skysight-inc/HackerNews huggingface dataset:
> Apple can [sic] starts using the new Trusted Computing[4] features on new CPUs (such as SGX[5]), good luck regaining control.

It seems the apocalypse came to pass a while back, with the Secure Enclave in Apple's A7 processors.

> Of course, they know how to disable the restrictions or install a jailbreak, so these problems don't apply to the technological priesthood - it's normal people that have to live with the restrictions.

Here's the funny thing: normal people benefit from those restrictions. Without them, their devices – the ones you insist they should own – would quickly become someone else's: the attacker's. It would be awesome if people started thinking about long-term consequences.

Honest question: do you hate root? Should all processes run with equal privileges? Does the kernel have an evil and undesired permissions level?
What I would be interested in is:

USB HUB, 10-20 Ports

Each Port switchable

19" Rack-mount case

Was once available from a Russian company for an insane price (2k US$).
UCLA researchers create exceptionally strong and lightweight new metal
פינוי־בינוי בנאות אפקה: “העיר החדשה”  תבנה 350 דירות במקום 8 בנייני רכבת
"Undrinkably foul" seems a bit melodramatic. It certainly has that distinctive minerally taste common to groundwater, which is quite noticeable to someone like me (and maybe you?) who lives in a city with chemically treated surface water. But in Europe using untreated or minimally treated groundwater seems to be a common approach and Copenhagen's was amongst the most neutral tasting to me. Iceland for example has much stronger tasting tap water.
Perhaps not so pleasant for cutting tools.
Yeah graphics is bad I agree
FREE Herpes Dating App – MPWH
> perhaps we shouldn't think computer literacy would come so quickly and cripple this learning process in the name of security.

What about SIP stops a person from learning computer literacy? Also huge numbers of people want nothing to do with computers beyond their immediate tasks like email, browsers, etc.
Why do you think so? What could be the possible title?
MPWH – #1 Herpes Dating App FREE for HSV and STD Positive Singles
> Some parts of the filesystem become off limits, even as root. But installers have access!

Point of clarification: only Apple-signed installers can modify system paths. (c.f. https://support.apple.com/en-us/HT204899) All other installers are subject to SIP restrictions.

And Apple only added a few simple steps for people eager to tinker: reboot and disable SIP. Or reboot into the installer for the other OS with which you prefer to tinker. Or create a VM with an experimental OS. Frankly, most of those steps existed before SIP.

Most users shouldn't care or notice, and will benefit from increased protection. People who want to tinker will (and can and should!) tinker.
[I'm a founder of a company on the list, and know the creator Chris as a result.]

He's a student, and has been interviewing a broad swath of VCs, students, and founders to create this list for the past few years. As far as I know, he has no financial upside in any of the companies on this list. In the past, the site has asked for (optional) referral bonuses if candidates find the company through the site. That seems fair given the work involved in creating and maintaining this, but arguably that could be worth a disclaimer?

To many engineers and students, the breakout list brand already means something.

I think you're being too cynical – it's closer to a passion project and I respect that he keeps the site about the companies and not about himself.
Best time to raise money is when you don't need it.
Australian government tells citizens to turn off two-factor authentication
The site reminds me BiblioOdyssey

http://bibliodyssey.blogspot.com/
This doesn't have a damn thing to do with dtrace. This is about Apple asserting that they own your computer, de facto, not you.

Assumptions you're making:

* That the ability to disable SIP will always be available, forever, even though Apple has incentives to continue making their products more an "applicance" and less a "computer". I already said there are hardware features in new CPUs that are specifically designed to make that impossible. (see previous [5])

* That SIP will continue, forever into the future, to protect only those hidden directories.

* That Apple always knows what is better for the user, and won't exploit that power.

> turned off

Why is it that any time someone starts grabbing for power, there are always people that say we should ignore it because there is some workaround, or it's only an insignificant amount of power? Power is accumulated in small steps, with the hope that nobody notices until iti is too late.

As an analogy, you might say that I'm warning you that someone seems to be placing some gas cans around your property, and you might want to stop them before they decide to light a match. Meanwhile, you (and quite a few other people) are saying it's no big deal because you can just step over those gas cans - they aren't blocking the walkway much.

Apple is taking your root access away, and you're fine with it. They are saying that they de facto own your computer, not you. Yet you're fine with it.

> Also what war on general computing?

I'm somewhat shocked. All I can say is you have quite a bit of catching up to do. For the answer to that question, see my previous [1] and [2]. For [1], I linked to Doctorow's essay, but he links to his original lecture at 28C3 if you prefer. That lecture introduces the War, while [2] continues with a discussion of why we need to solve this problem now, as the ramifications extend much further than Apple and the ability to gain root.

Again, you might want to think long and hard about the long-term consequences of giving up root access to Apple. Security can be provided for the user without handing control over to Apple.
On the peninsula (Purissima Hills Water District) we pay about €1.49/kL for the same Hetch Hetchy water. The quality of San Francisco's water is pretty amazing. At home I measure a total dissolved solids of <35 ppm. Compare to San Jose municipal water with a TDS usually above 400 ppm (the value does jump around a lot depending on where SJ is getting its water from).
One completely normal developer thing I need to do that involved turning off SIP is setting library and framework paths to debug an executable outside of Xcode.

We archive our daily builds so we can regress problems to a specific check-in. Now I could just roll back my source and build from that, but that takes significantly longer than just copying the regression build from the server. (Not to mention that if the revision is old enough, I need to install an older OS and Xcode just to build it.)

But our archives are straight out of an Xcode development build - they contain separate libraries and frameworks that we build and that aren't moved into the executable like during an install. So to run them from a disk image you need to set DYLD_LIBRARY_PATH and DYLD_FRAMEWORK_PATH to get the OS to know where to look for them. But this doesn't work with SIP. This is not some low-level kext-related issue. This is pretty basic development stuff with Xcode.
Merry Christmas
I wish you all a relaxed day, with nice food and in a good atmosphere with family and friends!
Recession in Chinese Economy and Its Effect
Visual studio dev essentials is offering a code for 6 months of Pluralsight ($49/mo level) for free. I would check that out.
do you hate root? Should all processes run with equal privileges? Does the kernel have an evil and undesired permissions level?

The key difference here is that root is well known to be the all-powerful user, the one that really owns the system, while SIP is Apple's attempt at removing the power that root should have.
Slack vs. HipChat – The Chat Wars
That's nothing. Resublimated Thiotimoline dissolves before it hits the water. Look here:

https://en.wikipedia.org/wiki/Thiotimoline
I don't think he's saying that it is ready for production just yet. I don't want to piss on this parade, it's certainly a milestone, but there are problems too.
Used it on a huge project where I wanted the interfaces clean between the Python project at runtime and to serialize the Python objects to the database. Using pickling gave me sleepless night until I moved to Marshmallow. Whilst Django REST Framework comes with a nice serializer and parser modules, marshmallow's ability to do just the part was a godsend.

This alone gave us the flexibility to expose the Python modules and objects as a simple JSON API and the DB load / save came for free.

Highly recommended.
Yes, I wasn't posting to argue with the other poster, I was just writing to clarify and emphasize further the BrowserID aspect of things and other contexts.
My only gripe with Persona is that it is not easy to use in mobile apps, if at all possible.
I'm actually pretty happy with the Tesla system, and it DOES ask you to hold the wheel in sharp turns, faded lane markings, etc. It complains loudly if you ignore it.

It's miles from full autonomy, of course, but for what it does it works quite well in my experience driving between Seattle and Whistler, BC in snow, rain, and heavy wind twice in the last month (I only received the autopilot update a few weeks ago). It has clear limits and it's quite aware of them in general, protectively requiring drivers to take over before it runs up against them.
ES6 Rest/Spread, Defaults and Destructuring
can you talk about the usecase a little more. I'm trying to figure out why you would use marshmallow instead of pickling.. especially in context of building REST api.

I use Flask and I am not sure where pickling comes in. I have built a desktop application in pyqt though and the multiprocessing modules need pickle-able data.
Yes, it is now Christmas
So the probability of a health issue attributed to vaccine is higher than probability of a health issue attributed to the original disease.

Isn't that the core of the anti-vaxxers arguments?
They don't assert ownership, they set a default setting to prohibit a potential security hole. This is the same principal as a master key, if there is a hole you can exploit, there exists a hole which someone else may exploit.
Oh sure, but it's still not something requiring special APIs.
Oh, I have a story about LN as well. I studied nuclear engineering in school and our department had a nuclear reactor in the building (important in a moment). Nuclear engineering labs usually have large LN tanks because some types of radiation detector require cryogenic cooling. One day of the week at about 3AM some [presumably students living on campus[ were walking by and heard the tanks venting exactly as you mentioned. They called it in to campus security, who panicked and assumed the reactor was melting down (not even possible with this reactor) and by 3:30 AM a full emergency response crew, in full HAZMAT gear and complete with heavy vehicles has surrounded the building only to discover that nothing is remotely wrong.
It's amazing to see how much control is given to the onboard computers. I would've never thought the doors would be automated too. Isn't this a safety risk?
has anyone used ANY object serialization library (other than pickle) with multiprocessing ?

I just cant get anything else to work. We have a sophisticated desktop pyqt application that could really do with a better serialization with multiprocessing.

I have heard of Pathos[1] to replace multiprocessing - but never gave it a try.

[1] https://github.com/uqfoundation/pathos
Huh? I really can't taste the difference between tap and bottled.

I even think most of our bottled water here is tap water.
I disagree. It's the left that won't let us speak honestly about problems in some minority cultures or militant Islam. The left also won't let any real discussion of men's rights or potential problems with 3rd wave feminism.
On a multiuser system, that's a reasonable assumption.
You don't use 25gal/day to shower and wash and toilet? Shower is 2gal/minute and toilet is 1gal/flush, or more.
I would totally agree about the melodramatic. Try some water in parts of southern England. Would you like some water with your chlorine sir?
I'd rather see the money go towards a company that's actually working to support Linux, will deal with the machine under warranty, and so on. Also, the keys are in the right place, there are two mouse buttons, and so on.
Seattle tries to estimate sewer use by billing it based on extrapolation from winter water use (when lawn watering isn't happening)
Skimming the comments on that post, a lot of the people there seemed rather like dicks when talking about other people's unhappiness. I have to wonder how unhappy they themselves are, to what degree they recognize it, what brought them to that state...
Lynn has its own water supply, and they switched us over to MWRA for a couple months during some maintenance work. The MWRA water has a funky taste, not a fan. http://www.lynnwatersewer.org/Images/LWSC-MWRA%20General%20N...
It's not exactly in the spirit of data science when the features are unknown and every integer is sort of a black box. Any insights?
Bad nutrition isn't contagious really...
Presumably the body more readily incorporates organometallics than elemental metal
Ignoring lanes and driving using an old map seems a great way to plow into oncoming traffic.
re #2: it's only two steps to install a proxy-based adblocker and then set a proxy for your internet connection. Same goes on Android.
Previous discussion:

https://news.ycombinator.com/item?id=10786423
https://news.ycombinator.com/item?id=10787764
https://news.ycombinator.com/item?id=10788786
https://news.ycombinator.com/item?id=10789464

Please look and see if there's already a recent thread, everyone. Also, this wasn't the production-readiness announcement, this is an essay on the end of the long Advent, and hopes for the future.

That said: yeah, it's happening today.
I expect that the reaction from most of the HN community will be somewhat similar to "why use perl these days when there are so many other more modern choices," but reading the spec there are a lot of nice things in perl6, including the static type system, macro support, and improved patter matching. The syntax still feels a little antiquated, but there is an awful lot to like in this new release, and i expect that so very expressive, not overly opaque code will be written using this.
To be honest, Windows had WFP since Win2000 though, though it didn't do everything that SIP does.
Google open sourced TensorFlow
What in the actual fuck? He was detained for immigration authorities because 'prisoner for a crime that isn't a crime in my jurisdiction' isn't a legal immigration status?

Thanks for educating me about this.
Merry Christmas to you, too. ;-)
Merry Christmas to you too, as well as anyone else on call tonight! :)
> This doesn't have a damn thing to do with dtrace. This is about Apple asserting that they own your computer, de facto, not you.

Dtrace is one of the features that is limited by SIP so yes this has something to do with dtrace.

> That the ability to disable SIP will always be available, forever, even though Apple has incentives to continue making their products more an "applicance" and less a "computer". I already said there are hardware features in new CPUs that are specifically designed to make that impossible.

Yes apple could get rid of the ability to turn off SIP, I don't believe they will. Doing so would anger developers and technical users, these people have a huge amount of say on what technology get used in their organization.

> That SIP will continue, forever into the future, to protect only those hidden directories.

I don't assume that it will only protect those hidden directories, because it protects other system resources as well. I also hope apple keeps adding to the list of protected resources, to continue securing Mac OSX and IOS.

> Why is it that any time someone starts grabbing for power, there are always people that say we should ignore it because there is some workaround, or it's only an insignificant amount of power? Power is accumulated in small steps, with the hope that nobody notices until iti is too late.

This is not a power grab, this is a company securing their products for their users. Even if this somehow is a power grab by apple, so what. No one is forced to buy apple's products, and if apple wants to do things that make there products less desirable, again so what, people might start switching to a competitor. It's not like apple is the government, nor is it a monopoly.

> Apple is taking your root access away, and you're fine with it. They are saying that they de facto own your computer, not you. Yet you're fine with it.

Apple has not taken root access from me, I can still do whatever I want on my Mac Pro.

> Again, you might want to think long and hard about the long-term consequences of giving up root access to Apple. Security can be provided for the user without handing control over to Apple.

Again I still have root on my laptop, yes I had to boot into recovery mode first, but afterwards I can sudo away. To me it seems like you haven't heard of Mandatory Access Controls, Operating systems have had the ability to reduce the privileges of root for a long time. Thats all SIP is a application of Mandatory Access Controls, SIP is built on top of the TrustedBSD MAC framework that FreeBSD, IOS, and MAC OSX all share. The MAC framework has been in IOS and Mac for a decade and apple have been slowly using it to hardened there operating systems and SIP is just a progression of this. You would think you would be happy that apple is trying to improve the security of their products.
GoshawkDB – A distributed, transactional, fault-tolerant object store
What Legal Issues Should I Consider Before Starting a Social Network?
LTS isn't a compelling reason for servers? Troll!
No need to single out Apple. Windows has been requiring signed kernel drivers by default for probably at least as long.

Both systems offer ways to disable restrictions and reconfigure the systems for kernel development.

Not seeing the big deal with requiring developers to jump through a couple of hoops to disable security features that are genuinely useful for regular end users.
There was a recent news story about how some fantasy company employee made a fortune using questionable means (possibly abusing such data)
As an employee of another car company all I can say is:

Damn!

Similiar to Tesla, Apple and Google are quite far away from the degree of industrialisiation the automotive industrie has today. Without this you can't build millions of cars cost effectivly. Also, cars are immensely complex in all the small things that need to be engineered deligently. So, that move makes greatest sense.
Perhaps by limiting the rate at which password-free accounts can be created. If this limit is exceeded then the system switches back to creating user accounts in the normal way.
Thank you and Merry Christmas.
New bookmarking buttons
I use something similar.

1. get hosts file from http://winhelp2002.mvps.org/hosts.htm

2. install pdnsd (by default it reads and uses the hosts file)
Washington state, or Washington D.C.? Because D.C.'s water is actually so bad it can be dangerous.

You can't even believe the water quality reports because the Federal agencies distort them wildly. There was a massive scandal that resulted in both the CDC and EPA being caught falsifying evidence.

See the WASA lead contamination scandal from 2001-2010, in which the EPA falsely claimed that the water was safe, even as their treatment chemicals were dissolving lead in pipes and joints. The CDC was charged with determining the extent of the problem, and claimed that the high levels of lead were not a public health risk, a claim that later investigators from independent institutions stated were "scientifically indefensible."

Lead levels in the last decade were found to be as high as 83 times the acceptable standard for drinking water.

The water comes from the Potomac, is heavily treated with chloramine (which unlike chlorine dissolves lead), then runs through mains which were laid generally between the Civil War and WWI, and finally into old 5-6 story buildings (which due to height restrictions are often remodeled but seldom rebuilt), almost all of which have lead in the plumbing.

The water is so bad that even the heavily filtered water at my home has a terrible taste.

The government claims that the problem is "almost certainly resolved" after the addition of further treatment chemicals, not including the removal of chloramine, which frankly makes their claims implausible.

The Washington Post estimates that ~15,000 households in the city are still receiving extremely high dosages of lead.

Oh, and the Potomac is essentially sludge downstream from the city. The beautiful waterfront in Georgetown is actually the site of a CSO (Combined Sewer Overflow), so that every time it rains, the city's untreated sewage is dumped at the very location where the river is most used.
I'm surprised a 3" water main stopped it, pipes in general are typically made of very soft, low quality steel. It probably just ran out of energy after flying through everything else.

The plug wasn't welded, it simply screwed into existing pipe threads replacing an overpressure valve.
This patent tells us a bit:https://www.google.com/patents/US9176500

It performs actions for expected information gain. Driving slower to see more.

There are so many sides to this story though. I won't trust a car from Google if they don't publish their research.
I didn't use an existing framework, other than OpenGL. The game engine that I'm using is my own and is something that I've been working on since 2010.

I think I was not very clear but the collision engine, rendering engine, physics engine, and graphical user interface engine have already been built and all of them make up my game engine.

What I actually built in two months includes the game design, game mechanics, the specific user interface for this game, and the graphics.
It's definitely some bad example code, but it's not really related to the use of the library
Have you tried out React + ES6 ? whats your opinion on clojurescript versus that.

Especially when you bring in concepts like generators [1] (as a replacement for clojurescript's async), destructuring,etc.

[1] https://babeljs.io/docs/learn-es2015/
Being born in the right place helps a lot.
Similar, but stupider, in my mid 20s while in the Air Force my buddy and I built a rail gun out of disposable camera capacitors. It didn't take long after getting the first capacitor out for us to wonder and discover what it would feel like to short the leads on our skin. That soon turned into a game of tossing a loaded capacitor to the other at various times throughout the day in the hopes that the natural reaction of catching something tossed your way would kick in before the brain figured out what it was catching. Your tax dollars at work.
That's a fine goal, but there's more at stake here than mere "accuracy". When you design a language that uses S-expression syntax (sort of) and has "Lisp" in its name, but eliminates the reason for using S-expressions, you're not really laying a foundation for understanding, you're creating a cargo cult (https://en.wikipedia.org/wiki/Cargo_cult, specifically https://en.wikipedia.org/wiki/Cargo_cult#Metaphorical_uses_o...)
Nice sleuthing! I don't even recall where I first heard this story myself. The paper was an interesting read and still largely applicable even now in this 3rd or 4th coming of NN's.
This exactly. Just came back from Japan && New Zealand to Lithuania. I always thought we had great water, but now it tasted slightly foul (although very soft). I doubt that it gotten worse as we do a lot improve it.

Also, will never forget water in Switzerland (namely - Chur). Perfect, crisp, cold mountain water. Yumm. The worst water was in American Samoa, smelled like feces.
Japan Is Obsessed with Kentucky Fried Chicken on Christmas (2012)