skysight-inc/HackerNews huggingface dataset:
I agree. First of all, what I have read so far, we the "public" don't know the capabilities of that agency, so by definition, you can't know whether some technique will protect you.

Correct me if I am wrong, but a common sense tells me, that if they are able to monitor all Internet traffic, and also can run their own Tor nodes, and also possess software to analyze those big amounts of data that the monitoring will produce, I just can't see how you cannot be ultimately tracked even on Tor.

As I see it, many of those defenses just assume that your adversary is not able to "cache" the whole Internet traffic, and that he also don't have such a strong computer to crack PGP. But relating to nation-state agency, those are already nothing more than assumptions.

Anyway, the points in the article are quite efficient against the lesser capable hackers. It never hurts to put less amount of private data to the Internet, for example.
If they just wanted the name to be a variation of 'C', they could have called it 'Ç', since I'm guessing that most people can type that easily with their keyboards.
Yes, good approach. It would be very cool to build this from real hardware instead of an VM, now that we have Arduinos and RPI's.
IOS Parallax library
So another NSA leak will just be flagged and globally wiped from the web.
Disclaimer: I work for Google but the following is my personal opinion.

FWIW, the part about never deviating from the "One True Way" or the description of Google as "a rigid environment with adherence to arbitrary guidelines" is simply not true. One of the things that is brought up in the initial orientation is that Google is meant to be fault-tolerant and flexible across the board. From an engineering aspect this means that if a single server crashes due to bad code, the system should be flexible enough take steps to recover. From an employee aspect, if the employee isn't happy with their job, they should be able to flexible enough to take steps to recover.

However, since Google doesn't micromanage its employees, the employee might forget that this is an option and remain unhappy. In my case, I realized that I wasn't happy with my position a few months after joining the company, remembered what I was told in orientation, talked to HR, and moved to a different position where I was much happier.

If I thought the rules were actually inflexible, then I would have stayed in my original position, got burned out, quit after a few months, and probably complained about the company to others. Google is flexible, but requires the person to actually take advantage of this flexibility.
Doesn't the edit box's display logic run in the browser? If you get a POST request from me, how do you know I sent it through visiting your web page instead of from curl?
It's not that bad of a business.

Many people still subscribe to cable. I don't, but on some months I spend upwards of $100+ on movie tickets and Blu-Ray disks (Yes, I buy them.) Other months I realize I can do a zillion other things (go to a zoo or play golf) for what movie tickets cost.

Things are going to change, but the unique concentration of talent and intellectual property based around L.A. will be a force to be reckoned with for years.
Winer has an axe to grind (actually several of them, tbh): he sees RSS as "his invention", and will never forgive Google for destroying the market for paid feed aggregators with Reader.

Now that Google are shutting down Reader, on one side he's complaining ("they stole it from me and for what?!"), on the other he's hamfistedly trying to revive interest for the technology.

Of course, none of this has anything to fo with the NSA etc, but that's Winer for you, forever clutching at straws.
And then there is open graph…

https://graph.facebook.com/search?q=my%20cell%20number&type=...

Become your own NSA!
Jump to conclusions much? Perhaps they can't pull user data at will from Google and Yahoo without a bit of legal process and human intervention at the company. I imagine we'll find out soon. But that only applies to Prism.

It looks like email they catch on the wire, which is probably their main source of email, as well as phone calls, may well be fair game for the "plug in any selector...".
Yeah, I know that. The vast majority of people don't.
I can't believe there is no redmine here!
It's RT's M.O. to gin up controversy, isn't it?
Moving forward makes me feel a little bit too much like I've just tripped and am about to head plant into some rocks.
نتيجة الاعدادية الازهرية 2013
Don't forget making accurate backups, assuming it's legal where one lives.
I have a lenovo x230 that works great for me... It's not as high-res as an X1, but it is super easy to swap in 16G of ram and an SSD. I think the X1's ram is soldered. I also have an extra battery that snaps onto the bottom which will give me ~10-12hrs of total battery life when I'm going about my usual business.
Please read this, it's old but still applies: http://www.geek.com/chips/why-amd-mhz-dont-equal-intel-mhz-5...

Since Intel is the driver for cutting edge technology they, by a wide margin, have the most potential for drastic improvements. ARM is mostly restricted to the mercy of Qualcomm, Snapdragon, and a few other companies who rely on third party manufacturers of semiconductor fab equipment.

Also, I laughed out loud at "bloodshed." Intel has about half the assets of Apple with plenty of cash in the bank and controls something like NINETY-SIX PERCENT of the server market. Even if they lost half the market in the next ten years, the only bloodshed would be the cost of engineering and IT time wasted moving architectures. Worst case scenario they become a contract manufacturer for the best ARM chips.
Bad cop, no doughnut.
I'm not sure what conclusion your comment suggests I've jumped to.
"Not true" makes an unwarranted assumption.

Watch the video, he has one story from the NSA in a classified hearing and the opposite story from the FBI in an unclassified hearing. Nadler is pleased with the report the FBI gave (requesting tapping for an individual from a court).

There's still the case of what the NSA said at the classified hearing.
Is there anyway to view that on mobile without being logged in to Twitter? It briefly shows the tweet, then it looks like it decides that since I'm on iPad I should be on their mobile site and goes to the mobile login page.
Is the New NSA story Accurate?
Regulation and the share economy
A lot of the English language is a showcase of non-obvious pronunciations (ex: "finite" [fi-night] vs. infinite [in-fee-nith]), so that seems like a strange complaint.
Did you read the article?! It's a straw-man pointing out that the only way to ensure privacy is with the protection of law:

>If we really want to protect our privacy on the net what we need is more than better technology, we need fundamental changes in our laws and how we enforce the privacy laws we do have. Then, and only then, will we have a fighting chance of keeping our privacy on the Internet.
A validation process is a good idea but I'd still feel safer if the device were frozen with no way to update firmware. Many microcontrollers have "e-fuses" which you can blow post-manufacturing to render the program flash read-only, for example. One can also pot the board in epoxy to make tampering more difficult.
I see it the same way. It's completely irrelevant that you don't have a NSA-backdoors, when you are "cached" (see in wikipedia: Room 641A), i.e. all Internet traffic (at least in the U.S.) and all phone calls are collected. We even don't know if they can't crack PGP...do we?
Science Lives: László Lovász
If you throw enough "This time it is different" on the web a person may guess one.

When i shop for a new desktop I feel I am essentially paying intel tax. Since AMD begun to play catch up the intel desktop product line moved from providing value for the customer to extracting consumer surplus more efficiently. I would be surprised if this is not the case in the server market.

The lack of VT-d on K processors and the totally locked other CPUs are a good example. Nobody likes being milked which can create some desire to diversify from intel even if the savings are not enormous.
Lindenmeyer Systems – A Python Adventure
or c// ( or c|| ) which would graphicaly show it's a subset of # ...
You've jumped to the conclusion that if user profiles that haven't yet been delivered through Prism can't be reached with "plug in any selector..." that "plug in any selector..." has been debunked.

However, it appears that in the telephone and over-the-wire email interception programs, "plug in any selector" is quite possible.
To be fair, having watched the five minute segment in question, what is pretty clear to me is that Nadler was told in a security briefing a few days ago that it is possible for the NSA to start listening to calls without getting an additional warrant.

Mueller makes no corroboration of that, and says his information is different, but Nadler is pretty clear on this point.
> But Google does not have a monopoly in their field.

A monopoly isn't required for this kind of exploitation. A feudal system can have quite a few lords.

> The problem I see here is that, when the checks and balances that are supposed to rein in government abuses fail, we're in trouble.

Absolutely. We must try to keep democracy itself working in order for it to be able to save us from feudalism. I'd even argue that a government with failing checks and balances is also one more likely to let feudalism grow.

> You can walk away from Google's services, but that level of choice doesn't exist when we're talking about government.

With this I disagree. Well, I agree with the second part, of course, but I don't think people can walk away from Google (and not straight into the hands of another Google). The option exists in theory, and some people who care about privacy will walk away, but the majority won't because the "Google option" is so tempting. I care a lot about privacy, and yet I use Google's services because, honestly, I can't be bothered not too. But I do think Google must be broken up and/or come under heavy regulation.

Most forms of exploitation are not overt. Many of them don't seem to hurt that much - at least at first. If they did, the people will rebel. Most forms of exploitation lull you into submission, always providing you with the theoretical option to "walk away at any time".
We started on Instagram already: http://tosdr.org/#instagram and will hopefully review it more and give it a class soon. :)
This explains just how crazy this exploit is: http://localhost.re/p/solusvm-11303-vulnerabilities

This exploit exposes every password (decrypted) of every customer.

Edit: so a large-ish cheap provider called Ramnode was exploited and thousands of customer details leaked, the person that did it is known among the community and left proof in the logs! Looks like some kid has ruined his life with this exploit.
I'm only interested in and commenting on email and Google/Facebook's supposed (but false) entanglement with NSA. I'm right there with you on the over-the-wire stuff.
Thank you! And yes, while some of us are lawyers of course the page can not be considered legal advice.
Sorry for the confusion, we’re moving the short description a bit up and in general make it more clear what we do: Rate terms of service of websites. :)
No, it isn't about secretary. It's about huge problem with the way many developers approach their work.
Also, I would want to know the difference between Full Disk Encryption of file/folder-based encryption like ecryptfs in the wear and tear on SSDs.
If Iraq's WMDs didn't exist they could hardly have been the main reason for invading, yes?
yuri gagarin's life is the subject of the book "Starman: The Truth Behind the Legend of Yuri Gagarin", it's pretty fascinating to watch him through his life and ultimately become a tool of the state for propaganda purposes. his death was largely caused by him ceasing his flying so much, a skill that dulls unless used constantly.

http://www.amazon.com/Starman-Truth-Behind-Legend-Gagarin/dp...
The company is bankrupt. Their only remaining asset of note is this lawsuit. As I understand it, the judge is letting this lawsuit go forward in the hope of extracting enough money to pay off the creditors more fully than they otherwise could.

So yeah, it is a pile of leftover money that is pursuing the lawsuit to the bitter end prior to handing back what little remains to the various creditors.
You are overreacting, not to mention reaching the wrong conclusions from these NSA reports. The problem isn't measurement, that is a cornerstone of engineering (and of everything else really), the problem is government overreach.

It's almost as insane as that piece in Slate claiming that Hadoop is evil because it enabled large scale data analysis (http://www.salon.com/2013/06/14/netflix_facebook_and_the_nsa...). Technology is not the issue.

This newly found aversion to tracking and measurement is a stupid knee-jerk reaction to the news.
I installed the app on Windows, but it was a real nuisance. I was annoyed :-(
Unfortunate.. yet why is HN telling me this
Clock doesn't mean anything if the communication peripherals (technically busses not peripherals in processors) can't feed data from disk, RAM, and ethernet fast enough. The problem is that ARM has never been a high data throughput architecture, since few devices that need to process a large stream of information also need to be mobile. In the early days, Intel won because it crushed everyone with its bridge speeds, cycles per instruction, etc. and now ARM is crushing it on low power consumption. Problem is that ARM is nowhere near Intel's performance in real world scenarios, despite a lower Watts per MIPS.

I don't know of any benchmarks quantifying the difference but when I compared a stripped down Android on a Transformer Prime (Tegra 1.6 ghz quadcore, don't remember if it was DDR2 or 3) with Angstrom on a roughly equivalent Intel Atom COM Express module (All code running was C/C++ not Java). In almost all of the tests I ran (all specific to my own use cases for web apps, CV, FEA, and market analysis for EVE Online) the Atom processor blew away the Tegra because the Tegra cores spent a lot more time idle waiting for peripherals.

Edit: Forgot to mention that this is true (afaik) with operating system overhead and mismanagement on ARM chips. If you use a micro-kernel and optimize your code for all of the peripherals of the processor (i.e. using DMA directly instead of letting the kernel fuck it up) you can get ridiculous speed increases over Intel stuff. Ofcourse, this is true only as long as Intel processors are as inaccessible as they are now. If they start selling surface mount soldered chips then you could do away with the OS overhead on Intel too.
The nut of the story, and its entire newsworthy factual content, is that Nadler is pleased to have been informed by the administration that the NSA cannot in fact listen to the contents of phone calls without a specific warrant.
It looks like Mozilla outsourced their tracking to a third party, Blue State Digital[1].

$ host sendto.mozilla.org
sendto.mozilla.org is an alias for secure-mozilla-1.bsdtools.com.
secure-mozilla-1.bsdtools.com has address 66.151.230.193

[1] http://www.bluestatedigital.com/
It will be funny if the NSA saves the newspapers as the only method left of communicating securely. You just take out encrypted ads in the nytimes when you want to communicate with someone. No way for them to know who it was meant for. What are they going to do, ban encryption in newspapers ?
Are they going to torture everyone taking out encrypted ads ?
Thanks for that link. My Samsung Galaxy S III was not on the list - cool that a lot of phones are already supported.

Even better would be able to buy a Google Nexus phone out of the box, that was all free.
"Most people are years and years behind the world." You read too many good blogs, crappy enterprise software actually is "world".
Ah, interesting to know the reason for the CAPITAL LETTERS, thank you!

In perceptual psychology the problem that they are ignored is also known as »Banner Blindness«: https://en.wikipedia.org/wiki/Banner_blindness – »a phenomenon in web usability where visitors to a website consciously or subconsciously ignore banner-like information«.
Nadler was at the classified hearing, and confirmed to BuzzFeed that he believes NSA is using specific warrants to capture phone content.
I believe the NSA scandal is horribly wrong.

However, this link shows Trevor Timm's latest tweet, which is very important, and supports reporting by Julian Sanchez, where he started to notice the misinterpretation. Accuracy matters.

http://www.juliansanchez.com/2013/06/15/nadler-and-mueller-o...
Numerous examples exist of firms beating Intel at creating high-performance CPU's. Nobody can best them at business though. Otellini spent just enough on R&D to keep Intel caught up with its competitors. It will be interesting to see what they do without him.
I think we should learn to pick our battles.

Email itself is 100% insecure. You should assume that 100% of your email is available to the intelligence community. (There's a reason Petraeus never sent any email to his mistress. According to William Binney, the NSA keeps copies of all emails sent to or received in the US.) So, they already know this email was sent to you.

Stopwatching.us is going to present your signature to Congress anyway. If you're paranoid about the US government, it doesn't make sense to sign the petition.

The only additional data they can receive from this innocent tracking code is that you read the letter (if you decided to display images) and that you clicked on a link (if you in-fact did).

The intelligence community could conceivably do a lot of terrible things with everyone's phone records, everyone's Facebook data, everyone's Google searches... but if you want to remove measurement completely from the web, that's a bridge too far.
On a unrelated news we observe massive increase in computer literacy among UK male teens and the VPN traffic in and out of UK increased hundredfold.
I don't think these sites are formally hosted or run by Mozilla.
They probably just support the outcry "lets asks govts to stop watching us"

They certainly should think twice when they redirect a DNS overnight.
What's happening is that low-level APIs for manipulating the database schema are being worked on, and will become part of Django. Then, many types of tools -- including migration tools -- will be able to be built on top of those APIs.

In the meantime, South still works quite well.
> A surveillance state is _certainly_ incompatible with the constitution

That part isn't actually true. It's arguably and intuitively incompatible, but it's not certainly incompatible. This is a really important difference that keeps getting swept aside by ideological rants. If you're going to make the Constitution your basis for law or morality, you need to (1) know exactly what it says and (2) have a very strong sense of its history of interpretation.

I would recommend that you avoid this line of argument, though, for two reasons. One, it's not portable to other countries. "Incompatibility with the U.S. Constitution" is a bad reason for China or the UK to not become a surveillance state. This forces you into an American-centric position that's basically blind to international nuance. Two, the Constitution can and will be changed, and the reasoning for doing so is never going to be "compatibility with the Constitution".

It is rare that I would recommend a libertarian perspective, but this is a case where it would behoove you to study how they come to their positions. I recommend the libertarian one because it's simple-minded enough to take little effort to understand their reasoning process.
It is very hard to not love this guy.
Open source hosted web apps
http://tosdr.org/legal.html (linked from the bottom)

But there are no specific terms around the service we provide to you. The only thing is a disclaimer: "this is not legal advice" this is just our opinions.

It's like reading an article or a book. You don't need to accept ToS to do that ;-)

One other example would be to use Free Software. If you download and use, e.g. GNU/Linux, you are not accepting any ToS. (For instance, only modification and distribution of copies is regulated by the GNU GPL. Merely using the program is not).
This would seem to not be very effective for child porn for a variety of reasons including

# NO PORN HERE CAPTAIN
User-agent: *
Disallow: /

Of course, it would be useful for copyrighted images.
Forgive me if this is naive but I thought the way it's supposed to work is that you pick a phd advisor/program whose goals/research match your interests.

External funding means there will always be some compromise but couldn't we draw a similar analogy with companies and their customers? I would hope a phd program would allow someone to work on their interests (aligned with their advisor's) for a much longer time than a comparable job in industry would allow.
This one is must-read for all (not only non-technical) managers. And actually it sheds light not only on management but recruitment as well. Simply you need people who are passionate about the result (shipped feature that adds business value) not the process (exploring, tinkering, learning etc.).
Clarification, I meant save print delivery.
"a large step of trust by installing executable code into my browser."

Have you read the page where you get the extension? http://tosdr.org/downloads.html : you can get the source code on http://github.com/tosdr
I see what you mean now from this context, thanks for the clarification, however it is just restating that they are denying that they knew of prism, not all allegations. Part of the confusion here is that the slides say one thing, the article summarises it (perhaps loosely) and google denied something else altogether (back door etc). I would note though that the article did not say they had unfettered access via a back door, or root access or any such detail, those are things implied in the google statement, which curiously denied things the article did not allege.

Personally I thought the article did an OK (though far from perfect) job of summarising the puzzling gaps between the slides and the company statements, and didn't imply all the things people have read between the lines, but wish it had gone into more detail, however I don't feel that's a hugely important part of this story. It sounds like we might hear a bit more detail over the coming weeks.
Don't need print delivery if nytimes releases an app that pumps all classifieds to you even if you ask for just the front page.
They also claimed to delete records more than 5 years old.
If you want another one, my trimmed-down Arch install gets better battery life than Windows on my Lenovo T410. Around 6 hours versus 4 with the extended batter, without a lot of nitpicky optimizations.
Uhhh communists and liberals _hate_ each other, I'm not sure where you get that it's 'basically illegal to be liberal,' either. Neoliberalism is the prevailing social order at the moment.
"When gave bread to the poor, I was called a saint. When I asked why they were poor, I was called a communist."
I realize you're interested in defending these companies' involvement. That's fine when it's on topic.

However, you've just replied to an article and comments that focus on the content that's being intercepted outside of Prism. You don't even mention in your comment that what you're saying applies only to Prism. I know you're sensitive to the Google-bashing, but that's not going on here. It's important we discuss the other aspects of this story and not get too caught up on Prism until we have all the details.
Where you see "innocent tracking code" some people see "exploiting a hole in the way a piece of technology works to obtain information about people that they don't expect you to be able to obtain, and never gave you permission to collect"
Is it a common experience that, as a single person in SF, you'd make $100K and end the year without any money saved? I'm not asking with any judgment or critique implied. I'm genuinely curious if that's normal in SF.