skysight-inc/HackerNews huggingface dataset:
I haven't tested it, but I'd expect not. Given a limited EDNS0 buffer size, UDP responses would either come back with a truncated flag or not at all. Either case would trigger a TCP retry, and the bug can be triggered that way.
Does this consider the "too many incorrect attempts" lockout that iOS imposes though?
Hands on review - http://www.bgr.in/photo-gallery/freedom-251-first-impression...
I think Twitter just won the internet

:badger badger badger badger:
I really doubt Apple will ever be big enough for many big game developers to consider making exclusives for Macs. They don't even sell any computers remotely targeted at games, and often sacrifice price and cooling for prettier design.
The problem is that you do have employers wanting to target individual employees and that just because something is illegal doesn't mean it won't happen. An employer could use this to identify what employees are about to become pregnant and then find reasons to fire them. And given that being fired is likely to change their chance of choosing to become pregnant, it becomes significantly harder to prove this was an illegal targeted attack instead of a justified firing of an employee who was violating policy (and given how policies are written, workplace policies are treated like laws these days where everyone is violating some policies and they are only selectively enforced). Add in that this is most likely to be deployed against lower income people if it is deployed, and that those it is deployed against will be in a very poor condition to fight back (hiring a lawyer right after losing a job isn't something most can afford), you have a nasty discrimination disaster ready to happen (or in reality, ready to be made worse than it currently is).
If you are really debating .gif and .mp4, you've missed the point entirely. It's about the communication medium, not the file format.
I think everyone is ignoring the fact that he really wanted to work there. If you're in that boat then yes this makes sense.
But if like most people you're not exactly gaga over the company but value other factors like pay and lifestyle then the traditional approach could yield more dividends. Return on time invested after all is important.
Caveat: In my experience, I've been subjected to a phone call from a Registered Nurse who reviewed my personal health records and called to ask me to switch to a cheaper medication because the company was going through some financial difficulty. I'm 100% not making this up. Your assertion that a company doesn't want personal health information of individual employees is one that I do not agree with.

If a company can eliminate the 5% of people driving XX% of the premium cost - through cancer, major surgeries, etc - then it stands to reason they would undertake that method of reducing overhead.

The employer itself may not have access, but the party they hired may have access, and I do agree that robust legislative firewalls and significant jail-time for violators should be a national priority.

Or, in other words, I very much disagree "Wellness Programs" are actually concerned with wellness (no assistance with dietary materials, gym memberships, incentives, etc) and should be portrayed as "Health Cost Containment Programs" which is significantly more honest.
What's the point of accessing main memory in a locked and encrypted phone?
"Marginally" would be a severe understatement.
Ask HN: Why are comment trees not collapsible yet?
I don't know if that's true. This strategy certainly isn't going to land you a job at Google/FB/etc. but I'd be happy to chat with someone in their 30s who'd just gone through a bootcamp kind of thing and was offering a similar deal as someone who is currently hiring at a startup and we had a position for a junior/recent college grad.

To me the biggest snafu is that it's a lot easier to do the whole "I'll work for free" thing when you're 20 and have no responsibilities.

I'll also add, though, that there was a huge faith component in myself and in the startup industry that "things would just work out," and I was also miserable in school at the time, so alternatives were bleak. Having worked in the industry I've now been given a dose of reality, but having that kind of dumb faith allowed me to grow very quickly (though painfully, too), and I'm wondering how much that learned risk aversion is hurting my personal growth. That's my big takeaway from this, at least.
You're probably right, but it's great to explain this decision in economic terms. It'll sink through to people who think privacy is only for "good" actors, and those who don't like the government hurting businesses.
This seems more reasonable. Also typing out a complex password on the iPhone is a pain in the ass when you just want to reply to your buddy's text.
Are you serious? Every time I've been to Europe (I've lost count of how many times...) I've paid for many things with cash. I actually find it more inconvenient not to have cash there than in the US.
From my parent comment:

The design of a case law system however, which the U.S. operates under, is intended to minimize fuzziness by looking at case precedent for guidance on issues moving forward.

Aren't we in agreement?
The phone involved in the San Bernadino case is a 5C, which does not have Secure Enclave.
Yes, exactly. Thanks for clarifying for me.
Is that true of non-Secure Enclave phones like the 5C?
Do the async methods actually execute on a thread pool though? Or do they use enough async methods internally to periodically release the main thread enough to keep it responsive?

From a quick glance at the source, the answer to the first is no.
I found the bit of this article on the Canadian penny a bit irrelevant, and perhaps misleading. Or, I'm under the impression that it was discontinued due to the fact that one or two cents were a fraction of the average purchase, rather than some sort of initiative to discourage cash usage.

I'm not very interested in using Bitcoin at the moment, but I like how its design could enable me to have some representation of electronic currency that could give some of the decentralized flexibility of cash. Perhaps a cashless society could employ structures such as those.
It also depends on the situation. He's said that he's looking for several small sites to provide extra income meaning that he's looking at it from a cash-flow perspective. From a cash flow perspective, hosting cost definitely is a factor.

This is the specific type of situation that PHP is almost ideal for because it scales down better than most other languages since everything is loaded and processed on-request instead of booting up to preload. You can host 1,000 PHP sites on a single small server as long as the concurrent traffic doesn't outstrip the specs. With most other languages that have to boot and preload, you're restricted before traffic becomes a consideration.

PHP's not the right choice for every situation but for his use case it's pretty solid.
How to Compile a Top-Notch Competitive Analysis for Search
To install Linux on a Mac you literally follow the same instructions as you would for a windows (EFI) machine.
Except when buying a computer from Apple or Lenovo (or pretty much anyone really), you also pay for the software that is installed on it.

Yes you can change it, but it's the equivalent of buying a car and change the wheels when you get it.
“Taylor Swift” by 11 yr old Maggie Thompson featuring Justin S. Myrick
You're welcome, and no problem about being harsh, feedback shows you care!
I know a little about neurology, but their study mentioned increase in hippocampus. Hippocampus Wikipedia entry does not mention that it is responsible for breath or metabolism. Some Google searches list different parts of brain responsible for breath[1] and metabolism[2].

1. http://www.interactive-biology.com/107/what-parts-of-the-bra...
2. https://en.m.wikipedia.org/wiki/Hypothalamus
There is not enough information in the article to make accurate conclusions about changing your exercise regimen.

The fact is that the body adapts to it's environment and that this study is ABOUT RATS you should remain skeptical to its conclusions!
Zenefits Scandal Highlights Perils of Hypergrowth at Startups
Would you expand upon this?
Another angle would be how this could play out with civil forfeiture. Remember, this was originally only used on those people who were suspected of drugs, organized crime, etc but quickly spread to the general population.

- Could they flag certain transactions?
- There's also IRS requirements for banks to report many small transactions which are used to skirt the $10k reporting requirements. How would this work for small businesses that legitimately need to do this?
Why would it cause a significant drop? Where would those people go?
It would be great if, in 2020, or sooner, but probably later, the answer is "don't use passwords any more. They are deprecated components of society."
You're right, however, a full page load with caching disabled was 747k. Heavy, but nowhere near 100mb.

Where's the source on that?
If it only applies to older iPhones, why did Cook write, "this software ... would have the potential to unlock any iPhone in someone’s physical possession"? (emphasis mine)
Adventures in Benchmarking – Memory Allocations
I join the others in praising ASUS support in Europe. Here in Belgium I had a laptop still under warranty picked up the day after calling support service for a failed motherboard and two weeks later it was back, no questions asked. Picked up by EDP (or something) and probably serviced in The Netherlands.
I don't agree. I think this is a great step into encouraging users to follow a format when submitting issues. It would make it easier to add tags to these issues as well. Any other discussion can be submitted the same way, you'd just remove the template and start typing.
Every indication is that their army was and is quite formidable in a conventional fight. Particularly against relatively poorly-led and organized but large and well-equipped armies like the arab armies of the 60s-70s. Counter-insurgency is a whole different ballgame, though, as many nations have discovered the hard way. Israel can almost sorta kinda do it well sometimes.

It's worth noting that Hezbollah is quite terrible at counter-insurgency too, and they know it, which is why they've never made any attempt to take control of the rest of Lebanon outside the Shia area they control in the south.
I used to go to a gym in a mall basement and when I went to go home I could never remember where I parked my car.

If I went to the same mall just to shop I had no problem remember where my car was parked.
Thanks! I swore it was 7, but you're completely right.
Because that would require OS level integration with the phone.... Even with full screen apps, swiping in from at least one direction is usually the "escape" ... Also, phones come in many form factors, and creating face adapters for multiple devices would be difficult, to say the least... though options for 3d printed services may alleviate some of that.

What I'd really like to see is a Bluetooth standard for full remote input and ui rendering. That would be useful for car stereos as well as with devices such as this.
I got, "Learning PHP is too expensive"
Debbugs works great for being last updated 12 years ago. It's main interface is email, after all, so the web interface is read-only. I think the real issue here is the hardware it's running on.
If Apple rotates their keys, that means that their private keys can be unlearned, whereas a method to backdoor iPhones could not be unlearned in the same way.
3D printing breakthrough produces functioning human-scale bone and muscle tissue
It's not too high risk. Worst case, it becomes a pretty portfolio piece, which is useful enough.
I heard just this morning over the radio that some bureaucrat was floating the idea of a moratorium on the printing of new US$100 and US$50 Fed notes.

The bit explicitly mentioned that US$1M fits neatly inside one briefcase when using US$100 bills, but it would take three briefcases with US$20 bills.

This may be true, but I'm a little wary of the argument now, as the drug trade, counterfeiting, and money laundering line was used when the US$1000 and CAN$1000 notes were retired, and they are worth less now than they were then. Loss of high denomination banknotes has not impeded the business of the underworld, but loss of cash transactions means that everyone in legit business now has to pay a tax to Visa and Mastercard for acting as an intermediary in payments processing.

A pile of $100 bills is $100/g, or $45400/lb. $50 bills are $50/g, or $22700/lb. A $20 bill is about $20/g, or $9080/lb. Gold is $38.82/g, or $17607.88/lb. Clearly, if you eliminate the US$100, cash movers switch to the US$50. If you eliminate that, they switch to gold, not the US$20.

US$1M in $100 bills is 22 pounds (10 kg) of cash. In US$50 bills, it is 44 pounds (20 kg). In gold, it is 57 pounds (26 kg). In US$20 bills, it is 110 pounds (50 kg).

Someone in the monetary bureaucracy might want to reconsider the unintended consequences of the black market drug trade switching to gold as its preferred currency rather than paper money.
I don't buy it. The FBI is not trying to dictate how Apple builds their devices. They want Apple to take measures to unlock one device. How do they get from that to "[the government] would have the power to reach into anyone’s device to capture their data"?

Apple seems to be saying that if the FBI can ask Apple to install special software on one person's phone, then they can ask Apple to install special software on everyone's phone. But that's not how it works. The whole idea of requiring a court order is to only do this stuff on a limit scale when there's justification for it. It's like saying that the police shouldn't be able to have a warrant to search a suspect's house, because that means they could search everyone's house.
That would still give them unemployment benefits. We are firing them because they violated policies A (must be on time), D subsection 12 (no personal internet use), and Q subsection 7 clause 3 (15 minute break per every 4 hour shift). (That most people are allowed to get away with minor violations of the above as long as they are productive, that the fired employee was productive enough that we would've continued to ignore their minor violations, and that they are actually being targeted because we have information to indicate they are trying to become pregnant is going to be near impossible to prove. Especially since the fired employee is now unemployed and not likely able to afford the legal battle.)
There are hosting companies such as Webfaction that have great reasonable rails or Django hosting.
I think most people could probably perform math to a degree that is necessary to be a programmer or any other "close-to-math" profession at a sufficient level to remain employed using widely available tools. I doubt that all people can synthesize University math even if they spent an unlimited amount of time studying.
Indeed. Triaging issues which is a huge issue can now be simplified heavily with the usage of a bot that parses the template and tags issues.

This is a great step forward and I'm excited that GitHub is doing this.
I would like to know whether you believe that there is any possibility of create SCADA systems using InfluxData platform. I was looking for examples in Google but I found only a pair of websites. Nothing serious.
Cook wrote that "this software ... would have the potential to unlock any iPhone in someone’s physical possession." (emphasis mine)

Is that true? What if it's locked with a secure 128-bit (e.g. 10-word diceware) passphrase?
You should be able to find similar hardware in Chromebooks as well... though not sure about PDF usage, they've been great for my parents/grandparents. Many of them you can load a full linux distro on.
I don't know. Either Cook is confused or I am. From everything else I've read, it's Cook. If I'm the one who's confused, then Apple really dropped the ball.
This article has a strong sideline of Banks fear of fintech startups eating their lunch and goes on to cite 2 specific examples of large banks doing things the disruptive way: Chase disbursing loans thru ondeck.com and Deutsche Bank sending its COO to built a totally Digital "startup bank". In reality the culture hasn't changed at all - both in my personal experience as well as others I've talked to. Dealing with mid-level Bank managers is till pretty much a "closed club" game. The attitude seems to be (1) either you get to Series A/B before we talk to you - at which time its too late because the business model for a fintech startup is defined early on -well before Series A or (2) Sorry we just don't deal with startups (and cite some regulatory "grey area" as an excuse). Unless the culture changes down to mid-level ranks Banks will loose big time
And you need to click a blue play button to play it - not in gif spirit at all! Also it can only be saved as a video, which is likely terribly compressed from the original gif.

By the way, Tumblr had this feature for ages: even the icon is completely identical. [1]

[1] http://i.imgur.com/v59afJb.png
It sounds like you were mostly working back/middle office. You can earn a lot more in front office if you're working as a developer on a trading desk. At some banks front office developers share desk bonuses which can be very lucrative.

Efinancialcareers is a good job website to find front office dev role recruiters.
Is that really true? The enclave's firmware is in ROM and non-upgradeable? I'd always assumed it got a signed blob like everything else does. Obviously it's possible to design a system like that, I just haven't seen it reported anywhere that it actually works like that.

Edit just to be clear: the requirement really is that the firmware be stored in a ROM somewhere, probably on the SoC. That's a lot of die space (code storing a fully crypto engine isn't small) to dedicate to this feature. Almost certainly what they did is put a bootstrap security engine in place that can validate external code loaded from storage. And if they did, that code can be swapped by the owner of the validation keys at will, breaking the security metaphor in question.
This means that Yahoo and Outlook users have access to Google Now email-based cards before those of us using Google Apps.
Custom Machine Types – Compute Engine – Google Cloud Platform
It does it on the main thread, pseudo-async, so I agree with you, you should not use this library. Look for a native module instead.
Ask HN: Are you cutting costs because VCs warn the sky is falling?
I am curious if founders are acting on the warnings from VCs about the resetting valuation expectations and maximizing cash. I am specifically curious if anyone is taking immediate action to cut costs everywhere they can.
How how to turn a Parse bad day, good
Here's how to turn a bad day into a business opportunity.
Life After Parse - the silver lining to Parse Cloud Closure.
This is the first in our Life After Parse series that shows how to re-set the way you work with mobile app clients and move the relationship onto a stronger monthly retainer based business model.

https://www.kumulos.com/2016/02/17/after-parse-the-silver-lining-part-1/
there is no clear definition, but for most mountaineering starts when you need technical equipment (crampons, ice axe etc). I do hikes in alps in non-winter almost every weekend in 2000m-3000m band and its pure hiking.

There are peaks higher than 6000m where you will not need this (ie in andes, tibet), and there are much lower peaks where you can't do anything without it.

One example I did - you can do Kilimanjaro without touching any snow or ice, via standard route, and that's 5895m high.
The answer is cheap shared hosting that supports old-school standards: CGI (or FastCGI), and your choice of Perl/Python/Ruby/NodeJS/Go/Rust/etc. For a hobbyist project with minimal traffic, you can afford to deal with the application's startup latency. (Java / Scala are probably out, though. Don't know about Erlang, haven't used it).

Dreamhost is affordable enough and will do such things.
For some reason the article completely fails to link to libsodium: https://download.libsodium.org/doc/
Google, Red Hat Release Patch for Critical Glibc Vulnerability (CVE-2015-7547)
Forking a new process to run a Perl CGI script for every request is going to be far from optimal on any hardware.
I had no idea that PBKDF2 had fallen so much in recent years. I still remember the 1Password team extolling its virtues five years ago:

https://blog.agilebits.com/2011/05/05/defending-against-crac...
Policies that are 'selectively' enforced have limited value as protection from a lawsuit.
I asked Craigslist to do this years ago for the "for sale" sections, so that people included the number of doors on a car, the color, etc., and the kind of heat in an apartment, and so on. Such a simple thing, and would make searching so much better, and the service in general better.
> base64_encode(hash('sha384', $password, true))

> ...

> The above construction may invite theoretical concerns about entropy reduction (i.e. 72 characters of raw binary without any NUL bytes comes out to about 573 bits of possible entropy, but a SHA-384 hash outputs are clearly limited to 384 bits).

Given BCrypt hashes are a mere 184 bits, I don't see how this is a meaningful concern even in principle. If you're brute-forcing search spaces this big you're no longer looking to recover a password, but find a collision.
Corruption in Russia and China are a matter of policy. They are bold-faced and completely open about it. Corruption certainly exists in the US, but it is much less overt and much less common.

There is significant precedence in the US of politicians being caught in the act and prosecuted as a manner of policy, rather than the sacrificial examples in RU and CH where it is more about politics and/or making an example of someone. Just look up the lists of American Federal/State/Local politicians convicted of crimes, there are a number of lists on Wikipedia.
Somehow I have trouble equating a rat climbing a wall with a tiny weight attached to its tail, with a human doing heavy weight lifting.
Does Argon2 have an official website and repo or is it just the PHC repo?
> That would be similar to a court order allowing law enforcement to enter your premises and take out the safe in order to pry it open at some other location where specialised equipment is available.

I would think it's more similar to the following: the government has gone to the safe manufacturer to help it open a safe it has a warrant for, has access to and can move, but can't open.

The government is asking to develop a method to modify the safe so that it can be opened. The safe manufacturer says that it they did so the same method would be able to be used on all of their safes, and thereby make all of their products less secure.

I would imagine that a reasonable safe manufacturer would bring up the same objection.
Found my fellow Comcast customer :/
I wonder whether China would consider any internet-supplying geosynchronous satellites over their borders as an affront to their sovereignty. Satellite internet (without a land-based backhaul) is surely the most effective way of subverting the Great Firewall.
Presumably the cost would go up because nobody makes parts that don't have those features any more (it would be more expensive to find/get them).