skysight-inc/HackerNews huggingface dataset:
this has been answered, it's not possible. It's about making substantial business in the US.

The territorial water is 12 miles wide, it's far. Exclusive economic zone is 200 miles wide, it's really far. Who want to be that far from the coast in the winter without a good reason on the most powerful and dangerous ocean? In the article they say 3 to 7 miles, that's completely territorial and for a good reason: on the first winter storm they'll be plenty happy with sovereign state helping them shelter the thing and save everybody.

Moreover, how do you anchor the thing in international waters? It's very complicated and expensive if the water is deep (which is more or less implied by 200 miles from the shore).
The Downward Spiral
Considering it's a relatively recent change, it certainly has come as a suprise to lot of users. Did to me. Did to my wife. Bit at least a couple of friends I know.

From a technical point of view I can certainly approve the change. Back in my time I've had couple of my images ruined by badly timed save (user error [tm]), so the non-destructive approach certainly has its merits. However, the new behaviour breaks a lot of ingrained casual use flows. So maybe the best approach would for Gimp to remember the original filename when it's opened and if the filetype is anything except XCF, simply do two saves: create a new $filename.xcf automatically with all the changes the user has made, and also auto-export with the old name.

That way the more casual users could still just do "open, edit, save" for their quick edits. As a bonus, since the XCF file is non-destructive, the original file would still be in there. This might give the best of both worlds: it wouldn't break existing workflows, and it would automatically prevent accidentally changing the original image. Plus it would make the save/export split less of a headache for new users.

Just an idea.
If I feed it a key of all zeros and a text of all zeros the output is a counter, that seems like a problem.
My hope is that this one would be fun for others to break, rather then me having grand illusions of knowing better then everyone else.

I know a fair bit about security from an engineering standpoint, but wouldn't call myself a master. My mathematical background is much weaker.

Thanks for the links, I have already read it.
That button shows you new submissions, even if they got no votes. Pretty different thing!
>A high-profile file-sharing site

I have never heard of that site and after looking at it, it really looks like a shitty scam site for dummies.
There is a distinction between prepaid credit cards and gift cards. I'm not sure why, but prepaid credit cards typically require a SSN and gift cards don't.

They end up working just about the same though. You can buy them both at a retail store for cash, and use them just like a credit card anywhere Visa/Amex/Discover/whatever is accepted.
So far they don't seem to be doing much to stop it, but in the end they won't have a choice either way.

Anti-car lobbyists in the dawn of the car era got ridiculous laws about having someone walk in front of the car with a flag put on the books in many places and it still didn't stop car adoption.
I think you're making some assumptions about people in your argument.

This is really very simple, security is a multi layered thing and security by obscurity is never a good layer by itself but part of a larger "onion" it can be helpful.

Bottom line, good security always takes discipline because humans are the last line of defense. There is no one button solution and anyone in security should know this so the argument shouldn't even be present about that point. Changing the SSH port towards the internet is a very pragmatic solution to spam in your logs.

I know people will mention fail2ban but I'd rather not have a log parser running day and night on every internet facing server when I can just change the port and get rid of all that spam Forever. (I have yet to encounter one robot that can dynamically scan for SSH ports and use anything else than 22).

Also, in my personal opinion, using a high port like 24601 is insecure because if your SSH daemon ever crashes then an unprivileged user on your system can listen on that high port and receive your precious connections. So personally I always use an alternative ssh port under 1024.
I know it sounds plausible, especially considering the ugly hacks that are revealed on The Old New Thing. But I don't think there's ever been any proof, or even good examples of it. Management, friction between departments and time wasted on visual overhauls could easily be bigger factors than a few thousand (or millions) lines of ugly code maintained for backwards compatibility.

Empirically, the iCloud reboot is still meh. iMovie (cleanly rewritten one version ago) is averaging at 3 stars on the Mac App Store, with especially devastating reviews in the German MAS. On the other hand, iOS 7 is moving very fast while being one of the products where Apple cares a lot about backwards compatibility.
This assumes the insurance cost of a non-self-driving car doesn't go up as the pool of people using them shrinks and the liability shifts to them. Insurance companies like people who probably won't have to take their money more than people who will eventually have to.
I cannot believe that in 2013 captchas remain the most effective way to achieve whatever they are used for. I bet Google could bake something into Chrome to avoid captchas.
Compete to win the Salesforce $1 Million Hackathon
Native maps (associative arrays) in Erlang
They don't know every site I visit, the add-ons request policy, no-script, and ghostery, are enough to filter googles influence except when a site has embedded youtube video or a captcha
>I cannot tell you how many times I have heard sysadmins say a that a single private key is a "best practice".

Are you talking about a host key, user key, what? Confused.
oh, thats just me rambling about why i don't trust compiler autovectorization :)

well:
1) i've been slowly working on a numerical computing / data analysis substrate for haskell for over a year now.

2) the haskell c ffi is probably the nicest c ffi you'll ever see. Also pretty fast, basically just a known jump/funcall! And no marshaling overhead too!

3) theres a lot of current and pending over the next year work to make it easy to write HPC grade code using haskell. Some approaches involve interesting libs for runtime code gen (the llvm-general lib for haskell is AMAZING).

Theres also a number of ways where ghc haskell will likely get some great performance improvements for numerical code over the next 1-2 years! (i've a few ideas for improving the native code gen / SIMD support over the next year that I hope to experiment with as time permits)
Omega-3 (Carlson)

D3 2000 IU (Now Foods)

Turmeric (New Chapter)

Multivitamin (Megafood)

Ubiquinol (Now Foods)
Waterbear has an Arduino plugin: http://robotics.waterbearlang.com/garden.html?plugin=arduino

As does Blockly (Google): http://www.gasolin.idv.tw/public/blockly/demos/blocklyduino/...

Blockly is easy to extend as well (maybe Waterbear is too; I have not tried).
Wouldn't it be great if all of us could choose (only when it suited us) to live our lives according to mid-19th century laws.
Isn't that special relativity(time dilation) that your quantum mechanics teacher talking about there?
I think that's a bit of a strawman. The pattern described was that we are often wrong because there's some factor about which we do not yet have the slightest clue.

Given for how long we've thought that we knew everything, it should hardly be surprising to find out that there's more to things than we know.
Yes, I'd read your bachelor chow recipes.

I have a similar question about it. Drinks go super fast into the blood stream. You could try combining it with some celery. I guess that'd work for someone who really, really doesn't want to make meals: use Soylent and celery.
A new install. I believe it was a brew as well.
I was just thinking, “A family of four can share a van, but it would be awfully hard to get them all on one bicycle…”
I wonder if a Javascript based proof-of-work system could be used as an alternative to CAPTCHAs. It wouldn't stop spam entirely but it would rate-limit it and possibly render some forms of spam unprofitable. Aa a bonus, the proof-of-work could be tied to something useful (Folding@home?) just like reCAPTCHA's CAPTCHAs are useful for digitizing books.
I found your blog post insightful. Consider submitting it as a story on HN.

Has any of your friends run into the problem of the expected privacy of their photos being compromised and the photos reposted elsewhere?
Python Practice Project idea: Lisp Interpreter
From the comments section of that article:

Original Permalink to the comment:

http://discussion.theguardian.com/comment-permalink/28303586

>> This wasn't a "high-profile" website! Do some research! Alexa ranks these cowboys as being the 234,734th most popular website on the 'net.

This was a small time site, this is a small time outfit who are trying to get into the anti-piracy business by using a nothing site who nobody used to generate news (and business). Congratulations on being duped!

http://discussion.theguardian.com/comment-permalink/28303653

>> I have a blog (no I'm not telling you the address, I like to post anonymously!), it gets about 300-500 hits a day, I'm 299,749th on alexa btw. So this "high profile" website you just generated a nothing story about gets, at most, about 1000 hits per day. Real big time!
Thanks for the heads up about the EU events (and people)!
It's probably already been said, but it can be said enough: Security through obscurity is valid for marginally increasing the total security margin, but relying on any one practice or technique always smells like a dangerous approach. (Hence the hollistic practice of many overlapping features providing defence-in-depth.)

Changing ports reduces the threat surface in limited but practical ways, however far more effective would be using secure port knocking (say fwknop with GPG and is also time-based).

Secure port knocking and changing ports together would be perfectly valid. In fact, I have deployed these for openbsd jumpboxes guarding core infrastructure. So breaking in would require defeating fwknop with GPG and ssh.

(If anything needs public auditing, it's GPG and SSH. VPN code also considering the logic often makes OpenSSL look simple. )
This quote from Wikipedia describes it as a particularly bully like behavior.

"Martin's Beach was previously a popular family beach and surf spot before Khosla purchased the property adjacent to the beach and blocked access."

http://en.wikipedia.org/wiki/Vinod_Khosla
I'm definitely a "cynical bad student". Fit the description perfectly. I only respect teachers who also work part-time as a programmer, sysadmin, ... anything interesting.
I think the "genius" is kind of a byproduct of transition from faith-centered worldview to knowledge-centered worldview. At the time of mentioned geniuses people were just starting to tend away from the faith in god, so the faith in higher powers partially persisted, and labeling people with great achievements as "geniuses" and making it feel like they have something others don't felt like a common sense and intuitive thing to do. So the "genius" might just be a temporary placeholder for the void that left when god was gone. As the void shrank with time, because the religion lost influence and people got better education, the need for people to have something greater then them, i.e. "geniuses" shrank too.
Just enough leaks to conclude it's a Google-owned project. Although I can't offer an alternative explanation, I'm a bit skeptical in this post-Snowden world.
It may be true in the US, it it hasn't always been true in some southern European countries. Spain has always been pretty hostile to bikes, but that seems to have changed.

The difference between northern and southern Europe, or between different countries in Europe, can be pretty big at times. Netherland has had more bikes than people for as long as I can remember. In Spain, the few rare bikers would tend to get killed by cars.
If there's information I don't want someone to know, I do not write it down, I do not talk about it, I do not express it in a game of charades.
Libarchive
Multi-format archive and compression library
It's also not fair to compare angular to knockout, check out durandal, now that's a full blown framework built over knockout and requirejs, and can match any needs.
Don't want to risk downloading from a honeypot?

Download encrypted and anonymously (from friends-of-friends-of-friends-of-friends-of... you get the picture): http://retroshare.sourceforge.net/
Twitter University goes public on YouTube
UnQLite
UnQLite is an embedded NoSQL (Key/Value store and Document-store) database engine. Unlike most other NoSQL databases, UnQLite does not have a separate server process. UnQLite reads and writes directly to ordinary disk files. A complete database with multiple collections, is contained in a single disk file. The database file format is cross-platform, you can freely copy a database between 32-bit and 64-bit systems or between big-endian and little-endian architectures.
I'm sure you could write such a plugin for excel with DataNitro or some such. The code is roughly:

outputs = []
for x in monte_carlo_input(param1_dist, param2_dist, ...):
outputs.append( (x, f(x)) )

histogram/whatever(outputs)

In contrast, the code to manually tweak formulas is simply:

> f(10, 3, 0.07)
12
> f(12, 5, 0.09)
-3.9
Privileged ports isn't an example of security through security. Maybe you could call it security by convention. Still, it relies on a number of assumptions, none of which can be relied upon if a system is compromised, and if the system isn't compromised... well, you don't have a problem now do you?

Honestly, the only win of a using "privileged ports" these days is you don't have to worry about the odds of some other service randomly binding to your port. Since most systems spin up ssh well before they spin up services that bind to random ports, and generally don't ever shut down ssh, that isn't much a win, but either way, it is NOT a _security_ win.
i thought this would be about shady startups helping out the dark side. :\
I find your statement weirdly amusing. You are deploring a lack of progress regarding something (it is increasingly difficult to tell humans and computers apart) that you would probably view as progress if stated differently (computers are getting increasingly smarter). I feel your pain but this is a very though problem and won't get any easier soon.
So that means you can't SSH into your remote machine from an arbitrary connection? What do you do when you're traveling?
Well on an internal network ipv4 is more than enough. With subnets you can put a LOT of hosts on your private network without any problems.
>(Back in those days this is how programmers worked, there was no “agile” and “daily stand ups”, everyone understood that things take time. I miss those days very much)

Hear, Hear! As much as I think Agile is an improvement over more misused software development models, I still prefer working on my own time at my own pace the best.

Very excellent story.
I run ssh in a non standar port and its annoying to always specify the port. Thank you for the tip about ~/.ssh/config
> Turn on two-factor (or two-step) authentication. Google and Gmail has it

Only problem being, that involves me handing over my phone number to Google - one personal detail too many, for me.
The truly good student is the one who signs up for the class with the goal of mastering the material being taught as well as possible. The 'good' student in this example cares more about gaming the signaling mechanism than actually learning the material - this is why he'll spend his time arguing with the TA over a handful of points on his problem set than spending that time going over the material again. The 'cynical bad' student is already convinced that he's not going to get anything out of the class, in which case he either 1). is taking the class because he has to or 2). is a fool who should be taking a class better serving his needs and not wasting his time.

Also, I don't know much about philosophy (and I suspect this is far less applicable for philosophy), but in science and engineering often mastery and innovation in a field requires an extremely narrow focus that, in turn, requires a significant investment in time and resources. This includes transmission of specialist knowledge to graduate students and postdocs, grant writing, paper publishing, acquisition of equipment or access to equipment. So I don't really think it's entirely fair to chalk up lack of interdisciplinary interest and/or innovative methodology predominantly to a system that weeds out people not willing to think the way it wants them to. (Not saying that tenure doesn't have its own problems...)
Hi! You accept user password over http. I don't feel comfortable doing that. I am sure using https is not hard for you guys.
I don't know. In complex environments that try to use passwords, I've observed that the password spreads until everyone knows it and then nobody can change it because "everyone already knows it and it would be a pain". Keys allow fine grained access and can theoretically be way more secure.

On the other hand, the last place I consulted for had their private key for production checked in to the main git repo, unencrypted. :-/
At this point, I would be actually happy for Disney IP to be in copyright forever, as long as they leave the copyright law alone and works start entering public domain again.
Remember SOPA, when the NSA partner companies threw their weight in to stop it from happening?

Apparently SOPA was more of a cause to them than a movement bound to turn western society into of couple of police states.
Yes, but this is a physics professor making jokes to an audience of physics students. Why shouldn't he refer to special relativity? It's part of his training and the training of everyone who can hear him.

I'd be more surprised if the joke came from, say, the professor teaching egyptian hieroglyphics.
I think, that's a simple way to login for users.
The CIA doesn't do that.
Startup lessons: Why Moz’s $12,000 bounty program for new engineers didn’t work
Dynamic target tracking camera system
In my experience over the last 5 years: Agile isn't.
> 1. Use end-to-end encryption.

> 2. Encrypt as much communications as you can.

http://retroshare.sourceforge.net/ has got your back.
0102 - The sneaky procrastinator waits patiently for The Slip
So, basically you should avoid doing something healthy to avoid being branded as something you don't like. And the effort to change the current situation is not worth it because of BS politics. Why would you care if strangers label you somehow? I'd only be worried if that could get me into trouble (police, getting mugged, etc.).
I recommend reading JFK Fuller "The Decisive battles of the western world and their influence on history" or any book about ancient history, which i define as before the battle of hasting.
And you will learn about the sheer amount of war there has been all over europe, really rampant. Example is during the great migration era. My point with all this is that in war their usually is rape, alot, which per definition is that the male chooses their spouse.

For more modern example read Catherine Merridale "Ivan's Wa. The Red Army 1939-45". Where their was extensive rape and pillage done by the red army.
Rough translation, i have a swedish copy. "Among the Soviet soldiers that fell on the preussian refuges that streamed out from Insterburg and Goldap was a young Officer by the name off Leonid Rabitjev. Decades later would this man gather the strength that is required to write about the offences he saw were being committed. "Women, mouther and children lie right and left along the road, and infront of each one their stands a screaming armada of men with their pants down", he wrote."

My point is that we can't really compare the trends of peaceful today with history in terms of reproduce, because a lot of women bore children of war, even up to relative modern times.
Sony Ericsson TXT CK13i Mugua Mobile Phone on Vodafone
3 megapixel camera
Full QWERTY Keyboard
Facebook &amp; Twitter integration
FM Radio
Bluetooth
Well clearly these are partly predictions and speculation, but I do expect to see, and we have already seen, concrete repercussions from the exposure of spying on allies, because the actions of the US state have put its interests in clear conflict with those of its allies.

The excuse given for sharing banking and passenger data was fighting terrorism; as that's been shown to be far from the truth by these latest revelations, the EU parliament recently voted against sharing SWIFT data:

http://www.dw.de/european-parliament-rejects-swift-deal-for-...

Can you explain why a South American nation would not make a trade deal that made sense economically because of foreign espionage? How do the economics change as a result of the espionage?

These decisions are not made on a purely economic basis. Rousseff cancelled a trade visit as a result of US spying:

http://thecable.foreignpolicy.com/posts/2013/09/17/brazilian...

From the article:
Brazil is one of the wealthiest and most powerful countries in Latin America, so Rousseff's decision to postpone her visit - and her obvious anger at the U.S. -- has potentially far-reaching implications for Washington's standing and influence in the region. It is extremely rare for a head of state to call off an already-scheduled state visit, so the move is also a profound embarrassment for the administration.

The administration tried to spin this in the US as a joint decision, but this was a significant snub (along with her damning UN speech) from the largest country in the region and a huge setback for US influence in SA.

Who would avoid using servers based in the US as a result of espionage of 35 specific foreign officials?

The officials certainly have an incentive to move (in a way they didn't when they believed US gov assurances and thought only the little people were being spied on), and they may move the massive EU gov market away from any dependence on American owned servers. South American government have discussed doing the same (including Brazil, the biggest country). This will impact US internet companies long term, and I suspect just encourage an already emerging globalisation of the internet.

Are countries going to make decisions that are not in their best interests in order to spite the US?

It has been fully exposed just how little respect and rewards being a US ally earns you, and therefore a lot of countries will rethink the relationship. This has nothing to do with spiting the US and everything to do with protecting their own interests, which are less and less seen as congruent with the US due to its bullying behaviour.
IPv4 is not just about larger address space. It has better autoconfiguration, better multicast, better MTU, and it has a constant size header to make routing easier. Unlike IPv4, it works well with no centralized server assigning IP addresses - between link-local addresses and multicast, you get everything you need to communicate locally, automatically. It is a good protocol and we should use it because it is good, not just because address space exhaustion forces us to.