skysight-inc/HackerNews huggingface dataset:
I don't think the Android ecosystem should be compared to an enterprise Linux ecosystem.

Android is pretty secure on its own, I think with a security/sandboxing design that beats Windows's design for example. It even has SELinux enforced by default now, something even most Linux distros don't have. But every piece of software has bugs, some of which are catastrophic to the security of the device (GoTo Fail, Heartbleed, etc). Therefore updates are critical to the security of the ecosystem of machines.

An enterprise environment can (should?) get updates much more easily than the vast majority of Android phones out there right now. Many of them get no updates and people keep them for 2-4 years. Many others get only one update in that same time, and only a smaller percentage are updated for like 18 months, even though many of those same users keep using them longer.

Android's main security problem is the lack of updates. Windows' main security problem is its bad design - apps/malware can do almost anything once they are installed, and we all know people do stupid things such as installing exe's from email attachments. Heck, Windows even gives you admin privileges by default, and we are still surprised Windows has so much malware built for it? It's like asking for it.
Ah, missed that part. But it is a general concern for businesses, and the pawn shop not mitigating that avenue probably had more to do with the overall situation and not wanting to come off as complete hard asses (making it more likely they'd let the police recover the item out of spite). Plus someone who has already involved the police is less likely to assert themselves and further complicate the situation.
Could this in any way explain why Google Cloud does not support Ubuntu?
So in business parlance, you're saying that it's easier to make money in a 'blue ocean', with little or no competition, than in a 'red ocean', with lots of competition.
I would have found your comment rather more useful had you led with the technical point rather than an attack on the author.
Thanks for writing this. It spoke so much truth I feel like I could have been the one writing this.
Police is still accountable and are doing their job. If anything the extra 'cash' they generated was a 'favor' to the said municipal government.

They are actually doing you a huge favor. No more bullshit tickets at the end of the month.
>Is it perhaps so that there exists a language that is trivial to implement, yet also super powerful and expressive to program in (don't say lisp here, though it does almost satisfy the second constraint imo).

Lisp. Satisfies both constraints.

But seriously, Forth is another interesting language that strikes a good balance between ease of implementation vs ease of use and expressive power. But even more than Lisp, it takes some serious getting used to.
or you could make up your own language, maybe should sort of encrypted speech.
WM cwm, the widget is just my conky setup, here are my dotfiles: https://github.com/r0nk/configs
I'd appreciate a hackathon for making AeroFS sync reliably. I've been using it for years, since when it was invite only, and it often simply refuses to sync. I've spoken with their support a dozen times. They're nice and courteous but the problems don't get solved. I've already given up on AeroFS; it's great for moving files inside a lan quickly but not for much else.
Security is all about raising the bar. If we could get every single machine/device to "only be breached through targeted attacks", I think that would be quite good.
Don't Be Awful: Ideas for a Better Silicon Valley
How did you manage support during the hackathon?

I liked that you mentioned that everyone had to contribute and no one got a "hall pass" to do real work, but I often need to manage our customer requests and it's difficult to say "I can't help you for 1-3 days because we're focusing on team building".

We do one of these quarterly and I'm trying to think how I can avoid being the worst hackweek teammate ever next time around. Maybe it is saying that we'll have limited availability for 1-3 days to some customers.
I think the key is finding a unique niche with only a few competitors in the store. If not, you will get lost among a few hundred similar apps., even if yours is better. Marketing $$ might help overcome, though. I haven't tested trying to push up a bottom dweller.
While a lot of New Yorkers appreciate the reprieve from things like parking tickets, the lack of enforcement has real consequences that will negatively effect quality of life here. For example, without enforcement of the alternate side parking rule, street cleaners won't be able to access many city streets to clean them.
I agree. In the old days there were tons of crap time tracker apps. I suspect that as they didn't make much money and as they had to pay the yearly fee, the dev shut them down. Now there are only about a dozen fairly good apps.
Implementations are available in the repository linked to from the article. Not quite "ready for production", but hopefully a useful starting point. https://github.com/matslina/bfoptimization
You could, but you almost certainly don't want to.. Network filesystems that try to emulate regular filesystem semantics fundamentally suck, not least because you basically can't do any useful caching, and the caching that is done (because it must be done) can introduce very hard to detect bugs (e.g. coherence between a file and its in-memory mapping. If you want to execute a program from the filesystem you need such a mapping).
> it forces the guest to do basically no useful caching of its file system

Of a filesystem was the impression I got. The author implied that you could, in addition, mount any block device provided to you in any way you wanted.

> It can't even boot a standard vmlinuz.

It was mentioned at the end that while it won't run the real-mode code therein, it will attempt extract the elf binary and run that.
AirAsia and its effusive founder give lesson in managing crisis
No, evmar has it right.
It means it is some random googler's code. It means Google has literally nothing to do with it, other than happening to own the code.

(IE it's not an experimental product, it's not a product at all. It's just some guy releasing some code)
It is now. From https://www.pcisecuritystandards.org/documents/PCI_DSS_v3.pd...

PCI Requirement 3.4:

Render PAN unreadable anywhere it is stored (including on portable digital media, backup media, and in logs) by using any of the following approaches:

- One-way hashes based on strong cryptography, (hash must be of the entire PAN)

- Truncation (hashing cannot be used to replace the truncated segment of PAN)

- Index tokens and pads (pads must be securely stored)

- Strong cryptography with associated key-management processes and procedures.

PCI Requirement 3.5

Document and implement procedures to protect keys used to secure stored cardholder data against disclosure and misuse.
Ignoring details like the impossibility of loading the kernel (because the Windows kernel requires to be loaded by its own bootloader, which does a lot of setup), you will not be able to boot from 9P.
Saving searches across devices would require user accounts for persisting of values across browsers/sessions. Initial feedback from peers suggested that they didn't want another system to log into. Given this, phase 1, we decided to persist saved and recent searches via browser local storage. We hope to add abilities for users to login and create their own personal vehicle classified pages and persist their searches across devices in the near future.

Thanks for the feedback!
If you take a glance at Paragraph 1 of the Readme (its the main description for the project), it says, "Its goal is to provide an alternate, high-performance Linux hypervisor for cloud workloads." So you can probably answer your own question about the intentions of this project.
I wonder if it's an experienced editor vs. newbie thing.

Everything I try to do is immediately reverted and sixteen rules are cited. Extremely frustrating, and it happens to many others in the community I'm in (Driving around the world) to the point I setup our own wiki so we don't have to deal with the BS bureaucracy of Wikipedia.
As I understand SmartOS was designated to be a host for VMs, for that reason Joyent ported KVM to Solaris and made it so it can be booted from USB drive. So for example updating system is as simple as loading new version on USB drive and rebooting the system.
This is a compelling story. 6 years is a long time and I think that anything can happen in the app store in that timeframe. Too much talk that things have changed - always opp in the app store.
Police-States would try to trojan the CA infrastructure anyway – its too much tempting a target.

Inspecting proxies work well enough with HTTP 1.1, there's no real need to improve them, and even if we do, it should be done via a proxy mechanism, rather than via sending more things in plaintext than we have.

Anyway, HTTPS routers can (and should) terminate SSL, and in that case they can even read the Host from SNI.
> The terrorists are not going to attack St Louis Missouri, but they have attacked New York multiple times.

Which of these attacks required armored cars to fend off?
That reminds me of the time I was poking (literally POKE'ing) around with my TRS-80 Color Computer. I (somehow) had changed it to one of the graphics modes and then set the base address to the start of RAM.

So on the screen you could sort of see the BASIC stack, other important system variables, and even a squashed representation of the text console. So when it was sitting idle you'd see one kind of pattern, and running programs produced other kinds of patterns.

Fun times.
Congrats on your success. Have you launched any other apps in the app store, and if so are they performing similarly to how HoursTracker did at the same point in its life cycle?
Honestly, the Freenet project scares me. I am a privacy advocate and always looking for darknet solutions.

But the problem with Freenet is the prevalence and availability of child pornography on it combined with the fact that the software can store some of this stuff on your hard-drive to maintain the network (I'm not sure if you have to visit/view the stuff first. I got too spooked when I saw it to stick around.)

I like the concept of Freenet, but it seems that the use of it could easily communicate to a jury "this guy is a pedophile" rather than "this guy believes in privacy" if you got hauled in for anything (legitimate or not).
The flash drive is a teeny portion of the entire foundry, though. And plastic is hardly benign to make.
Here are some:

https://www.blackhat.com/docs/webcast/bh-wb-May12-Making_Lif...
I'm not interested in teaching math to people who don't want to learn math, honestly. It baffles me why so many people think that if someone is uninterested in math, they must be tricked into being good at it anyways.

Teaching shouldn't be so dishonest.
'I really would love to see a youtube of a DJ hooked up to automatically synced GIFs. '
Yes, this please !
For similar reasons I have 5 years old HP Elitebook 2540P. It has 8 GB memory, two ssds, lasts 9 hours on battery, dual CPU goes up to 2.6 GHz...

It costs $250 to replace it. I can leave it in hotel without ssd. And it can take rough handling, moist exposure etc...

I found that newer laptops do not offer anything new. You shave off one 1 pound, but loose most extendability options. I might update once some 13" laptop offers 24GB RAM.
http://www.csoonline.com/article/2124346/compliance/end-to-e...

> Section 3 provides the high-level details around encryption. At a minimum, PCI requires the PAN (primary account number) to be rendered unreadable anywhere it is stored, including portable digital media, backup media and logs.
❏Graphic Showing Selecting Directory for Wordpress Install
Follow-up: AT&T will be carrying the Classic and a carrier-exclusive Passport with rounded corners[1].

[1] http://crackberry.com/blackberry-classic-and-passport-confir...
No, it can't charge my phone in 1 Minute.
SSL does not provide identity assurance (=authentication), the CA-cabal does, SSL just does the necessary math for you.

CA's are trojaned, that's documented over and over by bogus certs in the wild, so in practice you have no authentication when it comes down to it.

Authentication is probably the hardest thing for us, as citizens to get, because all the intelligence agencies of the world will attempt to trojan it.

Secrecy on the other hand, we can have that trivially with self-signed certs, but for some reason browsers treat those as if they were carriers of Ebola.
Is that chart suppose to say "VMware"? Squinting at it, it looks like "Wmware". Anyone have a link to an easier to read version?
agreed. baby steps!
( and if not, an invite to your next rooftop party would probably suffice )
The fact that most Windows users run as Administrator doesn't help. Using root in Unix-like systems is frowned upon unless absolutely necessary is one of the basic security advantages Unix-like systems have.
The argument about computing power and CO2 pollution is misguided. HTTP/2 no longer requires encryption, so the TLS/non-TLS trade-offs remain the same as before (and their compute impact is mitigated by hardware AES support, etc.). The other relevant changes (SPDY, header compression, push) reduce the number of context switches and network round-trips required and the total time required for devices to spend in high power mode, and for the user to spend waiting. That results in a reduction, not increase, in total power consumption.

Taking server CPU utilization numbers as an indicator of total power consumption is pretty misguided in this context, and my understanding is that even those are optimized (and will continue to be optimized) to the point where TLS and SPDY have negligible overhead (or, in the case of SPDY, may even result in lower CPU usage).
It's a nice, clean page. I like it. Can you shrink the header image size? It is 1.4 MB. A high-quality JPG might save a good chunk of that for the same quality and the PNG.
Semi-smartphones are the real story at CES
Yes, clearly nothing has changed since 1995 at all, obviously nobody has gotten any wiser or anything.

My big problem with HTTP/2 is that it's crap that doesn't solve any of the big problems.
GCE added Ubuntu support recently:https://cloud.google.com/compute/docs/operating-systems/linu...
It is if you store credit card numbers.
Oh yeah.. That's huge. Let me do that.

Thanks!
https://www.reddit.com/r/explainlikeimfive/comments/1ete2d/

> If they're not obligated to individuals, then screwups face internal discipline, whatever that might be, or (I think) criminal charges if they screw up very badly.

> If they were to be obligated to individuals, then the individuals could sue them for not performing their duty, because they failed in their duty to that individual. EDIT: In other words, it would become a private matter between the individual on the one hand and the police on the other.

> And as bad as the case in question was, I seriously doubt that adding literally millions of lawsuits to the criminal justice system (which is what would happen) would mean faster responses. It would, rather, mean more resources going to fighting lawsuits and paying when they're lost, and fewer resources left to actually respond to calls.
However, I think that in the case of a password or passphrase (e.g. something that you know) that would trigger decryption of such a spreadsheet you can refuse to give that up under the Fifth Amendment under current caselaw.

With a physical key, you couldn't do that.
Basically, yes. Ignore the public part; it just means they have a duty in general. A cop can watch you getting murdered in your house and they do not have to help you. The only exceptions for duty to an individual are the "danger creation exception" and the "special-relationship exception".

For 'danger creation exception', if the government doing or not doing something puts you in danger, they are liable. If you're already in danger it's not their fault.

For 'special relationship exception', basically, unless 'the government singles out a particular party [..] and affords that person special treatment', they have no liability to help that person or provide them proper services. The only exception to this is when the state has restricted the freedom of the individual, such as with prisoners.

This may be news to some of you, but that whole "I pay may taxes" line is ridiculous because of these conclusions. Yes you pay your taxes - to people who have no obligation to help you. You're welcome.

What's really odd about all this is the recent cases where someone who was handcuffed by police subsequently died. Technically this would fall under both these exceptions, because their freedom was restricted by the government and the police's action or inaction caused them danger. In the recent cases, though, the police were let off the hook. Weird.
Thanks. Reading through the user's posts, they seem to know the topic but I just wanted to make sure I was understanding correctly.
Je Suis Charlie
Show me the mainstream browsers that will use HTTP/2 without SSL/TLS ?

The difference between you and me, may be that I have spent a lot of time measuring computers power usage doing all sorts of things. You seem to be mostly guessing ?
Ask HN: How Many Connected Devices Do You Have in Your Home?
With connected devices, how many devices do you have now? How has that number changed over the last 5 years? And where do you think that number is going in the next 5 years?
This is the logic board on the 2014 15" rMBP: https://d3nevzfk7ii3be.cloudfront.net/igi/PmBmFGBkmnHDvEpo.h.... It's wedged between the fans and the batteries, and there's memory on both sides. If you make the board larger to put in SO-DIMM slots, you lose either battery or cooling capacity. The rMBP manages to fit a 15.4" screen and a 95Whr battery in 4.5 pounds. I've never seen an upgradable laptop that fits that much battery into that weight class.
actually surprised you dont offer a shop. until now i assume the subscription has the goal to get people to the webshop
Combined heat and power (CHP) might be indicative for that - nevertheless 90% roundtrip what they say on their website is very impressive.

Compressed Air storage has been around for some time and one of the limits is of course the low energy density. They mention 750 kWh modules containerize - how many containers will that be at what pressure - 20 ? 50 ? 100 ? (so that they can still match safety standards while being closer than e.g. 1km to residential areas)
The worst thing about FileZilla is clear text password files. The developer refuses to fix it I am not sure why.
Cloud Security: The right way to worry
For a lot of internal data it's having and using the appropriate systems in the first place. It's like VCS. You don't e-mail someone code anymore. You make a branch or whatever and then reference that in your communication.
There is. I have received emails that say so outright.
I organized and ran Hackendo (https://hackendo.techendo.com/) in April. Hackathons are super rewarding, but a lot of hard work if you don't have help. My biggest takeaway from throwing a hackathon is: Find reliable people who want to help volunteer to support before/during/after your hackathon.
Why does that matter if it is a public key?
I love the company name in the screenshot "Setec Astronomy" - it's a reference to the movie "Sneakers". It is an anagram for "too many secrets".
Unfortunately, most addicts are unable to change their circumstances drastically enough to use this technique.

To use an analogy from the article, a smoker can't stop going to work because walking by the entrance stirs cravings.

Would like to see practical tools that addicts can employ that use this theory, short of flying across the world.
No, it hasn't. The web is a terrible, hacked-together mess. Things break often and catastrophically. HTTP 2.0 is layering on more hacks instead of trimming the fat.
Quartzy (YC S11) Is Hiring an Email Marketing Manager
> it says something about his outlook

Apparently he believes he has the "right" to park wherever he pleases.

We are left to wonder if he has the common sense to avoid blocking hydrants, etc.
Immigrants and Newcomers – Tips on Buying Property in Canada
Ninite has filezilla. I switched to WinSCP years ago, had less problems than filezilla.

App stores have their benefits, but ninite exists now. Theres really no reason to download filezilla from sourceforge when you can from ninite. The "problem" is not everyone uses ninite. Ninite.

https://ninite.com/winscp/ninite.exe
https://ninite.com/filezilla/ninite.exe
https://ninite.com/filezilla-winscp/ninite.exe
Looks good... well-written also
Got my money simply for using setec astronomy :)
Apache Hadoop gets end-to-end, transparent data encryption
What's the alternative? It's a good thing that the developer does not give you a false sense of security.

http://security.stackexchange.com/questions/39321/should-i-u...
Dutch newspaper wipes out articles citing fabricated sources
VATMOSS and What It Means for Knitters
the spyware free installer is very easy to find.

https://ninite.com/filezilla/ninite.exe
It may or may not be worth your while, though I'd guess no, if you don't have the time to learn a new system and its capabilities.

That said, Linux lags in many very useful features. It's only recently gotten a usable OS-virtualization solution (containers/Docker), while Solaris/illumos (and FreeBSD, for that matter) have had versions of it production ready for over a decade. Tracing on Linux is a pale shadow of DTrace--which bcantrill among others built a decade ago, and which has been available on the BSDs and Mac OSX for the better part of the decade since. ZFS, which many would argue is standing king of file systems, has been battle-tested on Solaris/illumos and FreeBSD for years, while licensing issues prevent it from being included as part of Linux. The file system that btrfs is meant to be better than is ZFS, a goal it's still seeking.

Of course, as far as it goes, Linux is good enough to get by. But once you've worked with a more fully-featured OS, you find yourself thinking wistfully of them.
The "illegal bits" thing always seems to come up whenever anyone mentions Freenet. Has anyone ever actually got in trouble for possession of encrypted illegal stuff on their disk that they don't have the key for? It sounds like a legal case where lots of things could go wrong.
Calls made to KMS are logged in CloudTrail where they can be used for auditing.
USBdriveby exploits the trust of USB devices by emulating keyboard and mouse
UK "common assault" doesn't need any physical contact.
My opinion on BuzzFeed isn't relevant. I was asking if it was sarcasm or not because I was interested in looking into it myself if it wasn't. Wasn't going to waste my time if you were trying to make a joke.