skysight-inc/HackerNews huggingface dataset:
> Simply place the LED inline or in parallel to the camera and you are done. Any time current is sent to the camera sensor, the LED cant help it but light up.

So, upon (my incorrectly) presuming this was how it's already done in hardware and reading the headline of the article before I got to the text, I assumed they were turning it on and taking a single frame and turning it off fast enough that the LED was only on for a short enough time for the user not to be able to see it (or not notice).

Turns out the article claims they just reprogrammed the microcontroller to not turn it on in the first place. Of course that's a bad design, but you do need some more logic in there - the light needs to stay on for a minimum time when the camera is functioning so that the user can notice it.

This, too, is simple enough that it can be achieved without a microcontroller, but please don't presume that it's a simple fix. It's not just "put it in parallel".
Whoa, I had to reread your comment twice to understand it properly. In the context of RSA, and particularly speaking about its weaknesses, for me "CRT" automatically stands for "Chinese Remainder Theorem"… :-D.

If that interest someone, look for the BellCoRe attack on CRT-RSA [1,2]. I'm also working on the countermeasure as part of my PhD [3,4], and it's quite some fun!

[1] http://cryptome.org/jya/smart.pdf

[2] http://eprint.iacr.org/2012/553

[3] http://eprint.iacr.org/2013/506

[4] http://eprint.iacr.org/2013/810
I feel obligated to point out that it may be worth it if you make less than $200k in 2.5 months.
It is a Chrome Packaged App. This is nice, because it has built in auto-update.

The way to do a desktop app using web technologies that feels more "real" is with node-webkit: https://github.com/rogerwang/node-webkit

We did this project in collaboration with Google, and they were great. We wouldn't have done it at all otherwise. But, I still do want to create a node-webkit app, because I think that's what users want, a normal app, not some weird hybrid thing.
So you're saying the system was greedy and corrupt, that the laws prevented those features from getting out of control, and when we took the laws away they ran wild... therefore we should take the laws away?
If your MacBook is muted when you shut it down hen it will not play the startup sound.
Whether or not you made money is irrelevant to greater technological progress.

My personal beef with this whole BTC thing is that it once represented a potential future of money exchange. But today, the big news of BTC is how much money people are either making or losing.

The entire "technocrat" viewpoint of BTC seems to be disappearing beneath a wave of greed. And its a shame too... the technocrat viewpoint is the most interesting to me.
This contest is a sham. Crypto has to be secure against things like known-plaintext attacks and similar. That's typical in any real-world setting.
Not donating $10 to your local homeless shelter meaning that 2 people won't get food is worse than a government policy affecting millions?

e.g. war on drugs, wars, abortion, gay marriage, etc.
I love reading articles like this because it reinforces what I've believed all this time. At first I thought, maybe I'm just not a social creature and that is why I can't find value in networking. True as it maybe that I dislike socializing in general, I found that I was simply "networking" because this is what "you are supposed to do" or "everyone does it so it must be right".

Especially in startup culture, people even without ever having started one or work in the industry seems to know EXACTLY what to do. You network, you build contacts. I don't argue that it's useless but at launching and being very early on in the product cycle, even if I had contacts, I'd have no use for it as it's too generic.

The spending 50% of time describing your specific problem and walking away with answers that you already know....it's not that people that you network with are stupid, it's that you are faced with very specific problems early in the game that you must solve yourself.

Of course when you grow a business, you are faced with questions that they teach you in business school, but more than often, I find the time you spent going to networking events, you could've spent just brainstorming and cranking it out yourself.
Wisconsin Democrats Host Fake Hearing on Redistricting
you sir, have good tastes.

if you're a fan of IPA's, you should try and have some Pliny, Heady Topper and Ghandi Bot.
What's said in my office is of a lot more value than how much my beard has grown.

There's no light that indicates an active audio input channel.
carbon emissions from a coal plant do not have the "intrinsic value" of the coal that produced them. bitcoins from a miner's computer do not have the "intrinsic value" of the electricity and silicon that produced them.
Data, Information and Knowledge. Where is imagination?
If it's indirect that's not intrinsic. That's what intrinsic means the opposite of.
People could be assholes. I'm sure this sort of mistreatment happens all the time, and I'm sure that the reason for it is because people behave as described by the Stanford Prison Experiment.
This is a bullshit challenge. The attack model in which it is set is nothing like the theoretical models cryptographic systems are designed to be secure against, and even less like how crypto software is actually attacked in practice. There is no possibility for known plaintext, chosen plaintext, chosen ciphertext, side channels, etc.

If they just encrypted their communications with AES-128 in ECB mode with a fixed random secret key, the challenge could not be won. And that's not even semantically secure. So we will learn absolutely nothing about the security of their software from the results of this challenge. Whoever designed this challenge is either extremely dishonest or knows nothing about cryptography.

If they really want to improve their software, they should offer a $200,000 bounty for a proof of concept implementation of an attack within their threat model.

Edit: I originally started this post with "...probably designed to get press rather than to actually improve the software...", which I have removed, since I have no evidence to support the claim.
The hidden fine print is that you have to affiliate with a university and support that university's mission. I wonder how loose they'll be in interpreting that support. Does "providing internships to students every summer" count, or will it need to be more substantial?
But not with the same key.
Agreed. It takes a while to figure out what iOS7 breaks in your app, but there are plenty of resources out there that tell you exactly how to fix all of the problems. Sliding content under the top menu was the big one for me, but it’s a one line fix. (Or three if you like your if statements on multiple lines.) Turning off the bright colors for links and buttons is another one liner. It was probably less than 20 lines of code and a day’s work to update my apps.

There are a bunch of new features that I’m adding. I especially like the ability to speak text with a Siri-like voice.

I think my interfaces fit into the iOS7 ecosystem, but until they start enforcing the policy on Feb 1, I won’t really know. Figuring out what the rules really mean is always a big unknown in the app review process.
> Unfortunately, little chance to see it in Apple products, as such switch would probably not look "slick" and would probably be considered "confusing for the user" and as such not suitable for implementing.

That was my first thought, but then I realized the absolutely ridiculous extent to which Apple goes to build secure devices, and how "slick" the mute switch is on iPhones and iPads.

I wouldn't bet against it.
UK Porn filters block sex education websites
CBOR – A new object encoding format
Another headline to grab attention but not really provide all that much information. "So while conventional wisdom says to network aggressively, I don’t necessarily agree." That is not the point of networking. When you network in college its to get a job in your field. Not any job, not to make friends, but to make inroads.

If the author had networked with people closer to his business market, he could have potentially got advice that worked instead of spending time speaking to people far removed from his day to day work.
>He met his wife while mingling with the audience after he gave a talk at Stanford. Does that count as networking?

Now, I know where to look for my future wife. Aspiring billionairesses on YC, you had me with your 'Hello, My name is ____' sticker.
Sure, my point was just that a low proportion of failed/refused tests doesn't necessarily imply that the officer originally believed the person to be intoxicated, and wrongly suspect them of criminality.
Just go to any conference about cryptosystems' implementation security (like CHES), or to any exhibition on this topic (like CARTES) and you will be bluffed by demos of side-channel attacks, which are very real.
...unless you're looking for investment cash.
Epoxy enhances reliability by keeping the chips hermetically sealed. So when your kid barfs on his favorite Furby it still has a chance of working, or gets thrown by the family dog against the wall.

They are fun to play with from a hardware poking perspective.
h̶t̶t̶p̶:̶/̶/̶w̶w̶w̶.̶y̶o̶u̶t̶u̶b̶e̶.̶c̶o̶m̶/̶w̶a̶t̶c̶h̶?̶v̶=̶r̶t̶4̶g̶k̶3̶g̶6̶s̶s̶U̶

a̶n̶d̶

h̶t̶t̶p̶:̶/̶/̶w̶w̶w̶.̶y̶o̶u̶t̶u̶b̶e̶.̶c̶o̶m̶/̶w̶a̶t̶c̶h̶?̶v̶=̶U̶c̶H̶j̶X̶q̶V̶_̶5̶m̶k̶

R̶e̶a̶d̶ ̶h̶i̶s̶ ̶p̶o̶s̶t̶s̶ ̶o̶n̶ ̶w̶i̶c̶k̶e̶d̶f̶i̶r̶e̶ ̶a̶s̶ ̶w̶e̶l̶l̶.̶

W̶i̶t̶h̶ ̶m̶o̶n̶e̶y̶ ̶c̶o̶m̶e̶s̶ ̶p̶o̶w̶e̶r̶,̶ ̶a̶n̶d̶ ̶i̶f̶ ̶y̶o̶u̶ ̶w̶i̶e̶l̶d̶ ̶t̶h̶a̶t̶ ̶p̶o̶w̶e̶r̶ ̶i̶n̶c̶o̶r̶r̶e̶c̶t̶l̶y̶,̶ ̶t̶h̶i̶n̶g̶s̶ ̶g̶e̶t̶ ̶f̶u̶c̶k̶e̶d̶.̶

Nevermind, I've been reading his posts and threads on wickedfire and he seems like a pretty alright guy.
If you decompile their client you will find code for serving ads. So they must've thought about it at some point:

http://i.imgur.com/NA9bO0I.jpg
I don't see how NSA scandal should affect this deal. You dont snap such major deals because you want to insult someone. That is childish. However if Brazil believed that US manufactures might help NSA in planting backdoors, malware into their equipment they could have simply stated it more publicly and done even greater damage to American companies.

The weapon manufacturers + US government nexus has changed world politics over last 50 years. In case of India and Pakistan, US has provided fuel to the conflict just to make more profit from this. Sooner or later the developed world is going to see through the US policy of benefiting from conflict. China is already self dependent in heavy arms manufacturing, India is slow but reaching there. In probably next 20 years, US monopoly on defense equipment will end.
Switzerland made a comparable decision this year selecting the Gripen [1] which beat the Rafale, and Eurofighter (Boeing retracted the bid for the Super Hornet).

The decision happened long before the NSA revelations and I think that shows that the Gripen has things that speak for it on its own.

[1] http://www.defenseindustrydaily.com/switzerland-replacing-it...
Well said sir. Real world is made of actions and beliefs of over seven billion people. It is a system of unprecedented complexity. Why is that people often believe that their opinion is correct and actions are righteous?
It was frustrating that I didn't receive any contact from Coinbase until after posting on here HN, however I'd like to point out a couple things:

- This was a relatively minor XSS vulnerability which required a bit of social engineering to pull off, rather than being a traditional XSS that most HN readers would need to worry about.

- Their delayed response was likely due to the relative minor nature of this vulnerability.

- I still feel safe using Coinbase

- They're taking care of it and treating me well :)
Why? What about tourists makes New York so intolerable for you? Is your desk in Times Square?
perhaps Brazil is just growing into its own. The BRIC countries are all maturing, and perhaps, with that comes a more independent - non US dependent - stance.
Show HN: Hacker News For Money
Noice. Business case aside, that sounds like a fun exercise for those with the chops to tackle it.
Nice misquote. Put some numbers out.

The evolution of a project as I've seen it at large companies:

1. Build slow app in high level language, build out your infrastructure with cacheing and load balancing, CDNs, etc.
2. See what is slow / can be optimized in the current language.
3. Re-implement critical pieces in a lower level, more efficient language.

Facebook is building HHVM to eliminate step 3. You can have a bunch of people continuously re-implementing critical pieces, or you can have a smaller bunch of people make the higher level language more efficient once and have all your projects, current and future, benefit. And you also save money from the inefficient language.

I'd like to see the numbers on how much, say, using Ruby with all the optimizations - load balancers, cacheing, etc. will cost you over using Java - also with optimizations. I'm not convinced by a random person's statement that it is that huge of an impact, especially considering factors like finding programmers for optimized languages, productivity differences in programming in the different languages, etc.
A traffic ticket is not a civil offense. At least in Texas, it's a Class C Misdemeanor in the penal code.
so the bitter accusations and insults are now only the domain of the site moderators. When all else fails, when you cannot refute thoughts you do not like, you simply silence those who do not think your way.

Way to go reddit.
After 10 years, it's somebody else's problem - you should be on a beach sipping a cool drink!
Moxie is a great researcher and WhisperSystems seem serious. However, I don't understand why you claim that TextSecure is designed by cryptographers.

From what I've seen, they use something called the "Axolotl Ratchet", developed by Trevor Perrin. A quick search of his name didn't yield any crypto papers / research by him.

Also, you write "and has been studied in detail for years"

There are no links/references to code/protocol reviews in the WhisperSystems website.

Again, I have the utmost respect for their research, it's just that from the side of a non-crypto-versed user/coder, Telegram and TextSecure look the same.
Dupe of https://news.ycombinator.com/item?id=6931457
Why Does Time Fly as We Get Older?
Why aren't more companies competing with WU? Lots of regulations and a massive amount of retail outreach needed. Plus you need secured locations managing cash in the middle of nowhere.

I looked into doing a remittance business a bit over 10 years ago. By far the biggest problems are not technological, it's the simple logistics of taking cash around the world, and dropping cash off around the world. Bitcoin doesn't really solve anything.
Mixers are not a new concept - they're just the Bitcoin equivalent of a money-laundering parking garage or car wash. Using them will eventually be a risky move since as soon as law enforcement discovers one, everyone who transacted with it can be charged with money laundering.
The government usually takes care of this by buying their RMB. They then usually use the dollars to buy treasuries...
https://news.ycombinator.com/item?id=6924866
Write Elsewhere, Run on Firefox OS
As a brazilian, I have to say you're right. Maybe the younger generation, much more focused on and exposed to computer/electronics brands, doesn't care much for Boeing or GE. But to anyone here over 30, Boeing is pretty dammn 'American'.
Eurgh, so it is, deleting!
Show HN: Killed our 6-month old photo startup, and this came out of it
My co-founder and I saved up enough money to quit our jobs 6 months ago and go full-time. We began working on, while bootstrapping, a photo sharing startup. Unfortunately, after many iterations, it wasn't working well enough and we decided to kill it.

However, through that process, we conducted a lot of user tests and interviews, and realized that finding users to test is a pretty hard problem.

That's why we made Gemba, Japanese for "the real place", which is a service that connects companies to testers on demand for in-person interviews.

URL: http://gemba.me

Would love your feedback!
This is fodder for wankers. Delude yourself if you like, but it only strengthens America.
I feel like a reasonably successful person at this point, and I don't do "networking". I am not uncommon in this regard; most of the most successful people people in my industry do not do "networking". That's why I posted my original comment; I feel it is a reality, among at least a very strong subculture of talented people, that is underrepresented in rhetoric.

Addressing some of the other replies: I have done certainly a lot of speaking engagements, and yes, these have been very helpful for becoming more known and whatever, but I never do them for that reason; I always do a speech because I have something specific that I really want to say. Any publicity is a by-product (and sometimes publicity is highly aggravating and undesired). I certainly don't try to meet people via speaking events, parties, dinners, whatever. Sometimes I do end up meeting people, but not that often really, and again, it is a by-product.

In my experience, successful people almost always go to a party just to go to a party and relax or see what's up. They aren't going to a party for ulterior motives like maybe meeting someone who they might be able to get something out of and blah blah blah. Actually, successful people often just don't go to parties because they have other things to do and parties where you don't have a strong peer group are not going to be very interesting.

If you have a specific business objective, you are not going to solve that by randomly going to an event and having random conversations. You are going to solve it by calling someone on the phone or emailing them. If you don't have a specific business objective, you probably won't find much traction with whatever you are doing unless you get a specific business objective.
Sorry if anything went wrong. I have changed the title.

Advanced Design Patterns in Python.
No, an attacker can just reload it. The hardware is still there, waiting for a driver to control it.
~sigh~

Enough.

Save your unsupported observations and your fucking breath.

Your contributions and the contributions of other libertarians in this thread amount to little more than endlessly bleating that (in the opinion of the greedy), greed couldn't possibly have led to financial calamities, and that impediments to greed like democratically elected governments and legislated, popular laws are to blame for financial calamities....the disasters that history has shown repeatedly arise only when those same laws are weakened.

http://en.wikipedia.org/wiki/Category:Economic_disasters_in_...
So this counts as a dispute with Coinbase, and the terms for that are pretty clear:

> 5.3 Disputes with Coinbase. If you think we have made an error, write to us at 14525 SW Millikan Way #26680 Beaverton OR, 97005, or email us at support at coinbase.com. In your correspondence, you must give us information sufficient to identify you, your account, and the transaction on which you believe an error occurred. You must contact us within 30 days after the transaction occurred. Within 90 days of receiving your request, we must either correct the error or explain to you why we believe the transaction was correct.

The key phrase here is "Within 90 days of receiving your request, we must either correct the error or explain to you why we believe the transaction was correct." Notification must have happened after December 8, but let's say December 8. That means, at the very least, they have until March 8 to give an explanation.

BTW: I agree that making the customer whole is the right thing to do, but strictly speaking they have time to respond.

More generally, on the issue of online displays, I checked my bank's terms of use (http://www.tdbank.com/exc/pdf/internet_banking_agreement.pdf) and it clearly says:

> We agree to make reasonable efforts to ensure the full performance of the Bank’s Online Banking Service.

> We are not responsible for any indirect, special, incidental or consequential damages arising in any way out of your use of the Bank’s Online Banking Service.

They indemnify themselves against issues with the online display.
I support filling the HN front page with stories like this. Especially if it means that you get your money back.
The situation has been appropriately resolved by CoinBase. I would like to thank Brian for making this right. It is unfortunate that this situation had to be dealt with in the public light, but this was my last resource before contacting lawyers.

I will answer other comments later tonight.

Thank you HackerNews.

- Martin
I worked for Boeing, we definitely considered ourselves an American corporation. Because of ITAR [1] we could not simply pick up with all of our IP to another country.

[1] https://en.wikipedia.org/wiki/ITAR
Absolutely awesome. I see myself spending a lot of time on this.
Not free, but much cheaper than $500 for each 1.7 mwh, or barrel of oil. Solar is already cheaper than that even in cloudy Britain. EROEI is sort of irrelevant to the question of whether we'll ever "run out of oil." It might be that we'll stop using oil as a primary energy source, but that doesn't mean it'll go away.

EDIT: You might recall that the point you dismissed as "ignorant nonsense" was that we would be able to produce oil at $500/gallon, not that we would use it as a source of energy.
Can I freelance for 10 years tax free in NY if I incorporate?
I don't understand why you claim that TextSecure is designed by cryptographers. From what I've seen, they use something called the "Axolotl Ratchet", developed by Trevor Perrin.

Here are some resources:

https://www.hnsearch.com/search#request/all&q=by%3Atptacek+t...

https://www.whispersystems.org/blog/advanced-ratcheting/

https://pond.imperialviolet.org/
Depends on your skill.

What are you good at? Programming, invest some personal time and get a webapp or a recurring income stream.. Would be my 2 cents.

5000 ain't that much to be honest.. But 18 months is a long time to finish an app and get recurring revenue from it.
Then you are an awfully silly individual.
The NSA Raven, a Poem
Somewhat sad to see people on HN posting the Schneier link to counter the post without even bothering to read what it is about. I mean, it's almost like people have already formed opinions without giving the Telegram people a try. This is not how science works.
New York (city) native here. Usage of "New York City" for disambiguation by Americans, at least, became increasingly common beginning as far back as the late 19th century. But by the time I was a teenager (1980s) I would say that using "New York City" was ordinarily a reverse shibboleth for not being from New York, all the more so to write "NYC". (Where "New York City" tended to be used was governmental contexts, although "City of New York" is the more proper name of the municipality.)

At the same time, the older generation, such as my parents, used "New York" (or "the city") to mean approximately "Manhattan", a holdover from what the city was before the consolidation with what are now the remaining boroughs. That always seemed old-fashioned to me. I believe you can still see some old subway signs that use "New York" to mean "Manhattan". (Incidentally New York is also the name of the county that is almost but not quite coterminous with the borough of Manhattan.)

When I was growing up, the state was more or less never referred to as simply "New York" by people in the New York the city. It was "New York State", most of which was "Upstate New York" (though that couldn't refer to Long Island, and it was never quite clear where 'Upstate' began).

The reverse shibboleth quality of "New York City"/"NYC" is probably dying out, may be already dead. Nonetheless I find it annoying.
Target suffers Black Friday hack, millions of credit cards at risk
Guessing that none of these tax-free zones will be in New York City.
Honestly, the answer is internet addiction.