skysight-inc/HackerNews huggingface dataset:
EcryptFS and Truecrypt are very different systems.

Truecrypt is simulated hardware encryption. It creates a virtual encrypted hard disk, which your operating system can more or less treat like an ordinary hard disk, but for the kernel hooks Truecrypt adds to lock and unlock the disk.

EcryptFS is an encrypted filesystem. Unlike Truecrypt, which encrypts individual disk blocks, systems like EcryptFS encrypt and decrypt whole files.

All else being equal, you'd prefer an encrypted filesystem to a simulated encrypted hard disk. Some of the reasons are technical: the crypto involved in encrypting a block device is crappier than the crypto involved in protecting a file (most notably, block crypto is typically not authenticated). But at a higher level, the reason is that you'd like your cryptosystem to have as much information to work with as possible, and one nice bit of information for it to have is where files begin and end.

All things are not equal though, and to select EcryptFS over Truecrypt, you also have to select EcryptFS's design and implementation over Truecrypt's. Truecrypt's design is simple and has been looked at more carefully than EcryptFS's. On the other hand, Truecrypt is an XTS cryptosystem, which isn't great. I would have a hard time making a recommendation between the two.

It's more important that you understand the limitations of transparent disk encryption. Unless you are pretty regularly telling your crypto software that it's OK to unlock a given file or disk or whatever, then it's probably "always on", and your keys are always resident in memory, and your files are more or less always exposed to malware. Malware is a much scarier threat (for most people) than police raids.

If you're interested: we work in a pretty high-risk environment (we handle a lot of hazmat). Our general crypto regime at Matasano is:

* Everyone uses Filevault2's native XTS disk encryption (along with some fiddly rules for what state your machine needs to be in if it's in your bag).

* Everyone uses OS X encrypted DMGs (I don't remember what the block crypto design for DMGs is, but you can check out John the Ripper if you're curious) to isolate different projects; we audit machines to make sure keys aren't in the keyring.

* Everyone uses PGP for email and to encrypt specific files.

If this sounds like a pain in the ass, be aware that this is pretty close to the minimum viable amount of security you can be providing a mobile device; if you're skipping one of these steps, you should know why.
Yeah use of zxcvbn is a problem.
Minilock's key strength checking goes[0]:

key.length > 32 && zxcvbn(key).entropy > 100

Firstly minilock allows the following: zxcvbn(". . . . . . . . . . . . . . . . ").entropy = 161.421 [1]

Secondly this only really works for English. While they are used to being forced to use English passwords, we can't expect that speakers of other languages would like English passphrases. It also has heuristics making assumptions of how people choose passwords (e.g. l33tifying) which may be less valid for longer phrases than short passwords. zxcvbn uses all English word lists and keyboard layout and automatically gives you a Unicode bonus[2] if you use unexpected characters. If I write a sentence in Chinese, I have a high entropy.
Here minilock actually penalises Chinese by adding the key.length > 32 requirement as 32 Chinese characters is equivalent to a much longer English passphrase. I suggest lowering the key length requirement in this case. However, if my passphrase were in Arabic and my attacker knew it was likely to be in the Arabic alphabet, I'm not really entitled to the aforementioned Unicode bonus as the entropy drops to be similar to English (I think).

That said, the design decisions of zxcvbn do make sense for Dropbox and zxcvbn is not the crucial part of the minilock program (the crypto is). Users will always find a way to game the system and find the lowest possible entropy passphrase.

[0] https://github.com/kaepora/miniLock/blob/80aff2cdbcebf669fae...
[1] https://github.com/dropbox/zxcvbn/issues/39
[2] https://github.com/dropbox/zxcvbn/blob/0a8b5b65a1864437eaac5...
Study finds we misjudge how good women are at math
I've noticed you relentlessly and persistently post comments that are deeply critical of Groovy. To put it bluntly, I pretty much ignore everything you say on this topic because I have surmised that you have some deep issue or axe to grind that is beneath it all. I am curious however what that deeper issue is. Clearly from your depth of knowledge you had a heavy involvement at some point, but at some point something deeply alienated you. I am not casting a judgement here about whether you're justified in that, but I like to keep an open mind. If you are willing to tell me (privately if necessary) I am interested to know what your side of the story actually is.
The Return of Email Startup Acquisitions
as I've commented before, SVG fits pretty much all those criteria:

- works inside an <img> tag

- works in background: url()

- supports both smil animation and css animation

- supported back to IE10 (with css animations)

- plays automatically in a loop with no play controls

- can embed jpegs, pngs, videos as videostrips or diff images

- can apply alpha transparency via a mask operation

- flexible enough to apply a wide variety of compression techniques including multiple update regions (where gif only supports one rect per frame)

- Controllable via javascript (as long as you trade off putting it in an img tag and use an object tag instead)

previous comments here: https://news.ycombinator.com/item?id=8038838

all that's missing is widely available software to author SVG animations.
So how much is a postage stamp in terms of real size? Because I can think of many different sizes. Also, 1TB is kind of vague, they should've given the size in Libraries of Congress.

https://xkcd.com/1257/
CBR1000RR with SC-Project GPM2 exhaust slip-on
Apparently it's actually owned by Google..?

IP Address	74.125.224.72 - 131 other sites hosted on this server
IP Location	United States - California - Mountain View - Google Inc.
ASN	United States AS15169 GOOGLE - Google Inc.,US (registered Mar 30, 2000)
The X60 doesn't have Computrace in its original BIOS; that appeared starting with the X61. If it's there it got in through an update or someone deliberately installed it...

Either way it's not so hard to remove that option ROM and reflash the BIOS. ;)
The funnist terry crews remix vvideo
Your Selfie Idea Is Not Original
Feds not feds. Lower case is a totally different and real word. So sloppy.
Also, eight 128GB MicroSD cards are a large-ish postage stamp size, too.
Would be great too if this works with LLVM/Clang for Windows. Then one could have access to the complete C++/14 :-D
Reverse HTTP Proxy with NGINX and Apache
Some Financial Tidbits
This, imo, represents a fundamental misunderstanding of the typical use case.

If posting the image on a typical forum requires more than some sort of [img]http://foohost.com/23452t23t.baz[/img] it's a non-starter.
"Most people find it a fashion-sin", as in most people, including those who don't even care about Fashion.
Can't believe no one has posted propagator networks. http://groups.csail.mit.edu/mac/users/gjs/propagators/

In Clojure https://github.com/tgk/propaganda

https://github.com/jimwhite/clojure-propagator

https://github.com/zcaudate/kiran

talk at ClojureConj https://www.youtube.com/watch?v=JXOOO9MLvhs
BitLocker has the advantage of being accepted by my employer and now that XP was banished in favor of Win7 it's available on all of the company computers.

It has the extreme disadvantage that I can't mount my disk on anything except windows. Which is a no-go given that I mostly live in Linux and most of my colleagues do a lot of work with MacOS. We all have Windows machines for the bureaucratic stuff we must do (word documents, excel, various internal web portals that require IE or some sort of ActiveX plugin). The things is: when it comes to closed source companies, Microsoft is one that I am willing to accept that they have sound engineering and release policies. But they refuse to explain how it works, so we can't inter-operate and we have to do something else.

(Which for me means that I use a FIPS certified hardware encrypted USB drive with a built in keypad that you use to enter a pin, but for everyone else it basically means they don't bother and just use stupid unencrypted FAT drives and don't care if they "get caught". Or they try to use the awful Box sync shit IT is currently trying to foist on us)
The Pi Shop sell a high power adapter http://www.amazon.co.uk/Adaptor-Supply-Charger-Tablet-iPhone... with full 2A and dual USB ports.
I hear you, but I'd bet on my MURS capable radio to outlast my iPhone (with BT on) and whatever spare (heavy) batteries on my week long backpacking trip.

Maybe not the use-case you guys are targeting, just food for thought.

Either way, great idea/product and use of the Multi Use spectrum.
Silicon Valley’s Embrace of the Gay and Lesbian Community
Nobody on HN has a right to "not have something they posted replaced with something else". Dan said it today, and Paul Graham has said it in the past: you don't own submissions to HN. It's for the same reason that posts can't simultaneously be "Ask HN" and a link to a site --- the submitter of a link doesn't get a special privileged comment to go with it.

The slot you fill when you submit a new story to HN is community property. If you're worried about the outlandishly weird case of having your name attached to something that a mod decided was better than your submission when it actually wasn't, submit with a throwaway account.

None of this is news. The site has always worked this way. What's galling is the reason people are bickering about it now: because the moderator is making an effort to be more transparent about it.
I guess this is to combat password stealing attempts in particular, and not AP spoofing in general?
I don't think it can be sustained. If someone wants to work in this area long-term, then wages need to rise equal to rent inflation. My current apartment rental has been raised about 10% year-over-year for 4 years (no rent control), yet our income has remained the same. We aren't in high-paying jobs, so at some point our time here will end unless something changes.
I guess this is to combat password stealing attempts in particular, and not AP spoofing in general, since you could easily make the new AP WPA2?
Need to add the new partners to the partners page...
Hamas was elected in 2006 because they had better social programs than Fatah. This was a more major factor than their position regarding the elimination of a Jewish state.

Almost immediately upon coming into power they destroyed the rest of the government, killed people, ran Fatah out of town and proceeded to impose growing Talibanization efforts in Gaza, restricting freedom of women, gays, etc. They also trained kids to become fighters, etc. It is against the Geneva conventions to fire rockets from civilian areas, and against many international laws to use civilians as human shields. So no, Hamas is not a legitimate government, and they commit international war crimes. I am not sure how you support the idea that "Peace can't be predicated on their destruction".

That said, if the international community cares as much about Gaza as it now seems from the rhetoric, I say they should form a coalition to go into Gaza and help them build a real, independent sovereign state there. When the UN inspectors can confirm that the smuggling tunnels have been closed and there are no more Qassam rockets, scud missiles, or whatever else they've got lying around, then Israel and Egypt can lift the blockade and Gaza can have freer trade. Note that all this can be done without Israel's involvement.

But the international community would have to find willing partners in Gaza, and I doubt the semi-theocratic, ideological Hamas regime would make for good partners. But after Israel takes out Hamas, maybe the international community can form a plan to step in there. Here's hoping. But then again, let's face the sad truth: no states really care enough to help the Gaza people. The Arab League states deny Palestinian refugees citizenship -- even the ones fleeing Syria. And the same NATO countries that went into Iraq to nation-build are not likely to do it in Gaza, even though it's much more readily possible to build something there. There's no oil or other stuff to support "American interests".

Other people that international coalition didn't really try to help get their own state or avoid genocide: Kurds, Tutsis, Black Sudanese in Darfur. So how do we get them to actually stop talking and start helping provide security and nation build?
Yes. SVG works in that use case.

with animations.

it does.

I misunderstood nothing.

behold:

http://www.zenpsycho.com/squirrelrun.html
This looks cool - any chance you'll release a pre-built version?
To the immediate comment: it's the customers fault the writers don't get a lot more in royalties.
I think this rather narrow minded-- to think that as consumers we have control over what business(& believe me, publishers are a business), pay to the writers. That's like saying we have control over what a grocery store pays the company that makes Cheerios. The writers have to fight for what they want, just like we have to fight/negotiate with our boss for a raise. We, as consumers and fans of their writing could certainly support them in their endeavors but ultimately...it's up to them. :)
I would like to make a comment about The initial topic in relation to digital books & Amazon Prime. I read a lot! I mean a lot! Perhaps... 1 book every 1-3 days. What I've noticed is that books that would normally be offered as free books or, at the most 99 cents, are now being offered only in the Amazon Prime lending program. So now, what I use to get for free, I now have to pay a monthly fee for access. This upsets me greatly! I write reviews for the books which are published on Amazon, goodreads.com, & the authors blog, as well. This only helps the writer for future readers which in turn means better sales now and in the future. If Amazon left alone: the already free and the books in the future that fit that same category for free, then I think, this Prime lending idea might be a fair idea for consumers but it's not if they stick the free books in this Prime selection.
As far as the authors go and fairness to them...? Idk. It's going to be up to those writers to let us (as their readers) know what they think of the whole thing. If they ask for out support in changing things then I'm sure we all agree, we'll do what we can to help.
Our library doesn't have a lot of digital books but they're improving quickly, however the system is a little chaotic, and the wait list is long. I will gladly rent a physical book or digital from the library before paying for it but, quite frankly, it's not as easy as a download from Amazon. I personally love to hold a book in my hand. I love the smell of them and the nuance of turning a page. There's also the different text types that authors print. It's a way to customize their story. However, I also love the convenience of my kindle. If I took 20 books with me on vacation, I'd have to pay the extra weight fee for luggage :) but with my kindle the books are easily stored and transported. Portable. I have this ongoing fear that in our future an actual printed/paper book will be a huge commodity, children will be intrigued and mistified by this rare find and libraries will be no more. This would be a tragedy beyond my comprehension. I hope, for our children's sake, that printed books are very much a part of our future! 😉
Samsung might buy SmartThings
Unless it contains "junior", title is the least interesting factor in compensation for tech workers. Things that matter significantly more:

* Is it a technology company or not?

* How big is the company?

* How old is the company?

* Where is the company located?

The idea that a flood of people are going to give you nicely formatted compensation information is a bit wishful. A better idea would be to be more specific about the job you're considering, so that people can answer your question directly.
I've attached a link to a prebuilt version at the bottom of the post, you can get it here https://github.com/Lockyy/Rainbar/releases/latest
Prisons, law-enforcement. Any conservative lobbies. And what makes you think banks, auto makers, and pharmaceutical companies are going to be in favor of drug legalization? They aren't trying to advance that agenda already and don't have very strong incentives to push for it either. Or did i misunderstand?
How long will it take for apple to approve my app?
Yo feels like a sharp stick in the eye to every entrepreneur struggling to raise money who feels like they are working on a real product that solves real problems and has a real market for its services.
It's not bad, but it is a rootkit. Some people don't want that functionality to exist regardless of who is handed the keys.
Minor quibble, there are around 140 million tax filers in the US. 1% = 1.4 million.

Your point still stands though.
> For example, most English speakers would initially not be aware of any significant difference between the sounds of pinyin "x" and "sh". They're both basically English "sh".

That's interesting. To me, as Southern Chinese, Pinyin "x" and "sh" are very different. What I get confused are Pinyin "sh" and "s", which both sound like English "s" to me.
>What would people recommend these days seeing as TrueCrypt is likely to be compromised and ecryptfs might not be as secure as it could be?

Just to push back on this a bit, I don't think it's particularly likely that TrueCrypt is in any way compromised. It's been stable software for quite some time now, it's open source, and there have been no identified flaws with it. The main problem with TrueCrypt is that it may be nearing the end of its useful life as filesystem technology changes and TrueCrypt is not updated along with it (this has already happened with GPT/UEFI and TrueCrypt's full-disk encryption). If TrueCrypt will work for you, at the moment you don't really have to worry that it's been compromised or worry about "lack of support" (note it hadn't been updated for over two years before the abrupt departure of the anonymous devs).

It's quite possible that you won't even run into any compatibility issues in the future, as future encryption tools will likely offer support for TrueCrypt volumes - once the phase II (crypto) audit is complete, assuming no major flaws are found, it will be a vetted, open technology, so it'd be a no-brainer to write an implementation based on it.
Yeah I guess my title or my timing was off, this version got much more interest.
Seems to me like property values are going up so much because rich people are accumulating so much wealth lately while interest rates are staying so low. Might as well put those millions into property. Of course it puts any house in a city out of my price range to buy with a mortgage, but oh well, I guess.
> Of course, engineers, designers, marketers, sales people and founders, and everyone else working in a startup, we don't come to the Valley for a pay check.

I will never understand this attitude. Why on earth would you want to work yourself so incredibly hard for so little in return? The author makes it seem like people are there primarily for some kind of 'shared experience'. If I have learned anything in life, it is that people are primarily self-interested.

If I was ever in a position like this, I would ask myself how much a shared experience is worth. Is it worth working >40 hours every week for nothing in return? Is it worth tolerating "hostel" conditions, as the author puts it?
Someone's trying to finish their thesis
You could also use <video src="/path/to/vid.mp4" muted loop autoplay>
It would be interesting to have an operating system that used a queue of transactions for IO, esp against an immutable FS somewhat like Datomic.
Pretty cool site. The pong game is (hopefully) an elegant tool for pre-screening clients; or maybe I'm reading too much into it.

One note: if you're trying to show off how successful you make your clients, don't list clients that appear to have gone under. The link to Oh Crap (the app) points to a generic GoDaddy domain page.
The military-industrial complex is still alive and well, and still exercises very strong control in crafting agendas. What makes you think otherwise? Plenty of war operations still going on, air support being given, forward bases maintained, weapons purchase agreements from allies.
Black Year: Everest’s Deadliest Season
Derp. Thanks!
A major use-case is to efficiently play a clip from a video camera, so purely vector animation or a sequence of frames from still images isn't good enough.

I've tested an SVG with an <svg:video> element (http://www.w3.org/TR/SVGTiny12/multimedia.html#restrictedVid...), but unfortunately it doesn't seem to be supported anywhere.

I've also tested an SVG playing video via HTML in a <foreignObject>. In Firefox it does play when the SVG is opened as a standalone file, but not when embedded in <img src>. So close :(
Can anyone explain to me how an airliner, supposedly shot out of the sky @ thirty thousand feet is leaving seats, bodies that are identifiable, engines, parts of the plane, luggage, etc. Yet the aircraft on 9/11 in Shanksville PA, and at the Pentagon left absolutely nothing? No bodies, seats, luggage, engine pieces. Nothing. Nada. What was so incredibly different about the way these aircraft crashed that would obliterate everything?
I'm involved in the TC audit, and zero of the people I know that are working with the TC audit believe that it's compromised.
This is big news in the IoT space.

Google is using Nest as their IoT hub but it suffers from IMHO two problems. One is that the thermostat is actually flawed in that a single sampling point in one arbitrary location doesn't make much sense (full disclosure: I am biased as a founder at a smart vent company), but two, and more importantly, it doesn't have enough radios.

Apple's HomeKit, also getting started in the thermostat space is too early to really get a sense for the kinds of integrations and system topology that we might expect to see.

SmartThings (competing with Revolve and a few others - including my open source platform https://github.com/dandroid88/webmote, j/k :p) is poised to glue the IoT together within the home and it seems like at 200 Million Samsung is getting a steal. Especially given that Nest was 3.2 Billion... I remember reading that Nest is/was (?) moving 100,000 units a month not too long ago, I don't know if smart things is anywhere near this number, but with Samsung backing it, it could be a real contender and fast.

One can't help but wonder where Cisco (Linksys from time to time) and others who have had a hub (complete with web server and embedded linux distro capable hardware...) in every living room for the last 10 years have been, and why they couldn't see how good of a position they could have been in today...
Oooh I like this a lot. Very clever. How many trigrams do you actually choose from?
TJ Holowaychuk made something like this a few years ago:

https://github.com/visionmedia/term-canvas
That's what sites do currently, but it's still not quite there yet, because it requires special markup and doesn't loop when you share the URL directly (I hope the latter can be fixed easily: https://bugzilla.mozilla.org/show_bug.cgi?id=1041238 https://code.google.com/p/chromium/issues/detail?id=395413).

Annoyingly GIF isn't supported as a source in <video> either, which adds extra complexity when you want to provide a proper fallback.
Awesome Rails
2 states legalized. Out of 50. Not exactly a tide of legalization.
“Logic By Machine” – feat. a very young Richard Hamming
Intermediate C Programming Notes