skysight-inc/HackerNews huggingface dataset:
Why would it contain passwords?
Because, as far as I know (I haven't used TrueCrypt too much), it will see the volume as a file and then you'll be syncing a huge, x GB file every time you make the smallest change within it.
They don't need to crack 4chan, it's in the US.
First time I've read an argument against the lack of language barrier, interesting, and point well made.
I can't get the logic here. Why this switch will be helpful? Does this mean : If I live in Europe (e.g.) and the sunrise is at 3 SUT, I'll have to go to work at around 4 SUT, but in the states the sunrise is at 7 SUT and people will go to work at 8 SUT?
Shame they won't just stream on Youtube like everyone else.
“We wanted a president that listens to all Americans – Now we have one” (Jay Leno)
Since last year, you mean?

Edit: Thanks smackfu - apparently last year's WWDC event was not streamed, but their October special event was, which got me confused.
Ah, I see what you're saying.

The point of TQM, or Deming, is not to focus on failure or success, in fact, but on process. The process is supposed to account for all the details.

The reason the Space Shuttle didn't fall apart at every single joint was due to engineering and construction process-based quality control. This is the same, but extended to business.

The point is to fixate on the process, not the success or failure, and not to do it piecemeal. Implement process at all levels.

Another example: the reason Japanese cars are such high quality (especially when compared to US manufacturers a few decades ago) is not due to just parts or engineering, but also fundamentally management style. Few US CEOs would reach this conclusion. This was Deming's fundamental point: the workforce is part of the process; every part is important to the end result.
we are planning camera upload yes :)
"could surely benefit from saving on memory and CPU."

... at a certain labor cost. And memory and CPU prices are forever decreasing and labor cost is sorta increasing. So if it doesn't make sense as a system to do it today it probably never will, for an established organization anyway.

Also its not "why aren't they experimenting" but "why aren't they publicly experimenting". And it would nearly be a first in the security field to discuss algo changes this long in advance of rollout, if its ever discussed in public at all...

Finally its highly unclear why anyone uses SSL for these apps. That solely protects the relatively highly secure comm channel between two wide open insecure endpoints, so there's no point other than security theater/marketing. For email auth, yeah maybe. For finance its theater but necessary theater. But for G+, FB, DB as listed its just a waste of time. The MS windows enduser is probably owned 100x over with worms and keyloggers, and the server side will roll over and play dead to anyone remotely in .gov.
I probably am being optimistic you're right. I also hope you're right and they do keep support for Conroe, I currently have an iMac and Macbook Air both running Core 2 Duo. Not sure I will buy Apple hardware again anyway as currently I just want an i7 in a desktop chasis. More and more of what I do is virtualised (be it Vagrant, remote servers etc) so I just need power at a reasonable price.
Apple uses their HTTP Live Streaming system for this. It is essentially a refreshing m3u playlist of 10 second MP4 video chunks that are served as normal files via HTTP, over their standard CDN.

It works well as long as the playlist refreshes properly, and the data gets deployed to the CDN fast enough.
I live in Eastern Europe too and I remember the times when the US was really perceived as "land of free" here. I believe that now we have way more freedom than the Americans. I personally feel uncomfortable enough to avoid travelling to the US which is a shame because I had spent months over there before 9/11 and shortly after and I had great times.
Indeed - this may be the only reason to fire up Safari, ever :-P
Conventional warfare.. you cannot send in nukes before your troops to soften up the enemy.

Huh, why not? Generally speaking the idea with the tactical nukes deployed in Germany was to hit Soviet armored divisions at the start of WWIII before they engaged allied troops. I can think of a great many reasons why you wouldn't want to do that, but I can't see why you'd want to start fighting before doing that.

And generally speaking, even if enemy forces have crossed into one's territory nuking the roads behind them will do a lot to fight off the invasion by preventing the flow of supply and reinforcements.

Are these actually ideas I would endorse? No. But there's a tendency humans have to think that if something is bad in one way it must be bad in other ways too, and a tendency to want to believe that one's preferred course of action has zero drawbacks.
Well, there is a problem with that. In searching for a "Promise" quote, I kept seeing this:

"Under an Obama presidency, Americans will be able to leave behind the era of George W. Bush, Dick Cheney and "wiretaps without warrants,"

No mention of a promise. On top of that, warrants were issued. You can argue the merits of the warrants themselves, but it wasn't warrantless.

Now, if I missed a quote, please share. =) But, going by what little research I did, he never used the word promise, and did make sure to have warrants.

That what he did and what we wanted him to do diverged is surely an issue. But we aren't anywhere better.

I don't like any of this, but I also don't think it's as black and white as some make it out. How do you balance what you want to do with what is best for the country? Do you sacrifice your own honor to save lives? Maybe he didn't save any lives. But maybe he came into a situation where the intelligence community told him if he shut down the program like he'd intended, it would cost X dollars and cost Y years of intelligence gathering and putting us behind.

I'm not prepared to pass judgement. I don't like it, but I don't think we know the whole story yet.
Kim Dotcom’s Extradition Hearing Delayed Again
EMini algo disaster, 01/14/2008
And for other timezones : http://www.timeanddate.com/countdown/generic?iso=20130610T10...
Schneier on Power, the Internet, and Security: Podcast episode
He really could have made some sort of progress if it was his intention
> To think anyone would feel safe in the USA is ridiculous

I feel perfectly safe. This whole entire issue about the government collecting meta-data is overblown IMO. And comparing it to tyranny and demanding rioting on the streets is literally self-destructive and utmost retarded.

Maybe you need to compare it to a country like the Republic of Congo to get an idea of what's safe and what's not. But instead the majority of people here sit in their comfortable chair in front of the computer fantasizing about how much they hate the government and how much the government must hate them.
I'd like to quote this part:

I understand I am asking for people to engage in illegal and dangerous behavior. Do it carefully and do it safely, but -- and I am talking directly to you, person working on one of these secret and probably illegal programs -- do it.

In the heat of our anger against anything government and secretive, it's easy to forget about common people who work there and I believe more than one feel that what they do may be morally unjust.

It's not a comfortable position to be in. And greatly so for anyone deciding to speak up.

They make a great deal of sacrifice and I, as a citizen, am immensely thankful to them.
Really?

I feel like the best thing was when they gave up on PHP6 and started to add more features in PHP5.

namespace is a huge one.

Traits, generators, etc..
fwiw I use a macbook pro retina and push to a 30" dell monitor (2560x1600) and a 24" monitor (1920x1200) at the same time. it probably can't run games at max res but it does great for movies, Netflix, coding, etc.
I think this is evidence that many of the "quote stuffing" patterns that Nanex unveils are just be consequence of a complex dynamical system. It is extremely difficult to say that anyone is causing markets to behave in such ways intentionally. Instead I see bifurcations and phase changes.

What do you guys think about this? Here are some other more recent articles:
http://www.nanex.net/FlashCrash/CCircleDay.html

http://www.theatlantic.com/technology/archive/2010/08/market...
The history could. If you ever stored passwords in Git, even if you have now removed them, they would still be in the history.
When you say 'the people,' which people do you mean? Because it doesn't serve everyone's interests to threaten civil war in the US - only certain people's interests. These people don't represent all people, listen to what they say closely, but are rather prioritizing their own interests so far above others that they maintain a right to threaten and kill people they disagree with.
Rails and Node and Client-Side MVC Oh My
The options are limitless. I'm a software developer with a very limited background in web development (think Assembly, VHDL, C/C++, Python). With technologies floating around like Rails, Node/Express, Angular/Ember/Backbone, the entry into building web apps is daunting. What would you recommend and why to getting started (best resources, easy to find mentors, great open source environment, etc)? I'm very interested in finding the lowest barrier of entry into web development for the sake of building my own web applications (hobby, and eventually more). What I'm not interested at this time is looking at "what's the better technology and why" or "X will pay the most when you're good". With the technologies of today, if you were to start today, what would you recommend to a newcomer. Thanks for your help HN!
The most incredible thing you'll watch today is this video of sand
Naive users have left passwords in by mistake, only to make another mistake in thinking a commit takes care of it.
These are both very good points.

The main reason I mentioned encrypting IRC instead of something like SILC is that many people already include irc in their daily workflow. Adding settings to a client you already use may be less intrusive than picking up a new protocol altogether.
I don't think the WWDC 2012 keynote was live streamed. The October 2012 special event for the iPad mini was though.
Bingo. What management thinks is important is its internal metrics. What actually matters in the end is customer demand and cost of production.
"A well educated, well informed, and politically active populace"

Observation shows a media oligopoly merged with .gov, makes a effective exploit against that set of conditions.

A right, never used, may as well not exist.
Storing an EncFS on Dropbox is another alternative, that doesn't depend on Dropbox' ability to recognize small changes in a huge single file.
They may not be great at 2-way cloud sync, but they know how to use a CDN (iTunes, App Store, etc)
They have nuclear bombs in Belgium as well. It has been in the news, they are probably in Kleine Brogel.
If there were a weakness in the client, it would be more likely to do with key management --- leaking a portion of the key (as Lotus Notes did once upon a time), generating keys from a non-obviously restricted set (viz. the infamous Debian "weak random generator" bug[1]), or possibly something more subtle. The presence of these behaviors might not be obvious from casual, or even careful, attention to the source code; the Debian thing was, by all accounts, just a bug, which nevertheless persisted for quite some time.

[1] http://www.debian.org/security/2008/dsa-1571
Well, it could contain OAuth tokens for external services (eg Twitter), as well as secret tokens (used in Rails, Django for cookies).

Worse still, they could be using passwords in an external service (eg, for a database) and have included those as well.
An American that had to seek asylum from the US government was Bobby Fischer, one of the best chess players in history. His offense: playing a chess match against Boris Spassky in Yugoslavia (he also owed taxes).

http://en.wikipedia.org/wiki/Bobby_Fischer#1992_Spassky_rema...
You may not want to wave your "people in the US aren't incarcerated unjustly" flag too hard, not to mention that prison labour is a quickly growing industry in the US.
I'm pretty sure they didn't live stream last years keynote. They always record a video that is released after the keynote is finished, maybe that's what you're thinking of.

"Apple did not broadcast the keynote live"
http://www.macrumors.com/2012/06/11/video-of-wwdc-2012-keyno...
Apple goes Flat
Correlation is not causation.

Baer is friendly to the CIA, being a retired agent, and there is incentive for the CIA to muddy the waters. This could very well be the same motivations of a whistleblower. It also co-incided with the beginning of the Bradley Manning trial, did Baer talk about that?
//TODO replace password and username with user input
password = "johnsmithAdminpass1234"
username = "johnsmith01"
login(username, password)

If your test-DB is the same as your live one and username and password are real admin passwords, then you are in trouble. It's horrible and you shouldn't do this, but it happens.

Edit: formatting
I'm european too and while I don't consider the US in the same league as China or Russia I had the same feeling the last time I traveled to US.
Early rising into a daily routine
I wasn't kidding. There were plans to set up a missile shield. After pressure by Putin they were canceled and replaced by the 'Aegis LEAP Intercept (ALI) program'.

"This system was given major new importance by President Obama in September 2009, when he announced plans to scrap the plans for a missile defense site in Poland, in favor of missile defense systems located on US Navy warships. On 18 September 2009, Russian Prime Minister Putin welcomed Obama's plans for missile defense which may include stationing American Aegis armed warships in the Black Sea, as these would be less effective against Russia's missile attacks."

http://en.wikipedia.org/wiki/Aegis_Ballistic_Missile_Defense...
That's not true. Dropbox uses librsync so small changes of big files yields small diffs, thus TrueCrypt volumes work just fine with Dropbox.
I am not sure "predict" is the correct word here.
Yep. Australia has no interest in conflict w/ the US. Australia even has a poor record of standing up for its own citizens when persecuted abroad. They are a tiny nation with a vast amount of land and a big reliance on sea-trade. Not to mention they are a "western" resource-rich country surrounded by billions of people in surrounding Asian countries.
I find it hard to believe that he can be anywhere so easily. The NSA isn't omniscient, but certainly it keeps close tabs on people that work with/for them?
OK, it's getting trendy :) http://i.imgur.com/fWWCjPC.jpg
Hong Kong is special, while it is part of china it is also acts on it's own with permission from the mainland. That is why Beijing gets it's own vote in what happens with Hong Kong
Adopting metric time, while a neat idea, would probably have a lot of consequences for all the SI units derived[1] from the current standard 'second', no?

On an unrelated note, in standard gravity (1𝘨) a pendulum with length 1m will complete half an oscillation in fractionally more than 1s (~1.006s), an annoyingly close relationship for one that's not supposed to correlate exactly.

[1]: https://en.wikipedia.org/wiki/SI_derived_unit
Why crowdfunding will never work.
Ah I was probably confused with that, then. I guess my statement is still technically correct, but I did mean last year's WWDC event.
Maybe it's time for a new amendment that explicitly protects the privacy of individuals?
At least Sweden is openly telling that FRA is allowed to legally monitor all international network traffic.
What you posted are a few negative events. What you did not post are the few million or billion positive events that happened at the same time.

What you're reading/seeing is an ever increasingly opinionated and vocal crowd that think they possess the truth and are right about everything. They want a perfect system. And a simple system. And worst of all, they don't know what they don't know (how utterly destructive their actions and changes would be). So this negativity parade continues... Where they hold a magnifying glass on the few negative events while pretending what they are seeing is the entire picture.
.git should never be in your web root... I can't think of any situation (other than a very simple site) where you'd want to just stick the whole Git repository in the web root. Normally there's a bunch of other things in the repository (documentation, database scripts, etc.) that you wouldn't want exposed publicly.
Let's be fair, you don't speak on behalf of your whole country, nor the "many other people from outside the USA" so I can only take your comment "we see the USA in the same light as China and Russia" with a fine grain of salt...as should others. I say this on top of the fact that I'm someone who lives in London, where I interact with Aussies, Brits, Kiwis, Americans, and Europeans (amongst many others) on a daily basis. I haven't had an even seen an inkling of what you're describing, but again, you and I are just one and two data points.

To think anyone would feel safe in the USA is ridiculous

I'm not sure what your background is, but for 99% of the population of the world, the US is a comparatively very safe place to live.
Considering the changes this Administration made regarding who it can 'legally' target with drones, would being outside of this country, asylum or not, be safe?

Which countries large enough to not allow our use of their airspace don't have extradition treaties? Russia?
After reading the article I found the most important information of all:

Quote from Costco:
"It cultivates employees who work the floor in its warehouses and sponsors them through graduate school."

So, the article could change the title to: Secret to Costco's success, hint, it doesn't pay market wages for MBAs by recruiting employees internally and paying for their education.

I honestly have no idea which strategy is more cost effective. I deeply respect companies who promote within over pulling from outside but it is clear that they value graduate business education or they wouldn't be paying for their employees to go to graduate school.

[Added] And, maybe they are sending their students to CS graduate programs, but I think we can all agree that likely they meant business school when they said graduate program and the author of the article seems to just gloss over that huge detail while bashing a curriculum they don't understand.
Can We Have our Privacy and Internet too?
IMO this is the correct approach - Exposing every single file in the repository (including files that don't need to be public) sounds terrible.
I find the once-per-year installation and subsequent purging of QuickTime quite therapeutic. Is there anyone else than Apple that still serves up QuickTime video?
Minimal circular progress label for iOS
Operation Troll The NSA
When Marx and Engels wrote their books many "western democracies" didn't even exist, so they weren't responsible for any progress made until the end of WWII. Democracies themselves didn't come to be "peacefully": most European kings had to be forcefully deposed one way or another, after they refused substantial reforms for almost 150 years since the French Revolution (in fact, they spent most of the XIX century actually restricting individual freedoms and ramping up censorship powers). Until WWI, there had been almost no progress in many continental countries on universal suffrage, which of course resulted in no progress on all the other subjects you mention. The period between wars was politically very lively but certainly not peaceful nor "within the democratic process": every country had its fair share of events where police or army would indiscriminately shoot at protestors, strikes would get violent, and so on. The political frameworks born from WWII were then characterised, in most Western European countries, by schemes that basically reproduced the Cold War disposition, with a varying degree of direct dependence of local leftist parties from Moscow. The presence of a well-equipped "hard left" made it possible for softer alternatives to thrive: the Overton window was anchored by the Soviet State on one side.

The only country where you can try and talk of a continuous peaceful development is post-Cromwell Britain, which is why this country is still, in many ways, the less socialist of the lot (and getting less so by the day, I could add). Still, the influence of Soviet ideals was so strong even in this land, that there was stuff like the Cambridge Five, something that today is completely unconceivable.

Violent revolutions are not always necessary, but they can (and did) provide inspiration for wider movements.
Solar Soldiers: Rescue Mission
PSA: The Microsoft E3 press conference will be live streamed at exactly the same time (though MS will start 30 min before Apple) as Apple's WWDC press conference.

A few hours afterwards the EA, Ubisoft and the Sony press conferences will commence.

Here's a great site with times (in your local time zone) and live stream links to all the E3 speeches upcoming tonight:

http://www.e3countdown.com/

This is going to be one of the most exciting nights for tech/gaming junkies like me in a long time!
1% in prison? :-)
Brilliant. It's sad it lends itself so easily to spin, "The Chinese Turned Him!" I expect that is what Americans will be told to believe.
Interesting. But, how does owning a gun provide protection against the US military?
I like Boxcryptor since it encrypts each file individually rather than the whole volume. However, the file names are exposed.
> Are U.S. citizens routinely arrested and placed in re-education by labor camps for a year without a trial?

No. But US citizens are routinely arrested and placed in solitary confinement (widely held to be worse than a labor camp) for decades without a trial (guilt is nearly always resolved via plea bargains using the threat of even more years). And by "routinely" I mean the highest incarceration rate in the world: about 0.75% of the population.
I've often heard the claim that elliptic curve cryptography is not used much in practice compared to RSA. I don't doubt its true but I would like to have some evidence for it so I can also say it without being a parrot.

I don't know anything about real world implementations of cryptography. How can I go about getting data that RSA is more widely used?
نتيجة إعدادية سوهاج
Crowdfunding Campaign Aims To Reward NSA Whistleblower For His ‘Courage’
I am not sure why he tried something as subjective as code in each language, as ultimately if you don't use each of the languages equally, you will have a natural bias.

For instance, as someone who spends too much time in C#, his C# example is just hideous.

Not to mention the instant judgement that the language framework is poor if you don't get an exception. That is more the debate as to null/empty vs exception.
For which crime is polonium poisoning a legal sentence? Because if it's not a legal sentence, then it is not a matter of eluding "justice".
200,000 does not seem excessive given the difficulty of finding someone who is both technically competent and trustworthy.. Oh wait...
> To me, the real story is possibly how the government over pays contractors.

That's the real story to you?

An entity that prints its own money (and uses it to spy on everyone), paying too much for contractors?
On iOS, as you run native code, you could theoretically do direct device access in assembly and the OS has far less control over that.

But the hardware access protection ensures user code doesn't access anything it's not supposed to. And its up to device drivers to manage devices and ensure that access to them by user code is done properly.

Static inspection of Java bytecode can allow you to verify the safety of some things and so do fewer checks at runtime; but to my understanding, native code has all the same protections in the end as code running in a VM.