skysight-inc/HackerNews huggingface dataset:
I doubt the actual CA has been setup either. They're setting up their own root while cross signing from IdenTrust, that's not a one day activity. Auditors have to be present, software has to be designed and tested, etc.
The Internet Response to a Woman Who Called Out a Scientist’s Sexism
Absolutely agreed. I didn't see this one coming - WhatsApp have earned a very poor reputation for security in the past. But this is an unexpectedly very good choice, and a very solid step forward.

As closed-source, I still couldn't recommend WhatsApp above Signal/TextSecure, but this means that the squillions of WhatsApp users out there right now will hopefully get strong protection and probably won't even notice - and that's fantastic.

Makes me wonder if perhaps other clients for the TextSecure protocol are viable, maybe even possibly standardisable (although please let's not start going design-by-committee on it, don't allow any changes that haven't been security-reviewed). A desktop TextSecure client is something I would like to have right now.

Especially curious what happens if you properly plug together TextSecure, a DHT (or two), and a mixnet like Tor. (Are you listening, Project Tox?)
But what if the MMU is backdoored???
I understand there have been studies showing people don't estimate angles as well as linear distances but people go too far out of their way to avoid pie charts when parts within whole data is shown. The 1D mosaic plot is effectively a stacked bar chart but there I suspect there is also some bias given toward the largest component such that the relative proportions of the smaller components are not well discriminated.
Minor nerdrage here - the GPL says NOTHING about sale of source. It strictly is about release of source. You can sell systems with GPL in them for as much cash you desire to do. I've seen it done in extremely profitable situations, actually.
Rust isn't even stable yet, so there are very few companies using it in production. The ones that are tend to be pretty exciting, though. :P
We'll be in a position to deploy defenses like pinning (http://www.ietf.org/id/draft-ietf-websec-key-pinning-21.txt) for site operators who want more protection against the structural problems of the CA system. That will need to be implemented with care, but it should be possible.
I think there's a reason why they use the term enslavement rather than people being slaves. Enslavement implies modern slavery - which is far off from the chains and whips of a by-gone era. However it's still a form of slavery and quite a serious problem globally.
The presence of a language feature is already signalled via the __cplusplus define, so it is already done that way.

I think C++ is very pragmatic in the way it has been done so far, but I am not looking forward to the new __* keywords for resumable functions. I think it's fair to steal the "await" and "yield" keywords back from programmers so my eyes don't bleed. I've already been conditioned to treat __whatever as a platform-specific thing to avoid in my code.
anddddddddddd NSFW
I have some certificates through RapidSSL, and when they send me reminders to renew, the e-mails come with this warning:

"Your certificate is due to expire.

If your certificate expires, your site will no longer be encrypted."

Just blatantly false.
I'm not sure web-of-trust can be considered a novel idea in 2014.

We can all look at the variety of web-of-trust methods to see how well that's taken off amongst internet users.
Boomtown! This is awesome...
What do fake cell towers have to do with baseband firmware?
Kickstarter: Mono – The future of DIY devices
After looking at the IBM info, I've put some thoughts into what this product is about from two perspectives:
#1 technology and #2 comparison to older products (Lotus Notes, MS Outlook, etc)

Perspective #1: the tech. Sometimes a new product is driven by progress in technological gadgetry. In this case, I believe that gadgetry is the "analytics". The new algorithms (NLP natural language processing, semantics engine, etc) has a lot of overlap with the IBM Watson engine that beat humans at Jeopardy. Take this data analysis engine out of the R&D lab (Watson) and and apply it to email inboxes. Also leverage the engine in user queries searching for lost emails (possibly using English sentences instead of boolean logic). Presumably, IBM is enthusiastic enough about this analytics "secret sauce" that they'd rather not just add it to a stale brandname such as "Lotus Notes" which results in easily ignored press releases of "Lotus Notes v12" or "Lotus Notes NextGen". Therefore, you get a new product called "IBM Verse". There are other technologies such as integrating chat/social/cloud more tightly into the main screen but I believe it's the mostly the analytics that IBM thinks is the key differentiator. Others have already integrated mail+chat+social+sharing so in this area, IBM is catching up instead of breaking new ground.

Perspective #2: Comparison to old products -- the older well-known email clients such as Lotus Notes, Micrsoft Outlook were built before the prioritization of mobile devices, cloud infrastructure, and social such as Facebook. Task switching with Lotus Notes + Sametime Chat or MS Outlook + MSN Messenger + Sharepoint is the "old inefficient way". The old products also acted pretty much as "dumb pipes" or "dumb storage containers" of email text. The only "intelligence" in those enteprise email products was filtering for spam. I guess IBM is betting on a new email product that analyzes text in a deeper sense than just "spam keywords" and also gathering statistics on user behavior with clicking certain types of emails, certain senders, etc. The proposition is that it will dramatically reduce the cognitive workload in managing an overloaded inbox.

What's not clear is if IBM Verse requires an IBM datacenter to be in the loop (for cloud sync, sharing, etc), or if it can be deployed as a private cloud solution.
One wonders how much further advanced India would be today if not for the systematic de-industrialization performed by the British.
Honest question. If your business is doing good, why would you want to raise money?
> Erm. I suspect you don't realise that WhatsApp has over half a billion users.

I'm well aware.

Just because something has given up this information doesn't mean they approve of being asked, just that they evaluated that the positives outweigh the negatives. If I put out snail pellets to save my lettuces it doesn't mean I enjoy the death of any animal, it just means that I value the outcome of healthy lettuces more than living mollusks.

> any app that wants to be accepted by the market has to work this way exclusively

I see nothing that suggests this, outside of a successful app despite it. Maybe they'd have more users if they didn't have such an asinine policy. We don't (and probably can't) know for sure.
This is an awesome idea. But I thought the whole idea of a certificate authority is so that we can trust that the CA has vetted the person/site that they have given the certificate to. If all they do is issue certs for free, all we get is encryption, but no identity verification.
It's surprising to me the degree to which Teespring has become part of the affiliate marketing community. The same group of people that normally spend all their time pushing "get rich quick" schemes, MLM programs, dating site ads on social networks and fake news articles about diet pills have really embraced t-shirts for some reason. There's a whole ecosystem of products around Teespring marketing businesses -- landing page builders, ebooks, video courses, mentorship and coaching, case studies, mastermind groups, etc. There's a hundred variations of "How I made $6,123 with Teespring and Facebook ads" posts out there, usually in connection with some other product. I wonder how they made inroads with that community, and whether those marketers ever create trouble for Teespring.
I do not think there are likely to be backdoors: Moxie just wouldn't allow it without walking away and saying something loudly. He is not on the NSA's Christmas list. :)
Porting a Clockwork Brain to Android Dev Log#8 – Fighting Unity Plugins
Thank you. I posted this link because the article (not the title) attracted me to the Harappan culture and I wanted to know if it really was true that they fought no wars. Finding absolutely no war instruments is actually a really big deal. Great to know someone who actually interacts with the place so often.
To grow faster than your current cash flow allows.
sudo time-travel -10s
Aphex Twin Syrobonkers Mystery: what happened to the noyzelab interview?
The thing that’s crazy is that Uber’s service is terrific. They can succeed quite handily in the market without resorting to this sort of bullshit (like that crazy caper where they asked drivers to make phony ride reservations on competing services).

I think Yglesias has the right take — the very qualities necessary to make an legally-grey service successful are going to become antithetical to them succeeding as a normal, law-abiding, “legally white” service. http://www.vox.com/2014/11/18/7240295/uber-privacy
http://www.dlr.de/rb/en/desktopdefault.aspx/tabid-4539/
FB Techwire
It's possible that there's no reason life chose L or D isomers, but choosing one and sticking to it was advantageous (I use the word "choose" loosely here).
This is great news! I'd also like to see a push for technologies like DANE (and necessarily DNSSEC) which address the flawed CA trust model.

While we're at it, let's get a non-profit domain registrar going.
Good thing there aren't any other open source projects called Mono which might cause confusion with this one.
Congratulations to FreeBSD; mad props to WhatsApp's founder.
In all fairness, Paul and Sara have been on an absolute witch hunt, seemingly angry because of Travis' capitalist ideals. I'm not going to defend the guy that made these comments, but I've heard enough from Sara and Paul to know that Pando has waged war on Uber, and should not be surprised that they've ruffled some feathers.

Pando also shares a common investor with Lyft, so there's that...
There's a difference between

"User X browses Wikipedia"

and

"User X browses Wikipedia articles about topics A, B, C"

where topics A, B, C could be anything user X doesn't want people recording them reading about: for instance, various political articles, articles about mental illness, articles about LGBT issues, etc. Fill in the blanks.
Marketo Is Hiring a Technical Consultant in San Mateo, CA or Atlanta, Georgia
Building a complete Tweet index
Show HN: (my project): free online document signing tool
Cached content in case it doesn't load: http://webcache.googleusercontent.com/search?q=cache:MjsZEYT...
Designing Logic Tiles, a Fun Tiles Game for a Clockwork Brain
Midcontinent bringing gigabit Internet access to North Dakota
The imperfect analogy I've used is the comparison between paints and pencils. They perform similar general functions (placing something on a media) and even use a similar set of tools (a long stick held in the hand). But the end result and even the goal could be totally different (I may want to hang a painting on a wall in a frame and I may want my pencil drawings to be reproduced a book).

It's not perfect, but it helps non-users (i.e. managers) understand that one tool does not fit all.
I'm not sure if Wikipedia is OK with that, considering the load it generates [1]. I am currently doing some research on Wikipedia, and for my purposes I use the official dumps site at https://dumps.wikimedia.org/

[1] http://en.wikipedia.org/robots.txt
The most recent Pulitzer Prize winner for journalism (Glenn Greenwald) says journalism is an "adversarial" process. However, adversarial is by nature a two way street. Journalists who go digging into the lives of people and businesses need to be prepared for adversarial response.

If I'm a business owner that's being investigated by a journalist, I want to find out the who, what, where, when and why.

I am entitled to investigate the people who are investigating me.

journalism startups are businesses. they make money by investigating businesses like uber. Uber is entitled to investigate in return
Lacy says Uber make her feel unsafe. Using the same deeply flawed logic, doesn't that feel like shifting the blame around a sex crime in a way that really minimizes who is responsible for such crimes, the perpetrators?
Yes, that is true, but the article does not provide much technical meat other than that list.
i really am a fan of what moxie et al are doing with textsecure. i am less of a fan of redphone, but that's another matter (zrtp, woof).

while i trust textsecure, it is hard to trust any mobile OS and mobile hardware.
Those are certainly some interesting endpoints to have chosen.
Upgrading the Docker Ship, New Features on the Horizon
Big Data Ethics: How Does It Affect Your Privacy?
> Since capital is free to move between countries nowadays, Ricardian comparative advantage doesn't apply

Ricardian comparative advantage always applies when ignoring transaction costs; reducing transaction costs for any given set of transactions (e.g., by eliminating formal restrictions on capital movement) increases (rather than reduces) the likelihood that Ricardian comparative advantage applies.

(If you want an extreme case in which Ricardian comparative advantage to fails to apply, you need to assume extreme transaction costs -- one of the canonical hypothetical examples where this is argued to the case is an interstellar civilization without FTL travel.)
how long ago was that?
It's true that this shouldn't be done in a day, but it's trivial compared to building a command line tool that automatically configures HTTP servers and designing an open protocol that issues and renews certificates. This is especially true if one of your partners is a CA.

---

Let me be clear here: I'm not complaining that I don't get my free cake now. I do think however that most people at the EFF and Mozilla would agree that we needed something like this a couple of years ago. In that context I think it's a least noteworthy that they decided to wait until other parts of the system are ready.
Introducing Spotify Connect
Based on my experience, most of the work related to reading the MRI or X-ray images is mostly outsourced to developing nations to improve availability (24/7) and to minimize costs.
good luck detecting baseband attacks in the wild. i hope you've got a transceiver with you and a rainbow table for cracking the A5/1 etc on your cell link.
The simple solution to this is to request a password reset from that service and disable their account.
Google Starts Integrating Google Now with Google News
It's not gendered. A reporter discussed supposed sexism and misogyny at a company. The man is frustrated because it's probably untrue, but we don't have a clear picture because the press has been sensationalizing anything anti-Uber for a while now, and no credible evidence is ever presented.

That doesn't make his response or anything about it gendered. It doesn't matter who slanders, it's frustrating when it happens, and joking about digging up dirt to do the exact same thing back to a journalist so they know what it feels like is tantamount to wishing an abusive person would some day get to know what being on the receiving end of that feels like.

Also, you should really check your sources about harassment on the internet. Prominent men are harassed more often and more violently than prominent women. It's a recently constructed myth that's been hyped up by the media over the past few months that the internet is an especially hostile place for women.
Even the author of the story said it was hypothetical. Multiple times.
A laymans guide to the “Big Data” ecosystem
It's true and it's an interesting problem, maybe in the future a package identity will only be partially dependent on some inputs, the other inputs being second class variables that don't affect the build the same way. Kinda like the difference between parameters and variables in math. Fa(x) is still F even if a = 1 or 2 ,....
"In Nix/Guix, you have to specify the exact dependencies, nothing is implicit."

Do you do psuedo packages, like the Debian model of the build-essential package which pulls in a standard cloud of normal stuff, no need to list libc6-dev by name because that's a dependency of build-essential, but if you want libpcap-dev you need to pull it in specifically by name because its not in build-essential?
If you don't already have one, get this. Way cheaper than oculus and it works (I have one at home). Search SBS video, upload to your phone and prepare to have your mind blown.
HTTPS does encrypt both request and response.

However, you can figure out what pages on a large public site like Wikipedia people are reading over HTTPS, based on statistical traffic analysis, because you can see the size of the request, page, and each of the images. Combined with link following analysis, you can make a fairly accurate guess as to what people are reading.
Ah, so there aren't plans to add this CA into web browsers. That makes more sense.
You should qualify 'inability'. I would have thought that 'inability to change employers'. applies to millions of people particularly older ones where if they are sacked the chance of getting another job may be non-existent.
Project Creator here. Happy to answer anyones questions on this project. I will be around for the next couple of hours.
>You're getting caught up in implementation details.

But if a package manager is anything, it's an implementation. It's not a theoretical concept, it's a tool that a user has to smooth the process of their work. Both could just install and configure packages by hand but it's the implementation that makes a package manager useful (for one being able to run multiple versions and for another being explicitly discouraged from multiple versions). Dismissing implementation details in a tool that is designed for implementation is missing the point.
Imho types should make the programmer live easier, not more difficult.
Looking at the first code, and at the second peace of code. Imho the second piece of code is easier to read, but it does lack validation logic & testing.

First of all, from a type-theory point of view, both Email and WebForm have the same type. (same signature).

Also from a theoretical point of view, i think a type should not have an instance if its not valid and "EmailAddress" of value "aasda" should not exists. However it is allowed in his types.

Also, I don't see how defining lots of very specific types such as FromAddress and ToAddress are really making live easier.

Something like this does the job, and is typesafe (in golang):

type EmailAddress string

type Email struct {
to EmailAddress
from EmailAddress
subject string
body string
}

func sendEmail(webForm string) err = {
email, err := validateEmailForm(form) # performs validation
if err {
return err
}
err := email_service.sendEmail(email)
if err {
return err
}
}

Tests will simply use the returnValue of sendMail to validate its inner working.
Judge threatens contempt for declining to reveal cellphone tracking methods
> non-profit domain registrar

domain squatters are already an issue. imaging if you could register domains for free. I think having to pay $10 for a year is pretty fair. That's one reason I don't mind paying ~$70 for .io domain. it keeps most squatters away.
Load management is a big problem that we're looking to fix in the future. Wikipedia's API definitely struggles when rendering old revisions of medium-to-large pages, but we try our best to respect their own API etiquette guidelines: http://www.mediawiki.org/wiki/API:Etiquette.

In the future, we'd love to combine a mix of the Wikipedia API for real-time edit updates with a copy of the Wikipedia history database stored locally (all 2+ TB of it) to improve performance and decrease load on their servers.
It's possible to build a more complete picture of someone's interests based on what they share privately via Facebook chat.

It's also public knowledge that they've been parsing messages for links to then 'like' the appropriate pages inside Facebook.

Rather than debate about how much profit there could be in it, which is entirely down to what the user talks about, I think it is important to realise the potential here even if it not fully realised at this point it time.

Also remember that they are keeping chat history indefinitely in HBase clusters (because they are 'sentimental') so as your habits and interests change over time this will become invaluable data to marketers who want to understand consumer behaviour.

I think it's great that WhatsApp are implementing end-to-end encryption but their now immediate connection with Facebook doesn't sit well with me. Perhaps I'm an idiot, but it doesn't take long to realise that there are perhaps competing interests at play here.
True, but on many small networks, you aren't addressing the embedded device by a FQDN.

All these appliances should let you change the cert on them, but you still need that initial connection, and at smaller organizations (or households) the certs will never ever be changed.

I used to work on embedded security projects so I care about this; I also realize that's a small portion of the market. I'm okay with making the people connecting to their new printer jump through a hoop in order to reduce the chances of someone hijacking www.paypal.comm but you still have to allow some way in.
I DONT LIKE
There's nothing in this article alleging that. There is someone in the comments here who has been vehemently anti-Uber on other social media who makes the claim, though.

Let's get facts before we throw around slanderous accusations. Or even apply some basic reasoning.
Well this is to be expected if they can force a hosting company to report when servers connect to public tor nodes for a considerable amount of traffic.
How to Find Your Target Customers on Facebook
Chrome 39 launches with 64-bit version for Mac OS X and new developer features
oh, you mean like VT-d etc on intel cpus.

what reason could you possibly have to suspect that the IOMMUs from a company named "intel" are backdoored? :)
How to Build Active Twitter Followers
Google pays for that. What happens if Bing or DuckDuckGo write an even bigger check? What happens if Firefox gets stagnant and users switch to IE?
Haskell isn't the best at everything, but it is practical and that's my point.

Asserting that something is practical based on...well...practical experience is not ideology. It's damn near the opposite.
So basically Spotify is now letting you remote control its application?
Getting Started Blogging on Tech.pro
I don't want to sit in the front seat and I hate those stupid mustaches.
Browser adoption never happened – it's unfortunate but that's a critical barrier to entry for almost anything
It was low-effort and off-topic, and you need higher standards.
Engineer on finagle, used to work at tumblr when we started running into problems with finagle. In large part it was because we didn't understand how it worked, and were doing things like reinventing different pieces of finagle, like load balancing and service discovery.

I think saying colossus is "significantly better performing" is a bit of a stretch, although I haven't seen it in the past year, I think the main win was that you called epoll faster than netty, which I think was because you were using a faster timer. What are the performance comparisons you've done recently?
Good point. Having a separate FromAddress and ToAddress was probably overkill. You're right about the WebForm and Email having the same type. The form submission could probably just produce an Email directly.

I don't know much about go. What is "err"?
Ask HN: Getting into sales in startup world
I've got a friend who is working as a Technical sales person in a company in UAE. The company is primarily a hardware based on that sells Hardware products to SMBs, as a sub contractor from original manufacturers.

He is two years into the sales field, but he really want to get into the software selling business, for that where should he start and how to work his way into the startup field with his sales expertise?