skysight-inc/HackerNews huggingface dataset:
Well, at least he is being more straight forward than Comey was. He's laying it out there that in his opinion it's key escrow or else!

Of encrypted device users, just how many have not opted to have the key backed up by Apple or Microsoft? Backing up seems to be default, which is self-elected key escrow. 99% of the the rest of everyday users probably have a 4 digit PIN that can be cracked very quickly under forensic examination. Anyone with a real security need is going to be following their own opsec protocols anyway, which they would do with or without a law preventing good default security for everyday users.

They really do seem to be overblowing just how dark the network is to them under their investigatory powers.
From here [0]:
"The highest level of abstraction is the SQL layer (currently not implemented)"

[0] https://github.com/cockroachdb/cockroach#architecture
Federal Data Breach Exposes Personal Information of 4M Employees
What's the difference between fighting against an evil government and resisting it with arms?
Yeah, a car's passive entry system can definitely be exploited by relay attacks. Here is an academic group who demonstrated it: https://eprint.iacr.org/2010/332.pdf

The most obvious way to mitigate is to have the car require the key to send the first bit of the response at most N nanoseconds after the last bit of the challenge is sent over the air. Because of the speed of light this assures the key is within a certain distance of the car. Ideally you want to constrain this to ~2 meters since passive entry requires the driver to touch the door handle. This limit is not to be confused with remote keyless entry which should work up to ~100 meters as it requires the driver to actively press a button so, like garage door openers, this is not vulnerable to relay attacks. However power-constrained MCUs, especially in the key, have a hard time computing a strong cryptographic challenge within N nanoseconds with N low enough, hence the problem...

After my little foray into garage door openers I am currently looking into implementing relay attacks on the passive entry / passive go system of my car (2012 Audi). Fascinating stuff.
Filtering and triggering without the annoyance of having to write code in some syntax-of-the-month or dredge through poorly written documentation for half-ass APIs.
Hey thanks everyone for the advice. I was indeed referring to the Daily. It went good. I spoke for about 60 seconds, although the scrum lasted almost 30. It wasn't as intimidating as I thought!
Essential Zen Exercises for Business Leaders
"Run[s] C" doesn't actually make sense. C outputs assembly, so most of them run assembly. There are a lot of mobile platforms with no [obvious] C compiler, or certainly not trivial access to one.

Running Java makes sense, since JavaByte is a "thing." Running C is just another way of saying they run native binary blobs which is meaningless and obvious.
> 2) Those 3 billion mobile phones either are Android, in which case they don't exactly run Java, or are insignificant featurephones with mobile Java that again nobody cares about.

No. Java is more pervasive than you think. It's widely used in SIM cards: http://en.wikipedia.org/wiki/Java_Card

You can't get away from it.
I think this is hilariously topical given the current top post (FBI against encryption). Seems like they were taking their mantra a bit too close to heart.
I am not sure how it should be handled.
Allowing an app to automatically propose the user's email in a login form is pretty good in terms of UX ... but it means that the app can access to that data.
AFAIK, it's still not settled whether cryptographic keys/passwords/passphrases can be subpoena'd. Existing case law from physical security distinguishes between keys--like the one to your door or a cabinet--from combinations--like those to a safe. The state can legally demand the former, as the law views them as physical evidence as any other that may be rightly relinquished with a proper warrant. The latter, however, are the contents of one's mind, and as such requiring their divulgence runs afowl of 1st amendment protection of free speech and/or 4th amendment protection against self-incrimination. To me, it seems obvious that encryption 'keys' are much more like 'combinations', and were only called 'keys' as a word play (like many concepts in IT). Prosecutors, however, see that word and go "hey, wait a second, we're entitled to those!!"
The Most Common Small Business Website Mistakes to Avoid
Steam Machines Officially Hits Shelves November 10, Pre-Orders Earlier
I've been preaching the similarities of reddit to newsgroups and IRC forever so this seems like a natural evolution to me. Probably fairly easy for reddit to shut down though unfortunately.

Now if ISP's would start offering their own cached usable versions of reddit we would be getting somewhere :)
Do you have any supporting evidence?

I believe it may be incorrect because in my (limited) understanding, good encryption is indistinguishable from random sequences of characters.

How can you tell a string of random characters is simply random, or is an encrypted message, unless said encryption includes some kind of header or marker information?

I may simply be wrong but I'm curious about the answer too.
You could randomly spread this over various subs, that and add erasure coding. This way if a chunk or two goes missing you can reconstruct the original blob.
I had the same idea few months ago, I've even coded simple POC in Java which mapped submissions in subreddit to files. You could use FUSE to create virtual device and map files in mounted folder to comments. For Java I was using fuse-jna - there should be binding for Python.
What do you mean that they've deprecated C? I see C code everywhere in their sourcetree.
From their front page:
"It has C++, C, Python and Java interfaces and supports Windows, Linux, Mac OS, iOS and Android"
She is a transgender woman. So you'd use her, hers, and herself. It's not that hard and it's not political.
The JVM has had billions of dollars of engineering effort poured into it. At the same time, it is still out-performed by low-budget small-team efforts (e.g. LuaJIT, Inferno).

The article disassociates itself from Java the language. Java was a better C++ in 1994. It has long since been eclipsed by both improved old languages that have evolved (e.g. C++11/C++14) and new languages (e.g. Go and Rust) that are unencumbered by the JVM. This is despite recent incremental efforts to renew Java the language.

Instead, the article tries to claim some success for Java by switching focus to the JVM. The JVM is still slow and - by its design (a clunky stack-based architecture) - simple to implement but very hard to run fast.

Java will still be around for a long time to come. It's the COBOL of our generation: it's better than what it replaced, but far away from what we are capable of.
This is a major theme in John Brunner's "The Shockwave Rider". "In the novel, data privacy is reserved for corporate entities and individuals who may then conceal wrongdoing; by contrast, normal citizens do not enjoy significant privacy."
Tesla launches a bug bounty program
Usenet messages and mail systems are both good old ideas (I don't know of any actual implementation, but it's certainly been discussed at least back to the early 90's).

For Usenet you could depend on widespread resilien distribution + reasonably long retention periods for a lot of groups (but risked having messages killed by admins if too obvious spam).

For e-mail, anything reflecting your e-mail back can be used to juggle data: Send messages with attachment, refuse to accept the inbound reflected messages for a couple of days to let the other party store the data for you while they retry, then accept the message and instantly send it back out again.

Then there's the old Linus Torvalds quote:

"Backups are for wimps. Real men upload their data to an FTP site and have everyone else mirror it."
Ironically, more accessible for the blind.
> He also disputed the "back door" term used by experts to describe such built-in access points. "We're not looking at going through a back door or being nefarious," he argued, saying that the agency wants to be able to access content after going through a judicial process.

Back door: any circumvention of normal access. Normal access in this case would be access after decryption. It's irrelevant whether it's supported by judicial process, it's still a back door, just one that they aren't hiding the use of.

He says he's not looking for a back door (which is a lie, but members of Congress don't understand that, nor the public), and he associates it with the word "nefarious."

The FBI, masterfully twisting the language since 1908.
The first question I would ask is: How are you going to get your first users?

It might be possible to simply learn HTML/CSS (which you can do within a month if you dedicate time), then create a site where the entire "back-end" is manual. Any submissions go directly to your email inbox, you then turnaround and create a page for that submission, etc.

This would be mainly to test out your ideas. If you begin gaining traction, find a freelancer that specializes in PHP (yes, this is an old language, but it's easiest to find a competent programmer) - go with people from Russia, eastern europe.
To get reliable and free storage, photo hosting is usually the easiest way. Flickr offers 1TB, picasa/g+ offers unlimited storage with some hidden quoats. Everything that allows lossless photos lets you store arbitrary data. Depending on how careful you wanna be you can store hundreds of GBs per account.

Email attachments used to be a great way a while ago but nowadays using multiple gdrive/dropbox/onedrive accounts is much easier.

They are easy to create in large numbers (especially if your ISP has dynamic IPS) and as long as you're even a little bit careful, nearly impossible to ban. Add some redundancy across different services to that and a $2 VPS that gives you tons of upload bandwidth and you've got yourself as many TBs of free,fast and reliable online storage as you want.

I spent so much time as a teenager with no money and some python skills coding storage solutions like that. I'd say it was to store movies and tv shows for myself but in retrospect I mostly did it because it was so much fun to develop.
Incidentally, "increased utility" and "cost" are reversed in the above, which I noticed too late to edit...
Roller coaster. Everythings a roller coaster. We will win for a few years, they will win for a few years, then back to us. You'll have long stretches where we win (golden age) and back to them winning for a long period (dark age), but it will always bounce back one way or the other.

http://en.wikipedia.org/wiki/Golden_Age is a good article (obviously) covering this philosophy...

All you can really do is try to increase the worth of what you leave behind to your future progeny so that in times of dark ages they are high in the council but remain moral, and in the golden ages they use science to create awesome things and ignore hysteria and FUD. Unfortunately too much shift one way or the other in a genealogy tree makes the family lazy or a war mongrel so it's hard to pull off.
They will start making random strings illegal
People who make that argument about the second amendment always seem to forget that the U.S. military has been getting its ass kicked for more than a decade now by people mostly armed with Toyota pickups, AK-47s and IEDs.
IANAL, but it seems to me that Java 1.6 is GPLed and the implementation contains the interfaces. As long as they stick to JDK 1.6, which is good enough, they're fine.
What would be a suitable response to this? America does not have a clear cyberwar policy and I haven't heard many suggestions.
I didn't draw any conclusions, I just shared my partner's experiences without any further comment.

I don't doubt some women have had the experience BlackAura is referring to. But I don't believe it is universal either, since my partner does not report having that experience. As to what percentage of women have experienced this: I don't know, and no one in this conversation has produced an answer to that question.
It makes as much sense as saying they run Java. Java bytecode is JITted into very same machine code. JVM outputs "assembly" [1] as well. The interpreters are also written in C or C++, even the partially hardware assisted ones, such as Jazelle.

All executable code is native "binary blobs" in the end. But they're written in language X. What I'm saying, is that 100% of those devices contain code written in C. C is also a "thing", it just happens to be usually compiled ahead of time.

[1]: Technically the term should be native/machine code or such. Assembly usually refers to text format assembler listing.

Edit: Wow, so many downvotes? Even though that 100% was just as meaningful as 3 billion. Ok...
Indeed, I've found the infiltration of monarchical type behaviour to be surprisingly prevalent in the modern US oligarchical elite structure. I think people have forgotten that, throughout most of the history of our country the UK and EU oligarchy/aristocracy/monarchy have been the enemy of the US, and in the beltway rush to power many of them have become infatuated with the trappings of neo-feudalism, all without even realizing the magnitude of their error.

Make no mistake about it, the idea of national sovereignty worldwide is under attack, including the United States of America's, but no one really wants to admit or even entertain ideas of whom it might be, lest the truth be too upending.

What have ended up is a modern day star chamber.

"Finding its support from the king’s prerogative (sovereign power and privileges) and not bound by the common law, Star Chamber’s procedures gave it considerable advantages over the ordinary courts. It was less bound by rigid form; it did not depend upon juries either for indictment or for verdict; it could act upon the petition of an individual complainant or upon information received; it could put an accused person on oath to answer the petitioner’s bill and reply to detailed questions. On the other hand, its methods lacked the safeguards that common-law procedures provided for the liberty of the subject.” –Encyclopedia Britannica
RoosterDB

It's only a couple jumps away from their original intent.
If only there had been a backdoor in the system, or no encryption, law enforcement could have prevented this. /s
Orange announces it will sever link with Israeli subsidiary
I'm not far left. I broadly support law enforcement. I understand opposition to Silk Road and I support prosecution. I even support Snowden going to trial. But my reaction to this is "screw the FBI if that's what they think." Unless Congress outlaws domestic use of encryption, I'm still going to have access to open source encryption and I'm still going to prefer companies which use encryption to maintain my privacy.

So the FBI has a tough row to hoe here, if the people who would otherwise support it are alienated as I am
Breach in a Federal Computer System Exposes Personnel Data
> who would suspect reddit as a command server

Everyone who used IRC as a command server from years past. It turns out that things useful for human communication tend to be useful for computer communication.

Usenet, Email... hell... I'm sure BBS would have been used if modems were popular enough back in the day.
Presumably something like this is what's happening in /r/A858DE45F56D9BC9/
Oh wow, I totally missed that. Thanks for clarifying!
Orange folded to ‘anti-Semitic pressure,’ owner of Israeli cell firm says
I have multiple checking accounts to avoid this problem.
What incentive do they have to obey such a contract?

Anyway, there is oppression by the majority. It is a very good thing that in this age where there is very little privacy, that we are also much more permissive than we once were.
So if Twitter took 4 years to release MAU, would you have accused them for 4 years that they have "something to hide"? Now you get my point. It's sensitive. Sometimes you wait years before feeling comfortable releasing this number.
How much money do you have in the bank, and what is your bank account number? If anything can be hidden in the internet, then who decides which things can be hidden?
That De Bruijn sequence is highly similar to the way DNA codons can be read.
Still, SIM cards are not a platform anyone cares about either. It's not like it matters what runs in SIM cards with regards to Java's viability.

(Not to mention they'll probably get the boot soon, as they're an obsolete technology)
Packet juggling http://lcamtuf.coredump.cx/juggling_with_packets.txt
Usenet is perfect for that since binary newsgroups for piracy have gotten really popular over the last few years. You can basically use it as a reasonably reliable key-value store that lets you store 300kb to 1mb blobs. Add some encryption and parity and you've got yourself nearly unlimited storage, even for free if you use trial accounts from certain providers.
I'm glad (but unsurprised) to see they're doing things correctly (offline root, then using the intermediate CAs to generate actual certificates).

I tried to set up a similar (identical) scheme for use internally, but for some bonkers reason Microsoft's CA on 2008 R2 makes doing this almost "impossible." Or at least if it is possible it is insanely complex. It just really hated and rejected the concept of an offline root CA that didn't have a Microsoft CA running for it.

I'd love to be able to tell everyone doing an internal/corporate key-chain that "this is how it should be done" but holy heck does the tooling make it more complicated than it needs to be. I should just be able to install the public root key, hide the private root key indefinitely and it should "just work" for any key generated via the two intermediate CAs.
Ars too: http://arstechnica.com/security/2015/06/federal-agency-hit-b...
I've checked. All the normal credit card protections apply with my credit union.
Actually trying to take on the military, vs resistance (sabotage and only fighting if absolutely necessary). Guns are still helpful for the latter.
This article leans on that 250 number pretty hard. The executive quoted in the article states that 120 of that 250 found other work within Disney by January 30. The end result being little more than an internal transfer of roles. 40 retired, and 90 "did not find new Disney jobs"

This article says nothing of the underlying restructuring that occurred where the focus of the department was shifted from sustainment to development.

It mentions nothing of the laid off employees out of that 90 that found jobs with the consulting companies that would be handling the sustainment work and ultimately sitting at same desk, doing the same work, for more money.

Also, the 40 that retired weren't simply offered 3 months salary and let go. They had the choice to look for other work within the company, look for other work elsewhere, or use the many years of experience they had vested with the company and take a retirement package.

There are also those that lost their jobs as part of that "90" (not 250) on January 30, that were able to rehired at the company in subsequent months in other roles.

Source: I actually work for Disney, in IT, in the building pictured in the article.
Yes, because giving up privacy and anonymity will only marginally slow down (if at all) the would be evildoers, at least those smart enough to not brag about their evil doings in Facebook.

In my home country, we have one of the more strict gun owning laws in the world. That does not prevent the criminals from getting guns at all - pretty much every random fucker can get his hand on a pistol, and organized gangs have gear that is often comparable with that of the army. But, on the other hand, it is pretty difficult for the average law abiding citizen to arm themselves for self protection.

The funny thing is, this strict control got really started in the late 60's and 70's, when student riots made for a moment seem like a coupe / civil war against the regime were at least thinkable. So, what are the real winners when the government outlaws technologies than short the gap between state power vs individual powers? It is not the criminal elements in society. They already are breaking the law and profiting from it. They will work around whatever restrictions get imposed and illegally import the gear they need from wherever it is available. It is you and me who get the shaft!
A.k.a. "All people should be considered guilty until proven innocent."

Your advocacy of such a practice under such dubious rationale indicates - to me at least - that you don't really understand American principles.
There are no terrorists, there are just enemies who aren't as well equipped as you.
This is the only thing that would make it worthwhile. I have been wanting to get an Alaska Airlines card...
Yeah, I remember reading about the e-mail reflection idea in the book "Silence on the wire", authored by "lcamtuf", the guy who's more recently known for writing afl-fuzz.
> The thing that saves most people is that there is really nothing worth stealing in their house

Agreed. I lived in a houseshare a couple of years ago where the housemates didn't want to chip in for contents insurance.

At first I was shocked, and thought about paying the whole house premium myself, but then I actually thought about it properly for the first time and realised that the sheer difficulty of removing and reselling my mostly quite heavy valuables (things like TV, drumkit, etc) and finding/sorting though even the smaller ones scattered around the place, would mean that any burglar that did get in would probably just decide to leave it. It wouldn't be worth the risk, effort, or arguably even their time.

I've not thought twice about contents insurance since. It's probably a product that makes no sense for a significant proportion of people (when you're renting and damage to furniture/appliances etc is covered by the landlord's insurance, of course!).
>The JVM is still slow

What are you talking about? It's the fastest widely deployed VM out there...
TED talk - http://www.ted.com/talks/kees_moeliker_how_a_dead_duck_chang...
This $25 Blood Test Tells You All the Viruses You've Ever Had
I have been a fan of Pipes for a while. Kudos to @psadri and others who made it possible with the state of web tech back in the days. It was a very well made tool both frontend and backend wise!

I have a emotional connect with Pipes as a tool. Right out of college, and before the whole API thing was pervasive, I had leveraged pipes for so many small projects and hacks. Infact I used it in a Yahoo Hackday hack and it landed me a gig at Y!

More relevant to the present, It has been something I have mentioned to so many people who have come to me discussing UIs for automation/control systems/or to manage workflows, processes. In a way it was what noflow's UI looks like, but years in advance. In a different parallel universe, it may be the way people use APIs, or right big Haddop/Spark/Storm jobs/topologies, and the front end was open-sourced back in the day, with full integration with hadoop for job management.
Do they have any centrifuges that need to be exploded? ;)
The address data is quite partial, which makes searching for locations more difficult.

The road data is very good to excellent in most of the developed/Western world, particularly in Europe.

The footpath data is really the only available of online global maps, and is often excellent (down to details of surface quality).

The POI data is very good in continental Western Europe (down to trees, benches, water fountains etc), and then otherwise will vary depending on the city, or the country.
If you get one of the many student jobs for 10 hours a week, you can pretty much double that.
This is behind the paywall but very worth a read.

To quote some of the excerpts

"RIM's chiefs didn't give much additional thought to Apple's iPhone for months."

"It wasn't a threat to RIM's core business," says Mr. Lazaridis's top lieutenant, Larry Conlee.

"It wasn't secure. It had rapid battery drain and a lousy [digital] keyboard."