skysight-inc/HackerNews huggingface dataset:
Your questions seem to conflate two things: nonrepudiation (which includes integrity) of firmware and A3E for I/O.

- Treat firmware like a file, save hashes of them in a public-key signed baseline db. Basically hash everything that can be dumped and throw alerts if anything in the targeted policy changes. (Tripwire for firmware)

- Thinking about it again, v2: end-to-end encryption is needed from driver/app through to device silicon. Key management might require "pairing" would be an initial secret provided separately (like the security model of an Entropy Key, but perhaps not a burned-in secret). Given that most actual drivers are proprietary anyhow, consider today's drivers as http:// when https:// everywhere is needed to defend against bus-sniffing.

http://www.entropykey.co.uk/
Cellebrite's full portfolio is not public what you see on their site are very basic turn-key solutions.

They have a bespoke service called CAIS as well as few other unlisted services which they do not advertise openly given their sensitive nature.

Their turn-key forensic solutions are tailored for general law enforcement and the public sector (private investigators, corporate security, law firms etc.), CAIS is usually offered to state security agencies and they have other services which are tailored towards intelligence and national security agencies.
If this still requires me to install xcode...then I would rather go with ReactJS + electron!
Balancing features and usability is one of the hardest problems product management has to face. Removing an existing feature is not a piece of cake, but companies are a bit too worried about it in my opinion.

Btw. don't think the Tesla comparison is fair.
> no one would bat an eye when the FBI picks a lock or breaks into a safe how is an iPhone different?

Because it was not about that one iPhone but the planned precedent with immense effects: using the court-order to "write" the new laws, and FBI started the whole thing exactly with that goal:

http://9to5mac.com/2016/02/26/fbi-apple-iphone-precedent-pol...
If you were a lock or safe maker, wouldn't you want to know how people were able to crack your product so you could improve it in the next version? Or would you just keep trying to sell a version of the thing that people buy to keep their stuff safe with a known exploit? Good luck.
Can you share a few examples? Google seems to be leaning more toward "normal users" but I enjoy the software nonetheless.

Are you sure you are the intended user? Catering to a different userbase might be their intent.
Is India facing its worst-ever water crisis?
Workforce management solution Planday secures a $14M
I think an appropriate analogy would be the difference between the source-code and the binary of an application. In theory, the binary would be agnostic and future-proof given the documentation of the format, but the source-code is much more readable by humans and compilers of other platforms, which would make it more future-proof.
We have been fighting for net neutrality for good reason market reasons, but it works against phone quality when VOIP in the internet.
Yeah, I guess I should have expected that.
This is the first solution in this thread that sounds fair.
And? I've specifically stated that I don't think that the FBI demanding Apple to either unlock the phone or reduce the level of security is appropriate, the FBI breaking into it them selves is perfectly fine.
Thats laughable. I don't see myself publishing code on NPM for which i magically lose my rights when i decide to move on.
I didn't notice the plastic surgery part. I think the article may not have completely loaded the first time.
Point taken. But we are again delving dangerously close to thou-shall-not . from my perspective, it is a quick and convenient way to save all the data frames in my code. It's a boon for productivity.

If not this, then I pray for Feather to be able to save multiple data frames innone file.
Doesn't sound snarky, more like armchair therapist possibly projecting their own issues. Exploring fresh ideas is fun and relaxing for some people.
That's gotta be some automated thing gone bad though. Surely a human would not be conducting a conversation like that.
I wouldn't consider lock makers as a good example on one hand they ask for feedback from locksmiths to improve their designs and on the other actually train licensed locksmiths how to break locks.

The vast majority of safes also have a backup lock or code.
Have been using org-mode for a few years now but never reached the point where I would feel comfortable. I can't find a good way to organize my files, there are at least 20-30 files in my Dropbox, some are empty, some contain random notes.
On iOS maybe, but not on Android. You have to reimplement a lot of the things you get for free when developing native apps yourself. Most animations etc, you all have to add it yourself. Problem with that is that the React Native team has some decent iOS stuff, but for Android it's all sorely lacking.

Besides Facebook's Ad Manager (which barely cuts it) I haven't seen any React Native app on Android that didn't feel horrible (and not like an Android app).
I'm not a fan of Java, but I am a fan ofJVM. You don't have to use Java to get the most of JVM, you know. Especially since Kotlin is out, but it was true for a long time with other languages.
And the result is they share the majority of the code and do not share the gazillion of tweaks for each plafrom, thus negating any advantage gained?
Keeps getting better though, the example in the post:

Map<String,User> userIdMap = new HashMap<String,User>();

is now just:

Map<String,User> userIdMap = new HashMap<>();

and Java Generics already saves a ton of type casting as well as checks and corrections IMO.
10 Alternative Blogging Platforms That You Must Try
Check out Kotlin. It's not a complex language with much faster compile time.
I wish documentation would offer a "Concourse made easy" or something.

I imagine the documentation is currently a work in progress. But starting for example from Github, it is extremely easy to go down a deep dark hole trying to figure out all the new terms: I guess I have to use BOSH, what is BOSH (itself a deep dark hole: uhh, stemcell? How does this relate to all the other similar tools? Why would I commit to using this new tool solely for the sake of Concourse?); now I have to learn a new strange distinction between the otherwise similar English words "job" and "task," something about Garden (yet another hole to travel) and a new meaning for the acronym "TSA" and for some reason the command line utility is called "fly" which has no obvious relationship to the project name (what if the command to interact with git were "spudge"?) can I please just install a .deb and run a service and add a build real quick to try this out?

This could be why it is so common to see Jenkins deployed everywhere. While it is wrongly designed in so many frustrating ways, you can still set it up for real work in an hour or so, and you won't need a dictionary to translate from a unique new jargon into English just to try it out. Every new CI that makes this even one bit harder than Jenkins isn't trying hard enough.
> Sure you have to write:
Map<String,User> userIdMap = new HashMap<String,User>();
instead of:
userIdMap = {}
but in the bigger scheme of things, is that so long?

More like user posts complex JSON object, which takes me seconds to parse into a Python data structures, and hours or days to figure out complex mappings into Java classes. It's often the mapping of objects to serialized forms is where a huge amount of time gets spent in statically compiled languages. And it's NOT just a once of investment - those mapping change in future and some poor soul is going to have a fun time modifying your Java app, no matter how well named your variables are.

If you are writing glue code or IO bound web servers without a high performance requirement, the difference in productivity between Python and Java is not at all trivial.
It's really odd to read your comment and the parent comment, at least regarding the iOS side of things.

I've gotten my RN app to run at the same performance level (as far as the user is concerned) as my native app and there are definitely some non-trivial animations and gesture responders for the RN version.

It did take some tuning and I had to add a couple artificial delays to wait for animations to finish, but nothing crazy.

No opinion on Android yet, but RN for iOS is definitely not negatively impacting the user experience in my case.

It's not in the store yet, but to give you an idea of the UI complexity level - see Slack and Google Chrome's UI and gestures.
When I try to research a company or an industry, I have a lot of trouble keeping track of my research. It would be great if there is a service that I can document and record ideas as well as track key data. My kind of edge that I have is only the ability to read a balance sheet.
The point is that many install scripts do insecure things such as downloading over unencrypted channels, demand sudo without a good reason and are generally not careful to have a minimal impact to the machine.

At the minimum I want to know what it does and where it puts stuff.

This assumes that the software package itself is trusted, which is (still?) a reasonable assumption to make for open-source and big name companies.

By the way, it's poor form to downvote someone just for disagreeing with them.
It's not at all logical to look into the guidelines for contributing to a project of what you seek is support, not to contribute a feature request or a patch. I'd never look there.
Wow. I expected to hear his challenges in learning to code. It seems that for some people in the world the challenge is to be treated as a legitimate person, and AFTER that you get to be stumped by learning to write code.

That is of course assuming your spirit was not broken by the process of getting to school.
THE DECLINING TASTE OF THE GLOBAL SUPER-RICH
Winter is coming for Microsoft. The rise of mobile and the slow down of PC speed improvements means they are having a hard time delivering real value that people want to pay for and need to find a way to generate recurring revenue through subscription services. Witness the rise of Windows 10. How can they make money if you permanently own your software?

What if Moore's law stops and we're sitting here 10 years later with computers that are only a little faster on single core performance?
>But, it seems to me that this is one of those areas where analytic philosophy seems to be breaching an area where actual experiments can be proposed and tested in a physical sense, and it leads me to think, what's the point?

I think it would be fair to flip that around: if your philosophy doesn't result in testable predictions, then what's the point?
Focusing on iTunes to argue that Apple can't design simple software anymore seems a little bit unfair, while on the other hand I understand that it might be the only Apple desktop software used by people who run on MS Windows.

But still, it really not representative of the Apple ecosystem IMHO.

3D Touch on iOS for instance is a state of the art demonstration of how to transparently and smoothly add a layer of functionality to an existing interface.
> GitHub is suppose to be synonymous with innovation...

What was their innovation previously, though? I think they built a pretty great site around git, but I struggle to see where this massive innovation is.
I used to keep lots of stuff in Evernote, and when I switched to org-mode, I did an HTML export from Evernote and then wrote an awful Python script to convert the HTML to org-mode. I'm pretty sure all the binary data appears as links in the exported html.
I am still just a undergrad student, but i am hoping for a career in robotics research or R&D.

I am however one of the founders of my university aerial robotics team, we are planning the attend the IARC (http://www.aerialroboticscompetition.org/) competition this summer.

One of the big unsolved problems in aerial robotics is high-resolution localization without external sensors. Al the drone acrobatics videos out there use a external tracking system. The current IARC mission aims to push this by requiring complex interaction between flying and ground robots without any external sensors. We are currently trying to solve this by using camera and LIDAR sensors. You can read more on our progress here: http://www.ascendntnu.no/blog/

I would love some sort of email group, i have been looking for something like that for some time. Pleas sign me up if you end up creating one: mattivc[at]gmail.com
I like that this post was honest enough with lots of failures until success. Thank you for posting this.
Writing a very fast cache service with millions of entries in Go
You could use it in combination with react-native-web [1], which basically allows you to use same view layer code for native and web. Using this inside electron should be OK...

[1]: https://github.com/necolas/react-native-web
Yandex Data Factory
Arrow keys are the worst ergonomically. You need to be able to stay as close as possible to the home position. When my RSI got really bad I noticed how bad it can be to keep reaching for the arrow keys.
That is likely more to do with them being Swedish I suspect.

Stock compensation is a lot less competitive here due to it being taxed as normal income for the most part. Not to mention salaries being a lot lower in general than USA or some other parts of Europe.
SiteGround Web Hosting Review
The article seems to be about Java vs Python. But it really only talks about static vs dynamic typing. Not only has everything about that subject already been said 1000 times. It's also not Java-specific. Java sucks IMO not because of static typing, but because of the 'If you have a problem, add more OOP'-mentality which has given us Java EE. About any argument he makes pro-java is also valid for something like typescript. But with typescript you still have the freedom of a scripting language for the parts where it makes sense.
Is there any way for Apple to compel them to provide the details? I would imagine that the Government has made the laws so they don't have to comply with them the same way we do.
If you want type safety, you need to parse your JSON into a java class (although "days" is definitely an exaggeration with the right tools—I'm a fan of json-schemas and jsonschema2pojo [0]). But of course you don't get type safety in python, so it's bit of an apples and oranges comparison.

If you're willing to settle for no type safety, there are untyped Java APIs like Jackson's tree API [1] that are, while definitely more verbose than Python's, similarly productive in my experience—and much, much faster.

[0] http://www.jsonschema2pojo.org/
[1] http://wiki.fasterxml.com/JacksonTreeModel
The article only mentions surgery that directly improves ones looks. Surgery that improves functionality such as corrective eye surgery should also be considered, and the cost is far easier to justify. E.g. I have IOL implants to fix my eyesight and it's both useful on a daily basis and still very satisying even years later.
For anyone trying not to make the same terrible mistake, you have vim-orgmode: https://github.com/jceb/vim-orgmode
Have you tried org-capture? It's nice to have the files be accessible through keyboard shortcuts, but it has the additional benefit that the potential places I could drop some random note are specified in advance, forcing me to maintain some level of organization.
Primarily as a reaction to AWS and Azure?

Google announced Colossus in 2011, is that going to make it to GCP?
I have heard this theory before but the one fact that speaks against it is the Apache license. GPLv3 did not not invents its own patent clause, but rather copied significant parts of apache as a base (stand on the shoulders of giants, avoid NIH, and so on...).

"Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version."

"each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work"

They did add one major change (beside rewording and reordering), and that was to address the Microsoft-Novell patent agreement. A distributor can not chose to exclusively grant the patent rights to just a selected group, but must do so on a all-or-nothing deal. Once you provide a patent grant and complying with the license, the patent grant is given to everyone who might later receive a copy.

So for all those companies that are happy to distribute apache licensed software but not gplv3 software, and is objecting on the subject of patent clause, one must ask why they have a problem that the patent grant is extended to everyone.
If you care only for OSX yeah.
I have some relatively fond memories of SuSE, because it was my first GNU/Linux distribution. Back then, it had the advantage of being pretty newbie-friendly (graphical installer / system control utility) and good ISDN support. Since ISDN apparently never became popular outside of Germany, not many distros had good support for it, and setting it up manually could be a real pain (at least for a newbie - a couple of years later, I set up a dial-on-demand ISDN router using NetBSD). So SuSE was, in retrospect a good choice for a first distro.

Eventually, though, I got fed up with YaST, because it used to overwrite config files and thus wipe out all manual changes one made to them. Does SuSE still do that? I remember reading about plans to rewrite YaST from scratch, so hopefully they found a better way of dealing with config files. From a UI perspective, YaST was a neat tool for non-techies.
My theory is that HN loves Emacs because HN loves Lisp.
I use Quantopian to paper trade a simple algorithm I developed and tweaked over the years, and then check daily and manually execute the trades with with my own broker (Questrade in Canada, which isn't supported by Quantopian's live trading platform).

Quantopian is literally the single most disruptive product in personal finance that I know of: https://www.quantopian.com/

(Not affiliated in any way. Just a really happy user.)
Ask HN: How to move from Android to iPhone?
What the quickest way to transfer data from Android phone to iPhone? I need to move contacts, messages and music. What your suggestion on this?
> Why would Apple care what you do with their language? You can't bring any harm to their business with it.

Why do you think Microsoft is giving patent promises for C#, .Net and others[0] (But not licensing their software to Apache/GPL)? Yes. Because they can bring harm to their business.

Why Do you think Apple ditched Objective C? For some reason they had to license it under GPL v2. But, as GNU re-licensed everything to GPLv3, they will have to stick with old versions of GCC, binutils, etc. So, they had legal reasons too for yet another language.

Hm... Wait. We shall see the struggle of apple someday, because they can't sue Samsung again, just because they are using patents of Apple which are derived from swift.

And last, why do you think language is not patented? Even some one-liners are patented in the software world![1]

[0] https://msdn.microsoft.com/en-us/openspecifications/dn750984
[1] https://graphics.stanford.edu/~seander/bithacks.html#Integer...
Um, Apple doesn't really care, but they are continuing to stick it to the FBI.

If the FBI cracked the phone, then Apple can smack them with it when this comes around again. If the FBI didn't crack the phone, then Apple can smack them with it for dropping the lawsuit.

This is just Apple saying "Fuck you, FBI, for bringing this lawsuit and then dropping it when things went badly. You're gonna sweat some more before you get off the hook."
Why not do everything in C? The answer to that question is the answer to why not do everything in Java.
I didn't say it did...?

EDIT:

I mentioned "reactive programming" because React is typically used in conjunction with reactive programming. Mentioning something related to something else is pretty standard communication.

To elaborate on why I made my initial comment...

Reactive programming is a paradigm, it has advantages (and disadvantages). Paradigms are higher level than implementations (libraries), or even a programming languages. When people start a new project they come up with requirements; continuous integration, easily testable etc. These requirements are mostly satisfied by a paradigm, not a implementation, nor even a programming language.

If you've decided you like React, you probably like it for various reasons, most of which are probably because you're following the reactive programming paradigm - and perhaps because you like JavaScript. Nonetheless, when you start a new project (e.g. you've decided you want a native Mac app) it's your job as a competent software developer to determine the best fit for the project. This means you should really do your best to make a well rounded assessment of the situation - that means being educated about the subject matter. My comment merely agreed with the parent comment's description of the disadvantages of a (near) pure JS solution, and proposed ReactiveCocoa as an alternative that provides many of the advantages and familiarities of React, minus the disadvantages the parent post pointed out. Of course, you can't use JS to write your app - that may well be deemed by your team as a sufficient enough disadvantage to avoid ReactiveCocoa as a solution.
Not sure why that figure is relevant? Apples to oranges here.
Yeah, but when you have to change anything in that part of the code, you thank that everything is statically typed and you know what that json object contains...
800CE seems about right for Germany. Prior to that there's very little text being found besides small/simple inscriptions.
Last evening I set up org-babel integration with Ditaa and Graphviz. Seeing diagrams inline in the document is extremely convenient.
Next time: PlantUML, and maybe HTML export tests.
Yeah. Comparing org-mode to handwritten notes? You can grep through your notes, quickly refile, integrate with other software, use hyperlinks, and synchronize over multiple devices. But the same is true of onenote or evernote.
Easy Drag and Drop Landing Pages Creator for Business
Sometimes switching to Firefox or Chrome works, sometimes not. The more technically literate orgs often don't use IE anyway. The problem are the technically illiterate people.

I'm wary to not inadvertently fall into the IT support role by advising not to use IE. If a bunch of really unskilled folks switch to Firefox because I say so, whom will they call if something doesn't quite work as before? :) I can (and do) say no to calls like these, but I'm always wary it taints the relationship a bit.

An approach that usually works if I explain the reasons beforehand is transparent pricing: The solution costs $x for all browsers incl. IE9+, or more if IE8 has to be supported. That way the argument is about the org being able to afford IE8, not about me being the picky geek.
It happen the same to me, I ended up migrating the codebase to Typescript, and now I can have almost everything I want from a language, types and functions...
The sympathy of two pendulum clocks: beyond Huygens’ observations