skysight-inc/HackerNews huggingface dataset:
It is in fact not clear that what would be produced would be a master key. The warrant, for example, specifies that such a tool only apply to one device id. Given that firmware images need to be signed by Apple to be loaded, it would be relatively straightforward to create a firmware image that would only work on a single device and could not be used on a different device without Apple's assistance (e.g. generating and signing a new image tied to a different device ID).

More likely it is the case (as they have said explicitly) that they do not want to create a key because that would tarnish their image and suggest to the government that they could, again in the future, be called upon to unlock an individual's phone. Most specifically here, Apple would be generating software for the government to use to undermine the security of their products.

Further, until they move more functionality into hardware, a very similar technique could be used on current devices, suggesting that Apple products are not yet quite as airtight as they would like you to believe. Specifically, Apple seem to have implied that they can update the software for the Secure Enclave without requiring a passcode. See here:

https://stratechery.com/2016/apple-versus-the-fbi-understand...
Its generally unlikely those things lead to interface changes. e.g. func bcrypt(salt string, password string). Generally the bug isn't in the interface. So its somewhat safe to upgrade the dep and see if the compiler complains

Also exporting of interfaces is protected by case private()/Public() which leads to refined interfaces being exported. And the go vet tool expects all exported functions be documented.

Not saying a package manager wouldn't be nice.
FWIW: https://github.com/kilim/kilim
“query parameters” here are the parameters passed to PostgreSQL. That is, "SELECT * FROM users WHERE password_hash = get_hash('P4ssw0rd')" is being logged, not "?password=P4ssw0rd".
I've been lurking in your /threads page for a good while, and this single-scentence post conjures up an excellent comic strip image. Keep up the good work!
Good points. I'll probably switch to the modular way in the next project.
Someone has to tell that to the xorg-edgers PPA maintainer
What does your wife do?

If one of the two of you is freelancing and has a variable income, getting the one with a reliable income to quit is risky.
+1. As a writer, literally all of my best work is completely unplanned. On hindsight there was preparation, background, context, etc, but still.
Los Angeles hospital paid $17,000 in Bitcoin to ransomware hackers
No doubt some of it is just making the best of an economic reality.

But short of living in a true "tiny home" (< 400 sq ft), many people today (myself included) are "right-sizing": choosing to live in smaller than average spaces and using smarter space utilization, usually in order to reap some other benefit, whether that is proximity to amenities, work, and transit systems, lowering utility costs, etc.

It probably helps that having a huge house is weakening (though clearly not gone) as a symbol of social status, especially in crowded coastal urban areas.
This reminds me of a bit from "The Dilbert Future" (1997):

> Most people won't admit how they got their current jobs unless you push them up against a built-in wall unit and punch them in the stomach until they spill their drink and start yelling, "I'LL NEVER INVITE YOU TO ONE OF MY PARTIES AGAIN, YOU DRUNKEN FOOL!"

> I think the reason these annoying people won't tell me how they got their jobs is because they are embarrassed to admit luck was involved.

> I can't blame them. Typically the pre-luck part of their careers involved doing something enormously pathetic. Take me, for example. I'm a successful cartoonist and author because I'm a complete failure at being an employee of the local phone company.
I'm talking about the web interface. Have to click a button for cc, have to click a (hidden) button to change the subject matter, it's incredibly easy to not notice attachments, the threading I kinda just don't get, having to click "more" to see the link for spam, I could go on and on but that gives you some ideas.
My head is exploding. If this doesn't violate the GPL... what was the whole point of the LGPL again?
"Flask is then a thin wrapper that instantiates the app and then exposes the views to talk to it."

Why did you decide to go this way? Is it because the user-facing parts of the app (the bits where Flask helps) are only a small part?

I mean, if I'm developing a CRUD app with small amounts of supporting non-interactive code, I can't see a reason not to use Django (and put the other stuff in manage.py commands).

On the other hand, if I were to write something like an analytics system, which had a web UI for users to inspect and play with results, I can see that I'd feel constrained by Django when writing the non-web parts.

As someone who loved getting started with Flask, but then switched to Django after getting stuck without a good structure, I'd really like to understand whether the choice of Django vs. Flask should be made based on individual preferences (comfort of an imposed structure vs. freedom without it) or based on the type of project (mainly web, or mainly non-web)?
>>Paul : It is actually a trick for interviews. If someone asks you a boring question, just answer the interesting one they might have asked, and nobody complains.<<

That's classic...

An example of how to actually live "your" own life in this world...not paying a great deal of attention to uninteresting things that others bring up; rather molding those same things so that they become interesting, and illuminate parts of your life and the lives of others...

In my estimation, my life is what it is--one I'm very happy with--because of my having just that attitude...

And, yes, I totally agree:

>>Paul : When I was a kid at Christmas, the Sears Catalog was your reference work.<<
HaxeFlixel 4.0.0
Those darn feminists, always getting so offended by innocent comments from the fine, upstanding folk on 4chan.
PSG menang dari Chelsea
It's almost certain that Apple helped American government to violate customer's privacy.
It looks to me this is just a marketing stunt for post-Snowden revelation.

If Apple cared customer's privacy and security so much, how could they sell non-free software that is hard to audit, computer with baseband processor, relies on central server which allows the single point of failure.

My understanding is Apple customer don't much care about their own privacy and security but has weakness on marketing.
Good point. For now, you can just add that in the "Reason" and we'll see it. But maybe we should add a "notes" column. We could also have checkboxes for specific services, like Comcast, where we know their different offerings.
I was just in Easter Island/Rapa Nui in December. One of the most incredible places I've ever been to. I have pretty much the exact photo as the one at the top of the article (it's from the quarry where they carved the Moai).

I'm pretty suspect of any claims that Easter Islanders didn't engage in bloody all-out war with one another. From my understanding all of the Moai on the island had been toppled by inter clan warfare (any standing Moai on platforms have been restored to their original positions, and most of them have had their heads cemented back on since they generally snapped at the neck when they toppled).

So yeah, the glass blades might have been tools, but I wouldn't draw a lot of conclusions about the amount of conflict on the island based on that.
Well crap... I have two C7s. IMO there might not be (or at least have been) a better mainstream router for the price.
Also search! It's really fast and in my experience very accurate and useful.
Pity - this is the first I've heard of commando.io, and it looks like I could have used this tool as my current setup is a touch unwieldy. I would have at least tried it out, and likely would have bought it. Oh well, they can do without my $100/mo.
Yeah but see you have something called empathy, which this guy clearly does not have. If he didn't want to see homeless people because it upset him that we weren't helping them, and he was doing everything in his power before complaining to the mayor - then he'd have a good case. Instead he's making the homeless sound subhuman, which is no argument I can stand behind.
Where did you get free text and voice?
Congrats on being a Quora Top Writer!

I agree...the best ideas "come in on little cat feet"...
I think if you try it out, after a few you'll find this is naive. Further, you are doing the job of the person making the claim!

It is too time consuming to research a claim indirectly like that. That is what you do after reading the paper which contains (usually most of) the required information and (usually a biased sample of) citations to the other research that were found relevant.

Reading the paper is only a first filtering step to evaluating a claim, a conference presentation simply doesn't merit that effort because it contains far too little information. A conference presentation is more like "hey, check out what I'm working on".

Now, that doesn't mean people don't try to do this, it is one of the primary uses for misinterpretation of p-values.
So you are biologically a male, you identify as a female, and you wanted to use the female bathroom?

I think that if, as a society, we decide that gender access to restrooms is not based on physical gender but instead based on how you self-identify -- then as society we should completely eliminate the separation of bathrooms for males and females.

Agree or disagree?
I suppose if you already have an existing service component that encapsulates authentication, authorization, business logic, notifications, and all that other jazz, then use flask is an excellent way to wrap that to produce an http api.
> knee-jerk dogpiled by the offense mobs

... why is he free to express himself, but people who disapprove of him aren't? It's not like they're setting fire to his house or stealing his dog. He can say what he likes, other people can say what they like.
That's a good point. I forgot how magical the trackpad is on the MBPs compared to every other laptop I've ever touched. I couldn't imagine bringing a travel mouse with me but I used to ALWAYS have one with my PC laptops.
I algorithmically generate the answers to the security questions with:

answer = PBKDF2(hmacsha1, password + question, "", 100000, 16)

This is also incidentally the basis for how I generate unique passwords for every service except banks, communication, and other sensitive things. I want a different password on every website and don't want to trust any password-remembering software I didn't write. The same function works fine for generating answers to secret questions.
Yeah, I was hoping for a GPL license here, but given the amount of commercial backing I wasn't expecting to find a GPL like license.
Considering all the components currently in it are only available if you're in their subscription plan, that's basically the core business model.
That works as long as the website has this functionality. One day you'll miss it... and end up writing to Bram Moolenaar, explaining why you forgot your password (http://www.vim.org/account/forgot_password.php)
On Windows, is there any way to tell if one driver in particular is behaving badly?
It's not cheap, but it's badass.
https://omnia.turris.cz/en/
Yahoo fucked up Yahoo Answers (original SO) along with the comments section on their news. Both of these were social networks with millions of users.
On a Manager Tools podcast episode they talk about hiring against a standard. First, have a standard (the six dimensions you mentioned fit the bill). Make every interviewer ask the same, or very similar, questions. Use the standard as your only source, and evaluate candidates against that. Hire the strongest one.

They ask interviewers and hiring managers to ignore "future potential". Humans are incredibly bad at predicting the future. Even if you think you can say how a person will perform in 5 years, the role might change, the market might change, customers preferences, personal developments, etc...
https://en.wikipedia.org/wiki/Chinese_wall#Usage_in_specific...

For instance, the investment banker who gives merger advice to a company and is privy to their deal plans can't turn around and give info to the bank's traders...the research analyst primarily serves sales and trading and is client-facing to the buy side so is on the other side of the wall from investment banking.
Why does this site want to send me push notifications? More specifically, why is it showing me a fake, vibrating, AdBlock-evading, interface element "powered by LetReach" asking to send me push notifications?
The big question about driverless cars no one seems able to answer
Type this in your console
https://gist.github.com/wesbos/cd16b8b1815825f111a2

speechSynthesis.onvoiceschanged = function() {
var msg = new SpeechSynthesisUtterance();
msg.voice = this.getVoices().filter(v => v.name == 'Cellos')[0];
msg.text = Object.keys(window).join(' ');
this.speak(msg);
};
I dont know if there can be a practical solution based on what you said. If an FBI agent could do it, he could lose that methodology due to him getting hacked or he could do that on purpose with malicious intent( theoretically speaking).
http://qz.com/521970/why-chinas-model-of-capitalism-is-popul...
Humans mated with Neandertals much earlier than thought
Sorry, I should have been clearer: at the time of purchase, there should be a zero-impact on your net worth.

As time passes, a delta opens up between the value of your house and the amount owed. This can be positive (your house went up in value, and you are now richer) or negative (you are underwater on your mortgage).

If you are underwater, you have options. I wouldn't recommend it, but strategic default[1] ("jingle mail") was a huge problem for mortgage lenders during the 2008 crisis, and allows you to cut your losses if you deem your position to be untenable.

[1]https://en.wikipedia.org/wiki/Strategic_default
Ya, the page when you click through has to be the same as that indexed by google, I think it might be referred to as cloaking?
Since we're discussing anecdotes, here's mine.

I find aerobic exercise / running extremely boring. My ADD kicks in and my mind wanders like crazy. I find it hard to do because it's so boring.

Anaerobic exercise / lifting weights is the opposite. I focus intensely on what I'm doing. I shut out the world. Time flies by. It's like intense meditation for me with the bonus of building muscle.
Still in camp #1 (AppCode). As someone who also does development outside of iOS, you couldn't pay me enough to solely use Xcode.
The $4 Android Mobile
It's tremendously freeing to have your application live as what amounts to vanilla python (or ruby, or php, or clojure, or insert-your-favorite-language-here). Once you've abstracted your core business logic from the HTTP layer, a lot of problems become easier to solve. If you want to replace Flask entirely it becomes very simple. If you want to replace REST entirely with a CQRS-style system, it's much easier. Testing gets easier. Wanna play with your app without firing up a web server? Build it so that you can use it from an ipython shell.

Vanilla is the holy grail. You mention manage.py commands but why not if __name__ == '__main__': do the thing. Or the multitude of tools like invoke (https://github.com/pyinvoke/invoke) and click (http://click.pocoo.org/5/). I digress...

Django is great for a monolith. Stack Django REST Framework on top of it and you're even bigger and nastier. I would never use it again because the amount of time spent bending it to my will often exceeds the time I'd spend building my own system. Fair warning, I have been using Django in production since version 0.96 and have built many companies on it. After ten years of building web apps, using every MVC under the sun, and working with every size/shape team under the sun you really start to appreciate simple things that compose well together. They're easier to reason about. They're easier to replace. They're easier to pull out and turn into a standalone library or shared service. Are you hitting the wall with one tiny part of your app? Replace it with something written in an entirely different language and communicate via JSON, or over a message bus. Not everything can be mapped to a WSGI request/response.

I am so glad aidos has the top comment on this post because his/her style is what we should all be aiming for from the get-go.

I'd definitely suggest reading up on the SOLID –https://en.wikipedia.org/wiki/SOLID_(object-oriented_design) – principles. Furthermore, the adapter concept is often explained with scary Java code samples, but the core of it is wonderful. Essentially you should consider your API as a vanilla system in your language of choice and you build adapters which then allow for external services to communicate. One adapter could be HTTP (via Flask perhaps) for a front-end website. One adapter could be HTTP but one that only speaks JSON, which you might serve under api.yourdomain.com. Another adapter might be via a queue system which allows for arbitrary commands from an external source to get written to a durable queue, so that they can be replayed later.

I took some melatonin so at this point I feel like I am just babbling and about to fall asleep.

tl;dr build things without frameworks, use your language well, be vanilla, compose tiny things to build big things.
Are iphone hard disks (and the files within it) and cloud content encrypted based on this single private key that is stored in the secure enclave on iphone?
This is the latest in a long string of irritations that will have me looking for a replacement logging datastore post-haste. I've already replaced Logstash with Heka; I guess ES is next.
For me, that better PC is the Chromebook Pixel (2015), of course, running linux instead of the crippled Chrome OS. It's my main dev machine and I use it more than the MBP that I got @ work.
Blast Yahoo Answers back to hell by installing a Chrome extension called Google Search Filter: https://chrome.google.com/webstore/detail/google-search-filt...

Add Experts-Exchange to the blacklist while you're at it.
I just measured it, and native bcrypt seems to be about 5× as fast as bcryptjs. As long as the time for one hash is more than 0.0001 s, you’re doing pretty well as far as password storage goes, so a pure JavaScript bcrypt is bad mostly because it’s blocking on Node and not because it’s too slow to be useful.

Please don’t pull numbers out of nowhere.
How does your battery respond?
I thought we already knew this wasn't on the up and up.

Even the most minimal SoC, powerful enough to run Android (I think I read it was shipping with Android) is at least $30, a single core wtf-wonder.
Does ELK = Elasticsearch + Logstash + Kibana?
Show HN: Browser extension to share Amazon.com shopping cart
Had an experience recently to shop for camp supplies for the group. One of the members prepared a shopping cart on Amazon.com but I wasn't really comfy with paying it out through his account and apparently, there is no way to share contents of a cart. So I made a thing :) Critique, please.

https://chrome.google.com/webstore/detail/amazon-share-a-cart/peiobddfomnijgoblelfdmjblplojcoe
That's an interesting idea. Having something like a gh-config branch for all the configuration would keep it isolated.
I highly recommend surge.sh for easy static hosting--their cache-busting strategy is explained here:

https://surge.sh/help/using-lucid-caching-automatically
Ubuntu 16.04 isn't even in beta yet, how could you have the LTS version?
OpenBR: A communal biometrics framework
I've heard this sentiment expressed for the creation of music and art as well.
So N1 routes all my email through nylas?
The Power of Open Source to Solve the Data Fragmentation Challenge
This post (http://stackoverflow.com/a/194207/438615) makes a good case for "computation builder." Also, as there are abstract data types (stack, queue, etc), monads are abstract control flow types. Another answer there suggests "control type". Something even better is probably possible, but I like both of those better than "monad".
Just follow the link to the Techempower benchmarks on grandparent's post.
Your business start with great software
Two people were talking in XYZ language that I don't understand and then after some time they attacked me. Dammit it "would not have happened" had they been using the language I know of.
YES! Your username should be binaryfullofwisdom.
Yep. Scratch one startup off the list of "companies I'll ever work for," too.
hmmh, here's the problem I was trying to solve.

data frame has 2 columns, 20 years of portfolio returns, and 20 years of % withdrawn.

using a starting portfolio value, calculate the 20 ending portfolio values for each year and the dollar amount withdrawn.

worked ok looping through the data frame, but was unreasonably slow.

never figured out how to use a vectorized method that could go through the frame building each new element from the one previously calculated.

maybe I missed something obvious?

(the parallel part came in because I was doing it on a lot of portfolios, so to speed it up just launched the same slow function on several lists of them in parallel. writing that one function above in C probably would have been OK. I think I got it to work but then I couldn't get the right version of compiler to work with the right version of R which supported the other libraries I was using. was a few years ago so maybe things weren't as stable. I never said I was very good :)
<I'm mostly on The Guardian's side regarding class warfare>

If only they were more concerned with class warfare within the British Isles than mocking the rest of the world's politics.
or like .dotfiles/ or .repoconfig/
It might be useful if it got it right. Say per-website. Instead you wind up with 10 different Facebook entries - or whatever website you happen to use a lot.
[Python] Brain Games
And apparently #2 is also by Tim Cook? http://www.hntoplinks.com/all
Another inexplicable downvote. Thank you for the relevant input and the practical angle at the cash ban.
Nice! Thanks for the heads up. I must have missed that when I hunted for it a while back.
>> on about 24k per year

Horseshit. A family of 4 will spend about 2/3rds of that amount on healthcare (meaning insurance + deductibles and copays) alone. Then there's real estate tax as well, utilities, food, necessities. I'd say $50K is bare minimum, and $75k could actually be quite comfortable after some belt tightening.
I have a lenovo t450 with Ubuntu and I have 3 monitors working from the dock. Don't know if it supports 4k or not, but it should, the dock has two display ports.
RJMetrics announces layoffs
Visualize GitHub Repos
I’m old but I can write
I missed in the article where the author's race is mentioned. Do you know him personally?
Because it's just asking them to turn over information the authorities need for their investigation, which is a pretty normal sort of request. None of this troublesome asking them to build new software.
University of Iowa System Aims to Predict Box Office Profitability
According to a video in the Ars Technica article linked in another post the Moai may have been toppled by an earthquake rather than inter clan warfare, so there may not have been war.
How to set up cron job for WP-Cron Control? What cron job setting shall I use?
Sorry about the ad, I use ad-blocker in firefox so didn't notice it, otherwise won't have included this link.
It's much easier to dev, test, deploy, and migrate when you are only supporting your own technology stack. It's so much easier than supporting all the random platforms everyone has.

Additionally, the account management side is so much easier. It's a pain in the ass to maintain license servers, and it costs more. If you're shooting for fast early user adoption and/or small and medium size businesses it's a lot less daunting to charge $x/user/month than $1000x + yearly maintenance, or all of the other on premise licensing schemes.
The Last Responsible Moment (2006)