skysight-inc/HackerNews huggingface dataset:
I don't think lobbying the US Federal government is in OpenBSD developers' wheelhouse. Contractors working with the US government on the other hand have a long, distinguished history of successfully doing just that. In fact, that's largely the entire business model.

So it makes a lot of sense for each party to do what they are good at: OpenBSD developers write a clean, secure library, and contractors lobby to be allowed to use it.
Doesn't seem to be active yet. Will be interesting when it is.
I wish more protocols were built with such robustness and decenteralization in mind. If you try to host a web site at home and it gains some attention among netizens, you might have a bad day. Not because your connection is dog slow, but because all those people will complain about the way you host.

The internet is too darn centeralized, people can't just put services out there.
Oh yeah! http://i220.photobucket.com/albums/dd309/HTBrown1953/KoolAid...
I was thinking that hurricane type storms would have been even worse 50m years ago.
They won't do it, people have asked on their forums. They're completely above the board and they want to keep it that way.
Yup, parent is confusing cause and effect.
Show HN: Intel interviewed me about current tech trends. What say you?
Google Street View already lets me go back in time to a time when Flash was required to use the web...
The Iron Yard is planning a tech conference by the community, for the community – right here in Houston! We are collaborating with companies like January Advisors (http://januaryadvisors.com), Two Sigma (https://www.twosigma.com/), RED Labs (http://redlabs.bauer.uh.edu/), and the City of Houston office – with a full range of media coverage (radio, publishers, etc). We are working on putting together several other partnerships, and would love to have tech companies involved.

The premise of the event is to invite over 250 people, with little-to-no coding experience, and spend the day learning basic website development. Local talent – like myself – will lead a small group through a short instruction, followed by a lab to build something. The sweet deal? Attendance is free, and upon completion of the event, participants who didn’t previously know how to code will have built their very own landing page. Instructors and others who attend will have the chance to mingle with some power-house developers and companies in Houston.

Our goal is to raise awareness of the expanding Houston tech-and-startup scene, and cultivate a new community of professionals who bring a wealth of talent from the industries that call our brilliant city home. (Healthcare, Energy, Oil, Finance, the list goes on…) To top it off, we have local roasters supplying the coffee and local eateries supplying the food. All-in-all, this will be the perfect storm to nurture the “Tech-sas” community that we all know exists. As such, since this is an event with drinks, we are targeting college students and older – for both networking opportunities and for the obvious vices being provided.

We would love if you could join in, attend, or instruct. We are looking to get about 20 technologists who can be part of the event, and just provide a few hours of basic instruction on web technologies.

Additionally, we are looking for local companies to help sponsor. The Iron Yard is already fronting almost all of the costs. We just want to make sure the food, booze, and space is covered. All of this is being planned as we speak. Just attend and help us nurture something special (that might be able to turn into a recurring event in the future, for all skill-levels!).

You can find out more about the event and direct others to it here:

http://techsas.co/
My understanding is the FIPS requires that the SSL library implements a certain suite of protocols (including the Dual EC DRBG discussed in the linked mailing list post) which have known cryptographic weaknesses.
> Android on it was just about useless, but it's neat to have it as an option.

Useless how? Performance was poor, or without a touch screen you weren't able to use it?
I tend to bundle the baseband blob and the modem blob as "the radio" but agree that is an over simplification.
Are you using bone-in thighs or do you bone them out first?
Instead of arguably, I think "currently" works better. We are currently much better robots at these tasks.
FIPS compliance includes support for dubious cryptography and protocol standards. While it doesn't necessitate things like Dual_EC and extended_random, it does create a hospitable environment for their inclusion.

"FIPS support" also demands configurations that rule out some cryptography, some of it bad, some of it reasonable. FIPS support doesn't require OpenSSL not to implement those algorithms, but it does require a mode of operation that does.

Against that complexity, the only win is the ability to deploy the FIPS-compliant code in FedGov settings, which is something that an OpenBSD fork of OpenSSL doesn't need to do to be successful.
>You can bet Apple is spending more on R&D than almost anyone else, so there is likely no wiggle room at all for anyone to compete on innovation, unless they aim for some niche market.

Actually, Apple spends comparatively less on R&D than any of its competitors. It's increased recently, but for many years - especially in the late Jobs years - people were scratching their heads at how comparatively little they spent on it.

http://www.cnet.com/news/apples-r-d-up-32-percent-in-2013-st...
Rather than explain (which I would fail at), let me cite the best sources I know of.

Here's the bug I submitted to the chromium project while I beta tested the Cr-48, requesting FIPS support. The closeout comments cite excellent sources. Interesting that this was done right about the time the Heartbleed bug was probably being found as well.

https://code.google.com/p/chromium/issues/detail?id=194867
Good luck convincing your competitors to not take the business you're leaving on the table with that. :(
What's the point you're trying to make? That you can't buy episodes of shows like Breaking Bad or Game of Thrones separate from cable, they're too expensive, or that Netflix and its kin aren't good enough?
Checked their archive site. Looks like they are now part of fictivekin.com. Not sure if they are still a coop.

http://web.archive.org/web/20130731083708/http://analog.coop...
Worse than that, AFAIK, the cheapest way to keep up FIPS certification is essentially to change nothing (except as FIPS requirements change, which is "not really often").
Not that I agree with him, but if your project can get away with a local sqlite database for testing (that is, no stored procs or database specific queries) and you make sure you don't create when build will suffice, you can have models tested with a database and still be reasonably fast.
Hey, step out of the 1980's!

I have used telecommunication services for over a decade now, and I have never once done business with AT&T or a Mabell company.

Perhaps it's YOU who needs a sense of proportion. It isn't 1984 anymore. Mabell isn't a massive monopoly: Google, however, is becoming one.
On the plus side, it'll be actually secure for all the other people that care more about a security lib being secure than by it havins a stamp.

That's also a huge number of people (and companies).
Social pressure would take care of a lot of this. Imagine a Shell or Walgreens that tried selling marijuana or MDMA to minors. That wouldn't last long.
The Raspberry Pi blog has some good projects to inspire you. I skim it routinely even when I'm not building anything, just because the people who make stuff are pretty creative and interesting themselves.
Unless you're planning on hiring the Inception people and literally erasing this idea out of their brains, you would never be stealing their idea - you'd be copying it. They still have their original idea and can build anything they want based on it.

You should probably talk to the founder about this issue first.

If you feel bad about this situation for any reason, you might consider hiring them to do some consulting work for you on this project, whether now or some point down the road. This provides just some of the following benefits...

* An extra learning experience for them where you can set them on the right road to performing some tasks they otherwise never would have thought of
* some extra compensation that they would have otherwise never had an opportunity to get
* an opportunity to really gauge their competency and see if they can have a major future role with you.
Does NSS implement Dual_EC? I don't think so. NSS has a FIPS-compliant mode.
Every Emoji
Show HN: speakme.com's beta test. reddit with video
Is openSSH FIPS certified?

[seems like an aweful lot of people, including me, trust it regardless]
I think his success spirals advice is great. You tend to build up skills iteratively and incrementally.

But comparing SICP to baby Rudin is extremely out of point. SICP is a conceptual book. Rudin is a super-synthetic Bourbaki-like text. A lot of intuition has been removed. In general this is bad unless you're going through the topic for the n-th time.
Sirius: A distributed system library from Comcast
Zack, what's wrong with /dashboard? I mean, it's not working now.
Are you going to get rid of it or you're rewriting it?
The Amazing MicroMouse Contest
Actually, the part where you invent a bad strawman solely for the purpose of labeling me an asshole makes you an asshole.

You couldn't even quote me. You couldn't even use my words. You just invented a pathetic little fantasy and then attacked ME directly based on your fantasy world.

Pathetic, dude, pathetic.
Let's think about this more closely.

Where are you hosting your email. Are you keeping it on say an AWS instance? OK flag that, all the plaintext would be there, and also, duh, it's still obvious that it's your communication because you're connecting to it, and maybe even paying for it.

OK, you host it at home on your DSL line? OK, so plaintext is harder, but oh wait. Yeah, your IP.

TOR hidden service or something? Good luck getting SMTP to work over tor.

So tell me again how TLS is going to help with metadata.
> It's primarily protectionism

This. It's also protectionism for government IA managers. And it stymies the hell out of anyone trying to do research on a budget, which often depends on open source (for both review, quality and cost reasons).
Please Don’t Be Offended, but I Think You’re an Idiot
Congratulations! That's a great achievement, and you finished it much faster than I thought. As soon as I get it, it's next on my to-read list :)
I feel there needs to be an expiry date on polls. I'm still getting questions on who's going to win in past football games.
Could? Does the article imply that Google plans to do it? I didn't see anything from Google about such plans. Or it's simply "if Google ever does that it would be great" etc.?

Google's approach of harvesting the data from e-mail doesn't fit with end-to-end encryption.
Thanks, this was a fairly informative number crunch!
Hire an artist.
Pixel art is actually a very tricky form of art if you want to make anything actually look good. You have to be very meticulous and pay attention to every detail. You have to also have a good understanding of anatomy/shaping as well as lighting and color patterns.
It is true. Apple has a 70% profit margin on sales that they reinvest.

Just because revenue is reinvested doesn't mean it isn't revenue or a margin.

And, seeing as Apple has >$100,000,000,000 of cash and near cash, your "reinvestment" line is a total fantasy. Apple is printing cash with a massive profit margin, and reinvesting a tiny tiny tiny fraction of that money back into their business.
I would rant if I had to deal with shit like that, too, assuming that her account is accurate.
FYI - Unofficial SoundCloud Sonos application using Heroku app endpoint
http://www.hirahim.com/projects/sonos-soundcloud/

Works great - cool to see the Sonos web interface for the zones.
I would say the percentage is higher than you think. So much that the Xbox One seems to be designed more like an entertainment system than a gaming console.

I don't game much but I use my Xbox 360 as a glorified streaming device. WMC, Xfinity and Amazon Prime all of them are convenient on 360 especially when compared to Comcast's clunky set top box interface. Ohh did you know Comcast allows me to stream full HD for free on the Xfinity app whereas to do it on their Set Top Box, not only do I have to get a new one, I would have to pay $5 extra per month.
Piracy isn't eating cable tv's profits because of pricing... it's eating their profits because of convenience. How ridiculous is it that I can get an entire season of X show in high definition with no commercial interruptions streamed to my TV within an hour through torrenting, but the equivalent would take either foreknowledge, or lots of searching for reshowings? People have discovered that not having their TV dictate their schedule is valuable to them, and the providers that realize the value of that convenience are going to win. The only thing holding Netflix/Hulu back from eating Cable TV within a few years is live content (sports) and better selection. Be careful in extrapolating the 2% growth figure... it could easily become much, much faster if they can figure out how to provide the only reasons left to have cable TV.
To me, the powerful idea of a co-op is that it brings together many people with skills that compliment each other, all contributing to something where sum is greater then the parts. The result, if they are successful, is they do generate profit and each contributor takes home their full share.
This is what Assembly is trying to enable...but Assembly is really a platform for creating co-ops around software products.
Are you serious? I just spent all weekend building myself almost the exact same setup from scratch. It was a royal pain. I wish I'd seen this a week ago. Nice work.
It was health concerns. I had read and heard that the huge amounts of serotonin released in the brain had no bad effects provided it wasn't too often.
There's ELS2014 May 4-6 in Paris, France.
http://www.european-lisp-symposium.org/
Indeed. No clock icon for me on the links they provide, even in Chrome.
The only thing that i have done is use it as lightweight server with Nginx running on Arch.
> I think there's a lot of low hanging fruit

Surely, these projects sow the seeds of eventual progress.
I've got to say that I like the abrasiveness. The security industry is rife with imposters and pretenders. All of the artifice and bogus claims make it very easy for people, organizations, industries... hell, governments to be misled into devoting huge amounts of resources into propping up what amounts to security theater, which is generally actively harmful.

Abrasiveness and a willingness to ruffle the feathers of purveyors of bogus security is a public service.
"Drones are going to also be a huge deal. Imagine a quad copter that can go out and sample your 1000 hectares of fields, spotting disease or nutrient deficiency from images taken from above."

I believe that one is already a reality. Some quick Googling turns up: http://www.precisiondrone.com/drones-for-agriculture.html I'm pretty sure I saw a TV special too.
Netflix on its own isn't a kludge, but paying netflix, plus maybe Hulu, and oh, there's stuff from Amazon as a side effect of 2 day shipping, plus buying individual episodes from Amazon, iTunes, or Google, and don't forget the old Ultraviolets, right, right? Add in some ripped media and possibly a wire or antenna hooked to a dvr and that's what's a kludge.
There is a difference between goverment surveilance and mass survielance.

In order to escape mass surveilance this is most likely enough. As all you have to do is to be different.

If you think you are actually "target" by a goverment youv'e got bigger problems. And you should probably stay away from email alltogether.
That reminds me of the Pareto Principle (20/80):

http://en.wikipedia.org/wiki/Pareto_principle

I've found it to apply to many things in life.

Edit: why would this be downvoted?
How does it compare Redis?
I should've written “blindly recommending” instead of “recommending”.

(That's the passage I was referring to:

> If you're explaining crypto to a reader, and you're at the point where you're discussing KDFs, you'd think there'd be cause to explain that PBKDF2 is actually the weakest of those 3 KDFs, and why.

Also, I'm not arguing the sanity of Django developers' choice of PBKDF2 as default password encryption mechanism—IMO marginally better security wouldn't be worth the increased complexity of starting new project for newcomers.)
The DIN variant is almost illegible in places using Firefox on Windows 7 as well. :-(
You're wrong, Street View doesn't use Flash.

(At least not on modern browsers, I can't speak as to whether or not there's a flash fallback for older browsers.)
why not just link to the archive?
I agree. I've struggled for years with programming. I would complete every Codecademy-like course or tutorial I could find, only to be left feeling as if I just learned how to go through the motions of programming. I always knew there was a significant void in my understanding that prevented me from both fully grasping the basic ideas underlying programming and making any meaningful progress. The cliche advice people had was "ok, now create your own project," which is much, much, much easier said than done for a beginner. I have a million projects I started and never finished because I got sick of just not understanding what I was doing. SO answers were utterly baffling and copying/pasting them got me nowhere. What is a data structure and why are they using that one? Why would one algorithm be better than another? And for web programming: What're the basic components of the internet? What are HTTP requests? What are all these protocols? How much should I know for the task at hand? It was so overwhelming. Thankfully I found a set of books that have been wonderful in methodically building my knowledge and skills.

There is so, so much more a beginner should be exposed to than for loops and cleverly slicing lists.

Edit:
For those asking for books/resources, here is what I would suggest to someone just starting out. I chose python for myself because I wanted a language with broad potential (ie web development to statistical and biological computation). It's absolutely critical that you complete every exercise provided.

Programming basics:

- How to Think Like A Computer Scientist - http://www.greenteapress.com/thinkpython/thinkpython.html

- Think Complexity - http://greenteapress.com/complexity/thinkcomplexity.pdf

- SICP - http://mitpress.mit.edu/sicp/

---

Web/Development basics:

- Team Treehouse modules on git, shell commands, DNS, etc -http://teamtreehouse.com

- How Does The Internet Work? - http://www.stanford.edu/class/msande91si/www-spr04/readings/...

- Udacity Web Dev course - https://www.udacity.com/course/cs253

---

Django basics:

- Getting Started with Django - http://gettingstartedwithdjango.com

- Two Scoops of Django - http://twoscoopspress.org/products/two-scoops-of-django-1-6
In the current state of affairs, lawful intercept/ PRISM devices on Google's network can potentially see everything behind the SSL layer. The global passive attacker can see all incoming and outgoing emails between providers that don't use StartTLS. Google needs to provide the email history < 6 months of US person in response to a administrative subpoena and >6 months with a warrant.

Let say Google made a key directory and end 2 end encryption possible in Gmail but Google held the keys. This would frustrate blanket lawful intercept and the global passive attacker. Google might be able to legally argue that turning over keys requires a proper warrant. They might be able to defend against falsifying the key directory because of external audits.This is roughly where Apple is with iMessage.

If Google goes a step further and only stores an encrypted key or keeps the key client side, now we have the legal terrain of the Government asking a software provider to maliciously modify their software to obtain keys or a passphrase. I think this legal battle is coming. We might be able to preempt it with software verification techniques but definitely coming down the pipe.
> How the heck have these IT coops gotten started, then?

I can't tell you on the basis of empirical knowledge of concrete cases, but in theory (e.g., Elinor Ostrom's work on the commons) you need some lower-level guarantor of trust (such as a shared culture) for higher-level institutions that can solve these kinds of collective action dilemmas to develop.
> Why has nobody just made a Docker image that anyone can download and use for free?

Because you haven't done it yet. :)
Yes, sure do. Pretty much only through the Reeder IOS app, but there are still many blogs that I follow for stuff that might slip through the cracks in my twitter feed.
It's frustrating to see feature announcements for features that aren't live yet - especially when they aren't framed as a "coming soon" feature.

If you're doing a slow roll-out, or announcing an upcoming feature, be explicit about that. Without setting expectations, you've completely lost the point of announcing. I won't just remember to check back later, and I won't share the news with anyone else since there's nothing to see.
Y Combinator Bets on Biotech
As a developer, on top of 8 to 9 hours of work, I spend 1 to 2 hours reading technical books and coding on a usual weekday. Weekends too are spent on working on side projects. I can do this now as a twenty something, but in my 30s and 40s when there are wife and kids, I am not sure if this is viable.

Are there vocations that doesn't require constant deliberate self-improvement? I can understand casually reading up on books and papers to catch up once in a while, but the expectations imposed on developers to always solve problems, learn completely new tools, frameworks and languages seems undoable for me in the long run.
> Also, even if you both run your own MTAs STARTTLS does not help much except to reduce the scope of the passive-only surveillance dragnet, because the configuration does not require signed certificates.

Exim and Postfix (and hopefully others to come) are both working on adding DNSSEC and DANE support right now. Which means in the not too distant future it will be possible to publish cryptographically signed data in the DNS that your MX has TLS support, and what the fingerprints are.

> Finally, if both parties are technical enough to run their own email servers, um, why not just use GPG?

OpenPGP encrypted email leaks all sorts of information/meta data.
This! I've seen loads of terrible pixel art by people who think it will be easier or look better than other kinds of graphics, and failed miserably.
Brofiler – A profiling library for C++
First impression: Linkbait to paywall

Forces visitor to "activate" their account.

No thanks.
"There's already a prototype robot that brings cows in to be milked"

Long-term, that is a dead end. The thing is, you don't have to bring in your cows, and certainly not all at the same time, if you have a milking robot. They will come in by themselves if they want to be milked.

Also, I find it curious that this is news. Milking robots have been used for decades (since the early 1990's)

Economically, we have about reached the point where the robot is economically feasible (a robot increases milk production, but costs money, both in investments and in electricity. It's not a given that the increase in milk production pays for the extra costs)