skysight-inc/HackerNews huggingface dataset:
Except HN blocks that I guess...

At least I try to always make good submissions, and usually HN only let me submit twice every month...
Exposing US surveillance of US citizens is clearly whistleblowing and a good thing. Taking government laptops with NSA information, telling the Chinese what sites of theirs the NSA hacked, and then releasing information about NSA listening in on others (outside of the US) goes well into the realm of breaking the law and should have consequences. Of course, taking a tour of our adversaries doesn't help his cause much...

Also, I find it hard to swallow those who are up in arms about NSA spying on non-US citizens... seriously??? What do they think the NSA was formed to do??? That should not be a surprise...

I do worry that Wikileaks is pretty much hijacking his agenda and substituting their own...
Websters does not use this exact definition, being a more compact format than wikipedia, but if you look under the examples in Websters you will see "Many chose to live as exiles rather than face persecution." http://www.merriam-webster.com/dictionary/exile
You can request to have the account deleted. More info here: https://www.facebook.com/help/224562897555674
The behaviour of the bots, after 4 years, is fascinating!
Because of the nature of Heroku (and thus EC2) there will always be unknown and random latency associated with shared nodes and hidden network utilization.

What's important is that you did all the tests on heroku and gave enough of a window to subject all tests to the random latency.

This allows users to say "if I'm going to be deploying on Heroku, these measurements are valid." If they deploy anywhere else, those variances will be different and change the equation (though it's unlikely they'd completely flip the results).

Thanks a ton for the great analysis!
Even better than fidgeting is surely getting up and moving around.
Just fixed the stretch issue.
Because that would allow larger, regulated funds (like pensions and university endowments) to invest in them, as they're generally restricted to securities listed on credible exchanges.

Good news for bitcoin owners, as that means more potential buyers and thus a higher price.

I am a bit worried though, about workers who may lose out because a manager got too caught up in the hype.
Investing in bitcoins by buying bitcoins means choosing an exchange, funding an account, holding the bitcoins, worrying about the security of the bitcoins being held by whatever exchange you've chosen or the security of whatever computer you're holding them on...

Investing in a bitcoin ETF means clicking a buy button in your online brokerage account. You invest with minimal effort and minimal risk aside from your investment losing value. Someone else -- a regulatory system and set of agents acting on your behalf -- takes on all the responsibility for enacting and securing your investment.
ReAlly interesting site that I have spent some time on. I am not sure all back testing data accounts for survivorship data. Neat site though
Buying shares on a publicly traded and regulated market (like NYSE), through your usual stock broker, would be a lot safer and more convenient for many investors than the current options available for investing into bitcoin. You don't have to worry about the unreliable exchanges, and semi-shady payment processors like Dwolla.
Because that auto technology is not meant for users. It's meant for them to get a more accurate and up-to-date street view for Maps. Android is an extremely user-facing technology, and furthers their efforts to control as much of the mobile ecosystem as possible.

Buying Motorola to support their growth in mobile makes sense. Buying a car company to support a side project doesn't make any sense.
To the UN document (which has dubious jurisdiction, but I'll play along):

"Everyone has the right to seek and to enjoy in other countries asylum from persecution"

Which is followed by:

"This right may not be invoked in the case of prosecutions genuinely arising from non-political crimes or from acts contrary to the purposes and principles of the United Nations"

Which negates your point, because of this:

http://msnbcmedia.msn.com/i/MSNBC/Sections/NEWS/A_U.S.%20new...

I don't understand what your point is about the nature of heroism.
It makes betting against these items easier.
Oh yeah, that is true, but the point is to learn how to do it by hand so you can do more than just bring up a php app (like develop django or rails or anything else).
We had buses to do exactly that. The "sports bus" departed at 6 p.m. every day; there weren't a lot of the buses, because not everyone did afterschool activities, but everyone who needed a ride got on the appropriate bus (east or west, as I recall) which dropped them to their home. It was free, too.

This was a rural school district, about 60 students in my class, and the district extended something like 20 miles in each direction from the town.
There is little doubt he is winning the war of public opinion at this point - certainly overseas, and possibly back at home.
> Let's say you change your business hours (and as a potential customer, I do love Google's display of today's business hours) or phone number, how quickly does Google update all that? Probably very quickly, but it's now out of your hands.

On the contrary, its completely in your hands: http://www.google.com/business/placesforbusiness/

The point of contention is that its a Google controlled affair instead of going through an external standard.
Since it was a letter to Ecuador, it may have been poorly translated into English for posting.
Glass Tesla
> Is that a legal obligation for all nations to _grant_ asylum to seekers, regardless of circumstances?

No, it's a legal obligation to not infringe on the right of people to seek and enjoy asylum. Of course, it's the UN, so it's debatable how much of a "legal obligation" any of it is, especially for the USA.
I don't know if it's what Troy was implying, but JSON as a cookie payload along with the seemingly ubiquitous "parsing JSON using YAML and the YAML parser executing it as arbitrary code" vulnerability seems like it'd at least be worth attempting to attack there.

(Probably not what Troy was thinking, since that'd result in server-side SQLi or arbitrary code execution problems, not client-side ones like XSS. Also, I thnik Troy is more a .Net/asp kind of guy, not a Ruby-ist - which might make that YAML parser issue in Ruby/Rails not something he's concerned about)
Those details (that I mentioned) were fully disclosed before they changed their policies, obviously.

It's not Microsoft's fault that reddit blew up in a circle-jerk of misinformation. Granted, they could have marketed it better and made that story clearer.
I stopped using FB over a year ago, and I deleted my account there last December.

Once you delete your FB account your profile remains visible for another two weeks, provided you don't login during the interim.

Today I can happily say that I am no longer on the publicly-available Facebook site, but who knows if FB maintains an LEO version of the site for use by the fascists (spies) and other government entities...
People are downvoting history now?
Not a bad idea in general, but Wikileaks is resource constrained (remember, they are being actively investigated by the FBI/DoD and have a banking blockade going against them), and it's not unreasonable for them to focus (at least right now) on the jurisdiction primarily responsible for what happens to Gmail, Android, Cisco IOS, Apple iOS, Facebook, and AWS.
I've seen your opinion before. And you appear to lack the ability to give his situation enough brain power to develop a realistic reply. But feel free to continue to blather on like you understand what's happening. Maybe we'll get a laugh out of it on HN.
I don't think it reads like a plea for public support, if it was intended as such then it isn't worded well. It reads like a bunch of other wikileaks press releases that are generally political statements about the importance of transparency. The problem is that if he wants public sympathy he needs to avoid coming across as having political motives and if he does want to make accusations then he must consider the possibility that they will backfire and cost him public support.

A 'counterbalance' can often instead be a distraction which is what I fear happened here.
Opera Next 15 - using webkit-based engine blink
Take this with a grain of salt since I can't find the source, but I vividly remember a designer wanting to use a H&FJ typeface (Gotham) on a project I was working on about a year and a half ago, only to have the H&FJ FAQ state that they don't allow web embedding and aren't developing it for what amounted to aesthetic reasons (i.e., web font technology was not far enough along for them to feel comfortable with the display of their type on screen.)

Now, instead, they're using the same technology as just about everyone else, under their own service, and just rehinted their typefaces to match the tech.
Exactly. Does Snowden honestly expect to not be charged with a crime that he has admitted to, even if he disagrees with the morality of the crime?
GLASSTESLA Lets Google Glass Owners Control Their Teslas
Any thoughts on doing the same thing with Sinatra and/or Padrino? Also do you think rails 4 will make any improvements?

~20 reqs per second with barely any concurrency seems so low. Is heroku, ruby or rails the culprit for such low throughput?
You guess. Good contribution there.
YOU can't downvote because you don't have enough "karma"

and i'm getting downvoted alright, and without any attempt at fulling my request, no less
Sure. Do you personally read through every line of source? Maybe you trust the repository managers to do so, and limit yourself to only very-popular projects - do you completely trust the trust-chain that lets them submit new code? Maybe you do - remember when RubyGems.org was hacked? Or when [many sites] lost their private crypto keys? What's to stop the same thing from happening, and pushing a critical update with an exploit? Maybe you reduce the frequency you check for updates to mitigate this kind of vulnerability - oops, now you're more vulnerable to new exploits.

If you're not watching every step, every time, you're gambling the same way you're gambling with malicious code in a browser (though I'll admit it's lower frequency). Your privacy/security is in the hands of whoever is part of the chain you trust, and their security practices, completely aside from new exploits that could affect you directly. Open Source, binary, it's all the same in the end unless you're perfect in your observational skills. Sandboxing limits that trust. I'll even grant that it's technically possible to do the same thing with processes in Unix, which you could be doing - but it's hard, error-prone, and essentially nobody does it except the stragglers who haven't switched to virtualization (which is essentially sandboxing).

You're being paranoid. With perfectly justifiable reasons - everything you listed is possible, plausible, and related things have actually happened. But you're not applying the paranoia evenly.
Show HN: Dateikit - easy file sharing via SCP
If they "know" en_US and en_GB, then assuming the statement is not actually Snowden's but rather was written by a Brit, why did that Brit get it wrong? If making a mistake while falsifying a statement from Snowden is plausible, then why isn't making a mistake while editing or transcribing plausible?

I think you need to loosen your tinfoil.
This submission deserves more attention that it is getting!
Summer fun: Android 4.3 leaks, Google gadget rumors
Yes, that absolutely means you're exiled. I'm not sure what the controversy is here.
It's a fund that invests in Bitcoins that trades like a stock on the stock exchange. If I'm reading this correctly, one share will represent 0.2 Bitcoin.

A normal, unleveraged, passive ETF represents an underlying investment or basket of investments, like gold or the S&P 500, or in this case, Bitcoin.

At any point, people can go to the sponsor and exchange the underlying for the ETF. So if the price gets out of whack with the underlying, people step in and buy one and sell the other, to bring prices back in line.

So it has a lot of the benefits of publicly traded stock, easy/cheap to trade, put in your brokerage account etc.

It does add a layer of fees (not specified yet as far as I see in prospectus on p. 40). You can just buy Bitcoin yourself, you avoid the fees, but investment advisors, retirees, may find it worth the usually small fee (like 0.1% for the SPY, probably not quite that low for this ETF).

ETFs, used properly, are great - liquidity, tax efficiency, ultra low cost.

However, as Gandhi said, "The greater the institution, the greater the chances of abuse."

The problem here is, if the underlying Bitcoins are illiquid, in a volatile market, the price of the ETF can diverge a lot from the price of the underlying.

Basically, unless you know what you're doing

- Stick with big sponsors, like Vanguard, iShares, State Street (SPDRs)

- Index ETFs only (not actively managed)

- No leveraged ETFs

- Liquid underlying securities, actively traded ETFs (e.g., probably doesn't apply to this ETF)
Ha, even people here can't see the value in decentralization and peer-to-peer connection. Startups think "we'll just get enough users on our proprietary network; ???; profit!" and big companies want the lockin.

Hangouts does everything I need and it does it exceedingly well, but I hate using it knowing how locked in I am.
I'm surprised they didn't call it VAMP
That's the thing that's so jarring about the U.S policy. Their private ideology, or whatever guides their actions, is quite obviously contradictory to their publicly espoused beliefs. The Russian and Chinese government are at least pretty direct about their ideology and intentions.
Germany might not be the best choice:

https://en.wikipedia.org/wiki/Khalid_El-Masri
We know he has been in Moscow for a long time! There isn't anything new here at all. As others have pointed out the statement used British phrases instead of american ones so it appears this was drafted by wikileaks instead of snowden, which isn't very reassuring.
"How would I implement an offline navigation? (which is currently really not possible in JavaScript)" - wow, just wow. Beyond the fact that this is just plain wrong - there are packaged apps that ship all assets on install, as well as great offline JS libraries - you do realize these things (offline, telephony, etc) are _APIs_ right? No _language_ Just Does™ offline or telephony - for instance, C++ is not somehow magically self-aware of internet connectivity, it's simply a language used by developers to code against device hardware/firmware which then provides _APIs_ for these capabilities.

JavaScript is no less capable of supporting these APIs, look at Node.js for instance, it has most of the server _APIs_ you find in other server implementations that use different languages as a base (and the Firefox platform has many of them already, with many more to on the way!)
> Would you consider someone who murdered several children and then fled the country to be in exile?

Yes, absolutely. Are there any English speakers who wouldn't?
IRC is not a IM network, Cryptocat I dunno (I don't use it, I have only a vague idea of what it is)
And this is the problem of being too willing and too brutal when making examples of transgressors.
Because the US is not a monolith.
They revoked his passport because they needed time to negotiate with other countries to refuse him the right to asylum.

And this isn't about just being questioned. If he is extradited back to the US, expect a lot worse to happen to him...

What he has done is no doubt illegal, but it also strikes me as a positive thing. I disagree with people that say he is a fugitive from justice - I think it's very clear that he is a fugitive from injustice. He has shown us injustices from the US government - and now they wish to have him stand trial in order that they can lock him up for life, sentence him to death or torture him.

Is there a difference between Snowden and other criminals? Yes, Snowden has done the right thing.
Simple way to detect intruders on your wireless network
Bebo is buying back whatever is left of its userbase? I don't understand why the founder doesn't just stick the $1MM into seeding and promoting his new social project vs. attempting to resuscitate what is there.
>If a college grad wants to learn new skills, will he/she: 1) reload the whole stack (Server, SQL, etc) every few months or 2) not be bothered with stupid notices and just learn Linux, OSS."

Or...

3) Spin the stuff up on EC2 as needed and likely spend less than the TechNet sub + power.

While I'm sure there are exceptions, my anecdotal experience says the typical TechNet subscriber wasn't in it to "learn new skills" they were directly or indirectly selling keys. This is surely why MS went through several rounds of reducing key allowances prior to this.
The real legal status of Snowden's airport transit area?
Article 14 - Universal Declaration of Human Rights

Everyone has the right to seek and to enjoy in other countries asylum from persecution.

This right may not be invoked in the case of prosecutions genuinely arising from non-political crimes or from acts contrary to the purposes and principles of the United Nations.

http://www.ichrp.org/en/article_14_udhr
Wasn't roman Polanski living in exile in France after being wanted for sex with a minor?
True that car insurance ads deliver little or no value - as in the end you always end up at one of the major carriers - and the price is no lower than if you had gone to them directly. The restaurant example assumes that you can continue to fool your customers with overpriced wine and low quality food. If you could stay in business long enough with that strategy you don't really need to run PPC ads! But these two examples completely distort the way Google's Ads are used by the vast majority of businesses - to whom they can and do deliver real customers and value. This includes the vast majority of cases - the long tail of search traffic that converts well for niche products and services that have little or no other way to directly market or get customers. When used correctly, Google Adwords is a godsend for such businesses. This could be a maker of high-end custom furniture cabinets in a little town in the middle of nowhere, or a small software company in a small town in India that has produced a killer app to learn Yoga, or a software developer in New Zealand, that has developed the perfect SaaS app for monitoring your server, and so on. These are the businesses that Google empowers - by giving them access to a potential worldwide market for their products.
Serious question: how has the US been "extrajudicial"?

Isn't it common to revoke a passport of someone you want to try of a crime and have extradited?

Does one expect the government to assist in your asylum attempts?

I don't believe one has the right to not be charged with a crime, especially one you have admitted to.
Scraping/doing it semantically has copyright implications (Re: Europe) so realistically the Google-owned approach is the most viable one.
...and is a fugitive from justice.

Only in the narrowest, most legalistic sense of the term. In terms of what is just however, I think there's a lot of room for debate.
>In addition, the reason it's hard to express structured data and nonuniform computation is because those aren't things GPU architecture excels at.

If you write simple GPU kernels (like those that Theano/Thrust/Copperhead/NumbaPro let you easily express) then you're mostly stuck "doing uniform operations over large chunks of memory". However, the latest GPUs are packed with features for going beyond this simple model. There's a rich set of global atomic operations, a fast register shuffle, better caching and most importantly: dynamic parallelism via nested kernel invocations. We're not programming for the G80 any more, Keplers can run a much larger swath of programs. Sure, you won't reach the theoretical peak FLOPS by traversing irregular structures via recursive kernels but you might still beat the pants off a CPU.
But a firewall I can open. heck most consumer routers came preinstalled with holes on the firewall/NAT for FTP,IRC,MSN and a bunch of long dead protocols that required the server to connect to the client...

with ipv4+nat often I can't allow a connection because i don't have the IP visible. i'd have to have the server to add my internal IP (which will surely conflict) to their routing table passing trhu my external IP on the router.

This is the problem ipv6 solves.
There's a lot of misinformation in this thread, so I'm going to describe best practice for this sort of thing.

1. The client authenticates, and asks to be remembered.
2. The server generates a cryptographically random token of at least 128 bits in length. This token is *never* directly stored server-side.
3. The hash (or, possibly, a slow-hash) of the token is saved in the database along with a time of expiry
4. The non-hashed token is sent to the client as a cookie completely independent of the session cookie

When the client visits the website:

1. The server checks for the presence of the remember-me cookie
2. If the cookie is set, it is hashed and this hash is searched for in the database (and filtered to tokens with expiry times after now)
3. If the user is successfully logged in, the old token is deleted from the database. A new token is generated and sent to the client by the previously-described process

Now for a little bit of explanation.

This process completely isolates the authentication token from the session. If a token is somehow intercepted or discovered by an attacker, it is only usable for a single session. Such tokens should never be allowed to serve as permanent entry points into a user's account.

The token is never directly stored server-side. This confers two benefits. First, these tokens should be considered password-equivalent — if someone manages to steal your table of remember-me tokens, they would be completely unable to use them to log into a user's account. Second, this prevents timing attacks; if you simply looked for matching tokens in your database, an attacker can (shockingly simply) use timing information to guess a user's remember-me token in O(n) time.
100% believe you because this was one of the concerns my friend had about sharing her work. Only management didn't go the firing route. They ended up giving the employees even more work because of their newly found free time.
Role model.

http://imgur.com/AfcF56q
I'm not taking sides here but Snowden is wrong on the facts about passport revocation. It is perfectly within the established law to revoke the passports of fugitives with federal arrest warrants. It doesn't make you a "stateless person" or "exile" you -- you're still welcome to return voluntarily.

The relevant U.S. law is 22 CFR 51.70 and 51.72 http://www.gpo.gov/fdsys/pkg/CFR-1999-title22-vol1/xml/CFR-1...

He does have a point that restricting travel does make it harder for you to seek asylum. But that's nothing new.
Bitmaker Labs Programming College Shut Down After Global And Mail Article
I'd argue the intersection of these sets is a lot higher than you'd expect in the Valley. Mr. Katta may be looking to attract the attention of these people, which are often influential investors or otherwise well connected.
For me, it's the opposite. I've been using the FF lineage since it was Netscape. I've been trying to switch to Chrome lately, but Chrome keeps doing things that annoy me. I don't open FF on the same pages to see if FF has the same problems, but FF just feels comfortable.
Role model