skysight-inc/HackerNews huggingface dataset:
It's well known that they do on the transport layer (Verizon, AT&T, etc). Not so much on the application layer (Google, Facebook, AOL, etc).
How can we verify that the app on the App Store was compiled with the github source? (So all the code can be examined.)
Comcast Universal Remotes Have Hidden Macro Support
Ask HN: Where have all the cryptoparties gone.
I'm just wondering, in light of all the NSA/PRISM revelations, why there aren't cryptoparties sprining up all over the US and Europe. If any one knows of any in the UK, I'd be happy to be corrected.
Internal to NSA that's called the "equities debate". Pretty much fought through the 1990s -- the defense guys won once credit cards needed to be processed online, and 1998-2001 was kind of the golden age, then the Saudis crashed their planes and pretty much from 9/11 on it's been all the offense/SIGINT.

Within the government, there were a lot of big pushes through the 2000s (and to today) to do things like disconnecting government from the commercial internet except via specific gateways, get host based intrusion detection on all DoD computers ("HBSS"), ban USB keys (after the Russians started putting nice factory shinkwrapped ones full of malware in the on-base markets in Afghanistan...), etc. I.e. bringing government up to the level of a well-secured private organization.
ChatSecure will always remain free of charge to ensure that everyone in the world has unrestricted access to privacy technology. The project is mostly funded by very generous grants, so there is no need to "monetize" the project.

The amount of money we could make by selling the app directly to users wouldn't even begin to support the actual cost of producing and supporting the software.
Very cool, works well on nexus 4 and 7. Nice, simple UX. Consider me a fan.
I doubt it. Bitcoin is very well-thought from the point of view of security, while MtGox has had all kinds of problems, including SQL injection.
There is real historical experience with http://en.wikipedia.org/wiki/Sortition -- and AFAIK Athens wasn't worse-governed than the U.S. over its period of democracy. (It's true the scale is different.) Thinking we could just swap it in for elections seems silly, yes, but it could serve as part of a package of real reform.
Generally, patent program or not, employees at companies with real employment contracts (ie, any BigCo) don't really have the power to hold their employers hostage for terms for patent assignment, so this is a distinction without a difference for me. But, "before assignment" is the answer.

You should not be OK with being legally obligated to do work for your former employers on their schedule.
China’s Great Uprooting - Moving 250 Million Into Cities
Are you kidding me? Not having access to guaranteed-issue health care makes it impossible for many families to start companies and keeps them chained to full-time jobs just so they can be assured that they won't be bankrupted if they get appendicitis.
Most of the COMSEC mission is getting secure software/algorithms/protocols/standards speced, written, and deployed, not secure IDSes and stuff operational (that's generally been done at the service level or below). And generally the NSA's contribution to commercial security has been via their advisory role to NIST in the process to develop or select things like AES, SHA, etc. (and various FIPS, like 140-2, required to sell to government, but also used by private industry).

The "NSA run CERT/IDS/etc." is obviously problematic, but I'm pretty happy to have NSA/NIST advising on algorithm selection, as long as the algorithms also are liked by the open community (giving NSA a veto, even a secret veto, seems fine as long as there are enough options.)
bro, do you even CSS?
Have you ever listened to Alex Jones on the radio? You might like him.
At least not an instrument of the state.
ReQL for binary suggestion: take binary input in the form of a no-args generator function (called repeatedly, returns a series of binary blobs and then null as EOF) or where the language permits, allow a language specific abstraction of a read-once stream such as an IO in Ruby as a higher level wrapper for that. Return binary data in the same form.
Had you actually suffered from the Other OS removal? I am asking because everybody complaining about this on the Internet does not even own a PS3 and people who actually had ran Linux did not complain about the update as it did not affect them much.

The only issue you'd had if you used PS3 for computation was the fact that the hardware had been discontinued (long time before the update), but then it's been already too expensive for the computing power it provided.
Another Control Center suggestion http://dribbble.com/shots/1109305-iOS-7-Control-Center-Reima...
Ad revenue. :(

liberationtech seems good; p2p-hackers was ok for a while. the old cryptography list was ok in a couple of the incarnations. cypherpunks before the great decline is still my gold standard, though. (remops has been ok at times; some of the digital gold lists were also interesting).
IQ tests are inaccurate: Here is how to defy them
Is bulgaria also a similar case?
JavaScript Hackers (not just jQuery)
For context, watch Paul Romer's two TED talks:

http://www.ted.com/talks/paul_romer.html

http://www.ted.com/talks/paul_romer_the_world_s_first_charte...
Nah, how can you say those icons are just plain ugly and then based on a light modification say they're almost beautiful.
Yes the new version on the right is better, but it's in the same category, it's nothing too drastic. The OS is fine, it'll pick up, people just hate sudden change. (I don't even use an iphone maybe thats why it doesn't bother me that much)
In addition, Google is already publishing NSLs separately to normal warrants. To go along with this agreement, they'd have to stop doing that and start aggregating them with normal warrants. That definitely seems like a huge step back.

I think they're doing the right thing here.
a single device can be both AND and XOR. that's weird stuff.

I'd say it depends on how you would define "single device". Imagine the possible complexity of such water devices build with a 3D printer and still it's just a lump of uniform material, albeit structured.
Well, neither the RNC or DMC would nominate a Lincoln or MLK but love their Arnolds.
I thought that was because better formats came out... With no improvement on the 'encryption' end as far as I can tell, because I can find bluray rips for any movie that's come out on bluray.
> "the Cuban missile crisis, when Che Guevara was nearly successful in instigating Nuclear War"

Wait, what? Even if you meant to say Khrushchev, that's extremely one-sided..

http://en.wikipedia.org/wiki/Cuban_missile_crisis

After provocative political moves and the failed US attempt to overthrow the Cuban regime (Bay of Pigs, Operation Mongoose), in May 1962 Nikita Khrushchev proposed the idea of placing Soviet nuclear missiles on Cuba to deter any future invasion attempt.

and from the section "Responses considered":

The Joint Chiefs of Staff believed that the missiles would seriously alter the military balance, but Secretary of Defense Robert McNamara disagreed. He was convinced that the missiles would not affect the strategic balance at all. An extra forty, he reasoned, would make little difference to the overall strategic balance. The US already had approximately 5,000 strategic warheads, while the Soviet Union had only 300. He concluded that the Soviets having 340 would not therefore substantially alter the strategic balance. In 1990, he reiterated that "it made no difference ... The military balance wasn't changed. I didn't believe it then, and I don't believe it now."

But yes, if you consider that in a way it was a rather benign thing done to defend an ally, and compare that with the panic and hypocritical indignation about it, then the paranoia was understandable indeed; I can understand how and why it was engineered, that is.
I like the iOS 7 icons. I think they look nice and fresh.
Basicly this command is "Do as I say but don't do as I do".

Sad enough this make the majority of people follow.

behhhh.
lul, the computer doesn't see into the mind or the soul, and that's exactly what a guy like this would want you to believe.

you're ridiculous if you think a person can be reduced to a model derived from algos
I'm sure there are stringent barriers in place. Thing is, when many of the senior officials at NSA are former high-level executives at contractors, and vice versa, it makes you wonder.
go date him if you feel this strongly
Without thinking a whole lot about it I had assumed prisms were used in the optical splitters/couplers central to the program. That doesn't seem to be the case.
If I weren't taking responsibility myself, I wouldn't be asking this question, don't you think?

Precisely because I DO NOT want to break the trust (nor the law) is the reason that I'm asking the question.
Please help us #changebrazil
DoD vs. DOD is a big enough debate :)
They'd have the whole of the tor network, including entry and exit nodes. Why run your own exit nodes when you can just sniff the traffic of the existing ones?
You could theoretically clone the source, check out the release tag, compile it, and then compare the checksum of the binary of the .app file, but I'm not sure if that would even generate the same exact file or not. You might also need a jailbroken device to decrypt and extract the App Store binary.

If you really want super paranoid level security, communicating digitally is probably not your best bet anyway.

Here's the SHA1 checksum of the compiled binary from the latest release (2.0):

f9347ae51c3276f4b34fba0be7c0648f20c8c11e /Applications/ChatSecure.app/ChatSecure
How to break Google Search
Paste this in the URL bar:

https://www.google.com/search?q=WTF&fp=

curious...
Deal making and the stock market are probably the fastest.

Stocks. The stock market isn't much of a good one without a knowledgeable mentor that can show you how to create and verify an edge. Without this, you will not know if you are consistently making money over time irrespective of short-term results.

Deals. Larger deals work best, so that generally means business or real estate. Once you have an idea, you can use cross directories to solicit your targeted group. If you can make arrangements for people that make them good safe money, funding the arrangements won't be a problem.
There's no easy way. Even if you do verify it, there's no guarantee Apple won't push an update with a backdoor because NSA asked them to.

That's why it's better to use Crypto.Cat - its source is the executable. Verifying the hash is enough to make sure the source code didn't change.
No, I'm also fairly ignorant on the subject.
See my response to parent here: https://news.ycombinator.com/item?id=5886613
It seems like punctuated equilibrium with a slight downward slippery slope -- it generally gets worse (due to investigators pushing the limits little by little) until legal decisions or technological changes push back and make big changes one way or another (not always for the better).
It's interesting how designers prefer the weather icon gradient the other way around, even though the original direction is true to nature. I think it shows some tendency towards conformity with classic button shading, consistent with the way everyone dialled back the color saturation.

The extra padding in icons and the smaller button radii really do work better though.
Still, wouldn't their threats scale with their services and number of users?

No! This is almost never true!
Mejores Lugares para Vivir Mejores Lugares para Visitar
Winterboard anyone? There are dozens of themes similar to iOS7's and they have been available for years. Nothing new here, move along.
Compared to how long it's been since the Empire fell, yeah, that's quite recent.
Had me until he drew an analogy between MLK Jr and Edward Snowden.
Loadjs gem - Allows page specific JavaScript in Rails
Somewhat OT: A few years ago I was really into customizing my desktop and remember falling in love with much of David Lanham's [1] work. Most icons and "skins" and whatnot, from WinAmp to Mac OS X, were about maximum gloss and 3d effects I guess because people were finally free from all the '90s clay-like UIs. His stuff stood out though, and one of my favorite icon sets was his Sticker set. Not quite the same but in a way it feels like that style just 'grew up'.

[1] http://dlanham.com/
[2] http://iconfactory.com/freeware/preview/stkr
That just means that Mark Karpeles needs to hire better programmers.
US Embassy in Islamabad found wiretapping offices of the President
These articles are largely pointless, since taste is subjective.

For instance, I find a few of Leo's icons to look slightly better and a few to look slightly worse. Going down the page, JustD's, Zane's, and Ida's icon sets look worse overall, in my opinion.
Manning's situation is totally different. For one thing, he's active military. For another, he didn't even know what he was releasing.
Can you actually validate HTML from user mode javascript? Isn't the HTML that you can access from JS the result of the browser's parser doing various things to 'fix up' mangled/incorrect HTML, and map the HTML to the actual object model (tbody elements, for example)?
What's disappointing to me about most of the Dribbble redesigns is that they don't question Apple's choices more. Instead of questioning whether four spheres is even the proper metaphor for Game Center, they just focus on beautifying the 4 spheres that already exist. Any redesign that accepts the black and white stripes on the Video icon without question is a failed one in my opinion.

Saffad using opacity to separate Control Center sections is an awesome improvement. It's awkward that in the iOS 7 promotional video they say that "iOS 7 is a clear representation of these goals", and then the first screen they show is Control Center with the overwhelming dividers.
I got one of these for the first time (on a different carrier) last week, it was horrible. I was listening to music while exercising and it startled the shit out of me-- it was blairing an emergency whistle right in my ear. My wife was sleeping and her iPhone scared the every loving fk out of her.

All this for an amber alert which frankly had very little relevance to us. I think mass notificaitons of this sort need to be reserved for mass emergencies.
fastmail.fm is great. I've used them for a decade.

The downside to me is their spam filter is not as good as gmail.

I read my email in a local client so I can't comment on the web interface.

That said, far less of my communication is done via email these days. Like, almost nil. It's almost gotten to the point where I don't need email at all. It's mainly a repository for online receipts. I'm toying with the idea of killing my fastmail account and just using my gmail account for receipts.
Sony PlayStation 4 Launch Edition Already Sold Out At Amazon
I would love to use Crypto.cat, but there is not a mobile app yet. When there is a mobile app it will have the same problem.
Perhaps Uncharted, then.
http://www.paulgraham.com/taste.html
On the optimistic front, with a bit more digging I found this comment from Jerker Lindgren Götsten (Sony Mobile):
http://developer.sonymobile.com/2013/06/13/were-opening-up-s...

"The article was just a first step towards opening up the SmartWatch, more details will follow as the project progress."

So maybe it's not the last gasp...
I agree with the idea of not wasting time, but if you follow the advice given here, you'll come across much like a narrow-minded idiot middle/product manager with an extremely short-term focus. Your choice.

Programmers need to grow, so it's important for there to be opportunities to try new technology. Obviously this can't frequently get in the way of the main thing, but it matters; you don't want to fall behind.
Let me respond as a die-hard Linux user.

> What about Gimp and Inkscape?

I love both of these dearly, but they're a joke (feature-wise; Inkscape has a pretty sweet interface) compared to Adobe products. It's not that Gimp & Inkscape are feature-poor; Photoshop really does have that many more features.

> Eclipse, NetBeans, Emacs, KDevelop, ...there are plenty of Linux development suites

that are integrated with .Net? Almost certainly not.

> I've never had any problems [with OpenOffice]; it does what it's supposed to do for me.

OpenOffice's hit rate for correctly displaying MS-generated files is about 50%. I have to run a damn Windows VM at work to read .doc-formatted shit because it doesn't display correctly under OOo.

> Linux has VLC, Totem, and Flash Just Works on Linux Mint.

Not a single one of those supports Amazon streaming video (and I suspect not Netflix either, but I don't have a Netflix subscription). We have to use my wife's computer to watch Amazon videos because they don't work under Linux Flash.

Note that in my daily personal life, none of these (except for the Amazon thing) affect me in the slightest – I love Inkscape; I code C and Erlang in a cheesy simple editor; I write documents in LyX; I can even watch The Daily Show in mplayer (compared to which Flash's playback quality is a joke). Hence I use open-source software and love it. But I'm not 99% of the population.
How many people actually turn off their mobile? I don't think I've turned mine off in a year.

The FBI has been known to hack phones such that the microphone is turned on and transmitting when the phone is on but not in use.
NSA admits listening to U.S. phone calls without warrants
What I'm really waiting for is that other countries start realizing what this means to them. From what I've seen, most of European media has failed to point out how big of a deal this is to everyone, not just Americans. Not just the fact that a lot of European traffic comes and goes through the US, but in smaller countries this kind of all observing surveillance might be easier to set up (depending on geographical and some other factors of course).
I don't know anything about Fortran and haven't examined the code, but this comment on the blog to Fernando Perez seems to have a plausible explanation:

> The C/Python-Code has its inner loop cache friendly, while the Fortran code has a cache unfriendly inner loop (because X(i,k) and X(i,k+1) are far away in memory). -- TS
22k more signatures needed on the Snowden pardon petition
Ad hominem + Association fallacy.

https://en.wikipedia.org/wiki/Ad_hominem

https://en.wikipedia.org/wiki/Association_fallacy
Many deserts can get quite cold at night, even in the summer time.

No cloud cover, low humidity -> the heat just radiates off into space.

The Romans supposedly used to make ice in the Middle East and North Africa by digging a deep pit and insulating it with straw. They'd open it up at night and cover it back up during the day.
Elected officials have at least some accountability to the voters. If they do anything sufficiently bad then they don't get reelected

If I say "pay me 50 dollars, and I will give you X", and then you pay me and I just grin at you, and the WORST you can do to me is to say "fine, then we won't do that again", that's not accountability.

The only thing preventing that would be their own consciences, which may work once or twice but is guaranteed not to work forever.

Their own consciences AND each other. "Each other" meaning a heterogenous group of people from all walks of life, instead of mostly their buddies and "the people doing the same stuff for a different team", which is so much weaker a check. Ever been where thousands or ten thousands of people are? No cameras, no cops? At least where I am those tend to be peaceful and rather moral on average. Small groups of friends however, they can be real dicks. Split them up and mix them with people they don't know that well, or at all, and they will behave much better. Such is the nature of criminal conspiracy, it doesn't like randomness and shooting from the hip.

Don't ask me about the specific implementation details, but I think there should be more "actual accountability", and I don't see why that wouldn't be applicable to "random politicians" as well. For starters, if everybody could theoretically get "drafted" for this tomorrow, many people would make it much more of their business to pay attention to what is going on, to what others are doing in that capacity. That in itself could have a positive effect.

And maybe it could start small, with a few hundred random people who have somewhat of an influence. And if that goes well, do more of that. A/B testing, you know? Because if we're just doing Gedankenexperimente, I don't see why how I experienced the world so far, namely that people in general are good even when they might be a bit lame, and people who want power are usually compensating and sport at best some kind of genius of mediocrity, shouldn't win over your concerns.
Reading that page gave me an acute case of adjectivitis. Just the first sentence contains 4 adjectives:

'Apple finally revealed its highly anticipated iOS 7 operating system, dramatically redesigned by legendary designer Jony Ive.'

Followed by:

'It’s stunning.'

I notice this writing - and speaking - style occurs frequently by those enamoured by Apple products, probably a result of listening to a few too many Jobs speeches. It is also rather distracting in that it makes it hard to take the message for granted as it comes across more like religious fervour than objective thought. May I suggest ditching the adjectives for a more toned-down style?
For those interested, the Dribbble pages linked in the post contain actual conversations about what works and what does not (as well as justifications for both that go beyond "because I said so"). I tend to favour that over the style of the blog post which seems to be saying, "these are better than Apple's icons, because I like them more".
Yes - it seems strange that this has not already been integrated into Google DevTools which I generally use. Perhaps there is a similar Chrome extension or Firebug add-in but have not see it.

Not the same thing but there is already a jslint Chrome extension <1> and a proposal to add jshint to DevTools itself <2>.

<1> https://chrome.google.com/webstore/detail/jslint-for-google-...

<2> https://groups.google.com/forum/#!topic/google-chrome-develo...
So did Obama blatantly lie to us in his statement, or is he not aware what's going on? I have to think, if they admitted it to Congress, Obama had to know.
No? I didn't mean that they're just a bigger target. Are you saying there is no additional threat (whether XSS, HTTP, SQL or whatever) to the system when YouTube, Google+, Gmail, etc. are all being developed by different teams with different timelines etc? Of course they must have pretty sound security practices in addition to frequent coordinated reviews, but I can't imagine that makes things any easier.
Yes, you are correct. It's impossible to validate HTML from DOM traversal alone because the browser has already parsed it and forgiven any errors it was able to. (I didn't choose this title and agree that it's a little misleading.)

Technically, you could validate the markup if you did an AJAX request for the current URL and parsed the result yourself; however, if your app is generated dynamically and rendered primarily client side, you'd be missing a lot of the alterations done by your JavaScript in that validation.

This is why I think both tools have their place.

I try address this issue in my blog post introducing HTML Inspector under the section "How is HTML Inspector different than the W3C Validator?" http://philipwalton.com/articles/introducing-html-inspector/
Facebook, Microsoft reveal U.S. government data requests
Gallup should do a new poll: "Do you support or oppose NSA analysts being able to decide, on their own suspicion, to listen to domestic calls, before any warrants for those specific calls are issued? Please state your answer slowly and clearly for the NSA recording devices."
It is getting worse in my lifetime. I'd like to live in a time when it gets better.
no, I believe he was talking about a house committee investigating actions by the executive branch.

you're thinking of politicking.