skysight-inc/HackerNews huggingface dataset:
Yeah, I go back and forth on that one. The problem is that the key management is crucial. Slip up and lose your key and your data is toast. Obviously this also applies to Amazon, but they have more resources, better incentives, and one million times the operational experience with their key management system than I'll ever have with mine. Frankly, my clients should bet on them over me.

Now, one good idea might be to redundantly back-up Amazon's backups at some other host, using GPG to encrypt those. This ensures against Amazon encryption errors, billing errors, mistyped legal injunctions, Jeff Bezos declaring you his personal enemy, et cetera.

This may be obvious, but rolling my own at-rest encryption is not going to significantly protect my data from an attacker who works inside Amazon, nor from an attacker who roots my instance. If the keys are in the cloud, the keys are in the cloud.

UPDATE: oh, yeah, I forgot the use case where you are writing to s3 from outside Amazon's datacenter over HTTPS. Okay, that is a much stronger case for GPG in advance. It wouldn't matter if we assumed that TLS always worked. But this is TLS. Does your upload client check the certificate chain? So many of them do not. I sure hope Amazon's CLI client does.....
I don't think IMAP support is going away. This is just a better API for devs to create apps for Gmail.
Just a quick suggestion to the Priceonomics team... Start with the bottom half of the article. I had to go half way down the page to find out what the book is about. The first half talks about you WAY too much.
How to Use Einstein to Write Powerful Sentences
A dupe of https://news.ycombinator.com/item?id=7945798. We'll keep the other post, since it has the ongoing discussion.
Valid point. Still - that doesn't categorically make it a bad choice. It just weighs a bit heavier on the con side. There are some positive effects of that dependency as well (User trust and convenience).
Uh...remote lock?
You bring up great questions, like cfield below. To be clear, Assembly App Coins are not securities. For the moment they only determine an individual's royalty payout when there is revenue. They can't be purchased by outside investors or transferred to other individuals that are not in the product's "partnership".

You can only earn Assembly App Coins when you participate in building the product, and effectively joining the product's partnership. This would be similar to how a law firm partnership is structured.
It doesn't sound as though they're removing IMAP. It's still the recommended API for mail client applications. This API is a new, separate option for applications that don't need access to all your mail.
DirecTV and AT&T Make Case to Congress
That's a huge cutback from everyone getting laptops or phones.
I'd love to see a version of this without the separate eye-holes that assume stereo vision. Ideally, that version would have a separate NFC tag to identify it as such, disabling the stereo rendering but preserving the VR look-around behavior.
I have this fear that skynet originally started as a captcha solver algorithm. :p
Google adding cloud monitoring has me sorely tempted to abandon a side project of mine. I'm sure Google could do it better. Bah. :P
How to solve the hamburger icon problem 
The hamburger icon—three little bars used to indicate a link to a menu—is one if the most controversial techniques on the Web right now. Designer’s, we are told, all hate it; customers, we tell everyone, hate it too. Why then, is it everywhere?
Somebody should do a Kickstarter to make and ship copies of this kit for $5 or $10.
It would be sweet if email, in general, was just a nice RESTful API.
>Obviously it's absurd to conclude that Fukushima was good for the economy--the loss of capital more than outweighed the money spent fixing things.

That depends on your definition of "economy," doesn't it? When I picture an economy, I picture goods and services being consumed and money changing hands. That's what GDP measures. Should money locked up as capital be counted as part of the economy?
[ is part of Bash syntax
It just has more nodes pointing to its links.

That's the danger behind PageRank. If something false is popular enough, it will replace fact.
Barnes & Noble to Spin Off Nook
What do you think is the analogous product to Cloud Dataflow in the AWS ecosystem? SWF? http://aws.amazon.com/swf/
The xkcd is only necessarily true when it is the median average that is considered. However, most people are not necessarily of mean average intelligence.
They also get a choice of LG or Samsung Android wear device, as well as everyone will get a Moto360 when they ship.
The also get 2 smart watches I think.
I was looking into this right now, I think it has to be more expensive than that to account for the cost of the lens and magnets.
I'm interested to know which parts specifically you find hard to distinguish in iOS7/8? Are you experiencing any similar problems with current Android design language?
Cast Away with Android TV and Google Cast
Action begins at 4:30.
Would you send your user's password to them on a postcard? If so, by all means feel free to send it in email.
The scale is cherry-picked to fit the change in the graph - you can see that just by looking at the Y-axis. It makes sense for what I assume the BLS assumed the purpose of the graph is, visualizing the direction of the trend over time. However, you can't draw conclusions on the magnitude when the magnitude is arbitrarily chosen.

So yes, I am really accusing the Bureau of Labor Statistics of cherry-picking the scale. I don't assume any malice on their part, only that they intended the graph to be used for purposes other than how it is used here.
sure, but the issue is that it's conflating things and making an appeal to authority
I think its pragmatic, IMAP is just so painful.

EDIT: and inefficient
That is the argument of the ruling, but it seems arbitrary defined.

I would ask what law grounds the definition of the black box. If one would try to do the same to a illegal content hosted on a website, where should I start drawing this box? At my ISP, since it is the edge where I as a customer receives the content? At the websites ISP, since it is the one that broadcast the content? The coo-location of the server, as it is there that the mechanism for broadcast is happening? The hardware, which produced broadcast? Or is it the person who acted on the machine in order to create the broadcast?

As with a onion, each layer covers the internal workings of the next one. The actual functionality being provided (ie content) is the same at each step.
Everyone also got 2 google watches.
Consider the nature of his site makes Cryptome a massive target for state sponsored hacking, among others. even a site with experienced staff is going to have challenges. Since he has been running Cryptome for free since the 90s be sure to support their Kickstarter, even if you only agree 50%.
Or I could just buy a pizza, eat said pizza, and convert the box into this...
The problem with the Pebble (speaking as a Pebble owner) is that it's very, very limited in what it can do. It works okay as a display, but that's about it. I bought mine to basically use in lieu of a bike computer while cycling, and it's great for that, but it couldn't really do anything interesting.

I can see that I got a text message on my Pebble. Awesome. The problem was I couldn't do anything with it. Can't dismiss it on the phone. Can't reply to it.

Android Wear looks like it addresses the major problems I have with my Pebble. If pricing looks sane there's a good chance I'll be ordering on of the watches going up for sale today.
I've solved a lot of captcha's in my time, and really have never experienced the trouble the author is detailing. Not only am I relieved when I see a reCaptcha since they are some of the easiest and most forgiving challenges, but I don't recall ever having repeated bad/unsolvable challenges presented on the same page.

Sure, maybe sometimes you get a weird one and fail it. But typically the next challenge is easy to pass. Seems the author cherry-picked some of the worst reCaptcha examples for the article, but wrote it in a way that made it seem they were presented back-to-back.

Besides this -- the article makes no attempt to offer a better solution.

Captcha's are really the best way we have right now to "prove" someone is not a bot. Hidden Form fields, etc, don't work and are easily spoofed. Sure Captcha's can be beaten by bots sometimes -- but I trust Google's scale/volume with ReCaptcha to handle that for me (for the most part).

Captcha's are not going anywhere anytime soon.
Vesper Mac Diary #2 – Setting Swift Aside for Now
I see that as being a great opportunity for customer referrals. So many people have a gmail account. It'd be cool, from the business' standpoint, to see if your customers are connected through something as simple as email if they allow an app to access sender information.
The existence of this book, as well as the numerous d3/angular wrapper projects, don't make his assertion 'fishy' - they prove it.
I've never seen much value in exceptions. For that matter, I've never had much interest in using longjmp and setjmp. It's possible that I tried them out at one point just to see them work. But I've never come up with a use for them.
Yes, please do. Because Google has and will continue to make way better use of that data than anyone else.
Same for Volkswagen which owns amongst others: Audi, Bentley, Skoda and of course Volkswagen itself. But these "brands" at least partially have their own development departments. Audi for example operates quite independent in many regards.
So what's the user experience??
Yes, yes you were.
I think they haven't found a nickname for it yet. Remember KitKat was called Key Lime Pie at first.
Google Dataflow seems to be the big one here specially if it works well for stream processing. Fault-tolerant stream processing with huge scalability? Perfect for the IoT!
In fact, Hitler even beat out Jesus for total references for a good stretch of the mid-20th Century. For a long time, he was also stealing Christmas. But we're happy to note that Christmas overtook Hitler in the 1980s, and has narrowly edged him out ever since.

https://books.google.com/ngrams/graph?content=Hitler%2CJesus...
I presume AWS Data Pipeline. But they have their differences, so perhaps there is no true analog.

http://aws.amazon.com/datapipeline/

Simple Workflow is new to me, so thanks for putting it on my radar!
Especially their design page: http://www.google.com/design

"[Google Manager]: Guys... Could you make it modern, like Microsoft Metro, but maybe decrease the padding between tiles and maybe add some blurry shadows."

"[Designers]: but shadows are a violation flat design principles!"

"[Google Manager]: I am sorry, but we cannot come across like complete rip-offs".
and you seem to be saying

If you have given an untrusted third party site the credentials that you use on other sites, that meat is complete fetid. It is now deadly.

This whole discussion is arguing about what to do once the meat is rotten, rather than daring to maybe discuss not selling rotten meat in the first place.

When a site gets compromised and the passwords may get stolen (because of weak or no cryptography), the site should send out password reset emails en mass, and that should be the end of the whole issue. Instead it's moralizing about how they put everyone at risk because of other sites where the same credentials work. No, the user put themselves 100% at risk. But it is never discussed that way, and instead we continue this ignorance train.

As an aside, I marvel that some defensive imbecile keeps coming deep into this thread to downvote me.
Oops. You're right. I got my numbers wrong, but my point still stands. Unless your goal is denial of service (which this does nothing against), you don't need to make more than 2,880 requests a day.

Most generic spammers (wordpress/mediawiki pharma spammers) post 1-100 messages and then move on to the next site. If someone wanted to specifically target your site, they would use a botnet or write a GPU proof-of-work solver.

You're also right about IP rate limiting not being useful against botnets, but neither is this. For pretty much the same exact reason. Each machine in a botnet comes with a unique IP address, but also 2 or more CPU cores.

Just use a CAPTCHA. CAPTCHAs aren't the problem. The way we use them is. Don't show CAPTCHAs to every user. Ask some questions first. Is there something unusual about this user? Is there something unusual about the user's browser? Location? Is the user doing something unusual? Show them a CAPTCHA. Those "surprise" CAPTCHAs are less annoying to the real user and more frustrating to the spammer, since unpredictable behaviour makes testing their scripts harder. There's a reason why Facebook and Google do this.
Android's new logo
I believe it's Kinesis: http://aws.amazon.com/kinesis/
I think it's time to move to the ultimate captcha: "Is this post spam?"

Then we just hope that the spammers create a perfect solver again :)
Oh man. Brian May's gonna be pissed. No vertical is safe.
The calendar in particular is a complete disaster:

http://cdn1.appleinsider.com/13.06.17-Calendar-2.jpg

The navigation bar in general just looks like a mass of text to me most of the time, especially if there are more than two tabs:

http://www.okilla.com/uploadfile/1/2013/07/10/11373456479/13...

EDIT:

And no, I don't have similar issues on Android. Part of that could be the move to side drawers in Android apps. The greater contrast and lower reliance on lines as visual separators is definitely part of it as well.
Where does Polymer stand in relation to React.js from Facebook?
Consider a driver who drives into a pedestrian killing him, because at an unfortunate moment, the driver was paralyzed by an unexpected stroke. The driver witnessed the entire event with full understanding of what it means to take a life. Is he morally culpable? I would say no, because he was not in control. You can also imagine similar scenarios involving coercion or accidents.

Right, but in that example, the question of choice doesn't come into play. The paralyzed driver knows what it means to take a life, but they cannot act, regardless of determinism's validity.

The key point is whether we are in control of our actions, or merely witnesses with the illusion of control. I don't see how this can be separated from moral culpability.

In my view, it doesn't matter. From a moral perspective, there is no distinction between the illusion of control and actual control, the variables used to calculate a moral judgement (behavior and the intent driving that behavior) remain unchanged, even if the actor didn't have a choice regarding their intent.
The lite vs. pro version is a great suggestion and I would have purchased a pro version for my daughter immediately to avoid the malware hassles it caused us. Instead she purchased an academic version of Photoshop which was $100 USD or in that ballpark. This is a shame because Paint.net is a great product and I'd like to see it succeed but their business side is poorly executed. I'll need to head over to the PDN forums and express my frustration.
This area looks like a mess. What is the intent of that law to begin with? To charge for special right to "perform" the copyrighted work in public. I don't really get why this principle is extended to delivering the "performance" to the single user. Isn't it about "public" i.e. multiple aspect needs to be present?
I also own Google Glass and barely wear it anymore. When Wear was announced, I was (and still am) super excited, because except for the camera, it has all the features I use Glass for, and more!
Previous, short, discussion here: https://news.ycombinator.com/item?id=7942274
Why not just ban all warrantless searches outright?
It seems to be really good at preventing visually impaired users from using your site. Unless it is true that they really do develop better hearing.
Not just more nodes, then it would have been easy, but more "credible and relevant" nodes. At least that's the idea.
> Q: Can I use a pizza box for the cardboard? A: Yes. Make sure you order an extra large.

I'm not sure I'd want to stick my phone into a soaked pizza box though.
What you say is true, but the Court's language in this case strongly suggests that it would find a similar privacy right in documents held in the cloud independently of cellphones. This is contrary to Smith vs Maryland, which the government uses as justification for gathering metadata, in which it was held that a single phone number could be passed to the police without a warrant because it had already been voluntarily shared with the phone company. Hence when the NSA "grab everything" policy eventually winds up in the Supreme Court it is likely to be judged contrary to the fourth amendment.

From a privacy right in documents held on my behalf by a third party it is a very small step to a privacy right in documents in transit from one place to another, especially if encryption has been used to protect the documents in transit. Thus the Court seems to be angling towards a new third party doctrine in which people have a reasonable expectation of privacy (and hence fourth amendment protection) for documents held on their behalf by a third party provided that the third party has undertaken to keep the documents private.

Your question about radio versus cable is simple to answer. Data transmitted by a cable requires physical access to the cable to intercept, while a radio broadcast is, by its nature, sent to anyone capable of receiving it. Hence it is perfectly reasonable to argue that anyone transmitting data via radio has given up any expectation of privacy in that data, but that this has not occurred for data transmitted through a private cable. Of course most people transmitting private data via radio will encrypt it, and encryption clearly signals an intention to keep the data private.

An undersea cable is the private property of the company that owns it. If that company is a US person then obviously it enjoys constitutional protection. Even if it is not, the new third party doctrine I talked about above would protect the documents of US persons from arbitrary US government search even when held or transmitted by a non-US company.
Aereo effectively supplied a data stream with broadcast content to subscribers (just like a cable tv company) without licensing the right to supply that content.

This is also what ESB would be doing by letting people rent antennas and streaming servers.
Ask HN: Open-source equivalent to Ink File Picker?
I'm starting a new project and I'd love to use Ink file picker (https://inkfilepicker.com) but they're charging (IMO) a ridiculous price for their basic package ($19/mo) and the prices after you exceed the quotas are also very high.

I was wondering if there was an open-source equivalent. I know about basic file uploaders (like jQuery File Upload, etc..) but they only have awesome support for uploads from desktops, and I think the integration ideas that Ink has come up with are really neat (just not monthly pricing sort of neat).

Also, if there is anyone interested in doing a Kickstarter for something like this, I'd be willing to contribute $100 or so, and I would imagine a large amount of people would too.
This is fantastic. What we need next are OAuth libraries for Postfix and other SMTP servers, so I can use Gmail to centralize and read my email but still use my home organization's SMTP server to send email, without having to give Google a copy of my password.
We (Streak, YCS11) have been using this API for a few days to build our email snoozing feature (https://www.streak.com/email-snooze-in-gmail).

The API is really nice to use and makes interacting with Gmail way easier relative to IMAP. I'm surprised they don't recommend using this API to build full email clients. I fully expected that to be one of the core use cases.

The reason its hard (currently) to build a mail client using the API is that call to list the threads in your inbox or any other label doesn't actually return the messages in those threads. So its hard to show the people that are on the thread as well as some of the timestamp. If they added some more summary data to the thread object, I could see this becoming feasible.
I still wonder about the role of CloudCar in regards to Google and to Android. At least the Startup is somehow connected to Andy Rubin [1], the original founder of Android. CloudCar also has some good engineers that know the automotive infotainment space quite well.

"The startup may not be Rubin’s next place of employment, but he is connected to it: after the rumor hit, and then he denied it on Twitter, he further clarified in a Google+ post that CloudCar “are a group of friends who I give free office space to in my incubator in Los Altos.”" [1]

[1] http://techcrunch.com/2012/06/22/cloudcar-the-stealthy-start...
> Not a Google project
North Korea threatens war on US over Seth Rogan movie
Adobe will start moaning...
If the person you're paying is doing the work, then it's obviously not for their personal use. It's for yours. So they're doing it for money on someone else's behalf, which throws the "personal, non-commercial use" argument straight out the window.

Moving on to Dropbox. Dropbox has no involvement in the selection of the file in question, or even the type of file, and moreover, they're not the ones to place it on their system, you are. Aero, on the other hand, knows exactly what they're receiving because that's what their entire system is explicitly and narrowly set up to receive. They can't claim ignorance as to what they're capturing when their basic sales proposition hinges on a specific declaration as to what - exactly - they're capturing and re-selling.

In other words, the arms-length relationship between the service provider and content that protects Dropbox under the DMCA's Safe Harbor provision does not exist with Aero.
> As a user I've been really unhappy with their designs lately

You've been unhappy, while I've been extremely happy. In day to day usage, I find the new Maps is a net positive whereas the previous one was both overcrowded and cramped. The new design scales as with whatever device I'm on, it behaves the same while offering the best use of available real estate.

> trying to make things look pretty and screwing over their users

They have consistently iterated towards a more cohesive, better thought out design language. Their "Material design" is the culmination of this process, embodying the principles of good design while covering a large spectrum of input and output devices. This is an incredible challenge and I feel they're well on their way to achieve this goal.
I hate to be so simple but XKCD said this first

https://xkcd.com/810/
It's very cool that they are doing this. But, for anyone who tries it, there's something very important to keep in mind: Low latency is critical to VR! Unfortunately, Android sensors and graphics pipelines have very poor latency. If you try this and get terrible motion sickness, don't dismiss VR as a vomit inducer.

In fact, many people have reported that spending time in VR, and taking a break whenever motion sickness creeps up, actually reduces motion sickness outside of VR. As in, people are saying "After playing in my Rift for a few weeks, I can suddenly read in the car for the first time!"