skysight-inc/HackerNews huggingface dataset:
About a year ago, a SA from a certain three-letter agency who was pretty fluent in technology (our conversation largely centered around Bitcoin) mentioned that iMessage is not end-to-end encryption. That, to his understanding, it was client<-->apple<-->client TLS encryption.

I think I might actually side with the tin-foils on this one. In any case, iMessage isn't a (well-)documented protocols implementation, so I wouldn't rely on it for security.

Edit: Public scrutiny seems to back up the SA's claim [1].

1. http://imfreedom.org/wiki/IMessage
Does anybody know where to get something similar to this, but not focused on startups? That is, a more general "dying companies" list? That seems like something that could be useful... are there services that generate that sort of thing, or are you limited to just "the rumor mill" and what-have-you?
TL;DR: Fifteen issues ranging from "Won't go to the moon or read floppy disks" to "Doesn't support my USB devices".
My point requires a back story, but I think its worth it:

A few years ago several teenagers loitered everyday outside my apartment window. Sometimes they skateboarded, other times jumped off a wooden ramp with their bikes, but always did they curse and swear.

Especially one kid, who was the ringleader. Every second word was the f-shot. An angry kid.

So one summer evening, as I was trying to get work done but hearing this caustic stream of vulgarity outside my window, I decided to straighten these punks out. I went on my balcony and yelled at them to chill it with the bad language.

They looked at me as if I was an alien, then continued swearing as soon as I left. Louder this time. They swore even more from then on, especially the ringleader kid. He was angry for a kid.

I was getting angry too. Even with my windows closed I could hear the cursing. I was tempted to threaten them, to really let them "have it", but in a rare moment of sanity realized that I can't force them to do anything. I can only change myself and how I respond to them.

So I changed myself, and instead of getting angry, I decided to help them. I started a dog walking business and hired the ringleader to walk the dogs. That way he'd be busy and earn some spending money.

I gave him business cards with his name on it and bus tickets whenever he needed to get somewhere.

Turns out it was his first job ever. I later found out he had behavior problems and had been expelled from High School.

I befriended him and showed him how to go door-to-door to get clients. He didn't have a dad around so I was probably the closest thing to it.

He stopped swearing after that, and so did his friends. I didn't even ask them to.

Unfortunately his unemployed mother was evicted about a year later, and he with her. I haven't seen or heard from him since.

Be the change you want to see in the world. -Gandhi
Visualized: an Earth-year through stunning NASA imagery
Not much, actually. Swinging a leg at a time back and forward, and left and right, as well putting a foot at a time forward and doing a pike stretch down to that foot and right back up again, walk a couple of steps and doing the other foot (like #2 here, but a foot forward at a time: http://www.wikihow.com/Get-a-More-Flexible-Back).

Strict good-mornings are also quite good once you have decent amounts of flexibility. Strict = make sure your back stays arched, push your butt as far back as possible, with a slight bend in your knees, and hinge/bend at the hips. Essentially you should feel it in your thighs and butt and not elsewhere; if you start losing the arch in your back, you've pushed as far down as you can go, go back up and repeat. It's more important to keep form than forcing yourself as deep as possible - you'll get better depth soon enough.

I've later incorporated some static stretches including several of the one in the wikihow link above, but the ones above were enough to see dramatic improvement when done a for a few minutes a couple of times a day.

I also do asian squats regularly (so effectively sitting down in a squat position, unloaded, for as long as I an do - a few years back I wouldn't be able to get up without intense pain from that position, if I got into it in the first place...) and feel that helps me increase the depth I get into (and it's made it so much easier to play with my young son, to be able to effortlessly squat down to him instead of ruining my knees...).
But what could possibly accomplish doing this? I can't picture the rationale behind it if it really were the US Govt itself.
So the question is: what is the biggest killer of startups? Practicalities (I can't go to this meeting because I can't afford the coffee) or psychology (the funding killed my sense of urgency?)

While I have sympathy for your point of view, as a founder hitting the practical issues every day the idea that all financial support is toxic just doesn't wash with me.
It's not implied; the article states outright the encryption is end-to-end. :)

That's based on Apple press releases from 2011 and 2012. See, for example:

http://www.apple.com/pr/library/2011/06/06New-Version-of-iOS...
"secure end-to-end encryption"
Yes, simplification + open API is at the heart of the project.

The first one because it makes people actually want to use the service, the second one because it helps having up to date data about all sort of things.
There's a growing mobile network in North Korea. I wonder how tightly controlled the few embassies in North Korea are.
Why RICO? That is the part I don't quite get ...
A Short Translation from BS to English of Selected Portions of the Google Chrome Blink Developer FAQ:

http://prng.net/blink-faq.html
Good stuff. And I was curious after seeing this if "Learn ... the Hard Way" was a brand that that Zed Shaw had trademarked or otherwise intended to keep exclusive. (Not that there necessarily would have been anything wrong with that, but still curious.)

But to my surprise, Shaw not only isn't proprietary about the brand, it looks like he is going out of his way to help other people appropriate it:

https://gitorious.org/learn-x-the-hard-way

"This is a skeleton LaTeX project that makes it easier to start working on a “Learn X The Hard Way” book. You simply clone this repository, change a few base files, and then you can start writing. It will also come with a small “meta book” that gives you advice for writing and publishing your book."

Very cool. While it seems that Steve Losh didn't use the actual templates above (he picked markdown instead of rst), it's neat that the overall style itself is designed to be reusable.

Best of luck with the new book!
Not really, any big project has people going over every commit to see what changed. Any commits that are associated with a security release are particularly scrutinized. Within an hour of release there would already be people talking about the vulnerability, as well as example code for triggering it. Full disclosure is better, because even if people can't do an upgrade, they can choose to block ports at firewalls, turn off databases, and other mitigation methods immediately, as they are allowed to.

Hiding the information just weakens the defender position, not the attacker position. Secrecy in implementation is not security, it is just stupidity.
Using panics for control flow or having panics cross library boundaries is strongly discouraged, otherwise they are fine. Go's own standard library uses them internally in several places.

Even then discouraging panics is very different from not having them.
A beautiful app that helps with your dietary needs. 
A well designed app using your current location to search for restaurants around you with specific meals matching your dietary needs. http://startgarden.com/ideas/detail/the-diet-sherpa
I've had the exact same interactions with Taxi drivers. Half of them are completely unprompted by myself, and the driver will bring up Uber and ask me if I like it. Our discussion is always about the benefits of Uber, and invariably after we exchange thoughts about how great it is, and how everybody loves it, one of us brings up, "Everyone, that is, except the dispatchers and Taxi companies".

The drivers know, the customers know that this is changing the industry, many of the old models are being cast aside, and the only way some of the old guard can attempt to combat this is via lawsuits. Predictable, if sad.

(note: I took an Uber cab to work today :p)
Originally found on Hacker news:

https://news.ycombinator.com/item?id=5486014
"There is something about a fix by running an external server"

It is called gocode (https://github.com/nsf/gocode). Pretty much all Go environments require gocode - the directions for Eclipse (which I don't use anymore) are pretty clear too: http://code.google.com/p/goclipse/wiki/GocodeIntegration
>Who discovered the vulnerability?
>Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center while conducting a security audit.

I'm not surprised. Some years ago I worked for a company that had NTT as a customer, and they were easily an order of magnitude more thorough and careful than anyone else. We used to joke that they knew our product better than we did.
Babies stretch; cats and dogs stretch. It's not all harmful, or useless, to stretch--just do it when you feel like it. This research is really just about systematic static stretching, done whether you want to or not.

And maybe I didn't read it carefully, but I didn't see anything in there about preventing injury. I have naturally tight hamstrings; stretching them out before exercise makes them feel better and less likely to cramp or get pulled. It probably lowers my performance, but I'm not racing, I'm just trying to have fun and stay in shape.
SSL is end-to-end; the ISP is just one more untrusted carrier. And I would expect MtGox to have access controls around employee access to their servers. Both MtGox and their certificate authority have much stronger incentives to play nice than CloudFlare do.
I would like to see Voyager 1 (about 1.847×10^10 km, accordingly to wikipedia [1])

[1]: http://en.wikipedia.org/wiki/Voyager_1

[EDIT]
1000 to 10^10 :P
yes, when I did my little research for hosted PG, heroku was pretty much the only viable option. That said, I did come across some difficulties running `rake spec` against the heroku hosted db (since you can't drop the database, only individual tables). This was giving me some (unrelated) headache.

Another thing I was really hoping for but couldn't find with heroku, was being able to do a point-in-time-restores via the heroku web/cli interface. This would be a seriously nice feature if something like that was available...
The only downside of Uber? Hailing a normal cab and walking out as if it's already paid for. I've done that twice since I started using Uber a few months ago. Embarrassing but funny stories :)
You didn't see this line?

> Like that of Earth, the Venusian core is at least partially liquid because the two planets have been cooling at about the same rate.
Unregulated innovation often innovates fraud and crime when you're talking about unmarked, unregulated cars driven by unknown people, picking people up off the street.

If you go anywhere in the world with less strict taxi regulation, you'll run into this. In Prague, my wife and I hopped into a cab only to find that the meter seemed to exist in a time bubble that ran 10x faster than the rest of the known universe.

I appreciate being able to hail a random car on the street and know exactly what I'm going to get. Safety and fraud issues are exactly why the industry was regulated in the first place.
FYI: http://falkvinge.net/2013/03/28/why-expensify-endorsing-bitc...
Both DX and OpenGL work with the hardware abstraction that does not exist any more. As a result, the API calls cannot be trivially converted into the hardware commands. Most importantly - there are multiple paths the translation can follow and each will produce very different results from the performance point of view. There is a reason modern video card drivers are hundreds megabytes big - they contain app-specific optimized code for hundreds of games and applications.

With the above said, 20% difference is solidly in the area of driver versions differences.
You Don’t Lack Discipline If You Can’t Work From Home
Ahh, too yellow!
>What do you have to gain by going onto Hacker News and posting conspiracies theories about DEA disinformation? Are you working for some kind of anti-US gov agency perhaps?

For one, why assume he cares at all about US gov agencies? HN is international. There are people here who could not care less about US agencies. Not to mention there are people who despise their abuses and privacy breaches, including lots of Americans.

Second, not everything is a "conspiracy theory". And not every "conspiracy theory" is laughable (e.g about aliens or illuminati). Real-life conspiracies (people, agencies etc, conspiring to do some stuff in secret to gain something) happen all the time. Actually conspiracy (covertly trying to spread misinformation or to gain state information or to steal trade secrets etc) is the very thing secret agencies do.

As for your misguided surprise about how an agency could ever use the press to spread misinformation, you might want to read on this: http://en.wikipedia.org/wiki/Operation_Mockingbird
God says...

sake I will not rest, until the righteousness thereof go forth as
brightness, and the salvation thereof as a lamp that burneth.

62:2 And the Gentiles shall see thy righteousness, and all kings thy
glory: and thou shalt be called by a new name, which the mouth of the
LORD shall name.

62:3 Thou shalt also be a crown of glory in the hand of the LORD, and
a royal diadem in the hand of thy God.

62:4 Thou shalt no more be termed Forsaken; neither shall thy land any
more be termed Desolate: but thou shalt be called Hephzibah, and thy
land Beulah: for the LORD delighteth in thee, and thy land shall be
married.

62:5 For as a young man marrieth a virgin, so shall thy sons marry
thee: and as the bridegroom rejoiceth over the bride, so shall thy God
rejoice over thee.
How come your plantedd doesn't sell shrubberys? You are from the UK, you need to add a special search result for when the users search "shrubbery" http://www.plantedd.com/t/categories?keywords=shrubbery
Is this a fail about the business model of dependant Paas?
IMO open source is not an "alternative" business model, but a complete model (see Redhat, Talend etc...). I don't know open source PaaS that made money then big companies... Curious to see if they will monetize with open source what they couldn't closed source...
Venmo Touch for iOS, now open to all developers
In the absolute sense, you're right they don't; but in the practical sense they do, especially open time-dependent statements.

The easiest example is this:
We're in 2010. X has been married to Y since 2009;
In the DB it would be represented exactly like that: a "from" time period, no "to" time period, meaning "it is still true now".

They divorce in 2013.
X married to Y from 2009 to "now" isn't true. It should be downvoted.
but X married to Y from "2009" to "2013" is actually true. It should be created and upvoted. That fact surely won't change overtime.
So what if DEA can't decrypt it? The real question is: Can the NSA decrypt it?
Zaagel marketplace: Travelers make money by delivering items that people ordered
Advice From Palo Alto Networks Founder Nir Zuk
Also quite similar to freebase: http://www.freebase.com/
Safari was released in January of 2003. Soon after, Microsoft ceased developing Internet Explorer for Mac. Almost two years later, Firefox 1.0 was released, and it took quite some time after that for it to become a good browser. In the meanwhile, plenty of us had been using a Gecko based browser for years: Netscape.
Any chance to release this as an open source? For example, people would like to have installed in their servers and use it for their own things. I think it would be useful for fandom. For example, the Star Wars DB or Lord of the Rings Db :-)
And Go wasn't especially planned by Google execs to use for "solving their problems" -- it is a grassroots project by some Google guys to solve those problems. Which is something different than a mandated to use language.

Thats the best way that problems get solved. Go needs to win in the marketplace (even in Google's own internal marketplace) on its own merits. That's the best kind of win.

Corporate mandates end in committees with no sense of design or minimalism. I've seen enough of that to not want any more.
I completely agree that the network can act as a useful tool for exploration. In the same way that Pinterest allows people to extend their fashion sense from their wardrobe into a larger and less expensive space (images), images from your network can also let you vicariously explore the world. When I post, I don't feel as though I'm bragging, but rather contributing to a large network of people from many different backgrounds and locations who might not have seen something like this before.

It's interesting, though, because when I was in Europe, I was frankly pissed off that all these international travellers on my tour were sharing photos exactly as they happened, whereas I chose to leave my phone at home. To me it feels very strange to post experiences as they happen when you're so far away, as though it loses its charm and uniqueness.
If I were the feds and I had an intimate relationship with AT&T (hi, warrantless wiretaps!) and VWZ and other wireless providers stretching back decades, and all of these other wireless providers sent SMS content in the clear, I'd very much want everyone in the world to continue to use SMS.

Encrypting text messages with iMessage or a similar service simply makes my life more difficult. And remember Apple has been lobbying against a law that would extend CALEA to iMessage.
You'd really be OK with gcc being 2-3x slower?

As much as I love high-level programming, many of the most interesting and important problems are ones where a "small" constant factor is the difference between great and mediocre.
Cats, including big cats like lions and tigers, statically stretch on a regular basis.
Thats about 144953696 px if my calculations aren't failing.
And only 53 pixels wide?
Is it even worth going there?
You can combine the AWS free tier with our BitNami Django cloud images http://bitnami.org/stack/django/cloud
This bug wouldn't be such a big deal if such a name was a requirement for the exploit.
err whatsup with the freemason-like one eye
The gov't isn't a business. If it were it would not be serving everyone. The post office (sorta of a gov't/business half breed) would charge you more to send a letter from Miami to Fairbanks, Alaska than from your town to the next town 10 miles down the road. Gov't has more responsibility than a business.

There are plenty of business with large amounts of debt.

This being said I don't back the proposal.
If you are doing 40 hours in a lot of places it means you slack. I also see recommendation on HN for things like "if your company is switching to a framework you don't know you should spend nights and weekends studying it". How about no? Each hour I spend the less money I make for my time. I have other things I like in life and work serves to allow me to do those.
Ever heard of Vupen?

> VUPEN Exploits for Offensive Security
As the world leader in vulnerability research, VUPEN provides extremely sophisticated and government-grade exploits specifically designed for the Intelligence and LEA community to help them achieve their offensive missions using tailored and unique codes created in-house by VUPEN for exclusive and undisclosed vulnerabilities discovered by VUPEN researchers.

Access to this service is restricted to organizations from countries members or partners of NATO, ANZUS and ASEAN.

http://www.vupen.com/english/services/lea-index.php

completely legitimate company
Teaching Programming with iOS and Amazon EC2
IPO-Bound Flurry Looks to Double Headcount, Launch Real-time Bidding Platform
Well, the author was making a point about the way people interact with their omnipresent tweetdeck/camera device.

He was painting a picture for the sake of making a point, not for the sake of "hey, I'm in Singapore".
Author here. Thanks for the comments. I think the concept of IQ not being all that important is challenging to admit, but at the end of the day the point is that there are a variety of factors that influence success and positive outcomes in our world, one of which seems to be largely ignored.

I'm not sure why no one has talked about interaction with machines but it's clearly important. By no means is this a science, just a commentary on cultural factors that should be relevant in today's world.

@JDGM we are purposely vague about our product as we are still in early alpha, but you can think of us like New Relic for servers.

P.S. We don't do riddles, IQ tests or puzzles in our hiring process and we prioritize attitude, workplace fit and a variety of other personal factors.
I'm the author. Ask me anything.
Yes; mine was more a comment on the site.
A lot of dotCloud customers use paid apps for staging because it more accurately reflects production and makes for zippier demos (Live apps get faster machines).

You can keep it scaled to a minimum (but still >1 containers to catch scaling bugs) and destroy it after your tests.
This is an outrageously superficial analysis of sharing... It's natural to want to share experiences. This is what we do socially every time someone at work asks "how are you?" or when a friend comes over for a beer. Calling it "robotic" is a huge generalization.
> The Internet is only 20 years young

Are you confusing "the web" with The Internet?
Not really. I addressed this in the FAQ: http://thebigdb.com/faq
New York City’s Police Surveillance Technology Could Bring In Money
Not really. He walked into a job he didn't like and said "i'm going to start to like this". When is that going to happen?

If you adopt the necessary attitude of going above and beyond for your employer it will help you out? I've found that to not be true in most cases.
Reminds me of Freebase. They built a huge data-set as well as tools and an api to access themselves. Have you talked to anyone on the team? (they are now at Google) How would you say that you are different from them?
Anonymous hackers take control of North Korean propaganda sites
I think there is a big difference between the safety regulation and monopoly ensuring regulations. You see it quite a bit in the food truck discussions.

Most people don't have a problem with some set of minimum safety regulations for an activity. Most people don't freak out about basic access and destination regulations.

On the other hand, governments creating artificial scarcity and going after business models that target this scarcity is pretty repugnant. Too many cabs is not the problem of government and will be rightly sorted out in the market place.
You are a fool for capping his passion. Please don't normalize anomalies. If there is purpose then you can't set a time limit on that.
If you make it a lottery subject to criteria X, then it will be a profitable "financial startup" business to cheaply make thousands of fresh companies matching criteria X, extracting the "free money" out of the startup ecosystem.

I've seen it many times for various subsidy programs - where a few "entrepreneurs" who learn how to game the system aren't just 'a few bad apples' but actually obtain the majority or even 100% of such programs.
I find it so depressing that traditional taxi company's wish to stifle inovation (which, as far as I can tell, is much loved), simply because they have failed to innovate themselves. IMO this is similar to the music industry and hollywood, where companies are 'stuck in their ways' and will desperately try to keep the status quo at the expense of the consumer. Where's the love?.