skysight-inc/HackerNews huggingface dataset:
Thank you so much for your interesting feedback!

The full featured vision for agilescope is indeed more than just the estimate. Making Estimates simpler is just the start. The next step is the integrated time tracking and some project task-list features. It will answer two very important questions in projects: how much time/money is left and how much of the actual tasks are already completed.
Does that answer your question?

Also your mentioned "market-fit problem with ALL estimation tools" sounds interesting. What do you think is that market-fit problem? Maybe we can find a solution for it.

Thank you so much.
I feel like we need to change our direction in terms of "identity" all together.

We seem to be relying on an "identity" that is our name, ssn, phone number, credit card number, or all these different little bits of data clumped together. Too messy, too easy to steal, to fake, to easy to sell.

Maybe our identity is more like a bitcoin wallet. It's an encrypted clump of data that we only keep with ourselves, and ourselves alone. It could store money, confirm that we are who we say we are because it can have our picture in it, our names, our "numbers" for various things.

Then, when someone needs ANYTHING from us, be it proof of identity, money, or trivial info, we can send them a piece of useless information salted with something that they then return to us with the same salt to get back a confirmation, or money, or access to "use" our other numbers, but they never GET our other numbers.

If you want my phone number, you send a request to me asking for it. I get the request, confirm it, send back another piece of data to you. This is NOT my phone number, but something you can use to send to me again in the future when you want to call me, and then my number is dialed, but you never see it. At any time, I can wipe you off my safe list, and you don't have my phone number anymore. Same thing can work when paying for something, or proving I am who I say I am when getting a loan, buying beer, whatever.

Maybe this is ridiculous.
In general, js is more about good practices and craftsmanship, and less about finding ways for the language to force people to do things.
"what is this, wikipedia?"
Apple warns AltConf: Do not show the WWDC keynote stream in your Viewing Room
> Encrypted data is indecipherable from random noise.

Which makes it noticeably different from all other (plaintext) communication.
Actually, it sounds like GoDaddy simply doesn't make money.

"The company lost $143 million last year. Granted that's less than the $200 million it lost in 2013, and the $279 million lost in 2012 -- but GoDaddy admits it hasn't turned a profit since 2009..."[1]

[1] http://www.zdnet.com/article/godaddy-ipo-to-value-company-at...
Thanks MrZongle2, much appreciated!
"Microsoft said that the key's symbol was "_NSAKEY" because the NSA is the technical review authority for U.S. export controls, and the key ensures compliance with U.S. export laws" (Wikipedia on NSAKEY)

We actually don't know what it is past that. So, Microsoft says it was required for export approval & made backup key. NSA controls those export requirements. A declassified CIA document [1] from the period shows export changes were pro-escrow and most big companies were onboard. In short, the NSA, FBI, CIA, and other companies agreed on escrow keys for export of strong cryptography. Microsoft added an escrow (err backup) key called _NSAKEY for export approval. Logically, we should assume it was a COMSEC backdoor for NSA so Microsoft could make money on exports.

Assuming anything else is logically questionable given no hard data contradicting this and Microsoft's history of covert cooperation with NSA in much worse ways. Hard data as in statements by Microsoft such as above straight up saying who ordered the change and what it does vs the mere speculation we saw elsewhere.

[1] http://www.foia.cia.gov/sites/default/files/DOC_0006231614.p...
Frankly, given the prevalence of clickbait on the internet in general, and the general savviness of the HM crowd, i did not even consider in the least that the nature of this clickbait could not be obvious to everyone. A bit of a mistake of mine.

I've explained that nature in a comment a little further up. :)
> But who uses the term "database" to refer to anything but a store of data on a computer system?

Technically, a "database" is just an organized collection of data. While nowadays it's increasingly rare to encounter a non-electronic database, these were once upon very commonplace. One specific example that I recall rather fondly is the list of Dewey Decimal cards that libraries would keep in narrow file cabinets so that users could search through them and find the books they wanted. While my school library's catalog was already digitized, I still used these cards sometimes, finding books that had been omitted from the digital system for whatever reason (though these were eventually cleaned up when the digital system itself started to include the creation of spine labels, thus causing non-cataloged books to become more obvious).
"don't exactly run Java" - Dude, most Android app's are built using Java.
Yeah a FISA judge in China authorized the search so it's ok.
Yeah, but most unencrypted data doesn't look like random noise. If you run a few statistics on a packet/file/whatever and it looks random, you can comfortably assume its probably encrypted.
Age of pre-hoverboards: robotics grads electrify skateboard
There's other threads here were people suggest this.

It seems pretty speculative to me that there's some large database with all of the mandated software backdoors and keys to get access to. And if it existed, I don't know that it would be such a large threat.

Certainly security bugs and professionals inside of industry are targeted by hackers already.

Given everything else, I don't know how large an issue this is (compared to say, hacking nuclear defense systems, energy grid, military C2C, etc).

It would be interesting to see whether this is considered a threat scenario by the USG.
Facebook Launches Light App for Emerging Markets
During Operation Aurora the Chinese hacked into the FBI backdoor built into GMail by Google and used it to gather information about intelligence operations being performed by the United States against Chinese nationals

[citation needed]
Actually no, Dalvik is slower than the JVM and with worse GC.

And LuaJIT faster than the JVM? Where you got that? You wont fine many benchmarks or people agreeing with you. LuaJIT is faster (much) than most scripting languages, but not faster than Java.

Are you comparing startup time?
How to Install CURL in Windows Easily
The New List of Words You Are Forbidden to Use on the Internet in China
Fair point, but you are assuming I rely on U.S. media reporting. I most certainly do not; in fact, I pay little attention to U.S. media reporting. I do rely on English language reporting, however.
>When someone sell you auto-healing and cluster reliability, they are selling you AP, which means that you lose the C, something we all takes for granted. Cassandra is one of those. Think of what you can't do when all your nodes can have different data of the same model.

This is pretty hyperbolic. Netflix does perfectly fine with this model given that they run Cassandra at its lowest consistency level[1]. If they can reliably store watch histories, run recommendations, settings, and playlists on this model well I'm wondering what you have in mind when you say "think of what you can't do". Besides, its not like large AP systems are a new thing, have you ever overdrawn your account?

[1] http://planetcassandra.org/blog/a-netflix-experiment-eventua...
What are the most promising/interesting new programming languages?
It's always fun to see how different people throw around the seemingly-absolute terms "slow" and "fast" when there is always some other platform they're implicitly comparing to. I had a chuckle about this the other day as I was evaluating BEAM for potentially running a re-write of a Rails app; I was thinking how pleasant it was to use a platform so fast when I came across people ridiculing how slow Erlang is (presumably relative to C++ or even the JVM).
FoundationDB was the only other database that attempted the same level of consistency as CockroachDB.

There's a reason Apple bought them.
It's not a data breach, it's essential that the US keep their database unencrypted so that the Chinese national security agency can search their records for ties to terrorism.

If anything China just did the OPM a favour to help them keep their freedom.
I find it interesting that the third-place attacker - behind only the United States and China - is currently the Netherlands.
> Copyright infringement? It's just a few digits of π! They were always there!

You really have to admire that creativity
But this has already happened and the judge in question 'compelled' the suspect to decrypt her laptop. I don't know if she ever did, whether there was any evidence that was germane to the case on it or whether she was held indefinitely but there is recourse for the authorities in these cases.

http://www.cnet.com/news/judge-americans-can-be-forced-to-de...
There's likely a couple of factors which could include these:

* A breach to internal database level would, in the majority of systems mean the attacker already has all the keys to use the database system

* A database cannot perform a lot of its functionality (e.g. JOINs) without access to the data & if the encryption keys were usable at the database level to perform such functionality it would make the encryption redundant.

A working 'encrypted database' system would likely need to use Hardware Security Modules (HSMs) to prevent key exfiltration, you would distribute these to people who need to use the database, who would need to decrypt it in mostly its entirety to use it.

It's possible by reworking entirely how modern databases work (fully homomorphic encryption is probably useful here) you could create a system where the database doesn't have to already be fully decrypted for you to use it, but as far as I know it doesn't exist (startup idea?).
agree. seeing your post go live and an up to date functioning calendar might be important, I’m trying to be open minded so something goes live, that’s my priority.

if i provide wireframes, user journey and flat psd design, can you quantify 'not too much'? avoiding to pay someone to validate the idea would be ideal though.

I might just buy an airbnb clone to test it out, why is no one suggesting it, does it not work at all or is it just bad practice from a tech perspective but could solve my case?
I always knew this day would eventually come. It's kind of sad.

I had created this years ago to display Twitter data using Pipes, YQL and Google Charts. I haven't had to touch it in years but it's always just quietly worked, and some people seem to like it:

http://xefer.com/twitter

; e.g.;

http://xefer.com/twitter/xefer

I liked that Pipes allowed services to be chained together driven from the browser.
It was not my intention to fear monger. I was speaking by analogy, not sure if it was not clear or if you disagree with my argument.

What I am saying is this: in a world where weapons of mass destruction becomes more available, privacy/anonymity is mostly a non issue. I will say it outfront: I am skeptical of the evil genius in a basement, holding a day job while secretly moonlighting on his personal armageddon. Players willing and able to conduct this type of terrorist attacks will probably not rely on the same IT stack regular joes do.

Assuming they have the financial resources and personnel to pose a credible threat will know to not use their iphones. They will know to use vintage hardware, to download and compile their own Linux/OpenBSD from scratch, to get their crypto libraries from "rouge" countries outside of the sphere of influence of the US, etc. Those that do not, they will be busted early.

Those that pose the real threat then are the ones that you cannot stop by making technology harder to get. As long as there is demand, there will be supply. And they will have gear that is in the same ballpark as the forces that are supposed to stop them. Probably not as good as the best there is, because you can never outspend the guy with the printing press, but good enough to hold their own.

And then there is the cost. Not only the conspiracy theory cost that the government is going to turn fascist, but the very real cost of giving real criminals an edge over the public. They already are breaking the law, they wont care about using banned technology. If they can afford it, and if they can either profit from it or avoid being caught using it, they will get it in the black market.
> 2006-2010 [...] a new crop of JVM-based languages emerged. [...] JRuby was soon followed by Groovy, Scala, Clojure and many others. Each language introduced features that were unique and unavailable in Java

Languages that are JVM versions of already existing languages were out long before JRuby (JVM' Ruby) and Clojure (JVM's Lisp). I remember Jython (JVM's Python) was first released around 1997, then called JPython. At that time there was also the Jacl language (JVM's TCL).

Beanshell's also an older language, which Groovy cloned and added closures (since made obsolete by Java 8's lambdas) and a meta-object protocol to. As for Scala, it's like a more statically-compiled and functional version of Groovy, about which Groovy's creator said he'd never have created Groovy if he'd known about Scala.
They were in a bad place but in the last two years they've spent considerable time stomping security bugs - Java was the only one left standing at the pwn2own comp last year https://nakedsecurity.sophos.com/2014/03/13/pwn2own-day-one-...
Apple wants you watch the WWDC keynote stream on your computer[1]... so does it make any difference that I watch the keynote at home, in a cafe or at AltConf with other Mac/iOS developers? What a bunch of control freaks at Apple.

[1] http://www.apple.com/live/

Live streaming video requires Safari 6.0.5 or later on OS X v10.8.5 or later; Safari on iOS 6.0 or later. Streaming via Apple TV requires second- or third-generation Apple TV with software 6.2 or later.
Is Nokia's example really good ? Nokia remain one of the largest companies in telecom hardware provider and handsets was always a side business for them. They successfully sold it to microsoft.
I came expecting another proclamation of global perishing of kittens, caused by relentless use of git rebase. Instead i came to find an excellent guide i can link to all my coworkers. This is a really pleasant surprise.
Connect ethernet cables in a loop, keep sending data back and forth "around" the loop. Data is stored in cables.

I think this was from an old BOFH.
Fidonet, in some obscure distributed echomail area? :)
Well, if it's a problem which Windows programers have, then it's not in their imagination, right? But that's nitpicking.

The original article is about Powershell. So I could, for example, say that people who are only familiar with bash (etc.) wouldn't know that Powershell doesn't pipe text, but rather .NET objects. Hence one could go and do something awesome like

> ps | where { $_.PM -gt 10240 } | sort PM -Descending

... and get all the running processes that take up more than 10MB of physical memory and are neatly sorted by one of the columns. And not even once did I grep.

Your argument is basically that Unix is better, because Unix shells aren't CMD.EXE, which is absolutely true.

Shockingly, Powershell isn't CMD.EXE also.

I may have erred on the exact name of the logical fallacy, but it doesn't mean that there is no fallacy: valid views discarded based on the blind assumption of Unix's infallibility. Feels like it's 1999.
It is not profitable for the country. It is profitable for third rate defense manufacturers who produce the hardware.
A great talk by Jake Appelbaum that one should watch: https://www.youtube.com/watch?v=6kilAPZ-vGA A very in depth and revealing talk about the current state of the union of 'identity' on the web and the apparent digital doppelgängers we carry around with us. Frankly the notion of a digital doppelgänger is hillarious and identity is not a hard problem when people are effectively schizoid when they surf and flitter between multiple idens all the time.
Hi windexh8er, I choose this hardware because it's portable and convenient. It would technically be much easier to carry out this attack with something like rfcat via yardstick one, hackrf, etc, but I didn't want a USB based device and no need to build my own device when something existed with everything I needed! And did I mention it's pink?
Show HN: Android method count Gradle plugin to avoid DEX limit
The serious answer is that there are such things as non-electronic databases.
Perhaps the data you need to search is not the same as the data you might want to encrypt? For instance name, address, ssn (or similar), billing info, etc. could all be encrypted and you could still look for e.g. 50yo women in the Northeast USA who haven't had a checkup in the last three years.

Of course many DBs need to search by name, but maybe it can be set up to search by a hash of name? Hashes seem a bit simpler than homomorphic search.
I remember once briefly thinking how fun it'd be to do something like this, before realizing with the spam filters the way they are it'd probably be the last thing I ever did on the site.

Neat proof-of-concept though
Governments going completely insane on their people are relatively common. Everyone thinks it will not happen to them, until it does. That's a much greater risk than rogue individuals. To double the big risk to half the small one is bad risk management.
"operation aurora fbi backdoor"

https://www.google.com/webhp?sourceid=chrome-instant&ion=1&e...
A nice new example of what's called "parasitic storage." This kind should be easy enough to detect on Reddit's end: encrypted and binary data look very different from text. Further, if a site allows binary, it's different from crypto. The only type that's hard to filter is custom stego whose patterns look similar to normally accepted traffic. Extra true if it's a high volume site.
Where to advertize or get feedback from your application?
Hi, I have created an inventory and a pos system that is used by one of my clients locally. I have uploaded the said web apps online to get some feedback and suggestions from other users.

Where are the best places to put the web application.

Web Apps:
inventory.arcibalio.com
posdemo.arcibalio.com
>>Perhaps the data you need to search is not the same as the data you might want to encrypt?

Bingo. That would be the correct middle ground. This is why some of the database compromises that have happened are not complete disasters. I know there have been a few instances of systems that had their db's dumped, but passwords were safely protected by appropriate salting solutions.
I don't know about the rest of their stack, but their Machine Learning team is pretty good. They were using PMML the last time I spoke to them. And a little bit of Scalding as well. Preventing fraud at scale is quite a challenging exercise.
> Then governments with enumerated powers would need some unprecedented powers to get into that unprecedented thing, right?

Only the federal government is limited to its enumerated powers. So at best your argument is that mandating backdoors requires state rather than federal action. State governments can do whatever they want unless it conflicts with a Constitutional right, and there is no right to have a place to stash evidence the government can't get to with adequate process.
Anyone know how well installed the cross-signed root is? Sounds like it's going to be DST Root CA X3?

https://ssl-tools.net/certificates/cv0tp9-dst-root-ca-x3
The 1.5 billion in debt is sort of brutal too. Either way, not my favorite provider. (I admit bias though, as I run a competing hosting co.)
How would we know? The most notable attestation I can think of was NK-Sony, and that is dubious at best. I'll stipulate that China is behind lots of hacks, but that means attributing any particular one to them could be just a good guess.
:) Thanks good Canadian.

Yes, I am speaking primary to a US audience and from my own experience as a US citizen.

As a tangent - how is Canadian reporting overall? Is it reliable?
Yet Twitter experienced phenomenal growth, going from zero to tens of millions of MAU in their first 4 years, proving your logic wrong (paraphrasing you, you said "if growth was so great surely a company would release MAU"). So if you apply the same criticism you make against Coinbase to Twitter, you would have said in these first 4 years "Twitter's metric are all vanity metrics" and you would have rejected Twitter's claims of growth. Well you would have been misguided, as we now know for certain Twitter WAS growing during these first 4 years.

This is why you look stupid to reject exchanges' claim of growth. Yes we know MAU is less than number_of_wallets. It's mathematical. But still, it's silly for you to reject their claims of growth as you have no basis for it. Not releasing MAU doesn't mean you are not growing, as Twitter demonstrated.
http://bash.org/?98
I think you didn't read the article carefully enough. There is a precise list of things you have to do in order to get into a German university in the middle of the article. It's titled "How to apply in Germany." Also there is a lot of useful information about typical rents, expenses for groceries, etc. and there are a number of links to very rich resources with more details. I think this article is an excellent starting point for anyone who is considering to study in Germany.
Root-and-intermediate is a required practice by the CA/Browser forum. See section 6.1.7:

https://cabforum.org/wp-content/uploads/CAB-Forum-BR-1.3.0.p...

(I'm sort of curious how people still have trouble with cert chains, given how long this has been a requirement for all CAs.)
You don't always have that choice. There was a European country (I forget which one. Norway?) that was using applets for access to government services.
Reminds me of: https://twitter.com/manzoor_e/status/604072602114605056/phot...
I am familiar with the term as it was used prior to computers. But the BBC's insistence on qualifying a database as a "cyber-database" in 2015 is gross anachronism the likes of using the phrases "touch-tone phone" or "world-wide web."
Does anyone know of a good alternative?

More Android unit sales is all this is about.
Trading Losses-It’s Just an Operational Cost
You'd have to factor in a ton of redundancy to account for the human bits who just got bored and wandered off.

Anyway, people would probably just start saving the bits on this computers after first job or two. Which would be an amusing result for being just a convoluted interface to a remote hard drive, but it's conceptually less interesting then actually using distributed human memory as a digital storage medium...
C or any compiled language, you mean.
I doubt there could be such a database today, but I'm thinking in terms of a scenario where all "secure" communications channels available to the public are required to choose from some list of compromised encryption standards. Perhaps each company would maintain its own keys at first, but after a few cases of being unable to comply with court orders because someone lost the keys, the obvious next step would be a central registry.
Self-defense is an interesting approach to privacy.

So far, we've been treating encryption as a matter of privacy (Fourth Amendment). But since the U.S. government has historically treated encryption as a weapon, perhaps we could also argue that encryption is a matter of the Second Amendment. It would be really interesting to get the NRA, Rand Paul, and Bernie Sanders to speak out in favor of encryption at the same time...

Of course, the flip side of this approach is that it's much easier to support restrictions on the possession, use, and export of weapons. "Export-grade" ciphers are still causing issues 20 years later.