skysight-inc/HackerNews huggingface dataset:
Well it's more a social design. Google probably has a record of all of your emails, deleted or not somewhere and a court order can get those emails. Cryptocat will not. Gmail is also very integrated into most people's devices, so it's easier to get to someone's email records by getting at their computer, phone, cookies, etc.
Oh, don't forget other governments. If the NSA can do it, China and Russia certainly can too.
I have one (the RT)... it's well-engineered, but it doesn't hold a candle to the fit and finish that I've come to expect from Nokia. Personally I'd rather they kept the Nokia branding, it's IMO stronger in the phone space than MS is.

Just clear up all that Lumia crap, the model numbering is insane and impossible to figure out. I had to wiki it just now.
BBC inside GCHQ: Cracking the Code [2010] [audio]
Despite its disjointed nature I found that some interesting notions and feelings made their way out of the text and into my brain. I might even say that it was good. Definitely worth the effort for me.
(very basic) game animation engine in clojure
Got my eye on it. So I can run the other way and not get sucked into a black hole!
A RNG that is reducible to a different believed-hard problem has possible features, so it's not like there could never be a reason for someone to choose this generator. What we could be seeing is the discovery of one failed attempt of a shotgun approach to promulgate insecure primitives. It's hard to know what will happen to become commercially successful, so spray and pray.

Something this blatant does seem like a severe misstep, but perhaps what led to discovery of this case is the wide body of public knowledge on number theoretic crypto. The energy of the public sphere seems mostly devoted to studying problems with interesting mathematical structure. Symmetric crypto has been around a lot longer, and is sufficient for state security purposes, so one would expect the NSA to have a deep analytic understanding of it (hence the differential analysis olive branch). It's not hard to imagine that they'd have ways of creating trapdoor functions out of bit primitives, generating favorable numbers with plausibly-impartial explanations, etc.
http://www.animatedengines.com/index.html

Even steam engines.
It'll work now if you remove this if block...

https://github.com/dotcloud/docker/blob/master/server.go#L12...

...and create your own images.

It's unsupported, but it'll work.
retard atheist.

You can't just do what you like. there are rules.

God says...
C:\TAD\Text\WEALTH.TXT

eby to occasion, as much as possible, a constant
dearth in the home market. By the discouragement of importation, the
supply of that market; even in times of great scarcity, was confined to
the home growth; and by the encouragement of exportation, when the price
was so high as 48s. the quarter, that market was not, even in times of
considerable scarcity, allowed to enjoy the whole of that growth. The
temporary laws, prohibiting, for a limited time, the exportation
of corn, and taking off, for a limi

-----

Low class people are animals. High class people live in straight jackets. To gain social status, you must suppress animal instincts.

God says...
lover unbelievers 3000+ fence perceived religion confounded
umm_what_now do discretion decide stuff remnants emerging
sweetened perishable owing interpretation beautified Epaphroditus
itching Ivy_league halved silver its commiserates reference
perspicuous immersed print grammar-learning -unto drives
cowardice amiss espoused amendment Courage Shepherd showedst
liberal cleared ridiculous
Since the bug (if I understand it) would prevent anyone with an existing database from upgrading because then nobody could login, it doesn't seem like a particularly effective undetectable backdoor.
What about a JavaScript version sites could use as a library? (My personal website is text-heavy and might benefit from a very subtle version of this, but I can't A/B test a browser extension.)
Elon Musk Creates Rocket Parts With the Wave of a Hand
How Pastor's pay is like a Ceo's pay
Just a counterpoint to all the negativity: The increase in speed was instantly obvious for me. Will be giving this a try for a few weeks at least.
Iranians arrest 14 squirrels for spying
I am confused. When I see HN or facebook certs they show 128 bit encryption in the browser box. 128 bit seems pretty low.
47 Degrees adopts Scala
The bookmarklet wasn't working for me on Chrome (permission errors), so I threw together a Chrome extension with the highlighting code: https://github.com/egonSchiele/beeline
When you decide you want to make a career out of pushing papers and borderline lying to investors, stick to it.

This reminds me of when I asked on HN what would be good professional management that is as general purpose as the old MBAs.
LSD is good for you, say Norway researchers
File descriptors and RAM for the buffers.
No they're not. The article is titled 'why I'm never going back to PAX'; the author's position is that she's given up on it. She quotes and links to two other developers who already don't go or won't go there again for the same reason, and quotes a 4th person who says that not going is difficult because since PAX is the biggest end-user game conference, staying away impacts sales. Generalizing from that observation as you did is inaccurate and misleading.

Just because the other person is also uninformed on the subject doesn't mean you should skip reading the source article.
Isn't that why proper typography establishes line width limits and a bit of space between each line? That always made it a lot easier to "know where I was"...when I could see the beginning and end of a line of text without having to move my eyes.
> It's common to take photos of receipts for business purposes. Is there a situation where that type of behavior indicates insecurity?

Yes, such as when you are at a fancy restaurant you frequent but your friends wants to let his social network know that they just dropped a large portion of their salary on some fish on rice by taking picture of the receipt because it's "ballin"
Correct. Shor's algorithm renders any use of RSA... pointless.

And while there are limits to the applicability of Grover's algorithm, you're correct that it effectively cuts the number of bits in any cryptosystem it applies to in half. Which, to my nonexpert eyes, looks to be most of them.
Ask HN: Alternative to curl https://install.foo.com | /bin/sh?
It's well known that curling a script from the internet and executing it directly like so,

curl https://install.foo.com | /bin/sh

seems to be frowned upon [0][1] for security reasons[2][3]. However, it's an incredibly effective way to help bootstrap a development environment. What are the best approaches to achieving the same goal without going through lots of the trouble with creating packages for every target system out there?

[0] https://news.ycombinator.com/item?id=4701745

[1] https://news.ycombinator.com/item?id=6008196

[2] http://blog.classicalcode.com/2012/11/curl-pipe-sh-exploit-proof-of-concept/

[3] https://news.ycombinator.com/item?id=3315461

real examples in the wild:

ruby -e "$(curl -fsSL https://raw.github.com/mxcl/homebrew/go)"

curl https://install.meteor.com | /bin/sh

bash < <(curl -s https://rvm.io/install/rvm)

curl get.pow.cx | sh

curl -sS https://getcomposer.org/installer | php
CIA agents acquired the records after the 1989 fall of the Berlin Wall

http://news.bbc.co.uk/2/hi/europe/703303.stm
No, I'm saying that I cross compile and have others test things out. I develop mostly with C++ and rarely need to use OS-level APIs that aren't included in things like Qt or Boost.
Just shame on the rest of countries around the world to let the USA control and abuse the internet and all relevant technologies. Every major chip, OS and software is created in the USA. If people elsewhere lack the brains and innovation of USA, they should accept the consequences. Of course, I'm part of the dumb ass rest of the world.
Not any better from an anonymity standpoint currently I think. The hidden service's server still runs traffic from it-self to a Tor entry node , through the network, and then back out via an exit Node. So if the NSA can observe all entry and exit node traffic timings, they can figure out who is talking to the hidden service and where it is.

https://www.torproject.org/docs/hidden-services.html.en
Disney Infinity's latest trailer reconstructs BioShock Infinite's Columbia
Would you say that using a browser like Chrome and using TLS 1.2 with 2048-bit RSA keys and AES, is likely to be safe for many years to come?
Whatever child; goodbye.
This is an awesome infographic. One of the most used books in our home school curriculum was "The Way Things Work" which, for the most part, covered pretty much all of the things that we needed it to. We also took apart a few things to get a more 'hands on' appreciation of the mechanics.

For engines though, the "Suck, Squash, Bang, Blow" mantra used in the Secret Life of Machines was perhaps the most durable for my kids.
There are such things as private libraries (here's one in SF: http://www.milibrary.org/), and public libraries in other countries have different policies.
I wouldn't trust Chrome's extra methods in this case. Nothing against Google whatsoever, but closed source, commercial software from a company the NSA has expressed a great deal of interest in fooling around with is probably the worst possible choice in this case. Same with Safari and IE.
Some crossings here, UK, have turn filters; some have full pedestrian access (ie diagonal crossing of a crossroads is enabled). Whilst it's possible to have a sequence in which some roads necessarily have halted traffic usually on single carriageway roads [one lane per direction] it's still an optimisation to ignore the pedestrian phase of the sequence.
Again, if the original comment was meant to imply that candidates could legally receive significant quantities of money from anonymous sources to finance their campaigns, that's flat wrong.

I'm not sure what argument your comment is meant to respond to. Candidates and PACs sometimes run afoul of FEC regulations? Who's saying they don't? That's a big jump from a regime of legal anonymous direct contributions implied by the original comment.
DJB has always been laughed off as an eccentric paranoiac, and yet as the years go by he almost always ends up being proven right. It's been kind of a funny pattern over the past few decades.
The NYC Mayoral Race
Those old Handy organization films are incredible, here is my favorite but GM commissioned a lot of them.

http://www.youtube.com/watch?v=CCtJlgtZnBY

The US Army also has many very nice ones intended to introduce mechanics as well, there is one about power steering that is very good, but many more as well.

http://www.youtube.com/watch?v=AlpvyWAA8a0
The importance of vertical integration: Why Microsoft had to buy Nokia
The sort of booby who thinks Microsoft is evil has obviously never heard of Enron, Monsanto, Goldman Sachs, Halliburton, BP etc etc.

It's perfectly fine to use children as slave labor, destroy the environment or actually kill people (eg Dow in Bhopal).

None of these is anything like as bad as paying American workers to write useful software and sell it.
Fortunately using encryption now means you have something to hide & thus are gives the government reason to spy.
... but you could also just use a good mouse to perform complex 'mousing'.

I was disappointed to see that the Yoga 2 pro does not have a trackpoint.
You left out speed. The reason we do not use PKE exclusively is that we do not want to wait a week to encrypt a megabyte of plaintext. In fact, it is not so much that PKE is what is slow; rather it is that theoretical constructions, which are the only thing we have for PKE but which also exist for symmetric ciphers, hash functions, etc. are slow.

Also, while PKE is sensitive to implementation issues and parameter choices, you can have much higher assurance that there are no theoretical weaknesses than you can have with something like AES. With PKE you usually have a proof that the security of the system depends on the hardness of one problem, regardless of the specific attack strategy the adversary uses. We do not say that ElGamal is secure against chosen plaintext attacks because we ran a battery of tests designed to detect vulnerabilities to particular CPA strategies; we say it is secure because we can prove that any CPA attack on ElGamal can be used to solve the DLOG problem, and so we only really have to worry about the lower bound on solutions to one problem. With something like AES we only test for certain attack strategies and a few general heuristics that suggest a block cipher is secure.

This is not to say that AES is not secure, nor that PKE is a magic bullet.
What Is The Future Of VC? Find Out At Disrupt SF
In the theory? Design? Implementation? Execution? Use?
ECMA-262-3 in detail: Closures
6 Strategies for Black-Box Software Testing
For me as well. I'm actually very surprised by all the negative reactions.

FWIW, when I looked the demo, I thought to myself, "Ok, I'm going to try to read this quickly." What was so impressive was how easy that was to do. Total comprehension, less eye strain. Sold.
(a) the code in question is part of Chromium, which you should read, and (b) Mozilla has adopted it as well.
Obviously keyboards and mice are not solid. Either that or you're not really a deep thinker, eh? ;-)
I'm hoping to see this screen rez on a 15" or so Thinkpad.
Mozilla Persona: Simple sign-in for the Web. Join our SF meetup to learn more
Are you building, managing, or owning a website or a web-app where users need to sign-in? Join us to learn more about Persona, a simple "sign-in with email" for the Web, developed by Mozilla. We'll be providing an overview of Persona followed by a Q&A session where you can ask any question you have for us. After Q&A, we'll be hosting a mini-hack session for participants who are interested in getting started implementing Persona right away and getting support from Persona developers who will be present in the event.
Just because Linus can get away with treating people like crap, doesn't mean everyone can get away with treating people like crap.
Why is the NSA spying on innocent people?
We finally have proof that we are, in fact, all being spied on, all the time, and there's little or nothing that can be done about it. Great.

But one aspect of this story still baffles me. Why would they go to such great lengths to amass all this information, the vast majority of which is probably useless from a national security standpoint? What do they have to gain from this state of total surveillance?

I've seen a guy in another thread say that it makes no sense, but surely he must be mistaken! There must be a plan, a strategy, right? How do I explain this to my friends and parents?
47 Degrees uses Heroku for Scala hosting
Do not trust anything that is based on having a service send you your cryptosystem every time you need to communicate.
Google Is Waging War on Apps That Attack and Steal From Your Phone
I actually checked before my comment. This article states that the combustion engine participates above 70 mph:

http://gm-volt.com/2010/10/11/motor-trend-explains-the-volts...

Maybe later models altered that arrangement.
"MediaGoblin is a free software media publishing platform that anyone can run. You can think of it as a decentralized alternative to Flickr, YouTube, SoundCloud, etc."

This information is on the front page [1], but there is no link to that page from the linked page that I could find.

(Note for people reading this who design websites: Make sure someone linked to any page on your product's site can easily find an explanation of what your product is and does.)

[1] http://www.mediagoblin.org/
I must be the only one who liked the Lumia name brand, and I use an iPhone. Maybe it's because it doesn't sound techy (Galaxy, One X) or trendy (iSomething).
Yeah, it's pretty amazing how much things have changed. That raw log data was about 250GB/year which is nothing today but when we started collecting it we were paying $1000/GB.

Actually, they're probably still paying over $100/GB. The whole datacenter was outsourced to Perot Systems in the mid-2000s, and the storage fees were astronomical. We calculated that Perot must pay a separate tech to stare at each individual hard drive with a replacement in-hand in case any errors were reported. At least, they could afford to do that with what we were paying them for storage.
You think no-one's tried recreating various distros' binaries from their published source, to check they're the same? E.g. Jos van den Oever did that for Debian, Fedora, and OpenSUSE here[1].

Which isn't to say that backdoors inserted into the binary that aren't in the published source are impossible, only that they need something more subtle than the crude/easily-detectable 'merge backdoor, compile, ship'. Something like a Ken Thompson 'Trusting Trust'[2]-style attack. (Though there are ways of at least having a good chance of detecting even those - see [3]).

(More likely, IMHO, are just deliberately-introduced, plausibly-deniable bugs in the source - think [4]. Yeah, they might be found & reported by an outsider reviewing the source, in which case you thank them, fix it, and introduce another couple somewhere else next week).

[1] http://blogs.kde.org/2013/06/19/really-source-code-software

[2] http://cm.bell-labs.com/who/ken/trust.html

[3] http://www.dwheeler.com/trusting-trust/

[4] http://underhanded.xcott.com/
There are thousands of PhoneGap apps out there, pretty much disproving your point.
Stacey Vanek Smith, this is your data profile [podcast]
Yes, it was obviously a very chaotic situation, it doesn't surprise me that the CIA got their beak wet.

Whether the mission of the Federal Commissioner for the Stasi Archives was to destroy or preserve the records probably makes little difference in this case, those records were seemingly stolen before a policy towards the records was decided upon.
Company wants us to write about "preventing the next Snowden"
Google and other corporations still represent a huge risk in that they can be compelled to degrade or modify the feature, and since all you get is a binary blob, you have no way of knowing.

The security provided by the feature, in this case, is then questionable. I'd trust Firefox and Chromium, but not Chrome for this reason.
Git Off My Lawn – Large and Unmergable Assets
"Jumping from word to word" is a pretty slow way to read - "speed reading" involves chunking blocks of words or even entire lines - if you watch some people when speed reading their eyes don't scan left-right at all, but just stop briefly on each line as they scan down the page.

I felt (without experimenting in a measurable way) that particularly the blue-red transitions _really_ slowed down my "normal" reading…
Up and Coming Tech Companies: Ones to Watch
Quite; I think it would be more effective for him to run for office and solicit donations.
Rhizome | A Letter to Jennifer Knoll
Maybe it is some very elaborate ruse by the PHP team to create regression bugs that break frequently used functions badly so when they slipped in the NSA bug it would go undetected but I doubt that. I lost count of how many times a PHP stable release introduced a massive regression bug.
The US or the Internet?
Legalities are irrelevant, what is important is the reality of the system. Widespread illegal bribery with little to no enforcement is not a better situation to be in than widespread legal bribery; the situations are functionally equivalent.
Senators aren't supposed to represent the will of the people in the first place. The Senate is composed of elitists by design; if anything, they're supposed to represent the interests of the States.
HTML5 games on Xbox One? Microsoft eyes cross-platform development
You're not alone! It's got a lovely ring to it. I've been using iPhones since the day they came out, but have been seriously considering getting the Lumia with the awesome camera.

I'm not going to buy a Microsoft phone though (as unreasonable as that may sound).
I wonder whether this has an effect on eyestrain or reading longevity.
What is the point he is trying to make in this incoherent mess?
For me, that'd be completely unworkable.

Moving the mouse/cursor down the page line at a time to read? _Seriously?_
That would be the Thinkpad X230t and Thinkpad Twist. Neither of them are using Haswell, but the X230t will probably be killed, the Twist will probably be updated.
The Ultimate Bet scandal was about employees cheating to make money for themselves not the company itself cheating. In this case employees cheating in this game wouldn't be able to profit themselves.
Actually it's a good thing they are able to get a response from agencies about their information. Their response in this case supports that the leaked information is real and also that the agencies care about its release. This just strengthens the case against them and reinforces the idea that they are the bad guys in the story.
It doesn't make me read any faster and I have the feeling I pay less attention to the content. Am I the only one?
IFFT Introduces SmartThings channel for sensors and devices
Paypal already has a policy for dealing with users who reverse transactions out from under them. Unfortunately for the users, that policy is known as "scorched earth". We're talking account suspensions and referrals to collection agencies.

It would certainly be a lot less skeevy if it was done for a service-oriented reason (i.e. one way transactions) instead of the "because fuck you" reason that they appear to use currently.
I think you can use the co-worker to your advantage. One thing we must all learn is how to defend and justify our decisions. This can either be done before or after implementation, which is what I believe the post is talking about. That is, people criticising others' implementation decisions with limited context. Most of us have read stories of Gates or Jobs dressing down employees that are unprepared. You could consult your co-worker before presenting in the future; assuming you can develop your relationship with him to the point where there is no malice in such an interaction.

On the other hand, I do also recognise that some people just like to mess with others. In such circumstances, if there are no other political concerns, I would simply ask the person the come up with an alternative solution, then argue the alternative on its merits vs. what you have designed. Given your 70 pages of documentation, a simple pros vs cons list that takes into account goals of the project for various timeframes and scales should result in a clear winner. Or should both designs be of similar value, then there is little point in changing your documentation anyway.
Fact sheet: Ubuntu 13.10 (Saucy Salamander)
Paging Mrs. Streisand to the white courtesy phone... Mrs. Streisand to the white courtesy phone. Thank you.