skysight-inc/HackerNews huggingface dataset:
DNSSEC is just another PKI, but this time controlled by world governments. I'm baffled by how anyone could think that DNSSEC is a superior alternative to the CA system.

The good news about DNSSEC is that it's never going to happen anyways.

Meanwhile, TACK strikes a balance between the convenience/stability of having a third-party trust anchor that can vouch for your identity, while at the same time putting site owners in control of how strong that voucher is, by allowing them to bind their identity directly with clients. You could in theory pin a self-signed certificate, if that was your thing.
Well since the poster advocated reading "Democracy the God that failed" which specifically posits that monarchy is a better system (Based on it's incentive structure), I would say that is about as close as you can get. Only when I disagreed with the extremity did the poster make up his new term.

I think you are right though that it would be incorrect to label anyone as anything unless they explicitly stated as such.
Does not sound convincing, given the gravity of the allegations made.
Show HN: Organize, View & Manage your photos from your favorite services
Top Data Mgmt Tips for ISVs & SaaS providers
DNSCurve is fine, but we can also just continue assuming the DNS is insecure and pushing security out to the endpoints, where the End To End Argument says it belongs anyways.
Coinometrics provide no information on the source of their Bitcoin data. They quote "a metric calculating the average daily transaction volume on the Bitcoin protocol in US Dollars"

Of the things you list, only Bitpay and Coinbase offer merchant services directly comparable to PayPal. If you have numbers for those, that'd be great. I'm keen to find quality metrics.
Is it me or with NSA entities power we do not live in democracy anymore? They can manipulate everything, from google results, voice, emails to the actuals votes.
That Sapphire iPhone glass sure seems a lot like Transparent Aluminum, now... "hello, iPhone"
Facebook has a similar real name policy to G+ and Facebook also considers names to be public info.

https://www.facebook.com/help/224995697512520
https://www.facebook.com/help/292517374180078
People already volunteer who they're having sex with on Facebook
> Seriously though in regards to some of the other names you mentioned is there really any difference by voting for whoever is running against them? Many people (myself included) though Obama was different - that obviously turned out to be completely wrong...so how are we supposed to know who won't do these things?

To me, this idea should encourage more people to vote outside the major parties. If you voted democrat to avoid the consequences of a republican victory, only to find that the results were largely the same anyway, it's no longer a "wasted" vote to vote third party.
The idea I've proposed (although I'm sure I'm not the first to have done it) would leave most of TLS untouched. The only portion of the handshake and subsequent steps which would be different is that which verifies the server's certificate. Everything else would be the same.

My understanding of pinning is that it could just as well be used in a namecoin based system, and could enhance the security of that scheme just as it does with the CA scheme. All of these ideas could work together, with namecoin as the external, third-party source of trust instead of the CAs.

So I guess a better title for the post would have been: "Namecoin, A Replacement For Certificate Authorities"
What exactly is bitcoin being spent on?
Yeah, I had the same exact reaction. You can purchase SSL certificates really cheap nowadays, and even business ones costs under $100, e.g., here - https://getssl.me/en/ssl-certificates.
>DNSSEC is just another PKI, but this time controlled by world governments. I'm baffled by how anyone could think that DNSSEC is a superior alternative to the CA system.

We rely on DNS anyway so what can those world governments do with a DNSSEC PKI that they can't do with DNS as is? I mean if you can change the DNSSEC distributed certificate for google.com surely you can just redirect google.com and be done with it.
I agree completely, as long as those Othello jerks don't come in here with their crappy attitudes.
Three Ways Founders Can Avoid The 'Series A Meltdown'
Oh, it works without FB again? I joined when it was new but never used it much (niche musical taste). When I tried to login again a few (4-12) months ago, it wanted to force me to use FB so I just started ignoring them altogether.
Once we have dynamic pinning, we don't need an elaborate distributed cryptographic ledger to solve this problem.
No. We do not rely on DNS now. The whole design of TLS is premised on the notion that the DNS is insecure. Much to NSA's annoyance, if I switch MAIL.GOOGLE.COM in the DNS, I cannot easily MITM people's Gmail sessions.
Oh, they do! We added that functionality a few weeks ago. It's listening only for now, and until a week ago didn't work on older Android (2.3ish), but it's there. :)
Limited promo codes to test out asknative web private beta
and give feedback at hello@asknative.com
Yes but this doesn't change the fact that the queries use Memcached as the backend. If all of 1M queries hit the InnoDB tables, then I would be impressed. Also note that it's read-only performance, I think MySQL acts like a bridge here for most of the queries. (Correct me if I'm wrong.)
Ask HN: Advise me about my "startup" – pdfcv.com
pdfcv does one thing and does it well, it helps you create a CV (or a Resume for you folks across the pond). I first built it a few years ago scratching my own itch: creating a nice CV with a word processor is hard, changing the style of it is even harder. So I hacked together an application which imports your LinkedIn profile (optional), allows you to edit it and renders a CV to one of the templates. It literally takes 2 minutes if you have a somewhat complete LinkedIn profile.

A few weeks later I landed a job with a CV built with pdfcv. A few of my friends came back to me with success stories too. After a year or so I noticed a traffic increase from organic search and finally had the guts to start charging for it. I designed the charging scheme to minimise the amount of support I'd have to do: you get a preview of your CV for free and you can upgrade to remove the watermarks if you like it. It seems to work well and generates enough passive income to pay for my lunch.

However I do not know what to do next. The job market seems to be lively nowadays and there are things happening around it, but I don't know how much potential does a CV/Resume builder have. Should I try to actively advertise with google adwords or look to partner up with companies who might need a similar tool? Or should I just forget everything and enjoy my free lunch with almost no extra effort?

Any feedback on the UI or the workflow is very welcome too.
Stupid Guy Drinks Blended Ghost Pepper
I think this is cool, but I don't think the homeowner should have to pay up front for this datacenter in their home. I would be much more convinced to adopt this if I didn't have to pay for something that could be potentially loud, not work well, etc. For one thing, it just seems a bit scammy -- "Hey, just pay us to be our facility"! Also I don't think what the homeowner gets back from this system should be hinged on the usage of Nerdalize's services.

Lastly, what about electricity? I mean these things have gotta use a whole lot more electricity than a typical heater. All of which, I'm guessing, is again paid by the homeowner.
I spent a few months as a tourist superficially observing goings on so I have the "bona fides" to make structural criticisms of the global development/aid system and suggest killing it. Ah the humility of this generation.
That's a feature, not a bug. It's always wise to be positioned for the pivot.
So, how do I connect securely to a new website if I can't trust the DNS response?
http://www.xe.com/currency/sdg-sudanese-pound

Bitcoin isn't perfect yet, just saying it is getting close to becoming a suitable replacement for the "worst" money in the world.
Yeah I got this far, but the stack trace doesn't have the symbols. The guy I'm working with said it might be because the addons use dynamically linked libraries instead of statically linked libraries...

By the way, I think a jenandre used to work at my company.
Some of our current cryptography schemes are based on it taking time to factor large numbers, but this is not the same thing as finding prime numbers.

The basic principle is that if I take two large prime numbers, P1 and P2, and give you their product, Q, then it will take you a very long time to learn P1 and P2 unless I give you one of them.

It is actually very important that the hardness of that problem does not come from the difficulty of finding prime numbers. Which numbers are prime is a question that is independent of breaking any particular key, which means that if that were the source of hardness, you could reuse the work from breaking one key to break future keys, by storing a list of the prime numbers you calculated. This would be a Bad Thing.

There are a lot of misconceptions, in fact, about hardness, prime numbers, and factorization. People often assume that primality testing and factorization are equivalent, and that both are NP complete. In fact, PRIMES is known to be in P, and (the decision version of) integer factorization is probably not NP complete (it is in NP by way of PRIMES being in P), although it is not known if it is in P.
Android: The Clash of Priorities and the Remaking of Privacy
Being a sales manager I've had sales people lose their steam and become unmotivated. I think this is the perfect way to gamify sales and reward amongst peers. Has the old school way of sales died? "ABC", Always Be Closing! Great job on the app. I give it a perfect 10.
For the same reason it's morally wrong to stop you from making the recordings in the first place.
I'm more interested in the Daily Transaction Quantity (table on right side http://coinometrics.com/bitcoin/btix ). Bitcoin still lags far behind.

To put it in perspective:

Paypal 7,700,000 transactions per day

Bitcoin 67,000 transactions per day.
Good guy Aluminium.
This is why I can't take Bitcoin seriously. The privacy implications are insane.
One of cryptic's features is that the front-end is completely open-source. You can see the source for the current prototype here:

https://github.com/cryptic-io/web

We'll be releasing tools, like a browser-extension, that will help confirm that the code you've received on the site is the same as that in the repository.

And since the whole frontend is open-source and is only html/js/css, you can host it on your own box if necessary.

To address your points 1 and 4: Since all data is encrypted BEFORE leaving your browser (this was NOT the case with lavabit) even if our servers were compromised your data would still be secure.
I'm not a legal expert. But to me it seems like If you say something in public, it being transcribed into a report is a statement of fact and belongs in what I guess would be called the commons. A photo on the other hand is something quasi tangible that a person put time, effort and resources into to create.

Also if you spoke to a reporter I suppose that would be an implied consent to have your words used.
As much as I really don't like what the NSA is doing, this argument isn't valid. Law enforcement privileges cannot be directly compared to those of regular citizens. If you want to argue they've abused their privileges... then I'm with you 1,337%
That. Is. Fucking. Hilarious.
Telemetry translation API? Seriously? You're recording 3D motion inputs, transmitting over UDP and playing back on a Novint Falcon. State of the art is much more advanced than that.
>But it is intellectually dishonest to pretend that people are just now discovering that NSA was breaking into computers around the world. That is literally the charter of the NSA. It's why they exist at all.

You're presenting a red herring here, tptacek. Any third grader who played played Splinter Cell would say, "No duh!" But the news isn't that the NSA is breaking into computers. The news is the scope of the intrusions (installing malware on 50k computers), and of the motivations for the behavior. We've been told it's to protect us from the extremist muslims attempting to establish a caliphate here in America [1]. That was a lie. 50k computers with US-planted malware on them is not a defensive maneuver. It's an offensive one. It's not about protecting America. It's about global information dominance.

Now, whether we want that or not is a different question; there are advantages and disadvantages to the issue depending to a large degree on whether or not you believe in American exceptionalism. But this is about an executive power grab, not about "spies spy, let's all go home now," and you're deluding yourself if you believe otherwise.

[1] http://www.nsa.gov/public_info/_files/speeches_testimonies/T...
A wildcard cert, which you would likely want/need if you're running a business, does indeed go for about $200 (that's the minimum I've seen it, if you have a cheaper source it would make me very happy :))
It seems that they already are. From the article:

>Novelis has seen a 25% increase in demand from the motor industry in the last year, most of it coming from one of its biggest customers, Jaguar Land Rover, which has just begun manufacturing Range Rovers with aluminium.

>Currently, Novelis obtains almost 50% of its aluminium used to make a new Range Rover from junk - empty cans, scrapped vehicles, demolition sites - and it aims to raise that to 80% by 2020.

It makes a lot of sens, if you ask me.
It's cool to see graph DBs like Titan and Neo4j moving up the ranks.

There are some major advancements coming down the pipe in the world of open-source graph computing that will make working with big graph data accessible to anyone, not just the Googles, Facebooks, and Twitters of the world.

Here are some of the things coming down the pipe:

Titan 0.4 was just released https://github.com/thinkaurelius/titan), and the number of backend datastores Titan supports is growing. Datagrid support was just added for Hazelcast, and it can serve as the reference implementation if anyone wants to add support for Infinispan, Galaxy (http://puniverse.github.io/galaxy/), or one of the other datagrids.

MapR is in the final stages of certifying Titan on M7 Tables (https://groups.google.com/d/msg/aureliusgraphs/RTeFVssIvoI/m...), which will allow you to run Titan on HBase without all the HBase complexity. AWS (http://aws.amazon.com/elasticmapreduce/mapr/) and GCE (http://www.mapr.com/products/google-cloud-platform) already have direct support for M7 so it's easy to spin up a cluster.

TinkerPop3 is scheduled for release within the next six months (https://github.com/tinkerpop/tinkerpop3/wiki), and it will blur the lines between graph databases and graph processing engines.

Marko just released the first version of TinkerPop3's OLAPGraph -- this is Blueprints for graph-processing engines, which means that in addition to OLTP graph databases like Titan and Neo4j, TinkerPop3 will support OLAP engines like Giraph, HAMA, Faunus, GraphLab, and the new GraphX engine in Spark (http://amplab.github.io/graphx/, http://www.youtube.com/watch?v=mKEn9C5bRck&list=PLbDk7g7PotW...).

You'll be able to run Gremlin over any Blueprints-enabled graph-database or graph-processing engine, and Gremlin will be able to jump between the database and processing engine, depending on if it's a local or global graph algorithm (http://markorodriguez.com/2011/04/19/local-and-distributed-t...).

And Marko's recent breakthrough on swarm computing over derived graphs (https://groups.google.com/d/msg/gremlin-users/1KObZ8F2d00/CJ...) means you'll be able to run traditional graph algos over property graphs. This will pave the way for the community to construct a massive library of graph algorithms in Gremlin (https://github.com/tinkerpop/furnace/wiki).

All of this is coming together now. 2014 will see a major leap in open-source graph computing.
AWS NOW
Photography is in a strange place. For one thing, it's remarkable that that concepts that negatives are rarely sold, and that the print constitutes the artwork, have carried over to digital photography. Both the bits as they emerge from the camera, and the results of a photographer's digital darkroom work take the place of the developed film, and prints, which are often the output of an ink jet printer, have roughly the same value in the fine art market as as exposed emulsion on paper, and to some extent exist side by side.

The artificiality of shoehorning digital photography into the same rights framework as evolved for chemical photography creates these stresses. At least there ought to be different categories of images and rights.
The NSA was breaking into huge numbers of computers long before we were worried about a "caliphate", and the fact that they were doing it was showing up on people's resumes before 9/11 as well.

And this isn't about "American Exceptionalism". China didn't hack Google because they were upset about NSA hacking; they did it because Google had information they wanted, so they took it.
No, that would not simply be an act of war. If that was the case, it would actually be a war crime, according to the international humanitarian law.
Yeah, pressing the button is the easy bit, it's getting there that costs the time/money/foresight.
This is an argument not so different from those often given regarding 'linux on the desktop'. Bitcoin doesn't want anything. It's an idea, not a company.

If the protocol is effective, it will thrive in its own right. If it doesn't, something else will appear in its place. The designer(s) of Bitcoin could have favored short confirmation times, but they didn't. Plenty of companies are working on solutions that effectively yield shorter confirmation times for merchants.

If I want to buy a car with BTC, I'll be happy to wait five minutes to ensure the transaction goes through. It's a lot faster than going to the bank for a cashier's check.
"International law" is a lie we tell ourselves to make us feel safer. And, I'm on the "all wars are crimes" side of this issue as well.
From their Kickstarter page[1]:

> [the browser code] can also be verified against an open source repo with a browser extension

[1]: http://www.kickstarter.com/projects/cryptic-io/cryptic-encry...
It does say they pay you back for the electricity, that's the whole point.
Just don't spill any mercury on it.

http://www.popsci.com/scitech/article/2004-09/amazing-rustin...
HN is becoming more like reddit everyday. Ugh
There's no such thing as live streaming without processing. The amount of additional processing needed to flip an image is so tiny as to be unworthy of consideration.
Awesome ! Well spotted. Made in 2012, so it's not like they are working on it now.
Note that their splash page is made in flash. In 2012 ? ... mmm.. bad.
This is true but those governments already control the domain name system, so they can yank or redirect your domain. You're already trusting the registry so why not have them sign your certificate? There's nothing stopping your from pinning it later, too.

Also, that way you could limit your trust to one entity per tld. Unlike today where any CA anywhere in the world can sign any certificate.
>> As an American, I feel like my country is actually putting me in long-term danger. The government is making America and Americans enemies of the entire world.

That has been happening since forever; it's just that the NSA stuff has made that fact visible to people who didn't see America's hypocrisy before.

I mean, there are people who actually believe this ---> https://www.youtube.com/watch?v=p6HOcLWP-Ls
Our work with the Falcon is just one device (and we're very proud of that, it's a big deal!) The ttapi is a universal language for haptics to connect any device to any other where functionality overlaps. This way new devices can be developed by third parties that can innovate independently and still see an immediate market and userbase. The ttapi is used for games, video, and other software to interact with the user through these devices as well. It's a critical aspect of the potential of the frixion platform.
Self absorbed stu-pro-blogger invents new word, "repetivity".

news at 11.
My country? Are you kidding, they couldn't hack their way out of a paper bag. Any expertise and equipment they have is provided by the NSA, and they're a bunch of B-players with no budget.

The whole situation is uncomfortably asymmetric. Economies of scale I guess. Winner takes it all.
I wonder if the use of this technology by a paid webcam model on a client would constitute prostitution.

Or what the social ramifications would be of having an omegle/chat-roulette style chat system where people could have sex with anonymous strangers over the internet at a moment's notice without any fear of pregnancy or sexually transmitted disease.
>Much to NSA's annoyance, if I switch MAIL.GOOGLE.COM in the DNS, I cannot easily MITM people's Gmail sessions.

If the user is using a new browser or has an expired HSTS header, wouldn't it actually be trivial to do? Or are you also relying on TACK to say "never connect to mail.google.com without TLS" or on HTTP/2.0 to mandate TLS everywhere?
Qubi: The Media Center Reinvented
Ok, well that's good. But this doesn't really answer my other questions
I feel like I have to keep saying this over and over: no, you do not rely on the domain name system for security. TLS was designed to assume that the DNS was totally insecure.

Yes, world governments can yank GOOGLE.COM so you can't reach it at all. But what they can't easily do is stand up a different MAIL.GOOGLE.COM and reliably collect people's mail.

However, if were were stupid enough to stick TLS certificates into the DNS...
One critical difference between PayPal and bitcoin here. PayPal is not treated as a currency to be traded against other currencies. I suspect that the vast majority of bitcoin transactions are currently just trades to/from USD.
How would this work during the warm months when heating is not needed?
Cheer up. We're also protecting the world's shipping lanes.
Apple Derangement Syndrome, is my guess. To some people, anything beginning with a lowercase "i" has a capitalized second letter by default.
Then let's stop deluding ourselves and make it clear that the NSA's charter is about promoting what a small number of powerful unelected beaurocrats believe to be American interests, both politically and economically [1], without significant oversight. Then we can have an honest discussion on whether or not that's a good thing.

[1] http://www.theguardian.com/world/2013/sep/09/nsa-spying-braz...
If the whole CA system is compromised, you mean?
NSA Research Paper on Tor
Did you know that "Aluminum" was the discoverer's own spelling, and was actually used in Britain soon after the naming? "Aluminium" was an arbitrary revision made because influential people just liked it better.

In other words, the British spelling was just a matter of British cultural hegemony at the time, just as American spellings are matters of American cultural hegemony today.

http://www.worldwidewords.org/articles/aluminium.htm

I didn't know any of this until just now.
Where do I sign your petition? I'm right there with you.
[Old] Taking payments online (in Europe) in 2013