skysight-inc/HackerNews huggingface dataset:
Do you prefer Mailgun over SendGrid for any particular reason (both offer free accounts)?
Is it only five fails on TouchID to delete data? I don't have the option to delete the data enabled on my iPhone... but it often takes more than five tries to just get it to work on my finger that is legitimately registered in touchID.
Intro/Overview:
http://deibert.citizenlab.org/2016/02/down-on-the-baidu/
> This forced journalists and writers to be concise and to the point.

... and remove any context, even more than they already do.

Don't we always complain about how computer and tech pieces are too simplistic and outright wrong, but catchy?
That wouldn't work well with loose wrists and other similar edge cases.
SOMA was great too, that ending!
Can you be convicted in the US based on evidence obtained with physical torture?

Edit: Looks like the answer is it depends and not a resounding no

http://www.nolo.com/legal-encyclopedia/evidence-obtained-thr...
The number of people that are sending emails asking the author for work is increasing. This could be because more people are working in the industry - but I'd guess that this has been factored in.

The second point backing this up was the reduced number of conferences. Assuming there were more people who have work then there should be more conferences - even if there were more people out of work.
Life in the Freezer
You can look in the Email Activity tab to see a history of events, along with their category (you might use this for "receipt", "forgot password", etc.).

https://sendgrid.com/docs/User_Guide/email_activity.html

If you're doing one-to-many campaigns, we also have a marketing email product called Marketing Campaigns that offers a more detailed content history.
The three priorities of software development:

1) Make it work (at all)

2) Make it work right

3) (If necessary) make it work fast
Oh thanks for that. I was already typing "Mandrill alternative" on google.
> The personal account here seems to conflate the possible race factor and the definite business factors that go into a pass.

I'm curious how can you actually determine that if you haven't actually ever been passed on for being black?

> It's up to us, the readers, to decide whether or not we agree with the author's analysis.

Actually its not. I've never menstruated in my life, but if a woman tells me about her experience of menstruation (as long as it matches the data), I really can't dispute it since because I have zero context to determine anything past cold hard fact.

And the fact is that the numbers are pretty stark when it comes to black founders being funded by Venture capitalists ...

And no. I'm not going to provide you the data. Educate yourself a little on the topic ;)
I am also interested in this.
My strong point is that I am a UI/UX Designer who uses code to design; design and code .. get feedback.. reiterate once or twice and boom your site is done.

One thing I lack is strong JS skills and I'm sure if I don't ramp them up it's going to hurt me in the next few years.
A couple issues:

* Decapping and feature extraction even from simpler devices is error prone; you can destroy the device in the process. You only get one bite at the apple; you can't "image" the hardware and restore it later. Since the government is always targeting one specific phone, this is a real problem.

* There's no one byte you can write to bypass all the security on an iPhone, because (barring some unknown remanence effect) the protections come from crypto keys that are derived from user input.

* The phone is already using a serious KDF to derive keys, so given a strong passphrase, even if you extract the hardware key that's mixed in with passphrase, recovering the data protection key might still be difficult.
It's important to emphasize something: iCloud will always be "backdoored", by design, and backing up to iCloud is what most users should and will be doing.

The reason iCloud data will always be accessible by Apple, and thus governments, is not because Apple wants to make it accessible to governments. It's so that Apple can offer customers the very important feature of accessing their own data if they forget or otherwise don't have the password. That is an essential feature, and why this aspect will never change.

When someone passes away, for example, it would be a terrible compounding tragedy if all their photos from their whole life passed away along with them, because they didn't tell anyone their password or where they kept the backup key. So Apple wants and needs to provide an alternative way to recover the account. (For example, they will provide access to a deceased person's account if their spouse can obtain a court order proving the death and relationship.)

Harvard recent published a paper (called "Don't Panic") that essentially states the same.[1] Governments shouldn't "panic" because in most cases, consumers will not be exclusively using unbreakable encryption, because it has tradeoffs that aren't always desirable.

And the reason why most consumer should be backing up to iCloud is similar: that's how you prevent the tragedy of losing your data if you lose your phone.

Just something to keep in mind when discussing the "going dark" and "unhackable" news items.

It is worth noting however that people who do "have something to hide" from governments probably won't be using iCloud, if they know what they're doing. Then again if they know what they're doing, they wouldn't use anything that is backdoored anyway. So the naive criminals will still probably be hackable, and that's about all we can hope for.

[1] https://cyber.law.harvard.edu/pubrelease/dont-panic/Dont_Pan...
I once worked on similar project. Each day, the amount of the data coming in is about 5TB.

If your data are event data, e.g. User activity, clicks, etc, these are non-volatile data which should preserve as-is and you want to enrich them later on for analysis.

You can store these flat files in S3 and use EMR (Hive, Spark) to process them and store it in Redshift. If your files are character delimited files, you can easily create a table definition with Hive/Spark and query it as if it is a RDBMS. You can process your files in EMR using spot instances and it can be as cheap as less than a dollar per hour.
Does anyone know if it re-encryptes the data after I change my passphrase? In other words, am I immediately more secure if I switch from a 6 digit pin to a passphrase?
Ethereum to be honest. I stated this elsewhere but PC isn't dumb and has a lot more data points than I do, although I consider myself someone who knows(maybe incorrectly) a bit about how these things seem to be moving.

Obviously, it would be insanely difficult to de-risk that, but I also assume that some of their assumptions are:

* [x]coin is a solved problem, as it transacts globally by default and has an API already.

OR

* [x]coins aren't there yet, super risky, and for the foreseeable future remain difficult and cumbersome to use programmatically so we will internally build some of that tooling and wait for less risk and hire adoption.

AND

* People, like previous versions of us(from p/j/collisons perspective) need this now and it is a huge pain point for many to do business internationally.

* Even in country this is totally full on wacky.

So, I don't think it is congnitive dissonance to believe both these things, and in fact we are over predicting here. That is why I am put out. Not because of anything Stripe did, but because I think they could be correct about how long this transition will take.
I've always thought if the Kindle Paperwhite was just slightly nicer spec-wise, it might be my perfect tablet. Batteries that last a long time, books everywhere, a better browser would be great, a way to take notes maybe, slightly more responsive screen. I don't need much more.
I've "unfriended" recruiters I've mistakenly added in the past.

However, if you're looking for talent, it is helpful to have such "connectors" in your network - without those recruiters, when I was doing a check on my network I didn't see some of the people I was trying to hire - this was only the case when I had switched jobs/domains.
> If you don't want companies to have the ability to put in backdoors, that's something you need to get Congress to pass

(1) I don't want that and (2) it wouldn't be constitutional. Congress shall make no law abridging free speech. Code has been ruled free speech.

> the risk is not increased by the software being created

That's fine if you don't believe what Tim Cook says about his product. I do. Regardless, whether or not the DOJ can compel a company to weaken its product is the question being asked. Handing over software or a signing key are both trade secrets Apple has a right to protect. Handing over the signing key certainly increases risk.
So the backdoor is built in such a way that Apple could have strong deniability. The NSA already did this with EC-DRBG.
The title is misleading. It's not affiliated with Google.
Teletext is the only exception to the general rule that TV based information services (interactive TV) don't get popular adoption. However it has to be remembered that in its day it was the ONLY live information service people had access to. Even rolling news was not available for most people.

The reasons interactive TV doesn't usually take off is because at a distance interaction via a remote control isn't a pleasant experience and the TV is a shared display whereas the interaction is usually a solitary experience.

Services where you can navigate to video/photo content is different category and can be popular if the content is good.

Games are another different category that can be a social experience and the challenge of mastering the controls is part of the experience not a barrier (in good games anyway).
Why This iPhone?
So anyone using a computer with any proprietary software on it has no expectation of privacy?
And then there's ATL. It's the airport code and refers to the city, but the airport isn't in the city.
No, it's five fails before Touch ID stops working until after a passcode is entered again.
I think it is weird that people say "plaintext has won" when basically every data format under the sun is structured, no one keeps data unencrypted, and transport protocols have basically grabbed all the mindshare as storage protocols.

But keep in mind I think it is bad for pipes only.
Definitely +1 on this. It's a great feature to see if A) emails are being sent and B) templates weren't messed up in some way.

(I have had many a batch email with "{{name}" or some other templating error, heh.)
My name is Ian and I'm one one of the co-founders of Enflux. We're making athletic clothing with 10 built-in motion sensors that track the 3D movement of your body during exercise. Our goal is to provide high quality feedback and coaching to athletes and everyday gym-goers through the clothing and a smartphone app. We'd love to hear any of your thoughts and are happy to answer questions!

We'll be launching on Kickstarter soon so if you're interested, please check out our website and sign up for announcments and early-bird specials on launch day.
Once helium gets on the atmosphere, it evaporates away from Earth.
This really doesn't make sense. Why not just implement Mandrill into Mailchimp like they wanted and keep Mandrill around also? I don't see it as an either or thing.

This move was probably more about the bottom line than anything else.
No, you cannot. Evidence derived from facts learned from torture is also excludable.
How much capacity do you think Erlang would provide, assuming no additional servers are added?
After five failures the you cannot use Touch ID to unlock and will instead need the passcode to access the phone again. This means that any approach to fooling the fingerprint reader will need to be done within five tries.
If you need to plug the phone into the cryptobox to decrypt it, they're going to be in one place anyway.
I know that Microsoft are not to be trusted with advertisements, and this is advertising. Who knows what executable code, like javascript, fonts or GDI+ objects, are involved with the wallpaper? If not today, what about tomorrow?
This reminds me. I've been wanting to ask (In fact I'm about to post a "Ask HN" about this in case anyone wants to have a discussion about it).

Similar to "Who is hiring", I am wondering if a monthly "Who is networking" would be a good idea. Or does something like this already happen here?

I'm thinking in terms of skilled people who are looking for other skilled people (with a different / complementary skillset) to collaborate on a side project. I'm doing just fine for myself as far as my career is concerned, but at this point I'm convinced startup life is in my blood so I am going to continue looking for that fix even if it's only to dedicate a few hours a week.

With all the news about VCs tightening their budgets, I imagine folks may want to start considering spreading their tentacles into many different side projects to see if anyone out there would be a solid partner.
> When someone passes away, for example, it would be a terrible compounding tragedy if all their photos from their whole life passed away along with them, because they didn't tell anyone their password or where they kept the backup key.

Would you really expect Apple to recover the data in this scenario for the next of kin? I certainly wouldn't, and I wouldn't want them to.
Wish there was something for medical manufacturing like pricepain.com - including a reduction in unecessary red tape. Sad, how it stifles innovation and actually harms more than it helps.
I think NOW it's the time to build that feature, ASAP. cc @etjossem
I realized the mixup but it was too late to edit.
The Government’s iPhone Demands Undermine Security for All of Us
Wave Magazine: Testing if the San Francisco mayoral candidates are human (2003)
The Dragon Dream is "half the size" of the latest model, which may not be a good benchmark. The largest airship aeros is building is quite a lot larger:

> And the ML86X will be nine hundred and twenty feet (nearly three football fields) long, two hundred and fifteen feet (more than the Tower of Pisa) high, three hundred and fifty-five feet (two Boeing 747s) wide, and able to carry five hundred tons.

That's 8.329×10^6 m^3 [1] each. That five hundred tons, by the way, is on the order which the logistics expert quoted claimed would be required for airships to be viable. So instead of 1000 dragon dreams, that's 2 ML86Xs.

But before total helium depletion is a problem, this whole venture is predicated on airships providing cost-effective transport when compared to planes -- that seems unlikely to hold up if helium prices rise thanks to the proliferation of mammoth airships like this one.

[1] http://www.wolframalpha.com/input/?i=(4%2F3)+*+pi+*++920+*+2...
Ars Technica also covered the story: http://arstechnica.com/science/2016/02/new-molecular-scissor...
Delighterr Is Hiring a Senior Full Stack Python Engineer
A lot of that stuff was already in the original threat model for the Secure Enclave ("assume the whole AP is owned up").
Not really. Have the option to set both a long passphrase and a PIN code.

The long passphrase is used to mount the encrypted file system upon startup, and the PIN code is used merely as a "screen lock", as a casual deterrent from your friends and casual thieves from swiping through your photos before you can catch them.

The file system can be automatically unmounted after a set period of inactivity, or if the user wants to unmount it on demand. After the file system is unmounted, the data is secure again and the long passphrase will once again be needed before anything can be done with the phone.
That ship has sailed. Engineer has been genericized. Some countries still have laws regulating who can use the term, but in most places there is a difference between engineer, and something like Professional Engineer (which requires licensing).
what isn't?
Then those people could turn it off. But it would be a nice option.
Ask HN: Why are there no glucose measurement sensors?
Why are there no sensors that one can buy at all to measure glucose in the blood so diabetics could build their own glucose measurement devices?

Is there something inherently hard about producing such a sensor say as a pressure or temperature sensor or is it patented and we're all screwed because of that?

Thanks!
Servo Webrender – Bay Area Rust Meetup February 2016
A basic PRNG might not be enough if you care about malicious collisions. There's plenty of cases of UUIDs being used in a context where a CSPRNG is preferable.
U.S.-China Showdown Keeps Inching Closer
Not true. Lync is a piece of shit. My current company uses Sky pe for business and guess what is the most annoying aspect: messages don't reach the other end sometimes!!!!!

It also freezes, a LOT. We finally forced our manager to let us use Slack and we love it.
Technical, financial, organisational, etc. yes, but almost the whole point of creativity is being able to come up with something original, new. If you don't you don't get paid or in this case you don't get paid for long. That's just how things work. I personally find it very sad, that a huge amount of (willing!!!) copy cats call them selves creatives and then somebody calls the whole misguided charade fashion.

edit: just in case - I hope this doesn't offend you, somebody=everybody, I didn't mean anything personal
As another poster mentioned, you can use Akka.Net with F# (that project was started and is still run by F# developers).

Another option with deeper language integration is mbrace: http://mbrace.io/

Vesa Karvonen ported CML to F# as Hopac, which has very good performance: https://github.com/Hopac/Hopac

Finally, there're Orleans and Naiad from MSFT:

https://github.com/dotnet/orleans

https://github.com/MicrosoftResearch/Naiad
If youre on a tight budget and IO is your main bottleneck it may be easier to purchase a number of decent spec desktop PC's with multiple SSD's in them. SSD's have really come down in price while performance and capacity have improved greatly. Same goes for RAM.
(Assumption here is that time is less of a concern than cost at the moment and youre not averse to doing some devops work. Also assuming that the processing youre talking about is some sort of batch processing and not realtime)
This way you can try a number of different strategies without blowing the bank on AWS instances (and worst case you have a spare workstation)
Instagram now shows how many times your videos have been viewed
Computers are here to help us. Creating abstractions is the name of the game.

"Technically correct" isn't the kind of correct we, as humans, want here. Plenty of languages get it right the way you would naively expect already, as shown here http://0.30000000000000004.com
Vyrill: Discover products via video
While the majority could not care less, and would be more than happy to sell out their own privacy for a "safer" world.
The more people I meet with autism the less idea I have what it means as a category.
Yes, it should. It's illegal for a private person to steal unencrypted cable, it's illegal for a private person to spin up a bunch of servers to siphon information from a corporation's computers, it's illegal for a private person to tap into someone else's unencrypted phone calls, etc.
Ask HN: Who is networking?
I'm wondering if this wouldn't be an interesting monthly post? I just read some comments in a thread about web design jobs are drying up.

I think there are plenty of people out there with great skills who want to collaborate with you on side projects (myself included). I've spent my life in web development, but just never had enough of an eye for web design to feel confident about that aspect of my work.

I'm guessing there are plenty others out there in similar positions. Just want to work with extraordinary people on side projects who complement your own skillset so you can build something amazing that people need.
> Touch ID isn't re-enabled until the phone's passcode is used.

Do the docs confirm that there is no way around this? I'd guess generating the encryption key requires the passcode, which is discarded immediately, and Touch ID can only "unlock" a temporarily re-encrypted version which never leaves ephemeral storage?
My first response was "Did geoguessr get bought by Google?"
It's also about reporting statements verbatim without trying to discern what the truth is. Writing down a public statement is basically just relaying a message; at that point you are writing a press release for them, not doing journalism. And then you wonder why they replace you with a Reuters feed...
I think they do when they get a court order authorizing it from the estate.
The video is incredibly cool.
Is that Cathedral Cove?
10 years ago when my wife was pregnant, a dianostic ultrasound cost $800, took 15 minutes, and the machine looked ancient. A 3D "fun scan" was $150, took 1 hour, and the machine was state of the art. Go figure.
He was in the business of offering problems to solutions

Yup, sounds like some lawyers I talk to.
It seems that abs should be as simple as ANDing with a bitmask that has the sign bit set to 0 for IEEE floating point.
Ten years ago I made exactly this migration for a SaaS shop's helpdesk & dev team. At the time JIRA was easily the best value & most customisable solution for integrated ticket tracking. I learned Java & Groovy to write extensions for it. It wasn't just CTO/CIO friendly, JIRA really was the great choice at the time in both UX and ease of implementation. Especially if you'd been bogged down hacking RT or GNATS or permanently scarred by anything from Rational.

What I realised is that eventually they're all ad-hoc, informally-specified, bug-ridden, slow implementation of a workflow engine and metadata service. Your choice is mainly of the interface and domain-specific layering violations.

Troll-friendly soundbite: Atlassian is the new Rational.
Binary can't represent 1/5 finitely, so binary floating point will always feel weird around things that we can represent fine in decimal, but can't be represented finitely in binary.

For comparison, you can't do anything about representing 1/3 + 1/7 accurately in finite decimal representations
No, the chief protection against the PIN code hacking comes from the retry counter. The FBI doesn't need the crypto keys, it just needs the PIN code. So it needs to brute force about 10,000 PIN codes.

Any mechanism that prevents the application processor from either a) remembering it incremented the count b) corrupts the count or c) patches the logic that handles a retry count of 10, is sufficient to attack the phone.

Somewhere in the application processor, code like this is running:

if (numTries >= MAX_RETRY_ATTEMPTS) {
wipe();
}

or

if (numTries >= MAX_RETRY_ATTEMPTS) {
retryTime = retryTime * 2;
}

Now there are two possibilities. Either there are redundant checks, or there aren't. If there aren't redundant checks, all you need to do is corrupt this code path or memory in a way that prevents it's execution, even if it is to crash the phone and trigger a reboot. Even with 5 minutes between crash reboot cycles, they could try all 10,000 pins in 34 days.

But you could also use more sophisticated attacks if you know where in RAM this state is stored. You couldn't need to de-capp the chip, you could just use local methods to flip the bits. The iPhone doesn't use ECC RAM, so there are a number of techniques you could use.

https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-630.pdf
Live Stream of the Express TC Community Hangout
Using a strong pin is pretty annoying, and a relatively visible signal when using the phone on the street etc, So it can be a good filter(maybe via street cams) to filter suspicious people - which isn't a bad goal for law enforcement.
Since I first heard about CoreClr (or whatever they were calling it initially - .NET Core?), I've been thinking that they are gunning to displace Java, which is looking increasingly sad in comparison to C#.
Sr. Software Engineer, Biomedical Research – San Diego