skysight-inc/HackerNews huggingface dataset:
The attack surface isn't increased. If you can exploit the vulnerability using Shumway, you could also exploit the vulnerability using vanilla JS — because Shumway is just Javascript. Shumway doesn't allow new exploits that are impossible without Shumway.

Shumway decreases the attack surface of Firefox for general-purpose browsing: most people would install Flash otherwise, and this way that (infamously broad) attack vector is removed.
What if the messages were only ever internal to the system?

Or even constructed such that the lawyer was central to all communication.

So client A contacts the lawyer to advise client B of X. The lawyer dutifully complies (perhaps in an automated fashion).

Whenever Client A wishes to contact another party who is not a client of the lawyer, the lawyer is given a client lead from Client A. The lawyer emails (the only time when mail goes to 3rd parties) the party, inviting him to go on his retainer so he can advise him on Client A.

While such a system would have to be automated, the system could delete any evidence of this automation, or at least plausibly deny specific instances of the automation.

Thus, all involved could argue the lawyer was manually involved every step of the way in the process, which only ever occurred on the lawyer's system, and the client systems of his clients.
This actually looks like a nice potential execution backend for docker. Currently docker shells out to lxc-start with a generated configuration - I would rather bind to a small low-level library which just handles the namespacing and cgroup work. It looks like lmctfy could be that library.
Hi Chris, I'm coming from Thailand, if your place is within 30 min walking distance to the venue, i'd be interested in taking you up on your offer! I'll be in town friday night till sunday night. please let me know:

jasons aat novaleaf doot coom
I was curious too. To get a back of the envelope calculation on how fast people talk I watched a talk show and counted how many words they said in 1 minute. It was 103, so it seems possible.
Good luck avoiding complexity when you hit P2P security, transactions, etc.
Thanks!

We only support javascript at the moment. Most of the data gets updated with the user on your site, so this was the logical first client since any backend would work with it.

We plan to roll out support for Ruby, Python, PHP, and likely some plugins/addons (think wordpress, magento, shopify, and etsy) shortly. We will likely preference the plugins/addons at first.
AMD also supplies GPUs to all major console manufacturers.
Actually, that would have been way better. If they had done the study you suggest, and the result had still been significant, then he would have been entirely justified in reporting what he did.

The issue is that dividing the participants after the fact and then looking for correlation in the existing data reduces the significance of the statistic considerably (we have other statistics for that). The p-value is not representative when used that way.

But if you do another study focused on that group in particular and still get a significant result, you're fine! The problem isn't that they located a group on which the drug worked in a dishonest way, or some such - the problem is that they were dishonest to claim they had significant evidence that the drug worked on that group. If they'd done an additional study on that group in particular, they would have their evidence (or, of course, a null result).
As a trained (and hopefully ethical) statistician, I agree with the interpretation that Dr. Harkonen did mis-represent the results of the trial. This article does a pretty good job describing the controversy to a layperson audience, but I do not feel the result is all that controversial.

It is well-known to statistically-minded people that p-values are computations that rely on particular assumptions being made. One of those assumptions is that only a single, pre-specified hypothesis is being tested. By making additional comparisons, the p-value that was reported by Dr. Harkonen mis-represented the true significance of the trial. Perhaps factually the p-value was 0.004, but publicizing the p-value as if it were obtained by a fair trial, as opposed to finding it in a hunt for (quasi-)statistical significance, was a manipulation of the facts to support one's personal interests. That's not science; it's bias, and self-serving bias at that.
> You can't. That's MS way of lock-in and ensuring that porting of games and other applications is much harder.

It is a way of them not having to write, support, and optimize two entire sets of drivers that accomplish the same thing.

I was actually working in Windows Phone when there were talks about supporting OpenGL (I wasn't involved in any, I just watched from the sidelines). The decision ultimately came down to already having people who could write really fast and stable DirectX drivers. The expertise was there, so it was used.
A reasonable defence would be not to say anything. There is no evidence that this person who was allegedly killed ever existed in the first place.

The Canadian Investigators say that nobody by that name ever existed and that there were no homicides or deaths which they can attach to this alleged hit.

You can't commit an impossible crime. I can't murder your sister if you don't have a sister.

It's highly likely that both the hitman and the hit were the same FBI informant entrapping DPR.
It's hard to know for certain; some people use majority as >50.1%, some as "plurality".
Find Out How Many People Share Your Name
Valve: The Linux Steam Engine That Could?
Hrm.

Some of my edits are pretty rough. Most aim to please one key customer: me. And I do virtually no compatibility testing for devices, browsers, or even display settings.

Still ... could be useful. If only because exporting and uploading the stylesheets would give me a backup.

What would you pay for this?
The emergence of API middleware
No, it's two factor.

If you look at the crypto page the scheme he proposes uses an 'identity password' in combination with a strong KDF (scrypt). The resulting hash is XOR'd against the masked master device key.
For me, it said there were less than one with my same name. However, I know of at least two in the US, and two around Vancouver alone.
Ask HN: Affiliate Marketing for eBook?
I've written an ebook about bodybuilding, and I was wondering if any of you have had success with affiliate marketing as a method of publicizing it. If you have any stories or know of anyone who has done this, please let me know!
Just donated some more at https://rally.org/lavabit.

Godspeed Ladar. You're an inspiration to us all.
Digital Ocean and Rackspace provider support is coming soon. See https://github.com/opdemand/deis/issues/121 and https://github.com/opdemand/deis/issues/73
I commend him him for shutting down Lavabit instead of giving in. It was one of those epic moments where one chooses to take a principled stance on something no matter what the cost.

(Reminds me of a Howard Roark moment to be honest)
I've been archiving web pages related to the owner: http://www.reddit.com/r/SilkRoad/comments/1nmiyb/compiling_a...
There is no way this is not a "general warrant". If it's not overturned in appeal, the US is no longer an acceptable place to host anything or conduct any business operations for anyone (except the USG or regulated entities).

I'm hopeful it will be overturned at the 4th Circuit, rather than waiting for SCOTUS. There are so many ways to challenge it. The only way we'd be fucked would be if Ladar didn't have the money to appeal, but it's a super tempting case for anyone at EFF/ACLU/etc. Funding the appeal to the max would also be in the self interest of any cloud business in the USA.
In which case, maybe it's classified as a derivative work of the original OS project? This is how WordPress tries to classify third-party themes and plugins, meaning they should "thus inherit the GPL license". See: http://www.wordpress.org/about/license/
Interesting. Why a cardboard box? I picture a briefcase handcuffed to some sort of emissary.
After the company research there should be another independent research (by WHO maybe).
Seems worth a try for sure.
Also this can be very handy as a C library, so you can embed it:

https://github.com/google/lmctfy/blob/master/include/lmctfy....

People naturally compare this to Docker but given that Google is a heavy-weight in that domain, and things like App Engine are here for ages.. this probably will be very a good container library and tool with time..
There is plenty of precedent for laws which pierce the corporate veil in case of fraud or abuse. Such laws have yet to dissuade the formation of new corporations, and there is no reason to suspect that allowing it in the case of patent trolls would result in anything other than dissuading patent trolling.
This is a great idea. Hope you get to do it soon :)
Physics computing innovation benefits multitude
I am working on data sync service, mainly sync data between cloud and mobile. 30% of apps installed on my Android do data sync. This thing is killing battery.
Limited liability encourages risk taking which, in aggregate, appears to lead to greater overall growth.
It might be true that as an ad network if you allow Flash files, but don't allow JS files, your life might become harder. (If you do allow JS files, your life is no different — you were already exposed to JS vulnerabilities).

As a user, though, your browser is significantly more secure running Shumway than running Flash. It literally removes an entire attack vector without adding a new one. If there's an exploitable vulnerability in Firefox's JS engine, you're vulnerable to it regardless of whether you run Shumway or not — but if there's an exploitable vulnerability in Flash, you aren't vulnerable if you're running Shumway instead.
Lavabit, Snowden’s E-Mail Service, in a Legal Tug of War
Tricks and treats from Microgaming
Straight Talk supports LTE (as of a few days ago.) I got a 20 mbps speedtest with an S3, though it's generally 8.

edit: this is AT&T, and requires a new SIM ($7) for existing customers.
I got ~40 hours yesterday on my HTC one X by doing nothing special. My phone still had 6% left when I plugged in.

The 2 days prior to that have been busy days at work for me and I have used the phone for ~3 hours (1 hour phone calls, 2 hours browsing / reading stuff).

I did not disable any radios. I was on lte the entire time, bluetooth was enabled, my email and twitter were syncing as well.

Perhaps Android 4.3 (and hence CM10.2) have improvements for battery life after all ?
very much thanks for the link, i will make use of it!
October 6th is deadline for SF startups
Google Web Designer Beta - The Latest Development Tool For HTML5 And CSS3
i think the person you were replying to was implying that the same data be used, while what you are arguing is that there should be new observations made (and i agree with you, if the new work is independent; i just wanted to explain why i think the original comment was arguing for greater transparency).
Safari has how much of the browser market share?

Nobody gives two glances about Safari, mate.
Unless of course you point model rocket engine exhaust at it: https://en.wikipedia.org/wiki/Dateline_NBC#General_Motors_vs...

Let us be cautious about media gotchas.
Composer Remote Code Execution Vulnerability via MITM
You are thinking about the separation between source files and the running system, but there is no such thing as a separate source file in Smalltalk. You can generate them if you wish, but it is not necessary. The code, in fact, is just a representation of the real system, which is contained in an image file.

For example, when you want to modify an object in Smalltalk, the system generates a representation of it - with methods and instance variables - and you modify the representation with the system text editor. Then you ask to system to apply the changes to the object. When the changes are applied, that is it, no source files are needed anymore. The system continues to live like this. When your "programming session" is over, you save the whole image, and starts it again on the next day. No compilation of whole system is ever performed. It is said that some objects in a standard Smalltalk image have been alive for several years... they are only saved and used, never recompiled or modified.
Welcome to America. I wish there were a better way this could be handled.
If those tech companies decided to release all of their information nothing would stop them (not even the U.S. government).

If the U.S. decided to take down every one of those companies or indite their CEOs/Boards the would have an uproar from the populous that would likely be comparable to the 60's (or worse).

Essentially, the populous would be more loyal to a company who's honest than a government which is dishonest.
Alternate title: "Man commits fraud to profit from terminally ill patients, gets slap on wrist"?
Yeah, but he didn't clarify what he actually meant by invoking the MLK quote. As I said, it was a disposable invocation of a historical quote.

I've read every comment in this thread and I don't see anybody making even a semi-cogent argument about how due process was violated in this case. Remember, the US Constitution does not guarantee your privacy. It guarantees that you won't be deprived of it without due process of law. That process appears to have been followed here, by the government at least. People like the Lavabit founder who refuse to comply with the results of due process are as guilty of undermining our system of laws as any corrupt law enforcement agency.
Is it just me, or the the word 'alleged' really out of place in their headline? It should be 'arrests alleged owner'. I have yet to hear anyone deny that Silk Road was an online drug market.
The stock went for 40 to 2 and had nothing to do with the NSA.
Show HN: Prediction Central - The Prediction Database
That's roughly how one works in Common Lisp as well (though most implementations don't ship with a graphical environment, so ssh is typical instead of VNC).

It's really much more pleasant than shipping text files and interpreters all over the place and sorting through logfiles and tracebacks when things go south.
Isn't that the point of 1984?

The protagonist is unable to make a physical record, and so must trust his brain retain any proof of the government's wrongdoing.

However, the brain is a poor vessel for this - it can be manipulated and tortured to discount information. And so, Winston ends up loving Big Brother.

Paper and bits are what we rely upon; there is a reason eye-witness reports are trusted so little in comparison to physical evidence.
ah, that explains it. It looks great now. Keep up the good work!
A front facing camera already flips the image so that the user sees what they usually see when they look in a mirror. So one mirror would end up being right. Except when you open the camera app, the mobile site is no longer displaying the QR code.
Yep, these stats don't matter at all until he gives screen on time. Current (last 12 months) phones tend to manage about 6 hours of screen-on time, and the LG G2 in particular appears to be getting some fantastic numbers.
I created this website and I would love to get some feedback!
Yep, look at those blue tick marks at the bottom of the graph. That shows the periods of time that the phone was active in some way (screen on, wifi on, network use, etc). From the graph, it seems like that was pretty much never.

By contrast, here's what my phones same battery readout looks like:

[0] http://i.imgur.com/4IC70y4.png

[1] http://i.imgur.com/kW9t1du.png

EDIT: Something to note about my battery life: I've used my phone a lot today, as can be seen from the photos, and I'm only down to %84 battery since charging it last night. The reason for that is because I bought an after market battery for my phone that increases it's capacity nearly x3. I find the added size not just manageable, but preferable. The extra weight and size in my hand makes the phone more hefty, which is exactly what I like.
> I wish we could've united on a single format, but I guess the stronger will win and a little competition is always good for the end-users.

the (open source) tooling is what makes or breaks adoption of languages like these, and neither of them has much to offer in that regard. apiblueprint has code for node and .net, raml doesn't even list libraries that can parse it. contrast that with json schema: there's an rfc standard and libs that handle validation in almost every widely-used general-purpose language...

... and that's just the bare minimum of tooling i would hope for from a popular standard. i'd be much more psyched to find an equivalent library of <http://www.rexx.com/~dkuhlman/generateDS.html> for jsonschema than i am to see yet another domain specific language with bad/no tooling. a standard without an implementation is nothing more than a suggestion -- and one that is unlikely to be strictly adhered to.
I use Pocket too and I find it amusing that almost every time someone refers to it, they say "Pocket (previously Read It Later)" or some variant thereof.

Does rebranding ever go fully successfully? Maybe it's just too early for Pocket. Also, the fact that they market themselves as "Pocket (Formerly Read It Later)" can't help.
> "Moral Mazes" seems to have become a cultural signifier

I'm sure it's that too, but I've currently got it checked out as an interlibrary loan serving as my bedtime reading, and I'm finding it really insightful. But perhaps this is because I'm starting from a point of bewilderment as to what motivates most people to act as they do.

> a more intellectually credible way of saying "the whole system is out of order!"

But the miracle is that rather than being out of order, the system mostly works, and tends to keep working. What I like about the book is that it strives to explain the situation from the inside as a mostly coherent belief system, rather than critiquing it from outside as untenable.
Presumably the same species programmed Tor, no? And since humans are involved, aren't they open to normal human failures and weakness? Or were these special people who programmed Tor?
Is that true? As I understood it, the original request was for pen/trap on Snowden alone; when that was refused and Levison threatened with contempt, he relented, only to be rebuked by DOJ with a new demand for blanket surveillance.

But as I understand it, Levison could have complied with the earlier demand for surveillance narrowly targeting Snowden.
And other platforms like Android and Firefox OS. The areweflashyet.com demos apparently also work on iOS!
Sure, they'll find technical excuses. But as soon as it will start biting them back, they'll quickly find needed expertise.

But probably Windows Phone is not the best example, since it's a minor platform comparing to others. MS has no leverage on the industry with it. Xbox is different. It's quite big. And enabling OpenGL there would only make sense for gaming.
That's not the assertion he made.
How Intense Study May Harm Our Workouts
Juan Linz’s Bad News for America
I'll suggest reading to the end of the article. They did do another trial targeted at people with mild to moderate illness. It failed: "A little more than a year into the study, more people on the drug had died (15 percent) than people on placebo (13 percent)."
If you dont mind using eclipse, you can use 'toad' eclipse plugin, which is really good.
They may find themselves with a bigger market than one would think. Correct or not, the general perception of the exchange-based plans is that they are nothing more than extremely limited HMO's (having looked at the plans, this actually seems to be the reality, at least in Nevada). That negative perception, combined with the fines for not having insurance, along with the end of underwriting, will probably lead to a significant spike in people looking to buy private health insurance away from the exchanges. Another large group of people that will refuse to participate in the exchanges will be those that are ideologically opposed to the idea of Obamacare, and those that have grown distrustful of the government's use of data in the wake of the NSA scandal.
All you need to know is he used the browser for 8 minutes and gmail for 9 minutes over 3 1/2 days.
Facebook's Company Town
The NSA is Making Us All Less Safe
I'm running 4.2.2 on my SGSII right now. I could even update it to 4.3 if I wanted to. I don't know how you can expect a manufacturer to support a two year old phone that you bought second-hand.
You don't need to install the Shumway extension if you are running Firefox Nightly builds and flip the "shumway.disabled" pref in about:config. Shumway will try to load embedded Flash content and show a little "Shumway X" button that you use to fall back to Adobe's Flash Player instead.
Amen.

I'll admit to glancing woefully at my purse-strings, then tightening them the last time I saw Lavabit's defense fund.

Between the EFF, ACLU, and other organizations I have suddenly have found great cause to donate to, I didn't feel like I was ready then.

Now that most of the full story is out, I read it, laughed out at Ladar's shear balls, and donated, deciding to skip some meals to make the budget meet if necessary.

I mean, that 4 point text ploy is straight out of a smart-ass-high-school-student's attempt to cram as much as possible on his "1 index card allowed" cram-sheet.
Looks like that number is in base-36 instead of base-10 (decimal). Using http://www.unitconversion.org/numbers/base-10-to-base-36-con... yields number 80113871 as the last 8 digits of the phone number.
No problem, glad I could help. I don't have a Blog to refer to, but I can give you a simplified example.

Imagine you are loading a Page with 20 Images out of the Database. The "slower" approach would be to query the Database for each Image individually, which means 20 queries to load 20 images. The "faster" approach would be to query the Database for all 20 images at once, which means 1 query to load 20 images.

Optimizing the Database end of a Dynamic Website (or Service/App) could be considered a specialty in itself, and it can get pretty complex; Indexing, Caching, even designing the Database Structure and Code a special way. I put the terms slower and faster in quotes because everything is relative, and your mileage may vary. If you are using a framework (like Wordpress for example), then it's possible that someone already put some thought into optimizing the calls.

The first step is to measure and determine where the bottlenecks are. You may find out that you don't even need to worry about the Database (depending on your performance measurements). To get started, check out Google Chrome’s Developer Tools (Resource Analysis), or WebPageTest.org (just some examples of tools you can use). Good Luck!