skysight-inc/HackerNews huggingface dataset:
Yeah but everything is online right now and we're moving more and more data that _must_ be secured. Back then you really only cared about a couple of platforms - nobody cared if you could hack some random dudes garage or phone.
New Reactive Programming in JavaScript with RxJS Dzone Refcard
Ukrainian Arm Wrestler Breaks the World Record Bicep Curl
Just to be sure, first, are you clear that your question has nothing to do with the article in question? Calcium-doped graphene superconducting at 4K means nothing for your phone battery.
I use H&R Block TaxCut (going on 15 years). Costs about 39.99 a year for both my business and personal. Just keep an eye open for when it goes on sale (retail is 89.99 I believe).

I even dropped Quickbooks after their shit 2011 "upgrade". Worst fucking software I've ever used, but hey, it looks like it's WPF now!
Most people have multiple valid deductions, but they add up to less than the standard deduction. If all of them add up to be more than the standard deduction, you have to itemize all of them, which is a PITA, but if you don't do that then you're paying too much tax.
React Native Tools (Preview) for Visual Studio Code
Source? Current discussions surrounding your statement point to it being false - that Apple can update the firmware of the secure enclave without it wiping out it's data.
I'm bothered by how the article says "three years ago European models delivered a blow to the U.S. weather apparatus". Better models by Europeans do not make the models by Americans any worse. Improved models help everyone.
Ok, so I was wrong when I said Lennart Pottering's original response was "pretty appalling".

Unlikely he saw it, but my apologies nonetheless.
The article isn't about energy storage, it's about graphene superconductivity. When it becomes superconductive, it allows the free flow of electrons without resistance which produces heat. One of the limiting factor of today's chips is heat dissipation; if no heat was generated, we could make them higher clocked and faster.
I think we can all compromise on "The firmware is the right place to fix the problem, the kernel is the right place to mitigate the problem."
I totally agree the US government shouldn't compel anyone to weaken security generally. So Apple shouldn't be forced to build in a backdoor into products that are released for sale.

But this apple request is just exploiting a weakness that already exists. And it would only be doing it on a single phone. And it would be do it pursuant to a legal order by a US court.

Also, the US government only has zero credibility in the minds of hardcore activists or extremists. The bulk of the America public trust the FBI to investigate ISIS.
To be fair "rm -rf /" doesn't just work. You have to confirm that you really do want to delete everything. Destroying / in itself is pretty harmful. If you're planning to do that you should already know not to have anything you want to keep mounted.
Tom Cross[0] in this tweet[1] was the first person I saw with the distinction in calling the FBI request an exploit rather than backdoor. This Vectra Networks blog post[2] explains this distinction in better technical detail.

[0] https://en.wikipedia.org/wiki/Tom_Cross_%28computer_security...
[1] https://twitter.com/_decius_/status/699932604737417216
[2] http://blog.vectranetworks.com/blog/apple-vs-the-fbi-some-po...
bulletproof + free = ?

what happens when the contract is contested? and what if you lose?
Adobe Flex without Adobe or plugins? Sign me up!
If you're looking for great projects with the ESP8266 have a look at https://aisler.net/search?query=ESP8266
Uber driver charged with 6 counts of open murder
The problem as always with machine learning methods is figuring out how to construct your machine correctly and what data to feed it. Mostly this is about good data collection, not about what machine you use. I am somewhat agnostic on whether you train using a linear model, SVM, neural network, etc. - all of these are likely to be analytically useful, provided I can give them an interesting and well-contsructed input set. But if the data I'm feeding into such a system is too noisy, doesn't sample deeply enough to catalog the extent of variation, or we don't have good descriptors for correctly labeling the dataset, it's useless to try to train a machine, we'll just have GIGO.
I have some experience using MicroPython on the PyBoard (not the ESP8266). MicroPython is a very nice implementation of Python 3.X. A few differences because of the need to be extremely parsimonious with RAM usage -- mostly only noticed if trying to inherit from built-in types. Nothing that is onerous to avoid. MicroPython is an outstandingly good project IMHO, with a great community.
for anyone interested, this paper has a nice background on numerical weather prediction

http://www.elsevierscitech.com/emails/physics/climate/the_or...
I did not know that firmware could be updated without the PIN. Thank you. Here's my caveat emptor.

https://news.ycombinator.com/item?id=11151599

As for the rest, we're talking past each other, and I'm left wanting to know what outcome you advocate.

If so moved, please reply in the new thread. Thanks.
First thing I see, Content editable, the good parts.
I'm expecting a Spreadsheets, the good parts coming next year or two base on the way people keep talking about state.
The attack that the FBI is trying to facilitate by getting Apple to make a custom OS would only work up to the iPhone 5C and earlier models. Any iPhone with the TouchID and Secure Enclave would not be susceptible to this attack (it may be to other attacks). The Secure Enclave has a hardware enforced back-off delay that would stop the brute force attack. The older iPhone 5C does not have the Secure Enclave so the brute-force protection is implemented in the operating system. As such, Apple can load a new OS on the phone that does not have those protections.

Here is a great technical rundown: https://blog.trailofbits.com/2016/02/17/apple-can-comply-wit...
The Messinian Salinity Crisis
Having used both there's more than enough in either that's bad to justify a switch to the other if you really want to. I personally prefer github's warts to gitlab's. In particular, I find that general site navigation on gitlab is quite tedious and it rarely centres useful information first. But that is very much a qualitative and not a quantitative complaint.

The main thing I find extra useful on gitlab is the ability to mark a MR as a WIP.
I get what you mean.

The point is that if this work is applicable to a wider audience then why not get it in front of those eyeballs by publishing in a place where multiple disciplines congregate? This is the point of the Humanist[0] mailing list, for instance -- in the case of humanities computing applications.

[0] http://dhhumanist.org/
> I'm slightly surprised BitBucket is not doing the same, but their Atlassian masters seem more interested in pushing irrelevant features at the moment

Yeah, I fear Bitbucket will always be shackled to the rest of the Atlassian product line, and never really allowed to innovate much.
I was going from memory, and didn't reread Lennart's responses in the thread. But looking at it again now, I still think it's an accurate summary. Lennart's line after you quoted is "But beyond that: root can do anything really."

I read this as Lennart saying that when root issues an 'rm' in efivarfs, the variable should be removed even if this renders the motherboard unusable without physical repairs. What's your interpretation?

I've edited to fix my terrible punctuation, and to make it clear that 'it' refers to 'systemd', and to add a link to MJG's response on Twitter. I can edit further if you have a way to make it clearer.
React runs on Flash 11? Okay.
Pages are an EE feature, but one which is useful for open source projects. Would you accept a pull request for a community implementation of Pages? or would a fork be needed in this case? How do you see this sort of issue playing out?
I don't think it is designed with this use case in mind, despite the marketing that mentions crowded festivals.

I see a "Born in Bozeman" badges on the site, so I'm assuming this was born out of necessity for backcountry trekking in wild Montana and not hiking Mt. Tamalpais. I'm not far from Bozeman and I don't have to travel far from home before I lose network coverage from both Verizon and T-Mobile. Sure, I relish the loss of service in a way as a means of escape, but it has higher risks and causes a number of challenges that I think this seeks to overcome.

I'm intrigued.
Good point. But the solution isn't to ask Apple to break into the phone. Instead, when you set up an iPhone, it should be possible to set up a passcode separate from the user's passcode.

I was wondering about this. I was thinking about the case where there's some important business data that's only on the phone and not yet backed up elsewhere, and the employee can't or won't remember his personal passcode.
If you mount to r/o, a bunch of userspace applications break. Mounting it r/w is correct.
> There is no evidence that there is any legal protection ...

Even if that were true, it would be irrelevant. We aren't stuck with our laws. If they're abusive or useless they need to be changed.

> If they can search your home for it, they should be permitted to search ...

Sure, I can see that you think that. But making false equivalences isn't a good argument even if it tends to be the usual limit of political discourse. Our servants are "permitted", with the right suspicion and warrants, to search almost anything (in the name of the people). Yes.

But this isn't a case of permission, it's about capability. They're incapable. You're implying that the law not only permits some searches, but necessarily compels unlimited help in making those searches possible?

That's a huge stretch. Especially when that help involves uttering falsehoods.
LOL, thank you.
Thanks, that's a fair criticism and a kind allowance.

I think you'll see the UI improved greatly this year... as of last Monday, we have 7 full-timers working on Gaia GPS, and we're looking for a designer to help with the UX right now. Things really blossomed in 2015, and 2016 will see more engineering work on Gaia GPS than any other year.
I thought there were already demonstrations of superconductivity in graphene at higher temperatures with other dopants (I think water IIRC).
Drones, satellites and lasers, oh my Facebook's internet plans
It can proxy to uwsgi
> I can't find anything in the guide from a quick skim, but I'd suspect the code is on a ROM chip or is somehow prevented from an upgrade without an unlock?

This is the big unanswered question. I suspect the same, but so far have not been able to find anything that actually says so. The code is not in ROM, as it can be updated, but it could wipe data if updated without an unlock. But I can't find anything saying whether it actually is. The mere fact that it's possible isn't enough, and their silence is a bit odd.
Yes, Joanne Rowling was asked by her publisher to publish Harry Potter under two initials because they thought boys might not want to read a book written by a woman. Not having a middle name she choose K as a nod to her paternal grandmother, Kathleen.
I'd say it wasn't a bug in systemd's implementation, it was a bug in the design of systemd. Why require that evivarfs be mounted at runtime? You could easily make it so that it is only mounted at boot time if neccessary, or only when you run a tool that wants to write to EFI.

I'd expect file operations to only permanently affect storage devices per default. Sure you can mount almost anything as a file in Unix, but to automatically mount more than necessary is bad design. It's like placing mystery files in the filesystem, and when a curious user deletes or modifies them, they loose their monitor's color profile, there printer's firmware, or all of their GMail attachments. You could say it was the user's fault to mess with it, but I'd say it's weird to expose such things as files (unless explicitly asked for by the user or a tool).
Some of the mechanical design myths holding 3D printers back
That's a good point about any list. Best game ever, worst game ever, hardest level/boss/game ever, you name it. The percentage of works or parts of works that ever become popular enough to get noticed is dwarfed by the (couple of hundred) times larger number that simply fall off the radar or never get any attention in the first place.

I mean, what's the hardest game ever made? Probably if you're really picky, some ultra obscure shoot em up or kaizo esque Mario ROM hack. But the average list will only name titles like Battletoads, Dark Souls and I Wanna Be the Guy, because those are the ones many people (including the authors) have actually heard of.
Analysis: Search Patterns in the JavaScript Community
> By the time the station was finally abandoned in 2000, its degeneration into a disgusting orbital stinkbomb had become an open secret. In one particularly egregious incident in 1998, American astronauts discovered that dirty water globules—some of which were roughly the size of basketballs—were casually free-floating behind some of the station’s service panels. These gross liquid orbs, which were alternately brownish or cloudy white in color, had become miniature planets of activity for the opportunistic microbes that were attempting to commandeer Mir.

So, how does the ISS compare on the hygiene front? They did show some mold, but didn't really talk about it. If it's cleaner, what did the ISS do right and Mir do wrong?
This commit message shows why I like the Linux Kernel team:

>These fixes are somewhat involved to maintain
>compatibility with existing install methods
>and other usage modes, while trying to turn
>off the 'rm -rf' bricking vector.

They go out of their way to make sure changes are backwards compatible.
How much does airplane mode affect this? I have it turned on constantly when I'm out. Mostly to avoid distractions.
I think this is not linked with battery storage. Superconductivity allows a material to conduct electrons without any resistance, thus losing less energy and generating less heat. I could be wrong though, I am no expert.
We should join forces with https://github.com/mholt/certs then. (Still in design phase.)
Have you even tried MicroPython on it? Granted, you need to consider performance -- where you need it, and where you don't. But is is quite easy in MicroPython to create a C-extension module for performance critical components, and have the luxury of a Python REPL loop for debugging high-level logic.
IBM releases OpenWhisk: open-source distributed event-based programming service
Airbus wants to put overweight flyers on benches
I think my main problem is that I've never used GPS hardware or software, so I have a distinct lack of familiarity with the standard concepts, making the learning curve that much steeper.

Fortunately, I really don't need much. Primarily recording (off)road trips in the Jeep, and downloading maps in advance of excursions where I suspect cellular data will be flaky.

Anyway, thanks again, and good luck!
The Secure Enclave's back-off delay is not hardware enforced, it's enforced by the software running in the SE. The big question is whether the SE's software can be updated without first unlocking the device and without wiping the user's data. If such an update restriction is in place, then newer phones would not be vulnerable. If no such restriction is in place then newer phones are vulnerable, they just need the SE software to be modified instead of the main OS software. So far, I have not been able to find any concrete information about whether or not the Secure Enclave in current phones have such restrictions.
A number that fascinates physicists
I'm curious, what kind of userspace application needs r/w access to EFI vars?

I would think a) this are mostly system tools like boot managers and b) these tools need root (or setuid root) anyway, so why can't they just mount it themselves temporarily?

Edit: It seems it is mostly grub-install, efibootmgr, and `systemctl reboot --firmware` that need this mounted rw. The first two aren't something that a casual user uses very often, and if someone does, a "Filesystem is mounted read-only" message will point them in the right direction. The latter is part of systemd and could easily be changed to mount efivarfs itself, no third party involved.
Lessons learned from converting Objective-C project into Swift language
Not really. Systemd could have fixed it, but it would have been a lot of work and a hack. The Linux kernel team could have fixed it, but it would have been a lot of work and a hack. The hardware manufacturers should have fixed it, but they don't care.

The Kernel team showed they are professionals by stepping up and doing the work.
Ugh you're right. It seems they romanticized it in their own heads as well. And in the end they're just humans.

The dad wrote a post about it all :
http://janifoundation.org/blog/

Wish them all the best either way, it cannot be an easy journey.
FYI, any website I visit that doesn't tell me the name of a responsible human being on the landing page or at most within one clearly-labelled click is automatically assigned to the B.S. bin.

For example, luna-lang.org came up on HN the other day. Looks amazing. But the only sign of WHO is a line at the bottom that says, "Copyright © New Byte Order 2016" and it's not even a link! Searching quickly takes you to http://www.newbyteorder.com/ which also tells you nothing about WHO is involved. Lame.

The most important part of any message is the name of the messenger.
So what changed?
5,800,000,000,000 W × 0.00001 =

58,000,000 W = 58 MW

I misplaced decimal point, but it's for different direction.
I use Ghostery, fwiw.
It shouldn't be mounted rw, and only exposed at root. It shouldn't be mounted by default. It shouldn't even be a bloody filesystem. EFI variables have so much metadata and other information attached to them that trying to wedge them into the filesystem is just asking for problems like this. Were the maintainers smart, they'd dump the file system all together, because it's a nonsensical way of presenting this data.
You might be thinking of supercapacitors, which store energy. http://physicsworld.com/cws/article/news/2010/nov/26/graphen...
> If they can search your home for it, they should be permitted to search
> your phone for it. Both should have the exact same expectation of
> privacy and the exact same judicial oversight.

They are permitted to search your phone for it. The problem here is that they are saying:

We wish to search this home, as is our legal right. The home contains a safe that we claim we cannot open, and we wish to compel the manufacturer of the safe to assist us to search the safe. The manufacturer does not wish to do so, but we insist that they be forced to do so by threat of imprisonment.

Furthermore, we wish to do so by compelling the manufacturer of the safe to create technologies that could open all safes, without the knowledge of the safe owners. We claim we only want to open this one safe, but we have this long track record of opening as many safes as we can, using secret courts and hearings to obtain the right to search those safes without the owners of those safes having the opportunity to argue against us, which is a different level of judicial oversight than being applied to searching this one house.
you're probably already aware of this, but there is some US legislation trying to open up commercial data to gov't entities:

https://www.congress.gov/bill/114th-congress/house-bill/1561...

there's some stuff being written this year as well for the side that i work (space). with all the upcoming sensor gaps, they're looking at alternative ways to cover.
If you support 2checkout I would be able to use it in Bolivia, and many other latinamerica developers will also be able too.

Hiring freelancer for most international clients is more appealing if they are from other countries than USA, Canada an UK, for several reasons: like price, diversity, time availability, work culture etc.

... I'm sensing that someone will say that hiring freelancers from USA(or the first world country of your choice) has more advantages. The fact is that most of the long lasting freelance market is outside USA
> Another thing that was missed was that Lennart wasn't being unreasonable, nor was he saying it wasn't a problem (he specifically stated the opposite, in fact). I had a feeling at the time (based on his responses) that the reason he wasn't specifically stating he was going to fix it or open a bug report for it in systemd was that he was going to push it up-stack to a more appropriate place, and it looks like that's what happened.

This. It's really hard to blame this on systemd (not that people didn't try anyway).
Yup, NodeMCU is really easy.
I used it to make a Philipps Hue clone.
https://github.com/christophesmet/ledsgetIton

It's surprisingly easy connect to a WiFi and get a TCP server running
As one of the contributors to Microauth[1] I have to say file-based auth using a dedicated auth server behind the scenes.

1. https://github.com/LukeB42/Microauth
Light grey, thin, sans-serif body text, O how I hate you.
I developed somethings similar a while ago for personal use, as I cannot trust anyone else's version.

The password is randomly chosen, but data is encrypted client side (as well as server side). I do update the code once in a great while, but ultimately I don't feel this can become a truly trustworthy product.

You can find the source here: https://github.com/johanns/Celox

Live site is here: https://celox.me

Good luck!
> No. Fully trusting a computer is impossible. It doesn't mean we shouldn't try, we should at least make it as hard as possible for the bad guys to trick us.

I completely agree. I liken it to something like world-peace: It's an ideal, and we'll probably never get there. Doesn't mean we shouldn't try to get there though.
You're missing the end of that quote:

> But beyond that: root can do anything really.

... so running "rm -rf /" as root should brick your motherboard because it's the responsibility of the motherboard manufacturer to protect against this. That's all fine and dandy in an idealized world, but in the "real world" there are going to be motherboard manufacturers that play fast and loose with these things.
We detached this subthread from https://news.ycombinator.com/item?id=11151992 and marked it off-topic.
How to write your own rspec retry mechanism
Uber Growth Happy Hour – March 8th
10 Key Things about Singapore: The Cosmopolitan Island City-State
Light grey, thin, sans-serif body text basically means you HATE your readers.