skysight-inc/HackerNews huggingface dataset:
So honest question, but how is having your data stored in Switzerland (where Wuala is based) any different than having it in the US? Or is it just the promise of local encryption that makes it safer?

Some purported info about data protection for Switzerland:

http://www.dataprotection.ch/en/disclosing-personal-data.asp

> Restrictions on disclosure

The DPA does not permit the disclosure of sensitive data or personality profiles to third parties without lawful justification. The consent of the data subject can constitute a lawful justification. Breach of this prohibition is an offence if knowledge of the sensitive data has been gathered in the course of a professional activity requiring knowledge of such data and can be punished by a fine of up to CHF 10'000.--. If the fine is not paid, it can be replaced by imprisonment for up to 3 months.

And Wuala's own policy:
http://www.wuala.com/en/about/privacy

> 6. Disclosure to third parties

Basically, your data is not transmitted to third parties. However, LaCie may release personal data if the law requires it to do so or in the good-faith belief that such action is necessary to comply with any laws or respond to a court order, subpoena, or search warrant or to protect LaCie's rights and interests. Furthermore, you expressly agree that LaCie can disclose personal data to identified third parties (e.g. owners of intellectual property rights) and/or government enforcement bodies in order to enforce the General terms and conditions, particularly in case of founded indications that the laws or the rights of a user or of third parties, particularly copyrights, other industrial property rights or personal rights, have been violated , insofar as such is necessary.
Well, the question does make sense, and it sounds like you've understood it on 2nd reading.

> Of course it won't

Then your answer should have been "no". Remember, the very first example is a paragraph, and it asks you if it makes a request for an image, I don't see you getting into the same rage about that.

The resize question comes later on in the quiz, where the user may have thought "of course it won't" a few times when a particular browser does actually make a request. If all "of course it won't" examples actually made a request, it'd be a pretty simple quiz, right?

> It's reasonable for an implementation to interpret this as a manually fired event does not meet the criteria and reload the page

Agreed, it's a grey area. But this quiz is about what browsers do, not what the spec says.

It's a difficult quiz, no one's expected to get everything right. My expectations were blown apart when I tested a lot of this stuff. You got stuff wrong, that's ok, don't let it ruin your day.
Funny, I would have turned it into an acronym of NSA Baa'S. Then we could give them a sheep as a mascot and everything would work.
Lovely bit of hasbara but you're not convincing anyone. Anti-zionism is not anti-semitism.
Here you go: https://www.boxcryptor.com/en/boxcryptor-classic

It's an offline application that runs on your computer that is transparent to your actions. You just use the drive BC mounts instead of where Dropbox tells you to use, the rest automatic.
See http://fail0verflow.com/blog/2013/megafail.html there are still security concerns.
LocalBitcoins.com bank account frozen and unfrozen
Seemed more browser-quirk specific than HTML specific if you ask me. Half of the examples in the test I've never used in my life and never will. Probably an extreme test-case, still was interesting and well put together nonetheless.
Really cool stuff! How long did it take you to build it? Was there anything missing in the docker remote API that you wish it had?
Thank you, will have a look.
what was the excuse for voting for him again in 2012?

really I fail to understand people here, One day they bitch about invasion of privacy the next day they want the same people to have every bit of control over their health care. Well guess what, you cannot have it both ways.

Granted he had help from a major government agency interfering with groups opposed to his reelection from gathering funds. So perhaps you didn't have a choice in who won.
It's large, intrusive, looming, oppressive, and contains nothing except a link to home and a login.

Also, if I press <space>, <page-down>, or click in the scrollbar, then whatever was just off the bottom of the window is now under the dark bar, making it inconvenient to navigate, forcing me to scroll a line at a time. Thus it breaks my most convenient reading methods.

So it's not just a question of staying on top, it's a question of reducing screen real estate, impoverishing the user experience, and generally getting in the way.

Does that help?
I once worked on a project that came to our company after BAH screwed it up. Ten years and $12.5M of the $13M budget had been spent, mostly on first-class travel, five star hotels, and meetings. They literally had built nothing in all that time.
No, but people may be.
Has the US become the type of nation from which you have to seek asylum?
Out of a sort of morbid curiosity...

...whom would the presumed civilian contractors on this outsource to?
Investors Seek Out Entrepreneurs With Resilience
Can you (easily) install one without the other? I know I can go around my browsers and disable the plugins after an install, but then I'm going to have to do the same thing each time there's a java security update and the runtime gets upgraded. Not to mention Oracle's crappy habits of bundling toolbars & other crud along with each security patch.
There has to be some way for campaigning politicians to make non-watertight promises too. (For almost any promise you might make, there will be some circumstances in which breaking it would be the right thing.)

Given the option of making truly watertight promises and making ones with escape clauses, most politicians most of the time will make the ones that they can get out of.

So then who will make the most impressive-sounding "watertight" promises? Candidates who know they'll never actually get into power. Candidates who expect to be able to weasel out of those allegedly watertight promises somehow. (They probably will.)

This doesn't sound to me like an improvement. Am I being too cynical? Is there some way to have watertight campaign promises without these problems?
Try Seafile if you really concern cloud storage privacy, Open Source.
The irony is that the product it's being plugged into is being issued by one of the companies at the middle of the PRISM thing and between the source code and the binary generation there is an unknown number of things that happen (please no-one spew the crap about Chrome being Chromium - it's not).

Secondarily, the root CA's are an easy target for the NSA, so MITM/re-transmission time.

And after all, those pesky terrorists are probably using pre-shared OTP's and any transport resulting in a completely secure channel anyway...

It's all ridiculous.
Oh man, so not supporting language other than English characters in a Git name is racist? I stopped reading after I saw that. The thing that really gets in my grill about racism is people who make a racist situation out of a non-racist situation. There is nothing racist here, it's like going to another country and calling people racist because they don't speak your language and can only speak their own.
PRISM? Come to Israel to study our surveillance state
I use Google Drive and Syncdocs (http://syncdocs.com).
I does local AES256 encryption of any folder I want BEFORE uploading it to Google Drive
The Wikipedia article is quite focused on the discussion before the law was made into effect, and are thus missing how the focus on terrorism was changed before even a year had passed.

Before the law was voted in, political leaders and columnist promised high and low that FRA would never be used for anything other than counter terrorism. Anyone who said otherwise was a tinfoil hat, and just didn't understand the issue. The law was about preventing terrorists from killing our children and nothing more!

A little less than a year after the law was passed, and the secret police got access to the collected data. Soon after, the legislative assembly and diplomats. After that, the police wanted in and was also granted access.

Today, go to their website and they talk very little about terrorism. The focus currently is on it-threats, malware and pen-testing[1], and thus calling out how great help they are currently providing in connection with the regular police and secret-police[2]. The "mission" description sounds more like the slogan of a pen-test company than that of counter-terrorism, mostly noticeable because the word terrorism is not even mentioned most of the time, and on the list of services, the word "terrorism" is demoted to the bottom part of a bullet point list.[3]

The last attempt to expand the "goal" of FRA was when the Swedish version of IRS asked for access. I don't know if they were granted, and the media don't care much anymore.

[1]http://www.fra.se/verksamhet/informationssakerhet/regeringsu...

[2]http://www.fra.se/verksamhet/informationssakerhet/tjanster.7...

[3]http://www.fra.se/verksamhet/signalunderrattelseverksamhet.6...

* Correction *

The IRS has not asked yet for FRA data. They have asked ISP's and webhosting providers for customers data, but not from FRA. There have been speculation on where the FRA scope would go next after that the police got access, but from what I can find, nothing official.
Encryption for Dropbox, Google Drive, Microsoft SkyDrive
Wow, you live just around the corner from me O_o

..and you're English too?
IMHO his non-scifi, is good.

The Wasp Factory is pure genius.
Moveis para Escritorio Curitiba
Moveis para escritorio Classe a flex com cadeira para escritorio, mobiliario corporativo na verdadeira casa do escritorio de Curitiba.
That seems like a very odd system but a good way to snoop and see who is logging on to a particular computer at a particular location. I can't imagine how this would benefit the user experience one little bit though.

What happens if you've lost internet access? (Internet outages happen!) Can you no longer log in to Windows?
Interesting that TurnkeyTyranny.com redirects to an article about the NSA issue on the Guardian.
The UK is not exactly an ideal location to make a fuss about this from, given that the Regulation of Investigative Powers Act (2000) gives extensive rights to the government to demand covert surveillance, which includes requirements of confidentiality over interception warrants to the extent that they in some circumstances can not even be revealed in court.

On top of that Part III of RIPA makes it an offense to fail to disclose your encryption keys to the government in certain circumstances, and the court does not need to actually prove that you have the keys in order to sentence you for failure to produce them.
This is disarming the seriousness of the government recording all your internet activity.

Too soon.
Why not? I'm in the Netherlands, 22 nukes, 50km away, some more nuke heads 20km away. Isn't really a nice idea to be honest.

Considering that there are 22 nukes with 4 times the amount of power as the nuke that went off in Hiroshima, imagine what'd happen if something would go off.
I don’t think the title is accurate. Former prime minister Ruud Lubbers told National Geographic that nuclear bombs were stored at Volkel Air Base in the past. However, he said that only parts of those bombs are still present at the site. Also, they’re decades old, so fairly outdated. Because of their limited purpose, Lubbers said the remaining parts should be done away with.

http://translate.google.com/translate?sl=auto&tl=en&js=n&pre...
Well, there's git annex.

git annex initremote mycloudbox type=S3 encryption=my@gpg-email.com datacenter=EU
git annex copy --to=mycloudbox myfile
git annex whereis myfile
whereis myfile (2 copies)
(...) -- here
(...) -- mycloudbox
ok

It also provides a nice Web UI (hosted locally) with colorful buttons, if that's your thing.
I thought the dupe detector was supposed to prevent the same link being posted twice just two weeks apart... not that I'm objecting to the extra traffic, of course.
But how big is that volume? Shouldn't then Dropbox always upload the whole volume, even if you just made one change in one file?
How Not To Run An Interactive Advertising Campaign
For Windows users: BoyCryptor 1.x is fully compatible with EncFS and features a GUI.
Funny how the "Wuala" solution came out just after the PRISM leak in the US.
It's unified authentication and automatic synchronization between all devices.

If you have no Internet access (as per no domain access on Windows), it uses cached credentials.
And there's also the thing that many EC parameters are patented.
Government Secrets and the Need for Whistle-blowers
It's a very non-non-issue: the client is closed source, for all we know it could do anything. Even if you listen on the data output to verify it's indeed encrypted, you still aren't able to tell whether your private key isn't transmitted alongside.

This isn't security, it's security by obscurity - in the best case, mind you.
The volume is as big as the data it contains.
There are also hundreds of nuclear missiles and thousands of nuclear warheads stored in the oceans all around the world.

http://en.wikipedia.org/wiki/Submarine-launched_ballistic_mi...

http://en.wikipedia.org/wiki/Trident_missile

This part is VERY interesting http://en.wikipedia.org/wiki/Trident_missile#Conventional_Tr...

http://en.wikipedia.org/wiki/Nuclear_weapons_and_the_United_...

Wow, in 1967 the US had 31,000 nuclear warheads.
Wuala is terrible.
It is constantly eating up 30% of cpu when idling. Sometimes it doesn't sync at all for a few days. There is a "Use LAN" feature, but it doesn't work.
To me, spying on an innocent Iraqi or Chinese citizen is just as morally reprehensible as spying on an innocent American citizen.

Prepare to be jumped on by "anti-imperialists".
Data being encrypted doesn't mean it can't be archived in that Utah data center. What capabilities they have there and what they do with it, we don't know. Substantial decryption breakthrough was hinted at in several reports, but what it is exactly - we have no idea.
This is a difficult thing to wrap your head around. My assumption is that the vast majority of people haven't formed an opinion yet. And many others don't have a problem with what the NSA is doing.
it is much better/easier to just look for non-US service
Just to help you out in future, never ever have precious/important data on one drive, even if its raid. I could not sleep if I knew all my photos and work was on just 1 drive. I get paranoid if my data is in the same physical location.

Hard drives and other storage mediums fail all the time, this is not hyperbole, these devices are not designed for 100% ever. The companies work on the assumption that if they fail they will offer a replacement within warrenty, but expecting to get data recovery for free is not reasonable.

If I was you I would spend a thousand dollars on getting the data off and never making the mistake of keeping important data on 1 storage medium again. Whenever I meet someone who has all their precious data on 1 device like this I tell them that you might as well just throw all that data away now, thats how much you care about it.

Sorry if it hurts dude, just spend the money to have the platters recovered individually and never make the mistake again.
Or open up the protocol, for independent client implementations. With client-side crypto, the server doesn't matter much.
Replacing Python: candidates. ATS, C#, Go, Haskell, OCaml & Rust
NSA contractor risks steep jail time for data leak
The cannot get a US court to compel you to hand it over.

How likely do you think it is that any of the UK agencies that have powers to request interception under RIPA will refuse a "please scratch your back, and we'll scratch your back later" request from the NSA if the NSA actually cares about your data enough to try to get someone to compel you to hand it over?

And RIPA does provide basis for compelling you to hand over keys or face prison.

Being in the UK may protect us against NSA just taking whatever they feel like whenever they feel like it for no reason at all, but I very much doubt it does much good for anyone that actually ends up in the NSA's crosshairs.
Edward Snowden For President
Let's replace those slimy bastards with a true hero.
It makes a mockery of the concept of the US being the bastion of freedom and being an example to other countries.
Vale a pena ver se é verdade. http://www.classeaflex.com.br
Large-Scale Language Learning at Google [pdf]
The views of individuals don't necessarily matter; it is plausible that individual leaders or soldiers still were as ruthless as ever, but if the population no longer supported it, it would be a political dead-end.

But yeah, "stuff I read in fan fiction" is on the lowest tier of my information-trust-chart. I'm a bit curious about why the British did give up on colonies. Was there really a sea change in British public opinion over the course of the World Wars? Was it a moral decision or an economic one? I could think of a dozen of reasons, which makes none of them worth speculating about aloud, but honestly this part of history is also pretty low on my reading list...
Correct, Yossarian
Former U.S. Prosecutor Sues Obama and NSA over PRISM Scandal
I do not think any decent human being has friends THERE.
22 Quotes to help inspire your day
Mojang's Scrolls is already profitable
BoxCryptor is most definitely not fully compatible with EncFS - it doesn't even support the default filename encoding option that encfs uses.
Actually, if I had to guess, I'd say it's domain expertise. A lack of MBAs is good, because MBAs turn your company away from getting good at what it actually does/sells and towards generic "being a good company" stuff.
Please, someone create an "Edward Snowden, true hero" T-Shirt.
I really want one. Nice photo of Edward from the Guardian interview, captioned "Edward Snowden" and with bigger letters "TRUE HERO".

Please, someone create one and sell it internationally at a reasonable price. :)
Minor nit. Sol Price was not a founder of Costco, he was the founder of Price Club. Which was acquired by Costco.
> * Driving fines are proportional to your income... earn more and your speeding fine is more

> Not sure why you mention this. Proportional fines make sense if the point of fines is deterrence.

Just as a curio...
> Another key word would be "seized", is copying considered seizing? Seizing is legally defined as the removal of property, one might argue that no seizure was ever made during this wiretapping.

This reminds me of the copyright talks but obviously when it's citizens doing it, copying is stealing but when it's NSA, copying is not an issue because it does not remove anything ...
The Visual Patterns of Audio Frequencies Seen through Vibrating Sand
Americans might not realise this but we see the USA in the same light as China and Russia when it comes to freedoms. We might be wrong, but thats the perception myself and many other people from outside the USA see the current state of the situation.

To think anyone would feel safe in the USA is ridiculous, the USA is one of the last places anyone should seek refuge in modern times. What scares me most is the United States influence inside Australia.
Not really, no.

Very briefly ...

==== Start RSA recap

Given an integer n>1, the numbers a s.t. 0<=a<n and gcd(a,n) form a group under multiplication. That means that for every e with gcd(e,n)=1 there is a d s.t. d.e=1 (mod n).

Now take n=pq where p and q are primes. The function phi(n) counts how many elements are co-prime to n, and since n=pq that turns out to be (p-1)(q-1). So phi(n)=(p-1)(q-1). I'm going to write r=phi(n).

Take any e with gcd(e,r)=1. We can compute d s.t. d.e=1 (mod r), which means d.e = k.r+1 for some k. (Note: I'm doing this mod r, not mod n.)

Right.

Now take a message M (with 0<=M<n and gcd(M,n)=1) and compute E=M^e. We can do that fairly quickly using an adapted Russian Peasant Multiplication algorithm. This number "looks random" in some sense. You can transmit it to someone else.

They compute D=E^d. So what's that? Well, working modulo n:

D = E^d
= (M^e)^d
= M^(d.e)
= M^(k.r+1)
= M^(k.r) x M
= (M^r)^k x M

But Euler's extension of Fermat's Little Theorem says that if gcd(a,n)=1, then a^phi(n)=1 (mod n). Therefore M^r=1 (mod n), and so D=M.

Therefore we can recover M, so we can decrypt E.

So if you publish n and e, but keep d secret, people can send you E=M^e (mod n) and only you can read it.

Probably.

If someone can compute phi(n) then they can compute d from e and n, but we think that's the same as factoring n. Similarly, if you can compute discrete logarithms, but that seems to be about as hard as factoring.

==== End RSA recap.

All of this can be cast more abstractly in the group (Z/nZ, * ). Doing so gives us the same system in more generality. This is what ECC does. You choose and publish an elliptic curve - C. Then you choose an element, e, and compute its inverse d in C. You encrypt a message M by taking e.M (remembering that in ECC we usually use + as the operation symbol instead of * - so this is the equivalent of M^e).

And it all works.

Possibly someone who knows more about this than I will find gaping holes in the above, but I think that should get you started.

To address the other question:

> I always thought that elliptic curves were
> an algorithm to break cryptography like RSA

There is also Lentra's Elliptic Curve Integer Factoring Algorithm. That is basically the Pollard Rho factoring method, but in a group corresponding to an Elliptic Curve, rather than in the usual Z/nZ. Factoring integers can result in breaking RSA, and Elliptic Curves can be used in factoring, but that's a different question.
The real news is a rare violation of Betteridge's Law Of Headlines was spotted in today's Washington Post, a sight that shocked pundits worldwide.
I was thinking about this solution, and I also have a truecrypt drive (locally). But if you changed just one file in the truecrypted drive, shouldn't then Dropbox re-sync the whole encrypted drive?
niggers

http://www.templeos.org/files/TSGodSetUp.zip

God says...

what's_it_to_you Moses I_forgot air_head jealousy awful
that's_all_folks hit joy that's_your_opinion The_good_stuff
fortitude petty smurfs bank I_had_a_crazy_dream when_hell_freezes_over
Knock_you_upside_the_head Tomorrow how_high I'm_God_who_the_hell_are_you
Bam maybe_I_didn't_make_it_clear earnest perfect envy
quit This_is_confusing break_some_woopass_on_you car I_was_sleeping
liberal
Client side encryption is enormously better than no client side encryption.
The problem is Ellsburg released evidence of government officials doing something illegal which meant he was shielded. The NSA story, which is not even fully known yet, though classified is apparently legal and has congressional as well as judicial oversight. The IRS and reporter wire taps are far more likely to take down the presidency.
How does this compare to Tarsnap?
Shouldn't the NSA image say "Verizon" and not "AT&T"?
Talvez não seja tão facil assim. http://www.classeaflex.com.br
Welp, I'm now contractually obligated to go read his books.

Yeah, like I needed an excuse to read more scifi /s.
True, thanks for the feedback, you are absolutely right...made a change to this so it works better now :-)
I did try and delete this comment. I was referring to a court document in which he admitted to pinning one of the victims down and preventing her grabbing a condom.
Idiotic sentiment. We know pretty well what is achieved based on government statistics and the "successes" that they actually show us: there is practically nothing achieved because the terror threat is practically non-existent for the US.

I also have an anti-tiger rock. Just imagine how many tiger maulings that thing has saved me from! It was a steal at $100 Billion.
National Uproar: A Comprehensive Overview of the NSA Leaks and Revelations
You do know that Australia and NZ share intel with your boogie monster don't you?