Count me among the skeptical of the idea that government health care will unlock a torrent of entrepreneurial energy.

If government support is necessary for entrepreneurs, why isn't Silicon Valley located in old Europe?

I have to admit that the idea that government provided health care is necessary for entrepreneurship has been a successful meme. I see it repeated everywhere even though I haven't heard a convincing case for it. You gotta admire the persistence and message discipline if nothing else.
Thanks for the advice, I'll certainly make sure I try to set myself apart in the application process this time around.

and btw I am a big fan of what you are doing with everyme! can't wait to see how the finished product turns out :)
I understand your point but if it's only there 5% of the time then it kind of changes something, right?

I like the idea and it makes sense design-wise (as in the hierarchy of commands from the most used to the not used at all) but after all these years I'm still not sure how I like it. I feel lost even with apps I use all the time (Excel or Word). But it's way better than what they had before ("millions" of buttons).
Amazing High speed photography Wallpapers, images, Pic, Photos & information 
High speed photography is a technique used by photographers all around the world. Basically high speed photography is a technique of capturing images with a remarkably quick shutter speed and mostly used for the scenes which cannot be seen with naked eyes. High speed photography is the science of taking pictures of very fast phenomena. Here you can find best High Speed Photography Wallpapers, Free high speed photography Pic, Amazing High Speed Photography Gallary.
Somehow I doubt startup founders have been desperately waiting for a new government bureaucracy that will finally give them a way of finding out good locations to start a new company.
You can't play online if the auth server is down, IIRC, unless you're playing on a server that doesn't authenticate. Which is kind of a problem.
Have you written about possible solutions? I'd be interested to hear them.
I actually just made somewhat of an opposite transition. I've been an Emacs guy for a while, and just started using a visual IDE. There are certainly things I like about having an IDE, mostly when it comes to building projects, browsing code, and doing GUI stuff.

However, when it comes to doing some real coding, I always go back to Emacs. After learning a really good text editor, you don't even have to think about doing complex things with the text, you just get into a zen mode, and the cursor does what you want. Combine that with easy access to any shell/interpreter you're using and it makes for a very productive way to just write some code.
If the voting widget doesn't work, you can vote on this page:

http://nodeknockout.com/teams/the-restless

Thanks!
I don't think DNSSEC is an improvement. I think that when you take a fragile and problematic security model, reimplement it from the bottom up in a setting that's even more restrictive than HTTPS, bake the result into the core of the Internet (or rather, the fraction of the core of the Internet that knows how to be a full-fledged DNS server), cause untold disruption the network as a whole and incur tens of millions of dollars in administrative overhead that could have gone to other security objectives, you are very likely looking at a measure that maybe just maybe might be a tiny step backwards.
I can't tell if your refusal to answer the question is just avoiding giving away your plan, or if it's an indication that you don't have one at all.

If you don't have one, my suggestion is to start with native folder support. I use Dropbox because I don't have to use my browser to use it. That would be a good place to start.
Fech: The NYT's new Gem for F.E.C. Filings