skysight-inc/HackerNews huggingface dataset:
I think the important part is the "unreasonable burden." Apple's position is that it's an unreasonable burden to be required to dedicate finite technical resources to a problem that directly and very publicly counterfeits one of their marketing stances. They can pretty easily draw parallels to US-based cloud companies that have lost European revenue post-Snowden. Maybe it's reasonable to request $50k in engineering time from one of the largest companies in the world, but what about $10 million in lost future sales? $100 million? more?
If all Apple produces is a signed update (with logic that activates it only if it's the right IMEI) then it's not useful to anyone hacking any other phone. The software can't be modified to work on them without Apple's cooperation, since any modification breaks the signature and you don't have Apple's signing keys.
I miss when Ubuntu was the unqualified choice if you wanted to recommend a Linux distro to a non-techie.
Since you have nothing to hide, please provide SSN, CC # and salary information. Please also stop wearing clothes. Sounds ridiculous, doesn't it?

People do care about privacy, but the use case varies. However just because you claim not to care, it does not mean that that becomes the minimum standard everyone else has to adhere to.
Correct URL: https://hn.algolia.com/?query=zenefits&sort=byDate&prefix=fa...
View the world in systems to improve your business (Sam Carpenter)
They do. Such is the case with the "patriot" act which was prepared and in waiting for a convenient event to justify the power grab. http://www.globalissues.org/article/342/the-usa-patriot-act-...
> I don't, but I also don't have a verifiable path to bootstrapping a toolchain. I trust that Canonical haven't backdoored their packages.

You do not need a verifiable path to bootstrapping a toolchain to reduce surface area of attack to just the toolchain.

That being said, you could try building Clang with GCC and then GCC with Clang (or vice versa) to break any exploits designed to persist in either one indefinitely unless you are the victim of a really special hypothetical attack that targets both simultaneously, although I imagine you could interleave multiple GCC and Clang versions to make such an attack even harder to pull off or even add more compilers to the mix like EKOPath. That should reduce the attack surface area to binutils.
Ask HN: Do you think security is part of a developers job?
With the growing cyberthreat and daily news articles about one attack or another the focus on application security is at an all time high. However there seems to be confusion about who should be responsible.

I've met a lot of developers who think that security should be left to the specialists and their job is to simply provide functionality according to specifications.

I feel that this is akin to building a car and saying that it is someone else's job to prove it is safe.

What is your opinion on the matter? Should every developer be security-aware or is it a job for the specialists?
A Guide to Increasing Your Mobile App Downloads
Ask HN: Moving to the USA with a chronic health condition
I am an Australian university student studying Software Engineering. I was scheduled be over in the USA completing my final semester on exchange right now, however 6 months ago I fell quite sick, and after 3 horrible months I was diagnosed with Crohns Disease. The good news is that with proper treatment prospects are good and life should return to normal. The bad news is that most people diagnosed are stuck with it for life, and some of the treatments can be expensive (mid $X,000 per month) if the government / insurance doesn't help out.

When I am done with uni I want to move to the USA on an E3 visa (basically H1B for Australians) to take advantage of the work opportunities and satisfy my sense of adventure. If I were to do so, assuming I were to work for a large employer (e.g. Google / FB):

1. Am I correct in assuming health insurance is provided by my employer?
2. Am I at a disadvantage already having a potentially expensive chronic condition?
3. What happens if I move jobs / become a freelancer / join or start a startup?

Apologies if these are straightforward questions, however from an outsiders perspective trying to use Google to find the answers has left me even more confused. I figure that there must be many people on HN who have been through this themselves.

As much as I want to move to the USA, being shackled by health insurance makes me reconsider given I don't have any of these problems in Australia. I am currently struggling to differentiate between the truth and the horror stories of the USA's health system
> Why are there so many reddit clones? Reddit doesn't make money.

Sometimes, people make a website because they want that website to exist, not because they want to get rich.
That story's relatively old now, and it's only recently that Apple has taken such an aggressive public stance on encryption and privacy. It's willfully ignorant to pretend that the Snowden revelations didn't change market realities in this area.
The Only 2 Living US Mass School Shooters Not in Prison
> Reproducibility from source and build env are fundamental to science or making changes to improve something. Without these, it can appear to signal hoarded proprietariness waving the banner of FLOSS or just a poorly-maintained project without high standards, even if it were unintentional.

I am typing this on a system running Gentoo that has only 3 proprietary packages installed, with one being Intel's microcode. In time, I hope to lower that number to zero. If you are concerned about this and do not run a source-based distribution, I suggest that you switch.
"Graphing how addicted your friends are to Facebook and Facebook Messenger"
> The discussion thread must die.

What alternative is there?
I have been struggling with getting the new "service keys" working with this API. This is the first place that Google is mandating its new security infrastructure.

Do you have any sample code that works ?
Non-free: BetterTouchTool

Free: Control Plane
Every iPhone has a built in backdoor. That is the fact that apple can sign software that the device will trust.

I am currently with FBI on this because their success could spell doom on the walled garden approach.
The Evil Update could just refuse to function if it's being used on a phone with a different IMEID. You wouldn't be able to remove the check without breaking the signature, so it wouldn't be possible to use it to hack any other phone.
You made a legit and helpful point upthread, but then your comments became at least as bad as the ones you were criticizing. This is just awful stuff, and I'm sure you know better. Please don't be uncivil on HN in the future.
As for leaking info, your Py3.6 example leaks exactly as much (i.e., what is referenced in the literal). In fact you could consider it syntactic sugar for the locals() (although faster I guess).
I don't know why you're being down-voted. The US is in the midst of an election cycle that may very well pertain to the "legislative action" of the parent comment (in so far as the executive has an effect on the legislature). From a recent article [0], it states (summarizing):

Pro-Privacy: Cruz (R), Paul (R), Sanders (D)

Pro-Surveillance: Trump (R), Rubio (R), Bush (R)

Moderate: Carson (R), Clinton (D)

[0] https://nakedsecurity.sophos.com/2016/02/02/where-do-us-pres...
FISA warrants and NSLs are "following the letter of the law", too. You don't think they're subject to egregious abuse?

As for what the "majority of people" find reasonable, all I have to do is look at the polling numbers in the current presidential race to find myself in abject disgust at what the "majority of people" appear to think. They seem not to give half a shit what happens to anyone else, as long as they can watch the next episode of American Idol without fear of "getting blowed up by terr'ists" — despite the fact that more people have won the lottery than have died from terrorism in the US since September 11th.

EDIT: Anyway, there's nothing new or informative to be found in this discussion. We disagree. Let's leave it at that.
Adding a file to a repository – GitHub
If there is a subpoena against that phone, I don't really have an issue with the government gaining full access to it. But there needs to be a subpoena and that backdoor can't be activated without one.

It's a similar, albeit stronger, idea as "probable cause": giving law enforcement a temporary waiver of rights that regular citizens are usually afforded.
I personally use BitlBee with bitlbee-facebook [1], and hook up my existing IRC bot to it. It works for my needs.

[1]: https://github.com/jgeboski/bitlbee-facebook
Developers should be held responsible for the applications that they build. Management, and especially executives, should also be responsible for the work of their employees and how they handle their customers very valuable data.

Personally, I love learning more about security. It means I can charge more for consulting.
Do you honestly expect him to append his setup because of _aarti's particular situation?
That brings other iTerm windows to the foreground.

There is a ticket to fix this, but it's bound by limitations from how OSX does app switching (according to the ticket).
It's well worth the time to apply no matter the outcome (imo). Worst case you have bought a lottery ticket AND thought about your idea in an organized way. There's value in that.
https://news.ycombinator.com/item?id=11128348
Without any references to facts other than the writers own experience.

Any peak in popularity can not be found when you look at the actual numbers:
http://githut.info
Lol, I love how "SAMPLE TEXT" is part of every section of that :)
Or a somewhat different example, the Nazi use of census records (seemingly innocuous) to find and track Jews (horrific).

http://www.amazon.com/Nazi-Census-Identification-Control-Pol...

In fact, I would strongly push for anyone working with "big data" to read up on this. Just because we can, does not mean we should.

Data does not have a "use this only this way and only for good" button.
And this would still only buy me something if Canonical are backdooring their packages, which I don't think they are. It's a huge amount of extra effort for what is (as far as I'm concerned) zero benefit.
It's not humorous because it's funny that he would have low self-esteem; it's humorous due to the irony in the juxtaposition of a demonstration of something so obviously clever and impressive and an over-the-top embodiment of a self-effacing stereotype. Maybe he's putting it on a bit thick, but I think it's well done.
In this case, VNC is installed as part of the malware in question.
Least successful YC batch of all time? Harsh. Probably true, but harsh. Still miss you guys though <3
I had the same experience. Though I tried multiple times with different methods, I have never benefited from meditation, or I never felt so, contrary to most studies. Maybe we are in the <0.05 population?
So, uh, what was the point of the whole WTO thing again?
"with more rules we have solved most of the problems in the world. That just leaves the weird events" -Steve Coast

The remaining problems are indeed weird, and succumb only after application of every available tool: "asking around", CS theory, low-level debugging, visualization, heavy logs analysis, pouring over source code, strolling aimlessly, mining commit history, politicking, brainstorming...
Would it not be a more preferable for a centralized
structure to provide everyone with the basics, so
everyone could study what interested them and add
value to society as a whole.

"From each according to their ability, to each according to his need." (c) Karl Marx. We all know how well that worked out in the Soviet Union and elsewhere.
As far as I know, there's no way for a user to delete their own account u click user name like den open account option u seem delete button u click this button u easily delete ur accounts for any query visit on my site n mail me.
http://buytwittersfollower.com
If you're interested in the regressions iTerm2 has compared to Terminal.app, the two I've noticed are:

- Terminal.app will focus the tab triggering "prompt before closing if there are jobs running besides" and name the job that's running. iTerm2 always ask "Quit iTerm2?" and leave you to hunt down which tab is preventing it from being closed.

- Triple-clicking in Terminal.app will select from the previous \n to the next \n (i.e. it will select multiple lines if the lines are wrapped), while triple-clicking in iTerm2 will select only that line.

Screenshot: http://d.pr/i/1eeca/4bWrRR3r

Top: Terminal.app, bottom: iTerm2. This technically isn't a "regression", but I prefer the Terminal.app behavior so it'd be nice if there was at least a toggle.
Yes I will be fine - if you want security - don't buy ios apple. Buy device you can properly secure. Don't base your security on someone not cooperating with LEO.
Could someone here explain to me how it's possible that a bug like [1] concerning the main functionality of nginx (static file routing) is open since many years, and yet nginx keeps its popularity? Is that really the best we've got?

[1] https://trac.nginx.org/nginx/ticket/97
Avoid success at all cost.

-- Haskell
>a case that so well matched their political agenda.

It's almost perfect isn't it ? It's prima facie reasonable, there's no immediate privacy violation, Apple - by the looks of it - could comply fairly trivially and failure is sure to lead to attempts to legislate. Don't like the motivation but you have give them points for planning and execution.
Jobs hired Sculley. What does that make Jobs?
The original research paper from Sci-Hub:
http://sci-hub.io/10.1016/j.biopsych.2016.01.008

For those who are not aware of Sci-Hub:

Setting knowledge free: Sci-Hub is The Pirate Bay for research papers
http://www.digitaltrends.com/cool-tech/Sci-hub-research-pira...
Umm shared experiences mainly.
Probably because every single popular project that has existed for a long time has bugs that have been open for years, so the fact that a bug has been open for years says nothing about the quality of those projects?
You're (both) doing it wrong. For starters, meditation is a learned skill. It's not something you can do right off the bat.

Second, it's not about 'not thinking'. It's about being aware of your thoughts, as if watching them from a distance.

Third, you can't not benefit from taking some to sit and quiet your mind. That's as absurd as saying you don't benefit from sleep or rest.
What I basically meant: while meditating was not satisfying at all the afterwards felt great: I didn't had any urge to waste time with Facebook or other unproductive activities.

The biggest problem around meditation is that most are not able to clearly express what meditation is really doing with you.
Many groups are trying to reuse Ubuntu recently. I'm thinking about Linux Mint and Elementary.io.

One day, one new group will be more focussed on graphics and hire UX designers, and publish a polished, paid version of Linux. As in, you can redistribute, but if you want to subscribe to the repository which contains the latest bugfixes and the awesome UI design upgrades, you'll have to pay - and this is perfectly legal with free software, even GPL. We've only avoided that until now because so many groups have a huge disdain to making money off products (which is an awesome value - but just a value).

So it is understandable that Ubuntu tries to raise barriers of entry.
If you're looking for a low-entry start to meditation, Headspace is a great little app. It starts off easy, with 10 10 minute guided sessions.
It's the original affirmative action program.
Node-currency-swap: Universal exchange rate library for Node.js
It is developer's job if someone pays them for it. Right now - it will take me twice as long to deliver a secure product than semisecure just don't fly with management.
I'm still not catching why selling insurance requires licensing. This is not practicing medicine, this is not giving people haircuts, it's not even preparing food, all of which make sense to be regulated. It's just selecting from a list of plans.

In an ideal world, people/employers should just be able to do it themselves and cut out the middleman.
1. Health insurance is covered by most employers for full time salaried workers.

2. Preexisting conditions and chronic conditions are not an issue since Obamacare was launched.

3. If you are not covered by a company plan you can get the same group rate using an exchange.

Immigrants are covered too http://obamacarefacts.com/obamacare-immigrants/
There's a chance it's a carefully worded statement - perhaps they're profitable in specific places within the US?
Yep. Are you referring to mlock? That's one way of keeping your data from getting swapped out to disk when you know something the memory manager doesn't.
DIY: Obi-Wan Kenobi's flashlight sabre
Sure - until you realize IMEI is a baseband ID and you can desolder tha baseband IC and use it on all phones you need access to. Heck - you can probably just intercept and change the output of 'get IMEI' command - it's not like the communication between those chips is protected by crypto (only baseband firmware upgrade uses crypto)
Permanent residents even allowed to make monetary donation.
Using ARM Cycle Models to Understand the Cortex-R8
BuzzFeed Is Changing the Way It Measures Its Popularity
That assumes that anyone interested in putting backdoors into Canonical's packages never gets a job making their packages. If you are really concerned having trustworthy systems, you need to build from source and if you doing that anyway, you might as well just use the binaries built from source.
So are the "Head First" series of books. I would definitely recommend taking a look at them :)
Check out Slemma.
You can connect directly to your MySQL database and build dashboards that you can schedule to refresh each minute. The tool allows to aggregate, pivot data and calculate new fields, so that you and your less tech-savvy teammates can find insights easily.
You can also share findings across the team in different ways.
Yes, click "web"
Curious if Apple is breaking any user agreements if they end up doing this. Sharing information on servers is one thing. Sharing a key which enables access to all future communication too is different. Does their EULA cover such scenarios? Can it open them up to possible lawsuits from its users?
I took the mindfulness course at Stanford[1] to support my wife who needed it. I was highly skeptical initially, but really enjoyed it. He teaches mindfulness through practice and leaves religious association out of it. It takes practice to become better at it, but it wasn't as painful for me as you described. In mindfulness meditation (at least the way it was taught in that course) the idea isn't to not think about anything or not let your mind wander, but to be mindful that your mind is wandering. It keeps you 'in the moment'. The guided exercises (mp3s and in class) really help make it easier.

Admittedly, I stopped actively practicing shortly after the course ended, but do find it extremely helpful when my mind is racing and I can't fall sleep. 5-10 mins of breathing exercise and I'll be fast sleep.

[1]https://stanfordhealthcare.org/events/scim-mindfulness-medic...
John McAfee offers to hack shooter’s iPhone for FBI
That are left?

Bernie has probably the strongest record, being both for net neutrality and against mass surveillance and the patriot act. I'd recommend taking a look through his policies as they are so well thought out in the cases he addresses. He doesn't address everything. On the other side of the fence, Rand Paul was the last sane voice (in terms of privacy), explicitly coming out in favor of net neutrality and strong, backdoor-less encryption.

This is in stark contrast to Clinton—well, just google "clinton privacy" and see the massive number of problems she's had to deal with that demonstrate her technological eagerness seems to outweigh her understanding. She's certainly been an eager advocate of EXACTLY the type of action we're seeing here, arguing that we need backdoors for law enforcement. Marco Rubio has explicitly advocated protecting the existing mass surveillance techniques.

I would be highly surprised if Trump or Cruz were for privacy—the former advocated for special ids, the latter doesn't seem to have a great grasp on technology, much less how to avoid using it to bludgeon people[1].

1: https://twitter.com/sentedcruz/status/531834493922189313
Tens of Thousands of DVRs Exposed on Internet with Hardcoded Passwords
I have followed PH for a long time but I did not like its layout before. I think the new layout is more user friendly and allows me to have a good product view list.
Awesome and hilarious article. Id just like to note `for (;;);` is not to prevent users from using bad JSON parsers like `eval` but prevent older browsers with little to no cross domain policy from loading it with a script tag and doing evil XSS by overriding Array or Object constructors or prototypes to pull that data
> Third, you can't not benefit from taking some to sit and quiet your mind. That's as absurd as saying you don't benefit from sleep or rest.

How do you know this?
SQLite vs. MySQL vs. PostgreSQL:Comparison of RDBMS
One problem with the TIOBE Index is that the data is tainted by all of yesterday's web pages that nobody's bothered to take down yet. If you look at Google Trends, for example, PowerShell has overtaken Perl in the last year or two. TIOBE is still looking at the big corpus of Perl stuff from the early 2000's, placing it at #8, and says PowerShell isn't even in the top 50.
A PHP task manager for your site
I think getting this (https://github.com/3b1b/manim) to work needs a video would need a video of its own. :)

Here's where I got to since the README.md is basically empty for the moment.

So far I've got it to do something. It needs at least these python libraries as dependencies.

- cv2 (This is OpenCV and is not easily installable inside virtualenv)
- colour
- progressbar
- tqdm

I'm running everything from the main manim directory, after a git clone.

git clone https://github.com/3b1b/manim
cd manim

Its also expecting a `../animation_file/images` directory to exist.

mkdir -p ../animation_file/images

Now each project consist of a set of classes, each one a scene. To view a scene, it can just be instantiated

PYTHONPATH=`pwd` python
>>> scene = generate_logo.LogoGeneration()

There's a progress bar that shows a few times. Then a new window shows up for me (from ImageMagick? Maybe that's a dependency too.).

Then I think you can call .construct() on the object.

>>> scene.construct()

But it took too much computational power so I stopped there.
Why is it not called iTerm3?
Show HN: Persistent Queue Implementation stable release for JAVA developer
I am not sure why the parent comment is being downvoted, but for one I'd also like to know why selling insurance requires licensing.
A kernel is not an operating system.

As for the Linux Foundation, they seem to be branching out into strengthening the entire Linux ecosystem. Having Zephyr for embedded firmware on the bits not running Linux in Linux systems (e.g. sensors) is a step toward that.
Top 5 Productivity Tips That Will Maximize Your Day
Volkswagen Memos Suggest Emissions Problem Was Known Earlier
Except Apple isn't trying to subvert the intention of the GPL, it's just using code not covered by the GPL.
Are we ever not? It's a political topic, so manipulation goes with the territory.
Zenefits Stumbles into PayPal’s Old Drama
https://news.ycombinator.com/item?id=11130785

https://news.ycombinator.com/item?id=11125838