skysight-inc/HackerNews huggingface dataset:
You could safely mail me, though. We use the same stack you do, plus DANE for advertising the fingerprint of the certificate to make sure the connection to the mail server is not MitM-ed. And (open)DMARC for giving feedback to mail origins about what (malicious) traffic tried to send from their domain.

Well, the technology is there and works as advertised. It is just getting people to adopt, and since people depend on hosting companies hosting companies need to upgrade. That hasn't happened. Ever. But it is not the failure of email, I would say, but a failure of the internet ecosystem that is incapable of upgrading itself because of its fragmentation.
This is so sad, part of the reason the nsa can get away with this is because of spineless idiots like this cognressman who was clearly more interested in telling his joke about dick cheney, than in defending american's civil rights.
This performance from hank johnson is even worse than this one https://www.youtube.com/watch?v=bs23CjIWMgA
not unsubstantiated: http://mobile.theverge.com/2013/6/6/4403868/nsa-fbi-mine-dat...
And it would have somehow been worse if they'd paid you?

Not everyone has the luxury to work an unpaid internship, so if they're necessary (or even just helpful) to get into a field that's actually a pretty huge problem.
Too true. I was trying to differentiate the difference between Congress' "legalization" of something, and its actual legality and, in the process, failed miserably.

Thanks for the correction.
Actually, I think the original intent regarding greater than was:

greaterThan(100, 5);
//=> true

That is, l is greater than r, and to then properly curry the arguments do need to be flipped such that maybeGT(5) results in a function that returns whether the argument is greater than 5.
The problem is that the scale messages makes even seemingly small false positive rates a big problem. Suppose you had a false positives only 0.01% of the time -- a ludicrously generous estimate. When you are looking at hundreds of millions or even billions of messages per day, that is far too much noise for the system to be useful.

Maybe the FBI/NSA is so good that they never see false positives. I doubt it, though, given how many non-terrorists have been harassed at airports, had their peaceful protest groups infiltrated by undercover agents, etc.
Is THAT all you meant? That criminals would grab the delivery at the delivery location? Bah.

I'm sorry, but anybody building an unmanned delivery system will have thought of that right away and dealt with it any number of ways. For instance, consider this scenario:

You order a pizza using an app on your phone. You get a text message "the car is 5 minutes away from your address - please meet it outside. Your unlock code is 537." You go outside. You get another text message "the car is pulling up to your address now; your unlock code is 537." You see a delivery van pull up and pause in front of your address. There is a well-marked door on the right side of the vehicle. The door is locked, but there is a keypad. You enter the code 537 (or alternately just wave your phone or credit card near the reader, authenticating with RFID or bluetooth. Or insert the card you used into a card reader.) and the door opens, your pizza boxes are revealed - one or more pizzas are dispensed like a stack of money showing up from a slot at an ATM. You take your pizza(s). The door automatically closes and the vehicle drives to the next delivery location.

If you don't show up on time, the car texts you once or twice more, waits for another 5 minutes or so, but eventually gives up and goes off to make the next delivery.

If some hoodlums show up first, they don't know the code and don't have the phone/credit card that was used to make the order, because they are not you and weren't told by you to pick up the pizza from the car. They cannot open the locked door so they cannot "grab and go" without defeating the physical security of the car, which would in all likelihood be stronger than would the physical security of a MANNED delivery vehicle. They could of course mug the recipient to get the pizza, but that's no different from mugging a delivery guy now.
How is Facebook sharing their database with the government breaking the constitution?
How to host your Jekyll blog on AWS EC2 [Part 1]
Oh I dunno. Having watched The Daily Show for years, Fox have no problem with some incredible contradictions and saying the exact opposite of what they one said. If they can label Obama as a Muslim communist traitor, they will forget that Bush ever existed.
Dropbox doesn't RMA drives, everything is de-duped then stored on S3. (or at least that is what they told me when I interviewed with them)
What types of surveillance did he expose?
> Im not sure being not American saves us. Do you use any of those US services? If so, I assume they have your data.

No, it does not, that is the sick part. But as a non american it's not (or should not) be my business how the usa organizes itself and what kind of politics they make. And yet I'm sure they are infringing my rights.

Point is, I didn't vote for Obama. Nor is it my job to get rid of him.
These days mail clients like Thunderbird warn you for large attachments, and prompt you to use some other solution. Even better: using the built in XMPP-client they could easily send you infinitely sized files at you@yourdomain.com - if only you would run an XMPP server on your domain
ObjectiveFS (https://objectivefs.com) does client side encryption using the NaCl crypto library.
Use tonido
That was my first thought when I saw the figurines in those photos: ”No way those are from 400-800AD, those are way older!”.

The first figurine looks like it’s wearing a Pschent (Ancient Egyptian double crown), much like the one on this statue: http://en.wikipedia.org/wiki/Colossal_red_granite_statue_of_...

The fourth figurine looks like it’s wearing a Khepresh: http://en.wikipedia.org/wiki/Khepresh
Quantifying Movie Magic
I know they are not open source currently, but for now they are not on the list.

It would be awesome if they did open source it, or at least allow for third party (EFF?) review of source.
The headline is misleading, he found it already in 2000.
Yes, Owncloud. Easy to install:

http://www.slashgeek.net/2013/05/16/host-your-own-dropbox-li...
Reply links don't appear until a few minutes after a comment is made. It's intended to have a dampening effect on flame wars.
Leave where? Everyone always says that, but where would be better (mainly in terms of civil liberties)?
Yes :-) http://blog.aerofs.com/479/s3-for-team-server
Yes, they have, and it's very sad. There should be a clear division between the pipe and the hardware that accesses it, but this is not at all the case right now.
It's just the difference between someone who wants a swiss army knife and someone who wants a santoku knife. They're just two different philosophies of experience design. Calling it "spin" ignores the actual benefits (and tradeoffs) inherent in that design philosophy.
Increased rewards for Google’s Web Vulnerability Reward Program
For some. But most of the loudest voices are higher up the food chain, and do not directly benefit from the security apparatus. Most of those on the payroll as part of the apparatus must maintain some semblance of calm competence, thus they cannot participate directly into feeding the hysteria.

Implying mercenary intent absolves the voters of any responsibility.
I can't help think that if this were the 1970s and we were talking about the post office and phone company automatically forwarding copies of all communications to the us gov't, there would be riots in the streets. Oh how things have changed.
Devil's advocate, here: As long as it's restricted to terrorism investigations I don't care. If it stops bombs from going off go ahead and snoop through Facebook's database, big deal.

If it ever trickles down to DEA or local police then it's a problem. If secret courts and SQL dumps become standard procedure then everything falls apart. If this is considered constitutional I don't know how you're going to tell Officer Shitforbrains he can't look at your phone records and Google search history to find out where you bought that joint.
Three letter agencies approach the executive team directly. A decision to participate has to be made at the exec team/board level. If the CEO doesn't know about it, then the company has some serious communication issues.
Can I cut out the middle-man and just use the NSA as my cloud provider?
> "In 2008, Congress gave the Justice Department authority to for a secret order from the Foreign Surveillance Intelligence Court to compel a reluctant company “to comply.”"

One more reason FISA is one sick, disgusting piece of legislation, and it was just extended to 2017, last year - yet too many were dormant when all of it was going down.
wouldn't know, don't use it or dropbox. id prefer encrypted externals for sensitive things that have no need for the internet.
https://cloud.torproject.org/

https://www.torproject.org/

https://en.wikipedia.org/wiki/Pretty_Good_Privacy

etc.
Two days, two major reveals, wouldn't be suprised if tomorrow I wake up to find out that they've been switching on the microphones and cameras on webcams and cellphones.
The 4th ammendment protects us from unreasonable searches and seizures, so I suppose if they were just searching randomly, which you might draw the conclusion they are doing.
How about this idea: why don't we just let affluent young people buy jobs?
Ask HN: Any service you wish you had?
I'm looking for inspiration for a side project, mainly in the area of developer tools / services for making the devs life easier. Is there anything out there you wish you had to make your life easier?

For example right now, I'm thinking about a device directory with api where you can keep up-to-date on mobile/desktop/console/ereader devices and use the DB in your apps. Also a CSS parser to remove redundancies in a large code base.

Any ideas would be appreciated :)
http://mobile.theverge.com/2013/6/6/4403868/nsa-fbi-mine-dat...
Its extractable though I don't understand if that is legal:"http://blog.hartwork.org/?p=1964
It isn't surprising, but it is worth talking about.

I subscribe to "nothing to hide" but it would be nice to, at least, have some notification and callback over who had access to my personal details.

I don't really mid my information bing used to infer if pot-holes are more important to fix than water leaks. I do however object, without prior consent, for my details to be a way of supporting political movements /ideologies.
I wish that Ruby on Rails worked on Windows.
Thanks for sharing this. Looks good. I like the ability to follow specific people and topics.
This point, more than any other, is what gives me the most concern about all of this. This is an epic level news story. This should be hitting the front page and leading every news cycle on all newspapers and news networks. I mean, the story is concrete and the headlines are a century in the making: "Orwell Arrives: U.S. Government Spys on Every American."

In fact, with all of the "scandals" right now, there's an even greater motivation to run this story.

So what's the motivation that's holding this story back?
It's trivial for desktops. I personally like AeroFS the best, but you could use anything and layer crypto on top of it, or use something with a painful UI like tarsnap, or build your own, or really whatever. Wuala/SpiderOak are fine too, but kind of suck for non-security reasons in my limited experience with them, compared to Dropbox or AeroFS. (I personally just use rsync and NFS over VPN, though.)

The problem is mobile. Due to some questionable decisions made by especially Apple but also earlier with Google, you really need every single app to write to your cloud storage provider's API. Dropbox is unquestionably the leader there; iCloud on iOS seems to do ok for newer apps. Neither provides meaningful encryption. Requiring every app developer to figure out encryption and manage keys on his own and then handle that on top of the Dropbox API is also insane.

Arguably Apple has a lot of ways to pwn iOS users already, so I'd consider trusting Apple and iCloud to not be that much worse than just trusting iOS, but it is still bad (and most of the bad things Apple can do to you either involve signing bad things, then requiring an active step by the user or MITM, or doing things like retaining device keys at manufacture time and subsequently seizing the devices, or having some deeply-buried backdoors which probably require physical access or are exceedingly infrequently used.)

There's really no good solution for mobile now. You could probably build something fairly non-shitty in the Android world, although I don't know enough about how applications share files and interoperate to know if it would need to be a per-user-app integration. On non-jailbroken iOS, it's pretty clear you'd need to develop a new API which did client-side crypto, key management, etc., on top of file sharing. It would be a pain, and even more of a pain if you wanted to avoid fully trusting Apple in the process.

The best solution right now is "no data lives on the phone", rather than trying to sync; use some kind of web or app which just uses transport crypto to interact with a server but never stores anything locally. If you trust the OS a lot, you could do something like what Good Technologies does and try to sandbox your data within a specialized app like that.
Thanks for pointing out BTSync. Will have to set it up on a VM and a few places I have dropbox. May well be replacing Dropbox for a lot of uses.
How much code did you write for their games?

Don't you think that, in certain areas, if I can fill my office with 10 unpaid trainees that do the job of one engineer is unfair? Is more about respect for others.

I have a small company and I always paid for responsabilities inside my company, even few ones. For example, I invited my 15 years old cousin to do testing in the summer and I paid him, even knowing that he will study economics in the University.
It sort of depends on the candidate, I would imagine. High level clearance investigations typically involve a polygraph test, for instance.
I agree with it as an ideal, but I'd argue Apple (and to a lesser extent Google) have done a remarkable job in wresting control away from the carriers. Complaining that they didn't get the entire job done in one shot isn't useful and trivializes the dramatically different landscape we have now vs 2006.

That said, it'll be nice to see them finish the job.
Apple demonstrated that resistance is possible, for reasons unknown, when it held out for more than five years

I'm pretty sure that unknown reason was Steve Jobs. Apple became a participant 1 year after Tim Cook took the helm.
Is it possible that there was someone else who was more talented, competent or dedicated than you and deserved that internship even more than you but simply couldn't afford working for free? I'm not making a value judgement here, I'm just pointing out the fact that free internships are not necessarily compatible with meritocracy.
They were on S3 at one point in time (and pretty widely known as the biggest S3 customer). I'm not sure if they are on S3 today. This may depend on when you interviewed.
I wish there was something akin to Homebrew for Windows package management.
> One more reason FISA is one sick, disgusting piece of legislation, and it was just extended to 2017, last year.

I think you are confusing the nature of FISA -- a piece of legislation designed to constrain excessive executive domestic surveillance passed in the wake of widespread and highly politicized abuses by the Nixon Administration -- and recent amendments to FISA to expand the scope of allowed surveillance that were passed under the justification of the necessities of the "War on Terror".
Yeah, leaving doesn't work. The solution is sadly not that simple.

But neither does voting. How could voting work when the public is not even suppose to be aware of this sort of thing? This sort of secrecy is incompatible with democracy. Without being able to make an informed decision the best you can do is vote for the candidate that assures you that they will have a transparent administration.... oh wait.
Aren't namespaces a C++ feature?
If only there was a provider that respected your privacy and allowed you to use basic unix primitives to interface with your cloud storage...

If only...

http://www.rsync.net/resources/notices/canary.txt
These notes are frickin awesome! Thanks.
Choosing a JS MVC Framework: Angular.js vs Ember.js
That would be the logical interpretation but it is not the interpretation being used by the government.
Canada? I say this as a Canadian who's aware of our own issues...
You can just click on the "link" link and then reply from there, instantly.

(I kind of hate the feature, since most of the time "you suck" "no, you do" "no, you do" only goes on a few levels, so the exponential delay isn't an issue, but an actual technical discussion goes deeper. False positives and false negatives. :( )
No, it certainly is not. Loans create deposits when creditworthy borrowers show up and ask for them, and required reserves are obtained afterwards from the cheapest source available.
Don't you get a little bit sad about the state of the web (assuming you work on the area) when you see how well executed those games are?
If you are making someone a profit in any context you deserve a paycheck, simply put.
Microsoft now runs the supernodes instead of them being random high bandwidth Skype users. Your computer uses a supernode to find the address of the user you want to reach, but you still connect directly to that user to communicate. People misunderstood this change to mean that call traffic traversed Microsoft servers.

That said, it has been shown that at the minimum China has keys to decrypt peer to peer communications, likey the NSA does as well. The NSA doesn't need Microsoft to route call traffic via their servers, because they already have taps at all the major exchange points.
No voice dictation. No syncing. More expensive than the free notes app. Lame.
Do something for mobile please? You're one of the most trustworthy providers, particularly if you build things on mobile so we don't necessarily need to trust you...
The NSA story reinforces why an entity like WikiLeaks is important
Since when doesn't Rails work on Windows?
We have been fighting this US policy since 2006:

http://www.rsync.net/resources/notices/canary.txt
Any suggestions, where to go?
Well then try this on for size. Getting data through requesting it is only one way to get data. Another way to get data is to hack into the source. Consider that a number of governments, including the US, have active hacking teams. What are they hacking in to, exactly? I leave that up to you for speculation.
It appears that both Democrats and Republicans have got their hands dirty in widening the police state that America is becoming day by day.

From a higher perspective I assume this is just a symptom of what is wrong with the country.
Donate to the EFF
Not to mention all of the revelations over the past few weeks. Either the administration is trying to top Nixon or there is some kind of conspiracy playing out.
I don't understand the logic behind "we have paid employees, and we need someone to produce something profitable, but we can't afford to pay them." If that is the case, you simply are not a business.
I agree with your points, but since this discussion has tended towards behavior on internet forums (like HN) the difference between spoken conversation and published written word come into play.

I'm guilty of not thinking before I speak most of the time, but when I post on HN or Reddit, or even Facebook, I take care to say what I mean. On the otherhand, interpretation of intent and meaning can be much more difficult from written word, especially when you don't have a prior relationship with your conversation partner.
When it was the 1970's and physical mail was opened, the Church Committee revealed illegal and untoward practices and prescribed reforms.
I assumed that he switched C and C++ in that sentence.
"Willingly" is the point of contention. The CEOs complied. Whether they felt like they had a choice in the matter is another question entirely.
Bullshit.

LE requests to FB simply do not work that way. They can make a request online, which is checked for proper authority, etc. The guidelines FB follows can be viewed at https://www.facebook.com/safety/groups/law/guidelines/ and the idea that FB just randomly hands out full read access to user data is either a paranoid delusion or calculated deception. Maybe you can tell us which one you were aiming for.
It can be taken as a sign of weakness of argument, of bad technique and of uncivility, certainly. Even grounds for disqualification from a formal debate.

It's not an ad-hominem fallacy though.
Web developers are not worth very much I'd say.

The web is a clusterfuck of pages users can only read and leave comments on. You won't really do anything relevant with the web. It's useless compared to the speed of current internet accesses. The only thing people use are internet browsers, which use HTTP as a basis, which is telnet. The web is still using old techs and no engineers is really trying to make new things, besides to-the-metal tech like bittorrent.

The internet is not just a web of websites, the internet is also connections between pairs, which is soooo much flexible.

Right now, what does applications do ? They select data from a database, with nice data structures, then they write this huge text file and send it. Your browser then parse this stuff to make some sense of it, you put data in it, and it's sent back. Google then parse aaaaall this, and tries to make some sense out of it. And somehow they manage. The web is like people communicating with mail instead of using real time telephone conversations. It's very inefficient. People try to make real time stuff with it, like facebook and their huge cluster, but it's really a sad show. JS has now almost replaced the role of C and C++ in execution speed. But it's still sent by mail.

I thought webrtc sockets would fix that, but in the end it's a huge fail, you can't connect to an IP address directly, it's still that centralized clusterfuck.
We've been working on sync for a number of years, and have created an open-source lightweight iOS library and backend server. It's still alpha, but it's already in use by a handful of apps in the App Store.

Here's an overview: https://github.com/couchbase/mobile

The iOS embedded sync database: https://github.com/couchbase/couchbase-lite-ios

Embedded sync database for Android: https://github.com/couchbase/couchbase-lite-android

It is designed to sync JSON documents either to the cloud, or from device to device. Everything is open source, so you can run it wherever you want.

Our conflict detection and management works by detecting when two users modify the same document, and keeping both versions around. It's up to the application to merge them (or discard one). More about the protocol here: https://github.com/couchbase/couchbase-lite-ios/wiki/Replica...
Some people are going to prison for a long time.
Customer Discovery
Couldn't you have maybe demonstrated why you were valuable while getting paid minimum wage? The situation you are describing encourages companies not to take risks EVER while forcing their employees to take a risk. The fact that you benefitted from this is irrelevant. Perhaps try looking outside of just your own specific situation and at the many other situations that might come from a world where unpaid internships are legal, or the norm.