skysight-inc/HackerNews huggingface dataset:
I'll take a stab at this.

Before I get in to it, we need to correct a misconception on your part: using a government ID doesn't work in every case. It turns out hackers know how to forge government ID images, and some of FB's users don't have government IDs (for instance, before I turned 16 all I had was a private school id).

With that out of the way, I think they should do what you suggested: sms verification. Email verification also works. As does postal mail. As does credit card charge. As does ACH charge. As does paypal charge. As does "send in a photo of you with a shoe on your head". As does having a user's friends vouch for them (they call their friends and ask). As do a lot of things.

Facebook should look closely at whatever attacker they are trying to lock out, and make several methods of ownership verification available. Maybe require two?

Requiring IDs just isn't a particularly good way to do it, and has bad PR effects these days.
> Git currently has a greater mindshare than mercurial,
> specially on HN and many open source circles. I don't
> think that is enough to consider that "git has won".

I think it is enough, because a few years ago hg had bigger mindhare. Four years ago I talked about DCVS at a local PHP conference and the three systems I reviewed were Mercurial, Git and Bazaar. Mercurial was more polished and leading in mindshare at the time, but I bet on git, and turns out it was the right bet. Don't hear much of the Bazaar despite few really big projects using it.
Well, governments cannot usually "pull some strings" to take offline a website hosted in a foreign country (Sweden in this case).

Except maybe the US, but even then some foreign hosts won't be very cooperative, especially when the purpose is to curb freedom of speech.
Some options:

* A video call with a Facebook agent who verifies you.

* Uploading a picture of yourself holding a card that says 'Facebook', their city and the current date or similar. The city is something that FB can verify with IP address and account profile.

Yes, these aren't 'web scale' methods but I surely hope that they aren't just using OCR to validate Government IDs.
Why Apple Wants to Bust Your iPhone
Maybe. This is rapidly becoming less true. I had to give a talk at a school the other day ("tech is cool, join the tech industry!") and the bulk of the students didn't have Facebook accounts -- because their parents are on it.

Maybe that'll change when they reach a University age, but it was striking how few of them used it.
For the last three months I've been rocking this:

http://imgur.com/3c71uIw

It's a rendering from the Audi website of the car I ordered three months ago. I finally got the car on Friday, so I should probably change the wallpaper now :)
This attitude will die soon enough; the very young are starting to see Facebook as a niche website for grandparents.
So, a simple substitution cipher? Should be trivial to crack.
I saw that, but it doesn't really mean he's getting anything from it besides "Motorolla's staff are gonna be active on his forums".

I just hope Dave at least gets a job out of this.
NetBSD really does run on anything!

http://www.embeddedarm.com/software/arm-netbsd-toaster.php
This submission has a few comments: https://news.ycombinator.com/item?id=6626108

These submissions don't:

https://news.ycombinator.com/item?id=6632587

https://news.ycombinator.com/item?id=6632326

https://news.ycombinator.com/item?id=6629177

https://news.ycombinator.com/item?id=6628933

https://news.ycombinator.com/item?id=6628068
What are the web's mom & pop stores?
Canada, Australia, UK, Germany, Czech Republic, Italy, France, Ireland :-)
Alright. I have updated the issue on GitHub with this information. Let's continue discussing it there.
That shoe-on-head verification could've been an awesome PR win too. (Assuming it was presented as one option among many. Best would be to offer the choice of several of the options you suggested, as well as the government ID option.)
wow, nice find
Why not offer a plan that takes the money after they start getting paid. You could take the full amount before they start getting paid, or take a percentage cut of each payment.

In order to make it fair to the people that stump up the cash first you could also charge them slightly more.
Since we currently have a "225 points, 18 hours ago" on the front page at #20, it's obvious something's going on.
There is already one. A ZX Spectrum emulator [http://jsspeccy.zxdemo.org/]
Another factor might be that it's probably easier to admit you're illegally reading the bible, than illegally watching porn.
"The messages will disparage other gangs in a backhanded way. In a Blood letter, you’ll see that the letter C is usually crossed out or has a slash through it out of disrespect for the Crips. And to praise themselves, they’ll write a B with an up arrow."

It's so strange that there's these very serious gangs responsible for traumatising large areas in US cities, yet they do massively petty things like writing a "WE R KOOL" up-arrow beside a 'B' in their correspondence, and crossing out a 'C' (if they're a Blood that is). I can't connect that juvenile elementary school behaviour with gang violence and shootings, it seems so contradictory.
Have a look at Diaspora
Hot though she is, I feel like that picture is stealing my soul
This is wicked. I want one. :)
> Did he basically find himself to the top, being a writer for HBR by just being purposely controversial?

"Getting to the top" is not evidence of quality. There are plenty of examples of this.

> I actually happen to be concerned about capitalism

I think anyone who thinks about the world has doubts, worries, and wonders if things could be better. That's good, normal, and healthy.

But to actually improve things, you have to go beyond the ranting, the "fat miserable drooling zombies", and so on.

See, for instance, this exchange:

https://news.ycombinator.com/item?id=6629890

That's real thinking and questioning. Umair, on the other hand, seems to rant a lot, in very broad terms, and propose little.
I might be missing something here - why would people flag it? HN has never struck me as being this petty. Anal retentive, pedantic, and difficult (citation required, sigh). What am I missing?
I'm surprised nobody has mentioned Middleman. It's a static page generator used by several big players (it claims MailChimp and Mandrill here [1]).

Or Jekyll for that matter.

[1] http://middlemanapp.com/community/built-using-middleman/
Building a fullscreen mobile experience
Please explain your problem in detail. If possible, open an issue on GitHub (https://github.com/fish-shell/fish-shell/issues)
Improved tracking with the  attribute - HTML5
I seem to remember that the original cargo of the Out of Band II in A Fire Upon the Deep was part of a one time pad - the ship held data that had to be xor-ed with data being carried by other ships (presumably so they couldn't keep a copy and read all of the messages).

Wasn't Pham also regarded as terribly naive for believing that public key encyrption would be secure? When they are discussing things in the bar scene where they first meet the skroderiders....
You just need to build modular parts, as the video shows (polymer blocks with embedded conductors, that slot together, was the example for electronics. There was also a demo (strike that, computer rendering) of plumbing soldering done by a machine.)
How Self-Generated Thought Shapes Mood
That's excellent! Thank you for pointing that out.
I would think one day even those like you would realize... Money is rarely the answer. Same with our prison and criminal justice systems, education, ETC.

Spending has ramped up dramatically in these areas and yet the results are either not improved or worse...

What would you consider "adequately funding" our social programs.

More government(especially federal) is not the answer. Your type is always saying, just a bit more, just a bit bigger, even when things get even worse you think a bigger government can fix it.

How blind you are not to see that the government often caused the problem to begin with.
Www.webproxy.yt - German IP web proxy, unblock fast and anonymous
@algorias, I once considered people like you to be weird not to communicate on FB... but for a while now I have really started to mistrust FB. The revelations by Snowden most certainly played a big role, but now that they are asking for freaking IDs I draw the line there. It is now time to really think about me leaving this crap... I think my boss might like that too as I'm sure to do more work now, haha
And often it's quite useful to understand the "standard" to see why deviations were thought up. An example would be non-classical logic.
Was there a common solution (or fix) that did the trick in all those cases?
Since the 'service' supplied to you costs them virtually nothing for the month, that's not really much for them to offer... it's not like their online service requires a massive server farm like an online game, so you are pretty much paying in advance for unspecified updates every now and then. Combine that with security breaches like this, and it's not very attractive.

I still use their CS software professionally all the time, but since they moved to pushing a subscription CC over software you can pay for once, I've started looking for alternatives, and will not sign up for their monthly service charge, which is around $75 in the UK. I expect it to rise steadily with inflation, and for updates to gradually slow down to a trickle, instead of every two years as before, so it's a very bad deal in my opinion - after just about 6 months it would cost me more than it would to buy an upgrade which never expires and can be used for several years before upgrading.

I'll look at other software instead.
I think this is brilliant and something that more websites should be using, especially instead of the nonsense flags. http://flagsarenotlanguages.com/blog/
Right but it's evidence towards the hypothesis "standing for three hours will increase your life span". It seems less likely that people who live longer are inherently more likely to stand.

But yes I see your point. A lot of pop science "doing X will help you live longer" strikes me as complete bullshit.
Agreed. It's seductive though; 'designing' the marketing site also involves imagining all those users that are going to visit the site and know instantly that it solves their problem. Marcelo Calbucci provides a good checklist of reasons your Startup will or won't fail http://blog.calbucci.com/2013/09/10-reasons-your-startup-wil.... You're unlikely to fail if the "logo was ugly, or the name of the company was bad"
If you've read Clayton Christensen's books, you know that after "integration" comes "disintegration"/modularization when the market becomes mature enough, just like it did in the PC world many years ago.

This might be what disintegration looks like for smartphones. Maybe our devices won't be just black boxes we can't get into in the future.

From Geoffrey Moore's books (Crossing the Chasm, etc) we also know that when a market becomes "mature"/saturated, the companies start to "mass customize" their products. We can already see the beginning of that trend with multiple colors for devices, multiple backs, etc, instead of the previous just black, or black and white.
True but to aliens? With the massive cost and time delay (and possibly risk) of transportation? If it happens at all it's just for novelty/luxury.
At the risk of sounding like a complete idiot: can't they send on slightly different frequencies or wavelengths? Or: why don't they just copy the design of antennas in mobile phones?

What's different technically from mobile phones?
The Android trend is for larger devices, while the electronics keeps shrinking. The last generation PCB for my last 7" tablet would easily fit into my current 4.3" phone.

> you won't get an external screen or upgraded processor on a flimsy usb-alike connector.

Current screens are already connected by flimsy connectors. Have you tried changing screen on a phone in recent years?
Yes. We are introducing PPA with this release. You can read the announcement at http://sourceforge.net/mailarchive/message.php?msg_id=315735...
This is most valid, data should be centralized, not distributed and not in the hands of facebook.
Imagine that there would exist a website that contains all your personal data with 1 password, websites request access to a part of that data and if this website also actively checks that it is valid data that the site is requesting to function, I would pay for that.
Are we seeing two different HNs? I see Lessig's post at #80 and 245 points.
I hear ya. And you know, I've come across a few morons who insinuated to me that I am anti-social and have Aspergers' because of my resistance to using Facebook.

I think this is the genesis of it all: http://www.dailymail.co.uk/news/article-2184658/Is-joining-F...
Facebook already has a good mechanism for validating account owners which involves showing users random unlabeled photos of their friends and asking them to guess who's who.

I guess an excuse like "you got hacked" helps you get much more important information from your users.

No one is talking about how all of the sudden, a lot of accounts supposedly got "hacked".
There is only one explanation I can think of and I am not sure I believe it myself: Apple fan boys at work?
> I can refuse to let you into my house if you won't show me your passport. If you don't have a passport, then I can just refuse to let you in no matter what. How does that change if I'm running a business? Or a web-site?

Well, you would presumably be keeping some kind of record of my ID. Perhaps you write down my name, date of birth, and passport number. As a business, in the UK you would have to (amongst other obligations):

* Not keep the data any longer than is necessary
* Update any inaccuracies in the data upon request
* Tell me what data you are keeping upon request

It's not about asking for data, it's about what you do after I give it to you. (NB to those wanting to know more about this, these particular obligations are due to the Data Protection Act)
Yeesh, what sensationalist garbage.
> a lot of homosexual people got beaten by far right / nazi-like groups.

This IS a lie. Do you have any sources?

There have been one attack on a gay couple, hugely used by the government and their supporting medias. Newspapers have implies (no facts) that the culprits where members of the strike against same sex marriage or far right activists. There was then a huge huge buzz to shame the strikers. And finally, 4 months later, the police arrested 4 youths: 3 in a "cité" (public housing, "ghetto") and one was already in jail, all of them well known of the police services for violence facts.
http://www.leparisien.fr/paris-75/agression-homophobe-a-pari...

Some people in the comments do say that the police delayed the arrest so that the government could shame the protesters against same sex marriage.

One more thing, the man beaten reacts to the arrest on a far left web site.
https://bellaciao.org/fr/spip.php?article137205
And he is in a complete deny, not being able to recognize that those who beat him have nothing in common with those that protested against same sex marriage.
Added an issue at https://github.com/fish-shell/fish-shell/issues/1071
Reminds me of The Wire episode "The Pager" (Season 1, Episode 5) where the dealers were using a code to send numbers to pagers.
http://www.youtube.com/watch?v=DQBlq45c1T4
(clip shows the reveal of how the code works)
You cannot. You can only use the facts that the original account creator provided (mail address? postal address?) and nothing else.

You never had a government id to begin with. Maybe my government id doesn't match my account name (I know.. I violated the rules in that case.. Oh I am sooo bad). Maybe there are people with similar/the same name.

How would you make sure that 'government id' presenting person A is really the person that created any specific account?

If you cannot recover the account with the means you were provided during registration/normal usage, bad luck. Government ids won't help here. Ignoring the problems of 'faking' those (how can you judge that these documents are valid if you just get a crappy picture/a xerox or whatever, in lots of languages?) to do more harm than good.
that six by my count
Google will do the same thing soon. It wants one google account per person, and using real ID is the best way to do that.
Why?

I use Django on the server side, the documentation is superb (compared to Angular's). I hardly ever need to dig inside the code, unless I want to do something quite special.

I have a good idea of how the framework works, what pieces fit together where, but I never feel the need to go in and read the code for it.

And what about proprietary software? I am sure there are plenty of frameworks where you can't get to look at the code.
Sorry should have been clearer. My point was: the "Winter is coming" post was posted around the same time as Lessig's post, has less points and yet is at #20. How does that happen?

Btw, only 15 minutes after your original post, and Lessig's post know is upvoted to 245 points already yet is 2 places down...
For this guy yes, but for not necessarily everyone. The messages don't seem to be particularly long so it's unlikely a frequency based attack could work. Also if it is then these guys will not exactly be using the Queen's English so they'll likely have a different letter frequencies for their dialect.

This lad in the article has a real knack for it though, I guess he knows the subject matter pretty well (i.e. knowing the kind of things people will be saying in certain scenarios, the word choice, how they address each other, how the gang hierarchies work etc) and has a good mind for the kind of on-the-fly ciphers that these gangs employ.
They should certainly be thanked, but it points to the larger problem that funding open source software in a stable, predictable way is hard.

When it's basically a charity, then it's probably going to get the axe pretty early on when there are financial troubles.
Fish works great out of the box but it's also highly configurable. Their argument about not learning anything is void - you learn more by trying new things. Also, using fish doesn't mean you never use bash again, I still dabble around in bash often.
This bug is very annoying. Two people in my close circle of friends/family have this issue, which makes me think a) it's pretty common and b) it was catchable in QC.

I spent 2 hours this week trying to upgrade, back-up, restore, etc a relative's phone, without success. The fact that you can't downgrade from iOS 7 makes this doubly painful. Support from Apple was pretty straightforward for my friend: "Your phone is out of warranty, sorry, we will not help you." The fact that this warranty is illegal under EU law is left out.

Finding that this is an incredibly common problem amongst users with a recent iPhone (4S, still being sold by Apple), and seeing that Apple is actively censoring people for offering warranty help, is very frustrating. It's sad that it takes someone famous ranting about Apple's censorship to solve the issue, when it all could have been avoided by saying "We are aware of the problem, it has to do with the iOS 7 upgrade, we are working on a software fix, if we can't fix it we will replace the affected iPhones."
I tried these, and they explain all the components nicely, but don't explain how to put everything together to get a mid to large scale app put together.

Maybe I just struggle as I am new to front end development, and to stuck in my server side mindset.
Mozilla’s Lightbeam Firefox tool shows who's tracking you
Hash Table Denial of Service Attacks, Revisited
Yes, but there is no requirement to have one. UK law doesn't even require a person to have a name.
Why is not the same as "built-in">?

I'm asking because i'm using powershell with conmeu for almost 2 years now without a problem. Plus with conmeu i also run vim and farmanager (old school file manager ) in 2 separate tabs.
FB has great face recognition software and multiple tagged photos of pretty much everyone who has an FB account. Show 20 photos (or 42 or however many you need to get the chances of a lucky guess small enough) and let me - click on me. Give me 2 chances and if I'm wrong both times give a link for a quick video chat with a FB rep for ID purposes.
He knows. Check out his comment history to see why he is.
pg mentioned in a thread about 'where did X MS post go' that posts can trigger flamewar detectors which penalizes the post heavily.

It's not a simple votes/age thing.
Yeah, they have become very persistent in wanting you to link your google and youtube accounts, for instance. For the first time ever, I'm seriously considering ditching gmail.
Then do you have counterexamples for sites you would say have a modern look?
Committing a crime by doing what? Providing a utility bill that isn't legit/shows your name instead of mine? Providing a fake 'yearbook'? A 'bus card' to hijack an account?

Obviously hijacking an account is illegal, but the means to do it probably aren't: A good number of these 'proves' aren't special, aren't protected documents as far as I can tell. There's nothing illegal about 'forging' a yearbook page.

I'd say these measures are providing nothing but decent ways to hijack an account and have zero legitimate uses as means to identify myself to a random web application.
This idea has been debunked several times already. https://www.google.com/search?q=phonebloks+debunked
Does anyone have experience with Enyo (the framework from WebOS)?

It claims to be adding MVC support in the next release.
Christ, the problems of a princess. Sell the Pro and buy the XPS.
I've been turned off by the Angular docs (feels like how I found API refs intimidating when I started coding) - can anyone recommend an alternative or book?
@DominikR, actually your question should not be downvoted at all as it looks like you genuinely want to know how you could solve this security problem.

First off, it is important to know that all IT systems have a scale from "weak" to "strong" in security terms. There is no 100% hacker IT proof system. Generally the more secure a system is the more of a hassle it is to use. Seeing as FB has just been accused by Snowden of handing over mass data it has on various users to the NSA, it would be very foolish for them to ask for this sort of very private data especially at this time (when a lot of people don't trust FB)

As for your question, here are some of the security workarounds FB could do instead of asking for a freaking ID (which by the way can easily be forged)

- Don't lock the account, rather suspend it for just a few days telling the user that he should reset his password

- Get a friend (that has been a friend on Facebook for ages, not just a few days) to authenticate the real user (for this to happen it is assumed he must actually contact his friend without using FB as his account is blocked.)

- A simple unique "reset your account password" URL sent to your e-mail address.

- OTP sent to your phone

Those are just some ideas I thought of in a few minutes. I'm sure there are a whole host more.
Goodbye Sticky. Hello Ara.
I don't think flagging pushes a post down, that would not be in the spirit of how this community was designed.

Flagging is just supposed to summon a moderator and that's all.
You're quite right of course (although actually, it seems very plausible to me that fit people are more likely to stand more / choose jobs where they will stand more) My comment was mainly out of the frustration I have because so many interventions are very difficult to do and so I want good confidence that they will actually make a difference, but most research just gives you at best strong correlations.

Still, I've got a standing desk now...
Atlast they did it..we can expect same from all other sites soon..