skysight-inc/HackerNews huggingface dataset:
Gates is not in charge of Microsoft anymore... and hasn't been for a long while.

Actually, my best hypothesis is that, remembering that the Gates Foundation, which is the organization Gates is actually involved with now, works a lot in government/policy circles, Bill himself might have views that are more common within that circle that within the tech community. Whether that means that he is taking this point because he has more information, less information or just different priorities, I do not know. I don't even remember if Gates took any position on the original crypto wars.

I personally find that the balance of arguments weights much heavier on the side of security and privacy, versus surveillance, and that creating this tool and setting this particular precedent would do more harm than good. I can still imagine a world in which Gates disagrees with that without being knowingly evil, though.

Actually, when it comes to Gates in particular, I admit that when I was younger I spent a long time thinking of him as "knowingly evil" (or at least selfish to a extreme degree) for completely different reasons. Later I realized that he might have simply put priority on different ethical axioms than my high-school self did... and in the balance of things might end up having been a higher positive force in the world than a negative one, by far, see e.g. https://en.wikipedia.org/wiki/Malaria#Eradication_efforts . This doesn't mean I agree with him on the issue at hand, though.
Fair points, though to be fair the iOS platform is by and large the most secure mobile platform we have (please correct me if I'm wrong, you absolutely know better than I). Still, as long as the backdoor remains, it will always be possible to carry out malicious updates like this.

As far as I understand the secure enclave has been updated a couple times since it's introduction, so I legitimately hope this was a v1, with secure enclave v2 (without update functionality) waiting to be released in Sept.

As a side-note - one of the things I struggle with is I'm not convinced that Apple really had a tangible reason to make it as secure as it is, especially when their main competition was android, which is fairly laughable with security thanks to the OEMs.
There is the library 'libc' which is a collection of interfaces to (g)libc functions together with the necessary constants and structs [1].

There is the library 'nix-rust' [2], which aims to provide a wrapper of 'libc' in idomatic Rust.

Unlike 'libc', 'nix-rust' does not have a consistent code quality and organization yet. However, Both are missing various bindings for various platforms.

[1] https://github.com/rust-lang/libc
[2] https://github.com/nix-rust/nix
You left off the sarcasm tags.
The SOLID Principles in Real Life
Well, I have experience with Linux for the last 20 years, since I was 12 years old, so it was not that strange to setup Arch for the first time, way easier than the early Red Hats back in the days. I also have long history with OSX, including the early 10.0 builds until 10.6. I honestly think that having a nicely configured computer build with a simple distribution, like Arch, is much easier for day-to-day work than an OSX installation, that can break lots of things when there's a new version out.
> you need to run it in it's own process

Assuming that you can detect OOM in userspace at all, which usually isn't the case on Linux (or any other system with overcommit).
Hacker explains how he put backdoor on Linux Mint downloads
http://www.sonymobile.com/global-en/products/accessories/mhl...
Unless tinc improved vastly its protocol since nine years ago, it should not
be used for anything, as the protocol was custom-defined by a cryptographic
amateur. It used the same key (bitstring) for encryption and HMAC
authentication, or didn't do control messages authentication or integrity
protection. There were several more problems with it.
This is an iPhone 5C, which does not have the "secure enclave" feature, and it isn't even clear helps as Apple has stated to reporters that it is possible to do what the FBI wants, so we know the software on that component must be mutable. If it was actually impossible to do the thing the FBI wanted them to do then we would not even be having this discussion today: Apple would just say "can't, sorry" and the FBI would be forced to move on with their lives as nothing Apple could do would help them get access to the device.
A month or two ago I asked for a fix to FX queries (in the wrong part of github - in fact I probably did everything wrong as I know nothing of github) - within the day someone had added the new syntax parse.

Literally magic. <3
I think the parent is talking about architecture around memory, not the entire program design.

> if you believe the language will keep you safe

safer != safe.
Possibly, but what happens if a faulty script does a `rm` too much in that short time window?

The kernel fix prevents that, using mount flags alone only restrict the vulnerability but it doesn't make it go away.
These things are not taken lightly and are done to reduce more harm or to avoid death. What's the alternative?
No: it is a backdoor that everyone in the world knows of, including the FBI, which is why this is even a question. Apple is the only party allowed to change the software running on the device, using their software update encryption key: this is a backdoor into at least this device (an iPhone 5C).
Thanks for your opinion.
Do you think this is a problem can be solved? Or the two parties will just keep fighting without an end?
> Here's hoping that the iPhone 7 has a secure enclave that either 1.) deletes keys on firmware flash, or 2.) doesn't allow it to be upgraded ever.

If you hope for that, consider the legal base on which FBI made the current request: All Writs Act, which is, in full:

https://en.wikipedia.org/wiki/All_Writs_Act

"(a) The Supreme Court and all courts established by Act of Congress may issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law.

(b) An alternative writ or rule nisi may be issued by a justice or judge of a court which has jurisdiction."

Note it's not any kind of law that regulates any form of encryption or communication security, a lot of laws with such topics were fought through the years! It's just "we can demand anything we want."

Then consider how long such Secure Enclave will last if this precedent on such use of this Act is now to be made.
No, the Patriot Act was ready to go long before 9/11.
The disingenuous question (FBIvApple)
What happens if a stray `rm` runs while `grub-install` runs?

The kernel fix prevents that, using mount flags alone only restrict the vulnerability but it doesn't make it go away.
Legal precedents are only set in legal judgements, aren't they? I think Apple unlocking the phone would only set a cultural precedent.
I won't dispute that the vast majority of C++ developers seem to be indifferent to static analysis (look how many decades it took John Carmack to come around...), but the initial video presentation did cause a noticeable stir, and I would expect the actual release of the tool to incite a comparable reaction.
I ended up still buying my certs because no solution seemed like something i should and could easily automate :/
No, Mr. Gates, cutting this ribbon would mean that all the other ribbons are cut by default. Not just by your allies, but by your not-so-friends in North Korea.

It's not about cutting a ribbon. It's about putting a hard drive in a box that self destructs when you try to open it. What your friends are asking is not to cut a ribbon, but to make the box open safely with a master key. Your government could not even stop wikileaks and your own employee to turn against you -- how do you expect the world to trust them with master key?

Overreaching beyond means and have it blow up in the face is quickly becoming an American virtue in the 21st century.
Yes, but in the second case he'll win the sympathy of the laymen who will think "hey, if even bill gates says they're wrong, maybe they're wrong. The guy's a genius". These people are less vocal than tech readers, but they vastly outnumber them.
Look ma, I made an Alanis Morissette cover: http://imgur.com/zVZNJnm
Gates does some great things but he's not thinking far enough into the future here.

If our law enforcement cannot understand that terrorists will simply switch to use another encryption tool, then we have a much bigger problem than unlocking a single iPhone. Our security force does not know how to keep us safe. I'd rather they figure that out sooner than later.
Mountain Training, a Different Proposition
Yeah, I'm amused by the idea that a 4.7" screen with nearly the same resolution as the 13" laptop I'm using right now is somehow insufficient for media.
...until battery-swap technology was invented.
lindt chili chocolate, good stuff.

http://cdn2.blisstree.com/wp-content/uploads/2008/06/lindt-e...
> Hydrogen has the "water out of tailpipe!" hype about it

¹ May or may not contain traces of hydrogen peroxide, but shhhh.
Doesn't the secure update mechanism simply permit access to the system partition? This late in the game, how can that possibly give Apple user filesystem keys? Those require the PIN or password. An OS update at this point can only permit rapid brute force iteration. Obviously "unfettered access to the device" is really useful to steal user keys while the device is unlocked, but it's not so helpful after the fact.
Shamir's 3rd Law of Computer Security: "Cryptography is typically bypassed, not penetrated."
The tech scene loves to cluster, that's why Silicon Valley is so expensive. And there are already tech clusters in London, Cambridge, Edinburgh, Dundee, Liverpool ..

(I'd also question the "good transport links"! The M4? The overpriced railway?)
I don't think this is a fair assessment. Apple is being asked to create a firmware version without brute force rate-limiting. With a sufficiently complex passphrase, the FBI is still SOL. They're not being asked to create a firmware version that would decrypt the disk - which would be impossible due to the iPhone's security architecture. The fact that only Apple is in a position to sign firmware that could do this is a positive thing in this context. The only alternatives are no firmware signing at all (so everyone could run this attack), no updates at all, or enforcing the rate-limiting in a HSM (which is what they're doing on the latest generation iPhones).
Secure Enclave is irrelevant here. Even without Secure Enclave the data on iPhone 5C is encrypted with the user's password and Apple doesn't have access to the data as it doesn't have user's password, contrary to your claim that "Apple has the access to the data." No, FBI has access, but only to the encrypted data.

And FBI can't decrypt it. They locked themselves out of the phone, actually. And the phone is not the private phone of the killer, he destroyed that one, and his computer too. And note that he didn't care about this phone.

FBI demands from Apple to change their product (iOS) to make the encryption cracking attempts by FBI easier.
Don't pigeon-hole yourself, most people just want a phone that can load facebook and is cheap. The number of people who care about security is definitely rising, but they're still in a fairly small minority.

Also I'd venture that Saurik is quite the opposite of an "Apple hater", as he created cydia (https://cydia.saurik.com/), and contributed arguably the most to the iphone jailbreak community to date.
I'd be interested in seeing a breakdown of these quality of living rankings by things like wealth, socio-economic class etc. If you are wealthy I can only imagine London is more like one of the top 10 cities in the world to live in.
Ratopak Trojan – Russian banks under attack
Yeah, absolutely.

I also love the idea of a phone where I can leave the physical design uncovered and on display. I would never, ever use a normal phone without a case--I'd be replacing them every 6 months--but a ruggedized phone wouldn't need one, if they're as good as they say.
But the likes of Bill Gates will get quoted on the news headlines - most people don't care but will hear "Bill Gates says..." and think "well, if the experts think that"
Telegram has now 100M Monthly Active Users
Oh damn. I share my Clouflare IP with just bullshit. I wonder if this is part of the SEO ranking?
From your story, it sort of sounds like doctors are the villains. Isn't it their job to choose the best medicine for their patients. If an uninsured patient asks for a cheaper older one, then they should be prepared to find that. But then perhaps you could pass the buck to the patient for not finding a doctor willing to search for cheap drugs. It just goes round in circles.

For insulin, is there even such as thing as "better"? It's not treating a disease with some probability of success that you want to maximize. It either works or it doesn't. At least that's my limited understanding.
It's also the good reason why having systemd mount efivars read-only would have been the wrong thing to do.
This is my goal. Do you have suggestions on how to get started? Experience and skills-wise, I have no problems. I currently build low-latency trading systems for a bank, but I'm also adept at web work as well.
More or less correct if fully trusting any signed code by a third party (Apple) is a backdoor. For what it's worth, signed code imparts security benefits to Apple and Android users who indeed can't be trusted to not screw up their own phones.

Thing is, this entire system is based off of trust. If people lose trust in Apple, then they lose trust product. While even Apple can't decrypt the data, existence of malicious signed code means you can't trust signed code.

FBI would have done better to ask Apple in secret. Apple really made the only possible choice when faced with a public request.
Yes, the precedent is the key thing here.

Let's say that Apple crafted an update that does what the FBI wants. That in itself wouldn't put other iPhones at risk, as long as a signed copy of that malicious update didn't leave Apple's custody. The FBI hasn't even asked for that. They say that Apple could do all the work in house. Furthermore, it's unlikely that this malicious update would work on newer iPhones.

But the precedent would be established.
In this particular case, I'd write

var el = $("<a href=/ class=link>Link</a>");
The non-replaceable battery is disappointing, but understandable: a removable battery cover is a seam that has to be water/dirt-proofed, and a point of failure when dropped.
If the safety problems are solved, yes.

But just one tiny explosion, as in the Tesla batteries when loading as it happens with the cheap chinese hoverboards, and the company is doomed. Just think of the Hindenburg desaster.

See e.g. https://www.propublica.org/article/a-new-road-rage
X86 emulator running OpenBSD in a browser
idem! Definitely a refreshing look.
Anybody remember this? http://www.heise.de/tp/artikel/5/5263/1.html
> A terrorist is someone who uses violence or the threat of violence to coerce or intimidate.

Not trying to nitpick, but with this definition, any police officer who has used the threat of shooting someone with their firearm or taser is using the threat of violence to coerce people.

I'm not a supporter of terrorist organisations in the slightest. I am just sick of the racial profiling that goes on which is helping to fuel their cause.
raw cacao nibs, 100% cacao

https://nuts.com/nuts/cacao/organic-nibs.html
I am defiantly on the control-oriented side rather than the wealth-oriented side. The appeal for me of being an entrepreneur is I have control over my life, not the money (I am not saying that money is not great).

You only have one life and you almost certainly won't look back on your life and say "I wish I spent more time making money".
I recently heard that Panasonic released Toughpads. http://www.pcworld.com/article/3036176/phones/panasonic-anno...
> Apple is being asked to create a firmware version without brute force rate-limiting.

This is a one line of code change for Apple and would take them a few minutes. FWIW, there are people in the iOS jailbreaking community who could do this without the source code rather quickly. I'll even go so far as to say that we actually already have all the tools for this lying around for the iPhone 4, and with only minimal changes made by even less qualified engineers they would probably work on the iPhone 5C.

> With a sufficiently complex passphrase, the FBI is still SOL.

Most people use the 4- or 6- digit PIN number. One presumes that in this case the user did so (and you can tell, as the UI is different depending on the kind of passphrase used), or the FBI wouldn't be quite so excited to bother here. It takes mere minutes to crack a 4- digit PIN code on the iPhone 4.

> The fact that only Apple is in a position to sign firmware that could do this is a positive thing in this context. The only alternatives are no firmware signing at all (so everyone could run this attack), no updates at all, or enforcing the rate-limiting in a HSM (which is what they're doing on the latest generation iPhones).

You have conveniently removed "allow the user to lock everyone out from firmware updates except themselves" from the list of possible options :/. While I am perfectly happy with the idea that some people might want to allow Apple to update the firmware on their device, I would much rather no one be able to do that unless they go through me, and as I own the hardware and it is my data that is on the line, I should have the right to make that decision. Apple is selling locks, claiming them to be secure, while not only sitting on a master key but now claiming that it isn't really a master key, which is not just disingenuous but outright dishonest at this point.
Does that really matter? Isn't the trace of hydrogen peroxide in water output going to be irrelevant and decompose into water on short order?
You should make a new post about that then, "ProseMirror Now accepting contributions!" and post it here on HN ;) Seems a lot of people here would support it.
Hi Adam, Thanks for the response.

I know it was a vague question of mine, but I didn't realise the detail you were prepared to give it. So thanks, again. I'm no expert (my background is more musical), but I do understand most these concepts and perspectives involved. To articulate better my question: Technically how are you manipulating audio and what effect does that have on brainwaves. Your answer, understandably, was more contextual than specific. so let me specify the parts I am hoping to understand.

How do you manipulate audio?

I am in right in understanding your disguising a basic and specific pulse throughout the music. or... are you modulating it rhythmically (very slightly) out of phase with the rest of the music. If you are only applying it to certain frequencies then it seems you may be creating binaural beat like tendencies in the ears abillity to create implicit tones (Hidden frequencies, not physically present).

What effect does this have on brainwaves?

You stated in general you are matching rhythms to that of the brain. Can you expound this?
What theory of Rhythmic psychological organissation are you purporting/ascribing to? how is your audio intereacting with this model? What is the effect of your audio on the model?

I understand you may have a whole toolbox of tricks going on here and that you don't want to give away your product entirely. Feel free to gloss over introducing technical terms, though its helpful for all reading, I think most people here can quickly come upto speed on stuff. I'm not asking you for the secrets of your product - just more specifics on how it relates to the research you are citing.

Thanks for the article link, it looks very interesting reading.

A couple of reflections on your product: I personally don't like the music and therefore can't listen to it. It doesn't sound human to me and therefore my brain rejects it. Have you heard of the theory of "participatory discrepancy" (Keil C. and Feld, S. (1994). It highlights the value of discrepencies (randomness) rhythm for creating groove. I think cognitivly there is a similar principle at play (perhaps you know it, I can't find reference to it right now - will dig it out if this area interests you). I also feel, on the website, that the lack of actual specifics twinned with a large scholary general body of work, is ultimately devaluing your product. Though that may, quite rightly, be your choice in promotion, to engage me a couple of pages about whats actually going, twinned with a couple of very specifc to your model studies, would make me give this product real integrity and longterm value. For example Stober's powerpoint on the MIIR EEG dataset here (http://bib.sebastianstober.de/2015-01-31_NEMISIG.pdf - illustrates complex concepts that your describing, very simply. Incidentally I think lifetime subcriptions after a long trial period would probably have the most chance of getting my support.
First AMD Radeon 400 Series GPUs to Start Selling in April
That's not really a mass-market option, you'd need to stock large amounts of batteries for a fuckton of different models (each car or at least segment or manufacturer having their own battery geometry), or all cars would need to use modular batteries which loses structural advantages and reduces storage capacity. Battery-swap is more of a stunt than anything useful.

All vehicles can load up at a pump, you can't swap the same batteries in a tuktuk, a large sedan and a bus.
That's not in dispute. I'm saying it's a waste, not that I know how to fix it. More relevant jobs is obviously a part-answer.
There are several reasons why I doubt the future of hydrogen fuel cell cars. The biggest problem is, where the hydrogen does come from:

- currently almost all hydrogen is produced from natural gas, releasing CO2 in the process.

- creating hydrogen via electrolysis is possible, but very energy intensive, using up much more electricity than it releases in the fuel cell

- in any case, there is further energy used for compressing the hydrogen.

So, in total a pure electrical car easily drives 3 times as far as a hydrogen fuel cell car with the same amount of input energy. This is going to put hydrogen cars at a big disadvantage to electrical cars.

On the other side, electrical cars are getting to the point where the advantages of hydrogen cars are getting moot. The range is pretty close, and with fast charging the "refuel" does not take much longer as with hydrogen cars - but you normally can charge them overnight and not have to recharge them on the road in day-to-day business.
Windows does not have this issue either.

But on sysvinit if you mount efivars rw for any reason and your hands slip a bit a stray `rm` could still brick your motherboard, so it's not really fair to say that without automounting the issue goes away.
Razer is now worth $1.5b, raises series C round
This absolutely looks great, the Web needs a feature rich "rich" text editor, with modern code, document model and ui separated from the core.

A quick look at the code shows you use standard import/export, configurable import style for the ui part and this is great news. Good job :)
New edition of “Confessions of an Economic Hit Man” comes with 14 new chapters
I doubt Gates has any hidden motive behind his statements. He's just saying something he believes to be true, while trying to make sure others understand him. Why would he care about getting sympathy from laymen? He's the richest person on the planet. He's got more important stuff to do, like sparing millions of people from disease, poverty, and hunger.