skysight-inc/HackerNews huggingface dataset:
This requires intimate knowledge on how the disk is encrypted by the software, I imagine. Speculating:

One can imagine that it is possible, for unused blocks on the disk, to simply encrypt a zeroed out block; essentially, initialize the disk to a state of random data. From the cryptotext, you wouldn't be able to know how much is used. However, for efficiency, I could see this not being done, and disk blocks that never saw use actually being zero.

That said, a previously-used-but-now-freed block might still contain the encrypted content, and just be unlinked from the filesystem. Unless freed sectors actually get zeroed, I would say that the number of non-zero blocks on the disk only indicate an upper bound on the data, and there may be less. (And thus, your backup might appear to have less data than the disk while still containing all the data.)

AFAIK, the filing doesn't elaborate, but I also haven't read all of the filing yet. Nor is this particular filing the only document in the case, and I sadly don't have access to the court documents. It would seem that in the United States, these are behind a paywall (see PACER), though I believe it should be legal to mirror them; it seems that archive.org is attempting to do this with their RECAP project, but they don't seem to have the case (or I can't find it).

The case ID is on the filing in my first post: "5:16-cm-00010-SP"; the format is described here[1]. Essentially, "5 <division of Riverside> :16 <last two digits of the year> -cm <"misc" case>-00010 <the case number, tenth of the year, I think?> -SP <no idea.>"

[1]: https://www.cacd.uscourts.gov/records
In random browsing of the Internet for networking-related topics, slide decks that I come across seem to use Comic Sans a lot more than usual too. I'm not sure if there are OpenBSD (or other BSDs) associations with that, as one of the first popular networking APIs was the Berkeley sockets.
> This is both to maintain control and to avoid having more than 500 shareholders, which triggers all kinds of additional regulations.

I _think_ the JOBS Act of 2012 increased this to 2000 instead of 500.
There used to be a few companies which did decision-tree style disposal of debts via the FDCPA and FCRA, which basically involve sending letters according to a flow chart and hoping one's counterparty is not as well-organized as oneself on the same flow chart. They worked. Very, very well.

The credit agencies, without any legal rationale for doing so as far as I am aware, started to simply ignore letters which they believed were being generated in an automatic fashion. The decision tree is still the same -- it's the law! -- but to be effective at using it you have to phrase your request in a way which doesn't suggest that you are an expert at writing that request (unless you are a lawyer).

The chief objection to decision-trees-as-a-business-model seems to be that the credit dispute industry was crooked-as-a-barrel-of-fishhooks (welcome to consumer credit, hope you enjoy your stay) and successful in getting people to accept terms like "Pay me $2,000 and I will successfully get you off the hook of $8,000 in debt. Although not particularly relevant to you, this will require writing three letters and waiting a bit."
Have you ever shipped large complicated software? Even simple changes take a lot of time.

For example the recent error 53 bug, in theory all they had to do was roll back a commit. But it still took weeks to get it out.
My analogy does not, but neither does the hypothetical scenario it was a response to.

> "should they be allowed to use EEG to get your phone's PIN code regardless of your consent?"

On the point of compelling labour, I question where Apple's sense of civic responsibility is. They should be eager to help their community and provide any assistance the FBI needs, provided the FBI is acting legally. They should not need to be compelled to help.

You can't compel Apple to have a sense of civic duty of course, but it sure is disappointing that they lack one.
All US CCs (Visa, MC, AMEX, Discover) extend warranties. I used this feature sith American Express. Its as easy to use as can be. They just refunded my original purchase amount.

I've also used price protection with Discover. Also easy to use but they take a couple weeks to process the claim and mail the check (a third party processes it)

Price protection is pretty unique - not too many cards have it. If you find a lower price later on an identical item they refund the difference. I used it to get black friday sales before black friday.
with nothing to show to the public

I am assuming investors are blown away by something before writing those checks.
I'm saddened to read such dismissive comments on HN. I think it takes someone to have been in a similar position to understand the plight of the OP. The CEO had a chance to fix this and do the right thing, but firing her was the easy thing to do.

> Seriously, I would never ever hire someone who wrote something like this.

The fact that nobody writes about these issues is the reason why some companies take their non-tech employees for granted.
For those looking at the where to start (http://www.haskellforall.com/2015/08/state-of-haskell-ecosys...) link in the post, here is the more up to date github repository (https://github.com/Gabriel439/post-rfc/blob/master/sotu.md).
what does that mean, you can't add collaborators to your 7$ a month project?
Boy Turns Folk Song to a Piano Piece
That's not enough if the machine can be tampered with and your data or keys copied while in transit or use. You can hide as long as the government doesn't know who you are. When they do, it's game over for you.
Kid sings about Taylor Swift
It's not a fishing exercise at all. It's a "let's prove that we can create a backdoor for further use" exercise.
Buying an option only risks the cost of the option.
No, http://9to5google.com/2016/01/11/google-play-services-in-chi...
It's a version of iOS without the trusted execution environment. It can be hacked.
I recently took a walk around Colma. The cemetaries were in fact the least creepy part of that town. Walkways leading nowhere covered in racially charged graffiti, lack of sidewalks along the roads, and sprawling parking lots occupied the area not reserved for the dead.

I walked past some sort of workshop that made tombstones. I took a picture of some tombstones on display outside, since they looked kind of cool. Some worker there started asking me: "Are you here to buy one? Then why the hell are you taking pictures of them?!" Not the most inviting place. The graveyards were nice though.
Sorry, but how does this confirm that? It sounds to me as though someone screwed up by changing the password rather than it being intentionally changed so they could request that Apple build an iOS with a backdoor.
Why was this downvoted? I'm sure this is exactly the thinking? Man HN can be weird sometimes.
> I think — and frankly, the document isn't too clear on it; it'd be great if an iPhone owner could clarify — is that this is the Apple App Store account password, and the phone has a separate and different passcode. The FBI knows the password, and can access the account, but not the phone; the phone I'm guessing won't back up until the passcode is given to it.

I believe you've basically got it. The iCloud password was changed (different from iTunes account), and the phone doesn't know the new password. That means the phone can't backup to iCloud. The solution is to unlock the phone and iOS would prompt you pretty fast for the new password, or you could go straight to settings.

So they need the pin to get in and update the password so they can get the data from iCloud or the pin to get straight in. They're stuck and NEED the pin (short of getting the CIA/NSA or someone to go hardcore and start capping chips or something else more extreme).

The 'erase data after 10 attempts' thing is an OPTION. There is a chance that's not on. The increasing delays when you get the code wrong would probably still make brute-forcing impractical.
That is correct, the reason for such regulation is depicted in the movie "Wolf of Wall Street", where Florida grandmas are being pitched some "incredible opportunities".

If you're a seller and you did not verify investor accreditation, you're opening yourself up to a lawsuit when things go bad with the investment - what if the buyer comes back and claims he was defrauded and duped into buying shaky securities?

The broker participating in such transaction, in theory, has a chance of having their license revoked due to participation in alleged fraud.
That's a part of what I'm saying. Their public strategy of late seems to be calling for things that don't make a whole lot of sense. They don't really need Apple's cooperation, and the politicians asking for key escrow are being ridiculous. You can be almost certain that people working at NSA know that. So how did those politicians find these ideas in their platform?

Washington is keeping conversations about the NSA in favor of their opponent, and I think they're doing that to avoid debates on things that really matter.

The assumption that I'm making is that NSA doesn't really care about Apple not giving them firmware and doesn't really care about key escrow.

One possible explanation for why those things don't matter to them is that they're much further on quantum computing than we think. A more boring answer is that they're willing to trade these things in order to satisfy the public.
Their product comes out in 11 days. I guess the bull case is people buy the thing. They are being secretive but here's Scoble and others being upbeat in their promo vid https://youtu.be/XxwrXacMe6Y?t=25s
elementary : no

Sourceforge 1m ago : yes

Reason : sourceforge tried to deliver something other than the users wanted, either by providing two misleading advertising on the download page or even by bundling adware/malware.

elementary provides something some people want and in exchange asks for money. This is something HN actively recommend again and again.

elementary just happens to be nice on a number of levels from letting you decide the price yourself to feeding the money back into development.
The expected number of fixed points in a random permutation is 1. This is an application of linearity of expectation: for a random permutation f of size N and a given input X, the probability that f(X) = X is 1/N, i.e. the probability that X is a fix point is 1/N. There are N possible choices of X, and so by linearity of expectation the expected number of fix points is N * 1/N = 1.

This doesn't tell you anything about concentration bounds or whatever, but it's a neat fact nonetheless.
I've only lived in the Bay Area for 6 years and I've watched it change dramatically for the worse. My friends who have been here since the 90s talk about it in biblical, apocalyptic terms. It isn't "just like that". Something fundamental has changed.
You should lose your career for saying that.
What's really going on with SaaS valuations
Simple question: what prevents the FBI from removing the components from the phone and using software they themselves wrote to drive the hardware crypto and decode the data they want?

It can't be that difficult, if you have FBI-class resources and some help from the NSA, to lift the components and make them work on a copy of the encrypted data.
I can't say that I'm bothered with Gitlab's interface, even though I've had much more experience with Github. It uses more colors which sometimes has the effect of making actionable clicks stand out better. Commenting on committed code is one such example, for some reason that UI feels more clear to me. Also, on github I sometimes find myself looking for the commit list, which I always find immediately on Gitlab. IMO if you're used to both UIs it's either a wash or slightly in favour of Gitlab - my issues are purely in the backend.
?? I think he's just saying that this is a pretty unlikely source of intel and not worth creating a massive security back door over. 5 isn't really unsubstantiated. I would be curious to know exactly what version of iOS the device has though
> "This is going to come back to haunt China at a time when growth is slowing and when they are going to need investment the most."

The market has a short memory. China can act this way for as long as it is profitable. As soon as it starts to hurt them, they can stage a 'revolution' and after a few years of playing nice, all will be forgiven. That's what scapegoats are for, transferring sins.
Does anyone know which version of iOS 9 the device is? Plenty of security updates just in 9.2.1 alone:
https://support.apple.com/en-ca/HT205732

I'm sure if must be an early version of iOS 9. Probably lots of zero days (that are no longer zero days) available.
The underlying point being there might not be much to learn from, if every problematic situation is swept under the carpet, so we can pretend it's not there.
My understanding is that the device has iOS 7 and full disk encryption wasn't enabled by default until iOS 8. Do we actually know if the file system is encrypted?
Ah, yes, this is one of those projects that I worked on mostly as a tool for my own use. Eventually, I plan to make a proper tutorial and everything, but first there are a few key things I ought to revamp which, over time, have become way over-personalized.
giving legal advice is always pretty tricky (even if that advice is 'tell the cops that you're invoking your 5th amendment right to silence, and say literally nothing else.')
10k distinct combinations-- if, and only iff, they used a 7 digit all numeric pin. The odds of this are not bad for most people, but in this case the person who had this phone has shown better than the average criminals level of OpSec.

One thing is for sure- for phones with TouchID where you only need to enter the pin on reboot, it makes sense to make the pin something other than numeric and longer than 4 digits.
They generally don't want their cap table to explode with randos, and if there's access to sensitive information, they obviously don't want the cases where unscrupulous party buys shares just to feed that data to competitors.

With that said, it's obviously in their interest to provide some liquidity to avoid their long-time employees from defecting to GOOG or NFLX or FB, which reward with perfectly liquid stock grants, so in case of demand from the buy-side an employer would orchestrate a secondary market transaction. On the buy side in most cases you'd see an SPV managed by the VC who invested in previous rounds (which helps with keeping the cap table low).

Ironically, for smaller VCs entire economics of their firms are based on these SPVs (which sometimes charge upwards of 2% management fee on top of 20% carry - and that's for a chunk shares sitting quietly doing nothing).
The ratio of available to utilized credit definitely does impact your credit score positively. That's why for a while, I would periodically ask for limit increases 1-2 times per year on all of my cards even though I will never come close to the limits. You don't want to do this too often though; I think asking for an increase may incur a credit pull. Too many of those can hurt your score.
The OP wrote an incredibly entitled and egotistical article. The person you are responding to isn't being dismissive, they are likely - like myself - shocked that someone thinks this way.
There are certainly more you omitted (similar to your code CDN for javascipt, fonts, etc.)... consider something like recaptcha.

In my experience, all those requests to api.recaptcha.net get forwarded to "www.google.com"

My experience has been that if a user for whatever reason cannot access the IP du jour for www.google.com (www.google.[cctld] will not suffice) then that user is prevented from using the myriad websites that rely on recpatcha.net.

Now, I could be wrong and maybe there is something I am missing, but in my experience this is a sad state of centralization and reliance by websites on Google. Quite brittle.
At least in the past, it was in good taste to just call your observation simply a paradox, and let the public decide if it's worthy to stick author's name to it or not.

Let alone that for many people, the name "Kuhn" is primarily associated with Thomas Kuhn, rather than Bradley Kuhn- adding to the confusion.
You can play the "game" in a fairly safe manner -

Get a no-annual fee credit card. Put it in your sock drawer. Take it out every 6-12 months and buy lunch with it. When you get home put card back in sock drawer and RIGHT AWAY pay off the amount you had for lunch on your bill. (You almost always can make payments on a zero balance. Citi was kinda weird about it but I make payments over my balance all the time and only Citi gave me a "can't pay over 20% of your balance").

Just having the card and not using it "counts" in your score. The lunch is just to keep the bank from marking your card as inactive and cancelling it.

If you feel you will be tempted to use it to increase your overall spending - then by all means avoid it.
https://news.ycombinator.com/item?id=11133663
I don't know if there is actual widespread resentment towards coders. I doubt it (outside sf of course) but regardless, the desire take down people who have good jobs and salaries, rather than spread the wealth to all is just the worst of human nature.
This felt like a really fair and unbiased overview of the pros and cons of using Haskell. It's really refreshing to see that kind of honesty without any sensationalism. And it seems to have a lot of really interesting social insights about the situation, which I found surprisingly interesting.
Leave my iPhone alone: why our smartphones are extensions of ourselves
same here, just keep in touch with former coworkers that you enjoyed working with, and eventually one will end up somewhere thats neat and/or successful
Is that really a 'horrible' experience? Once you've googled 5.x and you know it's Lollipop, do you not memorize that? I mean how often do you check your phone for what version of the OS it's running?
Ironically, I spent most of my childhood outside and still developed nasty myopia.
Rastafarian, undoubtedly. Bigoted, pedantic, anarchist, minimalist, freedom-loving, authority-hating, splintered - the parallels are many. Irie mon!
The iPhone has never prevented you from running your own code on it. It shipped with a javascript SDK and then within the year they opened it up to objective-c programs. They charge you $99 a year for the certificate signing service, but it's really no big deal... if you can afford an iPhone you can afford $99 a year. (Hell, I think these days you don't even need to be a paid developer, the free developers can run their code on their phones.)
False advertising is also illegal
Google and WhatsApp express their support to Apple in the FBI Encryption fight
There is no God but The Dollar, and Santa Claus is his prophet.
Just follow the headlines - Fidelity (FBGRX, FDGRX), Blackrock, T. Rowe Price (PRNHX), GSVC - http://gsvcap.com/charts/
They claim they make $8.15/hr after taxes. That's around $16k/yr. I don't know how well they are budgeting, but I wouldn't want to try to live in the bay area on that salary. This letter might not have been a good idea, but I don't see how she had a decent job.
Darkest Days – How to Survive an EMP Attack to the Grid with Super Quality
An open letter to Yelp's CEO
I'd think this is caused by efficient markets and competition between software companies.

After all, developer productivity is greatly based on tools, and the best tools are rarely free.
A Skeleton Key of Unknown Strength (CVE-2015-7547)
I too have extreme myopia, but am old enough to be suffering from presbyopia also, and frustratingly have the bifocals to prove it. While presbyopia is not technically the opposite of myopia, it is functionally the opposite.

> Presbyopia (from Greek presbys (πρέσβυς) = old man + ops (ὤψ) = see like, sight > meaning literally trying to see as old men do[1]) is a condition associated with aging in which the eye exhibits a progressively diminished ability to focus on near objects.

https://en.wikipedia.org/wiki/Presbyopia
As of the last couple months, you can add collaborators to your project.
Hanlon's Razor, eh? Very rational. Would you be interested in purchasing shares in the Golden Gate Bridge?
Easy to answer, but you won't like it: Avoid BSD-style licenses and use GPL.
Oh wow, I had no idea there was a "github with free private repos". Just signed up, can't wait to push a few projects.

Thank you!
Call for Stories: User Uploads and Takedown Abuse
A New Infographic on TPP and Your Digital Rights
>Putting up walls in the form of code signing, TPMs, rate limiters, password hash functions designed to slow down iterative guessing, aren't vulnerabilities in waiting.

It's all about threat models. If you're trying to protect your data from the government, anything that allows anyone but you to access the data is a vulnerability. Very few systems try to contend with such a threat model because it's really hard to defend against, and most people don't care about keeping their data from the government. Seamless updates are way more important to them.
Hmm, I don't get it.

I'm developing STM32 with ST's Standard Peripheral Library, GCC and make to compile and Seggar JLink to upload my code to the board. I'm happy with the workflow so far. What advantages will PlatformIO give?
Salesforce acquires machine learning startup PredictionIO
"Is that negotiable" is a less "direct" way of asking for a discount.
Really?

FB just took 13 seconds for me to load fully! HN took only a second. I suspect the situation would be way worse if the browser cache was cleared too.
Don't take this the wrong way

I'm actually surprised I'm the first one who mentioned it. People are very focused on the Zenefits as startup issue, rather than focusing on "What if it was say one of AIG's largest franchisees (or insert some conglomerate of insurance brokers, especially as famous as AIG) who was doing this." Once framed this way, it becomes much more obvious that the startup issue and how it relates to growth is a different set of issues and framing than "cheating on tests in insurance brokering/lacking proper insurance brokers doing the sales/place of regulation in insurance."

This especially becomes true when if you turn on the tv and hear the occasional pitch about loans against life insurance policies, or question too deeply why AIG was even betting in the subprime mortgage market and became systemic risk if they are an insurer.

It must mean that insurance itself is a kind of financial instrument, or cash flow, or something where you can create exchanges off of it in its own way(1). Which means there is fiduciary duty of some sort when the initial underwriting for the insurance is written.

This is going to be a headache for anyone who bought one of those policies and/or underwrote one.

(1)Technically speaking, options, futures, and forwards all started out as insurance contracts, some dating back as far as before Hammarabuai's code, so insurance contracts today must be some remainder of something special, I suppose.
You describe selling a call. Not buying a put. (jessaustin is right about these.)
As a big Haskell fan, the memory usage of GHC on certain modules is one reason I don't use it as much as I'd want. Several times I've had to double my swap file or increase the RAM on a VPS to compile some Haskell package, and I don't want to impose that on users of my software. Usually people don't build Haskell on their servers, just deploy binaries, but I do all my work on a VPS right now. Anyway, compiler resource use is a pretty big factor for me.
Look up Twitlonger. Various clients have that built in, and it basically but the first few words in the tweet alongside a link to the full text.
I am no victim of the paradox: from a practical perspective all my stack is free and open source. I say practical b/c I am sure that some drivers are proprietary but I have not paid for any end-user software license that allows me to complete my work since I don't know when.
Why? If foreigners want to buy stuff, we call that exports. Just produce more of the stuff they want to buy. Ie build more apartments (= higher houses) in SV.