skysight-inc/HackerNews huggingface dataset:
> Honest question here: From a legal standpoint how can the" prosecution already knows [the harddisk] to contain incriminating data" if the drive is encrypted?

In many cases they can have intercepts, or bugs (cameras), but they are often not enough to form a water-tight case. They can therefore "know" you have incriminating data on your drive (or at least they will argue that point).
I no longer have VS available to check. Is that "no chrome mode" or really just "fullscreen" mode? I seem to remember this mode made alt-tabbing to other apps problematic for some reason. Maybe I'm wrong. I also never maximize my windows, which I believe is another reason I didn't like this mode.
Daiglit - a dialog builder based on Bootstrap & Ender.js
IMO, they need to distinguish between places where icons are peripheral "chrome" and places where the icons actually represent what in the context of how you are using them is effectively "content" that you care about.

e.g. it makes sense for the standard toolbar buttons at the top to be de-emphasized (and for there to be fewer of them, bravo!) as the vast majority of the time they're on screen, I care about my code and not about the toolbar buttons. It doesn't make sense for the GUI controls available in Toolbox, for example, to "fade into the background" - presumably if I have the Toolbox open, the available controls are something I care about. Or if they're not, why is the Toolbox there taking a third of the screen? If you ever have a situation where two-thirds of the screen are consumed by "de-emphasized monochromatic chrome", you're probably doing it wrong - if they're not important you need to figure out how to reduce their physical screen presence, if they're important you can / should give them a more distinctive presentation.
If the eyewitness is a police officer, then possibly yes:

http://news.cnet.com/8301-13578_3-10172866-38.html
Why wouldn't Apple adopt Webm?
> how you gonna prove who/how the contents got on the drive?

There's no such thing as 100% proof. It's about being "beyond reasonable doubt", and as 'weaselly' as that might sound, it's true. If they intercept data coming over the wire, to your PC, and you have been the only person home and the chances that someone would plant a few terabytes of illegal data on your drive at those precise times...
Interesting idea. This could be useful for signup and contact forms from a static website.

It's amusing to me that the contact link is just a mailto. Why not use MailerJS?
Google and Facebook in White House web privacy sights ~ Daily World News
Motorola is asking crazy royalties for a bunch of its patents, not just on H.264. I think they're generally fishing for cross-licensing, not trying to attack H.264.
The disappeareance of h.264 from the web right now wouldn't be as disruptive as you think. Most mobile phones still use native players to play web video, and on the web, most web videos are still in Flash.

I'd rather see a short term disruption anyway if that means making an open source video codec popular for the web. I still think Google needs to make Youtube work on WebM by default, and use Flash only as a fallback, if they are serious about pushing WebM. If they do that, most video websites will start using WebM overnight (granted it reaches the necessary quality by then).
Yes, it isn't recommended as it may cause the tires to fail. But, this is very, very rare. The manual recommends all manner of preventative measures and while they're all good ideas they're also not at all necessary.

My personal experience says otherwise.
Adding SSL to a site sounds easy but it's very difficult in some instances.

Take for example a forum, we can force everyone on HTTPS quite easily but as soon as someone hotlinks an image in a post that's not HTTPS it'll throw security warnings up which are (in my opinion) overly dramatic and are very unfriendly to the user experience.

User submitted content and HTTPS can be a pain to get right, and on some platforms like common bb software it's basically so time consuming to modify it's just not worth doing.

SO solves this by using imgur as a proxy, a lot of sites don't have that luxury unfortunately or even the technical expertise to implement something similar. This is also a bit wobbly on the old copyright laws as well.
> And when the entire exchange consists of a few hundred bytes (which the server can answer with a 304 Not Modified), that seems like a substantial win. What argument do you have against doing this?

Turn this around. What's the argument for doing it? "The gain using our proposed initial dictionary is seen only for the first header". This is completely counter to the goal of Spdy to keep connections open and reuse them; the longer connections are used the less the initial dictionary matters.

Even just visiting one page, average say 500 KiB, it save on average 121 bytes total. That's 0.02% reduction in size. This seems like a "substantial win"?

Meanwhile how many version of the dictionary are there so far? 5? 10? And they propose that it will evolve over time, so that will just keep growing with software everywhere having dozens of legacy dictionaries.

> Also, HTTP pipelining requires answering requests in order, while SPDY doesn't, allowing the server to respond to requests as data becomes available.

This is why metrics are important. By ignoring pipelining because of perceived problems, the authors are basing their protocol on assumptions. This assumption is that in the real world the 'head of line blocking' is a significant factor. Judging by 0.02% average gain from prefix dictionaries, I don't give them the benefit of the doubt that their assumptions are correct. But I see that Chrome 17 has some type of pipelining support, so maybe they will actually test this someday.

> If I request a page generated by an expensive CGI, the server can go ahead and send me the CSS and JavaScript it knows all pages will reference ...

Yes if the very first request is an expensive CGI this may be some marginal benefit. I think even the Spdy designers claimed this was less than 1% and sometimes a loss. This happens very often, that the first page requested from a site has some really slow loading CGI? I think the site is broken.
There is a difference between RAND and non-RAND patents, though. H.264 is an ISO standard; stuff like slide-to-unlock isn't.
No.

But you cannot claim authorship. That violates 17 USC 106A rights of attribution and integrity.

Woah ... I've just re-read 106A for the first time in a few years. There've been a few additions to that section, including a mess of integrity, modification, and destruction claims.
http://codes.lp.findlaw.com/uscode/17/1/106A

Notafan.
What I don't understand about this is what they really hope to accomplish. It seems to me that the Venn diagram of people who will see this and people who will see it for the blatant hypocrisy and obvious political/PR maneuvering it is has almost complete overlap. Right?
Let me preface this by saying this is just my opinion and in no way expert (or even correct) advice.

You can always start from posting on reddit.com/r/startups thread, over facebook, twitter etc. Once you've exhausted those resources, making a very creative promo video might help you guys.

Best of luck!
Indeed. It makes me wonder if this is exactly the outcome Motorola wants - a precedent set that indicates a "reasonable" value for tiny incremental features on a device. Then they can turn around and present that as evidence that Microsoft's demands on Android phones are wholly unreasonable when MS tries to ask Motorola for roylaties on Android.
This for me is one of the hardest parts. The stereotypical obsession with "The Idea" is usually devoted to finding one which will make it magically rain money. Finding something that will keep me interested and motivated for more than a year - that's HARD.
I didn't even know that. So they wanted to ban Motorola's products from US, and they complain about Motorola wanting to "only" charge them a little too much? Wow. If I were them I'd be thankful Motorola didn't adopt their own tactic.
On similar lines.. there is a new book:

Quiet: The Power of Introverts in a World That Can’t Stop Talking http://www.thepowerofintroverts.com/about-the-book/
http://en.wikipedia.org/wiki/The_Princess_Bride#Context
Any tips for level05 (the python one)?
They could if it were a reversible key-based hash.

http://en.wikipedia.org/wiki/Cryptographic_hash_function
No, there is no such requirement. Fair Use is judged on a four prong test, none of which involve crediting the author:

the purpose and character of the use, including whether such use is of a commercial nature or is for nonprofit educational purposes;
the nature of the copyrighted work;
the amount and substantiality of the portion used in relation to the copyrighted work as a whole; and
the effect of the use upon the potential market for or value of the copyrighted work.

http://en.wikipedia.org/wiki/Fair_use#Fair_use_under_United_...
Github Issues isn't their strongest point. One sticky bit is that it doesn't seem to keep track of the full history of a ticket.
Founders Den Demo Day Part Deux: 14 Startups Come Out Of Hibernation
Thanks, updated the code to use keyword arguments only.
You said: "Actively impeding the prosecution, in the form of refusing to decrypt a drive known to contain inculpatory evidence, is in many ways tantamount to destroying that evidence."

But it isn't /actively/ impeding, it's passive. One is refraining from taking an action.
Mostly because it's simpler- hot pluggable processors offer more and more varied ways of shotgunning your feet.
Lesser known HTTP feature that I love, instead of linking to resources like follows:

<link rel="shortcut icon" href="http://static4.scirra.net/images/favicon.ico />

You should link as follows:

<link rel="shortcut icon" href="//static4.scirra.net/images/favicon.ico" />

The double forward slash will select the current protocol the page is being viewed on which means no security errors if you're switching between http/https!
Kevin Rose was an investor in Chomp, IIRC. Good for him.
Well I enjoyed reading it for the good laugh.
PlayBook allows JIT-compilers
Those analogies are only useful to the extent they agree with the law. Otherwise they're just arbitrary.
That's because you're knowledgeable enough to not click on the misleading ads yelling "download here". Average users might not be.

Offering a safe easy medium does have an appeal to many users, as shown by the success of Steam.
#8: Mmmm...Bibimbap
You need to input the domains you'll be running Mailer.js on[1], so perhaps API keys only work on those domains? This is just from preliminary reading, so I could be wrong. :)

[1] https://www.mailerjs.com/documentation
Floss Picks
Have you talked to your cofounders about it? If not, maybe you should. If you can't, then quit.
Just Tuesaday, I sent an email around the company discussing SSL vulnerabilities, how they impact our product, and ways we can mitigate that. I've pulled out the parts specific to our product, but the rest may be interesting. I would love feedback on things I may have missed. FWIW, it doesn't instill great confidence in SSL, but it isn't completely horrible.
------------------------
1. It is possible to pretend to be any site you want if you 1) find a sleezy CA (and they exist aplenty) or get the government involved and 2) can get between your browser and your final destination (like, for example, a wifi hotspot). There will be no way (reasonable) way to tell you aren't connected to whom you think you are.

http://www.wired.com/threatlevel/2010/03/packet-forensics/

This could be addressed using http://convergence.io/

2. Way easier, but leaving some tell-tale signs you can find is to simply put yourself between your victim's browser and his server and convert all the links that come back to be insecure links that go through you. You then encrypt them as you pass them on to their final destination, while being able to see everything that happens. This is trivial to set up, but can be gotten around simply by using bookmarks that specify HTTPS.

http://www.thoughtcrime.org/software/sslstrip/

This won't go away until everybody is using 100% SSL and HTTP (unencrypted web traffic) is turned off in browsers.

DOWNLOADING AND INSTALLING ANYTHING OVER AN UNSECURED NETWORK IS ALWAYS A BAD IDEA.

3. For the very determined, it is possible to determine the symmetric key a particular SSL session is using if you have some luck, some skill, and some time (about 30 minutes).

http://www.schneier.com/blog/archives/2011/09/man-in-the-mid...

This requires a protocol change to SSL. We've known about (theoretical) vulnerabilities for 10 years, yet most sites still run old versions of SSL. Given how slowly people like banks update infrastructure technology, I don't see this one going away for a long time.

4. If a site is improperly configured, it may allow an attacker to gain access to the cookie representing your secure session by making an insecure request. This is another class of vulnerabilities made possible by using untrusted networks. The misconfiguration allows the browser to send your (supposedly) secure cookies in an unsecured request simply by making any request (typically done by inserting JavaScript into an unsecured page you are browsing). It is possible to mark cookies as "secure only", but services will choose not do that so you don't lose your session if you type http://example.com instead of https://example.com.

http://fscked.org/blog/cookiemonster-core-logic-configuratio...
NthCode Wants To Bring The Internet To Everything Plugged Into Your TV
I agree, it's overpriced. I would rather just put a snippet in that tracked javascript errors somehow, and also grabbed all of the user's browser information etc. And bonus points if it takes a screenshot (doable with HTML5) and copies over everything from console.log. Would really help with debugging.

P.S. They should have put the pricing information on the home page. Didn't realize they were a YC company either.
If you've read the iWoz, you will see Steve Jobs was jerk from the beginning.
Blizzard tells gamers to lower expectations for Diablo III
I don't see any pricing info on their site. If this is intended to be free for life, then I guess it's pretty nifty. But it would take about 30 minutes for any web developer to duplicate this functionality, so I hope they don't plan on charging for it.
I'm starting to realize it's partly because backing out of an app was a way in my mind to close the app. But ICS doesn't seem to pay attention to that anymore, so you're right, I should just hit the home key.
Interesting read. Liked your other article on accessing the Playbook shell as well.
When I'm on some kind of public wifi, I always surf through an SSH proxy so that my traffic is encrypted. That helps if you're hitting up sites that don't have https.
If it was trivial to recharge the batteries, then why were the owners told that it would cost $40,000 to repair their cars?
> then I will have to mentally translate everything you write to make full sense of it.

But why? A SQL query or a Java/Python/whatever program might get translated to zillions of CMP and JMP instructions, but I see no reason why you should have to do that translation yourself in order to read the code. In fact that would practically preclude the use of any minimally high-level programming language.
wait til fabric. ;)
I really hope this means there will be a better way to find games. When I search for "rpg", what I really want is an old school RPG game, you know, where you kill monsters, solve quests and get XP points. Instead, I get a massive amount of MMORPG's (which are not really RPG's at all), and "Do you want to be Chris Brown" applications.

On the same token, when I search for "adventure" games, I really want to find games like Sam & Max or Monkey Island. Instead, I see a whole bunch of kids games, and at best, "find a hidden object" games. Not what I want at ALL.

http://rpg-site.com/ and http://toucharcade.com/category/games/adventure/ help, but they still miss a lot of stuff.

Edit: tried out Chomp, it doesn't help. This problem would be ridiculously easy to solve with letting users tag apps
What has always made the state a hell on earth has been precisely that man has tried to make it his heaven. - Friedrich Hayek [The Road to Serfdom]
Ironic, but there's virtually nothing private on SO.
I used various tiling window managers on Linux, and really admired Awesome (probably because I was writing a lot of Lua at the time), but I ended up settling on Compiz (standalone) as my favorite environment.

In standalone Compiz, I had window decoration disabled and quick shortcuts to maximize vertically, horizontally, or both, and back. Most of the time I kept windows maximized and switched between them with a shortcut. It was simple, fast, and nicely animated.

I really wish this kind of thing could be done in OSX. 86 the title bar and it's cute little buttons. Set quick key combos to resize windows. ⌘-click anywhere in a window and drag to move it.

Make fullscreen apps work properly with multiple monitors.
Hide the menu bar whenever you want to, like the dock.

Why does window management suck on OSX? Even Windows has it beat in that area.
I looked up 'punk' as a verb in the Oxford English Dictionary, and found that there several ways that it has been used as a verb over time.

The definition that most closely matches the usage here is, "Chiefly in African-American use: to humiliate; to beat up, bully, etc., esp. for the purpose of showing dominance; to make (a person) appear weak or foolish."

I think that 'to punk' now means something closer to 'to play a prank on' but the OED hasn't caught up. For example, that was the meaning in the TV series "Punk'd" (an MTV hidden-camera reality show from circa 2003).
Browsing through the demo gallery, I become terrified that tools like this will become popular and poorly done animations will begin saturating the web. It looks like a fine tool when used appropriately and tastefully, but that's entirely up to the user. And a long series of Flash-based sites have shown us that there are many people in the world with poor taste.

For the last number of years, many of us have been able to shield ourselves from blinking and moving things on the web using some kind of FlashBlock browser plugin or by not installing flash altogether. This leads me to wonder: if this kind of content becomes pervasive on the web, can it be blocked?

It may be possible to heuristically identify such content. In the case of Hype, easy enough. (see http://static.tumultco.com/hype/gallery/HolidayCard2/Holiday... for example) Adobe's product appears to use a div with an easily identifiable naming convention as well. (see http://labs.adobe.com/technologies/edge/resources/movement/m...) So this is probably a good approach.

But part of me thinks this can be addressed at a lower level. Fundamentally what I want to get rid of is things that move of their own volition, rendering useless the adjacent content. Perhaps scripts that perform continuous DOM updates could be stopped?
AdSense detection is not done on the client side. AdSense knows which ads to serve on which page because it leverages the search index cache and content analysis of that page. In the same way, Google serves contextual ads in Gmail by indexing the content of each email as it comes in.

Of course, every other major public email provider in the world stores email in plaintext too, do I don't get how this is a knock against Google specifically.
Thanks for the explanation, closures have been a little tricky for me to wrap my head around.

I'm confused a little with regards to the closure closing over the "value" of free variables, or the reference.

For example, in python:

i = 1
def f():
return i

i = 2
def g():
return i

Both f() and g() return 2, even though when f() is defined, shouldn't i=1 be closed over in this case? That's what I find confusing here, in the sense that the state of the environment changes outside the closure affect things inside the closure.
That is a neat trick, does it work on all browsers?
This is one of the first things we'll be doing after raising our first big round. Until then... well, you don't want to know!
Filmmaker: MPAA Is a Censorship Group, Go Torrent
The infographic is kinda weak on information, and it doesn't do much to make those numbers any more understandable (what's 138 million books?)

The subject, however, isn't looked at enough in America. I remember being shocked the first time I read about what the NSA does in this New Yorker piece: http://www.newyorker.com/reporting/2011/05/23/110523fa_fact_...

I highly recommend reading it if you're at all interested in this. Fantastic reporting.
Advertising Agencies Miami
One Marketing Agency is a Marketing Consultant in Miami, our objective is to simplify your life and consolidate your promotion efforts in location. Advertising agencies in Miami will helps you to all you market needs to develop your business.
i think so yes
Using tools in wrong way is a kind of entertainment for hacker. But hacker shouldn't complain if something breaks.
It seems to be almost a law of human nature that it is easier for people to agree on a negative program – on the hatred of an enemy, on the envy of those better off – than on any positive task. - Friedrich Hayek [The Road to Serfdom]
Any argument following the slippery slope form - if you choose to do X then you must choose to do Y is fallacious. You have the choice both before X and before Y.

Tumbler may choose to censor other stuff, they will not choose to censor other stuff simply because they chose to censor this. They will censor other stuff because the other stuff is offensive (or not, they still have choices to make).

Also, i saw the phrase slippery slope and dismissed that part of the argument. It's meme-ridden fuzzy thinking at best. the "for the greater good" is imho suspect because of the Orwellian emotional ties to big brother.

So, i'll say both clauses of your or are true.
Yep, I've tested it down to IE6.
I was convinced already after reading Founders at Work and how Jobs screwed him out of money right from the start.
I guess I disagree. Not generating evidence is different from destroying evidence; encrypting your laptop while you discuss drug deals is like wearing gloves while you steal the Hope Diamond.

Similarly, requiring you to actively aid in your own prosecution has no precedent. You can "lie by omission" while providing testimony, for example.

Not doing something to protect evidence is different from doing something to destroy evidence. If that's not the case, then every drug user has "destroyed evidence" of its possession by burning it and inhaling the fumes or by digesting it with their stomach acid.
Whatever you may think of licensing software patents in general, I hope we can agree that promising to license a standards-essential patent on FRAND terms during a standards process, and then reneging, is considerably worse. I work a lot with standards groups, and I don't think the process could work very well if just any company could add their patented IP to the standard and then sue competitors for injunctive relief based on it. That would be destroying one of the few safe spaces in the patent landscape.
actually, I still love the idea, the product, the vision, etc. So it's not that, it's something else.
> It's amusing to me that the contact link is just a mailto. Why not use MailerJS?

In case someone wants to complain that MailerJS doesn't work in their browser, I guess?
I think most VS power users do that as well. I honestly can't remember the last time I clicked an icon on the toolbar.

One of the really nice things about pair programming is the number of times I've started hunting through a menu for an option and the other dev will say "Oh, just hit <chord>".

If you spend a great deal of time in ANY application you owe it to yourself to take one day a month and force yourself to use it without ever clicking a menu or icon. You'll be delighted at how much more productive you'll be.
a lot of wordless jazz for me.

Miles Davis - Bitches Brew