skysight-inc/HackerNews huggingface dataset:
Huh? There are lots of limitations on the power of government (and law enforcement). Why is it "asking a lot" for them to accept that?
How dare you post a recruitment microsite for GCHQ, poor taste, Sir, poor taste.
21 Conversion Optimization Best Practices for Beginners
Finally, some positive news out of Africa! Let's hope we (both local governments and groups, and Western "aid") don't screw this up.

I'm not familiar with the Kenyan political climate, so if anyone else has some experience or knowledge about this, could you enlighten the rest of us about whether the government is helping the population as a whole or serves minority interests? Is the country stable? Bordering Sudan, Ehtiopia and Somalia can't be easy.
http://pixelpin.co.uk/ ?
OpenSSL supports these Russian GOST standards:

* md_gost94 message digest algorithm

* gost89 symmetric encryption algorithm with 256 bit key

* gost94 public key algorithm with 1024 bit public key

* gost94cp public key algorithm with 1024 bit public key (CP mode1)

* gost2001 public key algorithm based on elliptic curves with 512 bit public key

* gost2001cp public key algorithm based on elliptic curves with 512 bit public key (CP mode1)
Yeah: my $20 should require them to do an indefinite amount of future work to support all later versions of iOS, no matter how drastic the change. (not)
> That Chome shares processes between lots of tabs, by the way, was a massive disappointment after the original video that made it sound like tabs would all be isolated

I'm not an expert on sandboxing browser tabs, but so far I haven't had any (memorable) experience where a rogue Chrome tab crashed the whole browser. Just yesterday someone posted a jsfiddle on HN [0] that crashes tabs in Chrome, but the entire browser when opened in Firefox.

[0] https://news.ycombinator.com/item?id=6358727
* I do recognize that they are looking out for themselves (as is their right), I don't understand why everybody who deals with them in some way or another doesn't do that*

But in what way is responsible disclosure not looking out for oneself? Even if you don't care about the potential reputation hit of releasing non-responsibly, how are you better of by not waiting a couple of weeks or so?
Interesting, I hadn't seen Persona before (I associated it with their previous "Firefox Persona" skinning system.
And here I was excited by the prospect of a Terraria-clone set on the moon.

.... Not so much. More like a terraria clone set on an atari 2600.

Terraria devs, if you're listening - moon! Lunaria! It writes itself.
I thought one of the prizes were 1000 Rasperry Pis and that had some appeal. Turns out it was only one. Cheap bastards.
thats basically the same what windows 8 does.
curious that microsoft didn't patent this in some way?
I'd rather pressure Google into delivering on their promise. But then again, I don't use Gmail.
Send emails intimating your aspirations to terrorism and it will find you.
This is a very silly use, but I use `ascii` when I can't distinguish between 0 and O in a font ? `ascii 0`, for example, clears that right up.
People have been jailed in the uk for not giving up their password. I suspect Miranda was released because they had the devices/data and had made their point, plus of course it would have become a major international incident given the news organisations involved and their involvement in the story. If he didn't have embassy staff and the guardian lawyers demanding his release, it might never have happened.
If lower end smartphones adopt this kind of camera (which I think is unlikely) then point-and-shoot cameras could have a problem.

However, comparing a $600 iPhone to a $70 point-and-shoot is not really relevant.
Yes, your best protection is a short-lived signature on the user's public key. That's up to the identity provider to decide.

On our internal Persona IdP (for mozilla.com and mozillafoundation.org email addresses), the signature is short-lived (a few minutes I think). The browser will therefore need to request a new signature very often. This can happen transparently as long as you still have a session with the IdP and that session can be invalidated server-side in case of a compromise (or a password change).
Not usually for reported security vulnerabilities
IPhone 5S Touch ID can be dangerous
What if she is? One danger with Edward Snowden's revelations is throwing the baby out with the bath water.

Perhaps nations need SIGINT agencies.
I have asked this before but didn't get an answer: Do such "you have to hand out your passwords" laws apply to me if I am just a visitor to such countries and my home country does not have such a law?
> My history teacher never hesitated to teach us how Prussia was good at war, and how France sucked at war.

He should have hesitated, since historically France is one of the most militarily successful nations.
Under normal law, yes there is a right to remain silent, at the border, no, because they have passed laws (schedule 7 of the 2000 terror act) saying they can imprison you for three months if you fail to cooperate in any way or answer any questions.
Thanks, glad you've liked it. Yeah I know this isn't really HN material and my game is fairly niche already. Nevertheless it seems there are some gamedev people on here, which is great to see. :)
MadEye - pair programming tool
seems to work well, nice and easy to use
I would LOVE to use the bedside lamp I already have to progressively turn on every morning at a specific time.

I'm sure there's a timer out there combined with a dimer that will replace expensive sunrise alarm clocks.
Concerning the nature sounds adapted to your sleepcycle, there's already many apps doing that for free.

Anyone knows of a dimer/timer like this?
I lived there for several years so I must say this is exciting I can only imagine how they feel, There are so many undiscovered territories on mother earth I'm just glad there is people out there not giving up on humanity and do what it takes to solve the big problems.
set_gravity(1.622)
set_landscape(flat_boring_and_homogenous)

Done ;)
Alan, Is it OK for government only to have the means to do targeted surveillance while dragnet surveillance is not possible? It seems technically possible(probably, that's where blackberry is at. There are a few technical means that might achieve that[1]) and it does fit needing to issue a warrant to do so.

Btw such a strong and capable regulatory framework that is always on, seems useful in regulating corporations and politicians, and if exists it should scare the hell out of them. I could see why they prefer it this way, with. Surveillance staying hidden in the shadows.

[1]one way to do this is strong encryption but medium endpoint security.
But I thought the point was that they didn't consider this to be a security vulnerability.
Come to Kenya, we got water, Kenya belive it!
Having reported a bug in Chromium myself that I thought was security related (but in the end was not - better safe than sorry), I think it's a reasonable decision to not show security related bug reports/tickets from the general public - you'd otherwise present all security holes in the browser to every evil guy in the world on a silver platter.
There is a more important benefit to using the -prinf '1' approach - which is that it won't miscount the result if any of the filenames contain newlines.
Apple has overcharged both in Australia and Europe for decades, even when the currency has been strong. It's simply because they believe that people who live there will stomach a larger price. It's probably true. It's still infuriating.

It results in funny cases where a Nexus 4 can be 1/3 the price of an iPhone 5.
They are primes of low hamming weight, so the exponentiationd you have to do are cheaper (imagine a multiplication, long hand, where almost all of the digits are 0: that really helps). You actually don't want a small exponent, as it will fail to saturate the modulus (so please, don't use 3, that is a well-known bad thing to do with RSA). As for a "rainbow table", that is a concept that only applies to hashes; if you just mean a full lookup table, the time complexity of attacking RSA directly comes from the modulus, not the exponent.
Seems she's _very_ busy

http://tineye.com/search/6a395fbbf9ff062a83d5dc28f0416a47017...
Sure. A sweatshop with voluntary arrival and departure times.
I think a lot of it is the kudos. If they are interested in security research (or just breaking stuff) either as a learning experience or a challenge, then they might be doing these things anyway. Once something is found, what do you do with it? File it and enjoy the inner glow of pride perhaps, but if someone like Google publicly acknowledges your achievement it becomes a validated success that goes on your CV and/or gets talked about in an interview as a measure of your knowledge/skill. Even ignoring the CV/interview: in some circles it is worth it just for the bragging rights.

The money is a secondary issue IMO. For some it is encouragement to try again and potentially find something else useful to submit, for others it is an alternative to flogging the exploit for more on relevant forums (though without the right contacts I expect getting good money this way is not as easy as some suggest). For others it is just a happy little bonus, they'd keep going anyway and continue to submit their findings but they're not daft enough to turn down a little cash if offered.

And of course the tertiary issue is that you are helping to improve the security (and/or reliability more generally) of a product that you yourself rely upon, and therefore want to see improved as far as is possible in terms of security and reliability.

The average pay-out is not a terribly good measure though: people aren't aiming for the average and the payout for critical issues is much higher. There are quite a few awards for more minor issues which are easier to find (and sometimes are found by relatively effort free semi-automated methods) which skews the average making the effort of finding one of those critical issues look less rewarding that it actually could be.
"Also check out our site for kids 'Where in the world is Edward Snowden?'"
Despite their best efforts, some good people do manage to slip through GCHQ's recruitment programme: https://en.wikipedia.org/wiki/Katharine_Gun
Using Yeoman with a Custom Development Server
You mean like Obama giving a tool to read his email to Putin? Unlikely IMO.
Makes me think of the movie Mercury Rising[1], where a kid "wins" an NSA crypto challenge and is subsequently hunted by them because he cracked their code.

[1] http://en.wikipedia.org/wiki/Mercury_Rising
AFAIK 2.5% - 4% is about normal. A lot of that goes into marketing, bidding on projects, etc. It's not actually that shocking when you look at where the cost goes: it's not just "your time * multiplier", more like "how many hours of other work are required to support one hour of actual work".
Did you actually use HATEOAS? I'm currently designing an API and it's just way too much work and overhead to add links when everyone is just going to hardcode them anyway. Do you have any examples where HATEOAS actually prevents or solves problems? Do you have any tips on how to get people to follow the links instead of hardcoding?
Ask HN: full-time job or full-time freelancing or both?
Just curious how many of you work Full time programming in languages like Java, Python, Ruby and also do freelancing on the side maybe using PHP or Javascript for on the side work or extra income.

I'm going to be starting work soon as a Python Developer and wanted to perhaps use PHP on the side when I'm off work to make extra money working for clients.

Has anyone tried this? PHP is hated a lot here I know but it's really simple and quick to build dynamic websites with it plus it is in so much demand. I just need advice on how many of you have went this route before and what was the outcome and result of your freelancing while working full time job too?
Nothing like using porn to advertise your non-profit. Because porn sites don't exploit anyone.
Ha good find!
I loved Terraria, lot's of interesting things to explore. I whish they'd offered more help on the bosses. The one where you had to throw a voodoo doll into the lava was about as obscure as you could get.
The key question is if water can be used to start this kind of conflicts. I guess it could if the water means successful agriculture.

Minor correction: Shell is a European oil company.

https://en.wikipedia.org/wiki/Royal_Dutch_Shell
Coca cola are not far behind, but they do flavour the water before selling it.
OPML support in SubToMe
A Service That Pays You to Wash Your Neighbor's Underwear
The "+n" syntax is not standards compliant, from the tail info page (on fedora 19):

On older systems, the leading '-' can be replaced by '+' in the obsolete option syntax with the same meaning as in counts, and obsolete usage overrides normal usage when the two conflict. This obsolete behavior can be enabled or disabled with the '_POSIX2_VERSION' environment variable (*note Standards conformance::).
Yes you too can work as a minimum wage government slave chained to a PC for cracking this...

Any person who cracks this should post it on a blog straight away just to undermine the whole process.
This is very nice. Wish I could do this in vim.
Ask HN: Couldn't the NSA force Apple to add a remote backdoor to Touch ID
... via software update?
Normally I feel like these fingerprint systems fly under the radar, but this is the first time a standard like this is really breaking out in the US.
found it on https://www.sideprojectors.com/project/project/44/socialocal...
So chuck him a C note and move on. I don't think it's worth the bad PR to quibble over what is clearly a security bug no matter how minor. HTML injection is sort of like the bike shed of security vulnerabilities, every web developer understands it, so you'll get a perverse amount of attention and discussion on it.
How To Choose The Right Medical Insurance Policy That Meet Your Needs
Every content creator is free to roll out his own architecture of streaming video, strike ad deals and get 100% of the income.

Comparing Youtube to the mob is not a valid argument.
People keep doing it. I think the question is, does the lower prices compensate for the potential issues (remote, potential language issues, etc.) ?
I suspect that for most security bugfinders, the people they are protecting are not the giant corporations, it's the grandmas whose computers will be pwned within about a day or two of a 0-day hitting the open market. The number of people who read security blogs is miniscule compared to the number of people who use products with security flaws. You are not going to convince most of the latter to read vulnerabilities, but they're the ones who get hurt when a bug makes it out into the open unreported.
while I generally find snark entertaning, I am somewhat serious about this informal poll, so I want to be sure I understand what you are saying: If I advertise on porn, I risk making the statement that my nonprofit condones exploitative behavior (versus merely lasciviousness). Is it any better if the purpose of fundraising is ultimately more virtuous? (that we are channeling exploitation that would have happened anyway - for a purpose outside the closed circle of more porn ads and ads for penis enhancers?)

Thanks!
Why would you expect a reward for a bug just because it was a crash? I work in SVG and have reported a handful of crashes and never expected to qualify for their security reward.
Gardeners in Sydney
Fantastic Gardeners Sydney is a proved and professional gardening company, which offers a wide range of services to home owners. If you need lawn moving, garden design, landscaping or any other related service, call this company for sure!
Sorry, articles over 2000 characters long aren't allowed on HN, so I had to use a pastie..
If we do, we need to make sure there are clear limits to their powers, which are respected and enforced.
> I visited the site and still have no idea how it's any different than a Tumblr blog.

Yes, it's clear you have no idea.

> The OP was discussing businesses ...

It seems, as has often been said, to a hammer everything looks like a nail. If it's not a business, in the modern Internet, it has no right to exist, because in the modern Internet, everything is a business. As I already said, it's circular reasoning.

You may be surprised to learn that the internet was once a gathering place for intelligent people, not a perpetual electronic strip mall.

> Also we're talking about the topic of gradual engagement.

To which "we" does that refer? The topic is sites that require signups before revealing content.

> I'm not knocking your site ...

No, of course not. Who would think that?

> ... but it's hardly a relevant example in this discussion.

No, because I don't require people to sign up. Do you have any idea how you sound?

> If it is selling a product or a service, then it's a great case study on what not to do in terms of selling your product.

You just made my argument for me. There's nothing I need to add. With a little more effort, you could make racism respectable.

For the record, my site gets a huge amount of daily traffic and has an enviable pagerank of 6/10.
I didn't get that implication, I assume they are paid in some way. Even if not on an outright per tweet basis.
Yes I understand how the OP came to his conclusion. In fact, the reason why I made my comment was to point out that his conclusion was based on fallacious logic.
Two minutes, fifty-six seconds: Apple doubles down on iPhone Value, not Price
I have many email addresses. Some I use exclusively for things like signups, messages to which are diverted to particular folder on my mail client. I only ever dip into that folder to click activation links and password resets. Getting spam to those addresses has zero negative impact on me. I would have imagined this behavior is quite common.
> How can any government accept a situation where communications are so secure that none of their agencies can break it?

Does the government accept situation where it cannot read your own thoughts? How is that different?

You could make the same argument about crime fighting here. If we could read thoughts, well, then there would be no unsolvable crime really. But is it desirable?

So, no, even anarchists won't agree (neither me, and I am not an anarchist). The privacy comes to moral consideration too. Secret communication has no effect on the real world unless the people communicating actually act. Just like thoughts have no effect on the real world, unless you act. That's why we don't punish thoughts, but acts, and by that extension, we shouldn't punish communication, just acting based on that communication. Since these acts take place in the real world, criminal investigation is not obstructed.

Edit: Maybe a clarification. You could make an argument that if you don't know communication between people, then it's harder to convict a specific person rather than just the group. But the same is true for private communication (it was always a problem, even before electronic communications), and is also true for communication between neurons (we cannot be sure if person acted willingly or is a psychiatric case).
Imagining a Cyberattack on the Power Grid
I have an Atrix and a Finger print sensor for my Thinkpad...
But if we do that, we will let the terrorists win!

/s
I use snark because should I dare note that pornography is a largely exploitative business, somebody is going to tell you otherwise.

What does your non-profit do?
The M7 here is not a revolution by a long shot. Companies have been using this very technique -- a small, slow, low powered coprocessor -- for decades for these kinds of devices for the exact same purposes apple is. I've used the technique myself in certain hobby projects because, like apple, I don't want to have my big beefy processor running all the time, nor stopping to poll a bunch of data I don't want to care about right away. It's just easier to gather it up with a slower, lower-powered device, and get the data when I actually do need to process it. The rest of what you're describing in the article, again, has nothing to do with apple whatsoever, other than them being late to the dance.

Were apple really to want to revolutionize health and medicine, they'd need to start by bringing everyone to the table, and actually collaborate on an interface and open specification, so that the technology can get to the people who need it the most. Right now, Apple's more concerned about giving toys to geeks than actually changing the world, and I don't see that changing any time soon.
Online Marketing Tips Every Business Should Know
Businesses tend to have the idea that online marketing always generates viral growth and massive profits with little effort.
“I know from firsthand communications that a number of people at N.I.S.T. feel betrayed by their colleagues at the N.S.A.,” Mr. Green said in an interview Tuesday.

That's the understatement of the century. NIST is pissed off. Many of these guys move fluidly back and forth from NSA, and clearly they were kept in the dark.
Coffeemesh, discuss together [video]
Massive list of flat design resources
I didn't say anything of the sort - just that major tech companies don't seem to really care about their reputation in relation to the NSA snooping. I'm not saying they've built in backdoors or anything either way, I'm just saying if they have, I don't think the average consumer seems to really care about it. Heck, I'd bet most of Hacker News is still using Google, Facebook, Microsoft products etc. and their reputations have hardly been tarnished by the revelations.
In my opinion there are 2 main issues with Biometrics:
- The first is that it may identify you with precision but it can not tell your will, so basically, you can force someone to use the sensor.
- The second issue is that it does not allow you to give authorization to a third party in exceptional situations.
That's the way I've always looked at it, but the Can-Spam Act perversely legitimizes what once would have been regarded as spam, and that to many, still is.

Also, when people opt-out, what's to stop one business from sharing the addresses of opt-outs with another business, who then can drink from the same well? This is a glaring flaw in Can-Spam commented on by many, and it's why a number of influential organizations argued that it shouldn't have been made into law in the first place:

http://www.pcworld.com/article/113137/article.html

Quote: "The Senate unanimously approved the Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act last week. It requires e-mail users to opt out of unwanted commercial e-mail, instead of requiring e-mail senders to get permission before sending. That approach is backwards, say vendors of antispam technologies and at least one consumer advocacy group."
If the expensive device is something people will buy and be carrying with them anyway for other purposes (phone calls, SMS, apps, etc.), then they have no motivation to additionally buy the cheap photo/video-only device and carry that with them.

It's the same reason why, if there was a $20 Facebook device, a $20 Twitter device, a $20 SMS device, etc., they wouldn't sell very well since the phones people already carry can do those things without needing to purchase and tote around multiple other devices.
I am curious to see how those two will sell. I can't imagine myself to buy the not-so-cheap 5C, when for 100 eur more, I can have faster processor (which will be important thing for iOS7), much better camera, non-plastic body and other things.
What happens in the gmail web interface?
Nokia designers should be proud of themselves for setting a colorful plastic case trend for the smart phone market and even influencing the iPhone.
How to use Google Keyword Planner for Keyword Research
I think the iPhone 5S Fingerprint Reader is revolutionary because it is invisible: http://t.co/AfQSFqAjBy.
I don't think that the non- arbitrariness of content changes the assertion - that attempting to own content is rent seeking or begging.