skysight-inc/HackerNews huggingface dataset:
The security improvements due to Elephant certainly are not proveable (what in crypto truly is?). I argue that there is meaningful security added by Elephant, clunky though it certainly is - because it does make block modification attacks (which could be used to thwart "Secure Boot") and in that 'poor man's authentication' is better than no man's authentication. Here the perfect very well may be the enemy of the good. Of course I would be happier with something even better.

> Popping up a level further on the stack: I'm rebutting the claim that NSA coerced MSFT into removing Elephant. It was a marginal implementation of a marginal countermeasure that wasn't relevant to NSA.

Not sure whether this is strong enough evidence to be considered a rebuttal. I do not know and will not claim that it was the NSA (or other) coercing MSFT.

> Popping up a level further on the stack: I do not believe that NSA has within the last decade coerced Microsoft into doing anything cryptographic.

Not the NSA key? Not the removal of end-to-end crypto from Skype and then onboarding of Skype to PRISM? Not the SEA hacking of FBI request documents? Not bitlocker keys automatically uploaded to OneDrive, and OneDrive onboarded to PRISM? Not TPM 2.0 support - not Germany's leak of TPM backdoors - not China's following ban of TPM 2.0 and Windows 8.1 - not Microsoft's then downport of TPM 2.0 support to Windows 8?Not the cloud key escrow patent?

"Once a request comes in from a third party (e.g. a user, a business, a legal entity or governmental entity, etc.) to access user's data, the data storage system may send..."

https://www.google.com/patents/US20120321086

"MS, working with the FBI, developed a surveillance capability to deal with the new SSL... went live Dec 2012" - Snowden docs

http://hbpub.vo.llnwd.net/o16/video/olmk/holt/greenwald/NoPl... (30)

You probably think Microsoft did these things without NSA/TLA coercion.
CS isn't going to stumble onto AI, someone's going to have to theorize about it first. Much like CS doesn't "stumble" onto new equations for modeling physics, CS isn't going to accidentally build an AI.

A generalist AI must be immensely difficult to create, but won't the most difficult part be the design? I don't think it'll be CS researchers coming up with the design, either -- it'll be doctors, biologists, neurologists, etc.
>By the rules of your game, a driven executive who makes hundreds of millions of dollars but can't find real satisfaction is more "objectively winning" than a guy who's straddling the poverty line but has everything he needs and is very happy with his life.

I'd say that by any standards the executive is winning. He's improving, growing, and becoming a stronger and better person, able to command more and more resources. The happy bum is still a bum. You can take drugs if you want to be happy. They'll keep you happy right up until you overdose.

But people never want to take drugs. They want to be happy for real reasons. They want to have actual power, not the impression of it.
Some screenshots on how it works would be swell
That's such a neat little tool. Thanks for the inspiration to build something similar for Basecamp at our next internal hackathon!
It doesn't say what the input to the device for programming keys is. Is it the VIN# ? Is there some magic to pairing a key with a car that can be done from outside with the ignition off? There's really nothing here to indicate what one can or can not do to prevent it.
Whitney Sales’s Method on Startup Sales Strategy
Of course it's not that simple. First of all, the waiver form you linked to is applicable to USCIS, which is part of the Department of Homeland Security. Passports are issued by the State Department. As far as I can determine, they waive the application fee for US government employees who travel only on official business, but there's no waiver for economic hardship.

Second, you can't just wave your hands and say "those who truly don't have the means ought to get help from the rest of us" as if saying it makes it so. If you suggest a policy change that will disenfranchise the poor unless some other public assistance program is established, you are de facto suggesting disenfranchisement.

Creating an explicit financial disincentive to vote is not quite as bad as making it impossible to vote at all, but it's close.
Git Deployments with GitGo
That's exactly my concern. I'm currently considering between waffle.io and huboard - and in general it seems to me safer that they use github's API, compared to Zenhub, which (is this the right expression?) 'monkey-patches' the front-end.

Being only usable in Chrome is also a disadvantage of zenhub in my opinion.
Hm, what error were you seeing?

Assuming it was a 404: the setup is a bit weird since I changed the slug early on and added a Cloudflare-level rewrite to keep the old one working, but the Cloudflare rule was doing an exact string match. So if you went to something like "https://blog.gregbrockman.com/define-cto?", it would 404, while "https://blog.gregbrockman.com/define-cto" worked fine.

Just updated the rule to have a wildcard at the end, so feel free to append query strings galore :).
I think most of the plans include free tethering now, so I am not too worried about that. I was disappointed to see them redirect to lookup.t-mobile.com though. That is one vote in favor of the people that google everything instead of just typing in a domain name.
As a non-citizen who would like to vote but can't do so legally for now (and has not done so illegally), I think the left's complaints about voter ID are an incredible waste of political capital. It's possible to function in the USA without any kind of US ID but it's a real pain in the ass, since you're liable to be asked for ID in so many different contexts; I still get asked for ID to buy beer even though I'm in my 40s (more than double the age requirement!), because many supermarket chains and bars don't want to risk any kind of liability.

Democrats argue that people who are poor, elderly, or disenfranchised are the least likely to have ID, which is true enough - for someone who doesn't have current ID renewing it can be a major inconvenience. But if they spent half the effort they put into complaining about voter ID requirements into actually assisting people to get ID, then the problem would go away.

I generally lean towards the Democrats but on this issue I consider them to be massively hypocritical and self-serving. So are the Republicans, after their own fashion, but at least they have a clear guiding principle (although as the article points out, it's mainly honored in the breach).
Show HN: I made a porn site with node
Specifically, a complicated concept getting simplified to a simpler concept that is easier to spread around culturally. Complicated treatises on when tables are and are not valid are much harder to spread around than "Tables are EVIL!", so the latter has a significant memetic propagation advantage.

The fact that nobody has popped up so far suggests that I may be wrong about an existing term. I'd really have expected a LessWronger or something to speak up by now.
According to what I've read about WebRTC 1.1 (which, admittedly, isn't as much as I'd like), it sounds like it's backwards-compatible with 1.0. What was said at Google I/O (as quoted by CNET) seems to imply as much ( from http://www.cnet.com/news/reconciliation-draws-closer-for-sky... ):

> "Is this going to be a schism between the two churches of WebRTC?" he asked. "I wanted to head that off. ORTC will be integrated into WebRTC 1.1. Your existing code is going to keep on working...It's the best of both worlds."
I share your skepticism, but there's one thing you might be overlooking.

Canals can act as a buffer in case of heavy rainfall. This requires the canals not to be connected to open water. In anticipation of heavy rainfall you would pump water out of the canals, into open water (sea). The canals can then act as a temporary buffer for excess rainwater. True, this wouldn't help against dike-breaks.

Related to this: in Holland there are many farmlands in the proximity of rivers that are designated as buffers like these. When necessary, they let these farmlands run full of water in a controlled way to prevent downriver cities from flooding.
Don't forget the artficial benefit that big-endian is pervasive in network protocols. Endianness errors aside, this can cut down the number of cycles needed for network devices to process packets.
To be fair, this service only benefits you, and it's most definitely industry standard, and has been for years.

It's in the same vein as, "unlimited in-network calls".

I just feel like folks don't realize the fact that net neutrality has never purely existed, not since peering agreements were first established.
Think of WebRTC 1.1 as a slightly lower-level API with more controls for the same components that exist in WebRTC 1.0. For advanced applications, this additional control is very important. For basic applications, the differences in the APIs aren't as significant. One is not more secure than the other.

The WebRTC 1.0 API can be implemented on top of WebRTC 1.1. The wire-level protocols are the same, and so a WebRTC 1.1 client should be able to connect to a WebRTC 1.0 client (modulo all the normal interop issues that exist regardless of the API version). It's just a matter of which API the JS sees. It may be that by the time IE implements WebRTC 1.1, there will be JS libraries that implement 1.0 on top of 1.1, so that you could continue using the 1.0 API if you want, even in IE.
Lots of Bitcasa users annoyed at new changes
I can't speak with certainty about Texas. But the normal process would be that if you had a non-citizen driver's license and lacked a SSN (or the SSN was for a non-citizen), it would not be acceptable for voter registration. (This could certainly be verified after the fact, as well, if the state wished).

The list of "appropriate documents" are in-person (Voter ID) requirements, which would have required registering with the SSN or driver's license, as you mentioned.
Hackers learn how to sell at a startup
This is part of a larger attack on anonymity online. That piece from Pacific Standard mentioned in the OP certainly was[1].

Before, it was "think of the children" used by politicians to justify various censorship measures[2]. Now, it's "think of women" used by the media to undermine anonymous communication. They cannot profit from it therefore anyone who doesn't post banalities under their real name, so they can be safely adorned with ads, is a troll and an abuser.

[1] http://thelastpsychiatrist.com/2014/05/cyberbll.html

[2] https://en.wikipedia.org/wiki/Think_of_the_children#As_justi...
WebGL textures suffer from the same problem as shaders can be used to extract data. WebGL is hence using CORS as well. Do you say the performance penalty in WebGL is non-existing contrary to canvas?
GamerGate is merely a symptom of a society that allows online harassment (or at least doesn't sufficiently persecute it), and it's currently a very visible example.

Of course there are assholes in the movement, there are in any side of any movement. The problem is that they've got access to weapons which are largely unregulated.
Ask HN: On premise applications, what do you include in your support contracts?
I'm trying to determine what common practices for support are with applications that are hosted in a client's data center.

Without getting too far into specifics, let's say that you sell a web application based on the Microsoft stack, so you've got Windows Server 2012, .NET 4, IIS 8 and SQL Server 2012 (this should apply equally to other stacks). Your clients provide you with the necessary VMs and you install and configure your application to meet their business requirements. You charge an initial fee for the license and an annual support fee to deal with updates and support requests.

For some period of time, your application operates smoothly - but Windows updates get applied or an update for SQL Server comes out, which may require updates to your application, but may just be prudent to install due to performance or stability improvements. Now you've entered a grey area where you could be charging an additional system management fee or you could push this work back to your clients.

Can anyone describe their approach to this situation? What has worked for you or what has backfired?

Many thanks!
When I hit the pricing button on Chrome, it doesn't take me anywhere.
In 1968, Mr. Hoover authorized the F.B.I. to wiretap a
left-wing journalist who wrote critical stories about
Nazis in America, internal records show.

I'll refrain from adding snark about "pragmatism" here. Part of this was fighting Russians and communism, sure, good warhawk parent, but let's not forget that the politicization and polarization of the times squeezed out a whole of left-ist causes and that the government did not play in any way fair against those who might be guilty of political dissent nor those who might report positively on political non-conformists.

On one hand, there's the act of not immediately burning potential useful allies for their (abominable racial) politics. On the other hand, there's the actions taken against political dissenters to protect those allies, actions that seem like one of those classic stacking the deck moves that gives notice to all good men that the Tree of Liberty might be looking a little thirsty.
I hardly think you're comparing anything meaningful. The hypothetical PaaS has a certain level of reliability regardless of the client your user choses to use to connect but your user's client doesn't support the server's feature set.

Anyways, I have no respect for anyone using <=IE9. I currently have to support IE8 (and 9 but that's not a big deal) because we deal with Australia and we deal with banks. At this point it's ludicrous that they haven't caught up. IE8 doesn't have the ActiveX lockin that IE6 had and current IE is immeasurably better in all conceivable ways from what's come before.
No, later in the article they recommend using it, saying that it decreases floating-point errors.
This sucks! I think this a move by Microsoft to render a Skype implementation incompatible on Chrome and Chromebooks.

NO browser supports this and Microsoft has openly ignored the more widely implemented WebRTC.
TaskRabbit Is Hiring a DevOps/Platform Engineer
How to Use Node-Red with Logentries for Cloud Based Logging
As far as I understand, there isn't anything anyone can do to prevent it.
Probably a reference to this:

https://www.fiverr.com/alastingwill/max-out-your-free-bitcas...

The practice of gaming the rewards system for free storage
Same thing. Voting, jury-duty, etc. The road to the centralization of government data is long (especially since it goes against the interests of fraudsters).
I could say that the article is written by the average European wannabe-socialist "intellectual". I convince myself of it when I read "luxury buses". This is the typical hate argument of any wannabe socialist.
Threatening reprecussion also doesn't stop prejudice, discrimination, or harassment - it just makes it happen behind closed doors or within closed minds. It's the cultural shift of ethics and values that changes things. That's something people have to learn for themselves though, through the experience of changing, and the only person that can judge whether that change results in positives, benefits or gains, (or just something outside of what they currently experience) for the individual is the individual themselves.
Or maybe, according to other comments, this is not so bad.
I'm all for career safety, but I agree that sometimes it's "now or never".

When you are in full-time employment, Stockholm Syndrome sets in very fast, and alternatives start to appear less appealing as your mind and body adjust themselves to your current position and lifestyle. I am experiencing this and it is insidious. I think if I stay too long I will be stuck forever. People underestimate the impact their environment and schedule have on their thinking.

Change the environment to change the person. If you're stuck somewhere you don't want to be but you aren't sure where to go, just go anywhere else, and as your cognitive patterns alter, you may find a place for yourself.
Hit-and-run management too.
Slightly off topic.
I have yet to be convinced that non-native applications is the way of the future?
It seems like the current trend is to make everything run in the browser these days. I don't really have an argument against it but I just can't quite buy into it yet.
The point of using lightroom is Cataloging and RAW photo development. I can't see what's useful since the hyperbole mentions Lightroom. It's a program to develop RAW's (Even the name of the application is a pun on that)
http://www.aaronsw.com/2002/continuity ?

https://twitter.com/sbp/status/523045128387457024
> Wrong or right using these resources was certainly in their best interest.

Quoting from the article:

But many Nazi spies proved inept or worse, declassified
security reviews show. Some were deemed habitual liars,
confidence men or embezzlers, and a few even turned out to
be Soviet double agents, the records show.
"But the case has also generated concerns among some within the U.S. intelligence community that top Justice Department officials — stung by criticism that they have been overzealous in pursuing leak cases — may now be more reluctant to bring criminal charges involving unauthorized disclosures to the news media, the sources said. One source, who asked not to be identified because of the sensitivity of the matter, said there was concern 'there is no longer an appetite at Justice for these cases.'"

Aren't these comments themselves probably unauthorized disclosures to the news media?
I would agree increasing the scorn is likely to have the opposite effect. It would seem these type of people feed off such things. Increasing the level of response, even if it is negative, will only further one of the goals of the harassers; getting the attention of people while they commit the harassment. Anonymous-based movements on the Internet are just the feeding trough for these type of people, regardless of the alleged motives of the movement.
I think Buffer is creating a third way for startups in general. Everything i've seen and heard these guys do since launch has been unorthodox. They're outliers and I mean that as a big compliment!
I don't care about GamerGate, what I care about is that every single media outlet is spamming this topic and it would die a lot faster if they ignored it. I can go to any other website for social commentary, do we want Hacker News to be a battleground for social justice or do we want it to be a place where we can actually discuss something interesting.

Almost every other discussion website had the good sense to ban this topic because it only leads to flame wars and name calling.
How come it is only being considered a serious problem now? When it was just men getting harassed, wasn't it serious then too?
This sounds like a rather uninformed view on how Nazi Germany operated.

> DAF membership was theoretically voluntary, but any workers in any area of German commerce or industry would have found it hard to get a job without being a member

http://en.wikipedia.org/wiki/German_Labour_Front

You could not work unless you joined the Nazi party.
You can get a state issued photo id that is not a driver's license. It just happens that nearly everyone has a driver's license, which is also government issued, so its convient to combine the two cards. Though state issued ids prove different things. For instance, states conforming to the REAL ID laws it says that you are a legal resident. For other states it just means that the state issued you an id card.
Russian Brain Drain Saps Talent as Sanctions Hit Financing
Of course on reflection you're always glad you did; you found something else quickly. If you instead went a couple months without anything, you'd feel differently. That speaks more about the history of the market for devs, not about the wisdom in quitting abruptly.

A flexible and skilled worker? You mean a dev in a tech hub, or at least one who is willing to move. Once you start looking at people who aren't developers, who don't live in an area filled to the brim with jobs for their industry, and who don't want to move, this advice is -terrible-.

In general, even if you're certain you can line up something better quickly...will another couple weeks where you are kill you? As even if you're right, that means you still have a safety net, aren't going to be pressured to take something that isn't right for you, and are going to still be making money, with no gaps in employment history. And if you're wrong, you won't find yourself unemployed.
Just curious, which "weapons" do you think require regulations?
Yes, because "typed programs can't go wrong" is not really a promise, but a desperate wish.
> "By far the most common way of a car being stolen is still from thieves breaking into homes and stealing keys,"

This never even occurred to me as a way of stealing a car. TV & hollywood car thieves always smash the window or jimmy the lock somehow.

I suppose the comparison with cryptographic keys is also accurate: It's usually far easier to steal someone's private key than it is to break the cryptography.
Depends on your definition of "actually good". I've been a T-Mobile customer since they first entered the US, and I've generally been happy, but I was incredibly upset when I saw that they started zero-rating "approved" music services[0] .

I have unlimited data, but as a strong supporter of net neutrality, I take issue with that.

[0]https://www.eff.org/deeplinks/2014/07/net-neutrality-and-glo...
I thought scala was java done right ;)
It's too bad sandboxes aren't very secure. See http://rationalwiki.org/wiki/AI-box_experiment
This link works, thanks!
My first thoughts were along these lines as well. I recently purchased a Jawbone UP instead of a Fitbit because of the Jawbones awesome integration with tons of other apps, including Healthkit (which currently sucks, but someday won't). I much preferred Fitbit's hardware, but the software ecosystem just wasn't there.
I'd prefer a keyless system over the "key with anti-theft chip" alternative. I just had to replace one of these keys for my car and it was over $300 USD. That much for just a KEY that needs to be "programmed." Such a scam by the manufacturer...
There's also the stay-behind paramilitary organization meant to resist a soviet invasion - the one in West Germany employed former nazis: http://en.wikipedia.org/wiki/Operation_Gladio#Germany
In my opinion, CS is going to provide the basic components (neural networks, computer vision, planning engines, knowledge bases) and engineers will put them together in a useful way. I think the reason CS hasn't provided AI yet is because general intelligence (as implemented in the human brain) is not one magic universal algorithm, it's an assembly of many necessary components, some of which are specialized for specific purposes.

The human brain was created ad hoc through evolution, and its complexity is beyond what "pure" CS usually deals with, which is algorithms that can be described in one page or less. Creating a self-aware AI is going to take engineering work, experimentation and incremental improvement, rather than someone inventing an overarching design and going "yes, that's it, that will produce self-awareness".