skysight-inc/HackerNews huggingface dataset:
What I'm most worried about is a prohibition on software which implements government-unbreakable encryption, and after that, a prohibition on selling consumer devices with government-unbreakable encryption. This has nothing to do with All Writs, since 1. it wouldn't be forcing anyone to write backdoored software and 2. wouldn't involve a specific ongoing court case.

If revealing Apple's key for the iPhone's backdoor is a national security threat, then Apple can avoid this by simply using the key to open the one specific door a court asks (that's how the argument would go).
Yea, you're totally not trying to stir the pot...
I realized a while ago that most my interests fall into two categories.

1. Learning (e.g. studying programming, history, people)

2. Competing (e.g. FPS/RTS games, martial arts, archery).
One remarkable thing about The Name of the Rose is that the characters in it don't think and talk like modern people who happen to have been transported into the Middle Ages. They seem to think differently -- about what's possible, what people can expect from life, how you know things, what counts as an argument...

Possibly my favorite part:

"What you say is very fine, Adso, and I thank you. The order that our mind imagines is like a net, or a ladder, built to attain something. But afterward you must throw the ladder away, because you discover that, even if it was useful, it was meaningless. Er muoz gelîchesame die leiter abewerfen, sô er an ir ufgestigen . . . . Is that how you say it?"

"That is how it is said in my language. Who told you that?"

"A mystic from your land. He wrote it somewhere, I forget where. And it is not necessary for somebody one day to find that manuscript again. The only truths that are useful are instruments to be thrown away."

The "mystic from your land" was Ludwig Wittgenstein, who said that in his Tractatus 591 years after that conversation was set, in modern rather than medieval German ("Er muss sozusagen die Leiter wegwerfen, nachdem er auf ihr hinaufgestiegen ist") - "he must, so to speak, throw away the ladder after he has climbed up on it".
Page 18, footnote 7 of the government brief seems to explain this better
http://www.politico.com/f/?id=00000152-fae6-d7cd-af53-fafe53...

Edit- the title of this article is possibly misleading, it appears to be the iCloud password (not phone passcode) that was reset, which rules out the possibility of getting the phone to automatically back itself up while locked in a known wifi network.
Foucault's Pendulum was maybe the most transformative book I've ever read - it changed how I think about literature (and of course the Knights Templar). Ah well, guess it's time to reread it. :(
Can you comment on Linode intentionally covering up security breaches? That's post-2011.
Upvoted because downvotes without reasoning is pointless.

In regards to why I think you may being downvoted:

> reads like an oxymoron

The parent was being a bit facetious. We all know they are different operating systems. But it's far less likely that an operating system that no longer receives "feature" updates would be up-to-date on its fonts.

In any case, an oxymoron is (per Google):

> a figure of speech in which apparently contradictory terms appear in conjunction (e.g., faith unfaithful kept him falsely true ).

Which I think the parent accurately described. (It's apparently contradictory, but has meaning.)
How the EU-U.S. Privacy Shield Impacts Data Transfers
Not really. The fallacy is likely to come on the next line below the quote, where the quote gets used as an excuse to ignore all laws. including things like traffic regulations and public drunkenness.

The overall message is that laws and government is an obstruction to be ignored or demolished.

As i get older i learn that while it is good to question laws and regulations, many of them have actual factual reasons to exist. So blanket dismissal is as much a wrong as unquestioning obedience.

Government is a system, and like all systems it will require maintenance. And sometimes the job the system was constructed for is no longer there.

But just tossing the system out because it is in your way is as useful as throwing out a random server just because you need the rack space.
A search engine tells me that Cervantes died on April 22nd and Shakespeare died on the 23rd (1616).
> We don't have enough resources to create separate plugins/packages for the all IDEs.

It's seems to me that writing plugins for atom/visual studio code/sublime text is a much smaller enterprise than maintaining a whole single purpose IDE nobody will use because people want to code with the tools they already use.

I don't want to name it, but I use a specific open source language which through the years has seen many IDEs developped (at least 6). 10 years after the language has been released none of these IDEs are maintained yet people using that language cannot find a decent IDE compatible with the latest release and libs of the language. If people writing IDEs for that language would have focused on CLI tools first instead of sinking years of development into different IDEs the situation would be much different. Just my 2 cents.

The Go language for instance got it 100% . They realized a bunch of CLI tools any IDE can use, even for auto-completion, project management, compilation, ... the open source language I will not name has received a poor adoption despite being older than Go (and better, technically speaking) because it's a pain to use without the proper tooling. And since nobody's paid to maintain the IDEs ...

> Nevertheless, we are focusing on PlatformIO CLI which can be used as middleware for any IDEs, Continuous Integration Systems, Cloud Solutions.

That's what I'm talking about. It isn't as SEXY as an IDE yet 5 years down the road your cli tool will be much easier to maintain.
Vegetarian protein is also way more efficient than any animal-based protein. Why do we need crickets then? (honestly curious, no criticism)
Congressman Ted Lieu Statement on Apple Court Order
Has the FBI (or Apple) been able to unencrypt the backups from iCloud?
Posted a few minutes earlier: https://news.ycombinator.com/item?id=11137855
You are right, autocompletion is based on Clang.

Smart Code Linter is based on PlatformIO Code Builder. It uses our actual toolchain (-gcc/-g++) for the specified platform and synchronises with PlatformIO Build Environment.

It means, that CORRECT warnings and errors will be shown before you press "Build" :)
Comments moved to https://news.ycombinator.com/item?id=11137855.
The Lord of the Rings was written over the course of 12 years, and IMO Tolkien's writing greatly improved as he gained experience. I almost gave up reading The Fellowship of the Ring because it was so boring, but I'm glad I didn't, because by The Return of the King the writing has become fast paced and exciting.
If you can play the game to your rules, not theirs, having a single credit card can be ok:

* Pay the entire balance every month, ideally by direct debit (they don't like doing this)
* Ignore offers to increase credit limit
* Actively reverse automatic credit increases. My card company tried ridiculously hard to talk me out of reducing my credit limit.

This type of credit card customer is by far the minority (10% iirc), and least welcome to the card companies. Their ideal customer has multiple cards and pays minimum balance every month.

Student loans also count towards credit worthiness.

For a home loan, having little or no credit, isn't necessarily a deal breaker, but does limit lender choice. At least in the UK.

I dislike the game partially because the more indirection between spending and the actual money, the easier it is to overspend or lose track. This is the whole point, of course! So I just stick to the debit card for net, and actual cash from ATM when out shopping.
“All the alternatives are either unreliable and slow (bonjour/mDNS)”

I’ll agree with you on that, in certain cases. In my experience, OS X-to-OS X always works seamlessly, but Windows-to-OS X is much more annoying. It works around 70% of the time.

Say the hostname of the Mac on the local network is lorems-mac-mini.local. Then say I want to connect to this Mac over various services from my Windows computer (file sharing via Windows Explorer, vnc via TightVNC, nx via NoMachine, etc.). 70% of the time, providing lorems-mac-mini.local as the hostname works. The other 30% of the time, the same programs which worked just fine with the hostname as lorems-mac-mini.local all of a sudden won’t be able to find it on the network anymore unless the same hostname is entered without the .local part. Then, sometimes, neither solution works and the Windows computer can’t find the Mac at all unless I enter its IP address, which magically works.

Frankly, it became annoying enough that I now just enter the IP addresses of devices on my local network that I want to connect to now instead of their hostnames, since I know it’ll always work.

…in that sense, I guess I have to agree with your overall sentiment.
Earlier discussion: https://news.ycombinator.com/item?id=11137855
In theory, a change to the text representation would be significantly easier to deploy than IPv6 itself, because it doesn't require a change to the wire format.

An end user could tweak the text representation for their own tools, while continuing to exchange packets with the rest of the Internet.
there are tons of businesses that write only python 2 code (like, every finance shop I've ever worked or consulted at)
Flash is dying, so ignore that.

Debian has more than 96% of packages compiled for POWER and IBM is working on porting the reset and optimising things.

https://buildd.debian.org/stats/
https://wiki.debian.org/ppc64el

It isn't hard to create new ports, you just have to have the source code, but everyone uses proprietary software so new ports have zero chance outside the open source world.
Should Linode have not stored their key in a smartcard/hardware security module and calculated the TOTP using that?
Those are for "home use", for other stuff you use DNS. DNS is what they call "internet scale".
'WarGames' and Cybersecurity's Debt to a Hollywood Hack
I think you and I have the same understanding.

Even with no secure enclave, if a user picks a good password (which nobody does on a phone), the security is still unassailable.
From the HN-posted article from USA TODAY:

>>>The case has far-reaching implications for the privacy of millions of iPhone users, the Apple executive said. If the FBI is successful in its request, it will open a floodgate of requests from prosecutors nationwide.

District attorneys have lined up with hundreds of requests to unlock iPhones to solve criminal cases, the executive said. The idea that the case involves just one iPhone has been debunked, the exec said.<<<

If true, this could be a game changer...
The article is rather against the use of a colon at all, and that is not obfuscation.
Some resources are listed here (including an open source FPGA):

https://wiki.debian.org/FPGA
I thought exactly the same thing. I can imagine the author smiling at this.

<quote>What is true?</quote> he would say.
You must do really well in life. Search engining and correcting people all the time and all.
It's even worse than that... According to Wikipedia:

"Spain had adopted the Gregorian calendar in 1582, but England was still using the Julian calendar. Shakespeare's death on 23 April 1616 (Julian) was equivalent to 3 May 1616 (Gregorian). This was 10 days after Cervantes was buried and 11 days after he died."
Amazon defends that patent so it isn't possible to create such a service without cash for lawyers.

https://www.google.com/contributor/welcome/

You'd need to use a service like that.
MkDocs (http://mkdocs.org) or Sphinx (https://github.com/sphinx-doc/sphinx) along with ReadTheDocs (https://readthedocs.org).

I've also used Confluence and a few other tools. These are my preferences though.

What are you looking to accomplish?
How often Apple, Google, others, handed over data when the US government asked
>>These are all great reasons to have an emergency fund which covers the payments on all your debts (and your other expenses) for a few months.

That's not what an emergency fund is for. An emergency fund is for essential expenses, such as rent (or mortgage), food, prescription medicines not covered by insurance, and so on. If you are in the "I'll just use my emergency fund to pay off my debts in case disaster strikes" you've already lost the game.
During my last job hunt, I had an 8 hour take-home assignment that could be finished over the course of a week. They paid me $400 to do it and all I did was send a PR with some refactoring on an overgrown controller. I wound up not taking the job, but I remember being really impressed with this process and wish more companies would value a potential new employee's time like that.
Link to the Debian port:

https://wiki.debian.org/ppc64el

More than 96% of Debian is compiled for it and hopefully works ;)
The fish that vegans don't want harvested for their oil.
Apple: Government may have ruined its chance to get iPhone data
When you buy something with your card, the bank collects a fee from the seller which is more than the value of those incentives.
Hmm. I'll also add that owning a house is not as it once was.

Time was you got tax relief on mortgage interest, and crucially there was enough inflation in the system that a mortgage was an insanely easy choice. A little inflation would deflate your mortgage payment down to truly trivial levels over the life of the mortgage. Because of the removal of inflation your mortgage payment is no longer an ever decreasing proportion of your income, ignoring pay rises, so the only remaining factor is what you believe will happen to rents.
What would happen if your current ISP got problems and you had to switch to a different ISP with a new range of addresses (assuming you don't have operator independent addresses and not using BGP)?
I can't believe how many legendary people have died in the last few months. I still remember reading Foucault's Pendulum when it came out in English - I was too young to really dig the story at the time, but I can recall struggling to get my head around some his prose because he was just on a whole different level from the other books I had been reading back then.

I read Baudolino some years ago, but didn't come away from it with the same sense of awe that I got from reading Name of the Rose, or Foucault's Pendulum.
Italian author Umberto Eco dies aged 84
I'm willing to believe that you're right.

I think, though, that the government will take this as a sign that they need to never have the need to ask this question again. The demand that encrypted communications devices have some back door wasn't some capricious whim this year: it's been brewing for years, and only accelerated with the widespread adoption of distributing encrypted operating systems.

While I agree that this particular request is similar to demanding that citizens (or corporations), quarter troops, I think it's an error to look too far outside of the realm of communications with regard to the Constitution.
Those same government representatives don't see any problem with asymmetry between governments, because of course a good American company should respect the American government (or more to the point, is subject to US jurisdiction).
Apple Says FBI Changed AppleID Password, Losing Access to Shooter's iPhone Data
Nest Co-Founder Matt Rogers on the Secrets to Nest’s Success
Related:

https://www.defectivebydesign.org/dmca-anti-circumvention-co...
Agreed. I thought this quote from the article was pretty lame:

> Because once the patient has those test results, more likely than not, they're going to need a doctor's opinion to decipher them and to know what those results mean. So why not keep the doctor involved from the beginning so that, first of all, there is a logic for getting the blood test, and then there's an expert opinion there when the test results arrive to help you interpret them.

I call BS on that. Many, if not most, tests would NOT need any doctor involved if the test came back normal, which in the majority of cases, it does. Heck, when I go to my doctor NOW and have to get a test, if everything is normal I just get a phone call: "Yep, everything was normal." Explain again why a doctor needs to be involved in that process?

As another example, look at STD tests. Anyone can walk into one of thousands of clinics around the country to get a suite of STD tests, no doctor required, and only if a test comes back positive would you need to see a doctor. So why is this so different from other types of tests?
Show HN: CouchDB JWT Authentication Server
It's still an astonishing near-coincidence and I'm glad that you mentioned it.
https://news.ycombinator.com/item?id=11137855
Note that those commits they counted were only those to repositories with at least 25 stars, 10 forks, or 10 open issues, so those with small personal projects only or those working in private repositories only would end up with 0 commits.
Title changes are purely to comply with 80 character limit, otherwise as close to the original articles' title.
they should be adopting Argon2

I'm saying this as a proponent of Argon2, who has invested a lot of time trying to improve the codebase[0].

It currently isn't ready in large production. Efforts to stabilise the API are being spearheaded by someone apparently outside the project[1]. If you're reading this @lucab, thank you.

In the meantime, my Ruby bindings have been broken on three separate occasions due to API changes. You could easily say "Don't track master", but the one release has a tag of 20151206, and it's just an arbitrary a tag as any particular commit id. There is no branch from which you could apply "bugfix only" updates.

Two separate commits broke compilation. This commit[2] was a shambles.

Most importantly, they have commits going in two days ago that change the test vectors[3]. That means if you update your library, verifying existing passwords breaks. The hash identifier doesn't change ( in the way that bcrypt had $2, then changed it to $2a then $2y when they changed the algorithm) which means you can't just write an "upgrade hash" function. I can't find any documentation relating to this change.

It's important to note that none of this means your passwords are easily broken, or that it's insecure, which is the implication I often see thrown around when discussing Argon2 being "new".

[0] https://github.com/P-H-C/phc-winner-argon2/commits/master?au...
[1] https://github.com/P-H-C/phc-winner-argon2/issues/61
[2] https://github.com/P-H-C/phc-winner-argon2/issues/87
[3] https://github.com/P-H-C/phc-winner-argon2/commit/37e031213e...
DNS are centralized , IPs are not. When USA decides to block or take down you domain name, because they can, all you have left is your IP, they can't take your IP.
Funny, I was just thinking "I don't know what the security is like on my phone, but maybe I should look into moving to an iPhone next time."

Tangentially related, but my laptop mobo committed suicide a couple of weeks ago, and yesterday I popped the SSD into an external USB housing to grab my home directory out, only to find that all of my data were encrypted. I had no idea. Immediately frustrating, but wonderfully reassuring once I'd figured out how to get at it.
how do you "dual-boot Windows" on a Chromebook that has no Windows installation or license in the first place?
I plug this post enough I feel like I'm in advertising:
"...essentially all of the ad supported sites I visit are diversions" - https://utcc.utoronto.ca/~cks/space/blog/web/AdSupportedWebD...
This is factually incorrect, in addition to being bad advice. You take on debt when the net present utility of the purchase is greater than the price of the debt.

Here's a simple example to illustrate: you have an interview tomorrow, and you want to buy a suit to be sure you are appropriately dressed for it. The net-present-utility of the suit is quite high -- not having one may cost you the job opportunity. On the other hand, a suit is a depreciating asset. It is also not an income-generating asset (i.e. you may sell the suit the day after the interview at no loss of income.)

Using the reasoning of "debt for appreciating/income generating purchase" will preclude you from buying this suit, sensible though the purchase is.

PS: in an ideal world, you'd rent the suit, or any asset that has only temporary utility and pay depreciation+premium. http://john-joseph-horton.com/papers/sharing.pdf
Base85 naturally encodes 32 bits at a time into 5 characters, why is this using 128 bit math? I can't tell if it's a joke, with that date.

Edit: The commentary at the end suggests more of a joke, even though "It may be expected that future processors will address this defect, quite possibly before any significant IPv6 deployment has been accomplished." wasn't exactly false. I'm not sure why you linked an intentionally-bad RFC for a reasonable concept?
Yep. BazQux is a fantastic Google Reader replacement, and News+ for Android syncs to it.
Thomas Jefferson and John Adams both died the same day.
Basically, the article is stating to change the User-Agent to GoogleBot or Bing or whatever other crawler UA you'd prefer. While that's doable, that's something that is easily detectable and prevented, as all of the big crawlers can be validated against DNS.

Additionally, I would like to point out that I wrote a Varnish extension for the express purpose of validating User-Agent strings through DNS lookups, and is available here: https://github.com/knq/libvmod-dns

It was built because we had specifically a problem with bad bots crawling a large site (multiply.com) and this was one of the easiest ways to filter out the bad bots from the good, and to enforce robots.txt policies on a per bot basis. It works very well, as you can do any kind of DNS caching internally and prevent this kind of behavior, if that's your goal.
> work out - weights and running

> write

> read fiction occasionally

> read non-fiction various topics - including HN and Reddit

> help with cooking

> transport kids

> help with homework

> visit elderly parents and help them out a bit

> read a book with my wife - rather she reads aloud to me

> participate in community of faith

> hang out with my family

> watch a bit of TV as I drift off to sleep
If you do an nslookup on the IP, it should come up with crawl-xx-xx-xx-xx.googlebot.com, where xx-xx-xx-xx is the IP.
DO aren't small: http://news.netcraft.com/archives/2015/05/01/digitalocean-be...
You're forgetting a very important topic in finance: positive cash flow. While saving that $100/mo I have an additional $100 in my cash flow that can be diverted in the event of an emergency. Instead I have a $107.20 credit card bill. So how will I pay for that flat tire? You guessed it, I'll put it on the card. If you're the type of person who has a sufficiently large emergency fund and savings, you're probably also the type of person who doesn't need to spread the cost of a TV out over a year.
Everyone ends up contributing to the ad-focused world, instead. How many people post on reddit/twitter/facebook, vs their own blog?
If anyone wants more companies to comply with the GPL, you might want to consider supporting the compliance efforts of the SFC:

https://sfconservancy.org/supporter/
If user access to Google via IPv6 is considered a good tool of measurement, then The US actually has the highest rate of IPv6 adoption.
https://www.google.com/intl/en/ipv6/statistics.html#tab=per-...

Globally (again using user access to google as measurement) the adoption rate is still less than 10%, One could argue this could be considered still early stages of adoption.
Not exceptionally cheap, but:

https://omnia.turris.cz/en/
PatentData.io: Patent Data and Algorithms APIs Built for Developers
An Open Letter to My CEO
I chased down the link train, and by 'american politicians', they actually do mean congress. The link train stops here: http://www.opensecrets.org/news/2015/01/one-member-of-congre...

A senator averages about $3M, a house rep is about $800k.