skysight-inc/HackerNews huggingface dataset:
Maybe this is a silly question, but does anyone know how secure the TouchID on the iPhone is compared to the 4 digit pin? I remember from a comment in the Android source that the android 5 face recognition is about equivalent to a 3 digit pin. Is TouchID more secure or less secure than the 4 digit pin?

Is it more tractable or less tractable for someone to brute-force the 4 digit pin than the TouchID? I.e. if someone wanted to get into my phone, and they removed the official TouchID sensor and now it falls back on a 4 digit pin, does that do them any good?

I wonder if I could get the old behaviour back - if someone was tampering with my phone by removing the sensor, is there any way of bricking the phone until I can get it to an apple store?
Mirroring my sibling comment here, but thanks for the detailed note on how to get rid of the bright white title bar :)

As far as resizing goes, I would suggest using one of the many pseudo tiling window managers available on mac. I strongly recommend spectacle [1]

[1] https://www.spectacleapp.com/
With alternating pages printed "What is 6 x 7"
This is a very long document to say "don't be an asshole to your colleagues". If you really need this, and particularly you need this at work, you have bigger issues than a CoC will ever solve, in my opinion.

I will never understand the concept/framework of "microaggressions" (I get, but I feel it's ridiculous - probably it's because I never lived in the US, I don't know), but that is a story for another day and place.
Iterm2 was one of those things I was not expecting to miss so much when I switched to a Linux desktop. There's something about the look and feel of text that I'm used too. Don't get me wrong, there's good terminals for Linux, but I think iterm2 was the best. I'd gladly pay for a Linux port.
> Andrew Ng's notation for machine learning sometimes uses superscripts as indices, and sometimes as exponents. In the same formula.

I've never read Ng's work, but typically upper and lower indices is a sign of a summation. It's known as "Einstein Summation Notation". At first glance it seems obtuse, but when you start doing covariant/contravariant derivatives on tensors, the notation makes things much easier.
Legal recognition of corporations as people long pre-dated Citizens United:
https://en.wikipedia.org/wiki/Corporate_personhood
Try cmd or right-clicking the path in the window title bar. Should pop open a menu with the CWD path and all parents that you can then click to open in a finder. Apparently this works in other Mac apps as well. I had no idea for many years.

https://www.safaribooksonline.com/library/view/os-x-yosemite... under "Title Bar" section. Also has some other hidden tricks. As cool as this stuff is and as useful as it is, it's not discoverable at all.
Every citizen has one vote and 24 hours in a day to allocate to supporting a candidate (bounded by the obvious). Speech has much more in common with time than it does money.
Comodo's 'security' kit installed a lame VNC server on PCs on the sly
I believe cheap Comodo SSL certs are domain based and subject to DNS hijack aren't they? If so they shouldn't be considered all that secure for websites that have customers and need to be secure.
RxJS uses the observer pattern and is not really FRP in the Haskell sense of things.
Completely missing the point that this site doesn't sleep, so if the moderation is all in one timezone, it's being applied inconsistently.

I found your own form of "moderation" of something you didn't understand amusingly childish.
Apple doesn't hate developers.
If you can manage to slide -- even just a tiny bit -- between consumers and Ecom sites you can make a lot of money from referrals!

This is what slickeals and camelcamelcamel do, though only one of those uses scrapers.
I will just be honest, although a little rusty.

Global(US) company cant survive in China, a major reason is that their services are not competitive enough(although a few exceptions, e.g. Google Search), comparing to local rivals.

Amazon, for example, their delivery is not working in China. Competitors are offering same-day delivery, or even 3-hour delivery one or two years ago in China, while Amazon is relying on some crappy 3rd party delivery with a high deductible you have to meet before your delivery can be free.

Wechat centers around chatting as a take on SNS, and it works. It is not Facebook, but works like Facebook. While the direct copy of Facbook, Renren is long dying.

So it is really a grey area when we talking about success in China. What you need to realize, Chinese companies are very competitive. Shit tons of money pours to Chinese internet companies over the past decade. Tencent/Alibaba are all 100 billions company, and there are sizable of others worth more than 10 billions. Also, China has good engineers too, might not live up to bay area standard, but they are also much cheaper. Last but not least, I want to point out, a lot of 'tech' companies here are not really tech driven, rather they are just tech users, so their model can be easily copied and recreated, not only in China, but also by other big US companies.

All in all, it is not realistic to expect what work here automatically print money in China. South korea is an interesting example, where GFW doesn't exist, but US companies also have a hard time there, it is just that China is bigger so it gets much more attention.
MXers Modular Earbuds
Hello Hacker News!

My name is Bharat Pulgam, I am a 17-year-old Junior in Minneapolis Minnesota and CEO of mXers Audio. It's a pleasure to be able to be featured in this amazing community!

I imagine we've all broken earbuds before, and whether they cost $20 or $200, it’s always a nuisance to buy replacements and throw our entire investment down the drain all because single part breaks. What if you could simply replace just the part that broke? That's exactly what mXers modular earbuds aims to do. mXers is the only earbud & headphone platform that allows for easy repair and customizability with a simple snap, twist, and bam!

Our Product revolves around the concept of modularity and by creating segments in our everyday set of earbuds we've been able to create an ease of repair and customization never before seen in the audio space. Our patent pending connector method allows for a lossless and durable connection so you don't sacrifice comfort and durability in our product.

If you are interested feel free to visit us at www.mxersaudio.com and sign up for our newsletter!

Since we our incorporation in November 2015 we have
- Received our Patent and Incorporated under that State of Minnesota
- Established and strategized national sales channels
- Calculated Financials for our company for the next 5 years putting us at 6,000,000 in Positive Cash flow by 2020
- Strengthened Marketing efforts nationally by strategic placement of 10 brand ambassadors at national universities and high schools
- Modeled and detailed product schematics and created final renderings
- Increased brand awareness across multiple highschools's within the state
- Worked with multiple market professionals to ensure a high-quality product
- We have been featured in the news and you can find more info here : https://mxersaudio.com/media-press/

I would appreciate any feedback or concerns you may have!

Thanks Again!
Better driver auditing and education? Ha ha ha. Dude their whole strategy is to bleed out poor schmucks that get in debt thinking they are going to hit the jackpot.
Cmder (which is Conemu + extras) is my go-to terminal app for Windows, and I know a lot of other folks like it.

http://cmder.net/

iTerm is definitely hard to beat, though.
Yes I believe these are also domain based SSL certs. Not really offering security and I doubt insurance but, they are free.
It worries me slightly that I can still remember the URL for PuTTY - I'm not even sure I've used Windows once in the last 5 years in a context where I would have needed it!
If Appke weren't able to update the software on your device, they really wouldn't be able to give you software updates. Since it's the software that enforces security, well you can sees where this is going.

It's not as easy as you imply. Denying themselves the ability to end run your security might well require them to not be able to upgrade or recover user devices. At all.
What does Kanye West have to do with thugs.
Accepting donations is about as far as I'd go with trying to monetize free software. If I were looking for a lifestyle business I might take a try at selling support for it or selling some kind of related SaaS.
Sorry, maybe I was unclear. I haven't really started learning python yet. I read it, and could probably write it. I don't know the ins and outs of the language. I don't even think I've written anything more than "hello world" in python, although, I'm pretty sure that program was also valid Ruby -- so it might not even count.

What I was trying to say is that the portability of python3 is bad enough that it effects non-python programmers.

For example, sometimes I want to try a new vim plugin that's written in python. I install it, and it doesn't work. Great. Then I find out it's because OS X's python can't interpret it. So I install python3 (which has a different executable name, also annoying). All good, right? Wrong. Vim needs to be compiled with python3 support because the python extension is exclusive to python. Now I have to recompile macvim with

brew install macvim --with-python3 && brew install python3

It's not a quick process at all. Especially when I'm just trying something out. This stuff happens with other tools I've wanted to use too.

It doesn't ruin my whole day or anything, but it's a bit irritating to have to manage several versions of an interpreter for a language I'm not even using that language in production. It doesn't help that I use several machines and VMs.

So yeah, I know exactly what is annoying about it.
Not when it comes to transparent, limited scope, reasonable writs.

This isn't some NSA mass surveillance program, or clipper chip reloaded(TM).

This is an active murder (and terrorism) investigation in which Apple's privileged position -- one they assumed by choice and to their own benefit -- already exists. It is not unusual, unethical, or establishing any new precedent for them to be compelled to use keys they already have to open this single device.

Apple does not need to, nor are they being asked to, provide a backdoor that can be used elsewhere, and any further demands of Apple will require the same judicial oversight as this one.

If Apple doesn't want to be in this position in the future, they can avoid the potential liability by not holding master signing keys that can be easily used to circumvent the security of an owner-locked device.
No, you're saying "which of this limited set of companies are you going to authenticate with" instead. If you don't want to be guilty of taking users' agency away from their own trust decisions, you need to do one of two things:

1. Let every website on the Internet potentially be an OAuth provider.

2. Make OAuth optional.

If you follow option #2, then this article is still relevant because you need to handle passwords securely.
BuiltWithMeteor Weekly # February14th2016
>It's my understanding that each candidate is given the same hard cap on campaign spending, which encompasses everything from advertising to the cost of sleeping on a friend's couch while traveling.

And how do you deal with third parties who advocate for issues? If Candidate A and Candidate B have a different position on something, it's pretty clear who you're helping if you blanket the airwaves supporting Candidate A's side of the issue even if you're not explicitly addressing either candidate. Does that come out of his budget? Do we restrict unaffiliated groups?

Those sorts of restrictions have been tried in the US, and each time they get circumvented by (officially) unaffiliated groups.
Ex-NSA and CIA Chief Hayden Sides with Apple
The discussion thread must die.

- Nobody wants to read a bunch of different ways to say the same things.

- Nobody cares about the person that happens to be the first to say something.

- Nobody wants to read through a tree of indented comments.

- Nobody has the time to read a wall of text when all they care about is the TL;DR.

Ain't nobody got time for this. I want a clear visual representation of the community's reaction to a post:

- Why I should care about this post.

- Why I should ignore this post, which doesn't deserve any of my attention.

- Why I should have a positive reaction to what the post is about.

- Why I should have a negative reaction to what the post is about.

- How accurate and representative of reality is this post?

- What actionable items I can take from this post.

- What related content/posts should I seek if I want more of this.

The pyramid of why-should-i-care-ness should be presented to me in the right orientation, or time is wasted.
The FBI wants custom software that doesn't have bad Pin delays and deletion after 10 bad Pin requests. They want Apple to update the Firmware so they can use brute force cracks on the Pin to guess it so there are no consequences for entering a bad Pin and no delays. So the FBI can blow through all possible combinations to get access to the phone.
FYI, it's slightly difficult to brute force the touch ID, because the secure enclave will wipe the derived PIN key (that it holds in internal memory, after receiving a signed message from the touch id sensor) in a reboot or after 48 hours.
This site seems to be derived (or even created by as, it reminds me of his style) Alain de Botton's work -- author of many interesting modern philosophy books: https://en.wikipedia.org/wiki/Alain_de_Botton
There's a recent overview of that kind of thing here:

Scan Methods and Their Application in Image Compression

Tarek Ouni and Mohamed Abid

http://www.sersc.org/journals/IJSIP/vol5_no3/4.pdf
After installing on Windows (7 pro), I only get an error dialog box:

"The procedure entry point ucrtbase.terminate could not be located in the dynamic link library api-ms-win-crt-runtime-l1-1-0.dll."
No worries. I actually think it might be better for the locals if (a more enlightened and less hard-line) Israel governed a bit more of the Mideast but this is a political impossibility right now and certainly better left unsaid. I should have left that bit off... it didn't have anywhere to go but towards irritating somebody. I'll take blame on that.
What do you use as a CalDAV server?
The white paper Apple released two years ago said this:

> Touch ID can be trained to recognize up to ve di erent ngers. With one finger enrolled, the chance of a random match with someone else is 1 in 50,000. However, Touch ID allows only ve unsuccessful ngerprint match attempts before the user is required to enter a passcode to obtain access.

So that's at least 4 digits. Newer devices like the 6 series and 6s series may have better sensors.
So if every (or most) relationships are fixable, what does it matter who you pick as partner?
It's not as hard as you're implying; A locked device could support re-imaging by expunging all existing key material.

In general, Apple's guarantees about anonymity and security all assume that there is no risk to Apple sitting in a trust position. This case demonstrates why that's a bad idea.
No! Remember the book:

"What do you get if you multiply six by nine?"
Space Propulsion Startup Accion Systems Starts Taking Orders
https://news.ycombinator.com/item?id=11103069
Vlad is right, now it does codebyte rewrite. using the trace and profiling interface was the old way.
My ex wife was a Volvo station wagon whose brakes stopped working.
Or a certain number of incorrect attempts.
I'd recommend Borg, a fork of attic with better compression options and better filesystem support (i.e. NFS).
It's really two questions: Why choose Ubuntu for the cloud, and, why choose FreeBSD for the CDN. We believe that's the best choice for both environments. I was trying to type in an explanation here, but that's really something that will take a lot to explain (maybe a Netflix tech blog post).
"Writing everything out in prose" is the way it used to be back in the long-ago days. Modern notation is far superior.
You shouldn't lose your right to anything when you're in a group, but you shouldn't have more rights solely because you're in a group. The group should have rights, You should have rights, and everyone else should have rights. There's a distinction there.
If the things you learn from YC community usage is inapplicable to your target market, then that is not useful learning. It is useful for business if their use context overlaps with that of your target base.
Competition without regulation doesn't improve quality, historically it lowers it.
Just saw the Hilbert curve video, absolutely awesome. Very well done, amazing animations, and I learned some things to boot!

Should come with a warning - once you start watching, don't expect to get anything else done for the next 17 minutes :-)
No ZFS version has support for that. It has been discussed and it might be implemented at some point.

That said, I would like to point out that ZFS' dataset level operations are more powerful than reflinks. ZFS' dataset level operations give separate independent snapshot and clone capabilities. They also provide the ability to rollback without killing things on top (which is useful in some cases). You cannot do that with reflinks. I suppose the immutable bit could be used to fix a reflink so that it retains the state at creation, but that is racy. In the case of virtual machines which seems to be a major application of reflinks, zvols are lower overhead and support incremental send/recv.

One benefit of reflinks would be that regular users can use it, but regular users should be able to snapshot, clone and rollback when delegation support is implemented.
Your same arguments apply in the other direction, you know. It's not just women interested in the most desireable men, it's also that men are interested in the most desirable women.
Confessions of a command line addict
you'd be surprised at the pace of growth of the economy in many African countries.
He is not radical or left when seen from an EU view and with 20 years experience on Capitol Hill he knows exactly how the game is played. So he is able to get stuff done i have no doubt about that.

Two of his main agenda points are no-brainers:

- Medicare for all

- Tuition Free College

And he is right with his assessment that the rising inequality is not a good thing for our future.

Two Youtube videos:

https://youtu.be/hv11kl6i-qU?t=3920
Talk with Bernie Sanders in 2014 where he goes on what it takes to change this system.

https://www.youtube.com/watch?v=bBx2Y5HhplI
Ted Talk from a Nick Hanauer on inequality
What rights do I have as part of a corporation that I don't have as an individual?
Some part of me believes that the old Apple that Steve Jobs was in control would have stood his ground with "Error 53." The Tim Cook Apple is a lot more compassionate with respect to these sort of things.
If you have an ad blocker it displays this message:

Here’s The Thing With Ad Blockers
We get it: Ads aren’t what you’re here for. But ads help us keep the lights on.
So, add us to your ad blocker’s whitelist or pay $1 per week for an ad-free version of WIRED. Either way, you are supporting our journalism. We’d really appreciate it.

You can whitelist Wired to get around the block and see their ads. Most companies are doing things like that if ad blockers are detected. Making you pay a subscription to see an ad-free version.
> Why is it I lose my right to speak if I'm in a group?

No one has suggested that you should. People have suggested that the corporation acting as such, including through its paid agents should not have the same rights as natural persons, acting alone or collectively, but that various classes of corporations should have constraints appropriate to their class.

One of the many reasons offered for this is that corporations are creations of government granted the use of the special form and legal fiction of personhood adn subsidized with various benefits with the purpose of achieving public benefit.

> In that respect, what makes corporations different from unions or advocacy groups like Greenpeace?

Unions and advocacy groups quite often are corporations. "Unions" and "advocacy groups" are descriptions of functions, "corporation" is a description of legal structure.
> It would be interesting to see data here. Again, saying "are usually" isn't based on data.

Why? They're suggesting the data doesn't support the claim - They only needs data of their own if they had their own claim. The burden of proof is not on them.

You are right that they didn't use names to determine gender though, which makes this a little suspect - did The author read the study?

It does mean, though, that the sample is further focused on developers who are on G+, who use the same email address, and who identify their gender. This would potentially allow for even more confounding factor if not investigated.

Whether or not a sample is representative is not an unimportant question, and with conclusions like this, need to be considered a little more...
I have used iterm for a long time and I would like to donate to your project. I make all my donations with Patreon, would be great if you could add support for that, if it's not too much trouble. https://www.patreon.com/
I think one thing that you have to remember is, ISO standards aside, mathematical notation isn't a fixed thing but a living tradition that evolves over time.
The GPL does not placed restrict non-derivative works. If it did, it would not be an OSS license by #9:

https://opensource.org/osd-annotated
Uber runs on cellphone GPS alone. The gov't has full access to cell phone location records for everyone who touches their cell network, with unique serial numbers. They don't need uber or anyone else for a subset of their location records.
Yeah, this changes everything. It's concerning, but I feel Apple will most likely implement given recent events.
In SemVer [1], it's prescribed that the first number is for breaking changes, the second number for new features, and the third number for fixes. So this would be v3.0.0.

It also allows you to add a suffix though for beta-type versions, so the beta would be v3.0.0-beta, or v3.0.0-rc1, etc.

[1] http://semver.org/
They told us this was coming a few weeks ago... I will say what I said then; bye Wired.
That just their I/O bandwidth. There is computing overhead in actually doing the sort. Also google was using redundant persistence.
On donations, it's kind of ridiculous that the PayPal mobile checkout doesn't support 2FA:
Your Security Key can't be used to log in here. But, you can still complete your purchase with PayPal by checking out on your computer.

It also looks like it was designed in 2004 and never touched again. This same issue affects the Cydia store, and the only workaround there is to disable 2FA.
I was able to get my F# code to compile using .NET Core yesterday! It's difficult to find the correct project.json parameters and you have to build the latest CLI yourself, but it works.
Senator drafting bill to criminalize Apple’s refusal to aid decryption
It's just a web interface to git add.
Hython: Haskell-powered Python 3 interpreter