skysight-inc/HackerNews huggingface dataset:
The audit of commits in the general case (Checking for errors in the code) and the audit for the deployment case (Checking for sensitive data that may be exposed in a security breach) are different audits. I don't think many tend to do the second kind of audit.

Also, minimizing your exposure in case of a security issue is probably a good idea, so the convenience of deploying with git may or may not be worth this extra exposure.
And no American citizens are in Guantanamo Bay either...
As a big Wing Commander fan this made my day! Thanks..
Gary Brecher/the war nerd (John Dolan's pseudonym) is occasionally worth the nuttery.
It reminded me that 3 years ago Sony started working with GNUStep to add touch support and build their SNAP platform, they put the project on hold/cancelled it not long after it became public, but you can still see the code at: https://github.com/deliciousrobots/gnustep-gui-sony/

Some of the background:
http://blog.deliciousrobots.com/2010/11/27/sonys-changes-to-...
Snowden is, for all intents and purposes, protesting against the government and its laws. Why would he willfully return and subject himself to a system he considers unjust?

I know the scale is different, but logically, what you're saying would be the equivalent of the founding fathers turning themselves in to England instead of starting a revolution.
Would a sane server not set an upper limit to the lifetime of these connections? In YouTube's case, something like... the length of the longest video? edit: or perhaps even the _exact_ length of the video being requested?

Also, since this is video, why isn't this UDP?
Does it need to be DHE or will DH do just as well? What exactly is the difference here?

It still uses a key per connection at the least, and it's still not on the NIST/FIPS 140-2 standards because you can't decode it after the fact so it breaks auditing (all AFAICT, and I have looked at this stuff a lot).

That said, we're best using AES_GCM, 2048-bit RSA and ECDHE as a matter of course, because at the very least it requires a valid, active MITM to break and can't just be logged and scanned later.
I always keep this in mind when riding my bike. Just because I may legally have the right of way, it's not worth getting hit by a car to prove the point.
Either that or he thought that they were under promising and with the over deliver they would be at standard workload. I think it turned out that it was harder than expected to continue their over delivery pace.
Considering that XCode uses a version of clang (which is open source) for it's compiling, I wouldn't say that the main compiler is proprietary either. I think that what people mean is that all of the "usefulness" of Objective-C comes from using it with OSX/iOS development, and all the stuff related to that is proprietary.
In most American states, forcing entry into an occupied dwelling is presumptively considered a threat to life and limb.

I'm not aware of any state in which one can legally defend property alone with deadly force, but it's always legal to resist force with equivalent force. Many states have rescinded "duty to retreat" laws, which means that you're under no obligation to yield to illegal force used against you no matter where you are.

It's not merely "defending property" if someone's trying to, say, carjack you at gunpoint, and you shoot them first; as soon as the assailant threatens you with violence, you're entitled to defend yourself.
oops, thanks. Linguistic errors even give them ammunition for that kind of argument.
If abandoned buildings is your thing, then this Russian site is a fantastic way to waste a lot of time.

http://lana-sator.livejournal.com/

Google translate will help with navigation.
I'm not sure that we want to short-circuit competition in the industry with one of the highest rates of innovation over the past 20 years. If we had followed this strategy, we'd all still be using Windows 3.1.
> if they spent 1% of those 10 dollars/month - or $15M - on paying the artists, each one would get 187K/month.

According to my math, it would be $187.50, not $187,500.

Let’s try a more realistic scenario. Let’s say that at some point in the future 10% of Spotify members pay $3 per month, and that Spotify spends 65% of its revenues on royalties (just like iTunes). That would mean that each one of the 80,000 artists would get $36.50 per month (if all artists’ music were played the same amount of times).
It's cause & effect. Pledging allegiance to a flag rather than the Constitution promotes a 1984-like outcome.
You have no idea what you're talking about; you're assuming everyone who ever had a recording contract made out like a bandit, based on the most successful 0.01% of recording artists.
This is a bad idea. What's next, git bots? I'll assume from now on Objective-C ranking is being gamed.
This guy deserves a nobel prize. I wonder if society is aware that the hotter you are, the more people of the opposite sex will be attracted to you?
Cut-and-dried espionage isn't a grey area. It's "for the benefit of the public" which can be hard to assess. If a government employee leaked the details of the Osama Bin Laden raid and it subsequently failed, would that be for the benefit of the public? What about leaking the plans of the Union Army during the Civil War? In each case, the answer is not obvious -- the reason that leaking classified information is such a serious crime is that there are extreme, permanent costs to making the "wrong" decision.
If it's not one thing, it's another. No matter what Snowden did, they would come up with some excuse to trivialize his disclosures.

This one is particularly egregious because it can be turned right back around on the US government which also claims to support transparency, freedom of the press and protection of individual rights and yet it also consorts with despots and dictators.
Small Things You Can Do When You Lack Discipline
The stop sign was made for you. You weren't made for the stop sign.
A logical next step might be to do do the Lua Missions (read: koans): https://github.com/kikito/lua_missions.

(Disclaimer: The missions look good, but I haven't personally tried them.)
That's pretty much correct. All the "Beats" setting does is adjust the equalizer in the phone, to emphasize base and treble more. It's the same thing that old stereos did with the "Loudness" button.

The sneaky thing is that when the Beats feature is turned off, the default equalizer is tuned so that bass and treble are deemphasized, to make the difference between the two even greater.

I follow someone on YouTube that did a really good review about Beats Audio. Here's the link if you're interested.

http://www.youtube.com/watch?v=Cdbn_pmxFic
> His failures to criticize these regimes

Hilarious, not the least because the White House itself is usually very timid about criticizing China or Russia. Also, what do they expect him to do, step out of the airplane in Moscow and shout "I hate Putin"?
Frankly, I don't care whether David's post is this or that. What I care about is the point - optimise your life for happiness and recognise that happiness is in the doing, in the living, not the outcome.
tl;dr: OP failed to under-promise correctly.
Perfect forward secrecy would prevent some attacks against Google, as does certificate pinning in Chrome. But if the NSA got somehow Google's secret key, they can still MITM a SSL connection. It just means, that they actually need Google's secret key, instead of using a CA under their control. ( And they need this key before they can MITM any connection.)

And the entire secure connection stuff is broken, if the NSA just obtains a FISA warrant for your GMail account. ( Or compromises the Google servers directly.)
Note the date: 27 September. It took them 3 months to get their head out of their arse, and only after they bled supporters. In June and July, their tone was very different, more akin to what their Swedish branch is still saying: http://www.thelocal.se/43510/20120928/

EDIT: see for example: http://www.huffingtonpost.co.uk/2012/08/16/human-rights-watc...
> Nothing in the arts is cheaper to produce than music.

How about poetry? Performance art? Pantomime? Dance? Standup comedy? Etc.
It's odd that there seems to be no definitive instructions for nginx or apache for enabling PFS. Given that it's clearly not obvious how to set this up, how many here are inadvertently running non-PFS without knowing it?
Cryptographers seem to have a thing for misleading names. A big one is "provable security" which really means "is at least as hard as another more old and famous problem that we are all guessing is hard to solve efficiently." In any case "provable security" alone is often too difficult to prove so more assumptions are added to make the proof go through. Saying you've obtained provable security under some assumptions doesn't sound very good though, so the assumptions are called "models" instead.
> There are many malicious DoS tactics that go for the same effect.

One of the most popular is a slowloris attack. It's particularly pernicious if it's distributed and coming from a botnet or something. https://en.wikipedia.org/wiki/Slowloris
Let's not forget too that the US toppled 2 democracies and thwarted another.
indeed. i am also equally sick of hearing this complaint. tho, it's for a different reason.

music is not a freakin' product, people. it's a service. musicians are PERFORMERS. outside of the last 60 years or so, there was no such thing as "selling music" where you're not talking about sheet music. musicians get paid for performing.

the last 60 years has been a music bubble. welcome to the correction.

m3mnoch.
Another NYC gem is the abandoned Cobble Hill Tunnel on the border of Cobble Hill and Brooklyn Heights. It is also the oldest cut and cover construction in North America for the subterranean fans out there. http://en.m.wikipedia.org/wiki/Cobble_Hill_Tunnel
Higher math requires a great deal of lateral thinking. Also, music an math are often closely related but I don't see the connection between music an say computer vision.
I rebelled against the pledge in my freshman year of high school. I don't remember any significant outcomes though, other than sitting through pledges until I started missing homeroom every day from ever-increasing laziness.
From the last picture, if the door was closed, the shots were fired from inside the building. Doubt the shots would have came from police at "nearby Riker's Island."
This quote from the post was pulled and is now being criticized without the most important context of the article.

Sam isn't giving general career advice here -- read this advice as if you're giving it to a risk-seeking, ambitious, 19-year old (the title of the article...).

In that context -- his advice makes perfect sense.
The fact that we have created news readers for people who just want to read news, and blogging platforms for people who just want to blog, shows us how much we have degenerated... This shouldn't be the exception, but the norm.
Consider that a lot of us see the extent of current copyright restrictions as a massive overreach.

A totally "free market" in terms of intellectual property would be to totally remove copyright and other artificial IP restrictions, not one where IP owners have free reign.

As such, compulsory licensing is a way of reducing the impact of restrictions that would not have existed in the first place without government interference in the market.
Do you think that it would have been good for a "whistleblower" to send information about the invasion of Normandy to the Axis leadership? Classified information is necessary when dealing with a hostile force that keeps classified information of its own. It's a lot easier to claim that "Information X should be public" than it is to make a blanket claim that "All information should be public."
Did i miss something his response on the link posted was

'We do push back where we can, and do everything we can to protect our users’ data. But we don’t write the laws.'
> We aren’t sure if this will bring again the “Other OS” functions to Playstation 4

It will at least have to be possible to install other systems. The screenshots show GRUB 2, which is under the GPLv3, so it should be unlockable.
It is so utterly bizarre to ask children that young to "pledge" their allegiance to something. I didn't even have a functional understanding of what those words meant until I was much older, before then they were just words that I had memorized. But because it was introduced so young, it only had the opportunity to appear strange in retrospect...
> This question implies that you did not read my original comment carefully

No, I did. And I re-read it before my second response. I don't think what you listed, "contributing to the long-term well-being of humanity," is either actionable or useful. I was hoping you would clarify your thoughts on that point.

I was disappointed by your last comment, because I think it was made in poor faith. Your accusations that I didn't read your comment carefully or may be goading you are in poor faith. Furthermore, I took the time to carefully respond to your question on the purpose of life, and you completely ignored it.

> for the "disgusting hogwash" comment, it is a barb but one that was not too hard to ignore, as your criticism was not substantive.

I think it's a pretty appropriate response when somebody calls for people to sacrifice their own lives and happiness for the good of the collective. Pointing out that that is what it is, is a substantive criticism.
Interesting comparison, considering it was with help from the USA that Pinochet got into power after that "other" September 11. Sad perhaps, but maybe not entirely unexpected.
If you don't like how much money Pandora pays you, stop letting them play your songs. As noted elsewhere in this thread, their rates per listen are very similar to traditional radio. When played on the radio, thousands hear it. When played on Pandora, 1 person hears it.
I think the amount of SSL hardware in the field is closer to zero. Nobody with any clue uses that stuff because it's power hungry, the APIs are awful, the implementations can't be verified, and any such asic will look slow in a year whereas cloud server lifetime is five years. AESNI killed those guys a long time ago. The only users of them are embedded platforms without the host CPU power to do crypto.
Assuming it survives into the final commercial product.
Nanoko - "Pro" JavaScript Framework
You're right. They should make a WP, Meego, Sailfish, Jolla, Tizen, WebOS, Windows, and Mac OS app. And some more too. It's an accessibility issue.

And while we're at it, how come libraries have accessibility as a goal, but many rural areas don't have easy access to a library? We should build many more libraries so that every home in America, no matter how isolated, has easy access. It's an accessibility issue.

~~~

Sometimes, the ROI is just too small. If someone wants an app for their platform, they can go ahead and make it, but access to Malibu beaches isn't a human right so essential that we must take extraordinary measures to ensure it.
They Seal-Team-Sixed Osama Bin Laden, and subsequently his corpse, out of a country on perennially high military alert. They couldn't do it in Moscow or Hong Kong without potentially starting a major war, but I could easily see them doing a targeted kill or extract from Ecuador. Seal Team Six's capabilities, as demonstrated in the OBL raid, are extremely high.
> he is wrong. Saving the bullet holes only long enough for them to be enjoyable

They weren't saved long enough to be enjoyable to Don.
GNU ed 0.9 released
His answer isn't philosophical.

You look at the issue, and then you make the decision to either tell your government to pursue him or tell your government to back off. Everyone gets to finish the sentence "I think the government should..." as they choose.
Movie releases depend upon heavy ad campaigns to ensure that people know when a movie is coming out.

Again, that's the seller's perspective. Under the buyer's, they could make their intention of knowing about the new releases if they wanted to. Better yet, they could announce what kind of films they want to know about, instead of being drowned in ads for Fast and Furious 348.

A different example is changing service providers, like a cell phone or car insurance. Sure you might one day decide to comparison shop, but Sprint's new unlimited plan, or Geico's "save 15% or more" campaign are effective at encouraging a switch when it wasn't within consideration.

You shouldn't need to comparison shop. The point of the Intention economy is that you announce to the market of your intentions and desires, and let it come to you with bids that fit what you need.

A generic "I want to know about offers that are strictly better than my current plans" would in fact be a decent intent to announce, but it should be at one's discretion and adjust itself to one's conditions (for example, no point in getting such information if you're locked in a contract).
Limited accessibility if you have your own Yacht or helicopter?
> It is also valid to conjecture that perhaps the observed difference is due to cultural/environmental forces and not due to one of the innate differences.

It is. But we originally started with someone conjecturing that it wasn't, and getting told off for it. Don't change it from "believing X is reasonable" to "believing not X is also reasonable".
The trouble with actually under-promising on a project is that unless you have actually done almost that exact project in the past, or are a fantastic pessimist, you will fail to under-promise. See http://lesswrong.com/lw/jg/planning_fallacy/
It seems like the US government has made it into a large-scale version of the Streisand effect.

If they had just ignored him, "oh, that crazy guy", ...
Worst case scenario, someone will rip out the rom chip and reverse engineer whatever kind of efi or acpi firmware they are using and solder their own in.

People get mad crazy with video game consoles like that.
A round with with those characteristics, while far from preferable as a weapon (not at all a "reliable" or "clean" kill) remains capable of killing in a very unlucky shot or causing a serious but nonlethal injury.

One doesn't refrain from hunting deer with 22LR because the 22LR (at about three times this energy) isn't dangerous, but because it is difficult to get a shot that produces an instant kill with > 90% probability, and one is more likely to chase and possibly lose a deer that is slowly bleeding to death. Hunters that are insensitive to the deer's suffering and willing to give chase will accept a 50% probability and brag about it later.
It would be interesting to know what made them choose that OS. Is it because FreeBSD was better adapted to their needs or because unlike Linux they wouldn't be forced to contribute back to the enormous pile of work that they inherit ? I hope it's the first one and that we'll soon see commits from Sony flowing in.
It's also the site of the worst NYC disaster prior to 9/11: http://www.atlasobscura.com/places/north-brother-island
Math includes the study of non computable things. Also, Math includes chaos theory which is more than just a formal system.

EX: computable numbers are a subset of all numbers.
http://en.wikipedia.org/wiki/Computable_number
‘The Scariest Threat Is the Systems Administrator’
You're overestimating the appeal of an island in the middle of the East River.
I think you may have read into it too much, and projected your own ideas on to what he was saying. I can't find a single sentence in which he was bragging about being rich and successful (mentioning != bragging), or asserting that there was anything we as readers can't understand.
Of course you revoke the passport of someone who has fled the country to avoid criminal charges -- the passport's purpose is to certify that the US government is certifying your travels abroad, which it certainly will not do for Edward Snowden unless the destination is the United States. Passport revocation is garden variety practice even for white collar criminals out on bail.
I'd agree with the commenter above - there's surely no need to be quite so coy about what you're offering. A casual visitor to the site isn't exactly going to be reeled in by an immediate requirement to hand over details, although perhaps your data says otherwise.

Bonus points if purchases can be in at least CD quality, or even better. (HD storage is cheap - do we really need to be all that concerned about the relative merits of lossy audio codecs, at this point?)
Likewise, I stopped pledging freshman year of high school with no significant consequences. At some point the school stopped doing the pledge.

On the other hand, a friend of mine was nearly suspended for wearing a military jacket with an upside-down American flag patch on the shoulder.
I thought the same thing. I believe what they intended to say was that police from Riker's came over and used the island, not that shots were fired from Riker's through the door.
Great explanation of the concept! That's really clear.
Imagine if I still got paid, even just a few bucks a month, for all those burgers I flipped back in the 90s?

You mean the burgers made to a recipe someone else came up with, in a kitchen that they built for you? Trust me, a lot of musicians would be happy to just turn up to work 50 hours a week with a guitar or whatever in return for steady paycheck. But recorded music and radio killed off most of that market decades ago. Musicians don't get paid for all the time they spend practicing and working on writing tunes, they only get paid for sales.

Comparing writing a piece of music with flipping a burger is just astoundingly ignorant.
Show HN: ZeroBlock, A Bitcoin News Aggregator and Market Data iOS App
It's also common for crimes like failure to pay child support.
I very much disagree with your assertion that you care more about the /content/ than the setup. Your content encryption is completely useless if your signaling protocol is exploited.

I don't know why you say you'd hear Mallory's voice; that isn't implied at all. I don't need you to speak to someone else in order to MITM the signed Certificate you hold so sacred.

I'm not trying to be offensive, but I think ZRTP or SRTP don't matter one lick if the cert gets compromised. Without pinning, how do you know your certificate is actually the one you were expecting?

If the Cert gets popped, I don't see how the call could possibly be secure. The entire key exchange is splayed open for the operator to see. Yes, media encryption is unbreakable, but what would be the point of breaking the encryption if you have the key?

Am I missing something?

For more information on what I'm saying: http://blog.cryptographyengineering.com/2012/11/lets-talk-ab...

Edit: In reading Moxie's input in the blog post above, I may be overestimating the vulnerability of the call setup. I still contend that you can't really trust certs, and the only semblance of trust is pinning, but I digress.
Are you saying you were working double-time from the beginning to over-deliver? That's not how you do it. You give yourself some leeway at normal work hours and if you can inspire the team to put some extra in at the end you deliver a bit ahead of schedule.

I'm curious about your actual estimations. How ahead of schedule were you?

I've come to appreciate realistic planning. I much prefer working with my European (non French and non Southern European) clients over my u.s. clients who seem to have no understanding of planning. I think it's because the European developers often get comp time for extra hours worked, plus 5 weeks vacation and so poor planning is very expensive.