skysight-inc/HackerNews huggingface dataset:
The guy who ran "The Farmer's Market" AKA Adam's Flowers who was pre Silk Road and busted during Operation Adam Bomb was only given 10yrs for hustling MDMA/Acid/weed, and ran an impressive smuggling operation where he had US resellers pick up ocean freight shipments, and his plea has him serving time in a Netherlands prison.

The difference is he didn't make his black market political, which unfortunately Ross did. He also didn't try to kill anybody which although thrown out was still referenced by the sentencing judge. Still no word on what happened to the guy who was running SR 2.0 who worked for SpaceX and was busted.

I remember people peddling drugs on MindVox forums when Lord Digital ran it back in the day none of this is new except for Ulbricht trying to market his biz as a revolution. Online drug sales will continue regardless of this sentence.
What industry would you suggest Greece grow its way out of debt with besides possibly tourism?
Re-read the comment and you'll see your answer. The choice of insecure endpoints, insecure protocols, insecure networking standards, and connections to an insecure internetwork of malice means that trusting security to a low assurance filter of internetworking part is... a joke. Might be why having a firewall didn't reduce odds of any major I.P. and data breaches I've read about.

You want network security? Use a guard [1] with additional security checks at the endpoints and working with software on the guard for protocols such as email or HTTP. Want to stop script kiddies all day long and get silently breached by the exact people that really worry you? Get a firewall: the cheap, knockoff of guards specifically designed to save money they would've spent on real security. I hear they even come with OS's that brag on hundreds of CVE's under their belts. ;)

Oh, and you need to do the endpoint security, too. My posts on HN regularly mention prior work immune to many forms of malware by design. The DARPA, NSF, and Euro funded teams are cranking out one good hardware and software TCB after another with strong arguments against leaks, injection, and so on. At this point, unless I.P. is withheld, there's no excuse for industry or FOSS not building clean-slate efforts on something like that.

[1] https://en.wikipedia.org/wiki/Guard_%28information_security%...

Note: To be clear, I'm not counting guards built on crap such as Linux. Many in medium to high assurance industry are doing the same cost-cutting crap as COTS. Sadly, they tell me the reason is "no demand for high security systems." I've heard that in U.S. and U.K. Pre-Snowden, though. Maybe there's hope.
It's surprisingly short sighted of businesses (banks) to not have pushed for consumer bailouts with say... vouchers for paying down mortgages or other bad debts. The banks collect, and people are left with a lighter load, and are more likely to re-spend.

Do banks assume that bailout + people making payments on underwater mortgages is, in the end, more profitable than bailout + lower debt loads and increased spending? An awful lot of people just walked away from their homes and mortgages.
I saw that! I think they were also calling their cores minions. That's great lol. I forgot to send them a list of all the tagging schemes I know, esp patent immune. Might help them out.
The majority of Twitter's revenue comes from mobile ads, and app install ads are a major component of that major component. Knowing what apps you do or don't have installed allows them to better target app install ads, and I imagine that's the reason for collecting this data.

So, if you don't have Clash of Clans installed, they can show you a Clash of Clans ad.
If do you have Clash of Clans installed, they can then prompt you to reengage with it, or suggest other apps you're likely to install on the basis of your having shown an interest in games.
That also hinders remote access and promotes a sense of false security with users who don't know better. Better to tell them to use a secure channel for sensitive things. Then again if you thought slack was really secure I could set how you might think that.

There are both arguments. We have a VPN but don't let just any user on it. Then again I'm not sure if I want those people on slack with me either. The times when we want to use slack can tend to not overlap with the times we want to worry about whether the VPN works or if I can connect to it. We even use slack to organize a distributed disaster recovery and coordinate it!
Please leave a comment on the app store. That is the only way these companies will learn to not snoop on their users:

iOS - https://itunes.apple.com/us/app/twitter/id333903271?mt=8

Android - https://play.google.com/store/apps/details?id=com.twitter.an...
Cool-kid words for cloud infrastructure in-groups. Somewhere along the line someone with clout and a laser pointer directed the attention of a roomful of people to an analogy in a Powerpoint presentation, and to curry favor and demonstrate loyalty, dear leader's clones started parroting each neologism.
This is a common argument, but too much software is painfully slow to use. It becomes a user experience problem.
Why do iOS and Android give apps this data in the first place? Mobile apps will invariably abuse any trust granted to them, so platforms should just stop granting any more trust than necessary.
No, he's right.

Of course we call places that pay like that sweatshops.

Let's just start paying people in company scrip.
Let's just ruin a mans life so maybe we'll deter %.0000001 of a billion dollar drug industry. Why does the United States continue with this nonsense "War on Drugs"? Could it have anything to do with the for profit prison system? Giant militarized police force? Booming civil asset forfeiture?

For a country that prides itself on freedom and fairness, why create a system that punishes for doing what they want with their body? What if we spent the billions we do now on a failed drug war for education, addiction treatment, mental health, job training? Why ban certain drugs and allow alcohol and cigarettes that have just as addictive properties and kills just as many people?
This car dongle lets you control your Car using your Smartphone or Smart Watch
Ironically, currently a few entries away from this article on HN, there's this one [1] about iHasApp that has shut down due to "using public APIs in a manner not prescribed by Apple".

[1] https://news.ycombinator.com/item?id=9625916
Wow. I've about cases like this but this just a new extreme. It appears students may now freely censor professors for almost any reason.
Just removed the Twitter app... Sorry Twitter but no thank you.
"You can opt out any time...three stages deep in the settings." What a cop out.

That's provided because 99% will never even know it's there. It doesn't matter if it's technically an option.

When your product is used by millions of people and updates automatically, the defaults matter.
Compensation is not really the point. Anything that'll affect the bottom line will make a business seriously consider what you have to say.
> I don't think the main problem here is our infatalizing students [...] Rather, it seems that the main problem is that we enacted policies with good intentions without considering whether the policies themselves were a good idea.

This is the problem with governing in general and is why trying to over-regulate students lives (i.e. "infantilize" them) is such a bad idea. The folly of those who think they can engineer a better society put millions to death in the 20th century. It's kept billions in poverty through today. No one is being killed for their opinions at American colleges, but speaking from first hand experience as a recent graduate, freedom of speech is suffering.
From browsing comments, I'm thinking that maybe your desire to quit is what's really at play here, that it's what's mediating your relationship with this guy, who's being related to as basically an excuse to quit.

I mean if you were being paid well, and if you don't have much equity if any in the company, and if this guy is not getting you in trouble, I wouldn't be bothered by his incompetence, even if it slows you down.

If you can afford to do so, quit. I think that's what you're getting at, and you seem talented enough to jump on other promising opportunities.
The best way to use analysis tools is to code in a way that makes it easier for them. Old Orange Book B3/A1 systems had to be coded in a very layered, modular, and internally simple way to facilitate security analysis. Likewise, many of the analysis tools will get lost once you start coding a certain way. Each one also has its strengths and weaknesses.

So, my normal recommendation for people that can't waste time is to use those with few to no false positives combined with a coding style making it easy. For instance, I coded in a structured programming style with relatively simple control flow, quite functional in each unit's structure (see Cleanroom methodology), and avoided hard to analyze things. That made it easy for the tools.

The cool thing is that tools such as Astree and SPARK can prove portions of your code immune to certain defects. Others can do this for concurrency problems. And plain old reviews of design, code, and configuration with a list of common issues can help a lot by itself. That each of these methods has positive results for teams that use them speaks for itself. Them together can be quite powerful.
The worse problem is that even if you do research on the developers and owners of an app before allowing a permission that warrants a lot of trust, they can at any time be sold to a scummy company or data-mining agency who exploits the trusting user-base. This is exactly what happened to SourceForge.
It can't always, but like I mentioned, if it is too much you can move on, but never leave them high and dry.

Money always at least temporarily helps and I happen to be a guy that likes to help see things to their agreed on goals even in some cases where I missed out on better projects or it has cost me. More money can get you through to that next, nicer time to move on.

Typically freelance/outsourced projects don't last years, more like quarters. Sometimes it is not worth it 100%, but as a professional I typically finish the round I am on. Then the great side of being a freelancer is you can make yourself unavailable for future phases if it actually harming your business and or is an un-winnable battle. There is always some amount of battle in work though.

In the end it is money, I have had lots of great clients and fun projects that have lost me money over the time I have put in, or over other project opportunities, to see things through with current projects. I typically move on from ones that do that unless it benefits me in other ways. I do projects to help fund my own projects, so sometimes work is just work to fund that and make that happen.
Angular Material Starter App
A rule in life: ruthlessly stomp on the maladaptive tendency of our brains to try to expand the scope of our responsibilities beyond the scope of our power.

If you were the boss of this company, it would be your job to do something about an incompetent programmer. But you're not. You're a freelance programmer. It's your job to write code. You've raised the issue with the boss. He has decided to keep things the way they are, as is his right, even if he's mistaken; he's the one signing the paychecks. That's all that was up to you to do about it. Having done that, your job is to write your code and let the other guy write his code.
> > What is Twitter using my app graph for?

> Twitter is using your app graph to help build a more tailored experience for you on Twitter.

No thanks.

> Some examples of how we may use your graph data include:

> - Improved “who to follow” suggestions that share similar interests

No.

> - Adding Tweets, accounts, or other content to your timeline that we think you'll find especially interesting

Good lord, no.

> - Showing you more relevant promoted content.

Please, no.
Unlikely considering they work closely with Apple on integration with Twitter. Double standard sure but I doubt Apple cares.
Do you really suppose ad providers in millions of apps do anything differently? Do you think Apple's own iAd relevancy engine that allows them to charge premiums to advertisers does anything differently?

It seems odd to be outraged at a practice employed by the very knight in shining armor that just shut them down.
Built using Yeoman Angular Generator and includes-

HTML5 Boilerplate
AngularJS
Angular Material
Angular Material Icons
Karma
Angular UI Router
Sample Login Screen
Side Menu Area
Main Content Area
The routing mechanism is similar to that seen in Ionic Framework.
On the other hand, if he could get this guy straightened up, not only is that an awesome skill to possess (can you imagine working for/with someone like that, it'd be awesome), but he'd be doing his client and the bad programmer a huge favor.
live demo available at - https://angularmaterialstarter.herokuapp.com
when money involved and clear for both side, quit is an option.

https://news.ycombinator.com/item?id=9628477
I too would encourage people seeing the parent comment to definitely watch those videos. The Rich Hickey talk especially has shaped a lot of my thinking in the last few years.
Datacenter Outage – Fremont Incident Report for Linode
My advice to you is always have clear cut phases/projects.

Always break it up and phases usually last 1-6 months. You always have the opportunity to ask for more or move on more easily where needed, but you never leave a client or project on a bad note but a delivery and approval/payment cycle.

Never do some ongoing job like project that is just time with no clear cut deliverables. Have deliverables and get those approved at each stage in writing. Do not start the next stage until the previous is paid. I learned this one the hard way with a good client for years that became a bad client really fast when I believed they would pay after a 4 month project, it was my 30k stupid tax but also improved my processes and agreements.
> Could someone share a link to the original presentation?

The presentation is here: https://www.youtube.com/watch?v=mpbWQbkl8_g&t=47m23s (starts around 47:23).
But surely whatever data the phone is piping to and from those dummy files can be read while it's still plaintext?
Apparently you aren't - seeing as your original response to me had absolutely nothing to do with what I and the parent were talking about and instead was a strawman attack against things that were never said.
If you can live with changing the signature from two tuples to just taking the four floats, you'll see a big further improvement --- these are the only lines showing up yellow when running the code through cython -a: https://rawgit.com/syllog1sm/a13542690c59d5e60ebf/raw/499418...
Imagine if some company was dealing with a lawsuit related to sexual harassment, and some mid-level executive of the company wrote a prominent article mentioning the case, their own position, and criticizing the victim's story...

I don't understand how she's shocked that this could be taken as retaliation. It's disingenuous to say she "mentioned no one by name" when she was clearly talking about the student that filed the complaint.

If you think professors should be more 'free' than corporate executive, how do you ensure the students aren't more vulnerable than corporate employees?

This is a person in a high status position mocking someone for being intimidated.
Me, me, me.. (inject sentence that appears not to be about others).. but more about me.
> There's a huge opportunity here to have a government public works program or some other major initiative to mobilize the underclasses, but it won't be taken.

agreed. but it won't happen. they clearly do not want to. you know what I mean when I say "they". I think what "they" are doing is instead now letting the USA enter a phase of milking and rundown. The truly rich, the truly powerful, already have homes anywhere they want to in the world. Whether that's in western/northern Europe, or modern Asia, or in a micro-nation. It is in those places and nations where they are ensuring they have the government investment and infrastructure to ensure a quality way of life. They -- you know who I mean -- have already marked USA as 'deprecated' and moved on, psychologically, at least medium/long term.
Heatmap Showing Where Flexport Shipments Come From
You are comparing two completely different legal systems (US vs China) and you are surprised there is a difference?
Did you miss the government agency part.
Apologies, they actually have also their own Data Centers, and what I wrote earlier (below) is wrong.

Assuming that this is what they mean, "3 data centers + 2 clouds (Google, AWS)" -> The "+" should be substituted with "across" -> 3 data centers across 2 clouds (Google, AWS)
I agree. And I should have the option to refuse by removing app permissions.
Multi-Service Local Development Environment with Vagrant and Docker
I covered a lot of ground in this counterpoint to Dan Geer on why our security sucks:

https://www.schneier.com/blog/archives/2014/04/dan_geer_on_h...

Read it, its two links, and whatever they link to for plenty of inspiration. If you want, I'll email you a list of my designs and essays on there. I use his blog to reach as many people as possible. I can't make money on high assurance without selling out to the enemy so I just posted my stuff online for free anyway. The discussions and peer review over there were grade A with a few high assurance guys as regulars. This site is good, too. I'll get you those links if you want.
It takes just a tiny bit of epistemic humility to understand why due process is good and star chambers are bad. It goes way beyond infantilization, you have have to train people counter to the history of Western civilization to make them reject these things. The fact that universities are embracing it should be a giant societal red flag.
I made this in about 30 seconds with the new screencast recording tool from Padlet.com
Amazing they're doing all this trying to make their service "better," yet they continuously show me a feed of content I resent.
What's the difference between LVars and CRDTs?
I should've added that I'm not saying they're useless: just not a solution to the root problems or even the best solution to their problem. I use them if I have nothing else or just want to reduce traffic (DDOS) on a guard. Hell, using an obscure processor architecture while removing anything in traffic IDing it got me more security than any AV or firewall. I retired that strategy after 5+ years of it working with eBay hardware lol...
The author is writing a book titled "Men: Notes From an Ongoing Investigation"; and dared to suggest in this article [1] that radical feminism-influenced policies were turning college campuses into a version of middle school. There was no way she was not going to be attacked by said radical feminists and "triggered" students.

Of course, the people who currently benefit from it (the hordes of administrators who enforce these ridiculous policies) are never going to admit that they are in the wrong, or that they should allow for more reasoned due process. Hopefully, enough people read articles like this, and realize that Title IX is a complete farce. Pressuring legislators to throw out Title IX is the only sensible course of action against it.

[1] http://chronicle.com/article/Sexual-Paranoia-Strikes/190351/
That's shortsighted. Eventually this bad code will be the responsibility of the freelancer (who at 3 years in is more permanent than most of the other devs it seems).

Another reason to take care of this now and be a "team player": making the company more successful ensures a renewed contract.
I observed the same thing. Microsoft is the company who cares about developers more.

I can tell my odd experience about Microsoft: my company reverse engineered many of its products and offered APIs around products without APIs. One day someone from QA sent us an e-mail offering help if some of these products have issues with Windows 7!
I didn't know he had solicited murder (it's not mentioned in the short article linked) so I was wondering what made a glorified drug dealer middleman deserve life in prison.

But the thing is: he wasn't even convicted for that!
I'm surprised the fact that numerous people on death row have been exonerated after decades in prison only warranted a sub-point.
Well, my understanding is that more fresh water runs into the ocean than what we entirely consume already.
I was with you until the last paragraph. The actions of just two students isn't enough to get a good sense of where our society is heading. On the contrary, if society condoned the students' actions, they wouldn't need a badly-written law to threaten this professor.
I removed Twitter and Facebook from my phone because I found them too distracting. Not having them snoop on what else is on my phone is just a bonus.
Life Sentences in the Federal System [pdf]
"It is difficult to get a man to understand something, when his salary depends on his not understanding it."

It's not right, its not fair, and until the judicial industrial complex (private prisons, police forces & civil forfeiture used for revenue instead of proper tax increases) is dismantled, we'll continue to see these sorts of travesties.

We have a lot of cruft to cut from the US legal system.
They are "too big to ban".
Interesting, I'm also very interested in the other project mentioned "bugs everywhere." Anyone have more details on day to day usage of it?
See my post here to Geer:

https://www.schneier.com/blog/archives/2014/04/dan_geer_on_h...

We just need to do what was done in the past, present, and ongoing in various circles: architect the hardware and tools in a way that makes security (esp integrity) an easy default rather than a nightmare. Then we work from there esp making that faster. I've seen Linux and FreeBSD run on such systems with little modification so I know it can be done. It's why I spread the word.
No part of the allegation that Ulbricht commissioned a murder appears to have been "thrown out"; that accusation was a formal predicate (the second listed "overt act") of the conspiracy charge for which he was convicted.

Can someone help me understand why people keep suggesting that this murder-for-hire allegation was dropped? That does not at all seem to be the case.
W3snoop Google.com snoop summary
Ask HN: I Have Cancer. What Should I Do?
I just left my engineering job at a medium-large employer to join an 18-person startup. I am set to start the new gig late next week.

I found a marble-sized lump under my armpit a few days ago. I quickly got it checked out, and the preliminary report just came back that it's probably cancerous.

What the hell should I do?

I'm 25, and otherwise healthy, so was not expecting this.

I really care about this new team and was excited to work with them. I feel horrible about joining a young business as an albatross instead of an asset.

I left my old job on good terms but have no idea how they could justify re-hiring an employee who left and may not be productive / able to work.

If I start at my new job I'm afraid I will endanger the business and raise everybody's premiums. I think they have a fairly generic group plan.

If I don't start my new job, how will I support myself?

My fiancé also works at a small startup so if I joined her insurance the same issues would apply.

I think I can still purchase my old insurance through Cobra, but I don't know how long that will last.

Thanks.
If Apple applied their rules evenly across publishers, they would.
This should be opt-in not opt-out.
Not only that, I followed the instructions (on iOS) and there is no "Tailor Twitter based on my apps", only "Tailor ads based on info from ad partners".
I've looked into Haskell, and loved it. Even though I've never used it for any code that ran in production, and I doubt I ever will, I really appreciate the contributions of the Haskell community. I think they had a great part in the popularization of type safety. Case in point, this talk about what Python can learn about Haskell:

https://www.youtube.com/watch?v=eVChXmNjV7o