skysight-inc/HackerNews huggingface dataset:
Just wondering how its secure, and anonymous when every meta/sub/unknown/etc...particle(WIMPs/etc..) is monitored in (more then[future analysis through simulation])real-time for each individual entity in/out-of existence.

Whatever, you'll know when it hits you...
peer reviewed scientific, mathematical, or engineering papers > peer reviewed social science papers.
When Newsstand was introduced, there weren’t many quality magazines that had Newsstand versions of their apps. That is to be expected and nowadays, all of the magazines I want to read are available in Newsstand. Those magazines are also available outside Newsstand though and that may be the case for the magazines you read as well. If you’re interested, you can look for the titles in the Newsstand Store.

> If I needed to get to the Newstand app, I would have to scroll a couple screens from the front to finally find it.

Wouldn’t that be because you moved it there? Newsstand is on the first page of my Springboard and it has always been there. iOS 7 didn’t change that.
It's interesting that none of the smart hackers here have 'innovated' an open discussion forum yet. Everyone knows of the problems with moderation and hellbanning, everyone knows that this forum isn't a democracy and yet, here we all are.
If you lose your Yubikey, is it all backed up online somewhere, or will you lose access to all your online services its password is used for?
The value of the conference differs to each person as much as the value of doing his/her best not to support people who support discrimination. Your values are different. I respect that. I think you should learn to respect other values too.
Interesting, I'll take a look.

I also proudly call myself a political centrist, mostly out of the idea that I'm an Empiricist, and all politicians make some extraordinary claims that can't be substantiated and some more moderate ones that overlap and are more likely to be correct - (breathe) which I think may fall under the same fallacy. Food for thought (and re-thought,) thank you.

(especially interesting since, as a Lib Dem, I get quite cross about people saying politics fits onto a 1D axis, so I clearly don't even believe the premises of the fallacy in full!)

EDIT: from just a few minutes of reading, this concept (which I've held in my mind for a while) makes me think less well of compromise for compromise's sake:

http://en.wikipedia.org/wiki/Overton_window

I probably still think the BBC isn't biased though - especially given the difference between different programmes, even just on R4 the comedy is very left-biased.
Sounds like a bad idea to depend on your Yubikey.

I only know my master password for Lastpass which is a kind of random 14-16 char long and complex. I type it once each morning and it goes fast to type. With that I access my other 334 random generated passwords. But I do know my password for email just in case.
It's true that gamedevs worry about this, and Tim Sweeney has even given prezos on how great functional languages would be for game programming, but the reality is, hardcore game devs crave two things from what I can tell: 1) determinism and 2) maximizing utilization of resources

A VM or high level compiler abstraction, especially with GC, tends to interfere with #1, and sandboxed environments with abstract APIs for accessing hardware tend to interfere with #2.

Yes, this is not to say that games won't use scripting, like Lua or UnrealScript, but those are not part of the rendering loop.

Asm.js provides predictability in terms of GC, but it does not ensure predictability in terms of performance (because of differing JIT implementations), nor does it give the direct access to hardware resources one would like (e.g. SMP).

I don't really see it as a target for next-gen games, regardless of the cool UnrealEngine demos. Mobile casual games maybe.
I get where the strong feelings come from, but time does change things (be it better or worse). We think they are going in the right direction, and we're going to work on getting even better.
Yes!

I think it's hard to fully appreciate Ender's Game as an first-time adult reader.
A computer that works underwater
I use book quotes for passwords (include spaces and sometimes change letters for numbers (if the stupid website requires it)), I don't forget those since they're meaningful.
It says it's built on Mailpile[1,2], but Mailpile says on it's own github project page that it is "still experimental and isn't very useful yet."[3]

Slightly confused how this can then be something to charge for at this time if it's UI is built atop something that is self-professed experimental and not useful.

But pricing is there, and there's nothing in the language to indicate I can't jump on this ship right now, including a Download for free option.

Click Configure $39 button. Okay, asking for email address & where I'd like to have Minerva setup. Hong Kong sounds fun. And I want to use my own domain. But wait. Request server? Odd word choice for proceeding with configuration.

Let's backup a step and click download instead. Wanna check out the code and whatnot so I can see what all is going on that I'd have to support if I do it myself--and I sometimes like doing it myself for certain things. Trusting a third-party for email security & privacy has, let's say, taken a big hit recently.

Click Download for free and ... there's no actual download. It's an email signup form to request a server. Odd wording for a free download, isn't it? Request a server? I can't really request a server to download. I'm supposed to be doing setup myself, so I need software, right?

Decided to drop an email address in anyway to 'request a server' for the configure-your-own option, and it appears it's an invite list--with no prior copy indicating it was an invite-only thing.

Not exactly a good approach here, Minerva.

[1]: http://cl.ly/image/030u0i200a1N

[2]: http://mailpile.is

[3]: https://github.com/pagekite/Mailpile#welcome-to-mailpile
one more company that knows my personal information and credit card information, and they are (unlike Apple) infamous for selling that information to marketing firms

Indeed. Heck, for many periodicals that's how they can afford to stay in business in the first place, their content is so thin.
I've recently switched to this. While my passwords are now secure, I've found a number of situations where I can't login somewhere because the password list is only found on my home computer.
>We will continue operating as an independent and autonomous company and our mission will remain unchanged.

That's what they all say.
The Geeksphone devices are sold out, but you can get a ZTE Open with FirefoxOS on eBay for only $80/£60. Details at https://marketplace.firefox.com/developers/dev_phone
Amazon Has Reportedly Teamed Up With HTC For Its New Line Of Smartphones
I don't use Firefox but if that's the case then asm.js can no longer claim to be "just javascript". I wasn't expecting that one.

Interestingly enough, this makes the V8 approach all the more welcome since it doesn't break backwards compatibility.
With my current time commitments the best I can do is email. If that doesn't work for you then I understand. I wish you the best of success in your venture!
Not the same. You are comparing a new OS on old hardware. The (rather abrupt) OP was comparing a new OS on new hardware. This is similar to my experience with Android.
Canvas Grants | Canvas by Instructure
Those sort of discussions are probably most effective when had in "meatspace" (I dislike that term, but I dislike the term "real world" even more). No 'throwaways', fewer 'throw away opinions', no voting systems or flagging, greater communication bandwidth (access to body language and tone reduces misunderstandings), etc.

Trying to get HN to productively discuss topics like this is like trying to get 4chan to "count to 10". The site just really isn't set up to facilitate it.
A Day to Remember the First Computer Programmer Was a Woman
these questions are mostly very interesting, but here's the problem with lists: ill-definition. What does important mean? On its own it's a floating signifier. So you have to ask: important for what? Then break down your important list into at least some caregories. Then I'll be more likely to believe that these are the most important for some reason or other, not just because you arbitrarily think so.
... and we are happy to be one of those special remotes:

http://git-annex.branchable.com/devblog/day_22__gcrypt_on_rs...

http://git-annex.branchable.com/forum/making_good_use_of_my_...

http://git-annex.branchable.com/special_remotes/rsync/
> It's not done. This is just an email form to collect interest. This dilutes the value of "Show HN" posts.

I honestly didn't mean to abuse the Show HN. We trying to gather any interest and feedback from the beginning. I filed it under "show hn" to show that the people behind this are here and actively following the comments for feedback and questions.

In case this is considered show-hn spam and/or and a misinterpretation of the Show-HN Etiquette, i hope the mods will strip off the "Show HN" from the title.
This is the solution I currently use. I have found KeyPass problematic on OSX but since that isn't one of my primary computing environments it works well.

I am putting a lot of faith in the security of KeyPass, as I don't put a lot of faith in DropBox to keep the file secret. If DropBox's sync system wasn't so simple/unobtrusive I'd use something else.

Then as a last step measure, there are backups of the keepass file in case a machine or dropbox have issues.
It's good that you guys are at least seeing these reactions right up front, so you can hopefully make some headway in restoring faith. There have been many such acquisitions that the public frowned upon, but ended up not being so bad after all (for example, when Salesforce bought Heroku). Best of luck to you.
Yep, let's ignore the main issues raised by the post and have a meta discussion instead.

- Leftist orthodoxy (Keynesian good/Austrian bad, etc.)
- Disappearing dissenters (HeckBanning, NegVotesToOblivion)
- Apple the Immaculate (and Saint Jobs the Perfect)
- All startups are equal (but YC's are more equaler than others)

Please HeckBan this and prove the points made about HN's accoustics and whatnot. Whatever you do, must not upArrow and offend the hive mind.
I avoid voting for exactly this reason. I prefer to filter the noise myself by ignoring it over decreasing it for others, and the only reason for this is that I don't want to be penalized for it.
does anyone have any idea how they did the left bezier drawing as one scrolls down? thanks.
You can also use other password safes (sometimes called vaults) that are multi-platform. A password safe is an encrypted database that allows you, and your team, to securely store and share passwords. Basically, it is a free piece of software that is cross platform (win, mac, linux), a common workflow would be to store it on a shared drive, and give your team access, they use a common password to access the safe, which holds the other passwords. Create multiple safes if you need segregation i.e. dev safe, sysadmin safe, network safe, etc. I have created a screencast about this @ http://sysadmincasts.com/episodes/7-why-you-should-use-a-pas...

Personally, I would not recommend any of the cloud based solutions, for the simple fact, that any slip up in their security and you are hosed. These are your crown jewels, do not outsource this!

UPDATED: sentence structure.
You might not forget the book quote, but how do you remember which one you used spaces on, which one you used numbers for letters, and which website uses which quote?
"Gravity," the Chinese, and an End to American Exceptionalism in Outer Space
"You will deserve to be here (and to exist as a human being) when you have learned to accept my progressive values"

I haven't been to one of these speeches but I assume they are mostly meaningless platitudes. But this is better than left wing indoctrination where they are berated for their privilege and told to seek out "human things, like ethics and obligation and desire" - code for progressive thinking. There will be plenty of time in Gen Eds for that.
To be honest, the Java API documentation is pretty stellar. I am/was a Python developer, and I remember hearing the claim that Django has great documentation. I don't know if I'm spoiled by Java or what but if Django passes for "great" then I think Java's docs should pass for legendary.
The Lazy Expert
#1 sounds like it would satisfied by bitmessage: https://bitmessage.org/wiki/Main_Page
Additionally, it's a bad idea to assume that having only part of a password makes a password uncrackable.
I would not be surprised if huge numbers of sentences from popular books are hashed already (and put in rainbow tables)...
Nice work. I don't know much about hardware programming but if I manage to recreate it I am going to use it on Christmas :) How much did it cost you?
I misread this as 'monstrous news', hovered over the link, was surprised they'd call the news 'monstrous' themselves, then noticed I'd read it wrong. Freudian slip in reading, I think.. :-)
This essentially turns "something you know" into "something you have", with no requirements that any of the remote websites change what they are doing.

It seems like this is an interesting counter to the recent budding trend of arguing that "something you know" (passwords) is broken and we should all throw it out and switch to "something you have". This shows that a user can unilaterally convert "something you know" into "something you have", and unlike the inevitable clusterfuck of trying to standardize on "something you know" with the inevitable gold rush of competing, fragmented standards, resulting in users having to have an unbounded number of "things" in their possesion [1], authentication consumers can continue to work with standardized password approaches.

It seems to me that rather than rewriting the Internet to not use passwords, we'd be better off making this approach even easier (although it's not all that hard right now, really).

[1]: Yes, I'm aware of things like RFC 4226. History's pretty clear though; if there was more value to capture in this space it would break into proprietary fragments in a heartbeat. All the proprietary fragments would probably be beaten down by RFC 4226 in the end, but there would be an unhappy few years in the middle.
This HP Chromebook 11 seems very similar to the Samsung Chromebook in specs. Both use Exynos 5250, 11" screen etc.

The Acer C7 Chromebook (Celeron) was much better performing.
Running some javascript graphics, it seemed at least twice as fast to me. But it weighed 50% more (~1.5kg).

However, the new Acer C720 Chromebook is down to ~1kg, and it's even faster, using a Haswell CPU (22nm). http://arstechnica.com/gadgets/2013/10/acers-c720-chromebook... And google claims 8.5 hours http://www.google.com/intl/en/chrome/devices/chromebooks.htm... (cf 6 hours claimed for the HP Chromebook 11.)
Surely the most sense would be to do whatever gets the best education for the people who have come in as students, to then create the best researchers and maximise the amount of new shit they can find out about. Screw reasoning about who paid for that student, whether it is their parents, themselves or a state or a charity, universities have a purpose and it is not necessarily best served by making a group of largely inexperienced people stressed out and depressed.

Also, the people who are arrogant self-entitled little sods are not going to listen to the negative speech anyway, they will naturally assume it is directed at the other people and think that their parents connections are all the guarantee of finishing with a good grade that they need, and depending on where they are and what they are studying, they may well be right.

The people who are more likely to take something like that to heart is the nervous rather than the untalented or arrogant.
"Also"? 1Password is a "password safe".

EDIT: with your edit everything now makes sense :)
The "similar life experiences, interests, worldviews" really refers to being in the IT industry, especially on the startup side of things. I don't think gender or race issues are nearly as much a cause for exclusion here as, say, being a restauranteur rather than a programmer would be.

Tech may not be a pure meritocracy, but it's far closer to one than most fields, and most of the discrimination I've seen has come from management, not programmers. Female and non-white engineers are regarded for their capabilities first and foremost.

I was just discussing this yesterday with my daughter. She's studying to be a teacher, and is deeply involved with social justice issues (I credit her with improving my sensitivity on gender, which was already pretty good). I was talking about how I go back and forth a bit on what I can or should do to encourage African-American teens to go into IT. One of the advantages that I perceive is that it's the source of a good, secure middle class living with very little racial discrimination relative to other fields. But the disadvantage is that there's very little African-American participation in the industry. I come down on the side of encouragement because we need pioneers, and because good middle-class security is becoming harder to come by in America.

But to get back to the original point - the cultural divide around here isn't really about gender or race, which is the point of the OP's essay.
>that it is an expensive attack, in the low billions of dollars to pull off. Preventing that attack would require half the computing resources in the world to be devoted to Bitcoin at all times.

That sounds like a 51% attack, although the 'half of all computing resources' is off the mark. The OP is right here, it is a very feasible attack at the moment, which is why some are concerned that SHA256 is too specializable (ASICs) which means that a dedicated adversary with access to chip manufacturing could print a few wafers and own the network at low cost.

There aren't many attacks on the network that require that kind of computational power. I could see the NSA running a large portion of nodes to de-anonymize users, but beyond that I don't know what else it could be. A double spend attack wouldn't require much effort (right now at least, that will change) [1].

[1]http://www.tik.ee.ethz.ch/file/848064fa2e80f88a57aef43d7d595...

[1a]http://www.tik.ee.ethz.ch/file/49318d3f56c1d525aabf7fda78b23...

[1b] We will see some of these changes in bitcoind .9 (so says Gavin)
GoDaddy has repeatedly blocked my domain transfers, had customer service call and harass me about moving domains out of their control, and didn't listen to a word I said about the elephant scandal when they called me.

I still, to this day, get calls from GoDaddy even though my last domain (which was blocked from being transferred for many months) left their hands last year.

No way am I ever going to trust them, or any company they own again.
>if we can't have this conversation, who can?

lesswrong.com is typically able to discuss difficult topics much more rationally than the rest of the internet.
Can you explain why it is a management nightmare? You still only have to maintain a single wallet. The wallet abstracts away the fact that you have bitcoins in many addresses, so from a UX perspective, it really is no different than maintaining a single address.

And I'm not sure I understand what you mean by "weird timing attacks".
The article doesn't really work for me, but I checked out
Deborah Estrin's Wikipedia page. It doesn't seem impressive enough for her to be called unsung. There's thousands of technology non-profit co-founders that nobody have heard of.
There's a single Geeksphone on sale on eBay right now: http://www.ebay.com/itm/Geeksphone-Keon-Smartphone-FireFox-O...

:)
Also there is great good screencasts for iOS at nsscreencast.com
Github repo: https://github.com/freedomofpress/securedrop/
It could be that there is no market per se, but it can be more subtle than that.

There could be an easily identifiable market that is big enough to provide you with acceptable revenues... But it could be that this market is too difficult to satisfy! There could be any number problems:

- The solution they need is terribly complicated but their budget is pathetic and will never allow you to recoup your development costs.

- Or the problem they have is very convoluted but they expect your solution to be incredibly easy to use. Some markets are full of people who say things "this is too complicated/unfamiliar, I'll just do it on paper/FAX it to them/put it in Excel" or any other shockingly antiquated thinking.

- Or maybe the market looks to be uniform from the outside but once you dive in you realize that each customer in the market requires your solution to work in a different way, making it very hard to please even a subset of the market.

- It could be that the entire market needs your solution to interface with product-X, but that vendor won't even talk to you for any number of reasons (exclusive with someone else, they think you're a joke, or whatever).

And on and on...
HTC to make future Amazon phones, according to report
I use Lastpass with Google Authenticator two-factor authentication. Like most Lastpass users the only password I know is my master password, and of course it's the weakest.

Lastpass has worked well, but going forward there are two major concerns. Lack of a mobile browser plugin makes it difficult to use on mobile (Android). Second, is that all major browsers appear to be dropping plugin support out of security and performance concerns.

What's best for password management without using browser plugins? Chrome clear text password storage is troublesome. Bitlocker and mobile encryption may help. Are more OS implementations one the way?
Money 3.0: How Bitcoins May Change the Global Economy
Beat Your Child's Ass Lol
People who buy a tablet, but want a keyboard.
See, that's exactly the problem with graphical programs nowadays. My program is essentially a layer on top of Racket, so it's much closer to textual programming than it looks like at first glance.
I live "exclusively in Apple's ecosystem", but still find 1Password incredibly useful. You can store credit credit card/passport details (so useful when filling in forms and not having to dig around for them), store software licences, create secure notes, store bank account details and a bunch more things.

So it's more than just a secure password storage/generation program, it's a centralised system for all your important, easy to lose/forget details.

I don't know how much work Apple are going to put into Keychain, but it would have to be a lot for me to switch.
So conceptually, the only thing that "use asm" does (in Firefox) is to tell the optimizer/JIT/whatever to assume certain types in advance rather than having it infer them at runtime?
I use the KeePass/Dropbox combo also at the moment, but I have some concerns about it and may switch away.

Dropbox keeps historical versions of your files. My concern is that, if an adversary can get multiple versions of my Keepass file which they know are a sequence with small changes between them, then they are much more likely to be able to devise an attack. I haven't looked into this any deeper yet.
This will sound a bit silly but as a customer of both, I gotta confess I'd feel a lot happier if they pledged not to sell out to a company like GoDaddy.. ;-)
When given the chance, I plug in an Ethernet port (I always carry an end-to-end Ethernet cable with my laptop). This is because it is faster, safer and a lot more stable than Internet over the air.
A copy of the 1Password master password stored on the Yubikey could also be stored offline (safe deposit box).
Constraint programming in the browser (JSConf 2013)
Never expected these guys will sell themselves to a company with questionable reputation.
I'm working on it...
As much as you didn't understand the point that I was trying to disprove, which was the bare assumption that big business is uninterested in Ruby.