skysight-inc/HackerNews huggingface dataset:
It seems as though he was not thinking rationally. He used both Tor and Guerrilla Mail, but did not consider sending the messages from a public WiFi hotspot? Seems like a really rookie mistake to make if you are going to commit a federal offense.
Your argument would have some merit if statistically the legal system hadn't been proven racist in pretty much every aspect over and over again. The ACLU has put it all together better than I can.

https://www.aclu.org/racial-justice
I'm not making a moral judgment, just an observation based on how many people here expressed interest in buying one..or more.
There's a pretty great $129 tablet (marked down from original retail price of $149) already available in the US: http://www.walmart.com/ip/Hisense-Sero-7-Pro-7-Tablet-Quad-C...

I bought one for the grandparents. It's a clone of the V1 Nexus 7 in terms of specs, feels like a high-end tablet and has some pretty great reviews. Only problem is it's out of stock online - you can only get it at Walmart stores.
Tablets are getting cheap enough that branded tablets are going to be more of a common thing, especially for like trade show gifts and things. Remember how people used to distribute (or still do) software/presentations/sales materials via USB sticks or CD's? At some point it will be cost effective to give away a tablet with your stuff preloaded on there and with your company branding on it.

I can see this happening with custom enterprise type apps that have a tablet component. Take a sub-$100 tablet, get your brand on it and have it load into your app by default or something. Sort of like kiosk tablets.
Not forcing tax payers to foot the bill for McDonald's labor is taxation?
Admittedly, this particular case seems amenable to fairly straightforward algorithmic complexity analysis, but it seems to me that the lazy nature of Haskell seems to make it even harder to get a good grasp of costs involved than in a language like Lisp.
Are you talking about those self-serve kiosks that they have next to the ordering station or do these robots actually cook the food as well?

The reason I ask is because no one wants to use those self-serve kiosks. They've had them everywhere as a means to "free" an employee up but what ends up happening is an employee has to come by and help the customer because 1) the interface sucks and 2) people dont want to read screens then tap then read more screens, they'd rather just tell a cashier what they want and have the cashier press the buttons.

But if you mean the robots also serve and cook the food... where do you live again?
Really?! Ever heard of the placebo effect?
I doubt that the "finals list/tor usage" combination would have been enough to convict him, but I suspect it would have been enough to get a search warrant for his computer.

I don't know if he used the Tor Browser Bundle, and if that is even all that clean from a forensic standpoint, but I certainly wouldn't trust it to conceal what I did.

Maaaybe he'd have a chance if he used a LiveCD that they could not find evidence of him ever having. That is a very strong "maybe".
I'm sure the manual part of logging in with his identification only happens once and is stored by his computer which automates the identification in the future so he may have forgotten this.
We Need to Get Over Ourselves
>I would prefer to give my users a more useful indication of progress

Those are called "indeterminate progress indicators".

Not everything on the web has some specific state info or progress percentage to declare.

Just showing that "something is running" is still very useful for those situations, and can have a huge impact on the users perception of the page responsiveness.

(As has lots of other "theater", which is not to be dismissed -- e.g the mobile practice of showing a screenshots of the apps last state while you load it, making the user thing it loaded faster).
Seems like all he had to do was say nothing and all they would have had on him is access to tor.
I'm very confused. You said

>As another poster pointed out, some people with low income pay a negative income tax.

The only way income tax can be negative, is if it includes low income benefits. In any case, no matter how one chooses to define things, isn't my argument clear at this point: Increasing benefits or decreasing taxes are more efficient than increasing the minimum wage.
So what I don't get is why the function names needed to be of a certain length, since he's hard-coding the buckets.
That's ridiculous. If police find a print of XYZ-brand shoes near a crime scene and start keeping their eyes open for people who have XYZ shoes, they're not trying to oppress people with a certain taste in footwear. there seems to be a misconception about that police need probable cause before they even ask questions, which is nonsensical.

Edit for clarity: I don't think that following up obvious leads is evidence of government hostility. After all, if Harvard called up law enforcement to advise of a bomb threat and were told not to bother unless an explosion had taken place, most people would consider that pretty remiss (especially given Harvard's proximity to Boston).
The author and I are hardly best of friends, but he does deserve credit as co-creator of http://hyperdex.org/ which seems to be a completely credible entry in the NoSQL space. Demanding an exact drop-in replacement is unreasonable. He has come close enough, and contributed to the state of the art in the same field. You're being an ass.
Lack of trust is hurting tech companies bottom lines, that's very bad for them, it also makes a very strong motive for change; i think the influence of these guys is the only credible factor that can bring about a policy change in this area - that's because most of the public's apathy.

Change is not going to come from legislation; Republicans are all for strengthening of law and order, most reps for the Democrats will not challenge the official line; a secret court will also not challenge the issue, am I Missing anything here?

I think it is amazing that the administration is apparently ignoring the push, given that these companies are big campaign contributors. How can this be? If even big campaign contributors are given a cold shoulder then this might mean that the President is not inclined to budge, to put it mildly;

BTW; it seems CISCO and IBM were not present at the party, despite significant losses; how can this be ? http://www.ft.com/intl/cms/s/0/445c67ce-4cb1-11e3-958f-00144...
Analysis looks sound to me, using msg content to derive the key is generally bad form, especially messages are known to attackers and sent repeatedly. (eg. Hi)

It looks like a bunch of convoluted code that doesn't actually accomplish anything.

Why is

sha1_a = SHA1 (msg_key + substr (auth_key, x, 32));
sha1_b = SHA1 (substr (auth_key, 32+x, 16) + msg_key + substr (auth_key, 48+x, 16));
sha1_с = SHA1 (substr (auth_key, 64+x, 32) + msg_key);
sha1_d = SHA1 (msg_key + substr (auth_key, 96+x, 32));
aes_key = substr (sha1_a, 0, 8) + substr (sha1_b, 8, 12) + substr (sha1_c, 4, 12);
aes_iv = substr (sha1_a, 8, 12) + substr (sha1_b, 0, 8) + substr (sha1_c, 16, 4) + substr (sha1_d, 0, 8);

better than

sha1_a = SHA1 (msg_key + auth_key);
sha1_b = SHA1 (sha1_a);
sha1_с = SHA1 (sha1_b);
sha1_d = SHA1 (sha1_C);
aes_key = SHA1(sha1_a+sha1_b+sha1_c);
aes_iv = SHA1(aes_key+sha1_d);

and more importantly why is it better than

aes_key = RANDOM
aes_iv = RANDOM

Are there special properties of the random bits of parts of various hashes that makes it more 'random'?

To me it looks like repeatedly sending the same message, or a message whose hash varied by a few bits, would leak part of the auth key, basically the person probably doesn't know what they are doing and are just adding extra 'stuff' to assure themselves it's secure.
I'm sorry, but that's an absolutely terrible article/interview.
Yeah, and they didn't even need the wrench.
Yes. I am. The fact you weren't makes the sexism all the more odious.
>There's an old phrase that the bad workman blames his tools and it seen to apply here too.

Not all of us are "workmen" here, that have to get used to our tools, etc.

Some of us are actual scientists and engineers, with lots of experience in identifying broken APIs and tools. Some of us even PROGRAM the tools you get to use, from CSS implementations in browsers to editors and such. Heck, there are people on HN from Mozilla, Google, Apple and MS.

CSS, with regards to layout, has been broken from the start.

That's not up for debate just because someone has mastered all the intricasies. Even the original authors and the W3C agree and have taking corrective steps in later CSS versions (still not widely supported).

So "Stop whining and learn this stuff" is not really an answer in a technical debate.
I hadn't heard of Cuba before. Grape[1] would also be worth listing in the Ruby section. It's an actively maintained microframework for REST APIs.

[1] https://github.com/intridea/grape
But that is wrong. Suppose I invented a machine that let any person churn out $3 in gold per hour. Now suppose everyone who was currently unemployed started doing this, and collecting slightly less benefits.

Would society be better of banning this machine, because it couldn't produce a "living wage"? Because this is what you are proposing.
Correct, they have to be GPL. Even paid themes must be GPL.
Use tor, use Guerrilla Mail then use his own wifi account. Why are people so dense? I am happy whit him being caught because of what he did but why don't people who do that kind of things use some internet cafe free wifi?
Show HN: Privacy's importance to you
None of the three are just key/value. Cassandra is a BigTable-like wide column store, and Riak is a document store with some graph capabilities. HyperDex seems closest to Redis with lists/maps/sets, except that it's distributed and fully consistent (i.e. what Redis could dream of being some day). None of those are easy to write, and many people already find them quite useful in production. Stop being flat-out wrong about everything, and do some research.
Looks like he succeeded in delaying his final exam, potentially for many years
>posted November 26, 2013

This is not new news. Also, remember seeing it on HN before.
You seem very knowledgeable, so let me only add what I know to be true: this is location and context dependent.

For example: If I make a contract with another Australian (company, individual, whatever), no treaty has an effect on that contract unless legislation has been passed to enact that treaty. A judge may refer to the treaty if there is some ambiguity that requires his/her discretion, but the treaty itself is not legally binding.
I wrote a book on UML years ago but now, the only type of diagram I use at all frequently is sequence diagrams.
> This cuts to the core of the ethics of the free market.

I know, that's why I left it as an open question.

> They have an agreement with the shareholders to maximize the profit of the company.

It's fascinating we let that agreement trump the implicit agreement they have with all humans on earth.

> You might think that it is ethical for McDonalds to redistribute money from their shareholders to their workers (and their workers are surely poorer on average). But this is solely the role of the government, and private charity

This is how the system currently functions, but I strongly believe the system needs to (and must) change. For a business to purely be concerned with profit can only lead to destruction for all of us. They'll bleed workers dry, kill the planet and be happy doing it.
Brazil will not give Snowden asylum (report)
> Urban Dictionary barely mentions the word monkey may be racist. It's 3x more likely to be slang for girl parts.

Oh, well, if Urban Dictionary says it, it must be true.
"And for most jobs out there grades do matter"

Not even a little bit. What, you think a hiring manager is going to try to track down your college transcript?

Edit: here's now little grades matter as a developer: I have a GED and five college credits (two of which were archery) and I've been happily employed as a developer for the last six years.
That's almost akin to instituting thought-crime. Wouldn't one actually need to commit those acts of intimidation (or some other harmful consequence thereof) before you decide they need a harsher punishment? Until that happens, a prank is a prank.
It's not hard for a system with strictly more resources (e.g. massive servers) to be faster, but who's paying for it and how much more does it cost? I suspect if those massive servers acted as BitTorrent permaseeds the result would be even faster because the peers could contribute additional bandwidth.
This is really cool, but it is clearly heavily influenced in design by Viegas and Wattenberg's Wind Map: http://hint.fm/wind/

The creator should really acknowledge their work...
If you're advertising, smugly, that your system is secure and you don't hire any cryptographers and roll your own you deserve much worse than a smug debunking.

Trying to profit off the whole NSAgate thing this way deserves derision. Provide robust and proven service and don't try to pass off Maths Ph. Ds as cryptographers.

This just screams sleazy start-up, because what they're doing, is indeed, sleazy.
The link to Nathan Marz's book: http://www.manning.com/marz/

Still in early access as of Dec, 17 2013.
Santa Cruz computer job listing of employers
Good idea (I think?) but your page isn't very good.

Some pointers:

The name appears to imply btc to altcoin trading, but nowhere on the page does it say anything about which currencies it supports. Is it BTC-LTC-*? BTC-USD?

I don't think "simple elegant design" is a good "headline" feature. Either just _have_ good design (which you do) and let it speak for itself, or talk about in terms of what it does for me, the user (you do kinda mention it further down, to be fair)

Your security section could do with more detail. HTTPS only covers one aspect! Many bitcoin websites have been hacked, and I'd like to hear why you won't be.

With that said, I'd like to see where you go with this. I've requested an invite!
Yes, your point is clear, though I'm not sure if I agree or not :).

I think the confusion is over the term "benefits". In the usage I've seen, benefits includes things not directly associated with the income tax code, like say, food stamps. If you increase your income, you may lose access to food stamps, but the food stamps don't come with your income tax returns and receiving them is part of a separate application process in most (all?) states.

So when you said income tax, I thought you were including those kinds of programs. But it sounds like you mean something closer to "benefits and deductions" directly in the tax code, like the earned income tax credit.
Ever heard of the kneejerk effect?
Well, yes, I'd wager this is his first (and last) federal offense. He is exactly a rookie.
Avoiding Spam with Email Aliasing
Don Norman looks impressively uncomfortable in his photo.
What do you do in finance?
Isn't "minimalist framework" a contradiction? It seems like if you were going for minimalism you would not use a framework.
I definitely agree.

Nurses and teachers in Germany and France are happy if they make $30,000 per year. I think $30,000 burger flippers, fry cooks, and order takers, that come with all the complications of human labor, will be mostly easy to replace at a fraction of that cost. The fast food workers have completely lost perspective on what their labor is worth.

A very popular convenience store chain on the east coast, called Sheetz, has been running the order taking of their very successful food business (where they make all of their money), strictly with touch screen order kiosks for nearly 20 years. McDonald's could eliminate, what, four or five order taking employees with a simple change. No way they keep order takers at $30k per year. That's just one simple example of course.
To be honest, at first I saw this post and thought, "how is a simple post of the Geneva drive mechanism news?". But after reading some of the followup and various links, I've definitley changed my opinion. Some amazing mechanical engineering in here. Thanks for this great video!
The Design of Everyday Things Online Course Launches
I heard from a coworker who met Ryan Bates at a conference a couple of months ago that he is building a new house with a recording studio. Building the house is a big distraction and should be back once that is done. When that will be is the question?
Yes. This should be the top-voted comment, IMHO. Myth is fairly misleading!
SVGtoIcons - Generate the icons you need quickly from SVG files
>This is how the system currently functions

It's also the system that makes the most theoretical sense given the First and Second Welfare Theorems, which state (or more accurately strongly imply) that any desired outcome can be achieved by the free market, and government redistribution.

"killing the planet" is an externality that can be addressed by environmental legislation (e.g. a carbon tax).
DRUNK BARTENDER GOES HULK
DRUNK BARTENDER GOOS HULK
Not really, that is also vulnerable to man in the middle attacks.

You need cert pinning or a fool proof trust system to verify the server key.
> And the old sexy. Back in the day, UNIX was a piece of garbage and the future was LISP machines, if you asked a lot of people.

I don't know... it still looks like the future today. Genera [1] was able to do things I can't do even with a lot of effort nowadays with my language/IDE/tooling.

[1] http://www.youtube.com/watch?v=o4-YnLpLgtk
New site gives Internet creatives the hope of a regular paycheck
I would like to clarify that I would love to work 40 hours a week. I was only saying that 50 hours isn't exactly horrible.
So why are you pro-CA-rail? Do you think they'll surprise you with a faster train and good public transit in LA?
It's unfortunate that I seem to remember this fact every time I watch porn on said network. :-s
If you're driving a 5000 pound vehicle on public motorways, I don't see any problem with it. Driving is a privilege that's contingent upon following the rules, not a right.
FINANCE PROFESSOR: Bitcoin Will Crash To $10 By Mid-2014
A preprocessor hack to implement “with” blocks in pure C
Relax; they credit it on the about page: http://earth.nullschool.net/about.html
> just because we don't want the extra weight of a new syntax

Sass defaults to .scss syntax, which is exactly CSS syntax. Okay, exactly a superset. Since it merely adds $variables and other features, you are free to ignore them and just write “pure CSS” but with variables.

What am I missing?
Azure Mobile Services is comparable for the basic backend service and push notifications (and isn't in danger of being aquihired away any time soon): http://www.windowsazure.com/en-us/solutions/mobile/

You expect something enterprisey if you haven't played around with Azure lately, but you can work entirely in JavaScript on the server-side (powered by Node) and there's good support for iOS, Android, Ruby, Python, etc.
Something has to be obscured for it to be "uncovered" -- the unfairness and disparities in the justice system is common knowledge to anyone who has had to live it (and that's a lot of us), to anyone who has bothered to ask someone who has lived it about it, or to anyone who has looked into any sort of comprehensive scholarly analysis of it.

I have "been through the system" and it wasn't by choice, nor did it result in any charges being filed. Some people view that as luck, but given how common that outcome is, the real injustice is that I was ever arrested to begin with.

I'm not complaining about the author's use of public resources - the public resources were wasted by the police, not the author. But I don't think we should pretend that the author discovered anything new. I do think his decisions were a little reckless - people can learn about the justice system without exposing themselves to it first-hand, and exposing yourself to it can be quite dangerous. Sure it's less dangerous if you're white, but police kill white people under suspicious circumstances too.
Tethered cellphone probably will be identified, though that would be slower as it needs to go through the ISP.

Coffeeshop will make it even harder, but may still have issues like identifying the computer, etc. etc.
I have heavily acknowledged their work in tweets, on fb, on github, and in the about page. I have also thanked them directly. Also happy to note that most articles about the site also acknowledge the influence from hint.fm.
Somewhere a tiger parent breathed a sigh a huge relief when their child didn't have to ruin their Harvard gpa.
Well, it starts with being one of the best tools we currently have to preserve freedom of communication, so getting it in wider use is a good thing. But it's hard to get across the necessity of general free communication to most people basically by definition - otherwise they'd just fix things by voting and technical approaches would be unnecessary. But the democratic mob isn't looking to protect individuals from its wrath, and nuanced arguments about assigning an appropriate context to messages from a public communications network haven't had legs either. So the go-to politically acceptable narrative becomes the standard US callous altruism of undermining other governments.

And yes, by the time you're on a short "of interest" list, you're fucked. (with the only real solution to the traffic fingerprinting being to get peer-talking encryption software in widespread use for everyday tasks).
I normally dislike being pedantic about the use of Linux, but shouldn't this be "Securing and Hardening a Linux-based Operating System"? (and by the look of the article it's more tailored towards RHEL-derivatives).
Ask HN: When are we finally going to start defaulting to TLS/SSL?
Considering all the recent controversy regarding government programs that analyze and store your HTTP traffic (and potentially malicious and immoral ISPs that sell it to 3rd parties), is there a good reason why there are still websites that don't use TLS/SSL? Whenever I see a website that uses unencrypted HTTP it makes me feel nervous and even disinclined to use it. Furthermore, if your website requires me to register/log in via an insecure connection, I simply won't use it - no matter how good it might be. I'm sure there are many hackers out there that feel the same way.

Some people argue that if your key-pair is compromised that TLS doesn't really mean a whole lot. While that is true, there are still key exchange mechanisms that guarantee perfect forward secrecy such as discrete logarithm Diffie-Hellman and elliptic curve Diffie-Hellman.

Pretty much all modern browsers support these ciphersuites and enabling them on the server shouldn't really be a big deal. Is there a GOOD reason why we aren't defaulting to these modes nowadays? (Ignorance and laziness don't count).

If you own and maintain a website, please enable TLS - at the very least.
I'll use this excuse when I gorge on halva just before going to bed.
Different perspective: I see it it as a requirement of holding a license and operating a motor vehicle that I have agreed to demonstrate I'm in a state capable of doing so safely when asked to do so in a manner that causes only minor inconvenience.

I'm in Australia, random breath tests have been around for many years and they have helped a lot with a culture of getting drunk and driving home.
20/20 hindsight.
Not necessarily. It's minimalism in terms of a framework (though in more objective terms I guess you would be right.) To me that means having not much more than a url router and a way to do MVC - no asset management, no HTML helpers, no ORM, no default templating language.

I'm surprised Slim Framework isn't listed under PHP though, is that not considered minimalist?
> I'm on a Mac so there's no scrollbars.
There's your problem.