skysight-inc/HackerNews huggingface dataset:
You, sir, have mastered at least one of the two hard problems in computer science.
Quantum computing is a threat to RSA, DH, DSA, EDH, and ECDSA, but not to AES.
If this were a screensaver, I'd never get anything done.
Right, I am giving to separate reasons. The thing is, the second is a real benefit, but it's hard to convince my boss of it, because he winds up being afraid that we'll be releasing technology that our competitors could use.

The first is an unquestionable reason; it's a lot easier to get him to agree if it's a legal requirement. So even though the real reason why it benefits the company is the second, the first provides the leverage to tip the scales in favor of releasing the code. If the code were BSD licensed, we would likely never ship it upstream, because of his fear that our competitors will take advantage of it.

And there's an additional, third factor in play: if you release it under the GPL, you don't have to worry about your competitors making a proprietary fork of it, thus taking advantage of your work while keeping their own secret. So that further tips the scales. Sure, with GPL you may be required to release your modifications, but at least you know that by doing so, you won't be giving your competitors a major advantage if they then build something proprietary on it.

And finally, in many cases with GPLed licenses, you can keep your own code proprietary. Just write a separate application, rather than linking it with the GPLed components. That's how most of what my company does works; we sell a system based on Linux and many other GPLed components, but we tune it to the hardware we sell, and have our own proprietary management tools on top of it that make it integrate well into our market. This is why the LGPL or more permissive licenses are generally preferred for libraries (with very few exceptions, such as readline), which are designed to be reused regardless of the license of the application, while the GPL works so well for components like the kernel, system services, and so on.
> If they start doing that I'll generate a new set of keys every day.

Doesn't that require getting a CA to re-sign your keys every day?
I really hope IE11 will integrate WebRTC.

I have to give credit to IE10 though...a cool feature that I have only seen in safari (through quicktime), is IE10 allows multi audio track support for html5 mp4...great for multi-language videos, and adapting a single video to play on multiple devices (like some that don't support 5.1 audio).
I get two impressions: (1) the PM is a recent hire too; (2) he's a bully.

Further questions: Did the PM interview you before you were hired? Can you talk to the person(s) who interviewed you?

Based on your additional comments to @pedalpete, I would suggest talking to key people further up the chain of command and clarifying what the real, tangible expectations are. Long hours of busy work != effective work.

I fear you may have added poison to your situation by revealing your freelancing work. It would have been better to keep that confidential.
I think he actually means to communicate the opposite --- he's dismissing "startups" as he defines them, and chiding the author of the post for pursuing that model.
The anti-IE in this presentation is strong. Or rather, the anti pre-IE9. I have multiple clients that simply NEED me to support IE and be reasonably close in interaction to their modern browser counterparts. Banks are one of them. CSS3 animation with fallback is the key.
A solid box of metal is going to be a pretty effective Faraday cage regardless of what (sane^) frequency you're using. Microwaves on the other hand are specifically designed to be Faraday cages, so they're tailored specifically to the frequency they're blocking.

(How exactly they do this I'm not quite sure, given that the frequency of a phone and the frequency of phones is quite similar.)

^: Where "sane" means "not gamma waves"
This is exactly the comment I was looking for. Has anyone read both this and Hartl's tutorial? What are the strengths of this book over Hartl's?
Is your startup a real business?
Sadly, some people have found they're much more interested in the tabloid like drama of the situation than the technical/privacy implications. At least articles discussing the later are in good taste, even if some border on repetitive.
That's unfortunate but this is business, most successful people go through this many times.

Best thing to do now is man-up, spend your last dollars taking your guys out for a drink and try and leave it with relationships in tact.

Best of luck on re-entering the workforce and don't lose hope. You may find an opportunity you can get started in your spare hours without all the extra sparkly bits that brought you down this time.
I found my life to be strikingly similar
Another example: http://en.wikipedia.org/wiki/Rezwan_Ferdaus
Exactly.

Focus on the man, and not the issue. That is the "freak out".
That would be a terrible headline based on that quote. Speculative, sensationalized headlines are undesirable even if they push an agenda you support.

Makes it very easy to dismiss.
Isn't just wrapping the phone in aluminium foil (as many layers as needed to make you feel comfortable) enough to act as a faraday cage? And leaves the cellphone still portable, you can unwrap if/when needed. And then bury it in a pile of clothes in another room (as the article suggests somewhere) for the soundproofing. The refrigerator I feel serves neither of these purposes well (as mentioned in this discussion), and ruins everything when it's time to make a sandwich.
I have seen fairly similar things, but have not worked in a start-up of nearly that size.

I also tend to see more demands made of younger, unmarried developers than older ones (not that the young guys are paid more! — probably the opposite is true), which is shitty and obviously not very fair.
Seriously who's using IE nowadays?
http://news.netcraft.com/archives/2013/06/25/ssl-intercepted...
Hopefully MS collaborates with other browser vendors in accommodating asm.js-optimized code, too.
My initial reaction was that the phones-in-the-fridge rule was meant to muffle sounds. Can anyone comment on whether or not a phone in a fridge can pick up sounds from the room the fridge is in?
I think the team should understand you and stand-up with you. Accepting a job in startup means be ready for an adventure where things like this could happen. Talk to them and look for a key feature or PIVOT
wasn't this kind of assumed? to go this far and not cover all bases would be incredibly stupid and he doesn't strike me as such.
The world seed is the string in the text input.
NSA Deletes Surveillance 'Fact' Sheet
as is, they can rest on top of your glasses, but it looks weird. Companies are looking into making prescription lenses to fit on to the frame. There will likely be options when/if it becomes a consumer product
Usually I groan when people complain about the Malware features in Chrome in relation to privacy but this is definitely one I'd not heard of. The hash of the whole file is bad enough, but even if it were unique, the full URL could easily contain sensitive information or information about the file contents.
I wonder if Senator Wyden or others like him have noticed the irony of learning first-hand how frustrating it is to deal with an entrenched bureaucracy that puts up obstacles to protect itself from outside interference, even when it is working against the well-being of the people it is supposed to be working FOR.

Some might be excused for thinking I was describing the Congress...
I watched this shit for like 30 minutes
That's not even entirely relevant. Others have pointed to the example of J. Edgar Hoover, which is highly relevant. Imagine not a figurehead, or an evil president, imagine merely an ambitious civil functionary who abuses and misuses his secret powers outside of any oversight.
This is definitely the only reason I think he is still alive. The NSA has probably done forensic analysis on the workstation that he utilized to transfer the intel...and as Snowden has noted, he does not want to be careless with the information or it's distribution in contrast to Manning.

To make it simple, I think he released to the public the appetizer, and has withheld any main course or desert (sorry for the analogies...lunch time).
This is the article questioning whether Snowden was ever on the HK->Russia flight: http://www.guardian.co.uk/world/2013/jun/24/edward-snowden-r...
Slightly tangential story. My first assignment on my first job was building a knockoff TEMPEST enclosure (http://www.jammed.com/~jwa/tempest.html) to isolate spectrum measurement equipment. The original use of the enclosures was (somewhat ironically given the article) the NSA's paranoia that foreign intelligence would spy on government computers by picking up their EM radiation.

So if you're worried about the government spying on your computers via RF and want something more convenient than a fridge, drop me a line...
Verizon uses an 700MHZ and 1700/2100MHZ signal on their 4G network which will give you incredible penetration. People brag about how you can be in a basement of an office building (lots more concrete and steel than a refrigerator) and still get great reception.

http://en.wikipedia.org/wiki/Verizon_Wireless#Radio_Frequenc...

If they were using a carrier in Hong Kong, most of the carriers use a higher spectrum, usually around the 1800-2100MHZ range. While it doesn't give you great penetration in buildings like the lower frequencies Verizon use, I'm guessing the overall density of the towers is significant which would help this issue.

If he said they want into the basement of a building THEN put the phones in the refrigerator, it would be a little more believable. Just putting it in the refrigerator probably won't do a lot to block the signal.
Speculative, sensationalized headlines are undesirable

Oh, I agree completely! Unfortunately, copywriters for almost every popular newspaper in the world do this by rote.

I added a question mark. :)
I hope Glenn has also thought about what should happen if he has a sudden car accident.
I've also noticed that people who don't like wine tend to gravitate towards white wines.

Why are they drinking wine if they don't like wine? What's the context for that?
The question then becomes how you're going to establish an AES key across a public channel without using quantum-vulnerable algorithms.
Hazr.me - Disposable email forwarding
I am pretty sure that if someone wanted to they could easily construct a faraday cage, instead of using a fridge!

http://www.disaster-survival-resources.com/faraday-cage.html

By the way, it's also useful against solar flares...
How fast can we make interpreted Python?
Lift-off for Google-backed O3b satellite network
Agreed and I think the move to travel through China and Russia had to have been part of his plans at the start as this just drags all of the International parties into the fray whether they want to keep it quiet or not. It also then behooves everyone to keep him safe so they don't get escalate the finger pointing game on who might have had him killed.

I'd personally like to see less focus on the guy and more on the message though.
They should have used it on their own google reader.
jwz hates web interfaces, wants an app.

No web version was a dealbreaker for me (until they fixed it).
http://www.cnn.com/2013/06/19/tech/web/feedly-google-reader

I don't want an app of your website. I don't want to give you permission to access every I/O and stored file on my phone. I don't want to help you track me as I drive around town, not using your app, because you're curious why I'm not using it more often. I don't want your program to break if I have to use another machine or borrow a device from a friend (not that you ever should). I don't want your program to break if some company invents a better way to do computing than anything we've ever seen before, but your developers didn't anticipate the architecture, so they won't have an app out the door until that thing is killed off by the next wave. I don't want your program to break because my devices are different than the name brand most people use. I don't want to feed the illusion that a launcher in front of a webapp somehow makes it different, as if it's 1999 and applications are fast and stuff on the internet is slow.

Mostly, I don't want your fucking app:
http://idontwantyourfuckingapp.tumblr.com/
Thank you for posting this. I haven't been here all that long, and it has (honestly) been scaring me how extreme and often simplistic the political views of the intelligent and relatively (or quite) powerful people here seem to be.
Assuming you are US based and raised angel round at $5mil post money valuation. First employee (talented or experienced or super smart) for marketing will get a salary of $110K average in the market for Director of Marketing role. So, you will have to make sure that

X + Y/4 = $100-$125K/per annum and some more equity for being an early employee

where X is a fixed salary and Y is equity with 4 years vesting and 1 year cliff. If you pay him 80K salary, give him around 2-4% equity. And may be 1% equity as options for staying more than 2 years in company.
Shaming link 1: http://arstechnica.com/information-technology/2011/06/micros...

Shaming link 2: http://www.extremetech.com/computing/87696-webgl-is-fundamen...
Yeah but "can't hear you" is not the same as "sophisticated signal processing techniques will be thwarted;" putting the phone in another room might not be good enough. Leaving the phones in the car might work, though I suspected that the risk of the phones being removed from the car while everyone is inside would be pretty high in Hong Kong.

All in all, I think the fridge's insulation probably acts as a good sound barrier, and the hum from the compressor probably adds quite a bit of noise. Probably a smart thing for someone in Snowden's position to demand.
I think the PM's been here for about a year or so. Which actually seems to be quite long in the context of this company.

Yes, the PM was one of the 4 interviewers who interviewed me. HR lady, PM, tech lead (of the company), and tech lead of the product.

I can't say I'm being completely objective as I am part of this situation, but he definitely did not come across with these expectations during the interview. You could say things were pretty "rosy" in the interview (well, if something seemed wrong I probably wouldn't take the offer anyways).

Thing is, this company doesn't really have a chain of command in the sense that management/executive level people don't really talk to or bother with the going-ons of the team (I guess it feels quite "big corp" in that sense). My understanding is that in our product team of 5 (1 copywriter, 1 PM, 2 devs, 1 designer/UX), the PM is pretty much management/HR.

I just remembered something else when you mentioned the PM is probably a new hire too. For whatever reason, when I got on this team, I found out that there were 2 previous devs (different timeline, they didn't work together), before me. Basically Dev-A stayed for ~5 months or so, then Dev-B came on and left after ~3 months, then Dev-C (current tech lead for our product) came. From my understanding, they all had a 1 month-ish overlap where they had 2 devs for knowledge transfer, but it's been the first time this team has had 2 devs officially. I felt a bit iffy hearing about that (it came up in some documents I read when I started, but any questions about their involvement were always avoided)...
And a freezer acts as a surefire way to not catch some conversation, if you end up walking around the apartment or into the room where the cell phone was tucked away.

Had visitors not brought cell phones in the first place, it wouldn't be an issue.
I wonder to what degree Wikileaks held Snowden's hand through all of this? For those who remember, Assange's organization distributed a large encrypted archive through bittorrent around the diplomatic cable leaks, presumably with a dead-man's switch [1] set up to reveal the key. I'm sure that Snowden had some procedures in place before departing to Hong Kong, but I also recall Assange saying they were trying to reach out to Snowden a week or two ago, and perhaps (hopefully!) they were able to give him some insurance tips, including potential pitfalls that Snowden may not have thought of.

[1] http://en.wikipedia.org/wiki/Dead_man's_switch
Top Gun pilots can withstand 9G for quite a few seconds without a G-suit IIRC from documentaries on the topic.
if you're feeling like a profiteer why don't you just start selling a faraday cage phone case
memorable quote from http://john.jubjubs.net/2011/09/15/mike-shaver-thanks/

"And [Mozilla's Mike Shaver] affected my framing of the problem deeply – I remember one day a couple of years back when we were talking about some market share point, thinking about how incredibly, insanely competitive the browser technology landscape was – and he said to me: “Look, this is the world we wanted. And this is the world we made.” Wow. Exactly right. He taught me so much about how enormous an impact a group of dedicated people can make."
Aluminium foil does shit all, I've tried it before trying test a signal loss case where I work.

It can be kind of tricky to do this stuff actually, the martini shaker one is actually something I'll be using.
Yeah, that's not going to work as a Faraday Cage. I guess you'd have to put the cellphone in the microwave, then put the microwave in the refrigerator. That's going to look weird. :)

I used to do a bunch of micro-sites -- small websites targeted around specific topics. One I did a few years back was http://gps-cell-phone-tracking.net/

I really learned a lot setting that site up, and it was one of the reasons I became such a privacy freak. Our cell phones are basically tracking devices the government monitors which we happily adorn to our bodies each day. Weird.

To get to my point, one of the questions on the site was whether your phone could be tracked, either location or having the audio monitored, without your knowing it. Location is easy -- yes. Audio was a bit weirder. Obviously you'd have to install an app, and who would want to do that?

Then I learned that cell providers will "help" governments by putting tracking code inside the auto-update of the phone. They can even push it at night and have it install without your having any knowledge at all.

As far as I know, pulling the battery still kills things, but then somebody said most phones have a dual battery to keep the memory refreshed. Somebody even said something about the possibility of "illuminating" phones from a distance and picking up audio that way. Of course, "somebody said" doesn't count for much, and with all the secrecy in place good luck figuring out what is what.

Fun stuff. Since the micro-site business didn't take off, maybe there's a future in selling tin-foil hats?
Yes, the cloudflare advice does break chrome PFS. With the defaults, chrome shows:

CAMELLIA_256_CBC, with SHA1 for message
authentication and DHE_RSA as the
key exchange mechanism.

By changing to the suggestion in the comments, the encryption downgrades to:

The connection is encrypted using RC4_128,
with SHA1 for message authentication and
RSA as the key exchange mechanism.
Should those stories receive more commentary, be posted more often, than those focussing on the content of the leaks?
People get excited about things like this and say things like "this is REAL investigative journalism". Or "I wish mainstream journalists would start doing this".

Look, I read documents like this all day long. So do investigative journalists. It's just that very few people care about the stuff we find until it turns into an international spy thriller.

Just because you don't care about it on the state/local level doesn't mean we don't put in the work.

Edit: You can look at some of the great investigative journalism you're probably not paying attention to here: http://www.ire.org/blog/extra-extra/
Phone won't work inside the case?
Is that even true now that IE11 keeps itself auto-updated to the latest major version?
Presumably, you swap RSA for a code-based cryptosystem; the TLS structure itself could probably remain intact.
If you want something NSA scale, you can do better than that. I used to use Copper-Beryllium mesh and gaskets (http://www.sealingdevices.com/metal-emi-gaskets-and-becu-ber...). Choose mesh size based on the frequencies you expect to deal with (and harmonics).

If you want to keep your computer in there you also have to be careful designing the ports for wires coming in/out.
I'm not sure what your point is, is someone saying that you're lazy?
What are we supposed to take away from those links? The latter isn't even written from the perspective of Microsoft, it's just another generic {Open/Web}GL rant (if anything, you've granted MS legitimacy here by acknowledging other legitimate complaints about the spec).

Yes, I was annoyed when they boldly claimed they wouldn't be supporting it at all. I'm also gracious enough to say "Thanks" when handed a gift. The IE team is clearly making an effort.
> only sends in a small part of the URL's hash for matching ...

Isn't it incredibly easy to bypass that check by using a randomly generated url segment?

[Edit: Formatting + isn't]
Yeah, it's amazing how oblivious the author of the article is. Some people just don't get other people.
The effects of DBS on the motor symptoms of Parkinson’s Disease
Again, it's not about semantics. Replace small business with whatever term you want. The point is that the blog writer built a certain type of business then tried to take it onto a different track that put pressure on faster growth and got in over his/her head.
exactly. the slogan is "It's a phone when you want it, not a bug when you don't!"
AES is not unbreakable, just very hard to break. Schneier in 2009: http://www.schneier.com/blog/archives/2009/07/another_new_ae...
They should be using plagiarism-detection software to strain out the boilerplate commonalities and focus on the differences (as well as a single copy of the commonalities).
Just for the uninformed that may not know what your referencing.

http://www.theblaze.com/stories/2013/06/21/email-sent-by-mic...
He's not even trying to play the same game as them. Sam Altman 's ideal looks a great deal more like Elon Musk, Steve Jobs or Bill Gates than Djikstra. Would you consider Bill Gates fit to tie a Fields Medalist's shoelaces?
The real money is probably in building faraday rooms.
So all anyone that wants access to the whole of what he has recovered needs to do is kill him and then it will all be released? That doesn't seem like a good position to put ones self in.
Yep, I took a pay cut joining this place because I was really excited about the product -- probably another terrible idea.
Might be why Google is upgrading all SSL certs to 2048 bit

http://googleonlinesecurity.blogspot.com.au/2013/05/changes-...
Now I feel almost obliged to mention having read EmberJS docs while on the crapper. Thanks.
Yeah, I actually just noticed that cloudflare was using nginx so the qualys scan was not indicative of the cloudflare apache setup. I apologize I got distracted watching those genetic cars.
Very true.

Talking to your co-founder "sometime this week" and your employee because if you don't fire him you "fucking won't make payroll" for all of two paychecks should really have been the first moves.

But then, this doesn't sound like someone who cares about much else other than deflecting failure onto his investors and co-founder.

No need to be defensive about it if it did not work out, just go talk to your people.