skysight-inc/HackerNews huggingface dataset:
Amazon ECS/Elastic Beanstalk was painful to use. Their Docker Image Registry requires you to have rotating keys. You try to setup Docker registry authentication with their container service, only to find out they ignore the authentication settings for Amazon hosted registries. Deployment errors give unhelpful messages (and after much googling you realize it's due to some IAM policy that you were supposed to add with that bit of info hidden in some marketing page FAQ, meanwhile losing 3 hours of sleep). Redeployments take a long time.

Google Cloud, on the other hand, was truly easier to use. Redeployments didn't take forever, and it wouldn't try to fail over and over for minutes before returning an error like AWS.
Microsoft Cancels 'Project Astoria' Porting Android Apps to Win10 Mobile
Hmm, so Apple just hired away the dev of pretty much only secure open and cross-platform iMessage alternative?
Searching to see if a story has already been posted?

What an incredible thought! Though, given the noise to signal ratio round here, one that I fear you may be alone in thinking.
This is at the top of the front page already...

https://news.ycombinator.com/item?id=11180316
Is it idiotic to assume a company embroiled in a debate about privacy and security for a communication device-- the biggest driver of revenue for the company, hired someone in the secure communications space to work on communications products?

Also, Apple has a PR problem and can't operate without secure systems. Article title notwithstanding, it is a pretty big deal that while an intelligence agency is coming at them hard they hired a developer, in a very public manner, that's application is used by the very person who made the evidence of surveillance known.

This could be a signal to the market that they not only passively oppose this, but they are actively locking down their systems and they won't cooperate. Seems like a very sharp developer and as a bonus he did secure system messaging so it is not idiotic.

edit: I ammended post to reflect that he is likely not working on iPhone directly.
https://news.ycombinator.com/item?id=11180316
> You can rebind variables in ghci

No, you can't: http://pastebin.com/SdbKM7V7

In ML and Haskell, a new variable might shadow an old one (if they have the same name), but they are still different variables.

Shadowing is slightly harder to implement than rebinding, but it provides a useful guarantee for the user: the meaning of existing definitions remains stable even if new definitions are introduced into the environment.
That's not the point here Apple are trying to claim this requestby the FBI would be burdensome if ATT etc do far more then that defense is flawed and will not work.
It would also be very interesting to see how much cheaper and more efficient it would be to use a server built today using a low-power 1U blade with a pair of high-end SSDs in RAID0 (or maybe 4 in RAID10).

That iSCSI SAN was probably bloody expensive, yet a pair of SSDs today which are orders of magnitude cheaper would run circles around it. OP is storing text documents, so doesn't need a huge disk.
Yes, I know, and I use them in raw queries.
Yes, NDK is after all just a name for preconfigured GCC and Clang package shipped by Google :)

We use Clang 3.5.
> We too often fall into the trap of thinking that people must understand technical details of some thing X in order to understand implications of related thing Y.

Is that what you got from my post? Because it's not what I meant at all. I don't believe people have to understand the technical details behind it, but they do have to understand that the FBI forcing an unlock sets a very bad precedent which would massively diminish the security of the iphone/next iphone and this would apply to everybody, not just the tewwowist, AND that they're using a super old obscure shady law to back all that. There is a lot of data to understand and you can't easily grasp that from a single, short sentence.
Common Ports Cheat Sheet (including Malware Ports) [pdf]
> Can't watch without downloading.
3 reasons your business needs Mobile Device Management for its mobile workforce
> So does all HTML5 video

When there's the bandwidth to serve it, air often fails to load fast enough for 1x.
May be even using something like DHT on top of WebRTC could allow to upload/download those papers easily.
He's not been hired to work on messaging though. He's been hired to work on the Core OS team, i.e. the low level parts of iOS and OS X.
> "hmmm, it would be easier to buy this person than to hire him."

In what way did they buy him?

Apple didn't buy Whisper Systems. They hired Frederic Jacobs.
> Apple said, "hmmm, it would be easier to buy this person than to hire him."

Those two things sound the same to me. The guy was hired. What are you saying here?

> There is no one-person fix to secure enclave or any of Apple's other problems

Nobody said he's going to work on that.

> Apple's problems, such as they are, are systemic and cultural. Apple cannot buy its way into better cloud services or better Siri, or better security, and certainly not with the purchase of a such a small company.

You seem to know a lot about Apple's culture. Do you have some evidence to support your claims?
That can be nice in a lot of situations. e.g.

(+) 4 2
vs.
(+) <$> Just 4 <*> Just 2

I usually prefer the applicative style above to

liftA2 (+) (Just 4) (Just 2)

because it preserves the "form" of the original expression and generalizes to more arguments. ie. it doesn't require liftAn for whatever n number of arguments my function takes.
Well, this is true for any form of authentication. If you have information you need to update, you need to have a form of authentication, and authentication data can get lost. You just need to have good routines limiting the access to this data.

This is a problem for signing software, but also things like updating their webpage and content on the App Store. All these systems need to have authentication data exist, and if lost to people with malicious intent it could be lost.
Please quote the article where you feel it interpreted events poorly. And be civil.
Breathe
Ask HN: A blog on startups and business ideas
Hi everybody,

In my quest for a business idea I was thinking to build a blog posting business ideas, discussing them, having the users proposing their ideas, sharing relevant articles and so on.

What do you think? Might it be a good idea?
Here's some:

1. Paying for information is immoral. You don't want to make withholding information from you profitable for people. You don't want to encourage this kind of behavior.

2. When I wan't to play a game or watch a movie I want to do just that. I don't want to play "decide if the thing's worth the price". It's tiresome and unnecessary.

3. In most cases I wouldn't want to consume the information I'm pirating if my information environment haven't been polluted by advertisement to make me want the thing. You pushed some information on me that I haven't sought without paying me for the use of my brain so I won't pay you for the information you are trying to sell.

4. Some software is priced at levels directed at corporations. Entities whose income levels vastly
exceed their sanity. I'm individual. I can't afford that even if I'm rich for an individual. I still want to check out your software and maybe even use 5% of it's capabilities. I won't restrict myself just because you haven't thought how to satisfy me, neither I'll require that you think about me.

5. I'm a student. You'll get your money from the corporations that will hire me after I learn your software. Isn't that why you push your software in my school?

6. No. I won't play "pick the correct version/licence" so I can get the software as individual, student, scientist, whomever... I won't fill registration form. I'll just pirate the full version. It's easier and I don't want to stumble at artificial barriers.

7. Sharing is caring. I won't withhold the information I have from my friends especially if it effortless to share. I'll happily use information shared by my friends.

8. Business is trying to manufacture morality around copyright. "you wouldn't steal a bear.." and such. Listerine made you think your breath stinks. Flushable wipes people told you flushable wipes are necessary for you and flushable... Enough is enough. They can't be allowed to tamper with definition of theft.

9. Copyright makes lawyers flock to software. Lawyers tax everything they flock to. You should do anything you can to make lawyers move somewhere else or better yet stop being lawyers.

10. Copyright makes creativity very hard. You can't remix things without thinking "Do I have right to do that?" Not many people object to giving credit where credit is due. Many are prevented from acting by unknown, potentially exorbitant price they could pay for creating something that uses thing they took from internet. This kind of poisons creativity for a lot of people.

... I guess I'm out.

Any other creative moral justifications?

Or what are the moral justifications of not pirating software (beyond the obvious, creatives should be rewarded for they creation, and bit more sketchy, investors should get return on their investment)?
Cruise (YC W14): Machine Learning, 3d Point Clouds for Driverless Cars
We're the driverless car company. Our team is small, but we move quickly. In 2014, we built a highway autopilot that logged over 10,000 driverless miles on California highways, and we've since been working on some other exciting stuff.

We're looking for experts in:

Computer vision: https://jobs.lever.co/cruise/9561e23e-7b7c-4bf9-ba47-1111ec1...

Perception, tracking, and/or filtering: https://jobs.lever.co/cruise/a2499312-3804-47d7-aad8-12c7022...

Software engineering: https://jobs.lever.co/cruise/6793aef7-524e-4329-bb16-5b9f0a1...

For a complete list of postings, see https://jobs.lever.co/cruise
Why is this reasoning unsound? The fact that, after centuries of theoretical and experimental physics, we have yet to see stables neutrons in any configuration other than with protons in an atomic nucleus? We know pretty accurately the decay rates of single neutrons and now we know that all the way up to a tetraneutron that the particles are unstable on the order of minutes and seconds. What evidence is there that we are wrong?
They would interact with photons, allowing us to see some effects of concentrations of dark matter against background light sources.
The git:// protocol requires its own daemon (which is bundled with Git) running on port 9418 https://git-scm.com/book/en/v2/Git-on-the-Server-The-Protoco... . The standard Git daemon is unsuitable for GitLab I think because of the way it manages access control.

https://git-scm.com/book/en/v2/Git-on-the-Server-Git-Daemon

For this to work in GitLab we would need to find or write an alternative implementation of the protocol.

Sounds like a lot of work to me when we already have decent HTTP clone access.
Makes me ponder a 3.5" SD reader with a eject button though.
I will argue that this guy has none of the skills needed to up the ante on the current security model of the latest versions of iOS. What's not known is how security enclave works. But what is known is that it's firmware.

Something very much outside what we know about the secure chat app.

We also know that iMessage has never been known to have any fundamental security flaws.

I tried to clarify above, and I'll do so here again. I don't think the hire was idiotic. I think TCs characterization of hiring a security messiah was idiotic.

That is not anywhere close to reality.
Tangentially related: is anyone here familiar with automated analysis of research papers? I feel this is a field that would perfectly lend itself to machine learning, or similar approaches.

It would require extraction of meaningful data, be therein lies the rub. There are several large projects looking into collecting/sharing scientific data, mainly focusing on persuading and empowering researchers to share their full data sets.

But what can we do where the raw data is not available? Is anyone working on ways to reliably extract data from the millions of PDFs in research databases?

There are several open-ended questions here. If anyone knows of work in these areas, or is interested in this, I'd be very keen to talk.
Good point; I did some googling and I could find this CPU for sale at €32 apiece (it said 'refurbished', possibly reclaimed from old servers?), so if the intent is to build a cheap but performant server, the second-hand market might be worth considering before trying to build a raspberry pi cluster.

Actually come to think of it, CPUs from five years ago are not bad; I can see a future in a secondhand CPU market, given how CPU's don't really break from usage (normally).
Not all slopes are slippery. But Americans have had several hundred years to get to the grips with search warrants allowing the government to search stuff. Nobody seems to want to answer why an iPhone should be more privileged than — say — a diary.

Apple cannot decrypt the phone. Removing the brute force checks is not the same as decrypting it, because even in the nightmare scenario where the FBI get their hands on this modified software, and randomly start installing it without a warrant, it only works if they have the device and you've used a crappy pin code. If you use a strong pin, you're protected, still. Except for the whole contempt of court thing.
Yes, Apple has never denied that it is possible for Apple to create a signed build of iOS with some of the security stripped out. They just point out, rightly that it is not a good idea.

It follows that this is a pretty thin layer of security.

And it seems that Apple's signing keys are well-protected high value targets. Has Apple been "able to keep it secret" ? As far as we know, yes. But we don't know everything.
ECC can prevent program crashes, but it can also prevent computation of incorrect results. Even if your memory is basically reliable, cosmic rays still can flip bits. As RAM sizes go up and up, your chances of seeing a memory error increase.

My point, mainly, if we're talking about costs and power consumption, it isn't quite fair to compare server-grade hardware (which is more expensive than consumer-grade) with a RP2.
Hmm I was wrong, the current version of the built-in Git daemon has an --access-hook option so no problem there.

https://github.com/git/git/blob/56f37fda511e1615dc6df86c68f3...

The question is then: how badly do people want this and how many admins out there are willing to poke an extra hole in their firewall just for this protocol.
You can also get drives that can connect to a motherboard floppy port, and take SD cards.

http://www.floppyemulator.com/

Note that i think you need to use special files that are read by the drive.

I think they are meant as a life extension for older CNC machines and industrial looms.
It was tried before, with professional ARM server hardware:

http://www.anandtech.com/show/8776/arm-challinging-intel-in-...

http://www.cnx-software.com/2014/10/26/applied-micro-x-gene-...

Spoiler: Intel still has the upper hand (for now), at least in perf-per-watt.

Even the green500 (http://green500.org/news/green500-list-november-2015?q=lists... ) is dominated by Xeon-based clusters.
This was a somewhat popular program at the time:

https://en.wikipedia.org/wiki/2M_(DOS)

It worked by combining two completely separate techniques; the first, using more tracks, is pretty self-explanatory --- a lot of floppy drives, despite officially supporting 80 tracks, could actually move the head to 81st and 82nd tracks (rarely, even higher), and since the media was in the form of a uniform magnetisable disk, that let an extra 2 tracks worth of data be accessed.

The second technique was to reduce the number of sectors per track and the gaps between them, by making each sector bigger. To ensure interoperability with different drives rotating at different speeds, there's actually quite a lot of "padding" between each sector, as well as ID/CRC data for each one. If I remember correctly, in the highest capacity mode, 2M wrote only one huge sector per track instead of over a dozen in the usual format. This is similar to how hard disks have transitioned to using 4KB sectors internally, instead of the traditional 512B.
On Windows, they're mounted sync by default, so you can just remove them. Of course, if you do so while it's writing, you'll have a problem - though this was the same with floppies.

Windows used to require you to 'eject' but doesn't any more, which I think is due to the above. Please correct me if I'm wrong.
All You Need to Know to Become a Crowdfunding Investor
The transcendence of Pi
It is only required if you enabled write-caching for removable media. As far as I know this has never been enabled by default.
Ask HN: Would any Android phones be secure against an All Writs Act warrant?
Everyone is talking about the security of the iPhone against state-level attack. I haven't seen any discussion on how the security compares with that available on Android devices. Do any Android devices have anything comparable to the Secure Zone? I'm aware of the ARM TrustZone, but that seems to be open to vulnerabilities. What threats would the TrustZone mitigate, and is there anything more secure?
Doing this thoroughly would mean that we would need to provide some form of support aswell.
Google removes ‘OK Google’ voice search from Chrome
I don't really take orders from students, rob. Especially ones who don't read the article and are named studentrob. :)
I am looking forward to using an 8GB RAM 8-core 64-bit ARM phone with 2560x1440 HDMI, running Ubuntu desktop as my main PC in a year or two.

Currently only the quantity of phone RAM and the display resolution are hardware issues.
Yes, but I thought his point was more that whilst Lisp has a very easy, simple and regular syntax, ie. (func arg1 arg2 (func arg3)) and so on, it's less simple and regular when you get to the loop macro (loop arg keyword arg keyword...). Hence why I mentioned the Iterate library as something a lot of people use to get back to the regular syntactical appearance.

It's one of the strengths of Lisp imo; that you don't need to think much about how the parser is going to interpret your code (ie. missing semi-colons, whitespace, use curly brace here, square bracket there, etc.), just stick to (func arg1 arg2) and all you're left with is your own logic errors.
Salut a toi – truely distributed social network is ready
I think that it depends upon file system and the options selected when you format the drive. Windows defaults to options that mean you don't need to 'eject'. However, if you formatted on another OS you can select options that mean a safe unmount is required before yanking the drive out of the socket.
Fermilab discovers a new particle consistent with a tetraquark
Congrats on the new gig. I wonder if this is a sign of bad financial health of Open Whisper Systems ?
By windows. I'm not sure what parted/gparted defaults to.
Thanks for the explanation. A billion price tag for a browser with a constant low marketshare such as Opera sounded very surprising to me, but with AdColony it makes more sense.
You also had Sony's Minidisc that in the end could store 1GB in a physical format very similar to a floppy.

This was magnet-optical based though, thus it involved having a laser heating the media before the magnetic arm could flip the bit.
An idiomatic Erlang cluster will have great benefit from ECC memory. The problem is that bit-flips can yield the wrong results for a while before the system crashes. And you may not be able to tolerate these wrong results.
"I will argue that this guy has none of the skills needed to up the ante on the current security model of the latest versions of iOS."

What are you basing that assertion on?
Design kit allows you to build your own wrist-worn heart monitor
Billionaire Peter Thiel explains precisely how Mark Zuckerberg changed the world
You are correct. I failed to consider the implications of the different mechanics in the repl. I'm inclined to think the clojure repl is more conducive to experimenting. That is, you can change any part of your program to see what happens. I guess one programmer's sandbox is another programmer's hellish nightmare of mutability. For what it's worth, I would never redefine a var actual code, but I can't say it hasn't been done by others.
What a strange beast! A closed source language is always a tricky sell. Forth is never an easy sell in itself (unless you've already been bitten by the bug ;-) in which case it's a wonderful bonus). The tutorial is PDF only - which just seems a bit odd.

I'm intrigued by 8th - in a good way - and happy you've introduced me to it - but I do wonder what kind of uptake something like this will get.
Secure Group Chat with Unlimited Friends Using StealthChat
https://gitlab.com/gitlab-org/gitlab-ce/issues/13838
How does a nation built upon the concept of natural rights in turn deny non-Americans those same innate rights?

Looking back, as a history buff, I think the problem is that each generation felt that it was a special snowflake, so the rules didn't apply to them.

Early on we had terrible travesties -- the Alien and Sedition Act, for instance. But people came to their senses and it was repealed.

Over time, however, as each generation thought it was facing something nobody could have planned for, the boundaries got pushed.

Fast-forward 240 years, and what you have is the natural result of systemic drift. With each travesty and reversal, maybe you lose 1% over a decade. Add that up over 24 decades and its amazing anything is left at all.

Technically, both the Supreme court and the Senate are charged with preventing this from happening. But the Senate was gutted and turned into another House of Representatives when they went to direct elections, so the only thing those guys are good for now is pandering to the TV cameras. The courts tend to give wonderful speeches on liberty and such -- but usually end up keeping things much as they are. (They have nibbled a bit around the edges, but in general they've been more part of the problem than part of the solution. Part of the reason for this is the gradual and incremental nature of the drift.)

That's what's happened internally, with a huge set of checks and balances in place. Externally? It never had a chance.
Yup. And we've already been tagging locations with adresses for years through that captcha.
The paper: http://arxiv.org/abs/1602.07588
Popcorntime for Your Browser
I read it, Ian. I didn't see them call him a messiah anywhere. Is the word transparent like your comments are now?

Also, I'm no longer a student in the traditional sense. That's sort of a life mantra of mine, to be perpetually learning. You can think of it as the opposite of your world, in which you think you know everything.
Watch F8 – Facebook Developer Conference (April 12-13)
> In my quest for a business idea I was thinking to build a blog posting business ideas

Wouldn't that be a case of the "blind leading the blind"? :) That being said, if you end up doing it, I'd be interested if you can manage to get high quality and original ideas.

http://www.requestsforstartups.com/ might interest you by the way.
How energy friendly is it, though? Will it drain a laptop quickly?
The solar and wind stuff keeps getting better. We're already at an inflection point where the renewables are cheaper than the fossil fuels, in some areas. Oil is going to have continue to get cheaper if it wants to stay ahead. The longer Saudi keep their oil, the worse this gets. It's a vicious circle for them - they want to sell it all now, because the selling it in the future will be harder. This cycle ends in it being too expensive to get the oil out of the ground.

The Chinese don't like the fact that coal mining kills 1000s of their citizens each year, nor do they like the smog. They know growth in their economy has to come from an alternative fuel.

Making a better engine might slightly perturb the virtuous path we're on. If it does, it will slightly delay the trend away from fossil fuels. But mainly it is irrelevant.