skysight-inc/HackerNews huggingface dataset:
Work does not mean that you have to make others rich, however.
You could work only to be saved from those evil and still get something in exchange, that isn't making the other party "get much more than you do".

For that we would probably need the biggest revolution we've ever known (thats not happening)
It's not a setback at all. You can still use the existing CA system. In fact, you can just not set the secure bit and ignore its existence.

> As for "making zone cuts" --- they haven't. Very few networks have. DNSSEC advocates just like to pretend that everyone has either architected their DNS zones they way they would, or that they'll all relabel all their hosts to fit that way.

Very few networks have ridiculous PHB requirements for public servers defined on public namespaces that are somehow slightly more difficult to find than normal (and once the cat / jabberwocky is out of the bag and published to a mailing list somewhere, gives no advantage whatsoever).

Those that do have reasonable options for satisfying said PHBs, first with NSEC3 and then with zone cuts and private networks (which actually does solve the problem, instead of just pretending to solve it).

> I don't know why I should care about a "global key value store where namespace owners can sign their own entries and make delegations". We can have lots of those. Why use a crappy one bolted onto DNS?

What alternatives? To my knowledge, there is no credible alternative system to DNS. Why put up with a DNS system that is not end to end verified when you don't have to?
Isn't it a little more complicated than that?

With PFS, the webserver and the browser (yeah, oversimplifying here) each generate a random number and "create" a temporary session key without revealing enough about their individual random numbers to an eavesdropper.

So as well as Google's private key, the attacker also needs the "agreed upon ephemeral key" for each session if they want to passively snoop. (And if they're deeply enough into Google's infrastructure to see and archive those, then don't need to decrypt SSL connections - they can just syphon the cleartext out from inside the SSL termination).

(Note: I'm still trying to educate myself here. I fear I may be not fully understanding the subtleties and differences between DH & DHE, and when that "E" means "ephemeral" and whether it also sometimes means "elliptic"…)
Behind the scenes of Tumblr’s design process
It's GREAT to know that your test shows the vulnerability in the iCloud backup of iMessages.

Not that I believe every article that I read (I always speculate sources and bias journalism), but here is an article "pre-PRISM," that states the FBI's stance with iMessage: http://news.cnet.com/8301-13578_3-57577887-38/apples-imessag...
It's much easier to be homeless in a lot of developing nations like Nepal, Indonesia, Vietnam. In the US you get thrown in jail/shelter for being homeless, in those countries though many people simply live off the land or work for barter their entire lives. It takes less effort than it sounds, but enormous fortitude to become an expat.
Says the man who clearly put in a few hours of servitude in order to purchase the shiny contraption with which he wrote this essay.

Not even subsistence farmers these days are entirely self-sufficient. They still have to purchase some of the necessities of life from others.

Maybe in this modern world we are all servants, but at least we get to choose our masters.
Perhaps they didn't want to take the risk that the file somehow got past them (they failed to detect/recognize it, or it was sent another way (courier, etc.)).
I complain about plastic corks, and I wish the low-end French wines would switch to screw-caps. Plastic corks tend to fail under any kind of environmental stress, and they are hard on corkscrews. No one keeps that kind of wine longer than 6-12 months anyway, so in my view they have no advantages over a screw-top. Germany and New Zealand see this.

But plastic corks will probably stick around, because they seem to give folks the illusion that they are doing something special when they open the bottle.
Not an RF engineer here, though I know a few- is a nearly-but-not-quite-perfect Faraday cage really only going to attenuate a few dB?
I, for one, am done. From this day forward I will buy/grow the most economical food. I will buy/build the most economical abode. I will forgo the shiny thing or make one myself at a lesser cost. I'm so very tired of being a servant.

I have lived, or at least intensely studied, all aspects of that premise. While a laudable goal I casually aspire to, it is very hard work with low tangible payoff. I instead write software for others because being a servant - a good valuable one - pays off pretty darned well on average.
You would think instead of stashing them in the fridge, he would ask visitors to not carry a GPS receiver right into his hideout. We complain about the gov possibly bugging and tracking us, yet we do it to ourselves willfully almost 24/7.
That's his point. He is not advocating you stop being a servant to a boss and starting you're own great company ... He's saying a startup is just another boss and really you should become some sort of acetic monk and live off the land, grow your beats and yams or whatever. You shouldn't even want any "stuff" what's wrong with you??!! It's just crap.
I may be going toward a "middle brow" here but this is a lot of jibber jabber. You hear this sophomoric stuff all the time. What is inherently better about being some kind of mountain man survivalist or some commune peach grower? I don't use those phrases to besmirch anyone but what is inherently more "right" about those things? The author is denouncing "shiny things" and claims to seek to make his own "shiny things" whatever that means; I suppose technology is of no interest to this person as probably less than 1% of the population could actually build anything remotely similar to something like an air conditioner or a computer without ... some institutions of "servants" trading time for money to buy said shiny things and shelter. This whole "Working for the man sucks, I'm going to be a monk, the rest of you vain, vapid, shallow people" stuff is sort hilarious to me. It's just this pompous pretention of these sorts of people that claim to be above worldy goods and so on that is just so hard to take; in fact there is a rich history of people claiming to live for a higher purpose in just such a lifestyle, when in fact they were just as greedy and licentious as the rest of us.
Only if you make $100k+ though, from what I've read. You get an exemption if you make less than that, I believe?
Because that lets them play the distraction game (and shoot the messenger at the same time).
The ponderousness of these data structures isn't just about memory consumption or having to use boxed numbers. As far as performance goes, PyObjects infect everything in the interpreter. For example, when you're calling a Python function, after a long run-around in ceval, PyObject_Call, the function object's function_call method, you'll finally get back to ceval which creates a frame via a lengthy call to PyFrame_New. The whole process is a mess of allocating, deconstructing, increfing, decrefing, and tag-checking.
This Nova Science Now episode gives a demonstration where
Prof. Yoshi Kohno of the University of Washington hacks a car and remotely slams on the breaks....

http://www.pbs.org/wgbh/nova/tech/can-science-stop-crime.htm...

Quite a nice segment.
That's so cynical that it looks sarcastic.

Isn't it far more likely to get a divorce if you are refusing to discuss problems with her? Holy hell. If this is what your relationships are like, you might want to look for different partners.

Thanks for making me appreciate my wife that much more.
Metadata on Australians? No Worries
But it also doesn't make it true
Yes but I think the author's point is more about giving up on capitalism and joining a peach commune and making your own house out of logs, filter your urine for drinking water, etc.
Why?
Because organization and specialization get things done.

Is everyone going to have their own little farm and make their own clothes from the hides of the animals they raise?
Would love to hear from anyone using this what their thoughts are. Pity that they didn't post any screenshots up.
fake: http://gizmodo.com/5164841/robot-programmed-to-love-traps-wo...
More like there you toil in the hot sun so that the crop on which your future survival depends doesn't become choked by weeds, devoured by pests, or withered from heat. People forget that agriculture was a back breaking affair and an often unreliable source of sustenance before mechanization and large factory farms came around. It remains back-breaking and unreliable for those in poorer nations not fortunate enough to have found a more high-paying "servitude."
I prefer the simpler filesystem proposal from http://sta.li/filesystem

The FHS has been poorly done for years. For e.g. where is the canonical place for a Web vhost root? /srv/www? /srv/web? /var/www?
haha, has this ever happened?

If you give employees 30 day notice, most will look for other jobs and leave. You will then have no hopes in turning the company around.
There is some truth here; even the militantly dynamic Common lisp has a blisteringly fast implementation (SBCL).
Jeez, I missed this when I posted my reply. It looks as if we're the only two paranoid enough to see the danger and stupid enough to point it out and draw attention to ourselves.

I'm sleeping in the bunker tonight.
Change jobs. There are lots of opportunities here in Vancouver and many employers who frown on overtime because they know that it leads to writing a tangled mess of code that is a nightmare to maintain.

Seriously, leave the Linkedin profile alone and start shopping your resume around. If you are downtown there is enough density of software shops that you could just walk around with a pile of resumes and knock on doors.

Talk to lots of people. Talk, talk, talk.
And while I know cPanel/WHM doesn't really belong in the same discussion as "encryption possibly resilient against state level attackers"… I note with interest that the latest cPanel update (11.38) includes SNI support. That's "switched on" an _huge_ userbase of webhosting that can now grab a cheap/free SSL cert without needing dedicated ip addresses, and who can then tell users "you'll need to upgrade your browser to use our secure site - have you tried downloading Chrome?" ;-)
Facts are not cynical:

http://healthland.time.com/2011/07/11/unemployed-men-are-mor...

http://www.nypost.com/p/news/national/women_divorce_cur_SfyE...

I know there are women out there who would not dump their husband like this. One of my friends who has been with his wife since they were in high school went through a very tough 5 years in his business while trying to make it. He lost hundreds of thousands of dollars which he never made back. His wife stuck by him the whole time and even helped him out. They just had their first child.

You are right that the quality of partner is what matters the most. I suspect HNers on average choose a more morally upright class of women, however, I would still counsel anyone to be cautious about appearing worried to their wives.

Me though... I like firecrackers. Will never marry.
Speaking of SSL attack, are BEAST and CRIME attacks on SSL still a problem in the wild? Have most browsers been patched against these kind of attacks?
My (Simple) Workflow To Design And Develop A Portfolio Website
Yeah but jeez, those guys at that company, what a bunch of servants they are. I bet they work at the company to buy "shiny things" ... we shouldn't support them. :)
Don't worry, in a decade or so, using a "smartphone" will make you look like a square.
Should I invite my employees to my parents' cottage for a retreaet?
HI all,

I'm thinking about a company retreat where my 5 employees can spend 1-2 business days at my parents cottage. It's a lake side cottage with and have a small cruiser if we decide to go out to the lake.

We have internet access so we can work there.

Is this appropriate? Should I do something else like dinner on-the-house at some restaurant for team building?
The post has good intentions. I suspect this is one of those self-motivational moments that we all have in our lives. Where we want to quit working for the man and do something exotic and different. Like grow vegetables, start a restaurant, climb mountains, build some product.

Most people here are taking the writing too literally. Not everybody is a Wodehouse when it comes to writing. If you want to critic, shoot the writing and not the message. Don't take 'master' and 'slave' literally. Give the author some poetic freedom.
Because life is hard. You might think yourself part of an advanced civilization, but the moment you step out of society, you live in a jungle.

"No man is an island entire of itself; every man
is a piece of the continent, a part of the main;
if a clod be washed away by the sea, Europe
is the less, as well as if a promontory were, as
well as any manner of thy friends or of thine
own were; any man's death diminishes me,
because I am involved in mankind.
And therefore never send to know for whom
the bell tolls; it tolls for thee."

Illness will come, hardship will come, childbirth will come. Anything you won't be able to handle by yourself, by cause of weakness, incompetence or lack of resources, you will need the support of others to get through it. That support will be available if you're a well-integrated part of society.

I was lucky enough to know illness early in my career. I've been thought by this that I can't cut myself off from society, I can't go very far from hospitals without risking my life.

You are not a servant. You are part of a society, of which you need the services to get anywhere past your 40's. Serving others makes you worth being served.
Do you have the dataset anywhere?
This is basically what OTR messaging does. But you're still vulnerable to man-in-the-middle attacks when using DH, unless you're already on a secure channel. And the most common solution to authentication is SSL/TLS, which the defeats the purpose of the whole thing.

So we need to utilize other channels, like key-signing parties.

Or, I suppose you can communicate using something like SRP to avoid this issue, though it sounds like a complicated layering of crypto that is destined to be screwed up at some point. However, this is what ZRTP does, and it seems to be pretty widely adopted.
The answer is very simple:

1) Know what ought to be done - do it and send the patches.

2) Need "speed" - write that part in C.)
Not bad. Also look for names that might be difficult to remember. Many buyers go entirely by name or label design, so a good wine with a bad name will tend to sell at a discount.
What a vapid post. What is being a servant, exactly? If you quit your job and start growing all your food, aren't you a servant to the land?

The simple fact is that in order to get the things we need and want, we have to trade something for it. If your skills lie in something like tech (like most of us on HN) it makes sense to apply those skills to earn more money than you would driving a tractor.

And categorising anything non-necessary as a "shiny thing" is a great way of devaluing a lot of stuff. I took a three month road trip around the US. Loved it. I was a "servant" for a long time in order to be able to afford it. It was totally worth it. Was that a "shiny thing"?
I can not tell you the countless hours (which turn into days), that I've spent trying to perfectly code or execute a design or method. I've learned that the best steps to completion that I use (this is in regard to software and website dev)...

1) think of the idea

2) code it (notate any epiphanies along the way)

3) optimize the code

4) package and ship
I meant to say that if a small portion of the energy leaked through, it would still be enough to be concerned about. Most cages will provide very good, though imperfect shielding, but cages of that quality are economically unviable for home purposes. I recall reading that they were subject to failure from every day wear and tear too, which would be hard to spot until it was dangerous. The chokes are just a more practical design.
He's purporting an ideology that says by starting your own company, you are simply engaging in your own indentured servitude. You're giving up your precious life to customers, shareholders, whatever just so you can buy "shiny things," anything but participating in capitalism. It's just think kind hippy idealism and moralizing.
Also, you shouldn't even be using md5 anyways. It's essentially broken and has serious vulnerabilities. Use sha2 or sha3.
> 3) Pick your value encoding carefully. You almost always want fast immediate integers. On 64-bit platforms it is quite common these days to repurpose some of the NaN range in IEEE doubles for type tags to enable storing doubles in immediate values.

That technique applies more to JavaScript, which uses doubles as the standard number type, than in Python, which has both integers and floats. Still a good idea to make sure that both native integers and native floats end up as unboxed native types in registers, though.
Have your parents check with their insurance provider before you make any decisions.
why?? what does nimrod bring to the table... how is it better that c/c++ and go ??
Wow, this is such a poisonous little screed.

If you hate humanity then fine, go live in a shack, be your own Universe, knock yourself out.

For myself I actually like humans, on the whole. I enjoy interacting with others, I enjoy helping other people, I enjoy building things, I enjoy working, and I think a lot of other folks do too. Work is not implicitly servile. It can be, of course, but it doesn't have to be.
I'm not trying to say that its impossible, not by any means, but the RT article presents the statement as something that is assumed to be true, whereas the HuffPo article presents it among a large list of conspiracy theories. The RT article is clearly written to act a propaganda, and the article from the post gives a more objective view, where there is a slim possibility that the car was hacked, but it is just as unlikely as any other.
The images of offensive shirts were the result of a computer program that automatically generated random phrases and images. Fowler had used the program to expand his company catalog from 1,000 designs to more than 10 million, casual shirts with pithy one-liners like, "I mustache you a question."

Hard to believe there was no editorial oversight. On the other, hard to get to 10M designs with editorial oversight.
There's lots of other things to worry about in the iCloud ecosystem anyway. The iCloud backups that devices make aren't encrypted or protected at all by Apple's two factor authentication. Apple can pick and export these at will. Alternately, plug in somebodies email and phished password, and you've got the entire history of their iMessage conversations in plain text, along with a complete copy of all their devices.

I'm much more worried about that happening than an evil-Apple scenario. I doubt many people have strong AppleID passwords, or particularly unique ones either. Heck, I know people that share accounts to avoid paying for apps.
Advertise your startup by republishing random startup stories for HN instead of writing them! Genius!
Haha oh my god Terry A. Davis commented on it!

SQUAWK SQUAWK SQUAWK
No, I didn't know that. But there aren't a lot of options out there for anonymizing your browsing habits, and TOR has the benefit of being open source. The other issue with this, or any distributed system, is that the effectiveness is directly proportional to the number of users in the system. Fine, the FED controls end points, but it can't possibly control all of them. As more people join TOR it's powers of anonymity increase. Run one of your own, and have faith that your fellow hackers will do the same.

Nothing happens amongst us humans without some amount of faith. You can dump a pile of negativity on the state of our country, but at some point you've got to trust someone, for at least 60 to 100 years and enjoy the sunshine.

There's some serious tinfoil hat stuff going on in that blog link there. And this is coming from someone who still keeps one foot firmly in the camp of 9/11 being at least in part an inside job and running a diversified gentleman farm so that when the electric grid fails my family wont starve for the first six months.

Let us all stay ever vigilant, but remember the good things the Internet, representative democracy and modern infrastructure have granted us (for one, the ability to complain openly about the Gov't without being executed, most of the time ;p ).
You're looking for "hyper-heuristics."

So called, because unfortunately GAs etc. had already taken the name "meta-heuristics".
Obama Unveils Climate Change Strategy: End of Line for U.S. Coal Power?
We are only free to the extent of our own self mastery.
Those who cannot master themselves, will find masters to govern them.
POST EDMS triggered launch, a simmering autonomous viral botnet, foisting ES plaintext onto infected email address lists, pastebin, etc., anything else it can fool CAPTCHA registration, with generating SHA256 signatures, new passwords, the whole open source kitchen sink of paranoidal-crypto-craft to effect public-at-large propagating whistle-blaring incriminating secrets, successfully leaked.
京JS 2013, Oct 19-20, Beijing, A JavaScript focused conference in China
Developing: Apple Threatening to Yank iRadio Holdouts from the iTunes Store...
Really? How many hours do you think it'd take to write something like this?
is there always a wall around 200?
you have to crawl before you can walk. before people will make connections, they need to have a good relationship with you because their reputation is on the line when they make connections.
Hmmm. As someone under the jurisdiction of the Australian Cybercrime Act... I wonder if it's time to have policies in place for private keys - much like many corporate email retention policies. "We keep private keys for twelve months only. We create and deploy new keys every six months and securely delete all keys older than 12 months along with their passphrases - including physically destroying all drives that ever contained the key and/or backups of it. Any data not transitioned to new encryption keys before private key destruction is considered irretrievable."

"Yes Agent Smith, that's a mighty fine $5 wrench you have there - here's _both_ my current private keys. Last year's? No sorry, here's the video of those disk drives being hammered to bits then melted down to sludge. (Ouch! Why are you hitting me? This plan was _flawless!_)"
Looks like he's contributed significantly to the Webkit javascript interpreter: https://www.webkit.org/blog/196/cameron-zwarich-is-a-webkit-...
How to filter Django Forms by User
Very much so. Windows support is something I may be able to do myself, but a GUI is definitely something I don't have the expertise for; at some point I may end up hiring someone to write one, but if someone writes one on their own, all the better.
Ha, you laugh, but human-in-the-loop evolutionary algorithms are well established. And the research communities involved are now looking at applications to cloud computing. So it's just a matter of time before this... recombination.
That's quite a stretch you made there.
And don't forget Apple can decrypt iPhones at the request of law enforcement: http://news.cnet.com/8301-13578_3-57583843-38/apple-deluged-...
this is well done