skysight-inc/HackerNews huggingface dataset:
Linked Lists in Ruby
A few reasons.

The overarching problem is that you don't really get any feedback about whether what you're doing is right or wrong. For example, no cryptographer would use RSA like that, but that's not obvious just from studying the wiki article. Or from looking at the function output - it does turn ASCII into gibberish, as advertised, and that's where most developers will call it a day.

The moving parts are also treacherous. You're not just going to encrypt a string - someone is meant to decrypt it. Have you authenticated the ciphertext? Are you exposing a padding oracle? Or timing attacks? Are messages susceptible to replay? In crypto systems, these things are equivalent to locking the front door and leaving the window wide open.

In practice, most insecure crypto constructions aren't due to bugs in the implementation of RSA or AES. They're because of developers choosing inappropriate primitives, gluing them together incorrectly, or inadvertently exposing dangerous side channels.

Fortunately, there are libraries that can help. As mentioned elsewhere, NaCl/Sodium and KeyCzar provide higher-level interfaces that can abstract away many of these issues.
All those actions you stated have a consequence for some other than the primary participant.

Killing someone derives them or life, theft of a possession, beating an animal hurts the animal.

Public Nudity may not be comfortable to you but what's the consequence beyond that?
There is a crypto challenge that explains many of the flaws in crypto done not exactly right, by giving real examples / puzzles on how to break the crypto.
See http://www.matasano.com/articles/crypto-challenges/
From a similar position I found scala was the best help professionally. It combines the best of both - lightweight syntax like python, but with strong typing and the java library ecosystem - better still, you can introduce it into a java project bit by bit.
Take a look at Shelling Out Sucks[1] and the follow-up, Put This In Your Pipe[2].

[1]: http://julialang.org/blog/2012/03/shelling-out-sucks/

[2]: http://julialang.org/blog/2013/04/put-this-in-your-pipe/
Why does it have to be Paypal? They've already proven themselves unreliable in cases such as this.
If they modified GPL code, maybe they can be sued to release changes.
Well the structure of the book is supposed to be like a JS Bach song - so in the end, what you get is a combining of all the familiar themes and sometimes it feels a bit repetitive and boring. But if you've read that far, it's worth reading the rest. It's much easier to get through than when you're seeing stuff for the first time and really trying to wrap your head around it.
I think what we need is a public that holds the government accountable to the Fourth.

If you think that the government defying the purpose of the Fourth will be fixed by pushing for another amendment to be passed and then returning to public passivity, you don't understand how the fourth has been "made a runaround".

The Constitution will continue to be treated as something to pay lip service to without substance as long as all the public cares about is having the right words in it rather than the right action (or right restraint of action) by the government. Adding, deleting, or rearranging words won't fix that -- holding people accountable will.
Such an exclusion would be incompatible with the GPL. There are other licenses that do have such an exclusion.
The analogy is a bit leaky IMHO. Gmail doesn't add advertisements to the mails you are sending out. They only add ads to the messages you received and are looking at in your browser. If you don't want to see any ads, just use an IMAP client and you'll get the original message.

In-fact, not altering the mails their users are sending was one of the unique features when gmail launched. AFAIR both Hotmail and Yahoo were altering the messages of their users to include ads.

The part about reading the mail is true though, but on the other hand: Unless you host your own email server, it is absolutely impossible to be sure that nobody is going to read your mail as it is stored on the mailbox server (it also can (and is as we now know) be read in transit most of the time and outside of your control).

As such, I honestly trust Google more than I trust $ISP. Usually $ISP is equal to $CARRIER and those, IMHO, are the personified evil, so I wouldn't trust them at all. But even $ISP != $CARRIER, I still think that the bigger the mail provider company, the safer your messages probably are there (minus government spying, but that works regardless of ISP): Bigger providers are bigger targets and thus have likely invested more in data security and internal procedures to make sure mail isn't being read by humans unless strictly needed.

If you don't want ads in your Google-served email while using the web interface, get a paid Google Apps Account. No ads, very flexible email routing and actual customer support. For $50 per year per user. That doesn't say anything about the data being used for other marketing purposes of course, but, as I said, that problem is the same everywhere unless you self-host (which is reasonably complicated and annoying to do).

TBH when I was running a free email service in the early 2000s I really had to fight the temptation to just run grep over /var/mail and have some fun. I think the smaller the company (it was just me and my colleague back then), the bigger the risk that one unethical person can do serious damage.
Ask HN: Given the Lavabit case should we trust LastPass?
Is LastPass obliged to transplant a hook for master password grabbing whenever NSA makes the request?

I find it hard to believe that there has been no such request and something tells me it's easier to install a hook into every LastPass browser plugin downloaded.
Learn AngularJS this weekend
You can increase the quality of HN threads by replying to such "paranoid" comments with a counter-argument instead of complaining.
Given that the email is encrypted, the FRA laws don't really matter though, right?

The question is rather if the Swedish authorities can coerce them into handing over their data (including gagging them on even letting people know it happened) like in the US.
Makes sense there would be a MILSPEC for blinking but avoiding seizures. If you have an LCD that can only show blank or numbers, the only visual way it has to warn you about something, like a number being too high, is to blink.
What do you mean with "by targetting an os which, to a very close approximation nobody uses"? You mean nobody uses Linux for development? That's a comment which really doesn't have single point of truth. At least i would except some sources that backes your argument, which you dont't have. Shame.
> I was surprised how much depth there was in Foucault's work, despite his reputation as a fudging post-structuralist.

While I want to make some snarky comment about how maybe this tells you what you've heard about those 'fudging post-structuralists' is incorrect, what I'll say instead is that out of that group, which, incidentally, he did not consider himself a part of, Foucault is widely considered the least-fudgy.

Consider Chomsky, for example: his (silly and vapid, in my humble opinion) beef with many continental philosophers basically excluded Foucault: "I find Foucault really interesting but I remain skeptical of his mode of expression." I highly recommend watching the debate between the two of them: http://www.youtube.com/watch?v=myy3vL-QKI4 (and the five-second summary: http://www.youtube.com/watch?v=-0dM6j7pzQA )
OpenPGP encryption email, based in Switzerland
On the tests where Java was much faster, the Python solutions took minutes. Compilation would not be a big deal compared to that.
> Facebook seems more vulnerable by the day.

Why would you say that? I'm just curious.
> most of their product development treads on or over the privacy line of their customers.

I think most people now understand and have well-embraced the idea of "if you don't pay for a product you are the product." Given the relative odds of being injured or killed by a terrorist attack, it's debatable if any utility is gained from giving up your privacy to government.
if you think its all about fulfillment centers, Walmart has a pretty incredible logistics operation. The big brick and mortar companies have warehouse operations as well. Plus, with Sears and Walmart already using their stores as fulfillment centers its not hard to see that some of that brick and mortar space will get converted to 'fulfillment' centers (I just call them warehouses).

So then ask yourself, is warehouse capacity going to be constrained? Or will there be lots of warehouse space and lots of people who can create a web frontend to pair with that warehouse space?

Look, I love Amazon, I'm just telling you the 'low cost provider' wins thesis is one that people repeatedly get wrong because the low cost is often due to a technological advance that results in overcapacity in the industry.
No, and at least on the GPL, this is by principle. Free software, as proposed by the FSF, is agnostic to these issues by design.
MongoDB for Node.js Developers Class
Google Now: Scotland's National Animal is the Unicorn
FYI, this might have gotten more eyes as a comment on one of the (fairly numerous) Tesla-related submissions here. A submission needs several upvotes within a half hour or so of submission to make the front page, or it sinks without a trace. And text submissions, IIRC, take more --- the front-page ranking algorithm isn't fully disclosed, in part to make things harder for the people who keep trying to game it, but I believe text submissions do get a penalty compared to those that are just a plain URL.
Client-Side Dependency Management With Bower
Hm, I'm confused now - maybe my sentence wasn't clear enough.
What I wanted to say is wether he realises that the blogpost was written in the future (2 years from now)..
Ember Routing: The When and Why of Nesting
A low latency uplink without a single point of failure is another major problem too.
At 15 I was writing business-plans, I attended a young-entrepeneur event held by the BBC and was selected as a finalist (nothing came of it). I also worked for my parents.

So, there wasn't much opportunity to learn the lesson that scumbags are out there and how they might abuse you as an employee. Also, I wasn't very street smart and a bit of an introvert.

It took time to learn lessons like this, it took time to learn how to be an extrovert. I could explain all of these thing but sometimes it's just easier to say "I was 20 and stupid".

By the way, I'm pretty sure we will all carry on learning throughout life, up until each of us dies hopefully.
Indeed. All of the crypto providers seem to be running into problems faced by the Allied militaries and security services as far back as WWII.

Even when Japanese Naval codes were unbroken, the U.S. Navy was able to provide Adm. Nimitz with valuable intelligence on Japanese fleet movements and concentrations by using nothing more than traffic analysis.

Now imagine that computers can automate traffic analysis and what that can bring, encryption or no...
> the threat of global conflict in this day and age has dimished but the cold war mentality has persisted

This is the problem at the bottom of the whole thing, Why do we have a Cold War sized NSA, or bigger, when we can look out decades or even centuries and see no totalitarian threat on the scale of the Soviet Union, and today not within three orders of magnitude of the Soviet Union? Nobody is occupying half a continent. No columns of thousands tanks are poised to invade. No multi-megaton hydrogen bombs are aimed at our cities.

The only threat this weapon is aimed at is the people.
Omni, reboot: an iconic sci-fi magazine goes back to the future
Hey simonw, author here. Thanks for reading. TechStars Boulder currently pays $6,000 on a three-month contract. It's certainly not financially attractive, but it's a good experience if you (a) want to get into Techstars someday or (b) Want a job with a promising startup and/or (c) interested in making relationships with smart, well-connected folks.
That photo is a reminder if actual real problems, and quite big ones at that. It is not a mere play to emotion over logical reasoning.
I don't think it'll work.

The NRA & the gun industry have successfully marketed a product, and the NRA has successfully marketed itself as the means of protecting customer's rights to that product.

Note, the NRA doesn't have to be the one that markets gun ownership as a positive - that can come from any number of sources, inside and outside of the gun industry. The NRA just has to give the image of being the political outlet to protect that right. Thus the media and/or possibly the gun industry can throw gas on the fire to show that guns are a necessity of American life and in turn because of it's perceived credibility on the issue people vote according to what the NRA says.

Now, presently I don't think either the NRA or the industry really has to do much work marketing guns. All they have to do is hold back the tide whenever a tragic event happens and forestall action when the willpower to change is present. Then, when election season rolls around, they just remind their members how to vote.

In the case of privacy there is #1 no product, and #2 no clear "defender" of our right to privacy. Further, given the nature of privacy, I don't think there will ever be a clear product or defender for/of that right. Without that, there's never going to be the approach that markets the product as a necessity or a group people will pay attention to when voting.

Just think about the ACLU - part of their mission is privacy. But yet I'm sure half the people who care about internet privacy don't even like much less trust the ACLU. EFF - majority of the population hasn't heard of them. It's just too sensitive of an issue to have a blanket organization representing everyone's interest.

Finally, as a side note, I think I would pay for an email service like this: free email, with conditional payments. Whenever the service receives and refuses a government request, it charges a very small fee (couple cents or even a penny - will wait till x amount has accrued before charging card). Then in turn, the payment fee goes to the campaign of a pro-privacy candidate or organization like the EFF etc.
I think has more to do with having 5 million members. Just for comparison, the ACLU has 500k.

If the EFF had 5 million members, we could throw our weight around too, but for some reason they don't have membership, only donations.

http://en.wikipedia.org/wiki/National_Rifle_Association

http://en.wikipedia.org/wiki/American_Civil_Liberties_Union
this was about following up.

if you ignore his calls, you'll never read his emails anyway.
You don't actually have to sacrifice the runtime entirely anymore; since the runtime is written in Rust you can just start it manually if you want. Making this smoother is a priority. (Brian mentions this in the email, regarding #[start].)
The idea of clothing isn't quite universal, but nearly so. Still, we're something of an outlier in how serious our nudity taboo is. As far as I can tell most cultures are ok with women going around topless and most think that it's ok for men and women to see each other naked when bathing, though I guess Hollywood is changing that.
Session negotiation in silent phone is P2P, it's a ZRTP session with keys negotiated by DH exchange.
It's worth pointing out that you don't need to work "for the NSA" to be contributing to state surveillance. If someone is hired straight out of college to work for any type of cloud services provider with revenues over a billion, it's probably safe to say that they your prospective employer has enough market reach to have attracted the attention of state surveillance programs. Of course, by law, your prospective employer would be required to lie to you about involvement.
I think it is also very sad, that the things that KGB traitors did tell western people that KGB do, people don't believe, maybe because it worked as KGB intended (search around for Yuri Bezmenov interview... amazing)
Agree and if anyone else has any information on how we would go about combating this patent please share it.
Interactive 3D Viewer for ILNumerics
Does the NRA misrepresent its numbers?  (Jan 2013)
Sure they could.

They could also spend billions buying every block of lego to create a Yahoo logo visible from space. Which makes about as much sense as introducing significant legal risks to their business all for a few thousand new email accounts.
You can't declare that they're not fighting because you have no knowledge of what is being done by their lawyers and lobbyists, especially since the courts involved are secret.

Lobbying scales better than shutting down or suspending service.
China blocks lots of western web sites.
Seeing naked people in public hurts most people.
Yes, but keep in mind if you open it to the public you inherently open it to all the public (incl. the police).
Most people won't bother compiling from open source.

We need a trusted company outside of jurisdiction of all these insane new laws.
> The replacement had to be open source, secure, no metadata leakage and as easy to use as email is today.

This actually sounds a lot like BitMessage [0], although it's not completely trivial to setup, since you have to setup a not so user friendly address and such.

[0] https://bitmessage.org
While I'm very appreciative of the contributions Apple made to the web with WebKit, most of the recent innovations and upkeep has been thanks to Google.

What is the future of WebKit now that Blink has been introduced? Will Apple spend considerable resources keeping an open-source project at the bleeding-edge considering it doesn't really make them any money? Should Safari just be scrapped? It only accounts for < 4% of the market share of non-mobile browsers.

http://en.wikipedia.org/wiki/WebKit

http://en.wikipedia.org/wiki/Blink_(layout_engine)
More info and papers can be found here:
http://www.research.ibm.com/cognitive-computing/neurosynapti...
waves and sea snakes:

http://knowledge.allianz.com/environment/energy/?246/sea-sna...
Thanks for creating Selenium hugs.
Hmm, tech industry won't care until it truly affects the business. The more direct the better. After listening to Jared Lanier, I feel convinced that if the companies holding private information had to pay to obtain it, they'd be much more involved in privacy protection as it is a form of asset protection and it would be that much more obvious.
Right now the publicity--the "Yahoo! is doing something new and interesting and helpful" is exactly what I'd want to see as a shareholder. And as an employee. And as someone with a Yahoo! login. Keep in mind that Yahoo's old enemy at this point is the idea that they are doing nothing new, nothing interesting. This feeling is what necessitates the acqui-hires and leads to new CEOs and low stock prices.
So your problem is that the country doesn't treat people as guilty until proven innocent?
Father and son found in Vietnam jungle after fleeing the war 40 years ago
Cory Booker's Internet start-up Waywire expected to fold
You are right. General population doesn't care. But the vocal minority includes some of the best minds in engineering. Yahoo gain's their respect. Some of them will join Yahoo and go on to make products for the general population. I'm a shareholder and I like this move.
good for him. hope he's worth it - founders rarely work well within a corporate environment where suddenly you have people managing you.

looking forward to him exiting in a few months/years, then doing something new and cool. should have enough fuck you money by then.
Some malls are dying, some are thriving. Antidote is not data. There is one mall I've gone to the theater in a few times in recent memory, and it is swamped, I've almost get run down by shoppers at all times of the day, weekdays and weekends. Parking takes a long time to find. That's the only time I would go to that mall. I'd never shop there. Way too many people, only the theater for me. I've also been to dying malls. I've seen a few of them die over the years and are now dead.

There are so many places where malls are thriving. A few years ago, I used to live in a different city, and at Christmas time I'd have to take a different road to work, because just driving by the mall made my commute twice as long, if not more because of the traffic. On a weekday. Taking the long way was much quicker.
Agree for Minecraft, it has definitely "lags" to an extent that there are a lot of forums discussing how to tweak the configuration to improve the performance. The lags are very disturbing and I think it has to do with memory management because it sets in after some time of playing.
What is your point exactly? These numbers don't mean anything in an investment point of view. You can't compare them.
Silent Circle Kills Encrypted Email Service
Drone delivers beer not bombs at S.Africa music festival
This is an issue among programmers and technical people because it affects us politically and monetarily. Who wants to use SAAS (aka Amazon, Azure, etc), when security is compromised? Why can't I trust Google, Yahoo or Microsoft? Why should I build any services or web sites when they can pulled/compromised just because a certain user or group accessed them or I pissed someone of power off?

Yuck is right. The truth is yucky.
"The truth will set you free, but it's gonna piss you off first"
I'm not sure that formula works as well for retailers like Wal-Mart. The nature of wholesale operations is less labor intensive, and the value of wholesale labor can increase greatly with more experience and knowledge like you're talking about. Compare that to Wal-Mart - 10 years of experience isn't likely to make you a much better employee than 1 year.
"They will attack it based on timing, compression problems, flaws in the protocol, freezing the RAM to extract a private key, etc. etc. There's really no end to the variety of things you can try to attack a cryptosystem."

I will say that in my experience 95% of the attacks are going to be social engineering, less about sophisticated things when the social is way easier.
That they can take your assests without proving any criminal wrongdoing surely tips the balance into police state.
They could, but that doesn't change anything, Yahoo is still US based and can be forced to do whatever they want.
Employee compensation is absolutely not associated with the value of the work the employee does.

Instead, it's associated with the best replacement that the company could find.

If Joe makes $2M a year for a company and gets paid $150k but Steve can do the same work at the same level for $100k, Joe's out and Steve's in. The initial $2M of value doesn't matter, except to lower the chance that a replacement could outperform you.

Cynical and unfair? Sure. That's how it works, though. Start your own company if you don't like it.
Do you know your cash burn rate?
That explains why the guy who made the Facebook Event of 'spook spotting walk' in Brittain after the news that there was NSA personnel working there got inquired about his intentions! Idiots.
I wish I could upvote this more than once: As soon as you see the first signs of unethical behaviour, get the hell out of there. You'll thank yourself later.
What would be truly awesome would be for the general population to login into their webmail account and the entire thing works just the same, they have the same "email address" but somehow as if by magic it isn't using email anymore, but the new protocol. Seriously easy and effective on-boarding.
Wow, awful. If you got to a InfoSec/Hacker Con the people there either work for Govt Contractors, Used to work for the Govt, or work at small companies (that get paid by the govt).

The "Top Hackers" certainly still will work for the government.....Why do you think so many are in DC