biggerfisch

It seems likely that he really is alive, but AFAIK, there's been no recent signature from a wikileaks private key. People on reddit seem to be convinced he's not in control of the keys anymore, which is somewhat disturbing.

Some of the current sites still up are likely to be exploring their options in that regard. The core problem comes down to the fact that a (potential) compromise (as in w.cd) results in the admins hitting the Big Red Button and nuking everything from orbit.

Additionally, while much metadata was lost in w.cd's demise, a large amount of the files have already been recovered through various replacements.

His comment about the "zoo" of data-driven tests made the way my university's major algorithms class did tests finally make sense. It's not a concept that particularly easy to search for when you're working from the command of "make tests with this filename format, 'test-<args>'", nor is it even something that strikes one as something that might be an actual design pattern (at least for me).

I do wish the reasoning had been explained to me far earlier as I might have been able to really recognize the testing as useful and not just another strange requirement.

So is this really anything except an interesting way of deriving MOND? The article says

> Verlinde thinks his theory will be able to handle the Bullet cluster observations just fine.

but doesn't actually show it doing that. As that's a major differentiator between his system and MOND, shouldn't that have been looked at? Seems to easy to otherwise dismiss this as a weird way of supporting MOND

In the US, unpaid internships that provide "immediate advantage from the activities of the intern" _are_ illegal.

Forgive me for only doing basic research into this, but couldn't one set up some solar panels for electricity, dig some shelter, and recover water from the atmosphere? Wouldn't that do a decent job of allowing at least some degree of livability there?

As someone who's worked with OSS while employed at a very large company, using BSD licensed software is infinitely easier than GPL. GPLv3 was likely to be flat out banned and even GPLv2 required many approvals and a long process from legal - all this to even use it internally where it would never directly impact a customer. GPL is simply too dangerous for many companies to touch, and those that do have a disturbingly high rate of failure to comply with all terms.

If the goal of making your software open source is to allow anyone to use it, GPL makes that _harder_.

Sorry, wasn't clear. I assumed it was obvious that bitfinex's online key was also compromised, no matter what happened with BitGo, whether their key(s) were stolen or if their api was abused.

If it turns out that BitGo did not properly enforce limits (as opposed to being hacked or ???), would they be liable for the losses?

Has it been verified that BitGo's key was not simply compromised? As unlikely as it may be that both online keys could be compromised, it certainly seems that it could have happened (perhaps while it was not internal to bitfinex, it could have been internal to BitGo?)

Thanks, I somehow missed it first pass.

Am I missing something or is there still no NFC support?

The "benefit" is that it causes a "trusted" tab to change, not a new one that a user might expect to be tainted. If I open a link from HN (for example), read it, and close the tab, I'd expect to be back at HN. If the link changed my `window.opener` url to a fake-HN, I could do some action that asks for a password or some similar data. It's more likely to succeed since the user already trusts the existing window/tab/site.

Even if he is, it's still information that doesn't need to be revealed. It's not a security issue in and of itself, but if combined with another exploit, it could help an attacker. Good security is all about layers and protecting information.

LAN IPs are also useful for distinguishing computers from the same external IP which could help compromise your identity or privacy.

Well, imagine you're in a controlled environment (eg, China) and having your non-vpn IP leaked could compromise your identity. Having an easy way for a site to reveal you is therefore a security issue.

I much prefer tmux because it really doesn't matter what system I'm on, I can easily rearrange windows/panes and form a custom workspace. While iTerm can do this on the local mac, it's a real pain to use tabs/splits in it over SSH. Plus, like others mentioned, tmux stays alive.

I also just prefer the interface of tmux. You can completely configure your status bar as well, and I find that really useful. For example, my status bar [1] has my current music, host, time in the two timezones I care about, and load. I also use a commandline chat client for work that I can embed into a tmux pane and never have to switch away from iTerm to communicate.

[1] http://i.imgur.com/XrKtV7J.png

> Their site is unbearably bloated with scripts and whatnot

I don't think most people (outside of HN for sure and still a lot within HN) actually run NoScript or something that makes them aware of the number of scripts on a page. And frankly, 99.9% of the time, I don't care about that.

Hangouts has an option under "SMS" to disable automatic retrieval of MMS messages. Can anyone confirm if this at least stops the instant loading of malware?

I might add more info about supported banks before users start to expend effort on signing up. As soon as I saw that my bank wasn't supported, I lost interest.

> Then they sacrificed the animals and looked at their brains.

That seems... extreme. Interesting word choice there!

Their technical details page seems to push eMMC pretty hard but their prices, 64GB for $80 [1], seem really high compared to a microSD card. Can anyone with experience comment on whether the eMMC has anywhere near the value for its price?

[1] http://hardkernel.com/main/products/prdt_info.php?g_code=G14...

A helmet has saved my father's life several times while commuting to/from work. We have at least one of the helmets saved, complete with a crack down through the entire side. It was a hard enough hit for him to be unconscious for a few minutes. The EMTs said that without the helmet, it would have been dicey odds of survival.

Sorry for the silly question, but the slides seemed to indicate that any USB keyboard can read any other keyboard's keystrokes? Is that a correct understanding? Otherwise, I don't see how they can steal passwords. Am I just missing something obvious?

The only solution I found involved leaving the thief alone several times - is that not worse than leaving the thief with a family whose parents are apparently dangerous?

> Most people are quite dumb.

I know what you're trying to say here, but consider today's xkcd[0] as a counter-point. I think "most people" are quite capable of solving a lot of puzzles. This issue is that any puzzle that we can solve in a reasonable timeframe is often a good target for a computer-generated solution as well.

[0] http://xkcd.com/1386/

The FAQ isn't saying that the only bad thing is that email accounts might be compromised, simply that that's one reason to not email passwords. While you're right about email comprises allowing an attacker to simply reset a password, the first few sentences are still very important.

> Email is not a secure medium. It was never designed to be one. It’s susceptible to Man In The Middle (MITM) attacks and a slew of other issues.

Email by default right not isn't encrypted. Anyone (eg, a 3-letter government agency or a malicous actor on an unencrypted wifi network) who can intercept your traffic can read that password - and you can't even tell. At least with a password reset there's the "notification" of "my password doesn't work anymore". That's mitigated by SSL/TLS, but it's still an important point to consider.

Looks cool but I'm curious how it stacks up against services like Carbonite (for example) that actively monitor and look for changed files. If I update my archive/folder/etc that I want on deepfreeze, do I have to upload it myself or will that be done automatically?

It depends on the class, but most are taught both. At my school, almost everything in the science classes was done in metric, though we were of course very familiar with imperial.

I think a flaw of the rent analogy is the same one as in comparing the (illegal) downloading of movies/music/etc to stealing the physical medium. In the physical space, when one rents or buys something, the seller has less product available at that time and the impact of theft is much more noticeable whereas online, if a user signs up but never hits the servers, they uses no resources at all (except maybe a few rows in a database).

That said, I agree that contracts should be honored and paid - even when not used.

I think his last line sums up his message: "This isn’t an argument, just nonsense." My interpretation of that was that he is protesting the act of arguing about what makes good software design, and calling it nonsense. But then again, maybe his entire post is just that, nonsense.

(If anyone has a better explanation, please feel free to correct me. This was simply my best guess)