skysight-inc/HackerNews huggingface dataset:
"Get paid up to $7 for trying new iPhone/iPad games."
The elevator leads to the parking garage, which is where Ladar parks his car. There are a couple of side doors that lead out into a shopping center/dog park, but if you leave that way you can't get to your vehicle easily.

The FBI says he drove away, implying he got in his car, which means he took the elevator down to the lobby and walked through the big glass doors into the garage.

The most likely just didn't get there in time to catch him in his apartment (or missed him while he was heading down the elevator). I don't understand why they are lying about something as stupid as this, though.
Doesn't this just mean the registrar ends up (effectively) being the one who trusts all the random CAs instead?
If you give your registrar invalid contact information, your domain is subject to deletion by policy. Proxy registration is OK, as long as the contact information works.
Hoo boy. This displays some of the worst excesses of infographic tyranny. Just look at https://s3.amazonaws.com/ksr/assets/001/309/747/c057b01519ab....

Just look at it.

The fuck is wrong with a goddamn timeline?

Aside from that the device looks pretty cool, although it's only really useful if you buy a whole bunch of other smart devices.
A new WordPress Android app with major changes that matter
Well done on creating such a clean and clear infographic. Do you have a reference for these statistics? especially the time to launch and 27% of development.
Interesting point. The machine soldiers would solve the problem of rampant soldiers raping locals.

But if you look at drones, haven't the drones been around long enough? Their algorithm still seems to be faulty considering all the civilian casualties they have caused.
Airplane lands vertically on a cargo ship
I really appreciate your work even I'm not interested in Raspberry Pi. But there is one topic I'm interested in and since you've done this port, I really like to get your opinion. With Android 4.4, Linux kernel of Android will be upgraded to 3.8 which is minimum requirement for Docker and since Docker team is trying to make Docker work without AUFS, do you think we can run Docker on Android? This question may be "Can we run Docker on Darwin?" or "Can we run Docker on that Linux kernel and Android inside of it?"
I think you are overstating the amount of control the US has. The US is spying on SWIFT transactions, that's a world of a difference from actually controlling SWIFT.
Open Source Beehives: sensor-enhanced hive design
I only wish you'd consider a (possible different-brand) spin-off that targeted server backup and/or power users :-)

Amazon could use some competition in this space, IMNHO.
> it could possibly be a better judge than even a human

Well then what aout all the children killed by drones[1]?

[1] http://droneswatch.org/2013/01/20/list-of-children-killed-by...
And for anyone that doesn't think this is worthwhile:

We recently had 3 servers have two drives each fail within hours of each other, with about two weeks between each of the 3 servers. These were 3 out of 4 servers that had been configured at the same time, with drives from the same delivery - clearly something had gone wrong.

Usually we try to drive types, but we didn't have enough suitable drives when we had to bring these up. Thankfully we do have everything replicated multiple times and very much specifically avoided replicating things from one of the new servers to another.

When we brought them back online we got a chance to juggle drives around, so now they're nicely mixed in case we get more failures.

For my private setup, I've gone with a mirror + rsync to a separate drive with an entirely different filesystem + Crashplan. Setups like that seems paranoid until you suffer a catastrophic loss or near loss...

My first big scare like that was a decade or so ago when we had a 10 or 12 drive array of IBM Deathstar (Deskstars) that started failing, one drive after the other, about a week apart, and the array just barely managed to rebuild... Particularly because it slowed the array down so much during the rebuild, that we were unable to complete a backup a day while running our service too, and taking downtime was unacceptable. So our backups lagged further and further behind while we waited for the next drive failure.. Those were some tense weeks.
I get tired of this, it's not even close to self-replicating... it can only print a few plastic joints it needs, but most of it is metal, electronics and motors that cannot be 3d printed.
The story of None, True and False :- Python
Bar graph, for ease of comparison:

http://imgur.com/J21Oi7Z
> * Postgres is generally considered to scale to many concurrent connections and many cores. Useful for OLTP.

But MySQL scales trivially to many servers. Postgres replication is finally getting there, but it's been incredibly slow coming, while setting up huge MySQL installations with a dozen+ replicas, with selective sharding etc. has been effortless for about a decade.
Interesting as it is, this article reads as one long-form advert for CloudFlare.
That seems awfully similar to http://perspectives-project.org/

I don't know which one was first, but I wish they would cooperate to establish a standard protocol for notaries.

The model of notaries that observe SSL certificates from multiple points in the internet seems greatly superior and ultimately more trustworthy than the CA model to me. It's not perfect, but it solves the most common man-in-the-middle scenarios and is potentially extensible to become even more robust.
I really wanna know how those IDEs offer debugging.
AFAIK, Lavabit might very well be able to do just that.

If Lavabit can convince the appeals court that providing the keystone to the entire security model of the whole company imposes an unreasonable burden (in my mind, a quite convincing argument), they can vacate the decision and thereby set some precedent that compelled key disclosure by subpoena is, at least in these circumstances, inconsistent with US law.
What random CA's? All the registrar does is say "I the owner of COM have delegated EXAMPLE.COM to FOO both by pointing the address to their servers and signing their public key." After that example.com can delegate within its domain both the addressing (regular DNS) and the signing of certificates for subdomains.
You really can't manage passwords in your head any more. At least not enough of them.

In my head I've got three banking passwords, two domain registrar passwords, and one "important email account password" (which is backed with TFA) that's the email that password resets get sent to - all are 16 random chars, and also two five word GPG passphrases. Those are _only_ in my head (well, one GPG passphrase is also in a sealed envelope in work's safe). Everything else is in 1Password locked behind a 7 word (intentionally misspelled) pass phrase – there are right now 866 sets of credentials in there - mostly 16 or 25 character (depending on when they were created/updated) random upper/lower/digits/special strings - with a few exceptions where sites/services won't let me use 25char passwords or sometimes prohibit "special characters" (Like your slow cryptographically secure hash function is susceptible to SQLi or XSS? That's why I can't use quotes or angle brackets? Really? Or are you actually incompetent?)

The 1Password file is synced between 4 machines in two physical locations plus 3 mobile devices, and time machine archived on one machine in both physical places - and one of those time machine archives is EncFS encrypted and stored on Dropbox and archived on S3 weekly, the other is daily rsynced to a pair of local drives. The passphrase isn't written down anywhere - but a hint which'd remind _me_ of the passphrase but would be innocuous/meaningless without sufficient context is written down and safely stored in two places. I _would_ be screwed without my 1Password data.

In my more paranoid moments, I wonder if both EncFS and 1Password's encryption is reliable enough to make leaking that file to Dropbox (which means S3/Amazon, which means the NSA if they're ever curious enough to ask Dropbox and/or Amazon for it). I also wonder about the attack vectors I've opened by having the 1Password file and app on two iOS devices - potentially leaking them to Apple and hence the NSA. But if the NSA ever come looking at _me_ specifically, I'm going to assume I've lost everything already. I don't _think_ any of that'll get caught up in dragnet surveillance though (except for when I get clients asking me to mail them hosting/admin/registrar credentials to their gmail or yahoo email addresses - facepalm )

(Actually, I also have my AppleID password "in my head" - since I need to type it in too many places where 1Password can't autofill it for me...)
Saying that you can only use this new technology if you are willing to hand out $100 a year to some third party provider which you really don't see the need for is a major hindrance to adoption.

Imagine if every former "free" technology (tcp/ip, email, http, c-compiler, whatever) demanded you pay $100 annually to use it. How many hackers creating things which we now take for granted do you think would have been discouraged from doing just so?

Security is nice, but that doesn't mean it's worth it or required all over, at any cost. De-facto requiring a paid "license" to operate on the internet is not the right way to go.
So because someone wants to make a living on something they love they're untrustworthy? I agree I would rather have open source applications running on my phone, however I also feel it is a good thing they are monetizing their efforts. I prefer a more stock version of android, but any additions to the android ecosystem strengthens its ability.
I think the team is trying to emphasise the "Sphere aspect"...
This. It's worse then useless because it's the illusion of security.

It's too bad, because some type of web-of-trust mechanism for HTTP would be an incredible idea - it doesn't solve the trust problem entirely, but it would enable users to share their trust profiles amongst or against trusted individuals.
I agree that "making laws" isn't necessarily a solution, but it lays the foundation of future debates. This topic would no doubt involve a ton of debate and it would be VERY useful if it materializes into international law. "Why" you ask?

Well because when someone violates it, there would be no question of whether this is right or wrong. We wouldn't have to go through the whole above debate all over again, just to come to a consensus that this was evil. You could just cite the law and (hopefully/in an ideal world) prosecute.

Ps: They still might be able to cirumvent drone strikes by saying that by defintion of war agreed upon in the first geneva convention, it isn't war. so this rule doesn't apply. I hope they think of this when making the law
1st. screenshoot. https://cloudup.com/cQ3xJdoCwjj

2nd. screenshot. https://cloudup.com/c9Qo3BKsajd
Once they served him with a warrant (this was several weeks before Snowden came public with anything)

According to the relevant wikipedia entries lavabit was served the first court order the day after snowden revealed his identity.

https://en.wikipedia.org/wiki/Lavabit#Connection_to_Edward_S...
Steve Ballmer Has Made More Than $1.7 Billion Since Firing Himself
> The most likely just didn't get there in time to catch him in his apartment (or missed him while he was heading down the elevator)

That seems to fit what's said in the article and what Levison said himself ('I was just leaving my house'). What the FBI said _could_ be read to imply causality between their knocking and him leaving, but perhaps it's due to paraphrasing (and putting a spin on) the agent's report by the US attorney.
Definitely needs some work on the audio mix, I found the dialogue quite hard to hear over the cliché Requiem for a Dream-esque music.
You have to run your ANALYZE commands... I've run into this issue on very volatile tables (lots of inserts/deletes). With these, the table profile will change and without statistics the query planner might go on the wrong path.

That said, it's unfair to compare with MySQL's planner, which, although it is there, is so infantile that by comparison you can say MySQL has no planner. Example: Invariant sub selects run on every row of the master query, instead of being stored in a temporary table. Think SELECT a FROM foo WHERE foo.b IN (SELECT b FROM bar). Or another basic one SELECT a FROM foo ORDER BY b LIMIT 5 where there exists an index on b actually sorts the entire table instead of using the index and jumping out when it hits the LIMIT.
Hand/neck/finger/face tattoos and why I won’t do them on you.
I got a LOT of ‘asks’ about why I’ve decided not to tattoo the hands/necks/fingers/faces of my clients anymore, so rather than respond to each I’ll put a little something here. This is something I’ve been considering implementing for quite some time and a particularly negative experience the other day tipped the scales. This decision was based off of two major factors with many little reasons littered between them - Science & Society. I’d like to make it a point to say I am simply speaking for myself as a licensed tattoo artist in the state of Washington and in no way do I represent the thoughts/feelings of my industry as a whole.
You can code bugs and security failures into a FPGA as well as in software.
They were given the data, as required by law.

They were not able to decrypt the data without the account password, which can only be derived using Snowdens personal password, so that poses a problem. To get the password they were forced to demand that Lavabit hand over private SSL keys (so they could potentially intercept the password in transit over the network). Now the courts have to decide whether such an act is legal or if it constitutes a violation of the 4th amendment (and possibly free speech). Should be interesting to see how this pans out.
I agree. To get good Linux font rendering on Java one has to apply a patch to OpenJDK and build it.

It's doable, I've done it, but it's not a quick process.
Thanks
I got the information in first section "How many apps are there" by just google "how many ios/android/windows phones apps are there". For the "time to launch" and "27% of development" I got the information from the survey I conducted. The participants were asked to give a rough estimate.
This isn't going to be trivial to fix, it would require the vm to provide a different taylored scope to each function.
Don't get fries. Don't get a drink with sugar added. Definitely don't get a milkshake or cookies.

The burger itself is fine. You wouldn't go to Subway for a nice sandwich and drink a liter of Coke afterwards and a bag of chips and complain about how unhealthy it is.

Here you can get some nice fresh crispy raw carrots instead of fries.
Thanks for sharing.

It honestly surprises me that MS gets away with having such poor working conditions and team work [1]. I guess the end of stack ranking shows that things are changing at least.

I know lots of people in IT, but somehow no one who works at MS [2]. Its seen as uncool or worse unmoral in my circles [3]. And these people, including me, didn't even know how bad the working conditions are at MS! I always thought of MS to be like one of those 'defense' companies [4]. You either don't really want to work there, because even if the technical challenge and the available resources are great, you don't agree with their mission or you fear that your friends and peers would look down on you. But to make up for that, they have really good work conditions [5]. Thats at least what I hear from people who worked on military projects at Raytheon, Boeing and EADS.

Hope you don't take this comparison as an insult. I think MS makes great things! OneNote, VisualStudio, Kinect, Age of Empires are all great products. And personally, I would have much, much (!!!) less reservations against working for them, than a so called defense company [6].

---
[1] And, I can't help myself pointing out, that MS's version control system is called 'Team Foundation'. New speak?

[2] The exception is MS Research, which is awesome, but thats not really MS.

[3] Most of us were born in the 80's (and many including me in Germany) and grew up hating MS. Even if you wouldn't use computers on your own, everyone including parents and teachers would tell you how bad MS, their products and their business practice were.

[4] Other examples are 'big pharma', tabaco, finances, esp. investment banking. I know people working in all of those industries. They all report excellent work conditions and compensations. Some are ok with the company actions it, some are proud to work there. But all of them look very self aware when they get asked "What do you work?"
The counterexample are jobs like social work, medical care taking, NGOs, academic research and yes, usually engineering as well. Many people want to work their, either because they believe in it, or because it brings them social prestige. As a result the high demand allows for poorer working conditions and less pay.

[5] Salaries at MS are still very good, as far as I know.

[6] Though, DARPA projects are very attractive. I can't deny that.
Did I really?

WallStreetJournal :"Both houses of the U.S. Congress have drafted legislation threatening to penalize Swift's board and owners if they didn't ban the suspect Iranian entities from using its network."

http://online.wsj.com/news/articles/SB1000142405297020479530...
Our history probably has something to do with it, but its also an issue of the media raising awareness since the 70s.
Be this out of fear-mongering to boost sales or of a sincere feeling of responsibility, it has influenced the views on privacy and surveillance of a large part of the population.

Its not just the Stasi btw., one of the canonical examples is the Nazis use of data to find and select the jews in the holocaust. This has influenced what is allowed - and especially what not - to be stored about each citizen in Germany tremendously.

Disclaimer: I'm german.
If CloudFlare think they can stop 4chan from griefing them, they have another thing coming, I think. Calling out 4chan like this is like drawing a picture of Muhammad: just don't!
He's probably talking about client-side IDS, such as in a corporate environment.

It's worth noting that in such an environment, he likely controls the client machines themselves (ie, only corporate machines on the corporate network), so it's straightforward to just push out a trusted Certificate Authority and intercept anyways.
in line with the mention of the Geneva Convention in my other post, i just remembered something. I am not sure how legally correct this is it, but someone brought it up in a Model UN that govt officials who sanction drone strikes can NOT be tried for war crimes because they aren't technically Soldiers. If this is true, wtf? The rules seriously need major revision in sight of modern tech
That's a great example of what I worry about. On my first server I bought 4 identical drives when I built it and then when I needed more space I again bought 4 identical larger drives. Since this was all on RAID5 the risk was actually pretty high. On my second server I bought two of each manufacturer and used RAID6 so now I can survive a whole batch going wrong at the same time. Next time I need to build one from scratch I may even go for 4 different drives (mixing red/green/etc).

What I am doing now as soon as I get unrecoverable errors from the drives is to replace them one at a time with whatever is the best cost/TB drive. Whenever all the drives have been upgraded I can resize the array to the new minimum drive size.
Good reasons not to use SSL:

SSL has a significant number of required packet exchanges at startup, so latency for small objects is much larger; this is especially noticeable if there's a high round trip time between the client and server.
SSL blocks proxy caching.
The CA situation isn't great; especially if you're supporting older mobile clients, which basically never update their root certs.
Debugging is harder (and HTTP/2 already gets complaints about that)
Even if people are manning the drones, you could have one person handling thousands of drones, and just being offered a long series of yes/no prompts ("Shoot here?"). As long as there is any way for a country to decide to deploy drones they will find a way to comply with the letter of whatever restrictions you put in place.

The drones are perhaps a good opportunity to look at the broader picture. Maybe we need to recognize that one country sending weapons and troops into another country on their own initiative is a fundamental violation of human rights and basic morality. The only way troops or weapons should be deployed is to stop greater harm from happening, and the only entity that can judge the greater harm is one that looks beyond national borders.

For me the simplest way to "clean up" war is to make all war illegal, and only allow troop and weapon deployments outside of a country's own national borders under the UN banner for peacekeeping purposes. This sidesteps the rich kids vs poor kids issue because there is no us vs them, there is only the global community and how it polices itself. Not that the UN is necessarily ready for such a thing, but even in its inadequate capacity it would be a whole lot better than the horrible inhumane mess we are in right now.
Physicists plan to build a bigger LHC
I recently bought a PositiveSSL certificate for less than $3 per year at gogetssl.com. That's less than one third of what I paid for the domain to use it on. If you can afford a domain, you can afford to put a SSL certificate on it.

Low-cost SSL brands like PositiveSSL and RapidSSL are so cheap nowadays, some registrars hand them out for free if you buy a domain. And they're compatible with every version of IE on Windows XP, unlike those free certs from StartSSL.
Why would you pre-render if your data is not changing continually? Don't you just have static content then?
Google will harm your business
You could buy a second copy of the software for the child. You saw enough value in it to consider letting them use it and you saw enough value to buy it for yourself. Either you consider the asking price fair for what it delivers or you don't. If you don't think it's a fair price then you can either write something yourself for them or spend your own time helping them learn.

There's no dilemma preventing you from helping the child.
This is at the top of HN right now: https://news.ycombinator.com/item?id=6722292

And here's a -fun- / alarming story of someone I know, which I wrote up on my blog: http://williamedwardscoder.tumblr.com/post/24949768311/i-kno...

I'm not dismissing what you say, I'm saying that alternatives don't look much better right now.
Not hating Man Whiskers but Haiyan happened.
Our Fall collection #3 for November was supposed to be dedicated to Movember for which we were planning to donate 10% of our profits to Prostate Cancer awareness (we will still be doing this)

Typhoon Haiyan, one of the strongest storms ever recorded has completely devastated parts of the central Philippines. The death toll is estimated up to 10,000 with hundreds of thousands more displaced. The country has declared a “state of calamity.”

We will thus be donating 100% of all profits from our Movember themed collection #3 (released earlier today) to the UN World Food Programme.

(we will be donating 10% of our proceeds from our Winter Collection #1 to Prostate Cancer Awareness).

For those interested in donating individually:

USA: Text AID to 27722 to donate $10
UK: Text AID to 70303 to donate £3
Canada: Text RELIEF to 45678 to donate $5

Or donate here: https://www.wfp.org/donate/typhoon-philippines-b

These folks need our help and are in desperate need of clean water and food.

To all our friends in the Philippines, our hearts and thoughts are with you.

Our official announcement here: http://seat14a.co/1hF7ioi

-Seat 14A
12 IT security startups to watch