skysight-inc/HackerNews huggingface dataset:
I think Google's thinking on this is that 2FA tokens are definitely "one of those things you don't want stored in an subpoenable manner by your Cloud provider." If your 2FA token is synced to iCloud, for example, then it's no longer something you have--it's something else you know (your iCloud username+password.)

"Something you Have"-type tokens provide security basically because they're immune to rubber-hose cryptanalysis: if you really just don't have the key to a safe, nothing an attacker does can make you give it to them. As such, tokens are also the factor that protect you from contempt-of-court charges if you're compelled to provide it. (Though they can then ask you "who does have a key?"; if this is an accomplice, it's best if they live in a separate country, and hopefully one which doesn't like the US very much.)
Advertise Mediation for Mobile Apps
What does it mean that it 'loses all accounts'?

I use two factor auth but not this app, so I am not sure why people are going to have such a bad day...
Are we making great, amazing advances in pattern recognition, mechanical systems that very cleverly incorporate sensor feedback, and other novel areas? Sure. Are we making super-impressive progress in general intelligence. No.

There's two main fields of thought - one that "general intelligence" is some unified, centralized system, maybe a "symbolic system"; another that "general intelligence" is merely the composition of a bunch of pieces that do certain stuff.

So maybe our advancement in the things you mentioned are making strides towards the latter. I think that's wrong, but it's possible. Even if it is the case, we're still not making strides in the pieces of that composed intelligence that answer questions like - what's bigger, a shoebox or a mountain?

In regards to your bird analogy: we don't have very popular bird machines, but we do know the principles that enable birds to fly. Similarly, we don't need to build brains, but anything we build that is comparably "intelligent" as a brain would be quite surprising if it didn't come from insight we have into the principles that enable general intelligence.
+1 for CNX Software, you can find a mix of news, deals and reviews about embedded devices and I think it has been around for some years
Yeah, now I can view my missing one time codes in retina, edge to edge quality. Yay!
Google Glass app store coming in 2014 may be called "Botique"
Now a days apps are more important than the device itself. This hasnt changed for Google Glass.
Yep I'd definitely chalk this down to being unintentional myself. I'd guess that there's leakage from the ADC on the mic which won't likely ever be turned off since clock gating it would be difficult (many of those guys talk on SPI or I2S or some such, which doesn't make that easy) and gating the power could have all kinds of noise issues during power on and off. Why it's that easy to pick up and why around 24mhz i'm not sure myself.
Surely you're feigning ignorance. People find muscle sexually attractive and associate it with power in social situations. I'm not very muscular myself, but it would be pure sour grapes not to see the benefits.
Just in time for Github to add 2FA.
Probably not, but I use several apps that put a big "BACK UP YOUR APP DATA BEFORE UPGRADING" in their upgrade release notes. I'm just shocked they didn't know about it because the upgrade process wasn't even in their test plan.
IIRC this happened with an update to Google Authenticator for Android as well. They rolled out a new version that discarded all your old accounts, and removed the old version from the store. Quite a nasty surprise...
Certainly use whatever tools you like, however emacs and Sublime Text cannot be compared directly to one another.

Sublime Text and Vim or some other text editor can be, however text editing is a small component of emacs' utility to its users.

The reason is that emacs is an environment for running emacs lisp applications, and those target pretty much every imaginable niche.

There exists decades of development in that vein for emacs to the extent that for some domains it is an entirely self-contained ecosystem for that space.

The environment homogeneity is distinctly different from any other app which targets a subset of the tasks associated with an overall workflow; if we narrow the domain to just development a possibly valid comparison would be Visual Studio because of how the environment absorbs every interrelated aspect of development from communication to debugging etc. within one overall application.

Light Table may one day be similarly versatile though and a possible emacs alternative.
I've just noticed that Google has the download-as-text functionality now too.
Chris Messina has a solution: https://twitter.com/chrismessina/status/375118991280205824
You had me until "backups are encrypted with PBKDF2". PBKDF2 is not encryption, it is a Key Derivation Function (it says so right in the name - KDF). Given that one of the developers is claiming that they are "encrypting" using PBKDF2 (which is in the same category as claiming that they are encrypting using MD5!), dissuades me from ever using it or recommending it.
DX also sells loads of 'stick' form factor Android devices for around the same price, including shipping. MK802, MK808 run Ubuntu as well.

http://dx.com/s/android%2bmini?Sort=PriceL2H&category=191
In Olympic sports the story is that out-of-competition testing is handled by national agencies, not WADA.

And some national agencies are more ... vigorous ... than others.
You add your Google (and potentially other) accounts in the app - then you need to open the app to log in to your account.

The app is "forgetting" and no longer displaying the accounts you add, such that you open Authenticator and it's empty.

You can no longer log in to your Google account without one of the 10 printed one-time access codes you made when you first set it up.
You get greeted by a "let's begin" screen, and all your accounts/credentials have magically gone away. This happened to me 5 minutes ago.

Edit: tweet with picture: https://twitter.com/jawj/status/375144792126410752
I was really thinking this was going to be a pretty lame list (which probably puts my in with the other people who have time suck issues). I was pleasantly surprised though. A few good recommendations. I especially appreciate the reminder to journal more.
I'm sorry, I don't follow your logic. Are you trying to say you think Google actually had a rationale for this behavior? Where does "the cloud" come into the equation? This data isn't being synced to iCloud. That defeats the whole purpose.
Drug testing is Soccer is roughly where it was in Cycling circa 1997.

Yes, there is testing but it only catches people who are stupid.

There is plenty of evidence of systematic doping in professional soccer. For example, 150 out of the 200 samples in the "Operation Puerto" performance-enhancing drugs case in Spain were not associated with Cycling[1], and it is pretty easy to find out what clubs the doctor (Fuentes) was associated with.

No one is publishing the allegations, because the Puerto evidence was destroyed (!!) and publishers are wary of the lawsuits that Lance Armstrong launched in the mid 2000's when allegations of his doping were first published[2]. The closest you'll get is stories like [3], which are careful to be non-specific.

But read a few forums and it's pretty clear that many clubs have well funded, systematic doping programs.

Personally, I think it's likely professional tennis is just as bad - and their testing is even worse than soccer.

[1] http://en.wikipedia.org/wiki/Doping_in_association_football#...

[2] http://www.theguardian.com/media/2013/jan/22/uk-libel-laws-s...

[3] http://www.goal.com/en-us/news/1786/fifa/2013/01/18/3682007/...
Really It's very big achivment of Google.
Very nice.
Same thing happened to me. Presumably I can restore the older version from a recent backup, but this is pretty weak.
I don't think this argument makes any sense with regard to TOTP, as Google (or Dropbox, Twitter, etc.) most certainly knows the seed/secret for your account at their service and could be forced to divulge it via court order. Or they could simply cough up the plaintext data sans faffing about with 2FA at all. 2FA of this sort only makes it harder for an attacker to get in.

Defense against rubber hose cryptanalysis comes into play where the key only exists in one place, such as the asymmetric private key on hardware security module, or perhaps a symmetric key stored on a physically-unavailable USB key. But 2FA like TOTP does not imply encryption, even though it relies on some cryptographic primitives.
I used my Pebble watch for TFA. You have to compile the app yourself but it's pretty easy. https://github.com/aaronpk/pebble-authenticator
Kitkat 4.4
An iOS7 beta6 bug you can easily reproduce [video]
Other discussion: https://news.ycombinator.com/item?id=6325760
One reason would be to build up muscle reserve as well as bone density (the resistance/pressure from training seems to improve osteocyte function), so that you're at less risk of injury later in life. This is with normal weight training, though, not hardcore bodybuilding and certainly not with adding fancy stuff or anything.
Heh, I've seen a great example of "high end" software for partitioning servers for a specific vertical (so multiple hostile customers could share the same hardware). Java applet to provide "rich" experience cross platform. OK, debatable.

Security? On start, the Java app downloads a connection string to the MySQL DB. Which contains the root login for both SSH and MySQL. Then it prompts for your password and queries the Users table to see if you're allowed. And it helpfully logs this info into user's temp directory. "Ah yes, this is a known limitation in our current design."

Edit: They repeatedly lied to customers about various security fixes (I didn't do full disclosure on the numerous issues I found). They didn't care as they were sold for a world of money, then the entire product line was nixed. Most customers don't seem to care (I've found similar stuff across the board); hackers are targeting lower hanging fruit for the time being.
Because Google fundamentally wants everyone to use Google+ for everything, and their Google Accounts to sign into it. If they weren't thinking about the security implications, Google Authenticator would definitely be a "sync your credentials to your Google Account" app.

I assume that the implementation of 2FA was a 20%-time project (it's sort of sloppily integrated; you need to find a special page that isn't linked from anywhere whenever you need to add an application-specific password, for instance) which reeks of it not being orders from on high. So, the people who implemented 2FA at Google were probably just some people who fundamentally care about 2FA. People who know what "Something you Have" actually means.
That's only good for Google accounts. Dropbox and others aren't reset as easily.
yes Right.
High Quality Replica Watches,Fake IWC,Breitling Watches,Cheap Watch.
I use weight lifting as a way to release any frustrations or anything. Its a great way to get my mind off of things for a while. Im 6'2". At 18 I weighed 165. Now at 24 I weigh around 240 with not a little fat. I'm not cut or anything, but you can tell my bulk isn't just fat.

I understand not getting why people want muscle. I don't understand why people want excessive amounts of muscle (read pro bodybuilders). I do however enjoy the feeling of having greater than normal muscle mass, in and out of the gym. In the gym it feels great to be able to lift decent amounts of weight. Outside of the gym I find a certain amount of respect received for having more muscle. Like the article pointed out about the people on the sidewalk, people give you more space. On the functional side of things I enjoy playing physical sports when I can such as football and more-physical-than-it-should-be Ultimate Frisbee. Even in sports like disc golf though having extra muscle means I can throw farther etc. I also am able to help friends move, do any heavy lifting family members need done, etc.

I could probably go on but I think the main thing is that it depends on your lifestyle. I will say this though: I didn't know how handy having muscle could be until I started building.
> You can no longer log in to your Google account without one of the 10 printed one-time access codes you made when you first set it up.

* or a backup phone number that's been verified (i.e. send a verification code and confirmed).
I may be totally wrong, but isn't PBKDF2 useful exactly as a way to generate an encryption key from a password?
Learn X in Y minutes where X = Go
To be fair (I didn't see the original comment), I'm not sure which drugs would result in designing such a terrible solution. I'm sure addicts around the world would not want to be painted with such a broad brush ;)
Of course, there are no patent trolls to defend in said article. the title is sarcastic.
That being said, what the nature came up with evolution follows, for the most part, the optimal thermodynamic profile for the most favorable gibbs free energy.

Direct intervention by human minds/means don't always follow that optimal path, and so for what you gain, there are probably more trade-offs.
Xbox One CPU gets 150 MHz boost, console in 'full production'
In light of this incident with GA, do either/any of the alternative support "export" of the underlying secrets, for instance to migrate to a new app?
Jorge Lemann: He Is...the World's Most Interesting Billionaire
Google Apps generates less than 3% of Google's revenues. (Probably much less.)

Thus, not enough of a money-maker to influence the direction of Gmail.
Keep in mind that Google Authenticator stores arbitrary third-party credentials, though. Subpoena Google and you could get Google's TOTP token for you, along with the rest of your account, sure. Sync Google Authenticator to Google, and suddenly they don't have to subpoena anyone else--just use their Gmail account to reset all their passwords for every other service, and use their TOTP tokens to sign into them. This basically removes the "Principle of Least Privilege" way that subpoenas work.
Infographic on Latest Social Media facts and stats
What an absolutely awesome time for iTunes Connect to be down for maintenance.
Where control means staying with Android 2.3.x far past the useful life of the product, I'm inclined to side with Google.
Happy 15th birthday, Google
I usually skip anything with this kind of title, but I am so glad to have read it.

12. Don't be afraid to share your thoughts with strangers.
My best guess is that your sound is stimulating some capacitor connected to a voltage-controlled clock oscillator in the laptop. The voltage provides by the sound is causing the frequency of the VCO to move around slightly. 24M is a pretty common frequency in electronics for use as a general-purpose digital clock.
15 tools that the most successful entrepreneurs use [Infographic]
> Worse yet, was an initial claim that it was more efficient to do it that way

This is a classic excuse... so what if it leaks e-mail addresses (who looks at source code anyway?), makes clients wait (at least server's CPU is intact), and is just plain illegible (there is always a debugger if you want to fix a bug).
If it gets down to the users, then it is an Android issue. After all, the Android maker choose to have this kind of collaboration and enable the carriers to do this.
Ok, we limited the facebook permissions. Hope this works better!
>>I think we've seen lot of instances of major vendors changing something, and everyone complaining, and then the new design becomes the new normal. Practically every Facebook redesign got pissed on.

You might be getting confused. There's a difference between the new design becoming the "new normal," and the new design being tolerated because there aren't any real alternatives to the product. After all, the only reason Facebook users stopped complaining about each redesign is because they realized Facebook doesn't care what users think. (But I bet when major advertisers complain behind closed doors, they listen.)

Google Maps is not like Facebook. While it is currently the dominant maps service, it is not the only one. Not only that, but it also cannot rely on a strong network effect to protect it like Facebook can; if all your friends are on Facebook, then being on MySpace is kind of dumb. Can you say the same about Google Maps?

Here's the idea: you can afford to make sweeping, disruptive design changes if and only if you have a virtually unbreakable monopoly in your market. This is why Microsoft could risk changing the MS Office interface back in 2007. Even if they had screwed up, what would people switch to? There wasn't a good enough alternative. Again though, can you say the same about Google Maps?
Sure, in the same way that MD5 is (although you'd want to use PBKDF2 instead of MD5). But you can't actually encrypt with PBKDF2 itself, much like you can't with MD5
We just restricted the facebook permissions. Should be more acceptable.
This is similar to what Oreilly is doing. They offer ebook upgrades for any paperback book you (claim to) own for USD 4.99.
I agree, glass needs an app store. Apple needs to do the same for apple tv
Well, GP isn't just imagining things. The pager for this is at most the equivalent of crap-ass "more" right out of the box, on systems where all other cli executables have better pagers.

$ PAGER=/usr/bin/less aws help

...does seem to do the right thing, but why does this program require it when no other program does?
In 4 months, he could've easily sculpted a nice body without steroids.

Steroids are used by old people (and it really helps them), impatient idiots or bodybuilders who have reached those relatively quick 80% that normal training gives you and want to push it faster all the way to 100%.

Also, like others said, the side effects are suspiciously bad, there's no way one person can have most of the worst, unless you're significantly overdosing.
Enough.

Devil's advocates are needed, but you refuse to acknowledge that you defend the devil.

Again: Are you in a Syrian or Iranian 50 cent army? Or are you one of those leftwing extremists that never support a democracy against a dictator?

Like many others all over the internet now, you really avoid the point that the Syrian junta is a pack of mass murdering, raping, torturing assholes which the world would do better without.

Again: You argue there is a conspiracy with Israeli, US, French information lying. You know full well that information sources often can't be publicized when you disqualify everything. (Doctors without borders et al have talked about large scale gas attacks. The insurgents just don't have much artillery around Damascus. And that French and US intelligence would both lie is a conspiracy.)

Is it worse to torture and rape children -- or to defend such people dishonestly...?
Clearly you must be joking. They should've kept the emails on the server-side the entire time. Then would be a matter of validating the request by searching the email in let's say SQLite. Would it be done? Probably not. But at least it'd be a lot stronger than sending sensitive data to clients every damn request.
"The problem I am having is it's not setting the password correctly."
You're perfectly right. PBKDF2 (Password-based Key Derivation Function 2) takes your password as an input, derives a key from it and outputs that. This key is then fed into an encryption algorithm like AES in order to actually encrypt anything.
To continue the conspiration theory further, the attack vector would certainly start with AMD when no one was looking :)
Wow didn't know this would bring down the site. Guess I better move away from Chicago VPS.
Hm... how come Desire2Learn hasn't been sued by Blackboard yet? Usually, as soon as a uni stops switches away to use a competing course management software, the competitor get sued based on the LMS patent:
http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=H...

UPDATE: they //did// get sued, but won, and the above patent is invalid now. Way to go! http://en.wikipedia.org/wiki/Blackboard_Inc.#Legal_matters
Why Microsoft Really Bought Nokia
Have you tested this? Are the barcodes not time pertinent?
Yes, this post was handwaving, and I tried to make that clear ("preliminary", "extremely biased").

On monday I added some slightly more proper benchmark code, you can find it on https://github.com/spotify/sparkey/blob/master/src/bench.c

I didn't add the level-db code to this benchmark however, since I
1) didn't want to manage that dependency
2) didn't know how to write optimized code for usage of it.

I'm using very small records, a couple of bytes of key and value. The insert order is strictly increasing (key_0, key_1, ...), though that doesn't really matter for sparkey since it uses a hash for lookup instead of ordered lists or trees.

As for the symas mdb microbench, I only looked at it briefly but it seems like it's not actually reading the value it's fetching, only doing the lookup of where it actually is, is that correct?

"MDB's zero-memcpy reads mean its read rate is essentially independent of the size of the data items being fetched; it is only affected by the total number of keys in the database."

Doing a lookup and not using the values seems like a very unrealistic usecase.

Here's the part of the benchmark I'm referring to:
for (int i = 0; i < reads_; i++) {
const int k = rand_.Next() % reads_;
key.mv_size = snprintf(ckey, sizeof(ckey), "%016d", k);
mdb_cursor_get(cursor, &key, &data, MDB_SET);
FinishedSingleOp();
}
I strongly suspect membership of this class is temporary.
This analysis is from 2002. Today Nokia is ~1% of the GDP, not very significant.
the app seems interesting too...
Kit Kat's rival, http://www.twix.com/. Personally Kit Kat is not even that good, high in sugar or something. I think twix is much tastier, nevertheless I think this is a brilliant design.
by the way universe is amazing. In many many ways :)
He straight up says that he took tamoxifen
A week's worth of double Nolvadex doses got the gyno under control.

Paragraph 19
Although i'll note you're not the only one who missed it
PNG support was introduced to .ico format alongside Vista in ~2006, you can certainly use it as a multiple-png-only format.

Wikipedia has a description of the file format and it's certainly not the worst i've seen - restricting yourself to only PNG images removes all the mess around skipping bmp headers and paletted colours, you end up with a very short and concise header and binary list format, and it should be trivially implemented from the description.

Of course, i havn't implemented it myself, so it's obvious i'd say that. But i'm curious as to what issues you have with it / what you would change?
Just tried it and it is like you say, thanks. Influenced by the previous version, I thought pressing back button would exit navigation.

Then one more complain: in the previous version I could get a metric scale from the labs, which I think is not there anymore. I think a map without a scale is a toy-map.
You're missing the sarcasm :P
Google approached Nestle. No money changed hands according to this article

http://www.bbc.co.uk/news/technology-23926938
Indeed it does. When I posted my comment, the additional questions about tools and coolest thing you've built, were not appearing.

Edit: As mentioned in a sibling comment, This appears to be an issue with Safari where items 'below the fold' don't render. Strange.
This is the sort of "nightmare scenario" I'm afraid of, and why I'm still not using 2FA. I'd rather risk having only a weaker password, than risking losing my accounts for good. You can't get back into your accounts if something like this happens, right?
Does it have to use QR Codes? Any more usable way of exchanging keys? NFC?
Could it happen in some off-the-beaten-path courtroom that isn't being watched as closely, and whose defendants are less likely to know that? The title page of the document shows a county in Oregon, and the link at the end to the previous year's presentation points to North Dakota.
Social media and its importance in the entrepreneurial world