skysight-inc/HackerNews huggingface dataset:
Laws/treaties should not be solely judged based on how they deal with excesses. The point is that the impact on ordinary countries doing ordinary things is extraordinarily large. Looking only at excesses is similar to a "think of the children" or "but TERRORISM!" argument.

Besides, Russia and China aren't going to sign the TPP anyway, so those excesses are actually completely irrelevant to the effect this treaty would actually have.
Hey Chris,

Great to know Rand is hiring engineers!

I have worked with consulting engineers from Labor and Population department at RAND, and have visited HQ a few years ago. It is a great place to work!

I have a few questions about the position, could I send you email for inquiry? Thanks!
Obviously :-) If you're going after basic-auth-headers, you'd probably be sniffing the network.

> Authenticate once, generate a token, and use the token for auth from that point.

If that token is passed back and forth in the http url, it ends up at places where it's easy to find/intercept.

You can use a gazillion bcrypt rounds to store the password: they still send me a link to a page, including their auth-token.
Shotgun.
> many high quality sites are tested using automated testing suites (through Selenium, or otherwise)

Big sites like Google* and Facebook* work less and less reliable in IE11 (UI glitches, JS errors, CSS position issues). As almost all of their developers use OSX or Linux and most of the tests run on Firefox and Chrome, it's hardly a surprise. I loved IE since version 3 because of its native UI and its responsiveness, but as there will be no IE12 I will move on as well. Well, Microsoft could open up their browser engine "trident-edge" like they do with dotNet vNext.

* Google.com frontpage shows a unformatted sentence on top left corner for ca. 1 seconds, it seems like a JS loading race-condition. Every other week on FB a few minor features like selecting posts privacy groups are broken for a day or two. The React based search is unstable/broken on Android 2.3 as well, before that the mobile web version stayed already completely unchanged from 2010 to 2014. I don't want to blame them, as I guess the majority of users uses their apps and Chrome/Firefox.
Isn't GitHub hosted on AWS, which as a platform is pretty significant.
I haven't heard of any successful company that started like this. Websites like cofounderslab are mostly wishful thinking. People create a profile in the hopes that somebody with a lot of money and time will come and give them an amazing opportunity. Nobody is actually interested in risking it all for a startup. They just want somebody to make their lives easier.

Finding a cofounder is harder than finding a girlfriend. And once you commit, you're married for the lifetime of your company. So don't try to actively search for a cofounder. Because the odds are against you. Instead, start by yourself and see if interest builds up in time. It's much easier to find partners after things start rolling into place.
Whenever I leave home I lock the door and hide the key somewhere. If I leave for more than a day, I give the key to my neighbor. That can come in handy, like once I forgot the passport at home, and the neighbor could get it and send it to me. But I live in a small village where everybody knows everybody. :) Also, I don't have anything expensive and that I would miss, except maybe my laptop. I'm more worried of somebody stealing my axe if I forget it outside than of somebody breaking in.
I wouldn't exactly call Samsung's flagship devices "great" either. Flashy hardware, but TouchWiz is so absurdly slow and bugged that the UX is worse than on non-modified Android phones half as expensive.
Not living in the USA.
>but just saying that we have successfully automated a whole lot of things (think self-driving cars, for instance)

We have not automated cars. We can automacar driving under very specific circumstances, but they're nowhere near ready for primetime.
We don't have anything beyond locked doors either. If a drug abusing burglar decides to make some cash for the next hit an alarm isn't going to be a show-stopper anyway, and at least here in Sweden we'd be paying up to $500 per month to some guard company that at best shows up after the burglar is already gone.

The real damage in a break-in for us would be the feeling of being violated and feel unsafe in our own home, and that's not something that an alarm or guard will be able to repair.
Yeah, to be clear, I think this was inexcusable, even if it wasn't outright malice, and that expulsion is the obvious right answer.

But what's the alternative story? Someone knew what they were doing, wanted to MITM some users, and got a ... three-week-long intermediate certificate? (Which is far shorter than any online intermediate CA has, and those are plugged into networks, although probably also under armed guard.) And tipped their hand to Google barely a week in? Knowing that there was a serious risk to CNNIC being killed off from the roots if anyone at all noticed?

If CT has the benefit of informing bad actors that they'll be found out, then it's certainly a major one, but I find it hard to believe that anyone trying to MITM actual users wouldn't already be aware that Google is already doing this, and Chrome snitches on certs that verify but don't match hard-coded pins (e.g., for Google's own websites). This is exactly how the last MITM or two got caught.
Ask people. The best way to ground your perspective is to ask your colleagues (and boss) clear questions about how they think you are doing and how you can improve.

Obviously do this in private as, unless you have an especially open team, people are unlikely to give honest feedback in front of an audience.
Grandma keeps the house safe.
Groups of individuals are shared sets of genes anyway.
I know it's a bit off topic but I would seriously love to have been a fly on the wall when Apple secured a deal with the likes of China Mobile. There must be conditions attached to access to the largest carrier in the world that just happens to be owned by the Chinese state - especially for a US company with their data collection abilities.
I have an alarm system with passive sensors on each side of the house. So when I go to sleep, I activate the outside passive sensors.

There are also passive sensors inside the house so if I am not at home, I activate everything using a remote control. The system is pet friendly so my cat can move around freely.

I built a CCTV camera and installed it above the outside gate. It's more of a DIY camera than anything else, but it looks pretty good. I used a halogen light fixture to hold a Logitech web camera, and I've created my own adapter to convert the USB output to an ethernet cable setup, and back again to USB before it gets to my home server (which is in the garage). This was the cheapest way to do a USB webcam over such a long distance (8-9 meters).

I'll write a blog article about the camera project if anyone's interested in the details.
> Also, the minimum warranty should be, at least, 2 years.

It is in the EU. People (me included) are still plain too lazy to return products.
I bought a piper (http://getpiper.com), you can integrate with some z-wave accessories to monitor the door, windows, turn on/off lights or device..
Is nice, whenever you want, you can connect and see whats happening in your house, see statistics (only for the last 48h) about temperature, humidity, light, noises, etc
Unfortunately is far from being perfect, a basic feature like automatic activation of the alarm during the days is not possible (and to me seems a quite basic feature for an alarm system).. This, together with the fact that activating/disabling the alarm takes too long, ends with me not using the alarm system at all, except for long absence from home
Having some public API to play with would be nice too..
>the promise we make to the reader is that if you trust us to filter and distill the news, and if you give us an hour and a half of your time — which is roughly how long people spend reading The Economist each week — then we’ll tell you what matters in the world and what’s going on.

Except then somebody else mentions something else that the Economist hasn't talked about, or shares another article on Facebook and then you still have to go read that, or be left out.

Plus just getting your news once a week: 9/11 happened on a Tuesday, you wouldn't know until friday. The US president is elected wednesday night, you don't know until friday which means the people you talk with are going to assume you are a fool.
On all platforms?
Edit: My intention was to get some input on how to properly use auth-tokens.
Health Videos Are safe?
I don't know that it is "key US Internet infrastructure", but it's important to a lot of developers and companies. Thankfully GitHub handled the attack pretty well.

Disclaimer: I'm not sure what actual usage stats are like for GitHub.
I'm not sure that's quite what they were thinking. A previous proposal was:

>The deal, which would allow Google to avoid fines of up to $6 billion, requires the company to tweak the way it presents search results to address concerns that it favors its own services over those of rivals. Under the agreement, when Google promotes its own services and products—such as hotels, restaurants or shopping—the services of three rivals would be displayed in a comparable manner. The rivals would have to bid for the space through an auction.

(wsj). They've dropped that idea - not sure what's next.
Are you talking about personal security or security of your posessions?
The Cassandra benchmarks were only for ~1 million writes/sec. I think you'd need to support around 1 billion writes/sec for this application. I think it's possible.

The "privacy concerns" weren't necessarily my own, I just anticipated that others might have them and therefore not adopt the system. For me, the point was to share what sites you were visiting because you'd be annotating (well, chat/message-boarding) those sites with others. Additionally, I thought it would be cool to see who was where at a given time, what sites were popular, or which pages people found particularly interesting (interesting enough to visit anyway) at any given time.
Insurance, but not too much. The expected value of insurance is generally negative, so only cover things you can't afford to lose or you think your risk is much higher than the insurance company estimate.

Cultivate a healthy attitude towards your possessions° - don't let them own you, and remember that it's just stuff at the end of the day.

° Incidentally, in my first draft I wrote relationship, not attitude, which is exactly the problem!
We have two dogs. By far the best deterrent that you can get. The alarm goes off when someone approaches the house, let alone tries to open anything. You can't sneak up on them. They're also furry and warm, which is a plus.

One thing to note is that burglars don't fixate on a house or apartment. They are looking for the easiest, lowest-risk house. Dogs immediately upgrade your house to "harder than the next house over."

I'm not worried at all about someone breaking into our house while I'm away. They can have my shit. I'm much more concerned about someone trying to invade while I'm home, because that's what gets people perforated. Dogs are an immediate deterrent to that.

Other than that, we have a couple guns from when my girlfriend worked at a prison and had psychos threatening her life on a daily basis. She keeps a taser in her center console of her car, I keep a heavy tire iron in the door of mine. That's about it.
While this is a very interesting read (learned a thing or two), the author's conclusion is a bit suspect.

Using my custom http-traceroute, I've proven that the man-in-the-middle machine attacking GitHub is located on or near the Great Firewall of China.

Although suspicious, it seems one would need to know a lot more about China Unicom and their infrastructure to say this conclusively.
Internal and external burglar bars on all windows, and an outside perimeter fence. High walls on side and back, topped by barbed wire. Security gates on all doors. Burglar alarm linked to armed response, and outside perimeter beams. This is fairly standard in South Africa for standalone homes in decent areas. Much of this is to protect against home robberies (violent home invasions).

Many people have internal gates separating sleeping areas from the rest of their homes, as well as CCTV and electric fences. If you live in a gated estate with security, you can afford to forgo some, but not all of these.
Advertising doesn't work because ads are so badly targeted. For kicks I turned adblock of on Facebook and the offers are so generic and useless, "oh you are a single guy you must be interested in this subpar dating service", you must be interested in saving money on heating from this company 100 miles away, you must be interested in a Bitcoin miner, are you really sure you don't want to sign up for a subpar dating service, here is this game that you can play it sucks like all the other free to play games.

The only company that can actually target ads is Twitter.
Ask HN: Easiest way to watermark everything as if it were currency
Background: http://www.cl.cam.ac.uk/~sjm217/projects/currency/

I'm working on a project where I think it would be interesting to make it take more effort for people to scan/copy/photoshop the images and documents produced by my program.

Basically I want to trip the currency detection heuristics with things that aren't and don't look anything like currency.

Any suggestions?
Either way, two key things you should have, IMO, are:

- renter's insurance

- off-site backups

Sometimes it's best to focus on mitigating risk. If someone were to break in and steal something, would you be able to replace those things?
Here's how it's done in Italy:

* Big, heavy solid doors. These things are bulletproof. It's a bit ridiculous, because I think smashing down the front door is probably not the most common burglary technique, but still, here you won't find any of those doors with the doorknob right next to a big plate of glass.

* Serious shutters. They're called 'rolling shutters' in English, and standard on houses here. http://www.topsystem.biz/wp-content/gallery/tapparelle/pvc4.... - these are not the wimpy 'venetian' blinds in the US, but sturdy things that will keep out the sun in the summer, cold in the winter, and when locked at the bottom, anyone but the most determined intruder, who would still likely need some good tools and time to boot. I wrote this a few years back: http://blog.therealitaly.com/2007/08/09/window-technology/
Location is everything - move somewhere there is no crime.
Failing that, get some IP cams setup and archive the footage offsite.
Why the sudden 180-degree U-turn?

I certainly am interested in talking about this intellectually, and presumably so were you when you just said "We can talk all day about politicians lying in front of congress. Would you like to?"

Yes, I would like to. Why do you think I'm not interested in talking about this intellectually? Do you not believe me when I say that? When I asked you a direct question in response to an accusation you made, and you dodged the question by trying to go meta. Did you not mean what you said when you invited me to talk about lying politicians all day?

To me, it appears that you are the one who is not interested in talking about this intellectually, so you tried to change the subject to attacks on Snowden's personality, then when that didn't work, you avoided answering a simple question by going meta, then when that didn't work, you projected your own disinterest in having an intellectual discussion onto me.

If that's the best line of argument that NSA apologists can come up with, it's no wonder they're having problems recruiting honest intelligent people.

You claimed that "They changed the ending, and flipped the protagonist and antagonist. The story is not accurate." Who do you mean, exactly? Please explain your accusations, or withdraw them if you're unwilling to support your unsubstantiated claim that the story is not accurate.

All you've offered as evidence against the story so far are your ad-hominem attacks against Snowden, right out of the US Government's playbook to demonize him and distract from the real story, just as Snowden himself predicted.

To continue having an intellectual discussion, please answer my question:

Is James Clapper a protagonist or antagonist for lying to congress?
Hack your way through the microservices revolution
MDNS can be abused to amplify the traffic of DDoS attack
Wow, that's pretty extreme. Is it nerve wracking living in an environment where that level of security feels necessary? I can imagine it would be stress-raising unless you were used to it?

There'd be a low risk of minor burglary in my area, but the risk of anything violent would be almost nil.

I lock the doors and cross my fingers.
Because they are a cartel. It the marginal price for a transaction is pretty close to zero, so the fact that the price is noticable means that credit card transaction are not operating in an efficient market.
We use one dropcam pointed at the valuables in the house (the living room with all the monitors and computers etc.) Dropcam offers a lot of sensible features like camera schedules and location sensitive activity alerts that make the experience of buying the $200 device worth it. There's also night vision and a microphone + speaker. Needless to say, everything works seamlessly across devices, and you can buy 7-day cloud storage for an additional $99 a year.
It's been said before in previous discussions, but have not seen it here: Just make your own 'password cracking cluster' to make sure you can handle the auth workload with ease.
I have several of these.

http://sockitz.com.au/m/index.php/classic-sockitz-white-usb-...
Hey, amateur here - but has anybody tried to do a database where your edge servers literally run jit code? Like, you'd define a predicate like an OpenCL kernel, as a small ball of code taking a predetermined set of constants or per-row variables, then presumably push this as LLVM bytecode and let the edges compile it into locally appropriate loops (probably with caching). Is the problem there that it would become hard to apply optimizations that depend on awareness of data structure at a higher-than-row level?
It's pretty common for companies to buy a small license just to experiment in the lab. At the end of the year you have some extra discretionary dollars, why not make a small purchase with startup that came by a few months ago?
As others have said, your skillset is very valuable for all sorts of things. For example as a community manager, or as a documentation writer.

I would love to get your help with writing documentation for the Phusion Passenger application server. We're currently overhauling our documentation (https://github.com/phusion/passenger_library). But as a developer who has been working on this project for years, I feel that it's getting increasingly hard for me to understand how my users think. I've become "too good" if you can call it that, so sometimes I struggle to understand what problems users would have, or what they wouldn't understand. Your skillset would help a lot here!

Please contact me at hongli@phusion.nl if you're interested.
Does anyone knows the tech behind cloud code? how do they execute javascript safely on the server ?
Place your content on the world map from different sources
>Hm. Conventional wisdom is that at least for websites making money off of adsense, you don't want to advertise to Engineers, because like most sophisticated customers they don't click on ads.

Engineers will click on ads for products that are interesting for them. The fact that they won't click on most ads are an issue with the quality of that ad or product.

Digital Ocean advertise in my Twitter feed, but I am already a customer of theirs, otherwise I would be very tempted to click.

Most ads and most products suck so badly, but that isn't an issue with the advertising model.
Batteries may appear quite humble, but they are at the core of just about every technological advancement we have at the minute. Cars, laptops, phones, wearable devices.. they all depend on batteries. At the minute battery life is a real bottleneck for us. We are turning into a nation that plans their life around moving from charging station to charging station. Batteries are heavy and they don't last that long. The next truly world changing advancement is going to have to involve making access to energy much less heavy.
unsalted:

username | sha256 hash
john123 | ef92b778bafe771e89245b89ecbc08a44a4e166c06659911881f383d4473e94f
joe456 | ef92b778bafe771e89245b89ecbc08a44a4e166c06659911881f383d4473e94f

salted:

username | salt | sha256 hash
john123 | ponies | 98d4c01710b2b775e41b0bf4984f0cec7621ae1dfc4304047b196af46ed589b2
joe456 | beards | 0f7c74279db5daa1f4de41cc7f6acc94651da754c41675dcde8dcf151d14f5bf

their passwords are all `password123`
I actually work in a completely remote team, in the sense that everyone works remotely (about 50 people). So there is no hierarchy of remote people being second-class team members, as you seem to be describing.

For minute-by-minute chats we use IRC, and that works well. For longer conversations, mailing lists. And we have twice weekly video conferences, and twice yearly physical meet ups.

This works well. I suspect it wouldn't work well if half the people were sitting in a room together and had conversations that were not accessible to the remote workers.
GitHub used to be hosted on EngineYard in the beginning, but later moved to bare metal servers at RackSpace: https://github.com/blog/493-github-is-moving-to-rackspace
This describes so much what I do and like. Your list is really useful for me. Many thanks!
I do know someone whose primary focus is on the minimal part. Not my cup of tea.
No. Wrong. I'm not affiliated but clearly they are keeping the logs around for 24h during the beta-testing of the service in order to troubleshoot any bugs founds. That would be a lot harder to do without logs.

But they're not claiming to offer anonymity during the beta period I imagine, once the service is out of beta then they claim their service to be secure and anonymous.

You're either splitting hairs or being uncharitable.
Google is inaccessible in China. It's banned by Great Firewall.
So, slightly off-topic, but serious question: I don't use FB on principle (tracking, walled garden, evil in various ways), but I also don't know how to convince my "normal" friends to communicate in other ways... Does anyone have suggestions to avoid falling out of contact with faraway people? I emigrate every now and then, and I have yet to maintain connections after having left another city. It's rather frustrating, but is something as evil as FB or Skype or Google+ really the only way to approach this problem?

EDIT: I've re-activated my Diaspora account, but obviously no "normals" are to be found there ;) Perhaps I should start campaigning.
> systems in place which subsidize water use in agriculture

Once this is said, lawmakers can complain all they want about depleted water resources. It sounds like "let's take water from citizens and give it to farms"...
That's not a healthy attitude. You don't have to be attached to an object to be averse to losing something of monetary value. It's like you're trying to be weird on purpose.
bike friendliest city I know of: http://www.opencyclemap.org/?zoom=12&lat=48.01122&lon=7.8337...