jarito

Or it could be the reason they've said they did it - this was a primary vector for malware authors to compromise user's information and devices. Not everything is a conspiracy.

Sounds similar to Repose (http://www.openrepose.org/).

I think the joke is that NIST is a standards body, but does not have a standard for naming their projects.

I just tried it and the new tab page is dark themed for me.

Could you provide some more detail on what made it a drag? Was it just the Amazon API issues? Cost? Security? Governance? Your experiences here seem like they could be valuable to other folks in the same situation.

Good? If the acceptable price paid for diamonds in both the wholesale and retail markets is lowered, then the pressure to mine diamonds (and the attendant violence & natural damage) should be lowered as well. That seems like a good outcome? Additionally, DeBeers is unlikely to be able to dominate the lab-grown market so this step should legitimize lab-grown stones with little risk of creating another monopoly.

They do. You can do that with their WAF (and maybe without it).

https://www.cloudflare.com/waf/

They mention several times that they require you have $25k of capital to join the program. However, that probably only covers network deployment and other costs like marketing so I would expect the actual outlay to be quite a bit higher if you want to be successful.

They really couldn't. If I remember correctly, US law requires that a dealer provide replacement parts for publicly sold vehicles for 10 years. If you have a small run of cars with very custom parts like the EV-1, the cost of maintaining that capacity is likely prohibitive, so you kill them.

This doesn't really seem to be enough. The combination of home / work location and friends is likely enough to allow for the determination of identity, even if you use a fake name on the site.

They do. If you go to the Red Cross site, you can select what you want your donation used for. This includes Disaster Relief, Where It is Needed Most, Your Local Red Cross, Home Fires and Harvey.

The value of BlueApron isn't on a per meal price basis. As you mentioned, buying the ingredients yourself will be significantly less expensive.

The value for Blue Apron for us:

* I don't have to look through and choose recipes.

* I don't have to spend a hour in the store, we pretty much just get staples (eggs, milk, etc) these days.

* I don't throw away near as much food. We used to throw away around 50% of food purchases due to changing schedules / spoilage. We actually saved money moving to Blue Apron.

* Blue Apron can include specialty ingredients that I won't normally have (e.g. I'm not routinely going to the Korean grocery).

I like to cook. Blue Apron makes it easy to do that while exposing us to new and interesting recipes without committing a lot of time to the process. That's worth money.

Not an expert, but groundworks are expensive. Building on an existing foundation would be easier. Include the fact that ancient cities were usually founded in advantageous locations (rivers, etc) and the existence of infrastructure (roads, local farmland) then staying put makes sense. In fact, without modern communications, if you moved, no one would be able to find you.

It discusses this in the article. The challenge here is related to funding that is primary delivered by the EU structures. Now that the UK is leaving the EU, there is some concern that projects that contain UK representation, or are lead by UK researchers, will not be funded on time.

This is due to the confusion around what Brexit will mean, how long it will take, how far it will go and what agreements the EU and UK will sign.

The cert on guideline.io is also expired. Not great.

Generally accepted practice is no - they aren't worth having. Containers should only contain a single process. That process shouldn't be writing logs to disk (hence no logrotate) and timed tasks would generally be done outside the container rather than in it (though there are a lot of ways to skin that cat).

Single process containers generally don't need all the baggage of a full init system or other dependencies - hence this project.

There is no standard dictating what organic means. Many 'organic' products use processes and methods that most people would not recognize as organic. A consumer buying an organic product has little to no knowledge of whether the producer is being faithful to the concept. Add a huge price markup for organic products and many producers are incentivized to mark products organic even if they really aren't - and many are doing so.

There are attempts to standardize, but none have the recognizability needed by the majority of the populace to make them effective.

Ben,

You might want to fix your privacy page. It says 'HIPPA' ready when it should be HIPAA ready.

Seems like using a flag that gives an unknown contact your home address is a bad idea. That information might not be something we want to communicate right off the bat.

Why not just use Swift?

http://docs.openstack.org/developer/swift/

It can be run as a stand alone app so it's generally pretty simple and can include support from https://swiftstack.com/.

I assume that they are implying that the code is not constant time. In this snippet, the code bails as soon as a deviation is detected. This can, in theory, allow an attacker to determine the desired value by measuring the time taken to reject incorrect options. I haven't reviewed the code to see if this is actually a problem, but that's my guess for why it was highlighted.

LibreSSL removed a significant portion of the optimized ASM from OpenSSL. This means that for key operations it is significantly slower.

That's an interesting idea as well. A molten salt reactor or something similar would have the same benefits as nuclear, you just trade reliability for cleanliness. I would imagine that a molten salt set up would be significantly cheaper to build as well, but I could be wrong on that.

Why not look at something like nuclear? Since the need is both electricity and heat, a nuclear reactor seems ideal since you don't have to convert power back in to heat - you can just use it directly.

With modern recycling techniques and reactor designs the chance of meltdown and wastes are limited, but that seems better than more coal.

Not an expert on reactor design vs desal design by any means - would love an opinion on the challenges here outside the standard nuclear ones.

All the protocols for Signal / TextSecure are open source. Seems like people will probably implement desktop clients at some point, which would be really nice.

Doesn't seem like this addresses Jenkins? Just source hosting.

It really seems a large reach to assume, and accuse, the airline of racism towards Indians. There is little to no direct evidence other than the author's assumptions about the motivations of BA employees.

There is no doubt that, assuming the details of this story are true, BA employees acted poorly. This is not surprising. Flying is terrible and the businesses that work in the field are terrible. BA should make good, but let's keep the accusations of racism to places where there is actual racism and not just extremely poor service.

Every airline has stories like this. It is not limited to a particular nationality, creed, class or location. It doesn't matter if it is an expensive ticket or a 30 minute connector flight. Airline employees are a grab bag. Some are good and some aren't. Airline passengers are the same. I've seen many a passenger act inhumanely to some poor attendant just trying to rebook them and I've seen attendants treat passengers like cattle.

Read the article. It has a composting toilet, uses skylights for daylight illumination and has solar panels for electrical needs. Doesn't seem to use it for refrigeration though, which seems limiting.

It is a distributed configuration management clustering product like zookeeper. It simplifies the creation and sharing of mostly configuration data in clustered or distributed systems.

Did you read the article? Yale not only attacked the authors of the site, they used their web content filtering software to block it as malicious. Not much can be done about that and still retain you users.