skysight-inc/HackerNews huggingface dataset:
IMO the US intelligence apparatus likely already has Apple's publisher keys (we know they had Microsoft's at one point for Stuxnet, so this is entirely plausible). The FBI is far less advanced than the NSA/CIA on computer crime/crypto, likely to the point the NSA/CIA would not share information with them for fear of its existence being leaked through an overzealous investigation of a mass shooter who almost certainly never interacted with anyone in ISIS of any importance.

This is probably a gambit by the FBI to get access to this type of data for their other criminal investigations. If it is publicly known that the FBI has a way to break iPhones, they can lean on the NSA/CIA to provide more effective methods (without breaking cover of the existence of those methods.)

IMO a better tactic is the one the NSA has taken: let the industry build it, and we will hack it. This is just better tradecraft because it lulls targets into a false sense of security. Look at the engineering behind Stuxnet and the Equation Group viruses - these guys are obviously in another league from the FBI (and likely even from Apple). Given the gap in skills and mission, I don't blame them for not trusting the FBI.
It is possible that some vulnerabilities affected both LibreSSL and OpenSSL. In those cases, the total would be smaller than the sum of its parts. However, that is just speculation on my part.
This entire discussion is fundamentally about whether or not one or the other side of the treaty is "forced" (or "tricked" or any word denoting "win-lose" situation)—otherwise why are all the negotiations being made behind the closed doors?—like many others I find the opacity of the US-EU TTIP talks disturbing but you're free to disagree. Anyway that wasn't the point of my post. I only tried to bring attention to the fact that W in the hypothetical NWO is not (and cannot be) the whole world. There are "important" countries that are out of the system whatever the system might be.
So you accept oligarchial rule because you don't trust your fellow man?

What a sad world you live in.
Why Android requires special support? Isn't it just linux with quite standard libc and ABI to interact with Java counterpart?
presumably, the newly released code might teach malicious users what vulnerabilities are there, which in turn makes everyone who didn't patch quickly vulnerable.

By announcing in advance what is going to happen, people can be ready to update as soon as the patch is available.
There is a stark difference between contextless, abject whistleblowing and marketed whistleblowing. The latter, which they argue against, is unfortunately required to reach the masses. They mention that Snowden should not have gone to a [semi] major media outlet but instead to others who have exposed similar issues. Doesn't the fact that most don't know who those others are refute their exact point?

More importantly, does the benefit of mass consumption of the narrative outweigh the cost of not releasing everything and financially incentivizing the releasers? I say yes.
Do you genuinely think it would be reasonable, just and workable to extend the definition of war to drafting a proposed trade agreement that you don't like?
All jobs are drying up in the IT world. And there is a recession.

And our job paid at the hour is to make software that "mimicks" a perfect worker, a traditional knowledge, craftsmanship, science that will take our jobs later for the benefits of others, that are statistically as good as anyone, but over granted the benefits of others. Like Ricky the Tuft.
http://www.pitt.edu/~dash/perrault07.html

IT transform 40 hours / week thanks to IP law in a rent that will last years.

Not only we make robots that are quite good, but thanks to IP laws we force every one to buy these software hence we create virtual enslavement of knowledge and know how for the only merit of people who don't want disruptions. Those who already are the wealthiest (or close to).

IT business model is just dystopic, it just is an abstract machine to create exclusive right on anything that can be coded without granting much of anything to either the one who coded or those who knew initially how to code it.

And even when trying to propose other choices (like FOSS) the IP law make it easy for companies to just use our software and through the game of IP either use them to inspire new software for which we don't neither see the money nor get granted free use, or plainly inspire themselves to make patents.

/me quits this coding in these conditions.
I think you underestimate the sheer tenacity of crappy solutions.
PocketSphinx/Sphinx use three models - an acoustic model, a language model and a phonetic dictionary.
I'm no expert, but as I understand them, the acoustic model converts audio samples into phonemes(?),
the language model contains probabilities of sequences of words, and the phonetic dictionary is a mapping of words to phonemes.

Initially, I just used standard en-us acoustic model, US english generic language model, and its associated phonetic dictionary.
This was the baseline for judging accuracy. It was ok, but neither fast nor very accurate (likely due to my accent and speech defects).
I'd say it was about 70% accurate.

Simply reducing the size of the vocabulary boosts accuracy because there is that much less chance of a mistake. It also improves recognition speed.
For each of my use cases (home and desktop automation), I created a plain text file with the relevant command words.
Then used their online tool [1] to generate a language model and phonetic dictionary from it.

For the acoustic model, there are two approaches - "adapting" and "training".
Training is from scratch, while adapting adapts a standard acoustic model to better match personal accent or dialect or speech defects.

I found training as described [2] rather intimidating, and never tried it out. This is likely to take a lot of time (a couple of days atleast I think, based on my adaptation experience).

Instead I "adapted" the en-us acoustic model [3].
About an hour to come up with some grammatically correct text that included all the command words and phrases I wanted.
Then reading it aloud while recording using Audacity. I attempted this multiple times, fiddling around with microphone volume and gain,
trying to block ambient noise (I live in a rather noisy env), redoing it, final take. Took around 8 hours altogether with breaks.
Finally generating the adapted acoustic model. About an hour.

About 95% of the time it understands what I say. About 5% of the time, I have to repeat. Especially with phrases.

Did this on both a desktop and raspberry pi. The Pi is the one managing home automation. I'm happy with it :)

[1]: http://www.speech.cs.cmu.edu/tools/lmtool-new.html

[2]: http://cmusphinx.sourceforge.net/wiki/tutorialam

[3]: http://cmusphinx.sourceforge.net/wiki/tutorialadapt

PS: Reading their documentation and searching for downloads takes more time than the actual task. They really need to improve those.
How is it better than KeyPassX? I (think I) want my manager to be simple..
Illumina Sues Oxford Over Composition of Nanopores
California. Long ago I worked with a woman, an Angeleno by upbringing, who would get into her car to drive 50 yards to a 7-11.
No, it's not worse for your scenario. (That wasn't my assertion)

However, this is an alternative to KeePass/KeePassX, so the typical behavior of KeePass users is to generate passwords with it, not reuse bad passwords.

For example, I use KeePassX to generate strong passwords for long-term encrypted archives, and if I switched to this app, I wouldn't get the same security.

I'm confused, though, should I say: "All right, people, fuck it, generate your passwords with Math.random! YOLO!"
Because it's relevant to this thread, here is a presentation that I did on Go from a PHP perspective for a local PHP group.

http://www.brightball.com/golang/go-from-a-php-perspective

TLDR: Go is good at the things PHP is bad at. PHP is good at the things Go is bad at. They actually compliment each other very well.
Well... I think you have to include all of the surrounding towns. Willow Glen, Campbell, Sunnyvale, Los Gatos, all have nice 'downtown's.
Little late to the party but have you considered using something like an authorization server?

We created Anvil Connect (based on OAuth 2.0 and OpenID Connect) to solve a bundle of auth-related problems all at once. It's a separate server instead of a library, because once you need to share user accounts between several apps (think different platforms) the complexity increases dramatically. There are (third party) client libraries available for a number of languages.

https://github.com/anvilresearch/connect
Stretch and Fill Content in UIStackView on iOS
Stevey would criticize languages left and right, though. I wonder if he is coding in dynamic languages at Google nowadays... Most likely he is writing Go while complaining about it.

(miss you stevey please resume writing)
As a Xamarin subscriber, I'm guessing the future success of the merger (and product future) depends on:

1) addressing the price-point,
2) core clr integration,
3) retaining the top engineering talent at Xamarin,
4) addressing the iOS designer-specific issues

A couple notes:

For most LOB apps, I'm not convinced the code re-use is significant. The bulk of work is in the interface and navigation which is, necessarily, handled by coding android / ios specifics. Despite noble effort, the iOS design essentially needs to be done in xcode (point 4 above).

The build/release process is and (presumably) always will be locked behind the gates of technology's North Korea (Apple). They can throw a switch and restrict 3rd party runtimes if and when they choose.

For businesses in the 5-100 million range, writing an expense app in 2017, MSDN Xamarin should be a logical choice - but it has to be a platform with the reliability of .NET and a simple cross-platform designer. For app-centric startups, games, POS systems, etc. - it's probably a bad move.

For msft devs (and we are aging) it's win-win. The lure of C# gets you into mobile dev, and you will learn iOS and Android in the process.
It might be used too but all the people I know in Paris have FTTP. In central London there are typically only a handful of buildings, if any, in an area that are connected.
Check chrisdew's answer above. It just doesn't work like that in the UK, or most places in the EU. If it was a totally different company, doing a totally different type of business, then you could argue the case that it was nothing to do with it. You would still have to pay income tax on any money you remitted into the UK though from your US or other earnings abroad.

In much the same way as the US treasury want's a piece of US citizens worldwide earnings, I believe.

You really do not want to mess with HMRC in the UK. They will chew you up and spit you out without a care in the world if you don't play by the rules.
They used 'meeting behavior' to predict team performance. And not in the way you would expect. Its not about productivity in the team meetings. Its about feeling safe, respected, and sharing the load.

Makes some sense. Team meetings are not where anything gets done after all. If team members are engaged with their peers, they may invest in team goals and perform better.

Issue: they correlated team meeting metrics (talking time; socialization time vs problem solving time etc) with team success at achieving goals. They could have used behavior outside the meetings (communications per day; social interactions after work) and predicted successful teams that way. It doesn't mean that "Meetings that go like this indicates good teams"? I.e. changing your team meetings to look like what good teams do, may not improve your team at all. That might be put under 'cargo cult management'.
30 min video interview with Tim Cook regarding FBI lawsuit
Image Magick will probably be able to do the trick: http://www.imagemagick.org/script/index.php
The linked numbers on the Wikipedia article make more sense.
And look what Google did with Chromecast - beautiful, national geographic style pictures you could sit and watch for hours. Clearly there's a team spending money at Google to create the best experience for me.

If I went into a business meeting and Laura Croft showed up as my screen saver so MS could pocket $0.000001 for showing me an ad I would go ballistic. And I'm a MS guy. It's these type of shortsighted ad-in-the-os decisions which are making me doubt the future of MS as a serious company.
Ape in Space, Scott Kelly Chases Tim Peake in a Gorilla Suit
We render mockups in the browser (using the html canvas). We've been exploring the ways, how to edit or switch PS smart objects, but we haven't found anything useful for our needs.
CMU Sphinx: Open Source Speech Recognition Toolkit
I was wondering whether this was a joke/exaggeration. Turns out it's not: http://www.theregister.co.uk/2016/02/10/surreal_world_of_the...

Thanks for bringing our attention on this.
> If I'm reading this right then they basically have access to all 3G/4G data and they do so in a way that cannot be detected.

How did you reach that conclusion? While probably true, this article merely (poorly) describes how GCHQ "improved" on another backdoored encryption standard by making snooping impossible to detect.

This is only a thing because GCHQ has started certifying software and supporting the MIKEY-SAKKE protocol is a hard requirement.
Well, the thumb is actually bent but you're right it looks like that from the small thumbnail :)
The reason not everyone has the best watches, air conditioning, knives, or whiskey is that, for physical products, quality tends to cost more.

There is no reasonable argument to be made that people shouldn't have higher quality products when they _don't_ cost more^.

Apple only have to develop "unbreakable" encryption once and then it costs them no more to make it available in every iPhone than to only make it available in some of them. Indeed, it'd be cheaper than maintaining both breakable and "unbreakable" variants.

There are arguments to be made about the secure enclave hardware, since it presumably costs more to make it more tamperproof.

However, securing iPhones against this particular "attack" appears to be a software issue: iOS should never apply updates without an authenticated user approving them first.

^ For the avoidance of doubt, this includes externalized costs.
Thanks for compiling the numbers.

18 "work"-related fatalities out of 546 "workers" represents a massive amount of risk over any widespread form of civilian employment. According to the Bureau of Labor Statistics, fishing is the riskiest job these days, with an annual fatality rate of around 12 per 10000.

Even granting that safety has improved with experience and better engineering, I think it's safe to say that being an astronaut is at least 10x more dangerous than the most dangerous civilian job.
That's only if you're storing one copy of the video.
>> Is there a practical attack for this usage?

This is the question I ask every single time I read about anything in security. It feels like there's just SO MANY THINGS wrong about every damn thing now the only way I can figure out what I have to really worry about or focus on is anything with a PRACTICAL attack that's easily automated and remotely exploitable.
I sure wish Go would solve the problem of blogs which hide content unless JavaScript is enabled …

Seriously, why is this even a thing? Why gratuitously prevent Firefox + NoScript from working?
What does being alive mean for an AI?
RSUs will typically all vest after a certain period of time, depending on the company (4-5 years?). But your mortgage is for 30 years. I wouldn't count that stock towards your "yearly income".
> > Ruby doesn't have built in concurrency like Go does

> Seriously. Pretty much all languages have support for concurrency via threads.

You missed the most important point: like Go does
Not if you keep IoT devices on a separate network
Dragon Naturally Speaking has been great for years. Developers have been using it to cobble together a voice programming solution for a few years:

https://www.extrahop.com/community/blog/2014/programming-by-...

http://ergoemacs.org/emacs/using_voice_to_code.html

I've got more notes on Github:

https://github.com/melling/ErgonomicNotes/blob/master/progra...

We really seem to be at the point where voice is ready to become part of our daily use once a real API becomes available. People who use Dragon, for example, need to use the Windows version because of the hooks to Python.
The situation has become extra-bad only in the last 2-3 years, but there are plenty of people that bought before 2012 across a wide variety of occupation. Especially zone 3 and up: 3 year ago a 3 bed house could be acquired for 180K GBP in ok-area zone 3 - not cheap, but not outrageously expensive for a couple - same house goes for over 400K GBP today.

Nowadays, there are still a lot of part-buy/part-rent scheme being built all over zone 2. Sure you only buy 25% to 50% share, but the flat under those scheme have very conservative estimation and rock bottom rental price ( for the other 50 - 75 % ) There are even better deals for key workers ( nurses, teacher, police officer, ... ) So strangely that is easier for a couple of nurse and teacher to get on the property ladder in London than for 2 reasonably paid city workers or said differently basically if you don't qualify for government benefit you must be real rich to afford London.

I agree with you, when a couple making 100K GBP would require social benefit to afford a modest 2 bed in the cheapest area your city, your housing market is fucked.
EU-U.S. Privacy Shield maintains legal limbo of transatlantic data transfers
Create Interactive Charts with Ui-Grid and Angular Chart
The idea of open citizen voting directly on all issues terrifies me. I see democratic representation as a way to pay someone to read and understand all of the legal jargon most people won't take the time to bother with.

People don't take time to read their medicine bottle warnings, let alone the contents of the new Higher Education Act. I'm honestly afraid that righteous attitudes fueled by ignorance would rule.

It would put an incredible amount of power in the hands of mass-media as well (more than they already have). Well-designed and well-timed stories can sway public opinion waaaay too easily.

Combine that with how the government seems to handle IT security issues in these type of large-scale projects, and you have a recipe for disaster.
Interesting. I was wondering how accurate this was, and in terms of the risk of the job, it more than checks out according to my first result.
http://www.cultureofsafety.com/2013/01/your-odds-of-dying-at...
Of course that doesn't cover medical risk like cancer.

Skill-wise, I would expect they are comparable in skill level if not skill set.
Chapter 144 – Wealth, Prosperity and Luck Part-11 Explained for All Ascendants
Makers of AnyDVD? I thought they were more well known for "Virtual CloneDrive".

I wonder what "regulatory requirements" caused them to shut their doors.
Modern PHP really isn't all that bad, I still wouldn't recommend people go into PHP development out of fear that they might stumble into one of the pre-modern hellholes that I only barely escaped in the early days of my career.

It's almost an irrational fear, but I remember working on plugins for applications where plugin hooks were non-existent, and the canonical approach was to patch code. I remember applications where there was no frontend server, but rather a sprawl of PHP files each doing one thing and hooking into the 'main' system via a 'require settings.php'.

Apart from that, working within PHP still obliges you to do a lot of hairy things---like working with Drupal. Now Drupal is certainly better architected than say Mambo/Joomla ever was, but it's still a better CMS than it is a web framework and for some odd reason lots of companies insist on building things into Drupal even today.

Now ... all of my recent knowledge is second hand, I've been out of PHP and into Python for at least 5 years now
It has to be - our legal system is based on rule of law. You often see lawyers go after First Amendment defenses because the First Amendment is legally part of the constitution, and thus overrides any and all other laws. Of course, a judge has to agree with the argument - and considering when the Bill of Rights was written, that argument is likely going to be a bit roundabout given the progress we've made in ~250 years.
How core.async and CSP help you prove your async code works
If the NSA can't crack the Secure Enclave in a terrorism case, it's not super useful that the NSA can crack the Secure Enclave.
This was posted twice to Hacker News, the first article 9 days ago and the second 7 days ago. I suspect that this group leans overwhelmingly liberal/progressive, so I understand that this might not be as interesting to this group. But I'm still surprised.

Perhaps people didn't respond because it's one, unsubstantiated source. Anyone know how to test this claim of Twitter shadowbanning from Breitbart?
http://webcache.googleusercontent.com/search?q=cache%3Ahttp%...
If you look at the changes, you'll see most things are pretty simple:

* CMake files are expanded to handle an Android target.

* Code that checks for specific defines or values like __FREEBSD__ || __LINUX__ now have an added condition to also check for __ANDROID__.

* Some tooling scripts to integrate adb into the Swift SDK.

* Some minor fixes elsewhere.

So, special support is a really minimal set of changes that any platform would need.
Harvard abolishes 'master' in titles in slavery row