skysight-inc/HackerNews huggingface dataset:
Anyone who would advocate for DANE in 2013 is looking at a situation where users assume that governments have compromised the PKI that drives the most important encryption on the Internet, and saying to themselves, "let's bake that problem into the network architecturally; let's make it so that the NSA doesn't even need to compromise a CA, because they'll own the global root of all CAs".

Regarding NSEC3: most people reading this thread don't know what it is, so I'll explain it really quickly and let them decide, because it it so obviously a stupid hack that I don't think I need to argue against it too much:

Just a couple years ago --- more than a decade after work on DNSSEC was started --- somebody realized that Bank of America would not in fact be OK with a DNS design where every single one of their hostnames, for both public and internal systems, was public. But that's a problem, because DNSSEC wants to authenticate negative responses; if there's no JABBERWOCKY.BANKOFAMERICA.COM, DNSSEC wants that cryptographically proven. But their design to do that breaks if there are nonpublic names, because DNSSEC chains the names together as a way to authenticate denial.

So here's what they came up with: domain names are hashed (crappily) as if for a 1997 Unix password file, and the authenticated denial messages refer to hash ranges instead of literal hostnames. Meaning you can only discover all of Bank of America's hostnames if you are as technologically sophisticated as a circa-1997 password cracker.
Array shift is O(n). Using pop instead gives a better comparison: http://jsperf.com/while-vs-for-queue/18
To me the messaging is confused. The tagline of creating the world's largest law firm clashes with what appears to be the central idea of the site i.e. to promote referrals between lawyers.

The reason for the clash is that referrals often happen because a firm who receives the initial instruction is conflicted due to an existing client and has to refer the instruction to another law firm who is not conflicted.

As a result, the aim of creating the world's largest firm seems counter-intuitive to the intended objective of the site.
You have deep seated fears inside of you. They were and will continue to drive you nuts and keep you spinning wheels with your life.

Here's solution:

Focus on one single, really exciting thing that will overpower your fears [of failure, or success, of being hurt, of being disapproved by others, of getting too old, etc...].

Focus on it for at least one month at the expense of anything else. Become ruthless in achieving it.

This focusing will make fears irrelevant and will guide you out of darkness.
Article seems to kind of miss the point. While the NSA's STATED reasons for these programs is to "fight terror" that doesn't necessarily mean it is their actual reason. If they want to spy on activists and everyday citizens this seems like a pretty solid strategy.
I have complete understanding of your situation, having been in the position of having to let people go from a very small team a couple of times. It's hard and feels awful, but you are doing what you see needs to be done which is great in comparison to not having the willpower to act.

If the developer you need to let go is as good as you say, he won't have a problem finding a new job. You feeling shitty will not help him nor you so continue working to remedy the situation to the best of your ability. That's all you need to do and I think it sounds like you will be able to look back to all of this and be proud of you being able to make hard decisions even in a situation when it's so much easier not to.
This happened to me 6 weeks ago. I'm now happily employed at another (slightly more stable) startup with good work and a better situation.

Trust me, any employee would be happier to be in a stable and improving startup than in one that's going downhill anyway. If they're a dev with startup experience, they'll have no trouble finding a new job and will be better for it.

Don't worry, just be honest and open with them ASAP. The worst thing you can do is keep them in the dark.
Millwood Online joins the Heroku partner program
Maybe I missed it, but WHY does your startup have 30 days to live? You ran out of money and have no raise potential? How could your employee and cofounder not know this already?
Having worked in several large (public and private) organizations, I always find it amusing when people act like it is somehow inconceivable that an organization could demonstrate both extreme competence in one set of activities and extreme incompetence in a another set of activities whose domains overlap those addressed by the first set.

IME, that's the norm in large organizations.
This is an idealist approach to thinking about American reactions, not a realistic one.

In the real world, people get angry at things even if they don't cause lasting change. It doesn't matter if Snowden dismantled a program they like - people get angry just because you criticize their favorite candidate, and he did so much more than that.

It's naive to try and argue nothing is different or impacted because of Snowden just because he didn't dismantle the spying program. Snowden is antagonistic to the program itself and is publicly standing against it. As such, he is didactically opposed to Americans who support the program and vice versa.

In politics, being opposed in such a way fuels anger and resentment. You don't need to change anything - its your existence as a player on the other team and your potential to rally against something other people agree with that makes you a target.
What if it wasn't really about terrorism?
Not a cautionary tale, just a blog to vent my frustrations and record the experience.

I'm not in a position to give "advice" nor do I suggest anyone follows "advice".

If you're a new founder and about to get on the VC train, through the accelerator and out again at light speed, it's good to know that this is one way it can all end up. (Nobody really speaks about it anyhow)
It's an argument for better network and host security.

If you have a building you want to secure, you could make a lobby with a man-trap and a guard at the front desk and security keys for the lobby and on each floor. Or you could put a padlock on the back door. You decide whether it's worth the risk.

In terms of what to use to remote into your private VPS, just use SSH. A VPN would be overkill.
How is the Kinect any worse than every phone, tablet, laptop that have cameras and/or mics, which people carry with them 24/7, even to showers? For example, I would be much more embarassed by someone posting the video and voice feed from my phone on the internet than from my living room.
Secret government agencies don't tend to tell you what they can or can't do. So, even if they have hacked into the bad_guys computer and decrypted the messages instructing people to place the bombs you're not going to hear about it.

In the UK we've had some weird private courts (where NOT EVEN THE ACCUSED KNEW WHAT THEY WERE ACCUSED OF (caps because really come on even I think that's bad)) and in the US I guess the intelligence is passed onto to other agencies who then claim the arrests and other evidence is used for convictions.

I know that NSA and GCHQ have very smart, capable, people working for them. I have no doubt that if GCHQ wanted to get access to my hard drive they'd find it trivially easy to do so. Whether those people are allowed to operate at that kind of level (because of oversight or internal politics or they're just doing different work) is another matter.
How competent do they have to be if they have a feed at the major providers? I don't think they are bumbling idiot; i think they are very good at maximizing their budgets and keeping their budgets safe. That's what bureaucrats do. If they have to spy on all americans to maximize their budgets they will.
Why iOS7 was a bad move
Writing Out Goals
Favorites:

Credits (AWS)

T-Shirts

Water bottles (this one surprised me, but I got a couple from Palantir and I use them every day)

Maybe it's a geographical thing but I've never seen a stressball at a hackathon as swag (based in DC)
Encrypt your email. Help support jobs for mathnerdspooks. Seriously, the more people they have to hire to sort our garbage personal communications, the more likely future leaks will be about this invasive, wasteful, unnecessary threat to (life, the universe, everything).
As a supercomputer software engineer, I was well aware of what the NSA could use the data for. I studied graph problems. However, that is not the point of the article. I wanted to focus on the constitutional infractions that deserve attention. I did not want to speculate about what I believe they're doing with the information. Public, informed guesses could harm the acceptable parts of the program.

My point about the Tsarnaevs was that the NSA publicly claimed their domestic-only intercepts were being used successfully to catch terrorists. The point of these whistleblower revelations was that the separation wall between domestic and foreign intelligence created by Senator Frank Church's committee had come down in some cases.
I've heard this argument several times and I disagree with it.

Organizations are basically groups of people; it's entirely possible that some people in an organization are more competent than others. There could be extreme differences in the level of competency. Or maybe some people are competent in some areas (e.g. the technical details of surveillance) but lack competence in other areas (e.g. common sense). This could be even the case amongst the key decision-makers of an organization.
Russian authorities are either mocking the Obama administration or learning from it:

> ... Mr Lavrov said. "He chose his itinerary on his own. We learnt about it... from the media.
What if you just kept everyone, told them the truth that you can't pay them, and kept going? If you still believe in the core underlying thing that was working when you started then maybe you can turn this around.
It does mesh. Think about any organisation, management vs employees, one can be competent exclusive of the other.
Can't you wait till he gets back so he can have a good vacation?...Although I've seen the whole "got fired upon returning from vacation" thing happen a few times. That sucks too! Sorry for both of you.
I quit the news business before I even started.
Rails 4.0: Final version released
They are collection a ton of data. As time goes on, if a large portion of it is encrypted, then it may not be feasible to break it all, even with Moore's Law. They may just have to be selective with it. You can imagine that even in if the US becomes a new-age Nazi Germany / Stalin's Russia, it may still be prohibitively expensive to go spelunking through years old communications looking for people with possible subversive thoughts.

Edit: It would probably just be easier at that point to ban encryption going forward.
That's crap, anyone paying attention knew that modern communications have been compromised by various governments over a decade ago, if not longer. The smart ones never used such unsecured communications in the first place. Nothing Snowden released changes the fact that only stupid people communicate over third party services when they are trying to keep secrets. It would be like the US military issuing unencrypted cell phones to troops on the front-line.
Exactly the point I was going to make. That's how Petraeus was communicating with his mistress, and they found her by cross referencing checkins at all the hotels revealed by IP addresses that were at the other end of the conversation.
Mistakes Startups Make
Founders are all very well aware, employees still in the dark.

No raise potential as metrics are nowhere near where they should be. Solid IP and team that might make for a good acquisition, provided investors will OK it (they've rejected one some time ago)
Could you please provide sources to what you are mentioning?
All I can do is wish you good luck and say that I admire you for having the courage to try. These seem like empty words, so read some of my other posts to see that I really say what I mean (i.e. I'm very harsh with people I don't think much of, so when I'm nice, it means something). I'm sorry to hear that this is happening and I hope things turn out for the best.

Where are you located? What's your next move?

I can't stand how these investors get so hung up on Playing God with other peoples' companies. If they want to take over the world (and endure the risk involved; since world domination has a much higher chance of failure than a sustainable, mid-growth lifestyle business) they should do it with their careers and companies, not someone else's.

Elon Musk is doing the right thing. He's chasing the vision with his own work, rather than jumping into someone else's Magitek Armor and then deciding to burn Narshe.

Also, these asshats are the reason it's so fucking hard for startups to get clients. Businesses (clients) have been burned, horribly, in the past by startups dropping them to chase dragons because their investors thought it a better idea to drop the client and roll the dice on some red-ocean product play with a 1-in-100 shot at success. This creates a world in which clients are very cautious about dealing with startups.

We'd have a better ecosystem if the VCs were just passive investors who didn't try to live out their own adolescent do-the-world fantasies. They'd certainly make more money that way.
It might well be that my tablet is crap. In fact, it most certainly is (it's a Sony).
Yeah, I realized after continuing to work through your comments what you were doing.

I think there are definitely some issues about which we cannot adequately make decision by defining in the negative. But every so often, a question arises for which it is good enough for the public discussion to be stopped with a resounding, "NO. We don't want that." These programs, I think, are such an issue.

I'm happy to pay taxes and consider it to be a rational burden one ought to fulfill as a responsible citizen of any society. I simply don't like tax dollars going into programs like this, which I do not find meaningfully improve my quality of life, and do find it to violate the Constitution and reasonable expectation of privacy.
you have to take into account that the closer you get to light speed, the slower time goes. In other words, people on the space ship may age slower, meaning that 220 years may be a lot less to them. What is the equivalent of 1 earth year on a spaceship going at 0.1c, that is the question.
Plenty use yahoo and MSN messenger, though, historically.
218 years, instead of 220.

http://www.wolframalpha.com/input/?i=time+dilation+calculato...
I'm sure the $5/month was a reference to the syncing service, not in addition to it.
There's a market between sellers of equity in early stage companies and buyers of equity in early stage companies, and sellers in that market largely will not transact with you below $250k, because they'll have better offers for their scarce product. (This assumes, naturally, that the founders appear to have a credible chance of bringing a technology product to market.)
Well apparently both Al-Qaeda and some CIA employees uses public email accounts like Gmail to communicate in secret.[0]

The method is a little bit different than normally email. They used Gmail as a electronic dropbox by saving messages in the draft folder, but now that NSA have direct access that are probably picking up that also. So be careful not to make a draft with text like "the drunk monkey sings at midnight", or the NSA may come knocking :)

0: http://www.washingtonpost.com/blogs/worldviews/wp/2012/11/12...
That's what they do though. They have to fill the air time with something so they fill it with wild speculation. Unfortunately, this ends up leading the public discussion around by the nose.
There are no substantial relativistic effects at 0.1c; the time dilation factor is sqrt(c^2 - v^2), so about 0.995 in this case.
The form of the argument depends on the two not meshing. The Snowden leaks provide evidence of the former case. The contradiction between that and the latter case suggests that perhaps the NSA is not being completely forthright with the public about the scope and purpose of its domestic surveillance. It's not that hard of an argument to follow, and given how tight-lipped the executive branch has been so far it's a pretty persuasive one.
"But the government only has the one that it has to go by, the law"

Technically, the 'one thing' to go on is the Constitution. Any law that violates the Constitution, plainly read, is not a law at all. No citizen is obliged to abide it, no court is obliged to uphold it, and no agency is obliged to enforce it.

Obviously the world exists in far less black and white terms, but at least portions of "the law" that they are following have been deemed unconstitutional by the courts, which should cast a long shadow of suspicion on the rest of the provisions.

This is why we ought be thankful that Snowden spoke up. Too many people derive their morals from what is or isn't legal, and too many people would accept unconstitutional infringements to the constitution that makes them feel safer. To paraphrase Neil deGrasse Tyson, "I don't fault people for being willfully ignorant, as long as they know they're making a tradeoff for mental comfort - I don't want to be them, but I understand it whenever I can't fall asleep because I'm worrying about the state of things" -- what polls on this issue have shown is that far too many people just want to be governed kindly, which is either an indication of a dumb, complacent society that has lost its fierce American spirit, or is an indictment on all people unilaterally.

"A republic, if you can keep it," implied that there would be work involved. What we've shown over the past few decades is that, as a citizenry, we aren't willing to put that work in.
I can understand where you're coming from. The definitions are outdated.

With the government being able to request your confidential sources, and with the government being able to see all forms of electronic communication, my idea of a whistleblower is the following:

"Anyone who peacefully and in good faith informs the public of government or corporate wrongdoing."

You can definitely agree that Snowden did not violently do this, and we can debate whether or not he has done this in good faith, however, people should be innocent until proven guilty in a free society.

So my opinion right now is that he is a whistleblower. If the government can prove that he is a spy or is subverting the government for nefarious purposes, then the actions they're committing would be justified, but as of now, they are not in the slightest.
Terrible blogspam? They have the audio interview at the top of the post for you to listen to the actual interview.
Apparently you missed the part about not meeting payroll. There are few things worse( legally, in employment law )than missing payroll.
Set up a dev environment with MAMP and SilverStripe
I was disappointed they didn't make it easy to leverage existing Android apps. I was looking forward to using some of my favorite android apps on my TV using Ouya (Netflix, TuneIn, podcasts, etc) but since it doesn't come with the Android Market the only solution is to try side-loading (which I just haven't gotten around to trying).
Why limit your argument to one or the other? Some people will think PRISM is effective, others may not. Some people may think the privacy issues are important, others may not. But surely they balance each other out - if the NSA cannot catch any terrorists, then it doesn't matter if the privacy issues are not important, PRISM is clearly a waste of money, case over. And presumably somewhere along the line it could go the other way - if 50% of letters contain anthrax, would you not be happy sacrificing some privacy to let the NSA to screen them for you? Or a wider example, what if there was evidence that without PRISM, terrorists would be killing 1000s of Americans on a weekly basis - would we all be so against it still?
So I do this whole kickstarter thing and now my console is – well, I don’t even know where. DHL’s tracking is useless, as usual. Then there’s trouble with customs, apparently, that OUYA didn’t seem to have though about. But hey, at least I get a nice apologetic e-mail offering me zilch for compensation. So basically I am no better off than the people who waited and bought it off Amazon, except they got their consoles! This is hugely frustrating. (And not very constructive, I know, please excuse the rant.)
I combine this with the HTTPS Finder https://addons.mozilla.org/en-us/firefox/addon/https-finder/ which detects when a HTTPS version of a site exists and redirects you. It also writes a rule for HTTPS Everywhere so you don't visit the HTTP version again.
What we learned from raising on AngelList (from a small market)
Well, San Francisco is right on our Pacific Coast, no? That would seem the perfect spot to place something dumping foreign traffic en route to the U.S. before it becomes domestic (assuming the San Francisco facility is the first domestic terminus for those international fiber links).

Obviously such links could include communications by Americans going overseas. This has always been an issue with law enforcement and national security investigations, intended to be solved by "minimization". This is a concession which has not been held to be illegal or Unconstitutional, to my knowledge.

Mind, the way the NSA is using that law at 641A is something I would strike down as being prejudicial to 'reasonable expectation of privacy' overall, but then if it was up to me any "common carrier" would imply a 'reasonable expectation of privacy' by definition.

So hopefully we'll see something concrete come out of the case against the NSA (assuming Congress fails to act first). But at it stands now I think even 641A might be meeting the letter of the law, via FISA (where all the gloves are off), but not the intent or spirit of the law.
Wow, people are reading so much more into that than I intended.

I only meant that portrayals of the government, particularly on HN lately, sometimes seem to assume that it's some kind of ultimately corrupt, death-dealing junta that will put you on a blacklist for just thinking about them, or a useless bureaucratic morass. I wasn't intending to make a value judgement on anything. I probably shouldn't have used the word 'truth.'
Do investors know you have 30 days? Company is most valuable with team intact, and hopefully no negative PR. Don't let your company get publicly connected to your post, it could kill a deal. I'm referring to acqui-hire scenario
>"Deine papiere bitte" on the streets is not that far away.

Yup. It is practically here, license plate scanners, NSA metadata with location, constant surveillance. The only thing missing is automatic enforcement of the many petty crimes we commit each day (but you will be threatened with them if the gov't needs you to inform against someone, or simply wants you to plead guilty to some crime).
Checkout rss2imap[0], it grabs RSS data and feeds it directly into IMAP folders so that you can use any mail client to read.

Syncing and many different clients are available automagically.

It supports OPML import, although not for folders.

[0]: https://github.com/rcarmo/rss2imap
No Comment Yet? Anyone knows any major client using Rubinius in production?
That they can access my email from a desktop without any oversight is an example of extreme incompetence. Mandatory Access Control is something the NSA of the 1990's and early 2000's thought important enough to demand and to add to Linux (with their contribution of SELinux).
Learn Puppet with Vagrant
> So you essentially have to go off the usual grid to run your own email service... then you have to get all your contacts onboard with using it.

Running a mail server is off-grid these days? Can't you just use pgp encryption and it doesn't matter where your email is stored.