skysight-inc/HackerNews huggingface dataset:
Certainly it would not affect “Apple Pay” (or however it's called) technically. But it would dilute/weaken the statement that “paying with your iPhone is secure”.

So I can understand that Apple may want to limit payment systems on their phones to ones that they can prove to have a minimal level of security - and their strategy of putting sensitive data in the secure coprocessor while still having the convenience of a one button unlock is unrivaled in the industry.

What they definitely do not want is to be associated with stories of credit card fraud involving iPhones, even if technically the fault is clearly outside Apple.
I think the first question to ask, before you set off on this, is "what happened when you interviewed with google that scared you so bad?"

If the answer is "well actually I haven't tried yet, but I hear it's really scary" then maybe a better plan is to go interview with google.

They really want to find people who are good at programming computers, which you seem to be. They want that even more than they want to humiliate people with impossible algorithm trivia, believe it or not.

Seems like you might save yourself a few months of no fun, and end up landing your dream job in the process.
Analyze UK Statistics with Proper Open Data Tools
I think banking is a logical sector for tech firms to move into. Apple, Google, Amazon. They build platforms, and they enhance those platforms with services that they charge for.

Day to day banking is the sort of service that would really enhance their platforms, and would also have a massive side benefit of cutting out a notoriously difficult middle man that no one really likes anyway.

Take Apple as a thought experiment. The banks have already seeded Apple's hypothetical bank will all of their customers via Apple pay. Here in the UK, I can change bank account at the push of a button and everything is taken care of for me in just a couple of days. That's the law and there's nothing the banks can do to stop me. If Apple one day gave me a "Would you like to move your bank account to Apple" button, I'd press it in a flash, and feel a great sense of pleasure as I stuck it to the established British banks. With Apple's huge stock piles of cash, I think a takeover of an existing bank would not be unfeasible.

In addition, should tech firms start setting up or buying existing banks, there's plenty of legislation in place to ensure they play fair with each other.

It's pie in the sky thinking, but interesting to think about none the less.
Open vStorage: Storage Without Compromises
Indeed, I'm surprised it's taken this long for people to take advantage of bittorrent DHT for other p2p stuff.

You don't even need to change the protocol to start using it. It's a ready made hash-to-peerlist mapping, so you could just use it for peer-discovery/bootstrapping and do other stuff out-of-band.
Currently listed as vulnerable and unfixed in Debian: https://security-tracker.debian.org/tracker/CVE-2016-5696
> Personally I don't like installing games as root, because the game developer doesn't have the level of trust that my Linux distributor has earned over the years.

Unfortunately, that's probably a holdover from game dev on Windows. In theory, you're supposed to install to Program Files (or Program Files (x86)) and store any user config data in My Documents. But most games just install with full admin privileges, and dump everything in Program Files.

Many modern games are more than just games too, they come with patchers/installers that may require extra permissions, and they also tend to run extra anti cheat softare in the background that require elevated privileges.
If you have a Netflix subscription it's probably this or something like this [1]. For non-flixers it's a calibration video similar to [2]

[1] https://www.netflix.com/watch/80103278

[2] https://www.youtube.com/watch?v=cGgf_dbDMsw
There are other low-mowing solutions available...
No wonder they are on constant recruitment overdrive. Calls from consultants recruiting for them have become worse than from banks offering credit cards.
I don't, what for? All I'd need is SSH to connect to my illumos based systems, and a web browser to use my applications. Compiling things on a lone desktop like back in the '90's? No, that's what I did when I was a kid and didn't know any better. I have infrastructure for that now. Cross compilers, too.
Yep, I've witnessed telco's being social engineered to forward numbers for attackers to intercept SMS messages.
To Sell Is to Be Human: The Truth About Moving Others – Dan Pink [video]
I remember someone setting up a bittorrent search engine based on DHT scraping. It's probably been taken down, but I think it was called DHT Dig, and there's apparently a library with that name.

Something like that would make it easy to create centralised search engines for casual users, and allow power users to run local databases.
So far it looks pretty real. CVE exists[0], been picked up by RedHat[1].
It's possible that they're wrong - I haven't personally verified it - but at this point it'd be very surprising. Apart from anything else, these are serious researchers with real track records.

I'm proceeding on the assumption that it's real, and working towards ensuring everything (with a kernel >= 3.6 and < 4.7) is patched. I'd humbly suggest it might be a good idea for others to do so also.

0: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696
1: https://access.redhat.com/security/cve/cve-2016-5696
DefCon2016: Hacking MQTT [pdf]
It's visible from the outside too. We've worked with Amazon for years, around AWS, MWS, login and pay, etc., and it's a shambles. Nobody seems to stay more than ten weeks or so, points of contacts are always changing and one gets the feeling they're all bluffing because it's their first day - I don't know how they actually get anything done. They must have a core of people somewhere who aren't rotating rapidly, I suppose?
Here's the commit for fixing this:
https://git.zx2c4.com/linux/commit/?id=75ff39ccc1bd5d3c455b6...
L.A MUSIC PRODUCER(Stacy Blass)SHOWCASES SKILLS ON RANDOM HOMELESS MAN(HOT)
Show HN: UserTest.io – Free, remote usability testing
This is a salutary anecdote which I wish we could convey to all those people who think that having a smartphone makes you "not poor". It's the exact opposite: it's so useful that even people who have not much else will go through hell or high water to keep their link to the world.
No Man's Sky players have already discovered more species than exist on Earth
Can we have then a decent alternative to "Copy to clipboard button" that does not use flash? :(
Don't insurance companies require you to make any kind of internet security audit ?

I mean if this doesn't happen, and if government don't take steps to improve the situation in the next 10 or 15 years, won't things get worse enough that politicians notice?
> The burden of proof for unauthorised transactions is _never_ on the consumer.

It's true that the merchant has to prove that the consumer made the purchase. However, the burden is still on the consumer, since they still have to service the transaction until the dispute process is resolved.
People find the need for clandestine sex education in plenty of parts of the West today, where the official curriculum seeks to maintain ancient prejudices.
Email: jobs@navahq.com

Background: http://www.theatlantic.com/technology/archive/2015/07/the-se...

Jobs: http://navahq.com/careers
Seagate's new 60TB SSD dwarfs the others on the market
I believe the Olympic team is called Great Britain and our Northern Irish cousins can elect to represent either that team or the Ireland team.
I wonder how they are managing and keeping up with excellent products without right management behind the scene?
Should I Repair vs Replace My Broken Phone: A Guide from the Experts
To fully answer questions like "how much traffic will go in this direction?" you need your analysis to include a simulation of what the entire internet is doing. That's hard.

I can't talk about the details, but you can assume that "static analysis" of the form being talked about here is something we've already done, and it's not enough to handle cases this complicated.
You don't need engines. You have a giant fusion reactor. You just need exhaust vents you can open asymmetrically.
How to Become a Better Programmer: Do Not If Else
Not so in Switzerland. At least not with my bank.

If I complain about a charge (which I will only do if it's truly fraudulent, or not possible to have been initiated by me) the amount is credited immediately while the bank is taking it up with the merchant.

That's exactly the way it should be and if this is not the case you should probably be pushing for stronger consumer protection laws.
Eco Series Compatible Toner
Are you looking for a reliable yet cheaper seller for printer toner and ink cartridges? BeGreenInk.com is the best solution for all your printer toner and cartridges.
Only if I were too poor to pay full price and there wasn't a non-ad phone available in the same price range or cheaper. I'd rather take a hit on quality, buy an older model, or buy a used or refurbished phone than deal with the ads. I don't actually care if I have the latest phone, and tend not to replace a phone until it is either broken or there is significant tech upgrade.
How to Make Your (American) Customers Love You
As far as I understand it the far goal is to find invariants that are also dinvariants.

But why don't we build a systematic theory of dinvariants (similar to the theory of invariants) to get a much better understanding of them?
Autism, OCD and Attention Deficit May Share Brain Markers
Regarding "Nazi Germany", it's complicated: https://en.wikipedia.org/wiki/German_Reich#Divided_Germany

The Third Reich was legally the continuation of the Weimar Republic (both of which are just colloquial names, not formal identities of Germany at the time). Neither part of post-WW2 Germany was a full successor to the Third Reich until the Reunification (in which the Allies effectively ceded most of their control to what was formerly West Germany and East Germany ceased to exist).

I'm not really sure under what basis "Nazi Germany" can be considered a separate legal entity from the pre-existing Weimar Republic without also considering the Weimar Republic a separate legal entity from the pre-existing German Empire of 1871.
> suffered major improvements

I think I'm going to start using this phrase
There are a lot of myths about medieval medicine too. See e.g.:

http://news.harvard.edu/gazette/story/2011/04/debunking-a-my...

http://www.medievalists.net/2013/08/04/medieval-medical-expe...
Sorry to be opportunist but I'm a Python/Django developer who actually does know Python/Django if you're still looking.
WW3 AMERICAN CHURCHES INSTALL GUARDS AGAINST ISLAMIC NUTTERS
Don't want to troll around but it seems to me only two things are inevitable: taxes and Flash Obituaries. ;)
> Practice answering architecture questions

What are some good resources to learn about system architecture?
What do their turnover numbers actually looks like? Chances are they get a lot of management attention.

IIRC, 15% per year is pretty standard in the software industry. I think Google's figure was something like 5% when I was there.
Interesting relevant tidbit by Linus Torvalds himself about the packaging and distribution of Linux "desktop apps".

Basically, Linus has made a desktop app, and the website distributes binaries for Windows and OS X, but not for Linux. Link goes to 4:50, relevant rant starts at around 5:58 :)

https://www.youtube.com/watch?v=5PmHRSeA2c8&feature=youtu.be...
Thank You for clarifying!
I think it comes down to the difficulty of finding such things. The goal is usually to find "enough" invariants that all objects can be distinguished, but we settle for just whatever invariants we can happen to find. Finding an invariant is pretty easy: it's straight-forward to show that something is invariant under a certain transformation since you just apply a transformation (in this case, usually a homotopy or similar) and see what it can do to the invariant. For knot theory, you can often check just what it does under the Reidemeister moves, giving you just a couple things to check.

How would you go about showing that something is a dinvariant? You would need to take two objects that are distinct and show that their dinvariants are distinct. I.e. use the fact that a homotopy between the two knots does not exist. This is much more difficult, though it does get done. In particular, it's done whenever we have a complete classification of all objects of a certain type (say orientable surfaces, classified by the single invariant (and also dinvariant) their genus). Though generally here we would be actually approaching this from an invariant perspective but just showing that once you have enough invariants, they collectively become a dinvariant.
Fat Larry's Band - Act Like You Know
Compile Go programs 7x faster
Thank you. Most informative !
> Invariants are useful because they allow you to distinguish equivalent knots, which is otherwise really hard to do. If two knots have different invariants, then they are surely different.

> if two knots have identical dinvariants, then they are surely the same. Since "if the knots are equivalent, the assigned values might not be equal", dinvariants cannot accomplish this function, and that makes them mostly useless.

That doesn't make them useless. Dinvariants just serve a different purpose:

- invariants serve the purpose of distinguishing knots that are different

- dinvariants serve the purpose of detecting that knots that look very different are actually the same
Interesting idea. I'm curious what the regulatory landscape is like. Is it feasible to run a bank off of a giant multinational tech company?

I remember back in the day Apple needed to charge for iPod Touch software updates for some sort of accounting purpose.
>>> There are also behind-the-scenes protections against identity theft. E.g. if a merchant has a data breach, your Apple Pay card number can't be used to buy things online.

Contactless cards work the same way. They don't send your card number, they send a token.
All those nyt articles are now behind a paywall for me. the web link does not work anymore. is it policy to allow paywalled links?
> Heads up: Audio on page. Neat, but loud.

And, by running NoScript in default deny all javascript except for personal whitelist mode - I had zero audio play from the page.
To be fair, human cells has always been a fantastic vector for infection.
> with a little extra attention, I can secure my system without 2FA and achieve comparable security

How? Lets play devils advocate here and pretend your email is compromised (account takeover or redirect). What have you done on any of the services you use that has given you comparable security to enabling 2FA on them that now prevents the attacker from resetting your password?
This makes me wonder what would happen if you took a job there and just refused to do the sucking up? What if you just competently did what they asked and didn't worry about getting fired for bullshit reasons?

With that kind of turnover, it occurs me to that you very well could survive without doing all the soul-sucking bullshit because the managers simply couldn't afford to lose more workers.

I'm not the one to try it, though, as I've no interest in working in those high-stress situations in the first place. I'm fine with making a little less and having a personal life outside of work.
> The modern Catholic church is fundamentally different from what it was even a century ago

And can change very quickly again. The goal of religions is to achieve total control. The current strategy of the Catholic church is to show a low profile, since the sociological environment does not allow for a more pro-active role. The minute that the Church senses that they are back in control of the political discourse, or whenever the fundamentalist minority get vocal enough, zealotry will get back to the official agenda.
Why would you ... umm, use pypy with these frameworks? After all they do the heavy lifting via very specialized low-level libraries, right? So python is just the glue holding together and driving the data pipeline.
Call me paranoid, but I have a hard time seeing the push for 2FA as anything other than a plot to collect valuable user data

Exactly. Mostly when I see companies like Google, Facebook, etc constantly trying to trick me to activate it. And yes, I say trick: The option to ignore/skip is always hidden/disguised, totally ignoring the UX and accessibility needs.

This and the fact that the input text fields already have my phone number populated on them ...and are just waiting for my consent.. this does not inspire trust, no.
As a non-American: honest question, is Nicaragua part of North or South America? Where is the line generally drawn?

I was always under the impression that "North America" only encompasses the big three but the Caribbeans and Central America (i.e. everything on the land bridge below Mexico up to and including Nicaragua) are not considered part of either of the two "Americas".
Windows resources were originally built to fulfil two requirements:

- display an icon for an executable

- automatic localisation of application menus etc.

So FindResource() takes three parameters: a type (icon, string, dialog, bitmap, menu etc), a name, and a language ID. That means that changing the language ID can transparently select a different UI layout and text as required.

Meanwhile Explorer (and its ancestor Program Manager) will display the first icon in the resource file as the default program icon.

Resources are just a separate section within the PE executable format.
Almost everything I've heard about employment at Amazon has been negative.

Now obviously, I can't say whether that's fair to the company, however it must be costing them a lot of money. I bet there are a lot of people that have heard the din of politics and would never consider working there.

Are there any HN readers that are currently working at Amazon and that are happy?
Why Most Programmers Get Pagination Wrong
Emails reveal Hillary’s shocking ‘pay for play’ scheme
It's worth noting that Android Pay has launched with 28 banks in Australia.

http://www.news.com.au/technology/google-launches-android-pa...

It's also worth noting that Australia has 4 big banks that have over 80% of the Australian market. With 28 the proportion of the market covered is even higher.

Google were clearly prepared to make deals that Apple are not.
The explicit version: "There should be an obvious way to do something. Ideally only one way will be obvious."

The original version was too implicit. Unless you are Dutch.
This blog post is the reason why the NSA or any other government agencies do not want to declassify documents at all.

What the blog post fail to understand is that:

a) Intelligence operations run for years and decades, you wouldn't be hard pressed to find 5 documents over a period of 90 years which are cross referenced / linked by CODEWORD level programmes.
So if this document was referring "SPRING CRICKET" which references "SPRINGROLL" which references "CHINATOWN" which references "BOUNCY CASTLE" which might reference "PRISM" for all we know.
You don't give people bread crumbs.

b) Intelligence operations involve human assets, even if it was in the 1920's it can still have human assets who are alive or their descendants, and it doesn't have to be a US agent, it could be some soviet mathematician who passed information to the US (willingly or not) that has living descendants in modern day Russia and there is absolutely no reason to colossally fuck up their lives today by revealing that fact.

Declassifying information is a very expensive process you need to do a full impact analysis on every word in every paragraph and cross reference it with any other materials that are revealed, considering the age of these documents many of them might not be digitized which makes this process even more expensive and time consuming.

Beyond that once a document is set for release a very expensive process of document recovery is kicked off, all copies and revisions of the document must be collected to ensure that no revisions other than the approved for declassification and no unredacted copies remain to be found or leaked.

And once you release some document which is redacted if by some coincidence it is missed by the OSINT departments of foreign intelligence agencies some 'BuzzFeed' "reporter" that his next meal of cup ramen noodles is dependant on his daily blogspam quota will dig it up and make a click bait out of it and depending on how sensational they make out to be going to be picked up by some bigger news outlets and by then every counterintelligence outfit will step up their game if only to have a response to this for their next oversight hearing and if they kick their bug sweeps and mole hunts into high gear they might actually find something even it's completely unrelated.

The likelihood of a tool/method/source that has been used in 1925 being relevant today is about zero, the likelihood of them not being able to complete an impact analysis on that paragraph and hence having to redact it or not wanting to get the grandchild of some Russian asset harassed by the FSB the media and the immediate public is considerably more likely.
There was a doctor in the UK who was using 3-d printers to print bones and structures to help him understand anatomy. Theres also work in this area for replacement parts - could be interesting
If explicit user interaction is a big deal, why don't banks make contactless cards with a thumb button you have to hold when swiping? Just a physical breaker in the NFC antenna circuit, it would be dead simple, as slim as you want, not need any power, and cheap.
I wish more of these stories had some indication of what department the author was from. I have a bit of a suspicion that the closer you get to the retail operation the worse it gets (and of course doing fulfillment in a warehouse is the belly of the beast). Part of it is certainly Amazon culture but part of it is surely that retail businesses are a grind. Margins are slim and there is constant pressure to gain every possible efficiency even at the cost of human pain.
I think we should limit the size of companies (in terms of number of people).

Because capitalism is great for competition, until a company has grown so big that there is no choice left. Both for the consumer and the employee.

Also, big companies usually have an internalized economy, which limits its usefulness for the outside world.

Basically, keeping companies small would increase the modularity of the economy.
Is Gary Kasparov Playing Chess in This Picture?
Hm... you're right. Not sure where I got that from. Most people seem to call it UT99 and personally I used to just call it Unreal Tournament (no qualifier). I don't like putting the year on it because it makes me feel so damn old.

EDIT: Hey, fun fact: there's an upcoming free Unreal Tournament game simply called "Unreal Tournament" and apparently it's being developed somewhat openly: https://www.epicgames.com/unrealtournament/ (code is visible on GitHub for Unreal Engine 4 subscribers)
Will China Pip the USA at Rio ’16?
There is also the corollary that if you have a feature that no one uses then make sure it works before deciding that your users don't like it. A feature can be awesome in its desired form but if it's janky as hell or unreliable then it won't get used. If the implementation sucks it's not proof that the feature sucks.
Few games actually need those admin priveleges: Windows since Vista has a feature called VirtualStore which maps underprivileged writes to Program Files to a location inside AppData (which is also where games and apps should save their non-user-facing runtime files - not in My Documents, which is an annoying antipattern).

Your point about patchers is salient - but I know that, say, Steam puts everything in Program Files and does not run itself or games as admin. Other games like League of Legends and World of Tanks work around the issue by installing outside Program Files.