skysight-inc/HackerNews huggingface dataset:
Bletchley is actually a different piece of our infrastructure: it protects keys by storing them in hardware, whereas Keywhiz is aimed at distributing the secrets that apps really need (API tokens for 3rd party services, eg).

We presented Keywhiz at Baythreat in 2012: http://www.baythreat.org/2012/speakers.html I'm not sure if that was recorded, though.
It's better for them to learn how to deal with abusive cops now when they don't look old enough to get shot for being disrespectful.

Bullies with guns are more and more common and that won't probably change when your kids grow older. Prisons need to continue to bring profits and there's too much money to be made in justice system and enforcement. Learning how to deal with self-righteous maniacs with guns might save their lives some day.
I feel that there are ways to communicate that don't involve stepping on people's toes, more like showing them that they are stepping on their own feet with their current solution.

Changing culture isn't a job for a manager, it is a job for a leader, and I have seen that it is usually people with passion that see changes.
I'd say writing off an entire language with a vague anecdote is worth at least a little scrutiny or clarification.
It's more like an author starts contributing to an open source project, and everyone things he is contributing under the license. Then he turns around and says "what, no, this is copyright me, all rights reserved".
Why would you make legal arguments about an area of the law you don't know anything about?

What is at issue here is the copyright, not the trademark. Trademarks must be actively enforced or they are lost. Copyrights must merely be registered (which was done in this case) and can be enforced essentially whenever the rights owner chooses to enforce.

The purpose of copyright is to protect the creator's right to profit from his creation. It's fine that he didn't go after the initial copiers on 4chan--they weren't profiting from copying the troll face. If you had RTFA, you would know that he's only going after those that are earning income (i.e., charging money) from using his creation, which is perfectly fine, legally and morally.
Good thing nothing like this could have happened with electronic vote tabulators.
Coincidentally I just stumbled upon this service which integrates with FB chat to offer OTR encryption a few minutes ago:

https://blog.crypto.cat/2014/05/cryptocat-now-with-encrypted...

Anyone have any knowledge re: the legitimacy of this?
Even experts can go terribly wrong; there are known embarrassing attacks that invalidated algorithms considered rock-solid for 10 years by some bright 15-year old students. Would you prevent those brights from tackling on better ways to do crypto because they aren't "top experts" yet? Most likely they will just run away in disgust and park their capabilities in less hostile field.

Celebritism doesn't really work in science; it only prevents progress.
looks good, only 7 years late to the game.
Leasing an Apple Watch Better Than Owning?
No, we couldn't cultivate algae. You don't get good at that stuff until after you've already had an industrial civilization for a hundred or more years.

Where will you get the "transparent bags", for instance? Sure after the algae fuels are going good, presumably you can make anything you need... but that's the bootstrapping problem again.

Do you know what you needed to start using petroleum? 18th/19th century pumping equipment. Can you bootstrap biofuels with that?
Java, is it the thing they used to sue on API copyright? Good demonstration of how to mess with "open-source" IMO.

If you remove what they got from Sun, what reminds?
NPM also offers NPM enterprise, which is $20/user/month. That adds up if a few big companies want a privately hosted NPM infrastructure.

I'd assume they continue to launch more services as time goes on.
Show HN: We Just Launched Office Delve for Android and iOS
Hey, Office Delve is a new Office product from MS. We just launched our mobile apps today

iOS: https://itunes.apple.com/us/app/office-delve-for-office-365/id969258781?mt=8

Android: https://play.google.com/store/apps/details?id=com.microsoft.delvemobile

Would love some feedback on this, questions? Just ask them.

Note: It's only accessible for Office 365 subscribers
Note 2: I'm one of the developers
Southeast Asia and India Targeted by Chinese Hackers
Lots of people are ok with that, especially in the US. That's why it's possible.
There are many more details in the original Des Moines Register story:

http://www.desmoinesregister.com/story/news/2015/04/11/prose...

Essentially, the strange circumstances of the claim for the winnings was investigated, and that trail led to enough suspicion that they tracked down the surveillance video of the ticket purchase. They released the video publicly to help identify the purchaser and were subsequently pointed to Tipton.
Well, consider that Silex and Slim have been out for a while already and no, not really. I think it's about having options more than anything else at this point
> You can even point to a specific commit hash. But no, it doesn't read any of the versioning. What if two different branches have the same version number?

The semver mechanism would be based on the tag, so it would not work when pointing to a specific commit hash (and you wouldn't want it to).

> ... You'd still miss out on the prepublish hook - one of the major reasons I've looked into using NPM Enterprise.
Sometimes your package needs to do some housekeeping _before_ you publish, and the files generated by that should be distributed -- but not checked into source control.

That's a nice feature and all but not required to have proper git support.
> We have not "deforested the planet". What are you running on about?

Take a look at the before and after pictures. Forest covered half of North America. It's all gone. Prior to that, covered most of Europe, the British Isles.

We've deforested it. It takes something on the order a million years for that to recover, supposing it does.
I could not disagree with you more.

Maybe you could suggest what might be "more helpful" but I personally could not think of anything more useful that than telling people to not do something that puts their customers' and their own critical information at risk.

Good crypto algorithms don't get stale or anything. The point is they're fundamentally difficult.

Perhaps you could give a single decent reason for rolling your own crypto algorithm, vs something as easy as 4096 bit RSA or something.
Endless Launches Kickstarter Campaign for Affordable Computer
Foursquare unveils Pinpoint to show you ads based on where you've been
How did anyone verify that this guy actually created Trollface?
"Strongly Anti-Apple Bias here" was something you assumed that may or may not be correct.
> We have not "deforested the planet". What are you running on about?

Take a look at the before and after pictures. Forest covered half of North America. It's all gone. Prior to that, covered most of Europe, the British Isles.

We've deforested it. It takes something on the order a million years for that to recover, supposing it does.

> If you have energy you can make fossil fuels from air.

We're talking about a scenario where they won't have the energy to do that. It's a bootstrapping problem. Everyone commenting here is saying "but that's ok, we'll have all we need to make this fancy stuff"...

When the problem itself is posed as "what if we no longer have all we need to make fancy stuff".
Elegant tests with Truth Tables
every year or two I'll give nibs/storyboards another go for a toy project. Usually a few days later I'm deleting them and re-doing the layout in code. Plain old frames or something like AutoLayoutShorthand is easier and more flexible.
> His intent is opaque and irrelevant

That's fine; I was just responding to your assertion that it was the "(then) CEO of Google Inc" saying things.

> What is relevant is that it is, and has been for a few years at this point, a matter of public record and declaration that you do not have "a reasonable expectation of privacy" when using certain internet services.

You just skipped every single one of my points. You're taking a limited claim and turning it into histrionics. Your expectations of privacy do not work that way. Please re-read my comment above.
Agreed. It was very easy to setup and implement into my web application.
For anyone who doesn't understand this reference, there is a massive social experiment going on at Reddit: https://www.reddit.com/r/thebutton
He was apparently authorized to access the computer, ostensibly to adjust its clock. The point of the USB key theory was that he could use it to manipulate the computer's software quickly, not that it would bypass anything.
Pinpoint
If I develop something and get it standardized, it's no longer my technology?
No strawman here. I would prefer that nobody but the origin host can deliver content as the origin host.
Pocket Celebrates 3rd Birthday by Bringing Pocket to More People and Places
That's a good idea, I'll give it a try.
Just to help those that aren't familiar with the acronym:

IRB = institutional review board, which commonly also includes ethics committees

http://en.wikipedia.org/wiki/Institutional_review_board
I think baldfat was talking about themselves. They've got a strong anti-Apple bias, but still think Apple's got a decent history of opensource.
Any work done in 2.0 for improving aggregation performance?

The last time I tried with 1.16, I gave up my testing when even the simplest aggregation query (count + group by with what should be a sequential, streaming scan) took literally minutes with RethinkDB, compared to <1s with PostgreSQL. Rethink coredumped before I gave it enough RAM, after which it blew up to around 7GB, whereas Postgres uses virtually no RAM, mostly OS buffers.
I did a post last year on writing websites in F#. I personally recommend doing everything up to the API layer in F# e.g. restfully, and sticking to something like typescript on the client side. If you want a full F# end-to-end story check out something like Websharper or one of the F# <> JS cross compilers.

https://cockneycoder.wordpress.com/2014/09/03/lightweight-we...
Okay, this is how I'd ad-hoc implement the scheme I described without the security problems you are commenting. A and B know each other and exchange the custom cipher securely. Imagine they each have a Raspberry Pi which does nothing else then to take each IP package sent from the other side and reverse the custom transform on the data. For each package that it sends to the other party it applies the custom transform to the data. Now A and B can route their internet traffic through their Raspberry Pi and get security by obscurity for their communication on top of the usual security. Even if the custom transform is simple, it's overwhelmingly probable that no automated TLS-break-tool will be able to break the custom transformed TLS traffic to the other party.
See, all of this makes me wonder how smart this guy actually is. It feels like he had a half-baked plan, but being a security chief for the lottery, he should have known all of the checks they have to go through before someone can claim a prize.

It seems like this type of scheme is really, really hard to pull off because of financial records retention requirements. No matter what you do, the money trail will catch up with you. Unless you're a drug cartel laundering billions through HSBC. Then you get away with it because the scale is so audacious, the justice system doesn't have any way to deal with it without taking down the global financial system.
I just downloaded it, and I have to say... this plugin is really cool and extremely powerful.

Two things:

1) It needs to be more clear that your data needs to be in a "table" for the plugin to work. Unless I'm mistaken, the only place that is stated (except for the tutorials) is embedded within the screenshot on the homepage. Add a help or FAQ page, and highlight this point!

2) I'm not a fan of the personal license having restricted use in a domain environment. I have a domain controller in my house, and many of my IT-professional friends do too. My house is not a commercial space. I like the software, and I would definitely pay $28 for a license, but I think $50/year is too steep to be able to use this at home.
So if there were a class action lawsuit representing all 4chan users targeting the same individuals/companies that the artist is, then you'd see that as fine?

Note: not aggressive/flippant - I understand best through examples and hypotheticals. I am legitimately curious, because in my mind my original post seems a fair analogy to me and I want to know what I'm seeing differently than most of the commenters here.
Um, no. http://w3techs.com/technologies/overview/programming_languag...

Currently 82%, last time I checked it was 83%.
>enforces the culture of elitism in information security

The NSA is elite. Nobody has any business trusting you to outsmart them unless you are also elite.

This is like complaining that nobody will bet on you to defeat Gary Kasparov means there is a culture of elitism in chess. Of course there is. It's a game of skill. Other people are more skilled than you, by a lot, and you're probably going to lose.
Web-based email was launched in Q1 1995 actually.

http://en.wikipedia.org/wiki/Webmail

So it doesn't predate webmail at all.
I think you're being disingenuous.

Can a caveman melt some sand in a woodfire? Yeh probably.

That glass will be worthless for any sort of technology. And by the time he can make better glass, he's all out of stuff to burn.

You don't get to do technological civilization twice. The first one uses up all the easy-to-use resources, and supposing there is anything left at all, it won't be usable without the technology that they won't have.

Europe got to use glass because it had plenty of forests to burn. Those are gone. They won't be coming back any time soon.
Top comment says facebook isn't hiring that company...
"Where’s the article about the mom and pop granola company in Michigan that started in a quaint kitchen and is getting national distribution?"

My local newspapers have far more of these stories than stories about Elon Musk.
That is a different topic altogether. I'm referring to Open JDK.

Ever heard of the fasted embedded database engine called Berkeley DB. Doesn't matter came from where, Sun or what ever is still being developed and contributed in the open source environment.
Complying with copyright is not a great example of "Open Source history"
It is known that you guys do regularly use Webroot to scan links in messages, so it's not a stretch that Recorded Future can be setup on a similar type program. http://www.eweek.com/security/facebook-webroot-expand-securi...
Don't Just Rely on Tor: Security Advice from an Alleged Dark Web Veteran
Something that's kept me from pursuing learning F# is whether I need to know C# and/or Windows development, plus concerns about lacking access to Visual Studio.

I'm learning Scala now and found that it's relatively approachable without knowing Java, but Clojure was definitely easier to approach from the "never used Java" perspective. But it seems like F# is a much bigger leap to make for someone with no MS stack experience than Scala/Clojure for someone with no JVM experience.

It seems like Scala and F# are the only real choices for typed functional languages in relatively common use in industry (in comparison to Haskell and OCaml).
Stuff like this is why I use Diceware for passwords I must memorize, and Keepass for the rest. At 12.9 bits of entropy per word my 10 word master passphrase gives > 128 bit security, which is enough for all practical purposes. I've got a few of those (Keepass master, e-mail, banking, disk encryption, PC login) but it's still less than 100 words memorized. Of course any password safe like Keepass potentially turns "something you know" into "something you have" if you get a keylogger or such, but that problem exists for all passwords anyway.

But I'm a geek. I've taken the time to understand information entropy, and how it relates to passwords. I know how terrible humans (including me) are at generating randomness. Most people aren't educated in this field, and indeed shouldn't have to be. The only solutions I've seen that I feel have any chance of working are password managers and generating unchangeable, memorable passwords for users.
If you want to be a founder, consider this state level program: http://www.colorado.edu/news/releases/2015/03/30/cu-boulder-...

Various states who have launched or are considering launching have different requirements. CO does require either an undergrad or masters' degree, so work experience wouldn't count. MA is Masters' only.

Keep in mind that the H-1B itself does offer work equivalency, but it's 3 years work experience → 1 year of academic training, which means that 5+ years is unlikely to meet the USCIS test requirements.
The late 19th century was already how many centuries into the industrial revolution?

If you're just going to pick irrelevant, arbitrary comparison points, why not claim that it's gotten better since 1982?
> you seem to be responding to an argument that wasn't made.

I seem to be, but I'm not.

> I think there's a more fundamental cryptographic principle. Don't implement cryptography, unless you are an absolute top expert. Even then, think twice, and get another absolute top cryptography expert to check your working. Use a pre-existing cryptography package that has been written properly instead.

This is written towards ALL developers. In the scope of web developers that I reside, this is my rebuttal.

Some crypto experts are quick to demand people use something that isn't necessarily available to the developer. Then the language elitists tell them to switch to their preferred language instead of improving what the developers already know. End result? People just use insecure or badly designed crypto libraries.

We need better libraries. Someone has to write them. Or just make libsodium the standard. I'd be okay with that.
I do agree that the problem relates to language goals, but their poor choices of goals to pursue do demonstrate a lack of understanding. Their stated goals are frequently solutions that don't really address good use cases. Take for example fast compilation time: the stated use case for that goal was compiling Google's massive C++ code base, which took too long to reasonably compile on a dev machine because of template expansions. Refusing to add generics is an idiotic solution to this problem:

1. Generics aren't templates, and are in fact a solution to this problem. They don't expand at compile time.
2. The long compilation times are indicative of deeper problems: an over complicated code base that should be refactored down, and lack of modularity which would allow partial compilation (only compile the changed modules).
3. Removing generics creates new problems with increased bugs and duplicated code. It's trading compile-time for development time, which has historically rarely been a good trade.
4. Even if this is a legitimate concern for Google (which I still don't think it is), it's not a legitimate concern for 99.9% of projects out there. How many projects actually have millions of lines of code that can't be factored down and modularized? If this is really Go's target then they should admit it's a highly specialized language and not a general-purpose programming language, and that most people shouldn't be using it.

Calling these goals "subjective" as if this justifies them is just a smarter-sounding way of saying "That's just, like, your opinion, man." Opinions can be wrong, and the opinions of the Go team are wrong.
ORTC doesn't really have anything to do here, except nicer control over some configurations that you can already control with SDP munging.

Simulcast/SVC, for example, are irrelevant outside of multiway video. And you can already do simulcast with WebRTC.
These automated tools are always cool, but from where did you take that we should "Define at least <h1> and <h2> titles in your content"?
> You don't have to do that, it happens automatically

Well, in a past life, I used another store that did that automatically, the issue with that is that EITHER it kills the cluster because of read-congestion as it re-builds the "new" node, OR, if you limit the bandwidth for node-building, it takes for ever and a half to rebuild a node which means that you are exposed with one less shard of what was on that node.

What are the chances of a filesystem snapshot to be consistent enough to be used to prime a crashed node? What about restoring backup files from other nodes?
Hear that NSA? where is my check for this week?

Edit: never mind. Mailman was late.. got it now!
" From personal experience, getting enough sleep and eating well are requirements that need to be met first before exercise. "

I couldn't agree more! You must get enough sleep first, then try eat more properly. Then and only then you can start walking and excising. If those first 2 things are not done properly, exercise will actually make your health worse.
I love problems like that :D /spoiler: July 16th is the only possible solution
[video] WTF? Priceless Reaction to Madonna Kissing Drake at Coachella – EW
This is a duplicate of: https://news.ycombinator.com/item?id=9371517
Seriously? You're saying that the only possible use case for ruby/python/php is "not being a computer scientist"?
I don't have a degree, and am not currently pursuing one.
I had to create a small project for programming class. I settled on clojure and revise(bitemyapp's driver). Avoid this one. I hit on driver bug today, but didn't have the time to fix/report it. Just switched to the other one...
> read any of the versioning like bower does, so it can't handle versioning properly

What would the "proper" behavior be? How would npm know which commit is the one you intended to be the version change? Scan the history of package.json and only grab the commit when the version number changed?

Isn't that entirely the point of using tags?
It's not widely known, but In-Q-Tel is a generic vehicle for government investment. It's run by the CIA, but used by parties all over government.
So wrong. Your custom cipher could be leaking key material in the encrypted output, almost certainly leaks the key via timing channels, could be leaking the known cipher key by timing channels and more (and this is assuming separate keys).

The CC decode stage will be subjected to every possible edge case to see if it will do something dumb, like the oracle attacks mentioned in the article. And it could also leak information about the KC decode via timing attacks.

If this was for offline file encryption, where you do the steps separately, maybe okay. But not for online encryption where chosen plaintext is possible.
Sort-of-agreed. I like the corner stability, but I think I'd be unhappy if the key travel was this poor on the MacBook Pro.
> Some CAs may actually be worthy of trust.

By what measure? Some empty promises of good security practices, perhaps? Or maybe some pinky swear that they'll always act in the best interests of the internet as a whole rather than in the interests of whichever government or set of shareholders happens to be in a position of power relative to them?

Basically: name one.
At least this article highlights how poorly worded that problem was.

Also, the article correctly points out that Olypiad questions don't necessarily say much about the quality of an education system: if you were to judge the Soutb African education aystem by our Maths Olympiads, you'd probably be quite (incorrectly) impressed.

That said, many private schools here do use "Singapore Maths", so it'd be interesting to see what sorts of problems regular students have to solve.
Surface 3 review: Smaller, slower, cheaper… better?