skysight-inc/HackerNews huggingface dataset:
Looks like you're probably right. I googled him and found http://inamidst.com/sbp/, which says "I’m taking care of Aaron’s sites and data, so email me if you have any queries about that."

I initially wondered about it because it was actually really disturbing when I considered the fungible nature of websites and the possibility of someone posting "past articles" as Aaron.
Another problem for Cydia in China is it's server may blocked by the Great Firewall of China built by the gov.
In IOS6, sometime I must use vpn to make Cydia proper functioning.
Of cause, this is another story.
Yes, and? WTF does this have to do with anything?

"Maybe you should work in North Korea, Microsoft is really cozy in comparison"

"Thanks for your input, Captain CouldJustifyAnythingThatWay"

"Oh, maybe you should try reading comments from dev/random, they're much worse!"
Standard adblock would be adblock plus which is tied with advertisers through its infamous "acceptable ads" feature.
see: http://www.mobilegeeks.de/adblock-plus-undercover-einblicke-...
https://medium.com/surveillance-state/cd2cb53bcaba
http://www.infowars.com/google-reportedly-paid-adblock-plus-...
http://www.digitaltrends.com/web/adblock-plus-accused-of-sha...

Ghostery works for the advertisement industry by building profile of blocked ads to allow them to tweak the ads so you don't want to block them.
http://en.wikipedia.org/wiki/Ghostery#Criticism
http://www.technologyreview.com/news/516156/a-popular-ad-blo...
How would it work to 'flush' out malcontents within PRK? It's not like they have freedom of information. How would this even be reported? Surely this information, be it true of false, has arisen from Chinese or South Korean sources
>1)People from the rest of Canada like the weather in Vancouver better

I hope you are joking....its' driven up by overseas speculation in the real estate market from what I understand. Coming to vancouver for the weather won't pay your bills (at least there's no shitty weather tax compensation), and weather is a favorite topic amongst Vancouverites because the good days are so much more meaningful when it's rare.

>2) People from around the world who want to work in technology are drawn there by easier immigration requirements and the network-effect of being around other technology folks.

I don't know of what "network effect" there is here other than amateurish Meet-up groups where middle aged men who lived through y2k show up and talk about how they like their coffee.

I think it was 7 years ago they opened. Microsoft recently closed it's Victoria location. It's a game studio here in Vancouver but Quebec holds the reigns in game development from what I gather. I used to work beside the Microsoft building, the area is pretty much void of activity apart from Asian hipsters in Starbucks. Not exactly a silicon valley or even Seattle, so I don't know where is this "network effect" that eclipses Seattle or Silicon Valley.
Haskell Library for Dependent Typing Languages compiles to Javascript
You got a reply from Snapchat? Are you some form of warlock, because I've yet to see them reply to many people.
Holy... just wow. Like out of a movie, can't quite believe what I'm watching. Snowden the political candidate? Snowden the mouthpiece? Snowden the hero? I'm looking forward to reading the HN discussion on this.
That is a new trend though, primarily pushed by the fact that the popular Unity game engine uses this model I think.

OOP is a perfectly serviceable model for developing games like this, especially if you use modern OOP i.e. heavy on composition and interfaces as opposed to the byzantine inheritance hierarchies of the 1990s.

The pro-ECS propaganda always contrasts ECS with said 1990s Java style OO, correctly pointing out that inheritance (alone) does not allow clean modelling of certain game world entities.
Database as a Service malware
In fact, Rockstar is basically Intellectual Ventures with different investors. Google seems to be an IV investor, I assume defensively.

http://m.iam-magazine.com/blog/Detail.aspx?g=2f9ac708-83af-4...
Pretty effective trolling. Obviously no one would ever pay to not go to Harvard undergrad. Even for the rich and lazy (only plausible explanation) it's not an experience to be missed.
Can you really see him as a political candidate? personally I think he the government will pardon him sometime in the near future and he will end up working for one of the unicorns (fb/google etc).
If I had a talent I would write about companies treating their employees like criminals
It's a open source RTS (real time strategy) game similar to the Age of Empires game series. It's great that 0 A.D. is coming along fine :)

Microsoft closed Ensemble Studios (the maker of Age of Empires). And EA canceled "Command & Conquer: Generals 2" as of October 29, 2013.

Sadly, beside Star Craft 2 (its SciFi theme is not for everyone) no triple-A RTS games are in active development :( Back in 2000 there was the last RTS hype and one had troubles to find a new roleplaying game.

As more and more players are moving back to PC/notebooks and tablets that all have better navigation interfaces than the bad controllers, I hope RTS games come back :)
Can you elaborate on why the API is "fundamentally insecurable as it exists today"?
Hey Chris, how's it going?

Yeah, I just dropped Bobby a note. I was like: "here's what I did", and he was like, that's pretty cool, how did you get in. And then I described the exploit. And then we had a short conversation about things they might have fixed that are easy to fix.
All the extra JavaScript makes your site slow.
Craigslist is a wasteland of incredibly obvious, too good to be true scams. I'm still waiting to hear back from all those ladies who want all that NSA sex, and that guy in Rome that wanted to swap houses.
I had no idea you could add styles to the console. Neat.
That's disappointing. I'm surprised they didn't pull the WWDC.app if they knew about it though.
Ooo, I may just have a use for that.
A better way is to make a technology and keep reusing it for clients. Have clients find you more clients, make commissions and eventually earn their money back. Give old clients features developed for new clients. Eventually build out a productized service, get a bank loan, market it and sell the company. Or open source the tech and get a community around it (like symfony, etc)

This is the outline of working on your own stuff and just charging clients for high-margin projects, all the while building your technology.
Due Process Fail.
if they dont put the price online, it must be very expensive
it's actually a super tiny amount of JavaScript, you'd be surprised what you can do without something like jQuery bulking things up.
Here's an idea for NYT - stop writing about Sacco, and start writing about the people who publicly threatened her. The right thing to do isn't complain that no one is going after her attackers. The right thing to do is go after her attackers.

"Yet the people who threatened to rape and murder Ms. Sacco, who attacked her family and friends, aren’t held in contempt or fired from their jobs."
About Obfuscator-LLVM, Dual-Use Tools and Academic Ethics
ppffffffttt

How does this even add to the HN comunity? Flagged. Twice.

I'm going back to Whoville, to hell with Silicon Valley.
>>> So strictly speaking, the US is the bigger evil because it is doing all those things right now

No, it is not.

>>> This line of reasoning. This here. That is evil.

But I if under "evil" you understand "defending yourself against attack" then I can understand why you call the US "evil". However, it is your private meaning of the world "evil", unknown to the rest of the world.

>>> "Depends on the people", oh my god.

Of course it does. One is justified to use violence in defense against attack. I'm surprised it needs to be explained.

>>> By the way the US has already killed far more than 10,000 in response to the WTC attacks.

The US killed people in war, it is true. That, unfortunately, the only way to fight wars. If you invent some way to win wars without killing anybody, be sure to tell, it would be most wonderful invention. Until you do that, that's the way we have. When attacked, there's only two ways to behave - submit to the attacker or fight back. I don't think submitting would be a good option.

>>> the actual cause was the US' meddling in the Middle East

Very funny word that "meddling". Like "I shot this guy because he was meddling with my robbery and was trying to stop me, so I'm completely in the right". Of course US is "meddling" - without that "meddling" real evil - you know, guys like Hitler, Hussein, Pol Pot, etc. - would feel much freer to perpetrate their evil deeds. "Meddling" is the only moral thing to do if you see people's rights violated and freedoms infringed.

>>> Which made them decide that a mission like this was a completely reasonable response.

The fact that it seemed reasonable to them means nothing. Everybody thinks their behavior is reasonable - murderers, robbers, rapists, thieves, serial killers - all of them think they're very reasonable people in unusual circumstances that make them do those things. There are very few people that say "I'm evil to do this, but I will still do it". Yet it is evil to do what they do, and your relativism and attempt to present it as if there's no right and wrong but only somebody's opinion can only lead to a moral bankruptcy.
http://www.viva64.com/external-pictures/txt/mysql-test.txt
It's far less useful to check your privilege than it is to check if the arguments are correct.

The former is an easy way to dismiss an argument without actually reading it. The latter requires careful thought and runs the risk that you might realize you are incorrect.
Christmas tree made out of form elements
Don't worry. People in the future will be doing stupid crap too.
You've put this really well -- we can still laugh at Irish jokes and blonde jokes, why should Nickelback be any different? The joke isn't that Nickelback are terrible, that's just shared context like "genies grant three wishes," or "drunk people do stupid things."
> Having people executed when you are a dictator isn't really bold. He had his aunt's (Another major source of power in NK) blessing. If he hadn't, he probably couldn't have pulled it off without getting killed.

For killing people in general, no. But for killing major hubs of power you need to be either crazy or have some balls or no brains.

> I think that its also been demonstrated that he isn't wise either. Think about it. The young, western educated man that inherits the throne in North Korea has the potential to become one of the greatest statesmen in history, simply by implementing a series of idiotically simple reforms. All he had to do was let China know that he's ready, and they would probably provide him with shitloads of support to make sure that he doesn't get assassinated by the old guard. Even if did die in the process, I'd rather that be my legacy than "Hurr, Durr, I executed my ex-girlfriend and everyone she knows!"

Indeed, it does seem that he acts more like a spoiled brat who will have his friend shot, because he took his toy. Than a sophisticated machiavellian ruler.
I just have to say that you're one of my favorite bloggers.

Thanks for all your posts.
Is that a profitable business in and of itself or are you actually part of the ad revenue funnel? For some reason I thought Google was doing that at a loss to increase ad placement opportunities.
I'll see if I can put it briefly. Maybe Chad will show up, he's much better at this than me.

The problem basically comes down to the fact that Snapchat needs to be able to discriminate between clients that are legit, and clients that are not legit. In other words, at some point Snapchat has to trust that it's distributing the server key (or cookie or whatever it uses in the future to allow clients to say "hey, it's me, you can trust me") to a legit client and NOT to a badguy client. This is not possible. Consider this issue taken to the extreme: even if you built Snapchat directly into the OS, and then signed, you could still root the phone and spoof the relevant parts of the OS to make it seem like you're a legit client when really you're not. Note that even pinning the cert doesn't work. You can still get around it by sniffing around the relevant buffers.

Spoofing the client basically guarantees that the API can be tricked into providing services that it was designed to avoid providing. For example, you can save all Snaps upon receipt. This is a trivial abuse. There are much graver implications that lead to much graver privacy concerns, but I hope you'll understand when I don't publicly announce them. :) Though perhaps Chris will tell you about them if you ask nicely.
>Why is line level profiling so non-existent for dynamic languages?

It isn't. As usual the answer is LuaJIT (sorry, I am a fanboy, got to admit it): http://permalink.gmane.org/gmane.comp.lang.lua.luajit/3413
Writing a name down randomly throughout a picture report, kinda frustrating.
Probably cheaper than the shitty imitations of what this tool does in the web dev industry.

Talking to a vendor a couple months ago, they wanted $15k for a tool whose bug/security problem coverage they couldn't enumerate.
I will not buy that they only get 800 calories a day. People in Nazi concentration camps got more.
I've read a few and they have been really good reads. If there were more swear words, I would have said that Zed Shaw was his ghost writer.
It's extremely sad that people buy into this crap.
They said it was because they feared someone was going to burn the bugs, not because they were patched in 7.1.
So, no explanation as to the motivation or reciprocation for including Taig in the first place.

Stinks.
The power/performance envelope is about the same for both processors (Haswell version of the Xeon (E3-1230v3) and i3-4130T) . So you are trading performance for power in a full load scenario, the idle power usage is going to be similar.
Geekbench scores, price and full load power usage for the i3 is about 1/2 of the Xeon, go figure.
The point was that Aaron found a dull grey "grown up" office dreary, but found the colourful and playful atmosphere of Google "infantalizing".
This was really excellent
Given that people in general are often confused, disorganised and prone to bouts of extreme irrationality for extended periods of time and this seems to apply at all sections of society, I am pretty amazed really that we have any ways of even slightly reliably transferring power without bloodshed.

Democracy isn't perfect, but neither are people when you get down to it, I mean, I used to be annoyed with how rubbish a lot of stuff is, but the more I pay attention to how people actually are, the more cheerfully impressed I am that anything works at all.
Even simpler. Point a camera at your screen and snap a photo.
I would not describe this as "Database as a Service malware". What the report is discussing is malware operators are starting to be paying customers of the DBaaS providers.

The DBaaS is not a victim, except so far as their capabilities are being used for evil. And the malware is not posing as a DBaaS operation just to get your PII, hah , that would be a long con if it's happening. So title is a bit misleading.

Malware operators take advantage of the latest tech the same way we all should. They are trusting their C&C to the cloud based database, which is some pretty valuable property. So at least to some extent it's an endorsement.

Ultimately the realization is that data isn't secure anywhere you store it. Outsourcing it early might be beneficial, and ultimately you may have to bring it back local if it gets to that point. So DBaaS is a hedged bet that lets you focus on other things. Some applications can take that hedge, some can't. But it's a big and growing market.
Hi, I'm one of the authors of the above release [1], and the exploit we primarily talked about (find_friends) isn't really an issue with the protocol as a whole.

We understand the need to support legacy clients, but Snapchat could easily limit the damage this exploit could do.

It wouldn't be that hard for them to make the best of what they have, by auditing all the code that typically has these exploits, and from that point onwards, also auditing riskier areas in the code base periodically.

But yeah, we have seen an improvement in some of the Snapchat client code, which indicates there are probably some bright new developers that have just joined the team. We just find it pretty bad that in this time, we haven't seen attempts (on our end, server side may be different) to secure the protocol.

Also regarding communication, we haven't heard a word from Snapchat in 4 months, neither has the reporter of this story, Violet Blue. If any of the guys from Snapchat are reading this (or you can pass on a message), tell them they're free to message us at security@gibsonsec.org.

We're pretty easy to contact.
[1]: http://gibsonsec.org/snapchat/fulldisclosure/

*

Just saw your edit, the purpose of this release wasn't to tell everyone we're the nth person to reverse engineer Snapchats protocol, but rather to bring attention to the particular vulnerabilities.

I can speak for the rest of our team, and we're pretty sick of Snapchats protocol, and this will most likely be our last release regarding it.

(Also I noticed newlines broke, kinda fixed that)
I downloaded a new mail client for iOS MyMail...
Interesting how they've implemented several slick features:
1) Status bar - when you open the folder list, the status bar at the top goes away along with the message list. MyMail and mailbox have this. Nice polish.
2) Quick action menu - when you swipe with your finger, the menu appears and follows your finger!
I agree it's likely a fake. But even if not, I don't see that it's any more immoral than usual. In the Real World (tm), if you have money, you hire people to do the work you don't want to do (or have time for), but nevertheless obtains something you want. Basically, you're extending your power through the bodies of other people.
Mail app
How do I get the Mail app to only give me notifications during a specific time period?
Can I use iOS's do-not-disturb mode for a specific app without applying it to the whole system?
Put yourselves in the user's shoes. I don't think this is about offence at all, or even about how funny or not the joke is.

Not everybody goes through the settings on their apps before use. They will notice the "feature" when it manifests itself. That's annoying in a generic setting. If it happens at that special moment crafted to cue for a song in a wedding, it's much more than annoying.

Even after the first manifestation, how clear and persistent is the in-app explanation? Because I wouldn't guess it's a feature at all.
I'm more surprised that after all this time the poster only now notices retargeting ads. The web is littered with them. This one is running on Facebook's own exchange.
A few key differences between the NSA and Google:

1) Google don't have the ability to take your life or limit your freedom.

2) Google maintains full control of your data. They will serve ads based on very specific criteria, but they're not going to give advertisers an Excel file with names and email addresses. That's bad for business.
Reverse-engineering Instagram to expose the private API
Because they do not have omnipresent sensors. That is a completely silly comparison.
“Distraction-free" writing tools
There's no such thing as "offensive", and I'm offended any adult could come to any other sane conclusion.
Not that different. I suffered something similar within a month of starting my first job and its being a highly typical corporate job.

Mind, that was probably because I burned myself the hell out at the end of college. I've never worked anywhere fancy, and somehow my psyche hasn't broken again.
Agree on the Jekyll front, much prefer static-sites because of the page load speed.
No, but in mymail.my.com you can configure when you want to receive push notifications. It's really nice! Give it a try
Where am I? How did I get here?
Yeah, I mean, my major point is that Snapchat cannot deliver the services without trusting the client at some level, but that trust cannot be guaranteed.
This kills the football.
Btw. 0 A.D. uses the Entity-Component-System pattern too.

Search for "optimized the entity-component system, a core part of the engine" on this page: http://play0ad.com/0-a-d-development-report-13/#more-3342
Very quotable indeed. From that article, relevant for HN:

inventing “a thing that you could do” is a low bar for human achievement
Then you are better at googling than I am. Can I enquire for a link?

Edit: nm, it appeared when I searched for bloom trees instead of bloofi
Hm, I don't agree.
> "A child born today will grow up with no conception of privacy at all. They'll never know what it means to have a private moment to themselves, an unrecorded, unanalyzed thought. And that's a problem, because privacy matters"

I think that's the most important part of his message.
Well find_friends exploit is one of them - my favorite was one found by clever/you [1] which leaked _any_ user's phone number because they weren't validating auth tokens correctly.
That's long since been patched, and rightly so - definitely more dire a situation than war dialing.

[1]: http://cleveryou.net/post/40537133131/oops-snapchat-flaw-lea...
OkTurtles + DNSNMC: Surveillance-free communication on your favorite websites
Yeah, I agree with pretty much everything you said. I too think they could do a lot of things better. Yes, they've been really really slow to fix known issues. I did not mean to denigrate your work, which seems solid. :)

I'm just saying, 9 months down the road, if they had the optimal version of their security protocol, someone could still break in and write a post that "audits" it, just like we get every couple of months on the HN frontpage. Everyone would laugh, again. Some people would know that it's as good as it gets, but most people would just be in it for the circle jerk. There's no win for them here. That's all I'm saying.

*

Also, seeing your edit responding to my edit, sorry, I sometimes post before I work everything out perfectly. This isn't really an indictment of you guys specifically. I think your work is great.
Even the most devoted fans must have their breaking points.
PVS-Studio. Prices Dropping - http://www.viva64.com/en/b/0217/
Same experience (Stripe) also had an increase in orders the days after target thing came out.

All very obviously fraudulent for example user in indonesia but cards from us
There's the open source path: while you're looking for a job, get involved in an open source project that solves a problem you like, really can be anything. Get involved, participate, share ideas, code stuff up, commit. This may take longer, but this is a good way to get a job in something you like. Because contributors are employees somewhere, and they will recognize your talent, and know where to apply it. Good luck!
A reunified Korea would be a global economic powerhouse within a generation, anybody with eyes in their skull can see that.

Alternatively, combining a modern, hi-tech, highly educated nation of 50 million with a nation of 25 million badly-educated, borderline-starving people, many of whom would never be able to adjust, would cripple the South Korean economy for two generations.

South Korea is an economic powerhouse now. Introducing an extra 50% population of which the vast majority are skilled only in subsistence-level farming with tools other nations abandoned a century ago will not be economically helpful. Maybe if South Korea was at the stage of development in which vast numbers of unskilled labourers underpinned the economy, it would be, but they aren't.
Don't forget that the iPhone was totally rubbish when it was first released. It didn't even support text messaging - which made it a joke in most of the world.

Fair enough, Apple continued to work on it, and by all accounts (I don't have one) has managed to make it a fine product. But let's not pretend that it was obvious to everyone that "Apple revolutionised mobile phones" from day one.