skysight-inc/HackerNews huggingface dataset:
Bitcoins itself are not unsafe. It's just a keypair (public/private key). You can create a so called paper wallet on your machine and use the public key to transfer money to that address. Nobody can steal it from you in that case.

The problem is: In order to for transactions to work fine you'd need to run the bitcoind client on your machine. So you have to secure your machine and need to run the client.

This is quite difficult for some people so a lot of web services offer you an online wallet. There the private and public key is on their server. These services get hacked quite often. You basically trusting a stranger with all your money.

The exchanges also provide you with a wallet. A lot of people are lazy and keep their Bitcoins and their money in the exchange. But some exchanges store the money they don't actively use in so called "cold storage" i.e. on a computer that is not connected to the network and webserver of the exchange. In that case you can hope that your money get's refunded.

If you store your Bitcoins in an offline wallet and only use exchanges for buying or selling the Bitcoins and withdraw your coins or money after the transaction you can minimize the risk.
Everything about warfare has always been stacked for the rich. Honestly, how could wealth disparity exist if didn't gain the rich the power to defend their wealth against those who would want to take it?
Google India Ad
Google begins Android 4.4 KitKat rollout for Nexus 7 and Nexus
It generally feels like a rich document that was hacked to be interactive enough to resemble a GUI.
Makes much sense for disaster relief.
{{citation needed}} for both those figures. Sure, Singapore's education system is pretty brutal, but it's nowhere near as hardcore as (say) South Korea or China.
I'm sure all the stories you hear are true -- for one or even many. It's a huge place and I'm sure there are some teams in that "bottom 20% bucket" of pleasure to work in.

I work in dev in Redmond. All I can say is, for me, it really is a wonderful fun place to work and not at all like the outside impressions.
Get immediate, direct feedback. Instantly gratifying. That appraoch gave us a generation of computer-professionals unlike any other.

Are you kidding? Just a few decades ago you would need to pay a lot for machine time to be able to use computer. Today you can sit near a cafe with a $200 netbook and have a free internet access. In the 90's a .com domain cost ~$100. Just a few years ago TLS certificate cost close to the hundred, today you can buy one at around $10 per year or sometimes get it for free.

You have 10mbps connection! At your home! How much do you pay for it?
And what about wildcard certificates?
Show HN: Abstract Audio Visualizer
Are you basing this on a review of your servers' logs or because of things you read on the web?
No matter how long it takes? Or until the debtor is dead? Death is an arbitrary line, so why not make bankruptcy the arbitrary line instead? Or maybe the late debtor's family should be liable. What if they just can't pay? Do they have to come and work for you?

The point I'm making is that there have to be limits to a debtor's liability. The question is where the limits are. You can't just say all debts must be repaid.
Well, good, if the radio and baseband do not live on-die with the AP. Market forces are pushing for a completely integrated design, but it's interesting from a security perspective.

The baseband is still considered the master CPU during boot - at least on the CDMA Nexus. So although there are some corner cases in terms of architecture, the security model is still completely broken. Send a payload to the baseband over the air, compromise it, and the entire phone is yours.
Slush startup conference live feed
As an individual, can I just say -- don't ever mess up, lose your key or need to regenerate your certificate before the expiry date.

Live within their means, or it will cost you $25 (because of "revocation costs").

StartCom are pretty awesome, but be aware of potential pitfalls.
> I have 10mbps upstream connection. I have a Raspberry pi and a Linux-powered NAS.

that means you pay for your internet connection and for the hardware you run the website on. Why is also paying for a certificate a problem?

I get the hobbyists approach, but especially for hobbyists I think it's better to stay with HTTP/1.1 which, as a plain text protocol is a lot easier to learn than the complicated ugly mess of HTTP/2.0. Also because of the SSL requirement, development will probably never happen over HTTP/2.0 - or do you want to create or even purchase new certificates for all your development projects?

A HTTP/1.1 server is something normal people can implement.

A HTTP/2.0 server is something for others to implement and a pain to debug.

I see HTTP/2.0 as a new transport protocol to transmit what we know as HTTP/1.1. None of the request/response semantics has changed between 1.1 and 2.0 (minus server push, but if you want to support older clients, you'd have to use other techniques anyways).

If you're just running your own little page, nothing is stopping you from using HTTP/1.1. Once your site is big enough to actually benefit significantly from HTTP/2.0, you will have the money for a certificate.

It's the latency for your clients you can shrink with 2.0, but you'd get bigger benefits from moving off hosting on a cable modem than by moving to 2.0. At that point, you'll have other, bigger costs to pay than the certificate.
About a million dollars were stolen from a tiny Australian bank run by some teenager, and 4 million from a small Chinese exchange. There are much safer places to store your coins. Meanwhile, individuals have taken profits upwards of those figures. Maybe that explains why those incidents had absolutely no effect on the market.
If they were genuinely interested in dogfooding their own stuff to ensure it works properly, they should also be dogfooding the process of white-listing plugins and websites, not to mention handling graceful fallback when the user cant or wont do that.

That's a big part of getting the end-user experience to work well and can't just be "tacked on" later.
Watsi www.watsi.org
YC-backed, crowdfunding healthcare treatments for high-impact, low-cost treatments in developing countries
I'm an advisor there and came put you in touch if you'd like
Yes, but they can also do so if you use a self-signed certificate, by just self-signing their own. There's no way that's less secure than a CA-signed cert.
Live stream of Instagram selfies with Nicolas Cage's face
It's mainly a naming confusion with Git branches. HG branches resemble SVN ones - a copy of the working tree performed from the place of branching. HG 'bookmarks' are Git 'branches' - just references to a commit.
A little side project I built this past weekend. Source is here: https://github.com/joshmcmillan/feeling_cagey. Uses OpenCV and some other goodies. Criticism of all varieties welcome.
I found it incredibly stupid.

Never return to Singapore because every day students declare pride in their country ? Great. Better not spend any time in the US, UK, Australia or countless other countries. Or do people think kids are just born with an understanding of the flag, anthem etc.

And citizens are forced to spend time in the military. Okay that is a bit much but hardly unprecedented. And personally I find the military propaganda in the US far more insidious.

As for average quality of life. Well that is obviously debatable:

http://en.wikipedia.org/wiki/Quality-of-life_Index
Manufacturing Consent was a life-changing event for me, so good luck. But suggesting the film will resemble "fog of war" seems odd since that was a confession by someone complicit in the tragedy under discussion. Frankly, i'd be happier with a sequel to Manufacturing Consent.
Those stolen bitcoins were not holded by their owners with care, but by shady third parties.

If you take the proper measures bitcoins are very hard to steal. You can create wallets and transactions even from an offline computer and never expose your savings to the internet. You can even print to a paper your wallet info and never again use it within a computer. You just need to trust the wallet generator enviroment.

Still, keeping BTC safe for the average user is really hard, even tech savy people made costly mistakes. Hardware solutions will be needed to solve this problem, but the tech is in itself safe(tm).
Le temps des cathédrales English- The age of the cathedrals
The radio interface could listen/wait without even replying, ie wouldn't make the GSM RFI speaker noise. If governments, carriers and law enforcement could all manage to use this so incredibly rarely that it's never been observed.. then it could be real.

Given the types of people that would have to have access / knowledge of this though. For example people that suspect their partner of infidelity and is on the police liaison team of a carrier say...

I agree it's very unlikely, someone would have noticed it by now.
Bitcoins can be stored offline, making them as safe as any other possession. How many millions in cash have been stolen in the last week? Jewel theft totals $100 million each year[1]. That doesn't stop people from using cash or buying jewels.

A better question would by why would anyone store anything of value with a website they do not trust?

[1]:http://www.npr.org/blogs/parallels/2013/10/28/234587002/for-...
Convergence is a great idea, but, sadly, the project appears to be dead. The last commit to the repo was 2 years ago, and (as far as I know) the Firefox plugin has been broken for a very long time.

We (Qualys) are running several notaries and are part of the default configuration, and we're seeing very little traffic.
In the interests of balance: http://www.vice.com/read/these-nuclear-physicists-think-davi...
Indeed. The price should affect mining difficulty, not the other way around (price goes up -> mining becomes more profitable -> more mining).
Yeah, the FBI didn't turn up at their door.
I think he was referring to this:

http://www.bloomberg.com/news/2013-07-02/hsbc-judge-approves...

http://nypost.com/2012/04/05/us-regulator-cites-citibank-for...
> only 21M will ever be "mined" and even less in circulation due to lost wallets

But you can break bitcoins down into smaller increments than just 1. That must be significant in some way.
"Finalized" and gzipped PNaCl code is about the same size as gzipped x86 or gzipped emscripten-generated JS code. PNaCl code seems to have a static overhead of about 400kByte, probably statically linked code which is either handled through Web APIs in emscripten, or dynamically linked CRT in native executables.
The cost usually isn't so much the cost of the cert, it's more the cost of the static IP.
Brazil is using the law to push innovation, but here’s how it can do more
that's my point. he doesn't acknowledge the most important factor, although it actually underlies many of his issues.

"improved in modern terms" is very twisted language - perhaps you'd care to explain what you mean by this specifically
Fastmail: Increased storage quotas and other service level changes
I had to revoke my wildcard cert a few weeks ago. You can tell them why you did that. As far I know they decide to charge you on a case by case basis. When I revoked my cert I got an email 3 minutes later saying: "Revoked free of charge".
How? Go apps generally don't manipulate memory in an unsafe way.
Conservatives erase Internet history
Do you realize, that you still can buy it and get a 3-digits increase? :) Or lose. In that regard situation is the same as 4 years ago.
Only if we believe that "exploiting a lack of information" necessarily involves increasing true (and useful) information in the system. I certainly don't believe that's true, much less "by definition".
Nokia’s Refocus app released today for all Pureview handsets
I wish the Israelis or Swiss could come in to fix the Singaporean national service system. It is ineffective and inefficient -- the NS system produces a subpar military (the full timers are quite good though), and it provides very limited benefits to the individual.

A shorter period of training, a competitive bidding process to get into elite units like Israel's 8200, and a longer term commitment with the same people for the rest of your life, would be vastly better (and probably something the US should consider).

As it is, NS is basically wasted time for most people . Ambulance and SOF seem like the only decent options. The discrimination against the Malay origin singaporeans also seems wrong.
http://www.techdirt.com/articles/20130811/23331324140/feds-h...
Could you run one instance of TinyDNS on each core?
Answers OnStartups Will Close On November 12, 2013
Moved to Mezzanine from Wordpress
A Better Syntax For Unit Tests
Tulips, anyone?
Considered working for http://www.mysociety.org/ ? (They're hiring http://www.mysociety.org/jobs/)
FreeBSD Foundation's Year-End Fundraising Campaign
The encryption of the transport and the verification of the identity of the server should be more disconnected.

The CA part is only to verify that the machine you are talking to is who it says it is.... in reality all this really verifies is that they filled out a form and there is probably a money trial somewhere leading to a real entity.

But I've never understood why the identity is so tied to the transport security. It would make everyone's life easier if HTTPS could be used WITHOUT identity verification (for 90% of cases this would make the world a better place)

We'd still want to purchase third-party identify verification... and browsers would still present this in the same way ("green padlocks" etc)... but even without verification every connection could be encrypted uniquely, and it would raise the bar considerably for a great number of sniffing-based issues would it not?

EDIT: I guess what I'm saying is a social issue: We've put so much effort into telling everyone that "HTTPS is totally secure", that we've left no room for a system that is "Mostly secure, unless someone has compromised the remote system/network" .... maybe it's too late to teach everyone the difference between "encrypting a letter" and "verifiying that the person you give the letter to is who they say they are"
Well, you maybe willing to pay $1000 to settle the debt when the nice lady from the bank called you, but chances are you will be willing to pay more if a debt collector shows up at your door.
jgrahamc works for CloudFlare
Please tell me where in the world you shall live if you will not return to one of the best countries (as per most statistics) in the world?

And this guy is American. A country which invades other countries, kills civilians and holds people locked up in Guantanamo Bay. Yes, surely that is much better.

I haven't lived in Singapore but spent a bit of time there when I lived in Malaysia.
Firing a kiln is far easier, and safer, than running a [home-]foundry. You can buy a kiln that plugs in the mains and sits on your desk or a small kiln that goes in your microwave oven.
You can send Bitcoins to this address if you want to support him: https://blockchain.info/address/1snowqQP5VmZgU47i5AWwz9fsgHQ...

Source: https://wikileaks.org/freesnowden

He already received 141 Bitcoins (over 50'000 USD) on that address.
20 experts tell us how to solve common content marketing pain points
Stories and Illustrations from 10 of Earth’s Most Remarkable Places
Refactoring with go fmt
Or even better, we stop quoting the MtGox price since it is artificially inflated due to delays with cash withdrawals. This is the graph I personally use: http://bitcoinwisdom.com/markets/bitstamp/btcusd
This is why I simply will never inherit my parents estate when they die, I don't want to risk inheriting their debts no matter what I'm told. My mother inherited her fathers estate with all of her brothers and sisters only to find out that because Grandpa had a huge expensive operation that the estate actually owed money. Luckily she was able to somehow get her name off of the inheritance after the fact.
I remember switching from KeePass over poor Linux support, but looking at its page now, it looks like it runs on Linux just fine.

I'll have to give it another look, I guess.
Another issue I have heard about is the difference in local and expat salary (only hearsay, I don't have any data). Add that on top of mandatory military service for men and it could leave someone pretty unsatisfied.
Not my experience at all.

To quote them:

"Class 1 certificates aren't revoked free because we receive too many requests
daily (specially for the Class 1 free certs) and would we have revoked them
all, our certificate revocation list (CRL) would have been blown out of every
proportion."

In a further back-and-forth, the admin proceeded to tell me how much bandwidth I would cause them (I don't even care about being added to a CRL for a personal domain).

Edit: Sorry, you did say a wildcard cert, which sounds like a paid cert, so would offer more "service" I'm guessing.
Ask Ruby Developers: Would you purchase rails SaaS template?
update: The template shall have the following features.
1. User management.
2. Invoicing
3. Integration with billing applications (stripe, paypal, et.c)
Like a lot of things I see grownups do, this action of leaving and never returning to Singapore strikes me as a reaction to one's past experience. I grew up in a crowded place where crime and terrorist attacks where a normal part of life. As an adult, I moved to the US and my job always took me to less crowded cities. I've visited places like New York since, and realized that I do not miss living in crowded places at all.

I read a lot about what's supposedly wrong with suburbia (the media and hollywood seems to view it as morally wrong), but I find myself drawn to the relative peace and slow pace they describe. I often think it's because of where I grew up.

To me, the author is making a similar move, though in the opposite direction. Life was too simple, too comfortable, and too polite in Singapore, and now he's had his full of it, and needs the opposite. I can relate, except I'm coming from where he's going, and I went to what he's trying to escape.
I meant the attributes that we measure progress by. Quoted straight from the article - "It leads the world in education, banking, shipping and has created a everyday existence of unrivaled cleanliness, safety and stability"
Get over my connection. Some places it's quite common.

The thing is you are both missing the point:

The tech landscape is growing increasingly complex. We shouldn't be adding more obstacles to getting involved than we already have.

That's how horrible Legacy-things get built. We don't need to do that to our internet.
I laughed a bit when I read that paragraph. Because I am sure it is the current/future dream of most of the people on HN to work for a big internet company in Silicon Valley. Which of course means long hours with your free time spent talking about work.

The fact is that in "international" cities like Singapore, London, Sydney, Paris etc people do work long hours and in their spare time often talk about what they are spending the majority of their life doing. It's completely natural and par for the course.
That's not completely correct. Governments don't print money, central banks do. Governments still have have to sell bonds to actually have money to spend. The amount of money in circulation affects the interest on these bonds, but it's not as simple as saying governments can just print money without consequences (maybe it should be, but that's a different discussion).
MI6 spy Gareth Williams ‘probably an accident’, police say
He said it like that because some people are really upset that it is not open source. I don't think he intended to mean you specifically.
Yes, GPU brute-force is more effective than rainbow tables. I heard you the first time. I wasn't even talking about rainbow tables.

> scrypt/bcrypt do the right thing, regardless, and generate unique password hash for the same plaintext

Didn't know that. Thanks for pointing it out.
That's some weak arguments. If anything, this article made me want to move to Singapore.
I had a roomate who was getting his Master's in industrial process chemistry. He once mentioned that, in fact, in that industry a 10% efficiency improvement was considered a rough standard for which an innovation could become a viable business.
It allows them to access content that they otherwise couldn't.
What browser would support HTTP 2.0 but not SNI?
I'd love to be able to use a browser based IDE for development on a Chromebook or other machines that I haven't fully set up, but I can't see it happening for a while for the following reasons:

- Plugins - a major part of any IDE like Eclipse or Visual Studio, or text editors like Sublime Text
- Speed - Single threaded JavaScript isn't going to beat multithreaded Python, Java, C#, etc, and when dealing with large text documents, or trying to apply meaning to code structure intelligently like modern IDEs do, this is going to be even more of an issue.
- System Integration - I use keyboard shortcuts for a considerable amount of my work in IDEs, but the ability of a browser to use keyboard shortcuts is severely diminished. Something like Vim's command mode might work, but this is only one style of shortcuts that many people are unfamiliar with or actively dislike.
- System Programs - IDEs are supported by a large number of programs behind the scenes, this would mean any IDE would probably need to be backed by a VPS anyway, and then not only are you even more dependent on an active connection, but also you have a large cost overhead just to be able to work from another machine.
They say that high expectations make for poor travel companions, and visiting the world famous Wonders of the World, there will always be a fear that they will not live up to the hype—yet these stories were refreshingly devoid of cliches or tourist-induced cynicism.

What I loved most about the Wonders reading list (aside from the delightfully whimsy illustrations) was simply how diverse the perspectives from each World Heritage site were... it's funny how individual perceptions shape people's experience of places. Eg. if you're passionate about photography, archaeology, history or just trying to pick up 'that girl' at the Taj Mahal—it totally changes how you experience that place and therefore the story that you decide to tell afterwards.
The good ol' Subdomain-versus-Subfolder debate just gets a bit more expensive on the left side, that's all.

Services that really need an unlimited number of subdomains are a tiny minority, and market prices reflect this. For the time being, someone like WordPress.com can probably afford $60-$100/year for a wildcard certificate. Everyone else just sticks to subfolders like Twitter does.

After all, nobody will be preventing you from running a website. Your priorities and economic circumstances might prevent you from using pretty subdomains, but that's no different from the current reality where short and memorable dot-com domains cost thousands of dollars.
Py.test plugin status page
Well, ignored certs would be functionally near-equivalent to no certs.

If implmentations ended up keeping some meaning for them, you could look at how most ssh server keys are generated - no configuration.
Here's a tip everyone will understand: email rocks but transmits emotional tone like two cans and a string. As soon as you detect an edge, as painful as it is, take out the phone.
You might be confusing forward- and reverse proxies. Transparent forward proxies can now go bugger off. They will not be able to intercept HTTP/2.0 traffic.

Reverse proxies, in front of web applications will need to terminate the SSL before caching. Same as today.