skysight-inc/HackerNews huggingface dataset:
I've been trying to lately. I'm not as outraged as many so my opinion tends to get smacked around a bit. So now I try to ignore a lot of it... or at least read things with an open mind, knowing that perhaps some people are wrong at times.
Well, if you can do that (program a computer via a blinking keyboard LED in Morse code to avoid Van Eck phreaking,) you're well on your way to discovering the lost Nazi gold in the Philippines.
But that's metadata. You dont need a court order for THAT!

Oh wait. That plan only works for federal agencies and secret courts. Never mind.
One of the implications of PRISM is this:

http://translate.google.com/translate?sl=nl&tl=en&js=n&prev=...
Basically all work on big data, NLP, computer vision, etc. is making spy tools.

I think it would be more accurate to say that such work can be used for spy tools. It can be used for plenty of other purposes besides, just as satellite imaging can be used for spying but also for weather prediction, environmental assessment, and so on.
With regard to PGP, you can get a reader and smartcard from Kernel Concepts. Assuming you already know how to use GPG, it's pretty easy to set up.

http://shop.kernelconcepts.de/index.php?cPath=1_26&sort=2a&l...
There are a few things about this that seem odd to me. From elsewhere in the comments, the key is encrypted with 79DEBE35, which, if you look it up on your keyserver of choice, belongs to "Verax (Informed Democracy Front)", created on May 20, 2013.

Verax was the name used by Snowden to communicate with Laura Poitras (and perhaps others as well), but the story didn't break until June 5 and his identity wasn't revealed until days later.

So why is Wired encrypting a message with a key using that name that was generated before the name was publicly known in association with Snowden?

EDIT: Disregard the above—the "encrypted with" key is the recipient's key, not the sender/signer. 79DEBE35 may well be Snowden's key (but that's not proven either).
pastebin mostly
Not by that logic. It's a safe bet that American citizens who haven't made such a promise are less likely to leave the US than are foreign PhD students who've stated their intention to stay in the US and have been cleared for a path to citizenship before they arrive, but of course are free to leave. I support public funding for both cases.

All I want is better odds they'll stay, based on the assumption that there is more supply of worthy foreign students who'd stay if they could, than demand for them. There's no good reason we shouldn't maximize the benefit to the US taxpayer, by cherry-picking the supply and paving the way to their citizenship in advance. That the PhD students do real science (i.e. a job) isn't a good enough reason to leave taxpayer money on the table.

If some foreign student is so much a wunderkind that they'll do a $million in work for their $250K outlay, but plans to leave the US, that could be an exception.
Thanks! I've already got a few offers from vendors who want to make "Citizen" hats... all proceeds to EFF of course.
Do Dying Trees Lead to More Human Deaths? The Debate Continues NewsHour
weird for our generation, but our kids will grow up with glass.
Bingo. If our government went to war over supposed weapons of mass destruction, how can we trust them with weapons of mass surveillance?
Really weird, I guessed as much a while back: https://news.ycombinator.com/item?id=4928896
thanks for the tips guys, i guess i have to give the ie7 one a download :/
Meanwhile, per the Washington Post article, he asked the guardian to setup PGP in Feb, and his contact finally did so in March, both before this key's listed creation date.
They will just use it to fine more people for misplacing their trashcans, like they did with all their security programs.
Bill Gates: Things I've Learned from Warren Buffett
Show HN: rss-box, a simple web-based rss reader you can host yourself with node
Two weeks until Google reader goes away.

I've been building a replacement for myself:
https://github.com/harold/rss-box

Idea:
- Really Free & locally hosted (trivially)
- A node app runs locally to fetch feeds and serve up the web interface
- No database at all, everything stored in files on the file system
- This means that if you host the node app in your dropbox, every machine syncing that dropbox stays up to date automatically (read items, etc...)

I've just been hacking here and there in my spare time, but it's become usable, (I've been using it for the last week, and am now ready for Google reader to go away) but the codebase is quite fun to hack so I thought I'd invite yous to come play.

(My first post here, apologies if I've violated any mores of this community.)

Take care,
-Harold
It has more to do with the structure of the public internet. A fully passive observer in a few key locations has a surprisingly high probability of being able to perform correlation attacks.

This is a pretty interesting "where do I start?" paper if you want to know more but don't have much background on the subject:

http://www.syverson.org/tor-vulnerabilities-iccs.pdf
Good point. I overlooked the fact that non-GC environments existed on OS X as well, way before iOS.
It actually has a great use:

Do the Debian legal people annoy you? Then why not release your software unlicensed; they won't be 'able' to use it and other users who care less will. Ah, but that isn't much fun... why not rile them up as well? Enter the "do no evil" clause! By being 'open source' in such a way that they cannot use their software, you can apparently cause a decent amount of grief.

They also seem to be good for getting amusing quips like "IBM requested an exception so that they can do evil with my software".

Do no evil clauses are great for trolling. An anti-corporate and anti-'takes-themselves-seriously' license.
For the record, she is leading the volunteer organization I founded three years ago. I myself have moved onto bigger and better things, such as posting "paranoid screeds" on HN.
My friend's father had his vacuum cleaner die after 30 years. He went into the store and asked for another good quality one like that, and that he was happy to pay more for that kind of quality. The sales guy just laughed.
This I'm not too sure about. I know they're moving this to https://github.com/ebryn/backburner.js. I'll read through the code sometime tonight and figure out what's going on.
I was just playing this game before I saw it on hn.
How about your own dedicated server that you can simply split up into multiple containers, with their own internal/external network? https://uptano.com It was built for people who don't want to have to choose -- disclaimer: I helped start Uptano.

And yes, you should absolutely split up dev/prod servers (while keeping them as similar as possible).
Splinter.me takes startups on Hacker Tour
I imagine anything to do with Snowden pales in comparison to getting lots of people to visit it so they can get ad revenue.
Assuming there's no known exploit. The NSA might know of an exploit for that algorithm.
I have experimented a lot with Ember.js but not used it for any serious projects. It took a while getting a grip on Ember-data. I don't know if this will help anyone but I took the example (front end only) code from "The Source for the Ember Get Excited Video", forked it on github, and added a trivial Ruby Sinatra REST service. It seems to work, but if you see any errors please let me know: https://github.com/mark-watson/bloggr-client
I don't think honest businesses can compete on a level playing field with companies that are indistinguishable from scams. Hence stuff like the FTC, although I realize many Bitcoiners would like to try a world without such regulation.
You mean it's nice to see Democrats oppose Bush's illegal spying and Republicans oppose Obama's illegal spying?

http://www.guardian.co.uk/commentisfree/2013/jun/14/nsa-part...
Nah, we'd have seen statistically more plane crashes. /s
I'm using a single monitor right now. I have 2 iMacs and 1 Macbook Air. The main one on the middle, and at my sides the rest of the setup. Including the iPad and the iPhones.
Good news for people with phones without removable battery: get a Faraday cage case for times when you want it to appear dead.
I was raised in Columbia, MD and my dad lives outside of Towson these days, so yes. I'd love to stop by on the http:/withouttheirpermission.com book tour! Details will be on the site soon, but I'm planning a legendary 100 stop tour :) and will definitely be hitting both cities...
> I think it would be more accurate to say that such work can be used for spy tools.

I think that's a distinction which lacks a practical difference. Of course they have applications that don't involve enabling surveillance by three letter agencies. But you're kidding yourself if you don't think that every major advance in any remotely useful discipline isn't reviewed and employed by these agencies.

These groups don't just hire sys admins and suits and engineers to monitor signals, etc. They hire PhDs and researchers, both to help assess technologies and to develop them internally.

I guess the point is, the advance of technology must inevitably advance tha capabilities of the surveillance state.
Coincidence... ? Hehe
Good luck! I think you'll find a lot of different opinions depending who you talk to, which makes it kind of hard to give better and more specific ideas.
Ya... a lot of other people have too. Unfortunately, I'm looking for confirmation rather than guessing. Palantir has said they're not involved... but I'm not sure that counts as confirmation either. lol
Haha, yes. Actually, I'm not sure about this but I believe Cryptonomicon may have been an inspiration for Tinfoil Hat Linux.
The light isn't being bent light-years away. It is being bent at the beginning of the atmosphere, resulting in the same degree of bending as the satellite has to deal with.
It seems as though this model will merely deter possible buyers. Why would I pay a premium now when I can wait a few days, let others incur the initial, inflated cost, and then purchase my thing at a substantially lower cost?

This phenomenon, where people wait until the last minute to go in on a product, is already pervasive on Kickstarter. (I'm not entirely sure why, but the most obvious reason is that people want to ensure that the project will definitely be funded or will attain some sort of stretch-reward before buying). Dynamic price-lowering will only exacerbate this trend, discourage initial purchases, and likely produce more failed projects.
I'm surprised that no browser has done the obvious yet: treat middle-clicking a DOM element with a bound onclick handler the same as left-clicking that DOM element, but override window.open and window.location.redirect within the context of that handler call to open links in a new tab instead.
That sounds an awful lot like the GM OnStar eavesdropping case.
The actual letter requests the "records of every phone call". That should include the conversations, not just the logs.

Of course this is grandstanding (but I support). The House Government Reform and Oversight Committee will simply ignore the request.
Well, women make up ~50% of the general population, but only ~1-15% of serial killers.

https://en.wikipedia.org/wiki/Serial_killer#Female_serial_ki...
Ask HN: Advice on finding a junior developer position
As the title states, I'm looking for some advice or constructive criticism on my work in order to find a junior developer position. I'm having quite a bit of trouble getting any response back from anyone. Maybe I should be gathering funds to pay for one of these "developer bootcamps", although I don't like that idea.

My inquiries usually go as follows, and may be a bit too honest:

I did not go to school for CS, and don't have a degree. I would like to relocate and I'm not really looking to work remotely as I would like the experience working around more seasoned developers.

I worked in automotive and roofing before rupturing a disk, and wasted no time getting into web development and all things related. I know what hard work is.

github: http://www.github.com/jamesdullaghan
homepage/portfolio(code can be found in online-portfolio in github): http://www.jamesdullaghan.me
Latest project(prototype that hasn't released yet, hence screenshots): http://www.jamesdullaghan.me/articles/5

This isn't a pitch to find work for myself, more what can I do to increase my odds in finding a junior level developer position. I'd also love some objective criticism. Maybe some direction.

It is much appreciated.
I think that's right, but why would Snowden need forward secrecy here?
>Snowden, just remember that Kevin Poulsen and Adrian Lamo helped the US Government in catching Bradley Manning.

I posted something to that effect in the article's comments. It was moderated and comments are now closed (at least for me).
Cringeworthy Journalism
It probably wouldn't take noticeable power to run voice-activated microphone audio compression and storage. Then the recorded audio could be transmitted later when the battery was back in.
Show HN: Thodo, todos on the new tab page
I did too. All comments are gone right now, including mine.

"Commenting has been disabled for this article"
Go to www.apple.com - front and center is an appeal to watch the iOS 7 keynote. If they don't want to show this to the public they're going about it in an awfully strange way.
File a bug on this, it does sound like it shouldn't have disappeared like that.
He was referring to the possibility that the NSA can already crack the underlying encryption algorithms via quantum computing, etc. If that's the case, being open source and correctly implementing the encryption algorithms is moot.
That obviously matters a tremendous amount, both in terms of how much we should continue to trust the companies involved and also what countermeasures we can take.
There is more to this headline. The way the internet unfortunately evolved is the devil's bargain of gathering intel on people in exchange for the targeted, corporate ads. It's only natural to use the giant spy tools like Facebook or Google beyond the pinpoint product placement.
>Think of this pitch as being less like a normal retail product and more like a self-organized kickstarter campaign. You are not paying for the device, you are paying for their living expenses and prototyping costs while they spend the months it will take to get the device ready for production.

This is why I'm not as infatuated with crowdfunding as everyone else. Because individual customers are supposed to supplant traditional investors, initial costs are much higher for customers because we have to subsidize research, cost-of-living, etc. Moreover, we also incur all of the risk (which is formidable, considering the volume of failed projects and the ubiquity of scams on many crowdfunding sites).

I don't understand why I, as a consumer, would prefer a system where all of the cost and all of the risk are precipitated onto me, instead of onto the country's investment apparatus.

Better all these guys spend some rich VC's money than spend mine.
Nope. Portions of the new WebInspectorUI are not even redistributable by third parties:
http://trac.webkit.org/browser/trunk/Source/WebInspectorUI/A...
Fight PRISM through the Free Software Directory
Convert it to USD and buy shit?
> Quantum computers do not allow you to break all public key cryptography, they only allow you to break the common forms in use today.

True, but it's the public key cryptography in use today that I'm concerned with!
So at a guess basically they've encrypted a message that is not Snowden's key that somehow calls back when decrypted (link, exe or something) so they know if the NSA is listening in.
Your phone bill doesn't tell you your minute-by-minute location. That what the bank robbery suspect wants evidence for.
New ebook DRM will change the text of a story to prevent piracy
> remember the old Netscape light-tower?

No, got a link?

You're dead right about the Safari icon, though. I was always accidentally clicking it when I intended to load Maps.
That's a brilliant analysis, but it assumes the "Obama administration" is actually calling the shots.

Domestic spying didn't start with Obama and he's not up for re-election. How likely is it that he will suddenly have an epiphany and take on the massively entrenched surveillance-industrial complex? (That he relies upon to protect him and his family the rest of his life).
Maybe the message is another encrypted message with a different algorithm?
Bill Gates is always very humble.
However, they gave out free bumpers and extended the return period if it was an issue worthy of return.

It took quite a bit of community anger for them to get to this point. They spent a lot of effort doing the "you're just holding it wrong" angle first. The issue isn't that they fixed it by doing -foo-, it's that they considered the fault to be in the user, not their design.
In fairness, only if we, the people, allow our government to conduct surveillance on us, the citizens. We need to roll back the provisions of the patriot act and FISA that are currently being interpreted to allow the collection of data on citizens who are not suspected of any crime and without any warrants. Then advances in surveillance technology will not necessarily lead to more invasive surveillance of citizens.
Facebook Releases Data, Including All National Security Requests
Ironic that it uses such a faint control.
Presumably the NSA knows his location during the bank robbery, via his cell phone data. He needn't have been talking on the phone at the time. If his location was miles away then he should be off the hook.
Ian has nailed down what's exactly wrong with iOS 7's icons. But misses a very important point - The redesign has largely been pointless.

Windows Phone chose "Flat design" and ran with it, the "Live Tile" was invented - More interactive, informative minimal icons. Also it brought over some beautiful uniformity, a design language that actually worked. iOS 7 does nothing of that sort, and IMO is a redesign for the sake of a redesign.

Infact, it goes ahead and destroys everything that was great about its previous iterations - Accessible, Simple, Functional, etc.

To say the least, Apple Design[1] has failed colossally, they could and should learn a lot from Microsoft and Google designers.

[1] - Not the same as Apple Designers, since I'm damn well sure that no Interface designer worth his salt would ever allow iOS 7 to happen. I'm sure past design leads on iOS and even Forstall are having a chuckle over this mess.
So this is a whole piece built out of guilt-by-association. Decru, for instance, the In-Q-Tel data storage investment, was a box that transparently encrypted iSCSI storage networks; in other words, it was the kind of technology that made surveillance harder, not easier.

Why would anyone believe Pando Daily's take on such a complex topic?
I'm not sure there's any real practical difference as far as utility or the negative effects go.
Scala.js - Write in Scala for the browser
I liked it. I was in fact not aware of the driving idea behind iFixit, and I was inspired to check it out after hearing about this guy's values and where they came from.
I'm a fan of web.foo.com, personally. Much easier to pronounce. ;)
Meet Elementary
I thought you were basically trolling me before.

> A good rationalist

"Rationalism" is actually an error. It means thinking in a way that's disconnected from percepts. Rationalism is the opposite of "empiricism," which is also wrong. It means thinking without abstraction.

tl;dr: being a "rationalist" is not good. Being "rational" is.

> should see genuine irrationality as part of their toolbox

Being genuinely irrational is never going to help you accomplish anything. Kirk was feigning irrationality.
Yes, transparency for the government, privacy for the individual.

I'm fully in support of phone call data between government offices and high-level government officials being available for review by Congress.
As _delirium pointed out, just look at the Twitter feed:

https://twitter.com/SteveWorks4You

It's pretty obvious where this guy stands. Here's one of my favorites:

"House told us to secure windows because of flash floods. On the third floor. On a Hill. Same government claims it can predict climate change"

We don't need people like this chiming in on this issue.
Is Unicode Safe?
Sorry, I quoted poorly - I was agreeing with the parent

> "I realize that may sound a little luddite-esque to certain members of this community"

This does not sound luddite-esque to me at all, and entirely reasonable.
If you want to run a headless Tor relay, I highly recommend using this graphical monitoring client called 'arm'

Link: http://www.atagar.com/arm/
Aaron Swartz looked back at reddit. He realized the company that made him rich was now nothing but a mechanism to create addictions to meme-bytes, waste time, destroy relationships, normalize sexism and racism, and literally rekindle the Neo-Nazi movement (reddit now has the biggest concentration of Neo-Nazis on the internet--the fanatical kind that even Stormfront won't tolerate on their website).

If this is even the fate for something as benign as reddit, how much worse will it turn out for people working in Big Data or directly on technologies like facial recognition?

How many Silicon Valley technologists will look back at their work in 50 years and have the same kind of feeling that Nazi scientists had, that Manhatten Project physicists had, that the inventors of mustard gas had?

Whether technology will be used as a weapon in the hands of a selfish elite, or as a tool for liberation for the impoverished and underprivileged, is being decided now by how these technologists use their time.
JavaZone 2013: Javapocalypse
I like your attitude, although you remind me somewhat of the title character in Jean de Florette (http://www.imdb.com/title/tt0091288/).
Ask for people to tell you if they actually get some good info back. If it happens then put notice of that here on HN. Then I'd be interested.
If --hidden-encrypt-to is used, there still will be signs of that. Specifically, the message addressed to 0x0000000 and the recipient will basically brute force it uses every key he/she has.

Having said, that, according to PGP Dump

Old: Public-Key Encrypted Session Key Packet(tag 1)(524 bytes)
New version(3)
Key ID - 0x5B50940B79DEBE35
Pub alg - RSA Encrypt or Sign(pub 1)
RSA m^e mod n(4096 bits) - ...
-> m = sym alg(1 byte) + checksum(2 bytes) +
PKCS-1 block type 02
New: Symmetrically Encrypted and MDC Packet(tag 18)(4096
bytes) partial start
Ver 1
Encrypted data [sym alg is specified in pub-key
encrypted session key]

(plain text + MDC SHA1(20 bytes))
New: (1024 bytes) partial continue
New: (18 bytes) partial end

It looks like we can merely see that the message is destined to 0x5B50940B79DEBE35. We won't be able to tell who's signer until it is decrypted.
Ancient Roman Concrete Is About to Revolutionize Modern Architecture
Your Logical Fallacies
HN allows reposts after X amount of time. There are people out there, like myself, who haven't read this article yet.
> A double-blind study of THAT sort of intervention will find a low AVERAGE effect because the AVERAGE includes the nonresponders and the negative responders.

It'd also find a higher standard deviation in the experimental group, which, especially if the data had been graphically plotted, would trigger an f-test to check for increased variance. Finding the increase would then become the main result and one could start looking for predictive variables. (F-tests might not be statistics 101, perhaps, but it's 102.)

> As for my "IF the effect is sufficiently strong and consistent" bit, I'll just note that big controlled studies are sometimes abandoned when an intervention is SO successful it is deemed unethical to deny the treatment to the control group.

Usually after checking that the interim data is statistically-significant enough, assuming this wasn't built into the study design from the start as an adaptive experimental design...
In high school auto shop we had a different (and contradictory) mantra: "Make it fit!"

Sometimes you've gotta force it...
That would have been noticed already.