skysight-inc/HackerNews huggingface dataset:
Indeed. Although there hasn't been much public cryptanalysis on it (besides that it's susceptible to a cold boot), it's proprietary and owned by Microsoft.

Then again, he did say "at least". It probably is better than nothing at all.
No reasonable person is going to hate him for using ordinary colloquial English. In ordinary English, we can "steal" many things besides tangible property.

If your friend convinces your girlfriend to leave you for him, it is common to say he "stole" her from you.

A sports team that wins from behind at the last minute against a supposedly better team is often said to have "stolen" the game.

If a restaurant owner paid a waiter at another restaurant to spy on the kitchen to figure out a sauce recipe, and then put that sauce on his menu, many would say the recipe was "stolen" [1].

Falling in love is often described as having your heart "stolen".

If someone bugs your office and hears you practicing your pitch for a startup incubator, and then they apply and pitch your idea before you, using the points from your pitch, most would say he "stole" your idea and your pitch.

[1] This may not be such a good example, because the recipe could be a trade secret, and "theft" might then be legally correct usage instead of just colloquial usage since misappropriating trade secrets is actually called "theft of trade secrets" in some jurisdictions. For instance, see 18 USC 1832, "Theft of Trade Secrets" [2].

[2] http://www.law.cornell.edu/uscode/text/18/1832
You are completely ignoring the possibility that there exist people who hate the MPAA/RIAA despite not pirating. Furthermore you are completely ignoring the possibility that some people pirate opportunistically, and hate the MPAA/RIAA for reasons unrelated to their pirating habit.

You cannot strike out the possibility of non-pirating critics with evidence of what pirates prefer to pirate, since all critics just being pirates is your unsupported assertion.

1. Critics are pirates.

2. Pirates pirate new material. Pirates are not concerned
with old material.

3. Critics are not concerned with old material.

2 is almost certainly true; I certainly do not deny it. 1 is your unsupported assertation. 3 cannot logically follow from 1 and 2 so long as 1 is unsupported. 3 cannot be cited as support of 1, that is circular reasoning.
The Nokia is staged for ads too. You can change the highlight color to be whatever you want. Additionally, many WP apps have a solid colored tile that doesn't respect the user's color choice.
I'm not a fan of this idea:

From a user experience point of view, it's much more effort (at least 3 clicks more) to have to open an email client, open an email, and click a link, as opposed to just entering a password.

Also as airlinenut mentioned, it would allow others to send you an annoying email just by entering your email address, and any methods to prevent this (captcha etc) will just make it even harder for the user.
As a book designer, I can tell you that the jacket design in large part decides whether a book will sell or not.

http://www.newyorker.com/online/blogs/books/2013/07/the-decl...
First off, this is fascinating, and I love it. I never thought of doing anything like this, and I have no idea how they came up with it. Awesome idea and great execution.

But this:

>The advantage of using CSS selectors rather than JavaScript indexOf() for search is speed: you only change one element at each keystroke (the <style> tag) instead of changing all the elements matching the query.

makes it sound like they just don't know how to write DOM-efficient JS, and probably never profiled it or their implementation. I would be shocked if you can't relatively-trivially make a faster JS implementation, and even more if you can't make a significantly faster 'smarter' one with e.g. a more optimized search index, since you can make tradeoffs the CSS processor very likely cannot.
I know everyone thinks this is nuts, but these people are the one who stand their ground and defend our freedom when it is almost crazy to do so. I admire them for pointing up obvious freedoms that people routinely give up.
At CQU (in Australia) I remember being lucky enough to have been one of the guinea pigs of the IT course at the time that it first started, and the introductory language was (Turbo) Pascal. The following year if you wanted to go further with programming other languages were offered like C++, LISP, assembly, COBOL, etc.
The intakes the following year started straight into C++ and the drop-out rate was incredible. I know if I started with C++ I would have struggled and probably given up and dropped out too.
Programming should be easy and fun when you learn, you shouldn't have to feel like an idiot.
The difference is, they're now spying on everyone. I struggle to find a credible justification for that.
In the same way that a lion is kinda like a horse. Serving private apis out over HTTP is an implementation detail for a native app. If it becomes convenient, they could switch to a different protocol for their RPCs without anyone noticing. That's not the web in any reasonable sense of the world.

Without links, it's just not the web. Archive.org can't preserve it, search engines can't search it, you can't reference it effectively in a bug tracker or a blog post or a hacker news thread, or a footnote in an essay, etc.
Update to yesterday's post (aka What could possibly go wrong?) | USENIX
Execution is important.

Atrix: Turn the phone over. Slide your finger vertically across the reader. Turn your phone back over and commence use of phone.

Apple: Place your finger on the most used button on the phone, any direction you would like.

Edit: Fair point that you don't have to turn the phone over. I think it is still quite a jump forward in usability to incorporate it up front, embedded into a button that people constantly use on the device, and usable in any position.
Isn't this exactly what Mozilla Persona [1] does?

EDIT: In fact, Persona goes one better. Persona has the browser act as an intermediary between your e-mail provider and the site that you're logging in to, so that the e-mail provider doesn't get to see the source of the authentication request, and the site that you're authenticating with doesn't get any further details beyond your e-mail address.

[1] http://www.mozilla.org/en-US/persona/
sigh. good riddance apple, and your awesome new geofencing patent.

http://goo.gl/AzwazX

Make the world better or GTFO.
T-Mobile seems to be trying. They're fairly heavily advertising cheap bring-your-own-phone plans, particularly targeted at getting people to switch their smartphones from other carriers. People do care about their monthly cost, they just don't seem to weight it properly. Targeting people who already have a phone seems like a good move in that respect, because a lot of people wouldn't spend $400 up front to save $30/month, but they're often happy to save $30/month by switching carriers even though it means they don't get a phone upgrade.

The biggest problem for me with what T-Mobile is doing is simply that their network coverage is not that great. Seems like it's kind of inherent when it comes to attempting to disrupt the industry: the smaller players will necessarily be those with the worst networks, and the large players with good networks have no incentive to make any changes.
Are there necessary credentials for being hired by a YC startup? I never had that impression.

Edit: Not trying to be snarky, I just wouldn't foresee the average YC company putting red tape in someone's way if the person demonstrates enthusiasm and value and the company is looking to grow.

Since you got hired by one YC company, even if you felt underqualified, I'd guess there are probably multiple YC companies out there who would hire you. So it seems possible that these 'necessary credentials' weren't real requirements in the first place, just imagined ones.
If you're willing to manage everything yourself, DigitalOcean is awesome and cheap. I don't know about memcached though.
"Oh damn! We are totally foiled by this encryption. Can't read any messages, public! Carry on sending confidential data". Seems like a good play.
This is the PatchMatch algorithm:

http://gfx.cs.princeton.edu/pubs/Barnes_2009_PAR/
Allow the user to sign in with their password, if they cannot remember their password or would rather sign in with their email then allow them to receive an email containing a token that logs them in. From their account settings they can change their password.

This is already how most websites work isn't it?
Getting started with Riemann
"No need to fill a form, just a simple click on Connect with Facebook or Twitter and here you go, you are ready to play and earn points."

Why? I do not have a Facebook account or a Twitter account. Why do most web services insist of having one of these accounts? I do not want to keep my "high score" for the imaginary Internet points. I do not want to see how others are doing. I just want to take the quiz.

You just lost someone who would have definitely played this game and spent time on the site.

Great idea though. I have shared this with my friends.
google glass and self driving cars are really them just monetising r&d. They aren't suitable for real world use.

Apple doesn't talk about their r&d until it's a real project. It's really hard to compare the two.
How Not to Hire
The thing that mystifies me most about the whole NSA scare is:

Did you honestly not suspect they were doing this all along? Why the concern just because some details have been leaked?
> We can't imagine a more hostile reaction to the wave of privacy concerns sweeping the world right now than debuting a proprietary, network-accessible fingerprint scanner as your new 'feature'.

That's what I call a serious failure of imagination.
>(McAfee security software? really?)

It's a name people who wear hard hats recognize. Commercial HVAC people aren't hip like us.
I've used ear plugs as well, to lesser success. Many people are uncomfortable with the pressure it puts on their ears.

I've long been used to earplugs for a while (a couple years in a boarding school dorm necessitates them), but my ears just adapt to the lower noise level. I suppose the noise generator raises the noise floor, so external disturbing sounds have a lower SNR and thus you're less likely to react to them.
You're right.
I will update the login form soon, thanks for your feedback.
> We can't imagine a more hostile reaction to the wave of privacy concerns sweeping the world right now than debuting a proprietary, network-accessible fingerprint scanner as your new 'feature'.

A serious failure of imagination.
Exactly.

Conventional application/review processes can easily turn into "beauty contests": hiring decisions made primarily (or even solely) on the basis of who looks good on paper, who gives a good interview, or who comes across as the most likable and personable on the day of their interview.

Beauty contests have spotty track records for predicting on-the-job performance, but they're often the norm.
How to fix that stupid "Internet Explorer has stopped working" error
All of their current 123D software is free for all: http://www.123dapp.com/create

And I recently was impressed to learn that they offer free licenses for most of their professional software (including Autocad) to school teachers, university faculty, and degree seeking students.

Qualifications: http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=12311...

Software: http://students.autodesk.com/?nd=download_center
They don't even say fingerprints are not uploaded:

According to the press release, "fingerprint information [...] is never stored on Apple servers or backed up to iCloud." But nowhere do they claim it doesn't ever leave the phone. It looks like this leaves Apple the option to upload the data to "trusted partners".

http://www.apple.com/pr/library/2013/09/10Apple-Announces-iP...
np. Please take this as constructive feedback; I would love to play this game. If you want to have some sort of a registration system, do check out Reddit's method -- simple registration without the need for an email address even.
Wait, what? You can't coordinate a protest on WP7/8 (or with dumbphones)? Why?

And what's so bad about the camera flash on Android phones (or is it unpopular in Syria)? This comment sounds like a bad advertisement, and is completely meaningless.
Yes Persona do it. Better.
His position, I'm guessing, is that when a good has no natural scarcity (pictures and music in digital form, for example, or compiled code), society should not be creating an artificial scarcity in its stead (ie. compelling others not to reproduce it through force of law). He views the idea of this compelled scarcity to be, basically, rent-seeking behavior codified into law.

I'm not entirely sure, but I suspect the "you can't own" portion of his statement was a point of possession and direct control, not necessarily law.

exratione, please let me know if I'm misrepresenting your position here at all, and I'll correct my post. (I'm intentionally leaving out my opinion, just trying to clarify yours. :))
Iphone will be out soon, pretty sure hacking/fooling fingerprint sensor is top priority for lot of people. So we will see if this common methods works on not.
How is it not on-topic to discuss NSA surveillance in a discussion about one of the world's most popular internet-connected devices collecting biometric data under the control of a large American corporation?
Blocking comment spam without captchas
Reminds me of an idea where a company trains people to be professional bloggers or similar, and in exchange a fixed salary is given.
True. It should be sub-dermal, but I do not know the workings of sensor and epidermal was mentioned on Apple's slide.
How can a compiler warn you that your thinking is wrong unless that thinking breaks some language rule or does something worth warning you about?

The problem presented in the article is not well thought out and cannot be achieved with these instructions:

Write down your name.

Make a pile of pennies with as many pennies as there are letters in your name.

Keep doing this:

Write down an 'X'

Remove one of the pennies

as long as the number of pennies is less than the number of letters in your name.

So, outside of being a mind-reader how is a C++ compiler supposed to correct _your_ thinking?
Fingerprints and Passwords: A Guide for Non-Security Experts
Wow. This is really cool!
Not only can you make the ascii drawings, but there is an integration with a service called ditaa (unaffiliated) that then turns your ascii drawings into actual images.
I am keeping these.
http://ditaa.sourceforge.net/
I believe he is talking about common sense vs. you talking about law.
Saw something similar to this on BattleStar Galactica. It's amazing how every Sci-Fi I've watched is becoming more and more practical.
Glad you linked it, because I was going to. :)
Thank you for this information. Forgot that capacitance varies and depends on variety of factors. I was speculating about the steel ring.
I was a bit overwhelmed by the many samples that I clicked on.

Someone else posted a link to her GitHub repo and I was glad to check it out some. I chuckled at her using of Ruby/Rails. I was amazed at her using of jQuery.

It pains me to note that what the industry might consider sound software engineering is so detached from the creative tools that she has employed to get this going.

On one hand the industry demands greater quality from their tools. On the other hand the industry seems eager to provide the creative tools used by amateurs-alike to help to get people trained in the tools that the industry might need.

JavaScript really is a puzzle that the industry has been trying to solve. Because JavaScript is far away from what the industry might consider sound engineering principles. But users of JavaScript could make for great employees, so the industry has been trying to figure out a way to create a bridge between the two.

Keep up the great work! I liked playing the Hangman.

Cheers.
Wow, $500 is an amazingly insulting offer. Statutory damages for willful infringement are $150,000!
Closed source with a finger print scanner!! No thanks...
Show HN: Monitor Global Financial and Econ Data (my side project)
Fucking christ. How many times are people going to "reinvent" email login.

Persona, mother fucker, have you heard of it?
And yet, the stats presented in the post seem to suggest otherwise. After they finish watching the porn, users click the ad and convert. Even if they click and convert at a lower rate than traditional media the data suggests that the lower CPMs more than make up for this.

It's not great for brand advertising (potentially). But for affiliate type marketing this seems like an untapped goldmine.
I read this as "from a single photon"
I think he means that it is even easier for the US government to spy on you if you're outside of America, not that your domestic government might.
If you like xargs, but want more flexibility, I'd highly suggest GNU parallel. Such flexibility includes running jobs on multiple computers, running intensive command using all available CPU's (like xargs -P), and creating unique scripts to handle multiple parameters.

http://www.gnu.org/software/parallel/man.html
So in your case, a crowded field is a boon, because lots of companies could then be expected to hit the problems you've got a solution for, yes?
Who is Heather Gilchrist? An exclusive look at founder of Socratic Labs
It's network-accessible? I'm sorry, does the FSF know something we don't, or are they just ignorant and shooting off at the mouth?
> so many people that underestimated the potential success for Arduino, and the rPi

I like the Arduino and Raspberry Pi very much, but they are not the pioneers of this idea.

There have been a whole bunch of electronic prototyping systems aimed at hobbyists in the decade before Arduino and Raspberry Pi hit it big.

Just to name a few: Parallax Basic Stamp, the Micromint PicStic and Domino, X-10, MIT Media Lab's Programmable Bricks, Gumstix, Phidgets, Teensy USB Development Board, littleBits, LEGO Mindstorms, Bug Labs.

I was cheering for several of the above, and they met with various degrees of success. It seemed obvious to me that they should become enormously popular, as big as the Arduino and the Raspberry Pi, but they didn't. There were probably dozens more that folded up and disappeared.

What I'm trying to say is that it took a lot of iterations of design, business model, functionality, and being at the right time before a couple companies found just the right formula to make it really big.
Apocryphal, but funny story about Calvin Coolidge: After returning from church one day,
his wife is supposed to have asked him, “What did the preacher talk about?” Mr. Coolidge is reported to
have tersely replied, “Sin.” Still insistent, Mrs. Coolidge probed, “Well, what did he say about sin?”
That is when Silent Cal responded, “He was agin’ it.”

What did the FSF talk about? Proprietary software. What did they have to say about it? They're agin' it. And like the sorts of preachers who love to talk about sin, there's never room for subtlety or tradeoffs.
Kind of, the only thing missing is proper user experience. Like having an input for e-mail and another button right on the login form.
We didn't choose to farm grains based on what would stack best in a grain silo. We built grain silos because we liked grain so much. Lettuce is mostly water; you won't be able to feed even one person on it, no matter how efficiently you can grow it.
People sending you annoying emails with this method is not really an issue as anyone that knows your email can (and does) find easy ways to annoy you (spam, phishing, chain letters etc.). I do agree however that the user experience is a deal breaker. I'd rather enter a password than open a client and wait for an email to arrive just so I can log in.
Any thoughts on what was said? The only reason I posted this is the number of syrian hacker news members that are concerned.
I've implemented a site before that did exactly that, because logins would be very infrequent so users were probably just forget a password anyway. It worked great.

BUT, it would drive me nuts if I had to do that every time I logged into my bank, for example, because sometimes e-mails take 1-2 min to arrive, very occasionally even half an hour. They get queued up somewhere along the way, who knows -- maybe the spam filter's being overloaded. Sometimes your organization's e-mail simply goes down. Sometimes your webmail goes down. Heck, sometimes your e-mail gets inadvertently disabled.

If it were instantaneous, and your e-mail account always worked perfectly, then it would be great. But the way things are set up right now... this isn't a viable option for a lot of sites. And it's certainly not going to replace your e-mail password ;)
And ThinkPads used to have a fingerprint sensor, many years ago. It's not that the technology itself is very cutting edge, or even claimed to be. (Of course, marketing claims anything to be cutting-edge. Apple's marketing doubly so.)

In the light of recent knowledge, it makes me wonder whether IBM had NSA backdoors, too.
Still better than Android requiring ridiculous, all-or-nothing, irrevocable permissions for every application.
It is very interesting business idea. No original research/thought/idea/journalism of their own. Scout common websites (reddit on top), find tidbits, use other people's work (their idea, photos etc.) and post lists. Get your blogger to dilute the content to pander to the most of web so that the virality factor increases, and the author should use "interesting" language. This formula gets you pageviews, and you are on your way to explosive growth.
If the attacker has the phone, the second factor (typically sms) won't work very well.
As a U.S. citizen, I've visited Canada and other places a few times. Any fingerprint collection that happened was incredibly subtle.

I tend to look at tyranny as the problem, not whichever mechanism it is utilizing, but you are making quite the assertion there.
The new iPhone will have an option to store your fingerprint. This has EVERYTHING to do with the NSA. It is highly relevant. How can you be so blind and not see it?
How is this not identical to sending the user password in the clear via email?
Yep, that is a fair point. I should have qualified my statement about bash's defaults, since many OSs include their own custom start-up files that may modify the defaults.
Vietnam's Internet Censorship Bill Goes Into Effect
The point is that they linked to the source, which did not specify that it was licensed under Creative Commons, and offered a convenient way to contact the photographer.
Remote on/off switch for all apps on iOS devices
This is how webhooks work in any API that has sufficiently embraced them (see Freshbooks for an example). Why are we pretending like this is something different?
He really just sounds like a butt hurt copyright troll.
My company AppCertain just released "Curfew Mode" yesterday. Would love any and all feedback!
This is really stretching the point, because it's implying that not only is a single breach proof of complete insecurity, but also that even a temporary breach is proof of complete insecurity.

If one is going to reason in black and white, then the only answer is that everything, absolutely everything, is susceptible to being compromised. In such a black and white world, there's no security benefit for open source software, because it is also possible that you could be tricked into running something that compromises your security, as it is also possible to have a design flaw in the architecture of open source code, as it is with closed source code.

It is only when one allows the concept of risk that a coherent security picture can emerge. Leave absolutes to mathematical proofs, and trust and risk assessments to the real world, at least until we can prove code correctness for an entire computer system.
-1 for disabling pinchzoom for mobile devices. I wish there were a browser setting to disable the disabling of pinchzoom.