skysight-inc/HackerNews huggingface dataset:
Jeffrey Sterling was an attorney working for the CIA as the handler for a Russian covert agent whose mission was to subvert the Iranian nuclear weapon program by feeding them faulty designs for the electrical firing mechanism of a nuclear explosive device. James Risen is one of the most celebrated investigative journalists of the last 20 years.

Sterling informed Risen of the program he oversaw for the CIA. Risen dedicated a chapter in his book to it.

The Bush administration opened an investigation into the incident. Obama's Holder-led DOJ oversaw a criminal prosecution of Jeffrey Sterling.

At no point that I can find was Risen ever criminally charged for anything. For a period of several years, Risen fought a subpoena compelling him to testify, naming his source (Sterling had already been indicted). That subpoena was appealed all the way to SCOTUS and ultimately held up. Holder, who already had enough evidence to convict Sterling, ultimately backed off. Risen was never compelled to name his source.

To me, this is sort of an acid-test case. It is hard to imagine a more consequential singular leak than one that reveals a carefully-planned human-intelligence counter-proliferation mission against a hostile state. Sterling had a position that appears to have involved the utmost level of trust --- he wasn't a sysadmin disquieted by the documents he was uncovering, but an operations officer intimately familiar with and actively participating in the operation he revealed. There is a colorable argument that there should in a truly free government no state secrets. My sense is, if you think this leak was praiseworthy and the government's investigation "overreaching", as the Dean of the Columbia Journalism School writes here, you kind of have to sign on to that argument, don't you?

Two more thoughts:

First, Risen is a startlingly effective journalist, one of the best of his generation, up there on the leaderboard with Seymour Hersh. The lede of this piece sets up a narrative about a reporter persecuted by his own government. But (a) Risen wasn't prosecuted at all, and (b) his serious legal entanglements seem to involve a single case on his long resume, which resume is recounted at some length in this piece. The narrative effect is to suggest that the government fought as hard against his NSA and torture stories as they did against this one. But that's an argument that doesn't seem to be supported by evidence.

Second, more of a question: I've tried to read the indictments of all the leakers on the roster of the Obama administration leak prosecutions, often said to be the most zealous of any President. At one point in this piece, Coll states outright that the Holder DOJ had imprisoned "a half dozen" sources for journalists. That doesn't square numerically with the prosecutions that have been reported on, nor are most of those prosecutions about people who were sources for journalists (apart from Chelsea Manning).
There is a blatant effort underway in the Lords to revive the Snoopers' Charter, spearheaded by known securocrats -- the government won't say it out loud (yet), but if this stuff finds its way into the Commons, Cameron's cronies will try to vote it into law.

People are twitchy because the double-whammy of election time and mayhem in Paris gives authoritarians the perfect excuse to put all sorts of shenanigans into law, and the LibDems (the last line of defense against cyber-totalitarianism in the country, I have to give them that) will likely be annihilated at the polls (because of their blunders on, well, any policy except this).
It's not a difficult problem to solve. Just let the sign-up succeed whether an account already exists for the email or not. Then say "You will receive an email with instructions to complete your registration".

If there was no existing account, send an email with the text: "An account was created for this email address at Example.com. If you requested this account, you may activate it by clicking here: https://..."

If there was an existing account, send: "An attempt was made to create a new account at Example.com for this email address, but you already have an account. If you have forgotten your password, visit https://..."
I think this shows that the "Content" tag in CSS is a bad idea, at least if you're concerned about separating presentation and content. It's a bit like a single-image website.
The -5v goes to the substrate (the bulk silicon underneath all the transistors) in order to increase the threshold voltage of the NMOS devices. Many later chips dispensed with this because they were able to tune the process to get acceptable speed without it.
Feature Request/Feedback for Thunderbolt Disassembler
iRobot (http://www.irobot.com) - Bedford, MA (just outside of Boston, MA) and Pasadena, CA

At iRobot we make robots that truly help people. Our robots help people save time by cleaning for them, save hassle by being remotely present for them, and save lives by putting themselves in harm's way.

We have great work-life balance (including half-day Fridays during the summer so you can spend extra time with your family on Friday afternoons) and interesting problems to solve.

We blend cutting-edge research and practical engineering to build useful and affordable robots.

We're looking for smart engineers who are easy to work with. You should want to help people with products you create, but a robotics background is NOT required. (I had no robotics background when I started at iRobot.)

iRobot is looking for software engineers, here are a few of our 20+ job openings:

* Embedded software engineers: We're hiring for "big embedded" (C++, Linux, and big cpus) and "small embedded" (C, bare-metal, small cpus). If you have good OO skills (C++, Java, etc.) but no "embedded" background that's okay too - shoot me an email and we'll chat.

* Java software engineers

* iOS software engineers

* Software engineers for vision, navigation, and mapping

* Test engineers

Check our jobs site for all positions: http://www.irobot.com/us/Company/Careers.aspx

Email me directly if you'd like to know more: csvec@irobot.com

Please email even if you're not sure if you're a match; I'm always happy to talk to other HN'ers!

PS: We have hired people from these "Who is hiring?" posts, thanks to HN for this service/forum.
Public Themes – Public Domain website themes you can use anywhere
You can of course also make quite convincing BIOS password prompts with QBasic.
What is Designbook anyway?
Darude’s Sandstorm Goes Classical with Epic Cover
It still is, and pretty much every nation on earth has signed the agreement.

Most nations don't make themselves look like idiots by enforcing it against a bunch of open-source hippies, but try to export some crypto software for military use to North Korea...

http://www.wassenaar.org/ it's in chapter 5, can't remember whether a or b

Windriver recently got booked because of exporting OpenSSL...
> Bad example. Gun control is fairly total in western Europe.

http://en.wikipedia.org/wiki/Gun_politics_in_Switzerland

Though the opening line kind of agrees with you:

> Gun politics in Switzerland are unique in Europe
>Even if I had a printer I'd need some fancy scanning equipment to figure out how to make the key.

Keys have been reproduced from a single photo before. It seems to always involve someone who has experience making keys using the photo to reproduce the key, but in theory software could be able to automate this for the easier cases.
[1] is a nice read regarding continuations (and the Cont monad), though a bit more advanced.

[1] http://blog.sigfpe.com/2008/12/mother-of-all-monads.html
Cloud9 IDE rewrite to be open sourced this week
Everything on screen matters. Modern Cinema is a HIGHLY evolved art form. If you have any interest in this at all, YouTube user Every Frame A Painting publishes, short, easily digestible, and well-produced YouTube videos about this stuff that are eye-opening.

Here are a few of my favorites:

Edgar Wright - How to Do Visual Comedy: https://www.youtube.com/watch?v=3FOzD4Sfgag

The Silence of the Lambs - Who Wins the Scene? https://www.youtube.com/watch?v=5V-k-p4wzxg

Michael Bay - What is Bayhem? https://www.youtube.com/watch?v=2THVvshvq0Q
Wilton Wholefoods recalls its Goji Berries product. Undeclared sulphur dioxide
"Linux is miles ahead of Windows for research."
I think you need to be a bit more specific than that - for research in what field. I can think of several computational areas where either the OS is irrelevant or Windows is a better platform due to ecosystem issues. But yeah, supercomputers, servers, networking, etc, probably.
Intel buys former Infineon 'Internet of Things' chip unit Lantiq
This is amazing! Sounds so much like a Hollywood movie.

Though this is most probably true, I worked at an ISP in North Iraq. The amount of ignorant high profile Internet users causes us lots of trouble.
I absolutely remember Hungry Horace even now!

Once I came across a Sega racing game that was a magnitude faster than anything I'd seen till then.

In a quest to find its secret, I discovered something known as "Z80 machine code" in a spectrum magazine. The very phrase sent me into raptures of imagination for some reason, and that's how I too ended up learning assembly language :D.

Truth be told, I never again felt the raw adrenaline rush that coding the Speccy gave me, so I do remember it with a great deal of nostalgia. Thankfully, I still have my speccy in seemingly tiptop shape, and it looks like the only thing I have to do to get it to work with my current TV is desolder an RF cable from the TV out. I look forward to it :)
Wouldn't this give you access to EFS files?
> ICC has been found to be very lacking compared to both gcc and clang

Who found that? For processing intensive tasks, I routinely get a 30% reduction in run time using ICC - mainly owing to ICC's aggressive vectorization.

Rarely, I'll have to do some shenanigans to force it to work correctly. Very rarely.

I use clang when developing because the error messages are miles ahead of anybody else, then produce a 'stable' GCC version and an ICC version. If the ICC version produces the same results as the GCC version for the test suite, I exclusively use the ICC version.
Nvestly is the social Mint.com for stock trading you never knew you needed
> However, Windows seems very much contrary to the goal of the Raspberry Pi: providing a device for children to tinker with and educate themselves.

Think of it differently--some kids may wish to learn about other things, or just build something. Not all kids will want to dive deep into the OS.
A New Global Swarm of Weather-Sensing Satellites
The only person who deserves to make a sweeping statement like yours is someone who has never pirated a piece of music, never read a free article, or never watched a YouTube video.

You are not that person. No one is.

If you ask me, you are the parasite here, not the musician who wants to make a living.
yup, my little 'graphics house' created ~ 80,000 of the 'artworks' featured :)
Exactly! I was hoping to at least hear what those two words were, no matter how insignificant.
just because someone is talking about passing a law, through a democratiocally elected parliament and to be administered by an independent judiciary, you not liking it doesn't make it totalitarian.

Having said that, I'm utterly furious at Cameron. I'm not actualy afraid they'll pass such a law, it would be ludicrous to try to enforce it and I'm sure cooler heads will prevail. IMHO that's not the real problem.

The issue is that by mooting the idea of such a law, he is creating the impression in a non-technical public that such a law might be reasonable to even discuss and debate. He has established a basis for future, similar ideas to become an acceptable subject for public discourse. That is a pernicious and deplorable act. It creates space within which less infeasible but still awful ideas along similar can seem 'more' acceptable.
>OS X is free now on the condition of using only Mac hardware.

By that metric, Windows is also free if you buy a Surface.

>their market share has been gobbled up by Apple in the last decade or so

Today I learned that going from 5% to 7% marketshare is gobbling up a rival that has 90%+ marketshare.
First, Eric Holder did not ultimately compel Risen to name his source.

Second, this wasn't a corruption or torture report, and the stakes weren't "embarrassment". The CIA turned a Russian nuclear engineer who fed to Iran flawed plans for the electrical firing mechanism for a nuclear explosive device. Risen learned about that from that Russian engineer's CIA handler, and after the NYT spiked a story he wrote about it, wrote a chapter a book about it.
> "not actually doing anything we didn't already know about"

Yeah, that's another one of my pet peeves. "We already knew that" is a wonderful way of shutting down any kind of discussion and it's rather frequently followed by a significant lack of evidence that "we already knew it."

Yes, the idiot's techniques, like most "trick shot" things, are completely ineffective at anything useful. But still, which are they, ineffective or "well-known techniques in non-Western-European archery"? Or is non-Western-European archery assumed to be ineffective? And if short-bows and non-Western-European archery are the topic of the day, then what's with the long digression into The Queen Of All Archery, the English longbow?

Fortunately, it's Monday and I'm allowed to hate everything.
"Maximum password length should not be set too low, as it will prevent users from creating passphrases. Typical maximum length is 128 characters."

Why would you ever have a maximum password length at all? bcrypt or (god forbid) your secure hashing algorithm of choice doesn't care about input length, and has a fixed output length to stick in a database. Why on earth would you limit the password length beyond anything so insanely large (1024, etc) to not even matter?
Ryan X. Charles here. AMA.
Civilization should have collapsed the moment a large group of people agreed that one element should disclose a specific piece of knowledge, or face punishment. If everything else if my life fails, I want to become a martyr to this cause.
Setting a New Low Power Standard for ARM Cortex-M0+ Based Microcontrollers
Show HN: Superbowl ads ranked according to YouTube
Article says you were laid off, but you say you were fired. Which is it?
Designing Twitter Video – A look into the design and prototyping process
Is competition good?
It's possible your deletes are registered instantly, but the cache of information that serves those functions were not wiped until the existing cache expired five minutes later.
We are literally drowning in intern applications. Either we haven't gotten to yours yet (likely), or we accidentally dropped it on the floor (also, sadly, possible, given the number of applications we've received this year). If there are any keywords in your email that might help me find it, I'd be happy to follow up.
It's a bit tautological to suggest that fixing the most common RCE flaws in C/C++ programs by replacing the language is the same as fixing all of the most common RCE flaws. The clear point here is that memory corruption is an affliction of C/C++ programs, but that other languages have other RCE-breeding flaws.
I refer to it as the sticky-keys hack. Been using it since before I left High School. (admittedly only 5 years ago)
I doubt Google is worried about unfairly weighting pages it indexes with Javascript that takes so long to run, hence the cutoff. It's more a question of where to place the cutoff than whether to have one at all, which is absurd.
Thank you for mentioning the Eudyptula Challenge [1]. It's not my cup of tea right now, but it sounds Really Cool for anyone interested in kernel programming.

1: http://eudyptula-challenge.org/
This reminds me of an old Calvin and Hobbes strip where Calvin discusses verbing words.

http://assets.amuniversal.com/6f34d860df950131725e005056a954...

That's kind of an amazing aspect of English as a language; you can misuse words entirely, yet still convey a message. I wonder if this linguistic flexibility is due to the fact that our language is a mixture of so many other languages with disparate grammatical rules.
Time will tell, but I can't see any reason to doubt whether this could scale. As long as an artist can inspire intense loyalty from a small group of fans, they could forseeably supplement their income with donations. This won't work for all artists, and won't replace existing funding models. But there are a lot of creators who fit this bill.

I, for one, and excited to see crowd-patronage grow. It's a model that rewards artists with cult appeal (versus the consumer model, which values mass appeal). The arts will be a little less bland.
You are seriously equating "selling ice" to "making music"?

I thought HN was had smart people. These are the kind of juvenile arguments I've seen snotty 13 year olds make on Reddit.
Quiz: Entrepreneur or Entrepreneurial Minded?
See also: http://en.m.wikipedia.org/wiki/Deniable_encryption
Of course. But subtextually: had you replaced C++ with Python, you'd have had the same outcome. Obviously, a significant advancement in Rust is that it's feasible to replace performant C++ programs with Rust, and not feasible to do that with Python. But that's perhaps a performance and logistical advance, not a security advance.

I get that the combination of [memory-safe, non-garbage-collected, performant, natively-compiled] has security implications for systems programming. But developers shouldn't be swapping their Python code for Rust if security is their primary objective.
I want to say my quote comparison came from '96, but I could be off a bit. At any rate, the unix vendors still all had pretty significant hardware advantages over even the beefiest PC ... but the bang/buck was already pretty painful.

We had systems developed on Sun, but we couldn't afford to deploy them on Sun hardware. After briefly flirting with the idea that SunOS x86 would be a viable path, we gave up and moved to linux on commodity hardware. It was a new enough thing to do (in the market we were in) that we got a few raised eyebrows, but it turned out to be the right decision.
Honest question about grammar (not a native speaker): is enthused correct here? Other than the fact that enthuse is a verb that was made up from enthusiasm, shouldn't this be "Why people were enthusiastic about…", "Why people enthused about…" or "Why people were enthused by…"?
I think "laid off" is probably the better term. The new executives are not interested in pursuing bitcoin or cryptocurrency at the current time. I was going to be the lead engineer of the cryptocurrency engineering wing of reddit, but they have let me go, and removed the other "cryptocurrency engineer" positions from the job page. The executives have their hands full with things like mobile and improving reddit.com infrastructure. Not to mention the legal difficulties of reddit notes.
> Really? "(uJgP6h9=8Uc6x?}#B6Q" isn't enough for you?

Not after you've posted it on HN. That's only half joking...the biggest vulnerability in any password system is the humans involved. Security advisors should design around the natural behavior of their users, not try to force users into acting unnaturally. Otherwise, users will figure out how to introduce vulnerabilities that get around the constraints imposed upon them (the oft-cited writing passwords down).
To my knowledge, there is no law on the books today that prevents encryption.

There is, however, already a law requiring the disclosure of keys/passwords under certain circumstances (the Regulation of Investigatory Powers Act 2000).

Remember that it's election season in the UK, and it's going to be a close one. There may literally be a greater number of distinct, plausible outcomes than we've had in the history of British politics, including a wide range of potential coalitions.

On top of that, the public will be sceptical of any manifesto claim this time around. A coalition government, as we've had for the past five years, is a new thing for most voters in the UK. As an electorate, we've just seen first hand how parties in a coalition make separate agreements that have to compromise, and how that means they don't always honour the manifesto pledges that got them elected in the first place.

So, the leaders of our political parties are all saying lots of things that are superficially attractive to some demographic accordingly. If the electoral strategists at Conservative HQ have already decided that geeks are unlikely to vote for them anyway, which is probably a reasonable assumption given their track record on technology issues, they have nothing to lose by completely ignoring the reality of technology and appealing to the "nothing to hide, nothing to fear" contingent who don't know any better. I suspect (though this is mere conjecture) that this is exactly what's going on here.
Certainly not required! To get a job in application security (at Matasano/NCC or anywhere, really) you should be demonstrably okay at web application, and have interests beyond webapps.
Chub Wars
I would guess that it didn't.. just another example of the exploding requirements.
Chocolatey/NuGet is great to use, and it's being added to Windows 10 by default. I use it pretty exclusively no for tool downloads.
50M is a lot of dough. Any idea how they were going to spend it? Was the idea to build out a giant development team?
> I do it myself from time to time

Which means that most of the time, you don't pay for content.

Which means that you basically pirate music.

Which means that you are the parasite, not the musician.
Titan Seas Reflect Sunlight
SMS Cubano – Perfil de yamiletboza
Hashing passwords takes a lot of CPU resources. Django limited their password lengths to a maximum 4,096 characters because of this: https://www.djangoproject.com/weblog/2013/sep/15/security/
"That benefit doesn't seem like enough to offset the fact that they'll be running an OS which is very difficult or impossible to actually modify for use. "

That's a bit harsh. The point of OS is to provide a computational platform for higher level computational stuff like arts and science. It would be a dark world if everyone just tinkered with OS kernels (while it sure is nice some people do).
I constantly see negative bias towards social media, sure some of it is warranted, and most of it related to privacy, but what abut the positives?

The hard reality that revenue needs to be generated is a very real struggle. This was evolving pre-facebook, it just so happens that they are able to take advantage of what was already going on.

The answer is not to abandon social media, but to force awareness and possibly regulation, but again it's not easy when commerce is involved. I think that this will come in the future, right now the ground is still unstable, but it's important to look at the big picture and take the goods with the bad.
It's pretty simple. I was hired by Yishan and reported directly to Yishan to lead the cryptocurrency engineering wing of reddit. This was his idea - and I was happy to lead it. Yishan then suddenly quit, and new leadership took over. The new leadership is not interested in pursuing cryptocurrency at the moment.
Such a low maximum length does not make a lot of sense, but say a limit of 1024/2048 seems reasonable. The amount of time it takes to compute a hash is proportional to the length of the input and you do not want to facilitate a DOS attack.
L21 just released.

I wonder if the Arduino Zero was waiting for this chip before they started production, instead of the G21 that is shown on the Arduino Zero pictures?

Here is a cool video from CES showing one powered by a cup of hot coffee: https://www.youtube.com/watch?v=70Tu1jC4Ccw
Yes, but that is not really the point here.

Her attorney didn't describe with enough detail why WB was on the hook. The court dismissed it, but they are allowed to fix it and go on.

This is a really standard litigation issue. It isn't a big deal.
Google, Microsoft and Amazon pay AdBlockPlus to unblock ads