skysight-inc/HackerNews huggingface dataset:
Have you read the front page of SJCL? It includes a warning about the relative insecurity of browser Javascript cryptography.

You do this a lot: weird little namedrops (Langley, Boneh) that aren't quite saying what you want them to say, and smug dismissals, such as your characterization of "my rant" about Javascript cryptography as (a) the sum total of all arguments against Javascript crypto and (b) disproven by modern browsers†, or things like "look at what Adam Langley, who knows the crypto, says". What's more annoying is that you use both tactics as a smokescreen, as if to suggest that you were responding to the criticisms I've offered, when you are in fact dodging them.

You want more consideration from me than you're willing to extend to me. No, I don't think the conversation would be much different in person.

That's fine, by the way. I'm not a gatekeeper and you don't need my approval to do anything. I simply stand by my recommendation: I don't right now think people should use the tool you've built, or anything like it.

† You've since edited this page, but we both know what it said.
It is a bit ridiculous, isn't it? But it's a curious and interesting state of affairs also.
What do you do for a living? Whatever it is, in the spirit of freedom I hereby demand that you offer your services for free.

Doesn't sound like a good idea, does it?

Music, just like any other service, art or physical product, requires time and effort - it has value and is not a commodity. If you don't value it enough to justify spending more than the price tag of a spotify subscription (which doesn't help any artist anyway), then don't - it's fine - but don't expect artists to work for free.

That said, Grooveshark is a mor ethan shady business and should have been closed a long time ago in my opinion.
In-progress book site for "Advanced R development"
E-book Reading Jumps; Print Book Reading Declines [2012]
Margit Wennmachers: 1 of 2 female partners at Andreessen Horowitz
Because he can?
So says the multi-millionaire comedian who rose to the top complaining about everything and everyone. I'm sure he would have had the same success in a place like China.

BTW, George was a comedian, that is, entertainer. He was saying stuff that would sell more tickets.
The three badges (tweet bird, email and cloud) on the front page change color on hover, but are not clickable.

The page has a bunch of other usability/UI issues.

I also don't know what an avatar is in this context. Consider adding a more clear value proposition with an explanatory message.
Although I recognize the hyperbole in the last sentence, I think it would be interesting to see an experiment comparing the performance of cyclists (or any athletes) who've gargled with Gatorade to those who've gargled with ice cream. I just wonder if the ones who gargle ice cream would mentally feel their performance hindered (and then potentially not perform as well) as ice cream is deemed unhealthy before physical activity, even though their brains are receiving more utility from the actual sugar than the ones who gargle Gatorade.
Slightly different meaning. The colloquial idiom of an "average" face is one that is unremarkable in a crowd, one of median attractiveness. Taking the average of all of the faces in that crowd results in a face that has median features, but measurably higher attractiveness. Reality can be counter-intuitive.
Where in the world are you? Do you have a traceroute to 8.8.8.8?
You leave finger prints on the phone. Just snap a photo with a decent camera - it's probably enough detail. Print it. Stick some latex or glue on it (literally available everywhere).

That's it. This is not rocket science or time consuming like brute forcing. You don't even have to shoulder-surf to catch their password.
No, the physical access statement still holds true, even with FDE. First, if the machine is powered on, they can just extract the keys from RAM. Second, if you continue to use the device after it has been tampered with, you also lose (aka evil maid attack).
If you control for Ango-Saxon admix, it seems that the US will have a very similar homicide rate to other Ango-Saxon nations. Higher, perhaps, but probably only by a bit:

http://www.realclearscience.com/journal_club/2013/07/22/yout...

http://en.wikipedia.org/wiki/Race_and_crime_in_the_United_St...
Much more convienient than a passcode with a little less security. I'd still use it unless I was a CIA agent.
You linked to a support document explaining how the technology works. You may have had a point if this was listed on their product page describing the feature, but instead you have them touting the convenience of using your finger to unlock your phone and make purchases:

You check your iPhone dozens and dozens of times a day, probably more. Entering a passcode each time just slows you down. But you do it because making sure no one else has access to your iPhone is important. With iPhone 5s, getting into your phone is faster, easier, and even a little futuristic. Introducing Touch ID — a new fingerprint identity sensor.

Put your finger on the Home button, and just like that your iPhone unlocks. It’s a convenient and highly secure way to access your phone. Your fingerprint can also approve purchases from iTunes Store, the App Store, and the iBooks Store, so you don’t have to enter your password. And Touch ID is capable of 360-degree readability. Which means no matter what its orientation — portrait, landscape, or anything in between — your iPhone reads your fingerprint and knows who you are. And because Touch ID lets you enroll multiple fingerprints, it knows the people you trust, too.
If it were, it would always be 0.
I had always purposefully avoided giving LinkedIn my email password, but when I just clicked the link to remove contacts given upthread, somehow LinkedIn magically had all of my email contacts. So, I gave it to them at some point. I am really displeased.
It's normally not an admin's choice to stay slow and out of date. This is especially the case in a non-IT-centric business, which nonetheless uses technology to function.

Typically, the issue is like this:

1) Management demands that a specific solution is installed, and ignores IT's complaints

2) The solution requires an environment IE 7 (or Windows XP, or... take your pick)

The admins now have two problems: they need to convince management to move away from the old solution to a new one (another capital expense), in addition to maintaining a hateful, old environment so that the business doesn't break.
Senior management doesn't realize they dug their own grave, and refuses to pay for the capex "just" to have the latest version of the solution, when the business is seemingly working just fine on the current environment.

Eventually, after much praying and finger crossing, only one of the two things saves the admins:

1) The solution is upgraded to support modern software

2) The environment becomes unsupported, and management is forced to reconsider the upgrade.

Have some sympathy, mate! :(
taking past trends into consideration, it looks like you're betting on the wrong horse, here. it will exist.
Python Random Number Tester
The script tests the random number generator, the results of the distribution.
How is this not going to turn in to a stalking tool and an effective give-away of citizen privacy to companies looking to profile the members of the public?

Edit: For that matter, does the state have the ability to give away the commercial value of my travel information without compensating me for it?
This must be a very recent development then - there have been countless stories of rather obscure and niche artists that found it impossible to have their work taken down by Grooveshark. Instead these reports often suggested that those (re-)uploads of unlicensed material seemed to happen automated.
How to escape Liquid template tags in Jekyll
If you wouldn't mind, could you indicate which other methods you are referring to? I'd like to check them out. As far as I know stereolithography is the most accurate method known. And I can't foresee any accuracy issues inherent in this particular solution that can't be improve with a slight increase in materials cost.
It's not as useless as all that. Assuming Apple has properly used their key derivation function, and the phone locks you out after ~10 failed attempts, and there's no way to access a locked phone's data, then a four digit passcode is actually quite secure.
Making a blog faster with MaxCDN
Where there is smoke, there is fire.
It looks like either of the following:

- the capacitance of the ridges and crests of one's fingerprint dominates any differences in subcutaneous capacitance (possibly because they are closer to the scanner, or because there simply is too little variance in capacitance between flesh and hair veins)

- subcutaneous structures resembles fingerprints too much (seems quite possible, as there must be a reason that it is hard to permanently change one's fingerprints by using sand paper)

Aside: a Google found this procedure: http://www.zoklet.net/bbs/archive/index.php/t-202956.html I don't have the faintest idea whether that is real, but regardless, I don't recommend it.
In this day and age of NSA spying on everything, you'd have to be a complete moron to give any device your fingerprint data. You might as well E-mail the FBI with a copy of your fingerprints to store in their database.
In addition to the chimeric qualities cited in the NYT article (I skimmed), IIRC some DNA sampling has in the past used and may still use a fairly limited profile of markers. The statistically likelihood of matches between distinct parties is in some cases well under the population of the world. Never read into it in detail, but I was left with the impression that "unique identifier" can be an over-statement/qualification also from this perspective.
I'm not being a hater, but tbere is a lot of "I'm not sure" in your answers.

Not the sort of thing that is reassuring to see from somebody claiming a solution is "secure".

That said, there is definitely a niche for this sort of app
if it causes people to behave recklessly because they have the false impression of security, when they would otherwise have taken better custodianship of their device and their data, then yes ... it can be worse than nothing.
A short tale of album artwork and babies.
No, this is not the same as sim unlock. Circumventing touch id technology by making fake fingerprints is exactly the same case as being called to unlock a locked doors. The specialist knows when he is liable to crime and cannot make a legal bussines out of illegal access.
This happened to me. I'm not an idiot, I always intended to specifically avoid giving them my email credentials. I just discovered that I had indeed done it at some point. This is grounds for me terminating my account with them.
Agree. The lawyer should draft it, and the chairman or CEO should post it.
That depends on his answer. I'm asking because the paths to becoming "smarter" as defined by each of those objectives differ from each other. Reading a whole lot of Wikipedia tangents will make you seem smart at cocktail parties, but it's unlikely to lead to wealth & fame, nor does it contribute to much personal development. Learning, say, Foucault's theories on power may contribute to personal development, but they won't make you seem all that smart at cocktail parties nor get you a job.
NYPD is encouraging citizens to upgrade to iOS 7
It seems that a dos version is still being sold (http://dbaseclassic.com/) and the company claim for more than 7 million active users.
Which is ironic coming from a company known to be sharing information directly with the NSA.

Name one security technology that is 100% foolproof. They don't exist. So the point isn't to rely on one thing, but to rely on many things that, used in concert, increase the risk, complexity and cost associated with subverting the entire system--not its individual components.
Taleb is full of great ones. Here's one I read on the plane a couple of hours ago:

"Heroes are heroes because they are heroic in behavior, not because they won or lost." - Nassim Taleb, Fooled by Randomness

Second time through that one!
Wow!

During his 1999 trial, Schneeberger revealed the method he used to foil the DNA tests. He implanted a 15 cm Penrose drain filled with another man's blood and anticoagulants in his arm. During tests, he tricked the laboratory technician into taking the blood sample from the place the tube was planted.
To add a data point, Italy has some of the strongest job protection laws (at least theoretically), and still your example wouldn't be a problem at all. First of all, even for a permanent contract, there is always a 6 months "probation period", when you can freely fire your new recruit. Second, for a company under 10 employees, protection are much less strong. Third, most people nowadays are first hired with temporary contracts, which can usually be terminated with 1 month notice, without any reasons (there are exceptions for pregnant women).

Those laws become a problem only when you start growing bigger. The real problems when you start are red tape, high labor taxes, and VERY high pension contributions - to pay the VERY generous pensions that generations up to baby boomers afforded themselves.
Exactly. Losing their spot as the business social network would kill them.
I am in DigitalOcean (San Francisco). The answer is simply distance/routing. I am guessing OpenDNS has an anycast node in DigialOcean (SF), where Google Public DNS does not. A ping tells the story.

ping 8.8.8.8 => 24ms

ping 208.67.222.222 => 1ms
You have never in your life seen me criticize anything Bernstein said. You've once again deliberately mischaracterized something I said in order to replace rational discussion with emotional appeals. Here you've done it on two dimensions, first by suggesting that you're standing shoulder to shoulder with Daniel Bernstein, which you are not, and then by attempting to personalize the discussion to make it appear that you have a specific conflict with me, when in fact I just pointed out upthread 3 cryptographers, all of them smarter than me, who also had negative things to say about your design.

I don't think this style of argumentation is helping you. I think it makes it sound like you don't have good responses to technical criticism. But that's just me.
This can actually be huge if well-executed. The vert.x ruby examples have had no rails afaik.

Look forward to playing with this.
Considering all the apologies I get from people after linked in spams the everlasting crap out of me and mailing lists I'm on, I'm having a hard time believing that there isn't _something_ wrong going on there and that Linkedin doesn't know about it.

I'm not a fan of social networks— but Likedin seems like an actually reasonable idea... However, I've never made an account there because before I ever got to it the floods of invites (many clearly not intended) provided ample evidence to me that this wasn't something that I wanted anything to do with.
All of the above sounds good.
So my advice to not support older browsers holds. If the web essentially stops working, the powers that be will insist on upgrading. Developers will be doing you a favor. If you've got software that still only runs on IE7, for example, you'll have to install Chrome or Firefox.
There are two other small ray tracers that can be examined. Both are winners of the International Obfuscated C Code Contest.

Matt Zucker won in 2011 and Anders Gavare won in 2004.

They can be found here, http://www.ioccc.org/years-spoiler.html

(The 22nd IOCCC is open for entries until 2013-Oct-03)
It's also not stored on the device. Hashes, not fingerprints, are stored.

You need the fingerprints themselves to fake out the hardware.
Soylent Green will help more.
So, if this can be accomplished with keys, have you removed all the locks from your house? Do you rotate your locks every 3-6 months?
>Is the current power-law distribution crystalizing into a caste system?

Of course it doesn't. Because the majority of income earned in top 15% and even top 1% is not derived from capital (at least not financial/material capital, to be precise). It is salaries and bonuses. Ability to get these is derived mostly from education (and also social skills which are evenly distributed among income brackets), and education is going free or cheap online. So no reason to worry.
Yep, the title is inaccurate. On other sites I've seen "First commercial MPTCP implementation" :)
(author here)

D'aw, thanks so much. I really appreciate that. I identify as a OS-level hacker, and very focused on code, not design, so it means a lot to hear such kind words when I put a bit of effort into it.

Thank you!
lol, @ "oppression and control" . go back to your conspiracy theory cave. Apple didn't have this in mind, they simply set out to solve a problem.
Giving someone the illusion of security is bad because it displaces their understanding of security.

An understanding of security will reveal that security is not a binary state of affairs. It's perfectly reasonable to trust known-imperfect mechanisms like the iPhone fingerprint reader to keep honest people honest and discourage ordinary muggers and thieves. I don't need military-grade access control for my personal iPhone, I don't want the inconvenience that would necessarily accompany it, and I damned sure don't want to pay for it.

And the Google Chrome guy is correct in all respects: it's not reasonable to expect an application to provide security that's redundant with security provided by user accounts on the OS it runs on. It would be better to teach users to create separate accounts on their system, if they want to hide their local passwords from other members of their family.
On the Internet of Bits and Pieces, “just works” won’t be good enough
RIM? That doesn't exist anymore. They are called "BlackBerry" these days[0].

[0] http://www.bloomberg.com/news/2013-01-30/rim-changes-company...
This reminds me of Kevin Hale's post on Calculating Color Contrast for Legible Text:

http://www.particletree.com/notebook/calculating-color-contr...
IDF Hackers Test Readiness In Israel for Cyberattacks
Why 18.62.0.96 in particular for testing web service? Does MIT provide that IP as a public service?
Explicitly reject / add a 'move to spam folder' filter, but yeah. And some places I've given +names have sent to my un-suffixed address (I mostly suspect bad email sanitizing / filtering due to Hanlon's Razor, but ya never know).
Google has one of their own: https://code.google.com/p/namebench/
> I also realize that free software is not a panacea and that closed source, commercial software is a necessary complement to the existence of a healthy ecosystem.

Necessary? Is that just because it pays salaries?
I take it you're not a security researcher either, because "A properly encrypted device is a brick if stolen, which is the only reason to have full disk encryption in the first place" is insufficient, too.

Cold boot attacks, copying the drive and hacking the bootloader to get the drive password the next time you log in are two trivial methods, both of which have been used already.

Once you lose physical access to your hardware, it's game over. You simply cannot trust your computer after that point if you care AT ALL about maximizing security.
Actually, this raises an interesting thought. Couldn't a security-conscious user take advantage of this to turn "something you are" into "something you have"? Since you can train the sensor with anything, is there a market for semi-permanent, cryptographically-random... Thumb rings, or something?
We always made an option into our application settings for index regeneration. :)
Cool. As I understand it, Turkey has a relatively dynamic economy compared to Europe; it seems like it benefits from straddling the European continent and west Asia.

I don't know what to say about immigration being inhospitable to you. Obviously, I think we'd be better off with more skilled CS grads, and shipping them back to economic competitors does not seem like a great long-term strategy.
Vim's tabs are not the same as TextMate tabs: they are workspaces, not 1-to-1 proxies for files. Don't try to use them like in other editors, it's an exercice in futility.

You can make use of command-line completion:

:b <Tab>

which does partial words too:

:b js<Tab> completes with teh name of your JS file

You can make command-line completion even faster:

set wildcharm=<C-z>
nnoremap <leader>b :b <C-z>

You can try quick, generic, mappings:

nnoremap <PageUp> :bnext<CR>
nnoremap <PageDown> :bprevious<CR>

You can try more precise ones:

nnoremap <leader>1 :b1<CR>
nnoremap <leader>2 :b2<CR>
nnoremap <leader>3 :b3<CR>
...

to mimic TextMate.

You can try listing and choosing in one move:

nnoremap gb :buffers<CR>:b<Space>

You can try the builtin Ctrl+^:

3<C-^> is equivalent to :b3<CR>

You can remap it if you want:

nnoremap & <C-^>

and do:

1&
Save and open your stored website links at once
Gymnastic rings are inherently unstable: If the rings go too far back you can tear your shoulder. Being tired increases the risk. Even, strong, experienced people have sustained shoulder injuries doing muscle ups.
They broke India into two sections as well. I don't know enough about India to know whether or not that distinction reflects an ethnic divide, though.
https://code.google.com/p/namebench/
I used to have Daewoo-branded home appliances (fridge, microwave) and my girlfriend at that time had a Daewoo car (branded as Chevrolet in some countries).
a deprecated plugin that hasn't been updated in 2 years? while there are at least two updated plugins?

WP super cache and W3's Cache plugin

??!?!????????????????????!!
20 if they use their toes.
Rare is the phone without the owner's fingerprints stored all over it.
Agree 100%, especially when it comes to the text elements.

Even if they expanded the system such that it were capable of automatically creating spans in the text to adjust from white to black depending upon the background color under specific letters, having the text switch from black to white and back again along with the background would look horrible and would be terrible for reading. But using high contrast outlines works fine on just about anything, which is why that is the go-to for all "meme" photos (Impact white with black outline). While I would suggest avoiding Impact unless you are actually trying to make a "meme" association, this sort of high contrast outlined text is still by far the best way to handle text over images that may themselves be high contrast.

Sadly, true text outline support is inexplicably very bad among browsers, at least as of the last time I checked, though in CSS3-capable browsers you can cheese outlines using textshadow.
Overcast - Podcast app by Marco Arment
In my opinion package management is a non-solution. It doesn't solve many obvious problems (all your software is tied inside release cycles, tied to shared libraries and you can't have multiple versions of the same package installed), plus it operates under assumptions that don't even make sense anymore (we're not distributing 3rd party software bundled in floppy disks anymore to tie dependencies together).

Installing applications as containerized packages (e.g., Gobolinux, OS X .app) should be the norm. Both apt and pip get it wrong because they don't solve any of the above problems by themselves (hopefully you can use pip+virtualenv to achieve containerization, and more recently, LXC).
4 digit pin? I use a 12+ character alphanumeric password on Android.
The solution here is to show an error notification after the fact. A good way to handle this is to bake a failed-request queue into the network layer, and to ensure requests are serializable and replayable. Obviously, mobile designers need to consider failure cases and the best user experience to deal with these.
I think it's a hot topic in security circles right now that a worm or virus could infect these mobile devices and "phone home" with the data, resulting in a media nightmare.
You are overcomplicatimg things. The hypothetical cop could just smash your phone to pieces. Same result, less effort.