skysight-inc/HackerNews huggingface dataset:
I think this depends on your definition of "networking". For me it means "meet and work with smart/competent/kind people and convince them you are the same". If you do that other people will want to work with you.

Given that definition, I agree it is concerning that OP doesn't know where to reach out. Perhaps the best course of action is addressing why that is the case.
I think you're referencing https://www.fixed.com
They can hack the chip hardware itself: https://www.technologyreview.com/s/519201/tamper-proof-chips...

(Thanks to tzs for posting this on another thread.)
Not by the police but by the county which as the shooter's employer, was the owner of the phone.
Yeah, absolutely. I think you could do a circle of trust thing with other networks so that if A trusts B and B trusts C then messages could flow from A to C and back again. That could mitigate the pingback spam problem: not just anybody could pingback, they have to be trusted. And if your enclave gets too big then you can splinter it out and web it back together.

If it's small enough it could sneak under the free limits of most PaaSes. And despite needing some kind of techy admin I think the shibboleth thing could provide a layer of cool needed to sell the thing.

Not that I think this could make money. ( =
https://news.ycombinator.com/item?id=11137485
These are the guys who predicted the 2008 crash and prevented it right? Oh wait..
Perhaps the key could be extracted by physically analyzing the chip, e.g. grinding it down and using microscopic tools to detect state?
The employer[1]:

> The FBI obtained a warrant to search the iPhone, and the owner of the iPhone, Farook's employer

> the owner, in the hours after the attack, was able to reset the password remotely, but that had the effect of eliminating the possibility of an auto-backup

(the first quote is on page 1 of [1]; the second quote is footnote 7 on page 18 of [1] as pointed out by another commenter[2].)

I think — and frankly, the document isn't too clear on it; it'd be great if an iPhone owner could clarify — is that this is the Apple App Store account password, and the phone has a separate and different passcode. The FBI knows the password, and can access the account, but not the phone; the phone I'm guessing won't back up until the passcode is given to it.

Supposedly the previous backup on the account is allegedly too old: "nearly one-and-a-half months prior to the IRC shooting incident", and even weirder, "back-ups do not appear to have the same amount of information as is on the phone itself" How can the FBI know this if they can't access the information on the phone?

The FBI's point is that this is a one-time use of the software Apple would write, and Apple would maintain possession of the software throughout using it:

> Indeed, it is less so because the software requested would not reside permanently on the SUBJECT DEVICE, and Apple can retain control over it entirely.

> Moreover, to the extent that Apple has concerns about turning over software to the government so that the government can run the passcode check program, the Order permits Apple to take possession of the SUBJECT DEVICE to load the programs in its own secure location, similar to what Apple has done for years for earlier operating systems, and permit the government to make its passcode attempts via remote access. […] no one outside Apple would have access to the software required by the Order unless Apple itself chose to share it. This eliminates any danger that the software required by the Order would go into the "wrong hands" and lead to criminals' and bad actors' "potential to unlock any iPhone in someone's physical possession."

(from page 20 of [1])

Frankly, that sounds rather convincing against the section of Apple's "A Message to Our Customers" headed "The Threat to Data Security" (but I'd love to be proved wrong! why is this a threat to data security given the above?). That said, I'm unsure about the section headed "A Dangerous Precedent" — this does seem like a bad precedent. Are we to now assume that our manufacturer should be included in our threat models for whether our device is secure?

Also, has Apple submitted anything to the court detailing their argument as to why they should not be forced to follow the Order?

[1]: http://www.politico.com/f/?id=00000152-fae6-d7cd-af53-fafe53...

[2]: https://news.ycombinator.com/item?id=11137995
Agreed. I think github enterprise is worth it for companies, just like I think a Jira instance is a no-brainer.

For personal/private, I'm perfectly OK with whatever open source solutions are available.

I think it would be a good thing if GitLab or another project could compete with GitHub, but I think we're another year/product from really getting there.
Police in Six California Counties Have Shot More Than 2,000 Since 2004
You can already have dots in IPv6 addresses if it's an IPv4-mapped/compatible address (e.g. ::FFFF:129.144.52.38)
There was a conversation about got lab last week, which prompted me to go check out Gitlab. After a good five minutes looking around their site I could not discern that it was possible to host repositories on their servers. Their entire sales pitch is about hosting your own. They need to fix that if they want any attention.

If they made their pages community oriented, and allowed for people to link their github accounts to their Gitlab accounts, then they would have a shot at stealing the hearts and minds.

If they could support forking from github that would be even better, but I bet GitHub would try to block them.
It's not that simple. The encryption key is not just the PIN. It's the PIN combined with a very strong unique key that is burned into the hardware, making hat particular brute force attack unfeasible.
"Yes, this is very likely a pointless bunch of gripes."

The article should have started with this. Could have saved me countless seconds of skimming the article while summarizing in my head "boo hoo, I haven't figured out how to make my workflow any better after 2 years."
Yep and it sucks.
In my understanding this problem is related to the definition of time_t type in C/C++. It is defined by UNIX/Linux OS system libraries on 32 bit systems as a 32 bit varable. Thus whatever software that relies on it has the 2038 problem.
> The Patriot Act is huge and I remember someone asking a Justice Department official how did they write such a large statute so quickly, and of course the answer was that it has been sitting in the drawers of the Justice Department for the last 20 years waiting for the event where they would pull it out.
-- Richard Clarke (former National Coordinator for Security, Infrastructure Protection and Counter-terrorism)

Often political changes are artifacts of opportunity. I don't personally think that its evil that the justice department had a laundry list of civil rights violations waiting for an opportunity to propose them. It's the responsibility of the public and earnest lawmakers to be aware of efforts to exploit sentiment and resist bad law regardless of when it's proposed.
They most assuredly do have their own research arm and much more.
Here is a sample:

https://www.nsa.gov/research/tnw/tnw211/articles/pdfs/TNW_21...

I think it's somewhat silly to suggest NSA must steal.
As an actual driver, I'd say that parking tickets are typically fair, and easy to avoid. If somebody complains about parking ticket issues, it's a red flag that this person is either honestly incapable of understanding and following simple rules, or this person is just so entitled that they believe the rules should only apply to other people.

I do get a parking ticket now and then, but every one of them was because I ran into a scheduling issue and consciously decided to risk the ticket. And in every case, I could've paid more in advance to eliminate that risk.

I live in New York, and parking tickets make up right around 1% of our city's entire budget, which doesn't seem like a terribly burdensome stealth tax.
Is using a server for discovery and key exchange so terrible? The messages will still never touch it.
What about insurance?
Who are you to tell me that I can't have free money?
I think everyone on here realizes where his popularity stems from. He'll continue to make inflammatory statements so the spotlight stays on him.
It's $25 a month if you want to manage teams. Wish I'd known that before I switched off bitbucket.
I was just going through Apple's Security White paper and according to it, there's no way to enter the passcode electronically.
This reply sums it up nicely.

https://marc.info/?l=openbsd-tech&m=145592464111609&w=2
Is this service ethical?

I hope users who would like to see bulk messages on their phone chose to opt-in (manually, not auto-opt-in). Your terms of use do not demand this.

In the US: "FCC rules ban text messages sent to a mobile phone using an autodialer unless you previously gave consent to receive the message"

I would wonder deeply about opt-in rates as well. How are you keeping track of how much users enjoy receiving these messages? (Not just click rates because people might click something they hate to receive)

Also, confusingly, your terms of use state:

> You agree that You will not use the Service to send.. "promotional materials"...

But that's what's shown as an example on the front page?
I wholeheartedly agree with you. A world of centralized monopolies is quite a scary prospect. Less so when they are not enforced by government, but concerning nonetheless.

However not everyone in tech feels this way. I detect this sentiment in the parent. See: Peter Thiel's thoughts on competition https://www.youtube.com/watch?v=DLWyP83iU5M http://www.bnjs.co/notes/cs183b-lecture-5-peter-thiel-busine...
Trump calls for Apple boycott
Why do Boeing planes start and end with the number 7?
You used to be able to do this with the Facebook Query Language (FQL) that Facebook exposed, sending something like this query to the FQL endpoint.

SELECT uid, name, online_presence
FROM user
WHERE online_presence IN ('active', 'idle')
AND uid IN (
SELECT uid2 FROM friend WHERE uid1 = me()
)

Unfortunately, the current version of the Facebook Graph API[0] doesn't have the online_presence field, so this is no longer possible. Maybe the Graph API will be updated in the future to also return the online_presence fields?

[0] https://developers.facebook.com/docs/graph-api/reference/v2....
competition should happen naturally( i.e somone offering something clearly superior) not because I think there should be competition on principle.
in terms of amount of information, would it be trivial to count the number of nonzero bytes on the phone's disk?

then compare that to the backup?
You might be interested in this old BlackHat presentation by Christopher Tarnovsky: https://www.blackhat.com/presentations/bh-europe-08/Tarnovsk...
The effect is relatively small. Without the polar ice caps the earth would still be an oblate spheroid.
For software engineering at least, any of the big companies here (FB/GOOG/AAPL/LNKD/TWTR/etc) will easily pay $150k+ for someone with 9 years of experience. If you perform well the first year or two, your yearly RSU package will easily equal the salary.

Just apply and be firm during negotiations.
I used to do this to supplement my doctor's own tests because of my own curiosity and concern. So I just paid for it myself without insurance. For example a standard panel of 26 common tests costs $55.
According to Apple's own whitepaper one the topic, the pin only used to hash the class key, not the encryption key itself.
No, the earth is oblate because of angular momentum.

What he's saying is that the ocean's surface is lumpy because of local gravitational affects (one reason why we talk about mean sea level). The Greenland ice cap is a great mass and so it exerts a gravitational pull on the ocean around it, causing the ocean to bulge up around Greenland. If the ice were to melt away the bulge due to the icecap's mass would go away.
As the EFF explains, there are important details about how iPhones' security operates that are not public. Since when do we support an obscure security that depends on Apple's control instead of a public security in the hands of the end user? Answer: since defending Apple's control of users' devices is also defending against the FBI setting a terrible legal precedent.
I'm a fan of snowden, but this is wrong on so many levels it's hard to understand why anyone thinks his points are valid? This is about privacy and technology - depending on the specifics. I'm not sure what these points are speaking to, because it's none of the relevant issues...I guess it's just to contradict the FBI?

1. Can't prove all when there's data that hasn't been retrieved (encrypted data). What they do have is irrelevant.

2. What they do have is irrelevant...is this a pattern?

3. What they do have is irrelevant. Also, coworkers aren't what they are looking for...wtf

4. Irrelevant...wtf

5. Unsubstantiated and unlikely that Apple has a way to break it's own strong encryption. Apple probably can disable the bricking-by-attempts. If the FBI are so damn confident the 256-bit AES key can be bruteforced, they can damn well do it themselves.
Here's what I just read:

> > > > Here's my argument.

> > > That argument's too weak.

> > Okay, here's a stronger version.

> No, you have to stick with the weak version.

Personally, I want to hear the strongest version of the arguments when I'm making a decision.
Yes, it would seem that maintaining plausible deniability about their methods (through something that amounts to a kind of parallel construction with an unwitting party) would make a lot of sense. Even if they don't have the capability, there are game theoretical benefits towards pursuing this.
The FBI is asking that Apple provide them the ability to bypass the PIN timeout limits.

In modern iphones, those limits are handled by the secure enclave. However on the 5C in question, the limits are done in iOS and can be disabled by flashing a custom version of iOS. That's what the FBI is requesting.
Engineers to the brim are the backdrop, the least important component of the stage. Startup ecosystem is one of the holes where roaming capital is sunk. Who benefits? VC, lawyers, bankers (smart ones). Engineers? Who gives a shit about them. They are part of the decoration, dangled in front of investors, like animated gif. It is all a game of collecting money from investors. So don't be too hard on yourself.

Doctors and lawyers, on the other hand are a monopoly, with artificially high entry barrier.

Teachers, firefighters, police... Another monopoly on grand scale. A separate topic...

It all comes down to various monopolies and extraction of funds from public through them.

Having said that, I believe that engineers, albeit being used in startup scam as a bait, still are one of the last few free market forces left, where no credentials matter, where there are no bars or societies, just skills and experience.
I don't think the NSA would resort to quantum if simpler techniques would yield results effectively; in the case of the iPhone, decapping the chips and reading the keys directly from the hardware is something that isn't even "NSA-level" in the sense that even small reverse-engineering companies in China can probably do it for a few K$.
Japanese personifications of network protocols
Vim now supports job and channels
vim now supports job and channels

function! Handler(ch, msg)
echom a:msg
endfunction

let job = job_start('cmd /c dir /s/b c:', { 'callback': 'Handler' })
I don't get it either. A black box that prevents you from running your own code on it = bad. A black box that encrypts your data and keeps it away from the evil gubbermint (let's be clear here, that _is_ what the community is saying) = good ? It's confusing.
Adrian Chadd on being able to reflash your own devices
Apple's iOS security whitepaper (2015) [pdf]
This is terrible advice. Don't get a loan just to "build up credit."
That's true for devices with a Secure Enclave, which the iPhone 5C does not have. As far as I know the key derivation is done entirely in software on older iPhones, but even if there was device-specific keying material it would be possible to dump that as well.
It's hard to imagine an organization or unit whose middle management doesn't have a running wish list of what it would do with a bigger budget, more staff, and more authority.
If you're showing Googlebot one thing, and visitors who visit your website through google another, that's essentially "cloaking" (a blackhat SEO technique). At least it used to be.
Good luck understanding the terminology unless you get it from the source.
Lesbian country girls of Budapest
Better not tell this guy about abbreviating ipv4 addresses. http://127.1/ or http://2130706433/ might blow his mind.
This article is silly. We're talking about making some changes to an existing codebase and dumping it on to a device. The remote code-entry thing yes is a little bit complicated I agree but disabling the "wipe on 10 bad tries" function is probably nothing more than commenting out a few lines of code. It would take them a few days to have someone type in 9999 passwords but they'd still get there.
"The ability to have full control over one's own hardware" is a core tenant of the FOSS software movement. FOSS is certainly not synonymous with hacker-dom nor with HN.

Actually having 'full' control over one's own hardware is pretty much impossible (and AFAIK will remain so for the foresee-able future without some major changes among the companies that make hardware and write firmware).

Apple has a varied track record on the degree to which users are allowed to have control, they do better on OSX and worse on iOS (which is a big reason I use Android and a MacBook Pro).

That said, this particular incident is an example of Apple standing up for the right of consumer to control their devices , particularly to control who has access to the data on them).

As such, it seems completely reasonable for the EFF (and the rest of us) to support Apple in this case. Failure to do so because you dislike some of Apple's other decision is cutting off the nose to spite the face
Thanks for the feedback - SMS is a highly regulated industry and we follow all rules and regulations as specified by the TCPA and relevant case law. Our terms reflect these regulations. You should take a look at the full clause you identified "...That contains spam, non-permitted, unsolicited or unauthorized advertising, promotional materials, chain letters, pyramid schemes, gambling or any other form of solicitation". The key modifiers are 'non-permitted, unsolicited or unauthorized'. When a subscriber opts-in, they authorize the messages. We require explicit opt-ins for all subscribers in our service, regardless of whether they opted-in using another service.

Our business model is built around keeping subscribers opted in. When subscribers decide they no longer want to receive messages, we lose money. We track satisfaction by examining - among other variables - opt-out rates, click-through rates and response rates. The crux of our business is subscriber satisfaction and we take it very seriously.
I've never seen a phone company or a utility company report payment history on my credit report.
"The Antichrist can be born from piety itself, from excessive love of God or of the truth, as the heretic is born from the saint and the possesed from the seer. Fear prophets, Adso, and those prepared to die for the truth, for as a rule they make many others die with them, often before them, at times instead of them." Umberto Eco, The Name of the Rose, p. 491.
Perhaps, but that is a destructive option that is very risky.
http://sprott.physics.wisc.edu/pickover/pc/redbut.html
Signing a modified copy of iOS that will only ever load on a specific phone is technically feasible, but isn't practical as precedent.

This is because said signing generally takes a whole complicated physical process of assembling physically secure separately kept modules that hold different parts of the signing key, and likely takes the sign-off and personal involvement of multiple senior engineers at the company.

This is absolutely necessary, because the security of literally every iPhone depends on there being absolutely no chance that the signing key ever gets into unauthorized hands.

Now think about what happens to the company when more and more judges start issuing writs that require that this complicated process happens, and when a judge unhappy with the increasingly long processing time for every "software created for a specific device" instance instead issues a writ that demands an insecure version of iOS that can be installed on any iPhone.
Yea so I've worked for multiple tech companies in Silicon Valley and was in the 150+ club before leaving the area and every company I was hired at was via a connection. So going to networking events is something I never did. Just made friends at work and also tried to do some social things outside of work.. So my take is that you should change jobs and make some more friends to increase your salary. ;)
It's worth keeping in mind that evolution doesn't mean "improvement" - just change. There's no drive to make things objectively "better", which is why the human body is a giant pile of just barely good enough processes.
Thanks for that read. The amount of validation required for the tool to be used in court seems to really cause the danger of a leak to go sky high... I think the DoJ might be discounting that risk with their reasoning of "Apple can just delete it"

As an aside, I find it funny that the author finds it "stupid" that the jury is allowed to ask questions in a California court. I would almost declare that a constitutional right (judged by a jury of the peers)
> If care isn’t taken, projects can quickly devolve to become unmanageably slow to compile, usually the problem is avoidable with some care.

This is currently not the case. It's sometimes not avoidable at all. Compile times are a real concern right now. A GHC maintainer has even confessed to it being a very significant issue.

https://www.reddit.com/r/haskell/comments/45q90s/is_anything...
Perfect! I have been searching fruitlessly for exactly this since GitHub changed and went insane.
Housing markets are kinda weird in a way - when hearing bad news about the economy, people don't immediately get on the phone with a real estate broker and yell to "Sell! Sell! Sell!"

For primary residences most are driven by loss aversion ("I'll sell it when it comes back to the price I paid for it, I don't want to lock in my losses, and this is still a decent place to live").

You're right that some markets experienced steeper declines than others, and the ones that descended quicker were highly leveraged through 0% down, or interest-only (or both) loans. Post-2008 lending scene has been much more restrictive, I can't imagine a lot of people being highly leveraged at the moment.
There's an old story that you can get more help on the Internet by posting bad advice and having people correct you, than actually asking for help.
It's sad to lose such a great thinker.

For those who haven't read anything by Eco but want something more digestible on a Friday evening than a novel, I highly recommend his essay Ur-Fascism. Eco was brilliant and had a clear-eyed view on the lasting impact of the Middle Ages into today... and it's pretty clear how growing up in a fascist society impacted his views.

http://www.pegc.us/archive/Articles/eco_ur-fascism.pdf

His reflections on fascism remain as important as ever.
The 5C does not have a secure enclave, however the 5C still has the device UID burned into hardware.

As I understand it, for an offline attack on the encrypted contents of the flash, you would need that UID.
I've personally run a KDE environment on ppc64el Debian, and it pretty much works straight out of the box :D
You (or the GP) might be interested the Vouch extension for Webmentions: http://indiewebcamp.com/vouch, and the indieweb ideas in general.