skysight-inc/HackerNews huggingface dataset:
That's why Privacy Guard from CyanogenMod is so useful.

(Actually it's called AppOps and it's from Google but it's an hidden feature on stock Android)
He didn't say he was ignored, he said he was treated like shit. I would say his description is pretty accurate.
* Publish a list of vulnerabilities to manufacturers first and, in time, to public.

* Make an open-source scanner that reports (to the user) vulnerabilities in user's hardware / software.

* Spread awareness about security to the general public. This includes making them aware of the above two, as well as low-hanging fruits such as "stronger passwords", "don't reuse passwords", etc.

* Have regulatory bodies that shame / ban manufacturers that don't publish security updates. I am not a fan of regulation, but this is much more appropriate regulation than banning manufacturers for designing round-corners around screens.

* Create an agency where white-hat hackers can independently submit their findings and sponsor their work.

These are just the top off my head; would love if someone criticizes them.
At this point, if you care about your privacy, why would you even still have a Facebook account?

I used to think I could be 'safe', that my advanced knowledge of privacy settings and optimised usage patterns could somehow shield me from the fundamental nature of these data monger corporations. But the truth is concepts like cloud and social networking are fundamentally toxic to privacy and freedom.

I'm now pretty close to the day I delete my Google account, and that provides far more useful functionality than Facebook.
I was referring to general population spying. (and not limited to American citizens)
"Most likely the..."

I don't care much one way or the other about Uber or about this case, but statements like this are a bit scary. Why would you assume? It makes it seem like you're starting at a conclusion ("Uber is at fault") and working your way back to some evidence ("Therefore the driver must have been in a hurry to pick up a passenger").

Sure, the "evidence" arrived at fits the conclusion, but that doesn't really mean anything.
> Muzzafar was cooperative, Mahoney said, and “claimed he was driving around and his Uber application was turned on and he was waiting for a fare or job close by.” [1]

I don't think this case is going to have any dispute about the facts. He did not have a passenger, was not enroute to a passenger, but had the Uber App on and was driving around waiting for a fare.

[1] http://www.sfexaminer.com/sanfrancisco/uber-driver-arrested-...
I thought about it and I'm going to say yes. Uber is absolutely liable.

Simple;

If Uber app is on = cab driver makes money
If Uber app is off = cab driver makes no money.

Uber app operating is proof that cab driver is looking to get paid, looking for patrons, and hence employed by Uber.

Only way to circumvent that is to shut off the App if you're not going to be picking up anyone or you're in a buffer zone, grabbing lunch etc.

Am I wrong?
This sounds really interesting! Let me talk to my team. I would love to discuss this with you further. Please email me at team@immunityproject.org
The ending says that "any recipient" can initiate a payment, but of course that's not true; see OP's complaint.
I am starting a Ph.D in evolutionary biology in May. Julia looks like a pragmatic solution to a lot of the voes in computation these days. If you require folks to do things, I would be happy to assist. I have extensive experience in C and python. I hack in 20 other languages too, but have not yet completed any serious projects in julia.
Is it necessary to set the `elementKey` property of views beforehand?
I imagine it to be a horrible miscarriage of trust to not use HTTPS. We made the decision early on that handling any personal data not over HTTPS was massively irresponsible - and this is pre-Snowden.

That said, if they have kernel-level hacks or can intercept and decode HTTPS (or sit and listen on say, any AWS server they want), what does HTTPS really matter against the NSA?

Still, totally irresponsible - battery life is a constant struggle, but not enough to even make us consider changing our API client code.
Good thing I didn't say they did. I referenced Huawei USA as to highlight there are indeed domestic facets to this story. I am going to guess given your comment you can with authority detail what devices are and are not backdoored. If you cannot I don't see what your comment is meant to convey other than that 100% of Huawai hardware has not been subverted.

Don't start this tactic of distorting someone's commentary again, the last time you decided to respond to me you went about aggressively making up bull-cock as if that is what I wrote. When it was pointed out and asked of you to address the subject instead of bringing up unrelated rubbish you only dug in changing to a belittling tone.

Overall I would rather you not respond to me at all. Thanks.
Can't you already disable access to Contact, Calendar, Reminders, location, etc per app on the iPhone?
Knowing a bit of C but often programming in just about any other language, I was recently inspired to work with lower-level languages like C++ thanks to a bunch of talks from Microsoft's Going Native 2013. Specifically Bjarne Stroustrup's The Essence of C++: With Examples in C++84, C++98, C++11, and C++14 -- video and slides at http://channel9.msdn.com/Events/GoingNative/2013/Opening-Key...

C++ really has changed and is changing from what I learned back in university. It's quite exciting. They seem to be standardising and implementing in C++ compilers the way HTML5 is now a living standard with test implementations in browsers. See also: http://channel9.msdn.com/Events/GoingNative/2013/Keynote-Her...
wow...unbelievable! would like to hear your next finding
This makes sense. These policies are probably warranted for actual credit card companies. But, the OP's grievance was with Square, which isn't liable for fraud and probably doesn't need to use such excessive security.

Frankly, it often seems as though many consumer financial companies (like Mint and Square, etc.) go out of their way to make their service harder to use simply to increase their "legitimacy."

Sites like Mint refuse to remember login information and automatically log users out after a short period of time. As far as I'm aware actual bank account can't be accessed from Mint; data is only reported. In the grand scheme, this information is not particularly important.

It would be far more catastrophic for someone to gain access to my email account or social network profiles (where they could actually do damage) than it would be for them to learn what (little) I have in my bank account. Yet, we all survive using only standard security on most of our other accounts.

Moreover, there seems to be a huge disparity between credit card security in the real world and credit card security online anyway. In the real world, I hand my credit card to numerous people with whom I have no relationship and whom I can't trust at all, every single day. No one thinks twice. Yet, when someone wants to look at their bank statement, they need to bend over backwards. It just doesn't make sense.

Integral pieces of the financial apparatus might need to be totally secure, but consumer web apps that don't ever handle money don't, and should put user experience first.
Marketing. It allows you to advertise a prize about double of what it normally would be.
First Cross-Country Tesla Trip Takes Less Than a Week, Costs $0
I remember noticing this on a lot more than just facebook. The Android permissions model seems to now be pointless as so many apps ask for pretty much all of the permissions.
I still can't find the line you just quoted.. maybe i'm tired. hmm
You would have to read the complaint for the actual language as the article contains an ambiguous summary. I agree with your reasoning, that it sounds like I could sue Facebook if a driver was looking at Facebook while driving. However, if he was looking at the Uber app as part of his duties with Uber, Uber may be liable. If true that Uber instructs its drivers not to use the app while driving, Uber may have a defense.
This is kind of a non sequitur. It sounds like you're trying to argue against someone who denies that women in tech are sometimes made to feel uncomfortable. Maybe you didn't read my post carefully, but just saw "why don't you let them seak for themselves" and assumed that was my position.

You're begging the question here. If the name of this site really belongs to the same category of things that make women uncomfortable, of course it is bad.
I think you missed the question in my comment. That's OK. It was rhetorical.
That presupposes that he realizes the idea was already executed.

In any case, even if he did, I can think of a number of very good reasons why building something similar to another already executed idea is still a worthwhile endeavor. For example, maybe he wanted a new portfolio piece or maybe he wanted to learn some new technologies.

I like both. Yours is nicer though.
"draw over other apps" is to implement chat heads (see http://www.piwai.info/chatheads-basics/)
Your comment doesn't make any sense unless you believe NSA backdoors all the Huawei devices. NSA's implants aren't limited to Huawei; Cisco and Juniper implants have already been disclosed. I figured you believed they were backdooring all of them; after all, you also believe "you have NSA affiliates like Palantir mucking about with firms like Hunton & Williams. Teaming up to do attack work on generally anyone who opposes the persons who make up the facade that is US Chamber of Commerce".

I don't care who you want to reply to you or not. You're writing to the thread, not just to me, and vice versa.
> life is better when I separate whatever holds the state from whatever has the behavior

If you are not doing what is traditionally taught as OO, and you are doing something better why not say that?

I wonder why you don't say: "OO is an inferior design because it tangles mutable state with behavior"

"Not OO" should not be pejorative. OO is definitely sometimes wrong.
Same here. The $25M/year is a great insurance policy to keep you from doing something stupid and blowing it all, but I'd definitely take the ~$300M or so up front after taxes.
You were referring spying in general?
why repeat an empty comment? It's clear that you don't really have any knowledge of, or insight into state of the art machine learning, so I don't see the need to paste in what you've already said. It's very hard for those not familiar with the field to see when something is novel, much of ML looks "obvious" to a typical developer.

As for Google's KG, updating the model in real time isn't really necessary, knowledge doesn't typically advance emails or blog posts at a time. They already have that in their search, knowledge is something that is mutually agreed upon and takes some amount of consensus. Using the structured sources (like freebase) is much better than trying to do dependency parsing on some blog post and try to make sense of it. Powerset tried that and it didn't work then, and won't work for at least a few years. ML advances not in leaps and bounds but rather by little pieces of the puzzle falling into place. The biggest thing to happen to the ML world isn't algorithms or fast computers, but the abundance of data available. Like pagerank, the more data it has, the better it works, the same is true of ML systems. Google has more data than god, and it is through this they will push the frontiers of AI - along with IBM and the others working in this field.
I wish Google would recognize that it would be beneficial to protect users from this kind of thing by providing a decent management UI that didn't require using CM. Of course, that goes against some of Google's own interests...
My fault. I just ninja added the link.
Yes. And of course no app can read your text messages in the first place there.
Hopefully more JS CDNs will get blocked by parental filters (https://news.ycombinator.com/item?id=7129604), and suddenly there will be a delightful reversal of the current sad trend of not building sites that degrade gracefully in the absence of javascript.
am I crazy or could they not just include a uri to the facebook app with the 2 factor auth token included as an argument?
There are some interesting ideas in here. Comments:

* Even private vulnerability research venues don't reliably publish to the public. When vendors pay bounties, they often keep the vulnerabilities quiet.

* NSA already does security awareness. For instance, they publish a highly-regarded series of documents on secure standard configurations for Unix and Windows systems.

* NSA can't regulate industry; they have no such authority.

* You're really comfortable with the idea of NSA outbidding private venues for vulnerabilities? (Note that the USG already does sponsor "white hat hackers" through the DARPA grant system).
Archive dot Org is Down?
Is it just me or is Archive down?
No, currently you don't need to set the 'elementKey'. It provided transitional functionality for some of our early beta testers and is no longer necessary.
http://imgur.com/W09C9uO

Twitter is doing the same. It requests access to contacts list, SMS, phone call, phone Identity. I noticed the same and stopped updating. Andiord should enable users to control apps.
Inside.com Launches
So there are two answers, one saying to try without -9 first (which is obvious), and the other suggesting you uninstall any program where -9 is necessary.

Was this submitted to HN for more opinions? So people could see the disagreeing answers? Something else?
C is a great language- it let's you get down and dirty with the computer.

However, the one huge downside to programming in C is having to deal with strings. Let's face it, C strings are absolutely terrible. For such an important feature, the string implementation of null terminated char* is just miserable to work with. See:
http://queue.acm.org/detail.cfm?id=2010365
IMO, the only way Uber wouldn't be liable is if the cab driver shut off his uber phone and turned on his personal phone.

Uber app on means he's ALWAYS hunting for business. Uber enabled that. Uber's insurance should protect the driver.
The $25m/year is pretty bad value.

Even at earnings of only 3% above inflation, that's still $1.6B after 40 years. When you factor in the risk that a 30 year old might be dead after 40 years (about 20% if I'm reading this AU life table correctly), I would prefer the $500m upfront.
I agree. I never said I didn't think Uber was liable. I was just posing the question.
I remember learning about kill as a kid, then kill -9 in college, and after college re-learning it via Monzy[1].

I had sort of forgotten the importance of the signal argument. Such an incredibly powerful command that is nothing more than a representation of a very simple decision or architecture [2]:

Some of the more commonly used signals:
1 HUP (hang up)
2 INT (interrupt)
3 QUIT (quit)
6 ABRT (abort)
9 KILL (non-catchable, non-ignorable kill)
14 ALRM (alarm clock)
15 TERM (software termination signal)

[1] - http://www.youtube.com/watch?v=Fow7iUaKrq4

[2] - man kill
Using a non-common name heals all. We have too many David in the same office. It's appealing for people to remember so that it sounds nice. But it defeats the purpose for us to have a name. Name should make you unique.
California should have adopted public access rights like Hawaii a long time ago. For example, from http://seagrant.soest.hawaii.edu/public-access-rights:

Q: How should the public access beaches and shorelines that are blocked by houses?

A: If private homeowners are obstructing existing public rights-of-way to the shoreline, HRS § 115-9 provides a remedy and up to a $2000 penalty for that kind of situation.
Thanks for the question! PLGA is the one of the most commonly implanted biodegradable materials in the world - primarily because it is used is used in dissolving suture (check out this link to very popular PLGA based suture material).

Aston S, Rees T. Vicryl Sutures. Aesthetic Plastic Surgery 1977;1:5.

The "threatening point" is just a way of describing what TLR-4 (MPLA) and TLR-9 (CpG) do. In particular, MPLA "looks like" bacterial cell wall and CpG "looks like" bacterial DNA to the immune system.

Steinhagen F. TLR-based immune adjuvants. Vaccine, 2011: 12.

We did not consider using nano spheres because we wanted to get as much payload as possible into the antigen presenting cells without requiring multiple phagocytosis events per cell.
You would have to do something monumentally stupid to blow $500m. Or even $300m.
I think this "problem" can be viewed from a different angle: Mathematicians have managed to find a language which they feel confortable expressing their ideas in (whether for fun in this case or for more serious applications). I don't see this as a bad thing, and I say this as someone who definitely prefers to write practical close to metal type programs in Haskell, and doesn't care much for the all the mathematical theory some other adore.

On the other hand, it turns out that these mathematicians are giving back some great things to the community. People like Edward Kmett have done a lot of work in using category theory in Haskell, and it's given us lovely things like lenses. They can tell us why things things we think should work but dont (some things you can write a Monad instance for, for example, don't obey the monad laws, and more often than not that leads to problems).

The only problem I see if that there are often two different languages being spoken, and it takes a while for us less maths inclined to catch onto why this work is beneficial to us in every day code.

Perhaps when I've got something working, I can write a blog post for you showing my Haskell implementation of a decompressor for LZ4, which is most definitely low level and applicable to the real world (there's lots of pointer arithmetic going on).
I truly don't understand how this can be an okay state of affairs... Beaches, at least here in Australia (and at least where I live in south east Queensland) are public. Even though yeah there are millionaires that own beautiful properties on the beaches here on the Gold Coast, we all get to use them, and access them via paths that the city council own.

Can someone explain how blocking off access to a beach works here? Is it because the access paths are privately owned?
Yes of course. But this allows them to automate that process.

Typical tradeoff: It's a nice feature, but adding it requires permissions that are off-putting to some users. I'm not sure there is a good solution here.
Thanks very much for the kind note! I would be happy to send you a link to the paper the guys working on the statistical analysis of beneficial HIV target regions when it is published.
It isn't an OK state of affairs. The gentleman is apparently breaking the law but the only remedy within the law is through the state agency that is preparing to sue him.
Revolution in Kiev (some more)
Everything will probably be just fine if you kill-9 something. If a program fails permanently and dramatically when it's kill-9'd, you should "remove it from your filesystem", because it can't handle other, unavoidable abrupt failures either.
Google Glass now with prescription lenses and real frames
I'm fairly sure I agree. If Uber is liable when the driver is moving a passenger from a to b then I think they should also be liable whenever the driver has the app open and is available for rides. I'm just not 100% sure they should be ever be liable for a driver's negligent acts because those drivers are independent contractors, not employees. That to me is the more interesting question.
The usage of a 0-249 block also keeps that sense of fear for the user base of the service(s). A sort of government scare tactic, you could say.

If a service was allowed to say that they had 0 requests, perhaps more users would flock to that service as a less surveilled alternative to a competitor that is in the 1-249 bracket(or higher).
kill = send a signal.

By far the easiest question to weed out inexperienced linux users.
The "view Wi-Fi connections" thing is probably for the free Facebook WiFi access thing[1].

[1] https://www.facebook.com/help/126760650808045
It helps expand their social-graph beyond what you've shared on their platform. It also gives them access to geolocation information for users that haven't shared it previously, as photos shared over text messages may contain geo-location coordinate information. It likely also gives them context about where people are, what they're doing, who they're talking to the most, and what they're communicating about so they can deliver more context-aware advertising.

But if you ask them - they'll say it helps them deliver a better experience for their users and helps connect people, and that's what people really want ... to be more-connected.
Not just Facebook. There are many apps that are overstepping in terms of permissions. I turned off auto-update long ago and removed many offenders, but it seems every app these days is now requesting as many privileges as they can get away with. The general population of users aren't reading the list of new permissions on updates and no one is making these co's explain themselves as to why they need listed permissions. I asked an engineer behind an app I wanted to use that paired with a paid service I love why they needed access to my contacts, considering my contact list wasn't part of the core service. I told him read access to my contacts and full network access made me wary; what would keep them from reading and storing all my contacts on their server? His only response was that they promised not to do anything nefarious. I should not have to root my phone to use apps while protecting my personal data. Android User Profiles sounded very promising to keep private away from social, but my experience testing this feature out on the Nexus 7 was terrible.
I'm going to guess that if this goes to court, it will be decided in favor of the public.

If California has a law stating beaches are public land, it doesn't really make much sense if someone else is allow to prevent you from accessing it.

It's sort of like saying you have "freedom of speech", but then banning all forms of communication.
I'm not sure it's that cut and dry. Since the driver isn't an employee, but instead an independent contractor, he could have the app on while he's driving to go get groceries or any number of other personal errands. Should Uber be liable then? Maybe, maybe not. I'm not sure.
Bingo, you are correct. Beaches are public property in CA, although apparently there is nothing preventing people from hiding the entrances or putting up "Private Property: Beware of Dogs" signs.
"quality of their code is very outdated" ??

What does that mean exactly? "Outdated" is not an adjective usually applied to "quality".
Great comments! We expect the beneficial targets to be HLA restricted. We need to do more work to understand if any one individual needs to hit two targets - we think right now that a "master vaccine" would need to contain multiple peptides to cover multiple HLA type individuals yielding at least one "valid" target per individual.
Reading the headline I thought - well if there was no passenger- they are fine. However, if their whole model is based on drivers using an app to find passengers and the guy was hunting around for them when he hit the pedestrian- it's problematic. I guess Uber could take the position they assume the driver is stationary when getting new instructions.
That I have to absolutely get out of IT, because it has become a soulless, mind-breaking, and exhaustive way to be exploited by idiots. I suppose any job is like that, given how Western society is organized these days. But I have no other useful skills and though I have a work ethic, my CV is such that if I even applying for a bar job, or busing tables, ... "why the hell are you applying for this job?" I'm stuck and can't get over this reluctance to burn all my savings trying to change my direction in life.
The good solution is in Android's hands and is to allow on demand permission requests after the app is installed.
Google Glass gets a new look