skysight-inc/HackerNews huggingface dataset:
There's also at least a few companies on here that aren't startups - both Kiva Systems and Bot & Dolly jump out as startups that are now part of big companies (Amazon and Google respectively)
Why not just add a means of invoking it such that it generates "special" method names when used by Apple, and (if necessary) use the license to require that they use them?
I also live and go business in China, it's not really viewed as "dishonest", more "clever" or "wily".

A very rough overview on the idea:
http://seeingredinchina.com/2011/09/04/dumb-americans/
It seems well sourced, nothing seems false or even exaggerated to me. The site downplays the challenge of running Dropbox which makes it hard to assume it's written by either an employee or competitor. It also seems balanced when it considers alternatives. There doesn't seem to be much to question to be honest.
My computer experience
Agreed, so large you can drive a truck through it analogy.

Why is there not more of a furore about this? When Bush set up (and it was found out) about the extensive activities of the NSA, the reaction was vitriolic in every sense of the word. Here Obama is tacitly agreeing to similar intrusion. This is not a comment on Bush vs Obama, it is more a comment on the media and public reactions.
Show HN: Anon App – If Instagram had no usernames
The data on financing to the space referenced in para 2 is here for those interested - http://www.cbinsights.com/blog/wearable-tech-vc-2013
Thanks for pointing this out. I also tried and failed to find "anonymous data allocations". Although (having just read about them) I fail to see how I'd use your proposed string structure to retro-fit an existing codebase using good old char* strings.
It seems to me that the author of this piece has a lot of "misconceptions about Open Source" himself.

An example: "anyone can contribute, regardless of background or proficiency".
I'd encourage the author to research how open source projects are run before making claims like this.

Also.. How was this bug found again? Oh yeah. By analyzing the _open_ source code.

Professionalism is orthogonal to open source vs. closed source. There's a place for both, and there is good and bad open source and closed source software.

Moving right along nothing to see here.
The business model animating Start's terms is clear to both of us (we've both sold software long enough to see it). Start doesn't make money selling ads and they don't make money reselling personal information. And yet they give something valuable away for free. There's pretty much one model left for them to avail themselves of: upselling.

The Start deal is obvious: you can have an SSL certificate for free now, but that certificate is inappropriate for (for lack of a better term) "serious business" (actually, any business, as stated in their terms, but I digress). The idea behind the offering is that once you realize you actually get value out of the thing they gave you, you'll convert to a paying customer.

Revocation is, as is clearly stated, one of the points in their customer acquisition process at which window-shopping free SSL cert users convert to paying users.

This isn't a complicated analysis. It is the idea behind the offering. People revoking their certificates are demonstrating that they value them. Like most people who value their certs already did, they should simply pay for the new certificate. Failing that, they can (a) accept the minimal risk that their keys were compromised, or (b) change hostnames, kill the old hostname, and start up with a new certificate.

What's at stake here isn't the fate of the Internet. It's the convenience of "customers" who have a revealed $0 preference for security.

I'm guessing that neither of us like the CA cartel, but we deal with the world as it presents itself to us, not as we wish it to be. Support TACK! It's a step in the direction of less dependences on for-profit central authorities.
Aside from the comics, no fiction. That makes me sad.
> I agree with these statements, and I disagree with those.

I find both of these reactions to be equally subversive. Whenever I find myself agreeing with something, I'm unwilling to poke around for holes in arguments or question the accuracy of facts presented. Similarly, whenever I disagree with something, I'm unwilling to concede the strong points of an argument or approach the problem from the presented perspective.

To minimize the effects of these emotional reactions, it helps making my judgments as granual as possible. (Don't judge the person: judge each individual action separately. Don't judge actions, judge consequence and intention separately, etc.)

Furthermore, to minimize the polarizing effects of true-false dichotomies, I instead assign ratings (1-6) for a statement's probability of being true.

For opening myself to contradicting world views, it helps to ask what would have to change in the world for this statement to be true?. Instead of forward-reasoning, where you admit your world view and reason forwards to correct conclusions, this mental trick fixes the conclusion and makes you reason backwards towards hypothetical worlds and asks you to identify their properties. It's then easier to diff your view against the proposed worlds and shift your beliefs accordingly.
The simplest Rails app
Dont be fooled.

This is a PR move.

Compare this to GITMO

"GITMO sucks, i vow to close it immediately" -- "Oh congress blocks me, my hands are tied! Tear!"

"Security vulnerabilities suck, i vow to make them open!" -- "oh look at that, the security apparatus says it makes US vulnerable, my hands are tied! Tear!"
This has been my go-to link when trying to explain what's wrong with PHP: http://me.veekun.com/blog/2012/04/09/php-a-fractal-of-bad-de...
This is why the NSA should be chopped in half. Offense and defense in different agencies so there's less conflict of interest
That's funny. When I make this exact point here on HackerNews I get downvoted to oblivion.

Open Source gives you potential to build a rocket to the moon. But it requires money and time and people willing to mind the code, and people with humble attitudes willing to accept when they've made mistakes and patch the code.

Quality Assurance requires effort, and that's where the fallacy of "Free" software really comes from. If you're not paying for it, you're going to pay for it. (Either by being the QE team and fixing bugs yourself or by living with buggy software.)
I appreciated DFW's book for even attempting to do a popular treatment of what we would now call the history of real analysis. But there were some serious technical problems with it: http://www.ams.org/notices/200406/rev-harris.pdf
So, so cool. I love posts like this.
Wow! The NYT has changed the title of this article from "Obama Decides U.S. Should Reveal, Not Exploit, Internet Security Flaws" to "Obama Lets N.S.A. Exploit Some Internet Flaws, Officials Say"

Kudos to them for switching it to a much more accurate description of the situation.
It's insecure by the language design, not from the framework itself.

When I pen test PHP custom-built sites, I almost always find a dozen high-severity security defects.

Many of the popular PHP-MySql tutorials on the web have sql injection bugs, not a good way to learn a new language.
But Mr. Obama carved a broad exception for “a clear
national security or law enforcement need,” the officials
said, a loophole that is likely to allow the N.S.A. to
continue to exploit security flaws both to crack
encryption on the Internet and to design cyberweapons.

i.e.:

But Mr. Obama then went on to say "discount everything I've just said, the NSA should go on with business as usual, interpreting all current and future situations to further their offensive needs regardless of what is best for the American people or becoming of a modern democracy."
I felt exactly the same way upon finding the site and so had to share!
Amir Hekmati, game developer accused by Iran of spying, sentenced to 10 years
**Our Site Is Heartbleed Secure**
I've always interpreted Linus's law in the following way: given a bug, there will exist someone to whom the bug is obvious and will immediately spot it. However the law doesn't state how many people you would need to check, it might be 2 or it might be 100,000 required.
Ok, is there any odds that a diff of Red Hat and Debian would reveal patches that Red Hat's largest customer, the Pentagon, has pushed?
> provide the foreign power with a disproportionate benefit because they'd likely have fewer other ways of infiltrating many sites.

You forget to mention the assumption that NSA willfully ignore the IA component of its mission.
How Lending A Friend Your Car Before Going to Bed Can Land You Life in Prison
Yes, and everyone who posts that in a thread about PHP seems to think that they're the first one ever to do so.
Specifically, if your body is low on electrolytes it will hold water until it gets them and that holding of excess water causes problems. However, almost any amount of food is sufficient to prevent that.

However, in this case I tend to doubt the water will be all that pure due to dust; I'd guess it will actually have a decent mineral content. Commercial water purifiers often produce mineral-free water and the only issue I have heard of in connection with this (at least as long as you are eating any food) is that most people find that the resulting water tastes bad. Adding minerals back is not difficult at all.

Edit: Sounds like it is a little more complicated than that; the WHO paper that the Wikipedia article that sbierwagen cites is a good read with 16 pages on this topic. One thing they mention as a potential issue is that cooking food in low mineral content water can leach minerals from the food. If the food is then consumed but the water isn't, that would lower mineral intake (discarding water used in the first cooking of some beans is necessary because it removes toxins from the beans but these beans can be a good nutrient source, so this could still potentially be an issue where water is scarce). The Wikipedia article could be skipped, though, so here is a direct link to the paper:
http://www.who.int/water_sanitation_health/dwq/nutrientschap...
BinPress is misusing the term Open Source in their slogan. All four of their featured "Popular Products" are closed source. IMO http://opensource.org/ should be suing them to protect their trademarks, because their use of the term is trying to piggyback on the popularity of the Open Source community that OSI represents.

So I don't think they are in a good position to be talking about the meaning of Open Source, as they're doing in this article.
Prior to the NSA leak, "cyber warfare" was quite the buzzword. China, Iran, and other countries threatened the all US infrastructure from abroad. There was even debate as to if a foreign "cyber attack" could justify an armed military strike. The solution allegedly was the US government spending all kinds of money on these "cyber defenses."

Snowden's leak suddenly left people wondering if the United States itself posed the greatest threat to the US's own "cyber security." There is little doubt that the revelations did severe and lasting damage to US companies who want foreign customers.

Today the problems are, someone might have been able to access your Yahoo mail in the past two years. As computing and bandwidth expands and blends in to the background, future exploits will be things like, every moment, visual and audio, of the past two years of your life, was recorded and is available to playback in full detail. For better or worse, of course the government will get heavily involved.
Effectively banning a commonly used tool from the app store because they use it internally. It's a bit of an "I'm taking your ball and going home" kind of a situation.
Actually rejected because your app had a MOGenerator selector? Details, please. That adds a lot of information to this story.
"We should reveal security flaws! ...Except in 99% of situations."

Go to hell you fucking snake.
All things equal, I'd rather deal with a small risk associated with pollutants leeching from the bottle, than the much higher risk associated with diarrhea-causing organisms in the water.
Isn't there some book about not displaying all of your website's text in images?
Newsdiffs.org is useful to track both minor and major changes made to stories.

More generally, it's a convenient if limited way into the publishing process. It deserves scrutiny, all the more so for those PR-type articles that essentially try to covey nonsense.

http://www.newsdiffs.org/article-history/www.nytimes.com/201...
great points. this spurred a google search to find the breakdown of internet advertising by country and respective growth rates (was curious where online ads are growing fastest and exactly how much the US accounted for), which yielded this interesting nugget if you trust eMarketer: norway leads the world in digital ad spend per person at $209. the US is second with $201/person. australia is third.

http://mashable.com/2013/09/25/digital-ads/
Concrete Mathematics is a great book, really good content and techniques about computing things, and a lot of depth and useful history and side information.
Produce the number 2014 without any numbers in your code
Yeah, that's the typical IAB's reality distortion field. Television is still almost 2:1 versus Digital advertising, and yet they worded the press release in such a way that convinced all the headline-skimmers that digital is bigger than TV in the US.

Funny that they lumped together very different digital channels (search, display, mobile), and yet decided to keep TV Broadcast and Cable TV as separate line items. That's intentionally misleading at best.

(disclaimer: I work in the area, and have a vested interest in the growth of digital ad revenue. But I still feel offended by these pseudo-researches)
> That's funny. When I make this exact point here on HackerNews I get downvoted to oblivion.

The article wasn't particularly good, which may explain that.

> …that's where the fallacy of "Free" software really comes from. If you're not paying for it, you're going to pay for it.

The "Free" in "Free Software" has never meant "No Cost". It has always meant "Freedom". When you start talking about cost you are missing the point.
The Formula Startups Use to Make Billions [Infographic]
If the entity name is part of the method name, it'll be different so long as you don't overlap entity names with Apple.

It'd be a lot of work for devs to change code that calls those methods, but not so much it's not a possible solution. I'm optimistic someone inside Apple will address this issue on their end, but if that fails this sounds like a possible workable solution.
Same thing happened to me, but the fourth was so much more fun to solve than the third.
You're willfully missing the point and your example illustrates it. The Tesla X has an extremely unique door design for the rear passengers. Certainly it has to conform to some requirements. Even if only to satisfy the definition of the word door. That it also has to adhere to regulations and consumer demands is irrelevant. Elon Musk had a relatively large degree of freedom, compared to many engineers at top-down car companies, in deciding how to meet those demands. You can assert that neither Elon Musk nor the engineers are entirely free. You could also observe that they exist on opposing ends of a continuum.
Although, any decent framework should take care of most of those issues. It wouldn't for instance, be using the mysql functions at all, or something like md5 for hashing passwords, or not escaping user data by default (three common issues I can think of off the top of my head..)

Not saying PHP is secure by any means, but it can be implemented securely - it just isn't very often.

That said, if there is an argument to be made for PHP, i'm afraid to say, I don't think the linked article does a good job of making it. While I think its suggestion that PHP has evolved beyond some of the common criticisms against it might have merit, it doesn't address that the bulk of PHP code in the wild most definitely has not.
The naval analogy is interesting. One of the six missions of a global naval presence is to protect the sea lanes of communication. Even if that means the North Koreans occasionally manage to acquire some centrifuge tubes, the global value of trade outweighs the costs.

By very direct corollary, one would hope the NSA regards protection of the digital lanes of communication open as one of its principle missions. Trade begets economic interdependence. It's tough to go to war with major trade partners.
Prss – Meet the future of publishing
What is up with the "Mr. Obama ..." crap? Did the NYT have a change in policy recently? I do not remember Sanger writing like that in Confront and Conceal.
seL4 is 9000 lines of C and took 11 person-years to verify. How big is OpenSSL?

Also, verification isn't a magic bullet, you need a good spec.
YouTube playlist + Koss KSC75 headphones
I believe he's saying he's had an app rejected because of a selector conflict, not specifically a selector conflict involving mogenerator.

E.g. he calls `-(void)someMethodWithTheSameNameAsAnApplePrivateMethod` in his code, and App Review rejects it because their tools are telling them he's calling a private method.
I'm a big fan of SICP. I'd describe it as "hard-core": requiring hard work, but extremely rewarding for the people who take the time and effort to go through it.

I'd recommend the following three books to similarly cover the three main areas of higher mathematics (analysis, algebra, and topology):

1. Principles of Mathematical Analysis by Rudin (http://www.amazon.com/Principles-Mathematical-Analysis-Inter...)

2. Algebra by Artin (http://www.amazon.com/Algebra-2nd-Featured-Titles-Abstract/d...)

3. Topology by Munkres (http://www.amazon.com/Topology-2nd-James-Munkres/dp/01318162...)

Working through all three (including the exercises!) will give you a solid understanding of the basis of modern mathematics. If you don't have experience with proofwriting, you might find them difficult at first - the activity is very different from performing calculations or solving equations. It's also best to have someone trained in mathematics talk to you about the proofs, until you develop a feel for the needed level of logical rigor.

Rudin, in particular, leaves a lot of work to the reader; going through that book is the most intellectually difficult work I've ever done. If you find it hard-going (which is completely natural), you might want to try Artin first, especially since you have some background in algebra.

(Incidentally, these are the three books used to teach analysis, algebra, and topology to MIT mathematics majors. You can look up the assignments and exams for the three courses - 18.100B, 18.701, and 18.901 - for a good list of exercises to work through.)
fascinating... too bad he conspired with others to commit the robbery, and aided and abetted the crime too...
Henri Sivonen's pages
Just going to throw this out there...

Amendment IV

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
I are at the Linkery once, as well, and had an excellent meal & service.
How about a license that was "MIT, unless you're Apple in which case it's GPL"? Wouldn't that be compatible with the GPL? You would be effectively barring Apple from using it, as they won't use GPL code inside `PhotoLibraryServices.framework`.
Immerse 3d video is one of the original use-cases for VR tech and is pretty common. I remember seeing ads for headsets in Skymall of all places in the 90s. If anything, this is strong confirmation that the OR is not going to find a good home for the original use-case and FB is just turning it into a big media delivery channel.

http://www.zeiss.com/cinemizer-oled/en_de/home.html

http://store.sony.com/wearable-hdtv-2d-3d-virtual-7.1-surrou...

http://www.ebay.com/bhp/3d-virtual-video-glasses

http://www.amazon.com/72-Inch-Virtual-Digital-Glasses-Multim...

(and dozens of other products)
Heh. I bought SICM expecting it would be "SICP for physics". I started reading and felt out of my depth after just a few pages. But it seemed interesting, so I got a Lagrangian and Hamiltonian mechanics book and started reading that. That was 6 months ago, I'm about halfway through and I'm really enjoying it!

Learning Lagrangian mechanics when all your life you only ever heard about the Newtonian approach is a lot like stumbling upon Scheme after years of programming in C.

I'm looking forward to cracking the cover of SICM once more this summer!
I disagree with the premise of your question. I think the overlap is larger than it looks like on the surface. I have come to believe that you cannot do solid secure protocol design without a firm grasp of the basics of encryption schemes. You don't need to be a full fledged cryptographer, but to quote Phil Rogaway, "Reading [Schneier] does not qualify one to do cryptographic design." [1]. In fact, the context in which he wrote "Problems with Proposed IP Cryptography"[1] is a perfect evidence of this: IETF committee designing IPsec, back in 1995, which I think is fair to think of as mostly "professional software developers", was clearly warned about potential consequences of some of their design choices[2] (like using Encrypt-then-MAC), but they reacted quite harshly to his comments and did not take them as seriously as they should have, and actual attacks were demonstrated on those issues years later[3]. For me, reading the mailing list is enough evidence that it is very dangerous to draw the line between secure protocol design and other things. Similarly, I believe the lack of understanding of the reasons behind design choices in a protocol specification will surface as implementation bugs done by purely "secure software development" experts (e.g. "optimization" of random data generation at the beginning of the protocol to use in place of an invalid input by reordering the operations leading to a timing attack in TLS). There is enough historical evidence that makes anything except the "ideal" case dangerous.

[1]: http://www.cs.ucdavis.edu/~rogaway/papers/draft-rogaway-ipse...

[2]: http://www.sandelman.ottawa.on.ca/ipsec/1995/04/msg00148.htm...

[3]: http://www.isg.rhul.ac.uk/~kp/CCSIPsecfinal.pdf
>Is he getting an money from Amazon?

Well, it's his blog, and he can even put refferal ids in those links if he likes.

>How about supporting smaller local book stores, instead of making billionaires richer?

You can go and buy those books anywhere. The existence of Amazon links doesn't prevent this. They are just useful to gauge the price, read book details (pages, publisher etc) comments and reviews, find other works by the same author, see the cover, etc.