skysight-inc/HackerNews huggingface dataset:
Can anyone shed some light on how this might be achieved without the use of an aerosol or mirrors? My guess would be that the chip projects a different image to each viewer wrt to their position and distance. Other than that I'm clueless.
Please correct if I'm wrong, but sounds like you think human intelligence requires something outside of known physics, something "magical", to work?
Use a third party tool instead of putting all your trust into a single point of failure. There are plenty to choose from.

What you're proposing is pretty complex and time consuming, you can't expect the average user of this extension to do that (I know I wouldn't).

Or alternatively decide that you're fine with trusting google with whatever info is in your emails because you believe they have to much to lose if they're caught eavesdropping on some random Joe like me. That's what I do. And if tomorrow I feel I have a mail sensitive enough that I don't want to risk Google or some government intercepting it I certainly won't do it from my web browser's using Google's own extension.
I did a WHOIS, and seeing a domain registration date back to 2005 gave an air of credibility. So then I visited Internet Archive and browsed several pages https://web.archive.org/web/20080701000000*/http://getsafeon...

They seem like experts... experts in subtle verbal manipulation for those without technical understanding, at least that is how it reads for me.

Over years of archives, including the OP post, 'protect your family' continually appears as a headline. Monetisation is not explicitly outlined, it appears to be government or PPP funded.

Scare tactics, targeted at those probably less internet aware then the HN crowd, rather than education, appear to fund this website by whatever means.
Point them at SENS Research Foundation, if they haven't already heard of it.
Do you trust OpenSSL?
It might not have been a major focus until last year, but I'll bet it was on road maps for many, many years preceding that.
A Beginners Guide to Exploring the Darknet
Why mention BASIC in the title but not in the article?

There are multiple references to BASIC in the article on page 2 and 3.

Also, how can Swift be the new BASIC if it's Apple-only?

Of course, being Apple-only may hurd widespread adoption, but judging from the HN submissions on Swift right now, the language seems to attract a lot of developers and might be a good fit for casual programmers less interested in a "write once, run everywhere" model and more in just bringing an app to iOS.
There were article about how FlappyBird is the new HelloWorld these days. Most probably some-what humorous but it's great to see how many resources and projects have already been developed in Swift.

Shameless Plug: Want to learn Swift? Check out [http://www.LearnSwift.tips]
I was talking about third-party OS builders, which could anyway pay for licenses as they always did.

End users have no use for open source, besides free beer.
Swift "greatly benefited from the experiences hard-won by many other languages in the field, drawing ideas from Objective-C, Rust, Haskell, Ruby, Python, C#, CLU, and far too many others to list." I have been wondering if in fact this language will be Open Source, since it is said to have taken from other programming languages, some of which are Open Source, yet the decision to make it Open Source has not been made? Lock down.
Yes, way back in 1649. Are there any modern precedents, in any monarchy?
Yes, plenty of trust issues. I presume/would hope that they would leave a prominent warrant canary if compelled by Swiss agencies to make any amendments.

I understood 'expiring' mails to mean those accessed directly on their servers, following notification by email, subsequently deleted at the pre-agreed time. I could just have an active imagination.

Don't get me wrong, I'm not fully sold on the outfit, particularly for practical reasons, but am intrigued.
password1234
50%: Sufficient

a12345678910
92%: Exceptional

So, they try to give you negative points for "sequential numbers" but you get more points for having numbers than you lose, so it's useless. As long as you have a 12-character string with at least one number and one letter, your password will probably pass.
> Anyone who is concerned about security shouldn't be giving their password to a 3rd party to verify [even via a javascript webpage] for any reason.

I'd agree but I don't think anyone who reads hacker news is likely to use a password checker anyway. We all, however, know less technical people who could and would get compromised by something like this and to have it endorsed by the government sends the message that it is safe. That's the problem as far as I'm concerned.
In 2000, PCRE simply didn't support Unicode. Python 1.6 and 2.0 did (at least, based on some quick searching PCRE added support for Unicode in 2004).

"spotty" probably isn't the right word either, the change in 3.0 was to default to treating text as always being Unicode, the 'unicode' type in 2.x is reasonably complete (as these things go), just not the default treatment for text.
I found it usable for 90% of the use cases but that last 10% is incredibly frustrating. It's been a long time since I've used Office so I can't conjure up an example but I remember trying to do something with tables that was fairly straight forward in Office 2003 it was nearly impossible in 2007.
Swift Tutorial, Creating a to-do list.
Thankfully correcthorsebatterystaple takes a quintillion years. I'm safe.
Any password rules decrease the overall possibility space. The point is that they try to move your password away from the high-probability areas of that space that hackers try first.

It's like kicking someone out of apartment. Yes, you know for sure they aren't anywhere in that apartment, but it still makes it harder to locate them in the city with high probability.
I didn't make that inference, I figured Larry was avoiding the question.

NLP is hard
My pleasure. Good stuff guys. How is it working for you?
On the positive side, Prince George is going to have access to incredible wealth and a platform that he can use to influence people. If he wanted to stay in the public sphere he could have a very significant impact.
>What makes me so frustrated about this argument is that we already live in a world with thousands of optimization processes that end up hurting or killing humanity.

Yes, we've noticed. Those are evil, too.
What book was it that posited an automated system for the retroactive logical justification of predetermined conclusions back to reasonable-sounding premises? That was Adams's _Dirk Gently's Holistic Detective Agency_, right? A program called Anthem?

That would also be a plausible spinoff.
The replacement, given that people still believe in the idea of democracy, would be either elected by the people, or appointed by the political classes. Either way, they would be political insiders, and so would be identical to the Blairs and Camerons of this world.

I would like to see the Monarchy take a more active role in the government of the country, but even without that they remain a theoretical counter to the foolishness of our current leadership.
Yes, it is. I am in Central Europe and Drive loads just fine.
Thanks for the update on OpenPGP.js.

> What are your plans in regards to web crypto?

The plan is to use WebCrypto if it's available. We've moved RSA to WebCrypto, and the next targets are ECDH and ECDSA.

> Also what is the predicted timeline for getting End-to-End into a production ready state? We would be quite interested in using it as a standalone library in our Chrome Packaged App: https://whiteout.io

I can't tell you about our timeline for the extension. But if you just want to use the crypto library, you may want to wait for a couple of weeks, just to make sure none discovers any serious vulnerabilities.

I like WhiteOut. It's a great product in the right direction. We really want and will support the usage of the library in products like yours.
Please. We do not need to use the word "dazzling" in this context. This encourages people to spend their considerable mental resources "orchestrating" simple fraud.
I highly doubt the events in the article you linked are news to swombat, or any one else for that matter. The use of hallucinogens or drugs on the unsuspecting, like the military trials linked above, are well documented, but have little to do with the specific substance and more to do with the absence of morality of those involved. That is a political problem, not a pharmacological one. Were I an unwitting participant in such an experiment, I would much rather be given LSD than some toxic chemical or biological weapon. That too has been done, do you realise?

In certain parts of South America, a chemical derived from Datura is regularly used to zombify people, when they come to their senses 48 hours later, they've a hole in their memories and no possessions left. Again, nefarious people will always find a way to use the tools nature gave us for nefarious purposes.

Anyways I highly disagree with your assertion that discussing any of this, to any level of depth, would be considered disrespectful in any way by or to Shulgin. A man who dedicated his entire life to the exploration of pharmacology in all forms, such discussion is precisely the sort of thing I believe he aimed to encourage.
We should stop using the term "password" and start emphasizing passphrases. A full sentence is much easier to remember, yet harder to crack, than a shorter, cryptic password. Or, as XKCD put it: http://xkcd.com/936/

There's a widespread misconception that words are always bad because of dictionary attacks, but that concern is moot if you use unique words or simply use a long sentence. A major advantage of sentences is that, because they're memorable, you can more easily use a different password for every site.
The point is that humans don't need the context to understand the dialogue.
Cards Against Humanity: Tech Edition
Web Inspector for frontend remote debugging.
Synchronize Web-app's DOMContent, Scroll, Console and Errors. It makes a web projection. Help you to debug mobile web app using with PC chrome devtools.
"The monarchy aren't that rich or powerful at all by modern standards."

"it really isn't that actively harmful"

How can you be sure?
Curtin University researchers find possible acoustic trace of MH370
Electrical cables that store energy?
2044: Car-hack duo arrested
If n is the number of keys in the dictionary, then the whole procedure would not be O(n log n), it'd be O(m log n) where m is the number of letters. Given that n >> m, I would think your original statement is correct.
The January effect can be explained by the impact of taxes and various metrics used to gauge performance of money managers. Large cap and small cap stocks react differently to the January effect. There is a correlation between January and performance but no causation. If these other factors changed the January effect could disappear or move to another time of year.
Well yeah, but welcome to humanity. We're at our best when we do what we dream of, as what's "realistic" and "feasible" is almost always just code for "the same crappy thing that happened yesterday happening again tomorrow because nobody made the effort to change it". Except then someone puts in the effort, fulfills their dreams, and the real world winds up totally different from the expected world in which those people never acted.
It's interesting to me that the stagnating or declining middle class is largely a first world issue, while in the developing world the middle class is exploding.

The best explanation I've encountered is Peter Thiel's commentary on horizontal vs. vertical development. We've taken an energy and industrial system that absolutely cannot scale to seven billion people and now we're trying to make it scale to seven billion people. The result is a kind of low-grade, very slow malthusian event in which people in the developed world are (relatively speaking) impoverished by exploding energy and resource costs. What we need is vertical development -- technological development -- to create systems that actually will scale. Everybody can't drive a hydrocarbon powered car. It can't be done.

I think this also explains why first world poverty rates are not shrinking. The poorer you are the more price sensitive you are to things like energy prices, so the poor are impacted by scarcity exponentially more than the wealthy.

Note that if this is true then wealth redistribution might not help. It might just trigger price inflation in scarce resources. Redistribute more and they'll inflate more, and more, and more. ... But then again maybe it would help by causing lots of investment money to chase that demand and develop alternatives. It would cause hockey stick price signals across all the rate limiting inputs for the economy.

Hmm... well now... maybe we should drop money from helicopters...
Go provides straight-ahead, blocking-is-OK concurrency. GCD provides callback-based concurrency, like node.js, but with several worker threads instead of just one.
Their current problem seems like a fair price to pay for having used a proprietary corporate-backed technology for something as fundamental as the programming language.

I hope they'll learn. Looks at C#
Show HN: Social Icon Generator – Create vector social icons in seconds
> What in particular is Heroku missing to pass level 3 and 4?

It's mostly documentation. If Heroku has built a secure system and documented it adequately, then it would easily pass SAQ A-EP.

One easy example: Maybe Heroku keeps logs of all HTTP requests that include params containing credit card numbers. Nobody knows.
As an aside, it's interesting that GitHub as added support for Swift language detection so quickly, yet I frequently read stories (on HN too) about their passiveness to correct or add other (sometimes more) popular languages.
It appears they silently closed a critical vulnerability recently [0]

[0] https://twitter.com/StackSmashing/status/474214532114812928
I think it was Scientific American or another such
magazine that ran a story, [...] real theoretical and
computational neuroscientists [...] admit things they
would never say in a grant application, they are
definitely trying to achieve whole-brain emulation.

Another possibility is they're actually working on the things their grant applications say, but when pushed and offered drinks by journalists looking for a story, they'll extrapolate their research far enough to reach something cool-sounding.

For example, if I'm researching image correlation techniques, which have applications in machine vision, which has applications in obstacle detection and tracking, which has applications in self driving cars, I could tell a journalist that I'm working on image processing techniques with potential applications in self driving cars.

Is that me admitting things I would never say in a grant application, that I'm trying to achieve self-driving cars? Or am I working on exactly what my grant application says, but I've simplified it and added context because I know Scientific American isn't going to be publishing articles about efficient convolving and fast fourier transforms any time soon?
>It's probably the worst approach one can pick. (But this has been discussed dozens of times already and Go fans have decided that they don't want to hear it.)

Rust and Swift designers picked a similar approach. Is it possible that three separate designers of languages are so bound by language trends that they decided to make the almost exact same mistakes?
Is it cool to post projects like this in GitHub? (give Apple's NDA/PLA for iOS Dev Center members).

I ask because I have some things I'd like to post but am reluctant.
There's still a rule here though, and one that can be learnt: when someone references an object when asked about a person, the inference is the object has something to do with the person. It doesn't directly answer the question, but is a clue that can be used to predict the answer.
I've been using Gittip since practically day 1.

I really love the system, and always feel happy knowing Chad is the one leading it! If you haven't met Chad before -- you should. He's one of the nicest, most genuine people I've had the pleasure of meeting!

Best of luck with Gittip moving forward! <3
Done the right way, as always.
Untapped opportunities in AI
Sunsets in Google Calendar using R
That wasn't an insult. That was an empirically observed fact. The people who have told me not to bother cold-calling have tended to be MBAs.
Yes yes yes, thank you!
Finally a link about WebGL on iOS is upvoted enough to land on the frontpage: I was hoping to see what would be HN's reaction about the news yesterday, but no submission seemed to get through.
Yeah - the central point is that there aren't really caveats about Swift being simpler than objective-c. It's not perfect, but Objective-C has a much greater number of rough edges so is strictly harder for new users.
And the other regex would match all of "[a more [b,c]".
Your regex must be designed around your expected input.
Perhaps they mean Eastern Arabic numerals.
http://en.wikipedia.org/wiki/Eastern_Arabic_numerals
Good luck fitting 7 on a tab bar.

Sometimes, in the real world, clients want things a certain way and you are paid to make them that way. I would like less navigation options, but a big app has multiple things. That's just a fact of life sometimes - regardless of information architecture theory.
> so you think scientific progress proceeds not merely at a constant rate, but at a constantly slowing rate

No, I don't think so.

I just think the way looks very long, even given our current acceleration rate. Plus, this field has a very strong track record of blatant overestimations.
All of these are really good points. I might try to hack something that answers points 3 and 4 together sometime soon.
A truly efficient market would anticipate the effect of taxes and window dressing by money managers, and arbitrage away any price differentials.
I completely agree, but too many websites put upper limits on the password length (which is completely idiotic) to be able to do this in practice.
Happy to answer any questions on this guys though I'll go into more technical detail next time.

We're massive Docker fans so keen to promote the cause and hear other peoples experiences.
Peek app brings eye exams to the developing world, no attachment required
Thanks for the great feedback! :-)

1) No.

2) Historical accident.

3) Sounds like a +1 for https://github.com/gittip/www.gittip.com/issues/1493?

4) I see Gittip as a marketplace that has to support both sides more or less equally.

You are a generous person! I hope we can help you! :-)
> If you used your preferred mail client, it wouldn't be encrypted end to end

No? Both S/MIME and GPG provide E2E encryption and work with traditional mail clients. Both provide offline access. They also have their problems, but that's another story.

My point is: This is a neat system. It certainly has it's own set of advantages and disadvantages, but it's a centralized system that does not work very much like mail. So don't call it mail.
The mention of the civil war is the cue to where all this comes from. As usual after a civil war, what emerged was not a democracy but a military dictatorship. The UK was a Protestant theocracy for a while. This was sufficiently awful that there was no substantial opposition to the return of the monarchy after the death of Cromwell; however 20 years later a combination of desire for parliamentary power and anti-Catholicism resulted in deposing the monarch and replacing him with a different monarch imported from Holland, who would be under the control of parliamentarians.

Unpicking the constitutional settlement opens several extremely controversial cans of worms. For example, the role of religion in the UK; authority over the armed forces; land ownership reform; the House of Lords; the electoral system in general; devolution; and the strangeness of the Crown dependencies (channel islands, Isle of Man, etc).

There are people who are violently loyal to the monarchy, as well as a wide spread of society who are affectionate towards the Royal Family.
In true end-to-end encryption, this would probably not matter, since you can hand over all the encrypted e-mails you want and no one's going to be reading them unless they have your private keys. That said, the nature of in-browser crypto is such that they (or anyone who controls their servers) could intermittently change the JS code they are serving in such a way that it captures your private keys and decrypt all your e-mails.

So it really depends on your threat model. This service is somewhat more secure than Lavabit, but incrementally and not by leaps and bounds. It also constrains the attack model (in the Lavabit model they could be coerced to give the plaintext directly, in this case they would need to be coerced to actively steal their users' private keys).
They clearly need more money.
Checking the cell ID can be used to detect an IMSI catcher, but it requires knowing which cell IDs can be trusted. That requires some kind of cell ID whitelist and can be a pain to maintain / prone to false positives.

Notice however that CatcherCatcher does a lot more than just detecting IMSI catchers. It also detects when you receive a "silent text message". Law enforcement works with mobile network operators to continously send these text messages to a mobile device. The baseband in the device then wakes, communicates with the nearest cell and thereby reveals its proximate location, without ever notifying the application processor that anything of note has happened. This allows for tracking a persons movement around cells at pretty much zero cost and can be done from any point in the world, unlike the IMSI catcher that requires you to be close to the target for it to pickup on the fake network.
Oh, I'm not saying he won't contribute, just that his choices are extremely limited, to a degree I would not want for my son.

Being a part of military actually should be seen as a limitation rather than William going his own way. Since the soldiers pledge their loyalty to the crown it is deemed appropriate that a potential future monarch should serve in the military. They get to choose which bit, and perhaps when, but they probably never had a choice about joining up. Then the Royals only tend to spend a couple of years. Harry is the keenest as he joined infantry. But his fame brought him back from action early because he was a prized target.

Also Wikipedia now says Harry's now in project management: "On 17 January 2014, the Ministry of Defence announced that Harry had completed his attachment to 3 Regiment Army Air Corps and will take up a staff officer role at the position of SO3 (Defence Engagement) in HQ London District. His responsibilities will include helping to co-ordinate significant projects and commemorative events involving the Army in London."

I would expect this is not what he would have chosen had he been born Harry Smith.
http://www.getsafeonline.org/themes/passwrdcheck/results.htm...

Capitalize the first letter of correct and battery. Then you get 100% :)
For each rule in isolation, that's true enough. But the point stands: once you add together all those good practices (repetitions, consecutive letters, multiple character sets), how much does that actually reduce the password space? I'm not saying that the space becomes tiny, I'm saying that it becomes smaller, and I'm not sure whether "smaller" is still acceptably large, and it's an assumption that's worth checking.
If you narrow the statement down to "the highest performance network gear don't use Xeons", I suppose you get to be right. Almost all of my data-center security and packet inspection devices have a Xeon or two in them. The Cisco ASAs, Fireeye APT probes, Imperva WAFs, F5 load balancers, Sourcefire IDS. A couple of them also have packet processing support hardware (Endace cards, mostly), but that's mostly for taking the packet processing off the Xeons and letting them do just the inspection. But hey, we're only doing a couple of gig sustained, so we aren't the cool kids.