skysight-inc/HackerNews huggingface dataset:
The encryption key used on the root filesystem is too hard to brute force. It's not based on some crappy password that a human created, it's some hash value stored in the hardware. In a scenario like that it is easy to create a key that would require all of the computers working till the heat death of the universe to crack.
They were likely using Square in violation of the EULA (many despensaries say that they're "flower shops") and just flying under the radar at the moment.
Nope. I've been there, did resonable research and had to start over.
The Athens Affair - historical cell networking hack (2007)
Contact less payments without verification is certanly not "nice stuff" but simply negligently and stupid.
What position did you get? Are you at the same till now?

EDIT: Your website, http://blairbeckwith.com/ says "You have reached a domain that is pending ICANN verification."
Can anyone that has tried a Ubuntu Phone give a review?

Is this Android under the hood as was the case with Firefox OS?
Iran says will resist curbs on oil output as part of global pact
I do wonder though that had Apple not predicted this exact scenario ahead of time (likely), how would they control this?

It's unlikely they can rely on hardware protections to provide this device locking, so is it the case that they would build the unique identifier into the image.

Optimistically some obfuscation could help but are the FBI/CIA/NSA really more than a few hops away from opening the binary image in a hex editor and changing it by hand?

If Apple firmware images for the iPhone are signed per-device then fine, but is that the case?

I don't know this but it seems unlikely to me that a custom device-signed build of iOS happens for every iDevice, and if that's not the case, I can't see how Apple can reliably restrict this with confidence.
Thanks for the feedback. It feels like making that move would uproot my life. It's scary.

I wish I had a collaborator or someone I should bounce ideas off of.

My background is in advanced mathematics and I've gravitated towards data science and engineering. Would love to be a part of the game development process, even if not developing directly.

If I were to use my skill set in game development it would probably be in MMO games, or something with lots of active users interacting.

I have been following the handmade quake blog. I like it, just don't have enough time to really do anything meaningful.

Advice?
I had no idea. The whole point is that, because we were not educated about that fact, the statement is likely incorrect.
I only seem to get the notification on the phone if it was a transaction initiated with Apply Pay. I don't get them when just using the contactless card.

(I think 'modern banking with apps and notifications' is what new UK banks like Mondo[1] and Atom[2] are aiming to do)

1: https://getmondo.co.uk/
2: https://www.atombank.co.uk/
IBM has released open blockchain with embedded Go scripting
We don't actually know that. The best we can say is that don't seem to use customer data. I'm not saying they do, but, we can't demonstrably say they don't either.
Yeah. Too bad Facebook's self-interest was so blatant; if their technology offering had matched their rhetoric it really could have been something amazing.
a message to everyone:

fuck america, and fuck all you idiots.
Needs to include synonyms for ingredients: no eggplant/aubergine.

Has some glaring omissions: doesn't find capsicum but does have red pepper.

Needs definitions of the ingredients. A cucumber where I am (Norway) means what is known in the US (at least in NC) as an English cucumber. But the site doesn't make the distinction. If I make a cheese and cucumber sandwich I would expect English cucumber to be used.

Nonetheless, an interesting idea and a good start.
There is a little more information here:
http://thenextweb.com/apps/2016/02/16/ibm-has-just-open-sour...
Obama Says Trump Won't Be President: 'It's Not Hosting a Talk Show'
Apple is sayong that the federal prosecutors are wrong in this assertion.

Apple is saying that any solution that is applied to specifically this phone can trivially be generalized to all other iPhones (or, at least other iPhone 5cs). Further, unlocking this phone in response to this order establishes a precedent that this is okay. You are much better off legally if you fight the first request than if you fight the thousandth request.
> If you are operating under the presumption that the government is always a bad-faith actor, then we have much, much bigger problems.

It needn't be "always", just (perceived as) too often. It seems fair to say the broad sentiment is that the national security arms of U.S. government have broached that barrier.
I think it is a foregone conclusion in the Chinese communist party.

Wrt. Singapore. There is a still a bit of unconquered land between that and the mainland :-)
I came in thinking this was something related to React Native (i.e open source OS for Android etc), but was pleasantly surprised to learn about this new OS, quite an achievement, seeing as they've been going on for 10 years.
Is this with Jessie on the XPS 13 9343? I'm only getting around 6 hours on mine.
Its nice because it makes payments significantly faster especially for small transactions.

When your in a busy shop getting lunch, or a bar, it saves a significant amount of time and effort.
wait, so there is no pin that you have to enter?
I'm in a similar boat, I have a mid-2010 MacBook Pro which I've added RAM and an SSD to. I'm dreading the day it dies because it's such a perfect laptop for me.

The new MacBook Pros are nice, I've got a work-issued one, but whatever configuration you buy is what you're stuck with until you replace it. That sucks.
the US can default if it wants to.
I'm now wary of indiegogo and crowdfunding laptops in general. I purchased the pi-top and, while it was a feat at the time, the build quality is so low that I just can't use it. The keyboard sucks, the trackpad is super cheap, and the plastic has a bulge which makes it uncomfortable to use.

So, trying to convert this comment into positive feedback for the creators: please spend the biggest part of your budget into the input devices. If you can't provide a good build quality, don't be cheap on the keyboard and laptop.
Forward Motion and Stop Energy at Startups
Tin foil wallets is already a thing these days.
Misleading title.

He wasn't spotted "skimming contactless cards" he was spotted holding an object and doing nothing else with it.
That takes time and/or money.

Even if the wifi doesn't work on your mac, but it does on your phone or some other device, you can be pretty sure your mac is not working properly.
Not English, American.
Poland to Invest $250B in Industry, Including Its World-Class Tech Sector
I'll support it!
...by buying one after they reach production, assuming the product has good reviews.
Its very, very convenient. More-so than cash.

1. I don't have to carry cash
2. I don't have to go to the bank to get cash
3. I don't have to count the cash when paying
4. No change to worry about.
5. Transaction logs via bank statement

The downside that this (OP) problem illustrates does need sorting and I was very sceptical of contactless before I used it, but its quite nice.
I´m an editor at various magazines, not sure if you are looking for a service in particular or just an individual who can check your work for you alone?
It's more likely that China will end up starting WWIII. They are claiming not only international space but also that of their neighbors.
For the record device is Verifone VX 680.

This must be the dumbest thief ever. They practicality signed their theft. With their real name.
This was a great write-up. I haven't been able to find any outside advice, so thank you!
nope, just swipe. It doesn't even verify the transaction with the bank because there is a £30 limit on transactions.
"And I would have gotten away with it, too, if it weren't for you meddling kids!" - Guy carrying POS device
Sources to back up your claim?
> Not sure what you mean by that. The US is a net food exporter by more than 70 million metric tons.

you're right, http://www.fdaimports.com/blog/how-much-of-u-s-food-is-impor... but it doesn't change the matter of concern: what happens to those other countries' economic development when a large percentage of their workforce is rapidly made non-existent.
You can also change the story's state (ie., "started") by going into the story and changing its "State" field.

Don't think it works with an external issue tracker, though I haven't looked closely at the Github integration.
It's a shame that Samsung apparently doesn't consider the laptop market worth their time anymore. Their Ativ Book 9 was a great little laptop.
Ask HN: What is the furure of bionics/Bio mimicry and soft robotics?
I plan to pursue my masters in related field what do you suggest , what scope will be near future. Though I have seen new startup emerge in these fields too
In that sense, wouldn't it be just as easy to insert the card into a POS device and supply the PIN?

The point of contactless is to make it less bother to use cards. One of the tradeoffs for that is reducing the security – it's sort of a necessary condition. Losses are limited to maybe £150 in the UK (that's 5 transactions at the maximum of £30) without further authentication, and it's virtually certain that the card provider will refund these transactions too if your card is used without authorisation.
What makes you think the FBI, or a certain assisting agency, don't already have CAs in their pocket? They only need one. The 'rogue CA' threat that encouraged the development of HPKP covers this scenario. Hell, DNS TLSA records (which are a part of the now dead DANE concept) let you pin to any combination of PKI CA, public key, or certificate. One day we'll regret not deploying this stuff.
Script your tmux to maximize the awesome
Naive person here: if this is a thing that works, how did it escape notice as an attack vector in the stages in which this technology was debated and standardized?
How to disable contactless cards

http://www.instructables.com/id/Disabling-Contacless-Payment...
At the bottom of the article: "Update on Ubuntu Phone security issue". Excellent advertising!
A few weeks ago a couple of people died after BASE jumping off of Bixby Bridge near Big Sur. After the first jumper successfully landed, she was swept out to see by a series of big waves. Caught on the second jumper's GoPro, he followed her down, jettisoned his equipment, then dove into the water to save her. So far only his body has been found.
Maybe someone else can confirm, but that doesn't look like any TFL carriage i know. In fact, it looks a lot more like moscow: http://thumbs.dreamstime.com/z/inside-modern-subway-car-1214...

and was posted on EnglishRussia a week ago: https://twitter.com/EnglishRussia1/status/697017291494596608

It may have existed before this...
What this guy can take advantage will be victims don't check their bank statements carefully and he can get away with the money, or else he will be in pretty bad shape to handle all the charge-backs. I will say the chance of a stolen POS is low as his goal is to get the money. If he borrows the POS from his merchant friend for this purpose, then that is not cool at all.

To me this is not a serious security threat to ordinary people.
I think this is great advise, one that I try to follow in my own spare time.

I think making some small games first is a good approach. Every next game should introduce some new mechanism or technique to learn. See also:

https://www.quora.com/Where-should-I-start-to-learn-game-dev...
Looks like this FB post is just a hoax.

Linked FB post is not an original. There is an older story here in Russian: https://tjournal.ru/22625-staling-money-with-terminal
I doubt he's actually skimming cards.

The risk-reward is pretty terrible. It's hard to subtly press it up against someone's pocket, and the range is pretty bad, and the first time anyone notices your account is frozen and you'll be prosecuted
A Cup of Java?
It does save you some time, but is this time worth the security downgrade?

I guess it is up to each person to answer this question.

The main issue I have with this is that no one gave me a choice : I received my card with this feature turned on and absolutely no way to have a card without it (I asked at the bank).
How is it spying if it's information that's already available to the company, either publicly or as a result of the person being an employee? It's not like they're sending goons to dig through trash cans.
You're correct its definitely not a London Underground I dont think its a UK train either
I'm not surprised some Starbucks drinks have a ton of sugar, but the 3 cans of Coke worth definitely puts it into perspective.

I grew up drinking my coffee with sugar and cream, but eventually stopped using sugar, and then ultimately drinking it black. If you can wean off adding compliments to your coffee, you will most likely acquire a taste for the bitterness of coffee.

Once you begin loving the true taste of coffee, it becomes a much more fun experience to try different types of coffee, it's much healthier, and taste much better to me (now).
For contactless payment, no. But the transactions are limited in amount (according to the article in UK it is 30 GBP and here in France it is 20 EUR). You can also pay only a certain amount before having to use "standard" method with chip & pin.
Speaking with the VP to Negotiate for transit prices? Sounds like a pita. AWS knows that you're an engineer who just wants to write code and has made that as frictionless as possible.

This goes back to my first point in that going into the DC requires staff with very different skill sets. It's not that it's not worth it, but there's a lot of costs involved part from the per-hour instance cost.
It's maybe worth mentioning that Type 2 Diabetes - which is mostly avoidable - can lead to blindness and lower limb amputation.

http://www.nhs.uk/Conditions/Diabetes-type2/Pages/Introducti...

When I feel like reaching for the sweets or over-sugared drinks I stop to wonder if it's worth losing my legs or my eyesight.
Not only it is HD, it is q too. :-)
The implementation of these is deliberately intended to make it less effort for small transactions. The risk of fraud is relatively low, the scope limited, and the impact minimal.

Contactless providers have obviously made the decision that the risk of fraud and the associated costs will be lower than the additional revenue received be encouraging people to use contactless cards more. In contrast to being negligent and stupid, it's actually pretty thoroughly thought-out.
Why? Phones are very small, so the amount of material in them is small, too. Compared to most other things one could do for the environment, this seems like it would be a waste of effort.
Exact same photo was making rounds in Russian Facebook few weeks ago, judging by the door and the handle I bet it is indeed Moscow, not London.

As in this case, no one saw the guy actually skimming cards. Also if he was doing really that, why not hide POS in a bag or his pocket?
OT but this post is well on its way to becoming the most popular post since Steve Jobs died.

https://hn.algolia.com/?q=&query=&sort=byPopularity&prefix&p...
I didn't know about the Task Manager in Chrome. I've used Activity Monitor before to see that some tab was eating CPU, but I didn't know it was so easy to identify which tab. The article was worth the read to me for that tidbit alone.
It's government subsidized, not carrier subsidized.
For those inclined, you can get neat little leather sleeves that have two pockets, one protected, one not, here https://www.faradaystore.com/rfid-blocking/wallets/.

Helps me keep my debit/credit card safe(?), but if nothing else, stops it clashing with my Oyster, which can otherwise be a pain.
Blood tests can detect a lot of cancers. I've been working in Japan for many years now. It is normal for people to get blood work done every year here. After age 40 they also do a barium test for stomach cancer. I think every year for that is a bit much, so I skipped it this year... They also usually do a chest X-ray every year which can catch tuberculosis as well as lung cancer. And for women obviously yearly pap smears and mamograms. Over 35 for men, I think you are supposed to get yearly prostate exams. I have not done this and I am planning to get an exam as soon as I can manage it.

Don't wait for symptoms. It's sounds like a lot, but doing the above is really fairly straight forward and not expensive.
yes that's not TFL by the looks of it.
And an OS can be made to do things that you may not want it to do.

If I write it in firmware, and write it for that function, you just can't "hack" it, as the functions just don't exist. Well, unless they plan on a verified OS. In that case, good luck ever getting it written. (Or look at TRON - possibly...)
It didn't. This is a known attack vector; the decision has been taken that the costs of cancelling fraudulent transactions are less than the benefits from allowing easier payment.
My first startup job I literally walked in the front door and asked if they needed a Unix hacker. They interviewed me on the spot. Not enough office furniture so I got a chair and the engineering lead sat on a DEC Alpha he had in his office.
Thanks for the tip! I frequently prune task processes manually, and I didn't know that killing all helper processes was safe to do. :D
Lucky thing he wasn't shopping a couple of years ago when it was near impossible to buy a PC laptop with a screen at any resolution other than 1366x768.

Also, I know they're uncool and all, but the author should really look at the Dell XPS series. They're rather expensive but hit most all of his points.

Here's a review of the XPS 15:
http://arstechnica.com/gadgets/2016/01/dell-xps-15-review-a-...
You and Cardozo are hyperventilating.

The DOJ can make this demand because Apple phones of this vintage are already breakable, and the DOJ is merely asking Apple to exercise a capability it already has.

Apple knows this, better than most, and has for many years. They have done security design work with governments as an explicit adversary. The 5C was insecure. The 5S is not: it has an entire additional processor, running an incredibly secure OS, whose entire job is to make sure that the phone keeps promises like these even if the DOJ orders Apple to sign bogus updates.

Apple is so committed to this that they've extended the "ten tries and you're out" promise all the way through their server infrastructure, so that if you escrow data into iCloud it will be nuked if someone tries to brute force it. Not only that, but after rigging their HSM cluster to operate that way, they burned the update keys, so that an attempt to change that rule will break all of iCloud.
I would say it depends on what you do. Mac laptops definitely have strong features that their PC cousins don't have, but...

The two Mac laptops I have, they get hot and the fan is noisy, especially my Macbook Pro.

The port selection is nice, but the ports are too close together unless you're using all Apple cables. A chunky USB key or mini-display port cable can block other ports. I had to use a knife and shave off the edges of a mini display port cable I had.
No kidding. If you're collecting payments through a credit card processor, this sort of scam would be shut down and reversed almost immediately, since the credit card company is directly in the middle of the transaction.
The solution is one Google away. "Which Chrome tab is eating CPU" and first hit.

I accept that this is valuable information, but HN is not really about obvious information that's easily searchable.
Or solid aluminium if you're looking for something more fancy: https://www.secrid.com/en/
I just got the new skylake XPS 13 and am loving it. Fantastic hardware.
It did not escape. That is why the contactless payment has very low limits, so the damage is not that big. Also, my card has to be really close to the terminal to work. (And I have a shielded wallet anyways)
Butter is not a precise enough word in this context. Most US butter I have had was essentially just milk solids whereas most European butter is cultured butter and has a quite different flavour. I introduced one of my US colleagues to European butter and his instant reaction was that he now understood why people put it on bread.
Too-Big-To-Fail Banks and Green-Ink Bonds
This is one of the least informed posts I've ever seen on HN about cross strait issues.

Unlike HK or Macau, Taiwan is a fully democratic state and has been for decades. Also unlike people in HK or Macau, Taiwanese don't consider themselves Chinese.

http://foreignpolicy.com/2016/02/12/we-are-no-compatriots-of...

The only way China could annex the island would entering a war. That would be extremely ill-advised considering the US committed to defending Taiwan in that case (due to the Taiwan relations act).
Ask HN: Accept a resume where candidate misspells name of current company?
Clearly this candidate has English as a second language. I have no problems with that, especially having lived in another country myself. However, my standards for a resume are very high. And I'm concerned that the candidate has managed to misspell the name of the company s/he is currently working for. I can only imagine what other areas they would make a mess of and I'm concerned their communication is so bad they would be difficult to work with, as the resume has some additional spelling and grammar errors. Any thoughts on this?
Agreed.

That metal pole should be coloured (dark blue, dark red, or yellow) if it were a London Underground train. I even Google Image Searched it, and cannot find a train that looks like that. Plus the shape of the pole is all wrong...
This is why I don't buy laptop computers... they are still overpriced toys. I mean, on a theoretical level, the idea of a mobile computer is appealing, but in practice they all suck very badly.
I've had a Leap motion since very early on, and it's been working very well. Especially the software update where they upgraded to a skeletal hand model has made many glitches go away. Both latency and accuracy have been great, so maybe the latency there is because of the animation? I'm not quite sure, but based on how good my experience has been with the first Leap, I doubt this one is worse.
Maybe? Do we even know what type of passcode they used? If they turned off simple passcode then they could have entered anything they wanted at varying lengths.
If you have access to the iTunes account you can do a physical backup with iTunes and then erase and restore that backup. It won't be pin protected.
Isn't that phone on Walmart locked with AT&T?
When it comes to my money, i want safe. not convenient.
An IQ test wouldn't indicate more neurons.
The best type of exercise is the one you enjoy enough to make routine.
WW3 TRIDENT COMES OUT OF MOTH BALLS,TURDS SAY THEY,LL ATTACK ISRAEL
My boss once made the point: "When you feel not well enough for work, but not sick enough for bed. Do home office!"
I took an intro to crypto course on Coursera a few years ago.
Let me correct it for you.
"Perceived security of their users".

A lot of it about PR.
What happens after Yahoo acquires you
Genuine question: is there a reason for the downloads to be hosted at source forge?
Every comment I've read so far has said that Apple should help in this instance, so I don't see the cheerleading-- yet. Except now I may provide it. I just read Apple's letter to customers, and now I agree with them that the very creation of backdoor software -- even if it's only meant to help in specific instances -- is a dangerous thing. Applying specialized knowledge that Apple has about iOS and iPhones, plus Apple's engineers, to creating an innovative backdoor that does not exist today, means that it can never be un-designed. It will never have fewer people aware of it, unless you kill them after they create the software. The knowledge will only spread. The software can only leak. The engineers can only get conveniently hired by a competitor or foreign government or our own government. I agree, it is troubling.
Google/EarlGrey: iOS UI Automation Test Framework