skysight-inc/HackerNews huggingface dataset:
Perhaps what he meant was decryptable state?

>What would be the point of encryption if corporation servers can see what you think you are securing via assumed privacy?

Assumed privacy is a myth at best. Corporation servers and people can see everything. For example:

From http://gawker.com/5637234/gcreep-google-engineer-stalked-tee...

In at least four cases, Barksdale spied on minors' Google accounts without their consent, according to a source close to the incidents. In an incident this spring involving a 15-year-old boy who he'd befriended, Barksdale tapped into call logs from Google Voice, Google's Internet phone service, after the boy refused to tell him the name of his new girlfriend, according to our source. After accessing the kid's account to retrieve her name and phone number, Barksdale then taunted the boy and threatened to call her.

In other cases involving teens of both sexes, Barksdale exhibited a similar pattern of aggressively violating others' privacy, according to our source. He accessed contact lists and chat transcripts, and in one case quoted from an IM that he'd looked up behind the person's back. (He later apologized to one for retrieving the information without her knowledge.) In another incident, Barksdale unblocked himself from a Gtalk buddy list even though the teen in question had taken steps to cut communications with the Google engineer.
I don't believe anyone to be infallible (including myself) but I find that my broadly trusting people who've shown themselves to be trustworthy I gain a lot (not having to cover my arse, gratitude from those who I trust - which I've had them comment positively on, the friendships it creates). On the occasions it's let me down it's not come close to outweighing the benefits I had up to that point.

And yes, I've lost my temper twice and will probably do so again but as with those times when it has happened in the past I'll apologise, attempt to repair the damage and move on.

No-one needs to be perfect and unbiased, for the most part your flawed best with good intentions is plenty. If you find yourself working with people who don't have good intentions then maybe the level of suspicion is fair enough but personally I'd get the hell out of there rather than work in somewhere that poisonous - 20 years working has taught me that it's simply not necessary to put up with places like that and that there are plenty of alternatives.
Easy to make magnetic panning GoPro egg timer mount
"Call Me Maybe: Carly Rae Jepsen and the Perils of Network Partitions" [video]
For the price i would say this is a pretty ok deal. the other Digital Audio workstations(DAWs) offer a lot of the same features. I was a protools engineer for a while and some of the things they are touting are far from new and protools usually lagged behind sonar and cubase in raw feature set. I have been punting on upgrading from protools 7.4(5+ years) and m-audio delta 1010lt and 44 for a very long time (10 years). What I want to see is hardware that takes advantage of the huge throughput of thunderbolt or usb3, that allows for higher quality audio and many ins and outs. as far as software Reaper - i havent used it in a year or so - for the price is the best DAW on the market no question.
Not quite. 2^63 is 9223372036854775808, and the max value for a signed 64-bit int would be one less than that. Close enough to wager that the article may have been slightly off.
I'm not being snarky but what gave you the impression it sat there encrypted?

(caveat: I'm not a security expert) Encryption is used for data 'in flight' as well as 'at rest'. As far as I know, very few companies/services go out of their way to encrypt your stuff at rest (it's within their systems/firewall/etc at that point). Even if they did, they hold the encryption keys so can 'see' it anyway.

If you want a situation where a company cannot see your data, you have to hold the encryption keys yourself (nb: knowing the password != holding the encryption key. My rule of thumb for this is if I can do a password reset on a service, then that service can see everything I put into it.)
The problem with that approach is that it allows unjust laws to persist indefinitely. Every so often someone needs to stand up and refuse to play by the rules to ensure that unjust laws are repealed.

Look at the situation Snowden faced. You have a system that widely violates basic privacy rights, based on a secret interpretation of the law, approved by a secret court that only hears the executive branch's arguments and which almost never refuses to grant a warrant (i.e. it is a rubber stamp), with oversight by people who are chosen by the executive branch and who work in secret. These programs, conducted in secret, are widely approved of by the government and widely disapproved of by the general public. Had Snowden accepted the rules and the law, these programs would remain secret and would have continued unopposed indefinitely.

The rule of law does not work when laws are kept secret from everyone. Healthy societies need everyone to follow the law, yes, but they also need for people who recognize failures of the system to stand up despite laws that forbid them from doing so.
LA To NYC In Under An Hour, Hyperloop System Will Let You Travel At 4,000 MPH
Talk about cultural contrasts, I was astonished to read this "news". I'd assume such a simple thing was common knowledge everywhere.
I just wonder how true that is or is it mostly just legacy behavior (we're a country so we gotta have spies, right?).
That is the same exact remote I own, it can use basic functions on almost any TV without the need to program, the shenanigans that occur in my house..
Over the years I have worked for both, much of what the author said is true, there are many things that are great about working for a start up,I would be preaching to the choir to mention them here. The one thing that got left out is the access to resources. Some of the projects I have worked on, just due to the scale, would have been impossible to do at a start up level, they just do not have access to that kind of capital usually. There are some things that are just too big to do that way.
GitHub repo: https://github.com/aphyr/jepsen
Speaker's blog series on Jepsen: http://aphyr.com/tags/Jepsen
JQuery.BlackAndWhite
This plug-in can easily convert any colored image into a B&W greyscale image
Cicada Summer
Libcello has its share of latent macro bugs, but it doesn't seem particularly bad. However, I can hardly think of anything worse than debugging piles of half-broken higher-order C macros written by beginners.
Redhat is probably the biggest contributor to gnome shell
>I hope he is correct that the information that he claims to have extracted from NSA servers cannot be extracted from him against his will, but I don't assume that to be true in the absence of evidence. That's an extraordinary claim, so it requires extraordinary evidence.

Well, assuming that torture is an effective interrogation technique, the amount he can reveal is nonetheless limited by his own memory. It is quite possible that any datum critical enough to present a risk to national security if it were revealed is simultaneously too much for an ordinary person to remember -- e.g. a private key, an organizational plan, etc.

However, I fail to see a distinction between the potential capture and torture of Edward Snowden and the potential capture and torture of any other intelligence operative or official, particularly anyone in the CIA/NCS. Snowden is probably at greater risk of capture due to his notoriety, but this is really all the more reason for him to obtain asylum in a neutral country as soon as possible. If a country such as Germany were truly concerned about this, they could certainly enter him into a national witness-protection program with a new identity, making his involuntary debriefing all the more unlikely.
8. You work on really large applications and projects. This is completely different from working on small projects.
Latvian accelerator launches - takes up to 90% of equity
Back of a Napkin
Slides for this talk are here, too: http://aphyr.com/media/jepsen-ricon-east.pdf
I'm one of the co-founders of APIxChange here to answer any questions if you have them!
If you want the latest Go version on Ubuntu : http://blog.labix.org/2013/06/15/in-flight-deb-packages-of-g...
Google makes big real estate buy in south Palo Alto
I have one of those, and i end up operating the devices directly a lot of the time because it gets hopelessly confused by the matrix of power and input states (admittedly, i have a terrible combination of devices with auto-input switching and power toggling). And the whole line of sight thing is really annoying when you've got a 2 year old running in front of the tv during a complex 20 second multidevice sequence.

My dad went one better, with infrared transmitters taped on the devices operated by wire from a base station with a wifi-based remote. Even that gets confused from time to time, despite literally days of trying to get the timing right.

Until the device makers start cooperating reliable universal remotes are impossible.
EFF sues NSA, calls surveillance programs unconstitutional
Ask HN: Question to anyone who have posted any Show HN
Hi everyone,

I am a very novice hacker, with lots of ideas that I want to implement. So far I have implemented a few ideas, and to be honest, in retrospective, none of them where good ideas.

Each time after I built an MVP, I posted "Show HN" which quickly got lost in the wave of new submissions. Each time, I managed to get only tens of traffic and couple of feedback comments.

Even with the understanding that none of my products I built were good enough to get attention, I really wish I could have received more feedback each time.

To anyone who have ever posted a "Show HN", whether you gathered good feedback or not, What other strategies did you apply to get some quality feedback?

I am seeing way more success in getting feedback from people I know personally with my latest product, but they don't always fit the user demographic. Are there anything else online that can give me some good feedback on my future MVPs?

I really appreciate any suggestions.
A big heartfelt thank you for reading this :)
No, the signature for preg_replace is ( $pattern , $replacement , $subject) . So, given the call as preg_replace($exif['Make'],$exif['Model'],'') it would replace any occurances of Make with Model within the empty string ''. This is essentially a noop unless your exif data contains exploit code.
Alternatives to consider, with TechNet ending
Apple TV market share
There was a recent Angularjs meetup at Google that was basically about integrating Firebase and Angular.

Firebase is a backend whereas Angular would be used on the frontend.
Google is Said to Mull Internet Cable Service
> The only users that even know what it is are the hardcore linux geeks.

Which is what... 90% of the user base?
> "Metadata isn't data", etc.

The argument isn't that metadata isn't data. It's that metadata isn't "yours." It's AT&T's observations and records about your use of their system. That's not "technical jargon." It's a relevant distinction when discussing the scope of a privacy right: whose information is protected? If it's not just information generated by you, but also information relating to you, how closely does it have to relate? Etc.
Back before I became a consultant after about 2-3 years at whatever my current job was I'd start taking a couple interviews every 6 months. This allowed me to gauge the market for what skill sets/tools were being used in my area and also what salaries are offered. I never considered using this information as leverage though, I just left when I got a better or more interesting job offer. Now I consult so I am interviewing every 6-18 months anyways.
It isn't an apology if someone reading it can't even figure out what he's apologizing for, or in fact if he's actually apologizing, or merely saying "I should apologize" and considering it done.

Hell, for all we know this isn't even referencing the original article -- maybe he screwed up in more than one douchey, sexist way today and this apology is for one of the others. :)
Yea, as I said before it is not likely that any of these people have any security clearance at all.
Couldn't agree more. Typical TechCrunch. Nonsense. Should we throw this guy a party or something?

People leave companies to go to other companies. Happens all the time, every day.
A few retorts (I work for Big Tech):

"You see lots of very good ideas (like proper source control)" - you mean the group that still uses VSS 4.0 on a network share b/c they're terrified of moving their repo to Git (or even SVN)?

Unsurprisingly, companies that have millions of lines of code have to take extra precautions.

"You get to work with lots of clever people" - no, you get to work with people who work there for no reason other than they live close to the office and have spent the last 14 years building an impenetrable fortress around themselves.

This is a lazy dismissal.

In reality -- lots of smart people work at big companies and small companies. That being said, big companies will invariably have more people dedicated to research than startups. Microsoft Research alone has over a hundred people just doing brilliant things.

"They have lots of perks" - Yes, that one day a year I got to donate $5 to cancer research so I could wear bluejeans (collared shirt still, of course) makes it all worth it. I'll take my catered breakfasts, lunches, impromptu beer runs, work-from-anywhere policy and unlimited vacation days, thank you.

Again, this is lazy and untrue -- unless you want to say that Facebook and Google's perk packages are about wearing bluejeans -- but I think playing the perks game is silly anyway. Distilling things down to money (with some exceptions, like WFH) is always the smarter way to go.

---

Personally, I think the biggest difference working at a big company vs. a small one is that of depth vs. breadth. At a startup, its not beyond the realm of possibility to understand the majority of the code base: you'll be wearing lots of different hats, doing lots of things at once. At a big company, the organization is usually such that you'll spend your entire employment working on one little niche -- this has its advantages (you become an expert at that one thing) and disadvantages (you're only an expert at that one thing, after all).

Personally, I can't imagine why someone wouldn't want to just spend time at both types of companies and see which one they like more.
I know you're asking these questions rhetorically, but for those who don't know, Instagram usage exploded after the acquisition and the consensus in the Valley is that it sold to Facebook for incredibly cheap.
Some of the things I learned at big companies:

- Process is not the enemy, inefficient process is the enemy

- Project Management makes a huge difference

- Technical people make for bad managers

- Communication is critical, ego only creates conflict, learn to pick your battles, don't sweat the small stuff: how to deal with your work and other human beings

- Perks are the last thing you should worry about

- When nobody cares, everything turns to shit

- Not centralizing/simplifying management of resources makes everything take a lot longer to get done

- Salaries are arbitrary and 2 weeks of vacation is total bullshit

- Health insurance for non-corporate people is expensive

- Unless you want to fix the same problem twice, do it better the first time
I have never been disappointed to see how my contributions to the EFF are being spent. I have just renewed my membership for the second time in less than a month and am thankful that I am fortunate enough to do so.

I understand that not everyone who wants to contribute is able to do so, financially. If that's you, please review the EFF's list of "Ways You Can Help EFF" (without spending a dime): https://www.eff.org/helpout
It takes women working on games for games to change.
I don't even know what an Arpeggiator is, sounds cool though.
Uh what? If a site lets users upload photos and puts their uploaded content into a preg function without validation, they are indeed vulnerable. However, just loading the exif data is not enough to trigger this.

Putting untrusted input into a regular expression pattern is something you shouldn't do in the first place (even without the /e modifier)
Erm, no. It's actually quite easy, if you're prepared to do a little more work.

You just create a search index before encrypting the data. Then you encrypt the index. Each time you need to search, you decrypt the index, get a reference to one or more results, fetch those, and decrypt them.

That's trivialising what can become a pretty complex scenario, but it illustrates the point.
Use the invite code: EARLYACCESS to get into Blend.io.
The most important feature for me is Retina support, no other DAW has been updated for Retina displays yet.
The tick problem in the Northeast USA seems to vary wildly every year. I've lived here my whole life (31 years, in the southern New Hampshire area) and I've seen tick populations fluctuate drastically from one year to the next.

A few years ago it was particularly bad: I went camping on my dad's land in northern New Hampshire one weekend and we had literally a dozen ticks crawling up our legs within five minutes of arriving. When I awoke in my tent the next morning, the outside of the tent had dozens of ticks clinging to the outside netting, trying to get in. It was impossible to walk anywhere without getting several ticks on you. None of us, including my dad who has lived here 60+ years, has seen it that bad.

In contrast, we were up at the same area a few weekends ago and we spent three days walking through the woods, camping out, and wearing shorts the whole time. The three of us had a total of 2 ticks the entire weekend.

I'm very curious to know what's influencing their numbers.
I've tried both. I considered Laravel far superior / simpler. Wasn't even close.
That's funny, I was just thinking, "I would love to be well-known enough one day that my switching employers would make the front page of HN."

I hear you, though. To me, it matters a lot what I think about the "celebrity." Christopher Hitchen's becoming an American citizen, for example, felt like news to me because he's a thoughtful, worldly person who presumably considered his decision. If Russell Brand became a citizen, though, I wouldn't care and would just presume it was for tax reasons, or a joke, or whatever.

Considering that I haven't heard of Tim Van Damme before, I'm inclined to agree with you and consider this gossip.
"because nobody cares that Linus can be a meanie"

The thing with being abusive is that people won't actually tell you what they really think.
Think sideways
This is right on time. Currently working on a site that makes use of multiple cards per customer. Great job, once again, Stripe!
If you're generating some truly-random "password", I'd call it a key instead. Just a minor terminological note.

Anyway, while that split-the-key scheme works, I wouldn't use it over one of the real secret sharing schemes cryptographers have developed, e.g. Shamir's secret sharing scheme [1]. If you just split a key and give pieces to different people, the more pieces of the key an enemy can collect, the easier time they will have when brute-forcing it.

On the other hand, Shamir's secret sharing scheme is an information-theoretically secure threshold scheme. That is, a key is broken up into n pieces and t of those pieces are required to reconstruct the secret. In Shamir's scheme, the enemy can collect t-1 pieces of the secret and still have no chance in reconstructing the password; it simply is impossible.

The scheme works off of the idea that an m-degree polynomial is uniquely defined by m+1 points. For example, here's a point from a 1-degree polynomial (line), which would model a t=2 scheme: (1,4). Can you figure out the y-intercept? (Actually, Shamir's scheme uses finite fields, but I think asking this question drives the point home.)

So, generate a key, split it up into a bunch of pieces, and require a threshold of those pieces to be present. Coercion-free and even if an intelligence agency can compromise many pieces, they still can't do anything until they've hit the threshold. Also, if you want to require all pieces present, just set t=n.

[1] https://en.wikipedia.org/wiki/Shamir's_Secret_Sharing
Google Glass In The NFL
Similar suggestion to what's proposed here:

http://www.schneier.com/blog/archives/2009/07/laptop_securit...
Keep an eye on logitech's special offers section. I got a harmony at 70% off.

http://www.logitech.com/en-us/special-offers
WOW. The Harmony One has doubled in price since I bought my (two) in late 2010 for $159.99.

Now that I've moved houses I've got a spare one in the basement. I guess it's time to craigslist that bad boy.
First impression is that you may be a great engineer, but you need a great designer if you want to sell your book. I'm still interested in the content, but it's a definite turn-off to see a site that looks like something I designed (aka not good - references available upon request).

Somewhat related, there's a 914kb 1007x1024 black-and-white PNG for a 197x200 image of the author. That should probably be fixed, if for nothing else than it's killing your bandwidth. I only noticed because I thought I was back in dial-up days with how slowly it came through.

All of that aside, I'm intrigued. I'm going to bookmark this and come back in a couple weeks, I'll have to see how it looks after you've taken the other comments here on HN into account.
"Some aspects of Snowden's story do NOT look like a thoughtful plan to defend freedom and fair play around the world, but rather a haphazard rash move by Snowden to see what he can get away with."

I think you're enormously overestimating the capacity for planning that any single individual could be capable of. Jason Bourne exists in the movies, not in real life.
Yet he flips out when people use harmless little words to criticize him for being a huge prick.
The one thing that has always kept me from Live (and this probably applies to .001% of DAW users) is last I checked it doesn't support score based composition. To me the easiest way to visualize my music is good old-fashioned 350 year old notation. My process is to compose by dropping notes on a staff, then either tweak the MIDI (to sound less mechanical) or re-record tracks live, after the composition phase has completed. In the past I have found three apps that handle this well: older versions of Cakewalk on windows, Opcode's Studio Vision Pro (tragically murdered by Gibson--something I'll never forgive them for) and Logic. I tried Digital Performer, and could never get the hang of their score view. I've also tried composing in Finale, which has great note entry, but lack anything further. I'm hoping that LPX doesn't munge the note entry too bad.
It's currently very simple.

The mobile app is just part of our main web app. We use the same models and controllers as our desktop views. We have separate markup, different bundles for mobile JavaScript and CSS, and separate view models[1].

[1] http://warpspire.com/posts/mustache-style-erb/
Thanks for that clarification
One cannot, of course. It would be somewhat fatuous to be surprised that exercise makes one stronger, when it has been advocated for thousands of years as the (only) method for doing so. This is as true of mental exercise as it is of physical.

It is not typical of our community norms to downvote reasonable arguments you disagree with. Just FYI.
This looks great, I'll look into it.
See, for example, the bogus "vaccination campaign" conducted in Pakistan by CIA operatives in an effort to locate family members of bin Laden and his known associates.

For the government, the ends always justify the means. It's part of the fun of being totally unaccountable.
The Perfect Logo Design For Your Blog To Boost Your Business | Onenaija Blog
Well done guys! Having played with it early on, I can see that you've done a lot to make it even easier to use. I love the custom metrics too, we'll be looking at how we can incorporate some of our info into our page soon.