skysight-inc/HackerNews huggingface dataset:
> Over 30 years you'll likely have to replace all appliances and the roof at least once, which could easily be 100k on a 600k house.

You seem to think that renters don't pay for that and owners operate a housing charity where they foot all the maintenance and other costs while renters just pay some kind of courtesy "I'm occupying your property" fee.

In many 30 year models, given a $500k home up for rent or purchase, the owner comes out somewhere between $1mil-$2mil ahead of the renter in terms of total asset ownership. After which the owner has only maintenance and taxes to pay for living while the renter continues to burn their money at higher and higher rental rates.

During the same 30 year period, the owner will have a diminishing cost of living while the renter will maintain around a steady cost (on average) meaning that not only will the owner come out wealthier than the renter, it will be easier for them to gain that wealth as per inflation.
You better hope they don't say the one that you designated to unlock your phone?
Here's where I wear my devil's advocate hat:

If you bought the product out of box, then the person who sold it to you had no right to sell it to you! Our agreement with the distributor specifically states that the product must be sold in the original packaging. In the same way that you can't go around selling your neighbour's house, the distributor had no right to sell that product to you. Give it back now please.
Well not a bug really, but working out how to do something never done before, with many technical challenges, maybe six to eight weeks.
I'm sorry, but I don't understand what you're getting at here. The legitimate concern is prevention of future attacks. They may have collaborated with people who were never apprehended on the attack that actually happened.
Judge says Apple must help the FBI break into San Bernardino shooter's iPhone
Firstly there seems an inherent bias that young people want to be homeowners and not being a homeowner is bad for people. My first reaction to "Under-35s in the UK face becoming permanent renters, warns thinktank" is, "So what?". We are not talking about people being homeless.

Also I think lots of these reports never make any mention of demographic changes over time. The 35 year old of 1998 is likely to be a very different person to the 35 years of 2026.

In the 18 years since 1998 we have seen university attendance increase from 25% to 33%. We have seen the cost of university education increase, so most graduates now carry more debt. I suspect we've seen an increase in the average age of marriage. Probably also a reduction in marriage and number of people that are having children by 35.
None of the local passwords within passwords are known to Apple. They say.

The FBI is hoping they do know something secret.

In most cases it would be easier to subpoena online accounts, but of course Apple says iMessage is also unreadable for different reasons.
Gah! As a medical device programmer, that code is a horrors how! Ifdefs, gotos, 400 lines long, scarce comments, so many arguments passed, single letter variable name, stack declarations all over the place, etc. I could go on about the helper functions in that file, lack of argument descriptions, lack of references to standards. It all reeks of a lack of structure. I'm surprised to see the Internet runs on that.

Thank you for sharing that. It's really nothing to do with C, I agree. Just a drastic lack of coding standards. Don't people refactor key code after functionality is proven and tests developed?!
Immunotherapy could bring cancer treatment breakthrough [video]
but fuses can be blown. Simply by blowing one of the fuses the key will change. Even a single bit change means it's useless to authorities.
Use your middle finger to actually unlock and use your index finger to fail. Unless the phone retains the biometric data after erasing itself, it's deniable.
The Hair tendencies 2016 – The Emporialist│romanian „street fashion” magazine
I never saw that at Apple. There were literally no budget restrictions on engineering as long as you got the job done.

Was that back in pre-Apple days?
If Apple can jailbreak the phone in its current state, Apple (or the NSA) may be able to help.
I pay $30 per week in rent and maybe $30 in utility a week, after renting an apartment, and sub-letting with the owner's permission the other rooms. That's like $300 a month.

Your figures are way off.

I started with $5000 in late-2012, and 3.5 years later, I have lower six figures investments. That's enough to buy a house in some parts of the country. So I don't get why I have to wait 30 years to buy a house if I wanted to.

I'm guessing you own property with a mortgage tying you down financially and are trying to justify why you did so.

I can quit today and live for 7 years doing absolutely nothing.

Can you?
3 years.

I still cannot display video on my Chromecast while continuing to play audio on my phone while using any given Chromecast app.
It would seem to me that the "fingerprint = key" analogy is flawed. Physical keys can be trivially copied, and even reverse engineered from the locking mechanism. A key is a physical object that is required to disengage a lock.

A fingerprint, when used on an electronic lock of this kind, is not a key. It's attributable to one person only, not trivially duplicated, and not able to be reverse engineered from a locking mechanism. It requires an action by a single person who cannot be forcibly relieved of their possession of their fingerprint.

Additionally, a key is specified during the manufacturing or assembly of a lock, and comes with the lock, since they are "paired" when the lock is made. However, a fingerprint or password are specified by the user at will after they've assumed ownership of the device. They "testified" their identity to their phone with a fingerprint, just like they did with their password.

If compelled to imprint a finger, it is the same sort of personal interaction that a password entails: the credential holder utters/presents their personal information - not a physical object, but a repeated testimony of the same content they previously and uniquely presented to their device. It should be protected as other self-incriminating testimony under the fifth amendment.
If you can break AES... then the NSA would love to have a word with you :P

The FBI is going after the lowest hanging fruit, the users password that was used to create the crypto key.
The circumflex: a battle over an accent mark
For the sequence 1,2,5,14,41,122, I didn't notice that you gained each new term by multiplying by three and then subtracting one. However, the pattern I did notice is each additional term is obtained by adding 3^(n-1) where n is the term number. 1 + 3^0 = 2. 2 + 3^1 = 5. 5 + 3^2 = 14. Since these two methods provide the same result, they are probably related somehow, but I can't seem to figure it out.
Nope. I don't want monied corporations anywhere near my regulations. Let's just have the pertinent regulatory agencies realize that making someone stare at a screen for 'X' minutes doesn't make a training program. You are asking for someone to side step that stuff.

I would actually rather have companies like Zenefits sidestep regulations like that to show the regulators where they screwed up than Zenefits pump money into skeevy Lobby groups.
There's plenty of references at the bottom, why don't you dive into these yourself instead of asking me to do it for you? I found the article perfectly clear.
Even if there were no such safeguard, you'd still have to break AES encryption...
Probably not. You're usually looking at a 2-3-year old laptop already for $300. And for that money, you kind of get what you get.
Not exactly randomised, just available when they're available. It normally looked like this - my current rent ends on the 10th of March, found a new place to rent and say "here's the deposit, I'd like to move in on the 5th of March, ok?" and everyone's happy.
Can't they use the dead guys finger print?
Because AES is still secure unless the NSA knows something and is not sharing...
AES crypto does not lend to easy cracking...
Thank you for the link. I was unaware how seriously Apple takes their security. Self-destructing HSMs to avoid brute-forcing is extremely impressive. THIS is a model of how to implement proper key escrow.
They want to bruteforce the pin code for the device... so longer passphrases and an encrypted filesystem provides plenty of protection.
HP's consumer and enterprise divisions are effectively separate companies (and, in fact, were acquired from separate sources.) The enterprise "workstation" laptops are some of the best-put-together, simplest-to-repair, most-natively-well-supported-without-needing-drivers, and otherwise most "obvious" in their design machines I've ever had the pleasure of refurbishing.

The EliteBook line is the one laptop where seeing inside actually made me want to own it more. (And I did buy one, and it was an excellent machine that served me well for years and would still be decently competitive today.)

Other neat thing: the EliteBooks I was refurbishing tended to be 2007 models—but they came with fully-working UEFI, hidden under a "this is only a prototype implementation" warning. It was fun playing with 64-bit Windows 8 on them; none of the other machines in the shop could make heads or tails of the W8 install discs.

They also tended to come with fingerprint sensors. I got used to unlocking my laptop with my thumb long before TouchID was a thing.
Some notes on Apple decryption San Bernadino phone
Because you need physical access to the device to put in a pin?
The feature that erases all data after 10 unsuccessful PIN attempts is off by default.
The FSF defines freedom as the four freedoms. Copyleft is about preserving those four freedoms. Copyleft is still free software in terms of the four freedoms. Sure, you could take freedom as being able to do completely anything (or more things than just the four freedoms), but this is like saying the declaration of human rights is bad because it doesn't give you the freedom to enslave others.

So the question comes down to whether or not you think nonfree software is a bad thing. If you don't think nonfree software is bad, then how does it hold that you're saying you care more about user freedom than those who use copyleft?

To me, those who really like and care about freedom to use, study, modify and share software have no problem with copyleft. The people that seem to have a problem with it seem to just want to deny users that freedom. That's really what it is all about. I don't know how on earth you came across this as being like "War is Peace, Freedom is Slavery, Ignorance is Strength", when not having the four freedoms in the case of nonfree software is the real slavery here. And copyleft prevents such nonfree software.

TLDR haiku by RMS:

Using GPL
is encroaching on our right
to encroach on yours

BTW, the LGPL, GPL and AGPL licenses are all "open source" in the sense that they are approved by the OSI, who are the ones who created and defined the term "open source" in the first place. So saying the GPL is not an "open source" license is technically incorrect and confusing.
Yes. In the court order section 5 (on line 8 of page 3) "Apple shall advise the government of the reasonable cost of providing this service."

Perhaps only engineering resources. (it's always gonna be a big legal hassle)
Lyft, Uber, and Airbnb can't avoid regulation forever. They've just been lucky so far. Eventually there will be a high profile incident—someone important will get raped or murdered. The political response will be 1000x what their lobbyists can handle.

It is inevitable. The reality is that this is how a lot of regulation starts. It doesn't always come from an anticompetitive place. We just forget that we actually asked for the regulation. Once we have, it's nice to always be able to blame the government or some regulator when something goes wrong. And then someone else can come in and "disrupt" the market by using a loophole of pretending like the regulation doesn't apply to them, when it's clearly intended to.
> I think it may be the case that mainframes, or things that look like mainframes, will always be around.

It's also easy to imagine a future where compute workloads begin to dramatically trail behind compute power and space requirements. Then, you've got one of these Z13 mainframes the size of an Apple power adapter plugged into the wall of every home.

Maybe we wouldn't even need cloud providers anymore.
Who goes to jail if Apple flat out refuses?
2) ECC , IMHO, is useless on personal laptop. Error rate is quite low that "opportunity cost" is too high.
Except that, MBPr is proper solution. So, let's hope Apple to solve your USB3 port issue. (you can report, by the way)
Australia negotiated kick-ass awesome work visas as part of their free trade agreement with the US.

For example, spouses can work on the visa.
A Brief History of Tech Bulls#1t
Thanks, that's what I was missing.
This is a luxury. You must have had good luck to be able to do that.
I was thinking the exact same thing. I recently got Intel NUC boxes for every developer at our office. Linux support out of the box. It's 4 inches square ans easy to take different locations provided you can hook up to screen.

Everyone's got a laptop too, but they can now also VNC or SSH to their Linux machine if they need to work remote. Hell you can VNC into them from a chromebook.
> They may have collaborated with people who were never apprehended on the attack that actually happened.

Right, but we don't go searching everyone's papers just in case they are conspirators.

If Alice punches Bob in the face, then is hit by a bus and dies, we don't go searching through all of Alice's stuff just in case there might have been someone else involved with the Bob-punching incident, right?

Is there any evidence, any at all, that the shooters collaborated with anyone?

> The legitimate concern is prevention of future attacks.

I'm not questioning the "legitimate concern", but I don't think "legitimate concern" should be sufficient to get a warrant.
>Do you like the MacBook but don't like the OS? go ahead and change it, you can have triple boot.

Sometimes[0].

P.S., if you're interested in helping, we'd all appreciate it!

[0] https://bugzilla.kernel.org/show_bug.cgi?id=99891
The phone in question is an iPhone 5c that doesn't have a fingerprint sensor.

Also even if it did, simply rebooting the device will require a complex passcode instead of a stored fingerprint.
The Federal Circuit isn't a copyright court, it's a patent court.
A thought experiment: Let's say the government makes hardware encryption standards in the style of FedRAMP that sets standards for preventing tampering by foreign governments. Then, imagine that a consumer electronics company voluntarily makes all devices comply with this standard. Could a court attempt to compel the company to defeat the standards which the government set as tamper-proof against governments?

A second: What happens if Apple states that it will take a 50-person team with an average annual labor cost of $200K/person approximately 5 weeks to fix the problem with a 50% chance of success. Can Apple bill the court a million dollars to try to fix the issue?

A third: Apple open-sources their encryption modules and firmware. They no longer have proprietary information for how to unlock the phone. Are they legally required to be the ones who defeat a system to which they hold no proprietary information?

A fourth: The small team that built the system no longer works for Apple. Perhaps their visa was revoked and they left the country, perhaps they were poached by a competitor, or perhaps they retired in the years since this module was published. Who is responsible for complying with the order?

A fifth: The data is actually corrupted. Apple presents this conclusion under penalty of perjury after a thousand hours spent on the project, which it requests are compensated.

A sixth: Apple requests that trading of its stock is frozen for one month while it expends considerable resources on complying with an unexpected court order relevant to national security.
Are you arguing that since we can't replace everything with safe code, we shouldn't replace most of it? Security is not a binary state. Even taking firmware into account, if you compare the number of CVEs affecting "normal code" and firmware, the choice is trivial.
We bought 120 HP netbooks and had almost 90% drive failure (Seagate) and their firmware only for service contract customers has really soured me on HP. I find SuperMicro makes better servers, so I am pretty much out of HP now.
Mind if I ask what it is your working on?
Well, now you know why I use Macs.

They are closed (unfortunately) but they are not full of bullshit, at least.
5 Important Reasons You Need a Mentor
How Kimoji Onboards New Users
I understand your point with regards to your last sentence, but that doesn't justify bad management.
I think the main point here is that, as you said, institutional marketing/design/UX success is not as easily measurable as other endeavours. You can A/B test a landing page but you can't really A/B test things such as logo/corporate identity.
This order says Apple must...
- bypass the auto-erase feature
- enable the FBI to "submit" passcodes
- not purposefully introduce additional delays

I don't see that this requires Apple to do anything in particular with whatever passcodes the FBI submits.

bool tryPasscode (string passcode) { return false; }

Reasonable cost of service: $5?
Purism/Librem looks extremely similar to System76 - they are rebranded laptops from an Asian ODM running a variant of Linux.

None of their marketing materials make reference to better build quality, battery life, or support, just "security, privacy, and freedom". I would love for them to hit all of these boxes, but I am unsure that their hardware will be as free/secure as they claim (see https://blogs.coreboot.org/blog/2015/02/23/the-truth-about-p...).
It seems like you should really just buy a MacBook Pro. Sure the software isn't perfect, but it's an order of magnitude closer to perfect than Windows has been lately. You buy it, boot it up, and it works wonderfully. Of course the one day out of the year that it doesn't you go rage comment on how it sucks and it scares Windows users away from Mac, but the rest of the time you'd never consider going back to a typical PC.
Well, it is.
Virtualization.
"""To the extent that Apple believes that compliance with this Order would be unreasonably burdensome, it may make an application to this Court for relief within five business days of receipt of the Order."""

If what Apple's security guides claim is true, "unreasonably burdensome" should be an easy standard to meet on practical technical feasibility grounds. The issue is whether they'll want to challenge this on non-technical grounds.
You seem to not understand what "equivalent" means. Renting a room in an apartment is not the equivalent of buying (or renting) a house.

> So I don't get why I have to wait 30 years to buy a house if I wanted to.

Why don't you? Then continue to just live in one bedroom of that house and rent the rest out to make more investment income? It doesn't make sense that you aren't? In fact it sounds pretty stupid that you aren't: in one swoop you secure infinite-term housing and you can get other people to cover all of your cost of living.

> I'm guessing you own property with a mortgage tying you down financially and are trying to justify why you did so.

No not really. There's a bit left, but I can finish paying it out from savings pretty easily. It's not worth it because my interest rate makes borrowing the money essentially "free".

>I can quit today and live for 7 years doing absolutely nothing.
Can you?

Sure, I can liquidate my assets and pretty easily retire for the rest of my life to a few places my wife and I have scouted out in nice parts of the world. It wouldn't be lavish, but it would be fine.

If we're clever, we'll instead probably just rent our current house out to somebody like yourself and use the (rent - maintenance - taxes) to take out a mortgage on the same property we're thinking of buying outright for retirement and just live on the passive income forever. We'll thank the renters for funding our retirement with a gift basket full of cheap wine and summer sausages once a year. The mortgage on the place we're eyeing is not in the U.S. and current runs ~$600/mo. The rent on my house right now would run around $3k-3.5k/mo. In 30 years the rent on my house would run around $6k (keeping with expected inflation). The mortgage on the property we bought would still be $600. Feel free to do the math.

I and my wife expect to live another 40-50 years if that puts the value of property ownership into perspective for you.
The PIN is an input to the HSM, where the key actually lives. HSMs are designed from the silicon up to resist inspection or modification of internal state. There are certainly no baked-in debugging/JTAG interfaces, and the hardware is designed to blow away the key if the chip is under physical or logical attack.
> If compelled to imprint a finger, it is the same sort of personal interaction that a password entails:

Not quite sure it is though. If they already arrested them, they already have the fingerprint don't they? That is different than key and is different than password.
Pelican is another Python-based static site generator with a large userbase[0]. It has these features plus a few more years worth of development, in many cases adapting from an original author's narrow set of use cases to fit more general needs (that seems like how these pieces of software tend to evolve). It has a kind community, lots more good development plans, and many useful plugins. I believe a lot of people pass it by, simply because it still needs some help putting its best foot forward[1].

0: https://github.com/getpelican/pelican/

1: https://github.com/getpelican/pelican/issues/1065#issuecomme...
No. The keys are stored in the secure enclave. Only the AES engine in the secure enclave can see them.

Apple has gone so far as to disable JTAG access so they can't read the keys even with a hardware debugger.
Nothing says "my company shoots for Mediocre" more than featuring your own 3/5 star products on your own landing page

Call me crazy but this is why Apple is even a thing
Next laptop I get for hacking will probably be FreeBSD[1] and I'll be running ZFS so ECC would be a bonus. I understand the debate, but ECC should be standard given how much memory we are putting in these things.

1) well, PC-BSD most probably. I am more an OpenBSD person so I might still go that route.
Mobile will be more powerful than PlayStation 4, Xbox One in 2017, ARM forecasts
> Well, I hope that's not true.

Do you think everyone on HN is 16-22 years old?
I think if Google decided to sell the Chromebook Pixel (2015) with Linux instead of ChromeOS, OP, I, and a horde of other developers would all buy it.

In reality, it doesn't seem very easy to install Linux on the 2015 Pixel or any other Chromebook without either remembering to press Ctrl+D on each boot or by going through a significant set of hoops.
Democracy versus Technology
I think the courts have this one right. Your finger is a characteristic of you, not compelled speech.

If you can compel a suspect to stand up on a lineup, or produce id, there's no reason why the court shouldn't be able to compel you to produce a finger.

In technical terms, the finger is really a "something you have" second authentication factor. If you think of it on those terms, it's more like looking at someone's Hardware token than compelling a password disclosure.
I'm not a boomer but you're dead right.

The weird thing, is why have houses become considerably more expensive in AU, the UK, NZ, CA and a few parts of the US while most things have become much better?

The finance thing, on negative gearings and capital gains isn't enough. And why does it do it now when negative gearing has been around in AU since 1915 and there was no negative gearing at all until the 1980s. But housing was much cheaper in the 1970s?