skysight-inc/HackerNews huggingface dataset:
"being able to encrypt a message is proof that they are who they say they are"

Not true. All that that proves is that whoever is on the other end knows the secret.

In that sense the title ("Security on an untrusted client") is misleading. The only way anyone's going to secure an untrusted client to a point where the system gains my trust is by using:

- A one-time password [1] to mitgate MITM, key loggers and screen grabbers.

- Identity federation (not OpenId or OAuth) that means I can use credentials other than the credentials I use from a trusted client.

- An application firewall [2] that redacts HTML on the fly so that the disclosure impact of a single GET request is reduced.

- Ideally (although this is taking things to a whole new level of paranoia) a data diode [3] that protects my server.

[Edit] The use case will obviously drive out the requirements, and the shopping list above is for a basic web application that only goes as far as form data. If you're looking to work with files you'd have to write up some code that ensures files don't contain nasties. While AV will go some way to doing that, the only way to really get around that is through conversion. I.e. .DOCX is converted to .PDF, .PNG to .JPG, and so forth. Yes, that limits the file types you can deal with, but if you're this far down your requirements aren't exactly main stream.

[1] RSA SecureId (http://en.wikipedia.org/wiki/RSA_SecurID)or Chip & PIN challenge/response (https://en.wikipedia.org/wiki/Chip_Authentication_Program)

[2] Eg. F5 Big-Ip app security manager (http://www.f5.com/products/big-ip/big-ip-application-securit...) or Microsoft's Unified Access Gateway (http://www.microsoft.com/en-us/server-cloud/forefront/unifie...).

[3] Tenix is a high-end solution used by governments. The old Whale Commuications Intelligent Application Gateway used to be a cheap but very effective alternative (http://en.wikipedia.org/wiki/Unidirectional_network).
Thank you for another quality article Ilya!

This makes me wonder: If we were to add SPDY support to our REST API at $work, would we see any real world performance benefits from our mobile app which talks to the API?
This is such a small nitpick, but the rotating circle is very confusing to me. The shadow and the highlight rotate too, suggesting that the "light" is rotating with it. Feels really out of place.
> anything else I might have wanted to do was closed off because of my college grades. You don't realize at 18-19 how much your college grades matter, especially if you wander outside the tech field.

'rayiner, if you're who I think you are (Northwestern Law?), your grades must not have been that bad; you seem to be doing just fine career-wise.
Google Search: Abraham Lincoln Vampire Hunter
We're talking about tablets. Can you tell me which of the major tablets is user serviceable?
Uncompromising Promises by Aaron Levie
I was pretty giddy and had a lot of mental momentum before. It's a little more complicated than just tailoring the band gaps. Ideally, we would be able to push the band gap anywhere we want, and we might be able to with specialized doping and electric fields, but at the moment we haven't been able to get outside of the IR spectrum (at least in Graphene, which I know a bit more about). There may be some fundamental material property limits that we are unable to get around (I don't think this is the case, but it could happen).

Because Silicon is similar to carbon, Silicon can do many of the things Carbon can. We know Silicon extremely, extremely well. We have been working out the kinks in it for 30 years, Intel has put billions of dollars into researching the material. We know how it works. Other materials fall off very quickly in our level of knowledge, we are still at the point in some of them that we know they work, but we don't know why. Carbon is getting a lot of attention, maybe because it's the next best step, or maybe because understanding Carbon will let us continue to push Silicon forward until years in the future when we have a better understanding of the material when we can transition nicely.

As for making heat -> You could, but the peak wavelength from the black body spectrum of the room would be about 10 microns. These solar cells are significantly shorter wavelength than that (they're absorbing ~1 micron radiation). Also, the longer the wavelength the less energy you get per photon, which wouldn't fare very well.

For heat to electricity, you need a TEG (thermoelectric generators, peltiers, something that uses the Seebeck effect) or a sterling engine of some kind. These work off temperature differentials. Unfortunately, thermodynamics is not nice about recouping energy, and they need high temperature differentials to function efficiently. Even then, the efficiency maxes at about 30% (Carnot efficiency for heat engines).
The problem that the article points out is, hoarding damages community cohesion too.
great idea. however the execution could be better. make the transition smoother, have some sort of motivational background music that pumps you up.
it can also be a bit longer.
The concept reminds me of OhLife (ohlife.com) which sends me an email every night that I can reply to and it automatically makes a journal entry. I just type a few dozen words and it's easy that way. With each email it also pulls up a random old entry like "Remember four weeks ago when you wrote...[excerpt]." It's interesting to look back like that.

Your app seems to integrate location and photos which would be a bonus (a picture is worth a thousand words, after all). I would definitely try this app. I'm an android user
Finland: Plan for universal 100Mbps service by 2015 on track
Best question to ask yourself when buying a new tool or gadget:

How often would this actually help me?
Windows 8’s Halloween surprise: Metro patent lawsuit
I'm not sure I agree with you. I've had to deal with plenty of fraud issues.

How is Stripe passing the risk on any more than other processors? [1] The end-result of fraud (at least, the kind I'm familiar with) are chargebacks. Those are going to fall back to you regardless of who your payment processor is.

We've had major fraud issues on our system which is powered by BrainTree. When you hit a certain chargeback rate, you basically get a call from the underwriting processor/merchant who says "Get your crap together or get lost".

PayPal is a slightly different animal IMO.

https://stripe.com/help/disputes
You can capture photons from the black body spectrum. You can't extract much energy, but you could get some.
Memory deduplication in Windows 8 [1] will lower RAM usage for VMs further.

[1]: http://arstechnica.com/information-technology/2012/10/better...
Yahoo Wenner Media Make Us Weekly, Rolling Stone Traffic, Content Deal
I don't even understand why there should be a way for them to remove his search results.

The search engine reports on what other sites say about people. They are not generating new content -- they consolidate results that are a map of reality. Silencing them, does not change the fact that the other sites have that content. Google is reporting true facts in its search engine: this site says X about Y. How is that not a true statement of fact? Truth should be (morally not legally) a defense here.

This is where libel laws in these ridiculous venues goes wrong.
There's nothing there to force a minimum font size.
Here's a simple fix:

You currently have the games as <home team> vs <away team>, it would be clearer if it were <away team> at <home team> (with the time zone indicated, preferably eastern time).
Honestly to the extent that's true, I think the 16:10 android tablet is the clear winner as video content matches one device much better than another. Landscape web browsing is probably best done in squarer ratios, but I'm not sure that's universally agreed (desktop computers, for example, spend their browsing existance at 16:9).

Again, this seems like splitting hairs to me -- trying to come up with something that makes the mini "special" and not just another 7" tablet. Why can't it be just another 7" tablet?
I have paid a lawyer to create a document from scratch that ended up worse than what I found for free online. So I highly recommend obiefernandez's approach of meeting your lawyer with a template in hand as a starting point.
How serious are you about keeping it private when it's on your servers? Do you have encryption at rest?
youtube and docs/drive down, too.
GOOGLE is down. Like, ALL of it.
Ask HN: Is Gmail and Google reader down for you?
Google Apps outage?
Is anybody else having errors while trying to access gmail and google apps? I'm failing on multiple domains on mobile, local wifi, and across the country through a VPN.
It is in doubt here. The truth Google is affirming is: "does a website say he's a criminal." The only report on what other sites say. I'm not sure how they aren't telling the truth when all of their generated content comes from some source.
Search is still working for me.
Stop Whining About Paying For Sponsored Posts on Facebook - They’re Awesome
Yea, its a bit scary when gmail goes down huh? Regular Gmail, google apps for your domain and youtube are down for me. Google search is not.
FWIW, Yahoo was down earlier today for a bit.
For gmail, I clicked on "Detailed Technical Info" and got "Numeric code: 5" ... didn't help much :-)
Even better yet, they should ban him from ever using google products.
Google works for me... Gmail still down.
I'm seeing issues too. Can't access gmail or youtube, and I can't sign out.
calendar as well
Here's the story you're referring to:
http://www.bodhitales.org/the-buddha-statue.php
Even google apps status dashboard is down (http://www.google.com/appsstatus). Where's status status page?
YouTube is down as well
http://www.downforeveryoneorjustme.com/google.com
"Show detailed technical info"

Oh, okay. Maybe this will explain something.

"Numeric Code: 5"

... that explains everything!
google fonts api was down for me... but wait... it seems to be back up. my gmail seems to be back now too
I first saw the term middlebrow in that thread, and I'm still not sure how i feel about the term, but "lowbrow" refers to completely non-intellectual things, and would not appeal at all to someone that values intellectual thinking. I hadn't heard the term until that comment thread, but apparently it has its own Wikipedia page, and has been around since 1925.
Google Voice down from here (Manhattan).
Reader & youtube are down, too. (Reader throws a 401, http://www.checkupdown.com/status/E401.html)
ha, I thought the same thing...then tried to Google it and only got results leading to google forums which are also down.
why are you accelerating the outage?
Correct. I was not careful enough with all the steps of my logic here.

Being able to encrypt the message proves that the party knows the secret, which if they are the only one who knows it, proves that they are who they say they are.

Indeed, the part about "which if they are the only one who knows it" is important. If you can't trust that, then security starts to break down.

You can sidestep it by instead trusting that they own a device that no one else has, like an one time password. Now, the statement gets a bit longer:

Being able to encrypt the message =>
the party knows the secret =>
(If you ask for multiple one, you can beter trust that)=>
they have the otp =>
they are the only one who has it =>
they are who they say they are.
Does this mean I get to take a nap?
Most times I value my time higher than my money and hence skip the research and enjoy my tea. And don't care one bit if there is a cheaper brand of tea out there that would be of higher quality.
More nuanced scope settings are definitely something we'd like to do. Put simply, we just haven't had a chance to get to it quite yet, but we're definitely hearing more requests for it and we want to honor those requests. We're working on it!
I just visited that status page, and all services are reported as green, as in "No Issues". Seems like their server failure detection system didn't quite detected the failures.
its working again.
up again.
Google apps gives a 502, along with a helpful:

"502. That’s an error.

The server encountered a temporary error and could not complete your request.

Please try again in 30 seconds. That’s all we know."
Exam due tomorrow. Not the time to be using google docs! :(
I think most sign languages started to take a turn for complexity when children started using them from when they were young,
Seems like anything that depends on personalization, including Apps for Domains, is down. I'm glad it fails in a way which lets google search keep working even if the login process is messed up, at least.
GMail working fine for me (UK)
I don't think anyone really expected the LHC to find supersymmetric particles by now.
Was it shorter than 5 minutes?
Gmail, Youtube, Drive, etc. are working in Oregon.
One of my app engine applications is down too.
Gmail and YouTube are working for me, but Google Drive is still dead.
https://play.google.com : Down

"We're sorry, there was an error. Please try again later."
Back up for me!
Aaaaaand gmail/youtube are back up!
Google account is down. So everything need login information does not work now.
This includes Google Voice, apparently. I can't send or receive texts or calls at the moment.
gmail is back up!
Possibly caching? Try a hard reset (if you dare!)
This is definitely true and demonstrates how competing design decisions can add huge complexity to a language. C++ made earlier design goals to allow heavily context-dependent overriding, which has side effects on what features it can add later.
Agree & it was down briefly
Yeah, except for search (so including reader, calendar, gmail, docs, ...) but it's already back up.
.... aaaannnddd it's back - what the heck happened?
For me everything is up, even Gmail.
Was having issues a couple minutes ago, everything seems to be back up in working order now.
And now Drive is back up. Essays saved!
The graph on lockshot shows 8.7m. I assume the author of the pcpro article just rounded up. I'm not saying the author should have rounded up, because she shouldn't have. Journalists should strive for accuracy in paraphrasing the words of their subject. I wouldn't necessarily call it inaccurate though, since it falls within what Harvey estimates as well. I'd rather call it slightly overzealous reporting.
How do you envision this system not placing undue burden on small inventors?

This proposed change would take the patent system, from something that is supposed to promote the progress of science, and turn it completely on it's head. Any small inventor that dared patent something worth-while would be forced to either turn a massive profit on it before tax season, sell it before tax season, or risk it being stolen with few substantial penalties.

Companies with deep pockets would have a field day taking advantage of inventors, they would ignore patents if the inventor declared it worth little for tax reasons. Or, if the inventor claimed the true value of the patent for taxes, they would buy out the inventor at cut-rate prices after taxes had ruined him.
A coach can be anyone. It depends on what you want this person to do for you.

To motivate you? Friends and family can do that.

To teach you a skill? Try connecting with someone through SkillShare.

To hold you accountable? Ask your colleagues and peers.

A couple of the suggestions above rely on getting feedback/advice from potentially biased sources. If you're serious about an actual coach, have you considered hiring a professional life or business coach?

Again, how are you looking to improve yourself?
I assume that he probably doesn't have to compile GHC all that often. He can probably just drive to the nearest place with free Wifi and download whatever he needs over a faster connection.
back up http://www.businessinsider.com/gmail-down-2012-10
Working fine here too (Swizerland). Is it only in the US ?
Microsoft CEO 'anxious' for reactions to Windows 8
I wouldn't advocate it as a rule of thumb but in my experience agencies end up producing things like http://boloco.com/ which if you started with Bootstrap you'll end up spending most of your time fighting against it.

As you pointed out, a CSS framework would certainly help but I'd argue in that case you might be better of starting with something else.
44 comments, 73 points all in 7 minutes - hot topic!
Works for me too. (I am from Hungary, maybe this matters?)
$ sudo service nginx restart

Configuration file /etc/nginx/nginx.conf test failed.

... shit.
I wonder if the next thing will be an email from Google saying "if you don't want us to turn off your Google again, send us $(calculated-amount-you-will-probably-pay). That $ value is pretty high, far higher than their current revenue from me (adblocking...).
I had to look more at the site to understand the context so here's my summary if it helps anyone. msabundle.com is the website of the poster and has 3 legal agreements. Obie says that he's a professional software developer and has written bestselling books on RoR.

I'm unfamiliar with Obie but would be cautious about buying legal documents from a non-lawyer. It's not clear who drew up these contracts or what jurisdiction they would apply to. $79 for a good MoU is potentially very good value so this could be great, but there's not enough info here for me.
Haha, I have been selling my boss on switching us over to google apps for around A YEAR.

We've been gradually moving accounts over over the last couple of weeks, and I finally walked into his office today and asked him if I could set up his phone and stuff on the new google apps.

"errr....surree, I don't know are you sure this thing works?"

"YES! It's freaking google! It's awesome!"

So I set up his outlook, and his phone...

and as soon as he went to open "exchange" on his iPhone...gmail bites it.

DAMNIT!!!

"I don't know about this google, thing, blhack..."
Google announced some changes to Gmail¹, so that wasn't as big a surprise. The other services being down... I dunno.

[¹]http://gmailblog.blogspot.ca/2012/10/introducing-new-compose...
Youtube is back up
Works from here
$ google-cluster run-parallel 'rm -rf /'
Shortest downtime ever?

I had just gone for coffee and looks like I missed it!
+1 if connected to one's Bitly account/vanity URL
One nice thing about the choice of 2560x1600 as a standard pick is, it to my knowledge is the largest resolution supported by DVI, and specifically DVI dual link at that. This might start pushing the market towards DisplayPort, which used to be limited to 2560x1600, but is allegedly being expanded upwards.

(DisplayPort is my favorite display connector to date, and I hope to see adoption grow)
Why you should have a social media strategy
Great job Saumil! If there was anyone that could pull off going from single founder to raising $5.1m, it's you.
But don't forget that for the few people you know there are another few thousands who use the same tactics and don't manage to make a dime.
Can anyone explain loop quantum gravity to lazy programmers with a simple, impractical Python or Haskell program computing a spectrum of amplitudes for spin networks? (Or whatever the theory actually gives you, which I'm not really clear on.) The closest I found poking around on Wikipedia was http://en.wikipedia.org/wiki/Spin_foam

(Maybe it is clear from http://en.wikipedia.org/wiki/Loop_quantum_gravity for someone who knows more math.)
Just added exit status to the page. Thanks for the suggestion.
Well, yes. I do remember when someone put a copy of an article on the pin board of the library of the local high energy physics lab titled "String Theory Draws Theorists Together" and someone added "String-" in front of the word "Theorists" with a red marker sometime in the early 90ies. So it wasn't without distractors then, too.
Facebook search for "Farmville" takes you to UPS
$ sudo nginx -t

If all is good:

$ sudo nginx -s reload

restart is nice, but I'd rather -t first!
I'm 100% back online
This does seem like a kickstarter waiting to happen. Open source laptop / netbook with an eink display, running Linux, perhaps with a modified distro with some tweaks based on the low refresh rate of eink (e.g. no animations, less drag and drop and more snapping).

On the down side, it probably only appeals to a select number of geeks, and probably not enough to make a kickstarter viable.
Then don't make it freely available. If your content is so valuable, paywall it.
>The date "2008" on the final page is some sort of typo: the arXiv time stamp on the first page makes the submission date clear.

The latex source (another reason to link the abstract and not PDF) just has a macro for "todays" date there -- perhaps arxiv recompiled the paper in 2008. (This is actually pretty common to see in papers on the arxiv.)
Oh, Twitter: Gmail down 5:46-5:49pm ET 10/31/12 #neverforget
A data centre with a really comprehensive disaster recovery plan.

Don't necessarily need 17 stories depending on internal layout.
> As long as Google remains a healthy giant company profits should not matter to anyone except Google and Apple investors. For everybody else this is great news.

You are forgetting Asus. I'm sure they care whether they make money.
Jeffrey Zeldman? Andy Clarke? Are they not respected enough?
Restraint by Ursula K. Le Guin
Yup. It absolutely boggles my mind every time I look up at the stars. Especially when I'm out in the country with no light pollution, and you can clearly make out the light streak signifying the plane of the Milky way through the sky.

> Just given the sheer scale of the universe, I think we almost have to be foolish to think that we're the only life forms that exist in the whole thing.

This is why I like the Drake equation [0]. Even if it is not perfect, it is inherently understandable by the lay person when we are discussing such matters.

[0] - https://en.wikipedia.org/wiki/Drake_equation
> Pointing out that this might not be true shouldn't offend you.

Speaking for myself, I'm offended by such comments not because they aren't true but because yes, they do offend my intellect and waste my time. We all know that Braintree and Github are not charities, let's talk about something interesting instead.
You are joking right? the first thing I did when I got a palm pilot when I was kid was look everywhere for hacks and apps to do stuff that it couldn't do out of the box.

If I were a kid today the first thing I would do is jailbreak my iPad, a process waaaaay easier than getting on the internet and finding apps for Palm before the age of filesharing.

Of course the difference being that I didn't lose the warranty on my Palm pilot for not using official software, but I would for jailbreaking my iPad.

Playing farmville all day does not a hacker make, but coding your own apps? tweaking the OS? that's a great start, too bad first you have to convince your parents of letting you void the warranty on a $500 device.

Good luck with that.
Up again. Was throwing Google-branded 502 errors for about 3-4 minutes.
I just switched a client over to Google Apps for Domains from a previous e-mail provider due to the downtime issues they were experiencing there. :'( Shoot me now.
Went down for me in the UK also.
Just about... Google Voice was giving me a generic 500 Internal Server Error page for a few minutes as well but it looks like it's back now.
I have read and enjoyed some of the other books already mentioned and would add:

* Paul R. Halmos's "I Want to Be a Mathematician... an automathography: http://www.amazon.com/Want-Be-Mathematician-Automathography-...

* Frederick Mosteller's "The Pleasures of Statistics: The Autobiography of Frederick Mosteller": http://www.amazon.com/Pleasures-Statistics-Autobiography-Fre...
Please answer the privacy/encryption question. Probably the most important piece of info if the usp for this is a "private journal app."