skysight-inc/HackerNews huggingface dataset:
Sorry, but I think the second comic is completely tone deaf and deeply unfunny. I remember reading it and thinking, "Jesus christ guys, way to not get it."

The shirts are just... fucking hell. Y'know, the crazy thing is that there were like 10 people in their office at that point. And I am pretty sure that about half of them could have, at some point said, "What the fuck are we doing here?"
This maybe an option in the making:
https://code.google.com/p/dart/wiki/Android
Bypassing the filter certainly was an offense. I was prosecuted by the school district in direct accordance with their policy. I have served my consequence and am now absolved of that offense.
Google did shut my Adsense account down. I have not opened another.
Maybe that was directed at me. I'm disagreeing with the conventional wisdom that schools are failing kids. I don't know exactly in what way people think it's failing them, but it's such a part of common wisdom that all you have to say is that schools are failing kids and lots of people will agree with you.
That's a false sense of security. You can inspect every line of code in SSL but unless you are a world-class cryptographer yourself, how will you spot a backdoor in the algorithm?
I doubt very many people thought the first joke was an exhortation or endorsement of rape. They were using it as an extreme, to skewer MMO morality. And I see what they were trying to do, but not long after that point it should've been obvious it didn't work.

So the second comic comes out and it's a straw man. "so you're saying we are pro-rape? that's absurd. look at how absurd you are." If you're trying to make people understand something, can you imagine how frustrating it must be to hear that for the eleventy-billionth time?

It's fair to call people on making light of rape. I also think it's fair to disagree, though I have a caveat: IMHO, given the quality of dialogue around the issue, most of the disagreement is reflexive and rooted around the perception of this as a niche issue, mostly germane to women (Patton Oswalt had a good bit about this).

In trying to evoke sympathy, people ask if you think it'd be OK to say such and such about your mother, sister, or daughter. An addendum which may (sadly) work better for some people could be: ask yourself if it would change your perception about, say, prison rape jokes if it happened to your father, brother, or son. Then imagine if someone's response to your feelings was to say "hey dummy I'm not pro-rape I just think rape jokes are funny." And so on.
I'll be testing this with different color schemes, but yeah, works!

Addition: for eink readers, would underline or italics work in place of color gradient?
The US government has betrayed the internet. We need to take it back.
Thats really depressing.

You know what they call alternative medicine that works?

Medicine.

(cf: Tim Minchin, 'Storm' http://www.youtube.com/watch?v=HhGuXCuDb1U)
PgUp/PgDn are still there, but I never liked them on the sides of the up arrow key. Anyone know if you can Fn-arrow for PgUp/PgDn/Home/End like on the Mac? That's good enough.
Knowing what kind of encryption NSA uses internally, can tell all about what is compromised and what's still secure.
Ask HN: who's interested in a google analytics alternative??
we all know what the words google snowden nsa means theses days....so what if we built a community based amlternative based in europe or asia or whatever else with all what we want a believe internet was, is and will ???
I find myself selecting text every now and then to make it easier to read. On the examples on BeeLineReader's website, I was surprised I didn't have to select text to read it.

The examples in the bottom of the page really helped me realize how much this helps. Seriously, I read those paragraphs with the "Bright" theme and then I read them with BeeLineReader disabled ("Off") and I could notice my brain working harder.

I realize it looks ugly as other commenters have posted before, there's probably another method that doesn't make the text look so "ugly".
its unclear to me what "their favourite payment processor" is supposed to be.
How does the system prevent fraud?
> That's the money quote there- the NSA hasn't cracked encryption. They've just put back doors in.

It's not like they've just gotten secret keys. They've specifically gotten chip manufacturers to add backdoors to hardware, as well as significantly influenced actual cryptography standards themselves:

> "The N.S.A. wrote the standard and aggressively pushed it on the international group, privately calling the effort “a challenge in finesse.”

> “Eventually, N.S.A. became the sole editor,” the memo says.
I been working on this job searching app for federal jobs for about 2 weeks, I'm doing some updates now. I was thinking of looking for API's that include any jobs not just federal. I don't expect money from it, I just wanted to use the API and do some flat design. I guess just for fun and building my skills.

Jobsy: https://itunes.apple.com/us/app/jobsy/id687059035?mt=8
Ok so if its identifying as an anything besides windows compare TTL in the packet to windows default if its different something is up
Isn't it considered best practice, especially for situations where you can control the client - i.e. banking apps on your phone?
Everyone focuses on the decrypting power of quantum computing, which is warranted as it will break _modern_ cryptography (in theory). However, think about the encrypting power a quantum computer will have; being able to generate completely random keys among other facets of crypto that seem implausible with modern computers. I think it will just open the door to a whole new science of crypto we haven't reached yet.
6 hours of battery life in a Haswell laptop? That's probably why Apple is keeping the Retina screen out of the MacBook Air.

I really liked the old Yoga but 14" is too big to use like a tablet and 6 hours is not enough battery life.
Which in turn means the NSA has just made the entire US government vulnerable to foreign or non-state actors.

Yes, and it says this in the article.

And it makes perfect sense too. If you were the NSA, wouldn't you want a heads up if someone was talking about budget cuts?
AWS: ElastiCache – Now With a Dash of Redis
Pivotal People: Code for America’s Pivotal Data Science Fellow Ezra Spier
Well, it goes on to say "Classified N.S.A. memos appear to confirm that the fatal weakness, discovered by two Microsoft cryptographers in 2007, was engineered by the agency." The Dual_EC_DRBG vulnerability was revealed by two Microsoft researchers in 2007: http://rump2007.cr.yp.to/15-shumow.pdf

So I'd say yes, it sounds like that's what they're talking about.

Speaking of which, I'm really quite frustrated how many of these recent reports about the NSA elide the technical details. You have to read between the lines to figure out what's really going on, what weaknesses there really are.

As a matter of security, it would be better to know specifically what vulnerabilities there really are. Merely the announcement of vulnerabilities can allow a dedicated black-hat to find and exploit it; but someone who's trying to secure their system, and isn't following cryptography incredibly closely, won't know what they need to do or change to make their systems more secure against these types of attacks.

There's a reason that the security community advocates for full disclosure (or at least responsible disclosure, if it's possible to selectively disclose to a few vendors so they can do a coordinated release that fixes the vulnerability before it becomes public), in which you completely disclose a vulnerability so people aren't left guessing about it.
Dudebros as a sublime expression of the absurd
ARM Android consoles are already barren enough, content-wise. Making an x86 variant specifically targeting an ndk-heavy sector of the app store seems... a strange choice.
Looks pretty cool, if you like I'll add it to my mini project, http://thejobist.com
assume the simplest explanation.

1) they have found/introduced a bug in encryption standards
2) they have solved a fiendishly hard math problem to which no known solution exists and on which solution there is a price of 1 mio $

working in dev i assume (1) is several orders of magnitude more likely.
See also Game Modules Wiki[1]

[1]: https://github.com/hughsk/game-modules/wiki/Modules
It's a bit harder to sneak in junk in open source projects. You can see the checkins. However, you are right, if the flaw is in the algorithm itself, it's hopeless.
Not every application is emacs.
Congrats to the team on the launch! I know they've been hard at work for quite a while. Getting deals with the necessary publishers could not have been easy without the clout of a large brand name like Amazon.

I'm sure the iPhone-only offering might prove controversial, but I don't doubt that an iPad version will be coming soon. iPhone-only makes sense for me - I prefer to read books in short chunks: on the Muni, waiting in line, a few minutes before bed, etc. The Kindle app has done an excellent job of making the best of the limited real estate, I'm optimistic that Oyster will do so as well.
http://opencores.org/or1k/Main_Page
Then by all means improve or replace bad code and create an environment that will encourage devs to learn from previous mistakes and improve.

All I am saying (and I think the author tries to make that point) is that it is questionable that you are going to create such an environment by pointing fingers and treating devs bad.

My very limited experience (I am the mobile lead in a company) has taught me, having done all of that myself in the beginning, that I wont achieve anything this way.

What I saw is that people got defensive by default, protective about their work (so no one can attack them for errors they made), the company started bleeding talent (what person is going to like working in such an environment?) and so called "code monkeys" never improved, because they didn't believe that they could achieve anything meaningful by themselves.

For some companies this might work in a way that I can't understand, but I changed, because frankly I didn't like to work in such an environment myself, and it did have to some degree positive effects.

People share more information, there's less pressure generally and there is more trust in general that everyone is doing their best, and if unable to complete some task, will ask for help.

By the way, here's a Google I/O talk from 2010 about engineering leadership that covers the problems mentioned in the article - I cannot recommend it enough: http://www.youtube.com/watch?v=skD1fjxSRog
Personally, I would not use this. One of the powers of regex is the similarity (depending on complexity and structure) between the regex pattern and what a matching string looks like. By doing it this way, a lot of noise is introduced that can make parsing more difficult.

I don't find:

find { matching { [word, "-"] }.multiple }

Clearer than:

([\w\-]+)

It might be an alternative way introduce regexes though.

I would also like to see a more complex regex written this way.
...about his circle of homeschoolers, not the general homeschooling community.
I did consider the effects that this posting may have on my future. It is very true that things you post on the internet can work against you. It is equally true that things you post on the internet can work with you. Thank you for your feedback and suggestion.

Best of luck to you, too.
> In 1953 we are still in the age of steam and trees were cut back from the lines to reduce the risk of fires from hot ash.

I'm assuming that's a joke, but one of the things that's always surprised me is how early electrification happened. The London-Brighton line was electrified in segments from 1909 to 1932. Many of the commuter rail lines in the U.S. were electrified that period too.
see a great Dilbert cartoon about a similar subject
http://tinyurl.com/av3ennj
I find this incredibly hard to read, my eyes feel like they're being pulled to sudden colour changes. I find this extremely difficult to scan, as well.
Pretty cool. I just wonder, why do so many Javascript projects feel the need to add .js after them? You don't see thingie.java or thingie.cpp... Just wondering.
The continuing relevance of "Don't Feed the Trolls"
It isn't great. But many libraries have rolled out a new version of Overdrive that's noticably better (even if it's the same implemention, it's at least less confusing). For example, NYPL New York doesn't have it yet, but Los Angeles Public Library does: http://lapl.lib.overdrive.com/
I'll add it to the list
RMS doesn't seem such an extremist any more.
It looks like there's no chance for even the slightest expectation of privacy. Even if the data is encrypted they can ask American companies to decrypt it, after all they store the encryption keys. Even if the encryption keys are stored on the client side, they can push fake updates through major browsers or straight out compel American companies to insert backdoors in their software (e.g. Google Chrome) and get access to those keys. Our reliance on these services is what most likely would need to be avoided in the pursuit of privacy, but could you live without Google Search, Google Maps, GMail, Outlook, and on and on?
Actually, the test randomizes whether you get black&white first or Beeline first.
As untog noted (https://news.ycombinator.com/item?id=6336178) in the discussion of the NYT piece on this topic, it's important to note that it's not like our security measures put up a fight and were defeated. They were mooted by a total circumvention. They never came into play. This is what I was talking about in an opinion piece recently on tc (http://techcrunch.com/2013/08/25/the-maginot-line/).

Laws need to be improved, but we may be able to find good point to point methods that don't rely on security methods with vulnerabilities baked into the silicon.
Does the research provide any info about fatigue after using it?
It's a complex question. Easy for Mailpile if they want to go to war about it. Start a new direct campaign somewhere else and tell their previous givers to request a charge-back.

PP acting in its role in indemnifying buyers here, which is understandable, but it really isn't appropriate for them to pass judgement on MP business plans.

Free market will sort this out anyway. IGG or givers will go to another platform if PP is seen as unreasonable. Few are going to go thru the trouble of a campaign if PP is constantly holding back the funds.
Yeah, you're right. I would love if every Clojure function came with an example input and output.

What I meant to suggest is that my docstring example is something that could be expressed in code.
With mutually assured destruction, generally everyone is discouraged from attacking because they know they will suffer just as much. However, all it takes is a single rogue state to trigger a free-for-all. We almost saw it in the Cold War, we did see it (and are currently seeing it) in the phone patent arena, and we could end up seeing it in security vulnerabilities sooner rather than later.
As far as I understand, they've been doing grid computing since the mid-90s at Acxiom (the person I talked to joined in 1996/1997, afaik).
The money quote is this:

The NSA describes strong decryption programs as the "price of admission for the US to maintain unrestricted access to and use of cyberspace".

from the Guardian article, also here on HN

http://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryp...
"In one case, after the government learned that a foreign intelligence target had ordered new computer hardware, the American manufacturer agreed to insert a back door into the product before it was shipped, someone familiar with the request told The Times."

Wow.... this really puts all the furor over Huawei contracts in the US in context.
I Dream of Genius
And all we need to get that massive+long tail inventory is for Overdrive (the ebook system used by public libraries) to offer "inter-library loan".
You can't have read Applied Cryptography from the mid-90s and not understand this to have been NSA's M.O. from the jump. Bruce Scheier, who was quoted in the Guardian piece about the same story, is America's foremost popularizer of the notion of NSA as crypto's global passive adversary. People who build real cryptosystems have never, ever been allowed to rely on the goodwill of the NSA not to cryptanalyze their systems.

Entire crypto schemes, from the RIPEMD hash to the specific parameter generation mechanism in DSA, are premised on the idea that USG-sponsored crypto concepts aren't inherently trustworthy. Similarly, all of Applied Cryptography was premised on the idea that NSA was decades ahead of commercial and academic crypto.

Of the revelations about NSA, this has to be the least revelatory (it's up/down there with the "revelation" that NSA employs teams of people whose job it is to break into Windows computers); it essentially restates something we were already supposed to have taken for granted.

That's not to say this isn't a fascinating story. It is; just keep it in context. Things to remember:

* You really want to know whether NSA is directly attacking cryptographic primitives or whether they're subverting endpoints. I think if you talk to cryptographers, you'll get a slight bias towards the belief that it's the latter: that there are implementation weaknesses at play here more than fundamental breaks in crypto.

* You want to keep in mind that breaks in cryptosystems represent new knowledge, and that the enterprise of breaking cryptosystems is an issue distinct from the public policy concern of where NSA is allowed to deploy those breaks.

* Bear in mind that in the legacy TLS security model, before things like pinning and TACK, NSA would only require a viable attack on a small subset of CAs to gain (along with pervasive network taps) massive capabilities. The payoff for these kinds of capabilities is radically degraded by the anti-surveillance mechanisms of modern browsers like Chrome, which is something you probably want to be thanking people like Adam Langley, Trevor Perrin, and Moxie Marlinspike for pushing so hard to implement.
The best publicly known attacks on RSA reduce the attack time by a few orders of magnitude at best. A functional quantum CPU could reduce that by a few more orders. Your 4096-bit RSA key is still 2^3072 times harder to break, so even with reductions we're still talking about "heat death of the universe" amounts of time to brute force.

RSA has issues but as of yet hasn't yielded entirely to cryptanalysis.

As the article says, it's easier to attack the system and try to get the plaintext, or coerce you into giving up your key through legal means.

Edit: adding a link to Wikipedia's article on post-quantum crypto, it's a good place to start understanding how to answer these type of questions:

http://en.wikipedia.org/wiki/Post-quantum_cryptography
It's especially weird to see such resentment of authority from a fan of Apple, the heavy-handed authoritarians of the industry. He's going to have a bad day when they won't let him ship and don't explain why.
Its really awesome to see Google taking the web seriously by giving it more access to hardware, but it would be nice with some indication of where these APIs are headed.

Are they "forking off the web" or just experimenting before standardising?
> It's a fact that it's more work to support both AJAX interactions and work with js disabled than it is to support just AJAX alone

That is not a fact. It may well be your experience from the way your applications were written, but it is not a fact. You clearly do need a lecture, or you wouldn't be posting garbage.
I am so glad I resisted pressure from engineers working at Intel to let /dev/random in Linux rely blindly on the output of the RDRAND instructure. Relying solely on an implementation sealed inside a chip and which is impossible to audit is a BAD idea. Quoting from the article...

"By this year, the Sigint Enabling Project had found ways inside some of the encryption chips that scramble information for businesses and governments, either by working with chipmakers to insert back doors..."
you don't think your cheap webhost will drop you immediately if they get a DMCA takedown?
The trouble with this is that without legislation in place to control the pricing of e-books as sold to libraries, e-book publishers use a number of tricks, from significantly higher pricing to making each license only valid for a set number of borrows before another license has to be bought, which negates the "they can't be damaged" benefit.

http://www.theguardian.com/books/2011/mar/06/ebooks-on-borro...
I'm guessing this is what tripped up Lavabit. Mr. Levison probably didn't have the back doors and balked at being complicit once he came onto the NSA's radar.

From the article: "Intelligence officials asked The Times and ProPublica not to publish this article, saying that it might prompt foreign targets to switch to new forms of encryption or communications that would be harder to collect or read."

Also: “Properly implemented strong crypto systems are one of the few things that you can rely on,” - Snowden

I would assume that because Snowden used Lavabit & they shut down that the NSA took issue with how secure Lavabit actually was.
Ok, but those people would not be interested in "growth hacking" either, then. And there are other people who do want accurate analytics.

My objection is to the idea that growth hackers are the first people who have ever tried to use data to drive marketing decisions. They aren't.
A warning for anyone considering this laptop: I bought a similar laptop, the Sony Duo 13, last week.

If you're doing heavy work on a machine as a developer you'll often need to do complex "mousing", such as working in a UI building tool, art program, or working with dialogs in Visual Studio.

For these cases, I find I'm frustrated because I want the speed/simplicity of the touch interface (instead of using the touchpad) but my finger just isn't precise enough.

These situations constantly make me reach for my stylus, which surprised me: Turns out, precision styluses are very useful, even when you're not doing strictly "artsy" things.

However, this Yoga 2 Pro touch display does NOT appear to have precision stylus support. The Sony Duo 13, on the other hand, ships with an excellent wacom-style stylus.

BOTTOM LINE: I think you'll regret buying a touchscreen laptop without advanced stylus support, if you use computers professionally.

EDIT: Others have pointed out the now "Yoga" also released today (not the "Yoga 2 Pro" with the high res screen) has stylus support.
I tried to read the article while eating lunch, and had to stop (reading and eating). Does the word "florid" apply here?
That was what caught my eye also. It seems to imply that if they can't read our Internet traffic then they'll have to take the US off the Internet. That's a pretty drastic threat.
Well sure, great points! Nonetheless, for those not living in dystopia a cell phone fingerprint login may be handy.
How timely. From todays nytimes:

"N.S.A. Foils Much Internet Encryption"
http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet...

Turns out the NSA has cracked a bunch of internet encryption, and, yes, they kept it a secret they had done so, as most would expect they would. Until Snowden.
Nano-Koosh-balls: What They’re Good For and How I Made Them.
That idea could be on to something. I guess it would have to be tried to see what happens.

I think what people really want is the economy to be better, and since the economy isn't what it used to be, the popular theory is that at some point, the education system got infected with some disease and started to fail kids, causing the bad economy. When the economy was humming, I doubt many people thought the education system failed those kids. The simpler explanation is that the education system was in a relatively steady state and the economy just went bad.