skysight-inc/HackerNews huggingface dataset:
It appears under USA-PATRIOT 216, virtually any information service provider is compelled to assist with a pen register implementation, which is bullshit. Prior to that, you could have not assisted, forcing the LEA to do it themselves, and if you had crypto and no technical ability to turn over the keys, it'd be at worst a shutdown. Now, you probably can be legally compelled to assist fully and subvert anything.

I assumed this stuff only applied to CALEA entities like PSTN, PSTN-interconnected-voip, and broadband ISPs; it appears it is actually patriot and means there's enough legal pretext to essentially always get keys:

1) Any non-CALEA entity probably does NOT have a system which can log every pen trap piece of data desired. If there's even a single thing which your system internally can't provide, LEA could argue that their own pen trap would be more effective, and could compel you to turn over keys to populate their device. They could compel you to generate new keys outside an HSM if you have technical controls to protect your existing keys from disclosure, too, and disguise that as "hsm failure" or something like that. It seems pretty open ended.

A non-charitable view of the entire Lavabit thing is that it was a roundabout way/pretext to compel key disclosure. It doesn't matter if USG uses the keys illegally for something which isn't used in a criminal prosecution; the data in Snowden's mail is of intelligence value where those rules don't apply.

2) Unless Patriot 216 is found unconstitutional, Ladar is fucked, as is the entire US IT/cloud industry. I don't believe in Lavabit's "keys are protected" argument -- the court presumes LEAs are trustworthy, and will accept just restrictions in policy on what they can do with keys. Only eliminating pen registers for "arbitrary Internet services" will work, and that probably won't happen.

(IANAL)
Individuals have balls, organizations rarely do.
Introducing MailinatorGuy - the mailinator.com superhero webcomic
EDIT: You have to read the complaint in the last link. It sounds like there were some laptops or something that were "lost" and the owner believed he stole them, and filed a police report. That's what the charges stem from.

http://s3.amazonaws.com/InnocentBeyondAReasonableDoubt/PDF/C...

With regards to the allegations of theft, I'm not sure what the author's point is. He repeatedly says he offered to pay the owner back for the missing items. Should that mean that he can't be charged with theft? If I steal something and get caught, should I just be able to offer to pay and avoid prosecution? He repeatedly says that the missing items amount to at most a civil matter, but stealing stuff from work is not a civil matter.

For the rest of it, the author doesn't have a leg to stand on. Say instead of an encrypted partition we were talking about a safe. I kept a safe in my office, and one day I was summarily fired and escorted out of the building. I promised that there was no business information or property of my employer in that safe, then refused to hand over the combination. Should the employer leave it at that, saying "gee, if he says he didn't put any business property in the safe, I guess I just have to believe him!"

I can understand where the author is coming from (though his writing makes that difficult). The owner is clearly being a huge asshole. But the author is being naive to think that there must be something "fishy" going on. Unfortunately for him, he's on the wrong end of this story. It's so common for disgruntled employees to steal company property or damage company property that nobody is going to give him the benefit of the doubt except the jury, who is legally required to. The author repeatedly mentions the standard for conviction (beyond a reasonable doubt). However, that's not the standard for prosecution, which is closer to "more likely than not."
It is better to be too late to market than too early.

It is better to sell to early than too late.

It sounds cliche, but focus on building a great, easy to use product.

Don't let a single customer be too much of your revenue.

Disqualify quickly.

I wouldn't do remote teams.

Let the market dictate your product direction, not the engineering team.

Vital few is so insanely important.

Avoid shiny things syndrome.
The question is if they'd spill their story even if they have a strong motivation/decision to not spill the story, as described in the article. For example, many people tend to talk about themselves while drunk; but they don't magically start talking about things they really, really want to hide, they'd instead become aggressive or silent.
Agreed - and if they can't already they will likely just move to commercial dictation that transcribes accurately automatically. I'll use my leap motion to kick-off Dragon, Google, or another app to try their hand at voice recognition. Pretty sure I'd rather just type a transcript myself than learn a new symbol language.
Not unlike Walmart.
I would just permanently maintain 4 or 5 checkouts of active projects, and rename the containing directories for branch names. I know git is better, I'm just saying SVN can be used in a similar way, if less efficiently.
Chrome also supports it if you enable Harmony
Counter-Example: IKEA
Would a team of 3 co-founders be treated differently than a single founder with 2 employees?

These scenarios are comparable both on 'ability to build stuff faster than 1 person' and 'demonstrated ability to build a team' scales.
France has been slipping for hundreds of years, since Waterloo.
House for Ants
Shame your website can't handle the load, keep's 500'ing.

Better invest in some better website technology

:)
Ask HN: What iOS HN reader is good these days?
Now that news:yc is unusable on iOS 7, what's your preferred replacement?
For anyone researching about making a better CMS, this is the single best blog I have followed for years: http://gadgetopia.com/cm
That's all relative, of course, to how long your application is going to run for and how much has to be JIT compiled.
Problem is we are starting to go backwards. It is more likely we will see a new Dark Ages in the next 30 years or so. :(
So above when you said "The French believe that culture is important" you meant the French Government. Not the short sighted People of France, who you believe need to be protected by the long sighted wise government.

Governments never make short sighted political decisions to protect entrenched interests. The People on the the other hand have to be protected from getting discounts and free shipping. Because that would be a bad financial option for them.

Thanks by the way, I needed a laugh today.
Is it feasable to firewall whitelist any IP that has ever pushed to a repo?
Maldives. I was hoping to get more information on the visa process. How difficult it is, etc.
No pricing? Pass.
Silly me. I bought a 50euro mouse from a local chain. I took it home and after 20 minutes didn't like the ergonomics. Then I got into a 20 minute battle of wits with the clerk (the clerk, not the manager or the owner!) because I had the gall to take it out the box and try and use it.

The entire time in the back of my mind I'm thinking I could have bought the damn thing on Amazon for cheaper and would not have to put up with this bullshit. As an American in Europe I'm sympathetic to some of these stores, but a lot of them are going out of business through their own incompetence.

Now I have a 50euro credit to a chain of stores that is bankrupt.
Not really, you've leaked so much of the key that doing exhaustive search of possible OCR errors becomes trivial.
Seems pretty lousy. No one wants to hold their arm up in the air tracing out full letters of each word like that. It will get tired.

They don't even let the demo guy keep his elbow on the table, something you should generally do for any gesture input mechanism you are writing that takes a while, even if it means they will just be using a short arc of space.

There are great uses for gesture tracking techniques. Heck, countless people love the various games out there that use motion control, and there's even more industrial use for 3D stuff and posing characters. This is not a great use.
Note that Lavabit's battle was fought in silence; the first we heard about it was the announcement that Lavabit would be shutting down.

Assuming similar warrants to other companies would also come with gag orders, there is no way to know whether Google has tried to fight. The only way we would know is if Larry Page announced they was closing up shop tomorrow.

Similar arguments apply to every tech company. I am certain that {Google,Yahoo,Microsoft,Facebook,Twitter} has received similar warrants, and has filed objections, and has been given the choice of compliance or corporate death.
Why did this post get bumped off of the front page? The article is not spam, it got upvoted by a decent margin within in an hour, and it had almost fifty comments in an hour.
Per the dictionary's definition:

noun: give-away

A thing that is given free, esp. for promotional purposes.
This is a step forward from the Portuguese gvt. Hope others follow suit.
I don't think it's strange that Google lets teams use their preferred code hosting/versioning system.
If the citizens of the US of A really believed in their right to Privacy and the rest of nice stuff provided by their Constitution, they should already be at war with their current government.

(Exaggerated obviously, you get the point)
On Ubuntu x64, it's sluggish (as it's loading) but doesn't crash. It took up a solid 1GB of memory though, according to Chrome.
He didn't hack anything, this was a simple act of civil disobedience. Nothing more.
We are charging $19 a server per month. First two servers are FREE.
Awesome read, but it's a little grating how many times the phrase "based on my training and experience" is used. I'm assuming it's somehow required to show that the guy isn't just spewing hearsay but is making educated deductions.
Well, there's bound to be issues in what's essentially the full 1.0 model of Tesla's car product (let's be honest, the Roadster was an extended beta).

I live in an area that manifests overall economics in the form of cars (there's a Maserati, Ferrari and Porsche dealer all within 10-15 minutes of my house . When the housing bubble was booming, ~$100,000 cars were everywhere. I remember seeing so many Porsche products on the road I thought that there must be a North American Porsche factory nearby -- I would literally see at least one at every stoplight

When the economy took a downturn, all those cars disappeared and were replaced by more "practical" cars. For the last 2 or 3 years I might see a Porsche once a week.

All of a sudden, in the past year things are starting to return to the old ways, except instead of Porsche products I see Teslas everywhere. I was expecting Teslas to be like the odd Lamborghini I see once a month or so. But no, I see at least one every day of the week, and I work at home. They seem to have hit the magic combination of great product and a growing economy - which is what's needed when you enter the market with luxury vehicles and work down.

I'm absolutely not concerned about the current future of Tesla, their cars are selling like hotcakes right now, and I bet the Model X will sell like wildfire with the stay at home coffee shop visiting yoga pants wearing stylish soccer mom demographic that seems to make up 90% of my neighborhood. I fully expect to see at least one Model X on every block in my neighborhood...after all, when times were booming, there was a Cayenne on every block.
Do you have a source regarding the day laborers who wait for hours seeking work for minimum wage? Because an article your sibling posted, which is critical of Amazon, says warehouse workers get $11 per hour (about 50% more than minimum wage). Outside of major cities, that seems like an OK wage for a fairly straightforward job. If it's not, why don't you raise the minimum wage?
This could work even if the split wasn't dollar for dollar. If the deep-pocket party had to give its opponent $1 for every $3 it spends, it would still prevent 10-to-1 spending on trials. I don't think there would be anything "unconstitutional" about this, as it's just a detail about how courts should function.
Apparently double standards are wrong when the government does it, but are OK when "we" do it.

What I'm not a fan of, however, is that Levison had claimed that he's be willing to comply with (indeed, has complied with) specific warrants. He left the impression that the FBI was asking him to ruin his security in general.

However the court filings show that the request for the SSL priv keys came only after Levison failed to comply with... a specific warrant relating to Snowden and Snowden alone. So if Levison wasn't lying, he was definitely leaving something major out of his story.
very ironically: service for monitoring shows 500 error
Lesson: Do not ever cooperate with the police.

Seriously? So if I get mugged in the street or if I have my home burgled I should do what?
Newsflash: http://en.wikipedia.org/wiki/PRISM_(surveillance_program)
Thanks for the heads-up. Like all good start-ups, everything was put together at speed: the final FR->EN conversion is a current WIP and will be getting some love shortly!
ShowHN: I built a piggybank to dripfeed a new MacBook
Right now I'm using http://ihackernews.com/ and setting a bookmark for it on my iDevices.

The bookmark icon is very clean and I get all of the functionality of HackerNews.

I've tried a bunch of free apps (not going to pay to read free HN) but was disappointed with all of them. Either they don't look very good or the ones that do, don't refresh to show previous posts so all you get are the first page of highest ranked or first pages of newest posts.
This is really good - +1 for the shell based installer and time sorting, and a level of polish that infrastructure tools often lack.

I'd add (in addition to what you have now) your own procfs tools to extend some of the knowledge the older command line tools.

- For a C app you care about argv[0] that top batch mode displays. But for some shell, python or perl or ruby you care about the actual script name. And for Java you care about the .jar (especially in enterprise envs). Even in your example, it's just some anonymous java process. There could be 12 'java's - I want to know whether it's our app or some Enterprise Crapware agent.

- Likewise load average - for a multicore system a load average of 10 could be quite underutilized - if I remember correctly, the run queue is actually (number of logical cores) long.

There's also some things you audience might not be familiar with, but would find valuable - tools like this can be a good way to show off some of this stuff.

- Do you have ethtool in there? Particularly patch disconnect events.

- You can also ask the switch what ports the host is connected to with a two liner LLDP/CDP thing.

These kinds of things are GOLD to people that know they exist, but as you know, Unix tools aren't very discoverable - your app could help with that.

- Not sure if this is relevant, but if you do monitor network stuff, try and steer users away from ifconfig, it's not maintained and will simply skip certain interfaces (eg, trading arbitrage desks used vlans on top of virtual IPs on top of bonds, these are completely invisible to ifconfig. There are problably other cases I haven't run into yet).

Are you guys on Twitter? I'm also working in similar space (used to work at Red Hat and IBM as a Linux specialist, now I write node apps all day). Not competing, but doing similar stuff.
Ah France, the land of contradictions, but mostly political posturing. My excellent, French, local, FNAC* store, competes spectacularly well with Amazon and often undercuts them on price - certainly for electronics and probably for books too. This law is probably going to hurt them as well and may ultimately be to Amazon's benefit.

* https://en.wikipedia.org/wiki/Fnac
25 Points on Work
probably the HN-Effect.
Mold, insects (silverfish, etc), mudslides, ground-penetrating radar, federal agents, and neo-nazis!

Thanks for the awesome analysis!
Yes, please accuse anyone who disagrees with you as being a paid shill. Saying that the IPCC has lowered estimates, which it has admitted in its report, is now climate change skepticism? Really?

http://www.mercurynews.com/business/ci_24229744/tesla-says-c...

"But lithium-ion batteries have raised concerns in other vehicles. Two years ago, battery fires broke out in three Chevrolet Volt plug-in hybrid cars after crash-testing."
> My reaction to that was "oh boo hoo".

Yeah, in the grand scheme of things it's easier to get a few people to type that in (it's parallelizable, after all) than to wait for another court order. Though I'd still have brought it to the judge's attention as this is like the dictionary definition of "contempt of court". If someone tried to be GPL-compliant in this fashion they'd be laughed off the mailing list.
I applied to one... their Jam Room looked amazing.
I highly doubt law enforcement would look kindly on that. Simply shuttering the business "fell just short of a criminal act".
We are moving back to square one.
cool landing page, but what do they need the leads/emails for?
I think it would be more appropriately phrased as "do not ever cooperate with the police if it is unsolicited interaction".
I would think the other Amazon markets are subsidising the books, rather than the shareholder. Does free market theory expect bookshop competition to be between bookshops, homogeneous, or heterogeneous, between bookshops and consumer electronics shops?
Avoid password prompt when mounting NFS shares with Vagrant
Right - they have shareholders.
Call your insurance company, if you're insured, then get on with your life.

The cops don't have a time machine and they don't give a shit about you getting mugged or your stuff getting stolen. If you work hard enough you might get a police report out of them for insurance purposes.

I don't have a good text source lying around but here's a law professor and a cop explaining the downside: https://www.youtube.com/watch?v=6wXkI4t7nuc
I see three download options, one for zip, one for tar.gz, and one for tar.bz. Mac installers are usually bundled in .dmg archives, or .pkg.
Perhaps even more eyeballs than he intended will read this statement. Doesn't seem particularly ironic to me.
Just to bring things back to the article in question ... this law being passed has nothing to do with fair labour pay or practice.

It just makes sure that customers aren't allowed to get 5 percent discounts and free shipping.
He said several times that he would unlock the encryption. He also said that he didn't feel right giving the password to anyone.
Launching your project to the world? Try these sites to get the word out
I know these type of lists exist elsewhere. But I wanted to list some of the sites that I know where you can quite easily submit your project to get the word out initially.
The sample isn't 12 crashes. It is the 12 cars that crashed plus all the other cars that didn't.
http://news.ycombinator.com - (duh), post with Show HN, easy submission, will get listed on http://showinghn.com/ and http://hnshowcase.com as well.

http://betali.st - quite well known, moderated, gets a decent amount of traffic if you get featured, not too many form fields to fill out.

http://www.kickoffboost.com - moderated, and relatively new, easy submission

http://www.reddit.com/r/sideproject - moderated, easy submission

https://www.sideprojectors.com - relatively new, easy submission

http://thestartuppitch.com - moderated, has quite a few more form fields to fill out than others

http://www.erlibird.com/startups - paid $149, last time checked out

http://forrst.com - Easy submission, used to be a great community for feedback - not sure now

http://www.bootstrappist.com - a mailing list of bootstrapped projects - has quite a few subscribers I think.

http://angel.co - Angelist, of course - new startups gets tweeted via various accounts

http://crunchbase.com - Crunchbase - similar to Angelist
Sure, hence the qualifier "most of the time".

A good example of where this is important is in a tracing JIT. Do you want to compile after 1000 iterations or 10,000 iterations? Faster JIT compilation means it can kick in much earlier.
You're right, it seems they pay $11. I had gotten that info about the day-contracting centers from other places that they staff, at some point. And I personally agree with raising the minimum wage, although not any higher than $11, probably, so that's immaterial.

That's still hard to make a living on at 40 hours and no benefits, though. And it is unfair to competitors who pay a more livable wage without forcing their employees to get on medicaid.
There is also technology to use with gamepad http://8pen.com/joysticks#video
Infosec in general is a ghetto of navel-gazers.
Or in game consoles http://8pen.com/joysticks#video
To me, that sounds like a good time to buy.
Ask HN: HN hiring threads became too crowded, dumb job board. Any alternatives?
HN hiring threads are not so personal anymore. Full of resume black holes and etc...

Getting noticed is like a gambling, lottery... due to massive applications I guess.

It just got like a yet another dumb job board (Craigslist, Dice, Monster, lately Stackoverflow).

So are there any alternatives or maybe ways to fix this on HN?

Thanks.
The letter of complaint is a lot easier to digest than going through the site

http://s3.amazonaws.com/InnocentBeyondAReasonableDoubt/PDF/C...
I love cool tech as much as the next guy but that looks stupid. It takes way too long to write anything and it looks like a lot of work.
It's not just a meeting - it's advertising on national TV.

A small % could make sense for a start up selling consumer products, but probably not much else.
Could the "who is hiring" posters acknowledge emails?
Posting on HN probably results in hundreds of emails, and I think we all understand that it is not possible to send a detailed customized reply to each one of them.

But, email can so easily fail silently (anti-spam, misconfigured server on either end etc...), it'd be great if you could let us know you received our application. Just a quick reply saying "Got your application" would be sufficient.

Thanks!
TLDR: Some guy discovers bartering.
Good input, yeah after seeing the demo I've also noticed that the anomaly detection monitoring cannot be solved by simply pointing to a process.

I'd suggest aggregating the data of vmstat,ps,lsof,nc etc. into a simplified and abstract summary by incorparating a structure based AI model, like HTM.

You could build rules and action lists and anomaly type lists, then let the AI categorize anomalies by pattern and structure detection. Heck you could go much further, ie. building an NLP query interface.. Don't get me wrong, I don't want to smoke your brain, it's just what I would do. Keep working on it!
The fact that the NSA collected cell-site data is big. But they admitted it.
Putting personal files on an employer's computer is a bad idea. Why do such a thing?
Feedback and suggestions would be massively appreciated by the way!
Personally I started to use valentina studio, it has diagrams which I love. But mysql workbench is a lot better.
Probably obvious, but there's another ruby project named Warden as well (handles user authentication): https://github.com/hassox/warden

This project looks pretty cool, though.
The 10 Most Popular DB Engines (SQL and NoSQL)
Your humble opinions appear to be (a) anti L-Ion battery and (b) climate change skepticism. Is this a fair summary?
There's an interesting post on the Haskell Cafe list from a while ago wherein Jason Dagit wonders if Git and Darcs aren't dual to one another. http://www.haskell.org/pipermail/haskell-cafe/2010-October/0...
Well, the Chevy Volts' lithium ion batteries also have fire issues too. Not to mention overheated laptops with li-ion batteries that have caught on fire.
I believe the best application for this will be virtual reality headsets - such as Oculus Rift, where you can have virtual screens but having a keyboard would not be practical.