skysight-inc/HackerNews huggingface dataset:
Back in April, there was an attack on 1Password that managed to exploit some flaws in its crypto scheme to achieve a sizable speedup. [1] To this day, they have not managed to rollout the new 1Password 4 Cloud Keychain that is supposed to fix these flaws. [2]

Lots of smooth talk, but apparently security is not a blocker.

1: http://hashcat.net/forum/thread-2238.html

2: http://discussions.agilebits.com/discussion/14780/which-prod...
Don't discount the value of doing it implicitly. When you're just throwing stuff together (and there is a place for that), it's a distraction to work around parts of the system that won't work yet, both the typing and the mental overhead.
If you inspect the page It appears they are generating a blurred version of the png on the fly in js. The source of the blurred version of the image is equal to
"data:image/png;base64,iVBOR…7WkYklgQdZAAAAABJRU5ErkJggg=="
while the none blurred version is https://beta.icloud.com/system/cloudos/1SBeta.102619/en-us/s...
How is this different from Red Swoosh (http://en.wikipedia.org/wiki/RedSwoosh) ?
I started out writing disagreements to your points, somehow having misread them as being arguments you support for Rubists preferring dynamic typing, but then during editing I re-read that you think it's productive in spite of dynamic types. I agree totally.

I don't think Java-style typing is that much of a hindrance. It's irritating boilerplate, but people using those languages can slam it out very quickly.

I don't think reasoning about runtime types is any more difficult than reasoning about compile-time times, it's in fact a higher cognitive load because you cannot ignore it and rely on a type-checking phase that covers all your paths without explicit test cases.

I personally found Ruby to be productive[1] due to the expressive metaprogramming, how easy it is to make DSLs, blocks and yield for CPS, generators, and co-routines, and how everything is re-definable. I don't know how much dynamic typing factors into that, but I think if you could get the same things with equally expressive syntax, Rubists would still like it.

[1] It used to be my favorite. I still like it (and love it for scripting), but prefer GADTs and pattern-matching on type constructors now.
That's exactly what Dockerfiles are for: to specify a unique, non-ambiguous way to build your code. Regardless of language, distro or compiler, "docker build" is all I need to produce a self-contained, runnable artifact not unlike a static binary.

There's a cool tutorial on using Dockerfiles at http://www.docker.io/learn/dockerfile/
20,000 North Koreans 'disappear' from gulag
Indian Government passes bill in favour of jailed politicians
The passages do not have the same number of words, so just looking at the number of seconds isn't sufficient. You have to use the word counts for each in order to get the words/min.
It's not necessarily about misbehaving. You can "behave" and yet still derail a discussion or provide no useful input. I'd say there wasn't terrible uncivil about the internals list.

But it's less like a technical discussion list and more like an open forum. The signal to noise ratio is pretty low.
Ask HN: San Francisco Mayor announces entrepreneurship program
http://entrepreneur.sfgov.org/announce/
http://www.forbes.com/sites/tomiogeron/2013/09/06/san-francisco-launches-tech-incubator-to-transform-governments/

What would be good products and services for this? I am considering applying as an entrepreneur.
Does KeePass and derivatives count as remotely similar? They work well for me
Ask HN: Please help a first-year CS student contribute to OSS
Hi HN,

I'm a first-year CS student. I know a little bit of Python, JavaScript, SQL and C# - all to the level one would expect of someone who has completed a CS101-styled class in that language (except maybe JS).

I want to contribute towards something useful, and I want to do so as part of a community. The obvious answer is to look for an open source project, because they're everywhere, and all love volunteers.

But I have a problem. I don't know how or where to begin. I look at projects that look exciting, yet I become dumbfounded. I need to begin somewhere - some project and/or community - that is simple... I feel that I need hand-holding, but who could possible have the time for that? As much as I'd like to, I know that I - sadly - do not have the time to hand-hold beginners in my own area of knowledge (as well as a CS student, I'm a finance graduate).

I would hope that such assistance might result from a project or community structured as such. Surely I am not the only one in this boat. Does there exist some sort of structured open source project and/or community that offers such pseudo-hand-holding? Or, am I starting to early; must I learn more about data structures and software design before looking towards OS?
Every Netflix TV Series Sorted by IMDB Ranking
There was a new rule that censored portions of a newspaper must not be left blank but filled up with other matter; as a result it was often impossible to tell when something had been cut out.

http://www.theonion.com/articles/let-me-explain-why-miley-cy...
CatpchaJacking: A new approach on bypassing the Captcha.
The nice thing about Kochiku is that it is a free open source project whereas CircleCI is a paid hosted solution. If you have hardware available to use as workers on then Kochiku is free to use. There is a real cost to the time required to setup and maintain Kochiku but, at scale, within a larger company, this route can make sense.

I am sure CircleCI takes security very seriously but it also nice (and a requirement for certain companies) that with a self hosted CI server, that your source code does not leave the company.
Dear stupid, stupid NSA
Amazon wants to offer a phone for free, without a contract
In for a penny, in for a pound.

If you care about security enough to use a password safe you might as well also use an open source solution that has even a remote chance of having its code looked at by more people than the ones trying to sell it to you.

I mean, I know 1Password is all pretty and animated and things, but things like KeePass aren't so ugly as to be unusable.
> "Through this vast system of unlawful imprisonment, the North Korean regime isolates, banishes, punishes and executes those suspected of being disloyal to the regime," the report states.

I wish it was more clear. That statement just leaves me with more questions. How is it unlawful? Is it unlawful due to UN membership agreements of some sort? Due to some other treaty they are part of? Unlawful based on their own laws that they then ignore?

I'm not implying I think it's legal, just that a statement such as that, in a paper of one nation describing the actions of another, and read from a third, leaves a lot open for interpretation.
A little warning that you're linking directly to a excel spreadsheet would be nice.

Also, isn't it 2013? Aren't there like a bajillion ways to put spreadsheets on the web that don't involve an excel spreadsheet these days?
> Yes, but the upside is you avoid the complexity headaches of interfaces and covariance/contravariance and generics and all that stuff.

Maybe it's a matter of what you are accustomed to but not having explicit declared types gives me headaches. I find code without types horribly unreadable - because I can't see at the first glance what data a function processes, etc.

Also dynamic typing and its runtime type checking gives me that uncanny feeling of "something might be wrong but I won't find out till I hit it".
Until we solve "the password problem", what I'd really like is a small dedicated hardware password manager. Like Trezor (http://www.bitcointrezor.com/) but for passwords.

But there are a number of problems:

1. How do you authenticate yourself with it? If you lose it you don't want the thief to be able to extract your passwords. You need to reintroduce the "something you know" factor (hard to enter passwords in keychain sized devices), or maybe "something you are" factor (fingerprint? RFID implant? only half joking, I'd consider it)

2. How do you perform backups without exposing the whole database to your hosts?

3. How do you interface with mobile devices? Public computers?
My gut reaction to this story is to judge Davecat because, honestly, the concept of coming home to an apartment with a "synthetic woman" has a Steven King novel quality to it.

But...when I try to get past that to offer a constructive comment, I can see one way in which the dolls are appealing. Having been in a longterm relationship (with an organic woman), I appreciate what Davecat called "consistencies" — the idea that another person will simply be present when you get home from work.

After a while, I think, we learn to appreciate our partners' company without needing to speak or be doing things constantly. And I can see how a humanized object could serve that purpose for people who're unwilling or who don't want the added responsibilities of having an "organic" partner.
I'd add folks like Adam Langley, Damien Miller, and Michal Zalewski to that list.
C# is a great language, I give you that. But the runtime is major turn off.
You can still encrypt data at rest (on spinning or flash memory) and use it for jobs like these. It's just decrypted while in RAM for use.
Yes, any horizontal distance is the danger, but that's not generally what movies show. An example is the movie 'The Mexican'.

Birdshot is somewhat powerless anyways, at even minimal distances, although I wouldn't particularily volunteer to be on the receiving end.

Ask Dick Cheney's hunting partner how this feels. I believe the doctors were more concerned about a pellet traveling to his heart/brain via an artery (possibly causing a heart attack or stroke) then the damage to his body.
Learn modern OpenGL
Linux vs. Bullshit
I'd like it to actually be hardware with tamper evidence (or response, even better), unlike trezor. That makes it a lot easier to use a weaker password or biometric to authenticate with it, safely.

The unknown thing is whether it should communicate directly to the computer, or have all communications mediated by the user. I'd be more comfortable if it only had one-way communications capability (user enters something on a device-local keypad, it sends data transmit-cable-only back to the computer), but that's not going to work with mobile, probably.
Find the backdoor or STFU.
That's quite awesome and inspiring. Please open source it and add lots of comments
- Don't even think that you are wasting your time !
- Ruby/Rails , Python/Django , Node.js
Personally I recommend keeping vaccine exemptions but not encourage people to use them.
while its a welcome move, it should have been done some time ago.
Unfortunately, the developer of Keepass has made the choice of using .NET for development, which means it's pretty much Windows only. There are some non-official clients for Mac OS X and Linux but they don't work great (missing features like auto-completion or browser integration). I'm still using Keepass on these platforms though, but I can see how a truly cross-platform solution like 1Password is appealing.
I recommend reading His Robot Girlfriend - a free fiction ebook at http://www.smashwords.com/books/view/1864

It isn't that well written, but does have several interesting angles beyond being a sex toy. What happens if the robot is able to prepare your meals - will you eat better? Or act as a personal trainer? Heck what if it can go through all your stuff, work out what you don't use and put it on eBay?
Honestly, it seems to me that the author is upset when a 10 billion dollar company just gave a big F you to the design community, and this is a little hissy fit.

Look at all the news it generated, look at all the people talking about it. Change, The big old giant company is changing.

And seriously, having worked with a few designers, they are the biggest little bitch when they feel insulted because you didn't come to them for "fashion" sense on design.

Reading from a developer's viewpoint, this article is about an "artist" whining because a 10 billion dollar company said/showed that you can do their "month" long work in a weekend. The author's "this is unprofessional" is an attack that yahoo isn't playing by his rules.
There is no reason to have a vaccine exemption unless there is a legitimate health reason (allergic reaction, etc.).
You could emulate a keyboard, and have the Bluetooth/USB stacks implemented in dedicated chips, with a 1-way serial connection from the main MCU.

But it's pretty nice to be able to hit a keyboard shortcut and have it figure out which password to fill rather than scrolling through a list. It would be pain to enter all the site names without management software too.

As always, convenience vs security.
Real time (and spacebar) killer! Got to 257000 points before making myself stop. A few gameplay adjustments and multiplayer, and I bet I'd lose a whole evening to it.

The code appears to be very well-structured and readable, even though it's compiled to JavaScript. IMO, a good example for those learning to use canvas (like myself). Thanks a lot for sharing.
"With write-through caching, things are going to be very badly messed up if SSD dies"

You probably meant the reverse of that (With write-back caching... etc.).
Do you trust Google to be able to secure your data more than you trust the NSA to be able to secure their own data from a single twentysomething?

If so, what you are saying is equivalent to Google being more secure than the NSA.
Bruce Schneier uses Tails: https://tails.boum.org/

>Since I started working with Snowden's documents, I have been using GPG, Silent Circle, Tails, OTR, TrueCrypt, BleachBit, and a few other things I'm not going to write about.

http://www.theguardian.com/world/2013/sep/05/nsa-how-to-rema...
I'm pretty sure that your comment would be well received in their forums. They seem like nice guys.
Success stories of moving from cloud hosting to dedicated infrastructure?
I've been recently investigating various options for where to move our hosting off of AWS and I've gotten pretty curious about dedicated offerings like OVH or Hetzner, which promise bare metal performance at a very affordable price. AWS is actually very awesome (and EBS is pretty convenient for our Postgres needs), but the performance you get for the price is questionable. e.g. an m1.large would cost me around $200/mo, whereas the equivalent OVH machine (with even more disk space) would cost $40/mo. That's a big difference.

I'd be curious to find out if anyone out there has had experience with fulling migrating to a dedicated environment and if there's somewhere I can read about it.

Thanks!
I'm surprised nobody has linked http://crunchbang.org/
Does 1Password have a Linux client? Looking at their page, they appear to only support Mac, Windows, iOS, and Android.
If the NSA is sufficiently far enough ahead in cryptography research, there don't have to be explicit backdoors, just plausible-looking designs that have some weakness that we're 20 years from discovering (but the NSA is those 20 years ahead of us). I'm no expert but this hardly seems outside the realm of possibility.

In 20 years Tor will have served its purpose and the government will have a new strategy. Maybe they'll just try outlawing encryption again. Certainly we'll forget all about the Clinton era by then.
A possession of yours can do nothing other than your will.

Even the masochists are enjoying their will being carried out when they are made to hurt.

To truly love, you need to love an other. Any pantomime that a possession can act out will ultimately be less love.
I use KeepassX on Linux, Windows and Android.
Obvious material non public information, mosaic does not apply. It is always mentioned how subscribers get Chicago PMI data early, never for Michigan. I would not be surprised if this practice wasn't widespread across other numbers. HFT doing their usual paying for an advantage that others don't even know they have.
It's presumably at least fairly close since RubyMotion compiles down to executables?

There's bits of Ruby that aren't implemented (I believe some due to iOS, some due to difficulty?) but what am I missing about the "compile-to-C"?
What on earth are you talking about? I was reading the Tor wiki just a couple days ago, and they have a huge section regarding global passive adversaries (the topic you're receding to). They're very explicit that Tor doesn't protect against that.
Yeah they soon will. Chrome is slightly ahead already.

I wish I hadn't said it noe; it was on the top of my mind, was all.

The much maligned web sockets are actually useful for keeping the game loop light; I even generate meshes in them.
BCBGMAXAZRIA models Epiphany Eyewear smart glasses at New York Fashion Week
Maybe so people in other countries can keep secrets from their governments, if those governments are hostile to us.
What you describe is not a problem of statically typed languages in general, but of Java in particular.

Try Haskell for static typing done right.
> Most people have not lived in a time of plagues or remember their effects. Most people do not read history or look at the morbidity and mortality of vaccine-preventable illnesses in the third world.

This is another great example of why people need to be taught actual history, not the version censored "for their young minds". The people who change curricula and edit textbooks to remove the unpleasant memories, or forward an agenda, do a disservice to everyone[1].

[1] http://www.huffingtonpost.com/2010/03/14/backstory-how-the-t...
YC is doing a great job. Helping people who'll help others is an awesome way to change the world to make it a better space.
You have spoken, all interactions within biological sciences are decided. Thanks for that.
Story of Crowdsourced Testing Idea at 99tests
Way to miss the point. This is so much bigger than just vaccines, encompassing distrust of authorities, misunderstandings about the existence of god, etc.

But sure lets focus on vaccines.
Takes a Village to Raise a Startup 99tests
Oh wow thank you, how did you manage to find the project?

Just by googling?

I have been having trouble finding projects related to the microcontroller I'm working on, there aren't to many but there are a few that exist on github. Of the few that I was able to find, were goldmines.
If you have valid, replicatable evidence where vaccines cause harm, I'm all ears.

But if you're going to rely on anecdotal evidence, GTFO. I'm tired of hearing people not vaccinating their children and causing public health issues because they believe they're more informed than the CDC.
Introduction to "The Reason I Jump" - autism memoir by Japanese teenager
It's a free upgrade coming to everyone eventually.
But isn't that how type inference works in most statically typed languages?

For example, in Scala:
val x = if (some_condition) Employer else Employee

If Employer and Employee both derive from Person, then x will be of type Person. The run time uses dynamic dispatch to figure out how members are accessed from x.

If you want to constrain x, you need to specify the type explicitly.
No, congress and the tech companies have the incorrect understanding that phone calls and emails going through a third party gives that third party consent to share them with the government.
Just as long as the people who remain unvaccinated stay away from me, out of schools, the workplace, and other contact I agree with you. Everyone has the right to be vaccine free, but they don't have the right to be a disease vector and harm others.

In much the same way it's considered (very) rude to sneeze or cough in someone's face, it's also socially inappropriate to not be vaccinated.

In the first world, we don't actually understand how horrible it was prior to vaccines, (horrible doesn't begin to describe it) - so we think that being vaccinated is optional.
Too late for... ?
People would just declare that the nyms are probably NSA. And they would probably be right in some cases.
The effectiveness of vaccines rely on 'herd immunity', that is: you need more than 90% of a population immunised to stop a disease spreading (as vaccines are never 100% effective)(also varies according to vaccine types/adjuvants and disease contagiousness)

So by not vaccinating your self/dependents you are actually extremely selfish as you are benefiting from herd immunity whilst at the same time avoiding the (small) side reactions each vaccine may have. This is one of the most selfish things you could ever do.
To be fair this guy is probably not as far out there as you might think. Consider for one that quite a lot of people believe in transubstantiation; a bit of bread and wine becomes the body of their savior. I don't think this is too far from that, this doll becomes in some way a real companion for him.

Likewise, his little invented back-stories for his dolls are not so materially different than say my relationship with my girlfriend. I don't and can't truly know my girlfriends existence; everything I know about her is basically a story I tell myself based on the things she says to me and what I assume or surmise myself. If it turned out one of these days that she had been completely and totally dishonest with me about who she was - everything I thought I knew about her was not true - in a lot of ways our relationship would have been just as much a fantasy as Davecats.

I'm not prepared to go in for it myself, or even consider it totally healthy and desirable...but he seems to have a good handle on it and I wouldn't be too quick to judge him. Maybe he is a little nuts, but so are most people I have met.
i didn't understand the "we have people abroad" thing. Don't most of the PRISM-involved companies have people outside US and yet collaborated with the program?
But if you run entrance nodes on your intranet, then they have to compromise your endpoint right? But if they compromise that then they don't need to correlate with timing attacks, do they?
Enlargement Exercises - How To Enlarge Your  Naturally
> And that's the obviousness of it. If it were better, it really would have serious traction by now.

You're getting picked on here, and I'm going to do my best to add to the pile. From http://www.johndcook.com/blog/2008/03/25/innovation-ii/ --

"""
In 1601, an English sea captain did a controlled experiment to test whether lemon juice could prevent scurvy. He had four ships, three control and one experimental. The experimental group got three teaspoons of lemon juice a day while the control group received none. No one in the experimental group developed scurvy while 110 out of 278 in the control group died of scurvy. Nevertheless, citrus juice was not fully adopted to prevent scurvy until 1865.
"""

So lemon juice cut the mortality of scurvy in sailors by forty percentage points (!), from 40% to 0% (!!). And a mere 260 years after this was demonstrated, it achieved "traction". Do you think you might be jumping the gun a little here? History would suggest that even if programming in FP style prevented 100% of bugs from occuring, the best you could say about its eventual adoption would be "it's a crapshoot".
Please do if you have something of value to share.
I guess my thinking is this. Tor is open source. If you can show a backdoor, do so.

This is why open source crypto is so important these days.
There should be a thread for co-founder pitches.

It should include what type of roles you can do as a founder, which roles your future co-founder should fulfill, and your location. Also a general description of your idea, what you've built so far, and your technology stack.

Personally I don't mind working solo on my startup - but if there was a thread like that I'd post to it to see if someone could complement my skills.
The Nexus 7 Has Problems Displaying Videos from Vimeo
"GNU/Linux" is the OS, "Linux" is just the kernel. The GNU project is responsible for many of the crucial parts responsible for making a complete OS, save for the kernel. Abbreviating the OS with "Linux", for the sake of convenience, should be avoided in order to give the GNU project its due credit.