skysight-inc/HackerNews huggingface dataset:
well, it significantly mangles things on The Guardian. basically, all of the little "NSA" tags in this article:
http://www.theguardian.com/commentisfree/2013/sep/05/governm...

get wiped out, making the text difficult to understand.

Also, be careful to wait for it to work. I didn't think it worked and clicked it a second time. I ended up with funfetti colors, not smooth gradients.
I normally read around 600 to 1000 wpm (depending on how dense or vapid it is). This speeds up my reading wayyyyy past that. 1500 wpm? And I was barely trying. It does look super fucking ugly, but it totally works for me. They need to bring in an army of designers and make software geared towards legal assistants / lawyers because they need this desperately.
8. Don't use anything which isn't FOSS or compiled from source.
Tor is really shitty against the NSA. Tor offers almost no protection what so ever against a globally passive adversary who can see all packets going into and exiting the Tor network.

You better believe the NSA can do this
*64bit German

(Yes they do still release every language version separately with Windows. Not sure about Windows Phone. Welcome back in the 90ies)
Which one is compiled CoffeeScript? The second one? I went to a Node 0.10.0 talk [1] at AirBnB and Isaac Schluetter had some pretty funny comments for people programming in CoffeeScript.

[1] - http://www.youtube.com/watch?v=zM-gUM9C5SA&t=2770
I think "Lumina". A mediocre Chevy car.
The NSA promises to make our country stronger, then they purposefully weaken it. Then they name the programs after battles in the Civil War.
> It's not long-term strength, by the way. The US economy[1] is in shambles, and ready to implode any moment.

So that's my gut feel as well, but I don't have a good handle on the economic & market information as to why that might be so. Can you expand?
How Sonny Dickson, Australian teen, is driving the Apple crazy with iPhone leaks
I use Jungle Disk to backup my photography to S3.
gee. i thought you had to use a javascript framework to build an spa.
Why Quantified Self is Bullshit
Kill your babies. They’re just pixels. You can do better.
I may have misread. Did Bruce Schnier just admit that he has Snowden documents on an air gapped computer, likely sited at his place of residence? If he is a "US person reasonably believed to be inside the US" then I imagine that could put him on the list for a 2am wakeup call.
I once described AntiTrust as being a movie intended for people who browse Slashdot from Internet Explorer.

I doubt that makes up the bulk of HNers.

Most of them probably use Macs.
probably both :)
Sigh, I'll bite. Tired of cable news quality comments presenting very debatable opinions as fact, especially without any concrete arguments, evidence, sources or otherwise real facts. On top of that being tangential to the post. Here is just one indicator that points in the opposite direction of your claims.

http://data.bls.gov/timeseries/LNS14000000
Why does Indiegogo even continue using Paypal to disburse payments?
Yes, because nothing can ever improve security unless it is 100%.

Using FLOSS, alone, is a marginal improvement in security, other things being equal. It can be combined with still other measures to make a bigger difference.
I remember running VMs in VMs when I was younger and wondered how far I could go before my computer would implode. Infinite recursion is amazing. Let me rephrase that; infinity is amazing.
I figured as much. I just threw them out there in case anyone could benefit (including you). :-)

Also, I completely agree with the rest of your original post (the parts RE: Scheme, Go, & simplicity).
Google charged $14.5M for abusing Motorola FRAND patents in Microsoft case
Re 'Super PACs not permitted to coordinate directly':

There is an important difference between "not permitted to" and "don't".
This is good news for Mailpile, and an interesting project I have donated. Anyone looking to raise funds needs to take note however that the decision was only reversed by PayPal because of the bad publicity, they wouldn't give a shit otherwise and they aren't going to change. Just don't consider PayPal as an option, they have proven time and time again to be complete scum merchants. how they have managed to dodge any serious regulation is a complete mystery to me.
Because Chrome doesn't entirely rely on the operating system to verify certificates.
It's good that Paypal does the right thing here, so a big kudos to MailPile, not just for fighting the fight, but for getting others to care about it.

But... am I the only one that wishes I had the megaphone that is Hacker News and Ars Technica to right wrongs? I get into these situations and find myself fighting the situation alone because my business is not that much interest to a mass audience, and therefore, those in the media who can shine a light on it don't have interest in relaying my plight.

So, while a few folks can get the limelight and get THEIR problems solved, the rest of us fight in vain against the machine knowing full well that the odds are stacked against us and we can't get the world's attention in the same way.

TL;DR - Yay for MailPile, that's good, but I still feel kicked and not able to get the same sort of help. And in the end, it's Paypal solving a PR problem and not something that might be more systemic.
Format the thumb drive before mounting it on the airgapped computer. It is cheaper than using CDs.
So wait. You want Paypal to require everyone who opens a PayPal account to have to write up what it's going to be used for, and wait in a queue before you can receive funds so that they can review it to ensure that it's not something like crowdfunding, and then require that you either never change what you use your PayPal account for, or submit any changes back to them, so that they can re-review it and approve your new use?

As far as I know, PayPal allows anyone to open an account and start using it without any review (I've never received funds with PayPal, only sent funds, but I don't recall any extra hoops that would be necessary to receive them).

Likely what happens is that either certain kinds of activity cause an account to be flagged for a manual review, or someone gets cold feet about the crowdfunding campaign and does a chargeback, so PayPal looks into it to see what you were selling. When they see that you are in violation of their very explicit pre-sale policy: https://www.paypal-businesscenter.com/content/presale-policy... they hold your funds until you are within 20 days of shipping your product.

They have a lot of rules about what you can sell via PayPal, and there's no way they could possibly check what you are going to use funds for before each transaction, as you could start using an account that was used for permitted transactions for ones that aren't permitted at any time. So, they wait until an automated system, a complaint, or a chargeback notifies them that something is amiss, and then hold on to the money until they can resolve the situation.
The writing is so confusing to follow, I gave up after the first paragraph. I'm assuming there was a guy who wanted to get away from it all, so he went to an island to be alone?
re: discrete log vs ECC, Schneier wrote the following in the comments section of his blog:

I no longer trust the constants. I believe the NSA has manipulated them through their relationships with industry.

http://www.schneier.com/blog/archives/2013/09/the_nsa_is_bre...
Developers are noticing Thinknum
What techniques do you use? I read at around 600wpm, and increasing it by 50-100% seems pretty daunting.
Thanks for the feedback! It's not just about speed, it's about reading ease too. We hear great things from people who read while on public transit. All the movement makes line transitions (and staying on the same line in general) more difficult.
Hi, Stripe Developer here.

We have a mostly per-project set of code style and tooling guidelines. Most (if not all) of our larger projects are coffeescript and commonjs based. That's mostly because they all share at least some code. As long as a project is internally consistent and the team agrees with each other, we don't force any specific styles or tools (within reason). We have expertise with the tools we use the most though, so a lot of times the best fit is our own tools.

However, the comparison is a little bit apples and oranges. The JavaScript is optimized for reading, and maximum coherence by outside developers (an example), and the other is a compiled application for execution. The actual _source_ of the checkout project (which is not open-sourced) internally is broken up into neat files and uses modules, etc. It's quite readable for those working on the code, and the output there is generated by a computer and not really intended for humans.

Hope that helps give some insight into our process and reasoning.
What about Tor hidden services?
Under the hood, what's being generated is still a regex though. How can you be sure ANY code is correct, aside from testing it?
> As for bitcoin which could be subverted if one users holds more than 50% of the bitcoins.

You're thinking of the 50% attack where you have half the hashing power, not half the bitcoins.
It depends on the selection and how well it's categorized, a huge, searchable virtual library of old and rare texts would definitely be worth $10 to me. If it's just the NYTimes best sellers, probably not.

But my mom and her friends would probably go for it, the absurd price of ebooks turned them all into pirates, old ladies shouldn't know what Demonoid is but they all do. Getting them to spend $400 on an iPad, that's a different story.
They're more efficient than the same sized non hybrid car. And define "green"
We're talking with Amazon, and we'll get in touch with Aldiko! Thanks for the suggestion.
Very unlikely. Virtually all browsers support 2048-bit RSA. Keys larger than 2048 bits, however, are not always supported (which is probably what you tried).
New Snowden documents say NSA can break common Internet encryption
Bullet points of the CoffeeScript comments:

* People don't compile to JS before publishing to NPM, making it harder to use CoffeeScript written modules.

* I don't know CoffeeScript, so it's harder to debug.

* The language is bad, introduces things from Ruby he doesn't like, there are ambiguities introduced.

When asked about ambiguities introduced, there was a reference to a "different require implementation in CoffeeScript", which has possibly since been fixed.
Yep, we're working on it. We have a couple of deals in the works, and we are hoping to get on major platforms.
> ...any Linux distribution you haven't culled together and compiled yourself.

And maybe even ones you have compiled yourself "from scratch":

http://cm.bell-labs.com/who/ken/trust.html
As we've already seen, NSA and other such agencies already have direct connections into the under-sea cables that connect countries across the globe. MITM is exactly what they do ALL THE TIME. To not see it as effective is to miss the point of Total Information Awareness.
How is it more secure against "family members and stalkers" than, say, Gmail?
Please let's not mindlessly post this comic and act that because rubber hose crypt-analysis exists we shouldn't even bother.

One huge point I keep trying to bring up to friends when I talk about security is: yes if you are the specific target of the state or any asymmetrically powerful adversary you are in a lot of trouble.

But with large scale surveillance the bigger concern is not becoming a target in the first place. Properly securing sensitive communications is a good first step in ensuring that you aren't picked up in sweep through the data.

Sure encryption in the first place may flag you, but at least in the current situation it isn't going to be enough to invoke any rubber hose techniques.
To which "constants" is he referrin? Is he suggesting not using the NIST curves, which were themselves selected to avoid a different class of curve attack? Ok, then don't use those curves.
It's not $1="this", $2="that", it's a tree.

So, no, you cannot. And there're many more cool things you cannot
I'm not sure I quite agree with you here. I nearly died laughing when I read this parody. Mostly because I was reading Marissa's post in my head and this parody perfectly highlighted the pretentiousness of that post. (I'm still not sure what the point of replacing serifs with 'scallops' was)
Ruby Association: 2013 call for grant proposals
Do they still make convertible laptops that have one hinge point in the middle, so it can swivel 180 degrees and then fold down to become a tablet while covering the keyboard keys? I just can't see myself leaving the keyboard exposed, even if it is disabled electronically.
with Audible you have to download the files. You can only stream 50 mb of the book (about 3 hours)

You only get 1 book a month with the base Audible subscription, but you get pretty heavy discounts on purchasing books.

You also get to keep the audiobook.
When asked whether 1024-bit RSA keys are dead, Lenstra said: "The answer to that question is an unqualified yes."

Generalized 1024-bit RSA keys are dead. Lenstra is making a comment on generalized 1024-bit RSA keys in this sentence. Not on Mersenne number factorization (which is, yes, the main topic of this article).

My link [2] tells you concretely how to break 1024-bit RSA and estimates the cost to $10M, well within NSA's capabilities.
I use to hold stories like these as an example of a broken internal process, because someone outside your company had to tell the world about their problems with you, instead of just fixing it by telling you. Now, it just feels normal. Perhaps, it has always been like this and I just didn't notice.
If you read the article you will see that it calls on engineers to find technical solutions that will treat all countries as "hostile" entities.

As Bruce points out, the "this is a political problem and requires a political solution" line of reasoning is only partially true. We need technical solutions as well.
We're working on native integrations, and we realize the bookmarklet is a somewhat kludgy first step. Thanks for your interest!
I don't understand what you mean that 'growth hacking' doesn't have a distinct methodology, since unlike traditional marketing it is very quant-based and the way I see it, it evolves from MVP/Lean to get PMF and than getting traction in a very analytical way where you can quickly see which channels are driving growth and which are not. It is very incremental unlike the traditional marketing's "big bang" approach to launching.

Also, I consider A/B and multivariate testing for conversions a huge part of growth hacking and they are obviously based on scholarly work. When you ruthlessly track and optimize, you need to have the statistical chops to do it properly.
"Duh" Microsoft has been moving all of their brands to "Xbox" Zune Music, games in the App Store. I think this is the bigger story: https://news.ycombinator.com/item?id=6337218 as it outlines what MSFT needs to do to get its $7 billion worth.
You're right in that this mostly foils the NSA in its role as a global passive attacker. However, having a FOSS OS doesn't foil active, targeted attacks at all: the version of a package in the repo could be perfectly safe, while the version distributed to just your computer could be backdoored. (The NSA, after all, can FISA-order someone to give up their package signing key just as well as they can grab a decryption key, and then MITM just your connection to deliver an "automatic security update" that nobody else got.)
crap? :)
Also note that it has a distributor, which is uncommon on new cars. New cars generally have one coil for each cylinder (or pair of cylinders that fire 360 degrees apart).
Obad.a Trojan now being distributed via mobile botnets
MirrorMoon EP - A Game about Mysteries in Space
Beat me to it!

This totally amazed me when I started working on cars. Both carburetors and direct injection creates a mixture of gasoline and air BEFORE this mixture enters the cylinder. Direct injection now seems like a misnomer ;) It makes a lot of sense if you think about the incredibly violent conditions inside the cylinder head though. I'm always surprised that spark plugs survive as easily as they do, I imagine a high accuracy injector nozzle in that situation would not last as long as current injectors. Has anyone done a true direct-injection design?

Jacob, can you update the drawing slightly? "The fuel injectors spray gas into the cylinder..." is incorrect, it should be closer to "The fuel injectors spray gas into the intake manifold where it mixes with air before being sucked into the cylinder"
Microsoft’s Surface brand has had several hits over the last year

Uhh, such as...?

Ditching the Nokia name seems crazy to me: it's universally recognized, particularly outside the US. Any Indian slum or African village large enough to have a phone dealer will have a Nokia ad plastered on it, whereas outside our little incestous tech circles nobody has heard about the Surface.
For your first suggestion, I dusted off some old code and modified it slightly:

http://pastebin.com/qV8fU1a4

It should keep the layout as is, while only adding color, but I have only tested it on wikipedia. The color period is wrong, but it will show you some approximation of how sites will look with a non-interrupting beeline bookmarklet.
You can claim that there exists a subset of C that can be considered purely functional, and others have argued that (http://conal.net/blog/posts/the-c-language-is-purely-functio...), but the existence of standard library functions like strtok makes the general statement false.

You can claim that nodejs HTTP module forces a callback style, and that is true given the implementation, but javascript spec doesn't force you to implement an HTTP server in that fashion. As I stated in both responses, the article claims that javascript forces you to use a callback style, which is not the case. It is Node that forces you to use callbacks.
Isn't this the fact that NSA has access to the internet companies private key for the SSL certificate? There by giving them the tools to decrypt the initial TLS handshake and then from there you can get the symmetric key and decrypt the rest? Or is there more to it, reading the article I didn't see any hard proof of this.
Building your own .deb packages of Ruby
That should be combined with this: https://www.youtube.com/watch?v=8SkdfdXWYaI
Elon Musk shows off Iron Man-style rocket design with gestures and 3D printing
There is no other framework out there that can fix this problem. You're disconnected, you can't magically have your data given to the server.
Granted, I would like to do this:
Firebase.setInSyncCallback(function(isInSync) {
if(!isInSync) somediv.innerHTML = "Your changes have not been saved to the server yet.";
else somediv.innerHTML="";
});
Looks like you were trying to complete data found with Optical Character Recognition by maximum-entropy.

This is awesome. What are some other use cases for this?

With APIs much of the data I use has already been formatted in JSON or CSV already, so I don't get to scrape much anymore.
The latter of which sounds suspiciously like what a quantum computer does.

How sure are we that BQP != NP?
Remember the OpenBSD IPSec backdoor allegation?

https://lwn.net/Articles/420858/
Where? Is it for some sort of "premium" access? Otherwise, that's what tax dollars go towards.
Free 1-day pass for Intel Developer Forum
The Intel Developer Forum will be next week, September 10-12 at Moscone West in San Francisco. You can get a free 1-day pass with the promo code
CDYRTC1
You can register here: https://secure.idfregistration.com/IDF2013/

More info about IDF2013: https://www-ssl.intel.com/content/www/us/en/intel-developer-forum-idf/san-francisco/2013/idf-2013-san-francisco.html?

While supplies last.

Disclaimer: I do not work for Intel.
Different strokes. Owning that stuff would add way more overhead and stress for me. Different folks.
I would be keeping my hat on. They would have done it with the taxpayers' money but without their consent or even knowledge. They would then be withholding a major scientific breakthrough from the public that financed it. A scientific breakthrough that might have all sorts of applications that could make our lives better.

They would be exposing all the people that rely in strong cryptography to major risks. Including people that have done nothing illegal and helped fund their research.

And more importantly, they shouldn't be reading our emails to being with, independently of them being encrypted or not. That was never the deal, no democratic process ever gave them the right.
The most appropriate UI I've seen to do quick 3d modeling has to be this one... http://vimeo.com/1669862 (ILoveSketch). It'd be nice to see Elon's setup with a parametric calculating/suggesting version of that UI.
> America is a constitutional democracy. If the Americans don't like the situation then they can vote for someone who will enact legislation that reflects that

Hahahahahahahahaha
Because it's easy for them and they don't directly suffer the consequences. They get their money either way. But if Paypal makes their business suffer by compelling folks to go elsewhere, it will be their problem. But they probably won't see it that way. They'll simply continue to offer Paypal as one choice for payments, and the problems their customers face are their customer's problems.

I'd still use IndieGogo, just not Paypal. The only alternative, however, is to use IndieGogo's own credit card processor, which charges 3%, but it might be worth it because funds are automatically ACH'd and you don't have to deal with Paypal... and the customer feedback is more direct.

But the big downside of this is that you don't get ANY of your money until the campaign is over (and up to 15 days after that), while with Paypal, you get your funds immediately (minus a 9% IndieGogo fee) if you elected for Flexible Funding. See http://support.indiegogo.com/entries/20578596 for more.

Given they only have two options: Credit Card from Indiegogo, which means no Paypal (yay), but also no money until the end (maybe boo) or Paypal (boo), but money right away (yay), it forces many folks to Paypal. They need to look at Stripe or Balanced or Braintree or something else.
I agree with the others, you might be shifting too early and so the RPM will be too low for 2nd. Did you have trouble at higher RPM to shift into 2nd, like the gear shift would not move it, so you started trying to do so sooner? If so it may be that you were trying to shift too quickly (the actual action of shifting). It's okay to push the clutch in, go into N briefly, and let the RPM drop a bit before shifting into second. So say you start the shift at 3500RPM, maybe let it drop to 2700, every car is different though. A mechanical explanation might be that your throw-out bearing is shot, but I think you would hear or feel it if it was that bad.
True, but your argument can apply to any sort of abstraction (e.g. using C instead of assembly or even assembly over 1's and 0's).

He's arguing that the nicer syntax is a valuable abstraction over regex's overly-complicated syntax, not that the syntax will be 100% the same as regex 100% of the time.
This may be a case of the Times assuming that since 1.5 rounds to 2, 1.5 + 1.5 = 4. "The NSA breaks crypto" + "The NSA backdoored Dual-EC DRBG" = "The NSA breaks crypto via backdoored Dual-EC DRBG".
Brazil tries to elude NSA with new cables, satellite
"Your 4096-bit RSA key is still 2^3072 times harder to break,"

No, because the difficulty of breaking RSA keys doesn't scale in the same way as symmetric encryption. Integer factorisation is much easier than a brute force search of the keyspace. A 1024-bit RSA key is believed to be roughly equivalent to an 80-bit symmetric key. A 3072 bit key is about as hard to brute force as an 128-bit symmetric key.

(Source: http://www.keylength.com/en/4/ )
But what if they have some vulnerability in the crypto itself? thus skipping the need to brute force.
You can also use the default register instead of "+

:set clipboard=unnamed

http://vim.wikia.com/wiki/Accessing_the_system_clipboard