skysight-inc/HackerNews huggingface dataset:
iPhone pincodes by default are very short. iPhone protects them from bruteforce with delays after unsuccessful tries. But does the hardware, where pincode's hash is stored, protects it with delays and protects it from labaratory attack? I mean, government could just open iPhone, extract that chip, extract pincode's hash and crack it. You would need quite long password to withstand such an attack.

Another vector of attack is fingerprint scanner. After iPhone turned on, by default you can unlock it with fingerprint scanner. And turning iPhone off is not very quick, you need to push power button for a few seconds and then slide over screen. If police arresting you, then will get your phone from your hands and just force your finger to open it, no pincode needed.

So yes, while iPhone is probably safe when properly configured (ruling out possible vulnerabilities), the proper configuration is hard to use and is not default.

That's from the point of goverment attacker. If attacker is just some thieve or commercial espionage, probably iPhone is a good device even with default settings.
I live on the wiggle. The problem in most cases is not the interaction with cars. It's the interaction with pedestrians.

When bikes approach intersections at speed, it's pretty easy to spot the vehicles at or approaching it. They have bulk and presence. But to clear pedestrians you've also got to check 3 or 4 corners. Sometimes those corners are even occluded by parked cars as you approach.

So what happens time and time again is bikes don't notice pedestrians entering the crosswalk until it's too late to stop at the speed they're going. So they end up veering around the often very surprised people who did not expect a bike to blow right past them from out of nowhere. This is a rather disconcerting experience, and it leads to a HUGE number of complaints.

Note, I am a big supporter of proper bike infrastructure, think it's worth removing parking spots for it, think it's worth installing traffic lights for bikes, separated elevated bike lines, and all that.

But I'll say this: San Francisco is not Idaho. We have so much more density. The busiest bike/pedestrian intersection in Idaho can't hold a candle to the wiggle. Rolling through stop signs at even moderate speeds is not super compatible with heavy pedestrian traffic.
No, no it can't. But as far as I'm aware, the bike is allowed to ride in the 2-foot-wide gap. And still, the bike isn't stopping you from going forward. In the case when there really isn't enough space to pass the bike - the road is just too thin, the guy on the bike is a dumb asshole and shouldn't ride on that road.
8 ways to increase team productivity as a leader
Academics sharing paywalled papers with a codeword on Twitter
Why sex that’s consensual can still be bad. And why we’re not talking about it
The Struggles of Publishing a JavaScript Library
Instabridge – From Zero to One Million Users Without Marketing
Reading all the small print on the Internet for a week
Flite lacks entonation on questions and such.

It will work better on the ZipitZ2 and pentium2 machines.

Enough to listen short stories, but it's not suited to listen a full book from you bed.
#Bitcoin lastest social trends in Realtime. Silkroad, crypto, fintech
Yeah nah, I bike a lot and that guy is a dumb asshole. Why wasn't the guy in the white car honking at him?
The great thing is that Python JIT research is happening in multiple fronts, and maybe someday in a very far future CPython won't matter any longer (except for legacy deployments).
There were rumors that they caught the BTK killer due to the hidden printer dots at the church where he served, but it was actually meta data left on the floppy disc that did him in...

http://www.theatlantic.com/technology/archive/2014/01/the-fl...
"No one particular project should be considered a 'distributed social network'"

What? Something can be a distributed without being interoperable.

This article is humorously unbalanced. Sounds like someone venting. Even the counterpoint section is called "Perceived Advantages", haha.

Clearly, interoperability (or the lack thereof) can be taken to extremes; the hard part is finding the right balance. There's nothing in this article that helps with that.
Many people are using them, just more subtly than you might think. Projects like Google's material design may seem 'flat' to the lay person, but it's full of delicate transparencies, animations and shadows. It's leveraging the technology, but in a very understated way.

Examples here: https://www.google.com/design/spec/components/bottom-sheets....
Sounds like the crux is that reliability means different things to different perspectives.

Those Mercs (or BMWs, or Audis) are targeted as lease-first cars, if you go larger than their compact sedans (C-Klasse, 3er, A4). The cars are built to swaddle you in luxury for 24-36 months or 30,000 miles, get a refurb, then get resold at 80% original price as Certified Pre-Owned vehicles. Then they need to start having small issues to maintain a relatively predictable revenue stream for the the dealership mechanic networks.

The CR notes are on the money -- really, the more tech in a car, the more likely you are to have issues. It's a big, heavy, complex dynamic system getting blasted with debris and weather. It's sometimes surprising just how durable some of the high-tech wizardry in modern autos is.
The point is that it did no good to pass the cyclist if they arrived at the intersection after you and then had enough time before the light changed to gingerly pedal to be in front of you. Even if your top speeds were wildly different, the fact that you both still ended up in the same place at the same time but further down the road, implies that there was no need to pass.

To belabor the point, you would be said to have the same mean velocity, but different peak velocities.
> There is situational impossibility though.

Agree, but often impossibility claims have an expiration date. They also said it would be impossible to jailbreak iOS 9 with the new rootless security... It took few months for a Chinese team to completely by-pass Apple's new design.

http://www.forbes.com/sites/antonyleather/2015/10/18/how-to-...
Just released a pod about Instabridge who grew from 0 to 1 million users without any marketing at all! Pretty impressive work. Some learnings for all of us trying to grow our businesses - http://blog.haaartland.com/podcast-instabridge-one-million-u...
API Tooling Companies: We Are Watching You
Ask HN: Ideal skills/languages for graduates when you hire them?
I am a lecturer on an Applied Software Engineering course, teaching with many people with different views on what industry wants in terms of skills.

We can all agree that basic web development skills (front end and back end) are pretty core, as well as some concept of mobile development. What about things like enterprise programming (Java EE).

The module list is here but I have my doubts on the use of some of these and think the time can be better spent. What are your thoughts, as professionals?

http://courses.cardiff.ac.uk/undergraduate/course/detail/4JVD.html
> I know a few are pretty crappy ones, but a few are plain spooky. Customers that tend to joke and flirt with the computer, hoping for an emotional response, probably are most likely to notice them.

I got a call two years ago from a telemarketer that kept asking me yes/no questions with a robot voice and didn't leave me any space in the conversation to say anything. I really felt like I was talking to a computer so I tried to Turing-test him by forcing him to answer an open-ended question. It took two minutes, and the caller turned out to be human after all. That wasn't very relieving though. Humans should not speak with such zombified voice.
Closed social networks have plenty of spam. I'd say the main difference is that on email, you get messages from everyone, whereas in most social networks, you need to voluntarily subscribe to someone's feed to get their messages; that alone massively cuts down on the efficiency of spam.
That is an utterly unscientific anecdotal argument on an important safety issue. Vietnam has over double the traffic-related fatality rate as the United States.

Source: https://en.wikipedia.org/wiki/List_of_countries_by_traffic-r...
I've pretty much come down on the side of prohibition is bad. Yes hard drugs destroy lives, but many many many more are destroyed by socially acceptable drugs like alcohol and nicotine.

We live within societies where the way we control substances creates a huge social and financial cost.

We'd be better off legalising every drug and creating a social framework within which these drugs can be taxed, consumed safely, and users supported.

Case in point is the legalisation of cannabis which I hope is a stepping stone to legalisation of all recreational drugs.
Healthy food startup Zesty (YC W14) is hiring engineers
For-profit social networks have a central actor with funds to advertise the network and do the tedious labour of managing spam and abuse. Without a central actor you're limited to very slow organic growth and persuading people to volunteer to clean up.
Unar uses GNUStep too, and it's not the same as a full GNUStep desktop setup. It uses far less dependencies.
Is it addictive? For me yes, because I get to read about such a plethora of topics. It's fun to read people's views about a lot of things..
Mount Isa Hoverboard Unit Investigate Silver Sedan Crash
She Kills People from 7,850 Miles Away
Stunningly beautiful. Sure, the UI is quite complicated and arguably not all that intuitive, but it's so fun to play with it hardly matters (though "related events" disappearing once you move your mouse is a bit annoying).

Can anyone figure out the significance of the vertical axis, ie. why is one event in a given year higher than another?
So the US wants it to be impossible for the average person to unlock a phone (via law) but Apple make it technically impossible and the US justice system cries foul. Swings and roundabouts.
Bike density is way higher in Amsterdam, yet it works well. Then again, in Amsterdam all bikes have brakes and people go at a slower speed.
Previous submission, before it was syndicated on highscalability.com: https://news.ycombinator.com/item?id=10358704
Source-Controlling Databases in DbForge Studio for SQL Server 5.0
Goodreads list - https://www.goodreads.com/list/show/92883.Sam_Altman_s_Twitt...
What I find really interesting is that while it appears to me that Katz has very sparse knowledge of databases, he has still managed to create one or two of them, and successfully run a company that sells one. I don't like the thought I had next, but: perhaps knowing about consensus algos and papers actually doesn't matter?
How Jony Ive Remembers Steve Jobs
Hm, this kind of things always seems to tackle the problem in the wrong way. Instead of aiming for decentralized, why is no one building a completely distributed solution instead?

The only work being done I can think of, that is still active is IPFS today, that at least is trying to build a distributed technology, that services like this could be build on top of.
Is it creating violence or exacerbating violence? I'm more inclined to choose the latter. The reason why I distinguish the two is that I see the continuation and increase in drug use as something symptomatic of other issues in the big picture.

Economic issues, politics, racism.... oppression on various fronts from the system down to the family to the self.

Drugs (and alcohol) are an escape. Normal activities also provide an escape when people get obsessed with them. TV, video games, food (my escape), exercise for some addicts, sex, etc.

Just legalize cannabis and decriminalize other drugs already.
"the idea of creating a web application that actually does stuff entirely with JavaScript is a relatively new idea"

No it isn't. This was written nearly 15 years ago: https://bitbucket.org/BerislavLopac/waexplorer
AFAICT to do that reliably for all applications using /dev/urandom, you'd have to insert a step blocking all applications at startup until /dev/urandom was seeded. Even applications that have no need for anything from /dev/{u,}random.

(EDIT: I suppose one might try to replace /dev/urandom with some pipe-like thing running in userspace, but that seems error prone and rather contrary to /dev just being "devices".)

[1] Without just doing it at the kernel level, which the Linux kernel developers seemingly still stubbornly refuse to do.
> users supported

This is the biggest thing, IMO. Legalising drugs isn't about getting control of distrubution and profits, it's more about changing societies view on drugs. We need to stop treating these people as addicts that need to be swept under the rug. We need to treat them as they are - human beings with a disease/illness for which they need help.

How can they turn to us for help if we chuck them in prison for their problem and don't help them?

edit; wasn't suggesting that you didn't think this - I think the majority of people in my country (UK) don't think of addiction as an illness/disease that we need to help with. They just want to turn a blind eye...
Please email us at hn@ycombinator.com if you would like us to send you a repost invite. This is an experiment in giving good stories a second chance at attention on HN.
The tracking mechanisms are often disclosed in product documentation, though maybe not by all manufacturers.

These are a great example of what Benjamin Mako Hill has called "antifeatures".

http://wiki.mako.cc/Antifeatures

(The original definition is "functionality that a technology developer will charge users to not include", but that might suggest that a product version without the antifeature is always available, which is not necessarily true, especially for DRM and surveillance-related antifeatures. A more general definition might be a product feature that required a deliberate effort on the manufacturer's part to include and that users view as decreasing the product's value.)
Ask HN: How does partnership works when my partner is in the US and I'm in Asia?
I'm a web developer and got out of the employment line and started to do my own business. As I was advertising the product, some people asked if we can have partnership. I agreed and so my questions started springing.

At the moment we are already doing some operations. I'm not able to understand this kinds of stuff since I'm starting entrepreneurship. I'm not able to comprehend on legal documents with this issues.

So the question is:

What legal documents do we need to safe guard both parties with regards to the product?

What are the limitations in doing partnership than having an owned business?
What's the context for the video link where some cyclists and a zipcar are having a standoff? I'm not sure I understood what was happening there.
How to retrieve or get records from DDLRecord in liferay 6.2
TransitArt: new software for smart cities from Poland
Inovatica (http://inovatica.com), IT company from Lodz, Poland, has created a start-up that streamlines work on websites and applications for smart cities. TransitArt: Material Timetables UI KIT(http://transitart.io/) shortens work on this type of solutions. Thanks to it, timetable data integration takes just few minutes, which translates into a huge savings of money and comfort of the entire team.

With TransitArt developers can independently integrate public transport timetable data with their own project. Timetable data is converted into easy-to-use JavaScript code (just copy it to the source of your project). Another way is to use ready-made components for the most popular CMS (such as Wordpress, Joomla or Liferay), or use a well-documented API to create their own solutions for smart cities. TransitArt also allows the design, development and implementation of dedicated services for publication and visualization of passenger information.

TransitArt allows users to intuitively check the timetables of public transport carriers, plan travel with different means of communication (multimodality) and track movement of vehicles in real time (real time journey planner). Each of these functionalities can be implemented in a dedicated mobile application, supports RWD (Responsive Web Design) and is compatible with Google GTFS (General Transit Feed Specification) standard. This international format for storing information about timetables of public transport combined with geographic information, is commonly utilized by modern cities.
Seems like a useful tool; thanks for sharing it!

Two questions:

1) What's the diff logic? At first glance, it looks like JSON is reformatted (maybe canonicalized in some way) and then a line-by-line diff is applied. Is there more to it? Since the tool seems JSON-aware, I was surprised to see an added trailing comma up as a difference.

2) Do you have plans to expand the kind of HTTP requests users can make? It would be nice to use different verbs, headers, and request bodies. Runscope has a similar tool[0] built in that I believe (haven't tried it yet) allows a bit more flexibility, but it would be nice to have a standalone tool available.

[0] http://blog.runscope.com/posts/comparing-http-requests-using...
At first I thought it was the other leap (https://www.leapmotion.com/), it looks like the two can be a perfect combination.
Interesting idea but isen´t there completely free alternatives like OwnCloud? No mention of Open Source, something like this will likely not survive. I´m very skeptic in regards to something like this on crowdfunding. I´ve had a bad experience on indigogo where I lost $200+ because I trusted the creator. Besides it´s just bits and pieces of different services already created. iGoogle, Google Plus, Google Music, Smugmug, Plex? Gmail, Pushbullet, Google Calendar, Google Drive/Docs, Lastpass although I´m soon moving to Mooltipass. CMS? Wordpress,Ghost, Pico. There don´t seem to be a need for something like this, except perhaps your own control where OwnCloud covers quite a bit of it. And if it isen´t open source and you don´t host it yourself on your own servers then you aren´t in control.
> Abovitz describes the Magic Leap tech as unlike anything you can get today.
> With virtual reality, you're basically strapping two screens to your head.
> Magic Leap is something else entirely.

I find this intriguing. Oculus and Hololens are a bit of a nonsense to me as I can't imagine a scenario in which I'd want to strap tech to my face in that way. Even if it was shrunk to Google Glass size, I think the general reaction to that shows that it might struggle to gain traction.

Can anyone think of a different form factor that might offer an alternative?
How will the feature set differ from Docker Swarm?

https://docs.docker.com/swarm/
Devarist is built for keeping a work journal. It supports Markdown and images too.

Check it out, feedback is very welcome :-)

https://devarist.com
In praise of callbacks
DNSSEC is Open for Beta
DNSSEC: An Introduction
Dive into Machine Learning with ipython notebook and scikit-learn
Anyone know how iCloud backups are encrypted?
The EURion pattern, with the circles, isn't exactly "microprinting" -- you can see it quite clearly without magnification on a lot of currencies. But there is also the later Digimarc system, and we don't know exactly how it works. Maybe somebody will reverse engineer the detection software.

Edit: as I noted on the list of printers page, we think that newer printers are also doing something that we can't see, possibly based on perturbing dithering algorithms so that the dithering is different from printer to printer in a distinctive way. So when we didn't see yellow dots from newer printers, that doesn't necessarily mean that they aren't printing tracking codes. The reasons for thinking that tracking codes became more pervasive in newer printer models rather than being phased out are suggestions in documents obtained via FOIA, and rumors from people who worked in the industry.
Tech Prep by Facebook
I've been actually hit by a car as a pedestrian. I believe the recorded statistics on injuries are very much in support of the comment you replied to.
Python sandboxes, like RestrictedPython, operate on AST level. But don't try to sandbox the code, create isolated UNIX processes or containers instead.
Awesome article, thank you for posting. It's cool to see what's bleeding edge in math explained in such an approachable way.
Fatih Fare İlaçlama Servisleri,Fare İlaçlama,Fatih İlaçlama
It's obviously not a panacaea, but it does have the quality of allowing audits by the community and by independent experts in the field.
A few issues:

* Because you are only using http basic auth for authentication and aren't using cookies, if I reload the page or go back to the page later, I have to log in again.

* You are generating the person UUID's client side in the backbone model as well as initializing data (like contacted:false) for a new person. UUIDs and default values are better created server-side as you should never trust that your client side code hasn't been tampered with or that someone isn't hitting your app programatically.

* based on how chrome handles saving the login credentials and password, it tries to autofill the e-mail address but your system expects the username.

I'm pointing these out because I really like this app idea, and I'd like to use it and see it improved.
"Completely distributed" is much harder to kickstart and gain critical mass. Instead, if a few dedicated parties do all the work to set up and maintain a few servers that the general public can start using right away with no time investment, it is easier than more people will use the system.
Usually I appreciate the creative touches Bloomberg give pieces like this, but I'm not a fan of this background that rapidly flashes on scroll. I get that it's supposed to represent the sheer number of patents filed, but it renders the entire article unreadable for me outside of Firefox's Reader View.
PISA Maths exams results from 2012:

1. Shanghai (China)
2. Singapore
3. Hong Kong (China)
4. Taiwan
5. South Korea
6. Macao (China)
7. Japan
8. Liechtenstein
9. Switzerland
10. Netherlands
11. Estonia
12. Finland
13. Canada
14. Poland
15. Belgium
16. Germany
17. Vietnam
18. Austria
19. Australia
20. Ireland
21. Slovenia
22. Denmark
23. New Zealand
24. Czech Republic
25. France
26. United Kingdom
27. Iceland
28 Latvia
29. Luxembourg
30. Norway
31. Portugal
32. Italy
33. Spain
34. Russian Federation
35. Slovak Republic
36. United States

Asian dominance shows, but you have to bear in mind that China "cheats" by posting separate cities, if other countries did the same ignoring less wealthy regions - they would have better results too.

Also there are many English-speaking countries much higher than USA, and countries with much more complicated numerals (like Baltic or Slavic countries) that are higher than USA. And German numerals are more complicated than English ones too (125 is 100 + 5 + 20).

I wouldn't attribute the US education problems to the language.
Come on guys, did really nobody think of con.cern yet?
neither BMW nor Mercs are in VW group (and god thanx for that!). Audi is, and generally, within those 3 brands, is considered as the cheapest, least luxurious, least fun alternative (R8 is an exception :))
Tableau launches Vizable iPad app, aims to bring analytics to everyone
There is an enormous amount of effort put into pre-emptive control of the capabilities of technology. Basically, banning or regulating technology based on what someone might do with it. If you start to look for examples of it, they start popping up all over the place. The justification of invading countries based on their potential access to WMDs is probably the most severe example of this being a principal preoccupation of governments. Drone regulations are the latest installment of this technological control obsession. A large amount of the tangentially political stuff posted to Hacker News is a variant on this theme. The encryption, drug, DRM and gun debate are regular battlegrounds for this pre-emptive technological control issue. It's weird that people don't recognize the common thread running through all these issues.