skysight-inc/HackerNews huggingface dataset:
Where would that software auto-update get the decryption key from? If the user has enabled a passcode, then their passcode is used in generation of the key used to protect the disk encryption key.
Even if apple did push an update, the user would still have to unlock their device post-update.
Depending on the settings, the phone could:

* Wipe after 10 unsuccesful PIN attempts
* Be configured with a 6 digit numeric PIN code
* Be configured with an unlimited alphanumeric password
* Exponentially increase delay between PIN attempts after
unsuccessful entry - for example 3 attempts in 3 seconds,
next attempt after 10 seconds, next attempt after 60
seconds, next attempt after 4 hours, next attempt after
24 hours, next attempt after a week, next attempt in a
year (making up numbers to prove a point)
I think maybe it sounds worse because it's based on a more accurate and complex modelling of the human voice, so while it sounds worse now, it has the potential to get better and perhaps surpass implementations using more widely used methods.

Can the voice synthesis method used on Android sing, scream, or make other sounds that are not speech?
Aside from the valid points below about rate limits and auto-wiping, the new default is a 6 digit passcode, so more zeros..
I apologize.

"Gentleman of above-average girth, who might weight more than the average person in our skinny-normative society but still has feelings, y'know, and it's hard to get McDonald's burger juice off of a white shirt if you're out for the night trying to get Lindsay Lohan to do something embarrassing and you don't have time to, like, do laundry, and so would just appreciate it if you wouldn't make a big deal about the way he looks while he's busy making fun of other people."
> the problem of English is not ..teens, but the pronounciation of numbers. Chinese or Korean has one simple syllable for each number

I once found when mentally tallying points while grading papers, instead of saying "and a half" in my head, if I say the Chinese "ban" instead (e.g. "four-ban", "seventeen-ban") it becomes far easier to do.
Early on I did show her how to use the Google Now to ask questions - like how far is the Moon & like. That's about all the parenting I have done in this regard. She has been watching way too many How Stuff Works videos lately - I want to see if that spills over into her being more curious about things.
Shoot, should have included my referral code. In case anyone else is interested: http://www.vultr.com/?ref=6818844

Vultr also has larger HDD droplets for storage/back-up/archive whatever people want it for (my case bitcoin nodes).

DO has been "working on this" for quite some time and it's the most requested feature:
https://digitalocean.uservoice.com/forums/136585-digitalocea...
Somewhat unrelated, but any OpenWebSearch exist?
Yea you should "delete" that data on your google account.
Algorithm that detects logical structure in text
Does anyone know which CVE is in 2007 that everyone is exploiting?
Interestingly, due to the altitude it flew at Concorde included a radiation detector that triggered a cockpit warning light when the incident ionizing radiation exceeded a preset limit. The standard operating procedure if the warning was triggered was to descend to a lower altitude.

(Presumably this was more about the aircrew's cumulative dose than the passengers).
If I had to pick one or the other, I'd pick OSM. Given a map, I can figure out my location, but the reverse is not true. (Of course, this is ignoring the fact that a lot of OSM data is likely generated using GPS.)
Harley Davidson has a rabid fan base that defies logic far more than Tesla's. Most Harleys price 40% higher than better, faster and safer motorcycles out there, they use stamped steel parts where other makers use aircraft-grade aluminum, their engines haven't meaningfully changed since WWII (their first liquid cooled engines were just hitting the market a few years ago). It's branding. Tesla is much closer to delivering the "real thing". They will succeed, I think.
Do you think that matters at all? Literally everyone involved in this chain of decisions, from the teacher to the school principal to the superindendent, are only interested in covering their own ass. They don't need to think that the device in question resembles a weapon, they just need to think that ANYONE will at ANY TIME think that it does and penalize them for not acting as the law mandates.

Further, you answer your own question.

Remember that chicken fingers qualify as weapons under these policies.
There is US case-law around this issue; the Federal government cannot compel "speech"; code is speech.
Arachne's greatest trick is the entire UI is defined in HTML. That was a big deal back in the day.
> A reliability issue sucks, but much less so if it can be resolved pleasantly and quickly

Much less so ? Nonsense.

If a car is out of warranty and it continues to suffer from systemic reliability issues it is irrelevant how good the service is. You will still be significantly out of pocket and unable to sell the car on the used market.
I'm not too familiar with how iPhone hardware is put together, but is there a possibility of performing a forensic extraction of the flash memory and performing a brute-force attack offline? Or does the conversion of PIN to the storage encryption key happen in the secure enclave, which may resist such forensic meddling?
FitSmallBusiness.com Forgot About My Well Guarded Local Marketing Ideas
I'm gonna guess that getting into Let's Encrypt's HSM is as hard or harder than breaking their auth procedures.
> However driving a Tesla feels like having the first iPhone, and everyone else is driving around in Nokias.

Weird I find the opposite compared to my Porsche Macan or my girlfriends Evoque.

The interior build quality is extremely poor on the Tesla and the giant screen looks tacky and difficult to use whilst driving.
If the secure enclave runs signed updates, the rate limiting/auto-wipe could be removed.
Well, if you were going to attempt to invoke a super-intelligent being then a data-center in Africa might be just the right place to do it.
Livescript has sane defaults: `foo bar and hello world` -> `foo(bar) && hello(world)`
Spotify's new API
Spotify's new API removed folders. Your carefully curated music library is now a mess of playlists.
http://bringbackfolders.com/
No.

I'm pointing out that it doesn't seem very likely that they have a "fuck the west" attitude if they're still cool with meeting the President of the United States and visiting the White house.
Stackable File Systems as a Security Tool (1999) [pdf]
We're seeing a lot of anti-unicorn sentiment recently. In addition to Gurley's comments here, Sequoia's Mike Moritz wrote an op-ed saying most unicorns are a joke [1]. And today's Wall Street Journal has a page one article about how tech IPOs have become all but impossible because private market valuations are so much higher than what public investors are willing to pay [2].

It all begs the question: what's happening?

[1] http://www.businessinsider.com/sequoia-capitals-michael-mori...

[2] "Tech Startups Feel an IPO Chill" http://www.wsj.com/articles/tech-startups-feel-an-ipo-chill-...
Yup. I am a fan of this sign (https://commons.wikimedia.org/wiki/File:Cross_traffic_does_n...) instead of this one (http://safety.fhwa.dot.gov/intersection/resources/casestudie...)
‘Your Genome Isn’t Really Secret,’ Says Google Ventures’s Bill Maris
CSS: discover the mix-blend-mode power
The rest of the connected world has determined that username and password, supplemented by OTP methods or some other multifactor authentication, is enough.

Having a login cert is fine if the "user" is an organisation. It is a broken model for individuals or small businesses.
You can add your blocking JS code to a WebWorker which will execute on a background task. This makes your UI responsive and keeps your number crunching from your users perception.

You can learn more about workers at https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers...
Good thing some US judges are sane. Hats off to the judge(s) who ruled this.
Also, if someone starts to challenge your data source, be sure to settle or drop the case. We wouldn't want a legal challenge to have a chance of succeeding and stopping the unconstitutional practices.
This has a redis service dependency? That is weird.
Wow, I never thought of that before!

Though it would not protect from factoring because most EV roots are the same key length/hash.

For anyone else reading, this works because the root programs give authority to issue EV certs separately from other certs. To keep the authority separate (most, perhaps all) CAs use separate roots for EVs.
Age of the Unicorn: How the Fed - Created the Tech Bubble
Dear Drone Pilot: A Case for Drone Registration
You probably can, but this isn't to access the phone of some international criminal mastermind but of some guy that was picked up on the corner for peddling drugs. Its not like the NYPD can dump 500,000 or more for every phone they need to access.

What worries me is that this will lead to laws being passed that will criminalize refusal to hand over passwords and encryption keys.
Google Shopping Insights
They may not have the ability to target an update to a specific phone. Also, the phone could be configured to prompt before installing updates.
PRIV Is for Private: How BlackBerry Secures the Android Platform
"I don't know how anyone can argue that the US doesn't fit the definition of an electronic police state"

Unfortunately the vast vast majority of people disagree with you, including basically every single social commentator. The only people agreeing with you are those on the fringe extremes.

I'm sorry, but I don't think reasoned debate is possible with you.
Hum, I might suggest that. Primarily I'm talking about things like leaf blowers, weed eaters, etc.
This cop tipped off a suspected pedophile about his impending arrest.

I'm sure the others are more than happy to see the full weight of the criminal justice system crash down on his head.
The problem is that both sides of the political spectrum are in favor on the problems being discussed here. Very few congress members are against the NSA spy program/NSLs/secrete courts/etc. They will bash republicans for being pro-life, but they won't bash them for being pro-NSA (generally speaking).

Also, even amonst the academics, the only ones that make it on air the vast majority of the time (and are placed in a positive context within the programming) are the ones conforming to what the media wants. Ask anyone who's ever been on "the list" for expert interviews on television. They call you up and say "would you be willing to go on air and defend this position?". If no, they hang up and try the next person. The opinions broadcasted on American television are as scripted as any other TV show. Through this process they create what the socially accepted norm is, and even if the majority disagree, they become the "fringe" because their opinions are not as well represented.
And GNU drops the ball again...missing a perfect opportunity to call one of their projects "GNUSpeak". ;-)
Each iPhone comes with a unique key burned into the processor. I believe the PIN is cryptographically combined with the unique key to derive the encryption key on device. That makes offline brute-force intractable without knowing the unique key (or somehow getting it out of the chip by looking at it or something, but it won't be easy).
So, in any case, the FCC has set limits for acceptable amounts of radiation exposure from certain classes of the electronics that we find all around us every day, and I guess I was just wondering how those limits would compare to the radiation dosage of these vans.

It might not be approved by the FCC, but if it's equivalent to something that the FCC would allow you to carry around in your pocket anyway, it's hard to justify being upset these vans driving around from the perspective of being exposed unawares to their radiation.

There are a number of other reasons to be upset about such vans, though.
Norway's capital to permanently ban cars from its downtown area within 4 years
The update couldn't be installed without someone unlocking the phone first... Not to mention the legal side of that would be very murky, I doubt any judge/court in the US could compel that action.
Yea, ~20% efficency and 17mW/cm^2 * 100cm^2 = 0.34w which is in the ballpark for useful power levels. 1/50th of that seems useless.
Google employee lives in 16' box truck to avoid Bay Area rents
Another alternative is YT Mobile for background YouTube play: http://ytmobile.tk/
I won't even look at it until it has adblock and other extensions.
Yeah, I wonder if somebody is working to obtain a new FDA license to sell at an even higher markup than the guy in the article. Nebraska's governor and his father already spent all that money to make it legal, maybe they'll give more to also buy the drugs or even finance the licensing.
Unfortunately your text largely uses the rhetoric of conspiracy theorists. You even use the word "shill". I don't think reasoned debate is possible with you, because your opinions are so extreme.
Do people generally like that this UI exists, or not?

To everyone who says "wow that's creepy, I wish I had known, God knows what else they have-" do you feel better or worse seeing this UI available, and having the option to turn off services or remove specific records?

I'm honestly curious, because Google is obviously trying to react to the "transparency" criticism. I also wonder who would be offended by a UI that gives you a method to stop using the services you find creepy. Seriously, you can opt out, it explains how pretty easily.
That really depends on the work. There is a lot of APIs in the browser these days that people are not using. For example, there are people adding jQuery to a project just to have the selectors when querySelector and querySelectorAll have been available for some time.

With good care, you can create libraries suited for your problem and keep code size and complexity down. Don't forget that when adding frameworks you're also adding their complexity to your project. Imagine having to debug the internals of angular... I shiver just too think of that.

The thing is that using frameworks is cool up to the moment when you reach a framework quirk or bug and need to dive into it as well, then you're no longer working in your problems domain but on generic framework land and that can be much trickier than building your own, specially if it is a solution made for a single problem.

But yes, I agree with you that if complexity grows enough you start requiring a special type of developer with high skills to keep this bespoke code running well.
>It's not exactly beyond the realms of possibility that he might have seen the potential for his son's electronic experimentation to end in a suspension and similar barrage of publicity.

Even if Ahmed was being a delinquent, I can in no way understand how anyone can think this is true. Unless the father encouraged his son to take a bomb lookalike to school, how the hell could he, a 14 year old boy, have foreseen the act as attracting as much attention as it has? How could anyone?
Why is a municipal police force engaged in counter-terrorism at all?

FTA “It falls into the range of security and counter-terrorism activity that we engage in.”
> there are also issues regarding whether those numbers can really be interpreted to mean that they are relatively safe.

And contributing the manufacturer's stated specifications ADDS to that conversation, which meets the criteria for 'goodness'.

Not directing this at you, as you've already acknowledged that the OP should not have been downvoted, but additive facts should, probably as a rule, never be downvoted on account of knee-jerk reactions.
A Global Cloud Network Powered by VMware
We've had energy storage devices for homes for a while now.

It isn't exactly tearing up the market. Very few people are willing to pay the significant upfront cost for the benefit of ongoing but small reductions in power bills. And that is with government subsidies (at least in Australia).

I don't see how Tesla's superior technology is going to affect the product proposition.
If the states can barely afford killing people, what makes you think they can afford to keep them in jail forever?
These things don't happen in a vacuum. The school's overreaction was the result of social forces.

The question is: what social forces do we blame in this case? Paranoid gun hating liberals? Or bigoted Muslim-hating conservatives? The media cast blame solidly on the latter group. But I think the facts better support blaming the former group.
the secure enclave stores the actual encryption key. I'm not sure if it's just unlocked or generated from the PIN, but in either case they can only brute force the actual encryption on the flash and not the pin offline.
But it's a SPoF and an extra remote or local service that has to be configured, maintained, etc. The thing that's coming online has to publish a message to redis anyway, so why not just maintain the service map inside the Rust application and open up a socket that allows those things to speak straight to Nucleon for mutating its configuration?
I decided on a touchscreen Chromebook. flashed firmware, and installed gentoo. Runs like a dream. battery lasts for about 5 hours in KDE/Plasma 5. 3D is good enough to play minecraft at 50fps with high settings. Stick a bigger hard drive in if you care, in this era of cloud computing and flash storage.
People have fairly safely spent months in outer space so your risks are probably ~1/1000th of a fairly safe level. (Record is 879 days.)
So on one hand we're carrying around little location-aware sensors that upload all kinds of tracking data to who-knows-where, enabling unprecedented tracking of human beings and their movements at incredibly high resolution. We also voluntarily post so much data online any number of social media sites, financial institutions, etc. can see almost everything we do.

BUT on the other hand with proper use of crypto it is now possible to engage in secure communication at a distance that can never be decrypted without our consent and (if certain protocols and method are used) allow anonymity at both ends of the link (e.g. Tor hidden services). It is also possible to securely send money to others using Bitcoin without knowing their identity... ever.

Very interesting times... it's both a panopticon and an unprecedented age for anonymity and privacy.
morph.io is a great tool but it requires a non-trivial setup on your machine in order to get things running. We wanted to enable people to create scrapers with no prerequisites.
Kendo UI Mobile Gzipped: 136kB (not including jQuery). It is now called "Kendo UI Mobile" and owned by Telerik.

Heavy base library, so custom build only saved about 5% for us.

Good response rate to support issues, although sometimes valid issues are not fixed so we require custom workarounds to basic problems.

Great for POC, or pilot. Not so great for consumer apps using WebView IMHO.
"Hey guys, wanna come over for a drink? Just move my bed to the left."
New Magic Leap demo video
"it is extraordinary for anyone to not belief America is a police state"

But the vast vast majority of people disagree and think that your opinions are extremist nonsense.

Where are all the conspiracy theorists coming from on HackerNews recently?
Starting with the postulate that nature abhors a vacuum of any kind, I think it wouldn't be too far-fetched to posit that higher orders of life can exist across computer systems, their mandibles invisible tendrils interconnecting billions of organic beings interfaced via an optical-aural-touch I/O system. Its metabolism at the low-level a complex reciprocal action composed of dopamine response from its base food-source transmogrified into encoded information via physical input excreted from the cerebrum of a human.

Dang, I just fed the beast.
"You still use bower instead of npm?" - this is a poor example, as bower is specifically geared towards frontend assets
Would make more sense to use a FRP library like Rx.js . Introducing yet another language+pipeline just for that is questionable.
For users with Touch ID enabled, would it be legal for law enforcement to use your fingerprint on file to access the phone that way?

I'm not sure how easy it would be to fool the touch ID sensor on the phone. I think I remember a MythBusters episode where they made a silicone mould of a fingerprint to bypass a security system.
To add on to a sibling comment, it's the default browser for FreeDOS: https://en.wikipedia.org/wiki/FreeDOS
It comes from all the posts by smart people and even the man page saying to use /dev/random if security matters. Without digging into the two's code, I also took their word for it the few times I used it in my apps many years ago. Mostly just used CRNG's while dealing with entropy myself, though, so it was limited to a few designs & countering blocking. (Wasted effort in retrospect...) It took quite a while before someone said, "Hey, they go through the same CRNG." I'm like, WTF? Why have so many sources that should be knowledgeable about this been giving bad advice?

Anyway, a number of write-ups (esp Huhn's) and people like Ptacek have been clearing up the issue well. Meme should weaken over time. Might help to straight-up delete the bad claims from whatever sources people are seeing them, though, where possible. Man page comes to mind if it hasn't been updated.
You're saying reasoned debate is not possible with me when I call you out on a logical fallacy and you reiterate as a trump card, thinking you've won the discussion? Yeah, have fun with your head in the sand.
Mobs are bad. Don't join them, even though it's really easy to do so. And don't take it personally when they attack you, because it's really easy for people to do that thoughtlessly, and they actually don't hate you nearly as much as they sound like they do.
pictures of the inside of the truck here:

http://www.businessinsider.com.au/google-employee-lives-in-t...

Rather spartan.
Then that decision should be made in public by the elected representatives or by referendum in accordance with the state's laws, not by a tiny group of activists making it practically impossible via backdoor methods.
I was surprised and dismayed to discover that Skype does something similar.

Skype stores your voice mails and video messages forever[1]. This is something that they started doing 2-3 years ago and few people seem to be aware of it. Unlike Google, they don't provide any way to delete them.

[1] Details: Clicking on Preferences -> Privacy -> Delete history (OS X) or Options -> Privacy Settings -> Clear history (Windows) pretends to delete the voice/video messages but it merely hides them from your view. If you re-install Skype on the same computer or run Skype on a different computer, all those "deleted" voice mails and video messages re-appear.
And more importantly, what about marijuana vapor?
...and then send in a drone programmed to spray paint the van with a skull & crossbones
I didn't have any problem understanding his point, but I have no idea what personal experience he's talking about so I don't know how to evaluate his description of getting piled on.
For one thing, capital punishment is more expensive than life imprisonment (which isn't keeping them in jail forever, because mortality.)