casca

Their Data Protection Register submission confirms that "When this is needed information may be transferred to countries or territories around the world". For those not familiar with the UK Information Commissioners Office (ICO) process, when submitting you can choose between transferring data just within the UK, within the EEA and worldwide.

http://ico.org.uk/ESDWebPages/DoSearch?reg=440927

http://ico.org.uk/ESDWebPages/DoSearch?reg=251239

Remotely exploitable vulnerabilities in commonly used languages and systems are not the same as "every security bug". These are important because knowing about them allows people to make a (usually) easy fix to protect themselves from something that could destroy their startup.

Also, providing an exploit, rather than just the notification makes it clear how important it is to act quickly.

Thank you!

Do you have any material or guidance that could be used for people wanting to set up a similar programme in other parts of the world?

While the Hawthorne Effect is widely cited, even after many years the results have not been reliably reproduced so it should be invoked cautiously.

While physical access on almost any hardware (without whole-disk encryption) will always allow full access, it's good that this is sometimes raised as many people either don't know or don't internalize this.

A more interesting question is whether this should be the case. As has been noted, this is by design and made far more sense when computing devices weren't quite so mobile. Perhaps it should take more effort to boot into single-user mode? Perhaps FileVault should be on by default with a cloud-stored key tied to your Apple account?

Agreed, but I'd have thought that it was worth raising for those who are not familiar with where Docker is in the development cycle.

"* Please note Docker is currently under heavy developement. It should not be used in production (yet)." [1]

[1] http://www.docker.io/learn_more/

For a very good (if long) explanation about Bitcoin in general and why this information is potentially relevant to the progress of Bitcoin - http://www.michaelnielsen.org/ddi/how-the-bitcoin-protocol-a...

Perhaps he's more skilled at Windows than at Linux? In which case, if he were to switch to a platform that's unfamiliar, he would be more likely to make an error that would lead him to being vulnerable.

I'd suggest that by using a platform that he knows how to make secure rather than one he's unfamiliar with, he is acting in the best way to ensure the security of his device.

Can you please explain why? Is there some evidence you have that shows that Windows is less secure than any other OS? Please take into account the huge market share which means that malware writers will spend a disproportionate amount of time developing for Microsoft systems. Also, people who run other Operating Systems tend to be more technically skilled than people using Windows.

This is not to excuse Microsoft, they could certainly do better. But so could Apple and Debian.

Juniper were making good inroads into the corporate firewall market at the expense of Checkpoint. It'll be interesting to see whether this sees a move back to Checkpoint as the firewall product of choice.

This patent was originally owned by Certicom, now part of Blackberry. One of the inventors was Scott Vanstone who's excellent book, Handbook of Applied Cryptography lives on my desk.

The patent seems to indicate that Dual EC is known to be usable for escrow, something that the NSA surely knew. But given the pedigree of the authors, it must have been known by a bunch of other people well before the March 2013 publication date.

There's something odd going on here.

While patio11 has undoubtedly made a vast contribution to HN, your posts are consistently exceptional and always worth the time taken to digest.

Sadly not. For example, for an individual app I might want to block access to the analytics services like Flurry but allow access to necessary services.

For those on a jailbroken iPhone, firewallIP[1] is the best way to control apps' access to the network. Every time a network connection is requested, you get a system popup that controls access to individual destinations, wildcards, whatever.

As long as there's nothing equivalent for Android (after Whispercore was shelved), I'm stuck on IOS.

[1] http://yllier.webs.com/firewall.html

Can you please elaborate on this? The ANC (Mandela's political party) including Mandela himself certainly committed a wide range of violent acts in response to a vast display of vile force from the ruling South African government. However the respect that Mandela receives is for his actions after he was released from prison. After winning political power democratically, he was in a strong position to take retribution on those that had imprisoned him and caused such misery and hardship to his people.

But he didn't. He tried to bridge the huge divide. At the time, and I speak as someone who was living through it, there was a real fear that the country would erupt into a civil war. There was so much hate on both sides. It is widely believed by people from all South African political views that Mandela was responsible for reconciling the opposing sides and beginning a path of building a new country.

Was he perfect? Of course not. But he achieved what so many deemed impossible in a noble manner and this is extremely rare in political leaders anywhere in the world.

Mandela reminds us that it's possible for a single man to create peace amidst a huge push for war. Forgiveness is the first step in changing a society, without it we are doomed to repeat the failures of our ancestors.

He continues to be an inspiration, particularly us Africans. Rest in peace Madiba.

A significant difference is that a major part of the value of getting into YC is having successfully completed the selection process. There's a reason that when hiring and looking for funding, companies will usually include the year they went into YC. Given the value of the brand, it's likely that YC could offer less for more equity and still be oversubscribed.

The potential impact of something like this on the whole system is to push up the prices of all online advertising. Given that advertisers will continue to pay to present ads as long as the return is justified, it's almost "a victimless crime, like punching someone in the dark".

It will be interesting to see whether Valve can encourage the move to Linux gaming. Their biggest asset at this time is the distribution model of Steam, but that's not sufficient to get the big publishers to develop for OSX, never mind Linux.

Edit: Valve's game list: http://www.valvesoftware.com/games/

The media companies need to do something against "piracy", otherwise it looks like they're complicit.

The MPAA/RIAA/equivalent are industry bodies that are funded to protect their members. These members want to see a return on their investment, and press coverage about shutting down a high profile filesharing site shows that they're doing something. Everyone wins.

Of course it will have no impact on the availability of filesharing sites. If anything, the rise in bitcoin mining malware will make it even more profitable to set up such services.

Try im.save("/tmp/artsciimg.png"). This will most likely show that it's a local permission error.

Then identify which directory it's trying to write to with os.system("pwd") and chmod 777 that directory.

In the UK, Waterstones (equivalent to Barnes and Noble) have announced a competing product: http://blog.waterstones.com/?p=15525

A more interesting question is why hasn't Google, Microsoft, Samsung or Apple bought them for their patent portfolio. They've been doing mobile for a long time and historically did things that could genuinely be considered innovative. It's even the kind of thing that Intellectual Ventures probably has the budget to pick up.

The Gartner Magic Quadrants are treated very highly by senior management who often don't trust vendors or their own staff. They tend to be vacuous and of awful quality - I've started keeping historical ones so that at some point I'll be able to show how terrible Gartner are at predicting the future. But a surprising number of purchasing decisions are made on the back of these magic quadrants.

Here is the link to the 2013 Magic Quadrant for Mobile Device Management Software that is referenced in the post: http://www.gartner.com/technology/reprints.do?id=1-1FRG59X&c...

TL;DR: Renault has a clause in the contract that allows them to remotely stop their EV from charging

This is an interesting issue but the article overstates the case. "... [electric cars] collect reams of data on how you use them, and send this data off to the manufacturer without your knowledge". Without your knowledge? Really?

EVs are very new technology and none of them have shown to be profitable without government support. Buyers have choices and making the trade-offs between vendors clear is always worthwhile, but this piece is not helping the debate.

Worth a read, skip the tracking link: http://online.wsj.com/news/articles/SB1000142405270230433740...

Workaround:

    if ($request_uri ~ " ") {
        return 403;
    }

The issue is the handling of unescaped spaces. These are illegal but nginx accepts them. The workaround is to throw an error any time someone sends the invalid space.

Wishing you all the best for the biopsy. Being young and living in a place with good healthcare mean that there's every chance that you'll live a long and meaningful life, regardless of what they find.