skysight-inc/HackerNews huggingface dataset:
11 Tips From Founders on How To Work at a Startup
China's rebalancing and long term growth
This looks like it occupies the same space as core.contracts and core.typed. Is the main benefit, over those two, cljs support?
So the NSA has basically destroyed a business sector where the US had leadership. It may not be an immediate impact but this will clearly have an impact on US sellers of security products. Why would anyone trust one of them going forward? They won't. It'll take time. But I expect this sector to crash over the next twelve months, at least internationally at first.
Because NSA is chartered with assisting the USG and, as a knock-on effect, the US economy, with infosec. It's part of their job. Just like designing secure ciphers is part of their job, along with breaking them.
This guy is a total fraud, don't post his BS here.
Or even if you get the algorithm correct, maybe you forgot to handle all the memory the key touches special and it's swapped to disk. Or maybe your implementation is vulnerable to timing attacks or something more obscure.
Yahoo Logo (2013) - Fonts In Use
Why not leave it to the private sector?
http://www.dwheeler.com/trusting-trust
"Oops, turns out people were actually paying attention... and they really didn't like it... quick! Backpedal!" Classic.
My takeaway from today's articles: they've backdoored the software, they've backdoored the hardware, they have a database of stolen private keys, they've tapped all the cables, they have zero-days for pretty much everything.
Among other reasons, because the private sector sucks at it.
<< This.

I don't care if the number is wrong on the net worth of a sitting US senator based on the comment that the actual average is less. If you're net worth is $2.5M because of your position in the Senate and not because you were a smart business person prior too then you're paid for and bought.

I heard Senator Franken vehemently avoiding NSA questions on MPR the other week. He claims to be a proponent of Internet neutrality and privacy, yet his voting and "amendments" he coauthored day otherwise. He's an actor and a comedian first which is why he plays well in the political realm until he's asked direct questions outside of his box of comfort that is the hand that feeds him.

I'm definitely glad to see Schneier in the position he's weaving into. He's a great advocate and I support his views, perspectives and ideals to revert the damage and system that is now in place. I hope that I can tell my grandchildren Alexander and the posse under and around him were publicly shamed and stripped of all honors and decorations the United States of America has unfortunately afforded these puppets. Many of these traitors (of the American people) need to be made public examples and placed into the same solitude and torture the whistle-blowers have been subject to.
Why can't both positions be valid? Onlookers overblow it for sure, and a vast majority of valley programmers are just out of school for the first time and can come off entitled or still hold earte Blanche attitudes at otherS perspectives, even if they have been to burning man 5 times.
Elon Musk Using Leap Motion to Design Rockets
Oh, in RSA there are also lots of `weak' numbers that you shouldn't choose. They might have found some attacks against some newly recognized weak numbers.
Regarding the Quantum Computer hypothesis he brings up: there are crypto algorithms designed to survive attacks from them: http://en.wikipedia.org/wiki/Post-quantum_cryptography

They are a lot more expensive, but if you want to be extra safe, it is good to know that there are alternatives.
This letter sums up the problems with this apology fairly well:

http://makemeasammich.org/2013/09/05/dear-gabe-i-dont-hate-y...

It's hard to determine whether or not Krahulik wants to learn to be better. His apology says that the mistake was engagement, but really, the mistake was that when he found out he'd hurt people, his response was to rub it in. He doesn't seem to recognize that the problem wasn't that he produced a follow-up strip, but that the follow-up was deliberately hurtful.

Maybe he's trying and he's just not there yet. Maybe he's just responding to the firestorm and doesn't really want to learn. I sure as hell can't tell the difference.
Free unless you pay property and/or local sales taxes.
That's assuming they only stick to books. If they start carrying magazines/newspapers it'd be a viable platform.
To be fair that was probably just an ad-libbed statement by a politician who has absolutely no clue how software and filters work.

Politician: "It'll be like an iPhone app, only somehow mandatory, right?"
IT Consultant: "Uh... kinda sorta..."
Should go a lot better than for-profit credit-rating agencies, right?
The original question was whether one-size-fits-all classrooms can work.

Most people you'd pick at random from any group will be fairly average, and geniuses are uncommon, but exist, in all the groups.

Our civilization has come this far by cultivating genius. A billion average people sweeping floors will never discover penicillin or invent the transistor. And geniuses are radically less common in some groups.

An extremely basic knowledge of statistics would show you that for a set of overlapping bell curves with a reasonably sized standard deviation, a difference of a few percent in the median is far too little to make a statement like "Group X > Group Y" on with a straight face.

Genius lies at the upper end of the spectrum, where the normal curve drops off steeply. A small difference between group averages becomes a huge difference at the top end, thanks to the steepness. It is basic statistics that the elites are dominated by whatever groups have a small advantage at the average. (This is why airlines are so paranoid about quality control. If a company lets its average slip a little, it will kill most of the people who die in air travel, which turns out to really hurt bookings even if their average is a zillion times safer than cars.)

So if you design classrooms to "leave no Group Y child behind"—as the U.S. has done—you will necessarily leave behind all Group X elites. Thus answering the original question of whether uniform education works.

Yes, there are African geniuses. The problem is that they are really, really rare. So rare that a typical school has zero of them.
Ah I thinking Stripe because Stripe is the credit card processing API, Square is the Point of Sale dongle for your mobile device. I don't if switching from PayPal or Braintree to Square would even work :)
Ask HN: Audit or proof of NSA's ssh decryption?
From the NYT, http://www.nytimes.com/interactive/2013/09/05/us/unlocking-private-communications.html

Is there any evidence or proof as to the attack vectors on ssh as listed in the article?
Not really. Both major parties in Australia still stand for something. They share a lot of common ground on many issues which does make some people feel there is a lack of choice but often these are issues where there is some option which is clearly more pragmatic or reasonable to both. Neither are going to stray far from the US alliance for instance.

The Liberals were sometimes more progressive in the past but now are more firmly a conservative party and have conservative economic and social policies within the context of the Australian system where people would be sensitive to dismantling public health care or education beyond certain limits.

The ALP fundamentally exists to give a fair go to working Australians. In the past that might have been through socialism but these days it more through an efficient market economy (they were responsible for several big macroeconomic reforms) while still ensuring protection for employees and safety nets for health and education.

Economies and governments have reasonable optimum settings and experts like economists to advise and both parties will benefit their constituencies through wealth creation. The ALP perhaps would share a bit of the wealth down and the Libs would direct it more up. Either are prepared to tax and spend on their own constituency to buy votes up to a point. The point being that we are still a AAA rated economy with much lower public debt to GDP than many others.

Like the US, Australia goes through election cycles and parties fortunes change. The conservatives are due for government and have the benefit of overwhelming media support (Murdoch owns nearly all the press) and lack of discipline within the ALP. The thing that strikes me about the Libs is that their policies seem very underdone. They haven't costed them. They seem poorly reviewed. There is stuff like the Internet filter backflip. I wonder if by Abbott trying to channel GWB style anti-intellectualism to gain popular votes he hasn't done his party a bit of a disservice in other areas. Time will tell.
Power quotes on the deceptions of cognitive biases: Pinker & Ferguson
The latest SHA3 was determined in a competition amongst private sector contestants, won by Keccak. Schneier himself put up a candidate - Skein.

Edit: Then there's TrustedBSD (as opposed to SELinux)
A thumb drive is, or can be, a tiny computer that can lie about its contents depending on what's asking. I don't see a particular exploit in Schneier's case, but a thumb drive could be made that behaved differently depending on whether a Mac or Windows PC was trying to talk to it.
He writes software to demonstrate security flaws to a fairly niche market. I'd say his actions are justified - he's just showing that it isn't safe at all to download a cracked version of a pentesting software package.
Never is a long time, in a decade or two you might be. BUT either way, some very brilliant NSA mathematicians know what you came up with and so do you. That's enough for a lot of people.
Motion Sensor Tells You Someone Is At The Door – iDoorCam
We're parsing 2k lines/sec with logstash using regexes. We scaled it out to 6 logstash processes across 2 nodes. They pull off a shared redis queue and then insert the results directly into elasticsearch. (That said, I'd like to configure our apache logs to just output the json logstash expects.)

Graphite has a very simple and powerful JSON API [1]. Any graph URL can include &format=json and you'll get back the raw JSON values for the datapoints. I haven't used OpenTSDB yet - I'm curious how its API is better.

You get to choose the levels of summarization. If you want to keep 1 second intervals for a year, you're welcome to do so.

[1] http://graphite.readthedocs.org/en/0.9.12/render_api.html
I don't get your point. How can I while still on the floor laughing at how anyone could compare a hippie revival with the civil rights movement?

If you started chanting hari krishna right now this wouldn't be any more strange.
Maybe I'm misreading it, but to me the far more heinous crime than using difficult code (setting aside that it's in the docs) is that the docstring is a total lie.

"""Parses an array of xyz points and returns a array of point dictionaries."""

'Only, it doesn’t really. It takes an iterable of points...and returns an iterable of 3-tuples of groupped points'

The wrongness of it would cause me to double-take, because even if I were familiar with this usage, it isn't what the comment suggests is happening. A docstring more like:

"""Parses an iterable of values [x,y,z,x,y,z...] and returns an iterable of 3-tuples: [(x,y,z),(x,y,z)...]"""

Would be a lot more clear by simple virtue of truth, even if it didn't explain the code step by step.
lol, not just wrote it but did it. The screenshot at the end is Notepad in Linux.
shadowOfShadow's wording is a little unclear, but I suspect he was talking about the email exchange with a non customer complaining about lack of support.
I can factor arbitrarily large prime numbers as fast as I can read 'em, so long as you promise me that's all you'll feed me...
> ...its hard to not think that Bin Laden won.

Only if bin Laden's aim was to strengthen the US surveillance apparatus and step up American military involvement in the Middle East.
Because the "lawless organization" is backed by the richest country in the history of the concept of money.
A cycle! Seriously! I recall when I used to browse Slashdot a few years ago, all you would ever see tagged "Australia" was censorship and filter proposals. Not a good look for Australia.

Let's hope that you're right and they're not actually ever taking it seriously.
Let's Talk About Second-World Problems
> All you can be responsible for is yourself.

This is a nice piece of self-help advice, but it's a self-delusory trick to reduce the level of mental insanity that comes from a full acknowledgement of responsibility.

Keep in mind that you're presuming a direct chain of cause and effect from your offensive words to the building-burning. When there isn't such a direct chain, then you have a much less direct responsibility. Which is the point. The strength of your agency in the causality is precisely what obligates you to make a meaningful decision.

If you didn't know that committing a diff would result in someone losing all their money, then it's not really your fault. But if you did, then it is.

It's liberalism's most detestable idiocy that everyone really is an island unto themselves and fuck the promontory that sinks into the sea. If you ever speak to anyone with the intent of persuading them at all, even if it's an evangelical-style "if only you'd read the Bible, you'd recognize that Jesus is your savior" except with facts and figures, you're somewhat responsible for the consequences of that persuasion.
https://goo.gl/maps/HcAHM
That's brilliant. Make it as easy as possible for "cracked" versions of your product to contain malicious back doors, thus encouraging people to avoid the cracked copies and pay for a properly licensed one.
I love how this story keeps getting better with time.
You mean, it's almost as though a few humans working with machines and genetically modified crops are able to provide for most of Maslow's hierarchy of needs for all of human kind, thus making labor completely irrelevant, while the people who own the machines and the corporations that run them are profiting?

And almost like the people who want to operate and maintain those machines have to take out huge student loans and gamble on being employable?
I really wish your average Joe in AU would quit playing Real Estate Tycoon -- it drives up the prices and makes homes too costly to afford for those who want to own a home and have it paid off earlier than 30 years.
You can't close pandora's box. Not only is dismantling the NSA almost hopelessly unfeasible, the technology has already been proven to exist. Much like you can't stop the invention of calculus by killing Newton, you won't kill the methodologies of cryptanalysis by destroying the NSA. That information is now within grasp of the UK, China, Russia and Security Firm X and they are more incentivised to discover them now that it has been proven possible.

We should aim to plug the holes now. The race isn't over just because another runner got a little bit ahead.
Just trying to send some text
via e-mail, so swaps to disk
and/or timing attacks should not
work. That is, not trying to
encrypt streams of voice or video,
and do assume that the computer
used for the de/encryption is
'secure'.
Australian shadow communications minister was "ambushed" by his own party policy
It's been out ten days already before the news agencies decided to report it: https://encyclopediadramatica.se/PRISM#Parabon_Leaks

Magnet link of the alleged software used to break encryption methods: magnet:?xt=urn:btih:f8a942ccff260f7b9035bbf3b8af5c3013e21097&dn=Parabon+Leaks
My thoughts exactly. I looked at the code, the demo, and then: Ok, so how can I self-host this?

I wonder if it would make sense to port this to deployd and/or helios?

I thought google app engine looked a lot more interesting when I learned of appscale -- I'd love for there to be something similar for parse.com.

Side note: deployd looks nice, although I don't think I'll be using mongodb for my projects any time soon.
There Is No Sandbox
Open Data Protocol
Any plans for open sourcing the source, as well? Why/Why not?
The regulations should require that the disclosures be provided in both human and machine readable format.
There is. They are one of the few parts of psychology that are based on hard data. University admissions test are, in fact, mostly tests of IQ. So are military recruiting tests. (The military is super serious about weeding out people dumb enough to crash a boondoggle.)
Why RubyGems needs to enforce gem signing
I propose that we do act like governments can detain you, until you reveal your password, because that does in fact happen.

I propose that people abandon the concept that they can archive their email forever, and instead use systems like a Mission Impossible Tape that self-destructs the instant you're done reading it.

I propose that the only way to stop the government from making you decipher your messages, is if it's impossible for you to decipher them.

Everyone should use Perfect Forward Secrecy systems.
I think there is a governance solution, to wit a constitutional privacy amendment. But I appreciate you may not agree with this. I'm not at all convinced you can engineer around it.
This comes across as a lot of nonsense. There is little here to support the rather outrageous claims. The whole "Ed" thing is typical of folks of a certain political bent who think diminishing a person through disrespectul over-familiarity helps their argument (think folks who constantly throw "Barry" into discussions referencing the President).

If there were ANY evidence Snowden was a Russian agent the US authorities would be leading with that for the simple reason it would rapidly undermine any popular support for him.
>they inevitably leak (roll save against ethics how many times?)

Haha, nicely put. Note too that sooo many "roll save against temptation" must happen to avoid abuses of the NSA capabilities.
Nope, the diagram is just hand-waving FUD. It's an enumeration of which "technologies" people rely upon in case they didn't already know. Gotta laugh if people think Skype isn't backdoored.
I am pretty sure that all the executives where I work are drunk all the time. I think this may be the secret to move up the ranks at big companies.
Use Pidgin with OTR.
You have to possess the SSH key, but any keylogger could record the password? Passwords can be guessed?
For your edification: http://en.wikipedia.org/wiki/Analogy
There are javascript implementations that don't go asynchronous though. Take rhino for example: http://stackoverflow.com/questions/7249252/read-file-with-rh... . Or check out the commonjs spec: http://wiki.commonjs.org/wiki/Filesystem/A#Files .
> When encrypting files locally though, there is absolutely no reason I can think of to use public-key cryptography.

So that you don't lose your decryption key just because your computer was encrypting when it was seized?

Of course, if the weaknesses are sufficient, then that's irrelevant, but it's certainly "a reason".
Agreed - and there isn't proof (yet) of any breakthrough in cryptanalysis.
Who else thinks Bruce is going die in a mysterious car accident or elevator crash sometime soon?

I love his attitude towards this, however. He's right, we need massive civil disobedience, we need whistleblowers, and we need everybody who can contribute, to help dismantle this surveillance state apparatus.

I just wish I knew more about cryptography now, so I'd be in a position to do more to help.
Using Quantum Mechanics To Spot Internet Snoops
I did History, used Bright, and got a 43% improvement.

Then I got suspicious. I thought that I was subconsciously affecting my own behavior. (Anticipating a test, for instance. Expecting Beeline to speed up my reading, for instance.)

So I did Nature, used Bright, and got no improvement.

...I need a better blind.
I see it more likely as getting someone like the Stack Exchange guys agree to open source it, if we pay them enough.

A Kickstarter project, for instance.
This would be doubly interesting, as it would mean the key he was carrying for the one file would be a smoke screen of sorts.

Of course, with UK law saying they can detain you indefinitely until you hand over your keys if they think a file is encrypted, that might not be a good move... though obviously in retrospect they didn't make use of that here.
To clarify, there are public-key cryptosystems with no known quantum attacks, but it's not known how to build such systems based on problems that are known to be QMA-complete (or NP-complete).

Here's a discussion from Scott Aaronson (which has a corresponding chapter in his new book): http://www.scottaaronson.com/democritus/lec8.html

> Currently, our best candidates for such trapdoor OWF's are based on lattice problems, like the Shortest Vector Problem (SVP) that I described earlier. Whereas factoring reduces to the abelian hidden subgroup problem, which is solvable in quantum polynomial time, SVP is only known to reduce to the dihedral hidden subgroup problem, which is not known to be solvable in quantum polynomial time despite a decade of effort.

> Inspired by this observation, and building on earlier work by Ajtai and Dwork, Oded Regev has recently proposed public-key cryptosystems that are provably secure against quantum eavesdroppers, assuming SVP is hard for quantum computers.
Only if you have a loan. The regulated credit data is pretty solid. The unregulated stuff.... not so much.
WebRTC video-conference API
An analogy presumes a relationship between two concepts.

You might look up "straw man argument".
Yo. Please boycott newscorp. Why? http://www.abc.net.au/news/2013-08-28/hawke-joins-chorus-aga...
+1 for Amex statements. Also, would be awesome to have option to store to S3 bucket
How to build a simple video chat application in a few steps?
Here is how: https://api.developers.bistri.com/tutorial
So I know a little about neural networks and ML in the (simpler?) context of image classification etc. Anyone have a good reference/introduction to using it for this sort of work?
And they have agents working at important positions at big tech companies.
Coders in high demand across Australia right now
Comedy and Audience Engagement
Well I also assume that many other signals intelligence agencies are collecting data. Having worked at a time for a large global PR firm, I am sure many if not most of our communications were intercepted, especially with work once done for a Chinese based phone hardware maker. I think it would be a massive mistake to assume this is a United States only issue, so far the United States is the only country to have someone leak the information.

So - yes, my most immediate legal concern is how the US government could use the data collection against me contrary to protections given. That doesn't mean there are many more and larger concerns to be thought through, I was merely speaking to one of them.
Man Confesses to Killing Someone in Promotional Video for New Startup
> Why would anyone trust one of them going forward?

The same reason people trust the Dollar as a reserve currency. Yeah, it sucks, but better than any of the alternatives.

Fortunately, there exist open-source/public-domain alternatives for security products. (Doesn't mean that contributors can't be coerced with the equivalent of a Nation Security Letter, though.)
Lecture on how to convert blu-ray into DVD discs
Do you want to enjoy blu-ray movies on your DVD player? DVDFab will help you to do this easily. Just convert your Blu-ray discs into DVD discs or DVD files. DVDFab Blu-ray to DVD Converter:http://www.dvdfab.com/blu-ray-to-dvd-converter.htm
Have you seen what passes for security, even in tech companies that sell primarily security?
Is Job Just a Job?
Quantum key distribution
and check the fiddle:
http://jsfiddle.net/bistri/DJjcB/#base
Wholesale Sac Cabas Vanessa Bruno Shop Provide you with the best service.
Large range of Sac Cabas Vanessa Bruno available to buy online today from Cabas Vanessa Bruno Solde outlet Store. Same day ship for free shipping. All Cabas Vanessa Bruno Pas Cher 50% off with free shipping.
What Would You Do If You Weren't Afraid?