skysight-inc/HackerNews huggingface dataset:
As they looked further, the FBI agents came across a private Gmail account that used an alias name. On further investigation, the account turned out to be Petraeus's.

The FBI broke into the gmail account (or at least subpoenaed identifying information from google) before they knew whose it was. So no, it's not a non-story.
Awesome software videos from last week
INTERPOL was involved in taking the site down. That's definitely reason enough to verify it wasn't bugged before hopping back on their tracker, and it doesn't sound like there's evidence that things _weren't_ tampered with, either.

Sure, it's still speculative, but better safe than sorry. I take the default-deny approach for things that are likely to get me sued.
I got to see one of these in the wild yesterday - it's just beautiful. The door handles sit flush with the body... the charging port has an electromagnetic flip-open... the charger itself is beautiful... and it twirls lights around the charger handle until it's completely full, at which point it goes dark.

Beautiful, cool, wonderful 21st century engineering.
'Doomsday Preppers' stock up, expecting and preparing for the worst
Orca was no fail whale, says Romney’s digital director
Agreed. The only interesting thing about this case is what will happen to the agent in Tampa who made it his personal mission to sack a 4 star general and CIA director. It's already starting to take shape: http://online.wsj.com/article/SB1000142412788732443980457811...
One of the landing-page feature boxes mentions that it's driven by hotkeys.
I think call blocking like that was even introduced in Android quite a while back, was it not?
The basic need for support and bug tracking is a hard problem to solve, because users are stupid. If apple puts a bug tracker on the app store, any moderately popular app is going to end up with a huge mess of 'durrr... it doens't work' and 'hey developer your a fukhead' type comments. Even in the open source world, where the user base is generally more competent and savvy, the bug tracker is never front and centre on any of their websites - you've got to go looking for it and create an account, and most of the big projects still have a problem with useless bug reports.

Bug reports from the general public are simply not of any value. And building a support forum into the app store creates an expectation of support, which for most $1 apps is an unrealistic expectation. The developer has a facility to communicate with the users: the release notes on updates. The users shouldn't get a facility to communicate with the developer, unless the developer wishes to provide that facility outside the app store.
Does this work with git-flow already? I wouldn't switch away from an existing git based workflow for this but I'll consider it for future projects.
So what if the Teslas are built in the US? How does that change anything? What if they were built in Canada, like a lot of GM cars are these days? Or Japan?
John McAfee talks about murder charges
You would be able to find their wallet address, but good practice is to use a different wallet address for each person you send payments to. The blockchain doesn't keep track of IP addresses to preserve anonymity.
This is a really bad article. I would call it nothing less than fear-mongering. Let's say they decided to encrypt the file. They would have to store that key in plain-text somewhere. Of course, they could encrypt that, but then that key would have to be stored somewhere.

No matter how they decided to store the password, if somebody has root access to the device, they can find a way to read it. If they can't find a way, the phone won't either, so it won't be able to log you in.

The only answer is to not let your device store your password. Choose security or convenience, but don't expect both.

(This is no different than Pidgin storing your passwords in plaintext[1] with the exact same reasons and consequences.)

1. https://developer.pidgin.im/wiki/PlainTextPasswords
Yes, any algorithm that halves the set of potential solutions in each iteration will work, but I do not see how one can get such an iteration step from "a decider that can answer "is there an answer less than X?". If suspect (but cannot prove or even have reasonably solid arguments) that the "figure out what number excludes half of the remaining solutions" step will be at least as hard as the problem itself.

Now, if I had such an oracle, I would let it loose on all graphs equal to the target graph with one edge removed. I think (but cannot prove (yet?)) that that is a way to prove, for each edge, whether it is by necessity part of the shortest tour. I also supect that, for most graphs, the set of remaining "might be in the shortest tour" will be so small that an exhaustive search will be easy.
Not a fan of below-the-fold videos autoplaying.
This is a trend lately. The hip new restaurants are all echo chambers. They don't have any sound absorbing features at all.
https://support.twitter.com/articles/142101-what-are-promote...
If you don't have something like a lock code it is pointless because then you have nothing to lock the encryption with.

The iphone works with its lock code.
The article speaks generally about when the FBI can access email. It doesn't have a source which says exactly which approach was used in this case. They may have used any of the methods mentioned -- prosecutor subpoena, judge, or even Petraeus' prior or current written authorization -- depending on the exact timing of when its contents were examined.
Is possible to use this for build a language? (I wanna to create my own language, but hope for something easier than LLVM, java, do it from zero in C)
While I agree I believe this comment by _delirium sums this up rather well,

http://news.ycombinator.com/item?id=1486502

full comment thread here http://news.ycombinator.com/item?id=1486158
MT mostly writes for a US crowd right? It's great story for whoever figures it out, but it definitely scratches many Americans' itches with the US "still being innovative and 'making real stuff'".
This is not what's under debate here.

Without device encryption, encryption of the passwords is useless, given root access, since the key is somewhere on the device as well. If anything, the only crime here is not using access tokens but storing the whole password.

With device encryption, the situation changes slightly. Unlike iDevices, most (all?) Android phones don't come with a hardware encryption chip, so, given a vulnerable bootloader, full-device encryption doesn't do much in the way of security. Under a secure bootloader, device encryption should be secure as well.
>A PDF file is just words and pictures on a page

>They don't include animations, they don't accept user input, they don't connect to servers and stream files and send updates

A PDF file is much more than just words and pictures. There are forms which accept user input, weird embedded content, and other strange things. Although I am not familiar with the spec, I have seen the features that Adobe Acrobat lets you do with PDFs and it seems pretty monstrous.

To clarify, there are several security issues that arise from all of this [0], and as others on this page have pointed out, that is a good reason to make use of the existing infrastructure around browser sandboxing.

[0] - http://duckduckgo.com/?q=adobe+pdf+vulnerabilities
Yeah I agree it's a very interesting piece of software.

But do you understand the prequisites -- namely processor microarchitecture? I know that's why I don't understand it. I imagine if I did it might not be that hard to understand.

Most people's knowledge of the stack stops somewhere around C. C hasn't changed for 40 years. It's a portable assembly language, i.e. the common mental model is that each construct in C is a handful of assembly instructions on any processor. But to get LuaJIT-type performance you have to understand exactly how the CPU works, i.e. pipelining and reordering, internal caching algorithms, internal branch prediction algorithms, and maybe to some extent multicore, although I guess LuaJIT is single-threaded like Lua.

Mike Pall's mental model is for sure not C (since a lot of it isn't even written in C), but the lower level CPU architecture. And that has changed a lot in the last 10 years. I think even if you coded a lot of assembly language in the 80's it wouldn't necessarily translate to working on something like LuaJIT. My impression from skimming some online posts is that he has read hundreds of pages of Intel/ARM reference documentation from cover to cover, for multiple CPUs. I think there are a limited number of people with the patience to do that, since it's non-portable and changes relatively quickly.

Another problem is I think that the open source tools that are available don't work at the right level. Like when you are running profilers, they are helping you profile assembly code generated by a C compiler. The performance characteristics he's taking advantage of are at a lower level. I think you need CPU-specific performance counters and so forth, and there's a different way of getting those for each make/model. Are there even open source tools that allow you to get this information? I'd appreciate a pointer.

It's just a different level of abstraction than most programmers are working with. Not that many people are even writing "low level" C these days, e.g. something like redis. A lot of "application level" C code you see these days is old and/or not particularly fast.

I would be interested if anyone has any pointers for this style of code other than "read a bunch of CPU manuals". :)
Americans aren't in much position to complain about free speech in Britain. The US government just imprisoned a man for his connection with a video deemed "offensive" by that government -- if there was any criticism by anyone but a few right-wing cranks I missed it.

The man's nominal offense was a parole violation. Whether the government's pursuit of the violation, or the sentence given, were typical for such violations is beyond my expertise.

However the government went out of its way to see to it that his arrest (pardon, "brought in for questioning") was known to and photographed by the press. This was an obvious effort to communicate to elements abroad the distate of the government for the video. Maybe he had to prosecuted on the parole violation -- if so, that could and should have been done much more quietly.

No one seems to regard this particularly important, which I find very strange. One, anyone in the US who might want to say something "offensive" now has cause to wonder what opportunities they present to discretionary prosecution.

Two, and more important, the US government has just validated censorious behaviors of a great many governments. How exactly are we going to complain to the Chinese or Egyptian government for jailing dissenters when we have made a point of doing just that? Worse, we've just told all those dissenters that they cannot be sure that we will be supporting them if they get into trouble.

I don't really much care that his offense was nominally related to an international incident, or that he said means things about someone else's religion. The whole point of ignoring such problems is to deny the government _any_ excuse for censorship. Because once a government gets in the habit, it becomes quite easy to find excuses for the censorships it finds in its interests.

This was a shameful episode for Americans. Joined to a cultural squishiness on speech "offensive" to one religion in particular, it is disturbing. Join it with a few more episodes of government action and the lot will begin to become dangerous.
This is developer sloppiness. Google provides plenty of methods to authenticate users without persisting user credentials to disk. There's no reason an application would need to store your Google login to disk, unencrypted or otherwise.
> Basically, no matter what the developer and Apple do, people will always use reviews as a place to submit vague bugs.

Easy fix then: a small checkbox on review page "this is a technical problem", which will forward review and contact details for the reviewer to an arbitrary developer bugsystem.
Forgive me if this is pointless cynicism but fountain of creative ideas?

* A music player

* A phone

* A portable computer

Not exactly the most innovative product categories?
This was also the exact time of all the Google Panda tweaks and the fallout from Google starting to penalize creative commons scrapers of Stack Overflow content. There were a lot of balls in the air and only a few of them were ours, so we wanted to be careful.

When Google is 90% of your traffic, you REALLY REALLY REALLY do not want to get on their bad side, even accidentally, so I can hope you understand why we wanted to be cautious to the extreme here. If Google decides you're not doing things right, it is literally a business ending move.

Unless your VCs and investors are cool with you losing, y'know, ninety percent of your traffic.
They have their own aluminum alloy made specifically for the phone. Custom plastics, dyes, colors, etc. They've got enough scale/buyer power to optimize to the n-th.

Not to mention that the A-series processor is Apple only, they get early access to the best screens, etc.
That "on further investigation" could mean many things other than your presumptive interpretation that they accessed the account before they knew it was associated with Petraeus.

For example, they could have suspected it was his, and then asked him for confirmation and access. At that point, he would have had to yield, due to his role, his prior agreements, and the situation (including the inevitability of access).
Bootlegging is an unnatural term, and has a historically negative connotation. The definition mentions secrecy and unauthorized projects, yet a few paragraphs later awkwardly adds a permitted form.
The Model S has also won Automobile car of the year (http://www.automobilemag.com/features/awards/1301_2013_autom...)

and the Yahoo car of the year (http://autos.yahoo.com/blogs/motoramic/tesla-model-2013-yaho...)
Hope Jeremy Clarkson changes his mind on Tesla.
This is a legitimate award, much more so than the previous HN post award.

Ugh, I wish Model S vs. Model X weren't such a hard choice. An AWD Model S would be perfect (I'll give up the Frunk, it's too small to hold anything I care about).
And Apple could provide a mechanism to send a message to the user (without disclosing their personal details).
Different carriers have different support for Google Voice. Sprint has native Google Voice integration where your GV number is your carrier number.

On other carriers the integration isn't as tight, but the experience is still superior to the iPhone Google Voice experience in that Google Voice on Android integrates with the standard phone dialer so you just make outgoing calls like you normally would using the standard dialer (or any other app which invokes the standard dialer) and they go through Google Voice.
The most disturbing bit from the article:

"Under the 1986 Electronic Communications Privacy Act, federal authorities need only a subpoena approved by a federal prosecutor - not a judge - to obtain electronic messages that are six months old or older."
Join the first Spy Week by Lifehacker
The first Spy Week starts today @Lifehacker with a bunch of interesting stories about topics related to the spy world. During the next days we will have the opportunity to improve our knowledge on different fields as e.g. sharing sensitive information over the internet or taking photographs without being noticed by other people. Moreover Lifehacker will publish some interviews with experts who share some tips and answer to every related question from the readers. For example, now, Steven Santarpia from ICORP Investigation is online and interacting with lifehackers. This week, be sure not to miss any topics about spying (+ hacking + social engineering) and visit the dedicated section into the Lifehacker website!
Yes but there are other ways to mitigate the risks somewhat. Temporary revokable tokens would at least mean an attacker doesn't gain a permanent foothold, and never discovers the password.
Isn't that why we call it an opinion? :)
Fonts that are not native always seem to have issues for me on Windows if they are not big enough.

The best option is usually to use a native font like Calibri or some of the many other fonts that windows comes with or increase the size of the font quite a bit.

The font your using looks kind of bad to me on my linux box because it seems more geared towards headings and larger font sizes because of how condensed it is.

You may want to consider one of the more used but good looking fonts like PT Sans or Open Sans
Three simple steps to better sleep
> Americans aren't in much position to complain about free speech in Britain.

The author appears to be British. So what does this have to do with anything?
Having a tight product line does not beget that Apple has "few ideas". We're talking about an organization known for its public and even internal secrecy in development process. We never see most of the ideas, but that doesn't mean they don't exist.
PBKDF2, it works for deriving keys to decrypt other things.
Not to mention they use forging instead of casting for the aluminum bodies, and have their own white paint formula (most manufacturers don't even bother trying to make white devices). Plastic was still the norm for PCs until the "Ultrabook" wave came along.
Downloaded it. Ran it. Entered my github credentials... and the login button is disabled.

hm.
He doesn't seem to address the fact that he's being accused of murder. Looks like there is an extradition treaty between Belize and the US as of 2007 [1], but it looks like Belize tends to prefer deportation [2].

Is anyone clear on whether the raid on his house happened in Belize, or how he got back there between the alleged murder time and now?

[1] http://www.oas.org/juridico/mla/en/traites/en_traites-ext-us...

[2] http://www.usnews.com/usnews/news/articles/050815/15belize_3...
While I'm mostly for the name-and-shame approach to lazy security practices, these "x stores passwords in plaintext" have become just as lazy. It's just an excuse for developers to feel better about themselves because they know about hashing passwords. Case in point, this article suggests Samsung should hash the passwords, which wouldn't work here. I suppose it does good to bring Samsung's oversight to light, but the reader gets nothing from the article.
> They would have to store that key in plain-text somewhere.

Is this really true? Could not the device manufacturer store embed the key in silicon somehow, perhaps in EEPROM or similar?
Oxford American Dictionary Word Of The Year 2012: GIF
It isn't. Storing passwords on a mobile device, unencrypted or encrypted, is just wrong.

Fortunately authenticating with Google services requires neither.
Decisions seem to be based on public pressure or context. The man posting the picture of poppy's burning was arrested because it was Remembrance Day. Because of common law these cases are each setting precedence. Although many may believe it wouldn't go farther than this. There's nothing stopping judges ruling that publicly disagreeing with a political party or common held belief is a form of defamation.

If people rally around a case the police and courts are forced to react with harsh sentencing. Morally these people are in the wrong but a moral justification is different to a legal one.

Paul Chambers was found guilty for sending menacing electronic communication. He tweeted that he would blow up Robin Hood Airport when it closed after heavy snow. I've seen worse sarcastic tweets than this in my stream before, after the listed cases these tweets could result in legal action.
Australia's biggest telco sells routers with hardcoded passwords
It's pretty simple. Assuming you know regex... Im going to assume you don't since you are asking.

The bracket expression [ ] defines single characters to match, however you can have more then 1 character inside which all will match.

[a] matches a
[ab] matches either a or b
[abc] matches either a or b or c
[a-c] matches either a or b or c.

The - allows us to define the range. You can just as easily use [abc] but for long sequences such as [a-z] consider it short hand.

In this case [ -~] it means every character between <space> and <tilde>, which just happens to be all the ASCII printable characters (see chart in the article). The only bit you need to keep in mind is that <space> is a character as well, and hence you can match on it.

You could rewrite the regex like so (note I haven't escaped or anything in this so its probably not valid)

[ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~]

but that's not quite as clever or neat.
While I'm a massive fan of what Tesla is achieving with their cars, and I lust after the Model S, the giant touchscreen in the Model S gives me pause.

Is it really such a good idea to have a glowing screen dominating the interior at night? To say nothing of the opportunities for distracted drivers trying to navigate a button-free interface that can't be operated without taking your eyes off the road to look at the items you're pressing, or the opportunity for modal errors that abound in systems like this.

Echoes of the disastrous usability in the BMW i-Drive system are ringing in my ears. I hope Tesla has learned from the mistakes of others. I'd very much like to see an independent UX evaluation of the Tesla's driver controls.
My thought exactly, and that was the crime I was hoping they'd nail him for.
From what I can gather it's some kind of dodgy Shareware thing. Although I can only guess since they really have made little effort to make it any more clear.

Neither the "purchase" site [1] nor anything inside the app itself [2] clearly explains the terms of the free download, or why one should even consider purchasing a licence.

I understand this is a fresh product and everything but it's expected one makes an effort to make these terms far clearer before asking for people's money.

Is this a simply a case of neglect or an example of a dark pattern [3] in the wild?

[1] http://wingmanapp.com/purchase

[2] http://i.imgur.com/aD5g8.png

[3] http://wiki.darkpatterns.org
These are beautiful. I saw a Fisker Karma EVer in the wild today. These companies are doing such impressive design work on EVs. Why is there such a big gap between these works of art and the Volt? Surely there's a market for a 40-50k electric vehicle with good lines.
Let's wait with the hanging until the verdict is in.

"John McAfee, who founded the antivirus software giant named after him, is wanted for questioning by police in Belize who are investigating the murder of a 52-year-old man, CBS reported today.

According to the report, police are searching for the killer of Gregory Viant Faull, an American expat. Gizmodo reported earlier today that McAfee was wanted for the crime, but CBS, quoting Rafael Martinez, spokesman for the Belize National Security Ministry, said it would be incorrect to call McAfee a suspect at this time. "

From: http://news.cnet.com/8301-1009_3-57548458-83/antivirus-pione...

There is plenty of smoke here, even a smoking gun but it would be premature to conclude McAfee handled the gun and if he did that it was murder.
It has to do with any Americans who might be reading or commenting on this topic, on this board. I expect there are enough such to merit noting events in their own country.

That is so obvious I have to wonder why you are looking for arguments against even mentioning the matter.
Do you remember what phones were like six years ago?
www.mebeam.com/chat_team
Sandy's Aftermath: "Disaster Tourists" Add Insult to Injury
Apple 2? Macintosh? Powerbook? Newton?

Didn't that laser printer and the Apple software that became Adobe pretty much create "desktop publishing"?

I've heard a few people talk about hypercard being neat at the time.

Yeah, they did some stuff lately, whatever. But you really have no appreciation for how cool woz's disk drive was? That was pretty amazing.
Steven Sinofsky to Leave Microsoft