skysight-inc/HackerNews huggingface dataset:
TLS_RSA_WITH_AES_256_CBC_SHA256 is not forward secret (if you have the certificate private key you can passively decrypt all past/future sessions) so removing it is a great idea. I'm only responding to what you said and not making a judgement about the rest of the guy's suggestions.
escrow.com specializes in domain transfers. I have used it several times and found the process easy, transparent and secure.
Bingo. This guy should quit commit or quit.
SWAT team kills 107-year-old Arkansas man in shootout
I second just telling the IT department about it so they can tell the vendor. I work for an EMR company and I'm pretty sure UCSF is one of our organizations. I don't know if the hospital will pay you extra for an interface solution that the EMR company is supposed to take care of. I'd check with your hospital first.
Understanding Unix Signals: The Self-Pipe Trick Explained
Looking forward to time tourism. Would be great fun to go back to 1993 and chat about On Lisp, get in touch with Chris Carter about his upcoming series, and catch the In Utero tour. (Among other things.)
Which is fantastic endorsement. GUIs and the Web may be nice for mucking about - but when I work - I work on the command line (or in emacs). All I truly care about is daemons and command line interfaces.

Of course - my daemons and command line interfaces have to produce pretty output, for people who care about other things. But those people are not me.

So I installed Plan 9 from User Space[1] last night - largely on this recommendation :)

[1] http://swtch.com/plan9port/
Email Validation Rules
> “ignorance of the law is no defense” only applies to the "natural" crimes like murder or theft.

It really doesn't (at common law, at least). If you don't believe me, try pleading ignorance of the law when you're arrested for breaching a traffic regulation. It's your responsibility to know the criminal law - however impractical that might be.

There is a bit of leeway on the boundaries between mistake of law and mistake of fact -- e.g. in England, a tenant who destroyed something he'd installed himself, not knowing that under civil law it'd become the landlord's property, had his conviction for destruction of property quashed (R v Smith [1974] QB 354). And apparently in Canada there's a defence of "invincible mistake of law" in situations where it's literally impossible for the person charged with a crime to have known it was a crime at the time it was committed. But the general principle is that ignorance of the law is no defence to any crime, however 'unnatural'.

IANAL.
You are correct, they are randomly chosen. See my previous comment: https://news.ycombinator.com/item?id=5841740
According to the EFF, a lot more : https://www.eff.org/deeplinks/2007/11/undermining-freedoms-c...

It's important to remember that this wasn't in the U.S. and happened in 2005, when Yahoo's public policy with regard to cooperation with authorities wasn't under scrutiny, and therefore, a lot more complicit than today. The cost of complicity was quite a bit worse and even Yahoo acknowledged that fact.
A few related skeptoid episodes, with a few excerpts:

http://skeptoid.com/episodes/4239 "Are gluten free diets really good for your general wellness?"

Gluten free diets actually are necessary for some people, and advisable for others. [...] Yet those whose business is the sale of gluten free products would often have us believe that many more of us should buy them. [...] So think of gluten sensitivities in the same way you'd think of bee stings or peanut allergies: of great and very real concern to a small number of people, of some concern for a few more, and of no concern to the rest of us. Don't let anyone tell you that gluten is harming you in some way that's so far not supported by any science, or that you should avoid it for the purpose of general wellness. For most of us, gluten is our friend; but never forget that it is also, like many compounds, definitely harmful to some.

http://skeptoid.com/episodes/4112 "Are GMO crops dangerous, or a boon to mankind?"

Nature's method of genetically hybridizing plants is cross pollination, and for most of human history, this is how farmers and scientists have created new and improved species of crops. [...] When it comes to food crops, the idea is to take the strengths of one plant strain, such as an immunity to a certain disease or a hardiness to certain adverse conditions, and transfer that strength to another plant strain that needs it. [...] and by 1962, a new strain of rice called IR8 was feeding people all over the world. IR8 was the first really big modified crop to make a real impact on world hunger.
A First year resident know jack shit about medicine and works 13 hrs a day making mistakes along the way in hopes of learning enough so not to make these same mistakes when they will be in command (5 years from now).
Mac OS X is a necessity for some users specially in media related industries and not only. It also manages to offer most of the software regular users want and Apple makes a profit from Mac sales.

As hardware and software Windows Phone is by no means a failure. Nokia creating beautiful devices with good cameras and the fact that even in low specs WP runs snappy is promising and helped a lot to achieve this 4%. But WP is not yet profitable.
One of the reasons Windows Phone is considered to be a failure is that it hasn't managed to create an ecosystem where most popular apps exist at the three years of its existing form (counting from Windows Phone 7).
I dunno. On the civil liberties front, the EFF was complaining by April 2009 that Obama was worse than Bush regarding state secrets privilege. The NSA issues are things that appear to have accelerated under Obama as well.

Sure Congress bets some blame, but you can't blame the opposition in Congress for Executive abuses of power. That we are out of Iraq was despite Obama's best efforts to the contrary. That we got some transparency in civil liberties vs the war on terror have occurred despite Obama's war on whistleblowers.
Unexpected Stories From a Hacker Inside the Government - DEFCON
I have a mixed position on this. I do get annoyed by squatters who have no intention of building. I also have domains that I want to build on eventually, but I can't do it yet; so to other people it looks like I'm squatting.

I'm not waiting for cash, I'm waiting for time. Every now & then I do get to one of them.

Though -- I don't often get requests to purchase (except for the domain that has a working business... I get requests for that all the time). But do people not approach me because they're sure I'll try to squeeze out every possible penny from them?

It's not a great situation, though I'm happy to hear suggestions.
First, the law in the OP is an American law.

Second, I find it difficult to believe that there are countries where driving slightly faster than a number printed on a road sign can result in prison time.

If I've made an error, it's because I drew a reasonable, albeit incorrect, conclusion; it isn't because I'm an ignorant American who doesn't consider the existence of other countries. If you had a correction, you should have posted it rather than a snide comment along these lines.
Hi, I'm a 3 time healthcare entrepreneur (10 years) who has been down this path, and many like it, several times already. The problem you are describing is well known and in your hospital's IT queue, just so low on the list to be invisible.

As others have rightly pointed out, the technical issues are perhaps 10% of the problem. On top of that, because each EHR is configured so differently, your solution will be a consulting effort not a product (read: expensive)

My suggestion - thoroughly evaluate how difficult this would be to get approval for at your hospital. If you get past this stage, talk to other hospitals. Learn what the implementation process will be at each hospital. This will likely dissuade you but, if not, you've found a niche.

The reality is that this is not an IT problem but a process flow problem. Somebody with a lower pay grade should be entering this data, say an MA or a 1st year resident, until the IT team can prioritize this known issue.
I am not, but given the size of the current federal government I think it is inevitable.
Some details on that ami:

Specs:
http://thecloudmarket.com/image/ami-cfa332ff--plan9-fossil#/...

Link to launch via AWS Console:
https://console.aws.amazon.com/ec2/home?region=us-west-2#lau...
You can get jail time for speeding in Norway, so definitely criminal.
The MDPnP group has done a lot of work on interoperability and securing interactions. I don't know how much device-specific information they make available, but some of the testing procedures could be helpful for validation:

http://www.mdpnp.org/
Working Smart > Working Hard

If a Dr. sacrifices their productivity for a short time, with the result that he increases the productivity for all Dr's; then the Dr. has done the opposite of cheating.

>I can only imagine what he will be doing 7 years from now.

OP could follow your advice and be an average Dr. Or OP might actually succeed in improving wasteful processes in hundreds of hospitals.
I played a few levels of this. Its a load of fun, thanks for sharing.

I did have to Google for ruby tutorials to figure out things like instance variables and I'm sure somebody who has no prior programming experience would really struggle with this. Having said that, this could easily be modified into a proper tutorial and even now its a fun thing game to try out what you learn in some other tutorial.
Is (NIST) P-256 secure enough? I might be wrong, but I think DJB is suggesting it's not, and that Curve25519 is preferable because it meets all the needed security requirements:

http://cr.yp.to/talks/2013.05.31/slides-dan+tanja-20130531-4...

And why just 128-bit AES? AES-256 is not much slower, is it? I think I read it's only 30 percent slower than 128-bit encryption. Either way PFS should become the default for all encrypted communications.

Companies need to start setting their own minimums years ahead of what NIST is recommending. NIST recommended the use of RSA 1024-bit until 2010, so that probably means companies should've moved away from RSA 1024-bit at least 3-5 years earlier. Yet here we are, with most companies today still using RSA 1024-bit 3 years after what even NIST recommended. Time to put security over profits first.

Also, as Ptacek is saying, it's time to implement TACK for certificate pinning:

https://twitter.com/tqbf/status/375742847485358081
I think one of the issues is the sheer overwhelming nature of the challenges we face. We hear so much about so many different things that it is almost paralyzing. Icebergs melting, bees dying, jellyfish taking over, etc. While some of the issues share the same root cause, it can be too much to contemplate for many.

There is also a lack of connectedness to these issues for many, who are simply trying to subsist or are otherwise entrenched in our endless culture of distraction. It's the same reason that we can engage in a war for over a decade, killing and maiming many of our own, as well as (some estimate) hundreds of thousands of Iraqi civilians, yet be largely consumed in our own personal lives. We compartmentalize, which is in part a human survival tactic. It is also because we literally do not connect our own actions with the problems or solutions, and we have a broken politics which makes many of us feel largely powerless.

To this mix, you add countervailing interests, who know that they need only use media and various other tactics to sow the slightest bit of confusion over an issue to freeze any meaningful mass action.

But, with all of this, there still seems to come a time for some things, wherein a critical mass or tipping point is reached. People mobilize and a new zeitgeist takes hold. Then it becomes comfortable, convenient, and important to be part of the solution. I think having enough people personally affected by an issue is one impetus, and another is what forces or other voices can be galvanized to participate (even if their own motives for doing so are selfish). See the Breast Cancer Awareness Movement.
This is so fucking stupid. The circle jerk is getting seriously weird around here...

Did the NSA subvert the Linux kernel when they contributed SELinux?

What fucking tosh...
No, the DHE/ECDHE (ephemeral key exchanges) don't protect against MITM, it protects against passive dragnet decryption. But the RSA/ECDSA/DSS part (certificate signing) does. All TLS ciphersuites include certificate signing to protect against MITM, but not all include ephemeral key exchange.
Don't know. bromium is interesting. Seems pretty similar to qubes-os.

BTW qubes-os is freely available , and i think is partly open-source.
Have lower level people, such as a Medical Assistant or a 1st year resident do the data entry.

ahhh, feels good to do more healing than a great surgeon, before I've even had my Sunday coffee.
"Even the traditionally crazy things such as AIDS being engineered, holocaust denial and WTC being an inside job are fair cop for scientific investigation"

---translation...you don't know what scientific investigation means. fucking dumbass...
Object US
Any software that handles/transfers this sort of data is going to be (to the FDA) a Class II Medical Device. It seems like there would be a overwhelming amount of work for a one or even two of you :/

http://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfcfr/CFRS...
As far as I understand it, your service collects email addresses from the web and then enables your customers to access that email database. In some European countries that would probably be illegal - in others it would be legal, but bordering on unethical behavior (the fact that someone - probably by accident - publishes his/her email on the web doesn't mean he/she wishes to be spammed).

So the fact that you even managed to get six signups for your email database is quite amazing (and I don't mean that in a good way), and I don't think those who make proper, ethical startups have anything to learn from your experience.
How does this work, if the kernel is supposed to be TM-complete?
Functional programming doesn't make sense for this sort of thing as you can't define a circuit recursively. Mitrion-C is an example of a higher-level functional language aimed at configuring FPGAs. It's pretty useless unless you have insider knowledge on how the system works.
Compulsary service proposed in the UK for all 18-26 year olds.
No, faster does not mean easier to break. Fast is a problem when brute force attacks are viable, as in with password hashes. There are no viable brute force attacks on 128 bit keys; that's why we use 128 bit keys.
All the supported curves in TLS are most likely influenced by the US government (NIST, ANSI, and SECG). So we don't really have an option to use curves with a non-US provenance.

http://tools.ietf.org/html/rfc4492#appendix-A
or list all openssl curves: $ openssl ecparam -list_curves
Monthly Project Kits to Teach Kids Electronics
Part of the licensing requirements for a driver's license is learning about traffic regulations, so that isn't a helpful example for your argument.
Lets hope. In my opinion, it seems crazy to me how hard it is to get a good .com and how few are actually being used.
Religion isn't necessarily something you can believe in if you're set up to reason in certain ways. Someone whose response is going to be, 'Where is the evidence and to how many places?' is not going to be able to create such a belief.

By the time people are adults, if they haven't grown up with religion, I suspect the response to such a commandment would be something along the lines of 'That instruction set isn't implemented on this architecture - and I'm not sure I can, or would like, to become the sort of architecture where it can be.'

So, that might be one line of thought as to why it was left out.
Drone Shadows, Diagrams, and Political Systems
The only people who are avoiding GMOs because of "health damage" are hipsters like yourself without an ounce of scientific knowledge.
Sorry, downvoted by mistake:|
Mr. Smith joins pretty much the entire mainstream of cryptography in urging people to switch away from RSA and towards ECC. The NIST P-256 curve is the most common ECC curve used. It was generated by picking a prime that is fast to compute with and hashing a string with SHA-1.
His first responsibility is to whatever he wants to make with his life, not neccessarily his training. If he wants to run a medical startup that you call trivial, it's just as good (if not better) way to go as focusing on his residence and fellowship.

The default career directions for anyone, including medical residents, are just that - simply defaults, not some oath or moral obligation to follow that exact career choice 'till death do us part'.
Can a smartphone save your life?
Let me put it like this then: do you feel that we have, in the programming language space, uncovered fantastic new ways of enriching humanity since PHP?
Sufficiently over the speed limit can be reckless endangerment, which is a misdemeanor.
CodeKatas for Coding Dojos
There's a lot of interesting ping-ponging back and forth in some of these technocratic / data-driven visions. Some parts of Soviet central planning were initially lifted almost directly from Western success stories of massively integrated industrial conglomerates, which had a data-driven central-planning ideology. Some of the late 19th-century / early 20th century American industrialists explicitly thought that the era of markets was over, because the messy, imperfect information transmission of the medieval bazaar would be finally replaced with scientific and statistical optimization of production, management, supply chains, etc., and the more centralized, the more scientific and efficient this process could be. This was a major argument against anti-trust legislation, that by breaking up the large trusts, America was only going to be sending itself backwards into an era of decentralized, uncoordinated, inefficient industrial production.

The Soviets pretty much agreed with the large trust owners on all these points, disagreeing only on some minor details, like ownership. There was even a vision among a certain kind of early 20th century communist (nowadays called "orthodox Marxists", somewhat derisively) that capitalism was a necessary phase whose virtue lay in developing and centralizing industrial production. The communist could just wait until the capitalists have succeeded in unifying the entire industrial sector into one large conglomerate, and then the only thing left to do for a communist revolution is knock off this one remaining capitalist, who at this point owns a giant company controlling all industrial production. Then you install the party at the top of this company, and voila, a socialist, central-planned, scientific industrial sector!

Then from the 1930s American management started looking at Soviet management techniques to see if they could borrow anything back in the other direction. There were even some Soviet experiments in what today we would call "gamification", which were very interesting to Western observers, and copied in various ways [1]. One way of reconciling things was to consider a model of companies being Soviet-style internally but capitalist externally: use hierarchies, internal non-monetary rewards, central optimization, etc., up to the boundaries of the company (which would ideally be very expansive boundaries), then compete past that. And I suppose now we're at the point where using data to optimize society, another old Soviet idea, is seeming intriguing to the West...

[1] http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2115483
overengineering at its finest.
He'll need to carry E&O insurance if he ever gets a client. He'll need to keep that insurance while the product is in use.
Brian Smith works at Mozilla in the Security Engineering team. He's one of the brain behind NSS.
Thank you very much for going into such detail. But what does it mean for the ECC or RSA methods? Which can be considered as secure? I guess we need more expertise, right?
Bernstein's big problems with the NIST curves are that they turn out to be difficult to write fast constant-time point multiplication for them (bear in mind that they were chosen before this was a well-known concern), and that they're easy to screw up in implementations. Those are real concerns, but so to would be fresh implementations of Curve25519 in all new software.

If one good thing comes of this most recent debacle, though, it'll be an industry reconsideration of the concepts that didn't manage to become NIST standards, like modern stream ciphers and faster curves.
"I also have domains that I want to build on eventually, but I can't do it yet; so to other people it looks like I'm squatting."

This is a the biggest problem I have too. I think to myself, I'm going to build something with this eventually, but "eventually" never comes since spare time has been transformed into Unobtanium. Plus the motivation necessariy to start a project and see through to fruition is very hard to come by and I don't feel like starting if it seems I won't be able to finish.

If the name is interesting enough, I can guarantee that they think they'll get squeezed. The only offers I do get are for things that are live, but look (or genuinely are) underutilized.
I responded to a post about the common tendency to speed when deemed prudent.
and privacy was the reason I voted for him.... he was supposed to repeal the PATRIOT Act... Politicians, especially the president, really need to be held accountable for breaking their promises.
This can help the numerous of people that asked your help for a static website

http://blog.wercker.com/2013/07/25/Using-wercker-to-publish-...
1) The halting problem only states that you cannot create a program that can decide whether any given program will finish. It is possible for special cases, though.

2) They didn't automatically verify the kernel. Coq is a proof assistant.
The first paragraph of the article notes that he is often known as "The Man Who Saved A Billion Lives", and gives a citation.
The NIST curves weren't influenced by the US government so much as they were defined by one NSA cryptographer, Jerry Solinas. On the other hand, the rationale behind their generation is pretty straightforward.
>Even as somebody who is genuinely concerned and willing to accept responsibility, there seems to be nothing of worth that I can actually do to help.

One of the issues she mentions is overfishing. You can vote with your dollars and take care with what you buy, and contribute to non-profit funds working to secure wildlife preservations, many found at the link below. Don't stop to make a change in your own life because everyone else isn't doing it.

http://marinebio.org/oceans/conservation/organizations_issue...
Excellent and insightful reply. Most people don't realize how much soviet planners admired American industry. Stalin admired Ford for example. Lenin said communism is socialism with electricity. Stalin's planners literally copied Gary Indiana to push the Russian Steal industry and hired many American engineers such as grandpa Koch to develop the oil industry.
Marissa Mayer And Zach Bogue Buy Most Expensive House In San Francisco History
He probably is in the loop, but if he isn't, he sure should be able to get in the loop when he learns about things like this.
What's wrong with returning a populated slice? It's basically the same operation as returning a pre-sized, pre-filled buffered channel. Then you can "range" on the returned value.

The only downside is that you can't defer computation of values until they are asked for.
I would recommend: http://www.packtpub.com/angularjs-web-application-developmen..., You may have to read several times over but it is a good guide for a real Angular application. And, yes jump into making a real application with Angular, you won't regret :)
Hm, and after some hundreds of thousands of years to have the opportunity to do this, jellyfish randomly decide to start doing this in the 20th century?
So, he is to blame for overpopulation? Thanks very much!
Burn prints of cat images per request and for a fee.