skysight-inc/HackerNews huggingface dataset:
>Yes, the scrypt hash just becomes the password for the server. However, this password is going to be unique and almost impossible to guess. Salting this password on server side doesn't give us any additional benefits.

I don't even your threat model.

Can you walk us through how you see this working?

Client takes 'crappypassword' as input, sends p = scrypt('crappypassword')

The server stores SHA256(p)?

EDIT: misread what you said. is this correct?
wrt to "Of you're arguing that iPhone 6=< have some sort of "Mission: Impossible" self destruct mechanism, I'm sure it could be disabled given enough resources and motivation."

The iPhone 5S and newer has a coprocessor (or co-computer) that has a hardware enforced rate limiter as part of one of the features of the "Secure Enclave" (which, word on the street is, cannot be overridden by software).
The problem with the powers that be playing the ultra-nationalist card is that is difficult to stop playing; like gambling or burying corporate debt it might lead to short term gains, but sooner or later you have to pay. There are ample examples of ultra-nationalist states that have exploded, imploded, or withered on the vine; and none have lasted the distance with out some kind of revolution, quiet or otherwise. Things will get worse before they get better, this is definitely not the bottom of the barrel. You can tell the wise ones are already cashing in their chips and are exfiltrating their wealth. Loans that were once prime will become sub-prime once the capital has fled. These state financed, but often personally influenced, loans that are currently sub-prime; well...
That's probably true. And if so, it means that it is probably not in China's interest to take Taiwan.
It's no longer a business issue, and if it is, then Apple is just posing.

Apple's positive affect on our economy, our technology, and even our nation, would make such a line that our government would have to think long and hard about pursing their demands.

Imagine if Apple, and the tech community as a whole, stood behind that decision. Of course they won't because they rather be rich than free.
A Storm Is Brewing Over Florida’s “Sunshine Law”
I see. I have used trac and bugzilla and both work similar to GitHub (you only subscribe to issues you participate in)
The article reads almost like a press release for ViaSat which uses a handful of big geostationary satellites. It even disparages the OneWeb LEO initiative saying it will be too expensive and take too long to build. I think the article was prompted by the dispute between American and Gogo. I'm not sure what it's doing here on HN, doesn't seem that interesting.
As do it, and I'll add that it has a very nice feature of marking new comments after a page refresh with a narrow vertical orange bar.
I've moved to doing something extremely simple: just give me pseudo-code for indexOf given a string and a character. If you can't write the 4-5 liner for linearly searching a string for a character, then there's not much point in moving further. It is shocking how many people get tripped up by it.
it's probably pretty safe to assume google did the opposite
it's astounding that they still haven't bridged the UX gap for users w/ Google Apps accounts all these years later.

Nowadays, with the more enterprise-y features (policy, etc.) of the {Gmail,Apps} for Work, I at least get _why_ they're not on parity. But if you asked me 5 years ago, I would have never guessed this (Apps users missing out on XYZ) would still be a thing.
But instead you are paying a mortgage. Whether that is a net gain or loss depends on where you live.

Where I am (suburb of Vancouver) a mortgage payment for an apartment of similar size/quality/location to what I have now is about 50% more per month.
American Airlines Lawsuit Suggests It Too Thinks GoGo In-Flight Broadband Sucks
>Issue template filenames are not case sensitive, and can have an extension such as .md or .txt.
I might be able to answer that.

My wife and I are early 30s. I spent my 20s in the rat race, working 60-80 hour weeks for material possesions (nice vehicle, luxury townhouse, etc). At some point, I got tired of it and said, "Can we try something different?"

I switched to a fully remote job. We disposed of the townhouse (no equity in it). We downsized our lives (1 car! I ride a bicycle everywhere! You would not imaging how much better shape I'm in) and began to live more frugally with a short-term plan of moving onto a sailboat and living on the ocean for a few years. We save 50%+ of my income (we live in a low cost of living area), we should be able to retire comfortably around age 45. We'll be moving onto our sailboat in the next few months, learning to sail together, and then starting a long circumnavigation around the world (~5 years).

My wife didn't require any convincing. More quality time together for getting rid of things we shouldn't have cared about in the first place? It was an easy sell. If anything, she sold me.

Rule 1: Pick the right partner.
The flip side though is low rates make it easier to afford the home payments too.

Your mortgage payments on a 30yr loan at 4% on a 300K house are approximately the same as 8% on a 200K house. (Not strictly proportional due to principal payments)

One other thing to consider - it's real rates than matter, not nominal rates. 4% interest rate in a no-inflation environment is the same as 8% with 4% inflation.
> I also ask candidates to code on a realistic problem. It doesn't involve any "fancy" algorithms or "tricks". What I want to see are the coding style, attention to details, and of course, if the candidate is comfortable at coding.

Do you do that on the spot or is it a "take home" assignment? I've known many solid programmers (myself included) that could code anything you want, but if you put them in a room, sit there and watch them do it, they'd freeze up. On the other hand, if you give them a project, give them a timeframe to develop it, then have them walk you through what/why they did, they would absolutely excel. It's sitting there in front of someone(s) and the expectation, that would just cause them to freeze up.
New Quartz Coin Can Store 360TB of Data for 14B Years
For some reason it seems even scummier than rigging votes so maybe that discouraged it. But it's no surprise that admins would have a "work" account and an "anonymous" account. You'd never be able to express a personal controversial opinion without it being jumped all over and attributed to the company.

Somewhat related: Did you have to comb through all of your past comments before the interview and/or announcement? It must have been weird interviewing at a place where you'd had a personal account prior to being interviewed. I would have been filled with anxiety wondering what weird stuff (oh golly, and porn...) I'd looked at while logged in.
It's not that the link isn't in the right place. It's that regular old users like me are familiar with the Issues -> New Issue workflow, and will continue to go right to that whenever we want to create an issue since it's a guaranteed way to create an issue.
At least one car had MD plates. I don't think the source could see all of them clearly enough to make them all out.
Don't downvote this. I want to hear the differences between the products too.
Sound advice, particularly about focusing on generating leads rather than closing deals and on the scale. I'd add that by the time a principal of a small firm explains what sort of lead they wish to pursue and what sort they do not, it will take more time than just digging up the leads. There's just too much capacity planning with a small staff to ignore small variations in workflow and backlog with generic instructions.
"plagiarism based on a Google search"

Uh... If the solution is readily available on Google, and they can solve the problem effectively with that solution, then they didn't plagiarize. They operated exactly the way they should work in a real world scenario. The worst kind of employees are the ones who insist on re-inventing the wheel every chance they get, instead of using industry standard libraries.
It's a rebranded "Adcom Ikon 4" some say

https://gadgets360.com/shop/adcom-ikon-4-gold-8-gb-3738342d3...
It's significantly easier to simply touch the card than to have to insert it into a device that provides a keypad, and then type a PIN into said keypad. The keypad approach is safer though, and I'd prefer that for lots of situations, but there's no situation in which I'd want to be able to have money leave my card without me at least touching the damn thing to activate it.
Apple has a been a member of prism since 2012, so is this not all moot?
You are right with that a whole day onsite interview is more time consuming.But personally, I think I can do better in a face-to-face evaluation than on a coding challenge where I have to guess the test cases from some vague description. In fact, face-to-face can show the interviewer how I think and what kind of questions I ask to figure out the way to solve an issue.

Maybe it is my lack of interview experience, since I only had like 3 or 4 so far, but I only 1 out of them left me with a good experience after the coding challenge (even if I did not get an offer yet).
Increase your productivity
> The logical conclusion of this line of thought is that Al Capone should have walked free when prohibition ended.

The principle "if one in jail for an offense which is later legalized, one should be released" would only lead to freeing Capone with the end of prohibition if tax evasion were legalized at that time, which it was not.

If, instead, the principle "if one in jail because one was prosecuted for an offense other than the one primarily motivating the government to seek to jail you because they had insufficient evidence for the offense that is the prime motive, and the offense that is the prime motive for the government seeking to jail you -- even if it is not the one you were convicted of -- is legalized, then you should be released for jail", well, then Capone would only be released with the end of prohibition if murder were legalized at that time.

I don't think any principal which would lead to Al Capone being released when prohibition ended was either proposed or implied upthread.
If you're in Ontario, after your lease ends, it becomes a month-to-month agreement by default. You don't have to do anything. Landlords cannot evict a tenant after a lease is finished without a valid reason.
While true, I think the bigger issue is that no landlord would, in their right mind, agree to be represented on a website that is almost certainly going to contain nothing but negative reviews.

If one stops to ponder what would make an individual want to rate their landlord on a "RateMyLandlord" kind of site, then the answer is pretty simple: hatred. The biggest reason for people to write such a review is to complain. Usually, the complaints people write stem from issues related to their inability / lack of desire to pay their rent on time.

Landlords hate not getting paid. Especially in major cities, where regulations basically annihilate their ability to operate in an honest and competitive way without significant impact on their financials. Getting their monthly rent on time is really the only way they can turn any kind of profit on their business.

My income is higher than it has to be for the place I rent here in Brooklyn. But I get charged far below market rents. Why? Because I pay my rent every month on time without hassle. Because I don't wreck my apartment, don't need many repairs, and don't bother my neighbors. So even though I could afford to pay the market rate, I am a 'good' tenant, so I pay the so-called "preferential" rent, which is almost $400 per month cheaper than the rent cap instituted by NYC's horrid rent control laws.

That's right. My landlord could actually charge me more, but he doesn't, because I'm not a shithead. What am I supposed to write in my RateMyLandlord review? That I am a good tenant and get charged lower rent than everyone else? There goes all of my reward for being a decent person.

I don't see any way for such a site to work without damaging reputations or ruining nice arrangements tenants already have with their landlords.
> they were very responsive at first but after the interview, went radio silent for a week. After promising a response in a day. This was particularly annoying since I told them I had a written offer that I was pushing off for them.

ugh, I hate that. I was jerked around by an a-list firm like that this fall and it was totally frustrating, especially because I turned down another offer while I was waiting to hear back. Really screwed me over and left me very bitter/annoyed. There's no respect and everyone's looking out for #1.
This needs to start eating its own tail and support gmailifying google apps accounts :)
I think the idea is that the scrypt hash does become the password, but it's a better password. A password with a lot more entropy (kinda). The increased kinda-sorta entropy makes the use of a slow key derivation function on the server side unnecessary, so SHA-256 becomes sufficient.

Not sure how I feel about it.
Not to mention that this preserves some liquidity. It'd be a shame to have to refinance at an inopportune time to get some equity out of a house.
Al Capone did plenty of illegal things beyond distributing alcohol: murder, racketeering, etc. If he had merely sold booze like so many others I would argue there is no wrong in letting him walk free post prohibition.

And yes I agree with you wholeheartedly that the sentences were unjust in the first place. It is my hope that legalization will steer people to reconsider the excessive harshness and implicit racial bias of drug laws e.g. crack cocaine users receiving larger sentences than those caught with powder.
I was in a relationship and after my companion decided to end it, I found out it was to join someone living in a van. Don't be too quick to discount relationships with that lifestyle
> For a Linux distro that has been around so long, it's mind boggling they still don't understand that.*

They definitely do understand that - they also offer more packages than any other x86 operating system. It's just that they have a reason for doing it their way. The operating system is meant to provide a stable base, and the user can then select particular software for more frequent upgrades by adding their own target repositories. Or using make.

Debian is one of the two major linux distros that other distros source from. It's a bit weird to suggest that they don't really get how software is developed.
Thanks for the link! I knew there had to be more technical information out there but couldn't find it on an initial search.
Yeah, I would assumed that is the case as well :)
After reading this I tried to install an exchange account on my gmail app. It asked for a bunch of extra permissions for the specific exchange account, including the permission to "Erase all data" from the telephone, resetting it to factory settings. Not gonna happen.

From what I gather those permissions were requested by the exchange server, so my university would be the one to blame. Why a server would ask for this permission is beyond me.
Racket: #lang clojure – Clojure compatibility in Racket
What kind of names do front office dev roles have on efinancialcareers?
Someone is making money off a series of moving images? My god! Who woulda thunk such a thing possible?
Huh, they do say 'relative to face value'. I still think that reasoning is flawed, but I'm not going to argue with the RCM.

Thanks for the link!
If you have done nothing wrong, broken no law, can a court order you to write a letter or a book? If not, then on what basis does a court order someone (a company) to write code? This isn't just a matter of removing the anti-bruteforcing code, the FBI has also asked for a way to quickly iterate passwords without using the on-screen keypad. That's creating new functionality, not just removing existing functionality. This seems specious.

This almost certainly ends up at the Supreme Court, but due to the national security implications of the case it's plausible certiorari petition could be made by either Apple or the government. And yet we have a 4-4 court right now.
the github code has been removed, that's fast.
But why...
From the given numbers, it sounds like a 9% tax.
Lead an engineering team that's moving data for 50k schools at Clever (YC S12)
One would hope that the Secure Enclave only allows itself to be updated after the PIN has been entered successfully.
I've often thought there's a massive market for ReactOS in legacy support. There's so many platforms (ATMs, flight controllers, banking software) that use unsupported windows versions. Many of these platforms would pay an arm and a leg for ongoing support and security updates.
Yeah, it's all about them. If they're into it, awesome, but in my personal experience the people I dated were very much used to a standard of living, and had some expectations of my contributions to uphold an image. But this journey is ultimately up to you. You start out by asking yourself what do you truly find valuable? Are all of these things you've collected simply working together because in combination they've found some local maxima to sustain your current life?

One thing I've found is that even if the people you knew before aren't available to make the transition, there are plenty people on the other side that will know you for who and what you are to them. Taking a stand and fighting for your change and growth takes some guts, and people find that admirable. Dating has also never been better because you both immediately enter into these relationships without pretense.
People scale the principle of the mortgage to the monthly payment they can manage though. So I'm wondering if the bigger effect is upward pressure on home prices. Which probably doesn't make housing more affordable.

Anybody staying in a home would be insulated from the price effect, but anybody buying a first home or moving would feel it.
I challenge you to find a bank office in a normal city in Sweden which actually handles cash. They can be found, but it’s not easy, and not all banks even have such cash-handling branches anymore, even in large cities.

So yes, in Sweden it is seriously not possible to get your hands on large amounts of cash on short notice.
Right, I understand that if you stay in BTC, things are better, and that long-term, the idea is that everyone accepts it and pays out with it so you don't have to keep converting and your point on volatility is a good one.

But as of today, I don't get paid in BTC, I can't pay for any of my 'standard' expenses (mortgage, utilities, etc.) in BTC, so if I owe my friend $50 and want to cover that electronically, if I use BTC, it's likely he'll end up with something more like $48 (or whatever) if he wants to actually buy something with it, which seems to be approximately the same situation as a "Visa tax", but with less predictability. Your Yen example is a good analog, actually. I also don't pay him in Yen for the same reasons. I don't get paid in it, he can't buy most things with it, and doing so would effectively reduce the amount of money due to conversions.

Frankly, when I'm owed money in the $0-100 range, I generally just ask for an electronic Amazon gift card. It's basically instant, there's no fee or conversion penalty, and we buy enough there that in those sorts of amounts, it's about as liquid an asset as there is. I understand this doesn't further any sort of advance, and perhaps even reverses it, but it's certainly pretty painless. That being said, it's not something I'd want to accept large amounts of with any frequency.
I would suggest that this will affect civil rights cases for much longer than a generation. The very law that the judge cites (All writs act) is 225 years old.
As a potential candidate, all of the standard complaints ring true - but once you're on the other side of the equation, and need to hire people... your ability to create new interviews is not nearly as wide or as clear as it would seem from the outside.

1) Take home test: OK for performance metrics, bad for "getting to know" the candidate, and terrible for selling the candidate on your company

2) Daylong interview: Expensive, requires interrupting our team, needs a fully planned and well executed itinerary - but is perfect for getting to know someone, getting the feel for their personality and interests, and is the best way to sell someone on the opportunity.

3) Work sample: we usually do this for interns[1] and pair it with a ~1 hour conversation (either before or after, doesn't really matter to us) on what the company is like and what they would be working on. Obviously, work samples suffer from the same deficiencies as a take home test for cultural fit and the like, but it's the best we can do for interns!

[1] https://gastrograph.com/blogs/gastronexus/interviewing-data-...
> the US government is Apple's largest customer

I'm having trouble finding numbers, but I seriously doubt this. The reason that's true (or more likely true) for Microsoft, is Windows. The US gov't has massive site licenses for Windows and most of MS's software portfolio. Apple is used where in the US government? Some cell phones? A few public affairs offices that convinced their purchasing officer to buy a Mac Pro for video editing? Maybe some labs that wanted a unixy OS and, again, convinced their purchasing officer to buy a Mac Pro?

Per: http://investor.apple.com/secfiling.cfm?filingid=1193125-14-...

The bulk of Apple's revenue comes from outside the US. Perhaps the US government is their largest single customer (I still hold this is a dubious claim), but it is not essential to their continued existence. They would do just fine without those sales.
They already had this, only without the server-side processing for Spam filters and Google Now features. The Gmail app in Android has had the ability to bring in other email accounts for months; This seems like the next logical step. Super cool option to have.

I wonder if those of us who already have third-party email accounts in the Gmail app will be automatically upgraded to this.
Chrome OS distro for regular PCs can now dual-boot with Windows
Security: user choice
Beautiful. You are an inspiration! :)
Strange phrasing used by the SEC. Would be better to say they charged the analyst with cronyism.
I totally get where you're coming from. An extra file in your repository is quite the burden. This template file is the straw that broke the camels back. It should be removed.

But why stop there? Let's also remove the README.md from the repo. It can also have it's own independent revision history. Maybe they should also add a feature for managing the LICENSE file for you.

/sarcasm
I'll try to find the discussion. EDIT: Here's the discussion - https://news.ycombinator.com/item?id=9305504
To play devil's advocate:

Mr. Cook expressed concern that "the government could intercept your messages, access your health records or financial data, track your location, or even access your phone's microphone or camera without your knowledge".

As I read this I wondered, "what harm would actually happen if that occurred"? If the government did read my messages and get my health records & financial data and track my whereabouts, I can't think of anything bad that would actually happen as a result of that.

Is there anything specific that I should be worried about in that scenario?
No support for JMAP accounts?
Unexpected Eisenstein
Can't you? Seems like the kind of problem you can point an electron microscope at, and perhaps some very high precision laser cutting. In any case, I imagine if you are willing to spend resources on it, you could read the on-chip memory somehow and start cryptoanalysing that.

Against a sufficiently capable adversary, tamper-resistance is never infalible, but good crypto can be.
I strongly suspect the limits are there to prevent bank runs, and not for any customer-service purpose.
I like tests to be as unclever as possible, I want to know my tests are actually testing the code and not passing incorrectly.