skysight-inc/HackerNews huggingface dataset:
A large part of the problem is on the human side of things. Folks are very easily socially engineered regardless of what OS is underneath.

There are likely exploits for root in almost anything. In recent memory, we saw ntpd, which often runs as root, get hammered. And of course everyone remembers heartbleed.

As a thought experiment, on your linux command line, do a 'top' and ask yourself who has audited all those programs for security. Or, what the heck are all those things doing?

And as a second thought experiment, open wireshark inside a totally linux-based enterprise and see what information is flowing there. Do linux-based enterprises run TLS internally everywhere? Encrypt all file sharing protocols? My bet is the answer is no.

Additionally, breaches aren't all about getting root. Very common vector of exfiltration is SQL injection along with other injections. These happen at the application level.

Remember a little while ago when IE had a forever bug that led to a remote code execution? I think in the same week Chrome did as well.

While I grant that but is a very small problem compared with Windows today may well be true, small does not mean zero. All it takes is one improperly secured server sitting on the internet or one goofy neglected corner-case application page to lead to a total compromise. It only takes one tiny pinprick to deflate an inner tube flotation device.
The FT already started with the latter: http://www.breitbart.com/big-journalism/2015/01/07/financial...
Agreed. I think we tend to underestimate how highly people value interesting work. If you want to do work that most people would rate as interesting, you're going to pay a very high "passion tax" for the privilege. People will put up with more competition for fewer openings, drastically lower salaries, longer hours, worse work environments, and meaner coworkers, in order to do work they feel "passionate" about.

I have interesting hobbies and am happy to do boring work in exchange for the better pay and working conditions and more free time to spend on my hobbies and family.
The definition of challenging I'm choosing to apply here is, stimulating, confronting, enlightening.

Martin Meredith's masterfully researched and written The Fate of Africa completely altered my worldview, and brought into sharp focus contemporary African politics. More broadly speaking, it brought clarity to global politics in general, and our human condition.
It's interesting, quitting a job and drastically changing your life could actually make financial sense if it got you to quit smoking.

Assuming: 1 pack/day, $10 a pack (this is close in my province), 5% interest, over 30 years, has a present value of $55k. I wouldn't be surprised if the numbers for alcoholism or heroin addiction are similar. Addiction is hugely expensive to the people afflicted and society at large (barring the usual discussion of smokers saving health care dollars by dying early).

If flying across the world/country and making other drastic changes really does stop the cycle with a high rate of success, we should consider funding it.
I'm working on a JS stack that leverages React, es6, functional style programming, and immutable data. Check my profile for more info.
Much of the criticism still applies - if you want to cap your commute at, say, 30 minutes door to door, the range of places you can live in SF is vastly smaller than the NYC equivalent (with easy access to Midtown or downtown).

There is a reason, after all, that the Mission is priced higher than even the most expensive neighborhoods of Manhattan.
> Most of the VC funded startups I'm aware of are founded by graduates of top US schools

I know plenty of folks that graduated with debt from top schools.

> graduating with $50-100k in debt from undergrad at Ivies.

Indeed.
For Xbox 360 and WiiU, the PS3 had an nVidia GPU
> The same browsers, ironically, treat self-signed certificates as if they were mortally dangerous, despite the fact that they offer secrecy at trivial cost. (Secrecy means that only you and the other party can decode what is being communicated. Privacy is secrecy with an identified or authenticated other party.)

I'm frustrated to read this myth being propagated. We should know better.

In the presence of only passive network attackers, sure, self-signed certs buy you something. But we know that the Internet is chock-full of powerful active attackers. It's not just NSA/GHCQ, but any ISP, including Comcast, Gogo, Starbucks, and a random network set up by a wardriver that your phone happened to auto-connect to. A self-signed cert buys you nothing unless you trust every party in the middle not to alter your traffic [1].

If you can't know whom you're talking to, the fact that your communications are private to you and that other party is useless.

I totally agree that the CA system has its flaws -- maybe you'll say that it's no better in practice than using self-signed certs, and you might be right -- but my point is that unauthenticated encryption is not useful as a widespread practice on the web.

Browser vendors got this one right.

[1] Unless you pin the cert, I suppose, and then the only opportunity to MITM you is your first connection to the server. But then either you can never change the cert, which is a non-option, or otherwise users will occasionally have to click through a scary warning like what ssh gives. Users will just click yes, and indeed that's the right thing to do in 99% of cases, but now your encryption scheme is worthless. Also, securing first connections is useful.
For some context, the wikipedia page is still updated every few minutes

http://en.wikipedia.org/wiki/Charlie_Hebdo_shooting
Norton Security and Antivirus – Best Antivirus Apps
I'm not sure this is a legitimate concern and you're kind of just spreading FUD with posts like this.
I'm not arguing against SSL.

I'm arguing against making SSL mandatory, because that will force NSA to break it so they can do their work, and then we will have nothing to protect our privacy.

More encryption is not a solution to a political problem: http://queue.acm.org/detail.cfm?id=2508864
It's a variant of the "We are all.." trope to show solidarity and support for a group.
Thanks for the awesome reply. Gonna do some more googling now I know a little more what i'm looking for :)
It reads "I am Charlie", and there are bunch of translations in the PDF.

I don't know what the site is about.

Edit: Alright, the domain is the actual domain of Charlie Hebdo. This isn't some kind of political message by a third party but most likely a message by the people of Charlie Hebdo. I don't know any more.
"We are Charlie"

Your EQ is low, isn't it?
Do you want to be the first guy to find out?
I _think_ people were also annoyed by the GAE pricing change mess.

Also, amazon is known for good support, google is known for horrible support.
"I got my Dad a NUC for Christmas...He hasn't really been using it yet."

I never understood why he did that.

It was a good NUC and he needed a good NUC. If he had used it or even honed it, or took it out of his pocket and looked at it -- that's all he had to do.
> or if they'll start victim blaming by arguing that Charlie Hebdo was asking for it, being provocative.

Not going to happen. French people value satire and freedom of expression.
You weren't wrong that KBD makes Willett, though. Elmer T. Lee and Eagle Rare, both very good, also come from Buffalo Trace, although they're apparently not wheated like the Weller.

I read several years ago that Templeton bought its rye from a distillery in Indiana and it wasn't much of a secret that it wasn't distilled in Iowa. So, maybe not the MGP name was known, but the name is kind of meaningless.
While a fair assessment, Google is a cloud provider to its internal teams anyways. While there is some overhead to providing it to customers, it's probably less than the overhead of Google Reader or Google Wave because much of the work is already necessary.
The Kelly criterion doesn't get enough of a shout-out in discussions of A/B testing and multi-armed bandits. It's particularly apt when you're discussing conversion rates from customer acquisition campaigns - turning ads into customers into ads into customers.

http://en.wikipedia.org/wiki/Kelly_criterion
This is a an unworkable viewpoint because it has no limiting principle. What if a person comes in for a job interview and is wearing a turban because they're a sikh? Should you put up a screen between you and the interviewer? Give them a voice changer so that you can't tell if they're a woman or a man. Use an interpreter so that regional dialects or accents cannot be detected. Ban pork products from your cafeteria in case a candidate comes in. This is not a winnable strategy. At some point you have to acknowledge that assholes can take advantage of anything.

Incidentally, I do think that taking people out for drinks to evaluate their character is a lousy practice but simply because many people don't drink for many reasons. Not because someone might secretly find out you're a religious minority.
> assuming I'm new here.

Hi, I see that you have more than 500 karma, so you probably downvoted me. That's great, because I created this throw-away account specifically because of thin-skinned people like you. Did that last sentence also come across as an ad hominem attack?
Thanks, I see it. The translation code is inside ir.py. So you can call ir_to_c(bf_to_ir("+++.")) to do the conversion.

Here is the code to convert BF to C, in case anyone else is interested https://gist.github.com/primaryobjects/0ba06f1f6f0d3e984d89

Here it is running the converted C code https://ideone.com/z16KPJ

Very cool.
It's actually "I" and not "We".
"Google Play and the associated Services ecosystem exists for the sole purpose of forbidding exactly what Amazon is trying to do"

Er... are you sure android apps for gmail, calendar, drive, youtube, maps etc. and not to mention, the play store for android exist for the sole purpose of blocking third parties? Surely they have their own utility to users... no?
we use it to create a remote procedure call serialization protocol. (in essence, this is an interpreter too)
When it comes to child pornography, even the mere accusation makes you automatically guilty in the eyes of the public which can destroy your professional and personal life.

So, what happens if your IP address somehow become associated with trafficking child pornography? You run the risk of getting raided by a decidedly non-technical police force, having every electronic device you own confiscated for an indeterminate amount of time and being charged with a felony by a non-technical district attorney's office.

Even in the case where they eventually realize you didn't have anything to do with it and drop the charges your life has been turned upside down in the process. In the worst case, a district attorney could choose to try and take the case to trial regardless and then your fate is in the hands of a non-technical jury.

I just can't personally accept a risk like that in order to contribute hard drive space and computing power to a darknet project like freenet.
This new feature encrypts the entire database. PCI compliance requires only to encrypt the account number, i.e. the credit card number.
'The Zen Experience' by Thomas Hoover

I didn't get most of the Zen kōan from this book. But I feel its a great book about the history of Zen.
A master password, no?
Ridiculous, cowardly, and wrong. Charlie Hebdo is left-wing, and is fairly even handed when it comes to mockery.
Not quite on the Pappy being BT, the younger stuff in the line is, and I believe current thoughts are the 15 is blending BT with some of the "ultra aged" Stitzel Weller stock that Julian Van Winkle started the brand with and the older stock is all SW.

For inexpensive stuff look for Bottled in Bond (legally at least 4 years old, 100 proof, single distilling season). Still some real gems there, mostly from the good folks at Heaven Hill.
I think this concern is for receiving payments from kickstarter, not making payments to a project? no?
I'm not sure what this has to do with the Jacques's piece. Being an expert is orthogonal to people paying you to be an expert is orthogonal to being a "one trick pony".

You don't need to be "in the top 0.001%" to be seen as an expert, and I think you underestimate how easy/valuable it is to become known on the internet ("internet famous"?) as an expert on a narrow topic. Let alone how easy/valuable it is to become known in specific real life professional circles.

At one point I completely accidentally and without any deliberate effort became known as an "expert" in a certain technology in a certain mid-size city, which led to a lot of work. I probably wasn't even in the 50%. I wasn't a "one trick pony" in the sense Jacques means either, I was just doing what people were paying for - I didn't even like it.
To be fair, that is a big requirement... Loads of mid to high end graphics cards from just a few years backfail at dual QHD screen.

I power 2x 1920x1080 screens off of a NUC and am very happy.
So hard to code with 4 hooves and one corn. Been there, done that. Mexico, never again.
http://www.intel.com/content/www/us/en/nuc/products-overview... has i7 "coming Q2 2015. Prodict details coming soon" Number of cores? That page doesn't say.
Yes, it's 2014 and credit card numbers should not be stored and tokenization is the standard.
I suspect think there can in fact be desirable arrests which are not necessary: arrests for petty theft and shoplifting, vandalism, malicious mischief, et cetera.
charliehebdo.fr is the official website of charlie hebdo magazine where the shooting take place.
As many as the quota required.

http://www.salon.com/2013/03/21/second_cop_confirms_nypd_arr...
Solidarity with the French satirical newspaper Charlie Hebdo, in relation with today's terrorist attack (12 dead so far).
Really? http://globaleconomicanalysis.blogspot.com/2013/11/mish-fine...
Free web research and analysis tools
It is an interesting comparison. You could buy 5 Chromecasts for the price of one of these Intel sticks, so it seems not a fair comparison. BUT, chances are you really are going to only use one or the other, so in that way it is necessary to decide.
Well, that's certainly part of the issue.

But even if Freenet users were immune from prosecution for what's in the data store on their hard drives, does that make the possibility of aiding the distribution of child pornography any less repugnant? What about other material that goes far beyond simply being offensive?
This is interesting because of the contrast with how the MH370 crisis, and the Sony crisis has been handled.
This could be useful for informing addiction recovery within institutionalized individuals, such as soldiers or prisoners, but not within the general public. The addict is unlikely to change their entire life structure to defeat the addiction since they know that would defeat the addiction, and that's not what the addiction wants.
Sales people prefer relationships, management low CAC
That would be "Nous sommes Charlie".
I think my comment was on topic but perhaps not expressed clearly enough.

If someone did take their stolen laptop back then theft may not have been committed, but in the UK at least, a reasonably creative police officer would be able to find other grounds for an arrest, believe me. Any attempt to evade arrest would itself be a crime of course.

I accept that the situation in the USA may well be different.
Even if they weren't even-handed, it wouldn't change a thing. They could be publishing a newspaper named "Fuck Muhammad" and it'd still be equally wrong for them to have been attacked in this way.

I'm not entirely sure why we coddle religious fanatics as we do, but it needs to stop for us to progress as a society.
"Past performance is not necessarily indicative of future results."
So 10 years ago when I was in academia, this was a prime way to sink a paper's conclusion in 5 minutes. Obviously the tech world has to relearn lessons from other fields the hard way.
Well ... this is satirical magazine that puts offensive content on purpose (not pointlessly though) and they had their headquarters attacked and 10 personal killed (also 2 police officers).

They were notorious for mocking all religions and have posted content offensive to all.

Right now it is thought that this was the work on islamist terrorists (I have not seen reliable info though, and crazy is cross religion)

Now to make matters worse the right is on the rise in Europe and the interfaith tensions are high due to complex reasons (being in economic depression for a decade helps little).

In a sense this was attack against the core values of what lots of Europe believes. And there are a lot of people for which anti muslim sentiment is a godsend ...
It means you need to use defensible candidate screening practices that clearly relate to assessing the candidate's fitness for the role. Asking to meet their current squeeze or taking them out to lunch to evaluate how they treat the waitstaff are not easily defensible. Asking them questions in an interview room about how they have previously performed in similar roles is.
Ulysses is a walk in the park compared to his later work, Finnegan's Wake.
Nice work if you can get it!
> It will not lead to layoff.

It will if they think they can blame it on the Mayor. NYPD appears to be throwing a temper-tantrum, I wouldn't exactly expect nothing but rational actions from them.
Mortgage brokers have told me the FHA is no longer worth it. You can get a conventional loan with 5% down, FHA loans require 3% down but their mortgage insurance premiums are currently too high.
The line on secrecy vs privacy doesn't make sense. Actually help me out, because I'm not a native English speaker - if you're implying that the NSA should be able to snoop in on my traffic without a warrant, as long as it keeps it secret, then I beg to differ.

Visiting an article doesn't happen only after it was posted. And surely the NSA can certainly figure out ways to track you, but their cost will be higher. Just like with fancy door locks and alarm systems, making it harder for thieves to break in means the probability of it happening drops. Imperfect solutions are still way better than no protections at all (common fallacy nr 1).

All such rants are also ignoring that local threats are much more immediate and relevant than the NSA (common fallacy nr 2).

On trusting the certificate authorities built into my browser, of course, but then again this is a client-side issue, not one that can be fixed by HTTP 2.0 and we do have certificate pinning and even alternatives championed by means of browser add-ons. Against the NSA, nothing is perfect of course, unless you're doing client-side PGP encryption on a machine not connected to the Internet. But then again, that's unrelated to the topic of HTTP/2.0.
The spirit of the saying is a group, leave it to HN to demand a literal translation.
Yeah didn't want to complicate the discussion with the Pappy conjecture, but more and more people are coming around to the idea that the SW stuff is gone.

I know that the WL Weller 19 year that BT bottled years ago was my favorite of all time and the price for that has become obscene.
Articles online say this will ship with an HDMI extender, which is pretty standard, honestly. Every one of these HDMI dongle computers I've bought like Chromecast came with one.
self-signed-certs is about making NSA&friends work for it, rather than giving them a free ride.

Today they can grep plaintext as they want. With SSC's they would have to pinpoint what communication they really need to see.

That would be a major and totally free improvement in privacy for everybody.

As for why the browsers so consistently treat SSC's as ebola: I'm pretty sure NSA made that happen -- they would be stupid not to do so.
I'm guessing you are correct that there would be less problem if they used Mac and Linux. For whatever reason Microsoft does not seem to prioritise security that much. Just the fact that you can infect the system by clicking on an email attachment is a bad idea. On a Mac you have to click on the attachment and type your system password which makes it much less likely for a secretary to get malware on the system by clicking an attachment. The technical difficulty of implementing that is pretty much nothing. It seems more a question of attitude and not taking it seriously. I'm reminded of https://news.ycombinator.com/item?id=6978626 where the guy took a virus course. Better designed systems seem the way forward.
> I am not a lawyer, so forgive me for trying to apply logic to the law.

Your first mistake is presuming that you're applying logic. That's not what you're doing.

Your second mistake is presuming that you're commenting on the law. You're commenting on an interpretation of the law. With, I might add, your own interpretation based explicitly on admitted ignorance.

> What set cardinality would be minimally necessary to generate a police duty to protect a group, if it is not one?

It is one. It's simply not specific as to which one. If two criminals threatened two different civilians, a policeman is not at fault for choosing to save only one of them, especially when failing to act would mean saving neither.

A policeman who patrols one neighborhood over another, ceteris paribus, is not liable for crimes that occur in neighborhoods he failed to patrol. If it can be shown that he has done so for discriminatory reasons, then he is at fault for discrimination, but not for the crimes which occurred.
So, basically, always be looking for emerging opportunities and don't be quick to "throw in the trowel" ;-) Sorry... just couldn't resist!
I take issue with equating web developers and amateurs.

I understand his point. And I conceed that there is a lower barrier to entry for writing a PHP signup form than a Go systems-level program.

But please don't assume that all web apps are written by 2nd-year junior programmers. Some of us web developers have the experience required to write secure web apps.
Ever since 2007-2008, Source Forge and places like CNET really started to lose trust for me. When I noticed something from source forge had some sort of downloading tool I put my hands down and refused to continue with that sort of thing.

We have enough Ask Tool bar kind of crap from Oracle Java installers, and when useful tools step to doing similar things, it really makes me lose respect and find alternatives.

As a developer, I need to have a work environment that is robust and dependable. Additional promotional packages that can slip through will disrupt or degrade my work. That is not something I can take and feel sane.
Victim blaming in the elites and surging ranks of the right because none of the big players will want to engage with the difficult questions.
Funny how officers deem their lives worth more than the lives they take or families they destroy with no accountability.
Basecamp connects with employees with “the 5x12”
Attributing the Sony Attack
3 Great CES Windows Ultrabooks You'll Crave
Really? That was in 2011. It's now 2015.
Fun fact: Everyone calls it "Nye-Nite", but it is pronounced as it is spelled: "Nin-Ite".

https://ninite.com/help/home/pronunciation.html

Ninite Ninite Ninite.
Maybe if you adopt enough of the small changes, like smoking with your non-dominant hand, you're environment will be different enough to make a dent.
We Still Don't Know Who Hacked Sony
How Much Does It Cost to Build a National Wealth Center Business?
19.4% of Fortune 500 using Rackspace's cloud product sounds very high. How do you differentiate normal Rackspace customers from those using their cloud offering? I would assume they're all in the same data centers.