skysight-inc/HackerNews huggingface dataset:
Scp doesn't get all file types correct (fifos, etc), while tar does.

Piped tar commands do, but are generally inferior to rsync (at least if you ever need to copy more than once). I believe I've heard (here) that piped tar commands can be useful for the first sync (possibly better compression, no overhead of file checksums), then rsync thereafter.
Why a shitty fanboy "article". Also I don't see the connection to healthcare.
Indeed: http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-...
Yep it's definitely influenced by Terraria and has similar mechanics. But I see these set of mechanics as forming the base primitives of the game, like running and shooting in Doom and Half Life, selecting and targeting in starcraft and c&c, or pointing-and-clicking in maniac mansion, etc. Hopefully I'll be able to colour this game enough so that people don't just write it off based on the core mechanics. :)
I think it's fairly simple: if you get Google to accept that there's indeed a problem, they'll fix it and 100% of the possible victims of this exploit are now safe. If you disclose it non-responsibly, you are letting a pretty big crowd know there's a problem, while leaving a time window open for them to exploit it and pretty much assuring that someone will get "0wned". By disclosing responsibly, you are making sure that the least possible number of users are affected.

It's not about the hall of fame. Is about making the web a safer place.
Hey, I'm thinking that we've seen nothing yet, but the M7 is small enough to fit in something thats very durable, lightweight and that is not your phone. I'm talking about something smaller, that will make us get rid of things like, Keys, Cards and other wearables.

Imagine the time before iPhone, and now look at the times after the iPhone. Apple made all this possible by challenging the industry.

I'm thinking about a product, that you wear, thats let us do a lot of fancy stuff, with out even thinking about it.
Yeah it is great if you can use similar commands across applications. Btw. there is also a nice history inside VIM (implemented as a separate buffer) that can be accessed using q: so you can scroll through the history with jfkl. E.g. I use that for accessing files: If you are working on a project you will probably edit similar files. If you use one "programming" vim sessions where you always edit files via :tabe you will find all the recent edited files in your history and using q:/ you can search for them pretty fast. So over time you have automatically a working environment adapted to your current project.
This article adds nothing to the conversation and is poorly edited to boot. The author thinks it's bad that this happened and he rants about it for 10-or-so paragraphs. It's not worth reading, let alone having on the front page of HN.
This got my heart beating. There is actual rebellion among academics, and a movement to restore trust in both people and tech. This is the NY Times quoting Matt Green of John Hopkins in the article:

“I know from firsthand communications that a number of people at N.I.S.T. feel betrayed by their colleagues at the N.S.A.,” Mr. Green said in an interview Tuesday.

Thats pretty strong sentiment. Seems to echo the bitterness of Rogaway: http://www.cs.ucdavis.edu/~rogaway/politics/surveillance.pdf

This is an important question of our times, and the cryptography experts should speak up like this. They have the credibility, and the ear of the people and media.
Insane overreactions are becoming extremely commonplace and quite frankly, its very disillusioning. I'm extremely disappointed in the tech community. Being an ass is not the same as discriminating against or hating a group of people.
Fanboy that got pissed off, my response to the iOS7 was and still is that it's absolutely BS, here is that article https://medium.com/trends-predictions/c22abbd34df0

The connection to healthcare? Elaborate with me, what is it that you don't see? Let me see if I can broaden your views.
Can anyone provide a mirror, please?
Thats an interesting concept, I wonder if Russia and China have their own standards/protocols to use?

I guess we could get the same effect by encrypting using 3DES, then AES, then blowfish, twofish and then RC4.
So what's your business model? Do you actually sell anything? No ads, no signup, no promotions.. Does it actually make any money? The entire point of a business is to make money, so I wonder how you do that.
You don't sound like a sociopath, I was thinking the same thing.
I have one on my x1 carbon, but it's a freemium add-on that requires us to buy more software to use it. That's the difference between Lenovo and Apple I guess.
Before reading this, bear in mind, you wont find many more critical of government than me....That said I have to ask the following:

How can any government accept a situation where communications are so secure that none of their agencies can break it? Essentially law enforcement do need to investigate crime. That has to be right and good for all. Even this anarchist accepts this.

Such a situation is fine for "us", and great for government, in that it means they them selves can communicate with confidence. But to expect government to accept a situation where there is zero way they can snoop or investigate is asking a lot. Its a huge risk to government. So, I think we have to forget that idea completely, as attractive as it is to the likes of me.

As others have said, its procedural or legal, not technical. What is needed is a rock solid frame work and set of rules that properly limit how the snooping is done. What is needed is a universal bill of online or electronic rights. Not just for the USA, but something that can apply to any country and government. I'd suggest it should be developed by an international group, UN backed, and made part of being a member. Or could it be something that has to be agreed to as part of acquiring IP addresses or domain names. Dunno, but tie it in some how.

Ok, I'm not sure that works totally as I have set it out, Im no lawyer, and others may well want to modify it, but we need something international as the internet is international. We all need protection, not just Americans. We need a base level to work from. Something we can all accept as reasonable, workable and enforceable. Most of all, we need confidence in using communications and those regulating it.
When was Mike Masnick last happy about anything?
The Short Sentence as Gospel Truth
Every standards body that is even remotely financed by governments or companies is a lie. (http://www.ecma-international.org/publications/standards/Ecm...)

Committees rulings are a lie. (http://www.textbookleague.org/103feyn.htm)

Even the most seemingly reasonable regulations are a lie. (http://www.amazon.com/The-Truth-About-Drug-Companies/dp/0375...)

The sooner people realize there's no other option other than a direct democracy since governments and companies are untrustworthy, the better.
Well, it's not actually an article, it's just a summary of the story. I would appreciate your detailed feedback and will be happy to edit post and add something to it that you find valuable.
I don't know how this will help if you have f.e. cancer or need some kind of vaccine which doesn't exists yet.
Or (especially for U.S. citizen) how it will help you if you get a 100K dollar bill for your treatment in hospital. Or how it will solve the whole "scam" with high pharmacy prices and patent problems. Or that there are not enough nurses to take care of old people or people in hospitals in general and so on.
Why can't people be true to them selfs and admit, that they're sexist or racist or something?

Everyone is in one or another way.

A big part of the problem is, that people tell them selfs they're the good guys.

"I'm not racist, but..." blablabla

You are! Everyone is!

It's not good, but it's even worse if you do racist/sexist stuff without even realizing it. Because then you give up control over your behaviour and let your subconsciousnes drive your live.
Wow, high time for this!

https://f-droid.org/wiki/page/Build_Server_Setup seems to have some clues on the automated build system.
Actually, 26% of Android apps have permission to slurp your contacts, including many that have no business doing so. Apple's current approach is much better at protecting your address book, because it makes apps ask permission at the moment they want access, not upfront when installing (which most users grant blindly).

This of course has little to do with curation -- except that curation helps too, in that malicious apps can be blocked. Apple's curated approach is why it literally has 1/100th the malicious attacks of Android. It chokes malware at the distribution point.

I noticed you had no response to that point.

Source: http://www.darkreading.com/privacy/more-than-25-of-android-a...
The "hot" companies of the Bay Area (like Google, Facebook, Apple and others) already pay pretty significant salaries (100k/year for an entry-level dev, fresh college graduate; it goes beyond that, I know a few developers making 150-170k/year). How much more would they have to pay, before we can admit that money isn't the issue? (Keep in mind I'm only making this case for the top companies hiring rockstar developers, which numerically look like a minority).
Motivations vary, and it's not for everyone - but we're quite happy with the participation we're getting out of it.

FWIW, the average amount is sort of meaningless: we pay between $3k and $20k for high-impact bugs.

There are also some researchers who prefer quantity over quality, and go after low-hanging fruit in acquisitions and isolated, non-sensitive services - often using custom automated tools. These findings usually pay around $100, skewing the total.
How Big Data And Analytics Can Help The Banking Industry - Video
If I remember correctly back in beginning of 1990s there was a discussion in the US about preventing export of encryption protocols, then it was a discussion about making laws where a suspect is obliged to give up his/her key just like in the UK to agencies, and someone even mentioned making encryption unavailable or forbidden by law for civilians. All in the name of "we wont be able to catch criminals if we cant listen in on communications". Up to that point in time, encryption and secure communications was reserved for agencies and those in power, it was not for the plebians. See for example how it went for PGP.

I guess a route that US agencies took is to "we will recommend good standards for you, because you know we also need security, but you shouldnt know all those standards and implementations will be compromised so we still retain the ability to spy on you while you wont be able to spy on us and if you do then you're a traitor".
Sounds ideal, until you realize that building and operating proper encryption is too hard for some of these organizations (PirateBay, FSF). For the rest, they are only mutually hostile on the surface. I am sure when it suits them they will get together and sell all our asses to each other.
To be fair, Atrix's sensor looks lie a standard slide based one, while Apple's sensor is completely contact based. I'm not sure what the implications of the different designs are yet, but I could imagine ease of use playing a role.
Danielle aging [video]
I will when that stuff can be done as easily as shift-command-n or right clicking a link and selecting open in incognito!
Females do not want their dating profiles visible by anybody except genuinely intersted and verified visitors. A major part of ok cupids system is that it tracks views and informs the people WHO checked you out. The other dynamic is that people are shy and they need to be pushed to set up a visible profile quickly before they lose confidence. At that point they are contactable and datable.

So no guest mode for OK Cupid.
Okay, maybe it says something about me as a person, but I can't quite understand that as a reason. I mean, I understand why people volunteer at a soup kitchen, but not this. Why would somebody go out to protect some unknown people on the internet from the mistakes of a for-profit company that is probably screwing over those same people, and themselves, in 100 other ways? I'm not anti-corporations or anything like that, but I do recognize that they are looking out for themselves (as is their right), I don't understand why everybody who deals with them in some way or another doesn't do that, too.

Plus - the fastest way of getting a vuln fixed is by having it out in the open, hopefully in a way so public that the affected companies' PR department needs to get involved. That at least incentivizes them to proactively look for issues, rather than set up a security@ alias, hire some well-known names from the scene to fix issues send there and calm the pocket protector crowd when shit hits the fan (cough, ctrl-f this page for examples), and pay reporters a fraction of the market value of their work (if anything at all).
Why not use ISO, they are doing a fine job on the C standard without the help of NIST.
The design certainly looks like it started in 1996. I visited the site and still have no idea how it's any different than a Tumblr blog.. Other than decreased organization and usability of course. Also we're talking about the topic of gradual engagement. Your site has pretty much no engagement other than hundreds of blog posts and a sidebar full of unorganized links. The OP was discussing businesses-- meaning the sales of a product or service. Your site doesn't qualify as such, or if it does, the value proposition is so horribly obscured as to make it undetectable. I'm not knocking your site, but it's hardly a relevant example in this discussion. If it is selling a product or a service, then it's a great case study on what not to do in terms of selling your product.
3 ways Culinary Lavender can help you find the love of your life
"How can any government accept a situation where communications are so secure that none of their agencies can break it?"

In my opinion, the 4th amendment says the government needs a good reason and a warrant, and then we all agree they can read my gmail. We don't have to agree they can store, search, and use everyone's gmail for fighting crime, terrorism, or gaining economic advantage over other nations.

Forget international committees. Smash the hard drives with my phone data in them that spooks can read at will.
Podcaster.js - A Node.js App for Podcasters
Been following Moonman for 2 years :) I am a relatively quiet lurker on TIGSource but I can't wait until Moonman is finally out (as in.. out out). The playable demos so far have been amazing.

Unfortunately, the start-up community is more cynical than the indie gaming one (blah blah Terraria clone). But, I for one, wish you good luck sir!

I love the indie community because it fosters creativity over success; the process over the end result. Unlike the start-up community (where the exit is what really matters). I dabble in both. The realism on HN keeps me grounded but the naivete on TIG keeps me dreaming.
> It's a very powerful approach but it means the db just doesn't trust the application.

Which has its advantages. The DB essentially becomes an API/service used by the application rather than an integral part thereof, and thus multiple applications can be cleanly plugged into the database instead of an "owner" application providing a service backed by the owned DB.
The topic isn't about iPhones. Its about finding an underground sea of freshwater and how that can help people. Lets keep the discussion on course.
Procedural quests and ancient machines sound promising. Good luck and keep up the good work!
"5. The internet outrage suddenly switches to him. The employee of Business Insider calls him an asshole on twitter."

This is incorrect -- Anil Dash doesn't work for Business Insider. Agree with your first and second takeaways. Beyond that..not so much. You mentioned potential cultural differences, here's my American perspective:

While the tweets in question may be a small sample of the overall volume, you just can't make those statements as an officer of a company. Period. Because:

-He used the N word. Sounds like he was referencing a movie out around then, but given our country's history, that word is just 100% off limits and rightfully so.

-In the US, we're finally coming around to the fact that gay people aren't a scourge on society. We also (especially in tech) are working to make the workplace more friendly to women than it has been in the past. We're also a very litigious country, meaning that having an officer making those kinds of statements about protected classes while being involved in hiring/firing decisions exposes the company to risks that 95+% of executives would be wise/willing enough not to expose their employer to.

You may be right that most people have tweeted something that would outrage people, but if you want to be one of the faces of a company, part of your job is not doing that. I tweeted plenty of dumb stuff (not racist/sexist, mind you) while drunk in college and with a privacy-protected account. Given that I aspire to hold an executive-level position, I went through and removed all of those tweets as I was nearing graduation and made my account public, and I avoid those types of posts now. Image matters.
Design School for Developers
Totally correct. HN users aren't not the typical 'normal' person. We are often in a bubble and forget that 'cool' UX improvements don't often meet the expectations of new users because they've been fed a diet of unusable shit for so long that any deviation from such is met with confusion. Such as not requiring a password confirmation for example. They're so used to it that it throws them when you don't ask for it.
That doesn't ensure a lack of foul play. Even none government-employed developers could be turned into "agents" to insert code. Whether they're bought off or even just have strong patriotic motivations to begin with, you still need a stricter review process to ensure that no one country nor organisation has significant input nor control over the code.
I shouldn't be able to terminate the rendering process, which contains the contents and information of numerous tabs by just loading a large image into it: it should realize the image is too large and stop loading it... otherwise that's a denial of service attack you can use against someone and potentially cause them data loss from one of the other tabs in that process. (That Chome shares processes between lots of tabs, by the way, was a massive disappointment after the original video that made it sound like tabs would all be isolated... it frankly is largely a worthless token show of security theatre to have things separated the way Chrome ended up doing.)
You guys are outliers and you know it (some of you are even proud of it).

So the GP is right.
African governements in general do not have the means to spy on your electronic life.
My idea was that, if you have an object file open with write permissions, you can assume that it has been created/modified anyway, and people will expect the checksum to change.

Of course this does not work if the checksum is calculated before the file is closed by your backdoored compiler.
That's hugely speculative. Just because his car's brakes might fail, it doesn't mean it wasn't an accident.
Apple will adjust pricing based on currency. If the Australian currency is getting weaker it may be because the emerging markets that it depends on are seeing turmoil in their currencies because of the prospect of Fed QE tapering.

http://www.telegraph.co.uk/technology/apple/4934147/Apple-up...
> As for the Chrome report you mention, if you provide the bug ID I can check.

This demonstrates exactly what's wrong with Google's interpretation of "openness". Sure, if one finds some Google insider, one may get information. Normally (read: in almost all other bigger Free Software projects), one could simply have a look at the bug tracker on one's own, without being on the mercy of Google.
Trust is a fickle thing, but one thing that I have learned is that one vital element to building trust is to refrain from announcing your intention of doing so. Even having a "plan to build trust" is questionable - if you need to make such a plan, most likely you have already lost any chance of succeeding.

People must build trust entirely by themselves. If they don't build it themselves, it's not trust. It's persuasion.

And the willingness to be persuaded has been eliminated rather thoroughly, lately.
I totally missed that I am truly sorry! well done!
Ask HN: Suspicious Operations
Hi,

I'm new here but assumed this would be the best place to ask the following question. If I'm wrong or need educating on the 'code of conduct' please comment and sorry in advance.

Some background first: I was viewing web logs and had many thousands of requests from "cyberpods.net" over a few months i.e. SuspiciousOperation: Invalid HTTP_HOST header server7.cyberpods.net

I block all request from cyberpods.net so this does not bother me. However, doing a little research it would seem that lots of Python and PHP sites are all getting request from cyberpods.net too.

My question is.... why?

Other than costing us bandwidth what does a company like this actually achieve? It's obviously not a misconfiguration at their end because of hundreds of others with the same issue from cyberpods.net.

Sparky
I was getting a significant share of what each client was paying, along with a regular salary. So yes, I was informed.
It needs separators between the fields in the data attribute, otherwise it could have false positives. e.g. "abe" will find "ona bednar" because "abe" is in the data attribute "an_abe_ndar..."
Don't miss xargs.
Who gets to vote in a direct democracy? My parents don't know anything cryptography, and are likely to base their decision on others, or even worse, a news source.

Right there, our parents outnumber us 2:1. Why should I trust the rest of America, who largely gets their information from media companies designed to optimize for ratings, on matters pertaining to cryptography?
As far as I know, there has never been a society with a public education system that was privatized.

Which makes your claim factually incorrect.

Since you're making unfounded assumptions, maybe you need to check your whole mental model on this topic.
Your augment makes sense, but somehow you're missing the idea that the government has infinite ways to investigate someone outside of breaking encrypted communication. They actually have people who can break into buildings and install keyloggers, or audio bugs, or interview witnesses, or anything you can imagine.
Storify Google Analytics in 1 Click
What's missing?
What's cool?
Feedback welcome :)
>>Your so called counter-argument, the one that you repeatingly kept asking a reply for is not a counter-argument at all.

As I've written five++ times, it is not only my motivation -- it is the Obama administration's motivation.

So your long argument why you don't need to quote and answer that goes also for the main US motivation... THE thing to argue against, you refuse to touch!

Which makes your well written text funny, in all its dishonesty. (That you call trivial game theory "illogical" makes it even better.)

>>All that I said is that I'm skeptical about assessment made by HRW in this particular case

You hint HRW is in the US pocket, without any support.

Another thing you refuse to touch is when I repeatedly write:

"So HRW, multiple intelligence organisations and EU are in a conspiracy -- and the Truth comes from you, Putin and Assad."

I try to write little to dishonest people, so they can't easily avoid subjects. But even without input from me, you just write really long without touching what I write!

For instance, my/Obama's motivation which you refuse to touch is relevant for the "catastrophe risk". And you also refuse to touch that the main humanitarian problem is the military. And... Enough.

(I stop now, after noting some cases where you're just dishonest, so you have less chance to avoid the subjects you try to bury.)
Scraping Schema Mark Up for Competitive Intelligence (no programming)