skysight-inc/HackerNews huggingface dataset:
When I was young, I cloned services and wrote a letter to the company offering to buy a exclusive one year license or it would get released as open source in addition with a demo. That was giving me some job chances.

Now it's all about who you know, and what condition a potential employer is offering. No car, home office, solo office, dynamic hours and I'll walk out of an interview when the pay isn't obscenely high.

One time everything was right, but I complained to the managing director that the HR was giving me upfront bullshit during an interview, being not sure if I wanted to work In an environment where hiring is practiced that badly. This resulted in my first upper management position and allowing me to hire the employees of my department without HR in charge. Best decision ever, my best three engineers didn't even study. The hiring system is broken. In the technical sector even more than anywhere else, because it just doesn't make a difference for your skills if you have studied ivy league or learned everything necessary at home for yourself.
That doesn't make sense. If the transaction is illegal, it's already illegal. And if it's not, there's no reason to ban it.

Also, many Amish people don't use banks and pay for heavy farming equipment with stacks of cash.
Start Right: 8 Things to Do in the First 5 Minutes of Your Job Interview
Very good advice. Any employee at any halfway decent company can put a friend's resume at the top of the pile. You still have to know what you're doing to get through the interview, but HR people are looking for any good reason to cull their stack. "Well, Jane over in QA recommended them" is as good a reason as any, and provides them cover when asked, "Why doesn't this person have skill X"
Funny, I've been running Debian since 2007. I mainly got hooked on their 'testing' branch since it is just "always up to date".

But I always get people looking over my shoulder and asking "what the heck is 'iceweasel'. To which I explain the whole issue of Debian was distributing a patched version of Firefox with their OS back in ~2007 era and Mozilla, for trademark reasons, said you can't modify the browser and still distribute it with the official logos and name. Which lead to Iceweasel... but then a few years later Mozilla changed the license terms so now I guess here we are....
Psutil 4.0.0, real process memory info and process environ
Good support for strings that you want to treat as text but have unknown encoding, the biggest example of which is all OS strings on posix systems. Being forced to treat all strings that aren't guarenteed to be valid unicode as a series of integers makes everything harder - parsing text-based protocols, text-based file formats, hell last I checked it was very non-trivial to write a version of "ls" which didn't crash if the directory contained a file called "\xff".
Where are you getting 10 square miles of solar farm to support 1 square mile of dense indoor farming? Energy can be stored or brought in from other areas during the night.

And no you can't stack in a greenhouse for the same reason that there are hardly any plants growing on the jungle floor.

This sort of thing is already being done in London and Sweden. It's the level of automation that is making this news. Of course it starts at the high end but eventually all food will be grown like this just because it'll be the most efficient overall.

You focus entirely on the efficiency of photosynthesis in plants when there are so many other variables as for why this is a good idea.
If You Can't Smell Him, Can You Love Him?
I think the answer to your question is embedded in your assumption: that updating the SIM card would be sufficient to recover data from this iPhone.

In my experience, law enforcement does not make their own jobs harder on purpose. If there is an easy way to get that data, they would use that way to get it.
Yes, you miss the obvious!

The big fish have a bunch of "fake" companies, they pay little tax and are still very corrupt. And they system in such countries helps them. Yet for normal people, cash means freedom. No one can control or spy on what you do with your own cash money. People with higher education would never trade cash for convinient and bullshit bingo.
Timing attacks aren't useful against password hashes, but avoiding them is a good habit to be in.
I was interested in working with the Data Science team of one of India's leading e-commerce startups.

Later, I ended up doing a project[1] where I have collected and analysed the user order data from their order tracking portal.

Now I feel that they won't take me back because I kind of played like a Black-Hat instead of a White-Hat by not notifying them about the little loophole that made it possible for me.

Before this, I was an intern there and got that because of one of my past project. This method does work.

[1] http://pravj.github.io/blog/indian-ecommerce
Someone Asked for Advice About Getting into VC. What’s Missing?
There's a simple way to defeat Apple's argument. The judge could simply ask Apple to flash the new firmware on that phone, let the FBI run the brute force under their supervision and obtain the contents they need, and then flash back a non-compromised version of the OS.

The government would never have access to a phone with a compromised version of an OS that they could use to repeat this trick. Rather, the government would have to obtain court orders and have forensics done under supervision.

This isn't a backdoor and doesn't affect consumers, and sets a really high bar to trying to scale this for the government because it requires Apple as the gatekeeper every time to agree to do the one-off hack.

The cynic in me thinks that this letter is more about brand image. Apple wants to claim they can't hack their own phones, even if the government asks, but clearly in the case of the iPhone 5C it IS possible for them to do it, and this creates a contradiction with their public marketing and privacy position. If they didn't release this open letter, then simply complying with the judges order would make them look bad.
Frank Rowlett, a cryptanalyst breaking Japanese codes at the Navy Annexe in Washington in the 1930s, accidentally invented computers when he haywired some conditional branch circuits into an IBM card sorter [1]. He was only trying to solve his problem, and was working in a classified area, so almost no has heard of him today. There is a relevant xkcd, of course [2].

[1] Frank B. Rowlett, The Story of Magic: Memoirs of an American Cryptologic Pioneer, ISBN 978-0894122736 (1998)

[2] https://xkcd.com/664/
"To be fair - the only reason he's doing it is because it would cause a significant drop in sales for Apple devices."

That's not being fair at all. To say the only reason he is doing it is to protect iPhone sales doesn't speak to Tim's character. Of course he cares about sales, but he also cares about privacy.
TED 2016 Program Guide
Show HN: Fast SSH to EC2
Chain of custody. The guv would need to be able to prove, in a court of law, who touched it and when, for what purpose, etc. Handing it off to Apple in good faith would make it inadmissible as evidence in a trial.

You could argue that Apple could allow an official to be present while work is being done on the phone, but then Apple risks having it's (to-be-developed) method being viewed and/or captured by said official. Very risky.
Heh, I am also a 5 year Canberra public servant and am pretty close to my breaking point. I've heard it said that Canberra is a good place to settle down and die.

When you're on the outside, you figure all the clever folks in the 'central agencies' have got it figured out; they're tweaking their models and pulling the right policy levers at the right time.

When you get in, the horrible realisation hits you: no-one actually knows what the f* they're doing. There's no plan, no coherent goal, just a bunch of people doing....stuff. It's like you've wandered into the cockpit of a commercial aircraft, only to discover that no-one is flying the plane.

Are you a techie/IT person? It's a criminally under-valued skill-set in the public service.
I actually do think like that. It's a way of coping positively with the reality of the panic attacks. Recognizing that they're just a physical reaction to the stress of doing something that is both difficult and important is a way of not letting them govern my thinking.

What's different is depression. I don't know of a way to make myself feel positive about the bouts of depression. Then again, I've dealt with depression all my life. It seems independent of my founder life. Panic attacks, on the other hand, are very much a product of my founder life.

Treating panic attacks (which generally only occur at night, waking me up from sleep) as a natural result of the work is just a coping mechanism. It may not be the best one, or even a good one, but it works well enough for me.
That wouldn't be valid evidence in court.
This is, to me, a point against package managers. Little Windows universe secret: Installers aren't that bad.
I'd like to buy Microsoft Surface Book or Microsoft Surface Pro 4 but after a glance at https://www.reddit.com/r/SurfaceLinux/ it seems like people who dual boot may be having trouble with Ubuntu failing to boot after system updates (either Windows or Linux updates, anything which re-runs GRUB or whatever the Windows equivalent of that is; there are work-arounds eg https://www.reddit.com/r/SurfaceLinux/comments/43an26/repair... but i'm scared of them because i don't understand them well enough to know if future system updates will break it again), and with getting either of the touchscreen or the cameras to work at all. I may be wrong, though, I didn't read too closely.
TLDR: PHP is the language supported by https://forge.laravel.com/, and forge is so awesome, I couldn't afford to use any other language for side projects.

Kind of silly, but also kinda a good point. If a framework is awesome but deployment for side projects is either $50 a month or a huge pain, it may be not worth it for the small fish..
Could you? I said before that milk has slightly over half the amount of sugar than coke, the serving size differs a classical milk that people drink 450-600ml.
1) Merely creating the software/firmware in the first place is extremely dangerous, allowing for a failure point of any engineer or custodian of the firmware to leak it, destroying everything.

2) The strong precedent will be set that governments can get whatever they want from our devices by whatever means necessary, and it will only get worse.
> imposed spelling reforms
It is not imposed at all.

It is a recommendation that was set in 1990, and accept both writing of the words. Why is it coming back in the news? That's a pretty complex question.
Not even sure what you mean by "iTunes account"?
He also predicted Mexico and Poland would become world powers soon. Although there are some interesting insights, I take his predictions with a whole shaker of salt.
> Starbucks said it has committed to reduce added sugar in its "indulgent drinks" by 25% by the end of 2020.

IOW, not really. But come on, these drinks are non-necessary items. Who cares? And besides, who looks at something with whipped cream and doesn't imagine it being sugar and calorie laden?
Already discussed in great detail a couple of days ago:

https://news.ycombinator.com/item?id=11104265
Debian user and Mozilla employee who uses Iceweasel here. I work on Rust, not Firefox though.

> Why does the operating system have any say on what applications get released
> and how often?

This has to do with the interaction between the original authors and the distribution itself. Let's go through an example:

1. I, Steve, write some bit of software, libfoo, and host it on my GitHub page.

2. Debian users would like to use libfoo. They have two options at this point: download and build libfoo from me, or get it from Debian's package repository.

3. In order to be put into Debian's repository, a suitable package needs to be created. What exactly that means depends on the package itself, but sometimes it's about things like "which paths are searched by default". Anything that integrates with the overall system. So someone, probably not even me, would need to say "I'm going to maintain a package for libfoo in Debian." They are responsible for taking from "upstream", my GitHub page, and producing a .deb for inclusion in Debian's repositories. This may involve modifying libfoo in some ways. It depends.

At any time, a user of Debian can choose: Do I get libfoo from Steve's GitHub, or do I get libfoo from apt? The reason that you might choose the latter is because Debian knows Debian better than I do. (Well, I said I use Debian above, but this works across distros, basically. I have no clue what Fedora's norms are, for example.) The package from Debian's repositories will be better integrated into the system, and will be tested for compatibility with other packages. Part of this is due to the release cycle of Debian itself; and this is what's being discussed here. It's not about when Firefox is released, it's about when the Debian package for Firefox is released. And what version of that package corresponds to which upstream version?

So! Back to this bug. Due to some... history between Mozilla and Debian, Debian's package for Firefox couldn't be called "Firefox." So it was rebranded to "Iceweasel." This bug is about re-synching the names, and having the Debian-provided package produce "Firefox" again.

Does that make sense?
They're presupposing that there is any legal recognition of that "general expectation." That's why the invoke the doctrine of restraints on alienability--to justify that such an expectation exists.
Sure, but nominal value is not what you use to buy things. The nominal value in my bank account won't just go down on its own either. But what I can do with it will.

Or is there a mechanism I don't know about that can lower nominal numbers in untouched bank accounts?
>Installers aren't that bad

Nothing stops you from getting Firefox on Debian the "Windows" way.
Could you elaborate on how the "banks of old" were better?
It's so weird how hard it is for the brain to handle exponential growth. I was amazed that a 4-digit password can be cracked so quickly at 80ms a pop, but you're right. Just for the hell of it, here's how long it would take for different length passcodes for digits, digits plus letters (case insensitive), and digits plus letters (case sensitive):

# characters [0-9] [0-9a-z] [0-9a-zA-Z]
1 0.8 seconds 2.9 seconds 5 seconds
2 8 seconds 1.7 minutes 5.1 minutes
3 1.3 minutes 1 hour 5.3 hours
4 13 minutes 1.6 days 2 weeks
5 2.2 hours 8 weeks 2.3 years
6 22 hours 5.5 years 140 years
7 1.3 weeks 200 years 9 thousand years
8 13 weeks 7 thousand years 550 thousand years
9 2.5 years 260 thousand years 34 million years
10 25 years 9 million years 2 billion years
That laptop looks amazing! Quick question: does it have a backlit keyboard?
> A bank balance can lose nominal value with NIRP, but cash in-hand can't.

If by "nominal value" you mean "printed face value", then perhaps not (though there are plenty of time or environment-sensitive printing technologies that would allow that to change, even if there might be all kinds of good arguments against using them on currency.)

If, instead, by "nominal value" you mean "official exchange/redemption value in the units of account in which the cash is denominated", sure it can; in fact, cash that does that has been suggested and, IIRC, used in some cases -- this is done by making the nominal value (that is, the official value in current units of account) equal to the face value at the time of issue, but decreasing over time based on the duration between the issue date on the cash and the current date, so that cash held longer is worth less, even in nominal terms, as a tool to increase the velocity of money.
We'll find out soon enough if that's the case.
And then they know that this is a simple change to an if statement the next time they want to do this.
Escaping the Amish for a Connected World
> The nominal value in my bank account won't just go down on its own either.

It would with negative interest rates.
I'm fairly sure this has happened quite regularly over the last 60 years.
Cyber attack snarls Los Angeles hospital's patient database
Show HN: Newsletter all about APIs
They always can. Microcode updates come to mind. While apple have the ability to keep their ecosystems locked, they also have the capability to unlock them.

Probably not easy and not on mass scale. It may even need to have to see inside the silicone itself. Which is expensive and hard. But as long as the keys are on the device or in possession of apple - they can be extracted.
They can enjoy the 1.0 version of Dwarf Fortress while they're at it
That's just plain incorrect. To update code accessing SE one needs to have a phone accept the updates which require having phone in a state equal to owner unlocking the phone.
I see. Is the reason it wants to use Windows drivers that it hopes to get better performance in comparison to Wine or VMs?
If Apple doesn't fight this, a precedent will be set, allowing for the government to compel companies to release user information or ways of circumventing encryption in the future.

2) the government doesn't need to have access to the firmware for it to become dangerous, the sheer fact that this can be created is dangerous. What's to stop a determined, hacker from doing the same thing in the confines of his/her bedroom once it's confirmed that this is possible?
St. Louis story: An underground fire and radioactive waste
RainforestQA (YC S12) raises $12MM Series A
I'd say the opposite.

* The typical bribe is, you do something in your role as a government official, and later you legally get a high-paying job, or they pay you $100K-$200K/hour in speaking fees (the low number is Bush Jr's and the high number is Hillary's, AFAIK), etc. Works great with legal electronic payments.

* "Buying votes" usually means, either you promise government money to a group of voters, or you promise a donor to do something when you get elected. Either way, you're buying votes with the government's money so no need for cash. If by buying votes you mean that you're Trump and you're paying for your campaign, again, nothing illegal there, I doubt he travels with stacks of cash.

* "Hookers/strippers"... I dunno, whatever the problem with electronic payments there... I think a politician is in the best position to find a workaround, certainly in a better position than the average customer. In particular, if the workaround involves getting someone else to pay for it electronically, a politician is in a great position to reward that someone.
Maybe the 'solo' is ristretto and the 20oz is lungo?
Sentiment analysis of CEO faces predicts financial performance
Introducing GIF search on Twitter
Node.js CMS Frameworks
OP qualified it with "Once services have been rendered", so OP's interpretation is exactly correct in that context.
It definitely does, and I think that's the GP's point.
This phone does not have SE. It is purely software and Apple can defeat it easily. This is the exact attack vector that was addressed by Apple in the phones with SE.
I couldn't help think "Staying with PHP is too expensive" while reading this.
The actors who the government has the most legitimate interest in surveilling (drug cartels, racketeers, corrupt officials, etc.) are the best-equipped to switch from paper currency to alternate currencies (precious metals, gems, etc).
>>The super wealthy buying property from all over the world literally for rent seeking?

The super wealthy have been buying investment instruments for time immemorial.

>>Is this desirable? Inevitable?

The least of evils. Think of yourself as a "temporarily embarrassed millionaire" not as a exploited serf under a feudal, everything will suddenly makes a lot of sense.
It's interesting that the Paul brings up the trademark license clause regarding for-pay distribution.

If you are using the Mozilla Mark(s) for the unaltered binaries you
are distributing, you may not charge for that product.

While it restricts a freedom that Debian is unlikely to exercise, it's still a restriction. Presumably, that makes the trademark license indigestible to the Debian foundation?
I just really like to see more of the startup related stuff on HN.

I know that talking about content and your preference of things posted to HN is discouraged but I need to mention that for me personally, it's really helped me in the past to see other people talking about this stuff.

I live in South Africa and there isn't a huge startup scene here.

Checking out HN every couple of days and seeing stuff about other people going through the startup phases played a role in getting me to the point where I believed I could do it.

I failed but even then, I knew that failure wasn't the end. I learned that here. I saw Eric Reis book recommended here and I lurked on several thread where people discussed the trials and tribulations they were going through.

I discovered fakegrimlock here and he showed me the importance of being on fire, why I must burn.

Nice post, thanks.
After using apt-get for everything, going back to manually finding an (untrusted) executable, running it, hitting a bunch of next buttons -- seems insane.

It is quite bad. External dependencies are also nearly impractical this way, so all installers tend to embed their universe of dependencies, making for an even worse experience.
I laughed when he was talking about the System76 laptop and being "modular" as a bonus. Then complaining about the empty space for the HDD.

Also, didn't compare the Surface Book (only talked about why he didn't use the Surface Pro..). I find that particularly funny
Interestingly, this is a voluntary form of colonialism. An external power comes in, builds a bit of infrastructure, and massively exploits natural resources, with minimal improvement for the local people. Macroeconomically, it also lets them recycle their huge current account surpluses. But this is done without the hassle and expense of a military invasion. The Chinese have it down.
I would love to, but sadly he died last year.
Wasn't Node's big draw early on (aside from the fact that it's JavaScript) the fact that everything is supposed to be asynchronous? I'm actually surprised this is a problem.
Above 6,000 meters (that's nearly 20,000 feet) you're mountaineering, not trekking.

"High altitude" depending on whom you ask is generally taken to mean anything over 2,000-3,000 meters.
The problem is that once created, it would be easier for future warrants to ask Apple to simply re-perform the same trick it's done in the past. Apple's core argument is that allow this once opens the door to doing it repeatedly because right now Apple doesn't have the toolchain to do this. Once the toolchain exists, its deployment is trivial.
> Mozilla releases new Firefox releases every 6 to 8 weeks.
In parallel of these rapid releases [...]

One of the fun differences between the various organizations I've worked for is the differing ideas of how frequently releases should happen and what is considered "fast" and "slow" in different places. I've seen release cycles measured in weeks and those measured in years. I'm sure there are places that release every N days. How people get used to some particular cadence and start believing that it's the only proper (or possible) way! One of the achievements I'm most proud of is helping a group make a difficult transition from a long, irregular cadence to a fast, predictable one. Going from a release process of "Release when company leadership subjectively thinks it's ready" to "Release every 4 weeks on the day" can at first rattle some people who are attached to The Way We've Always Done It, and it requires more discipline in terms of development practices, testing, feature creep, etc. But it can be done!

Not saying a faster or slower cycle is needed for Debian or Mozilla (it would depend on a huge number of factors), but your release cadence shouldn't be considered some immovable law of nature.
Your Company Is Not a Family (2014)