skysight-inc/HackerNews huggingface dataset:
The new era of encryption will be marked not by making existing encryption solutions more secure, but by concealing the very act of existence of encrypted data.

"Here's my data but you cannot read it" - does not runs so well with courts, high stakes competitors and deep pocketed enemies.

Once it is known "what to crack" the "how to" solution will be found.
"Rubber hose cryptography" is one of these :)

If you're not possessing anything to crack (or so "they" think), you're safe :)
Mobile app monetization with surveys
Most VCs would pass on these ideas regardless. They're all in mature, saturated markets. One of the signs of a mature, saturated market is that the incumbents have taken great lengths to create barriers to entry that are very high. This is a discouraging thing for VC investment because it increases the chances that a new entrant will fail.

Besides, you've had to pay for access for years. The big difference is that before, you had to go through a CDN like Level3 or Akamai. Part of what you paid them went to the ISPs to ensure fast connections. All this means is that the YouTubes of the world will begin to buy interconnects with the big ISPs. Small ISPs will likely just band together into a cartel and sell access that way.

Yeah, there will be a fast lane and a slow lane, but the advent of CDNs in the early 2000s already created that anyway. The data caps are disappointing, but not really unexpected if you look at the mobile market. We're reaching the point where in many major cities, there is no media consumption that requires a much faster connection than is already available. So why will consumers pay for more speed when their existing 50mbps cable modem is enough to stream 4k video from Netflix? Those speeds ARE possible today if you buy carriage through a CDN like Akamai (and I regularly get those speeds from Steam downloads) and the fact that Netflix hasn't is really more of an implication of their business model.

The most recent ruling really changes nothing, because net neutrality has been dead for 10 years anyway. While everyone on the internet was complaining about it, the business side moved on and built a few billion dollar companies around it. Capitalism at its finest.
You need to run special gateway servers, I don't think it uses transparent encryption and there isn't a global namespace (for sharing publicly or with non-static groups).
Here is the direction designers should be heading:

http://www.sketchingwithcss.com/
Is Jelly the future of semantic search?
I really like this. I've already found some interesting places!
This article is just an analysis of one of the inherent and well-documented weaknesses in truecrypt: the fact that the encryption key must stay in RAM the entire time you are using an encrypted volume. So, as has always been the case, treat the contents of your RAM as precious when a truecrypt volume is mounted.
The cynic in me would be a lot happier with Nest if, rather than the kind of painfully-obvious "its just what we wanted, guys!" position they're posting, if Fadell just said "$3.2 billion. C'mon dude, you think we'd turn that down?"
Marc Andreessen talks about the pros and cons of net neutrality
Stretch - A responsive theme for Ghost Blogging Software
TRUE. The problem are the people who consider themselves as "agile".
I have a small NAS4Free box at home with ZFS and automatic zpool scrubbing. Barring a physical disaster (fire, flood, etc), I expect my data to be safe indefinitely. It was pretty easy to set it up on an HP Microserver, I recommend it.
It's not an obvious move. Being classified as a common carrier carries a ton of baggage. The common carrier regulations are very much 1970's-style oppressive regulation, complete with extra taxes for providing service to rural subscribers, regulatory oversight of every business decision, etc. The FCC didn't want to impose that burden on ISPs in 1996, and they don't want to do it now.

As an aside, it's amusing to me how people trumpet common carrier status here on HN while also complaining how U.S. providers lag the rest of the world in speed and prices. Imposing the common carrier regime on ISPs won't make that situation better, it will make it worse. Look at Google's approach to building out gigabit: focus on urban areas where the density lets you hit more subscribers per mile of fiber. That's exactly what you can't do if you're classified together with the phone companies and are forced to spread capital expenditures thin over the vast swaths of rural America.

The current situation isn't ideal, but I think it's myopic to advocate treating telecom networks as regulated public infrastructure. I don't know if you have noticed, but public infrastructure in the U.S. sucks. One of the reasons it sucks is that we have a huge, spread-out country and gerrymandering that weighs rural votes about 2x as high as urban votes. We can't have nice high speed rail along the northeast corridor because politics mandates that Amtrak also has to support money-losing lines through rural Pennsylvania. Do you really want to bring the weight of all this ridiculousness down on the internet?
Yes, the other OS is way worse. "You can even brick phones permanently" --http://www.osnews.com/story/27416/The_second_operating_syste... which was on hn recently.
More often than not it seems that 'doing' Agile just means that people are supposed to have the false impression that they are working with a team... without being a team outside of meetings.
What's interesting are the comments below the post about Net Noot. The problem really comes less about the fact that traffic shaping may not occur, but there are no safe guards if someone attempts to do so. In smaller markets, its more and more sounding like a small cottage industry will start because of the lack of existing laws to protect the consumer. The larger markets will have power in numbers, but mom-pop towns like Marion, AL with only a small regionarl carrier - not so much. Problematic and there is SOME truth to this in scale of economy.
Peter piper picked a peck of pickled peppers.

Thank goodness no one seems to use Pecks / Bushels / Dry Gallons (the dry volume versions of Pints / Quarts / Wet Gallons). The only time I ever hear of "Pecks" is in the Tongue Twister.
I left that bit out on accident: I'm in the SF East Bay already.
"this is Google’s first true attempt to diversify its business, in this case into consumer devices."

Uh no its not, I own a Nexus 4 and Nexus 7 both of which were designed by Google, sold on Google's online store and run an operating system developed by Google.

Android now has more users then iOS, it's foolish to say they are just now starting to diversify their business from online ads.
It's interesting because "agile" can fail on both sides. This lampoons the enterprise side, in which you adopt "agile" practices inside rigorous change control and long requirements documents. But there is also the cowboy/ninja failure mode, in which "agile" is used to rule out any strategic thinking, technical design, or requirements gathering.

Not only can you fail on both sides, but you can be too far on one side and think that you haven't gone far enough.

I've had startups tell me they were doing Scrum, but it had gotten so hard to estimate their work that they had "broken agile" by having "grooming sessions" to talk to stakeholders about upcoming work before it got into sprint. They were shocked to learn this was a required part of Scrum and that many books recommended that being up to 10% of the team's time.

Another company I talked with was so concerned about their developers "continuously delivering" code that they were fighting to be "more Scrum" by changing their QA folks to be in a staggered sprint one week after the developers. They were shocked to learn that this was a widely-tried and widely-panned approach that was philosophically opposed to the roots of Scrum.

Now, I remember hearing examples like these before I had really dived into Scrum, and assuming it was a "no true Scotsman" where, whatever you did, someone would find a way to say it wasn't Scrum. But after some very good books and talking with experienced people (who were involved in the early stages, not bandwagon consultants), I now feel like I actually understand what Scrum is for and when it works, and can quickly spot people who don't understand the philosophy. Has anyone else experienced this? I wonder whether it is real experience or just an illusion my brain has created to give meaning to many months of painful trial and error.

Nowadays I think of scrum as being about holistic product creation, about building a team that can deliver what customers will pay you for over the long-term. That requires breaking down most "process" to get "one-piece flow" on a complete team working as one to deliver new features. But it also includes the team building its own processes to make sure they are building the right thing to a high level of quality.

That vision is anathema to cultures that value technical prowess, or pure speed, or meeting corporate objectives, or anything else other than building a team that can deliver value to customers over the long term. It's a challenge and a priority change for both corporate political environments and built-to-flip startups. And it's surprisingly hard to find a company that wants to pay you to build things their customers like, rather than using some other metric.
Why? Check out the page source, everything is un-obfuscated, there for you to see.
When I was living in Cambridge, MA during the '80s that was completely inadequate, even the best locks would still allow for the stripping of unlocked components. Everyone would carry their bikes up a stairway so it could be safe in the destination apartment.
Congrats Jesse, Brad, and team!
I have a lot of favorite ones, but the craziest is certainly this one: http://smwh.re/door-to-hell

I finally have a good reason to go to Turkmenistan !
With any investigation, I would hope there is a certain level of probable cause before authorities start threatening jail time.

You leave a lot of details out of your example. Such as, where you low level developer or a financial officer responsible for the company finances? If you were the latter, there would be ample suspicion to think a locked USB stick in your drawer would be useful evidence in the case. If you were a low level developer, probably not so much. You have to build context to determine if someone should be considered suspicious.
Nothing's 100% safe - if data exists and can be read by its owner, de facto it can be read by someone else. The only "safe" data is that which never leaves your brain.
In this blog post, forensic experts realize TrueCrypt uses headers.

But theres still a valuable lesson: a half-encrypted system is a not encrypted system, and it will leak information. Theres a paper on this from 2008 I think, before TrueCrypt implemented full operating system encryption:

https://www.schneier.com/paper-truecrypt-dfs.html
Great advice. Thx. I'm in the SF East Bay.
Why do you think it's a myth?
I don't think RIPA even requires an accusation. A complete innocent who is not under suspicion of anything can be served with a disclosure requirement if they hold the key to information that the authorities desire.

This is a sorry state of affairs, leaving us in a situation where all we can do is trust the judgement of those in power not to abuse it (not much hope there), and the judiciary to keep them in check if they try (only slightly more hope there).

I agree that there often seems to be a bit too much waving around of "terrorism" to justify government infringement of rights.

However, I still disagree with your assertion that the most evil criminal should have the same rights as the rest of us. This should certainly be true until conviction and once their conviction is spent, but as I mentioned before, a convicted criminal (in the case of a custodial sentence at least) quite rightly loses freedom of movement. Freedom of association is rightly withheld from prisoners released on licence. Convicted prisoners also lose the right to vote, which is arguable as to whether or not that is right.

There is clearly a list of rights that can rightly be withdrawn from convicts, so the question is which rights belong on that list and which ones don't? Bear in mind that poorly worded laws such as RIPA may come about because of a desire to keep that list as short as possible, constraining the rights of all of us, instead of just those who have, by their own conscious action, infringed on the rights of others.
Man, I'm so sorry for your back button, I hope he's okay :3
I think this is such a neat business. The farmers I've met are fairly savvy business-people and will probably be very happy to have better information about their business in a way that Quickbooks and Excel can't easily provide.
Udacity-GA Tech Master's launches today
A lot less secure if not using full disk encryption.
I was actually going to request some way to go back to a previous image. I didn't realize I could just use the back button. Glad you pointed that out! @OP: worth adding a back button in the site UI?
So NPM Inc.? Interesting. I do think NPM requires its own team, but I am unsure if NPM itself is a business (although I can see it being a sponsored foundation.) But there are hopefully creative business solutions to be had here.

Q: How does this relate to the money I gave to the Scale NPM project a few months back? https://npm.nodejitsu.com/
XNA is dead, now what?
Right.

This would emphasize the need to always be cautious in your use of cryptosystems, since you cannot simply claim "oh my data is Truecrypt'd". That will not save you from everything by itself. But if you look into the documentation, Truecrypt itself warns you about using it, and the threat model is very careful in defining what steps you need to take to adequately protect your data with Truecrypt.

It's one of those things where for most people, just a file-volume (the simplest kind where it's just a file that can be mounted as a block device), will do fine. The write-to-disk wouldn't happen very often, and to lose your data to a thief would require both the unlikely "OS dumped the memory to disk" (meaning the OS doesn't respect the flags TC puts on that memory), AND on top of that "a thief stole your laptop/desktop/external". If your adversary is organized crime, a law enforcement agency, or some other state-like actor with heavy-duty resources and specifically wants y-o-u... Then you'll need to be very careful and use a full disk encryption solution, or rather just not use a computer.

Know your tools. Know your adversary. Sleep a little easier knowing both. Or turn paranoid.
Yes! My first thought was that if abolishing net neutrality forces entrepreneurs to develop less trivial ideas then it might not be such a bad thing.

Thanks Fred for explaining why the examples are so bad! And it's reassuring that even VCs don't have great ideas popping into their heads every time.
So wouldn't you just force the font?
For talks to user groups where I'm generating new slide decks and demos one piece of advice I was given was reckon on around 1 hour of prep for each minute of speaking time. The successful stuff that I've done seemed to match this.

Also for a one hour time slot you'll probably actually want around 40 minutes of material allowing time for introductions and a Q&A session at the end.
"...though your product isn't at the demo stage"

You mean demo even though it's in advanced stage?
What is the difference between tex and latex? Format files
Thought it was very interesting of thinking the minute/second as base 60
Love the idea!

I tried and the first result was a place in London, cool but I basically live 40 min away. The second was Auschwitz. I was kinda not too motivated.

But still very nice!
The article mentions illumos--has anybody got any experiences to share with using that instead of BSD or nix?
Junk Content chasing Junk Traffic monetized with Junk Advertising
Better laws, and official respect for them, would be the better solution if we had that option. But how do we get there? Has such a scenario ever effectively protected citizens from government in the real world? And what are we supposed to do in the meantime?

"We cannot even duly protect ourselves from zero-day exploits" - well that's definitional, isn't it? It's hardly a reason to give up on trying to protect communications from "big brother".
So freenet but less annoying to use?
Dan Benjamin's Podcasting Equipment Guide
> As far as I know, the hard drive won't auto-scan blocks that have been sitting still

Seagates at least report their error correction rates via SMART, and make very obvious curves that show them scanning the heads across the disk surface gradually when idle.
Ready for the iOS 6 App Store Retirement?
Interesting fact:

m0n0wall is made by the same guys that make Threema: https://threema.ch/de/
Even more crazy when dealing with it as an angular unit as Minute of Arc.

Historically:
1 Minute of Great Arc = 1 Nautical Mile

Great Arc = Earth circumference

1 Minute of Great Arc = Great Arc / (360 * 60)

Fun Fact:

Earth Circumference = 4 times great circle distance Pole to Equator
historically defined as 10000km or 10 Million Meters (They were that serious about being decimal)

That also explains why the earth radius can still approximately be expressed as 10000km/(π/2) = 6366.2km (just 4.8km off the current mean radius defintion of 6371 km)

http://en.wikipedia.org/wiki/Nautical_mile#History
this is amazing! thanks
I'm gonna call shenanigans on this tweet until seconded or proven otherwise. I have a Nest and have not seen that at all.

That user may have been asked to accept new Play store conditions on an Android device before using the app, but I don't think that has anything to do with the acquisition.
For Linux there is TRESOR (http://www1.informatik.uni-erlangen.de/tresor). It uses CPU registers, which can prevent this sort of attack. However, you're limited to one encrypted drive with this method.
Randomness is not nice with you today, I'm sorry. My advice: don't play any lottery game.
Last time I tried this there was no support for anti-aliasing which was pretty much a non starter for me. Does anyone know if that has changed?
That would be steganography then, which is distinct.
Also, I have a Nest and don't intend to get rid of it for now, but the Google acquisition has made me decide to not buy any more Nest products. :(
All about Catalyst – interview of Matt S. Trout (Part 1 of 3)
The flip side of this is that it becomes impossible for someone to prove that they haven't got an encrypted volume stored somewhere. It will be interesting to see in which way the courts go with this.
I will. And there's also a sidebar/menu when you click on the logo, but that's not obvious at all.
Osmocom baseband tried this. Works on older motorola phones, then just buy a turbosim with encrypted voice, sms and code your own OTA blocking. Or use a small tablet with no sim using wifi
> how do we verify that these integrity measures don't themselves become corrupted?

In ZFS, a storage pool is a merkle tree[0], the checksums themselves are checksummed (as part of their ancestor blocks). The one risk is that the uberblock itself (the root of the tree holding a checksum for the whole thing) becomes corrupted, which is why IIRC zfs stores the last 128 revisions of the uberblock in 4 different physical locations[1].

[0] http://en.wikipedia.org/wiki/Merkle_tree

[1] sadly does not mean you can rollback to any of them, when a new uberblock is created (which is common) the previous's set of metadata (meta-object set MOS) becomes reclaimable, and once the MOS has been reclaimed/reused the corresponding uberblock is useless
Yes. I'd rather have "better than Wikipedia" than "Wikipedia for free."

If browsing Wikipedia is too expensive, let's work on lowering data rates for all content, rather than giving Wikipedia special privileges.
Hacker News noob comments stream
For some reason, I get confused between 8 ounces in a cup and 16 in a pound. But a scale will measure in grams just fine, do I tend to prefer that.
Implementations of crypto, such as Truecrypt, rely on algorithms/ciphers such as AES which (in some modes) basically appears random... But the appearance of randomness is not enough if someone is convinced there is meaningful data there. Of course, a break such as "we can tell if there's a hidden truecrypt volume" is bad, and if I recall correctly there are ways of doing this now.

You'd need to basically never transmit the data, transmission automatically implies there is something there. If you didn't transmit, just used the data locally... And it appeared random, you'd have a pretty solid case for "they can't know". But if you slip up just once it's all over. They know.
Scary thing, this is same thing that created Rockfeller-era monopolies: they had right and did pay railways to create preferences (price-wise and otherwise) for their traffic, literally derailing competition. Internet is the bloodline of the post-industrial economy just like railways were of industrial one. That is much worse than most of you think.
Nope. That'd be an invitation to copy Google's copyrighted data, which defeats the whole point of OSM.
Wow, huuuuge congrats to FarmLogs! This should be a very exciting year for you guys!
That's not the way to get customers, in fact it's the quickest way of driving potential customers away.

Why do you need my personal details? Why can't you just tell me about your product and how it could help me!

Selfish.
This is true. However, Rust is intended to be a systems language, which among other things means no, or at most optional, garbage collection and types for unboxed values.

Like Java generics and subtyping, any given part may be simple on its own, but the combination is not.

Rust tracks lifetimes for stack- and dynamically-allocated values as part of the type system; hence "owned" pointers. Which are horrible by themselves; hence "borrowed" pointers and the resulting lifetime complications. Rust includes traits, which are similar to Haskell type classes and are very nice. However, they come with a heapin' helping of their own complexity.

And so forth. Rust is aiming for a sweet spot somewhere between a relatively-simple Hindley-Milner[-Damas] parametric polymorphism and full-on dependent typing. So far, I think it hits a pretty nice local optimum.
Walk down the street in any industrial park and write down business names and research them.

Write down 10 names and you'll probably learn about 7 different industries you knew nothing about.
This marketplace idea is really cool. I'd imagine that since this doesn't really touch the application at all, once the cost of trying something basically drops to zero this would create lots of freedom to experiment with potentially impactful things that one wouldn't otherwise mess with.
One word: budgets. The problem with "enterprise" isn't their reluctance to adapt agile principles, but rather that people need to know "if I pay X, then I should get Y" - agile basically says "we think we know what X is, and we know your version of Y isn't what Y will become"
Previously listed at https://news.ycombinator.com/item?id=6247903 and https://news.ycombinator.com/lists
Ironically, the market seems to be not optimizing for optimal net revenue (income minus costs, where here you're minimizing costs), but for control. This is partly because of the control freak nature of these companies, partly because the government demands it, but also, again ironically, because of long term thinking: if these companies can lock people out and control them, that helps to guarantee future profits. The free market can sometimes be a cruel bitch bent on the end-user's oppression.
I've been very happy with my Nexus 7. So much so that I wish it had a phone.

I know it's crazy, because it's huge, but if you can get beyond the oddness of it (cf: people usings iPads as cameras,) I think the "Phablets" are a form factor so practical that fashion will have to embrace it.
he's really lost the plot. :(
There's no guarantee that the data will reach your BR disk intact. Or that a writable BR will survive for years (let alone decades)