skysight-inc/HackerNews huggingface dataset:
This is the part that gets kind of confusing because there isn't a clear delineation between Persona the UI and Persona the fallback identity provider (IdP).

When your cert expires, you need to get a new one from your IdP. If you already have an active session with your IdP (either by logging into your webmail, or clicking the "this is my computer" button for Mozilla's fallback), then your browser can get a new cert completely invisibly.

If your session and your cert have expired, then you get prompted to authenticate again. For the Persona fallback, this means you'll be prompted for your Persona password (instead of sending you back to your email, because that's super annoying and users end up not logging into your site). If your email provider has native support for Persona, then you'll get prompted by them however they normally do login.

> I'm using a public computer, is there a way for me to manually revoke a cert when I'm done using the machine?

Go to login.persona.org and click "sign out." We're working on universal signout (at least for users of the fallback), but I'm not sure if that's landed in production yet.
Thoughts on the accuracy of this statement?
What do you think happens to a US servicemember who leaks military secrets to Russia or China?
This is awesome, but isn't it a copyright nightmare waiting to happen?
Ask HN: Would you develop a mobile app for a niche with an existing competitor?
Of course, the Linux Foundation is about promoting an operating system that has been largely marginalized

Bollocks. Linux has not been marginalized. It is dominating the server market, embedded devices, and smartphones in the form of android.

whereas the Bitcoin Foundation will work to promote a cryptocurrency sometimes used for blackmarket activity.

Haven't you heard? The dollars are used for black market activities too.
But this is not true. David Wagner and Ian Goldberg (the cryptographers who cracked GSM) have documented that the encryption used was purposefully weakened to enable realtime software decryption of voice calls.

This was back in the late 1990s and there was a lot of discussion on the cryptography usenet group at the time (i.e. http://www.mail-archive.com/cryptography@metzdowd.com/msg007...) but there is a fairly readable mass market piece here (http://scard.org/gsm/pr/nytimes/). I'm only an amateur when it comes to this stuff, but why do you think David Wagner is wrong?
I get the impression that verifying your email address only needs to be done once when you first sign up with Persona and create a password. When you use Persona to log in to a site for the first time in that browser, it prompts you for your Persona password and issues a certificate on success. If that certificate expires, I presume you would have to use your password again with Persona to get a new certificate.

I haven't found anything about manually revoking a cert, but I haven't looked either.
SF isn't the only city where you can live car-free ;)

Also, cars are, sadly, much cheaper than houses. My spouse and I share a car and the TCO is not anywhere near our rent. At least an order of magnitude, maybe two.
Free Online Learning: The Death of School?
Yeah, it is inexcusable that the N Judah takes close to an hour to travel 7 miles from the ocean to the Embarcadero, half that in tunnels/dedicated right of way.
Tell that to Obama.
You make a good point. I am undercharging for my services. But I'm not in California, my costs are very low, and live like a monk. I'd rather have a lot of work because good clients can afford me than having a few jobs here and there because most people can't pay. In a world where engineers act like superstars, being affordable, approachable and down to earth makes a huge difference.
It's always easy to play nice and call for 3rd party developer when you need them to build your audience. I'm glad they do that but for now it's more geared towards their own benefit.

Let's see how they behave once they actually have users.
Wikileaks is a journalistic organization. If someone in the US military emails the New York Times a classified secret, that does not make the Times an "enemy of the United States."

All this nonsense about "most grievous breach in opsec history" and "extracting information" completely obscures the issue by putting the blame on the wrong boot.

Hacking, spying, all these things can and should be declared illegal/wrong. But publishing data that was sent to you by a willing informant is much less clear-cut, and certainly doesn't warrant "enemy of the state" status from any country claiming to respect freedom of the press.

The goal of news organizations is to find out information and make it public. If you want to keep information private, fine, make it a criminal offense for your people to disclose that information to news sources. Case closed.
I was just setting up a Wikipedia clone (using the dumps and MediaWiki) and adding some features to it for my 4 months at sea with 250 students. No internet in the middle of the ocean, so it was helpful for them to have a server setup for them to still use wikipedia. Wiki has category dumps and such already, so just used them. But yes, for your use case if you are extracting something that they are not doing already then I could see the potential gains.
Bombing the servers won't be a good idea now when GeoLocated has gained a lot of popularity.
In addition to requiring a delay, the patent claims as allowed require that you GIVE GODADDY your credentials to the social networking site and that their server will use the credentials to log you in. Contrary to what some of you are saying, this is not oath.
Indeed, has there been any more coverage of this? I didn't hear about some rogue guy in Germany.
It wasn't clear whether the classification means only that U.S. servicemembers are subject to punishment for contact with Wikileaks, or whether the general public is as well. It's one thing to tell employees who are entrusted with state secrets that they should not divulge them to someone who's going to plaster them on the NYTimes; it's another to tell members of the general public that they can't talk to or express support for Wikileaks for fear of criminal sanctions. The latter seems a gross violation of freedom of assembly.
Hey, whoa, easy tigers! Yes, Gittip needs to solve the non-US payouts problem, and yes, Gittip can and should work for people in many different parts of the world with many different standards of living.
(2006) Room 614A: AT&T spying collaboration with the NSA
Thanks for the detail, I really like what I see with Persona so far.
SF's growth is limited far more by humans than it is by nature.
"This app is incompatible with all of your devices."

I have a Galaxy Nexus and a Nexus 7 ... hmmm
Supposedly, end users will only face the "login with browserid" buttons. But yeah, i find the name change from browserid to Persona, as first time users will be confused.
In the case of the Javascript shim, the certificates are stored in the browser's local storage. In Firefox (and I believe in most other browsers), this gets deleted when you clear cookies.

So you can do that before you leave that public computer, or you can use private browsing / incognito mode so that cookies and local storage stay in RAM and disappear when you exit.
> If the countries with the most evil militaries had the most to fear, we'd all be remote desktopping into the laptops of Syrian generals right now

Are you suggesting people are not? Assad's personal emails, Minister of the Interior's personal emails, Defence Minister... and so it goes: all of it http://wikileaks.org/syria-files/
Yeah! If they can't release it in every country in the world, they should never release it!
Some that I think are most significant:

- The complicity of US forces in turning over captive Baathists to the provisional Iraqi officials for nearly certain torture.

- The revelation that information was classified only to prevent bad news from getting out about the progress of the war effort. This counts as propagandizing the American people.

- Lying about civilian death tolls.

- ISI complicity with the Taliban.
We are not talking about leaking here; by declaring Wikileaks to be EOUS, _any_ contact with them is verboten. FTA: "the military is effectively declaring that any contact with Wikileaks or its supporters could be deemed "communicating with the enemy" -- which can be punished severely (even death)."

While our military is free to make port calls, joint maneuvers, etc. with PRC?
Not sure how I would apply this technique in this particular case, maybe you can give me another hint.
The NextFacebook...Really?
I saw this job listed on craigslist and I just wondered how delusional does a person have to be to even think like this.
Housing costs in Silicon Valley are insane, which prices out lower skill workers and forces companies to pay more for highly skilled workers.

It also reduces the quality of life for those who do live in Silicon Valley, because the salary rises almost never entirely make up for the rise in land prices.

(Yes, I've used salary calculators, particularly to compare the Bay Area's and Boston's software engineering salaries to places like Portland and Seattle that are cheaper but still have lots of tech.)
I've watched a home inspection and the only tools used were a flashlight, GFI tester to test wiring, and the guy's eyeballs. Unless there's some visible sign, a typical home inspector is not going to be able to detect chemical contamination of any kind. Radon testing before buying a home isn't uncommon but is still something you have to ask for and pay for separately.
Business Bout grows to $25K prize; business incubator coming to East Liberty
That's completely spot on. Right now, if your email provider doesn't have native support, we ask you to create a persona.org account so that Mozilla can vouch for you. In the future, this goes away.

Similarly, the UI is all displayed in response to navigator.id.* functions. If a browser implements those natively, the Persona UI at login.persona.org completely goes away.

The more successful Persona is, the less Mozilla is involved in the login process. :)
A brain beyond borders
Then you would not use your primary "super secure" email as your browserId, but a secondary mail account.
Excellent investigation! You are correct thank you for the explanation here on this thread. Check it out we also needed to remove the server.js file too. No more node needed now. Enjoy!
Why personal branding is important « IT Business Blogs Canada - Innovation
This petition offends me because it omits some important facts, namely the couple bought a foreclosure...

See http://www.heraldandnews.com/members/news/frontpage/article_...

I helped a friend through a foreclosure recently, and throughout the process you sign and are told MULTIPLE times that the house is "as-is." These people should have inspected. You get what you pay for, and I'm sorry they are out 36k, but this is no different than buying a new ferrari from a used car dealer for 10k and asking ferrari to send you a new engine.

From the article: "They found a couple of smashed windows, and knew they’d have to put some work into it, he said.
A handout from the U.S. Environmental Protection Agency informed them they were responsible for detecting asbestos, lead paint or other common health hazards associated with older homes."
I generally agree with sticking to a standard flat rate. I don't charge extra for off hours or anything else, but I also make sure the client understands what my availability is for after hours etc. In general, I try to set very clear boundaries with clients otherwise some will just abuse the hell out of you. I also do a minimum charge of 1 hour. So if you do call me in the evening I will charge you 1/hr regardless if it takes me 2 minutes or 58 minutes. Seems fair to me.

Also, I have started moving towards less hourly rates and more fixed cost bids if/when I can get good understanding of the task. In fact, I like to break it down in weekly blocks and charge for that deliverable. This way I am not playing hourly billing games, the client doesn't feel nickle and dimed and if I can finish in 20 hours, I have more time left to do other work. This makes my hourly rate much higher than what most smaller businesses would pay. They get shocked at an hourly rate, but when you give them a bill for delivering X functionality that they equate to Y revenue, it is a no brainer. This also lets you vary your rate as needed for whatever extra factors you might see.
Could they not use the title insurance route to get this cleared up? That is if they have title insurance which I think is provided to everyone. They could check the HUD and verify if they paid for it.
Facebook's Ads Are Terrible, and Always Will Be
that helps reduce latency, but if you can't accept new connections, it's of no use.

Also note that initcwnd is set to 10 by default on all current OSen.
What do you think happens when a servicemember in the US is discovered to have been communicating with the intelligence services of China, or, for that matter, France and Israel?
While emulating WebSocket on non-supporting browsers is definitely awesome, the point I am making, is I am using a websocket-supported browser yet it's just doing a series of non-stop HTTP requests.

Shouldn't the emulation only occur when necessary and be a graceful degradation not forcing all clients to downgrade to a less efficient transport?
Google's "iLost" Motorola ad faked an address to "lose" iOS 6 Maps
I don't think it's fair implying that Node.js is to blame for the scaling issues of this particular project. Dead reckoning, variable polling and other tricks could have been used with a Node.js server as well and make it look smooth and play decently, they just weren't there in this implementation.
Twitch Broadcasting SDK
And so we know what movies Assad wants to watch. A blow for justice to be sure.
Boo is awesome; it's meta-programming/macros look awesome.

Selfishly, I wish the JVM was its primary target and not .NET.
Agreed, but when you say "half", are you talking distance or time? My experience is that once you're in the tunnel, it's pretty quick. Surface streets are achingly slow.
Of course it's an amateur time: You're not going to win any serious marathons running a 2:30, and if you have no chance to win, you can't really be described as a "professional". But c'mon, 2:30 is an amazing time for an amateur. Obviously it's "achievable", since maybe a dozen "amateur" runners managed it in Boston this year, but it's well beyond "good", as you initially described it. It's well into the top 1% of amateur marathon runners.
I have one friend (a United States citizen) who has spent much of his life living abroad. He has been to dozens of different countries, including the Asian country where I met him. He has not been back to any part of the United States in the last five years, during which time he has been to multiple countries of varied cultural and political background. His reaction to the Wikileaks publication of United States diplomatic "cables" was that his respect for United States diplomats increased enormously. That is my reaction too. United States diplomats have to deal with other governments all over the world, many much more treacherous and duplicitous than the United States government has been even at its worst. Those of us who are Americans who have been abroad, and who thus are especially aware of the consequences of US actions abroad, certainly have our own criticisms of United States policy. We also criticize the actions of United States persons who violate some United States policies, to the harm of foreign persons. But if Wikileaks wanted to so something both constructive for world peace and likely to elicit even more surprised outrage, it should turn its attention to the classified documents of China, of Iran, of Russia, of North Korea, of Belarus, of Venezuela, and of various other dictatorial regimes around the world.

AFTER EDIT: The reply two levels down by pdonis correctly summarizes the single standard I apply to all governments: they all ought to act morally, they all fail to act morally from time to time, I oppose all of those failures, and I would especially like to know more about the activities of governments that don't subject themselves to the discipline of free and fair elections, even if it means an organization like Wikileaks has to reveal their secrets.
A US Army information assurance agent downloaded gigabytes of state secrets and mailed them to a foreign national. Your willingness to call that a "nonsensical" breach says more about your biases than mine.
And even if it didn't, buyers should always get a home inspected before finalizing.

I do feel terrible for what this family is going through. I hope people take their story as a warning to perform due diligence themselves.
Ask HN: What to do about Pokemonium?
Hey lovely HN audience.

I am one of the original developers of PokeNet. It was Pokemon multiplayer game written with Java. We released our source code under GPL and we never made any money out of the game. As we broke Nintendo trademark and copyright we got cease and desist about 2 years ago. Afterwards we stopped development of the game, but the source code spread like a fly around the Pokemon MMORPG community, especially at ragezone.

Well some time ago someone forked our source code and materials. Modified the game somewhat and created Pokemonium. They have currently about 40k accounts in the game about half of what we had when we got our C&D. They are making money from ads which we never did and they have just modified our game, actually made it even buggier than it was.

They are not distributing the source code so they are breaking our GNU Public License. They are also breaking Nintendos trademarks and copyrights. We have contacted the lawyers who sent us the cease and desist from millernash, but they don't seem to care much at all about Pokemonium. We have also contacted noalegal the legal team of nintendo.

So what can I do about them when Nintendo seems not to give a shit and they are not following our source code license?

http://pokemonium.com/
So if i signup now with my @gmail account through persona.org, what happens when google starts supporting browserid natively?
Distance. The surface streets (and entering/exiting the Market Street subway) are the slow parts.
Nope. Home inspectors aren't allowed to be "intrusive" while testing, meaning they can only see stuff that's easily accessible.
Does meth invalidate title? How would title insurance help?
And even then it still isn't performed often enough because radon tests take a solid week or more (for the activated-charcoal kind).
Why did you decide to home educate, and who is doing it?
"An enemy is dealt with under the laws of war, which could include killing, capturing, detaining without trial, etc," - Marc Ratner, Assange's attorney

"Any person who ... aids, or attempts to aid, the enemy with ... money. Any person who ... without proper authority, knowingly harbors or protects or gives intelligence to or communicates or corresponds with or holds any intercourse with the enemy, either directly or indirectly; shall suffer death or such other punishment as a court-martial or military commission may direct." Punitive Articles of the UCMJ: Article 104—Aiding the enemy

"Scope of Article 104. This article denounces offenses by all persons whether or not otherwise subject to military law. Offenders may be tried by court-martial or by military commission."
http://www.jackpotbuddy.com
It's a good hack and all, but you didn't actually solve the real problems. Most of which ahould be solved with server side logic[0], something I'm guessing your service can't do?

[0] It could theoretically be done p2p.
We can fix it, though.

Eventually there will be enough tech workers able to vote in the city that we can push through changes to the zoning rules.

We just have to:

a) get to that point and

b) be politically engaged enough to actually go and do it.

The SOPA reaction has given me hope about b).
Just some minor quibbles...

You probably mean radon testing, not argon, as I don't believe argon is radioactive.

One can make an educated guess about lead paint without a test. If your house is old enough, it's there. If it's there, it's probably been painted over multiple times. So just wear a mask if you're stripping walls or doing structural work there, and don't let pregnant women or children anywhere near the work area.
It could also depend on which app store you are in, I am not from the US.
For people, yes.
For government, it should be mandatory. The government's military? Sometimes.
This story is about 10 years old BTW. If Feddie Mac hasn't changed their policies in that time I don't think they're going to now.
Sorry, but I do not see anything bad at saying "this is dumb idea" different would have been if I had said "This is fucking stupid idea". Anyway my negative points kinda were earned. :(
Not saying the line is complete yet, but the NDAA looks like a connecting dot to me.

I'd love to be proven wrong, but is this not what a steady slide into military dictatorship would be expected to look like?
I don't know if it's appropriate but can we list some of websites where one can login through browserID? I 'm a big fan of browserID, and would gladly beta test your integration.
Oh, well if Marc Ratner says we're going to send the death robots after Assange, I'm sold.
> If you want to keep information private, fine, make it a criminal offense for your people to disclose that information to news sources.

Honestly I thought that was the interesting segment of the post you responded to. You haven't really addressed what his point was.
I have a related quote: "People who try to say profanity indicates stupidity can go fuck themselves" -- me.
Jealousy isn't a helpful emotion.
The BrowserID protocol states that Google should be used for authentication, instead of the fallback persona.org account.
Seconded. Dogpatch east of 3rd is virtually uninhabited, and is a 15 minute walk from SoMa. Boggles the mind.
And a good radon test uses film and takes months since the release of the gas is seasonal.
Microsoft Windows 8 (32 & 64-bit) Review
Extension updates only require approval if they add additional permissions. Of course you could always use: https://chrome.google.com/webstore/detail/nlldbplhbaopldicmc...
To make matters worse, there are no less than three Python-like options in the .NET world: IronPython, Boo and Cobra. With such fragmentation C# will probably stay the only game in town for a long time.

EDIT: Apparently Boo hasn't been updated for almost a year.. sad. Oh well, that leaves two choices then.

[1] http://dist.codehaus.org/boo/distributions/
mnicole, you do not need to approve extension updates unless they ask for more permissions.

In the ancestral thread, the assumption is those wildcard permissions were already granted.
Thank you for actually providing examples. However, I can't help but feel that:

* Preventing bad news from getting out about the progress of the war effort is to be expected of any military.

* Lying about civilian death tolls is to be expected of any military.

* ISI complicity with the Taliban has been speculated for a long time, even before the leaks. Seeing as the religious element of Pakistan sympathizes greatly(read: completely) with their cause, it makes complete sense that it runs high up the chain of command. IMO the only reason they keep up the facade of alliance is because of our money(and, of course, the decently sized Pakistani diaspora who see the fallacy of the fanaticism in their homeland).

The first issue you mentioned seems to be the only true revelation to me, shocking or not.
The NDAA authorizes the President to kill members of Al Qaeda and the Taliban. It can kill Americans only if they are providing material support to those two organizations and only if they are on foreign soil. Those (very limited) restrictions actually narrow the powers granted to the executive under the 2003 AUMF. The NDAA actually made it harder for the President to sic the death robots on people.
New DoJ Documents Show Huge Increase in Warrantless Electronic Surveillance