skysight-inc/HackerNews huggingface dataset:
Just believing "somebody would see it" is provably not enough.

http://www.schneier.com/blog/archives/2008/05/random_number_...

The bug was introduced in September 2006. Discovery published May 2008. Affected: the most popular Linux distribution, all the keys generated on it in that period. Scary.

Moreover, the bug was not found by reading the source code. The keys generated by all the existing system were analyzed. If I remember, only the keys generated by mentioned Linux distros stood out (and some hardware devices using customized firmware or poor implementations). Windows and OSX weren't there.
Reminds me of the saying - "When there's a gold rush, sell pickaxes and shovels."
> It's very easy for me to tell when he visits my website

Simply drawing attention to the fact that his attempt at anonymity acts a key personal identifier in this instance.
Geeksphone announces Peek+
Yes, London travel is pretty expensive, but: You don't need a travelcard unless you travel more than once back and forth every days - pay as you go is cheaper. Also, the price of a flight without the airport tax is irrelevant, as there is no way to not pay it (which is why it's so dishonest for Ryanair not to include it in the price). Finally, commuting by bike in London is completely feasible - cycling from Poland is a significantly more substantial undertaking :)
I'd like one, too. Thanks!
carlos.fenollosa@gmail.com
I recently noticed similar diffrence between Polish and English. Usually Polish text is shorter in written form (less words, and often less letters), but English text is shorter when spoken (less syllables). Polish has also a little more redundancy because word endings must agree.

It almost seems like Polish was optimized for reading/writing and correctness, and English for talking and speed.
Why on earth do you live in France? It sounds like you don't believe in anything that makes France France.

And health care is most definitely more expensive in Switzerland than France. It's privatized but there are strict regulations on how much money insurance companies can make and all citizens are required by law to have insurance.

> Not for subsidizing movie producers

France makes great movies, but they could never compete against Hollywood financially. I for one am quite glad that France does what they need to to make sure good, original French movies (ok, not all of them, but much better than Hollywood) don't lose out to fast-food garbage the US is pumping out.
(Sorry for the length, but its hard not to create very long question->answer replies in situations like this)

> Microsoft can forceable push new executable code as updates, regardless if settings has turn of updates. - Any source on this?

https://windowssecrets.com/top-story/microsoft-updates-windo... (its old yes, and was disputed as a "bug" by Microsoft. At the same time, no security expects has said that Microsoft did fix it. As such, I default to once burned, twice shy.).

>Each time you visting a page, IE sends the URL over to be "checked" by Microsoft. - Huh? Are you talking about hashes being sent for malware check

SmartScreen Filter and Suggested Sites (http://windows.microsoft.com/en-ca/internet-explorer/ie10-wi...). Both can be turned off, and I don't know what is default. My default assumption is that both is on (or checked in wizard) by default.

>Then we have semi-native application such as massager or skype. Both has messages being "scanned". - Are you talking about URL scanning? So does FB, Gchat etc.

The OP talked about native MS apps as being risk free. Just because FB and Gchat also do bad thing, doesn't make someone else applications less risky to use.
There used to be a separate printer attached to the voting machines, which would print each individual vote, in the presence of the voter, and would automatically go into a ballot, and it would be used in case there was an allegation of fraud. They of course did the dumb thing and did away with the printer, now they only have printouts of the total votes after the session is done and the machines are about to leave the place.
From Wikipedia:
"The 2002 version had a printer module that printed each vote, but the printed vote was abandond after Law 10.740/2003 and should only be reintroduced in 2014, according to Article 5 of Law 12.034/2009"
So I find that in order to see the diagram, I need to either scroll manually (O(n) linear search) or click on the reference in the text (makes my hand hurt).

I 100% agree with the problem you've identified, but I find your solution confusing.

Then again, I found LaTeX confusing when I first used it, so I guess it might just be me not being used to it.
Finland?[1] (I have no idea.)

[1]http://www.youtube.com/watch?v=uimh2EBB1yQ
Nice way (or attempt) to kill a discussion.
Special Deal: The shadowy cartel of doctors that controls Medicare
I don't see anything from OVH that comes close to an i7 with 32GB RAM for the price of Hetzner. Am I missing something?
Thanks! (I made the graphics) I'm really proud of the wheel UI which makes sure any action you might want to take is in one megabutton. Micro interactions are something I get huge kicks from too so check out the like the wheel rotating on upload, and the loading spinner; if you look closely they're sharks swimming in circles. This keeps me endlessly amused.
Not in my experience. I'm using greylistd with Exim and a custom config which uses geolocation to do greylisting by subnet country code. I've only needed to whitelist a handful of broken MTAs which don't retry.

My spammers clearly haven't caught on yet...

zgrep grey /var/log/exim4/rejectlog* | rev | cut -c 2-3 | rev | sort | uniq -c | sort -rn | head
8 CA
7 IT
5 ES
4 BR
4 AR
2 TR
2 RO
2 IR
2 EC
1 PT
Apple to probe death of Chinese woman who used iPhone when it was charging
This is an interesting point of view.

What I gathered from this is that the magnitude of this project is BIG. This will mean that it will involve more than one entity to participate and hence the need to keep it open.
I'm not too familiar with Couch, but as I understand it caches views and updates them. Does Pouch do something similar, or does the query function filter all the documents in the database?
Except almost no one has any idea what the American median is, or the Brazillian median is. These are large diverse countries with huge internal variation to which you have not been exposed. New York is a lot more like London than Silicon Valley, even though New York and Silicon Valley are part of America and London is part of England. Even within New York. there's huge variation that most people are unlikely to have full understanding of. A small design studio in Dumbo, a large financial institution in financial district and an advertising company in Midtown are going to have completely different cultures and norms.

If someone tells you, in our country, people are like this, the chance is that you're being mislead. Lots of people tell me that in their country of origin, there are no gay people or something along those lines. People have a very narrow view of what constitutes their own national culture, largely oriented around their own peculiar and individual experience.
I understand that the Smalltalk like syntax of Objective C can be difficult to understand at first glance; however, once you've worked with it a bit, the syntax becomes quite expressive -- each argument is labeled; something like using named arguments in Ruby, but it's not optional.

Not sure what you mean about the APIs being nasty. Can you elucidate?
Mobile security primer
Nice overview. Somewhat frustrating to see non-gofmt'd code examples. Fix that up :)
If I was a girl, I would find that overwhelming. Instead of unwanted contact with just one guy, I now have unwanted contact with two guys.

Plus, that sounds like a bad cop/good cop routine to use the first guy to make the second guy look like an attractive candidate for a significant other.

Maybe I'm just over-thinking this.
I'm just guessing, but I would say maybe completely bonkers bullshit like "feminist status quo"?!
Understanding The Problem Domain Is The Hardest Part Of Programming
How would you feel about men-focused male-in-tech conference? Not so cool, eh?
If they can get direct access to the DDG servers, then it doesn't matter if they can siphon off traffic at the ISP level. They can just access the data.
Hi daleharvery quick question, if application is working fully offline, how is it syncing across all devices?
Though, while Java can, it looks like Dalvik generally does not (though, most of the info available seems to be 2.3-era; possibly things have improves since). It looks like 2.3 Dalvik can inline getters and setters, but it's certainly no Hotspot.
I've been keeping an eye on PouchDB for a while; it looks like a lot of fun. How does authentication with the Couch server work, though? I don't see anything on the FAQ or after a brief perusal. CouchDB's apparently lax attitude toward security years ago was what kept me away, but I've always hoped/assumed that it improved since then. Has it?
The Internet Archive Rescues Bitcoiners From Banking Oblivion
Also I think it is mostly a gross oversimplification. One could make the argument that a horse and buggy manufacturer is in almost an entirely different manufacturing business than an automobile manufacturer, and thus no more qualified to launch a successful automobile manufacturing business than any upstart. Just because they compete for the same customers doesn't mean they both have the same capabilities.

I would also like more evidence that there was a higher win percentage for tire manufacturers than automobile manufacturers to support the argument that tires were the better business.
Did you even read the article? They link that in the first sentence.
Burp, fiddler maybe, webscarab maybe. Some kind of proxy with any sort of meaningful capabilities.
idiomatic shmidiomatic, give me faster always!
Good Java JIT environments (HotSpot etc) do this. It looks like Dalvik does not.
More than a few things in the article made me go "wait a minute", like saying "Dovecot is LDA, so it runs IMAP", the chained IV and the warning that some programs might not work (and if mutt won't work, how do you know Dovecot will?), or the use of mysql ... but the glibc bcrypt story is especially sad.
The operational problem with these things is how do you deal with time? Over time folks upgrade plugins/browsers etc, making it not match the previous fingerprint. Therefore you won't be able to stitch two sessions together as belong to one person (who did the upgrade in between). Sounds to me directly opposing the core idea behind these techniques. (E.g. bringing it from unique identifier to persistent unique identifier)
Not all businesses are big corporations. There are a great number of small companies that can much more easily implement Linux for their employees to use. I think the point to be made here is that moving forward, (a) a lot of people can really do all of their computing on Linux now, and (b) an increasing amount of software is being written for the modern web so MS/IE lock-in is going away.
So I figured, but my stance is that in the long run the repute and traffic would not matter. I'm more in favor of the OSS-mentatlity: fork it. I've never believed in crowd-sourcing funding for a buyout as I have little faith in the that the market is working when the buyer is not paying out of his own pocket and after all you're only exchanging one private owner for another.
Or we could setup a free wordpress site and spread the word that the new Hackaday is at newsite.com, and not completely waste $540,000. What a disgrace.
Unfortunately, those are real courts, their functions and jurisdictions have been established by the Congress.
The virtues of eating insects, socially responsible or gross
Wouldn't cleanup in an ARC setup be more (or just as much) dependent on de-allocations (or actually reference loss) than allocations, while in a GC environment a freeup (albeit less predictable and of higher impact) is mostly triggered by deallocation? At least that's what I understood from the article.
Elon Musk is the only man alive who could promise the moon and make me want to believe that he means it. I hope he follows through, I want to believe that he will, and I have no reason to doubt; if anyone will do it, it will be him. Open source FTW.
We love Rando. The humour UsTwo put into the design makes it really human, something we hope to achieve too. The difference here is that Yarrly doesn't distribute your image for you; that's down to you sharing it. Plus you can remix and form chains, creating less of a snapchat/rando immediacy and more of an image message board effect.
You can (which is not, necessarily, to say do) know if the compiler is tweaked: http://www.dwheeler.com/trusting-trust

This only works if you are building things yourself or trust the group building things, of course, but it's way easier than audit by disassembling binaries.
My main point would be that each party involved in the situation would be more careful on how they react. How would Zimmerman approach Martin if a police officer was standing there? The Google Glass would be evidence as if an officer or court room was standing there at that moment.
None of the links work in the embedded version, but if you download the PDF they're fine.
Dropbox wants to replace the hard drive but it's not that easy
I think there is more "secret sauce" in Tesla than in SpaceX. SpaceX is doing great implementations of pretty conservative designs. In any case, both are "product" companies and benefit from patents less than "design" companies. Contrast SpaceX with Mojave Aerospace Ventures (the investment vehicle that owns the Spaceship One IP developed by Scaled Composites).
Jd, how do the sandhi rules keep you from finding out what the word is? They make it easier to find out. The rules are just that -- rules -- that bring order out of the chaos.

As to how you guess, yes, you infer from the etymology.

The fact that it's guessing doesn't mean it's easy, or that guessing gives you as much information as actually looking it up, parsing it, etc.
Exactly how do you get standing to sue the government for something they are not doing with something that does not exist?
http://www.viomundo.com.br/denuncias/amilcar-brunazo-ridicul...
The government isn't collecting your data.
>Either something is okay, in which case it's okay to do with a machine, or it's not

Actually, if you follow someone around everywhere they go, even in public, unless they've famous and you're a paparazzi you're likely to get charged with stalking.
Yes it does. Look at the MvvmCross project.

Also struggling to verify that claim re. executable size, can you provide a link? Either way, average app size on Android seems to be around 3MB. A typical Xamarin-compiled app is around 4 to 4.5MB.
Sure, it is possible. But it is harder, and the possibility of those "patches" getting discovered some randome users are much higher. It is much easier to use proprietary tool like microsoft to spy others.
Sentence 1) I'm a victim. I'm oppressed by women who won't allow me to express my opinion because it differs from theirs. I believe in equality so I guess I'm implying they don't. Sentence 2) I'm uncomfortable talking about this so I'll try and say let's not talk about it at all and just focus on some abstract technology discussion.
3) We're doomed. You can't solve the problem. It's just the way it is so leave it the way it is. (I kind of like the status quo even though I was just objecting to a status quo mentality)
Samsung at 14nm - wins more business from Apple
No, if taxation was low enough, the hasle of putting your money in a tax havens wouldn't be worth the time, money and trouble. Tax havens and the accountants needed to set them up are far from being free. If companies could spend the millions they spend on setting up these schemes on a low flat tax rate instead it would be worth it for them even if they ended up paying a bit more than by putting the money in a tax haven because of the time being saved and the good publicity + the positive effect that reasonable low taxes have on the economy.
The problem is, if you vote for candidate X, there's no way of checking if your vote was really computed or tampered with by the machine. The report will print something like 'candidate X = so many votes', but beyond that you can't know if that number was altered. If you had individual printouts on a ballot along with the electronic vote, you could have the ballot counted, and know.
What if some wacko starts claiming he accessed 50 voting machines and altered to switch 20% of votes for cadidate X into votes for candidate Y, as the votes are being cast? How do you check?
There was an excellent tutorial posted on that the other day: http://futureboy.us/pgp.html
I agree, but the presence of video could deter many actions from taking place.
Also includes Switzerland.
Show HN: Discover great local food with Farmly
Currently PouchDB views do a full table scan, there is an open bug to do incremental views more inline with CouchDB - https://github.com/daleharvey/pouchdb/issues/99
I remain astonished that Martha Stewart was targeted, convicted, and jailed. I don't care either way if she did some thing wrong. I care about the unequal application of justice.

In contrast, I can't imagine anyone targeting Oprah. She'd destroy (PR-wise) anyone challenging her. Recall that beef lobby's attacks.

Jobs is like Silicon Valley's Oprah.
This is the first time I've seen Samsung beat Intel on a size transition. Am I out of touch or is this news?
"Ever heard of reverse engineering? It turns out you'd need even that approach even with open source as soon as you use binaries you haven't compiled yourself."

This is true: reverse engineering can be used for verification, but it's a whole lot more work than inspecting source.

"And you'd have to verify the compiler and your disassembler that way too."

This is false. You can verify the compiler with diverse double compiling: http://www.dwheeler.com/trusting-trust
If this is, as it sounds, a new public transport system, it surprises me a little that he would prefer to develop it in the US.

Attitudes towards public transport in general seem more favourable in the EU, Japan, China and South Korea.

Perhaps I'm missing something, but I imagine getting such a system built in the EU (for example) would be easier than the US. Then again, Musk has been building a reputation with law-makers in the US for some time, so that might count for a lot.
Most people don't. But if the need the need comes, it can be done. It may need some effort, but can be done. Can you audit microsoft code?
I prefer to think of this as the on-ramp. Learn your craft by selling eyeballs, or some other relatively trivial technology, make FU money, and then go and do something real. The archetype of this is of course Elon Musk.

I know that what drives me is the hope that one day I will have amassed enough money that I can stop going to work for somebody else, and instead choose to work on what interests me.
Sorry, but this entirely missed the point.

Developers, hell, almost all office workers, should think remote working first then worry about relocation.

The comments all through here are quite right - it is hard for anyone to move country, even talented, young, healthy, unattached interns.

In the future workers will be able to work with any company in the world. This will scare the hell out of all companies and they will improve the pay and conditions.

On the other hand, I strongly urge anyone with developer skills and no family ties to move to any major city in Europe and live and work for a few years. Just go. The job is far far less important than simply being there.
Thanks for that. I wanted to understand how this was working.

This seems like a pretty powerful data source to use for all sorts of things, if it's always accessible like that. A world readable cookie for every yuppie and hipster on the planet!
Yah I read those two sentences as well.

A piece of advice from my father: If you have two ways to take something, take it the nice way.
At the company I work at we use HeaderDoc by Apple for our documentation (or at least I do). https://developer.apple.com/library/mac/#documentation/Devel...
Yes, but the messages stay only six months. Probably roughly the same time as NSA would store intercepted mails.
I think the Hackaday site can shed some light on this. It appears that the owner wants to sell and the community wants to buy to preserve it.

http://hackaday.com/2013/07/15/were-going-to-buy-hackaday/
I came along to post a very similar thought. NSA proofing my email won't do any good. I'm not worried about the NSA (or my country's equivalent) spying on me. I'm worried about what are the consequences of their unchecked power in general.
"Get loud, get political."

A major problem with this is that advanced surveillance technology and the increased sharing and cooperation between the various spy agencies and ever more militarized police force is being used to target, spy on, and repress political activists and protestors.

If you seriously, but peacefully and non-violently, try to oppose the surveillance state aparatus and are deemed to be a threat to the huge sums of money they are getting to fight the good fight or a threat to the power they're ammassing, you can expect to be spied upon and harassed at the bare minimum. The more of a threat they consider you to be, the more you're likely to find yourself in jail or worse.

Of course, this has been par for the course for political activists ever since Spartacus led a slave rebellion, and it will not stop the minority truly dedicated and idealistic activists. But the tools of state surveillance and repression have advaced so much that it's much harder for ordinary people to participate in the political process beyond voting for two mostly the same parties, writing emails, or making phone calls without suffering serious consequences.

This is scaring a lot of people off from even trying to make a difference. In many ways, many of us already are living in a dystopia.

That said, trying to raise the political consciousness, technological literacy, and privacy awarenss of the average individual is still a very worthwhile and usually safe thing to do (depending on how radical and confrontational your tactics are), and we'd all be much better off if more people did this instead of throwing up their hands and giving up or pretending it's not happening.
Are you trying to learn Objective-C alone or learn Objective-C and also how to build an iOS app? I know Apple has a ton of resources (videos, documentation, sample code) for almost everything you can do on iOS.
> SpaceX is doing great implementations of pretty conservative designs.

Mostly. So far. But very quickly SpaceX will start building things that have never been built before, and I would assume small teams are already working on the designs. Ships like human-rated Mars landers, colony buildings, fuel-creating reactors for Mars, etc.
One way to counter browser fingerprinting could be to add a plugin that simply report random data when queried. This would invalidate the hashing.

Of course, if the plugin is well known, it could be removed by the fingerprinting code, unless it can disguise itself as something else -more or less random- when it is installed.