skysight-inc/HackerNews huggingface dataset:
There is a more fundamental problem here than the law itself. People who fail to understand any aspect of the internet, should not be allowed to legislate against it in any way. It's madness.
It was mentioned on this thread, 2 hours ago:

https://news.ycombinator.com/item?id=6082212

This link points to the top comment on another thread (which has more points and comments as of now) about the Dev Website outage.
It's scary just how idiotic he sounds when talking about this.

He did an interview with the BBC Radio Four programme "Woman's Hour". He sounds computer illiterate.
Apple Devcenter Attacker video
Government agency could overhaul NSA-Referred to as the PCLOB(pee-klawb)
For some perspective:

Rates of murder and violent crime have fallen more rapidly in the UK in the past decade than many other countries in Western Europe
http://www.bbc.co.uk/news/uk-22275280

Homicide rate is less than loads of EU countries (and Canada!)
http://en.wikipedia.org/wiki/List_of_countries_by_intentiona...
There are a lot of assumptions here.

(1) You know (or can tell) what content your kids are exposed to on the internet. Most kids I know are quite adept at keeping what they are upto hidden from their parents and that isnt unique to the current generation.

(2) Parents have a much better sense of content, kids are exposed to on TV (where content is regulated and rated for the most part) than on the internet.

(3)Even if you are an involved parent with the ability to discuss things with your daughter, you both arent living in isolation from society. There are easily more parents and kids that don't have such a relationship than the number that do. So if boys as young as 8-10, growing up in highly unsupervised environments, are constantly exposed to extreme porn, what do you think their expectations of women are going to be?

(4)Addiction. Everyone has weaknesses. And porn sites are getting better and better at keeping people hooked. Kids are the most susceptible.

Freedom has always come at a cost. And the main cost is equality. If all kids are born equal and all families are created equal sure give them all the freedoms they want. But that is unfortunately not the world we live in today nor is it getting any more equal any time soon.
yeah but the reaction was vastly different.

I remember the last RoR exploit was quite a thing on HN few months ago. But not this Struts 2 one.

Tip: if you see some URL end with .action, it's propably Struts 2 and vunlerable to S2-012, S2-015 and S2-016 such.

Besides, apple.com was hacked as early as in May using similar Struts2 exploits.
Haskell Lenses In Pictures
Google's Revamped Nexus 7
We're trialling cutting packages from Rails apps with fpm[1], plus prm[2] to create the apt repository on s3.

There's a bit of footwork needed to include built gems and correct asset manifests in the package too, but we now have 10-20s deploys, down from 8-12 mins. Plus it has less impact on server resources.

1. http://rubydoc.info/gems/fpm/latest/frames
2. http://rubydoc.info/gems/prm/latest/frames
"They waited three days to alert developers because they were trying to figure out exactly what data was exposed"

Why couldn't they notify people about the hack, then alert them to it's specifics in due course? Piss poor excuse IMO.
Translation:
"I’m not making this speech because I want to moralise or scaremonger"
->
"I’m making this speech because I want to moralise and scaremonger"
More 'laugh at Daily Mail readers' fodder:
http://www.youtube.com/watch?v=xPlEIryW8zA
Wait, this just went through parliament without any problems? I may have lived under a rock, but this is the first time I ever hear about this. Is this just a proposition from the English government, or is the new legislation already accepted?
People may find these links interesting:

https://en.wikipedia.org/wiki/Antisexualism

https://en.wikipedia.org/wiki/Sexual_repression

https://en.wikipedia.org/wiki/Libido_(Psychoanalysis)

"It is this need to conform to society and control the libido that leads to tension and disturbance in the individual, prompting the use of ego defenses to dissipate the psychic energy of these unmet and mostly unconscious needs into other forms."

Say... consuming material goods?
In Bollywood (the Hindi equivalent of Hollywood in India) pretty much any mainstream commercial movie used to have at least one rape scene [1]. The formula had variations : villain tries to rape heroine and hero saves heroine, villain rapes hero's sister and hero takes revenge etc.

[1] http://health.india.com/diseases-conditions/international-wo...
Computer Science teaching resources for Kids
Server QA can be every bit as valuable to ops, and not just by preemptively finding bugs. At that company, I ended up adjacent to the server QA team. They effectively became an extension of the ops team. Many an hour were spent with one side or the other talking to a disembodied head over the cubicle wall, or with me outright sitting in their cubicle. Emails and IMs were a constant. They saved our asses in the field many times. They also wrote a lot of our usable documentation.

On my way out, I recommended one of them to replace me. Shortly thereafter, he did. Years later, I think he's actually the ops manager now. I wouldn't mind working for him, but political BS drove me out of that company, and pretty much any other company that big.
"If they can't keep their forums secure, why should I even use their operating system?"
I looked at a while ago, the thin requirement is arbitrary and you can use unicorn from a fork iirc.

In the end - it just seemed a little too painful to get working with, but is something I am interested in playing with again now that I'm working full time on a Rails 3+ app.
Because very likely very different people work on administering the fora and developing the operating system.
answered here https://news.ycombinator.com/item?id=6082643
Fifty Shades of Grey Would Be Banned in UK?
I tend to use things like “sitename@example.com”. That way I can also see who gave my account details away when spam appears.
I could totally be wrong here, this is not my space of expertise (I generally do security work at much lower levels), but it is my understand that these "two mutually-untrustworthy services" that are hypothetically on the same SSL domain are only going to be able to share information via cookies, so cookies are the real problem. For all other purposes, they will be considered separate "origins": they will not be able to share local storage, they won't be able to make HTTP requests via JavaScript to each other, they won't be able to view the contents of each other's iframes or images, they won't have access to each other's message ports... in essence, these are totally different websites for every interaction that the browser even considers enforcing a security boundary for... except cookies, where apparently the port doesn't matter? That seems to be the core problem here, and I don't see how your comments about SSL are addressing actual security boundaries.
well, it is highly dependant on the language, some require distinction between sexes, and using a gender neutral term is sometimes offensive.
I'm not current on what kind of compatibility coffeescript is trying to keep, but IE6 certainly not going to like the newer V8 features...
According to an HTC rep I spoke to last month, It's part of the HTC camera app which isn't in stock Android.
> Bit more work on layout

<I'm not a designer>

Serif font for headers and sans-serif for body looks wrong - usually it's the other way around. OTOH many people prefer sans-serif for digital media and serif for paper media. For example Wikipedia is sans-serif only.

</I'm not a designer>
> The possession of "extreme pornography", which includes scenes of simulated rape, is to be outlawed.

Irreversible?

The Girl With the Dragon Tattoo?

Once Upon a Time in the West?

A Clockwork Orange?

Titus Andronicus?

Remember when RIPA was only supposed to be for terrorism?

http://news.bbc.co.uk/1/hi/england/dorset/7341179.stm
That's a fun comment thread. Poe's Law illustrated beautifully.
Good find. Charlie Brooker is the only public voice of reason I've seen in the UK media. His work is hilarious and thought provoking and nothing in between.
Maybe you preach about it so no-one attacks your "sidebar"?

To me this OTT response from the leadership is a sign that moral conservatives are dying off and fiscal conservatives are not replacing them.
Well thats sort of hillarious.

I'm guessing this is similar to what Weev was prosecuted for.
There'a actually a documentary about him.
http://www.youtube.com/watch?v=OMcjxe8slYI‎
A Clockwork Orange springs to mind.

Most folks I know who have actually watched it think it's horrific (at least in parts). It was banned for a long time due (IIRC) to the fact that you could watch it 'straight' and see it as glorifying all sorts of stuff. Especially when you take into account that the second half of the film is about government conditioning and then un-conditioning our anti-hero, so that by the end he's once again able to commit atrocities.
"a lovely group of third place finishers even with a ton of consensus will never outperform one genius"

...providing that genius is a Leader and not a Cowboy.
I tried latest version few days ago, but found relatively hard to configure, also I didn't find anything about encryption in the settings, and all files were stored on disk unencrypted, also the need to have a web UI looks to me like a security risk.

Does anyone can recommend service like that but without frontend? I'm really only interesed in syncying files between few of my computers and mobile devices.
The best joke ever.
I think the font shadow kills it. There is no sense in having it there. It is not like the white font needs to stand out from the background more by adding more semi-transparent white...

Sometimes I see the same thing when selecting text that I read (for some reason I select the text I read with a cursor...).
> These declarations will only be used to shame public figures once the list is leaked.

Actually it's the common person I'm more worried about. Applying to work as a teacher? They might ask you (or the Government body with the details) if you watch porn. "We can't let someone who watches porn teach 5 year olds!" will be the excuse.

> Video footage of two consenting adults, acting out a scene, will be illegal to own.

This is already the case in the UK, with violent and extreme pornography, a new law that (I don't think) has any convictions yet.

> it seems a short hop to outlaw videos of simulated murder.

Again, other way around. They made porn of that technically illegal a few years ago AFAIR,
Why is the Gaming Industry not taking the Google Console Seriously?
What do you think his intention is, to do the right thing?

Win votes. That's the definition of success in politics.
Isn't this policy electoral suicide? Sure, there's a vocal minority who want to 'think of the children' and are backing Cameron's plan. But I'd imagine the vast majority of the population want to view pornography without putting their name on a smut-list. These people aren't going to form campaign groups but will be happy to express their view in the anonymous confines of a polling booth.
Thank you for sharing Technologeek articles ;)
I just don't see the problem that djb is highlighting. To me the crucial mistake comes in this sentance; "When the generate-data program finishes, the same fd is still open in the consume-data program, so the kernel has no idea that it should send a FIN." generate-data and consume-data should NEVER share a fd; the two pipes in the "same machine model" are two seperate sets to fds (the pipe() returns both ends of the fd in one call). Likewise the TCP model should use two separate (sets of)sockets. shutdown()'s real use is for poorly implemented protocols where the server has no real time way of initiating a control message to the client apart from "abort"ing the connection; some protocols only allow the client to initiate sending a message. Also note that one end of the connection sending a FIN doesn't preclude the other end from sending more data.
The only legal security researcher is the one hired by a company to identify issues during a security audit.
"Hardcore" porn (anything with penetration or erect penises) was illegal in Norway when I was a child. As a result my generations source of porn was illegal imports sold in shady shops which, because they were already breaking the law, had few reasons to avoid selling anything that was available from their sources.

So if you wanted just "mainstream" porn, you'd get that from places with prominent displays of all kinds of fetishes many of us would never have even heard of otherwise.

Then came the BBS's, and the same was the case - normal mainstream stuff in between every fetish imaginable.

Now I don't necessarily see that as a problem, but it does mean that by adding these kind of restrictions, they are effectively losing all control. They are also likely to massively hasten the move towards technologies to better anonymous, encrypted browsing.

If anything drives "darknets" and systems like Tor to the next level, it will be more extensive porn filtering even more so than piracy, especially because of the amount of money in porn that is legally manufactured and distributed, but that is or may become illegal in large potential markets.
I couldn't stop my self from looking the reference up. It's in the entry on Politics:

http://www.catb.org/jargon/html/politics.html

He's clearly injecting himself into the "definition" as a type (b).

FWIW, the way back machine indicates it's been like that for a decade: http://web.archive.org/web/20030609145128/http://www.catb.or...
Unfortunately, the Daily Mail is very influential - their demographic fits extremely closely to the membership of the Conservative party.
He says he did everything legally and he notified Apple of his pentesting, except he shows names and email addresses in the video itself. Pretty illegal I'd say.
3D Printers Explode in 2014
I think that it is a online system where the box is ticked by default. This is his version of opt-in to porn.
> So fisting ... already illegal.

Actually there was a case in 2012 of someone tried under this law for having fisting videos. They weren't convicted. This is strong evidence (and precedent) that fisting per se would not fall under this law.
World Trade Center Chinês Vai Ser Construído em Wenzhou
Can you help me understand the benefit of require.js?
Actually child porn images are probably much easier to detect than YouTube blocking videos. One aspect of copyright infringement that makes content detection hard is that there is fair use. There is absolutely no fair use for child porn.
No need to thank me for indulging myself, thanks for reading it, and even more importantly, for getting something positive out of it :) And to be fair, HN is also the first place I've personally experienced on the web where breaking out into rather large ad hoc rants that go all over the place does not lead to eye rolling automatically. So instead of being frustrating and pointless, letting out a bunch of associated and bottled up thoughts in this way actually feels good, and helps me order my own thoughts as well. So I'm not just being polite when I thank you instead; I have these thoughts either way, but actually being heard means more to me than I would have thought.
Version Badge now supports Python packages
Murder rate is one of the best proxies for comparing violent crimes in different countries because it's usually defined more similarly than other violent crimes.

At 1.2 the UK still has higher murder rate than most of its neighboring countries: Germany (0.8), Denmark (0.9), Norway (0.6), the Netherlands (1.1), France (1.1). In that end of Europe, only Belgium (1.7) and Ireland (1.2) is doing worse or equally bad.

The "loads of" EU countries doing worse are mainly some of the new member states from Eastern European, which are much poorer than the UK. Only Belgium and Finland seem like countries the UK would like to compare themselves to that are actually doing worse.
>> Apple has proven over and over again that they're utter crap at online services.

> Yes. They only have the most successful online app and music store service on the planet.

> And one of the biggest backup online service (iCloud) too.

> Oh, and the most popular online computer shop.

> Utter crap indeed.

I really don't understand this argument. The quality of the code powering something is completely orthogonal to the amount of money said thing can generate. As long as the transaction goes through, money can be made. That doesn't mean that behind the scenes it's not a complete disaster.
>I know what you will say in response though - it is only optional for now right?

No! It's de facto censorship. As the game goes the "smart" choice will become agreeing to the censorship while keeping a vpn or something to route about it for fear of having your record requested during divorce proceedings or some thing like that. Maybe for fear the list would be leaked . It wouldn't look good for a teacher to be on the wrong list.

Making it illegal would be one thing but it sounds like this would damage the internet itself in the UK.
Why? Is this law drafted to only affect parents?
One possibility is having it be CG. Under current law that is illegal.
Perhaps if it were a case of a targeted attack I'd agree Identity theft etc doesn't really scale as well as credit card fraud.
Forget "modern" cinema, they should go all the way back to banning stories coming from Ancient Greece:

> Leda and the Swan is a story and subject in art from Greek mythology in which the god Zeus, in the form of a swan, seduces, or rapes, Leda. According to later Greek mythology, Leda bore Helen and Polydeuces, children of Zeus, while at the same time bearing Castor and Clytemnestra, children of her husband Tyndareus, the King of Sparta.

From here: https://en.wikipedia.org/wiki/Leda_and_the_Swan
There are people who don't like sex. They don't think it's right for people to like sex, they think sex should only be used for procreation. I call them sex-orexics, like anarexics, they have a similar attitude towards sex that anarexics have towards food. It's just not healthy.
You know that's actually a lot (a very large lot) better than having the same password for multiple sites (like for example the common three password security levels strategy).

A bruteforcer might find a hash collision, but it's not likely to find the entire string {password}ubuntuforums.org unless it is actively looking for that string.

Granted ofcourse that all websites you do this on store their passwords securely.. if not then you are right, it is a terrible idea :P
Been a while since I read it and, honestly, I wasn't really taking that much notice but I don't remember any forcible or coercive rape in FSOG.
Rather than having a grid on the front page, perhaps a structured table of contents would be more useful?
Through one method or another, sex is still taboo. We can't talk openly about it. It's something that generally happens behind closed doors.

Making this filtering opt-out is a "soft ban". People will have to take that "uncomfortable", "shameful" step of "unbanning" it. If someone watches porn, they've gone to the trouble of getting it unbanned to feed their "filthy" minds.

That's the narrative behind the psychology of this ban being enforced.

The govt. will have a big list of people they can spy on to make sure they're not looking at anything they shouldn't be, and I hazard a guess that the govt. will change their mind on what's acceptable more rapidly now they have a handle on it.

People may find these links interesting:

https://en.wikipedia.org/wiki/Antisexualism

https://en.wikipedia.org/wiki/Sexual_repression

https://en.wikipedia.org/wiki/Libido_(Psychoanalysis)

"It is this need to conform to society and control the libido that leads to tension and disturbance in the individual, prompting the use of ego defenses to dissipate the psychic energy of these unmet and mostly unconscious needs into other forms."

Say... consuming material goods?
sounds like a good idea, haven't thought that much about the organisation.
You'd best post the model number (found on the underside, near the hinge) - you can't just swap out Apple motherboards and expect everything to work, in my experience.

If the data's urgently required, you can probably grab a cheap [PS]ATA-to-usb adaptor and mount the volume on another machine running osx (or linux).

Good luck...
What I'm really saying is, without SSL, site B can MITM site A, and then ports don't matter, because it looks like you're talking to port 80 or whatever the attacker wanted anyway. With SSL, ports don't matter, because you can't run mutually-untrustworthy services on the same domain using SSL. So, with or without SSL, ports don't matter.

Here, let me show my work:

1. All these cross-origin protections the browser uses are basically entirely meaningless without SSL, because you're talking to an unathenticated counterparty. So you've got to assume site A is using SSL+HSTS before a conversation about cross-origin protection even becomes coherent. You've also got to assume that, since site A is using HSTS, site B has to attack it by running SSL as well.

2. Now, with SSL, you can't have two separate sites on the same domain unless they're mutually-trusting, because they would need to share the same cert--and thus both have copies of the private key used to generate that cert. (Unless a CA screwed up and double-issued a cert, that is.) So you have to assume the attacker is now on a separate domain (or using a self-signed cert) for the conversation about cross-origin protection to retain coherency.

3. Disallow connections to sites with self-signed certs. (Browsers already do this.)

4. Do all the cross-origin protection stuff--like not sending cookies--when the domain is different. (Browsers already do this.)

5. You're done, because the previous assumptions simplified the problem.

Your browser's SSL logic, combined with CAs' certificate-signing policies, have effectively protected you from talking to anything running on the same domain as site A, which doesn't also use the cert site A uses. Everything left is either mutually-trustworthy (that is, has access to site A's SSL private key), or has managed to break your SSL stack somewhere--in which case, we're back to the "you're screwed because you're talking to an unauthenticated counterparty" problem.
Rape is sex without consent. Force and coercion are related, but not actually required for rape.
We should all applaud David Cameron for supporting small businesses. Escort services have been in the dump lately due to the proliferation of free/cheap filth; this will finally give much needed boost to the local economy.

/sarc

I'm wondering if a sizable number of the public is brave enough to get their names into the opt-in as a virtual "I am Spartacus" and two fingers to Cameron.
Beyond redefinitions, it turns out people are really good at creating codes. The french Argot was such a code, designed by thieves and criminals. It created a whole new wealth of dangerous words. Instead of Internet search tracking, they feared eavesdropping.

That law is pointless. You're supposed to use Internet searches as bait as long as it works, not force criminals to create a new language immediately! There were paedophiles before the Internet! And I question the idea that porn makes children go paedophiles to begin with, which I understand this "Think of the children" argument builds on.
Indeed, I read "worse" instead of "worst". My bad.
Are there any arguments against an opt-in filter?

You'd have to ensure that we don't ask people what the state of their filter is. If it becomes routine for (say) politicians, teachers, nurses to be asked at job interviews/elections what the state of their filter is ("Have you opted in to the filter? No? So you watch porn then.") then you're going to be forcing lots of people to be anti-sex and anti-porn.