skysight-inc/HackerNews huggingface dataset:
> To make a long story short: very old versions of http_parser were based on a Ragel grammar but the handwritten version outperformed it by a significant margin, as in over 10% fewer branches taken.

> Ragel is great but it can't take shortcuts like a human programmer can and once you start jumping around in your grammar, things become complicated fast (and impossible to debug.)

https://github.com/joyent/http-parser/pull/156#issuecomment-...
When you think about totalitarian internet monitoring, like the one the US seem to have, there's almost no point aiming for anonymity. Almost all sensible means are broken when you have deep levels of traffic interception in many countries.

The Tor Anonymity Router mentions the types of monitoring they attempt to subvert, and mention that full internet monitoring is not one of their design goals. This is simply because with any low-latency system, correlation between the entry and exit can be obtained. Similar attacks exist for networks such as Bitcoin for similar reasons.

> But what journalists who need to communicate more anonymously that that used pseudonymous PGP keys - one per story

In this case you run into troubles with authenticity. Without persistent keys being authenticated in some way (see "web of trust"), there's no way in telling if the person is communicating with a government proxy or the real target journalist.

That's the issue with the "encrypt everything" mantra, authenticity is stupid difficult to verify.
It's important that the author of nanomsg is also the author of ZMQ. One can see nanomsg as something built on the lessons he learned from ZMQ, assuming he can avoid second-system syndrome.
Why even early stage startups should have in-house recruiters.
The government has always been the terrorists.
i'm pretty sure the real reason for C is that the author is just more familiar with it (which is a fine point imo)

now there's other things i'd criticize, like nanomsg is a trademark of the company.. so if you repackage it i'm suspecting you have to rename all the stuff, for example.
What about waiting for something drastically bad to happen? That'll wake people up, won't it? I think the issue here is that the US populace on average is much too complacent. People don't "care", they don't see how it affects them, etc.
Absolutely. I quit my well paid job for a bank in 2006, as the stink of corruption was too much for me - and quit by just walking out one day, and not coming back. 'lo and behold, banking scandal and collapse, not long later. Fuckers I'd been working for had been hiding $bns of bad debt by shunting it into a director's name every quarter. SEC nabbed 'em. I spent several years broke, getting my own outfit off the ground. Means I'll never work in that industry again. Good riddance.
It would have been nice to have a small paragraph at the beginning saying what this tool actually does. That helps people who want to quickly evaluate whether they want to read more about this tool.

I only see "a fast memory error detector" at the top.
The point of intrusive lists is to allow access to the link when you provide only the contained object.

The way you're thinking of would theoretically work, but you'd have to make sure the compiler isn't adding fancy padding that would break your pointer manipulation and type casting.

boost::intrusive::list on the other hand, works in a type-safe manner by having your class either inherit a list hook, or provide it as member and then pass the list implementation a member pointer as template parameter so that it can be accessed.
Hm, didn't nginx do something similarly "ugly" for a while? Like inspecting the (completely making it up here) second character to see if it's 'E'?

A quick look now suggests they are using a parser generator now.
> While I understand his personal reasons

pj = Pamela Jones

But yeah, it's devastating -- especially when it comes just one day after a editor of the Guardian states that they can no longer report on certain topics from London.

It seems like we need entirely new communication protocols.
100 Beef Aminos 400cp Universal
It's just non-feasible. Freenet is a distributed file/web database, not realtime internet.
Yes, it's this one:
http://en.wikipedia.org/wiki/File:Connector_USB_3_IMGP6033_w...

The socket is compatible to normal Micro USB plugs while the plug is not.
From the way he presented it, I would be very surprised if there was anything specific that cannot be told.
How to Parse URLs with JavaScript: the The Easiest Way
On OS X and iOS there are two different kinds of progress bars. Normal progress bars and indeterminate progress bars. Normal progress bars are used when you know the actual progress. Indeterminate progress bars are used when you don't know the actual progress and you don't know how long it will take.

Here is a video showing an indeterminate progress bar:

https://www.dropbox.com/s/mko66awdbwy6xzu/pb.mov
How will that solve the problem? Great, he'll have a wallet full of bitcoins. How many vendors in Palestine accept them as payment for goods & services?
USB 3.0's highest speed (termed "SuperSpeed" to easily separate it from the previous, equally clearly labelled, speed grades "LowSpeed", "FullSpeed" and "HighSpeed") requires more pins than USB 2.0 speeds, so the connectors are different.

Here's a link, picture of USB 3.0 micro plug on the right: http://en.wikipedia.org/wiki/USB#Cable_plugs_.28USB_3.0.29.
Wall Street Banks Put Profits before the Interests of People
JP Morgan’s latest price manipulation scandal is just one more example of a corporate decision that puts profits before the interests of people. Will the fraud ever end? Given that there’s a fervent drive for profit, it will not.
Show HN: Visual Bugtracking Reinvented
> All tech geeks set up mail servers with encryption and volunteer to migrate their non-tech friends and family to new email homes.

I certainly wouldn't be comfortable with my peers having the opportunity to control my email and the myriad of accounts associated with it. I can't imagine they would be happy with me doing the same with their data.

> We also show how to configure encryption in their mail clients

Encryption is fairly useless without authentication, and we can safely assume that the NSA has control of Certificate Authorities.

> Think about it. There are enough tech geeks. Every geek should need to know how to do this anyhow. This will scale.

I've been battling with the concept of hosting my email for quite some time, and it always boils down to being a horrific thing to set up. There's a pile of easy ways you can screw up and make something insecure or spam-ridden. I spent a good day trying to put together a solution I was happy with, but couldn't.
I know he wasn't technically entitled to a lawyer but he was offered one (according to the Guardian's own report)

While the security services may have over reacted the Guardian doesn't appear to be telling the whole story.

Why didn't the Guardian say OK, take us to court when they were threatened for example.
> Lets not try to code our way out of this.

I disagree. Let's use all our skills and avenues, not just some of them.

> We succumb to terror pushing away meaningless bits of code on Github as a crypto projects in response.

That is a subjective opinion. Email itself is meaningless bits of code. You want us to stop using email altogether? What about the web? Why are you even posting on this forum so?

> Some projects flourish sure but the same forces that profit off the court-less killings of others are collating your data, your pet projects. Harvesting your stolen info out of botnets.

That is alarmist hyperbole.

> Giving you a salary for technician work keeping infrastructure ticking.
Enough enabling the beastly mess that is privatized 'national' security. The payments to infrastructure providing companies for data access. The kidnapping/torture/drone fire of others when technological routes don't work.
If you have a career with Dell, AT&T, Booz Allen Hamilton, SAIC, and many others, start making demands or make resumes. Stop being complicit.

Dell? A computer hardware device assembler? What on earth are you on about. You appear to think that the entire info-tech infrastructure, companies and "wage-slaves" alike are complicit in all this. Computers are a kind of tool, you can use them for beneficial, neutral or nefarious means. Let's keep the spotlight where it is needed -- on the secrest out-of-control governmental surveillance organs of various nation states.

In short. Think a bit before you post and spare us the melodrama.
It's not like the author just made this assertion out of the blue, he previously made 2 posts about the issues he had having used C++ for ZMQ: http://250bpm.com/blog:4 http://250bpm.com/blog:8
But will that amendment be passed in a country like this... ?
Happened to me as well, developed a website for a client and they started to get that malware warning on a specific page.

there was absolutely nothing special about that page except the content, I noticed that the content included words like "Visa, passport, license etc .." so Google classified it as a probable scam.

after a few submissions, I think the page got whitelisted.

its very annoying indeed, especially that this functionality is now built into the primary browser.
Extra indirection is needed when the objects are non-assignable, e.g. if there's a thread running inside the object, if it owns a fd or similar. std::vector has O(n) complexity for a lot of operations, so it's not an option.
In one of the linked blogs, he implies that Windows OS uses MIT licensed software.

Is this true? Do windows 7/8 have any lists of open source software projects that they incorporated into the operative system? It sound as a really interesting read if such was the case.
That still leaves the metadata exposed. to make this effective, you'd have to come up with something sort of like SMTP and something like Tor.
Since we weren't allowed to say it when it was relevant, and the point was muddled and trampled on in pseudo-rational debates (“Can you find evidence that they’re abusing this new legislation?”, etc.), I'll go ahead and say it now: it's happening.

There's still a big world outside the Internet, and yet ironically, we live in a world where some employers are so stupid that they won't hire someone without a Facebook, making the abuse and surveillance of Internet more relevant than it needs to be.

I find it hilarious that in most of the threads I've read on here for months, that people who have actually lived in oppressive regimes say that the US is at least displaying a likelihood of being on the slow descent to Hell, while people in the US are quick to point out that it's still fine because we have elections and we aren't being forced out onto the streets and shot in the back of the head.

Read any book on history, strategy, authoritarianism or "real" conspiracies and it's abundantly clear that the best way to control a population is to analyze and manipulate the information they consume; I will not be surprised when we find out in 30-50 years that the tech companies were not only complicit in passive surveillance, but in active manipulation to control public opinion and perception.

Further, people self-actualize and learn to evolve to higher ideals, so once you debase intelligent debate/freedom of expression and make every personal detail of a person's life that passes over an electronic medium open to dissection and survellience, you debase the minds of the people as a whole and open the door to committing worse atrocities.

It's actually less difficult than it was 50-100 years ago to control public opinion. Before, you'd have to burn books and control every major newspaper and broadcasting corporation. Now you can just astroturf on Reddit or Twitter, or edit Wikipedia is subtle ways, and have the same effect.
> we need entirely new communication protocols

Whole new enforcement of privacy laws, you mean?
Holy crap. Groklaw? I'd never for one second thought that the fall out from the NSA debacle would reach so far as to cause Groklaw to be shut down.

PJ feels extremely genuine here, she is definitely not using this as an excuse.

Wow. There is something very unhealthy in the air or in the water these days. Lots of people seem to be totally immune to the consequences of rampant surveillance and frankly bizarre powers executed by the current set of governments. And all that in the name of the war on some nebulous entity that could not even capitulate if it wanted to (and that's assuming such central command and control even exists).

2013 is fast shaping up to be a year of notoriety, so many things happening in so many places that are all linked to governments overstepping their powers.

Who would have thought 20 years ago that we'd see US whistleblowers hiding in Russia of all places. That there would be meaningful comparisons drawn between the Russian government and the UK government when it comes to dealing with the press, that we'd see torture committed by the people we routinely thought of as the good guys.

It's a weird world we are living in at the moment.

Since comments are turned off there:

Thank you PJ for all the extremely hard work and the dedication. A lot of good came from this, I'm quite sure that there were some cases where both the plaintive and the defense were spending as much time reading groklaw as they were reading their email. It certainly counted for something.
Same here. Also I find it much more difficult to insert the micro plugs. I'd like to know the real reason for the change.

After all, RJ45 plus are notoriously bad, but no one has ever changed them in decades.
Language barrier or not as far as i know code is still written the same way.
The least the Facebook guys could have done is ask for details not just reply this is not a bug.

And once you fix a bug reported by someone you don't get to deny their bounty. The best you can do is complain about the methods used to demonstrate it. You're not in a position to fk with hackers we are ultimately the ones helping you.

We have something that is ultimately more valuable on the black market that Facebook are paying us so they should be handing out bonuses not stealing what we earned.
You're right. I didn't read the article but I bet someone already replied and started a sexism chit chat to nowhere land.
Lets try to code our way out of this.

Crypto sucks hard for beginners and it's pretty much in diapers.
The binary mindset.
I have said this on HN several times, and I will say this again. Dragnet surveillance of private digital correspondence by the US and other governments is wrong, and a gross, unjustified, overreaction to the real threat of terrorism.

And yet, when taken as part of the whole picture that is the internet, government surveillance is little more than a drop in the ocean. While governments may collect a possibly significant amount of correspondence and analyze some of it, almost all online data, e-mail correspondence as well as photos and documents, search history, browsing history, our physical location, the driving, running and cycling routes we take, the busses we use and more, is constantly collected, analyzed monitored and used, all day every day, by private corporations. These corporations are even less subject to oversight than any democratically elected institution, and their employees are less carefully screened.

Government surveillance is wrong, but at least it raises an outrage that, in time, is almost certain to bring about change. Corporate surveillance is a more dangerous beast. It employs manipulation and deceit rather than plain-old secrecy, and worst of all – it causes little outrage.

Some have compared the current state of things to George Orwell's Big Brother government, but those who've read the book know that Big Brother does not rule through secrecy and intimidation. Big Brother is never mistrusted, never hated, and never feared or suspected. People subject themselves to his control willingly. Big Brother is loved. That is how absolute power is gained. And that is why a democratic institution has little hope of ever attaining Big Brother status, especially in America where any government is automatically suspect. The real danger to our privacy and our freedom, the true potential Big Brother and the danger that dwarfs any government surveillance online, is Google, Facebook and their ilk.
What's the point?

Python is slow and soon to be dead. Go is just like Python and backed by Google. Node.js isn't as good as Go, but everyone already knows how to use it.
He's not shutting down to raise awareness, but because he feels unable to conduct the blog without feeling his communications with his readers are private.
OpenTechSchool announces Hackership: a Hacker School like program run in Berlin
Email does not have to be real time.
Encoding your own mail means that you are playing by rules of the game NSA has set up. The only way is to make your own game and make them play by YOUR rules. If you encode your communications there is a barrier that they will break down directly by making you disclose the keys while threatening with Tax audits, jail time etc. Or by breaking down encryption commications. They are the largest employer of IT/Security/Cryptographers on the face of the earth.

So the only way to do this is to make them not play their game.

Frankly whole cancerous security apparatus has been fueled by privatized sector just like the one with privatized jail system.

Sad to say this but there only way I can see this being resolved is political/etc. Start websites cover the stories. Find methods of figuring out whether they are listening to you or not. For example set up fake drug deals so you can draw them on fact of monitoring your communications. Sue them every instance you find them breaking down your doors. Yeah I know it is not pleasant.

Just like OP said there is no easy way out of this.

Also make working for contractors of NSA and being employee of NSA being a very unpatriotic and scummy thing to do - akin to digging around underwear drawer of your next door granny neighbor.

My 2c.
https://addons.mozilla.org/en-us/firefox/addon/jit-inspector...

I don't know if this dumps the disassembly for asm.js. I suspect it can't, since asm.js modules are AOT compiled into a single big block of code - but maybe it'll work. Give it a try!
I doubt many companies care about it.

My personal information for my apartment is stored on an FTP server and their offices use WEP encryption on their WiFI. They have a scan of my passport, every facet of information about me; if their storage was compromised it would be fairly devastating to their tens of thousands of clients.

Unfortunately I have no clout regarding the storage of this information, and no choice as to who I store it with.
> But for me, the Internet is over.

This is how I've been feeling about it for the last few weeks.
If he's the kind who would sell the exploit next time, Facebook isn't interested in rewarding him anyways.

Bounty programs are not there to create a more appealing market and out-bid the black hat hackers.
I'm sure they are doing this to preserve their patents, what is the point of an open standard if no one is allowed to use it?

I would really love to see a magnetic bi-directional cable eventually for phones/tablets. The Surface one is OK, but it doesn't snap as nicely as I think it could.
Why is Dell on that list?
Lightning has one specific feature that allows it to easily be bidirectional. The pinout can be changed via software, to adapt to any occasion, and essentially manufacture a new plug with a firmware update. This means orientation doesn't matter (without duplicating pins). This is a bit harder with USB, which has specific purposes for each pin.
What would you expect [nil].to_s to be? Seems like a reasonable representation to me. I certainly wouldn't want "['']", and I also wouldn't want nil.to_s to give me "nil". In practice having nil evaluate to an empty string is quite useful.
But it's yet another proprietary connector. We've really had enough of those.
I think Tor would be a better idea of what to try to emulate, but the full envelope (including envelope from) would have to be encrypted such that it would be decrypted at the end-point.

I think something sufficiently secure is possible for email. I think it would require a whole new set of protocols and approaches, and for some things (like voice) it is not.
I guess I don't get it. Didn't we "know" about things like Carnivore in the 90s? Isn't it rather expected that unencrypted communications are going to be gathered? You don't even need a nation-state to do so. Anyone with physical access can place taps, and parsing and saving port 25 traffic ain't exactly Manhattan Project level work.

I agree it's upsetting and citizens should be demanding oversight. But to assume your plaintext transmissions over uncontrolled wires are somehow private seems absurd. It's like the silliness people got whipped into over Google's WiFi collection which was essentially passing "-s 0" instead of "-s 64" to tcpdump.
This to me is the most pernicious thing about this whole surveillance business. The mere presence of a comprehensive surveillance apparatus, even when you don't live in a totalitarian state when jack booted thugs pay you a visit to "get your mind right", does incalculable damage to the first amendment. In a free society, it's "game over" without the first amendment. This is in some ways even more damaging than the actual surveillance (which in theory could be shut off today) because once the public feels they've lost the freedom of speech, it is extremely hard to convince them otherwise. Look at how hard it has been for the citizenry of forer communist countries to embrace and internalize the freedoms we in the US have had for a few hundred years.
Unfortunately, the complexity argument is generally bullshit and you really need to profile. It turns out multiple very respected authors have found under a typical work load, `vector` performs very well on a lot of machines.
No, I mean protocols.

While elsewhere in the comments, there is the sentiment that "you can't code yourself out of this", my hopes of voting myself out of it (or otherwise "fixing" a system, as if it was just accidentally "broken") are much lower.

(But note that "protocols" may also have non-technological components.)
Facebook couldn't care less about the amount of bounty paid.

That amount for Facebook is practically like a chocolate bar.

They do not want to pay him because he exploited the bug he found two different times, once on the CEO's profile which has resulted in a very significant and negative PR for Facebook.

Facebook will not say "Thanks for creating shitty PR for our brand and damaging our reputation, here have this money"
So I left academia to become a discordian agent for precisely this reason.
So, the CIA releases such information years later, when it's not of much relevance. 50 years from now, if they say they had a hand in some of the most inhuman things happening now, we would probably be indifferent. Not sure how can anyone hold them accountable for their actions. Probably none of those individuals who played a part in the coup would be around.