skysight-inc/HackerNews huggingface dataset:
Here's one possible approach.

Assume the attacker can modify plaintext on disk indirectly. This might be viable if e.g. the user's browser cache lives in the TC volume. (Not sure what typical TC-in-Dropbox usage patterns are, so this may or may not be realistic.)

Further assume that the attacker can observe ciphertext changes in Dropbox.

XTS is vulnerable to the same byte-at-a-time plaintext recovery attacks as ECB. This is usually irrelevant, because adaptive chosen plaintext attacks are outside the threat model considered for FDE. But in our scenario, the attacker has at least some degree of plaintext control.

The success of this attack will depend a lot on how fine-grained the attacker's control over his insertion point is, i.e. can he reliably write to the same location over and over again? Any number of components might thwart that control, so I'm not sure how easy it will be to make this work.
izzydata isn't just saying that he doesn't want a big car. He's saying that there's no point in buying a big car no matter what: "If you use facebook login for your site then you are shooting yourself in the foot if you care about users."
You need to generalize the attack past boot, to the core concept of "victim interacts with disk, attacker tampers with disk, victim interacts with disk".
Killer dies of heart attack after forty minutes writhing...
Hasty PopCorn
I lived in Australia until early this year. I got contacted over linked in by [large US tech company] for a job in the US which I ended up getting at nearly double my Australian salary.

You could say I was glad I still used LinkedIn.
I just want to point out that the party who lost (Icon) is not a NPE. Although they litigate extremely aggressively against other fitness players.
It does, yes. Actually schools have several of them. What i said was a knee jerk reaction to "actively attempting to make it impossible to use cell phones in a school", because two obvious good use-cases of them are 'school shooting and reporting it instantly'; and 'my teacher just collapsed, help'. But yes, footwork could help fix a medical emergency (run to the nurse / another teacher); and chances are, someone heard a gunshot somewhere or someone can get to a place where they can report the shooting.
Do yourself a favor, learn to cook yourself as healthy as possible. Will help for finances and lifestyle considerably during your years in college.
What? No. Don't do that.
There are far too many unknown variables to calculate that. You don't know how many people would be using it to push it to $2000. You won't know what the market cap would be until that price is reached.
another example of a discontinued currency remaining in use:

http://jpkoning.blogspot.com/2013/05/disowned-currency-odd-c...

http://en.wikipedia.org/wiki/Iraqi_Swiss_dinar
I have it on the plan to have PageSpeed on the front page and then it gives you a targeted doc plan. https://github.com/google/WebFundamentals/issues/12

Edit: there is also information that is common knowledge for a lot of advanced developers but for the rest of developers there are not many places that present a similar narrative.
I agree if you mean that US military technology is better than China's.

For technology in general, is that true? I don't know, but if you look at good journal articles on computer science topics, it seems like the US is loosing mojo, and big time.

For general tech, the rest of the world combined invests so much more than we do now. This is the cost of our military spending. On the other hand, if we didn't have the world's strongest military (we spend about 50% of all money spent on military in the world), then the US dollar would probably not be the reserve currency and our economy would greatly suffer. Complicated...

edit: the reason why we are losing mojo, my reasoning: in the 1970s the vast majority of ACM journal articles were from US citizens, AFAIR. Not the case today.

edit 2: re: US military preserving reserve status of US dollar: I got this from a recent interview with Katherine Austin Fitts (she was in the H. Bush administration) who I personally respect.
10% is good if you are getting salary. If you aren't, you are a founder -- it should be more equitable, but not necessarily equal. If you get salary, perhaps you and next 2-4 employees should be splitting the 10%.

One thing to do is to make a contingent bonus for the pay you aren't getting. Let's say you think 6 months is worth 50k. Then, they sign a contract where they pay you a 50k (or more) bonus if the company (1) makes cumulative revenue of xx million or (2) is acquired (3) raises a round over zz million.
But NONE of the Hacker News commenters addressed Sony and
Panasonic’s continued investment in high-density optical
disc technology. [...] There has to be a business reason
for the continued investment, i.e. customers prepared to
buy a lot of product in the future and buying a lot right
now.

If Amazon was the only customer for high-density optical storage, they'd be crazy to invest in developing it, because Amazon will have all the negotiating power in the relationship.

There must be other customers somewhere if two companies are continuing to develop this stuff.
It was a strong radiator (perhaps broadband) and that makes it easy to geo-locate. You can use distributed mobile sensors and TDOA to pinpoint the location.
>It's apparently pretty common for people to create virtual Truecrypt volumes and stick them on Dropbox, as a sort of poor-hacker's encrypted Dropbox.

People do that? encfs/ecryptfs sounds like a much better fit for that use case. Encryption is per file and you can even disable the filename encryption if you want to still be able to navigate your files using their interface. Are there no good similar solutions for Windows/OSX?
One possible explanation: the cost of initial IO to write your data is amortized over that data's lifetime. The early-delete penalty ensures that Amazon always makes enough on your data to justify the cost of writing it into their system in the first place.
Which is why Facebook has its very own browser for the times when FB has to be used.
25s on my machine vs 12s across 16 machines and a load of bandwidth flying round the internet. Not ethically worth it.
a) Sorry to be a grumbler, I know how hard it is to launch anything. You rock for instantly adding these to git and I appreciate the response.

b) I spent a few more mins on the site after posting the comment, the lesson content is very strong.

I wonder if the content would be better served by removing the stuff below your headline on https://developers.google.com/web/fundamentals/ - eg those links are where I immediately got lost. If I'd clicked the Get Started and nothing else I would have had a much smoother experience.
How to play chess when everyone has resorted to playing Connect 4
The Amazon Glacier is hidden in plan sight.

I think is just a virtual product. Probably unused S3 capacity, at a much lower price, not a different technology.
I've been wondering about this..

on the web, anonymous login would be just a code snippet. What would prevent anyone from showing regular FB login posing as anonymous? Only thing I can think of regular login should have a follow up dialog with confirmation of what's requested, but maybe that can be auto confirmed too? some users may still agree to follow up screen if they trust the anonymous icon.
Thanks for your feedback! Posting on HN seems to have caused speedcite to exceed Google Scholar's rate limit, so I'll be switching to crossref.org for DOIs. Using the new logic (which I'm about to push), I was able to get the first two DOIs you mentioned, but I couldn't get 10.1073/pnas.1324197111 working on crossref.org or on Google Scholar. Where did you find this DOI? I'd like to figure out a way to support it and its kind.
That application requires a TON of personal information, including:

* Full access to all my accounts, and ability to set passwords

* Read my entire USB storage

* Record all activity on my device
Nevermind - I found it.
We won!!!

http://cl.ly/image/1t1E430n431l

Kudos @zarubin!
you've really never heard these claims before? they are widely accepted as fact by now. There are many sources, just take 10 seconds to google it. "its better for the environment to eat a salad in a hummer than a cheeseburger in a prius"
This is a really neat UI concept. Are there any plans to introduce the ability to have it as a widget on the lockscreen?
I think that the reference makes sense as far as longevity. How often do links to a specific page change? Very often. How often do domains change? Not as often. MLA and other style guides are generally written with print in mind, not links directly to content being cited.
I understand SQL injections they access as if normal db client. XSS attack can steal cookie data. But how do they hack a php app and get root? Apart from system command running capable functions like eval how do they do
not really.. It'd be more like europe. Most of our states are the size and population of european countries anyways. California would be perfectly fine by itself.
I actually don't think it's quite that simple either. In total war, that might be right, but I think any opposing non-democratic power only needs to maintain a force/budget large enough to cause enough damage that will lead to war fatigue within the democratic power. Our war tech may be far superior, but I highly doubt it's superior enough for a snap victory as seen against Iraq. China has demonstrated real anti-satellite capability, as well as significant theoretical anti-ship capability (DF-21), both of which would eliminate a large portion of the US's edge (which has not demonstrated how much of an edge it has without those technologies).

Even after the trudging warfare is done with, supposing the US did win decisively (which I'm a bit skeptical of), post-war financial and political costs would be quite significant as well.
Well a couple of other organizations that have lots of data and don't want to share their practices come to mind: NSA, FBI, etc.
This is why you should never tell people what not to do, without also telling them what they should be doing ;)
? What's wrong with CTR? CTR is basically an OTP. Being OTP, encryption and decryption are basically the same construction (thank you XOR).

cipherblockdata = blockcipher(key, nonce . block #) ^ plainblockdata
plainblockdata = blockcipher(key, nonce . block #) ^ cipherblockdata

If MAC is needed, that can happen after encrypting, before decrypting. (Needed if bytes traverse network, but maybe not for local disk or file encryption unless.)

Edit fixed my maths:
border-image isn't used at the moment, because it's out of fashion, but one day perhaps it will be back.
Two words: money transfers. Bitcoin works very well for low friction P2P transfers. This may be considered a solved problem in Europe where bank transfers are easy and the norm but in the US and other parts of the world it's unsolved and a pain in the ass.

There is no easy way for me to transfer money to a friend other than handing them cash. You might suggest an awful centralized service like PayPal but there are plenty of problems with them too. What if I want to send money to a friend who lives in another country? Even harder. Bitcoin solves this problem.
Don't miss the table at the bottom: "Reactions to stages in the life cycle of cryptographic hash functions". Reach each row. Be entertained.
Isn't that against FB TOS? Also, what a pain - at least per-site pwds are easily managed via 1Pass or LastPass, but having dozens of FB pwds sounds crazy.
Whirlpool though is standardized (as ISO/IEC 10118-3) and it is one of the three available hash functions (along with SHA-512 and RIPEMD-160) for use in TrueCrypt.
The Amazon Glacier Secret is hidden in plan sight.
I think is just a virtual product. Probably unused S3 capacity, at a much lower price, not a different technology.
Just rolling back changes to previous versions might be enough to cause problems.
I'll upvote you because as my mother has said, "being a hippy is expensive."

(I say that as a vegetarian who recycles nearly everything and drives a Nissan Leaf. However, I still get haircuts and work for The Man, so what do I know?)
"implementation of using the tags goes through Facebook"

No, it doesn't. You can use the SDKs without any dependency on Facebook.

Omnilinks are cool. I hope we can all work together to make mobile better.
Accelerometers have unique fingerprints [pdf]
AHBL shutting down
I'm pretty sure that the language in use matters here. Care to specify?

For example, the answers for JavaScript and C# are not the same.
Neat tip: You can just do:

meta = r.json()

and avoid the json import.
Facebook Solved One Of The Biggest Problems With The Apps On Your Phone
So why can't we authenticate all the sectors? Is the performance really that bad, even with AES-NI and such? Chrome OS and Android devices that use dm-verity already do this (albeit for read only), so that's hard to believe...

With SSDs, seek time shouldn't be an issue. You can argue that if an attacker can modify your disk, they can probably run code to steal your password, but this does not apply to Dropbox-stored disk images, and AFAIK you can try to secure a PC against modified code seeing the keys using TXT.
The Easter Island story told by Jared Diamond in Collapse is arguably a myth. Do you have any other examples?

An alternate view of Easter Island includes these sorts of points:

- Forests on Easter Island were largely killed by rats (an invasive species) and to (productively!) clear land for agriculture, not to make statues.

- Civilization there grew and persisted and thrived even well after the trees were gone due to human cleverness at finding and making new resources. (The Islanders ate fish and rats and eggs and chickens at that time)

- When their civilization eventually collapsed it was because they were pushed. It was due to war and diseases brought by outside invaders who sold a lot of the locals into slavery.

Mark Lynas sums up the situation here: http://www.marklynas.org/2011/09/the-myth-of-easter-islands-...

Jared Diamond, sticking to his guns, responds to Mark: http://www.marklynas.org/2011/09/the-myths-of-easter-island-...

Lipo and Hunt in turn respond to Jared's response filling in lots more detail: http://www.evobeach.com/2011/10/diamond-attempts-to-defend-m...

Leading quote: "Diamond would have readers believe that the majority of archeologists who have studied Easter Island support his thesis. It is simply not true. The new evidence that we and other serious scholars have provided over the past decade not only contradicts the old story that Diamond has so heavily invested in, but has led to a new consensus among the majority of scholars around our work."

UPDATE: Okay, now THIS is my favorite thing I found revisiting this old argument. Diamond thinks the statues were moved on logs but Lipo thinks they were "walked" into place upright...and here is a video showing how one does that - walks a multi-ton statue upright using only people and ropes:

http://ngm.nationalgeographic.com/2012/07/easter-island/walk...
Tracking radio signals with two spectrum analyzers, two Yagi type directional antennas is pretty trivial. If you know the probable location set up two (or more for a faster fix) people with gps units and their hand held antennas. Tell them the frequency and they can read back their headings (you know their position from GPS). After about 3 minutes of this you have the transmitter location to a precision of less than 12" if it isn't moving.
Thought I heard of a start-up doing this... did Facebook take the idea or have they been working on it in parallel? Just curious...
Let's say I want to create a service like Instapaper. I don't care about the person's facebook info, but I'd like to optionally give them a way to login with a simple button press without having to create another username and password.

This seems like a reasonable solution.

> Just use an existing token (cookie, device token)

That won't work because the mobile and web account have to be connected.
:) we will certainly get them sorted. We are also looking at the nav and the quick access to the content so the links are more easily accessible.
Why it makes sense to bike without a helmet
Wow, what a perfect storm, this really sucks. Best of luck to you Erica I hope you find that your new path bears fruit.
Aside from the broader war strategy questions, this appears to be a good example of the second-system effect.
IMO there's nothing wrong with declaring functions with a var. It's part and parcel of functions being a first class object in JS, and you being able to pass it around in functions.
Not tried the app (it doesn't work on my phone) but you can upload images taken externally if they have certain characteristics (exif gps etc)
Eczema is the reaction to exposure of a substance for which the immune system is intolerant, but exposure is not the cause of the intolerance. As I explained in more detail in my other comment, over exposure to the tomato may stress the immune system to the point that symptoms become severe, but the tomato is not creating the original intolerance.
What It Will Take to Farm Sunlight from Space
Dealing with Google was rather weird, but the actual negotiations were handled by someone else in my company.

I think Google's enterprise pricing was targeted towards, say, a long-haul trucking company or a corporate GIS department where the viewers are just some managerial or analyst staff. In cases like that, if they charged the same rates as they did for CraigsPinSquare, they'd make a few pennies. Thus, the solution would be to discriminate pricing between high-volume consumer-facing usage and low-volume internal "enterprise" usage, especially since internal "enterprise" usage wouldn't give Google Maps much publicity.

Google decided that we fell in the "enterprise" bucket, and enterprise sales typically involves private negotiations with pricing. It's very possible that we got wildly different pricing than other companies.

We're still open to using Google products in general, but OSM is more fun.
In practice, when it comes to antibiotics you are correct. But lets be honest, quality meat isn't always an option, especially going out to a restaurant, so the solution in reality is to eat less meat. There's also things like land usage, water conservation, carbon footprint, health, etc... there are a lot of reasons why you should eat less meat if you live in a first world country.
Take part in documenting Neo900 compatibility with local carriers
See the original parent's first sentence:

What is the point of this? I don't want to have to login with facebook at all. .

and then his reply,

Then use one of the other implementations. The problem is it being facebook, not the concept.

It's basically anti-Facebook login sentiment to me. Fine, I respect that. But,

If you use facebook login for your site then you are shooting yourself in the foot if you care about users.

You can't shoot yourself in the foot if your audience of your service can choose. As I said before, people who only offer FB as a login/sign up option is not FB's fault. In fact, any websites that don't offer the vanilla username/passwrod signup & login mechanism isn't FB's fault. So don't mix that issue in any discussion related to FB's new login mode here.

Now moving to yours:

We are hoping they choose not to use the platform _exclusively_ or as a substitute for their own login.

I will take it as you don't want to use any website not providing the vanilla username/password signup-login, right?

So again this has NOTHING to do with FB and its news announcement.

the product we're talking about is offered as an alternative to the real thing (Facebook Connect) and it is what a developer would consider using to avoid writing their own login system.

I am confused here. Do you like FB connect and like it over anyone's custom login system?

What exactly do you and parent want from Facebook's login and from app developers?
You get object storage with S3 but I'm not sure what else this SDK gets you. Not sure that's compelling enough for many pure front end developers.

From the article:

AWS DynamoDB: A NoSQL database service that allows scalability and many other features.
AWS.SNS: A Simple Notification Service that allows push notifications.
AWS.SQS: A Simple Queue Service that allows the creation and management of queues.
AWS.S3: The Simple Storage Service that allows object storage and management, one of the most used services.
AWS.STS: A Security Token Service that provides a temporary access token.
TRESOR is only effective against passive forensics and only protects key material.

It does not protect against an attacker able to manipulate memory contents through, say, DMA or other malicious devices.
I'm not sure the analogy is so bad, to be honest.

The USN submarine force was extremely successful in the Pacific... eventually. But they went to war with pre-war submarine designs, and used a strategy of pumping out the same old submarine types, with only minor improvements as the war went on. It wasn't until the end of WWII and the start of the Cold War that the US started to integrate features from the Type XXI and really try to push the state of the art of submarine technology.

But the point is that the Gato and Balao-class submarines were good enough for what the USN was doing, the important thing was actually getting the boats out to the theater of war. An advanced upgrade project would have risked the ability to do that at the very time such risk was unaccepted.

That was Germany's problem as explained in the article: Even with the assuredly-better Type XXI submarine, Germany would still need many other things to go right to prosecute an interdiction war. It would have needed command and control improvements to account for the submarines being submerged more often (especially if they wanted to use the effective "wolf pack" tactics), better maritime reconnaissance to find convoys in the first place, etc.

Its sonar would have been useful, but the flipside to that is that Allied sonar and ASDIC would also have been useful (defeating ASDIC was one of the reasons German U-boats operated on the surface in the first place). In short, the Type XXI really did counter a lot of the Allied advancements in antisubmarine warfare, but it still would not have been enough. Those resources could have been profitably employed elsewhere, perhaps in other new weapons development projects.

On the other hand, aviation represented an area where new development was instrumental (and cost-effective) throughout the war. The German jet fighters would have been very dangerous if they could have worked them into their Luftflottes sooner.
I downvoted because this is just a stupid comment: "I can't believe people still use LinkedIn". LinkedIn is clearly one of the most valuable sets of data in existence for pretty much anyone involved in business, HNers included. Like most things, it has its faults but that's not reason enough to "not use it".
If someone knows you, then you have a good chance of scoring an interview; otherwise it's almost impossible, at least in phd-level computer science.
Former Apple Engineers Have Made A Camera That Records Everything Around You
You can't use google maps at all without a business account if the maps (and content) aren't 'publicly available'. If you're using their maps for internal apps or you charge for access to your app, you have to use a business account. Business accounts start at $10k a year and scale up from there depending on usage and other factors.
Yeah, good point. I guess I just don't think about it that way because you I go there to browse code rather than people.
If a Promise is rejected, what happens to the return value of that Promise's .then() (assuming the onRejected handler doesn't throw)? Is it also rejected (as the article seems to suggest)? Or is it fulfilled (as the spec indicates, if I'm reading it correctly)?
He's advocating that you stop eating the meat because eating the meat supports the producers of the meat who are deciding to overuse antibiotics irresponsibly.
No it's not as serious as terrorism. Antibiotic resistance is MORE threatening then terrorism !