skysight-inc/HackerNews huggingface dataset:
The user's password is not used to create the crypto key; it is randomly generated and burned in at the factory.
Is that with the E1 visa?
Airbnb regularly pretends that their rentals are legal in their advertisements to consumers despite knowing that the majority of their revenue in places like NYC is derived from illegal whole-apartment-without-the-owner-present rentals.
They "just" need to break the users password. If it's a weak one, which is likely for most users, a simple dictionary attack would work.
Check out the Dell Developer Edition XPS. It comes with Ubuntu on it and has 100% full driver support out of the box. It's a great machine, we use them for work. Screen is great too and it looks really beautiful. https://sputnik.github.io/
Ironically, many .gov organizations are rolling out iPhones by the thousand because of the strong security controls available on the platform.
Yeah, but the US benefits work + personal suck compared to Australia :).
I think the whole progression of economics has been to start out by building models on wrong assumptions about how humans make decisions, and how the world should work, then refining them as actual data is gathered and science is done.
May hut am
10M former California students' SSNs/medical records/etc. being disclosed [pdf]
> Well, it is.

I didn't say it isn't; I said it shouldn't be.
Run tests for multiple versions of Node.js in local env
"Partly" well just based on inflation it would be close to 1 billion in present dollars.
IANAL, but I don't think there's much of a difference between asking someone to reveal the correct password and asking someone to reveal the correct finger. In both cases you would be asked to incriminate yourself.

If it would be lawful for a court to ask you to "unlock the phone with the correct finger" then they might as well also ask you to "unlock this harddisk with the correct keyboard keys pushed in the correct order (as a password)".
57 is pretty young to die.

Average life expectancy in most of the world is >70. So somebody expecting to die in the next 35 years would have to be over 35, at which age I'd hope they would have learned about basic economics and arithmetic.

This isn't a very difficult discussion since it can be pretty easily rooted in readily available information and pretty basic calculations. There's even on-line calculators that will do the hard work of adding numbers together if people can't be bothered.

The hard realities that lots of people can't seem to get into their noggins are pretty simple:

- housing costs money, are you recouping that money in some way? owners do eventually, renters do not. Period.

- property owners don't run charities, all those things house owners pay for explicitly, renters pay for implicitly, they just don't get the itemized list

- renting a bedroom out of some guy's basement is not the equivalent of buying (or renting) a house, if you think they are, you've entered into a conversation you cannot possibly understand and you need to back slowly away

- owners get many more options to sway the cost of housing into their favor than do renters, in surprisingly common cases, owners can even make money off of their property
This is what's blowing me away more than anything. It's literally the second thought that came to my mind.

Only two possibilities:

--A hundred Uber employees thought of this, and didn't say anything about it because they were scared of the CEO.

--A hundred Uber employees thought of this, someone said something, and the CEO heard the words but did not even process them.
Mods, please change the link to this:
http://www.cde.ca.gov/re/di/ws/documents/order2016jan26.pdf

I wasn't able to submit this link unfortunately, so I submitted the form.
Make Me a Hanzi: free, open-source Chinese character data
Yep, I work for a very large government department here in AU and we have a tiny bit of SSD in our DC for the stuff that really needs it.

It's probably not 5% of our total storage, though.
Benchling (YC S12) is hiring generalists to build biotech research platform
I've got an aging Asus Zenbook UX31A ultrabook which is amazingly thin and light, and still pretty decently fast. There was also very little crapware on it (was originally a Win7 machine with Win8 and then Win10 free upgrades).

My one complaint is that the (small, light) power bricks are apparently made of unobtainium. They're near impossible to find, and the ones you can are extraordinarily expensive.

Given my hate for proprietary power adapters - I'm holding out for a USB-C powered replacement.

Asus doesn't appear to be offering anything, but Razer's Blade Stealth[1] looks like it could be a great option.

[1] http://www.razerzone.com/store/razer-blade-stealth
This seems like a key thing to convey to the courts. One piece of encrypted data is supplied, rather than another. Who has to explain to the courts the complexity of breaking one versus the other?
Extremely severe bug leaves dizzying number of software and devices vulnerable
D3 is not remotely an abstraction API for a hardware compute engine. Vulkan isn't about "configurability", it's about cleanly expressing the specific operations that the hardware can perform, and the specific requirements for talking to it. Those are complicated, inherently. Data graphing, fundamentally, is "simple" in comparison (and to be fair, D3 exploits that beautifully).
This might work in the short term, but if enough folks actually did it, there would soon be a law that you may only use your thumb to unlock your phone.
That sounds more like an issue with pairing tech being terrible.

On a fundamental level, there's no reason you couldn't pair the device, by pointing your phone at the tv and having some sensor figure out what you want. Maybe it could fall back to sending a code to your TV via infrared, maybe it could show a QR code when it first boots, maybe it has some signal-strength based proximity sensor so that you can tap your phone to the TV to pair it.

Maybe these sorts of device pairings can be backed up in the cloud so that if you replace your phone, they can be transferred to your new one.

Personally, I wish I could control the TV volume with my phone because the TV remote always goes missing, but I always have my phone. In particular having a fingerprint-sensor phone has made using it as a remote less painful since I don't need to enter my PIN, but maybe we will get remotes that work from the lock screen and turn on when you pick them up.

At this point where we always have a communications device in our pocket, I don't see why remotes need to exist at all.
No. I was looking for that too.

Some prior work on that front is: https://github.com/markfinger/python-webpack --- requires a node.js server to run in tandem. Tried it a couple of months ago, and worked, but not sure how it will handle lots of load...
So you don't want the government to change regulations because it would give rich corporations an opportunity to leverage their lobbying dollars. Instead, you want rich corporations to cheat their way around regulations at leisure. (Note that what Zenefits did was not a legal loophole, it was a method of falsifying compliance documentation.)

In any case, what's the point of "show[ing] the regulators where they screwed up" if you don't want them to change anything anyway? What's the point of having regulations at all if you're going to let them be a joke?
The 5th amendment protects evidence inside the brain of the accused. As devices becomes more and more an extension of the brain, the more I think we'll need to adjust the rule of the 5th amendment to cover things outside of the brain.
never brake? :))) Apple hardware is build to fail, 35 years and they still make computers like we are living on Arrakis and moisture doesnt exist.
An appropriate land value tax is proportionate to what improvements the community expects to be present on the land on average -- that is, how desirable the area is as a whole. That should scale pretty well on a school district level.

As for discouraging speculation, property and land tax schemes can both be used. However, in an environment in which other landowners are improving, the tax burden of a speculator just sitting on their property goes up under a land value tax.
that would be fun to calculate
If I was the NSA, I certainly wouldn't be exposing the fact that I could crack AES for the sake of a trivial (to the NSA) crime like this.

What I would do, however, is engineer a situation where the FBI could believably brute force the password, then let them have at it for a few days until I supply them with the actual password. Then the FBI tells the public that the passphrase on the phone was actually something trivially guessable lime 000000.
You should get a dell latitude--woot periodically has excellent deals on "last-year's models", brand-new with 3 years warranty. They are reliable, modifiable, and get excellent battery life. They come pre-installed with Windows Professional, with minimal bloatware--but forget about it. Scrub off the Windoze crap, install Linux, and you will have an awesome little machine.
Our transit costs out of our Colo in Santa Clara are $6K/month for two dedicated gigabit lines. That translates roughly to 518 TB of data transfer a month if we could keep the pipes fully lit 24/7. Cogent has offered to make one of our gigabit lines burstable to 10G if we would like, same cost if we don't exceed a monthly average use of 1000Mbps.

And we use Linux so no Windows hosts charges.

There are more and more tools that are force multipliers for your Site Reliability Engineer (SRE) equivalents. You can't avoid swapping out dead drives, but with the right systems architecture you can make it pretty painless.
I also own one and can second all you say about it. The only problem is the lack of a backlit keyboard, which might be a show stopper for some people. Other than that it's a very good machine, at a very good price and installing Linux (at least ubuntu, from my experience) is absolutely painless.
I went through the same thought process in December, never owned an Apple computer but needed a new laptop. Despite trying to fend off the idea of getting a Macbook (due to some combination of price/not wanting to succumb to herd mentality/proprietary nature of Apple) I caved.

It felt silly to spend a lot of time researching and configuring a custom laptop. I've never purchased a pre-built desktop but customizing a laptop seemed too poor a risk/reward proposition for my liking. Even with a great deal of effort it would be difficult to create something comparable to what I could simply purchase.

Apple's hardware is easy to appreciate down to small details. You can open the lid without holding the other half of the laptop (my previous laptop would lift up otherwise) and the screen isn't too loose either (doesn't bounce when you type hard). The speakers sound orders better than any of my previous laptops. Battery life is great. Retina is beautiful & responsive (easy to read text, even while scrolling). The trackpad is unbelievable for a variety of reasons (click anywhere, accuracy to the very edge of the pad, multitouch/gestures). I hadn't previously seen any trackpad worth using let alone nearly as good as a standard mouse, but haven't ever needed to connect a mouse to this one. It's just a great overall experience.

There have been a couple software glitches that required a restart to fix, but other than that and the temps (~90°C) it reaches under load it has been a pleasure (@ 2 months of heavy use). Figuring out OSX took a week or two.

I don't envy anyone who tries to save money while achieving a similar experience.
Having worked with a few asian/eastern engineers, I do believe that a number of things conspire against western maths education: our culture doesn't value mathematics competency (in some circles people are even afraid to admit to an interest); the way we teach maths here in .au is bloody awful (standardized tests make teachers hate their jobs); and teaching generally is a much less respected/lower-paid profession relative to other occupations compared to better-performing countries (so our quality of teachers is much worse).
This is a big part of why I believe employment is not a good arrangement. They overreach because 90% of their workforce won't have anything worth stealing, so it becomes "standard policy" to require you to sign over rights most of your coworkers won't ever have a need to exercise.
If you shoot a bunch of people while declaring allegiance to an organized group known for shooting bunches of people then I think that pretty clearly demonstrates that reading your communications has a pretty high likelihood of turning up something useful in preventing future incidents. If this doesn't clear your hurdle for reasonable search then what would?

To be clear, I don't think the order to Apple is necessarily altogether a good idea or is even going to produce the desired results, but your complaint seems to be with the fact that this data is being pursued at all.

Edit to reply:

> Evidence of a conspiracy would help. You said they declared allegiance to an organized group. When they did that, did they say or hint that they had been in contact with that group, other than, say, watching public YouTube videos?

The woman in the couple declared it right before the shooting[0]. Do you want a notarized letter from the deceased?

> Would you agree that "high likelihood" is too low a bar for justifying searching the phones of people who live in high-crime neighborhoods?

I'm pretty sure neither "high likelihood" nor "authentic need" were being used as a term of art here, but I would bet that any judge would view the commission of murder declaredly for an organized militant group to be probable cause that there is information pertaining to more criminal activity by that group on these two's phones and in their communications.

Do you really view this as a government overreach or are you just trolling? Under what circumstances, if any, would you see as justified a search of someone's email? phone? house? So far you've equivocated between living in a bad neighborhood and committing murder-suicide.

[0] http://www.nytimes.com/2015/12/05/us/tashfeen-malik-islamic-...
They prefer to build robots and retain their homogenous culture than import and nurture a slave class.
Trademarks can be held by an organization, not just by one person. This is how Apache software works, for example. In that case, there are bylaws in place to ensure that the interests of different people are represented, decisions can be made fairly, and toxic people can be prevented from killing the project.

In contrast, projects such as Python have a "benevolent dictator" moderl where one person has the final say about the direction of development. There is nothing unethical about a BDFL model in open source; it's just a choice that a community can make.

You seem to be deliberately confusing yourself about the distinction between forking, which is always allowed, and representing your fork as the original project, which is never allowed. If you are still confused, think about it this way: would you want someone to attach a bunch of malware to your project and redistribute it under its original name, as if it were your version? You can't prevent this without trademark law.
The users password goes through a password based key derivation function, that function spits out an key that is use for the AES crypto used for the file system.

Now, the PBKDF requires a secret that is only stored within the iPhone itself (within the CPU even, where it can't be read out directly). So if we instead grab a copy of the data, all we get is an AES encrypted file system.

We have 2 choices. 1. We can attack AES directly, and attempt to brute force the AES key, or 2. We can attempt to get the AES key somehow by bruteforcing the users password.

2 is infinitely simpler compared to 1. However, 2 becomes more difficult (but still less so than just cracking AES itself) when you need to run your brute force guesses through the CPU within the iPhone.
Excellent point. I think it is worth noting regulations can be classified into acute and chronic. Acute taxi regulation would have been disallowing criminal records after a series of rapes or robberies.

Chronic problems would be over charging - put it this way, the day before taxis were forced to charge a certain amount each mile, all taxis would have been free to charge different amounts as uber and lyft can.

We do ask for regulation - and always in response to symptoms. Regulation is not pre planned rational thought ...
Even without the Secure Enclave, is it even possible for Apple to do this? The article talks about how Apple could add a backdoor to the OS and update the software on the device in order to break this, but I'm not sure how anyone is supposed to update the software on the device while it's locked, without erasing the device in the process (assuming of course that the iPhone is running a relatively recent version of the OS to begin with). AIUI Apple used to have the ability to backdoor phones for use in complying with law enforcement requests, but they removed that ability several years ago. And of course if they still had that capability with this phone nobody would need to order them to add a backdoor anyway since they could just bypass the passcode directly.
I'm quite happy with my Asus X200M. It's compact, lightweight, and was pretty cheap, though I think it's discontinued now. It's small enough to stuff into a bag, in my bike basket, and cheap enough that I don't worry too much about damaging it.

I try to be platform-independent as much as possible. My "operating system" is Jupyter/Python. Knowing that I could switch to Ubuntu in a jiffy makes Windows seem much less annoying.
Google, Red Hat racing to fix exploitable bug in glibc
Yes they did. And that is a really great exercise in thinking about what their profitability would be like if they were structured more like YouTube in terms of their server infrastructure.

But to the point of many other folks here, if you're all cloud you can really shrink fast if you need too. Lose a millions customers? No problem, just drop some machines. Any business that can price into the monthly customer fee the marginal monthly cost of AWS to support that customer, can keep their costs flat when their customer counts vary. Someone with dedicated hardware is still paying the bills for it, even when their customers leave.
I say we should write it in "Rust", as opposed to Rust.
Sun is not free. Sun requires land. If (and I don't think we're there yet) you can get to where the sun gathered by PV can be used to grow more plants than direct sunlight, and you're in a space constrained place like Japan, it starts to make sense.

I mean, you can stack farms vertically if artificial light is economical. You can't stack sun-lit farms vertically.
I see that my comment inspired some emotions. I think I should clarify - I absolutely know that I have it better than baby boomers in almost every way, but I wish they would lay off telling me how housing now is "not that bad". Trust me, I'd rather try and think of a solution than sit on my hands and say "why me!". But I'm Australian, whining is in my blood I guess.
Lenovo doesn't have a great website, but their ThinkPads are nice.
I argued for the design of and wrote the implementation for Go's lexical scoping and first class functions, and I can tell you they were in no way influenced by Javascript.

Scheme, Lisp, ML: yes. I'd written sizable programs in each of those, I'd worked on rewriting a programming languages course textbook with a professor in college, and I'd studied On Lisp. One of the initial test cases was Paul Graham's accumulator generator: https://github.com/golang/go/blob/0f4f2a6/test/closure.go

Javascript: no. At that time (Feb 2009) I doubt I even knew Javascript had lexically-scoped closures. I know I didn't buy 'Javascript: The Good Parts' until March 2010. Even today I don't think the fact that Javascript got closures right is particularly remarkable, except that, as Crockford demonstrates, that fact serves as the fundamental saving grace that enables forgiveness of many other problems.
they quoted some basic prices in the article...also a depends on which model.
Virtual Reality Companies Look to Science Fiction for Their Next Play
It is used to create the crypto key, using a password based key derivation function, using the user's password fed into the PBKDF the output is the key used for encryption/decryption.

The users device key is mixed into that PBKDF. Without both parts of the equation, you have nothing.

For your reading enjoyment: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Specifically page 11 the diagram at the bottom.
Gogo is getting sued by American Airlines over its in-flight Wi-Fi
Symantec Infographic: Thinking of Choosing Trend Micro?
Agreed... A very astute comment...

Things move quickly...and that's an understatement...

There is a fever that descends upon a team on the brink of hitting a "home run"...the push is incredible..

Do what needs to be done NOW, we'll clean up afterwards...so difficult to resist...
Debug code that was never removed?
AMA with original authors of Descent video game
They would fingerprint the reader, and you, to get a rough idea of which finger is a likely candidate. Even an extremely partial print should be enough to narrow it down to 4 or 5. The reality is that all right-handed people hold phones in their left and so use fingers on their right hand. Lefties do the reverse. So it is already down to five candidates ... which might have something to do with why apple picked that number in the first place.
Problem becomes harder. The (comparatively weak) passcode gets run through a large number of hashing rounds, which takes about five seconds of real time to complete. The results of that hash are the actual key to a very strong algorithm.

It makes more sense to try brute forcing the hash, even with the delay time.
Just a note but while Apple doesn't show ratings for their main lineup of devices (and probably for exactly the reasons mentioned by link) they do show them for accessories and some of them are pretty low rated:

http://www.apple.com/shop/product/MD818AM/A/lightning-to-usb...
That plot was made in ROOT (twitch). They have my sympathies.
@prawn Thanks for posting this!
Hi all! I'm the person who made the teardown (not the app itself), and if anyone has any questions or thoughts, I will be checking the comments!
There are tons of vulnerabilities discovered every month. Most of the them are in Java, PHP, javascript, etc. software because that's what the majortiy fo new code is written in. And those languages have features that can lead to security holes, which C doesn't have. For example, PHP supports eval(), JS has cross-site scripting attacks, Java has classloaders, etc. etc. But somehow only the vulnerabilities in C language software get programming language zealots exited. So maybe you should reflect.
That's OK, I hate the Force trackpad on the newer Macbooks, too. (and it looks like using the Synaptics driver or Windows 10 1522+ helps with your issue)
But even if a full 50% of the people working at small tech companies moved out of the city (10k by your count), how would that have any effect whatsoever on the economy? It would bring the population back to where it was about a year ago and employees of smaller companies aren't even among the highest paid.
I'm having trouble correlating the intent of the law with your suggestion

"[No person]…shall be compelled in any criminal case to be a witness against himself"

Person/Compelled is key here, not the facts of the case or where they reside.
Depending on how many rules you'd like to break I'd be likely to be charged 10% GST on import when it got to Australian Customs.