skysight-inc/HackerNews huggingface dataset:
The ability to express your self uniquely among different groups of people without residual consequences, and the ability to explore disparate interests in the same way.
So, who are these people who don't completely fail at crypto and how do you hire them?
This doesn't change much, the established facebook brand and etiquette is that it's used to communicate with friends. This is also the situation that Mark said they're targeting in his startup talk a few months ago.

It isn't currently a place to reach out or meet new people.

Because of this people will (currently) be hostile to messages from people they don't know. So while you can find interesting things and actually have a search that works now - it probably won't change behavior that much.

It is pretty cool though.
I'm not sure rolling releases makes sense but either removing Unity or making it as configurable as Gnome 2 was would be a huge step back in the right direction.
My bottom chipping (near the USB), top left chipping, Samsung Galaxy S3 (I9300), using a ZENUS CASE "that prevents your phone device from damages, scratches, and dirt.", that I'll never invest again (got it from the UK ~$40), USB acting up, with AOSPA and laggy UI is due to:

Crappy case(s)

Samsung not opening up their Exynos Processor enough so AOSP sucks especially Paranoid Android causing horrible backlight transitions (also a CM 10.1 I9300 issue).

Android is popular, well for me, because of the screensize and customization of how apps are going to be launched, and HYBRID MODE.

Otterbox cases should have came sooner and Samsung needs to open up their processors. The rest are catching up to Samsung by trying to overpopulate the market with too much variety like HTC. Luckily Sony is stepping back from that.

These articles are first world people complaining about how they're not cool anymore and how they have to justify something as better because it costs more. I know it has a better build quality, but have you seen Sony's new upcoming flagship? Two years down the road I'll be rocking a PlayStation Certified Flagship device if they look as sexy as the recent one. I'm also eyeing their Z tablets.
I would not mind to own a cheap phone like these ones but in US you have to pay $70/month for the voice and data plan so it is way more expensive than the phone itself.
Have they been permitting anyone who isn't oracle affiliated to work on the sandbox? I was under the impression that the core development and compiler work was all in house.
Are you sure these bugs are new? The Java Applet Sandbox doesn't exactly have a spotless security history.
His money is still green.
Reasonable motivations:
- Money
- Protecting the users of Mega
I liked this one too. They're emailing hashes of the users password, full name, and their encryption key as the "verify address" URL.

Oh and once set, you can't change any password or delete your account.

http://arstechnica.com/security/2013/01/cracking-tool-milks-...
When I met the Momentum Machine guys here in San Francisco, I was shocked that they were planning to open a restaurant chain instead of licensing the technology out to existing players. Opening restaurants? Making food? Very un-startupy, right?

But it turns out that if anyone can do it, these guys can. The brick-and-mortar restaurant business is massive, bigger than many technology sectors, and prime for disruption with new food and models: there's a $184 billion global fast food market, a $2.1 trillion global market, and just about everybody needs to eat.

This has the potential elements of greatness: serious, hardcore mechanical engineers as founders, with a background in the restaurant industry. More power to John and Alex -- can't wait to try my first one.
So you're a fan of data, that's fair enough. Who isn't a fan of data? The issue is, who owns and controls that data? You, the true owner and source of the data, or some big advertising-driven tech giant with it's own crappy hollywood movie?

Not only that, but in order to make money from advertising, they link all this wonderful data (your data) with advertiser interests. Much of this linking is done under the radar, via rules you are not allowed to see.

It's very important to distinguish the benefits of shared data with ownership and control of the data, and the rules by which it is mined and accessed.

BTW, a lot of Facebook data is "self-expression" and if given the choice in real-time, many people would elect for NOT for their contribution to go into the tech-giants mainstream database. Going into "settings" and messing around with broader privacy options for content types and particular people is an absolute joke in terms of UX and human experience in relation to expressing personal views or communicating with friends.

"Privacy settings" does not come naturally in communication. Facebook knows this, and knows people will not bother or become lazy with privacy.

Bottom line is, Facebook is an inappropriate platform for the collected data that is your life.
If they're struggling then I'd like to have their problems, just a tiny fraction would suffice.
I'm not surprised. These are the same guys who thoroughly ripped apart the PS3 security system and presented it for a more-or-less general developer audience: http://www.youtube.com/watch?v=LuIlbmn-4A4
This is a good idea. Is there anything similar to this that I could completely run myself, preferably open source?
No original editions: Men & Magic, Monsters & Treasure, Wilderness Adventures, Greyhawk, Blackmoor, Eldritch Wizardry, and Gods, Demigods, and Heroes. (Or Chainmail for that matter which is probably needed to have the faintest chance of figuring out how these "rules" were supposed to work.)

Incomplete Basic/Expert/... rules -- especially sad that the complete rulebook isn't there since, in my opinion, this was probably the least messed up edition of D&D ever created (and probably closer to D&D as people played it than the other incomprehensible rulebooks ever got).

No core rulebooks for AD&D "first edition" at all (Player's Handbook, Dungeon Master's Guide, Monster Manual) although some of the add-on rulebooks are there (not going to pay to find out if it's pre- or post- lawsuit Deities and Demigods).

(I put "first edition" in quotation marks because when it came out it was the third version of the D&D rules, and it was "advanced" dungeons and dragons (where by "advanced" we mean "incomprehensible"). The word "advanced" disappeared as of, if I recall correctly, "third edition").

So pretty much missing most of the stuff I'd be interested in for nostalgia. I guess it would be fun to be reminded of how wonderfully awful the official modules were (atrocious artwork, bad writing, and dungeon designs that make no sense at all).
Isaacson made several telling errors about Apple products, showing he didn't really know them--for example, he seems not to understand how NeXT technology is still the core of OS X and iOS. This is not a trivial detail, since if Jobs was all about products you're not going to understand his work if you don't understand the products.

So, Isaacson fails as a book that will help you understand Job's work, or his management style, or what he did to turn Apple around--which I think had quite a bit to do with Apple's habit of leveraging technologies across products, developing economies of scale, and having people work in small, autonomous teams.

It's still a good book, though--I think it painted a balanced picture of an obsessive and mercurial man who, slowly, almost became a normal person.
Marijuana, yep, been there, heart constriction, crucifixion level pain, feeling like I was dying. This happened several times in my early 20s -- solution, stopped smoking ;-)

and started meditating. That alone stripped loads of baggage. Urban areas have plenty of zen centers and the like. A lot of crap is self created, bad habit oriented behavior, like sitting hunched before the screens.

Speaking of, signing off ;-)

Cheers
So you can steal the encryption keys from the browser. What a surprise.

I don't think anyone at Mega gives a damn though, or the people who are going to use it to upload movies. The only reason there's an encryption key at all is to cover their asses on future lawsuits, not to make Mega amazingly secure.
The Only Good Reason to Become an Entrepreneur
The iOS web browser has it's own on/off switch in restrictions.
Do they actually go as far as log aliases and pseudonyms? People often reuse screen names more than they do passwords.
Up late reading HN? Maybe it's time to get inspired...
Valve doesn't have any business muscling developers into this or that platform. It's wrong if Microsoft does it, and it's wrong if Valve does it. Let the better platform win, in an open and competitive way. (I'm confident Linux would win out in such a contest, btw.)
I work at an Ergotron Workfit-S: http://www.ergotron.com/tabid/640/Default.aspx it's a contraption you drop on top of a regular desk, and provides a keyboard shelf as well as mounting for monitor(s) and laptops (I am now on a dual monitor, previously had 1 monitor + laptop shelf, so I'd drop my mbp on it and connect to the monitor). The whole thing slides up and down, and the shelf moves independently as well. Lets me move from sitting to standing easily, lets me adjust to different postures and moods etc.

Been using one for over a year now, very happy with it.
Maybe I am being stupendously dumb here but why didn't they just use md5? Is it that easy to compute to make it unsuitable here?

[Edit] Huge thanks to tptacek for the thorough explanation. He did make one mistake in that I was being dumber than he thought. I believed that being able to create a static file with matching hashes would be too much hassle to be worth bothering with, other replies have stated that this is not the case, hence the MAC route.

[2nd Edit] Ok, so it looks like I may not have been as dumb as I thought I was, good discussions further down.
My understanding of the current state of affairs is that 'users who pay for apps' are still disproportionately represented on iOS. That is, there may be more users on Android, there are more potential customers on iOS.

I could be wrong, though - maybe that balance has started to shift?
It seems we've established (very thoroughly) that Mega should not be trusted to keep our files secure.

But that's not the point of their crypto; it's just an effort to ensure plausible deniability that happens to be a marketable feature.

If your objective is to stash sensitive files, there are plenty of established options.

It's obvious that Mega was not intended to serve such a purpose, so the criticism strikes me as pointless except for its instructional/entertainment value.
I agree about the values of many Americans. I am not one of the people who who thinks boobs are particularly harmful.

That said, MANY PEOPLE who have dollars apple wants have those values. So they make a system so their devices get turned into something no more "dangerous" than a Wii/DS, and children get iPads and iPodTouches without parents worrying about corrupting their kids with nudity (again, their values, not mine)
SIRI RISING: The Inside Story Of Siri's Origins
There's already a proof-of-concept here: https://news.ycombinator.com/item?id=5101318
As a mere mortal I find some aspects of "web apps" confusing. I never know whether I'm running an app locally in my browser, vs. what's happening on a remote server, etc. And I have a hard time knowing which apps are stored locally on my phone, vs merely bookmarked, and whether if they're stored locally they'll update.

My preference is for app stores that work more or less the way they do now. If under the covers you're rocking some standard web technology, hey great. As long as my app works offline and doesn't randomly change.
Defaulting to the last thing the user did is very often the simplest and best thing to do. But I'd question the initial defaults -- is 1 b.r. 1 bath the most common option? Maybe it is. Is it the most common option for people wanting their place cleaned?

For all I know you've figured this stuff out and the answer to both questions is yes.
Restrictions are off by default.

It's up to the person with money to enable them before giving the device to the person, and periodically confirming they're still there.
Bombay HC advises use of Skype during trials to cut costs
How To Reset Domain Admin Password on Windows Server 2008 R2
How should I know?
Gusteau - an enjoyable Chef Solo wrapper
I agree. My point is that from Apple's perspective they have no interest in an apps internal age restrictions system. If it says 4+ it has to be 4+ for the life of the app.
The Deites & Demigods preview includes the table of contents, which makes no mention of Cthulhu or Melniboné.
Hack Diabetes - Contest for Diabetes Management Technology
It really depends on what stage the company is at. Unless you're Facebook / Google / Microsoft you're better off with a a bunch of full stack programmers than a bunch of specialists.

Even at FB/GOOG/MSFT the specialists only really work well on established product lines, and not skunkworks type projects. The cost of communication overhead is simply to high for specialists to work well for most companies.

Also, you can usually rent a specialist for the few days you actually need them to tune up your DB server, etc.
Optimizing Applications for NUMA
500px was set to 4+. See the above link from me showing the google cached result.

I think 12+ would have probably let them be okay, but I could see apple requiring 17+
This sorta proves what I have been saying about Graph Search. Its biggest and most prominent use cases will be fancy but useless searches of people. Unfortunately some of those searches will lead to new headaches.
The phones could reasonably neglect data in favor of wifi.

I don't know if they do, but it's plausible.
The same page that allows parents to disable the install/use of apps with too high a rating also allows them to disable Safari.
Ballmer has been filmed screaming developers and talked about throwing a chair. MSFT revenues have grown under his time, but the company isn't sexy. Have there been opportunities lost? Yes. To say it has lost? They have many years of mocking their cash cows before all is lost. MSFT has an odd habit of learning and adapting. We will see if that still exists.

It has been awhile but at one point MSFT spent more on pure research than AAPL did on their whole R&D budget. Research takes time, but AT&T and IBM aren't doing much of it these years. Investing in research is another plus, not in the near term.
Though marketing via social networks and mobvertising certainly enable you to make money to some degree, the most important step towards successfully marketing your iPhone app would be to feature it in the iTunes App Store and also try and gather the maximum possible amount of positive user reviews for the same.
It's true that some people (like me) only use Facebook for its usefulness as a social tool. In that case, just strip your account of any serious personal information.
M55 is also known to be insecure: it's straightforward to find hash collisions with the MD5 function.
Are you intentionally being dense? Where is the data that showed "consumers wanted it"?
Well, how do you think frozen pizzas at the grocery store are made?
I think that that is a good analogy!
This was rated safe for 4+ year olds. Flipboard is not.
Does anyone know how much financing they took on?
If your objective is to stash sensitive files, there are plenty of established options.

In case anyone is looking for an option, I recommend Tarsnap. http://www.tarsnap.com

Tarsnap is simply the best. Spideroak is probably okay. But if you have files that absolutely must remain confidential (e.g. NDA'd source code, etc) then Tarsnap is the service that can be trusted to store them correctly.
Interesting Investment
As the article states, Modern Guild charges a significant amount of money for each course offering ($1500). So why invest in something that is very slightly unique but costlier than other education services mentioned such as Udacity, Treehouse, Instructure, and Coursera?
Not to sound harsh but reading that was a complete waste of time. In the end it came down to this:

Q: What is it really like working with Steve Jobs?

A: It wasn't magic, it was hard work, thoughtful design, and constant iteration.

No way, really? Come on, I'm sure everyone on HN knows that this is true for any product.
TL;DR: Monolithic applications (in any technical stack, not just Rails) are bad. See also: http://en.wikipedia.org/wiki/Big_ball_of_mud

Extricate focused concerns (like authentication or service discovery) so they can be well-tested, well-designed, and reused in new services.
Safari is disabled on the same screen install of apps that allow nudity is disabled on (General -> Restrictions).

500px rated their app 4+, when their app should have been 12+ or 17+ by appstore rules.
Apple didn't reinvent itself. It cut products to a bare minimum, invested in an OS (and infrastructure) to move beyond MacOS, and then used that success to invest in and build new products.

It started with focus.
Reasons China and Japan may go to war over disputed islands
It's relatively easy to make collisions with MD5, and attacks like it have been documented against SSL certificates. Something like sha256 would probably be more appropriate.
How To Convince a Team To Write Good Code?
This is not about money, unlike the Microsoft/Dropbox IAP quarrel. iOS has been a PG-rated nanny 5 years ago when you bought your iMac.

If typical corporate types were making decisions, they would probably see a lost opportunity and reverse Apple's stance on porn - having millions of credit cards on file would be a perfect base to start selling adult content.

> The guy who went to India looking for spiritual enlightenment.

Buddhism can be incredibly prude, though I am not familiar with the kind(s) of Buddhism that one would find in India.
Because MD5 is considered broken. Use at least SHA1, or even SHA2/SHA3.
You need to take a break from your Facebook apologism. It's getting cartoonish.
How do you sell apps or IAPs?
Intel exits the desktop motherboard business
Chinese comments are more on the offensive and even pro-war so I wanted to also share a Chinese version discussing the same topic:

http://mini.miercn.com/article/16871.html

http://n7.chinaiiss.com/html/20131/22/w210c6_2.html
Kim Dotcom - piece of shit who makes money on the back of the scene, gets raided for (knowingly) doing so.

Somehow the combination of Kim being a piece of shit (whom no one would want to work for) and the very real possibility of the US Government going after anyone having anything to do with MegaUpload V2 resulted in the new product not being very secure/good. What a surprise.
6 months of "rolling releases" isn't a rolling release at all (i.e. if the rolling releases are only between LTS and LTS). LTS would have to be separate from the rolling releases entirely.
He didn't ignore it, he wasted that year on alternative medicine voodoo. This detail may not have made it to the Isaacson book, I didn't read it.
> I'm just willing to bet that the average Facebook employee has never had to hide his sexuality/political/religious beliefs for fear of execution/incarceration/abuse to his family/etc. Yet a non-negligible part of Facebook's user base are people precisely in this situation.

And how is that different from real-life?
MD5 by itself isn't a MAC; it's a (bad) one-way hash function. HMAC-MD5 is a MAC, like CBC-MAC; it computes an authentication tag from a key and a message, and it uses MD5 instead of AES. So I guess HMAC-MD5 is what you mean.

CBC-MAC is an unusual choice, and is known to be particularly hard to get right. Very few new systems are designed with CBC-MAC anymore.

The "industry standard" choice for a MAC in a new system is probably HMAC-SHA2; if you wanted to use a cipher core instead of a hash function for your authentication tag, you'd probably use something like OMAC (or, better, EAX mode, which does both authentication and encryption at the same time).

Long story short, you're not wrong, CBC-MAC was a weird choice.
So, forgive me for asking a dumb question. What would be a better approach here? I'm assuming that SHA1 doesn't cut it.
This seems pretty analogous to Facebook's Timeline and Graph Search features: once released, everyone is outraged over privacy implications, though the information was always there if you wanted to find it.

It's the difference between 'free to all' and 'free to anyone willing to spend $0.10/page'. It may make it harder for someone to exploit, but it is a false sense of security.
Financial Times editor announces digital-first strategy
Interestingly, there aren't practical attacks against HMAC-MD5 yet, though there obviously are attacks against more naive MD5 MAC constructions.
I can confirm ports are free. I have Steam on both Mac and Windows.
Moving to 64-bit Twitter User IDs
I'm sorry to hear of your similarly terrifying experience. The mental model you use to describe it is interesting though, and makes me consider that the narratives we (in the general sense) formulate to represent our lives are an important tool in processing them. Will definitely have to think about this a bit more.

Out of curiosity, may I ask how you dealt with your experience in the following months afterward?
Okay, I looked into it:

Chrome disappears and reappears when I toggle down to 12+

Twitter is (mis)labeled at 4+

I don't have flipboard on my iPhone.

It did take a second for them to disappear. I'm pretty sure a turning off and on will make them disappear. They reappear instantly.
Not all are. If you own CoD4 for PC, you don't Aspyr's Mac port.
But a closer look at the results shows that while Google continues to be a moneymaking machine, its most lucrative business, search on desktop computers, is slowing, while Google has not yet figured out how to make equivalent profits on mobile devices.

Aren't they discounting the fact that the mobile serach market is still developing and not nearly the size of the desktop search market? Notice they don't say they aren't profiting from mobile. They say they aren't making equivalent profits.

Mr. Page, who has had health problems related to his voice, sounded unusually weak and breathy.

Really?? I am not even sure what to say about this.

Honestly, it seems like every quote in the article is positive, with everything in between trying to justify the idea that they are struggling.

I don't know, maybe I'm just a google fan boy. But it seems like weak reporting from the times
What would be a better approach?

To not encrypt files via a browser using javascript.

One reason this particular flaw happened was due to the need to secure all content loaded insecurely by index.html, for example.
Very correct.I think in case of a mass electricity failure across the world. Without water supply, fuel and other energy resources to transport food, medicine and other essential supplies.

More than protecting your electronic gear, the struggle is likely to be for food and other emergency resources.

I am sure there will mass riots and mafia scale entities controlling resources critical to survival. Besides 2/3rd will be dead in quick time anyway. Nobody has every survived without water or food.
This isn't an opportunity for wishful thinking. Read about what's happened to Walid Husayin, a Palestinian man from the West Bank, since blogging openly about being an atheist:

http://en.wikipedia.org/wiki/Walid_Husayin

All the stuff he's gone through—death threats, imprisonment, torture—has been for the sole "crime" of apostasy.

This graph search is going to enable sadists to lower their bar for finding victims from "people who openly and loudly proclaim their beliefs" to "people who accidentally clicked 'like' or forgot to fix their privacy settings." I have some difficulty deflecting the blame for Walid's treatment to simply being born on the wrong side of a fence. He may have known better, or perhaps he is on a crusade for religious freedom, but it's going to get a lot harder when we start talking about people with no interest in being martyrs being tortured and killed for this great cause of openness and improving the world.