skysight-inc/HackerNews huggingface dataset:
My plan for the future is to attempt to ressurect the Australian Democrats. They're centre-left, and align with my views nearly perfectly (except for their opinions on nuclear power).

The Pirate Party are interesting, but I don't see them having enough of an impact here, what with the Greens and Independents usually taking the "third way" spot.

Still great to see, though :)
Fender Logo Design Evolution
The thing is, those are all NSA folks. The tens of thousands of security professionals I'm talking about is everyone outside the NSA.
If the secret part of an asymmetric key is generated on a device and it lives and dies on that device, Apple doesn't have it -- the device does. Messages encrypted using the public part of that key can only be decrypted with a device that has the key.

But he wasn't describing a technique for decoding messages that have already been sent. He's only claiming an attack on future messages.

With control of the CA, the attacker can just advertise a bogus public key for the victim in the key server, giving him access to future messages. He can now intercept and relay.
I find your user name more ironic than you posting this on a U.S. site.
The outcome in this case of being conspiracy minded is good:

1) You don't trust your data online.
2) You keep as much of it in your control as you can.
3) You stop using Facebook and look for alternatives that don't catalog your life.
4) Foreign governments start being weary of putting all their citizen's information in the hands of the US government through their various private corporations.
That is if you choose to believe Google, which it sounds like you do. And that's perfectly natural because the alternative is too scary and infuriating to consider.

It's not much different than being mugged (it happened to me). The victim's first natural instinct is to believe that the perpetrator won't hurt them if they just hand over their wallet. It's easier that way, but people still get hurt.

Believing Google doesn't change the fact that you are the victim and that it may get much worse for you.
> The private key is encrypted with the user's password, which is not retained by Apple except in a hashed form.

> the private key is decrypted using the password and sent to the device.

wait, where is this private key coming from then? your other devices?
Seems very interesting. I signed up, when is it starting?
For all intents and purposes, they must, at least when you login via a web browser.
Me too. Every statement I've read from various companies seem to be the same.
"Apple cannot decrypt that data"

Right. No doubt true.

But there is a catch... and this is a big catch.

Even if the key generated on a device lives and dies on a device, it can still be an insecure key if it is generated by an insecure process like concatenating a well-generated but short (low number of bits) key with an escrowed, possibly public-key encrypted, "LEA" (law enforcement access) key.
https://en.wikipedia.org/wiki/Calea
Security professionals, talk to them, ask them about CALEA.
In fact it has the other kind of birth-rate problem, a looming demographic crunch due in large part to the one-child policy. And of course a mysteeerious gender imbalance to go with it.
Your idea sucks Why don't we be more honest when networking at startup events?
It's most definitely not. Of course telegraphs day's as a mainstream communication are long gone, but many countries including mine (Uruguay) still use telegraph for legal and billing procedures.
Either Apple would generate it server-side, or the first device to "sign up" would generate it.

Remember, I'm only explaining a hypothetical method by which the Apple system could work, consistent with Apple's statements and behavior I've observed from my iPhones, iPads, and Macs. It's not an explanation of a strictly secure system.
hehe, source: open street map ^_^
On the theme of iMessage, do you guys recommend using it over regular SMS? Are there pros/cons as far as privacy go? (genuinely wondering)
I have to agree. The GP is getting bent out of shape. I think him describing the limitations of the course would be useful if not worded so defensively.

This is like a professional fabricator complaining that the 10 hour welding course at night-school doesn't cover welding aluminium. I don't think anyone was under the impression that this was a replacement for a an engineering degree. People will do this course because it's cool to build stuff you thought was beyond you.

Also, enroll in a welding course, it's cool to be able to build big stuff out of metal too.
You should be able to limit the account that it's ssh-ing into so that it's just used for the tunnel. Or if you're really paranoid, limit the entire thing to a dedicated virtual machine.
But this is totally different thing.
One is what some company stores by their IT design and then what some agency can require of that data. Second is whether some agency can force/ask some company to do more, to do active spying by that agency spec. So for example, if company X does not log locations, can NSA force them to start doing that? What else can NSA by law force private company X to do? Can they for example force CEO to stalk user Y by foot? If they can not do that, how can they force to develop IT-systems to do that? So when NSA ask to turn location tracking on, and company Y refuses, then what? CEO goes to jail?
The phrase "direct access" gets special attention because it's in the first sentence of the first paragraph of the original Guardian article. The companies didn't make up the qualification -- they're repeating the accusation back and refuting it.
I am not too sure I want to live in this ugly world of ours. Staying alive feels like complicity with the evil.
Wasn't that yahoo?
Why are these companies only publishing requests from the last six months? That seems like a rather short time span.
Yes, I was responding to what your first comment said, which is, indeed, entirely unrelated to what you've now brought up.

Did your first comment not say what you meant?
The selected-papers network
Funny thing that, our innate capacity and inclination towards cruelty.
Humans are evil; 'tis our very nature.
If you with the commercial router route, checkout OpenWRT / DD-WRT / Tomato. There are several forks, so depending on what features you want, and what hardware you have, you may opt for a different version.
If you go with an existing x86/amd64, just install your favorite distro and start reading up on iptables configuration and management. While iptables to be quite powerful in terms of features, I find its' syntax is painful. There are several projets aiming to simplify this, by generating rules from another, simpler, DSL but it adds complexity.
This is why I prefer PF, but that requires you to install OpenBSD instead of Linux. If you know your way around UNIX, and are ready to read up the FAQ and man pages, this shouldn't be a problem :).
For someone who is considering moving to Oakland in less than 2 months, can you comment on the safety of the other Oakland BART station areas (12th & 19th)? I honestly can't get a good read on Oakland anymore. So many people (yourself included) say that there are plenty of safe places to live in Oakland but crime maps suggest otherwise, especially within walking distance to BART stations.

I live in Berkeley now and I'm considering finding another place somewhere in Berkeley but it should would be nicer to be a little closer to SF, where I work...
Is the point about the legal status of sending a telegram to a court made in the original article valid?
Then how would a telegram get there?
How to create a Vagrant box. easy steps
Don't we already know that Yahoo fought hard against PRISM? Why are all of these companies lying so blatantly by saying they've never heard of it?
The Hack CPU doesn't have interrupts, IIRC.
The original article also mentions the legal force of a telegram, in India it is accepted as a 'petition'.

I'm just wondering if an e-mail printed and signed at receipt by a notary or something similar could be taken as a substitute?
In Soviet Russia, jokes were a common pastime.

I believe that is what will happen.

Terror -> Helplessness -> Comedy, an irrationalization of fear if you will.

TBH I feel all this is silly, the problem foreign policy.

Why doesn't drone * get voted up ?

Say Hello to my big brother ! He loves American Pie.
Where else would you suggest?

Most European countries have to a smaller or greater extent been complicit in illegal CIA rendition flights over the last decade and/or are extradition-happy or have already made it clear he's not a desirable person to host (UK telling airlines not to allow him onto flights).

Poorer countries or countries with unstable governments provide plenty of options to bribe someone to pick him up and/or drone strikes.

It needs to be somewhere where the US can't interfere without local government support without a massive backlash, and where there's at least a chance the local government or judiciary will hinder or delay an extradition, and there's not many places that fits those criteria and even fewer that fits those criteria and are desirable to go to. I assume, e.g. Iran isn't particularly tempting.

Releasing the information was incredibly risky. He might have chosen what he sees as the least bad alternative on a long list of bad alternatives.

> whatever one may think of the ethics, legality or quality of targeting of the drone strikes, they do target people involved in a violent, armed conflict with the US - 'enemy combatants' as the USG likes to call them.

Or so they say. And use as an excuse for all kinds of "collateral damage" including dead children. I don't see why the leap to going after Snowden if he were to hide in a country where they did not see a large risk of political fallout and didn't have other options, would be so great. E.g. if he were to hide in any country with a rebel movement hostile to the US, it'd be easy to claim he was meeting terrorists. I don't we have any basis for saying anything about what his risk of being taken out is.

I also find it interesting that you write off his risk of being killed by questioning the likelihood of drone strikes. US intelligence agencies have decades of history of "quieter" assassination methods.
Recover music from iPod
If you lost or deleted your iPod music, you can follow this guide to recover music from iPod with 2 ways.
It's not silly, it's reality. Stop being delusional.
Modern websites have a lot of moving parts, and they all have to move to ARM before you can think about changing your server architecture.

Do proprietary databases run on ARM? What about the language your web application is written in? Last I heard (~6 months ago) official ARM Java is available for the bleeding edge, I'm not sure if it's made it into an official major release yet.

Then there's the incompatible softfloat / hardfloat divide, just to make life fun for those who write JIT compilers (and regular compilers).
Future messages would need to be encrypted using the new key.

If the protocol announces when a new key is added to the "encryption set" how can you get away with that?

(when you add a new device to iMessage all the other devices "see" the new device being added and tell you about it).

It would be great to see a comparison between OTR and iMessage.
I was talking about the Chinese government, if its people do care about the environment but try to do something about it they would get labelled as dissidents and prosecuted. Thats what you get for living in an authoritarian state keeping its people under thumb in order to further the party

And stop with the "racist" crap, in light of news of widespread NSA surveilance and changes over last year the USA ain that far behind.

It didnt take long for members of the Ministry of Truth to popup and try to "reeducate" readers regarding my earlier comments.
Don't worry, they'll just create some scanner capable of finding out whether you have some stuff like that or not as early as at entrance.
Hmm... it's an interesting point/perspective (I haven't read the book, just the wiki), but isn't that like saying that the log under something heavy to transport is more significant than the wheel?

Maybe you could argue that you couldn't have had the internet without the telegraph but I isn't that the case with every single piece of technology? This leads us to "standing in the shoulders of giants" etc.

So my point is, what is the point of making this point, since even if his point is valid/true, they are in different orders of magnitude of how they affected the world.

Note that I don't want to dismiss the whole argument without even reading the book, I'm just wondering...
Yes, we had some people ask us about that. It’s not really our core focus so we will probably not do it, but if anyone wants to build it our data is all open source and freely licensed: http://github.com/tosdr
I can confirm this, as I just did a clean install and set it up as a new iPhone.
Huh wow, I guess I'm behind the times. Didn't know they made that big of a jump within ARMv7. This makes me curious to look at the datasheets.

From what I can tell, the i.MX53[1] has a 64 bit AXI @ 200mhz. The Exynos5[2] on the other hand, has 64bit AXIs and also a ton of optimizations. The LCD spec says it operates off of a 200mhz AXI so I wouldn't be surprised if the Exynos5 uses dual 200mhz AXIs for memory. It's tough to tell how much of that 20 times translates to the clock speeds and the rest to optimizations. I agree the A15 is just a sign of things to come since ARMv8, although it has legacy stuff, ARM still gets to improve a lot more on the architecture specifically for servers.

For comparison, these guys [3] say 12.8 GB/S which kinda sounds ridiculous. If it's true, they really are in range of Intel. The Sandy Bridge Xeon E3-1220 boasts a theoretical 21 GB/s @ a whopping 80 watts (although the high end E7-8870 [4] is a fucking monster. At this point I can't even begin to think how they compare with all of Intel's memory stuff). The number are clearly within the ballpark, we'll just have to see a real world case. I'm curious about how well GCC and the kernels utilize all the unique processor features and optimizations. If it's mostly down to market forces, Intel's 96% market share might make it a long and difficult journey to an ARM Linux kernel optimized as well for a server environment as x86/x64 ports.

I'm too lazy to check what that assembly code is but if it uses NEON PLD optimizations (NEON is definitely in Exynos5) that may give a speed bump in memcpy (even if you preloaded the buffers) because those optimizations would use L1/L2 cache intelligently. It's hard to tell without looking at the code and diving into i.MX53's feature set more whether that played a factor. * I was thinking of malloc and free, they are system calls because of paging. Memcpy is a straight pointer to pointer copy, except maybe for whatever that assembly code does.

Time to just find a fluffy article on this topic [5]

[1] http://www.freescale.com/files/32bit/doc/data_sheet/IMX53IEC...

[2] http://www.samsung.com/global/business/semiconductor/file/pr...

[3] http://www.maximumpc.com/article/news/samsung_details_exynos...

[4] http://ark.intel.com/products/53580/Intel-Xeon-Processor-E7-...

[5] http://www.theregister.co.uk/2011/10/20/details_on_big_littl...
As I said in another comment:

» Rating the websites and making these ratings easily available is only the first step. Raising people’s awareness of bad terms and then getting services to actually use proper terms is the actual goal.«

(Original comment: https://news.ycombinator.com/item?id=5889189 )
You won’t finish this article.
Its boosters will suggest otherwise, but Oakland is pretty sketchy. Everyone I know there has been jacked at one point. It's just a matter of time. That said, the only place I've personally been held up at gunpoint in the Bay Area was in Berkeley. (San Pablo and Dwight area)
Because it was never intended as such and does not necessarily need to add any. The fact that many NAT implementations do add some security (by dropping inbound connections by default) is a side effect. I've seen NAT implementations that get it precisely wrong (consumer routers that set up .2 as the default DMZ), but that's still entirely valid.
Did, did, i just responded to your (and some other respondents) remarks that Apple _could_ do something they said they are not doing (like catching plain passwords). The fact is when company really-really wants to stalk you, they can.
There is much information that is still unencrypted like unencrypted emails via standard SMTP or all the metadata for encrypted communications - like for example the list of websites accessed by a given IP.
> No it doesn't. How would you even start approaching to prove that I can only fathom.

I don't even know what to say to this. Are you seriously arguing that having "direct access" to user data doesn't mean anything, and that it can only possibly be talking point words?

> While at the same time they are actively supplying exploits so that their software can be compromised for political gain. Their software is unsafe, and anything that they're saying is by law allowed to be false or deceptive information, hence why you can't prove the first part.

Yeah, y'know, tens of thousands of developers totally are intentionally making hundreds of security exploits, primarily of absolutely zero consequence every year, because the government told them to. Are you a developer? Do you even know how easy it is to accidentally fuck something up in code that leaves an exploit? Criminy sakes alive.

And if you're saying "Yeah but when they find out they let the government know!", I'll also remind you that MAPP supplies that information to several dozen/hundred other companies too.

> Is that not what Google claimed it could do with its machine learning algorithm?

Oh for the love of God are you really going to use BS PR phrases meant to capture the imagination of the lay masses to try and say that the NSA has real-time typing data on all of those companies, not just Google, and even then has such unparalleled software to analyze typing and speaking patterns that they can discern your very thoughts and motivations from them, not just in general, but also in real time?

> Do you work for the government or tow the party line for fun. All your shit sounds like the old this is not "reasonable" this is a conspiracy theory line. When everyone knows the reality is that nothing reasonable is going on.

Neither. I just think that the reason so many in positions of power roll their eyes is because so many of those getting angry sound absolutely ridiculous from any sort of view that could rival reality. There are legit concerns here, but we can't be overstating their position massively and still have any hope of being taken seriously.
People in Greece rationally wanted government jobs. Until the entire economy imploded. People in the US rationally wanted jobs on Wall Street until the entire economic.y imploded. In any country very few people are entrepreneurs so anecdotal evidence about a few graduates is not necessarily evidence of problems. Huge numbers of new businesses have been created in China in recent years. Profit margins are low and it is very competitive. But things are changing fast so there are opportunities.
Whether or not NAT was designed with security in mind doesn't matter.

Using NAT increases security simply by having deny by default.
First point: Wasn't the American Revolution largely about the overreaches of the British government? What about the sentiments of isolationism in the US with respect to WWI and WWII? (Apologies to non-US readers; all my examples are from US history because I'm most familiar with it.)

Second point: Even if your comment's true, you didn't answer the question -- is there a reason that "libertarian views have never had influence ever," or is it just a coincidence?
"Now I am on a computer in someone elses network. Woohoo! Now I can do remote tech support more effectively."

Great line. Now, if only the NSA were as helpful with its remote tech support.
Terrific Beijing Tours
Beijing tours offer the most popular Beijing tour packages for travel-lovers. Our Beijing tour covers most of highlighted attractions in Beijing. Such must-haves for Beijing tours as Tiananmen Square, Forbidden City, Great Wall, Summer Palace, Hutong and Temple of Heaven are all arranged for discovery. Browse the following Beijing tours and get more idea about your Beijing tour plan.
Thanks, I see that now. Paperback version it is.
Skipjack is dead, extinct.

If this were true, it would be possible to find it by disassembling iOS. There would also be a suspicious "unexplained" payload that accompanied anything that was encrypted with a symmetric key.
Telefonica Climbs After Report on AT&T Approach
How are telegrams sent these days? By email or a phone call between post offices?
We have a pirate party in Belgium and I have to say it's interesting but I honestly don't see how people are going to vote for them.
Get discovered? Fire off a forkbomb!
How Digital Relevance Grew by 3,596% in 3 Years
This is precisely what the likes of GCHQ and the NSA are for.

I was under the impression they were there to protect a nation's security against foreign threats, not to spy on delegates at international conferences for economic and political advantage.

If our behaviour is essentially amoral and we are willing to break diplomatic treaties and international law in secret (as you are advocating), we should expect the same in return, and have no right to talk about international law, human rights, democracy, national sovereignty or expect anyone else to respect them when we need them. Why shouldn't Russia simply cut off the gas supply to the UK next winter when they don't get what they want, or start murdering government ministers rather than dissidents with Polonium? Realpolitik is a dangerous game to play, particularly when you are a declining power (as the UK is), and I think it better we at least try to stand up for the values we think are right, and hold ourselves to the same standards we would hold others to.
Great Idea! Have been looking for something similar to MSDN's Coding4Fun for a while now, will definitely check out a couple of the projects
Actually you can write a nice little script that treats autossh like a daemon and restarts it if it crashes.

I did something like that on Arch linux.

Also it's probably a good idea to give it a user with limited permissions on the server it's connecting back to so if somebody finds it the can't just use it to hack your box.
The post office gets the telegram, and the postman delivers
No, not plausible.

A CA certificate would allow them to forge a website certificate (and pull off the MITM), but the website owner would still notice - they would see that the hash number of the certificate they installed doesn't match the one the browser is looking at.

Most website owners would not notice, it's true. But some would.
> Politicians believe in government

Interesting insight. I'm thinking you're saying that people who choose a political career are a self-selected sample of people who believe government is an effective tool.

But what if there are people who are alarmed at the growth of government power, and decide to pursue a political career because they want to make stopping it their life's work? Your line of reasoning would say -- "but such people would believe that government is ineffective, and wouldn't choose a political career as the most effective way to implement the changes they believe are needed."

The problem is that I don't buy it. I also don't buy that people who've already chosen political careers will never switch their views, if the government gets repressive enough.
He could spin the LED strip and make a POV display. They're surprinsingly readable even with just a few LEDs.
China’s Tianhe-2 Supercomputer Takes No. 1 Ranking on 41st TOP500 List