skysight-inc/HackerNews huggingface dataset:
This is unbelievable. A quote:

> Every one is completely random (maximum entropy) without any pattern, and the cryptographically-strong pseudo random number generator we use guarantees that no similar strings will ever be produced again.

It's a bit early in your page's text to be lying, especially to a technically astute readership.

First, there is no such thing as a "cryptographically-strong pseudo random number generator". It's a pseudorandom number generator, and the probability that it will produce the exact same password on the next invocation is the inverse of the word's bit length. That means "no similar strings will ever be produced again" is an outright lie.

Second, the more results it produces, the more likely that there will be repetitions of prior results. For the reason, read about the birthday problem:

http://en.wikipedia.org/wiki/Birthday_problem

> Every one is completely random (maximum entropy) without any pattern ...

False, which is the meaning behind "pseudorandom". In fact, the exact same sequence of passwords will be produced by the same algorithm using the same initial seed, over and over again. All a hacker needs to do is find out which of the common pseudorandom number generators is in use, provide the same initial seed, and he has all the provided passwords, arranged in order.

Finally, the two claims --

1. ... no similar strings will ever be produced again ...

2. ... cryptographically-strong pseudo random number generator ...

-- represent an obvious contradiction. If the generator produces a high-quality pseudorandom sequence, then ipso facto it must be able to produce the exact same results again. This is a requirement of the provided definition.

Moral -- don't let uneducated salespeople write your technical descriptions.
I filter all my addresses to Gmail on my iPhone 5 and it is amazing. I can send from any address as well, which is nice b/c I have about 10 different ones for various businesses. It works well and is easy for me. The Gmail app is essential in my opinion.
ever heard of _NSAKEY or 'stellar wind'?
There's also a proposal to have crypto added as a native API.

http://www.w3.org/TR/WebCryptoAPI/
Let's rephrase it - who talks about it now? The problem still persists, if not even getting worse.
I don't think I agree with 6ren's analysis, but I think that the fact that it is "not clear that the underlying CPU architecture really matters anymore" means that the game has shifted for Intel.

It seems to me that Intel has traditionally benefited from the fact that CPU architecture has mattered (in x86's favor). The mere fact that x86 is no longer the only sensible choice, while obviously not a doom prophecy for Intel, isn't really an argument for Intel's continued relevance.
a recent Chinese paper (its author is the creator of GFW) suggests that the GFW is capable of using SVM to filter SSH tunnel traffic, at the success rate of 95%, without affecting normal SA use.

http://www.solidot.org/story?sid=32532
That sounds plausible. I've heard the US do the same thing, making unpopular changes domestically by pursuing them through foreign policies, then bringing the US "world standard."
Hey, that's awesome, how can I get in touch in you?
Show HN: Application to deploy from a GitHub repo to AWS
Hello Folks,
We have just released CloudMunch Developer Edition. This is an application to deploy your application from a GitHub repo to AWS. We would appreciate your thoughts and feedback on the application. Thank you.

Links: http://www.cloudmunch.com/developers
Better to say "between you, me, and the internet".

Remember that email is typically transmitted between servers in the clear, so it's trivially easy for your messages to be observed by arbitrary third parties.
Yeah, the design isn't bad at all.... the OP set expectations pretty low :)
Though the better you get at organizing your code, the less you need to push your working memory. In the first decade of my coding life, it took me a while to 'warm up' and 'cool down', distractions were extremely irritating. In the second decade I started to find it easier to jump in and out of the coding state, by maintaining a more focused problem-space.
That's awesome, thanks for sharing. I'll send it to my friends.
I had a similar thing a few years ago. I asked my boss to get it clarified, which they did. However, he told me that the lawyers laughed and said I was doing myself a disservice, as the original agreement was so loose that it would have never been enforceable.
The news cycle moves far too quickly to continually revisit the same topic over and over again (with a few obvious exceptions...), moreso when it's a topic that will not be understood, let alone appreciated by the average consumer.

A conference where people talk about deploying packet shaping gear is not newsworthy outside of a very niche circle. Yet.
Thanks so much for this! I watched this back when ludum dare was happening, but after he moved his streaming channel to twitch.tv this part of the stream was lost.
I am not a fan either, but I have no room to complain. I saw that Finding Memo was available through iTunes and I bought it immediately for fear of it being vaulted.

This is the third time I have purchased that film.
There's a nice article here:

http://www.matasano.com/articles/javascript-cryptography/

that explains some of the issues with JavaScript-based cryptosystems.
So kudos to RT for paying attention to it, when others aren't. Since it persists - it's worth a remainder once in a while.
How? By hiring all the mathematicians in the world. I don't see how the size of the company would matter. Also, they are US-based, and have to comply with US cryptography laws. But even if their SSL was unbreakable, the NSA/FBI/etc must have a free pass to Google/Facebook/etc data.
Films 2012 : quelles sont les stars qui ont marqué le cinéma cette année?   
Voici un petit bilan des stars qui ont marqué l’univers du cinéma en 2012. La plupart ont notamment été récompensés pour des films, tel que Dujardin.
Cool, he is using my lib jDataView to read binary data in Javascript.

https://github.com/vjeux/jDataView
Yeah, for some of the models (I think loafers and more casual shoes?) the leather uppers are hand-stiched in the Dominican Republic, ostensibly because they can't find people to do the job in Maine where they used to do it. Most of their shoes are completely made in the USA, though, and I hope it stays that way. Otherwise I might have to switch to buying Aldens...
PG, I'm glad to see you're at least willing to engage in the discussion.

The main point was not what end-point you're aiming (large exits, which btw, are yet to be realized for either airbnb or dropbox) or merely progressively higher valuations in further rounds of funding (let's not argue over how those are beneficial to earlier investors, shall we.)

The point was that hordes of fresh graduates are working their asses off for peanuts with minuscule probability of making up for lost time and income. (That's not even including possible losses to health and any conception of what the real world looks like). Mass incubators like yc and it's ilk are rolling the dice and the invested amounts are so tiny that the only substantial losses are those incurred by the founders.

The counter-argument of course is that the founders are adults and are entering into these agreements of their own volition. That's where the whole issue of cult-like mentality and the callow youth of most of these founders comes into play. The asymmetry in knowledge and power between these founders and investors is vast.

That's why I cheer the writer of the original post for bringing the ridiculousness of the whole situation into the open. Lord knows techcrunch and other tabloids like it are not going to publish anything like that. And that's why you personally applying the kill switch on that post is so distasteful.
I don't follow this "I work for Heroku" stuff. He works for Salesforce, which Heroku is a part of, no?
Submitted my Twelephone HTML5 WebRTC project to AWS Startup Challenge
ECHELON is ancient; the only differences between that and this is are i) the lack of other nations and ii) the US directly spying on its citizens.

While it's not acceptable it surely can't be surprising? Especially seeing the other attacks on liberties happening every day.

Having said that, other people mention a bunch of problems with the article. Warrants provide easy legal access; connections are encrypted (and it'd be scary if that encryption was broken); the reliability of Russia Today; etc.
Depending on how big/bulky the case is, I can actually see this being useful for some people.
Thanks. For those like me who had not.
http://en.m.wikipedia.org/wiki/NSAKEY#section_2
The Disney catalog is such a big deal that even without the 2016 new releases, this would be newsworthy.
So, really, just like all the other long-tail internet market segments?
I work at Heroku. Some people have taken several months off, personally I haven't (yet). After seeing how passionate they are at work, I totally trust all of them. Sometimes to rest, sometimes to get a better perspective, if they take that time off it's because they certainly feel they need it.
i don't know about that. i often get html-emails from companies which don't fit the screen. sometimes i can align it by adjusting to the left... shouldn't have to.
What's new about this? You've been able to make and share public links for awhile, right?

Is it just this part: "Beautiful online viewing
When you create a link, your photos, videos, and even documents are displayed in a gorgeous full-browser view. Your friends and family can simply follow your links to view photos and instantly watch home videos online. Even your presentations look great without anyone having to download and open them separately."
Basically all of iOS has the tiny-text problem (on iPhone, at least) - both Safari and Chrome have zoom that doesn't reflow text, so you either have to read something tiny or frantically scroll left and right to read each line. It gives me a headache, and this is the first thing that's made me think about switching back to Android.
It's not just about happiness, but also productivity, diversity of thought, ideas and working styles, having a well-rounded team, and all that jazz. Though I'm sure happiness comes into it, too.

I'm female, and half the reason I'm tempted to apply is the scholarship. I find that a little disquieting, and I can't quite put my finger on why. Unfortunately, the scholarship is not enough for me to give up my (non-programming, but in technology) day job and move across the country, so it's something of a moot point. I'd love to do Hacker School, it's definitely a direction I'd really benefit from growing in, but the sort of person to whom the scholarship makes a substantial difference in applying... let's just say not every woman falls into that category.
what you do now:

uglify source.js > dest.tmp.js
echo "/* Copyright blah blah" > copyright.js
cat copyright.js dest.tmp.js > dest.js
rm copyright.js dest.tmp.js

what you should do:

echo "/* Copyright blah blah" > dest.js
uglify source.js >> dest.js
In addition to probably millions of pieces of cyberpunk/science fiction, there was a crack in Gilmore Girls about victims not caring if you take away their freedom slowly and without them noticing at first.
For what it is worth, I have changed my mind on things based on conversations among strangers, especially here on HN.

Not that I am encouraging you to start raging, or anything.
Sounds like an awful amount work to bypass kernel caching and swapping to revert back to how things are without the virtual memory abstraction.

I'd just start as the author described. Then, if and when I know that I know better than the kernel, I might implement some sort of userspace caching instead, proven that it won't hamper overall performance. I might just mlock critical btree nodes or indexes and still leave data blobs or less frequently used structures under vmem.

Virtual memory is one of the things that surprisingly just works and does that without many drawbacks. I don't see the point of rejecting its offering straight off the bat.
6 = attempt to build something good on it?
Contact your local police department. They should ask you some questions, and evaluate whether it is something they can act on. If you are concerned enough to ask on here, you probably have reason to ask for help.

Good luck, and don't ignore your gut feelings.
"I don’t think they are filtering it. They are just storing it"

How much would it actually cost to store all the emails that American citizens send and receive? I find it difficult to visualise a system of checks and balances approving the massive budget required to house all that data. And the technical challenge of sifting through those emails would be seriously hard. I understand that this might not be just about national security, but it could also be a power game on the part of the FBI. One has to consider how much [national security | power] this really affords [US citizens | the FBI] when measured against the gargantuan expenditure required to actually pull it off. This makes me totally skeptical. Additionally, by saying 'basically the e-mails of virtually everybody in the country' Binney demonstrates his lack of conviction and uncertainty of his own claims.

So, if his words aren't the giveaway, then two minutes of critical thinking will make the interview seem alarmist and inaccurate.
$13.50 isn't poverty level. At 40 hours a week, 50 weeks a year, it works out to $27,000/year, which is just about the median individual income nationwide.

This yields an after-tax net of $1,750 per month. You can rent a 2 BR apartment in Louisville for $450 per month. The $1,300 left over is enough to live quite comfortably in Louisville--heck I don't spend much more than that in New York City (the difference is I pay $1,500/month on a studio).
> given enough cause to obtain warrants

The FBI accessed all of Broadwell's IP address info and email accounts with nothing more than subpoena's.

I believe they are storing this information, they just don't have the technology yet that can sort it and allow access to it. So the Petreus emails are probably being stored at the NSA as well, it was just easier for the FBI to get them from Google.
Petraeus' case is not about surveillance, but it was driven by the "warrantless access to anything over 6mos old" powers of the FBI.
Show HN: HTML5 Flash Warning Fix for YouTube
It looks awesome, but...

Why oh why would you go public on this before the app is available in the store? I looked at this thing and said "I want it." Will I remember to look again once it is available?
I have no specific knowledge of these negotiations, but you have to look deeper to see who suggested what.

You might find that (e.g.) AT&T (pipes) or Comcast (pipes) or Cisco (hardware) lobbied with a lot of countries and US government bodies to make this happen. Depending on the outcome, they might have a lot to gain; and doing it this way, they appear a helpless victim, just "taking orders from the UN", when in fact it was their initiative.

E.g. ACTA (and its son, the TPP) are pushed hard by Hollywood - but are mostly presented to the congress and the public as "this is an international treaty we must follow"

Poltiics and diplomacy make sure that real reasons are almost never reflected in newspaper headlines.
Netflix Log4J Optimizations Yield Logging at Massive Scale
Note: these arguments only apply to JavaScript in a browser (and at that point, apply to virtually any client-side system attempting to somehow protect information from being snooped on by the server that dynamically provides the code to execute on the client <- an idea that should have been preposterous from the start ;P).
Oh joy.

“these days so small that girls get disappointed if think they got hold of something else than the MP3 player you had in your pocket.”

An otherwise interesting article.
I dunno about that - I really wanted to like Sparrow for iOS (aside from a couple bugs dealing with insane volumes of email, I love it on the desktop) but it never felt quite right to me.

I've actually just now reinstalled it to check what bothered me so much, and it's the same issue I have with the new Gmail app: swipe-to-archive simply isn't there. Frequency of me archiving messages: extremely high. Frequency of changing between different folders: nearly zero. Yet the left-to-right swipe which gives you the "delete" button in Mail brings that weird Facebook-esque hierarchical navbar that's become so prevalent in the last couple years.

Swiping the other direction exposes five options, two of which (I assume "archive" and "delete") have rather ambiguous icons. Mental energy - do not like (see also: new Gmail web UI).

When viewing an individual message, it's two taps to do all of the stuff that takes one in Mail. The designers traded always-visible icons for extra message real estate; clearly a matter of personal preference, but the wrong one for me.

Just goes to show how oddly personal the email experience can be, especially when you consider everyone's various workflows.
Must? Why? What evidence do we have to prove this, or even substantiate it?
As long as they have it they can wait until they have a reason to narrow things down. Pick a target, winnow their data. Reverse investigation.
> a system of checks and balances approving the massive budget

NSA budgets aren't approved by the entire house, but by secret meetings of the intelligence sub-committee.

This datacenter is definitely being built. It is so well known that Wired did a cover story on it:

http://www.wired.com/threatlevel/2012/03/ff_nsadatacenter/
936 Months is really good. It sounds trite but this really does put things in perspective.
Try it in conversation:

"US Rulers have recently made file sharing a crime carrying the death penalty" vs. "US Dictators have recently made file sharing a crime carrying the death penalty". I think Rulers sounds better (but I think "dictators" is still preferable to "leaders")
getting caught poking around in someone's personal data is a great way to get fired ;)
HAProxy isn't a cache. Its not a good comparison.
The problem is, "want" is an ambiguous word. I want to learn calculus, I don't want to do all the homework required. Which "want" should I follow? I think people who say "only do things you want to do" mean the top-level kind, or some "total want" function that searches the whole treButkusbut that's a rather difficult function to "compute", even just to find the sign.

Like lots of hard problems in real life, it's basically one of predicting the future: which option will result in more happiness later?
Not sure how this relates. Article/interviewee is stipulating that the NSA intercepts all communications at the telecom level (as far as I understand). It doesn't say how this device also magically breaks encryption on encrypted data.

I guess you are saying that Google willingly allows the NSA to decrypt the data? What would Google have to gain there? Because they certainly have a lot to lose.
i'd be interested in taking em and building some kind of open/transparent/legal something on top of it..
Should be very useful. AbeBooks (http://www.abebooks.com/) also offers cheaper alternatives.
> It doesn't really matter, except that if they got a Software Engineering degree from a university that offers both, they're probably a soulless cretin.

Or you know they could have done a EE degree and decided after they had done enough courses that EE was not their thing and they would probably do Software Engineering so as to graduate with some degree that made use of the requirements that they had already completed and was at least related to what they wanted to do in real life.
It mentions @media queries working in the iOS Mail app, but as best as I've been able to decipher, they're still fairly broken (whereas Android's Mail app and K-9 aren't).

Specifically, it always reports that the mail is in landscape mode (even in the default portrait) and doesn't set max-width to a larger value when in landscape mode, making it (again, as far as I've been able to figure out) impossible to create different HTML mail layouts for landscape and portrait modes.
While we're forgetting this was going to exist one day, why not get some of the cool models from cubeecraft right now?

http://www.cubeecraft.com/

(Not mine. But I've created my own. If you want Illustrator templates send me an email: rick@measham.id.au)
Yes, that's a good point. Some jobs have intrinsic requirements for which no reasonable adjustment can be made, and thus legal discrimination happens.
Use the Source Luke:
https://github.com/niftylettuce/youtube-html5-flash-warning-...
New 25 GPU Monster Devours Passwords In Seconds
I think the key question is where will the consumers go? Android is more open than iOS, but devs continue to build for iOS first b/c that's where all the users are at, especially the paying users.

I only know a little bit about the Firefox OS project, but if you give control to the OEMs, won't you run into the same problem that Android has with fragmentation?

On one hand, I don't want to be naive. Everything on the desktop has moved into the browser. That happened a lot faster than I though. Everything in mobile is moving 2x the speed of desktop, so will everything move onto a browser in mobile eventually too? The key difference between the desktop and mobile is that there isn't hardware ubiquity. Every computer has a keyboard and a mouse. But the hardware buttons aren't standardized across Apple and Android. The home button is crucial on the iPhone and same with Android. Would either of those platforms ever cede control over that button to a browser? Otherwise, you've got to put that functionality on the screen which takes up space.
I use SwiftKey on Android which comes with a Colemak layout.
The Defcon video is similar:
http://www.youtube.com/watch?v=sqIz-RNUL1g (not sure if this link is bootleg)
https://www.defcon.org/html/links/dc-archives/dc-20-archive.... (just the audio)

has the ACLU and the same guy if that makes it more legit.

The 10 zetabyte storage capacity estimate is based on building size. I think we need more details.
Doesn't apply here, Go is largely as flexible, generic and versatile as C, minus a few restrictions and plus a few (awesome) additions. And the CGO interface lets you bind C libs as needed.

I write OpenGL apps in Go. Surely this is in no way characteristic of Google's internal use-cases.

Today's machines are multi-core and are not as bare-bones as to require manually carefully coded malloc/free calls. That's what's changed since C and that's what Go is (very well) designed for. Then a few syntactic goodies that don't imply performance side-effects or any black magic but that C didn't have: duck typing, struct composition, interfaces, all that.
MurmurHash isn't secure and isn't intended to be. The algorithm is intended for fast non-cryptographic hashing for non-secure hashing needs. Whether or not people will use them only in cases where they really don't need any security in their hash (an attacker could cause a denial of service or a slowdown of service by degrading the performance of core data-structures if you use a non-secure hash function against untrusted inputs in the wrong contexts) is somewhat up in the air.

That said, it's being used by real applications in production, so the niche is definitely there, but for anything that needs any level of security you should continue using a secure hash algorithm, of which the unimaginably named SHA family provides a good set of standard algorithms. Using a secure hash every place you need a hashing algorithm unless you know you'll need the extra perf and know you can get away with it is probably a reasonable practice.
Easy enough to make it return instantly when switching to the current user. This would still allow for someone to crack their own password (a problem if someone has access to the database without having the password, say by an SQL injection), but would mitigate most of the problem without breaking things for almost anyone.