skysight-inc/HackerNews huggingface dataset:
The problem I had with both those terms is that they're not anonymized (and unless the usernames are obscene, bowdlerization isn't really a good fit). With the other leaks, at least for the older accounts, a name can be associated with these charts. For the newer accounts or those that lay dormant for a few years before trading, I suspect those who have been logging the web socket and IRC traffic could create a correlation with an individual.

Anonymize is probably fine, but I want "reversible anonymization". :)
Except that with a muted video, you need to communicate to your forum users that yes, they can upload a video, but it will be played back without sound. It's a different thing.
Good point. Most of the protestant Christians in the contemporary United States should really call themselves "Paulistinians," or something similarly catchy and descriptive.
i'm just about to release a whole ton of stuff...

one-click output to many formats, including .epub,
from light-markup (zen markup) ascii-text-files...

2-pane setup: supercharged textarea on one side,
and nicely-formatted live display on the other...

other apps cover the entire workflow, start to end.

i'd love pre-release feedback. bowerbird@aol.com

-bowerbird
The public school your children attend is very much a decision as people commonly choose the location they live based on that. As evidence of this perceived quality of school district can be a major factor in property values.

As a minor many of your choices are of course left to your guardians, if as a minor you have a problem with their decision making then that's really an entirely different manner.

You are compromising saying 'its not worth finding a new place to live, possibly a new job, to avoid having my children use google' That is very much an analysis on your part.
Implemented via DNS, for now... You can see the court orders about sites from TIB's (The Presidency of Telecommunication) query site. http://eekg.tib.gov.tr/

It's a system where every ISP with a license has to abide. They download a list of domains that needs to be forwarded to a server operated by TIB to explain the reason of access blocking. They add these to their recursive DNS servers so traffic goes there. People using another DNS server other than their ISP's (e.g. Google Public DNS, OpenDNS, etc.) are currently able to access.
I do. that's why I think it's lazy.
Ah, so this is the constructive discussion I've been told to contribute to. Thanks for demonstrating it.
Alone among these recommendations, this one is indefensible in practice (though understandable on paper). We see people implementing "simpler" TLS alternatives somewhat routinely in our practice, and they are virtually always broken. A fear of TLS --- which is reasonable --- is an insufficient reason to expose yourself to the risks of a custom crypto protocol.

You'll save yourself time and heartache if you just use SSL. Once every few years, someone will find a flaw in TLS, and once every few times that happens, that flaw will be relevant to your application. But on those rare occasions, you'll also have some of the smartest crypto implementors on the planet rushing to come up with the best fix, which is something you will never have with a custom protocol.

It is worth remembering here that the overwhelming majority of TLS security issues are relevant primarily to browsers, and rely on the BEAST exploit model, where attackers have extensive and fine-grained control over what plaintexts victims generate, due to Javascript.

If certificate processing code scares you --- also reasonable! --- and you're building a client/server backend system, do what enterprise software does: slurp the whole certificate into your code, fingerprint it with a hash, and verify it in a whitelist. Your TLS implementation will still verify the certificate, but you won't care; you'll rely on your whitelist for security instead.
Bullshit. I was tweeting from Istanbul just 3 days ago.
As said on reddit, that is really a poor choice of name. Good luck looking something related to this language on google putting "hack" in the searchbox...
It is even worse than "Go"
Hey all, unfortunately (but also fortunately), we are full up to capacity for this event. Please contact me if you are interested in other ways you can support teamdemocracy.us, or have a fantastic idea you want to hack on. My gmail is my username here.
Hacked invoices show how much Microsoft charges the FBI for your information
This has just turned into a meme clogging up hn
Nonviolent ways are the only legitimate means to an end, other ways lose all credibility and support.

That doesn't stop one from inventing new acts of defiance that break through the monotony with awe and respect.
But they didn't violate their trademark, there is no use of the name Fluke or their trademark.

"A trademark is a brand name. A trademark or service mark includes any word, name, symbol, device, or any combination, used or intended to be used to identify and distinguish the goods/services of one seller or provider from those of others, and to indicate the source of the goods/services. " http://www.uspto.gov/trademarks/basics/

You could make an argument that the products themselves are look-alikes, or pursue them if they created a similar trademark to cause confusion, but it doesnt seem to me that they obviously acted to violate a trademark.
The past 5 years have not aged your aversion to elliptic curves very well. New modern designs by crypto specialists tend to be curve based.

The first of those statements does not follow from the second. I agree that there has been an increase in the usage of elliptic curves; but I've also seen a lot more attacks on elliptic curves recently than on RSA or DH(Z_p). Unless you have a particular need for small signatures (e.g., bitcoin) or maximal performance, I maintain that using elliptic curves is an unnecessary risk.

Curves also have a nice property in practice of tilting designs towards forward secrecy.

I'm not sure why you say this. DH has exactly the same PFS properties regardless of the group being used.
Those whom God wishes destroy, he first makes mad.
Oddly enough, makes it easier to win.
Right now Turkish ISP's block twitter through their DNS. People using OpenDNS or Google DNS, or any other DNS service other than Turkish ISP's can access Twitter.

However it's expected to see Twitter's IP's blocked anytime soon. In Turkey some websites, especially porn websites are also blocked by IP.

Here is the DNS look-up result: http://i.imgur.com/yKmmDYc.jpg
Am i missing some magical eclipse configuration? I need to increase font sizes and at best i can only do half the IDE. Eclipse has been an atrocious experience for me so far.
+1 I also have a Jerker. I swapped the drafting chair for a padded bar stool, like you'd see in a sports bar.
GIFs at tumblr
Thanks. Just confirmed through channels also.

Highly recommended that people, regardless of location, use encrypted DNS like OpenDNS to prevent monitoring, malicious in-flight modifications and DNS-based censorship.
How'd you get that cool light gray text for all your posts?
Should you lose, "you've been wangernumbed!". Not sure if that counts as a mode.
Reverse order:

My claim about forward secrecy is easy to understand: ECC software doesn't encrypt directly, but RSA software easily can, and developers (for instance: Paul Kocher) give in to the temptation to use RSA encryption directly. RSA practically begs developers to create systems that aren't forward secure.

There is a lot of new attack research on ECC. But how much of that research implicates (a) common implementations of (b) the popular curves (NIST-Px, secpx, and Curve25519)? Inquiring minds, who have been implementing a lot of attack papers on artificially vulnerable curve software, want to know!

(Also, curve attacks that target DSA tend to be the fault of the DSA construction. I'm guessing this isn't the level at which you're thinking of curves being attack in the literature, though.)
DeleteCoin – Let the Deleting Begin
On recent server hardware, that implementation is likely not to have side channel problems; the same is rarely true of HMAC implementations, which tend (annoyingly) to be hand-hacked, particularly for verification.

Disagree. Hashes and HMACs are very safe against side channel attacks. Heck, I don't think I could insert a side channel if I tried!

On a 1-10 scale of side channel attackiness, hashes and HMACs are 0, block ciphers are 3-4, and asymmetric crypto is 6-8.
It's the image-hosting ecosystem. An animated image format needs to be accepted for upload by public image-hosts; it needs to keep its animated-image semantics when hotlinked and displayed "raw" by a browser; and it needs, needs to work when hotlink-embedded inside an <img src=""> element.

These are all things that are true of GIFs, and aren't true of any other video format. (And this doesn't even address the fact that many people use GIFs for the combination of animation and transparency, which <video> doesn't currently offer.)

The image-hosting ecosystem also naturally deals with the bandwidth-drain issue: image-hosts don't want their bandwidth stolen either, so they have a cap on upload sizes. By allowing just <img src=""> embedding, you naturally lean on the image-hosting ecosystem's bandwidth economics to protect your users.

By allowing arbitrary <video> embedding, though, you invite the nascent video-hosting ecosystem, which has achieved a different balance: far looser bandwidth limits, but far stricter caps on concurrent requests (e.g. the Dropbox-Public-folder model.)
Come on. You mean apart from virtually every web stack's implementation of HMAC? They all start with a version that uses string comparison.
Err, that explains being conservative.

My point is being within the law is not quite enough. You want to be so far within the law that you can get most court cases thrown out without actual litigation.

Or as a rich friend of mine put it. I like paying a little extra in taxes every year. Sure, I could take every deduction but I like knowing if I am ever audited I will end up with a nice check.
I thought it was a shame for a different reason. Given I'm far from an avid Facebook user these days, the UI led me to believe this whole thing was a statement being made by Facebook, until I got to the very end of the letter: "Signed, Fluke Corporation."

Was very confused about Facebook talking so much about hardware.
To clarify, current Firefox does support Windows XP, as long as it is up to date, which means service pack 3. If you are still using an _unpatched_ version of Windows XP, well, you're on your own.
Ouch. Current market value on 1.8 million shares = $2,154,600,000. I think they managed that rather poorly (I understand it's common for investment funds / trusts / endowments - which perhaps the IP was held by - to liquidate soon after an IPO, but I'd think a university like Stanford could have more patience).
Yep, any use of hyperbole forever invalidates everything someone says.

FWIW, there's only two "elements" (the back and border are one piece), and their distinctiveness is specified in terms of basic colors one learns in elementary school.

The ability to monopolize a general two-tone color scheme on a durable tool that someone may use every day is outright ridiculous.
Everything that http://gfycat.com/about says about GIFs is also true of APNGs. For things that are actually video (i.e. not a pixel-precise hand-drawn three-frame 32-bit image loop), using a video codec is just better in every way.
I love this! I enjoy playing!
So a sales and marketing genius then?
I have no idea how you got from what I said to EULAs.
Django 1.7b1 released
Can someone please tell me what this company actually does?
Sorry, I didn't mean to imply you didn't; I was just explaining why I had overlooked the point you were making. :)
http://gfycat.com/
What you say is technically correct, which is the best kind of correct. However, fewer than 1% of Windows programmers ever talk to NTOSKRNL, and probably an order of magnitude fewer do it regularly.

Most of the time, you're talking to Win32/64 or high-level services based on DCOM or .NET, where the "well-conceived" and "theoretically well-founded" stuff doesn't turn up. You can go your whole career without knowing that there's a well-designed kernel under all that cruft.

I'd guess that less than half of Windows developers could say what the object manager does.
http://gfycat.com/ has been gaining popularity on reddit lately. Links allow you to pick gif or html5 video.

Example: http://gfycat.com/GlisteningBruisedClingfish
Actually no they're not. Goldman Sachs has never been competitive in HFT. Him leaving was a big loss to them and a big part of why they prosecuted him. Goldman is successful because of corporate banking, investment banking, mutual funds and prime brokerage.

HFT is just one strategy and one that is persistently a flusher at Goldman.

Edit: Goldman lost its culture and with it the only thing that made them great. They still have name recognition with people outside of finance but to most people with industry experience it's not the first-choice place to go work anymore (like for almost 10 years now). In fact, their reputation is growing increasingly negative with insiders. They will still be a darling for pensions and corporate bank customers for quite a while because longevity and name recognition are everything in that business.

(Full disclosure: used to work with HFT infrastructure for a NY hedge fund)
Well in Turkey, the president overthrow the army guys, police, and prosecutors. http://www.theguardian.com/world/2010/feb/22/turkey-military... http://www.todayszaman.com/news-340380-120-police-officers-r...
How do you promote the domain? That's the real question. Twitter makes it quick, effortless and free to disseminate really interesting information. It's slower, more cumbersome, possibly more expensive with other methods, even with something like email.
Do you actually sign a contract when you buy a loaf of bread?
Most striking to me is how impossible such a direct conversation would be in this day and age. In a similar situation the manager would be pretty worried about HR/litigation possibilities.
> There's no reason they should be expected to put dev resources into an OS that's 12 years old.

Depending on the the prevalence of XP usage among their users, there might be one, actually.
The resemblance to http://www.zappos.com/ is somewhat ethically questionable.
I've found a useful way to keep stoic thought in my everyday life. I almost never use elevators and use the stair climb as my chance to do some negative visualization. It's a good combo of removing convenience from my day, exercise and thought. You also get a nice sense of relief once you move past the negative and arrive at your floor.
Exactly. The lesson isn't to not hire brilliant or average people, but to trial people more gradually. The made up story also attempts to draw a conclusion from an anecdotal level of "evidence." Doesn't seem to stick for some reason.

Risk reductions can be:

- invite people over to hang out, hack on something, or work on whatever they're working on
- start people on a contract gig
- maybe another contract or what works for them
- have an extremely informal non-interview, interview process
- trial period
- eventually FTE status in a set time-frame if both sides want it
Ask HN: Freelancer? Seeking freelancer? (March – 2014)
Please lead with either SEEKING WORK or SEEKING FREELANCER, your location and whether remote work is a possibility.
There's one specific case which is close to impossible with 'video' formats: referring to animated images in CSS. This is quite important for certain sites where users can modify CSS but not HTML.
Wasn't there an ECC side channel attack in OpenSSL just a week or two ago?

As for the more theoretical research -- none of it has been relevant to widely deployed systems yet, but this is the nature of research. Elliptic curves have a lot of structure which is still being explored, and as long as people continue to find attacks against new variants, I'm not going to bet that they'll never find attacks against the widely deployed systems.

I put being wary of ECC right now in the same category as being wary of SHA256 in 2006. It's not broken but there's a worrying amount of progress on related systems.
In case anyone is wondering the proper way to compare two HMACs, it's to xor the strings and check whether the result is zero. If string A xor string B is zero, then they're equal. If it's nonzero, then they're not equal. This will prevent timing attacks, because the entirety of both strings are compared.

When you compare the two HMACs using standard string comparison, you expose yourself to a timing attack because the algorithm will likely stop comparing after finding the first difference in the strings.
Well, fuck you very much. This is unbelievable.
There's probably quite a few people who are unfamiliar when back in the day, they were working with Prodigy to verify anybody using Prodigy didn't have a counterfeit MS license on their PC.

Nothing ever happened to either company, and you'd be hard pressed to find an article on it, but MS has been snooping on their users for a long, long time.
It looks like they come in and optimize your business, I think?
Ok, but if people are going to get that wrong, they're going to get a million other things wrong too.

There's a reason I talk about this in my crypto-in-1-hour talk though. ;-)
He provides Newton as an example of the kind of non genius he would employ. Learn to read.
Is Hierarchy Helping Or Harming Your Organization?
In case anyone is wondering the proper way to compare two HMACs, it's to xor the strings and check whether the result is zero

You've just punted the problem. How are you checking whether the result is zero?

The correct code (copy and paste from libcperciva):

/**
* crypto_verify_bytes(buf0, buf1, len):
* Return zero if and only if buf0[0 .. len - 1] and buf1[0 .. len - 1] are
* identical. Do not leak any information via timing side channels.
*/
uint8_t
crypto_verify_bytes(const uint8_t * buf0, const uint8_t * buf1, size_t len)
{
uint8_t rc = 0;
size_t i;

for (i = 0; i < len; i++)
rc = rc | (buf0[i] ^ buf1[i]);

return (rc);
}
Sergey Brin's Resume
Heh. My first answer was "copy paste the algorithm from tarsnap," but then I thought I'd better explain it directly. Thank you for pasting it.
You are comparing products aimed at two entirely different markets; may as well be saying that 'Lexus has every right to copyright a yellow car because KIA makes such an inferior car.' .

Just because a product is distributed with different intent and audience does not mean it does not deserve to exist.

Excuse me while I enjoy this hot pocket, I find them quite alright, thank you.
But my disagreement with Stallman is ideological. In particular:

1. I think that enumerating freedoms is at best a waste of time and at worst a way to justify abridging the freedoms that matter.

2. I think the question really is who gets to direct downstream licensing and under what circumstances. The MIT license allows an individual to add restrictions to the license without even making contributions. The AGPL encumbers services provided with license terms. The other licenses are in the middle.

Instead of enumerating freedom, I would rather define it, namely as the right to engage in economic production without upstream obligations. From this viewpoint, the AGPL is significantly less free than the license of the closed source redistributable libraries that come with Microsoft Visual Studio. Since I find the latter too restrictive for my taste, I won't touch the former.
Top Gear’s worst cars in the world
Has anyone tried to copy these good parts of PHP, except with a not shitty language?

Is there anything about PHP, the language, that lends itself to this style of development, or could you get these same benefits with, say, Ruby or Python?
>Really? How do you even know if the Google CEO read your Gmail today? What recourse do you have? None.

This is simply a risk you take with any company you become a customer of. You are willingly give that company certain power over you. Rogue employees will always be able to do things that are harmful.

There are many cases of rogue employees working for Comcast and AT&T who will look up someone's IP address and find their full name and address, and harass them or spread that information. Most of the time, some number of employees need access to information like that, and eventually one of them will end up going rogue or becoming mentally unstable.
Sounds like a rationalization for a gap in management capabilities. Much easier to find fault in tall people or people that talk fast.

An insightful business owner will review their own psychology first and ask others for their impression in a way that doesn't reveal their bias.
i think we have time to address the billion people on earth suffering from extreme poverty and human rights violations before worrying about mars.
haha! Well that cleared things up.
No kidding. I was bummed to find most of the links broken.
> It's always been difficult to combine making money with being of benefit to the world

In a free market, money is made by providing a benefit.
PHP's syntax is not what's preventing you from writing large maintainable systems in it. Many of the more successful languages throughout history became successful BECAUSE they used a syntax that's superficially similar to something familiar.

That's not to say that syntax doesn't matter, but semantics and pragmatics tends to matter more, despite Wadler's Law of Language Design stating that most people don't understand this.
Couple finds love on CodeAcademy
An admirable start, but really where is the Leyland P50 (among many many others)
They are in control of an insane amount money.
This site is completely unusable on mobile. Does anyone have a second source?
Your first assertion has no bearing in reality. There's nothing prohibiting a closed-source API form being as fast as or faster than an open-source one. Your second assertion does not imply that your first is correct.

It may be that the current example of open-source are faster than the current example of closed-source, and there may be very real advantages that the open-source approach brings about that pushes the status quo towards as you describe, but there's nothing mandating that. I'm not sure why you'd therefore assert that.
actually it is transfer of visa (and you) to other employer
Medium for Iphone
"But the point I have in mind is this: Business and life are built upon successful mediocrity; and victory comes to companies, not through the employment of brilliant men, but through knowing how to get the most out of ordinary folks."

At a high level, I believe that's the essence of the story (whether is real or made-up).

Today, in a globalized world economy with saturated markets, we are lured into thinking that "the great next thing" will be a product of "brilliance". I think this is a good reminder that it's not. That in fact, on average, sustainable success is a product of a life's work and dedication to a purpose. That in fact, the Jobs, the Zuckerbergs and the Gates of the world are merely outliers and that we should look beyond the expectation of immediate and flamboyant returns.
This is my absolute favorite version, because I can actually beat it!
Idea: Drum-Based Dance Music Performance Context
WPA2 wireless security cracked
Oh, did your banana have "CAT III Max 600V" stencilled on it? The $15 multimeter does. I suspect the cheap meter has about the same right to wear that label as the banana.
Good to know the NSA is a fan of Allie Brosh.
That's a stupid definition for unreliable.
There are plenty of techies with social skills.

'sama ! :)

It must suck to be a techy and have social skills because you'll get pegged as a business gal/guy even if you can hack with the best of em. Most people can't seem to handle the doublethink of two seemingly contradictory capabilities in one person. They need to find a simple job to reduce you to.
Why not just log your visits and explore them in something like Splunk?