skysight-inc/HackerNews huggingface dataset:
Nothing ambitious was mentioned in that article. And if you want a to-do list you should check out something like trello.com Otherwise, a spiral notebook and a pen is a great deal better than your inbox as a to-do list.

--Please feel free to ignore the following email rant.--

Email is a pretty impressive digital translation of the written letter. And for cases where a letter written by hand on paper would work well, email works even better. As long as by better you mean faster and without paper or stamps or penmanship. The SMTP protocol is over 30 years old and still going strong; that's pretty amazing. But email kind of sucks, too.

Frankly, most people aren't good at writing letters. Simply creating a meaningful subject line is difficult. And keeping a conversation germane to the stated subject is also difficult; folks often talk about multiple topics in a typical conversation. To review long conversations, one must read awkwardly from bottom to top, opposite normal English reading direction. Adding someone to a conversation in progress is also awkward. Sending another message (a correction or addition to your last message) before the person (or people) you're talking with replies creates confusion as a reply can only be made to one or the other message, dropping parts of the conversation. Attachments can be problematic. Clearly, spam the likes of which we see today was never anticipated by SMTP's authors, and neither has anyone come up with an especially successful solution to it. We've all just come to accept spam as part of the background noise, filtering the polluted stream, rather than removing the decomposing carcasses from the upstream source.

Creating an alternative that addresses its shortcomings would be ambitious. And I think many people were frightened by Wave, which addressed many of email's shortcomings but was disruptive in the way so many people like to claim they admire but will almost always shun in practice (kind of like how folks always claim to love to root for the underdog, unless it's Haiti). I'm not saying Wave was perfect, but it had great potential. And as far as genuinely ambitious attempts at improving email (or the kind of conversing we typically do with email), I can't think of another example.
Contact a lawyer immediately.

There are many actions you could take to mess with the investigation that might seem like fair game, but you should discuss each one with an attorney so you don't provide some arcane justification for them to arrest you (by hacking back, or even maybe "interfering with an investigation").

Once you get past that stage, the attorney can help you petition to stop the behavior or demand more information about it.

Legal advice is what you need now, not tech advice.

(Because the server is crushed, I'm only getting the basic gist - forgive me if you've already done this.)
Apparently, they're likely to get kicked out, with the government wanting to cut the facility: http://mv-voice.com/news/show_story.php?id=6626
I'm pretty sure Lufthansa owns their own planes as well. Not so different, really. :-)
So how then does "the CA take reasonable measures to verify that the entity submitting the certificate signing request has registered the domain(s) referenced in the certificate" when giving a 3rd party a private key which can sign a cert for any domain (and will be trusted by many clients the same as if had been issued by the CA itself)?

Here you go: https://wiki.mozilla.org/CA:Communications February 17, 2012 1) Subordinate CAs chaining to CAs in Mozilla’s root program cannot be used for MITM or “traffic management” of domain names or IPs that the certificate holder does not legitimately own or control, regardless of whether it is in a closed and controlled environment or not. Please review all of the subordinate CAs that chain up to your root certificates in NSS to make sure that they cannot be used in this way. Any existing subordinate CAs that can be used for that purpose must be revoked and any corresponding HSMs destroyed as soon as possible, but no later than April 27, 2012.

Note the word "cannnot" there. It's not "prohibited by contractual agreement", it's "destroy the HSMs containing the private keys".
Who's "we"? The people who need to agree about this --- the HTTPS cabal --- have already accepted non-critical name constraints. If you disagree with them, remove GlobalTrust from your CA store.
On the other hand, anyone who has reason to believe there might be information critical to their investigation embedded in the full version of Two Girls One Cup, it is their civic duty to submit that video to the authorities.
Pixel art isn't just for games, and doesn't necessarily involve nearest-neighbor resampling up to ridiculous multipliers. Sometimes it's just the only way to make something identifiable at 16x16:

https://raw.github.com/yusukekamiyamane/fugue-icons/master/a...
"These are all tools to sort and file more stuff, but none of these solutions try to stop stuff from arriving in the first place. Or to find the email you really want to receive between all the other stuff."

Hmmm...I use gmail to filter stuff I don't really need to read right away ("filter messages like this"), and priority inbox is specifically to find the email you really want to read between all of the other stuff. Why straw-man the competition?

In any case, there is definitely room for email "types" (tags, labels, etc.) that can be implemented in custom x-headers and then get added to the right inbox/queue.

The communication back to the sender is an interesting thing though. If the sender is using something like this, and they autorespond...
If anyone knows a good lawyer in Montreal, please let me know!

nadim@nadim.cc
One of my favorite things about Mac laptops has long been the lower DPI (72 vs 96 for Windows, IIRC). Fonts rendered smaller, and I could fit more of it onto a small laptop screen. But I guess I'm in the minority on this, and MS had it right all along.

Except now people are making more and more sites on Macs, with text that I find overly large whenever I'm on a PC. Sigh.
> Btw I'm part of the problem as I tend to write very long emails. That's the issue. Emails should be short

I wonder if this could be useful here.

http://www.telescopictext.com/
(Context: https://twitter.com/rgherrmann/status/300311324905324545)

It would definitely have to be automatically generated to be viable, as in no more effort than to write a normal long email. But doing that automatically is a hard problem.
This PG approached him with a "business opportunity" -- so the Canadian security folk probably did mean to confuse him into thinking that this PG is our HN pg.
Your analogy is nonsensical, since this is in no way "theft". He's borrowing some IP space inside an already allocated /20 that Epik isn't using at the moment.

Epik already went to ARIN, said "we need a /20 to meet our IPv4 needs", filled out the paperwork to justify the allocation, and ARIN said "yes". Out of those 16 /24's, they have one that doesn't have any hosts on it at the moment, so they let him play with it.

The only people this MIGHT be hurting is Epik, if they need to justify getting more space from ARIN at some point. For the other millions of people on the Internet: it's awesome. Lighten up and enjoy it.

(edit: grammar)
Unless you had logs in Transmit indicating it was used, I would recommend not saying they used Transmit to do it - considering OS X has a builtin command-line sftp client:

http://developer.apple.com/library/mac/documentation/Darwin/...

If you're still concerned your machine is affected, I'd recommend getting Little Snitch - which automatically blocks connections (both in-bound and out-bound) that are not pre-approved. In addition, when it auto-blocks it records the application that was making the connection attempt in the auto-block rule.

(Well, actually I'd suggest you dd a backup of the drive to analyze - then wipe and start anew.)

If they hired anyone of any worth, the person installed a timed launchd (or cron) controlled script to run rarely and at odd hours to upload content from your machine to those remote locations. This kind of setup a.) would use a command-line tool for the upload and b.) unless they knew you had Transmit it would be designed around executables already included in OS X or that they installed.

Unfortunately, if it has stopped, they've probably deleted the scripts and cleaned up the evidence. If you've got Time Machine running, however, you may have backed up some of their handiwork.
Retailers aren't just financially leveraged, i.e. by debt, but also operationally leveraged, too.

A "business that has a higher proportion of fixed costs and a lower proportion of variable costs is said to have used more operating leverage" [1]. Given the low sales/fixed costs per square inch most brick-and-mortar retailers incur they would be vulnerable without a cent of debt.

Note that the prevalence of home inkjet printers hasn't bankrupted professional printers, just forced them to specialise.

[1] http://www.investopedia.com/terms/o/operatingleverage.asp#ax...
*New* Cheap Remote DDoS Protection
One of the most affordable anti DDoS proxy providers out there, against all kind of DDoS attacks.
What certificate lifetimes are on these CA certificates you're issuing without critical name constraints?

Will you reissue them all (for free) once you decide to start marking new ones critical? Will you require all such entities get reissued certs? Can you contractually require that they destroy the old certificates?

Then there's the matter of how problematic OCSP is; even if you revoke the old ones, it may not matter.
We had the pleasure of being in the first YC class when Kirsty started. She was very helpful throughout the entire process of the program. I think she even has her own office hours now!

Congrats on such a praising article Kirsty.
Yea, I was thinking of actually adding that, as well as a few other categories. Thanks for the submission!
Why?

Are you suggesting the CSIS kill people? Who are going to be missed because they have said they are under surveilance? Or even abroad?
Get in touch with the EFF:

https://www.eff.org/pages/legal-assistance
Don't forget to close your HTML tags
I suppose not playing could be to just accept that you're going to get fucked regardless, and so don't spend any time or energy on politics as it'd be a waste compared to doing anything else.

The idea that that could be the least-bad strategy is pretty depressing, but I guess it's not impossible.
That would make it too easy to game the spam system, because now the spammer knows they've been classified as spam, and can keep changing the message until it gets through.

This is why it's generally bad practice to reply to an email telling the sender it is spam.
I have to wonder what you'd see
If you used style as ID.

Styles change from time to time
But style stays from line to line.

Names can change and faces too
But writing tells you who is who.[0]

Many say they are a crowd
But fewer do once lost their shroud.

Traps and snares one will find
Many more if kept their wits about their mind

Still plenty that you see
Hide their face behind IP.

Just a thought.

[0]: http://33bits.org/2012/02/20/is-writing-style-sufficient-to-...

[1]: EDIT: It seems to me that it is very possible that not all accounts here, though not necessarily in this thread, correspond to a single individual.
s/Canadian security folk/unknown party/
Satellite Images of Penguin Guano From Space Lead to Discovery of 9000 Penguins
I just wanted to post real quick to say that I have experience calling my congressman and talking with staffers politely but confidently and can confirm that they did indeed take my opinions and ideas very seriously, or at least gave me the impression that they did.
Correction: Lightly schizoid/paranoid may suspect hidden cameras in implausible situations.
Schizophrenic screams at cars.

In this case, it's plausible enough suspicion, let's give him the benefit of the doubt, eh?
I used to think something along Internet Mail 2000 was good. But it notifies the sender that you read it. I don't like that.
Most will require that the private key be stored in an HSM (which almost certainly will be located on the customer's premises).
In normal conditions, yes. But when things go wrong (your "or crashing", perhaps), the pilot is suddenly very much involved, and screwups can be fatal.

Take, for example, Qantas flight 32, an A380 that was successfully landed after one of the engines more or less blew up, damaging several other systems. Truly pilotless operation would require automated systems that could do as well --- and hopefully better than the pilots of Air France 447, the transatlantic flight that was lost due to recoverable pilot error.
The salient point isn't "Win 8 adoption is x%."

> silly results

Please don't do this.
I'm not sure what the point of this article is. There's nothing wrong with governments providing their data in standardized machine readable formats. This makes it easier for groups of informed citizens, hackers looking for a side project, and non profits like CFA to process and visualize this data. They then can create tools to make it easier for citizens to see and understand what is going on 'under the hood'.

It's ludicrous that governments should keep the data about what they are doing with our taxes locked inside proprietary enterprise databases. Oftentimes, the only information available is a small subset or overview released once a year as a PDF. Anything more usable and parseable is a big improvement on this.

It's true, governments will start by only releasing things that make them look good (or at least not bad). But this is not the end goal. Eventually the stuff that they don't release becomes glaringly obvious and people start asking why.

The author has what sound like some valid complaints about the Canadian government. But somehow he thinks it's logical to conflate these issues with the entire open data movement. I don't get it.

For example, politicians will sometimes justify bad laws by claiming that they are 'for the children'. This article is the equivalent of complaining about these laws by saying 'children are a joke'. Nice straw man.
If you need donations for any legal pursuits, set up a page accepting bitcoins or similar.

I'd totally support this.

Illegally monitoring a citizen has to about as bad as it gets in my books. Especially someone who has never done anything illegal and only received attention by building tools to help free speech/privacy.
Snake-oil? I am not sure I would go that far. I am somewhat concerned about crypto that runs in-browser after the Hushmail debacle, but the term "snake-oil" is usually reserved for cryptosystems that follow proprietary designs or "roll your own crypto," and cryptocat does not seem to fall into either category.
Prepare to be mugged now that it is known where you keep the family jewels.
I would also contact someone familiar with forensic analysis of malware, so you have lots of data about the monitoring that was conducted.
Perfect size, font, line height and column width on that post. Kudos!
First, I have no CS degree, instead I grew up in family businesses writing software from the time I could type. Assuming you are good at what you do, understand how software really works, have valuable skill sets to offer and can sell yourself well I say the degree doesn't matter. When I say how software really works, I am focused on how decisions we make daily can be inefficient once compiled down or interpreted by some VM (so understanding the hardware/software interaction). Not saying a degree fixes it, but honestly it would've shaved off some time for me in the beginning to have those base classes out of the way. That said, I see a lot of people without CS degrees that love what they do and are better than many grads. I think education is what you make of it, spending 100-150k to get an education at a top school doesn't mean you are any better than the guy who didn't. And personally, sometimes I prefer the people that had to slog their way through to learn things, versus the CS grads that feel they are owed something because they have an expensive piece of paper. But then again, I don't think that has anything to do with the degree or school as much as it does the person.

Just my 2 cents. One thing I will tell you, I stopped long ago looking at whether someone has a degree on their resume. The degree just doesn't matter if you are a smart person in general.
> his obsession with Pamela Jones is rather unnerving

As someone who follows both it actually started with PJ and for a long while Florian never responded. And even the responses were far more professional than PJ's usually hyperbolic posts.

And being paid by a company does not make you a shill. Bias comes in many, many forms and the only way to cut through it is to provide facts.
Earthlink still does this, at least for some of their customers. It's particularly annoying to be asked to verify your address so that the prima donna on the other side will get their order confirmation or tracking number, and given how many services send automated mail like this from no-reply addresses I'm not even sure how these people shop online. It's a relic from the age before Bayesian spam filters.
Sort XCode Project File
This article is nonsense full of blatant half-truths, e.g.

"a respected corporation such as Oracle"

Give me a break.
Yes and yes. Though you don't need to manually do anything (dunno if you ever did), it still comes with the Plan 9 C compiler for bridging Go with C, and generics are still hardcoded.
then get another job.
Sure, but a reboot would be obvious, and writing to a partition while the OS has it mounted seems like it could go quite poorly...
the problem is...
I don't know what I don't know.
The solution to understanding the Rails magic is to learn the ins and outs of Ruby. You will find out that it's just Ruby programming and it's not magic at all.
> What, so PayPal allowed him to use their service with a Social Security number, then they take his money because he doesn't have one?

No. You don't need an SSN as long as it's less than $600 a year. This was correct.

His money hasn't been taken; they just won't disburse it until he does his free paperwork, as required by the US Government. That's entirely legitimate.

.

> PayPal is the one at fault here. Don't let someone use your service without adequate ID.

They did not. When OP does the rest of what he's supposed to do, he's going to have his money unlocked.

PayPal is being as liberal, correctly, as the law permits.

.

> Tell them and require it before you can use the service.

Yeah, they did. Maybe you should read the user agreement of a system before using it to collect nearly a quarter million dollars internationally. It's only three pages.

There is a point at which OP had a responsibility, too.
I don't know you and I don't know the world you live in, but just from your worried tone, and the rate at which you're responding to comments in this thread, I just want to say: take a breath. Engaging in a wild HN thread, full of well meaning but varied techy suggestions/speculation might not be the best approach right now. Have some friends sift through it for good information and disengage. Seek legal advice, and take it slow.
Maybe creative destruction is for the best. The JVM platform is much nicer than Java the language. We've learned a lot since Java and the JVM were created. The death of Java might be a nice opportunity for some Spring cleaning.

Off the top of my head:

IntelliJ's @Nullable annotation as a core part of the language (I would suggest spelling "Nullable" as "*" to avoid freaking out the C++ converts) would greatly improve static type safety. Let's stop re-inventing Tony Hoare's Billion Dollar Mistake.

Call me a heretic, but for most real-world uses (particularly financial calculations) IEEE 754-r decimal floating point is a better default than IEEE 754 binary floating point, plus it's less confusing for inexperienced programmers. Excel does some ugly ugly tricks to try and hide IEEE 754 binary artifacts from display, but the artifacts still show up from time to time. Even experienced programmers often mistake binary floating point artifacts for software bugs.

UTF-16 also fools many programmers into thinking it's a fixed-width representation, and Java's APIs force Strings to at least pretend that they're using UTF-16 internally. Chars should be 32-bit, since 16 bits aren't enough to represent all Unicode codepoints. Iterator-like String APIs are often more appropriate than Java's array-like String APIs, and give implementors more design flexibility.

These days, even a lot of embedded systems are beefy enough that a register-based or SSA-based bytecode is a better choice. (For small embedded systems, I'm sure a few companies would spring up with cut down standard libraries and tools to either generate native code or a stack machine representation from the standard bytecode.) Bytecodes manipulating NaN-tagged types would make the VM a better target for dynamically typed languages.

We know that CSP/Actors are a less bug prone concurrency abstraction than forcing developers to work directly with threads, but Java chose threads to make C++ programmers feel comfortable.

The use of type erasure in Java's generics was a compromise necessary to maintain compatibility with old class files. Safety and performance would be improved by starting out with a system that supports generics.
> The first time a sender emails the recipient they are sent a link (also in the recipient's signature) to a page providing expected response times for various email forms along with the option to convert your already-sent email into a short-response form, e.g. yes/no.

This is pretty much what Inbox Pro already does, no? I tested it by sending an email, and got an automated response:

> Hi [my name],

> Your email is #85 in Boris Veldhuijzen van Zanten's inbox. You can __optimize your message__ so it will be easier to answer.

Clicking the link leads to a webpage showing average response times for Yes/No questions (5 days), Short questions (I think 14 hours?), Long questions (3 days), and FYIs (3 days). I converted my message into an FYI and submitted it.

I think the only difference in what you proposed is your version limits it to "the first time a sender emails the recipient", while this system would presumably give the same treatment to future emails from me.
Which firewall are you using? The one builtin on OSX?
Transferring under $600 a year without an SSN is entirely legal. That's money considered too small to be worth taxing.

One place an American can usually quite easily check this is at your local gambling area. They are locked by the same rules. If you win big at the horse races, you don't get to take your money until you fill out tax paperwork.

This is no different, except that OP is international, and didn't know our rules as a result.
Well WebKit in Chrome already does font resizing on the fly (hence some of the weirdness in HN comments for exmaple). I rarely, rarely find myself manually resizing, zoom or double tap in Chrome for Android.
Personal preference ahead.

I love small type. I love dense information. I prefer the dense gmail layout over the "comfortable" one with huge fonts and gaps between text.

I really dislike how text got larger and more spread out in Windows 7 over Windows XP. I dislike how huge the fonts in Ubuntu are out of the box. It makes it nearly impossible to have even 2 apps on a 1920x1080 screen without them overlapping each other.
I think you're a little fucked man