skysight-inc/HackerNews huggingface dataset:
Wow, RCS seems pretty bad from a privacy standpoint.

The spec is available on the GSMA website [0]. The relevant section is 2.13.1.3 of "Rich Communication Suite 6.0 Advanced Communications Services and Client Specification Version 7.0-final draft" available in the specification ZIP.

TL;DR: Encryption seems to be included but for voice and video only. They have _deliberately_ compromised messaging security to be vulnerable to interception.

"SRTP [RFC3711] may be used to provide per message authentication, integrity protection and encryption for both RTP and RTCP streams involved in real-time video and voice sessions."

[...]

"[3GPP TS 33.328] defines two modes of operation for SDES/SRTP: e2ae (end-to-access edge) mode and e2e (end-to-end) mode."

"[...] the RCS client may try e2e [...]"

And:

<Basic description of the messaging protocol>

"When using MSRPoTLS, and with the following two objectives allow compliance with legal interception procedures, the TLS authentication shall be based on self-signed certificates and the MSRP encrypted connection shall be terminated in an element of the Service Provider network providing service to that UE. Mutual authentication shall be applied as defined in [RFC4572]."

[0] http://www.gsma.com/network2020/specs-and-product-docs/
Digitally weary users switch to ‘dumb’ phones
What you call "redneck" version is actually how I manage my system configuration. :)

The metapackage is the only one that's explicitly installed, ever. (Except for workstations where I might install applications to test them.) Part of system maintenance is to clean out orphaned packages every once in a while, usually as part of the system update.
can it be used as a simple key/value store?
>hunger pain and risk of homelessness are what motivate many people to drag themselves to work. Without that threat, many people choose to be unproductive

That, in my view, smacks of rationalization of widespread exploitation of an entire sector of human beings.

This forum is full of people that will not starve if they don't work -- at least not for a while. But the vast majority are doing what they can to create value in the world. Are they just better human beings than the poor who must be threatened in order to create value? Or have we built enough capital of one type or another to make the transaction of our time and effort and application of our capital worth it? An improvement of our lot?

If all of us more fortunate creatures were told that we'd never turn a profit for our efforts, how many of us would put in that effort? I would wager not many (a situation that plagued most of those socialist systems you mentioned).

The poor are put in a situation where they are asked to work but never profit. They must work to limit their loss. They must work to merely not die. It is little wonder that we have people that prefer welfare and don't do much to better their position because the alternative is to spend their time and effort pushing for -- nothing.

What I would push for is not Socialism -- which is where everybody owns the means of production which is dragging everyone down into that same pitiable state of never being able harvest your own profit for your own efforts -- but merely giving the poor a guarantee that they will not die or be in pain -- enough food, housing, medical care to live. Those that need their labor will then have to entice them to work. They have to look at how much their labor is worth to them and try and pay them based on how much profit they can wring from the value they can create -- like lawyers are paid, engineers, management, skilled workers, professionals...literally everyone else. It's not crazy, it is how 3/4s of the population in the US conducts business. It is just an extension of that strong bargaining position in the free market to those in danger of having to work for less than their time is worth for no hope of bettering their position just to merely not die.

It may mean that I have to take it on a bit of faith, but I trust that 1/4 at the bottom will work to better their position just like the rest of us if given the chance. I don't think we're any better, when it comes down to it.
Not hard. Impossible. Have you seen obfuscated C? Is it possible for enough people to read it and understand it that it would make a difference? What about if you can read it but I can't? Do I trust you? How many people have to verify it before a non-expert can trust it? Theoretically, none. Everyone could be in on the conspiracy except me.

And how do I verify that the code I've just read is what shipped on my computer? If I install it myself, how do I verify the CD or ISO I have is what I read? If I compiled it myself, how do I verify the compiler didn't change anything? What about the system that compiled the code, do I trust that? How far back do I have to go before I have trusted everything?

And then what about hardware? Is there a chip that changes some of the code that's running? Can I verify every piece of hardware in my system, a 16-core CPU with 64GB of RAM and a high-end video card? How do I even do that? And what are the odds I am a world class C coder and a world-class hardware expert?

And then what about client code? Am I a world-class Javascript expert too, with full source access to the Django backend? And the system that is running that server code, do I have access to that hardware to make sure it's not going to compromise my security?

No. Fully trusting a computer is impossible. It doesn't mean we shouldn't try, we should at least make it as hard as possible for the bad guys to trick us. But what's better, IMO, is to create an environment where it's detrimental to companies to trick their users like that. Apple seems to have gotten a lot of great press for standing up in this situation. There's a market for it.

Can you trust Apple tech? Maybe not. But can you trust it more than Google or Microsoft or Samsung or Facebook or Amazon etc etc? It does seem that way. Without being a world-class expert in everything, eventually you have to trust someone.
https://www.youtube.com/watch?v=pi62S_MvheE seems to work better
Thanks, we'll look into this.
> So you are saying Apple is only helping criminals with encryptions?

No I'm saying that arrogantly the people behind these decisions cannot imagine a scenario in which someone else could hold information about them that would be harmful just by its existence.

They can only imagine their secrets being revealed, such as Tim Cook being outed before he was satisfied.

> you don't fear encryption being used against the average person?

I'm confused as to what you're asking, that's exactly what I fear. A rapist taking photos of his victim, the evidence being insufficient for a conviction, Apple now protects that rapist and his access to his victim's photos at the cost of the victim's mental health.

> For example if the police would search your phone in a traffic stop, that would be okay?

If they had good reason, that's the basis of the legal system after all.

> The amount of cases you could solve with a crypto backdoor

Crypto backdoors are ineffective. Service provider accountability is. This is why Apple is fighting it.
No need to be rude!

Let's get this straight: I'm not advocating for the preprocessor here. I will happily put it in the trashbin where it belongs as soon as I have support for modules in C++ (By the way, 90% of the code I write is written in the D programming language, which has modules, and no preprocessor).

I'm advocating for interface files.

Whatever mechanism you use, you still need a way to separate interface files from implementation files. Interface files can be header files, they can be java files containing a single java 'interface', they can be "D interface" files (.di). It doesn't matter which mechanism you use for this, as long as you have a way for your caller not to depend on the implementation of callee (which might, for example, directly depend on a specific audio API, for example).

My point is, if you want the caller to be properly isolated from the implementation of the callee, having to maintain signatures in an interface file is unavoidable.
I sometimes see American TV stations subtitle American-dialect speakers. Mostly this is due to audio quality, but it happens frequently enough with urban speakers of African American Vernacular English.

Standard English on television probably certainly helps speakers of less-prestigious lects understand Standard English, but not necessarily inspires them to produce it.
Note that the URL of the live stream appeared to be wrong for me.

was: https://www.youtube.com/watch?v=0fCEeAgeRC0

should be: https://www.youtube.com/watch?v=pi62S_MvheE
You can model most security requirements with either decision matrixes and/or decision trees. These matrices and/or trees can be retrieved or calculated dynamically avoiding you from having code like: user.hasRole("Superadmin") || snip...

The two primary models are Access Control Lists or Role based security. You can google lots of info on these two security models.

In the past for enterprise/b2b I usually build ACL security with a Role based security on top (that is the RBAC underneath is ACLs). Obviously for consumer based products this is massive overkill.
I'm hopeful. The more we do abuse detection by intelligent means the more we are able to spot abuse without using CAPTCHAs or other tools like that. We are about to allow our customers to whitelist Tor so that sites that want an immediate solution for Tor users can disable the CAPTCHA check.
Looks that way: https://beartooth.zendesk.com/hc/en-us/articles/216791588-Ho...

"Once you've paired Beartooth with your smartphone you can communicate with any other Beartooth users within range (about 2 miles). You can use Beartooth's app to talk, text, use maps, and share your location"
Is there any benefit in learning React Native since I have to write for both Android and iOS platform?
Therefore the marginal utility of time has a lower limit...

So what?

If we were to impose some cap on income (say $1B/year) would it suddenly be "exploitative" to charge any income tax? If not, then this argument is a red herring.

Would you say that it is overall a value positive transaction?

Yes.

Of course, your analogy is silly - a better comparison would be a resort near the desert which charges $2.50 for a bottle of water. All anyone is proposing is that welfare people get a job that pays the same rates that the workers supporting them get paid.
I agree, this has constantly been understated. The headlines make it seem that the whole case hinges on this phone, which is one of the least likely locations for incriminating data to be located.
The Reddit effect: more orders in 24 hours than usually in 6 months
From a financial/investing standpoint, he's in a way accepting the teachings of value investing - the business inherently has value in it, regardless of what the general market may irrationally place on the company; and that in the end, the company will be subject to mean reversion, and will eventually trend back upward when the markets stabilize.

However, the reality is that, from a value investing perspective, $HUBS is a company with negative EPS, high price-to-book, and operates on a $1B+ market cap with only $182MM in revenue...so it is reverting to the mean by correcting itself from such a wildly high valuation.
Actually that answer would be on tex.stackexchange.com.

http://tex.stackexchange.com/questions/2275/keeping-tables-f...

I'm not supporting this yet, let's see if I can make it work so that it uses also other stackexchange.com domains.

Thanks for the suggestion!
> If the needs of the many don't outweigh the needs of the few, then why does the total number of criminals matter?

Because the victims matter.

> If I want to buy strong encryption with no backdoor, and I'm not a criminal, then why would the issue of crime matter at all?

Being a criminal isn't an attribute of a person, it's the actions the person carries out. I don't give a shit about jaywalking, but I care about rape victims. This is not inconsistent.
When this last came up I started looking into Split-Ordered Lists, which are fascinating.

http://www.cs.tau.ac.il/~afek/SplitOrderListHashSS03.pdf
> 100% of the light is not reflected.

That isn't a mirror, it's a black hole!
You have to love how IBM uses the old fashioned press releases to try and lure young developers to use their hip new technology on their platform.
It transmits via some sub-1ghz free spectrum bands, which travel a good distance and have decent structure penetration. https://beartooth.zendesk.com/hc/en-us/articles/216797018-Wh...

This is why unlicensed spectrum bands are great; they allow for stuff like this to be built without a billion dollar spectrum price tag.
Doesn't really matter if he connected to the WiFi: even just having WiFi enabled/turned on means that you should assume every store that you enter knows that you're there, and every other retail store also knows (that you're inside a competitor's store).

There are a number of startups providing these services (some of them have gone through YC I think?). It's now so common that you just have to assume that if your phone is broadcasting anything at all, including looking for a WiFi network to join, that your location is being tracked and sold for competitive analysis by corporations.
Is this why Hangouts recently started advertising the Google Messaging app instead of the opposite? For the longest time, I was using Messaging but Google kept pushing me to Hangouts.
It's sustainable - if prices for regular rides rise to compensate for the losses drivers take on less profitable ones.

... and all of a sudden, you are back to taxi pricing.
You just made an important distinction, however, between a singular employee, and a group.
I've been using React-Native on the 0.20 branch, so that seems to be the only thing I'd consider coming out.
I was talking about getting someone to steal it.

I doubt that it's as easy as you think it is to get a NSL.
I just upgraded and the diffs are WAY faster now. Thanks so much for all of the hard work!
OP here, and one of the folks behind the app. Irony aside I'm glad we did the marketing part right. We need to work on communicating technicalities though. We do static analysis BTW.
Thanks. How about we just change the URL from http://conf.reactjs.com/ to the latter.
Maybe you should go write a NYT piece announcing that Tor is a failure because it didn't adopt your preferred censorware technology (https://lists.torproject.org/pipermail/tor-dev/2014-July/007...)?

Surely that would be a 'better' use of your time than claiming someone who is lamenting that CF won't even return simple read-only get requests without sending even larger captcha pages first is "implying [CF are] idiots who hate privacy, whilst simultaneously demonstrating little understanding of what abuse teams have to deal with".
The problem with any mesh network is adoption, and unless this uses some sort of high range communications, I don't see how it'd work well on the given example of "ski slope".

I wish they had more specs, less videos.

edit: ah, never mind (thanks linksbro)
Fibonacci heap (theoretically faster) vs. binary heap running times compared
Not a tutorial, but I was having trouble with that damn 'official' Letsencrypt client and the complexity of adding a .wellknown directory on every site I needed a certificate for.

So I saw the light in the form of a bash-script [0], wrote a short hookscript, and now I can centrally manage through DNS.

There are a couple of example scripts [1], and it really simple to write your own.

[0] https://github.com/lukas2511/letsencrypt.sh

[1] https://github.com/lukas2511/letsencrypt.sh/wiki/Examples-fo...
> Certificate Transparency-style public ledger for all firmwares that Apple has signed. Refuse an update if the firmware version has not been published to the ledger. This would make these backdooring attempts public, since we can assume people would watch the ledger and ask questions in case of an unknown version being published.

That's seems like a fantastic idea but without open source firmware I don't see how it could be enforced.
It was fairly formal, but the auditor was friendly and professional. My return was flagged as part of an IRS program to audit the forms and overall tax collection effectiveness, so there was never any presumption that I'd tried to evade paying taxes.

I sent over a bunch of documentation and then eventually met with the auditor at the office for a few hours to finalize things.
Rendering is flawless now.

I figured it was for loading, but I still don't like it (and it renders very strangely in Safari -- try mousing over it).

I would really like the option to disable it. I'm sure others like it though, cool option to have.
> unless phones develop dockable desktop capability in which case they are now dual-purpose converged devices.

Phones already have dockable desktop capability (that is, support for desktop-style output via appropriate cables that support HDMI, and support for desktop-style input via Bluetooth keyboard/mouse.)
Where I'm currently working we have quite complicated roles which are based upon the position a member of staff holds. Positions may change, and the permissions follows the position not an individual user. We have many applications, and each is free to implement their own roles but we have an open source gem which forms the basis of it:

https://github.com/ifad/eaco

At an application level there is a simple DSL that lets us define abilities on a resource (e.g. a document can be viewed, edited, approved and deleted) and roles (e.g. editor, reviewer, auditor), and to link those two.

On the actor (a user / member of staff) we define a set of designators such as what department they belong to, what position they hold in that department, what projects they are responsible for, etc.

When we then create resources, we link the actor and the designator which is ACL definition. For example, to say everyone that is a manager of department 5 can review a given document we do this:

document.grant :reviewer, :department_manager, 5

Permissions can be added and removed to the resource's ACL on the fly - so for example we could grant temporary access to a member of staff to review a document, then revoke their access once they've given the ok.

It's easy to check if a user can perform a given action on a single resource, but we also want to see what actions a user can perform against a collection of resources, for example to present a list of Documents they have access to. The ACL is stored using PostgreSQLs JSONB columns, which can be efficiently queried against:

{ "department_manager:5" => :reviewer, "department:3" => :editor }

SELECT * FROM documents WHERE documents.acl ?| array['department_manager:5']
So please help me out here. The article suggests a craft could be accelerated to .3c; surely this would not be for a Mars intercept!?

This is just an example of the potential, right? Otherwise slowing down a craft at relativistic speeds for Mars capture sounds... difficult to say the least.

EDIT: OK, after thinking it through further at .3c the trip would only take about 50 minutes, roughly. So clearly that's not what the article meant.
Google does this with all areas of interest. Politics, knitting, cat videos, programming etc. Sometimes it is useful sometimes it will re-enforce an echo chamber effect.
Heroku for swift?

Sounds like an old business model with a new language.

Still, making the lumbering giant tread into the 21st century is not going to be without pain, I'm glad to see they are at least trying.
Weird. I have never experienced anything like that with Amazon. The boxing appears totally irrelevant to me (as per what I pay Amazon).
This is not a programming problem, this is a Roles design problem. Admin is not a role, its a type of user. You might call it a container if you want... but roles are more fine grained, and should be a hierarchy.

You can put a hierarchy of Roles in a database, but the actual role check can (and I think should) be hard-coded.

In your API you might have a method "public void NewProduct()" That individual method should have the ProductWrite permission (role), and you can give that permission to higher level "containers" or "roles". So Admin has ProductWrite, and ContentManager might also have ProductWrite. In your code it's just one check has("ProductWrite").

Does that make sense?
"cargo" cult??? Don't you just mean "cult"? How does this have anything to do with cargo cults even metaphorically?
Does Amazon have an incentive to offer FDE, or is it just a support burden for them?

I ask, without much cynicism. How many of their customers will care? Will this lead to a PR problem for them? My guesses are few, and probably not.

Meanwhile, if someone forgets their password and can’t get their stuff, that could generate a lot of annoyance.

EDIT: To be clear: I value FDE personally, and use it wherever I can.
>"hundreds of iPhones they want Apple to unlock if the FBI wins this case."

Only hundreds?

It's not "unlocking" anyway, it's exposing the phones to an opportunity of cracking them open. A non-trivial time-consuming task, hardly the domain of opportunistic hackers with stolen iPhones.

>"government-ordered backdoor."

"Backdoor" is not what is being asked for, so they shouldn't use the word "backdoor".

Encryption is not under threat by this request. If raw computing power can break the encryption, then Apple should improve their encryption. Use more bits, more salt or whatever. Make it so a computer needs 50 years to crack a password, even with electronic brute force. Then it wouldn't matter whether the self-destruct kicked in or not.

And no mention of the compromise offer for Apple to keep the alternative OS on their premises and destroy it after.

Apple are trying just a bit too hard to "not put customers at risk". The risk is almost zero.

If Apple's security was as good as they claim, then not even Apple, no matter what they did to help, could crack the phone. That's where we want to be. At the point where it simply doesn't matter what the FBI asks for, the phone is uncrackable. Sounds to me like we're not there yet. Apple helping crack this phone will help us get there. And that's why I don't agree with Apple's position here. Let's see this phone cracked open, and then evolve the security to a point where a similar request would be impossible to achieve no matter what Apple or anyone did.
Because that is how the majority of our meat is farmed in our profit-seeking, externality-blind world. Throw in a little media to blow things out of proportion in everyone's selective echo-room, sit back, and wait for the demonization.

Keep picking the hard way, the rest of humanity might eventually follow your lead.
Cool. I think the line below the headline still has "$BOZOLANG", btw.
OpenWhisk: Event-driven platform to automatically trigger responses
A practical near-term application of this tech is precision formation flying of satellites -- Young Bae has been developing test systems for over a decade: https://www.nasa.gov/spacetech/niac/2013phaseII_bae.html

(It must be annoying when the researchers studying pie-in-the-sky mission architectures get all the clickbait headlines)
Exploring the Intersection of Art and Machine Intelligence
Leather Bag Damon Elliott Saint Tropez Erwan Music Video
Phone script Uber using to make anti-union phone calls
USPS logs all mail, i.e. metadata.
http://www.nytimes.com/2013/07/04/us/monitoring-of-snail-mai...
That is not the only report. There appears to be a consensus that this will happen at the latest by 2100. This report claimed only 30 years.

And all these are not taking into account the record temperatures in the Arctic circle that are currently being recorded (+4C than last century), which increases the chances of runaway greenhouse effects.

As I said, use google scholar. This is not a conspiracy, these are changes that are happening right now.
> I doubt it... unless phones develop dockable desktop capability in which case they are now dual-purpose converged devices.

Already here, its only going to get better.

http://bgr.com/2016/02/21/hp-elite-x3-review-pt-1-preview/