skysight-inc/HackerNews huggingface dataset:
>> Email can be secured and authenticated with GPG and perhaps more people should consider doing this.

> Doesn't work unless you teach people about security, which is difficult.

Simple, transparent security is hard. But this is again a UI problem, not a failing of email.

Think about this for a second: let's say Google decided that it was going to transparently PGP-sign all GMail users' emails. Now GMail knows that any message with a from address that ends in @gmail.com but without a valid PGP signature is fraudulent.

Now let's say Yahoo wants to adopt this too. So we add some syntax to SPF that advertises, "any mail coming from this domain must be PGP signed." And another field that points to a public key server. So then all other SMTP servers (or even end-user mail clients, if they want), can auto-reject mail based on this criterion.

Sure, this leaves out some details, like people sending mail from an @gmail.com address using their own SMTP server via a thick mail client that doesn't support PGP (or requires complicated setup to do it properly, like most do). But it's a (hopefully) interesting idea that might work with some modifications.

This has nothing to do with email per se, nothing about its successes or failings. It's just building an easier-to-use distributed authentication system that mail recipients can use.
how many moves is it trying to think ahead?
I think we shouldn't sleep on our laurels.

Free exchange of information, security wise, is certainly already a thing of the past. That's not good.

Freedom of information (as I prefer to call it), in general, is more than ever at risk. In France, they're outlawing surfing on websites that can be called "terrorist".

That include documenting yourself on "bad" countries' culture (bad as in your govt does not like them), or of course, reading phrack's art of exploitation.

In Germany using tools such as nmap is outlawed if you're not a security professional.

Not need to get started on China or even the USA.

Then, take a look at Full disclosure's current activity. It's not dying because it's "an old ml". It's dying because people do not want to exchange free information. Who would, when you can sell it hundred thousand of dollars?
(and the answer to that should be somewhere in your soul, right next to Phrack's World News)
You're writing an awful lot of words and almost seem offended by the mildest possible expression of someone's opinion about the stark contrast of a technical topic and more than colloquial writing. A whole thread over "wild"...?
I am so glad that I am a Lisper. I haven't dealt with issues of text file size or syntactic standards for at least a year.
I think the most well-known article is Smashing the stack for fun and profit by Aleph1
Jealous.
UK moves to restrict Internet freedom
Girls Are Smarter Than Boys
Absolute worst idea. This counts as an act of escalation (it counts as a threat to police safety) and is likely to end up with a definite ticket and potentially a handcuffed trip to the station if you don't get back in your car fast when ordered.

Particularly if you're physically imposing you run the risk of a panicked officer pulling their weapon..
That's interesting about the powerplant .. I bet there was a good amount of face palming going on when that was picked up.

Email appealed to me mainly because it explicitly includes identity. The system I was attempting to use it for was an online school data management system that needed to stay in sync with the schools in house data systems. Unfortunately spam filters just kept breaking things, because in the UK many schools have what are know as "managed services" which translates to underpaid keyboard monkeys with no clue running their IT infrastructure.
I don't agree that this is just a matter of relativistic personal preference. There is also the objective context. So many people think that this kind of style works much better in the context of a standup comedy than in a technical discussion.
I would love to have a special laptop edition of a OS like this.

Some nice features:

A nice VM overview/start/manage screen
A way to group VM's so it starts multiple VM's with a single "click" (in a pre defined order).

Switching between VM's with a shortcut and/or alt-tab/expose visual style.

Host menu to openen up new VM's, looking at stats etc. maybe a fold down over the current VM
Thanks for this. I had a hard time articulating why email is not broken, and you pretty much sums it all up.
RavenDB creator on Kiips MongoDB experience
Oren Eini is the author of a .Net based NoSQL database called RavenDB and compares it with MongoDB based on Kiips recent woes with it.
How Apple Decided To Screw Over Amazon And Consumers Over E-Books
Huge market for a top-notch payment processor not making their customers jump trough silly hoops, that hint was for free.
What I read was scut's article. My exploits were format strings, not overflows. Now that I search for it, it may not have been in phrack after all, though I'm sure I had to read some phrack articles, so it must have referenced them.
Wonder how good your "fix" is when we have:

a() +
!b

Also wonder what are your plans for the future? What will you do if Crockford refuses to accept your pull request because it is a) pointless b) encourages bad coding habits? Will you maintain your forked version and tell everyone that your version is better?
Abusing javascript as a semicolonless language is a bad idea (Go also).

If you wish to have a langage without semicolons, design your grammar properly, not add kludges to the lexer.
Vapor.js is making fun of the trend of JavaScript frameworks. Most of the existing frameworks advertise their file size, since a small size is desirable for fast page loads. Vapor.js is an empty file.

Recently the authors of a popular JavaScript/CSS framework, Bootstrap, decided to remove the semicolons from their JavaScript (since they're technically optional).

Douglas Crockford is the author of a tool called JSMin that compresses JavaScript files. He is known ot have strong opinions on JavaScript coding style, as is evident in his book JavaScript: The Good Parts and his JavaScript formatting/checking tool, JSLint.

Someone pointed out that now that Bootstrap no longer has semicolons it no longer under JSMin. Douglas Crockford was pulled into the conversation, where he expressed his strong opinions on the use of semicolons in JavaScript

Semicolon.js is making fun of all of this by adding a semicolon to Vapor.js.

(Oh, darn. The person I was replying to deleted their post. Anyway, they said something along the lines of: "I know this is a joke, but I don't get it. Am I missing some subtle commentary?")
I often think the same thing. Microsoft predicted growth in tablet computing, but borked the timing and technology.

It's not particularly useful anticipating a brilliant piece of technology if you can't capitalise on it.
For every soldier killed in battle, 25 veterans commit suicide
For point 3, it might be worthwhile understanding what the ECMA standard says about automatic semi-colon insertion. It won't happen for the following:

a = b
++c

This becomes:

a = b;
++c;

and NOT:

a = b++;
c;

There are other, odd gotcha's, but this is the one being discussed.

I believe the issue with the bang (!) operator is that it's being considered as a binding de-reference of function objects. See here: https://mail.mozilla.org/pipermail/es-discuss/2010-July/0114...

Therefore, the problem with the code would be that an automatic semi-colon would not be inserted and the code, which is currently:

clearMenus()
!isActive && $parent.toggleClass('open')

Would become:

clearMenus()!isActive && $parent.toggleClass('open');

Instead of:

clearMenus();
!isActive && $parent.toggleClass('open');

That was my understanding, at any rate.
I can confirm this. I opened an account at Citibank with only my passport.
Gmail etc. could have provided encryption and authentication if they wanted to. Unfortunately they don't want to because their business model(s) rely on reading our emails.
Facebook saw the need to take Instagram off the table.

instagram's former marketing director could say that is BS (former, because being still around would have raised eyebrows).

Just look at the people behind fb/inst and rejoice on the "pulling another round before acquisition" -- as if that would have come as a surprise to any of the parties involved.
It's great to have a liberally licensed alternative to Meteor and Firebase. Many thanks for that.

What I have taken from the article:

1. Derby is done by competent people
2. They support server and client code sharing
3. MIT license
4. NPM instead of proprietary packaging

I especially like 2). It was one of the killer features of Appjet which had code sections like: /* appjet:server /, / appjet:client /, / appjet:both */ You can guess what "both" did. Appjet was miles ahead for its time. I am sure David will take care of that part at Meteor's.

Last but not least, I don't like the name Derby. It is already used by a popular Java SQL database.
How to teach someone how to prove something
They require a local address though, right?
To quote myself: being free to move isn't about posing a physical threat. I'm not standing over them, and rarely approach them directly - it's not like I'm panicking the officer.

As for the 'handcuffed trip to the station', that's never happened to me, and I've done it close to a dozen times. I've also never ended up with a ticket while doing this.

What kind of backward country do you live in where you're not free to move around police officers if you're not actually being arrested and you're not threatening them?
Funny, but I came across the case when whil concatenating files the resulting script was broken, becaus of the missing semicolon at the end of some library. Dropping this script into the list would fix that ;)
I agree that payloads are an interesting idea; but would be a security nightmare. As soon as you load a URL based on an email, you are leaking information to the sender. You could restrict the types of content, but all you end up with is RSS.
More ad Hominem. You can have batshit beliefs and do proper math/science on the side. Prejudice due to the former may prevent a rational evaluation of the latter, as it happens here, and may also happen during peer review or editorial decisions.

I can't read the full text, but the abstract claims that their views are based on the interpretation of experimental data.

If you can read it, could you tell us if is it a mere thought experiment, or if they performed it? In the latter case, what's the flaw in their experimental setup or reasoning?

Edit: I've done a quick google scholar survey of the second author, and he's also used to delve far into the "not even wrong" territory... That being said, neither the abstract nor the phys.org summary ring any objective crackpot sign to my untrained eye. The claim that they proved Einstein wrong, their track record, and the journal the paper was published in are of course big red warnings. But that doesn't mean that the core of their argument has to be dismissed out of hand.
> Will you maintain your forked version?

Worst comes to worst, you can always rebase newer commits from the original Bootstrap repo locally.
At What Temperature Does An eBook Burn?
Email was not designed to be used the way we use it now. ...my inbox is a todo list, and email is the way things get onto it. But it is a disastrously bad todo list. ...it seems unlikely that people in 100 years will still be living in the same email hell we do now. And if email is going to get replaced eventually, why not now? ...some of the most powerful people are all at the mercy of email too. [1]

Your posts reminds me of someone arguing to keep the oral tradition going instead of switching to writing.

I am not saying anyone has suggested anything close to the equivalent of writing, but there is definitely a fundamental problem with email that can't just be solved by a couple of perl scripts and rules. I would also assume one's career choice is a premise for making better tools and protocols - anything else seems kind of backwards. If the president was forced to work in a public market space, would you tell him to change career if he remarked on how he couldn't get anything done?

There is a difference in saying email should be killed forever and that it should be replaced by something else for certain usages, just as twitter and Facebook replaced portions of email. Incidentally though, such a replace could likely render email useless for many people.

1: http://paulgraham.com/ambitious.html
Oh totally, you're right, I misread his comment.
Interesting idea, looks good but.. when I tried to plan something, it wouldn't let me submit. The site also seems a bit bloated. Tonnes of assets coming down. Is there really any need to override the default checkboxes, too? It created a tiny bit of lag and felt a bit unresponsive.

Finally, I see you've created an app - are there any close-up screenshots? I expected a lightbox to appear when I clicked on the iPhone. Also you can't click on the app download button which makes me wonder whether this is just a mock-up?

Nice idea and pretty nice site too. Could do with some little tweaks though.
Take a look at DMARC. [1] The webpage is horribly ugly, but essentially, it allows a domain to declare that all their outgoing mail are DKIM-signed and SPF-passed.

Paypal and eBay do this. Gmail filters out any DKIM-fail or SPF-fail mails purporting to be from @paypal.com and sends it to spam, with 100% accuracy. Gmail also puts the little 'key' icon next to the sender name, but that's not really important, the point is that any and all fraudulent emails are filtered out with unerring accuracy.

Thus, we don't need to use PGP or whatever, which needs to be handled at the client level. DKIM + DMARC is already here and working at the server level. You don't need to wait for your favourite email client to adopt DMARC.

Yes, if people send emails without going through that SMTP server etc etc.. that's a problem, but also solvable/solved.

[1] http://dmarc.org/
If you write pedantic rants, then get your terminology right. Email is a heavily overloaded term.

The protocol is SMTP,POP3, and IMAP. The data format is something defined through various RFCs and proprietary convenience. The use cases differ from corporate Outlook via Exchange server to people typing text into webforms.
> No, but it may be Eul's

At this point, no, I don't believe it is. There have simply been too many people involved, too many fingermarks in the clay. Even if Eul, Guinsoo and IceFrog teamed up together, Blizzard would still have a valid claim.

> who is also a Valve employee.

I also don't really believe this. People keep repeating it, and the source is always that same, single, ambiguous sentence of Gabe's. Hopefully some real information comes out during the trademark litigation.
This post seems a little off. I agree that the fundamental concept's not broken, but why link to the error message problem? He talks about technical shortcomings of email but then just launches into saying that it's not todos?

So what about the technical problems? The crappy security, the poor error messages, that the senders email gets dumped straight to spam without any notification? What about crappy email threading that requires people to send the entire post back in the reply? That if a normal person wants to send emails themselves it's a colossal undertaking that's better farmed out?

Say it's not a todo app, sure. But don't pretend that there's not any problems with it.
Worst fanboy ever ...
here's some tips, based on having a couple of agencies. sounds like you don't have existing leads that you can immediately convert into contracts.

1. it's a sales job. get leads, and call them.
important part of sales: pricing. $1k/page is a good heuristic

2. it's an account management job. be prepared to spend time being available, and talking to people at your customer

3. figure out a quick way to get people to a price; develop general ability to get a feel for 1k, 5k, 10k, 20k, and 50k projects

4. develop a production method that maps to how customers want to see their product develop. screen list -> wireframes -> visual design -> development works pretty well.

good luck!
Show HN: JSMin fork (allows Bootstrap's idiom)
Hey all,

Mr. Crockford has recently refused to fix JSMin (https://github.com/twitter/bootstrap/issues/3057).

Thus, I've fixed it. You can get the updated code from https://github.com/shawnpresser/JSMin/blob/master/jsmin.c

The fix was simple. It simply scans for "newline, optional whitespace, exclamation point" and replaces the newline with a semicolon.

I've given special attention to safety. This code works exactly as JSMin did, except it implements the aforementioned semicolon substitution, thus supporting the Javascript idiom:

a()
!b && c()

I hope this proves useful to someone (possibly the authors of Bootstrap). It was a fun project.
Although I agree with the sentiment; I doubt that the solution is with ever more powerful email apps. The end result would mean turning Outlook into a web browser. This would be an atrocity and a technological dead end.

If email really is only a protocol; it would be better to have numerous single purpose apps that use it as a transport. This would be hugely useful in business where email is much less filtered than websites. If people lack the app in question, you could provide a text/html based alternative.
Nope.

cat foo.js; jsmin <foo.js
"foo" &&
!"foo"

"foo"&&;!"foo"
SEIS- the most exciting thing ever to happen to UK startup culture
> You send a message and it either goes where it’s supposed to, or you get an error message back.

I wonder how large percentage of messages are dropped silently by services like GMail as a spam prevention measure. I bet it's non-zero.

> It’s simple.

How many email related RFCs are out there? And how many additional non-standardized common practices there are? How many pitfalls imposed by common legacy software? Email is far from being 'simple' imho.

Yes, a lot of stuff can be done at the client. But email protocol stack is still very ugly as a whole, especially if you need to reliably inter-operate with the rest of the net.
No semicolon-min.js ?
Opened one at Wells Fargo the other day, no local address. They were happy to mail everything to Greece.
I have done this recently (and it appears you are from India) I used GlobesAmerica (www.globesamerica.com) to incorporate a LLC. You can do a live chat with their customer service. They are quite helpful. Once you incorporate as a LLC, you will be introduced to a bank (in my case it was Wells Fargo) Wells Fargo collects all the papers and opens an account with you. I did all this without setting foot in US.
NOTE: Please check everything before proceeding as your situation might be different.
NOTE: The Freshdesk blog is what you see when you google but its not very useful. SVB etc and the lawyer never got back to me.

--Tarun
Am not sure how this HN thing works as I am posting for the first time...

I have done this recently (and it appears you are from India) I used GlobesAmerica (www.globesamerica.com) to incorporate a LLC. You can do a live chat with their customer service. They are quite helpful. Once you incorporate as a LLC, you will be introduced to a bank (in my case it was Wells Fargo) Wells Fargo collects all the papers and opens an account with you. I did all this without setting foot in US. NOTE: Please check everything before proceeding as your situation might be different. NOTE: The Freshdesk blog is what you see when you google but its not very useful. SVB etc and the lawyer never got back to me.
--Tarun
I checked it out; it's as broken as these childish acts from "reputable" javascript-library maintainers.

cat foo.js; jsmin <foo.js
"foo" &&
!"foo"

"foo"&&;!"foo"
> That idiom is useful to no one.

And yet

> Minification of Javascript should never result in a behavior change.

You're flying in the face of your own holier than you declarations here.
Actually, email as a standard is horrific. It would be worth the effort to replace it just to move to something more consistent.
well. there is only one thing left to be told: amiiiiiiiiiiiiiiiiiigaaaaaaaa (::
KDE's system-centralized PIM solution, Akonadi, seems a decent way to solve that problem. It's designed to share data between local application and external services in a standardized way.

Of course, considering almost everyone is using webapps for that type of stuff nowadays, you'd probably need an Akonadi-on-the-cloud solution, POSTing stuff to each webapp as messages come in.
Can we please start talking seriously about security around these frameworks. Exposing your DB API directly to the client is opening yourself to the equivalent of "rm -rf /" or "DELETE * FROM table".
Just wanted to add one more point, same person who authored vapor.js did semicolon.js :-)
Spam is a human problem more than a technical one. We need deanonymization to name and shame the spammers.
Webmaster hledá práci
Nabízím zkušenosti s tvorbou webových prezentací pro firmy a jednotlivce. Zvládnu e-shop, katalog firem ei diskuzní fórum. Vytvořim grafický návrh, zajistim hosting, zaregistruji doménu. Součásti každého webu je i příprava pro SEO. Velmi rozumné ceny.
When you start typing "myhrvold" in google, "myhrvold patent troll" comes up very prominently. (For me it is #3.)
Thank you for the explanation. I guess a lot of people (like me) were confused by this multi-layer insider joke.
But not being able to distribute binaries is inconvenient http://zfsonlinux.org/faq.html#WhatAboutTheLicensingIssue
I remember demos on Ataris, Amigas, and early PCs, 286s, 386s. Back then there were no scene-imposed limitations, because the hardware was seriously limiting what you could do, and the awesomeness of demos lay in overcoming the crap hardware.

But when hardware stopped begin crap, when you started getting hardware accelerated graphics, when you could do mp3 playback in realtime, it got too easy to make something pretty, and less awesome.

If the demo scene had been about making pretty things, they would have just continued using the new hardware, but since the most important thing has been overcoming difficulties, making something pretty DESPITE the limitations, making something awesome, you know they value the challenge most.

And that is hard to communicate to regular people, because they can only value the prettiness of a demo, and that limits the popularity of it.
I have a simple fix. Standby.

EDIT: Fixed. Thanks for pointing that out. Let me know if you find anything else.
I like the doing instead of all the talking. Kudos for this.
U.S. to begin tourism marketing: Brand USA friendly to visitors.
Thanks. Now I understand your point (and agree with it).
I looked at the code and..... ;
Louis vuitton dog carrier, louis vuitton dog carrier 50
cheap Louis Vuitton Dog Carrier on sale,high quality louis vuitton dog carrier replica,huge collection of replica louis vuitton items for your choice.safe shipping to worldwide.
Bad article - drama for some cheap thrills. Common sense stuff coated with shocking statements (your life is over) or grandiose ones ("Be hated").
I am utterly utterly bored of such crap. Tell me something I don't know. Or atleast don't coat it with all this drama.
OP here. There was a discussion on HN a few months ago where someone noted that U.S. customs and immigration procedures were scaring visitors away. I commented that the Aust. press was reporting a forthcoming marketing effort to redress that.

This is a press report on the beginning of that marketing effort.
A great list of command-line tips
Yes, to be useful for REST json really needs either a type for hyperlinks or a naming convention. Arguably then it is an extension of json and needs a new mime type...
I did it for Pen.io and did it with Chase, I can give an introduction to the VP of Business Banking there who'll be able to help you out if you need it. It was a straight forward process. Getting an EIN (which you'll also need) is slightly more difficult but again I can help you out - just shoot me an email