skysight-inc/HackerNews huggingface dataset:
Ah, key management, the bane of any asymmetric crypto system!

My draft specified TOFU; if a site was previously signed and no signature is attached, don't allow any JS. If the signature doesn't match the key cached in the browser, go full noscript.
In theory, the value of Cumulus is (1) support and (2) their proprietary switchd. (Edit: I also second the other comments that Cumulus licensing appears to be really cheap. But if you're looking for "CentSwitch" you're out of luck.)

Also, how exactly is Cumulus separating the control plane and data plane?

They're not. Cumulus is kind of anti-SDN.
I wrote the multiplayer code for Descent 2 and Descent 3 (as well as the graphics engine for D3). Although I can't remember all the details because D2 was back in 1995(!), D2 had a significantly overhauled network layer from D1. Some examples: Short packets, where position and orientation data was quantized down into single bytes instead of floats, lower packets per second (you could go down to 5 PPS if I recall correctly). We were also the first game where if the 'master' dropped out the game another player would become the master in a hand-off scheme that was a bit complex. The master controlled things like notifying other players of new players, end of level stuff, etc. We had to sweat every byte because we were trying to have 8 players with low lag over a typical 28.8 baud modem.

D3 changed the overall feel of the Descent series, mostly because we introduced a terrain engine and that had a cascading effect on the rest of the game. The speed of the ship, for example, had to be significantly increased because if we used the ship speed from D1/D2 then going out into the terrain felt like you were stuck in molasses.

Working on those games was incredibly fun. Ah, to be 25 again.
Until one day you see a hilarious Reddit post that makes you spit out your coffee and your keyboard stops working. Then you plug in a new one and have no way of making it work.
I think the problem here is you think it should be a language function and I think it should be an extensible external implementation. The problem is the blacksmith, not the tool. LOLPHP stuff is consistent in how it happens. It doesn't magically change. So, if you know it happens, you adjust and adapt. Its not wonderful but adding more magic is the opposite of the solution.

The solution is to get rid of all the magic language features that don't work quite right and clean up the ones that do.

> Meh, library problems. PDO shouldn't be baked into the language, but neither should anything else.

That is kind of my point. All of this should be separate implementations.

> tl;dr Stop allowing everything to be concatenated with everything else, and just because PHP tried bad solutions to a problem doesn't mean that problem is unsolvable.

Provide evidence of a truly secure language with all potential contexts baked in.

> Not really. Making everyone access GET/POST vars in the same way is a bad idea. Better to provide getter functions like "get_param_unsafe" and "post_param_unsafe" for this, then provide a bunch of common alternatives which provide escaping like "get_param_html", "post_param_quoted", etc.

Quoting strings is not security. People will use that "post_param_quoted" just like magic quotes and everything else and fuck it up.

> Yes you can: you can make it impossible/very difficult to do it incorrectly. Again, stop allowing everything to be concatenated with everything else and this issue will be magically resolved.

Concatenating quoted strings to each other is an unsafe operation.

So, no, you can't.

> If only PHP were capable of providing some kind of "interface", which other code could "implement"...

It does. There are security libraries you can use. Its not a language feature. PHP has repeatedly failed at attempting to add security-as-a-language-feature because its complicated, difficult, and most people won't understand it anyway.
If you are a single founder with an existing up and running product/project, you can try applying to join solo.im.
So many typos in the open PRs right now.
Seemingly some providers banned the whole domain because a suicide themed page was uploaded there. I can access github.com freely at Moscow though atm.
Interesting. After reading this Gamasutra article[1] on how online multiplayer can literally add years to your development time, I got a little scared. Will UE4 allow developers to avoid this setback?

(On the other hand, developers like Carmack and Michał Marcinkowski only took a matter of months to add it to their games, and they were among the first. So maybe it's not as big of a deal as it seems.)

[1]: http://www.gamasutra.com/view/feature/217434/the_ups_and_dow...
That's the definition of a worm.
I find it plausible that the NSA, DHS may have assisted. During the same time of the rise of Silkroad we have the NSA in full cowboy mode. A reading of the xkeyscorerules100.txt[1] leak shows this, among other things. Looking to Tor as a potential tool for terrorism, if not now than in the future, they would turn to Silkroad as the only interesting target for them to train their teeth on. I just know that if I were in the shoes of a NSA "hacker" dealing with Tor I wouldn't be satisfied with playing war games against internal teams. Hackers are addicts that get their kick best when its public. I would certainly have argued for "better cooperation" with the FBI and DHS for that reason alone.

Anything the NSA does is "secret" so the holes in the FBI arguments, in this scenario, would make sense. An interesting result in this case would be if at any point evidence is not permitted for publication. I wonder if the defence could construct a canary for this possible circumstance.

1: http://daserste.ndr.de/panorama/xkeyscorerules100.txt
(note how certain civil liberties are dictated by Geo IP location alone -- that is what I mean by "cowboy mode")
How to Be an Entrepreneur, and Stay Married
>can a network save and solve all your problems?

Of course not. Nobody here is suggesting that this would solve all of your problems, just that it would be helpful.
> blog about smoking marijuana in Canada and get arrested

> make a porn video in Canada and get arrested

Could you provide some context to this? Are you saying that someone could be arrested in South Korea for (e.g.) creating a porn video while in Canada? Does this just apply to South Korean citizens[1], or everyone that ends up on South Korean soil?

[1] If so, it's not unprecedented for a country to punish its citizens for doing something that is legal elsewhere, but illegal in-country.
Interesting. For traffic/congestion reasons, Manila, Philippines had (has?) this on a permanent basis, not just for a special event. Your license was coded so that police could easily see if you were allowed to be on the roads that day (otherwise, it was public transit for you).
Anyone who used svn before switching to git!
when entering dimensions the warning box for it being too high or too low will not close. I can't figure out how to do it?

I am using Chrome.

Possibly check for if the cursor is in the box as well as if the value is outside of the range. If the range changes or goes back to 0 and the cursor is not in the text field, have the warning go away?
Obama Speaks on Economy at Northwestern University
For a second I thought this said C# interpreter written in Lua....but yeah..
" . . . a vending machine, a poster, a toy, a bus stop, a rental car, and not have to download an app first in order to use it."

I can, and do, do that now. I don't need or use an app to interact with any of those things, and when I have been offered apps, they've been worse than useless. Seriously, worse than nothing, they've been annoying, harassing, clunky junk.

I just want to be able to approach any of these things and pull up all of the documentation regarding it. On my phone, tablet, laptop, etc. No "advertising tracking" nonsense. How to use it or fix it. If the owner wants to turn this feature off, they should be able to, but it should be on by default. If the owner thinks its a security loophole, he is both mistaken and lacking in security.

This includes stores. Why can I find a shelf stocker in Target and he can use his li'l belt computer to tell me where anything is in the store, down to the shelf, and how many they have, but I can't have access to that information before I enter the store? Big box stores were never so annoying until I got used to Amazon.
A tarball is not a disk image and - in my view - is seriously shaky as evidence in a criminal trial.

I had always imagined - apparently incorrectly - that evidence-gathering requirements in this area would have been more along the lines of imaging the disk bit-for-bit in a controlled, well documented procedure onto another disk which is immediately made read-only in hardware before being placed in the chain of custody. Copies provided in legal proceedings should be verifiably identical.

EDIT: Also not only is it insane that they didn't save the sniffed packets but for a one-shot, unreproducible event like the one the FBI describes they really should have preserved the local environment too. Any number of unknown browser/extension/proxy/system behaviours could have caused that captcha to appear on the screen once. Hell, if they only saw it in the viewport and not, say, the DOM source, it could even be a bug in the system graphics renderer - massively unlikely, yes, but I've seen weirder.
When I bought my last car, they sent what appeared to be a USB flash drive. It had some warranty documents on it, and also emulated a keyboard. I think it popped up a browser went to a webpage and prefilled my VIN and some other details so I could register my car. This was several years ago. How is this different?
John, if you care to get back in touch with Jim Gettys and I, we can update you on where things stand on the whole bufferbloat effort.

FQ on modern cisco routers is generally quite crippled, and even that much is not available elsewhere.

However, on the whole, the fq + aqm situation along the edge of the internet is looking up, with nearly every third party home router firmware incorporating fq_codel (notably openwrt and derivatives), and it being integral to streamboost, and other QoS systems like those in the netgear X4.

Some examples of the kind of results we get now from these new algos:

http://snapon.lab.bufferbloat.net/~cero2/jimreisert/results....

http://burntchrome.blogspot.com/2014/05/fixing-bufferbloat-o...

I really liked the PCM paper (wanted code tho) for clearly identifying the parameter space modern tcps need to operate in. FQ everywhere, or nearly everywhere, would make the tcp's job far easier.

There is an aqm/packet scheduling working group in the ietf in the process of standardization, etc.
This looks fantastic, but I have one request: I do all of my own photo matting, and would love to have a 'power user' interface that would let me simply specify the size of the custom frame that I need.

Right now, it's not obvious to me how I can simply say: "I need a frame that has a 18x18" opening," or whatever.

Let me do this and I will happily spend $200 on your website today, and will probably keep doing that every month or two in perpetuity.
We believe a service like Livyy could still be of value to the type of people you speak of. :)

Can't thank you enough for that interview. Really great insight.
A common social engineering trick is to drop some USB sticks that have keyloggers, etc. loaded on them in the employee parking area of the target firm. Sooner rather than later, someone will plug one into a corporate machine...
What's a large democratic power

India is indisputably a democratic country, not withstanding its developing status or struggles with corruption; they just ran what is probably the largest general election in history a few months back, followed by a smooth transfer of power.

It's also large, because it has a population of 1.25 billion people, close to China's 1.36 billion people. And it's a power because it has nuclear weapons, although it is unfortunately not a signatory to the nuclear non-proliferation treaty.

Forgive my ignorance. I probably should have taught myself these things long ago rather than invested all of my time in programming and other pursuits.

Don't be obtuse. Not everything is code for something else. If you think the US's motives here are really empire expansion then fair enough - I don't really agree but I can certainly see why you might think so. But asking what 'large democratic power' means, without bothering to consider the possibility of it being a simple literal description, seems disingenuous.
but is it faster than VALE/netgraph?
Cisco already has virtual switches. My company just bought a Cisco v1000 virtual switch. You can run your entire company from just one physical piece of hardware with Hyper-V and a Cisco V switch installed.
This has great potential. I plugged in some random numbers and the basic offering seemed to cost around $100, though, which is still significantly more than the cost of a cheap poster. Can you talk a little about the price breakdown here? Or perhaps that would reveal the secret sauce?
The Impact of PayPal and EBay Splitting into 2 Companies
Probably not an exact match, but until Twitter shows a profit, it would fall into this category. It has millions of users but tiny amounts of revenue, yet did a big IPO and is valued at an incredibly-hard-to-justify share price.

I mean, there are insurance and retail stocks that have billions in revenue, showing serious profit each quarter and their share price is half of Twitter's. But, to be fair, Twitter didn't 'growth hack', they did build something people wanted to use. But their exit (as of now) would have to be considered 'gaming the system'.
A century ago the German system basically had no grading until you had a set of oral examinations for your diploma at the end. Or so I was told by my German family.

When did that get changed?
Agree, SF/Bay Area is somewhat an exception. That's why I mention "North American" generally. To further differentiate - "Seattle" level could be fine, while "midwest" not so much ;)
Yes, there was a warrant, but that warrant must be obtained based on legally obtained information, or else the warrant is invalid as is all information gathered through the execution of that warrant.

Here's an example:
Suppose you have drugs in your house, and no one knows that but you. The police may suspect that that's the case, but they need some kind of information that provides probable cause in order to obtain a warrant to search your house.

There are two general categories of ways they could then obtain a warrant: either 1.) they happen to see you carrying drugs or someone else does and reports it or 2.) they break into your house, find drugs, and then request a warrant after the fact to do so.

Now typically option 2 isn't so blatant. More likely is that they break in, find drugs, and then make up some other way that they determined you had drugs. This made up story is called "parallel construction", and it's generally a way to lie and cover up the act of illegally obtained evidence.

If the FBI found the Silk Road IP through an example of scenario 1, then everything's legal. But the FBI's story provides fairly strong indication that scenario 2 is far more likely. If that is the case, then the contents of the server are not admissible in court, nor is anything obtained further down the line from that information.

The result: if scenario 2 is indeed what happened, it doesn't really matter the legality of the actions committed by the defendant were under US law as the authorities have no legal knowledge of said activities. Therefore there is no case, and the defendant must be acquitted.
Download DoulCi for iOS 8 bypass iCloud
https://github.com/muromec/blog/blob/d0a4b73064b0d2306a6184b...
>Because it is itself the process of growing. It is an intermediate phase.

I think you missed what I was saying, you are conflating issues as well. I believe you can be tied to your successes and dedicate yourself to something without it consuming your identity.

I am not saying that what you do is not a part of who you are, of course it is. But I believe there is a greater whole being ignored when your identity is limited to what you do at any given time.

Said differently: I simply don't believe you can be something external to yourself. Certainly you can trick yourself into thinking that it is who you are (in whatever "phase" of life you are in), but again, IMO, that is a reductive line of thinking.

As for the Elon Musk example, you are flipping the conversation. You are attributing personality traits to a companies actions. Of course that will happen, a company is made up of people who make decisions. That does not mean the company makes the man.
> Why? The tech world, like any other business place, is a mixture of people with different attitudes and personalities. If you clearly would have a personality clash with someone, why would it be worth hiring them?

Easy, because they have the knowledge and experience you need for the job. If you're a professional you'll find a way to work with anyone. Yes, you'll have personality clashes from time to time but I have yet to work at a place where that didn't happen.
When I needed to change dimensions, I started over. The first step did show 0/8 but the fractions of the inch were present on the second step.

Edit: Now that I've been through the process, I also found that your pricing was $14USD more for the same materials and dimensions than the first site that came up when I searched "online framing" ($46 vs $32). Its not clear from your site how you differentiate on that markup.
Moscone Effect: What Dreamforce and Big Conferences Mean for Airbnb
I wouldn't go that far. Naritai offered a possible motive for this deal which might not be obvious without the context provided by his/her comment (the part about the recent technical collaboration is true, and not just an opinion). That's one of the useful functions of internet comments.
Tesla to Give Us the “D”
Hacker's Guide to Setting Up Your Mac
> I'm not sure if there's actually an angle here, but it would be extremely interesting if the defendants were able to impeach the FBI's evidence to such a degree so as to force an admittance of parallel construction. It's a no brainer that something fishy happened here.

Tbh, I think that is basically their defense if you read between the lines. This defense reads as basically:

"The FBI's explanation isn't technically possible for how they found the IP address therefore this case should be thrown out as they are lying."

The FBI will never admit to parallel construction. They get enough leeway in their testimony, etc. that they can just say "We agree to disagree on what happened" and no one would question them seriously, from a justice system perspective.
Quick bioinformatics on 4 EBOV genomes and data from W.Africa
Signing just prevents you from altering the files so you can cache them just fine.
Extensible Web Resource Loading Manifesto
Here's an interesting problem. The person who committed the text file about suicide has a .ua domain in their GitHub Profile; would this be a specific way to troll Russia if you're Ukrainian? Just start finding important sites and post stuff on there that are legal everywhere but Russia? Not that March 23 is that good of turnaround for Russia to get it blocked when they can unblock it in a couple of hours.
Wouldn't I typically want my Tor Browser to not record any details about sites I have previously visited? Seems like a lot of work for modestly more security.
Terence Tao said a similar thing recently:

The funny thing is anything you prove yourself, you think “oh, that was a lot easier than I thought.” You know, once you actually see it, you realize it wasn’t that hard after all.

https://news.ycombinator.com/item?id=8382124
Two pop-ups on that page (one at the start, one at the end) is way too aggressive. Cut me some slack, will ya? I especially hate the "Subscribe to our mailing list before you've even read content on our page!" load-time pop-up that everyone's featuring nowadays. If there was a browser plugin to wipe them all, I would pay money for it.
>There has never been a meeting I've attended in ~20 years where we didn't have a backup plan if we had no Internet.

In what kind of business? This sounds like totally atypical in any modern enterprise.
"The ISS is incredibly more expensive, complicated, and accomplishes less science because it's "international.""

Accomplishes less compared to what? Skylab? Mir?

The ISS is designed to host up to 7 crew members. For purposes of comparison, Mir could host 3. What makes you suspect 7 astronauts can do less scientific work than 3?
Here is an archived copy (full list): https://archive.today/tLCKI
I don't think they should, what they should do is copy the UI, switch to git as their version control, offer lower prices and better search. Embrace and extinguish.
What's in your impossible list
That was my concern as well. First thing I learned early on was that when you suspect that a server is compromised, or you you just deleted something super critical, is to dd it to an image and then mount it ro for forensics.
Great, I am excited to see how it will play out.
Good luck!
"Finding partners (both teammates and investors) who you can sail both the rough and calm waters with is absolutely essential to the survival of your business."

Can't agree with this statement enough (the teammates part, at least). From personal experience, I can say that the work environment becomes toxic when early team members start losing passion for the product, especially co-founders. People start questioning each other's commitment, work slows down, and bickering ensues.

As another piece of advice, it's really important to look for individuals who are great communicators. People who say it how it is, and share their feelings w/o hesitation. The last thing you want is a co-worker sharing some important piece of information (ex. they haven't been motivated for weeks) out of the blue.
How to Master the Installation of the Windows Agent
Exploiting Candy Crush Saga
Tyler Durden: "You're not your fucking tech stack."

That is such an awesome quote, I want to print a picture of brad pitt from Fight Club and put that as caption.

I think the last time I used MongoDB was when I was fiddling around with Meteor.js

I recall struggling with CRUD queries using MongoDB and pretty much gave up after that.
It's a second implementation of your opinion.
That's a lot of money to DDOS people's phones at bus stops.
I disagree on both counts... I think YC's value gets greater the better you're doing, simply because you're in a better position to take advantage of opportunities. And YC founders are just like anyone else - the more closely connected you are, the more likely you are to help.
Mobile providers have been switching for a while, not least because many of the providers are relatively new and hence have very little IPv4 address space, with a surprising number doing carrier-level NAT because they simply don't have the address space to do anything else.