skysight-inc/HackerNews huggingface dataset:
> It is striking that developers no longer send the final binaries when submitting an app, but a bit code

This bit is very expected, along with Arm architecture. It makes sense for Apple to lock down entire ecosystem. It is also terrible if you use Mac to develop anything except iOS/Mac apps, which is what I do. No more windows and half working Linux is not what I need. How long before you can't even compile Obj C or Swift code without going trough app store route?

I don't know if they will do all the steps in a few days or years but I know they will. Also not sure if it will backfire because people need occasional Windows app to run, I suspect huge majority won't care at all.

Lenovo, I know you think I neglected you but I am starting to look your way once again.
Bypass? Haha, it has been quite a while and they still haven't even enabled it for my country. Same goes for Apple.
Might be unavailable for your country.
What I would really, really love to have is application that performed many of the functions Google Assistant and Siri offer but which did not send any info to external parties unless it was absolutely necessary (i.e. performing as much of the compute and analysis locally as technically possible).
> This bit code is then used by Apple to convert the application to the specific platform. Which means that Apple can easily make the transition to a different instruction set, for example, switching from x86 to ARM without all apps need to be resubmitted

My understanding of bitcode is that this is incorrect. The bitcode 'intermediate representation' isnt source code that can just be recompiled into a completely different instruction set. Rather, it's to take advantage of optimisations when there are minor changes in the same arch.

An Intel to ARM switch would still require developers to update and resubmit their apps in order to be compatible.

Edit: As pointed out below, Mac App Store/macOS doesn't even support bitcode, so this entire point is moot.
None of what you have eloquently said particularly opposes what I said. If people joined up to fight in Iraq, they weren't defending America. America was never under threat from Iraq, and the Iraqi war machine never loomed over the US. Hundreds of thousands of people have died in Iraq due to that American misadventure, and Iraq did nothing to the US. It was also pretty clear for a long time that if you did sign up, you'd be sent to the warzone - and for the people that re-enlisted (like in the article), they shouldn't be as surprised as you suggest.

Similarly, it doesn't matter if you signed up to defend your country and were lied to, it still does not mean perpetrators get a pass on atrocities like the ones committed in Vietnam. No, not all soldiers did, but enough did to take that 'well-meaning' shine off.

The media also wasn't as unified as you suggest. I'm not even American and I saw plenty of different comedians mocking Powell's 'poster project' at the time, and there were plenty of American voices crying that there wasn't enough justification to invade Iraq. While there is some naivity to blame in going 'over there' (it's why the military recruit the young, after all), there is also some willful ignorance. To be clear, I don't think that soldiers are by default at fault, but at the same time, I don't agree with the current "never criticise a soldier" ethos coming out of the US at the moment. If it's as shit as you say, then soldiers should be coming back and telling everyone they can about the horror, and stopping kids from signing up, and generally that isn't happening.

In any case, if you want to risk your life in the service of your country, be a cop. You will directly serve the people in your community, and the greater country in general. If you want to fight for freedom, be a legal aid lawyer. Pay is as shit as the military, but you're directly helping people in need against forces they can't fight alone.
engines build on top of Quake/idTech3 (valve source,CoD) send only location of players in PVS (potentially visible set) and PHS (potentially hearable set, basically one leaf over from PVS). This means Wallhack will see everyone you can hear, that means every player on small maps like cod4 Showdown.

World of Tanks BigWorld on the other hand (python!!!lol, they finally started porting it to C after >6 years ..) only sends location of players that are in your direct cone of view. Combined with low server tick time(10Hz? for comparison Battlefield now has 120Hz servers), parts of client still in python and sub par graphical stack results in enemy tanks popping in the middle of open field, or 1 second after you peek over the corner.

They even had forced delayed spotting because game client didnt cache enemy tank models and displaying it immediately would result in engine stall/fps drop. It only took 6 years to go from terrible to bad:

http://worldoftanks.eu/en/news/pc-browser/46/version-916-spo...
Hey! I was happy to be designing this beauty (and using it everyday in our office). It's nothing more than just a "stair switch" configuration, where one of the manual switches was substituted with a relay. So we have all SPDT manual switches on the walls, and SPDT relays connected with them in our control cabinet. Every switch/relay can change state of the receiver (in this case a LED lamp) at any time. So even if relays or RPIs fail we can still be using manual switches. More info here https://goo.gl/sJw9F1 .
It seems to me that you're trying to turn the tables on the subject and pretend that linkedin's contact list abuse is, somehow or for any reason, instead an issue regarding a "cal center rep", which no one likes.

How about focusing on the problem instead of pulling a bait-and-switch?

The fact is linkedin tries incessantly to import contact lists from their users, sometimes in the clear and sometimes through shady dark-patterns.

Everyone who ever used linkedin is well aware of that.

Other social network services also abuse that angle, like facebook.

So, why exactly are you trying to pull the proverbial wool over everyone's eyes by trying to make believe that this issue is about an ill-reputed "call center rep" instead of the clamorous privacy abuse that social network services try to force on their users repeatedly?
Better an individual device has some trivial breakage for a short period of time than the whole Internet breaks. I don't think we're there yet, but it feels like we'll need to take some pretty draconian steps if we continue the way we're going. Doesn't it make sense for 99% of IoT devices to only be able to communicate via a router over WiFi?
But you will have less training than on qwerty and the travel might be neglectable. Or maybe even something else, I have trouble but pressing the wrong vocals in the home row somehow (not typing Dvorak, but something similar, the german neo layout). I will still never go back to qwerty.
China's current credit system is basically non-existence. I just got here in the states and feel like I can't do anything without credit history, even for open a debit card, which is like crazy, while in China, at least for now, nobody really cares, I never have once need to deal with credit.

Maybe this person is true about GOV of CHINA's LONG TERM plan, or ambition, but to be honest, United States is a lot more closer to that.

The thing here is, you get to predict how horrible the future might be, and I don't get to refute, because it's never there yet. So I hope you guys think twice before commenting, not that it's bad thing to think long, but not really useful for making an argument.
Researchers: Medical errors now third leading cause of death in US
Right, which is why for people who are comfortable working out asset allocation, rebalancing, and TLH for themselves I recommend they do it themselves with low cost index funds.
Am I the only one who found it odd that the author had internet access, but there was no phone signal? Maybe it's because I'm Kenyan, where phone penetration is much higher than internet penetration, and where internet access over GSM has the biggest share of the internet access pie chart.
Most companies don't have the resources or time to address security issue. If you are startup and focussed on growth then security is not on the top of your to-do things.
Honestly a city with a well designed public transport system doesn't really need cars for the last mile. Walking and cycling covers almost everyone.

Rural areas will always need cars but well cities shouldn't.
Why do you think fining users would be the better option?
It's somehow ironic that Instapaper cannot parse this article – like most (all?) Medium articles …
Don't go by the number of $ to the valuations. They are rarely accurate.
This often happens when I'm travelling internationally. If I plan on buying a local sim card instead of purchasing a roaming plan - I might not have access to my SMS until I get back home.
Yup, I'm in Singapore and they told me that they don't have that feature yet.

I find that really ridiculous.
Tar is just bundling into a single file AFAIK. There is a slight benefit depending on your compression tool to tar and then compress, because (AFAIK again)some tools compress files individually and then write them into a hierarchical file(I guess this is what xz does as well, since it's searchable?). If you tar first, these tools will work better, since they encode patterns found in all files instead if doing it per file(which means e.g. if there is a header once per file, that will get compressed in the tar.comorpress, not in the . compress)
> with IPv6 our machines are all directly world-accessible

world-addressable != world-accessible

IPv6 just gives each device a unique address, which is orthogonal to deciding which packets you allow into your local network. In most situations, a stateful firewall (probably on a home router) will still block inbound packets by default, even if they are addressed properly to a valid local IPv6 address.

> would each machine be completely responsible for its own security?

Every single device is already and will continue to be responsible for its own security. A firewall doesn't remove the need for any security protections on each individual host. Border security adds defense in depth, which is great, but you have to assume an attack can bypass the firewall or originate from another host on the local network.

Assuming the firewall will offer sufficient protection and skipping the hard work of properly securing a device is how we get easily compromised trash like the cameras that recently DDoSed Dyn/etc.
You can do better by diversifying more. By picking asset classes with a low correlation, you can reduce risk while increasing return. Hence, you can eek our more from a simple mix of say:

60% US
30% Int'l
6% REITs
4% Gold

All of this can be bought with low cost mutual funds.

http://thismatter.com/money/investments/portfolios.htm
With recent compromises on a lot of services like Yahoo, Weebly and so on it is shameful that security is not on the top of list from the get go. Perhaps the events like the recent DDOS attacks will bring a lot of attention to the issue.
I think the main difference is that you will still get most jobs in the west, even if you have the "wrong" opinions. Like reading Chomsky's collected works in the US. (Or follow Islamist web sites in, well, any country.)

I.e., it is mainly for commercial/security reasons in the Western world, not for political control of the population.
That would be considerably bigger than you think.

The problem with "IoT"(got I hate this term) is that it connects mass produced lowest barrier of entry devices with network stacks over pretty substantial bandwidth lines.

The difference between "residential" and "commercial" bandwidth is eroding it's no longer orders of magnitude greater even if you are pulling multiple 1gbit lines from your DC.

"IoT" are often not that purposely built they are going to share SoCs and likely firmware/software that will make 100,000's of units if not more vulnerable to compromise.

If you have say a 1M Apple HomeKit enabled light switches across Europe and the US which were built by some lowcost/OEM "insert_your_brand_name_here" manufacturer vulnerable to a single exploit you get the same problem.

And this problem will happen over and over and over again with different devices.
>>There's a non-stop cliche that, since you're rich, you're an asshole.

I don't know how rich you are exactly, but in my experience, beyond a certain threshold (noticeable among upper-middle class and above), there is a strong positive correlation between wealth and assholeness - or at least traits we generally associate with assholeness.

The correlation is indirect, though. Wealth is correlated with income, which is correlated with rank (e.g. higher in the org = higher salary), which in turn is correlated with strength of personality. Assholes tend to push others aside (and take credit for everything) to get promoted, and those at the top tend to demonstrate sociopathic tendencies such as yelling at or otherwise abusing underlings, and making rules and policies that fuck over others.

There are of course exceptions, but there is little doubt in my mind that the correlation is real.
On the upside, you will not get blamed when your move turns out to be wrong :)
Which would still fall over when you're being flooded with more traffic than you can either outright handle, or screen for authenticity
You don't understand the concept of sample size.
Short and sweet. Never seen a bug explained so succinctly.
Yep. Similarly in the OS X 10.11 API Diff document from last year [1] you can see "Added #def CPUFAMILY_ARM_TYPHOON".

[1] https://developer.apple.com/library/prerelease/content/relea...
Yarn has been the talk of the dev world for the last week man. It had a large upswing on both here and reddit.
>Now here's the $1M question: How can we help the little guy? You seem to suggest it's not possible (in that last sentence), but do we really want to let the system devolve into purely RIAA vs BitTorrent?

You can help artists by offering access to your distribution network and your marketing services, likely in exchange for copyright as success is impossible to predict and artists don't have capital. In short, become a record company. The way you actually help is by creating competition to the establishment. It is likely, however, that just like with tech startups you will be bought out by the Big 4, though. To avoid a buy out and ensure you can work for the artist's best, make sure to be profitable.
That is the official LLVM bitcode, which doesn't mean Apple is using their own internal architecture neutral fork.
I am. And most developers in Sweden are. If you meant to ask "Why aren't programmers in the United States unionized?" then you should specify that. :)
"[..]Alongside its government clients, Endace has many major corporate customers.

Endace’s sales lists include finance industry giants such as Morgan Stanley, Reuters, and Bank of America. [..]"

What for do finance companies need systems that intercept data?
I was just trying colemak, from what I read the loss in qwerty is dued to people making the fast jump, I will see if learning the different layout in like the evening and keeping qwerty for the rest of the day preserves both memories
Thanks for asking! I can explain you how the lighting unit works since I was taking part in designing it (better than nothing :) ). Since we didn't have enough GPIOs on the Raspberry which is controlling the lights, we used a GPIO expanders (MCP23017 https://goo.gl/S4i9Gw). RPi sends commands over I2C interface to switch their outputs on and off. MCPs outputs are driving optocouplers (on the same PCBs designed by us) to provide a proper level of isolation. Then the optocouplers' outputs drive the relays working in a "stair case" configuration with analog switches on the walls (see a my comment above and here https://goo.gl/sJw9F1). All the "low-level" software is written in python using ready to go libraries and exposing API to a web-app which is basically a user interface for the system. If you need more details, just shoot!
There should be some testing for IOT devices like the FDA clearance for medical industry.
It's not about locality but about identity.

An American in San Diego is much more likely to contribute funding to aid disaster victims in New York than in Tijuana (which is only 20 miles away, but across the border).
You assuming Apple doesn't have their own architecture neutral fork.

LLVM used by Apple isn't 100% like the open source project.
650 Prompts for Narrative and Personal Writing
Show HN: Awesome curated tools of the trade
At some point, if the Internet is going to continue to function, one of the likely outcomes is that these customers wake up some morning and the only thing they can get is a web page telling them they have a choice of disabling their fridge's Internet of Shit device or connection, or doing without their full connection to the greater Internet.

Compare to, for example, our stopping our use of lead in paint and gasoline/petrol.
What features should include an MVP for online marketplace platform?
IANAL, but I'm pretty sure the answer to that is "yes". It would set a terrible precedent by authorising vigilantism, and I'm not sure how you would define "vulnerable" under the law.
>The indictment, unsealed today, alleges that Nikulin, accessed computers belonging to LinkedIn, Dropbox and Formspring, each of which has its headquarters in the San Francisco Bay Area. The indictment further alleges that the defendant accessed the computers without authorization and that he obtained information from the computers. According to the indictment, the defendant also caused damage to computers belonging to a LinkedIn employee and to Formspring by transmitting a program, information, code, or command. Nikulin also is alleged to have used the credentials of LinkedIn and Formspring employees in connection with the computer intrusions. Further, Nikulin is alleged to have engaged in a conspiracy with unnamed co-conspirators to traffic stolen Formspring user credentials. In all, Nikulin is charged with three counts of computer intrusion; two counts of intentional transmission of information, code, or command causing damage to a protected computer; two counts of aggravated identity theft; one count of trafficking in unauthorized access devices; and one count of conspiracy.

https://www.justice.gov/opa/pr/yevgeniy-nikulin-indicted-hac...
The Prophecies of Jane Jacobs
تحميل برنامج سايفون 2017 كامل للكمبيوتر والأندرويد Psiphon
Yevgeniy Nikulin Indicted for Hacking LinkedIn, Dropbox and Formspring
Hi everybody,

I am looking for people who are willing to try this out and give some feedback.
Anyone interested in helping out? :-)
This is the trend of mobile OSes catching up with mainframes.

I guess everyone knows about Android, and on Windows case at least for .NET, version 8.x introduced AOT compilation to native code on the store, which was then improved to .NET Natt in 10.

One day we will have mainframes on our pockets. :)
Yes but Amazon used Dyn for us-east-1, IIRC, so it might be related.
Hey, you're totally right. Actually we would normally use some embedded solution for that (preferably STM32 or ESP8266 if wireless was needed), however, in this case we were focusing on designing it in a way so that it's easy to maintain by web-development agency, which we are. Not everyone here knows how to change and flash low-level code into a uC but almost everyone would be able to fix a bug in python code on the RPi :)
>> a private high school and top college (both of which cost <$100/month and have active policies for lower income families)

That's... very unfair.

Education is one of those things that exemplify privilege, because it's just so unequal, and dependent on income.

Offering positions to a top school to a few kids from poor neibhroughoods doesn't begin to address the fact that the vast majority of those positions are offered to kids with rich parents, often without any regard to their academic achievements. Where academic achievement is taken into account, the fact is often that the kids from the richer backgrounds are in a much better position to take advantage of the opportunity, because of their higher income.

For a personal example: I went to a private school, one of the "good" schools in my country of birth (Greece). This was thanks to my father's political connections, rather than his income. Pretty much all of my fellow students could afford extra-school teaching sessions, to help them with their grades. I didn't get any, because my father couldn't afford them, so my grades sucked throughout school.

This was compounded by the fact that many of my teachers also offered private tutoring, which tended to significantly boost the grades of the pupils who chose to take advantage of it. There is an obvious conflict of interest in having a private tutor who also grades your school work, but at least my dad's connections (I think he was owed some favour from the school's owner) ensured that I managed to finish school. I'm finishing a Master's now and preparing for a PhD, so I'm not complaining, I can do well in my life.

Still, I have many friends from similar, or poorer backgrounds who didn't have a dad with good connections and had it much harder than myself.

There's also the fact that kids from poorer backgrounds tend to suffer from problems that never trouble the richer kids. For example, all my friends from out of school did "drugs"- I mean they did stuff like sniff gasoline etc. Needless to say this did not help their job prospects much. Is that income dependent- you betcha my rich fellow students, if they ever did drugs, would get the good stuff, not glue and gasoline.

Again, I dont' think that's something you can fix with donations. The problem is that a very large number of kids from poor families simplly fail to find their way in higher education, or employment, that matches their level of ability and get into situations that the rich kids simply never find themselves in. Some get lucky and benefit from support programmes, but the majority do not. That is a great injustice and it makes sense that people are frustrated about it.

And, again, while donations and philanthropy help, things will not change significantly unless we find some fundamental way to address inequality- which is very unlikely.
True, but there's conversely a whole bunch of problems associated with the scandalous lack of security wrt many IoT devices, that aren't anything to do with DDoS. I wonder how many people are being watched as we speak.
Playing devil's advocate here. Is the outrage towards this kind of system essentially a criticism of the technology? Specifically, can we guarantee that the system would be secure and can we guarantee that the system is accurate (objective) and not subject to human manipulation?

If we hypothetically assume that the system is hacker-proof enough and accurate enough for all practical purposes, is there still an underlying moral reason not to implement this system? I instinctively feel that it is wrong, but I just don't know what it is.

I think we all unconsciously rate people in our social interactions. Maybe to explicitly quantitate that rating solidifies it and makes social mobility harder? Our fuziness in our unconscious rating of people gives leeway for others chances to redeem themselves or not? Whereas in a system like this, people are more likely to be stuck where they are?
Q: Why do so many major services (ex Twitter) use ONLY a single DNS provider?
I don't get it... why do so many major Internet services such as Github, Twitter, SoundCloud and more use only a SINGLE provider of DNS hosting for their DNS records? It used to be that you always made sure you had a second provider doing "secondary DNS" for you. Have people just forgotten this common practice? Or are there other reasons I'm missing?