skysight-inc/HackerNews huggingface dataset:
So, it's DNS redirect... Funny.

PS: I'm in Sai Gon too, all OK for me.
Stop Complaining, Start Doing
> Browser vendors need to rethink the mostly blind eye they've been turning toward corporate DPI and silent MITM.

It is unclear to me if browser vendors could actually do anything meaningful here. After all a sufficiently motivated company could just deploy a private fork of an open source browser with any code changes they want. No doubt, if there is demand, someone would be happy to sell pre-customised versions of these browsers. The only restriction they would have is that they couldn't call the result "Firefox" or "Chrom[ium]", but since they set the IT policy, requiring all employees to use FooCorp Internet Browser isn't a problem. I guess the trademark issue, but really only the trademark issue, does make that approach less viable for adding MITM "capabilities" to OEM-distributed browsers.

(note: I work for Mozilla, but am not a security expert)
The problem is trust and given the current SSL authority scheme, can not be solved.

It's a choice that users must do, not the OS. I don't blame computer manufacturers for adding these certs to their systems, they try to make browsing as easy as it gets. Theoretically speaking, the government is your friend. Practically speaking, if you're into any business that requires extra security, you need to take control of your OS at much deeper level, which probably means running something Open Source and manually checking the certificates that came along with your system and your browsers.
Why doesn't the browsers collect information from its users (if they agree to it) about which CAs are used by which domains - and display a strong warning if a different CA than the norm tries to issue a certificate?
Indeed. I am making it better all the time, just looking to multiply the results :)
This flew under the radar for me but AWS has “a long-term commitment to achieve 100% renewable energy usage for our global infrastructure footprint.”
It's refreshing to go to the few forested areas and see what almost all of the island looked like a thousand years ago. There's some beautiful places in the Bearagh peninsula.

That being said, some of the planted forests are pretty obvious. I still like the trees, but it's definitely a different feel.
It doesn't have to be this way though.

The browsers could start not trusting those CAs, and not allowing them to impersonate any SSL site you visit, and they are making steps towards this with measures like pinning aren't they?

Measures like that just need to be made the default, and if companies want the ability to MITM they should have to adjust settings to make that happen, but consumers should not be vulnerable to that by default and browser vendors could work towards that future. At least people are now more aware of these issues, and that a green lock really doesn't signify much if a government takes an interest in your communications.
My first impression of this would be that it’s an alright joke, mostly because I think “treason” is a ridiculous and non-sensical concept in the first place and in general.
> most men will not talk to them unless they are hoping to bed them.

This is just very, very sexist, and I'm surprised nobody has called you out on it.
You're the new TempleOS. The only reason you haven't been hellbanned is that your particularly insanity, a weird Randian fantasy world, isn't inherently offensive.
For anyone in the UK it will be shown at 11.05pm Wed 25 Feb on Channel 4.
On Excel for Mac it had to do an 'Open and Repair' but then worked fine, but something was off. Viewable using OS X's own QuickLook too, so I imagine it'd open in Numbers as well.
The Danish plant is about an hours drive from me. There's not much IT related going on in that area so it's good to see that someone is willing to invest.
The article linked to a PDF of the paper in question, in the first opening paragraph. That's pretty decent.

Also, isn't mathematics considered a science? What?
Agree. And to think that this someone is also the CEO of a "real" CA trusted by "over 99.9% of all browsers"... OMG.

(Or am I missing something? I just can't believe it...)
I'm surprised they placed one in Denmark since Netherlands and West-Germany (ie near Düsseldorf) would be much more central Europe for internet connections.
Yep. From a Ctrl+F of [1], there's:

* ApplicationCA (Japan)

* China Internet Network Information Center EV Certificates Root (China)

From a Ctrl+F of [2], there's:

* ApplicationCA (Japan)

* FPKI Common Policy (US)

* China Internet Network Information Center EV Certificates Root (China)

The only odd one out seems to be DoD Root CA 2.
Thanks for rehosting, but your version is definitely not HD, coming in at 640x360 resolution.
Thanks for rehosting, but your version is definitely not HD, coming in at 640x360 resolution
Because the m/billions of users bar a few thousand will have no idea what to make of the warning. I mean I don't even know what constitutes a "normal" CA.

And to be honest who really cares. Countries increasingly are mandating invasive spying through legislation. Arguing over CAs is like rearranging deckchairs on the titanic.
Perhaps you're downvoted because there is no context to this, and it's not related to the subject.
IME, us "masochists" suffer much less in the end. We "suffer" a few seconds here and there when we get a compiler warning, forcing us to think edge cases through.

Then, later, we suffer much less through runtime debugging, QA, and get a lot less calls at 2AM.
This is probably the first time someone has described the west coast of Ireland as "not cold enough".

(More seriously, the choice of Ireland will be for tax reasons)
You're unlikely to know there's a problem and do so.

Rust is reminding you of this fact, which is very nice.
Terrible news for the brand! I really would like to think highly of Lenovo and their products, but sadly they let themselves down time and again. I am hesitant to recommend their non thinkpad models on the basis of their construction - and this just adds to that on a different level.
> and they are making steps towards this with measures like pinning aren't they?

Pinning is an unscalable hack around the core problem.
LKML: Linus Torvalds: Linux 4.0-rc1 Out
Surely Mossad are somewhere in there too? I can't imagine an intelligence agency not having an interest in this.
The C preprocessor, combined with the EVALn macros, is Turing-Complete-up-to-N-iterations, so not quite a bar stool.
Jingoism.
Maybe, because Denmark has a huge supply of wind energy?
X-Ray Vision with Only WiFi Power Measurements
Lets hope the judge chooses the side of Lenovo, It would be devastating if windows/gnu/linux/apple gets sued every time they have a security flaw in a product.
Hah. It's true. We're not real engineers either.
When were you last sold a machine with Linux and spyware pre-loaded?

Right, never.
Thank you, I was looking for this.

However, in any case, there are already so many CAs, that I am wondering what is preventing governments of forcing one of them to provide a fake certificate that suits their needs for national security reasons...
....what? "windows/gnu/linux/apple" - what does any of these companies/products have to do with this? Lenovo put its customers at risk, if a judge sided with them it would be atrocious.
ETH Devise “Synthetic Fossil” to Store Data Using DNA for Millions of Years
I'd be interested to know why if you have the time.
I've written a simple script to remove these from OSX: https://github.com/sammcj/delete-unknown-root-ca

Pull requests welcome, Don't run unless you know what you're doing, YMMV etc....
Depends how you look at it. There's lots of crossover between people with scientific and mathematical aptitude, and mathematics is extensively used by science, and mathematics is often lumped in with the science faculties at universities, but at some philosophical level, mathematics and science are totally different disciplines.

Mathematics proves theorems rigorously by a priori reasoning, given some set of self-evident axioms and rules of inference. The ultimate test of 'truth' in mathematics is just whether the theorems can be proven from the given axioms.

Science attempts to describe how the world works, through experimentation and theorising. The test of 'truth' in science is whether the theory matches with all the known experimental results.

Mathematical 'truths', once discovered, are essentially tautologies and are always true, no matter what (unless a mistake has been made in a proof, which does sometimes happen). Scientific 'truths' are theories - as-yet unfalsified guesses about how the world works that might be proven wrong by the next experiment someone does.
> unsafeCoerce

This is the exact opposite of dynamic typing. Dynamic typing doesn't throw away type information, it uses it to perform safe conversions, not unsafe coercions.
It wouldn't be much different than certificate pinning is today, just a crowdsourced version.

Sure, the CA system should be replaced altogether, but that's going to take quite some time. In the mean time I think the idea I mentioned could be useful to avoid invisible man-in-the-middle attacks by the CAs. It only requires work by the browser developers, while changing from CAs to something else will take a major effort by everyone who's running a part of the web.
Spying is often seen as a necessary requirement to diplomatic stability. I have much more of a problem with blanket surveillance than this targeted spying to be honest.

Lots of these revalations are being published by a non-US security company. The US security companies have either missed these security issues, deliberately ignored them, or have been forced to keep them secret. In my opinion, the fact that there are still some non-US IT security companies is a good thing.
> Also some sweeping gender statements are actually true, such as men being more prone to violence than women.

Well, the alternative explanation is that men are simply better at violence than women (because we're stronger).
E.g. men commit more suicides than women despite women attempting more. Also, domestic violence is roughly equal (60-40), but I imagine women are hurt worse more often.
> the "unityped" argument.

Which is a gross, deliberate misunderstanding of how dynamic typing works.
I was on her side until I read the part about being pressured into an affair. Sexual harassment is a real, horrible thing. But an affair with a married dude??? As an educated executive level woman??! That is some bs and poor judgment. And unfortunately it casts poor light on the rest of her claims.
Mathematics doesn't use the scientific method. A lot of people think that makes it not a science.

A bachelors degree in mathematics can be a Bachelor of Science or Bachelor of Arts, and some institutions give out a Bachelor of Mathematics.
"Hygienic" macros are more annoying than they're worth.
“Linux Is Eating My Ram” Myth Busted
"Connect the attacker machine (host) and the victim (target) with a FireWire cable"

What keeps the target from starting an inception attack on the host?
>You have to trust the vendor's interest in making a profit. Nothing wrong with that :-)

Sometimes there are conflicts of interest. We have documented cases of 3-letter agencies paying companies to leave bugs or unsafe options in code. Sometimes the backdoors may be more valuable than the product itself.

I suspect many corporate clients found out these days that their SSL MITM software they used made their infrastructure vulnerable.
I could see another weaker but immediately implementable approach to just issueing a list of domain-root certificate maps that someone would have to manage :

Why couldn't browser issue a warning whenever the root CA for a known domain has changed compared to previous browsing sessions ?
I suppose MITM attack are targeted and probably depends on the network you're using. If there's a difference between the root certificate for google.com when surfing with your laptop at home or from the office, then there's probably something wrong.

It's a bit similar to what ssh is doing with cert/ip associations.
Government and industry have betrayed the Internet, and us.

By subverting the Internet at every level to make it a vast,
multi-layered and robust surveillance platform, the NSA has
undermined a fundamental social contract. The companies that
build and manage our Internet infrastructure, the companies
that create and sell us our hardware and software, or the
companies that host our data: we can no longer trust them
to be ethical Internet stewards.

This is not the Internet the world needs, or the Internet
its creators envisioned. We need to take it back.

And by we, I mean the engineering community.

https://www.schneier.com/blog/archives/2013/09/take_back_the...
We should come up with a scheme where certificates are signed by multiple CAs (or you have several cross-linked certificates). If one signature changes but not the others, you know something is wrong [1]. It would be beneficial to use CAs from different political blocks, like one from the US, one from China, and one from the EU, to reduce the risk of collaboration.

Of course, a MITM attacker would just strip all certificates and send only theirs along, so you have to have a way to enforce multiple signatures from different blocks. Maybe a httpss url scheme or something.

[1] Something like:
http://security.stackexchange.com/questions/6926/multiple-ca...
Great, until an OSX update :/
I've been saying for years that this was a major design flaw; it's great to have a practical exploit to point to.
Why Is There No Uber for Prostitution?
There's a significant difference between Superfish, an intentionally installed application that deliberately mitigated security features in browsers to inject ads, and a security flaw that arose from poor design or a lack of good QA process. The latter are sloppy but ultimately an inevitable part of complex design; the former is an obnoxious lack of respect for your customer that deserves a serious penalty in damages and a complete reset of your brand's goodwill.

That said, I think there's an argument that customers being in a position to sue over security flaws might not be such a bad thing. It might push companies to make security and privacy important features rather than second-class add-ons.
Yeah exactly, band-aid for those that are interested / concerned - certainly not a fix.
I don't know if anyone confirms, but my default installation of Kaspersky Internet Security tried to MiTM my traffic as well. I couldn't download some packages (Android SDK I think) beacuse of certificate error. It then turned out some default feature in KIS installs own certificate and proxies secure traffic through
Well thank you, I doubt I would have come to such conclusion by myself. Are you saying that "turn away 0.1% of your customers" is a useful approach? Well, your call, I guess.
Source? Highly relevant to my interests...

EDIT:

Forgot that was a quote, and used Google — for anyone who's interested: http://aws.amazon.com/about-aws/sustainable-energy/
Aggregating rx observable collections with dynamic data
It may be immature but this Adi Pinhas guy sounds like he's a bit of a dick: http://www.home.superfish.com/#!about-us/c1eqi
Oh, I forgot they could monitor the loading of the tracking file!

So that's it, I can't do that in CouchDB.
Which is why people shouldn't use Ubuntu and vendors shouldn't pre-install it.
Any of the things in the "Attack mitigation" section.
That's what certificate pinning is for. And of course, Chrome already refuses to connect to Google if the certificate doesn't match what Chrome expects.

http://tools.ietf.org/html/draft-ietf-websec-key-pinning-12
EFF's SSL Observatory [1] does collect information on certs used by SSL enables sites for research purposes.

[1] https://www.eff.org/observatory
> Was it really necessary to add "class" syntactic sugar?

Necessary? No. But look around at Javascript projects, and see how many "reinventions" of simple inheritance you see. Often poorly done and/or buggy. Even more often they're hopelessly inconsistent.

What a lot of the ES6 changes does is codify ways of doing what "everyone" has been doing in mutually inconsistent ways.
Doesn't Windows 7 download root certs from Microsoft's repo on demand? I.e. 38 isn't the total number but the total actually seen by that PC.
This looks like statement based replication, which can come out of sync if you're not careful to make your statements deterministic.

Any use of random(), as a trivial example.
Any argument you make will contradict itself, because you make it a subjective matter. So choosing superfish could be seen as a lack of good QA process.
Show HN: GitHub Notifier – Emails for stars/forks your repos and new followers
You may want to read more carefully next time. "A Harvard Business Review study from 2008 found that as many as 50% of women working in science, engineering and technology will, over time, leave because of hostile work environments." The article then expands on that definition, including as journalistic and not scientific essays tend toward, real interviews from credible first-hand sources.
I created this because I was frustrated with losing interesting events happening on GitHub (GitHub doesn't send you emails when somebody stars or forks one of your repositories or follows/unfollows you).
It started out as a simple script that sent me an email, but then I thought that maybe this was something that other people could find useful, so I turned it into a website, picking up ruby again after a long time in the process.
You can find the code on GitHub: https://github.com/andreausu/github-notifier (it's not pretty, I know)
I am the cofounder of Codeanywhere https://codeanywhere.com/ , would love your feedback. :)
Your job is not to tell us how to do our job
This is the same file as provided by cryptome.org (H.264 1280x720 HD, Main profile, 4Mbps, Audio English AAC 300Kbps):

magnet:?xt=urn:btih:77e1a18941186c1e6441721df91183d2a339d103&dn=Citizenfour+%28Edward+Snowden+story%2C+by+Laura+Poitras%29+%5B720p%2C+h264%5D+%5BIsohunt.to%5D&xl=3636600806&dl=3636600806&tr=udp://9.rarbg.com:2710/announce&tr=http://announce.torrentsmd.com:8080/announce.php
> Swift is not garbage collected in the slightest. ARC is not garbage collection.

Reference counting and tracing garbage collections are two ends of the spectrum of ways to handle dynamic allocation graphs (aka "garbage collection").

http://www.cs.virginia.edu/~cs415/reading/bacon-garbage.pdf

> In any case, I don't see what garbage collection has to do with safety or the borrow checker.

The borrow checker is what allows Rust to be safe and performant without garbage collection. It's literally the feature that gives Rust that power.

> I think "you just promise the compiler that it's safe" is an accurate summary of that feature.

A lot of programming (not just in Rust) is like this: the programmer promises that the library interface they expose does what they say it does, promise that any use of ctypes (in Python, for instance) won't corrupt the interpreter state, etc.

This isn't much different. The standard library will follow those that guidelines (i.e. something in the standard library implements Sync if and only if it satisfies that definition) and we expect library/application authors to do the same. The rule is to provide the programmer with assistance, it's not just to be annoying. It's your own fault if you shoot your own foot off by disobeying it (hence throwing away the assistance the compiler can provide you).

In any case, Rust has the `unsafe` keyword, a structured mechanism for making promises to the compiler, allowing one to easily see the possible locations that could cause memory corruption/unsafety. Overriding the compilers judgement that a type isn't thread-safe is no different: it requires `unsafe`.

> the higher-cost fruit like multithread safety I don't want. I think those features are Bad (TM).

FWIW, I think the multithreading safety is the really interesting and awesome part of Rust. Pretty much no other industry language attempts to tackle the problem of writing safe, low-level, high-performance, highly-parallel/highly-concurrent programs. Rust's system for this is quite general and flexible.
I have uploaded the movie to my server, direct download, high speed:

http://www.pilgrimbreak.com/citizenfour-hd-high-speed-downlo...
At what point exactly do you think I flied off the handle? When I said their stance was terrible and that I was disappointed? Or after the flood of condescension that came my way?
Show HN: Little tool to find prospect's email address
Its a performance plateau because even if features continue shrinking (and they will), the distance between said features isn't decreasing, due to said electron tunneling effect.
I guess most of nature is described by differential equations, starting with fundamental physics. So in the end, that statement does not add much. It is the kind of differential equation that actually matters. In this case it is a non-linear DE, which means that it is probably not really a fundamental process, but a more complicated, derived process.

Besides, there are also non-repeating patterns in nature that are governed by differential equations. Very basic examples are the temperature across a heated room, and the voltage across a resistor.
Side note: Page ranges should be formatted as 1044–1048, i.e. 1044--1048 in TeX. Since you already seem to correctly parse the range, using the correct dash shouldn't be too hard (couldn't really find the place in the code right now, though, so no PR, sorry).
People have to remove the software and the certificate. That takes time, and costs money, and so bundling the software causes harm.
"PrivDog recreates a key/cert on every installation" - I don't think it can be signed with a chain rooted at the Comodo CA if its regenerated on the installed machine, but would be good to confirm.
Ireland isn't actually a bad spot for this kind of infrastructure. Transit options are great because major transatlantic links actually make landfall in Ireland on the UK->US span. And the Atlantic seaboard has more wind than you could ever want (as my hair this morning will attest to ..)
Not loading the firewire driver is not an option, as the attack needs the driver.

I guess loading the driver with DMA disabled would be a good option, as I don't think the attack needs DMA on the host side. Not sure, though, after skimming over the documentation.
Bomb in the Garden (2013)
killing this one to change link
Where are the cables? Just a teaser?
Email has threading support. I can't find such feature in other communication tools
Interview with Magento Certified Developer Fabian Blechschmidt
1. How does the startup salary compare to your current salary?

It's 15% increase on my current salary.

2a. What is the startup option package as a % of the company?

50 Engineers already and company is of size 300. Options % is around 0.026%.

2b. What is the vesting schedule?

One year cliff and month by month.

2c. Also -- (i) how big is the startup? (ii) How much money have they raised? (iii) Where is it based? (iv) How much experience do you have?

They have raised over $50Million and bay area. I have 2.5 years of experience.
Do you have a link to a more 'official' announcement of this, please?
- listen to yourself, you cannot go against your fundamental nature, you can "surf" it to reach your goals
- speak your mind, with diplomacy, but don't stay silent.
- sweat.
I'm not sure how to parse that sentence (and I know it's not yours, no worries).

I read it as .. Apple will a) recover land previously used for, and b) restore native trees?
Hehe yeah. "We're going to release some things", as far as I can tell.

I'm not sure the point, lead with something interesting.

* Not to say I don't think it's worthwhile. Just a bit dry atm.