skysight-inc/HackerNews huggingface dataset:
You nailed it. I stopped reading and started laughing when iMessage was hailed as a successful platform addressing these issues. The only thing securing iMessage is the procedure for processing law enforcement requests.

PGP is a tool that requires expertise to operate effectively. That isn't good or bad, it just is.
>They do indeed have an advantage in deployability!

Deployability is worth more than might be immediately obvious. The question of deployment is directly related to the business of availability. If 99% of people used a crypto system that provided no real security beyond thwarting a global adversary, which also had the option for further measures to confirm identity when necessary, we would be in a much better position than we are now because it would mean that when I do have contacts I would prefer to use encryption with the software will already be on their system and I only need to instruct them in how to use it.

There's a fallacy in saying that no measures are better than imperfect measures 'because then you don't have a false sense of security'. Regardless of security measures or not the false sense of security is baked into how people use computers.

I challenge you to go explain to anyone you know who does not identify as a 'computer person' how email routing works and why it's quite possible for a 3rd party to read their mail. If they even understand what you're talking about, the response is an almost universally cool 'Oh but so many other people do it, and what am I supposed to do stop using email?'

The vast majority of people will not stop talking just because in the abstract they might be overheard.

EDIT: As a note, I think any centralized system of key distribution is fundamentally insecure.
+1 for Android. Happy to part with $5 for such an application
Not mainstream ≠ suck.

Also, about “terrible mail client implementations”, — the problem is, to not be terrible for many is to be built-in to GMail (and work transparently there). The consequences of that are obvious I hope. So no, thanks.
When I ask people for their e-mail address, they give it to me.

When I ask them to verify their pgp key, it's less easy.

How could the verification of the key be built into the address they give me? Something DNSSEC based I guess.
I have to admit I can be a bit reticent about having a drink every day, while maybe once a week having three pints with friends.
Scent Trunk Finds Your Perfect Scent
All very good points.

It's better than a notepad in that it will send you reminder notifications of accomplishments. A notepad requires you to look at it again.

There are also counters on each category so you begin to notice and feel confident about how accomplished you are on certain areas of your life.

There is also a strengths/skills page which collects notes you've made on each accomplishment. It needs to be improved but eventually you will see patterns in the skills you use to accomplish things.

I hope that helps. I probably should have written that on the website.
Yes. DNSSEC. Because what we need is a trusted arbiter, and who better to fulfill that role than the governments of the US, or whatever country happens to own the TLD I use?
I hadn't come across ccan before your post, so my thoughts on it are fairly superficial. [warn me if I'm off track]

From what I can tell, it's been around for a while, has countless modules, and probably is a better choice than Kit at this point, given the early stage of this project.

There are two main differences: (1) Kit is a project manager, while CCAN is a code archive, and (2) Kit modules are compiled libraries, while CCAN distributes source code only.

So, I suppose one would decide in favor of Kit because of its whole-scope approach. If not that, because CCAN looks quite hackish at first glance. From its homepage: "just hack whatever parts you want so it compiles in your project".
I find it increasingly hard to believe that Satoshi was one person. It is, however, in the best interest of everyone but journalists that they keep their identities hidden to avoid ad hominem attacks.
Polycarbonate bottles were not in widespread consumer use back in 1970.

Even though this particular polymer was originally discovered over 100years ago, and relatively modern production techniques were patented in the '50's,
widespread use to replace glass in "water cooler" type bottles did not begin until the '80's.

Later this polymer moved down the chain into smaller
bottles.

The invention of polycarbonate at GE in the '50's is interesting:

"[Fox's] discovery, made within eight months of his joining GE, was a serendipitous byproduct of the wire enamel project. The byproduct would prove far more important than the original objective."

from "Unlikely Victory: How General Electric Succeeded in the Chemical Industry"

http://books.google.com/books?id=bgdvYy80AHUC&pg=PA71#v=onep...
Presumably the hope for transparent key management would be something like the CA system used in TLS, with certain reforms (certificate transparency? Namecoin?) which make it visible when a CA has been hacked or has collaborated with a global adversary.

So there's just a dozen or so central authorities who need to handle keys with the utmost severity.
My impression (I could be wrong) is that a lot of OTR users in particular are worried mainly about the local adversary: someone on the coffee-shop wifi, or the corporate IT administrator, sniffing their IM traffic. In that case you just have to have an encryption setup that's good enough to circumvent whatever analysis that class of adversary is likely to use.
It might not have even been Verizon's mistake. When you peer with an ISP it is the customer's router that announces the routes. Announcing all of your networks individually is literally a one line change in most router configs so it's an easy mistake to make. If the ISP is being defensive, and good ones are, they filter incoming routes to make sure they belong to the customer. But they may not have a filter that mandates that they're aggregated since that usually isn't a problem.
How to Build Apps Your Customers Will Love
Now imagine Tinder users having access to FB-quality face recognition software? I can see GOOG offering that feature as part of their image search in the not-so-distant future.
To clarify (because I misunderstood the meaning of the comment before clicking the link), the parent is referring to leaking the IP addresses themselves, not 'exposing' access to them.
There seems to be a false assumption here that OSes and hardware scale linearly, such that 16 nginx containers would run as efficiently on one physical server as they would run on 16 separate smaller servers.

Or that 10Gb Ethernet, which you'd want if you were making such a large number of services co-resident, is common among cloud providers. Open VSwitch can barely handle 1GbE with a high TCP session setup/teardown rate as it is.
Google accused of stealing video compression tech
Show HN: Use your cluster of Virtual Machines through HTML5 enabled browser
I tried it on an iPad just to see the difference and I encountered strange scrolling problems.
I'm baffled by that attitude (and CT, as well). So, you found out after the fact that the global adversary injected themselves in the middle of your conversation with a source. What do you do now? Move to an apartment in Russia?

Also the things that break transparently-keyed systems do so repeatedly. That's what transparent keying means: it's mediated by machines, and factored the slow, clumsy, human interactions out. CT? Audit logs? It's like Lucy and Charlie Brown with the football, except Lucy is hooked up to a for() loop.
Pull it from Google cache.

(I hate this category of Blogspot templates...)
I don't know, keeping track of accomplishments in retrospect seems to be rather an additional burden. I'd rather change the app so it helps you to pursue current goals (todos for a goal, notes etc.) and reminds you of goals you have accomplished.
Why should a small merchant get the best rate? Big clients get the best rates because they a) have more clout but also b) have orders more volume
In my opinion, mail crypto needs to become mainstream usable. E.g. even trivial contents should be encrypted by default and this should be usable by default. Currently, S/MIME does a better job than PGP.

While the CA-model seems to be broken in most X.509 use cases, like TLS/SSL, where a duplicate certifcate can be used to do a man-in-the-middle-attack, this does not really affect S/MIME, especially after both parties started a "conversion". People that need to communicate "really" secure, should therefore be able to ignore all "CA-Trust" and white-list certificates on a per user basis (e.g. like PGP).

Ordinary communication still can by default fall-back to the existing CA-model to keep it usable (but not secure).

Some steps:

1. We need more love by the MUA-vendors, who mostly support S/MIME but it's still a PITA to use. Google e.g. still does not support S/MIME on android, see https://code.google.com/p/android/issues/detail?id=34374

2. We need CAs that are usable. StartSSL is nice and free, but it's not easy to use. Lower the entry barrier for getting and renewing/recreation of certificates

3. (most important) Make it easy to manage local CA-trust. On each new system, the user should be able to select a "trust no CA/whitelist only" approach and then be responsible for trusting other parties. No vendor (Microsoft, Apple, Google, Mozilla) should silently distribute and trust new CAs without users consent.
Saturated but most players are unprofitable. Amazon has an infinite well of money to not only out-price the competition but sustain a loss for long enough that the competition might actually die.

Amazon also makes revenue off of attached services to merchants (Fulfillment by Amazon, the webstore, etc). This is part of the reason why Square has been trying to buy up merchant value-add companies.
My favorite part last year was the smaller dinner the night before and the opportunity to meet people outside the talks. You should definitely attend if for no reason other than gracing it with your own presence.
Ah, it starts to make sense now. :-)

I've only used Postgressql's builtin inet type a few times, but it was sufficient for my needs.

I'll have to look for an excuse to play around with this extension.
Amazon Launches Live App Testing
+1 for Thrift.

If you like the REST architecture it works just fine with the message body being Thrift or whatever. I think of the ElasticSearch API which lets you use Thrift or XML or JSON.

The interesting distinction between binary serialization formats is if the schema is separated from the data.

For instance, if both sides of the system know you are encoding a 24 bit color value you can send 3 bytes and that is it; coding and decoding can be very quick and even possibly done on a "zero copy" basis.

If you are using something like JSON you not only have the waste involved with converting "255" to an #FF byte, but you also have to embed the schema in the sense of "here is an array of three integers (which happen to be bytes)" or "here is key 'red' and value R,..."

Thus, JSON is not "schema-free", it is "schema embedded in the data" and this inevitably bulks up the data and slows down encoding and decoding. Yes, general-purpose compression eats some of the storage/network encoding overhead, but you'll get it even tighter if you eliminate that fat before you put it through the compressor.

Now, separating the schema from the data means you need to make both sides aware of it, which is why you need some strategy for handling this in a systematic way rather than hoping things will work out OK without a plan.
Amazon is pretty top tier. Just being able to email jeff@amazon.com about an issue is huge (and I've seen people recount what happens when they get the forwarded "?" email).

Also they will correct any mix up almost immediately and will almost always credit you when you ask (or at least throw in another free month of prime).
Abstraction Barriers (SICP)
The Reason Uber and Lyft Are Accusing Each Other of Sabotage
Don't sweat it, obviously you're still traumatized by the three seashells.
Nice app. Just a question about "Free updates for a year", what's the cost after a year?
It depends on how much space they have. If they are doing it at De Anza College again (and it looks like they are), then they'll have lots of space. But even then, it was pretty packed. I didn't get in until last year, I suspect because of the extra space - and I'm technical.
don't use this quote on your app

https://dl.dropboxusercontent.com/u/10328969/stayhungrystayf...
An Effective Way to Prevent Cyberbullying
In Java you can find implementations of that stuff and will probably use it. If there is anything wrong it is that there are too many different implementations out there.

In the case of Haskell you ~might~ find implementation of that stuff but you'll probably think you're too smart to have to reuse somebody else's code and also be too smart to have to deal with the corner cases.
very interesting read.

definitely makes it seem as though Satoshi was a group of people running many machines.

would be very interested to see more content like this in the future from other early-stars of the BTC world.
Correct, this broadcast provides offline versions of websites and distributes static files.

--We can go up to 50 Mbps, but right now it's 50 kbps; it's just a matter of spending more for bandwidth. The entire Wikipedia HTML download is something like 250 GB. I haven't done the math, but at dial-up speeds, I'm guessing about a week to get the entire encyclopedia. With our own transponder running at 50 Mbps, that we could deliver 500 GB of content per day.

--Yes, Librarian is the software that handles this. What you described is not currently available, but it's on the feature list. https://github.com/Outernet-Project/librarian

--Our thinking right now is that new versions of a set will be updated with additional passes of the carousel, but this is definitely a work in progress.

--Hard drives are cheaper and provide greater disk space (and external USB drives would work just fine), but they are also more expensive than an 8 GB jump drive. But that's really a user-defined component; if they want to save more content, they add more storage.
For me it doesn't have any interesting feature that would make me use it over Clojurescript. No macros, no functional focus, just the old Java way.
I'll remove it as soon as I can.
Is there a specific reason why the author shouldn't? Like a trademark/copyright issue because of the speech or just because it annoys you?
Get Rid of the URL Pollution
Calling all sad clowns: Robin Williams and depression
The two kinds of stats in PostgreSQL
Being the head of anything in Africa doesn't mean much. Heads of state have recently done such things as signing harsh anti-gay bills into law, and showering to wash off HIV.
Kickstarter closes the 'funding gap' for women
No, you don't use a space: "xit name" (http://ex-vi.sourceforge.net/ex.html)

If ex is not your favorite editor, use EX<ESC><ESC> (at least, that is what I think Wikipedia claims. I'm sure any decent TECO user never exits their editor, browsing the web in a browser macro)

[I also checked ed and edlin. They had two commands for exiting: w writes and exits, q quits]
One of the authors of the site here.

We are very keen to get feedback on the content that web developers want to see with regards to monetization. For example one area that I am keen to see us grow is building components in sites that optimize credit card data entry.
Amazon competes with small stores, too. Sure, they compete more often and usually more directly with larger stores, but looking at my purchase history shows dozens of products that I probably would have bought at smaller stores if not for Amazon.

The concerning thing is that Amazon could use the data from small retailers to increase their competitiveness on products they identify as targets, so I'd say the concern is valid.
I know a lot of PHP projects that do this use IONcube loader and mcrypt. So you get the source but it's encrypted.
That's probably because like most people, you don't really need to have a completely secure communications channel with your wife.

All security decisions boil down to some calculus of risk, impact and cost. The most sensitive conversations that my wife and I typically have remotely aren't ones that justify the cost (both in terms of hassle and $) of carrying a secure device around.

Personally, if I were in a situation where I was remote and my physical safety or livelihood could be compromised from an email, my wife and I would probably suck it up and run around with secured netbooks or something. In my case, I don't see that risk/impact calculation adding up to requiring PGP.
It might not be anyone else's dream job, but I find myself working on things I would anyway be doing for fun (like a specialized bytecode interpreter, audio effect algorithms, various little research projects which happen to improve my Python and Javascript skills...). The only problem is it makes my non-work time feel a bit less interesting by comparison!
Programming language that uses photographs as source code
Part of the aversion is because, to succeed, you will have to hire people. Investors don't invest in companies that don't need to hire people.

So, when you're a solo founder, it gives the vibe that you haven't figured that out yet (you won't even get another founder, even though it takes no cash, you have traction, etc.).

So, to counter that bias, just make it clear in your application that hiring people, finding a co-founder, etc. is VERY high on your priority list at the incubator.

Good luck!
Totally. You get to meet cool people during the break.
Nor do they want us to use CMD-[left arrow] to navigate backwards through our browser history.
Why hot Courtney Stodden is trending today? -
Looks like a neat project, best of luck to you!

This is a nitpick, but it really turns me off from coming back to applications, and I'd want to know about it if I were you: after I registered on dashboard.flynn.io, neither the password remembering functionality built into chrome nor my password manager (LastPass) seems to know how to autofill your login form. I haven't looked into why that would be at all, but it's a real nuisance!
Particle physicists measure the spin contribution of the proton’s antiquark
Why is it not easy to verify a key (fingerprint)? Put it on a business card with the email address or read it over the phone?

Also, DNSSEC isn't much more secure than our current CA system.
One option which you may want to explore is Assembly. I haven't used it myself but I'm interested in potentially launching something on it in the future.

https://assembly.com/discover
I say don't attend. Startup school is good, but the delta over watching the videos is not. In essence, the content is great, but there's nothing that the in-person event offers over the content itself.

I attended Startup School NYC, but would have got the same out of sitting down and watching the videos seriously.
(The key is to actually do a serious viewing session instead of half heartedly watching them over microwaved lunches).
I don't know. I work for an enterprise company and we're coming around to the idea of putting things in the cloud. I actually think the people running cloud hosted software are more of an expert in the software and devops than the people inside your organization in a lot of cases. Plus large enterprises have so much bloat that it can be way more expensive and time consuming to launch something internally. The biggest issue seems to be that these companies are still afraid of who controls their data.
I'm not sure why I missed this thread; it's almost literally made for me ;-)

I'm not a hacker but I'm here today because.... I sell SaaS. I work in aviation, which on the commercial side of the organization is as enthusiast-driven and fly-by-the-seat of the pants hacky as tech companies (but with suits). I'm interested in alternative finance - more as a to get money to people that most need it than out of any delusional desire to get rich off it - and have a degree in economics. I built my first website in 2000 but my side projects exist more in my head than in source control. I like to write, but don't blog, not least because I've a sneaking suspicion the sum total of all the time spent by all the visitors to my blog would be less than the time I spent writing it. Nobody is reading this either :). I even read sometimes read articles on the joy of Clojure or Go or Haskell and try to understand why people get excited about monads. I have a latent* desire to start a startup, and went to a startup meet yesterday to deny being interested in starting a startup
This is a huge improvement on trucking them around the dams when the reservoirs are too low for the fish ladders.
Lookout Lands $150M To Bring Mobile Security Product To Enterprise
New approach to knocking out parasite’s genes identify drug targets
Yeah, even coffee shops shouldn't rush to embrace Amazon. Sure, I still get brewed coffee at my local coffee shop, but I might not buy a bag of coffee while I'm there because I bought a 2 lb bag of beans on Amazon.

Amazon is almost any store's competitor on some level. I'd be hesitant to use a payment system from even a small or indirect competitor.
The San Francisco Rent Explosion: Part II
Pushing the envelope in power electronics
Magazine experience sounds right. You know, the flat design people who railed against skeuomorphism missed the point. Sure, faux-wood textures on your website are a waste of time. But forcing a digital medium to behave like a piece of paper is as skeuomorphic as you can get.
Wonky Show
Those screenshots are strikingly modern compared to the windows screenshots of the era: http://en.wikipedia.org/wiki/Windows_2.1x#mediaviewer/File:W...
That's the plot of the movie Outbreak.
My understanding is that the disease was already wiping out entire families before authorities recognized what was going on and sent in the space aliens. Patient Zero for this outbreak is thought to have died in December of 2013. Local authorities didn't recognize an outbreak of something until mid-March, and it was't until late March that WHO started sending people in. By that time there were already 70 dead.

So it is more like "Year after year, you have some people get sick, some die, some live. One day somebody gets sick and dies fast and painfully. A few weeks later the rest of their tribe/family is dead or dying. A few weeks after that, the space aliens start coming in, but people continue to die."
Curious, why not integrate with Rubicon, etc in particular?