skysight-inc/HackerNews huggingface dataset:
All Convergence does is delegate to another 3rd party, which may lead to the conclusion there may be an attack in progress, that you may not have noticed before. You still have to trust another stranger that may offer you some perspective on issued and signed certificates (or not).

Convegernce i.e. refused to work with CDNs which may have different certificates for the same domain for example, which may be completly valid.

The key of public key crypto (like in RSA) was to make key management easier and independent of a 3rd party, to avoid further bloat, overhead and complexity.

This is the same for Certificate Transparency/Pinning mentioned earlier, given the details it looks very strong on paper, but the implementation will suck in r/l terms.
Most large European corporations have known this for ages, and it's still a big obstacle for cloud offerings here in Europe when dealing with sensitive (or just very bureaucratic) engagements.

I know of at least one (massive) US company that had to create a special data centre in the UK to host sensitive financial data for a (massive) bank, because US-based servers were a huge no-no due to Patriot Act. In that case, it was promised that the provider might have to comply with US requests anyway, but would have been entitled to at least notify the client in advance... and I bet there was a huge discount to sweeten the deal.
After a brief period of show trials and bloodletting.
That's my impression of the Tea Party in my area (southeast Texas) as well, although the conservatism goes beyond social issues like abortion or gay marriage, and into things more relevant to this discussion, too. On security issues they actually seem rather pro-police and pro-military rather than the opposite. There's a lot of support among local tea-party activists for ideas like having drones patrol the Texas-Mexico border, or even nutty stuff like having roving police ID checks to catch illegal immigrants (Arizona's Sheriff Joe Arpaio is something of a hero). There are some libertarian views as well, but mostly limited to guns and taxes. On security issues, nativist views seem to override suspicion of government.
There's actually a really sneaky moment in here which is not totally revealed. Feynman says that he first works out 12, then 12.002, then the man with the abacus says "12.01!". He asks for more digits.

What is sneaky here is that 12.002 is a very rough approximation that Feynman is making before doing a long division. He has the formula of

12 * (1 + 1.03/1728)^(1/3)
~= 12 * (1 + (1/3) * 1.03/1728)

But he simply hasn't had the time to do the long division yet and has just approximated 1.03 / 1728 by 1/2000. At this point he has the formula, and quite possibly even knows that the error goes like - 12 x^2 / 9 which would be something like one part in a million, but he wants to do his long division to get the extra decimals to show off.

There's actually a slightly more slick way to get to this where you start from 12 and compute:

(2/3) * guess + (1/3) * number / guess^2.

The 1/3 and 2/3 are chosen to minimize the error, and you wouldn't know this if you've never worked it out. (I only worked it out because I would occasionally be stuck without a calculator on exam problems.)

It works really well on these sorts of problems; you compute 1729.03 / 144 and aside from the leading 12 you get:

0.0071527777...

You divide this fraction by 3 to get:

0.002384259259...

which is precisely as far as Feynman got, but the reasoning is much quicker. If he'd been even faster with this he might have been able to apply guess = 12.002 to get another couple of decimals in the same time.
A quantum computer would generate private keys readily. Quantum computers are well within the accepted laws of physics and there are multiple companies working on them. None is believed to exist with sufficient power to find an RSA private key quickly today, but I'll just mention that the first conventional computers were invented in secret for breaking codes.
This is foolish. Non-violent protest is how the Civil Rights movement and Martin Luther King, Jr. forced better law, Gandhi did the same and freed India from the British empire. And today we're much more networked and able to communicate directly, P2P, without the media or government as message passer. Our system works remarkably well, considering how poorly it works ;) Don't throw the baby out with the bathwater- these government agencies can be reined in, they live on government budgets every year just like the rest of government. It is the End of privacy, and that's okay.. But as an aside, I reckon surveillance equipment should also gaze back at the Police State itself. Google glass and Steve Mann's ideas about "sousveillance" will hopefully continue to evolve, they're all much smarter people than me. Every gov official should be under 24-7 video and email surveillance ;). i think a good rule is, the more power you have the more you have to be spied on constantly by the people.
It's not clear if this would have stood up in court, since Nixon was never prosecuted.
also there is racisme against the non jewish in Tel-Aviv, speacilly against arabs !
Top Inspirational Affiliate Marketing Blogs
Just to chime in, there is zero pressure at Yahoo to stay and eat dinner on campus. In fact, not too many people stay unless there was an event going on before hand or something. Most people just leave. But as you said, it depends on the company's culture.
Waze already has ads.
Dart fixes all of JavaScript's "WAT" quirks. There is proper lexical scoping, a lexically scoped `this`, no type coercion, no monkey-patching, and so forth. It also has a "method_missing" thing called "noSuchMethod".

But most importantly: It scales.

Structure is declared and not imperatively constructed. Your tools can tell what's going on without actually running the code.
Top Most Expensive Desserts
PRISM had not been previously disclosed. PRISM is collecting data.
NSA - Verizon Business connection?
mtr --raw -c1 nsa.gov | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | xargs -I % sh -c 'whois % | grep -m1 OrgName | sed "s/OrgName: //g" | xargs echo -n; echo " | %";'

my results:
Results Omitted*
MCI Communications Services, Inc. d/b/a Verizon Business | 152.63.3.113
MCI Communications Services, Inc. d/b/a Verizon Business | 152.63.40.81

does anyone else find this interesting?
For the average person - not much impact. However, once this data exists in a central, searchable format, you can bet that it will get used for purposes other than national defense.

It'll start off with being used to locate missing & kidnapped children. Then it'll be used to locate spouses who haven't been making their child support payments. Then it'll be used to locate tax cheats (what can be more un-American than not paying your taxes?) And then people for whom there are outstanding warrants - both felonies and misdemeanors. Like unpaid traffic tickets.
any africain country ?
(IANAL)

1. You can't petition the SCOTUS through the Executive branch, which is what whitehose.gov is.

2. If you want SCOTUS to do something, lobby Big Business or your representative to file suit directly with the SCOTUS with the US government as the named party and attempt to get a writ of certiorari granted with original jurisdiction.

3. Hope, pray or do whatever you think will help to get the Supreme Court to hold a hearing sua sponte. In such a case, SCOTUS takes it upon themselves to start what amounts to a bench trial. However I'm fairly certain that they cannot do this without setting a whole lot of new precedence which they aren't typically keen on doing
This is true in theory if not practice, but the point is that Apple blocks third party VMs (or did).
A more effective list of tactics (for the long term):

1. poison databases; feed bogus information to surveillance systems at all levels, do this as a matter of course, make it pop culture.

2. build darknets: for instance wifi nodes disconnected from the internet that multiple communities use as a dropbox and rendezvous point ( a linux box, a solar cell, some git magic (or UUCP/Usenet for the old school feel ), and you have something that exists beyond the knowledge of the network ) for extra kicks confine it to only a few locations and times. Or build entire networks air-gapped from the internet; wire your neighborhood and make your own media.

3. If everybody's an informant, make a game of it. Rat out your enemies to the authorities, better yet rat out the informants as rabble rousers...

4. Get serious; break into secret databases, copy them and spread them around.

5. Identify effective advocates of the national security state and neutralize them. But only the effective ones. If you're doing the job right the 10 people within the NSA who are politically adept and technically competent should be in jail for child pornography by this time next year. Any mid-level member of the intelligence community who isn't regularly getting hit with bogus charges and stupid anonymous pranks is probably grossly incompetent.

6. If you know anyone who works in the intelligence community, shame them socially; ask them why they are making the USA into East Germany.

7. Occupy

8. Free your mind, and your ass will follow.
We Demand President Obama Resign
No users either.
In Liverpool(often passed it, never in it but heard some stories)?
With regard to your latter question, [1] gives a good overview on PFS in TLS. You'll need to exchange keys using (EC)DHE, essentially.

As for subpoenaing keys: Most CAs will allow for you to generate your key pair and certificate signing request on your own hardware. You'd then submit the CSR which the CA would in turn generate a signed certificate from. The private key should never be shared with the CA.
In order to eavesdrop on communications, the NSA would then need to subpoena each targeted company's key. Wide reach is easy (go for the 5-10 biggest fish), comprehensive reach nigh impossible.

[1] http://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-se...
They are cunning and you should be above it.
I think it'd be better to consider "what can't the NSA do" given their budget and capabilities.

Tapping and storing terabits of data is effectively trivial, analysis is the hard part. If they hold useful SSL keys (like Facebook, Google, etc) they'll have a much a much easier time figuring out what people are doing.
How about I put it on more than just my Github profile?
I worked at a company that had free dinner (which it heavily advertised) but no free lunch. It was a horrible place. I don't know if I'd connect the two; it's a "small data" situation that has me making a correlation.

I'd prefer a higher salary and getting my own meals, but free dinner without free lunch is a huge warning sign.

Office gyms are usually awkward as well, but the shower is useful because you can bike or run to work, so that's a plus.
I'm surprised there hasn't been much speculation regarding an Apple TV announcement. It's been about a year since Tim Cook stated 'TV is something we are incredibly interested in' - Apple has sold over 13MM Apple TVs - connected 'Smart TVs' are growing (roughly 25MM connected smart tvs in use) - and Apple just released the CW app on Apple TV.

Maybe it doesn't seem like a WWDC kind of announcement, but opening up an SDK for this rich viewing experiences on Apple TV could be huge, depending on what examples they have lined up.

Also, since the Apple TV would only require a hardware upgrade (at most) - and is mostly just software, it could be kept under wraps pretty easily. Hopefully something comes up about TV!
Given that multi-datacenter replication is a reality in massive systems, using the point of storage to determine jurisdiction seems like an antiquated idea. Perhaps a system based on the point of origin of data would lead to more enforceable and amicable legislation...
Admitting weakness is a virtue in some religions.
This is the first proof by fan fiction I've ever seen. Well played. The Methods of Rationality are in fact awesome, so I guess it is worth considering. Take that copyright and (potentially) reality!

For those wondering what we are talking about: http://hpmor.com/

(p.s. Fawkes and Azkaban. Damn that shit got real.)
> Imagine some crazy, hard-line politicians get elected and make a law that retroactively throws to jail women who get abortions. Or homosexuals. Or maybe it's a party that decides the 1% is due for some rich-shaming, who knows.

There are 2 possibilities here:
1) Democracy failed hard allowing MANY crazy people to get power without people allowing it.
2) The majority of people actually want those things and they vote for a candidate that will do them. If that's not ok for you (it isn't for me too) then you are questioning democracy itself.

Both are things that are not going to happen. If they will, I'll just leave my country of residence.

> Not to mention bullshit non-crimes like smoking pot, drug consumption, or possession of child pornography.

Dura lex sed lex. There is nothing you can do here, except for voting for candidates that promise to remove these laws. Until their election, if you think you're above a single law, then you entitle yourself to be above ANY law. If this argument was to be applied by everyone our society would descend into chaos.
With SSL, both parties negotiate synchronous encryption (like in AES) and key exchange (like in RSA) for that, the trust is established with signed certificates obtained from a 3rd party. Which is/was fine on paper and concept, the implementation sucks and we don't have alternatives to that.
One thing is leaking the fact that there is a program, another to leak all the data.
They've been busily locking folks up over here in the UK for the last year or so for life sentences, just for talking about plots - no action whatsoever.

Precrime is already here and nobody is batting a damned eyelid.
I politely submit that what you actually want is Python, Ruby, or Lua in the browser.
I recently thought of MS as one of the last giants that take privacy seriously. Just goes to show you never know.
To anyone with doubts about going on-record about your support for Edward Snowden: This is precisely why you MUST sign it. Your nervousness in expressing an opinion different from your government's will only compound if a true surveillance state matures.

Let's stand up quickly for this hero before it's too late.

Your nervousness is NOTHING compared to what he felt while deciding whether or not to release this. Share his burden.
This seems to be the critical component, to me. The intercepts must go through a competent court, which must create some form of public record that will eventually be released. There have to be enough judges to handle the load. And if the load is huge, for these intercepts we need to look at why that is, and ensure it's not just fishing.

On the other hand, maybe big data fishing is the most effective method.
This post is not javascript, it is coffeescript. Stop confusing the two.
Actually, the national security budgets are remarkably insulated from the rest of the government, and there is plenty of evidence that the CIA at the very least, has not been shy about creating other sources of income to fund it's off the books activities.

But yes, transparency should go up as well as down.
Comprehensive list of smartwatches
I'm not a lawyer, but I don't think that's correct. I believe they have to abide by the FISC ruling until a higher court rules in their favor. Obviously they don't want to take it to a higher court because then the public would find out. There's a reason why they are trying to keep the documents of the ruling a secret. Any lawyers here feel free to chime in.
Do those use that CPU instruction if it is available? That would make the blocking /dev/random a lot faster, wouldn't it?
In today's environment, the most secure person computing set-up might be Richard Stallman's. I don't think I could do it though, as it is too restrictive.

http://stallman.org/stallman-computing.html
Acq-hired people are not going to be having the normal employee experience.

I would honestly rather have a $100k take-home but my employer pay $500k (i.e. 400k goes to charity) and think that's my salary, than a regular $150k. You get treated better if you cost more. Your salary is what it costs your employer to waste your time, so if you're at a high level, management actually fucking listens to you. Taking a long-term career perspective, it's worth a $50k/year drop to be in a situation where management feels like it can't afford not to take your ideas seriously.

In fact, I think that's so many talented engineers quit the employee game and become consultants in their 30s. Even if you're only able to get a few hours of work per week, you at least know that your boss is going to take your suggestions seriously.

Acq-hires are people bought in at a panic price ($1 million+ per engineer) so management actually listens to them because of what they cost. Until the "golden child" aura wears off and they're just regular employees.
Our community college systems are often a hybrid of three things for their students: a place to get their GED which is sort of a "generic high-school diploma," an Associate's Degree which is a 2 year degree that can be thought of as a certification in certain fields, or as a transitionary phase before the student transfers into a traditional 4 year college (this last sort of education is also sometimes offered at "junior colleges").

A high-school diploma or GED is generally acquired by the age of 18 in the US, and a GED is often the result of a student "dropping out" of high-school for whatever reason and then continuing their education at that point or at a later time.

A college is generally a small post-secondary educational institution either dedicated to a specific subject matter or a general liberal arts education. A university consists of at least two colleges.

And then we have "for-profit" post-secondary institutions like ITT Tech or University of Phoenix that are run as corporations and often target "non-traditional" students such as working students, parents, and older students. Confusing, I know.
New item on list of ideas: do a kickstarter to remaster and release said audio recordings.
Hmm - I like TPOG, but I can't say I enjoyed it or had it give me as much perspective on the Culture as Phlebas did - but I know its a favorite for a lot of people. Partially because I was more interested in the Changer as a character than the gameplayer.
Nvidia 320.18 WHQL Display Driver is Damaging GPUs
It's essential to liberty though, because the power structure uses information from the privacy invasion to get leverage on you. Stalin's quote, "Show me the man and I'll find you the crime" illustrates this pretty well. Note the word "find." The more data the attacker has, the more they can criminalize.
* Secondly, the election of Barack Obama in 2008 gave him hope that there would be real reforms, rendering disclosures unnecessary.*

This is so sad. People really do believe what windbag politicians tell them on TV and what paid talking heads on the same TV tell about them. It's not like every single politician being elected promises to right all wrongs and fix all evils. I can't even begin to get why seemingly intelligent people thought this particular time is any different from hundreds of times before.
With any CA's (or better, the right one's) private key, they could still use it to stage a MITM attack on the website, assuming they have the right access.
Its pretty obvious we stuck it to ourselves by voting in self important bureaucrats time and time again, so changing that would be a good start.

Protests probably won't do much, hitting the sponsors of politicians would be good though. You'll note that MoveOn/etc haven't really made much noise about this so might be good to call them out as the sockpuppet that they are. I'd say protest against the taxes that pay for this kind of thing, but that seems antithetical to a lot of people...
President Joe Biden
https://en.wikipedia.org/wiki/United_States_presidential_lin...
My wife is a former lobbyist. The wording is always intentional.
It is true that smoked crack is more dangerous than insufflated cocaine. It has a faster, more pleasurable onset, and effects don't last as long.

These properties both make it more addictive. Many prescription drugs use an extended release formulation to make them less addictive.
This should be read as an indictment of what the site has become, not just an example of it.

"Where's the petition to NOT pardon him!!"

I will do it. I will ragequit. This site is turning into a libertarian silicon valley version of freerepublic.

When you've found civilisation, America, in 1000 years or so you'll realise that autoritarianism works and that's why you've got it.

If we had a fascist government, everyone would be in prison except me. I'm sick of the police failing to do their job because they don't know that it IS: to provide a level playing field, that I can see, so I have no need or temptation to cheat in the first place. As an average HN reader, you know this is correct. Ever been pulled over for speeding on a road where everyone else gets away with worse? Until the state STOPS the bad guys having all the fun, you, the state, down to every beat cop, haven't done this. More government now. Much much much much more. Make 50% of the population into prison officers and cops if necessary. There'll be zero unemployment.

Well whaddya know. The great recession has caused Europeans to return to fascism. Way to go Dick Fuld(!)

@pg : either ban all politics from the site or deal with the fires of hell that start in 5 4 3 2 1

Hi there NSA readers, keep it up.
What you propose to do?
I'm surprised not many people are pointing out the antitrust concerns here...There are a few competitors in the space, but there may be a strong case that Google is essentially buying out that Waze's capabilities and niche are only rivaled by that of Google.
I'm 24 and I've been at Yahoo for 5 years as a full-time Software Engineer. This place is a different company with Marissa leading the way. I share the OP's tone. I may also be naive, but the place is a lot flatter and there's a lot less in my way to make new ideas happen. I no longer stay at work late into the night, however. :)
That's hilarious. I guess the EFF knows that most of it's supporters are sysadmins, ironically the one class of people with the most direct and unfettered ability to violate privacy--and a track record of having done so.
Show HN : Try Java8 in Cloud
There is certainly more you can do, specifically non-violent ...
https://www.youtube.com/watch?v=Vk1XbyFv51k
http://beautifultrouble.org/
NTFS "has" it, but it's only there to meet POSIX requirements. It's merely case-preserving in non-POSIX contexts, which ultimately means almost nobody uses it.
Knowing what's going on doesn't change that it's all still unnecessarily very broken.
I just wanted to submit this: it's the best informed article I've seen so far.
90% Done, Halfway There
Web tools finally able to tip the balance of government more towards direct democracy rather than representative. Signed. eventually, these networked tools will threaten to snowball into actual political change, and their makers will shut them down. but it's pretty easy to make a clone once people have an expectation that this is how government should work.