skysight-inc/HackerNews huggingface dataset:
I got the impression that I can achieve similar (or better) results with logstash and its interval exec input [1] as well as the usual logs, events and perf counters, etc. And it has nice Kibana interface [2] on top of elasticsearch.

[1] http://logstash.net/docs/1.2.1/inputs/exec

[2] http://www.elasticsearch.org/overview/kibana/
Lavabit could install the device, but it was obviously the FBI owned and controlled device which was to have access to everything traversing the network. And he was to help them to reach that goal.
I am sure it is easier said than done, but it seems like the batteries simply need to be better protected. Something like a carbon fiber or titanium under shield.
"Governments" (and by that we mean politicians) don't have a vision past the next election and what it would take to get elected. Public Choice Theory 101.
Getting more out of psql
We're looking into a whole bunch of ways to stop charging fees as soon as we can - it was kind of the lazy way out for the short term. We're looking into referral fees, as you suggested, as well as earning interest. We also had an idea that, since we know what a user is saving for, and roughly how long it'll take for them to save for it, we could put the item up to tender and hunt down cheaper deals so the user can save money. Just an idea, but there are so many interesting things we can try when we have that kind of data.

Re: pause - I totally didn't consider that, and smurfy brought it up too, so I'm probably going to build out a 'protect me from myself' feature to do just that
And you're omitting "In fact the FBI agents even admitted their intention to collect passwords in transit so they could access emails protected by Lavabit’s encrypted storage feature."

Regardless of the legal rationale, the FBI was demanding measures that would have given them access to everything, and they intended to use it.

So, given that the whole rationale for Lavabit's service was protection against this kind of wholesale intrusion, the answer to your question is "no".
Since the days of the EspressoPC I have always been fascinated by small scale computers. With so many choices in small linux systems (Gumstix anyone?) I am not enchanted with seeing the Arduino name slapped on a Linux board. I was appalled at how digitalWrite was actually implemented, so I cannot imagine what kind of layers they put between the programmer and the metal.
Well, most of the current system is zero to one, so at least this is more "fair" than that. In general, however, changes to the foundations of society should only be as radical as they have to be. So if we start out at $1 for $3, and that seems to work well, the ratio can be changed later as we learn more about how the new system works. If a reform is so big that it entails many "unintended" consequences (and all reforms entail some of these), the risk is great that the reform will be reversed completely.
The issue with drugs is that it takes a huge body of evidence and experiments to be able to assert, with a margin of error, that a drug is safe or that it does what we think it does.
For something like a 'truth serum' of any kind to be deemed both safe and reliable, you would have to study it pretty hard and pretty long and have a very high degree of confidence that when given to a particular person, you are going to get something provably reliable from them.

On top of that, imagine that the drug (a barbiturate after all) has a chance to kills one in a million. Would it even be ethical to use it?
> Cuban said the clause was removed retroactively, meaning every contestant who's appeared on the show since Season One will be relieved of the commitment.

That's probably a huge sigh of relief for all past entrepreneurs.
Seems like too little too late. The tshirt thing might have been in good faith, but wow was it a slap in the face. I wouldn't be surprised if exploits were sold for less than what they could fetch from Yahoo as a sort of candid rebellion. I'd love to see someone find an exploit, and then send Yahoo a shirt.
Readmill's e-reader app is now available on Android
To be honest, how is it any different from downloading a random executable and running it?

In the end you need to basically blindly trust people if you're going to use their software (and the software needs root privileges)

The only problem i have with this is that you can get MITM'd. curl doesn't validate SSL certificates
We're aggressively pursuing FCA regulation in the UK since we're pretty compliant with their policies already. Suffice it to say, we're doing everything we can, we really don't want to screw this up.
No; Lavabit had the means to provide metadata on individual users, had done so in the past, and ultimately offered the same wrt the target of the current orders (unnamed in the documents, but we all know who it is).
The device was to be controlled by FBI to select what to collect, practically at least having access to all the traffic of Lavabit.
You don't get it. Emails were encrypted at rest with the user's password. This was publicly disclosed by lavabit on their site. With the SSL key material the state could decrypt the user's password from network traffic. The encrypted emails and SSL key material are obtained through the courts, SSL encrypted passwords via surveillance, bob's your uncle they can read a user's email. Lavabit wouldn't need to "build" anything and couldn't argue they didn't have the technical capability to turn over SSL keys and encrypted email data. This is why he shut down, so that user's wouldn't continue to submit their passwords over the wire using a compromised SSL key.
I was curious about this.

The grey on white has a ratio[1] of 8.6:1 which should be perfectly fine.

The footer, light blue on dark blue, has a ratio of 3.8:1 which fails WCAG.

I can read both fairly easily. Contrast ratio maybe not a good measure?

[1]: http://webaim.org/resources/contrastchecker/
Yep sorry... falls under "english fail", which we're working on, promise. This first release is kind of marketing-y in nature - but we are putting together some articles on the architecture, technical decisions, and some of the technical features (like crazy-amazing diffs of structured documents) that will hopefully be more relevant to your interests.
David is well known in the Python circles. This should be interesting!
Sounds like they "got the picture" and changed their vulnerability reward system overnight to closely match their competitors. I can't think of a much better reaction than this.
Compare with http://osmek.com/ which was also recently submitted to Hacker News:

https://news.ycombinator.com/item?id=6481766
I find it incredibly ironic that in the process of investigating against Snowden's leaks that the NSA is spying on netizens, we see such court orders where feds ask for broad unregulated surveillance where a single targeted tap would have sufficed. The worse is that the judge happily enables this.
Trewor
The site looks nice, however I'm slightly puzzled. What do I gain from Dripfeed over the current standing order that transfers a fixed amount per month from my current account to my savings account?
People who imploded over this should be embarrassed. Here's a guy who was doing more than the company policy just to be nice, and everyone turns into complainypants over their perceived entitlement. Good on the company for course-correcting and instituting a proper reward program, but the way this was handled by the technical crowd is embarrassing.
I not only appreciate what they are trying to do moving forward, but also the entirely good natured, reasonable tone of the whole message. He explains without getting defensive and, in my opinion, helps Yahoo come out of this with a potential PR win. Well done.
That's really entertaining and I was indeed exaggerating about things you find on jwz's blog - sometimes he does link to interesting things but often times it is what it is ;)
It's very nice that he bought t-shirts at his own personal expense. He comes over as such a conscientious person that I feel bad "t-shirt-gate" happened.
Well, cloud flare can certainly forward (or not forward, in the case of bad) ssh traffic. But they would need to dedicate an IP to your account, or provide you with a port number to use.
I never said it was a give away (Noun). I said I'm giving it away (Verb).

I love it how you hijack the context to fit your needs.
(Note, I technically work for Yahoo - but this is all personal opinion)

Great on Yahoo for putting a reward program in place, but when did everyone become so entitled to getting something for reporting a bug/security concern.

If you stumble on to an issue, and you are a good person, submit the report. If you are looking to make a living off of finding bugs, go directly to the companies that actually have a reward program in place. Don't be mad when you get a thank you gift that wasn't what you expected. Don't get mad at your security report not meeting guidelines.
Following the link back to the photo page, there are some details there. The Tesla was behind the Touareg when a Prius ran into the back of it.

https://secure.flickr.com/photos/16822508@N05/3995784846/
There's some here https://prismic.io/tour/writing-room

I also find the recent trend of introducing things via videos, often with no text alternative, massively irritating.

Particularly when it's something developer-centric and code-related. Do you really think I'm illiterate? That I am browsing with sound on? That I want to sit through minutes of marketing guff waiting for you to get to the point? You can't skim-read a video.
What else do you want them to do? They are even making the new policy retroactive back to July.
The command you will be executing is to download and install the SeaLion agent.

SeaLion requires you to use sudo to install it as a service so that it will automatically restart whenever system reboots. All the commands executed by the SeaLion agent are run in the context of Sealion user which is a normal system user.
Bitbucket: $10/month for 10 users and Unlimited private repositories.

Github: $200/month for Unlimited users and 125 private repositories.

If you're a team of 10 or less, have a few dozen clients and dozens more supporting libraries in a small company Bitbucket blows Github out of the water.

For the same $200/month Bitbucket also offers unlimited users (again, with unlimited private repositories).

I wouldn't call Github's pricing unreasonable. But I have learned to appreciate Bitbucket's service (they're really on top of things on their Twitter feed) and their pricing is lunch money for a day (as opposed to skipping lunches for a month).

Highly recommended.
There are many optimizations in GCC and LLVM. If you turn them all off you will compile fast and execute slow, and if you turn them all on you will compile slow and execute fast. You can do this on a per function / trace / translation unit / whatever basis.

Production JIT compilers are the same way. For the hottest code paths, all the optimizations get turned on. The coldest ones are interpreted. The first level of jitted compilation has very few optimizations enabled.

The main thing that doesn't cooperate with JIT compilation yet is whole program analysis.
It makes me wonder, does anyone know if the Model T customers where charged a Buggy Whip welfare fund surcharge?

Just curious.
Right, but here, each half of the graph is a different code. If you screw up a "white dot", you just get a "black dot".
A t-shirt is a great gesture from a dude, but a terrible one from Yahoo!

It's too bad that, in his role, he was or appeared to be acting on behalf of yahoo. The impermeability of corporate behavior meant nobody on the outside really knew the difference before now.
Can I ask how this is different from ServerDensity (which we use)?
>>>> This is unprecedented.

And quite frightening. It makes you think how many more companies are out there where the owners just decided to give in and allow them access and have remained quiet.
Relink: be the first one to know when your links break
A slap in the face? I know bug bounty programs are a very good idea, no arguments. If a company doesn't have a formally posted bug bounty, though, I wouldn't be looking for vulnerabilities for money. Approaching a company with no formal structure in place to assess or pay out bounties, and saying 'you owe me a bunch of money' is never going to be a winning proposition.

I think what this guy was doing was awesome; he clearly understands the value of the work researchers were doing, and he did what was in his power to thank them. Compared to getting no reaction, or a terse email, this is probably in the top 20% of responses to random vulnerability disclosures.
Give teachers access to YouTube in the classroom
It's funny how it's styled as an "anti-Amazon" bill (I don't know if it's styled like that in France, or if it's BBC editorializing, but I think it's pretty safe to assume).

Usually when laws "stick it to the corporations", there's at least the expectation that the cost will come out of the corporation's profits. Then if the corporation raises prices, they can be derided for that. But this is actually not possible here - this mandates a direct, customer-facing price increase. I wonder what will happen to support for the law when consumers realise this.
Agreed. Though considering there are gag orders in play here, I'm willing to give people the benefit of the doubt.
Agreed, this is an excellent apology. No "sorry if you were upset" conditional apologies here, just a straight up "here is where we dropped the ball, and here is what we have fixed so it doesn't happen again; we're sorry".

Brilliantly handled.
It isn't using sha256, it's using sha256CRYPT.

It's not the same thing, it's designed to be used for password hashing
Twitter founder reveals secret formula for getting rich online
Maybe increasingly unreliable is the wrong term. What about sufficiently unreliable?
Testing resources is one.
1Password 4 for Mac is here
4 people can get this data entry done in an hour. One person reads out loud while the other person types and confirms each character. The second team does exactly the same work enabling a diff on the completed work to quickly find errors once everything is done. One character per second isn't unreasonable, so that's less than an hour. Or the same team does it twice in 2 hours.
This is self-entitled bullshit. If you (not you, but people in general) want to make a living off of reporting bugs, then get a job in the field, or know which companies are explicitly paying bounties. How is that expectation of a reward anything more than blackmail?
The site looks great, and I think a lot of people would want something like this. You've mentioned in other comments that you're hoping to get some kind of interest going. That, with what you've already got, is enough for me to signup.
You make the decision to pass on something before it's even available and all the information on it is released yet. Interesting...
The only reason they got the SSL key search warrant was his aggressive noncompliance with the pen register/pen trap. I didn't realize pen register applied to non-CALEA entities (this is a PATRIOT 216 thing); if it didn't, there would have been no justification for 1) forcing his cooperation and 2) getting SSL keys from him.

With Patriot 216 pen trap, they can compel full cooperation to the same standard as a CALEA covered entity, which they knew he couldn't provide as well as their own pen trap device (at least without work; they found $2k unreasonable to implement it!), so they can get a warrant for SSL keys for their pen trap. With that they can do whatever.

There may be a solution in SSL keys which can't be exported (HSMs) into the pen trap; you'd potentially be able to require a secret compatriot offshore (or via a cutout) to assist in adding a new load balancer or front end, so you'd be technically unable to comply. They could require you generate and use new keys, but users could detect that, and you could warn of this when you first set up the system.
Would it help if they allowed users to specify some port other than the default, perhaps only as a fallback? I am presuming that it would be easier for them to prioritize traffic to a given range of ports -- in this instance the NON standard ones -- but perhaps that's wrong.

If so, I wonder if they could counter this now by 1) implementing that 2) opening and publishing a not-standard port for login solely for that purpose 3) maybe moving that change-the-default port around if the DDOS shifts on to it.

Even if not-perfect they'd force the attack to spread resources.
This particular policy exists (or existed) as it is (was) precisely because of the context of FAA's approach to airline travel as a whole.

Sure, it's a bad policy. But it's a bad policy that came out of an overall approach that has proven to be superb. To think that this one failure is an indication of anything is absurd. You can't expect perfection.
Reason given for the use of books in the article isn't quite right. Export is not circumvented because non-electronic copies are allowed, but quite simply the export of books is protected by the First Amendment: http://en.wikipedia.org/wiki/Pretty_Good_Privacy#Criminal_in...

Didn't someone get the algorithm tattooed on their body? If you Google PGP tattoo then a few examples come back, but I seem to remember someone doing it first specifically to test the US munitions export law, but who was it?
when did everyone become so entitled to getting something for reporting a bug/security concern

Sometime around the point where:

- Yahoo!'s competition started offering bounties, and

- "Entitlement" became a rhetorical tool to dismiss discussion of any business practice that might cost money
The big idea behind Snapchat and the second big idea behind Snapchat Stories
arson?
I honestly don't see why we should care what nutjobs think.

For the average person, stuff like this does very little to undermine anything.
Children switch from mobile phones to tablets
The apology is a good one, and I feel bad for this person. But I don't think that retroactively changes how bad this looked originally.
Thanks for the feedback. This is just the start, we have a lot to add. More on our roadmap here: http://blog.sealion.com/post/62987598857/why-did-we-create-s...

And yes, our target audience is users having multiple servers. You can use nagios and some other tools for logging data from few servers. Handling and debugging of logs spread across several servers is a pain in the neck.
What if we embraced ASL? (random thought)
> I think one notable thing to observe with any of these frameworks is that backends as REST APIs with a javascript heavy front end are becoming more common.

Backends as HTTP APIs with a javascript heavy front end are becoming very common; REST, not as much, though it seems to be popular now to call any non-SOAP HTTP API a "REST API".
Cash flow can be a problem in small to mid-size companies.
Note: I am not justifying this practice.

Looking at the install script shows that it creates a new user 'sealion' on your behalf, for ease of install?
As a francophile european not living in France, I'm absolutely thrilled that France again and again volunteers to make their country both quaint and poor (thus cheap for tourists).

As a human, I can not get behind a policy that makes food and books more expensive and harder (or at least less easy) to get at.
I was careful to say, "assuming they're a US company," because I was trying to point out that, yes, employment law exists for a reason, but Amazon's competitors operate under the same employment laws as Amazon. In fact, I said this explicitly.

Edit: Maybe you're trying to say that Amazon's competitors pay their employees more than Amazon because they have bigger hearts and are willing to crash their businesses before paying (legal, but unfair) low wages. That's a pretty big claim that requires some evidence. I think it's more likely that they are losing for other reasons.
If you need them, by all means, talk to them. But if they need you, get a lawyer first.
I think the subreddit is open again, but I do plan to put it up on my own site once I think I've gotten everything.
well Isreal occupied most parts of Palestine in 1948. The Israeli state has be founded with the help from the UK government who occupied Palestine from the Ottomans in 1920 and gave a bulfour declaration to establish a Jewish state in Palestine. they started bringing jews from around the world and arm them to establish a country. the jews started to kill Arabs and committed mascaras and destroyed thousands of Palestinian villages which forced 100s of thousands to flee. there are around 9 million Palestinian refuges in Jordan, Syria and Lebanon. 1967 Israel occupied the rest of Palestine west bank and Gaza.
the founders of the company are Palestinians not Jewish Israeli. even though they live in Palestine 1948 or what is called "Israel"
> What's interesting is that I don't see any charges listed in the indictment for these hitman claims!

Well, so much for that: https://dl.dropboxusercontent.com/u/182368464/dpr-maryland-i...
The sudden music/talking that started was annoying and caused me to close the tab immediately.
Very good question: Banks generally don't award much interest for small, short savings, they're really geared towards saving for cars and houses, not small goals.

We, on the other hand, are designed to help you save for the small things in a much nicer way, and we're working on ways to make your money work in ways that banks really just don't care about.

Case in point - in the next few weeks, we're rolling out a feature that finds cheaper offers for the item you're already saving for (since we know what you're saving for and roughly how long it'll take to save for it), we can leverage the fact that you're saving for something to encourage a supplier to offer the product cheaper in return for the money right now. That's just one of the ideas we're working on right now.
azAZ09+=/?
yes you can order from the site http://cubox-i.com/
This has nothing to do with Yahoo - this has to do with every time there is someone complaining about them not receiving the bounty they wanted - and in this case about getting a t-shirt as a thank you. I am happy Yahoo is putting a reward program in to place - but the general commentary from the community annoys me.
I've had two cars catch fire: 1974 Land Rover Series III, 2006 Fiat Doblo Active. The first was an electrical fire and the second was a diesel leak (diesel burns like fuck when it gets hot).

This isn't unique to Tesla! I'd rather drive a Tesla but they're too small for me and too expensive.
I don't think it is entitlement. We live in a value for value world. Bringing to light a problem that can cost the company millions of dollars is worth something. No one was bitching (at least not loudly) about Yahoo not having a bounty program, the reaction was that if they only want to shell out $15 then they're cheap (not recognizing value).
It looked bad at first glance, but keep in mind they had no bug bounty program. Information about vulnerability reporting never said there would be a reward. Security bounties are a fairly recent trend, and I'd wager 99% of the web has no such policy in place. Maybe we expect the bigger companies to have one, but there's no guarantee. In the end, when no bounty is promised up-front, you can either take the low road and sell it on a forum, or take the high road and enjoy your T-shirt. Whether or not you're a good or bad citizen is up to you.
8pen is neat, but i'm still not entirely convinced it can be that fast an input method. I've started using it semi-recently (last month or so), as it seemed better than using a touchscreen keyboard (swype is an okay solution, but I prefer to avoid imprecise input when possible).

I'm getting faster, but it seems that I will need to dedicate a fair bit more time to it before it will be that practical as an input method.

I really wish companies would just continue making nice phones with hard keyboards, would make my life easier. :(
The police aren't attorneys that you are paying for.

THAT is why you don't take legal advice from them.