skysight-inc/HackerNews huggingface dataset:
The USG reserves the use of backdoor-free software and strong encryption for itself, so I'm not sure that this is a worry with regard to the recent data breach.

The FBI means that consumers and foreign markets should not have encryption or backdoor-free software. I understand that this is a double standard, but we need to be clear that the double standard doesn't have to do with this most recent breach.
A similar service is here: http://www.cambus.net/interesting-dns-hacks/

Interesting about DNS stores is they save a round trip, so it's not just a weird abuse of the protocol to store content, it's also potentially a performance optimisation.
A lot of people here are commenting, rightly, that this is an example of why the USG should be strengthening encryption. It's also a reminder that, despite its disproportionate focus in media, including on HN, the US is obviously not the only government engaged in this behavior.
Show HN: Search for information across cloud applications
Yes, you're right. This is what kept me from pursuing CQRS+Event Sourcing+DDD. It's not very flexible if you don't get it right the first time.
Will try to find users within the sport, going to sport clubs and manually signing up people, shops, online forums, it’s a niche sport with a cool community around it and I’m a player.

Thanks for this, the html site with manual ‘back end’ is an excellent suggestion, I wonder if not more work than adapting one of the wordpress airbnb clone themes, that comes with post, calendar and messages plugin?
Not in Africa and other developing countries.
> The backdooring and lack of encryption in software is because the US is still a primary exporter of technology and we want to be able to continue to hack, surveil, message and control those who get US technology.

Booh.
Oh this isn't new. There has been cyberwarfare now for close to two decades, although there's certainly been increasing amounts of activity.

The US of course will reply in kind. It is US defense policy in cyber to retaliate for cyber attacks - specifically this is part of a deterrence strategy.
This is a really shallow reading of the events that caused the war, and it's certainly not the entire story nor is it representative of modern academic thought. There were, remember, thirteen original colonies, and each of those colonies had different people in them with different needs. The causes of the uprising in Boston, for example, were not the same causes that drove Virginians to support the war.
Briefly, tracking small radar targets in sea and rain clutter, compressing radar and audio streams, classification of radar signatures, classification of vessel behaviour, and more. I can't go into too much detail because it's all commercial in confidence, but those are the sorts of things I've worked on most recently.
What tech titan is worse than Larry Ellison? I have a hard time thinking of any. He makes the Uber guy and the Snapchat dudes seem like mother teresa.
Why not "Article Adjective Adjective Noun Adverb Verb Article Adjective Adjective Noun"?

If you're making full sentences anyway, the grammar of the sentence doesn't need to change much. The vast majority of the entropy is already in the words themselves.

Example sentence (generated by me, not a RNG): "the tiny hairy fish quickly paints a big scary monster".

EDIT: With 10 words, each from the 252 most common words... sentences of this type would have an entropy of more than 10^24 or 2^80. I guess "articles" are pretty much "The" vs "A / An" however, so there really are only 8 words of note...
The article is a horrendous failure by The Intercept, which I usually love to read. The most important part of evaluating trust is character. Microsoft's character on the topic is to use low-quality software processes until forced otherwise, notify NSA etc about bugs so they can hit them, help them do the same with third party software (eg Skype), backdoor their own stuff (eg NSAKEY), and so on. This is one of the least trustworthy companies in existence with a known track record in subverting security and crypto of their customers.

So, his research comes down to two major options: the above company's crypto product with assurances of their PR team; a proprietary product with no troubling history & endorsed by a well-known cryptographer. If Win8 and above, he should start talking about BestCrypt rather than dropping a whole extra paragraph on Bitlocker's advantages and how its fine for the average user. It's not fine because (a) the source screws all of its users, (b) alternatives only flourish if you support them (vote with wallet), and (c) a site accepting submissions on corrupt organizations by leakers should never recommend trusting security tech of a corrupt organization whose contributes to the evils they report on.

So, this post is just stupid except for the tiny parts where it mentions alternatives. Matter of fact, it reads like an advertisement written with the assistance of Microsoft's lawyers and publicists. I'm not saying it was but any objective investigation should never look like that.

Conclusion: Don't trust The Intercept for INFOSEC advice, don't trust Microsoft for security/crypto, use BestCrypt if on modern Windows, use VeraCrypt for Win7 or earlier, and switch to Linux if possible for extra transparency/options.
> For starters that address is empty. The coins from it are on the list at ~174,000 now.

Doesn't matter. This one addresses alone represents hundreds of thousands of customers of Bitstamp that you are completely ignoring in your math in your previous posts. I am just pointing out to you that AT LEAST some of these big addresses are bound to represent other exchanges/online wallets.

> So while large wallets exist to see a number like 2.8m coins and assume it means there are at least 2m users is simplistic at best.

It is simplistic for you too to assume that these 2.8 million BTC are all owned by a few individuals.

If you want my estimate, since we don't have much data to rely on, I think that roughly 30-70% of this 2.8 million BTC is owned by individuals and the other 70-30% represents exchange/online wallet customer funds. It's realistic to think that even the smaller portion (30%) of 2.8 million BTC could still represent at least 1 million users. And the ~2 million addresses with smaller funds could represent another ~1 million users (as you yourself estimated, well you said 0.75 million which is close enough). So that's ~2 million users total.
Frankly, thugs with guns are irrelevant. I'm not advocating to drop all privacy because there are some bad guys with ill intent, who may want to hurt you or me - as a society we've already decided it's not a big deal (otherwise you'd have much more resources poured into crime prevention). The question I'm asking is - in the quickly coming age of easily obtainable weapons of mass destruction, does the privacy arguments change? And how do you want to secure people from random evildoers utilizing such weapons? It's a genuine concern, and in case you think I'm just fearmongering, I suggest checking out the progress happening in biotechnology.
Stopping Computer Network Exploitation is very, very difficult (the attacks happen at close to the speed of light).

However with appropriate signals intelligence, sources of attacks can be determined.

We don't know that China was really behind these attacks, but the US has a pretty good track record at attestation so far.
Great sales team? How about well-connected principals who donate to candidates with the power to decide on the contract.
As absurd as this sounds, I agree. Just look at all the 09 F9 controversy.
What is CNA/E? Google wasn't helpful.
Well, one, I'd love a more general solution where I could just say "generate a sentence with n bits of entropy" and my algorithm would spin out a sentence of the correct (arbitrary) length. (Hmm... Markov chains?) Or maybe add other mnemonic modifications, like rhymes. And two, I still need an algorithm to conjugate verbs and whatnot, though I suppose that part could just be left to the user. (You get n diceware words — make your own sentence out of them.) But that's boring!

In regards to word commonality, I'm pretty sure you could in fact use something like the 5000 most common words. The people who care about this kind of stuff tend to have large vocabularies!
We hear a lot about Chinese attacks on the US but virtually nothing about the opposite, which undoubtably does happen.

Reading the wiki page on "Cyberwarfare" there are sections on each country, like "Cyberwarfare in Germany", "Cyberwarfare in India" etc.

Both the "Cyberwarfare in USA" and Cyberwarfare in China" are about Chinese attacks on the US...

http://en.wikipedia.org/wiki/Cyberwarfare
I actually may plan to do some feedback with cancellations in the future, but "you not publishing for half a year and giving everything away for free" seems like a pretty compelling reason to quit a service.

However, the main feedback I got from people (and it happened often enough where I'm convinced it was a common line of thinking) was that folks just weren't involved in Ruby anymore, or weren't doing a ton of online reading because got busy with other things. When the average age of our remaining supporter accounts is something like 3-5 years), that's understandable.

I've had two children since Practicing Ruby was started. Things were hard for a while. I wanted to quit the business many times, but left it in a zombie state in the hopes to do right by my subscribers sooner or later.

Now things are getting a little better for me, so that's what I'm going to try and do.

As for eBooks, I've thought about that 100 times. I would love to get some of the existing content into a nicely tied together collection and release it as an eBook. But it's a big enough undertaking where I feel it'd take me away from other more valuable work I could do.

If we get our cashflow situation to be even a little better where I could fund a couple days a month to work on that, I'll go ahead and do it. But for now, I only really can afford to fund about 1.5 days a week of my own work, so that isn't much to spread around.
NSAKEY is not a Microsoft NSA backdoor. Given where it lived in the security design for Microsoft, it doesn't even make sense as an NSA backdoor.
It is relevant in the general sense that it would only be a matter of time before a "massive data breach" included the keys/procedures to open some or all of the backdoors.
I think your first paragraph speaks to a real tension in the world of software: web applications have enormous discoverability, immediacy, upgradeability, and (often) social collaboration advantages over native applications, but they have ongoing costs proportional to their popularity, so it's harder to run them without ulterior financial motives.
I'm just happy I could deinstall Java on my mothers PC because 98% (?) of LibreOffice functionality runs without Java, so no need to keep this hell of update software on a Windows machine.
The first thing Java and especially the main JVM maintainer for PCs (Oracle) should do is:

1. stop distributing junk like Ask toolbar.

2. make Java automatic updates as easy as updating Chrome.

JVM is big adware nowadays and annoying to update for normal non tech people out there.
I was talking about a encrypted message vs. a non encrypted message, I wasn't taking into account random strings of text. But who would send random strings of text if not terrorists?
The US is trying to establish norms for cyber operations in the international community - this is a missing and critical piece.

But the US does have cyberwarfare policies. As part of a deterrence strategy the US strikes back when it can attribute attacks to a specific party. You may also remember the recent Executive Order from the Obama Administration whereby a series of policies were joined so that the US is organized to levy sanctions against governments, actors and corporations overseas that are involved in sponsoring intrusions into US networks.
>>instead of spending a minimum of $60,000 a year of their own money traveling the world and working their way up tennis’s ladder.

Right the article spent a lot of time being Life Styles of The Rich and Famous but that's the punchline if you want to talk about "saving american tennis" there's not just no money at the bottom, there's negative money. The article mentioned Hurd donating to one college club but if either of them want to save tennis they need to be buying or starting smaller regional tournaments with enough money to keep food on the table for the lower rungs. Or donating to dozens of colleges. Something that gets more players in the bottom. Increasing the payout for one tournament and turning one complex into tennis heaven is useless.
They're referring to http://en.wikipedia.org/wiki/BigTable
I presume you would need to search the web in chinese, not in english, to read about those.
lol, don't run java in your browser man. Just don't. boom bam no Java security flaws
> [0]: Assuming that `otherPerson` in your constructor is a typo, of course ;P

Oops, yup. Fixed.

Your solution is pretty clever, though it leaks memory like a sieve. To get around that, you end up needing something like weak maps.

Once you have those, when you do the pattern you suggest, you are basically doing metaprogramming and reinventing the very idea of an "object" yourself from scratch.

That can be fun to do, but to me it starts to feel less like expressing "the same thing" and more like implementing a new language that lets you express the same thing. Just because I can implement a GC in C, that doesn't mean C has a GC. :)
Show HN: Bin-packing-grid: Web component to easily create a Pinterest-like grid
This works very well until someone knocks on your door and kindly asks you to place some javascript on your site that tells everyone's browsers to send their private keys to your server where they can be subpoenaed.
My own interpretation of this is that since the commercial sponsorship and advertising supported model is a race to the bottom, we need to be looking at alternative models that are focused on social benefit first.

We do have Wikipedia. It would be nice if there were hundreds of such examples out there.
> A.k.a. "All people should be considered guilty until proven innocent."

Not really. Please re-read the comment I replied to. The point is, progress of technology brings new dangers and appropriate means of protection need to be created.
I see.

This has already been done. During Operation Aurora the Chinese hacked into the FBI backdoor built into GMail by Google and used it to gather information about intelligence operations being performed by the United States against Chinese nationals and also used it to perform surveillance of their own against their terrorist and dissident watch lists.

There are probably more examples.

I do not know of a single database that has 'all the keys' to the all software and encryption back doors. If such a thing existed it would be a very valuable target. Somehow, though, I imagine that there isn't such a centralized database.
I'd lean towards a, if you want to keep both, but if it was me I'd be going for B and specced up high as I can do all of my work as a Systems Administrator from my MBP. They're awesome machines and mine is coming up to 3 years old.

MBP's definitely need an SSD (not sure if they still come with HDDs). Mine had a 500GB HDD, I dropped the laptop when using it and damaged the HDD. I replaced it with a 128GB HDD (as I don't have much large software that's double what I need) and the speed difference is insane. App launches are 5-6x faster, bootup is probably 10x faster and more. If I let the battery run out and it slept, when waking it'd take about 2-3 minutes to resume, now it's 2-3 seconds. I'll never own a machine with a HDD again.
Very interesting. I used to work with an older gentlemen who did RF comms in the military and back in early 2000s he used to tell me stories about his random RF hacking. One such story was around a garage door opener he modified with a potentiometer so he could test opening frequencies by rotating the dial. Obviously this wouldn't work for the "newer" style openers.

I've recently purchased a HackRF to start to learn about RF technologies in consumer grade "security" products like garage door openers, Z-Wave, wireless home security systems, etc. I've realized that after watching the first (very well done) video by Michael Ossman on HackRF that it's not going to be something easy to learn overnight.

While I'm sure this would be "easy" to do with HackRF given what I've read on Samy's site, does anyone have any input on how/why using this recycled hardware would be better in some regard?
Computer Network Attack/Exploitation, also see CNO - Computer Network Operations.
"Look how diverse our company is"
Great Pricing Models for SaaS Products – ProductPlan
Actually, this is an interesting question. The U.S. may well be hacking China left, right, and centre. There is nothing forcing China to disclose when they are hacked. There might be political advantage in loudly complaining. On the other hand, they might find it better not to admit weakness, especially to their own people.
You seem to think this is something the US is unfamiliar with. The US has been one of the largest targets of attacks for a long time now. This is just the first time the government itself has been attacked on such a large scale rather than private parties.

(See http://map.ipviking.com/ if you want a live demonstration.)
..and we pay their salaries.
Just playing devil's advocate since I agree with you, but...

I think he'd focus on that "...and no warrants shall issue, but upon probable cause..." bit. With end-to-end encryption, even upon demonstrating probable cause to a judge and having a warrant issued, he's still looking at ciphertext.
lets not forget about the nuts
I would argue with this, a system this archaic and slow would put people off using it. I get annoyed when my eBay listing isn't visible within 5 minutes, having to wait days for someone to craft a HTML page would make the site unusable for me. Also it means any stuff like user messaging is no longer possible, they'll just have to publicly display contact details.

IMO if you took this kind of approach, you'd learn to make up a design using a framework like Bootstrap, then pay someone to either code something basic (on a framework like Laravel for a good developer it shouldn't take much time at all for a user system with listings and a search) and use your design. It's an expense, but not too much, and it'd make or break the idea IMO.
But google ushered in the era of NoSQL? Seems a bit of hyperbole.
https://github.com/cockroachdb/cockroach

"The highest level of abstraction is the SQL layer (currently not implemented)."
If you don't have a hammer, nothing looks like a nail.
The US undoubtedly hacks China, though there's some forms of asymmetry whereby the US has more to lose.

There's also a language and media bubble that filters out information and criticisms of the United States. These bi- and multi-lateral criticisms happen all the time but rarely are subject of US media reporting.
Steganography is always interesting for data storage. It is pretty easy to hide data into pretty much any medium.

See http://jthuraisamy.github.io/markovTextStego.js/ and
https://github.com/hmoraldo/markovTextStego
You might say it's indistinguishable in a theoretical sense, but how are you planning on accessing this random sequence of characters?

Using software?

Why are you in possession of random data on a hard drive? A prosecutor will be happy to spin theories about what it might be.

How do you hide the possession of software you use to acess it? If you manage that, how do you hide the forensic evidence of "file access in random data consistent with evidence of hidden data or a hidden filesystem", in your OS or on your storage device?

I very much want to live in a world where these tools are legal. Otherwise, in the same sense as "lying to the FBI", they will be used as a weapon by law enforcement when none other is handy.
Wouldn't the first act of an evil government be to outlaw civilian armaments and confiscate these guns? At that point, you'd be forced to either go to war(which you agree you would lose), or lose your weaponry. Perhaps the proliferation of guns would help the now criminal resistance acquire an arsenal, but I'm skeptical. European history is rife with examples of armed resistance forming from an unarmed populace.

I wouldn't call my ancestors 'helpless' considering their multiple armed rebellions and constant resistance after being conquered, or examples I'm less acutely aware of like the French or Polish resistance during WW2. It's also worth noting that while this resistance was very much detrimental to the hostile government, it was never the primary factor of its downfall.
See my other comment on this post for an example of this (encoding data using Markov chains)
Something not too far off that I made a couple of years ago for fun. Stores small snippets of data in the URL.

https://github.com/alfg/jot with demo.
Sawing a garage in half: Rash, but legal, judge says
ye's
I don't think Mithaldu was simply being pedantic about the word "free".
I did the same thing for google photos, but just for test purpose. https://photos.google.com/album/AF1QipOjZrywipm-SSH9jVNsKVF5...
That's just wrong. Look at this list: http://en.wikipedia.org/wiki/List_of_revolutions_and_rebelli.... The unarmed revolutions (including some civil unrest but no large-scale deployment of firearms) are plenty and more successful than the alternative, which usually ends in a civil war.
If you want to talk about "widely deployed VMs" then Dalvik is faster. If you want to talk about VMs in general then there are many that are faster, e.g. LuaJIT.
Just European countries? Pretty sure it's many more than that.
Technology is now destroying more jobs than it creates
Stops loading here around 20%... perhaps missing these resources?

http://jazz.computer/build/updown.js.map
http://jazz.computer/build/0.js.map
Oh that's cute. The U.S. has essentially upgraded its military forces and gets to beta test it in the deserts of the middle east. Did you think 'Winning the hearts and minds of the people' was an actual mission? And the U.S. pulling that off while only losing ~5K troops just furthers how laughable your statement was
which is, like, 18 months old; cassandra has come a ways since then.

(full disclosure: I work at DataStax and work on improving cassandra every day)
That's too bad. Theoretically, we have english-language journalistic institutions doing that for us.
Google Moves Dart to GitHub and Kills the Chrome Dev Editor
Dirty Bomb / World of Warships / Fsx and Much More
Wouldn't it be funny if reddit just randomly edited the comments to break the encoding...
The state tax regime being what it is, it is not uncommon to incorporate in WY. This is similar to the NV incorporation thing, or commonly credit cards being based out of SD with call centers in UT.

Because of recent regulatory changes, I'm thinking that as new ventures find it harder to take advantage of the double Irish Dutch sandwich arrangement, I may incorporate several project interests there. I'm far from the only one.

That said, MT businesses are hard enough in the US. Exotic ones like Coinbase would be even worse (harder).
Erasure-coded comments distributed across the huge number of abandoned Wordpress blogs and phpBB forums that are out there. Plenty of storage, pretty readily accessible, low probability that even one fragment will get deleted, and even if one does that's what the erasure coding is for.

EDIT: also, Wikipedia never deletes anything. Even if your "edits" get reverted, you can still find them via the history page. Hmmm.
The former is uttered by someone who doesn't know what "cyber" or "database" means.
This sounds like a /u/jedberg type of thing to do.
> but it's trivial to tell if a message is encrypted or not

No it isn't. Encrypted data is indecipherable from random noise.
What did they use the sixth submission for? You can win it in five submissions, can't you? :-)