skysight-inc/HackerNews huggingface dataset:
>NY alone has said they will request Apple unlock roughly 200 phones they already have, so please explain how this is a solution

Why is this a problem? As long as the government has the legal right to search the phone, isn't it good that they can now search it?

Remember this would only apply to phones the government has physical control over and in cases where Apple is compelled by a court.
This comment breaks the HN guidelines badly, and you've posted many uncivil comments before this as well. Please stop doing that.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
If you read the article, you would discover that she's jealous of the engineers and others who get more freebies, better pay, etc.
When I'm using it I have a drop down next to where I send the message that lets me select sms or hangouts that seems to work as expected. I can choose which number to send to or to send a hangout. Maybe it's been a while since you tried it? I vaguely remember having problems like that in the past.

I respect your opinion about separate apps for sms/messages, but I personally don't believe that was the right choice. I strongly prefer having one app to use over switching all the time.
I don't think it's a surprise that it has often been the case that some Elements in the gvmt are able to rationalize some objectives they have can trump the 'laws' and other rules ordinary citizens would be held accountable to. For example, The Patriot Act and other measures can be broad enough in scope to allow interpretation which would have some elements think they are invested with the power of spying on their own citizens living within the borders of their country. That's just one example. Iran Contra is also another one, and the list goes on ... The impetus for this type of rogue action will always be present in the circles of power, to allow them to keep their positions.
Report it.

https://ico.org.uk/
Winning the Presidency with the 6-Second Story
I would definitely recommend it, I've replaced a few instances of nginx with it with no problems. It is based on the really solid net/http code from golang std lib and adds a few nice things like automatic tls/certs.
They shared the knowledge they had while working through it to verify that it's correct.
At the center of it all, everybody's scuffling to be the all-seeing eye of the internet. Google/Apple/Facebook/ad networks/etc all want to know everything, to be able to sell & exploit that information. They don't want that precious IP to be diluted and lose value, so they must defend their freedom and autonomy to do what they'd call "evil" if others did it.
Maybe a stupid question but is there a publicly hosted GitLab that provides free repo space (and the usual pay for private repos) or is it only self hosted?
Do we know for sure it's working: does that information lead to more sales ?
This wasn't removing firmware as in the actual boot code for the motherboard. It was just clearing the list of what drives to attempt to load an OS from. That list is explicitly intended to be accessible to and modifiable by operating systems, to provide a better user experience than the old method of the user having to manually change BIOS settings.

The standard practice for PCs has always been that firmware configuration settings can be cleared (through a jumper or by pulling the battery) to reset the system to its factory state, forcing it to fall back to its conservative and safe defaults. Some systems have apparently forgotten to have defaults. Their firmware is already broken and afflicted with a major bug even if you avoid triggering it in this particular manner.
Please stop posting unsubstantive comments to HN.

We detached this subthread from https://news.ycombinator.com/item?id=11146445 and marked it off-topic.
For offline use? But git is a dvcs... ahem, anyhow, wkhtmltopdf[1] is a reasonable choice for converting arbitary urls to pdfs, and can be installed via apt, homebrew cask etc.

[1] http://wkhtmltopdf.org/
Curated collection of ambient websites to recreate a unique working environment
That, and they are started to get a little gimmicky with the upsells etc. Still, I enjoy using them for about 10 years too. Taxes done in about 1 beer - can't beat it!
Declare that the phone is a banana and therefore not entitled to expectation of privacy.
It shouldn't be possible to brick hardware by running 'rm'.
We're working on a big release this week to add flexibility, but the contracts definitely aren't for everyone.

If you're a decent sized agency working with larger clients, it probably won't be flexible enough. We try to cover the 80/20 cases and provide some flexibility, but we need to maintain some standardization for the ease of creation, integration with invoices, etc.
Mark Zuckerberg Backs Apple in Its Refusal to Unlock iPhone
It's a framework. You build what you want on top of it.
No. Sane operating systems don't present UEFI variables as a filesystem. Their structure, their contents, everything are not files. Period. efivarfs doesn't expose metadata regarding when variables are visible, does't expose any sort of interface to present a private key for managing secure variables, etc. It's just a bad, broken idea that should be completely removed.
What are the fundamentals of evolutionary biology?
UKnowKids.com database error exposed sensitive information on 1,700 kids
That's pretty awesome of you.

I'm jumping on this offer!
It has been stable and reliable for me too. But the concern is not about reliability so much as security: some patches are not delivered due to the way Mint (apparently) mixes binaries from Debian and Ubuntu. It may be quite reliable but still insecure.
Nobody is asking you to test your software on a million different platforms, just don't abandon your 1.x users the moment you release 2.x. I am not talking about explicitly supporting XYZ distribution, because package maintainers and software developers are two different groups of people.
It's a better idea to open an issue on the github project.
So, they've basically put out a modern digital walkie talkie, that uses your smartphone?
> Call me greedy, but within the constraints of a balanced budget, I would like to see an increased portion dedicated to science (be it a 'cancer moonshot' or an actual marsshot) vs social program

Note that this basically happened already. As Apollo wound down, the War on Cancer wound up https://en.wikipedia.org/wiki/War_on_Cancer

Turns out it's far more difficult to cure cancer than to reach the moon.
Why doesn't it make sense to talk about the inherent difficulty of a language? I agree that some languages are related and this eases learning (PT to ES, PL to CZ) but why can't we look at learning speed on completely unrelated languages? For example, get some monolingual Quechua speakers and some monolingual Tamil speakers, and have them each learn the other language. Which group learns faster? The group that learns faster is learning the easier language.

I realize that this isn't practical to actually do as an experiment with all the world's language pairs, but I do think it demonstrates that inherent difficulty is a thing.

One thing that sort of shows this, though it's kind of distorted by writing systems, would be charts like this from language learning companies: http://www.effectivelanguagelearning.com/language-guide/lang... For example, they think for an English speaker Swahili is easier than Nepali is easier than Finnish.
You are clearly omitting the most important part of your story. Are you an alcoholic? Bipolar? Do you suffer severe depression where you stop showing up for work for weeks at a time? Schizophrenia?

I wish you the best, but it is silly for you to act like you 'just can't deal with it' rather than just admitting the real issue and trying to get help.
Anything done by Facebook gets infinite upvotes nowadays.
The misspelling prompted me to the notion that "frivolous" is a great word that ought to be more widely applied to a variety of situations in modern life, but somehow has been pigeon-holed to a legal definition.
(Biased React dev here.)

The key insight in Draft.js is that it's incredibly difficult to keep your model in sync with the browser's contenteditable behavior unless you intercept many of the behaviors and perform them entirely in the model, then change the DOM accordingly. Medium found the same thing when building their editor:

https://medium.com/medium-eng/why-contenteditable-is-terribl...

In order to build high-quality text editors, you need to be in control of what's happening in the DOM. There's obviously many ways to control the DOM. React is a solid base for this, as are many other libraries. Facebook uses React extensively so it made sense to use as a base for Draft to avoid needing to essentially rewrite React and to make it even easier to integrate with existing React apps. Of course, you can also use Draft easily inside a non-React app.

The entire Draft model is also separate code decoupled from the UI and you're free to use the model and implement the views yourself if you're allergic to React or aren't targeting the DOM. The Facebook Groups app uses Draft's model but implements custom views for it in React Native.
What kind of latency do they expect from these things? Less than 50 microseconds for a small RPC or small RDMA access? I'm wondering how far these things really are from commercial cloud clusters.
> Not everyone uses Facebook or Google or Twitter after all

Yep, I do tailor the selection of oauth providers to my audience. E.g., an app for devs = google, github, and gitlab.
That just doesn't feel very realistic to me. Weapons like that don't just appear out of nowhere. I imagine countermeasures could be developed at roughly the same pace as nanobot threats. And if not, we'll deal with it the same way we dealt with nukes. Hopefully it would go a little better this time, since we have a little apocalyptic experience to learn from.

And why is this limited to nanobots? Wouldn't it be easier to develop a million variations of existing biological viruses, rather than creating a million "species" of nanobots from scratch?
While true, this doesn't make for a good excuse to let your employer's server go down when its disk fills.
Heh, good point.
For an "let's fix content-editable once and for all" affair, I don't think the initial widget they present on that page could be any more underwhelming.
I don't disagree with this, but I still think it's irresponsible of systemd to claim it's a kernel problem but not take steps to help people not brick their systems before it's fixed upstream.
In most rich text editors the DOM is the source of truth and the editor reads and attempts to sanitize HTML when you're done.

Draft.JS is a controlled input. The view is completely derived from the model. This eliminates whole classes of browser and editor bugs.

It's also makes the editor really easy to extend. You can add new object types and complex styling without having to worry about all the nuances of text editing.

For example you could highlight hashtags by giving the editor a regex to match and then tell it which styles your hashtag should be decorated with. Draft.js handles creating and removing tags as you type, drag and drop, copy, paste, etc.
https://gitlab.com/ with free public and private repositories
Even then, who cares. Software developers didn't have to explicitly support BSD, if there was a BSD user who cared enough they'd work on getting your package in the ports tree. If there was a Debian or Red Hat user that cared enough they'd make a .deb or .rpm. None of this has changed, what HAS changed is library and application developers deciding to say "screw people using existing releases, I'm only putting bugfixes and security updates in the newest release so anyone still using 1.x and caring about stability can sod off".

I package software I care about, but libraries in particular are notorious for not maintaining any semblance of ABI or API compatibility even between minor releases these days. It's increasingly difficult to support this when I have to rebuild or update multiple applications that depend on a library because they decided to make huge breaking changes in a point release or they won't provide any bugfixes for the major release I'm still on.
I was in the south Everglades last week. We went over a pass that was _1_ ft tall. Coming from Colorado, the sign advertising the "pass" was just bizarre.
DirectX, probably, but arguably that counts as "standard OS stuff".
Yes, it's much simpler to have a natively React text editor, that way you can plug in the state of the <Draft> component into your other React components. See http://facebook.github.io/draft-js/docs/overview.html#conten..., everything is nice and neat.

I'm not sure about 3rd party js text editors, but I'm guessing it could be a pain to work with state and props in that context.
Madison said it best:

> If men were angels, no government would be necessary. If angels were to govern men, neither external nor internal controls on government would be necessary.
Fortunately it cannot connect malicious USB dongles. Yet.
Jeroo: educational IDE for novice programmers (2008)
They probably also have most of the bookshelves on rails? The local uni library keeps their old books on a system like this, it's really quite cool. The room can fit, say, 54 bookshelves tight-packed with no room to enter anywhere. So they put 52 shelves in on rails, and between each pair there is a wire going across. Disconnect a wire between two shelves, and all the shelves slide apart so you can enter where you opened the wire.
Yeah, especially the Go guys /s.
Compiler improvements in VS 2015 Update 2
Side effects of using .first_or_create in Rails at scale
I was trying to port an app I already had in c# with wpf to be cross platform, so some networking code could be shared, but I could still use xaml and all the wpf work that I already had (although it wasn't that extensive, just tried for the sake of learning), I also used some audio apis, and with IronPython i could call c# code and use NAudio, so in the end I couldn't do what I wanted with just CPython
Click on the comment's timestamp to go to its page, then click 'vouch'. But note that you need more than 30 karma before the 'vouch' and 'flag' links appear.
Except their mobile app. Anything made by their mobile team should not be on anyone's phone, battery drain is a huge problem.
Eliminate the 16th Amendment. This would reduce the power of the IRS

https://www.law.cornell.edu/constitution/amendmentxvi
That doesn't really seem to be related here.

One of the reasons I gave up on Slashdot was how people used any story as a tangent to flog their unrelated hatred of some company. Please don't turn HN into Slashdot.
Physicist Robert L. Forward mentioned it in his book Rocheworld (later republished as The Flight of the Dragonfly)in the early 1980's, with the concept work being done in the 1970s.

https://en.wikipedia.org/wiki/Solar_sail#Interstellar_flight
I don't entirely disagree hence the word 'mostly'. What I really meant is that attitudes have shifted over a hundred or so years.
Start pushing for its deprecation. Devfs existed before it was replaced by udev. Keeping a broken system around just makes it harder to fix it. Interfaces on other systems, like the BSDs' sysctl show that you don't need to make everything a pseudofilesystem to make variables possible to change. If someone really really wants their efi variables as a filesystem, they could always write a fuse driver or the like.
What you mean is: systemd could have fixed it, but it would have been a lot of work and a hack that wouldn't help you when efivarfs gets mounted on a sysv/upstart/openrc system. The kernel was the best place for the fix.
Why would you use drones instead of a one-time mesh network install that is solar+wind powered with long term lithium battery backup?

One of these could be powered for a month off a shoebox sized battery:

https://wiki.hackerspace.pl/projects:zsun-wifi-card-reader

Now mesh network them every few hundred feet.
I think the confusion stems from the iOS security guide that Apple published. Page 7 of the guide states that "The Secure Enclave is a coprocessor fabricated in the Apple A7 or later A-series processor. It utilizes its own secure boot and personalized software update separate from the application processor," which implies that somehow updating it is more secure, without saying exactly how much control Apple has over updating it, and whether or not the phone needs to be unlocked before it accepts new firmware. Given that they haven't come out and said that they can't override the firmware for locked phones, I'd say they can. Although, before Apple's recent statements I would have assumed that they couldn't, so the confusions understandable. The guides at https://www.apple.com/business/docs/iOS_Security_Guide.pdf
Thanks, that's valuable feedback. What would you suggest instead?

The goal is that with Draft.js you can easily build any UI you want and Draft.js helps you manage the underlying model and DOM manipulations.

I am sure that several people will build and publish drop-in components using Draft.js within days.
> No, I'm sorry. Kids being raped matters.

I never said it didn't matter, but the problem is bigger than one issue.

I have total distain for people who do this, but lets be clear that an encrypted phone isn't going to stop these people getting caught. They're already aware of how despicable their acts are and use the traditional trust systems to hide it. All the busts are through social engineering - agents who go undercover to infiltrate these networks and find the perpetrators. This must be one of the worst jobs in the world.

> None of which is remotely related to phones being unbreakable by law enforcement.

And as has been said by experts in cryptography, breakable by one third party means breakable by _everybody_. This means the partner who said they'd harm you if you told someone what they did to you. This means the pimp who's holding you against your will. This means the company who's allowing toxic substances to leak in to drinking water.

This is _much bigger_ than one issue. In the digital world once something exists it can escape. Once it escapes you can't stop it, and it will escape.

This is nothing like a normal search warrant. It's a warrant with no address, no reason and no time. It can be used whenever, wherever, and with no oversight on who does it.
Pycallgraph is a module that creates call graphs for Python
Yes, but alas you have so much greater things to care about than us, that it's surprising you even took the time to comment on this thread.
I love GitHub, I'm loyal and grateful to them for all they've done for us, but GitLab is significantly more agile these days and loyalty easily can be reassigned. Even Bitbucket is picking up development, so, if I was GitHub, I'd really seriously reorg and ramp up development and innovation!
Downvote links on comments (but not stories) appear when your account has more than 500 karma.
> Go ahead and get your secret warrants and send those NSL's it's physically impossible for us to get you the information you want.

I would agree with you except for this bit right here. Apple has already acknowledged that they can break this. They just don't want to. If they government pushes hard enough, they won't have a choice. My cynical side this is probably all Apple was hoping for. Look like the good guys, but don't do anything that would increase their liability.

Even if they designed something they couldn't break now, they control the update mechanism. Adding the ability to do so in the next update is, from my understanding of Apple products, possible. I do agree that it has forced this whole thing out into the open, but they could have done so much more here to make it actually impossible to break if they truly wanted to make a stand. Of course, they'd be giving up their hold on your device if they did that.
So I just want to make sure I understand the criticism, as I feel we may have inadvertently drifted here:

Someone who knows the risks (physical, emotional, mental what have you and furthermore etcetera) of a job shouldn't be afforded certain protections from the government to minimize those risks, if they take a job that opens them up to the possibility of said risks?
>and Mir do wrong?

one of the main factors that affected Mir was that USSR and its economy had disintegrated and during the 199x Russian space agency (and related government R&D institutions and factories) employees were having even their small salaries delayed for months (so the ones who hadn't by the time left the industry for better pastures, had to do side employment/business just to survive), the hardware production on many military/space-industrial-complex factories stopped and whatever stockpile of parts available was sold into the others, non-space markets, like for scrap or precious metals. It came to the point that some parts delivered to Mir in the end of 199x were actually bought at a flea market.
Fascinating perhaps, but slow. All that pointer-hopping is far more expensive than open addressed collision resolution.
Any chance that react native view code will be released at any point? Would be so useful!
>Thanks, that's valuable feedback. What would you suggest instead?

Well, something closer to CKEditor or, if you prefer minimal, something like the editor in Medium.com.
No, you are missing the context of the earlier paragraph, which says "Well, there are tools that actually want to write it." so it needs to be accessible in some way. Making it truly read-only is not really feasible, and goes against the Unix philosophy of "root can do anything." That's not to say that we shouldn't make it harder for root to do some things, such as brick your system. In the end, the fix still doesn't prevent root from bricking a system in the case the firmware is badly coded, it just makes it a bit harder. Mounting read-only by default or defaulting all files to immutable until changed by chattr are not hard hurdles to overcome for root, but they the do make it harder than it would be without them, which in this case is a good thing.

> ... so running "rm -rf /" as root should brick your motherboard because it's the responsibility of the motherboard manufacturer to protect against this.

You are assuming "only writable by root" means "root can write without any restrictions" which is a fairly uncharitable reading, and requires assumptions about his intent which are not evident.

I could make a statement such as "cars in the united states can only be legally driven by people of an appropriate age" and you could assume I meant that's all that needs to apply and start calling out my statement as wrong, or you could assume I was aware of the additional requirement of a driver's license, or you could ask me to clarify my point of view. I just don't believe the first option is conducive to useful discussion, nor do I think it's appropriate to use assumed information in a negative way towards a third party.

Edit: s/disparage/use assumed information in a negative way/ for lack of better phrasing coming to mind. The statement wasn't really disparaging, just an uncharitable interpretation, so I don't want to overstate that.