skysight-inc/HackerNews huggingface dataset:
Android ‘Master Key’ Security Hole Puts 99% Of Devices At Risk Of Exploitation
Its not inherently one, but it seems to be used that way by some people heavily invested (mentally or financially) in the VC-funded startup world.
Website Reading - It Does Happen
Would it pass a Matasano audit? ;)
It will cost you about $80 ($70 + taxes and fees) for an individual plan.

Your mileage may vary though. It is pretty good in cities. Do you travel out in the middle of nowhere much? T-Mobile might not be the best for you. When I think of satellite phones, I imagine being in a situation that would require me to call for rescue.
Do Ride-Sharing Apps Complement Or Undercut Public Transit?
If he had said, "I want a drone to take out a school in Pakistan", he'd have gotten recruiting calls from the military.
Being french, I am quite certain that this is a lesser news to french people than PRISM was to americans.

Read the comments (if you can read french), and you'll notice that the reactions are all a sarcastic combination of "not surprised at all" and "that darn government probably didn't even get this right".

To sum up the differences:

- PRISM was legal. That said, in France, legal coherency is a joke. Laws conflict with each other, and even when voted, they may not be applied.

- There is an implied contract in the US that the government won't spy on citizens. Nobody believes that in France.

- As a result of the above, the people behind this "revelation" won't even be sued.

- French people tend to use services from abroad (mostly american, sweden and german), so the government doesn't have much leverage to get information from companies. I doubt they broke TLS. They do have a huge understanding with ISPs, however. Incidentally, ISPs are severely distrusted by their users.

All in all, our democracy is even worse than yours. Yes, that is possible.
American Fascism
McDonald's, Subway and the others are not vending machines. You can ask them to hold the sauce. I order my sandwiches with no mayo. Healthy options are there.
This is a terrible idea.

Malinvestment starts the same every, single, time. Over extending credit to unworthy investments. Usually this is done through the government because their primary objective is not to make money, but to appease voters. Sometimes this is done by financial institutions that offload the risk to someone else and make their profit on fees, or commissions (but never negative commissions).

Here is why this is a bad idea: There are no price signals to the potential students to help guide them to the correct career choice. In Ontario the things you can get bank loans for are the following: STEM, Medical fields, Economics, Accounting (both of which are kinda STEM-y).

The government interferes here, by paying the first 75% of the cost and by creating loans for the poor and almost middle class, but at the very least a good number of us have to work some amount to pay for degrees that don't pay for themselves.

Another reason it is a bad idea: It means that universities no longer have to compete on price, they compete on marketing.

As an aside: There is this general trend that I've noticed. The baby boomers load up the country or state with debt or equivalent (like defined benefits, or entitlements) but because the state can no longer handle increased debt loads they do not afford the same ponzi scheme to Gen-[x-z]. They load us up with 3% for 24 years on your income on top of the debt that we're going to have to pay for. Also, how the hell does the majority of the western world go into debt during a period where the largest bubble of the population is at their peak earning potential? This is crazy, we couldn't afford largesses then, and we certainly won't be able to when they retire, and we also have to service the debt, and we also have to deal with longer lifespans, and we also have to deal with 3% on our malinvested education subsidies.

What's going to compel this generation to stay saddled with this debt? If we don't vote it (or spending on seniors) out we'll just move out of the country. Have Macbook, will travel.
Yup. Menlo is awesome.
Rolling your own crypto is incredibly perilous. Now, the Cryptocat team could discard their own code, compile GnuPG with emscripten [1] and adopt the existing UI/UX to using that but who's to say GnuPG is still going to work correctly on that new platform?

The only "easy" (if insane) solution I can think of for building GPG on a known platform and still having it run in the browser is to use something like JSLinux [2] and run GnuPG inside a hidden VM communicating with it over an emulated serial interface. Then again, I'm sure that could introduce all sorts of interesting issues related to timing and randomness.

Cryptography is damn hard.

Edit: I'm aware that they've used CryptoJS but, much like calling OpenSSL directly, I would still count that as "rolling your own".

[1] See, e.g., http://manuels.github.io/unix-toolbox.js-gnupg/.

[2] http://bellard.org/jslinux/
I am a very loud person, and am not always aware of how loud. I'm sure that I have said such a thing in a situation, probably in a busy street at one point, where many people have heard me.

If you heard someone saying something in a joking manner to their friend in public, however many people hear, you might think they were dumb for being so loud, but not so much that they deserved any more punishment than being told to quieten down/move along.
The JsDoc for the function where

var cnonce = MD5.hexdigest(""
+ (Cryptocat.random() * 1234567890));

occurs is

/** PrivateFunction: _sasl_challenge1_cb
* _Private_ handler for DIGEST-MD5 SASL authentication.
*
* Parameters:
* (XMLElement) elem - The challenge stanza.
*
* Returns:
* false to remove the handler.
*/

which is only called by

/** PrivateFunction: _connect_cb
* _Private_ handler for initial connection request.
*
* This handler is used to process the initial connection request
* response from the BOSH server. It is used to set up authentication
* handlers and start the authentication process.
*
* SASL authentication will be attempted if available, otherwise
* the code will fall back to legacy authentication.
*
* Parameters:
* (Strophe.Request) req - The current request.
*/

Now, I might be nuts, but unless the documentation is incorrect, this appears to be a "sensitive" application.

To make sure I'm not just going on innuendo, I read into SASL authentication a bit ... seems `cnonce' is pretty important:

A unique, encoded value that is generated by the client
for each challenge response, and that is used to avoid
chosen plaintext attacks, provides some message integrity
protection, and provides mutual authentication. This
authentication is provided mutually in that the server
proves it knows the user’s secret information and not in
that the server proves its identity. The nonce must be
specified if a QOP directive is sent.

Am I dead wrong, or are you hand-waving to defend your product?
amazing channel, didn't know about it <goes straight to the bmw videos>.
Free eBooks For Designers And Web Developers
Tactical (you can do this in the next 5 minutes): Find a good IRC channel that is active and you can connect with people with similar interests with you. We've seen people as far as Nigeria at #digitalocean
He doesn't need an Internet campaign, he needs a good lawyer. He has a very good chance of winning this case if he takes it to trial.

[I am not a lawyer and this post is not legal advice.]

The fact that he was detained isn't the problem. Prosecutors try bad cases all the time. They're bloodthirsty inhuman bastards by design. The problem is that his bail was set at $500k even though he was charged with nothing, that he doesn't have a lawyer (read: society has not provided one) competent enough to file a speedy trial motion and vacate this stupid charge on First Amendment grounds by now: the problem is that our legal system is totally broken. Bail that can be brought cf. the Eighth Amendment exists for a reason. Legal counsel cf. the Sixth Amendment exists for a reason. But defense attorneys and jury trials have been vilified to the point that even a "socially conscious" show like The Wire portrays Maurice Levy as the bad guy. And this is the result.

It doesn't matter whether it's a real crime or not: a defendant has the right to be able to make bail. A defendant has the right to a lawyer. A defendant has the right to a fair and speedy trial. The fact that we accept figures like $500k bail for drug dealers, thieves, pimps, whatever is also wrong. Bail is good. He who fights with monsters must take care that he himself does not become a monster, und wenn du lange in einen Abgrund blickst, blickt der Abgrund auch in dich hinein.
think you might have an extra w there...
4Chan stands against NSA surveillance today
Exactly.. so many unexamined assumptions go into all this.
They make reference to the Australian scheme in the article. Student loans in Aus are indexed by inflation (consumer price index) so they maintain their real value so as long as wages keep up with inflation it is effectively interest free and a graduate salary really should do better than just keep up. The money is collected via the tax system beyond a typical graduate salary. You hit hard times and drop below the threshold it just accumulates. Just about the next best thing to actual free government education. This is the historical indexation for the Australian scheme http://www.ato.gov.au/Rates/HELP-indexation-rates/?default=&... and http://www.ato.gov.au/Rates/HELP-indexation-rates/?default=&...
Not really? If I know someone that you don't and introduce them to you, at that moment they are a stranger to you, but definitely not random.
PRSM - The Sharing Network
I am still waiting for a high fat, low carb addition to their menu.
Now you're turning into an argument about organic foods and pesticides. Based on your definition of healthly food, many supermarkets would be in the same category as fast food places.
Trailer to a new Blender 3D animated webseries
Well, local I/O, and sometimes even LAN I/O, tend to behave close to non-blocking. The latency is very small, unless your database is under heavy load, but then you have other problems anyway.

With blocking I/O I mean I/O calls which put the process to sleep for a while. This is in contrast to I/O calls which succeed immediately.
Namecheap shows support of Fourth Amendment rights on homepage today
Not to mention some restaurants – pretty much every non-standalone location, such as those inside Wal-Marts, malls, even commercial development rows – don't have their own roofs per se, or if they do, employees would not necessarily be permitted access. Plus, can you imagine the time involved in having location employees deal with harvesting produce?
Thanks, I've been wanting a term for that idea. Needs to be shorter and catchier thought, otherwise it's just a <insert term for idea dismissed out of hand for being too egg-heady>
Flat Design: An In-Depth Look
But they didn't roll their own crypto as far as I can tell. They used CryptoJS [1]. They just failed to use it correctly.

EDIT: Here's the code https://github.com/cryptocat/cryptocat/blob/master/src/core/...

[1] https://code.google.com/p/crypto-js/
I think he's suggesting you need a texture atlas if you have multiple terrain types, so that different areas of the merged-quad mesh might need different textures applied to it. You could get around that with multiple texture lookups and shader work, but the atlas is probably better most of the time.
Ah, now I see our problem.

As I see it there are three main customer groups for VPNs; people using it to circumvent copyright protections (either location based or outright theft), tech savvy people who want privacy, and bad guys.

The original said more bad guys than tech savvy people, I assumed that excluded copyright circumventors (the largest group) and you assumed they were included.
From what I've heard, no. This isn't a Snowden leak, it's the result of a journo sitting on information and having an opportune moment to publish.

This isn't the first exposé of the French government's communication surveillance either. There have been quite a few articles on this over the past few years.
English is not my first language, but even for me, it is crystal clear that he was sarcastic.
I mean it reduces number of glDrawElements or glCallList calls.

If you have 256 different block types in 1 chunk, using texture atlas there's only 1 mesh instead of 256 different meshes.

https://docs.google.com/viewer?url=http%3A%2F%2Fnvidia.com%2...
It would be possible to have some torrent-linke sharing feature, but I the main bottle neck is that fact that in most browsers you're not allowed direct access to the file system.
Do you love to discover cool Android apps and games? Check out my website
It's hard to think of a well-regarded widely-used multiparty encryption system, which is a good reason generalists shouldn't try to implement them.
Look at the inputs. How much land does it take to grow a head of lettuce? How much land, including that used for feed, does it take to grow a cow?

If the farm area used to grow plants to feed the meat that goes into the Big Mac were instead used to grow vegetables, we'd have vast surpluses of vegetables. I love a good burger, but it's crazy how much meat we eat when you think about the amount of resources soaked up by meat production.
The Problem of the Macintosh Power Switch
O'Reilly Media joins the July 4th Surveillance Protests
Oracle Data Concurrency and Consistency
NanoMoCo Stepper Controller/Driver on Linux
As a Canadian, I find the cost difference startling. The article talks about the wraps being expensive at $4, which sounded reasonable to me, being on par with the cost of their salad offerings north of the 49th. Then in the next sentence, they refer to the “$4 Angus Third Pounder burger”, which was actually $7 here. I had no idea there was such a divergence in pricing.
I'm all for expansion, so long as the general atmosphere is maintained. Also, while I intend to maintain control over what gets published to adarkroom.doublespeakgames.com, I have absolutely no problems with other people publishing their own forks with different artistic visions.
To me it looks like the plan was if the protesters turned violent and attempted to burn down buildings, kill people, and go after whoever these [redacted] were there to protect, those [redacted] were going to respond lawfully with the necessary force?
You could probably deal with this by using a little extra space in the texture atlas

I don't know how well non-power-of two texture coordinates work in GLES and WebGL, but you could put a single column of pixels from the other side of the texture on both sides.

say you have ABCD and so you store, DABCDA, it'd use up some memory but could result in a speed boost since you could likely avoid breaking the normal mipmapping and such. I don't think you'd have to go as far as having half the texture on either side, but it'd be worth experimenting.
What if it was a honest to god mistake? Like "I'm going to shoot some [hoops omitted] at school? Would it be easier to sympathize with?

Because it's pretty much the same thing, he didn't meant to offend/scare just make a really bad joke. It's like a proto joke that missed audience/tone.
Btw, just some context here. This is an interview with Paul Allen from the Bizdom accelerator in Cleveland that I did on my blog. I actually thought he made some very compelling arguments for why entrepreneurs -- even techies -- should go against the grain and choose midwest markets to set up shop.
Trying to fix it but I think it may be a Launchrock issue.
The embarrassing part about these posts is that my major focused on Business Finance...

(...and Information Systems, which I rolled into System Administration.)
Oh man...I don't know if I would let anyone drive that car on a wet road (even if it was James May). I cringed when he went through that rather large puddle.
This is the calculation for someone who got a bad job and never advances at all in 24 years. It might be a good deal for them. On the other hand, they could make that without going to college. Someone successful would make significantly more, and pay significantly more.

This program will get a lot of stay at home moms out of paying for their psych degrees.
News at 11, NSA bugs game lobbies of popular multiplayer games. 90% of all gamers arrested.
I also think that to be a good builder, you have to be a good breaker — which is most especially the case with crypto. Of course, you already know this, thus your competition, but you didn't bother to say it.
Join the largest online protest since SOPA to stop NSA spying
Chipotle has totally replaced McDonalds for me (though obviously it doesn't play in the same price range). If you can afford $8 for lunch, why would you want pre-fab food when you can get freshly sliced chicken you can see being grilled right behind the prep station?
You're straining my point I feel. I simply think that this sort of surveillance would have made a big impact on the $36 billion drug trade, what with the war on drugs being such a hot topic an all.

But no. It seems drug dealers don't use phones or computers or send mail to communicate with any of the cartels or drug lords we know of, and presumably coordinate their gargantuan logistical operations via telepathy.

Or, the government doesn't deem the drug trade worthy of scrutiny, despite the warnings that it funds terrorism.
Show HN: A Better HN Twitter Bot
Oh ok, I haven't thought about it this way. You are surely right.
Don't Get Demoralized by Bad Estimates
There is an official translation:

http://www.lemonde.fr/societe/article/2013/07/04/revelations...
It wouldn't be significant - leave the garage door open for a few minutes and you would be fine. I imagine he has ventilation designed to take this into consideration.
Why Programmers Can't Use Apostrophes Correctly
If you have Hardees in your area, check out the low carb thick burger. Sometimes it's not posted on the menu, but it's there if you ask. It's essentially the "frisco" with the large outer leaves of a head of iceburg used as the bread. Though if you actually want it to be low carb, order it without the ketchup. Be warned, though. It's salty as hell and whether or not it's edible as a sandwich depends on how accustom the person is to making it.
3% is quite low isn't it? In the UK I believe it is 9% of your salary for as many years as it takes to pay off the debt.
SynopsiTV Open to Developers
There are lots of bootstrapped companies that make as much as funded companies do.
Well...that's a fairly depressing interpretation of art.
> If people routinely say things online that they wouldn't say in a public, real-life conversation, maybe we shouldn't apply the same standards to both kinds of communication.

One of the things I hate is when people say "it's ok to do xyz as the internet isn't real life". eg cyber-bullying can be just as emotionally harmful as saying such comments in real life. While I love how empowering the internet can be, people need to stop treating it like a justification for being dickheads.

> (FWIW I think people say similar things all the time in real-life conversations, but probably only in a private context. There are far fewer private conversations on the modern Internet.)*

I don't agree with that. You have e-mails, instant messengers, PMs on forums, Facebook, etc. There's even the ability to create private chat rooms on nearly all chat protocols. In fact there's more ways to start a private conversation between friends than there is to share content with strangers.

> I think the real problem is that in those rare circumstances where someone follows up on their stupid threats, everybody gets in a hissy fit that the warning signs were ignored. The warning signs should be ignored because following up on them is not compatible with a free society, not to mention it being both a slippery slope and a drain on resources better spent otherwise.

You make some interesting / good points there. Not sure if I agree with them - but I don't disagree either. It's definitely something I'll have to think deeper about.
I'd like to hear how they were able to handle the dramatic increase in traffic over such a short period of time.
English version on lemonde.fr: http://www.lemonde.fr/societe/article/2013/07/04/revelations...
Weird. I just tried it then from a cold restart. Chrome is instant on my computer, firefox is near instant. Maybe because I have an SSD now I don't notice it.
Or maybe he just has a weird sense of humor? In fact what he said was entirely normal, given the right tone. We hear it all the time in normal speech:

"Man, you're crazy."

"Hah, yeah, right, I'm crazy, like I'm going to shoot up a school or something!"
> The money is collected via the tax system beyond a typical graduate salary.

It's worth noting if you are not earning over a certain threshold (currently $51,309), you don't have to pay anything. If you want to go travelling, you simply don't pay anything. If you never earn that much (because, say, you work for a non-profit or are a struggling artist), you are never required pay it back.

Also, if you leave Australia, you never have to pay it back.

If you do earn over that threshold, you just pay slightly higher income tax in those years [1]

If you make a voluntary payment of $500 or more, they take your payment plus another 5% off. [2]

I personally have found it to be a phenomenal system, and I've never met anyone in Australia that didn't go to University because they couldn't afford it. (We also get paid a "living wage" to go to University, of around $400 every two weeks, depending on circumstances. [3] )

[1] http://studyassist.gov.au/sites/studyassist/payingbackmyloan...

[2] http://studyassist.gov.au/sites/studyassist/payingbackmyloan...

[3] http://www.humanservices.gov.au/customer/services/centrelink...
Similar here. You need a few hours to read it though.

http://www.luxury4play.com/automotive/36568-worlds-most-beau...
Or, more or less equivalently, one could tax the population at 3% of income, and fund a free education system. It slightly disadvantages those without degrees, but I'd argue there are enough positive externalities that they still come out ahead.
What happens if the graduate moves out of Oregon? Who enforces collection?

Frankly I think this idea is silly. The primary reason that the cost of education is out of control is that so many people are not using their own money to pay for it. In trying to make education affordable to everyone, we've achieved just the opposite. Universities are bloated, top-heavy with highly paid administrators and staff who actually do very little work, and they can afford it because they can just increase tuition by near double-digit percentages every few years and get no market pushback.
4 Ways To Create More Time Freedom As An Entrepreneur
I don't eat too often @ MacDonald's and I'm not in the US, so correct me if I'm wrong, but wasn't cucumber already present inside i.e. a BigMac? I don't like cucumbers (and neither my wife) and I remember every time taking a small slice out from the burger
I'm waiting for the same EU HN users to start calling for the banning of all French citizens from the rest of Europe, and the blockading of all French online services, as they did with the US yesterday. Perhaps how all French citizens need to be punished so they'll force their government to change their behavior...

Maybe we'll see some German politicians talking about how bad French companies are for being complicit with their intelligence services and they need to make sure their citizens don't use any French services. But, I'm not holding my breathe - because, I'm sure that attacking France will do little for most politician's re-election chances over there.

[Edit: Down-votes? If you're going to disagree with me regarding the political opportunism and lack of criticism of France, then come out and say it.]
To be a good crypto-builder, I think you need to be a good breaker. I don't think that holds for other kinds of building.
Hacking Your Diet For Productivity