skysight-inc/HackerNews huggingface dataset:
I think the beans that they use are decent quality, but they seem to over-roast them, which leads to excessive bitterness, as well as killing some of the richer and more subtle flavors. Starbucks coffee does have MORE flavor than McDonalds/Tim Hortons/Dunkn' Donuts. Those other chains seem to just serve their coffee really weak. But the extra flavor you get from Starbucks is just a higher intensity of that burnt flavor. It makes you feel like you're getting a bigger caffeine hit (you're not), but it doesn't taste that great.

My personal theory, anyway.
Radioactive material stolen in Iraq raises security fears
As I'd said, the human condition stopped advancing for longer than science did. Advances in science started up again by 1600, maybe earlier (the history of science isn't one of my specialties -- Copernicus and Bacon were late 1500s, right?), while the human condition remained stagnant for more than a century longer.
The original argument is that if an bruteforcy firmware were created that there are now more people who have knowledge and they (Apple employees) are at great risk of exposing the capability in a real way.

Not LEOs.
If Apple is capable of compromising security on its devices (by using its root key to sign a custom version of iOS, or through some other method), then I see no way that they will avoid eventually being subject to a court order in some jurisdiction that compels this action. If that's true, then device security is already compromised and Apple knows this. Let's say the facts of the case were slightly different, that the FBI "knows" a terrorist attack is about to occur, and Jack Bauer-style demands that Apple assist in compromising a specific device that has the top seekrit plans on it. In that instance, do you think Apple would comply with a warrantless request for cooperation? Hm...

Reading Tim Cook's announcement in light of this thought experiment, methinks he doth protest too much! Apple does not have any objection to compromising user security at the root level, and in fact has already done so by creating a device that has some limited vulnerability to malicious action by the manufacturer signed with its root key. (By the way, no doubt every other manufacturer has done worse, so this is not to deprecate Apple vs. any other big company.)

I would speculate that Tim Cook's goals with this announcement are largely PR-based, and that the goal of Apple's legal strategy is not to avoid cooperation but rather to retain the ability to decide whether to cooperate, and/or to impose a higher perceived cost on the government for such requests. No doubt Apple is correct to say that once a precedent is established, then it will be widely used by law enforcement even in routine cases.

At the end of the day, I am not optimistic that we can avoid a world in which large device manufacturers are compelled (legally and practically) to build security flaws into their devices. Perhaps not the flaw of a back-doored crypto implementation, but other flaws such as those that have been identified in current iOS devices that allow the government (with commitment of sufficient resources) to chip away at some of the more superficial protections.
Haven't read a fiction book in over two months and I'm thinking of trying one out. Cryptonomicon has been in my Kobo for ages so it is going to be the next book I tackle after the current book I am reading. I guess I will be kind of cheating since Neil Stephenson's books tend to be well researched :) Hoping I can learn a few things from it. A lot of pages though :(
On their newer models, yes, there are hardware-based protections.

The guy in this case didn't have the newest model iPhone; he has an older 5C which is at least theoretically vulnerable to Apple being forced to push a bad software update to it.

It's hard not to see the effects of these things showing up in the way they design each successive generation of iPhones; each time, they add something which gives them more ways to say "nope, technically impossible to do what that court just ordered us to do".
On the other hand, if iOS were open source / the iPhone was able to run unsigned code there would be nothing stopping the FBI from just doing what they've asked apple to do themselves (assuming it's actually technically possible).
Copernicus?

Surely Socrates.
Ask HN: How to make full use of HN ?
To build startup, or learn something new or contributing to HN in self. I am a rookie in literally every field, how can I contribute too
Modern startups are typically run by Millennials, so same difference. :p
> “GIPHY delivers real-time GIFs as they happen, helping to power Twitter’s live commentary and conversation,” says Alex Chung, founder and CEO of GIPHY.

Someone built a 30+ person company around animated GIFs. And they say there isn't a bubble...
Yep you're right - disregard what I said above. :)
I've done something similar. I wanted to branch into a new discipline, so to show off my ability to pick up a new skillset, I learned how to juggle. At first it started off as a joke, because their jobsite said "juggle multiple things."

I spent a couple of hours, recorded video of my progress and posted it to YouTube. I didn't get the job. I actually went out on a limb and reached out to somebody privately to make sure it wasn't too "out of the ordinary" and that I didn't ruin my chances for anything in the future. Thankfully, mostly everyone forgot about it. I guess it wasn't unique or clever enough?
Let's see:

1. Receive MMS from unknown person

2. Make sure Install Apps from Unknown Sources is turned on

3. Install suspicious app

Android malware is really a non issue that is perpetuated by companies that make Android "security" apps or sites that use FUD to drive traffic.
* Tax evasion.
So all I have to do is vote in a mid-term election and I'll be healthier?!
Whether this post is accurate is really irrelevant to whether or not this attack is feasible.
Breaking Up with Code
Very interesting.

Maybe point him to http://www.bothsidesofthetable.com/ ?
I like being called simple. It's like the jerkiness of insults. And you're right, if banks ever brought the world to financial ruin like Microsoft and Apple did they would be regulated out of existence. But stupid Microsoft and Apple instead got bailouts by the same regulators and continue to exist with even more power than before they did that thing.

Unless I'm missing the sarcasm, so tell me if I am.
> That version of Android is only on a handful of devices,

And?

> Google is not expressly clear that they don't have your encryption keys on Lollipop and lower;

They have explicitly said that if the device is encrypted they don't have the key.

> They definitely have the keys to your encrypted data on their servers no matter what, which can include complete backups of your device

Source for that?
And look where they ended up :/
Portia: Open-Source Alternative to Kimono Labs
so prove it then. I'd actually love to be proven wrong about that.
> creating an innovative backdoor that does not exist today, means that it can never be un-designed

Wasn't it just yesterday a story was published about an upcoming documentary about the STUXnet virus that claims that the US and Israel developed it in secret together and had a very successful, but very limited use for it. Only when Israel allegedly went off on their own to modify and deploy it did it spread wide and far, popping up on the radar of anti-malware companies and getting researched and publicized.

Like what you said, after the exploit/backdoor/software is designed, it can never be un-designed. It will exist as a tool that can only be mitigated, but not destroyed.
James Clapper claims he did not lie to Congress about NSA surveillance
Cyprus had bank account seizures and some eastern European nations seized private pension accounts. You can't seize what you don't control.

No cash means no anonymity
No cash allows banks to charge negative interest rates
I almost collapsed from drinking a white choc mocha from Starbucks about 5 years ago. Body went into full shock mode it was so sweet. Got dizzy, headache, the lot.
No, they don't. There's only 1.4 trillion dollars in circulation.

http://www.federalreserve.gov/faqs/currency_12773.htm
The Harmony approach is only a problem if you use other remotes at the same time. Even then it works out fine if the devices have "absolute" codes - eg separate codes for power on and power off, separate codes for each input (vs a "next input"). Many do have the codes, even if the remote control doesn't apparently show them.
I don't think it would. Many full screen apps like Kindle require two swipes from the top before it brings down the system menu (first shows the status bar, second slides down the menu). Maybe iOS is different?

You already have a fantastic multitouch device in your pocket, and many of these cheap shells have a horrific touchpad touchpad experience. Maybe shells for the major form factors would actually be cheaper than putting together a touchpad experience that doesn't make you want to chuck the device out the nearest window.
absolutely fair enough
I understand what you are saying, but it doesn't make sense. It sounds like a really bad way to do software development.
On the contrary, it seems it's doing what the article suggested.

i.e. instead of trying to be the next Samsung, doing R&D and manufacturing of your own new smartphone tech and reinventing the wheel, they're just importing low-cost (maybe ± $40) existing phones from China and subsidising them to be dirt cheap ($4). Exactly like the article you linked to suggests:

> To bridge the digital divide — an avowed goal — it could have simply contracted a company in Taiwan and imported the tablets and sold it at subsidized rates to students. The cost would have been nominal — after all, the Indian government is subsidizing the cost of Aakash 1, which costs $50 to produce — and the tablets would have reached students sooner.
Didn't you say that MUMPS is an obsolete or generally weird format, not that it's something you wouldn't use?

But yes, I use it, both professionally and personally. Legacy MUMPS is not pleasant -- the VA's code looks like someone left their telegraph out in the rain -- but the language is astonishingly good at string-handling, mostly due to certain constructs that make it very hard to translate into normal languages.
> the only reason he's doing it is because it would cause a significant drop in sales for Apple devices. People overseas would immediately stop buying because "The American government is listening", and that's assuming countries like China and Russia wouldn't ban them outright.

That hasn't happened with other devices or earlier iPhones that aren't as secure.
Technical interview performance is kind of arbitrary
If the US$100 and US$50 are eliminated, the black market will switch to gold as its reserve currency, and operate as a de facto currency exchange for customers using other forms of payment.

Organized crime hawaladars will back a Bitcoin-like electronic transfer system, because actually moving around the physical gold too often is a pain in the ass, and exposes the shipments to additional risks.
I never said they could. There is a better chance that they can, but that line of thinking ends up trying to prove a negative.
Agreed. Elixir's first rule of macros is to not use macros. Generally idiomatic elixir is to try to encapsulate your problem in (ordered by priority) a 1) data structure 2) function 3) macro. So if you can express your problem in something other than a macro, do so.
Incorrect; the first hashing method recommended uses a native CPP binding which launches a thread to execute both hashing and comparing.

Unfortunately, the example used for the bcrypt node module is the async form of hashing. That library exports both sync and async forms of hash/compare.
:-)

I was mostly referring to the what I believe be the strategic thinking of the Chinese communists.

"Also unlike people in HK or Macau, Taiwanese don't consider themselves Chinese."

That is not my impression. But it is hard to gage for me.
I called my bank the other day and they asked over the phone for my password. This isn't a bank I often use, I only currently have a loan through them so I've never used the login on the website. I said I don't remember setting a password. They gave me a hint about the characters in the password and I was able to remember the password based on their hint. I verbally said the password character by character and they confirmed it. This is an example of how to not handle passwords in 2016.
User experience stability is often a real problem in the corporate or institutional world. Keeping a maximally stable version of Firefox will help corporate users a lot - it's not even necessarily about stability as much as it's about user retraining, in-house extensions, etc.
There's a a theory that says the increased feeling of safety makes us act more recklessly.
At least in Los Angeles, the prices for a medium sized coffee at Starbucks vs. McDonalds is: $2.25 tax included vs $1.29 tax not included.

So, the prices aren't as different as you think.
I wouldn't say that. I was after the money back then, but some companies actually liked that attitude of mine. Also lacking a product cycle those threads expired by themselves.
I think this is a misunderstanding of the goals of Debian Stable.

The purpose is not to get a stable release of each upstream project and build a release from those. The goal is to get any release of each upstream project, test it for a few months to ensure there are no show-stopping bugs and to document the known ones, and then freeze it.

The goal is not to ensure lack of bugs, it's to ensure stability, that is, that no new bugs appear or existing behaviours change.

The goal is to allow the sysadmin to configure the system, test it - working around existing bugs - and leave it running, being reasonably sure that stuff won't randomly break until he upgrades the major version, while remaining secure.
After simply using installers in Windows, dealing with conflicting package and library dependencies seems insane. I've been unable to use multiple applications on linux because of this issue whereas that would never happen on Windows where installers just have what they need without getting in each other's business.
HN should just do this by default; meaning if traffic gets results in a site response time dropping, it should know that that Google cache or the like is up, or provide a cache itself.
You are owned. Deeply, profoundly, in ways that you have no way to manage/mitigate.

The international legal framework of sovereignty basically says you are owned. (Not universally de jure, but pretty much de facto.) Whatever rights you have are effectively granted to you by your country. Unfortunately, this notion is seldom given any thought, and the current most visible proponents of such an idea are unpleasant angry underclass men using it as an excuse to behave badly. There are others who have given thought to this, however, and it is part of the motivation behind such things as The Universal Declaration of Human Rights.

https://en.wikipedia.org/wiki/Universal_Declaration_of_Human...
Sure thing.

Starting with the A7 CPUs, the iPhone CPU has a "secure enclave" which is basically a miniature SoC within the SoC. The secure enclave has its own CPU with its own secure boot chain and runs independently of the rest of the system. It runs a modified L4 microkernel and it does all of low-level key management.

The secure enclave contains a unique ID burned into the hardware. This ID can be loaded as a key into the hardware AES engine, but is otherwise designed to be completely inaccessible. Assuming AES is secure, that means the key can be used to encrypt data but can't be extracted, not even by the supposedly secure software running in the secure enclave. This key is then used to generate other keys, like the ones used to encrypt files. That means you can't extract the flash memory, connect it to a computer, and then try to brute force it from there. Or rather you can, but you'll be brute forcing a 256-bit AES key, not a 4-digit PIN, making it effectively impossible.

One of the secure enclave's tasks is taking a PIN (or fingerprint) and turning it into the encryption key needed to read the user's files. The main system just hands off the user's code to the secure enclave, and gets back either a key or a failure. The escalating delays with successive failures and wipe after too many failures are both done in the secure enclave. That means that updating the device's main OS won't affect it.

All of this is discussed in Apple's security guide here:

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

The one open question is software updates for the secure enclave. According to that guide, its software can be updated. Does that mean it can be updated with code that removes the restrictions and allows brute-forcing passcodes? The guide doesn't address how the updates work.

My guess, based on how meticulous Apple is about everything else, is that updates are designed to make this scenario impossible. The secure enclave must be unlocked to apply an update, or if updated without unlocking it wipes the master keys. This would be pretty simple to do, and it would fit in with the rest of their approach, so I think it's likely that this is how it works, or something with the same effect.
> I thought Starbucks coffee was meant to be good/high quality? If it isn't why are people spending over $3/cup when McDonald's and others has $1/cup coffee?

Starbucks is widespread enough to count on and convenient almost wherever you are, and for many good enough and better than McDonald's, etc.

Now, its been quite a while since I had a McDonald's coffee drinks, but when I have, its been bad, far worse than anything I've had a Starbucks.

At the same time, there are plenty of independent coffee shops that have better coffee, and, if I am someplace where I know one, I prefer them. But Starbucks is good enough, and reliable and consistent enough when I am somewhere where I don't know what the good local independents are (and, when I am near my home, its a lot more convenient than the nearest preferable independent.)
They are also the best equipped to launder money through the banking system regardless of its origin: that is what they already do!
Pretty much spot on, on every point. I've been starting to worry about the whole 'war' possibility as well. We might find out about the latter in a couple of weeks when the Saudis and about 10 other allies conduct massive 'training exercises' on the Syrian border.

On the bright-side, even the most conventional institutional macro-economists are finally acknowledging these problems: http://www.bis.org/speeches/sp160210_slides.pdf

FYI the Bank of International Settlements is 'the Central Bankers' Bank', and the slides are from a speech given by its 'Head of Monetary and Economic Department'. The last dot point on the 'summary' slide (#2) really jumps out:

"Need to abandon debt-fuelled growth model"
> What's the point of accessing main memory in a locked and encrypted phone?

The phone isn't always locked and encrypted; for example, whenever the user is using the phone it's unlocked and decrypted.
R uses a global string cache so any string comparison is just comparing two pointers.
well thank you, I always appreciate someone teaching me something :)
This tiny $1 chip connects things to the internet from 10 miles away
Because, starting in September 2016, the new ortographe will be taught at school.
Those also work just fine with strings.
Cashinsecret
I've been hearing a lot about feature flags lately.
They said that they were testing for the result of "resistance training" in rats. For rats that means climbing a wall with weights tied to their tails.

However, if a human was going to do resistance training, they would probably do it by lifting weights. There are other ways, I suppose, but that's the main one.

Weightlifting, once you get to higher weights, is a pretty cerebral activity that requires perfect form and close attention to training schedule, repetitions, amount of weight, and diet. It's a very different activity from pulling a weight along because it happens to be attached to your ass and you can't escape it.
God bless Twitter - solving the hard problems
I wish this was true everywhere. I've tried this few times on the companies I was very excited about, but it never worked so far for me. Most of the time, they don't even care to reply. I don't like faking interest, so I just drop my applications into the black hole these days.
You're paying for the brand and for consistency. People love Starbucks because they know what there getting, you can order a Starbucks drink in Colorado and have it taste the same as if you ordered it in Tokyo or Prague etc. (so I've heard)

You can also end up with something that's pretty much a milkshake with caffeine but instead of walking around looking like a fatty with your DQ blizzard cup you can be cute and trendy with your Starbucks cup.
Scrypt is based on PBKDF2.

No, it really isn't.
Yesterday's story "Giphy Closes $55M Series C at a $300M Post-Money Valuation" - https://news.ycombinator.com/item?id=11110828
Oh, they're out for shared-hosting CGI/FastCGI only, because of high startup time and high memory usage and the fact that no one in Java ever uses that deployment model. If you're doing droplet-based stuff I'm sure it could work, but I don't think the author is satisfied with the costs of running multiple projects.
Quiet down and watch this Kardashians episode.
Doing the right thing is very often (if not almost always) the most profitable thing. It's very difficult to make a business out of serving your customers poorly; if you disagree, give it a shot, and let me know how it turns out for you.
I didn't like the first answer too much. In particular the black holes were not aligned with the detectors, the time difference is smaller than the time that the light needs to travel from one detector to the other.

I prefer the second:

> The nature of the detectors is that they act like a microphone, as opposed to a camera. [...]

and the last:

> According to the GW150914 tutorial, this is what Advanced LIGO L1 and H1 detectors originally saw: [...]
Alleged Anonymous conspirator arrested after rescue from stranded boat off Cuba
> I don't understand the bank hate around here.

They limit what you can do with your own money.

The reason for getting deposits is so that they can loan 10x or 100x (or whatever your country allows) on the deposit and earn interest/fees.

That doesn't benefit me, only them.

The reason I use a bank is so that I can have "security" and "ease" in transfer/payment. They make a lot more off of me than the utility I describe above.
It's analogous to building a 30+ person company around MS Office clip art circa 1995 or Print Shop banner designs circa 1985, only now the company is valued at $300m with $50m funding. For gif search. Because I need those memes and I need them fast?
It's fundamentally about decoupling. As the author of libfoo, I cannot keep up with all of the different Linux distros and how they do their thing. So you decouple the process by having two layers of maintainer; the upstream maintainer and the package maintainer. And I can't then also test my package with every other package on every other distro.

It has problems like anything else does, but it's pretty effective overall.

What specifically do you find bad about it?
"Computationally-signed bootloader" - but does Apple have the private key? If so, why can't they create another bootloader?
I looked up workarounds today, and it's as simple as googling the article title, then clicking the link.
My takeaway is that different types of exercises might have different effects on the brain. Stronger claims must wait.

And I think that is all the study was meant to determine. Based on the findings, I would support more research on the brain's response to exercise.