skysight-inc/HackerNews huggingface dataset:
Not necessarily, it is not at all clear that the government has the authority to demand a private business surrender SSL keys. Such an could very well be in violation of the 4th amendment.

You are correct, in that the government does have the authority to demand information on a specific person, but due to how Lavabit was designed that information was encrypted in such a way that only Edward Snowden could provide the password for decryption.

In most systems data is stored in plain text (or encrypted with a cipher key known by the system administrator), so surrendering data in readable form is not an issue.
The quick search I just made for suicide rate per capita shows the rate in Singapore is kinda average.
If you think it as something similar to DNS it's not so shocking. Right now we are handing cash to get a usable domain name, or ask some other entity to share a space on their domains. Now you'll also pay for you SSL certificate or ask some other entity to let you share a piece of theirs.
So well that it crashed/froze icweasel...
Postgresql's explain command actually, while cryptic, contains the full explanation behind the planners' decision. With that info, it's quite easy to force it into a given path.
A hacker's journey: from cook to chef (6)
Thats a fair comment, but in a similar vein; do you trust your own ability (as manager I presume) to evaluate the work output and business value of the employees? Or otherwise do you trust a / your manager with this?

One thing that is true, is often times the manager has more information about the various reasons for certain choices and goings on in the business, and thus is in a better position to evaluate people.

The question then is just, how do you make sure that manager do not discriminate based on soft indicators (personalities match / clashes / favouritism etc.).
TL;DR: the country is all right, just didn't like it that much
That sounds just like TOTP.

I use Google Authenticator on iOS and Android. It's just a standards-compliant (RFC 6238) TOTP app, not anything Google specific. I've got six logins using it - gmail, Dropbox, Amazon (AWS), Github, Digital Ocean, and an internal service.

One thing that is a bit badly done - and I understand why - is making it easy to have "redundant duplicates". When setting up a new TOTP three factor auth account, I need to get my iPhone, iPad, and Android phone all together and manually type in the seeds (or QR code them) to all three to ensure I'm not completely screwed if I lose the only device with the magic tokens…

I'd love to have more of my important stuff secured with TFA/TOTP.
Bitcoin HITS $400
Bitcoin layperson here.

What's the deal with the volatility?
There is a typo in the addons stuff on "Singel Sign On" it should be "Single Sign On"
More screenshots https://cloudup.com/icq8MzUMUGU
Ops, will correct it later today. Thanks
this + IX would be perfect
Don't worry, you just don't understand how TLS works :-)

The CA never gets the private key. Instead they get a certificate signing request (CSR), which only contains the public key part. They sign that.

Oh, and then there is perfect forward secrecy, which basically means that even the servers private key is not the one used to encrypt the actual data (after the initial handshaking, and only for suitable cipher suites, subject to downgrade attacks).

Disclaimer: at least, thats how its properly done. Some CAs offer a "send us your cert and we'll sign it", and dumb people who shouldn't be admins use it because it's (slightly) easier to use.

But you got the conclusion right, the notion of CAs is problematic.
And even if your mother did not teach you much, you can get most of the lessons from "How to make friends and influence people"
http://en.wikipedia.org/wiki/How_to_Win_Friends_and_Influenc...
re.pl is invaluable to the modern Perl programmer (as is cpanm).
It's something we're tremendously interested in as we'd like to be able to reach as many devices as possible. In fact one of our favourite devices to play with is the mk808[1] which is natively an Android device. We've had to put Ubuntu on it to get it to play along, but the Android install still performs a lot better (and needs no maintenance from us) so we'd love to just be able to work with that.

What we've done gets Docker over the 32-bit and "ARM architecture" barriers, so Android should be very feasible. Even the 3.8 kernel shouldn't be absolutely necessary since we got the devicemapper version of Docker to work (though there may be other gotchas).

In other news, chromium can now run on Wayland, which can run on Android, and also Docker can run chromium inside it, so Docker-on-Android is the last missing link for some pretty mindblowing use cases.

If anyone's interested in working on that, my email is in my profile, we'll help however we can.

[1]: http://www.geekbuying.com/item/MK808-Dual-Core-Android-4-1-J...
While it is really volatile, it is always going up and up. At least that seems to be the trend.

This is a revolution. This is total free market. The rules are new and might not be near similar to any other trading.
The story has absolutely nothing to do with 4chan and doesn't even understand what "4chan party van" means:

http://knowyourmeme.com/memes/4chan-party-van
War is peace, right. The faster and more we kill, the quicker we will be at peace?
A country could enforce openess of the source code for imported software and firmware.

- If Toyota (or any car manufacturer) wants to import cars into my country, then they better show us the sources of their firmware and software (and let us re-compile it and re-install it, to make sure it corresponds to the embedded code). And let the papers compare the code quality of Toyota vs. BMW.

- If Microsoft (or any software vendor) wants to import software into my country, then they better show us the sources of their systems and applications (and let us re-compile it and re-install it, to make sure it corresponds to the binary code, and doesn't contain backdoors to the NSA (or the MSI, or the MI5 or whatever).

- and so on.

And actually, citizens can do the same at their level, not letting enter their house any device or software whose code is not open source or even libre software (so they can recompile it and reinstall it on their hardware).

But a country has more weight than a few citizen that would be qualified of lunatics, and has more resources to analyse and validate the software and firmware.
With the way Firefox gives that scare-popup on a self-signed cert, mandating SSL would only make people that cannot afford (or cannot get) a signed cert into second-class citizens on the web. Remember that one of the primary benefits to "the internet" is that the all peers are equal as far as the network is concerned, and the barrier to entry for publication is reduced to zero.

Anything that ends up as a barrier to increase that cost only serves the interests of those that wish the internet could be reduced back to "cable tv", with gatekeepers able to regulate what is published while taking in a publication fee as tribute.

I am usually one pushing hard for encryption, but more PKI is not what is needed. The idea above about using DNS to distribute keys is a good idea; I would also suggest simply mandating that self-signed certificates [1] be treated fairly, without the scare-box. Either would still allow somebody to setup a home server with a simple apache/whatever install, no outside approval needed.

[1] - Note that I said "fairly", not "the same as authenticated certificates". Encryption without authentication is still a benefit, and should not be given the popup that scares people away currently. Just don't mark it as "secure" with the closed padlock!
This is not surprising.

Bitcoin mining difficulty has ~doubled since October, when the price was ~$200. It's basically pegged to the minimum profitable price for mining.
Prairies vanish in the US push for green energy
You don't even need to burn your own disk space for those lists. Try just feeding '5f4dcc3b5aa765d61d8327deb882cf99' into Google. Or 'f25a2fc72690b780b2a14e140ef6a9e0'. Or pretty much anything else that's ever showed up in a publicly leaks MD5 password dump (or plaintext password dump).
Ok, so web browsers that use Webkit will still be supported. "Ditches Webkit" means Netflix no longer bundles Webkit in their non-browser clients.
"The suicide rate in Singapore is rising at an unprecedented rate of 29% a year. With people between the age of 20-29, the increase is a horrifying 80%."

The author said that it is rising rapidly, not that it is currently high.
Anatomy of a re-brand: Idea to reality
Stephen Hawking: physics is LESS interesting after 'God particle' discovery
Seriously? I agree with the OP. And I've spent quite a bit of time in Singapore when I was younger.
Have you tried StartSSL?
>If you're not willing to provide at least a tiny part of the safety net

Nope, not a safety net. Safety nets are guaranteed. One person giving doesn't work, it needs to have the participation of many.

> I despise these movements toward compulsory support of those whose only need is a reason to get up and produce.

I don't. I feel that certain kinds of taxes that go toward the entire community are fundamentally reasonable, such as the ones applied to natural resources. And almost nowhere in the world do you have to produce simply to be a citizen. Why not turn part of that money into a check instead of dumping it into bureaucracy?

Why do you care if someone else wants to produce or not? Is the incentive to not be poor too weak? You insist it be an incentive to not starve that motivates labor? Productivity per hour worked has skyrocketed in the last 500 years. At what point do we decide that we can spare a few percent to ensure everyone has food and shelter? Never?
Life is short, why spend it in places you dont enjoy?
Security issues aside, it still reeks bad taste though.

Google is saying that everyone on the internet has to dump plugins, dump Flash and create pure HTML solutions. HTML should be good enough for everyone! Everyone except themselves, apparently.

They can just jump to native code on their websites whenever they like. So much for their credibility when it comes to web-standards, eh?
My interpretation of what you have said is that the basic theory of pure free market capitalism is not efficient because of hidden costs. A few follow-up questions, if you'd be so kind:

1) Is my interpretation correct?

2) How significant are the effects of the hidden costs on the (pricing) predictions of the basic theory? (see Note A)

3) How significant are the impacts of the hidden costs (beyond pricing failures)? (see Note B)

My particular concern is that the basic ideas are 'obviously true', and are used to justify all sorts of policies that have real impacts on people's lives, such as unemployment. Personally, and from an ethical point of view, I would rather trade higher efficiency for a 'smoother' economy that minimises unpredictable downturns in individuals' economic fortunes.

I'm also still struggling to see how informative the basic theory really is - I can only see that to understand any novel situation you need to do a whole load of research into all the potential confounding factors.

Thanks for replying!

Note A: If the basic theory provides the first order signal for enough real-world situations, then we could, again to first order, ignore the impacts of the hidden costs. If that is not the case then it seems to me that the basic theory must be incomplete, because to understand the real signal you need to understand the hidden costs.

Note B: If the impacts are generally small, then again we could probably largely ignore hidden costs, but if they are large (which they definitely are in some cases, for example the Deepwater Horizon spill) then surely understanding the hidden costs becomes crucial, which in turn lessens the value of the basic theory.
I've had a terrible experience with them. Some of them try to do code sharing/OT but if I typed too fast they would crash my browser & I lost all my changes. I think my latency played a role but i'm not too sure.

That said I know of people using them with Chromebooks. Its nice because they can code the same file at the same time.
Convergence's "details" page sez:

> Convergence is based on the ideas originally developed by the Perspectives Project at Carnegie Mellon University.
They should just do what ssh does.
1st world problems. Singapore is too easy to live in.
Won't this create the ability for a 3rd party to disable your site by having the CA revoked against your will? For example, in regards to a copyright issue?

Personally, I am against this, as I feel that this is a choice that should be made on a site by site basis.
"Marketing a business as 'secure' does not give one license to ignore a District Court of the United States"

Which is why we should always prefer technical approaches to resisting surveillance. Promising that you will not compromise user privacy is pretty weak.
So he doesn't want to return to Singapore because everything went right in that country? People are never satisfied! He doesn't list a single problem except for suicide rates going up - which on a per capita basis is average when compared to the other countries.
to add a precision to your post: and most IBM and HP's employees are billed by the time. Headcount is proportional to market size.

Google employee's time brings no revenue per se. Headcount is independent of market size (the only limiting thing is customer support whose max is O(log(customer)), and we are talking about google ...)
Hi forktheif,

I am the author of this article. The wikipedia article on suicide rates (which I am assuming you found via google) uses data from 2009 as its source. The article I wrote uses data from 2011 (which is the most recently available.) More details here: http://www.lifelisted.com/blog/happens-everything-goes-right...
We could set something up to donate to him? I think we owe him a hell of a lot. Allowing him to live comfortably is the least we can do. Do you think if a fund was set up it would be hijacked by the U.S?
Yup, I did read the article. But thanks for the recap
Top Scientist: Another Fukushima Quake Would Mean US Evacuation, ‘Bye Bye Japan’
Do Not Force ISP Filtering of Pornography & Other Content: UK petition response
Here's a suggestion:

http:// is encrypted but performs NO certificate check.

https:// is encrypted but performs a certificate check.

Done.
When I was a student and had lots of free-time in the summer. I did some trips where I intentionally spent long hours on airports. Taking advantage of the many low-cost airlines in Europe, once I managed to buy a whole Budapest-London-Cork, Dublin-Barcelona, Barcelona-Budapest trip for $120. That made a trip with 5 flights, 8 different airports in 7 days and 3 cities where I actually stayed over.

I find airports very neutral in-between spaces and thus perfect for concentration and work.
It is worth noting that Windows XP is EOL April 8, 2014.
Secure is good, but SSL is not the right protocol.
Effect size is important, because all events in the real world except for true random numbers have some correlation.

Eating an apple might help a broken leg heal faster or slower. There is certainly an extremely small correlation, and with a sufficiently large number of controlled experiments, a result rejecting the null hypothesis with p < 0.05 will be found. The required number of experiments might be astronomically large, but if any correlation exists, it can be found with enough samples.

But without looking at the effect size, the result is useless. Even if eating an apple helps your broken leg heal 2 seconds faster on average, it is pointless to suggest this as medical advice.
>One could argue against this, but let’s assume that it is true.

Hmm. It is true. Which free software are people using to search more than Google search? Which free software won Jeopardy?

> Are you arguing that it is impossible to make money with software which is not forbidden to share, when lots of people are doing it today?

I never said that. But forcing people to give up their software would result in a bleak Soviet like future for all of us.

>Let’s say the world stopped allowing ideas and other non-rivalrous goods to be considered property.

Then why should anything else be considered property? Are you not denying my right to enjoy land that you claim to own?
how about 'because it is an authoritarian single party state'?
The irony is, that 4chan itself uses cloudflare according to moot > https://news.ycombinator.com/item?id=6682625
Space Images: The Day the Earth Smiled
There's nothing in this technology that demands payment. You can distribute your own root certificate to clients, or create a free certification authority (or join http://www.cacert.org/), if you'd like.
On sage advice, the site has moved to http://pythonwheels.com/
Indeed. In a few decades the suicide rate will be 200%.
Bram Cohen Understands Why Pirates Prefer BitTorrent Over Netflix
The 3D printing of the parts is cool, but the overall implementation is not out-of-this-world awesome. Still, neat. Good job.

I recommend some more work on the training part. One method is to define the different positions you want the arm to be in, then have it interpolate the movements to go to the different position. Just from watching it move, it seems you're sending the servos each key-position, causing it to jump and not have smooth movements.
Did you read the linked message?
How exactly do users benefit from DRM?
Did you go to the store who's Ad Google just showed you?
a much nicer way of looking at simple data!
Anna Get's a Handle On Her Love Life
Nowhere in the article does the author blame this for the perceived issues he mentions. In fact from his tone, this seems to be a positive in the way Singapore has improved in modern terms.
So will this prevent NSA et al. spying? Or have we reached the stage where they have all of the relevant certs already embedded into their ISP black boxes?
AFAIK, access to the baseband and vice versa is through a network inside the phone. Physically, these two computers are separated, and communicate only through a well-defined network interface. No poking in other computer's memory.
I have yet to see a single use-case where DRM has improved my experience. Like most people, I have seen countless cases where DRM has significantly degraded it.

Your statement is in dire need of things to back it up.
> Keep in mind certificate pinning is a fairly (very!) recent
> addition to the internet security landscape

As with much technology it is a re-invention of how we used to do things.

Many corporate websites still use client-side certificates to ensure that the client is talking to the correct server.

In the early days of Internet banking, some bank sites used to do the same; I received a cert from my bank on a shiny 'CD-ROM'. Sadly they discontinued that validation along with publishing their PGP key for secure e-mail. A step backwards.
Fun fact: Cert-free SSL used to work with some browsers, at least Mozilla, but then they disabled the anonymous SSL modes from the browser. I was using it and was saddened...
This is basically a shorter, more weakly-argued version of William Gibson's first piece of non-fiction writing, Disneyland with the Death Penalty:

http://www.wired.com/wired/archive/1.04/gibson_pr.html

EDIT: not that it isn't a good blog. But if you like it, you should really read the gibson article too.
would have liked to visualize with Bar graph rather long page...
No, it's not worthless. It /raises the cost/ of an attack, by forcing an adversary to implement a more complicated, expensive MitM attack, instead of simply using passive eavesdropping/packet-sniffing.

And to those bringing up the tired, old rebuttal of this providing "worse" security due to a false sense of protection: that's only relevant if the browser is written idiotically and suggests this is in some way the same security as the fully-authenticated version. They should not be showing a "closed padlock" and changing the address bar color for self-signed SSL!
The article seems to be a summary of the consequences of modern living, and the loss of "community", "fun" and "enjoyment" which goes along with it.
Ah good to know, doing my research also tells me Django 1.7 will include migrations out of the box with schema change transactions as well. Thanks!
I've lived in Singapore. It's actually a pretty amazing country for such small years into existence.
There are some shady stuff being done in the name of profit at the expense of its population, but then again so does any country that has high taxes with mediocre added value.

This person argues about foreigners - in only to become one henself. Ironyyyyy
Maybe at some point in the future you can actually see real time what companies sell and buy and with whom the transactions are made.
What are you running your web servers on? How do you connect these web servers to the internet? How do you register your domain?

I would assume that you pay more than $100/y (which is expensive for a domain validated SSL cert, btw) unless you're using a free hosting provider at which point it's not your decision what protocol to use anyways.
See, you have your own experience to rely on, but I know very little about Singapore. I read through those few morsels of, uh, peculiar observations, and was left with the feeling that it was perhaps relevant to the author's family and friends, but it didn't leave me feeling like he made a good case for his point of view. I think the article says more about the author than about Singapore, and I'm not particularly interested in the author.

Oh look, he's peddling some self-improvement story, what a surprise. And he's an SEO guy, that explains the writing style at least.

In fact, some of the comments are better than the article. Shorter, too.
Many small sites doesnt use certs like personal sites etc..why should i care as a blogger to make my site HTTPs..its cruel..
I see a lot of reactionism on this thread regarding "kids and chemistry sets". I agree but disagree. With the right supervision, it's awesome. The latter is key.

I had multiple chemistry sets and am not dead and have all my fingers. In fact I was always, with the aid of reference books, mixing various things together purchased from every day shops, purchasing piles of fireworks and doing things frowned upon.

At my secondary school in the early 1990's we were allowed to help ourselves to stuff in the chemical larder as long as we told them what it was for and did the lab safety test first. It was stuffed full of small chunks of Uranium, sodium (under oil) and all sorts of nasty shit that could easily kill you without much notice.

Inevitably we passed that as too dangerous and proceeded to stock up on fumic nitric acid, formaldehyde and ammonia. This was done with supervision.

About two hours later, in a fume cupboard, we had 50g of RDX (C4 precursor) which was considerably more dangerous than the above. We carried this in a metal flask on a public bus to local GSK labs where they did NMR spectroscopy on it. People were interested and quite helpful there. Then we took it to the school field and blew 10g of it up with a magnesium taper. The rest was disposed of by the lab techns (probably by doing the same because they were slightly nuts).

We extracted Aspirin from willow, made RDX, various plastics, thermite, did glasswork, extracted our own DNA, made fireworks and countless other things I can't remember now that were cool.

Now we would be branded terrorists.

Chemistry was awesome and no one was hurt. My understanding for the universe from a physics and chemistry perspective is pretty good due to this.

I would buy this chemistry set in a second.
Running your applications with TomEE plugin for Maven and Maven Profiles
HELP: MongoDB Sharding
Could anyone please help with this?
Facebook Patented Making NSA Data Handoffs Easier
Think coding skills are the end-all, be all?
I'd say the US has more problems than Singapore... And on the topic of taxes, the tax rate in Singapore is actually much lower than in the US (based on CA; middle class).