skysight-inc/HackerNews huggingface dataset:
I genuinely don't care about Snowden. I want him to force Greenwald to give us some more fucking information instead of this pussyfooting, because at this point all I'm seeing is those two skewing a lot of facts and getting a lot of this horrifically wrong. Except they've completely clammed up, so now we get no clarifications or additions to the story.

If his stuff turns out to be completely 100% true, awesome. If it's mostly true, but somewhat skewed, then whatever, okay. If it's mostly false, a giant pile of hyperbole, and it turns out they don't have our SSL cert keys, they're not gathering all possible social network data(or even most of it), etc etc? Then I'm just gonna shake my head.
I never really understand git branching until I saw this cool website. Thanks a lot.
With VoIP, signaling encryption and media encryption use two different keys. If you have the first, you do not have the second. This is difficult to understand without reading the SIP protocol (RFC 3261) and very few writers of blogs talk openly about it because most people outside of the niche of VoIP only care about HTTPS as the "secure protocol stuff" and stop there.

Here's the trick: SIP has nothing to do with sound or video. It "establishes sessions". The typical SIP dialog flow has a hierarchy of many other protocols. In order, they read like this

SIP->TLS->SDP->ZRTP->SRTP

That dude in the middle is the Session Description Protocol. This describes what will happen in the future regarding the media stream. When the clients agree on this (codecs, IP addresses, ports, etc), a full-duplex session is established between the two peers. The preceding TLS stuff, which depended on a CA is now over. We are ready for round two.

This is what you missed. We haven't even begun sending data over our media socket yet and the security stuff that depends on a central authority is finished.

Now that we can speak to each other, let's do that! But wait! My client has an alpha numeric string on the screen. This is called a Short Authentication String. When you read the SAS to me and I read mine to you, we click "OK" and now our conversation is encrypted. Because we agreed on a key with our words, not our fingers.

If you would like to try this IRL, you can call lee@ostel.co. I'm online right now.
(Beware, I never visited the US, all I write is based on my distant perception)

It seems like Americans like to black-and-white every decision, binarize every election (leading to two political parties; any alternative is disregarded). That mentality is taught since generations and cultivated by those press articles and many cultural products. It eases the herding of mass opinion, and by denying immediate access to intellectual subtlety, it makes philosophical though more alien and generates anti-intellectualism in scientific and cultural areas where subtlety and self-criticism are key.

Maybe my indirect reading is biased by the most prominent cultural exports of the US, or their the most vocal representatives. I would welcome the opinions of insiders.
Some exoplanets discovered recently are 10,000 lightyears away. So indeed, 22 lightyears is absolutely nearby.
The a video of the talk those slides are from is online
http://vimeo.com/18417770

Worth watching even if you don't care much about DNSSEC, Bernstein is a good speaker.
Open Office has seized control of the document suite. Any day now Microsoft is going out of business, and the GIMP is about to destroy Photoshop...

Bottom line is if there is a real market for something and someone makes a better product.
Even so, an MP who stood up in a time of war and in public gave information that could "be of benefit to our enemies" would still face prosecution for Treason.

And that's kind of the point.
To whomever came up with that title; Never, Ever tell people not to encrypt things!
You have nothing against someone storing it indefinitely, but I bet you have a problem with them now thinking you might be a bad guy. Will they listen to your phone calls to find out if you are in fact a bad guy?
PRISM : let’s have a look at the big picture
I actually hacked up a feed-horfer that populated an IMAP account some years ago. IMAP gets you like 90% of the way there.

There's no facility for updating items, that was about the only thing really wrong with it from the end user perspective, assuming you are okay with storing the full text of tens of thousands of items when you will only read 2% of them.

But I don't see anything wrong with that in an era where even our phones have 64GB of storage...

EDIT (my touch device over zealously submitted): but IMAP isn't the right solution, even though it could work, and work better than google reader even. A RSS sync system really shouldn't require the user to download all the items and then sync against their own copies of them---it should be able to sync what has been read[1] based on the canonical URI of the item, with some intelligence to grok the mod dates to track updated items. Storage isn't a problem anymore for mostly-textual content, but mobile latency and data caps are.

[1]: and, in my opinion, notnjust what has been read, but what has been flagged, labeled, tagged, reposted, liked, hated, and／おr assigned whatever other arbitrary metadata
A larger research budget than the entire open cryptographic community? Maybe. But it's not just about budget. A lot of the smartest cryptographers don't work for the NSA anymore, because they like to publish their research, and/or because industry pays better.

If you haven't broken the algorithm, a "larger hardware budget" really isn't helpful at all. Key sizes are big enough that the laws of physics prevent you from brute-forcing them. From Bruce Schneier: "If we built a Dyson sphere around the sun and captured all its energy for 32 years, without any loss, we could power a computer to count up to 2^192. Of course, it wouldn't have the energy left over to perform any useful calculations with this counter." http://www.schneier.com/blog/archives/2009/09/the_doghouse_c...

If they've made a huge breakthrough on quantum computers, they could break the popular public-key algorithms, but could only halve the effective key size of symmetric algorithms.
Right, but what about Mark Udall in Colorado? Udall is the 2nd Senator in the title of The Article.

Just google "jane harman alberto gonzalez" for a few informative articles.
Zotonic is not really like Zope: we like developers to be in control of their source code, so stuff like editing templates or code on the web / storing code in the db is not supported and never will be.

Normally, every site that runs in zotonic sits in its own git repository. You can even hook up a webhook to automatically update your site on the fly (hot code reloading, http://modules.zotonic.com/page/367/mod-github)

For a very simple example site you could look a this image pasting service that I whipped up: http://stick.im/ . its code is also on github, https://github.com/arjan/stick.im
This may help. It helps me a lot.

The Git Cheatsheet (interactive)

http://www.ndpsoftware.com/git-cheatsheet.html
He's been the opponent of pretty much all recent privacy breaching legislation.
Joyent goes big on big-data computing and storage with Manta
Marcy Wheeler suggests that the inaccuracy "has to do with the US person contact info collected along with targets. Even a comparison of the minimization order and the NSA’s claims make it clear US person communication can be swept up more easily than they claim."

http://www.emptywheel.net/2013/06/24/wyden-udall-to-alexande...
My Startup has 30 days to live
I held down shift and used my scroll wheel.
Are you suggesting this could be a limited hangout[0]?

[0]: http://en.wikipedia.org/wiki/Limited_hangout
His failure to criticize these regimes suggests

that he is not a citizen of them. He actually cares about what he personally is responsible for, what is done in his name, rather than what is easy to bash and a useful distraction from one's own crimes.

Hah, that was easy...
Mr. Sanford Saves a Paceman
Likes are for Losers
Poignant: "... I want to study."

Amusing: "... I want a government job."
Client-Side JavaScript Management, Browserify vs Component
The challenge is if you encrypt every email, you're basically using your own email server and service. The gov't isn't decrypting your HTTPS gmail traffic - it is going to Google, saying "hey, give me msy's emails from 2007 to 2010. k?thnx buhbye!"

So you essentially have to go off the usual grid to run your own email service... then you have to get all your contacts onboard with using it.

I have a client that uses zixmail - webmail that is https and just sends notifications to your plain-old-text email, then you login and read and reply to your email over https. Ironically, it is a gov't agency that makes us use it.. I wonder if they snoop on their own encrypted, vendor-provided secure email?
It's worth reading pg's reasons for saying this here:

http://www.paulgraham.com/philosophy.html

Without that you're not going to understand why he wrote that paragraph and you'll also hopefully see that he's got meat behind his reasoning and that this is an offhand comment referring back to that essay.

As someone who also studied philosophy and now can look back, I think he got it right.

It also makes this entire thread moot.
Potluck - A house party on the internet
Where are all the one, two, and three letter words? Does Gibson never use "a", "or", or "and"? More importantly, how is this an effective placeholder for English text without them? This seems all too common in these alternative ipsum generators. I guess people aren't actually supposed to use them?
"...and significant damage to our country and to our allies."
You mean the kind where the "terrorist" now know this too ?
Or the PR kind ???

If your laundry wasn't dirty it wouldn't be a problem if it hung out in public !
Meet Potluck, a new product from Obvious-backed Branch
1-7 Ashwin Street, for those that want to visit.
With all those cold dark weekends that Paris has during the year, and they couldn't find any better time to schedule this than in summer, and specifically on the Solidays weekend. Boooo!
Honestly I have never had any problem with cPanel. Does exactly what I need it to do. What problems did you run into with cPanel?
Open Source has a fairly well accepted definition that comes from the Open Source Initiative.

If Microsoft could call Windows 'Open Source' I have no doubt they would. Instead, they call it Shared Source (through their Shared Source Initiative, surprisingly enough).

Microsoft themselves don't consider it Open Source. The people that essentially invented the phrase itself don't consider it Open Source. I don't know why anyone else would.
Selector based dom mutation observer
Keep in mind that as a rule of thumb, its useful to assume that the NSA is about 20 years ahead of the public in crypto research. Even if systems like HTTPS and Tor appear secure today, the NSA may already have knowledge of weaknesses that we don't.
Looking at the specs - Quad core tegra 3 at 1.7 GHz, and the price ($99), I might have to get one of these just on principle, for hacking...

--edit-- just noticed the £23 premium (after accounting for 20% VAT) for UK purchasers. Never mind then. I'll look for something else.
Actually, for the specific purpose that you're speaking of, I think yes, it does contradict your statements. If you were building a game console, you could probably get nearly immediate access to the Windows source code. They have it such that you can compile Windows with the kernel modules of your choosing, specifically for use in embedded hardware scenarios. And it's actually configurable to run on ARM, not just x86.

And I doubt they would actually prevent you from making your own competing console, because A) Windows is a separate division from Xbox, and B) Xbox is a lot more than just a console that runs Windows. Just because they make their own tablet computers doesn't mean they're preventing people from making tablet computers.
That page could do with a little syntax highlighting, at least for the comments. -- does not stand out.
Therein lies a lesson for the interviewer, "your spec is too vague" :-)
Why does it matter what kind of storage a load balancer has?
HEYLO ?
>Can I get a readable color scheme already?

Yes. In your OWN blog. This one is retro styling for the intended audience, and we won't have it any other way.

"Eye-burning"? Maybe lower your brightness? I have -3.00 diopters myopia and can read it just fine.

Not to mention people worked for 15+ hours on green on black displays and you didn't see them complaining -- and that was with phosphor displays, with an electron gun blazing, and tons of others issues, from flickering to v-sync.
Isn't every https page load and form submit an "encrypted communication"? This article seems to imply that any secure online surfing or shopping would trigger this "capture the encrypted communication" stuff. Thisvdoesbnot make sense.
I don't follow. Are you saying that I changed the meaning by my choice of ellipsis? How so? I didn't intend to, sorry.

It says "except Felony". Releasing classified secrets is a felony. So it sounds like it means that a Senator who released classified secrets during a speech in the house would not be immune from prosecution for doing so.

Is that not how it has been interpreted? Do you have any examples?

Would a Senator be safe in discussing the classified details in the House? I notice that all have chosen not to. Would you say that's due to public pressure rather than the threat of prosecution, then?
FYI, for virtual machines, I've been thoroughly impressed with this service:

http://www.exoscale.ch/

They're in Switzerland and seem committed to maintaining your data/security (and they have the full force/support of Swiss law).

Their UI is super usable. It's a true pleasure to use. You can choose from several posix distros and a Windows one. There's decent selection for different sizing. But they're in beta now, so there's not a full lineup of features. The pricing is very good. And the support is awesome. I've raised a couple of tickets and they were responded to in a couple of hours.
Your frontpage seems to have an &emdash; encoded incorrectly.
Law Firm Slowdown Fuels Cuts at Weil Gotshal
It's getting worse. Now we're turning the story from Snowden to Greenwald.

It's sad to see that even the media doesn't want to protect itself anymore. Well I hope they won't count on our support later, when they come arresting more of them for publishing any sort of leak and "harming national security".
At this point, no one has to worry about that if they aren't being individually targeted. I think most people just want to avoid being sucked up in a dragnet along with everyone else and having their communications permanently on record.
The man who won the right to discuss his National Security Letter (2011)
From January 2011, but well worth a re-listen today. This highlights one of the problems with government secrecy. National Security Letters come with a gag order that keeps the recipient from even discussing receipt of the letter with their lawyer.
What if: Free Fall
Or - to be the devil's advocate - perhaps the only way to advance free speech is to defect to North Korea (like Joe Dresnok)? Or give secrets to Israel (like Jonathan Pollard) or China (like Peter Lee) or Russia (like Robert Hanssen)? I mean, who really knows what could turn out to be the only possible way to advance free speech? With the US as the "biggest villain," perhaps absolutely anything done to oppose the US is the only possible way to advance free speech?
You can generalize my point: Pandora should be judged the same way as radio or the comparison is unfair.

The methodology of arbitron says that if radio can be identified within audio range, you are deemed to be 'listening' to it.

Can we still claim, by this methodology, that every Pandora device has an average of one listener? Only if you claim every radio has an average of one listener by this methodology as well (which is highly doubtful) or if radio and Pandora are used significantly differently (which I don't strongly believe: as you say, it's played in cafes in place of radio).
Russia rejects US demand for Snowden's extradition
Unfortunately, if you get disconnected from feedly (like you do not use it for two weeks or you are in incognito mode), it no longer respects your preference. So the default should definitely be the other way around
When encryption is encountered, however, the gloves can come off, with analysts being allowed to retain "communications that are enciphered or reasonably believed to contain secret meaning" for any period of time.
--They are doing this anyway I'm sure
Since the NSA guidelines say that a person "will not be treated as a United States person" without a positive identification based on name, address, electronic communication addresses or geographic location, encryption users may because classified -- at least temporarily -- as non-U.S. residents by NSA analysts.
-- non sequituer fallacy, of course the encryption user cant be assumed to be a citizen if they dont know who the encryption user is. It doesnt mean you cease to be a citizen it means the unidentified entity cannot be assumed to have that privilege, point is as long as the entity is unidentified there is no connection with YOU. Presumably if they break the encryption (n.b. google recently invested in a quantum computer) they would be able to ID the encryption user and all the assumptions about citizenship would be re-applied.
> It would seem that you're conflating open source with free software

I'm really not. Windows is closed-source in that the source is not readily available - nothing to do with "Free"ness. Agreed that Java is a good example.

> Given that the Windows source code is nowhere near as hard to obtain as you seem to think

Perhaps it's easier than I'm aware. To my knowledge, the access routes are all through the Shared Source programmes, and they have specific eligibility requirements: http://www.microsoft.com/en-us/sharedsource.

So I expect we're just disagreeing about the extent to which code must be "open" to count as "Open" - I'd posit it being available for public access, but I could be convinced if it were available to all customers.

> I would contrast this with Adobe Photoshop as an example of very-Closed, Non-Free software.

Fair enough - there are examples of "more closed" software.

> You almost certainly have competitors building software on an MS platform and you should not make the mistake of assuming they're doomed from the start.

I'm certainly not making the assumption that using closed-source software is always a bad decision. There are obvious benefits to using open source, but it's not always possible, and in many cases doesn't make much difference. But I can't get behind the argument that Windows is "Open Source" in any meaningful sense - even Microsoft describes it as "shared"!
Learning about Subqueries in Oracle
Or maybe he realized he didn't like you.
Spying isn't a problem, hypocrisy is. While the USG decries terrorists and unfriendly state-actors as a major source of cyber-warfare, the US are most certainly at the heart of it as well.

This seems like the build-up to a war and the United States government has mobilized unimaginable resources devoted to offensive capabilities, and there's an eerie sense of escalation that's reminiscent of the Cold War.
+1 for Laravel.
Just for fun added test case for reduce and forEach, in order to show how slow it is. http://jsperf.com/while-vs-for-queue/3
Just told all my co workers about it and they like it and see its appeal. Nice site design too. I may give it a try.

With Reddit you really need to know how to game them, and it isn't hard. Talk to the moderators of whatever subreddit first so your post doesn't get insta flagged. Offer some kind of incentive, if it's a paid product, offer a coupon.

You need a story with your release. Nobody cares if you're just another guy who likes to code, we all are.

I can't remember what the site was, but someone posted somewhere reddit traffic statistics and found 4PM to be the best time to post. I ran a repost bot that always posted at 4PM and that gave me (usually) the highest number of upvotes in the least amount of time.

I think that post was on a Reddit blog.
22 lightyears is close enough for a conversation, although it would be quite the remote working challenge.
Mixnets like Tor generally aren't considered secure against an adversary who's monitoring the whole network. Maybe the NSA isn't there quite yet, but they're sure trying. If they succeed, a DC-Net can still provide perfect anonymous communications, but it's hard to make those scale. There's been some work to improve matters, eg: https://www.usenix.org/conference/osdi12/strong-scalable-ano...

Edit: also this (pdf): http://secan-lab.uni.lu/images/stories/christian_franck/FRAN...
The USA has one of the least intrusive, least overbroad surveillance regimes in the world. Google introduced PFS because governments in places like India and Russia openly desire to intercept all communications.
I'm deeply thankful to Fry and everything he's done in this regard. Had I not watched him talking about his experiences so openly I would not have noticed myself acting in a similar manner.
The Happy Startup
Yes! I definitely have that entrepreneurial burn inside of me but I haven't had any idea that I feel strongly about yet. I think I'm going to start trying to opening up my mind more and engaging in new things, reading about topics that maybe I wouldn't have before, etc.
Ask HN: Junior Software Engineer Salary [London]
Hello,

I am 22 studying CS and will (hopefully) graduate in Jun/Jul 2014 in the UK.

I have received a job offer, and am about to sign a contract for a graduate opportunity starting in Sept. 2014 in London.

The salary is meant to be £25,500.00 p.a. before tax.
After including bonuses and allowances it can total at around £34,000.00.
Which would mean that I'd be "taking home" around £1,600.00 p.c.m.

Question is:
Is this a decent opportunity, salary wise? Or as far as salaries go, is this the low end?

Your answers would help me a lot, specially on whether to keep looking for something or to settle for this.

Thank you.
Bush EPA Rushed Approval Of Pesticide Now Tied To Honeybee Genocide -
blowfish ftw
While I wouldn't put something like that past them, I don't think that's the case here unless it's part of a much larger conspiracy where Snowden is deliberately leaking misinformation on behalf of the NSA. Because the evidence behind this revelation is a DoJ document signed by the Attorney General authorizing exceptions to the ban on collecting U.S. data, and it was given to The Guardian by Snowden.
You've been downvoted... but seriously, why is this such a bad thing?
Before I die I want to see two legged robot running gracefully a rocky mountain path.
The (classified) Pentagon Papers [1] were read into the congressional record without Mike Gravel being successfully prosecuted.

I assume as the exclusion for Treason, Felony and Breach of the Peace is before the semicolon, it doesn't apply to the "they shall not be questioned in any other Place" after the semicolon.

[1] https://en.wikipedia.org/wiki/Pentagon_Papers#Leak
Yep, scary. This is the cyberpunk future, after all.
If the site still doesn't load you can fix it by issuing

$ ab -n 1000000 -c 500 http://beforeidieiwantto.org/