skysight-inc/HackerNews huggingface dataset:
Apparently, devices with A6 processors, such as the iPhone 5C contain a hardware key that is somehow "unreachable" and "unique" but it is "tangled" with the phone passcode to create the encryption key with which the rest of the data is encrypted. It's less than the whole "enclave" but there is the hardware dependency.

I haven't seen anybody presenting enough details about this implementation to estimate what would be the easiest attack vector, but I guess once it's not limited to "which software I can run" but assuming "we can control the hardware environment of the CPU too" there's more that can be done in this case.
You can find it here: https://www.digikey.com/product-search/en/inductors-coils-ch...
Origami and Programming
The guys who write the speeches are called speechwriter, in case you never heard about it: https://en.wikipedia.org/wiki/Speechwriter

On that very page a picture description reads "U.S. President Barack Obama and aides Carol Browner, David Axelrod and Jon Favreau working on a speech (...)".
I guess at 28 I'm already very old. I can't for life understand this phenomenon. I avoid Let's Play, just like I prefer to watch movies alone (or with friends who know they should shut up during a movie) - because the commentary of another person is distracting from the experience. It kills immersion.

Videogames have the ability to deliver as much (if not more) of a serious emotional experience as movies and books. Is this Let's Play trend implying that kids no longer care about actually experiencing the game?
ES6 Modules – export singleton like instances
As I have found, sharpe can be a misleading measurement of risk due to path dependence.
The pirates (arrr!) are essentially using steganography when they hide videos in jpeg images or pdf files. Steganography can (sometimes, depending on the algorithm used) be detected, but in the end it's an arms race between one side using more sophisticated steganography and the other side using more sophisticated detection mechanisms.
The colonialism is attempting to enforce Western mores and laws about copyright on the Angolan population. As well as Wikipedia's own culture which is pretty Western itself.

While Wikipedia may be attempting to colonize Angola with some of its community conduct values, the population there has another view of Wikipedia's purpose which might be equally valid.
‘Metaphor’ Exploit Puts Millions of Samsung, LG and HTC Phones at Risk
"secure enclave" is a marketing term that has grown over time and is hard to speak meaningfully about.

In this particular device, the CPU has a small (~200 bytes) storage area of data that never leave the CPU, burned in at the factory, and allegedly never recorded during manufacturing. This data is involved in the cryptography, and this is what you have to brute-force. Short of capping the CPU, or some crazy side-channel attack, it's unreadable.

In addition to that, modern devices have writeable memory areas that similarly stay on-die. That (or is it the related coprocessor?) is sometimes characterized as "the secure enclave" This device does not have that. Since it lacks writeable secure storage, by manipulating the NAND you can defeat the 10-pin lockout, which for obvious reasons has to be implemented in a writeable memory. However that is different than the unlock itself.

I am pretty skeptical of the OP, as it seems to me you could just use a write-blocker to preserve the NAND, without going to the trouble of pulling apart the phone every 10 attempts. You may need to do some emulation if iOS tries to check its write, but surely our friends at a three-letter-agency already have something off-the-shelf for this.
These can be run standalone also (atleast on windows not sure about mac though)
The RTL SDR can (unmodified) only receive down to a few ten MHz. At least for some of their research they used a soundcard. As far as I know you will access different types of information. kHz range is mostly power consumption. Tens/hundreds of MHz is bus activity.

Both may be correlated, and both gives you side channel information to attack cryptography.
Dupe (previous submission and discussion here: https://news.ycombinator.com/item?id=11352307)
Just read about ICMP and DNS tunnels, is that an option on these systems?
Yes, the nicest trick, once you make the custom hardware is that the CPU doesn't have to "tick" at the full speed all the time which gives you the chance to process longer the conditions that need some special processing. You can "single step" the hardware.
How Metals Helped Drive the Origin of Life on Earth
As others observed this is a common condition in plants (where repeated hybridizations can result in even higher ploidy conditions, e.g. tetraploid wheat, sexaploid sedums).

But as you ask, why isn't it observed as often in animals, or indeed at all in mammals? One argument is that plants generally feature fewer tissue types, and their anatomy shows less interdependency of parts: they have a body plan of repeated units showing some redundancy. (Cutting off a branch is not like cutting off a leg.)

In other words, by many metrics of organismal complexity, plants are less complex than animals, such that their developmental programmes can "tolerate" relatively major disruptions to genomic organization.

There are some insights in this paper: http://www.ncbi.nlm.nih.gov/pubmed/15780745
How to be a powerful female entrepreneur – Mashable's latest Twitter discussion
It's training users to only use their products, and by the time access becomes cheaper, those products will be able to crowd out any competitors. It also means that any local competitors don't get fair treatment, and will automatically lose to these services provided by the 'colonials'.
I prefer Ales, but there's another "variety" I'm very fond of - Belgian Lambic beers[0]. They're brewed using wild yeasts instead of the brewer's, and have a really special (sour) taste. Try the unblended ones if you get the chance, otherwise a Gueuze or a Kriek will do (avoid the fruit ones though).

[0] https://en.wikipedia.org/wiki/Lambic
The author puts encyclopedic knowledge and movies in the same category ("information") and seems to be arguing that they both should be freely available.

I'm not saying that current copyright system isn't completely screwed up and in need of reform, but I don't think disregarding content creators is an optimal solution.
Yes but I want the protection of a credit card. In the uk at least you get a big advantage legally buying things on a credit card.
Ask HN: How do you integrate remote developers?
We are a team of 12 developers in our local office plus five to six remote guys. How do you integrate remote developers? On a technical level (video conferencing, IM), but also on a social/personal level (team spirit etc.).
Let the Rust vs Go fight begin.
Send me an email. This sounds awesome :)
Consumer Group’s Test Finds Lead, Cadmium in Some Chocolate Treats
Historically, consumer staples have much better risk-adjusted returns than any other sector. Buying and holding these stocks will beat active management and the S&P 500.

Active management, despite their access to expensive Bloomberg terminals and other financial resources, by in large, are just as clueless as retail investors, but they have more money and make up the difference in fees.

What does this prove? The fact that billionaires and hedge fund mangers – who have access unlimited data, who can buyout seats on the board of directors, and can even influence the news – are unable to beat the market but instead underperform it substantially, douses cold water on the popular belief that the markets are rigged, inefficient, or a scam. The biggest scam are these firms charging high fees for poor performance, but the market itself is not broken.

Instead, the market has become more efficient than ever, benefiting index buyers and hurting those who think the are the next Warren Buffet.
There's a few extensions that do this, and they're pretty trivial to write if you want something more custom: http://paste.click/brRgHL
Don't make games that can be easily watched and not played. A game with tons of replayability can be played by let's players endlessly yet people will still want to play it themselves.
I primarily work in Coffeescript.

A lot of the things I love from Coffeescript got picked up in ES6/ES7, so it wasn't a big deal for me to transition. :-) (sad that Coffeescript will decline when it has more to offer..)

I had to work on an ES5 project recently and I was almost in tears because I couldn't use a computed property. (someObject[someValue]) I wound up writing a switch to assign the correct index, and I felt very sad about my life.

Someday people might not learn about how we kept things private in closures. They'll have a `private` keyword to make their transpiler do it for them. It has become less important to directly know how inheritance works, so people might be happy having a `class` syntax. There are a few times I've wanted to make an object fallback on another without making an official "class", so maybe this will be secret juju someday.

I tend to view language development like overfilled buckets. When JS becomes as complicated and unwieldly as C++, we'll spill into the next bucket in an effort to create another simple language.
Exactly. First thing I thought was "boy, those cars are going to be expensive", and, unlike Tesla, the advertising is going to be everywhere.
Sorry, no, I'm saying that historical returns have not demonstrated an ability by anyone to consistently generate alpha net of fees. Even the longest running market-beaters thus far do not fall far outside the expected range. Some have demonstrated statistically significant alpha, just not enough to account for their fees. In one sense it is certainly possible to imagine a string of returns that would do so, but it hasn't happened yet. (Also if you believe in (relatively) efficient markets, it seems unlikely to happen in the future either, at least in a fashion that could be identified ex ante, and thus profited from. But that's tangential to the point I was making above.)

The paper demonstrates this by comparing the actual distribution of returns to many sets of simulated returns over the same period. When the simulations are built assuming that fund managers have just enough skill to generate zero net alpha, the actual distribution has consistently lower returns across the board than the majority of the simulated distributions. It gets closer in the very extreme right tail (the 98th to 100th percentiles), but still not enough to generate positive four-factor alpha net of fees.
Is that an argument that makes any sense in the context of Wikipedia? Where users actually form the content itself, and where access and content are free anyway everywhere?
Didn't he choke to death on a loose QL key?
Maybe I missed the part of the article where it said that people in Angola are being forced to use Wikipedia.
Not sure why you're getting downvoted when this is exactly right. If you don't want this problem then don't make something with low amount of content that people can be done with in just a few hours.
That's strange, as I got several emails from Amazon telling me about the upgrade.
I don't think the sample size has to be very high. Tv viewing figures aren't achieved by sampling millions of viewers.
I'm guessing that two way RF communication != "little risk of detection".

Anyway, this is the sort of thing I'd expect the NSA to be doing against specific targets. And I'd expect the targets to have equally sophisticated countermeasures.
Nothing has run on the tracks for 20 years. Some of it has been pulled up, but the right-of-way remains.

Seattle Transit just announced a $50 billion plan to blast new right-of-way, never mind the trackage could be doubled by re-using that right-of-way for a few million.

You can still see the tracks on Google Maps:

https://www.google.com/maps/@47.6753261,-122.1882192,16z

although it has been renamed "Cross Kirkland Corridor" in their attempt to hide what it is. Sound Transit prefers a plan that costs one thousand times as much, still won't serve the eastside, and will not be in service until half the existing taxpayers are long dead.
Sure, but to listen to Dyson's marketing, you'd think it was all made in the UK.
Thank you! There are so many way of implementing GTD and countless posts on parts of everyone's setup, so I just figured I just post my entire setup in one single article.
The article about that on the Internet Archive written by Brewster Kahle himself:

https://blog.archive.org/2016/03/22/save-our-safe-harbor-sub...

"We filed comments this week, explaining that the DMCA is generally working as Congress intended it to. These provisions allow platforms like the Internet Archive to provide services such as hosting and making available user-generated content without the risk of getting embroiled in lawsuit after lawsuit. We also offered some thoughts on ways the DMCA could work better for nonprofits and libraries, for example, by deterring copyright holders from using the notice and takedown process to silence legitimate commentary or criticism."
What is an Agile Leader?
One thing that's happened is that Wikimedia Common's is utilizing IP range blocks for the country. (meaning users will have to request exempt accounts) [0] However, users can also upload files to their local Wikipedias and the Portuguese Wikipedia couldn't really range block a whole country of its participants. That's what this article and the mailing list [1] is having trouble with. Wikipedia does have a permissions system so that's the likely avenue they might pursue. For example, on the English Wikipedia, users have to be "autoconfirmed" to create pages or upload files. However, it is very easy to attain: an account just has to be older than 4 days and made at least 10 edits. Maybe they'll create a stricter group for uploading files. (though who knows, maybe they'll start encoding the files as text comments into articles) Another possibility is making each upload subject to review, similar to a pending changes system, but that has its own problem in having enough reviewers. [2] When I looked at the mailing list discussion when it was just starting, the foundation was suggesting user education over blanket banning policies. It's certainly not a problem with an easy solution, and in my opinion it's much more of a people problem; throwing tech at it might exacerbate matters. Not to mention that any potential solutions will also make it harder for new would-be editors, making it a tragedy of the commons. (where I'm referring to the open nature of Wikipedia rather than the free data) [3]

[0]: https://commons.wikimedia.org/w/index.php?title=User_talk:St...

[1]: https://lists.wikimedia.org/pipermail/wikimedia-l/2016-March...

[2]: https://en.wikipedia.org/wiki/Wikipedia:Pending_changes

[3]: https://en.wikipedia.org/wiki/Tragedy_of_the_commons

Sidenote: Wikipedia and commons already have a concept of "patrolling", which puts up every new article or file to be patrolled by another editor for spam/copyright violations. That's likely how these bad uploads were caught. Unfortunately this doesn't stop the upload in the first place and requires work to look at and delete the files which is hard to keep up with. (Not to mention that not enough people patrol pages either. On the English Wikipedia, nearly every page I've had patrolled was by one user called SisterTwister. I was also given autopatrolled rights on commons even though I'm hardly a prolific uploader)
سال نو مبارک – AVAV
Huh ... interessting. They probably ran out of e-mails...
Looks horrific. Tragic over sharpening, crossed with HDR. Best avoided unless you're into instagram filters to disguise cheap phone camera based photography.
The Conservative case for a basic income
For a post about UX, I was expecting to _see something_ above the fold! I actually thought it was broken (eg due to adblock/ghostery) and almost closed the tab without scrolling down.

Good post though. I've seen some pretty terrible empty states in various apps...
They run that fast between cities. Clearly we aren't talking about that. Japan"s intracity maglev is going to go almost 600kph.

http://youtu.be/VuSrLvCVoVk

Of course, you don't build that to go 10 city blocks.
>then renting will indeed contribute to sustaining a bubble more relative to getting out of exercising demand on the market completely

True. In relative terms, and in this context, you could say it 'contributes' to the bubble.

I still maintain that the concept of normal (organic, non-speculative) demand contributing to a bubble is generally wrong. I don't think it's accurate to say that any and all sources of support for the price are contributing to the bubble. This conceptual framework will mislead people about the cause of a bubble.

But in the context you're using it, it could be considered accurate.

PS. you don't need to get hostile. I was explaining how I interpreted your statement, not 'putting words in your mouth'.
> it seems to me you could just use a write-blocker to preserve the NAND,

Not directly just a simple "blocker" as the software apparently also reads after the write to check the success of the write, but it seems something a not too complex is doable.
NPM module that returns 5
> isn't it hysterical how everyone using npm for small reusable code pieces! Aren't they morons!

Exactly. And no amount of evidence or disasters will ever convince them otherwise, so we all laugh at them.
Go Project Contributers by the Numbers
I wonder if this is related to the reports from seven months ago that Soylent has unacceptable levels of lead and cadmium. It may be that they have ingredients in common, and the lead and cadmium come from those.

========

A corporate watchdog says Soylent
contains unsafe levels of lead and
cadmium (qz.com)

https://news.ycombinator.com/item?id=10078698

========

Watchdog group says Soylent’s cadmium
and lead levels violate CA law
(arstechnica.com)

https://news.ycombinator.com/item?id=10071723

========

Lead and Cadmium in Soylent (yahoo.com)

https://news.ycombinator.com/item?id=10063682
Reddit outage?
Show HN: BitBar Plugin to connect SSH hosts via storm-ssh
It would be great if this + other fintech services catered to overseas markets. It's understandable why they don't, but as an expat/nomad, centralizing your banking is a huge pain point. This cohort is only going to grow.
Try

.sort(sorts.numerical)

Using npms 'sorts' module
Pewdiepie has spent years building up his "brand". People don't come to watch some companies game, they come to watch him.

Royalties to the game creator for usage seems fair, but the player should get more.
Happy Easter
Give not into the depths of darkness, #Easter sheds light. Profit from our #sales_advantages on car-liquidation.com and give your #car_business a boost.
While I wouldn't say I'm fond of them, Lambics are definitely an excellent beer to explore and a must for any beer lover. I had a long weekend in Belgium a few years ago, which included many, many beer tastings. My beautiful wife and I had other clear favourites, but the Lambic brewery we stumbled upon in Brussels is the one we talk about the most.

[Edit] This is the one we visited - http://www.cantillon.be/br/3_1

From memory I enjoyed the Faro most - you could only drink it on site, because the sugar content was so high it was liable to explode if transported roughly.
no- you are comparing apple to oranges (use some other figure of speech- I'm no native speaker)

yes, it is perfectly ok, that Google discontinued Picasa- I am still using my Installation

no, as I would have liked some improvements to it...
I'd be very surprised if that were the case. The impression I got from the article was that they were just changing the extension on video files so that they could be uploaded as PDFs. For it to be steganography would require the PDF of the video file to still be readable as a PDF, which is vastly more work and takes much more technical knowhow (and the ability to download a decryption program) than just renaming.
And the Internet Archive DMCA 512 Comments are here:

https://archive.org/details/InternetArchiveDMCA512Comments

And if you want the plain text version of the above:

https://archive.org/stream/InternetArchiveDMCA512Comments/In...
The target market is for library/framework authors, especially those wishing to make polyfills for future layout algos that haven't been adopted by everyone else yet.
These unlucky people have names that break computers
Scientists push a record 57Gbps through fiber optic lines
A bit of more information: with global illumination (GI) a point is shaded by considering the light coming in from all directions to that point. It is the integral over Omega in the rendering equation [1]. This is expensive to compute. Especially since it is recursive to infinity, if the incoming light was reflected by a surface. The author uses pre-computation and keeps the geometry static, which is quite a common approach.

[1]: https://en.wikipedia.org/wiki/Rendering_equation
Spotcam home security camera records 24 hours free
Telling how the people in the comments who disagree with the article also tend to appeal to authority (see the comments by Herb and Jaroon).
Stripped probe is electric. Looped probe is magnetic. Stripped/looped probe is mixed probe. If you use coax - leave the shielding, just make sure to leave a gap. Just look at this picture [1] from this quite good article [2]. Depending on the design/equipment, you might need balancing/symmetrization.

Also directivity/sensitivity. While turn count will improve overall sensitivity, loop size will increase directivity. Keep in mind that both loop size and turn count affect probe filtering characteristics (it IS a filter), so I highly recommend experimenting with several designs. Have a look at my attempt at making magnetic probe from RG174 [3]. It is fat because of two layers of thermal shrink tube, which made it stiff enough for my experiments :)

It is hard to tell from a picture, but it should be that this probe uses two wires exactly for this purpose: one acts as a central conductor, other as a shield.

[1]: http://www.compliance-club.com/archive/old_archive/030718b.j...
[2]: http://www.compliance-club.com/archive/old_archive/030718.ht...
[3]: http://imgur.com/hiRUJl6
Little Bobby Tables made some new friends.
How is a political opinion of an individual related to his scientific work? I mean, it's not like he's releasing anything close source and asks you to believe him on his word; so, if he had opposite political views, would you see his work differently? Why?
Encouraged, is perhaps more appropriate, as Wikipedia is the service being zero rated rather than something else that would be more suitable to the task at hand.

Forced, to the extent that they cannot afford to use other services that are not zero rated. The article mentions $2.5 for 50 Mb which is quite expensive by any measure.
I had to work on an ES5 project recently and I was almost in tears because I couldn't use a computed property. (someObject[someValue]) I wound up writing a switch to assign the correct index, and I felt very sad about my life.

Just checking -- is this a parody of a JavaScript hipster, or do you seriously get depressed by writing a switch statement?
This is the objection to zero-rated services. Angolans get to use the internet, but they only get to use the zero-rated bits of it. And they have to use them in ways that westerners approve of.

It comes down to money, really. Do we put a "you must be this rich to use the internet" sign up on the planet's communications, or do we allow people to bring their culture and ideas to the party despite their poverty?

This whole thing reminds me of UseNet in the early days. It was supposed to be about news and conversations. It ended up being about sharing copyrighted content, because it was one of the only ways we could do it.

So we (Westerners) misused our internet services to share copyrighted content in the early days of our internet experience, why are we even surprised, let alone objecting, that others are doing the same?