Hacker Newsnew | past | comments | ask | show | jobs | submit | 2013-12-08login
Stories from December 8, 2013
Go back a day, month, or year. Go forward a day, month, or year.
1.David Simon: 'There are now two Americas. My country is a horror show' (theguardian.com)
323 points by patrickk on Dec 8, 2013 | 363 comments
2.No Man’s Sky Is A Huge Procedurally Generated Sci-Fi Exploration Sim (indiestatik.com)
280 points by radley on Dec 8, 2013 | 116 comments
3.NSA morale down after Edward Snowden revelations, former U.S. officials say (washingtonpost.com)
267 points by mxfh on Dec 8, 2013 | 167 comments
4.Baby's First Garbage Collector (stuffwithstuff.com)
217 points by daw___ on Dec 8, 2013 | 84 comments
5.CPU reliability – Linus Torvalds (2007) (yarchive.net)
203 points by semicolondev on Dec 8, 2013 | 95 comments
6.Further improving digital certificate security (googleonlinesecurity.blogspot.com)
190 points by lelf on Dec 8, 2013 | 84 comments
7.Airbnb says this man does not exist. So I had coffee with him (pando.com)
184 points by antr on Dec 8, 2013 | 190 comments
8.An open letter from Carl Bernstein to Guardian editor Alan Rusbridger (theguardian.com)
179 points by swores on Dec 8, 2013 | 63 comments
9.Is it bad practice to use your real name online? (security.stackexchange.com)
167 points by anuragramdasan on Dec 8, 2013 | 161 comments

More like "USA morale down after Edward Snowden revelations, much of U.S. population says," I'd say.

That happens when you do something most people would feel shame for.

A major difference between NSA employees and the rest of us is that they can easily stop what they're doing. Let's hope their pitiful loss of morale leads them to develop a conscience, respect for the law, or whatever it takes to stop doing things that lead to feeling so bad.

> “They feel they’ve been hung out to dry, and they’re right.”

Bullshit. They're adults who chose to do what they did and work where they work.

We have emotions to guide our behavior. If they feel bad for the environment they chose to work in and the work they chose to do, maybe they should look in the mirror and ask if they ought to reconsider their choices and do something that doesn't draw shame and contempt from the rest of the world while undermining their county's interests.

11.Arvind Kejriwal (techapj.com)
166 points by jalan on Dec 8, 2013 | 44 comments

I would love to hire people like you... people who are willing to take a paycut and small stock grants in order to fulfill my grand mission: to make myself as rich as possible.
13.An effective eye drug is $50, but many doctors choose a $2,000 alternative (washingtonpost.com)
128 points by jorganisak on Dec 8, 2013 | 115 comments
14.“No-fly” trial: Closing arguments (papersplease.org)
127 points by revelation on Dec 8, 2013 | 42 comments
15.Not everyone is going to like the thing you made, and that’s okay (wilwheaton.net)
122 points by frostmatthew on Dec 8, 2013 | 25 comments
16.Touch Gesture Icons (mobiletuxedo.com)
110 points by Sami_Lehtinen on Dec 8, 2013 | 19 comments
17.Writing HTTP Middleware in Go (justinas.org)
112 points by babawere on Dec 8, 2013 | 23 comments
18.India state polls: Common Man's party wins Delhi seats (bbc.co.uk)
108 points by giis on Dec 8, 2013 | 13 comments

I was in a Hadoop course with a person who had just left the NSA in mid-June (right when the Snowden bomb dropped). She was in complete denial about his allegations, and was outright hostile to the rest of the room for "actually believing he was telling the truth". A key quote: "Do you really think they just let people access these systems without rules? You really believe that?" (the tone was beyond condescending, implying that we were all naive and ignorant) My argument to her was that my experience dealing with intelligence agencies is that they build stuff very quickly, focusing on capabilities. Anytime systems are built like this, safeguards are an afterthought.

As it turns out, we were all right, and she was all wrong. I would love to talk to her today and wipe that smug look off her face by pointing out that the "safeguards" were nothing more than policy and rules with zero enforcement mechanisms. Hence the guy who spied on his ex for years without being caught.

The fact that, on a personality level, she was one of the more awful people I've been stuck sitting next to in a class, makes me question who the NSA hires. She was hired straight out of college, so I guess the culture was sucked right into her. And man does that culture suck.

20.Feedly is Now Hijacking Shared Links And Cutting Out Original Publishers (the-digital-reader.com)
90 points by mwilcox on Dec 8, 2013 | 37 comments

This compromise was detected by Google because they have hard-coded "certificate pins" in Chrome which specify which CAs the browser should expect to see when connecting to Google.

This type of "pinning" is the only technique that we know of which has actually detected a CA-assisted MITM attack in the wild (a few times now). So it works really well, but only if you're running Chrome, and only if you're connecting to Google (or the few other pinned sites hardcoded in Chrome).

It doesn't scale well because not every website can (or is willing to) hardcode their CA information in browser binaries, the pinned information has to expire at some point (otherwise you can never change your CA), sites are still vulnerable to their own CAs, and it only works in browsers which are willing to maintain this hardcoded list of pins in their client binaries.

Trevor Perrin and I developed a dynamic certificate pinning solution called TACK (http://tack.io) that is designed to address all of those issues. It's a fully specified TLS extension; all we need are browsers to support it.

If you're interested in whats been going on with the CA system, "SSL And The Future Of Authenticity" is a Defcon talk where I discuss some of the problems with CAs, and even interview the original SSL protocol author about them: https://www.youtube.com/watch?v=8N4sb-SEpcg

22.Chromium: I just wanted to quickly hack an iframe blocker for personal use (github.com/gorhill)
89 points by gorhill on Dec 8, 2013 | 39 comments

When I got on the intertubes, oh-so-many years ago - the rules were simple: the ONLY piece of information you could freely give on public forums, or IRC, was your nick. Now, the only piece of information you are supposed to withhold is your credit card number.

I'll say this about the new ways: I'm extremely glad that I didn't have my teenage years documented and archived. Dodged that bullet!

24.My Code made it to a Hollywood Movie (securitytube.net)
83 points by pearjuice on Dec 8, 2013 | 51 comments

This is a remarkably sensible speech.

The idea that the market will solve such things as environmental concerns, as our racial divides, as our class distinctions, our problems with educating and incorporating one generation of workers into the economy after the other when that economy is changing; the idea that the market is going to heed all of the human concerns and still maximise profit is juvenile. It's a juvenile notion and it's still being argued in my country passionately and we're going down the tubes. And it terrifies me because I'm astonished at how comfortable we are in absolving ourselves of what is basically a moral choice. Are we all in this together or are we all not?

I see a lot of libertarian and anti-government sentiments expressed on HN. People like to construct arguments like "more government vs. less", "higher taxes vs. lower", "less regulation vs. more", but those debates are missing the forest for the trees. The question - and only question - should be what David Simon asks: are we all in this together or are we not?

To me, the answer is blindingly obvious. It's demonstrated by what societies are flourishing - with high economic and social equality, healthy democratic government, protected personal liberties, well-cared-for populaces, and resilient economies - and what societies aren't.

https://en.wikipedia.org/wiki/Nordic_model


A foreign Stanford student was denied boarding, presumably due to the no fly list. Conjecture is that the root cause is confusion between a terrorist organization "Jemaah Islamiyah Malaysia" and a professional organization "Jamaah Islah Malaysia".

Inability to fly to return to Stanford/Silicon Valley has obviously caused a lot of complications and trouble for her, which can be interpreted as monetary damages, and she has filed suit for compensation, and also to be removed from the no fly list.

A few days ago, the government appears to have prevented her daughter (a U.S. citizen) from flying to America to testify about it. The government claimed in court that they did not prevent her daughter from flying to America with the no fly list, but apparently the airline provided the daughter with a copy of the no fly order. Generally, the airline is instructed not to provide said orders to the traveller, so the traveller has no way to know why they aren't allowed to fly.

This sort of lawsuit is difficult to make - the government has argued it should be dismissed because she can't prove the problem is that she is on the no fly list.

27.StackOverflow and Github Visualized As Cities
84 points by hermanschaaf on Dec 8, 2013 | 35 comments
28.Shameful Profiling of the Mentally Ill (nytimes.com)
81 points by zzzeek on Dec 8, 2013 | 49 comments

> The Man Who Does Not Exist tells me he is a libertarian, an Ayn Rand disciple, and, in the parlance of Silicon Valley, views himself a disrupter.

Making money by breaking regulations and lease terms is hardly the stuff of the heroic inventor. What other criminals count as "disrputers"? Insider traders? Identity thieves? Insurance fraudsters?

This guy is sociopath and I hope he ends up in prison.

30.Talloc: The Tutorial (samba.org)
71 points by papaf on Dec 8, 2013 | 24 comments

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: