skysight-inc/HackerNews huggingface dataset:
If iPhones were open to third party software then restricting access to the official SDK would only cause others (e.g. Google, Mozilla, Canonical) to create competing ones.

And how would a monopoly on signing keys be any different than the original app store monopoly? That's effectively what the app store monopoly is.
Should also read this, too:

http://blog.erratasec.com/2017/01/dear-obama-from-infosec.ht...
Ford pardoned Nixon without him being convicted. Amnesty is a pardon given to a group of people, rather than an individual.
Hi Nate, tell us about your efforts to hire people over the age of 40.
It is much better, but a LONG way from autonomous.
I think that here you've made a great point. For many users, the level of privacy that Whatsapp gives is unnecessary, but if you are the person that needs to discuss mission-critical matters over Whatsapp, they give you the possibility to do that safely.

The only problem would then be that they can MITM one message, even if they'd be caught that way. I doubt they'd do that for less than world-changing messages, but still that's the only problem if you enabled the notifications and checked the numbers.
I understand some people don't use things like cloud software, but the internet isn't just blogs and newspaper websites.

Sometimes styling is added to make web app UX better. Sometimes Javascript is used so that, even if the first load takes more time, subsequent actions will use less bandwidth. Sometimes more stuff is put on the page because 95% of users want that information to also show up.

This is obvious and pedantic, but also counters half of the comments on these sorts of these stories
Which part? I don't think humans were designed - we're probably the result of an evolutionary process without intentional design - but "humans were designed by God to have free will" would be a counter to my statement, yes.

If your complaint is my claim that we have a will, I'm using the common-sense version encoded into our legal and cultural system. I agree that we don't have a good concept of what intentions are, or how they causally connect to actions, but I do know that for at least some of my actions I experience something called "intent" before I undertake the actions.

My overall point was that the capacity for intent can arise through an evolutionary process without being designed in, but it does rest on the two assumptions I just listed.
So,

The problem with key notifications being off is for those users who really want to be secure, and downloaded Whatsapp because they wanted E2E, but didn't know they had to go into settings and turn it on.

The problem with key notifications on-by-default is that regular users see warnings they don't understand and get warning-fatigue.

So how about making a default-on notification that is understandable for all users? Like:

::: It seems like Alice switched to a new phone (i)

where Bob can click the (i) for more info, or just ignore the notification. If Bob was security-conscious, he'd perk up at that message, while the majority would just go "meh" or congratulate them on their new phone.
Turning snap into wic would probably cost more than 9%
Wii was great multiplayer fun. We literally spent half days playing Wii tennis with 2 or 3 people. I assume that VR will be much better (only used DR1 and cardboard and of course they aren't too compelling), but does meaningful multiplayer VR exist yet?

Edit: And by multiplayer, I mean everyone in the same room multiplayer. Social multiplayer?
It doesn't work out that way though. Asymmetric information inevitably leads to market collapse [1]. The only reason healthcare "works" is because we're not rational actors. I mean those more as mocking quotes rather than scare quotes. Perhaps it's more accurate to say, the only reason healthcare works is because many actors are not motivated solely by money. Which, a decent MBA would consider a sucker.

[1] https://en.wikipedia.org/wiki/The_Market_for_Lemons
I have been contemplating deleting my facebook for 6 months. I finally pulled the trigger just now. I don't trust the company at all. Too many smokes and mirrors in what they do.
Blitab Technology :createing  tablet for the blind and visually impaired
It's rather disappointing UX and something that trains users to accept key changes of their contacts that Signal doesn't support affirmations of key continuity.

If you get a new phone without having lost the old one, it would be good to have a feature where Signal on the new phone shows its public key as a QR code, you scan it with Signal on the old phone and Signal on the old phone generates a protocol message to contacts indicating legitimate key roll-over without "key changed but you don't know why" UX.
Cake PHP was basically a copy of Rails. When Rails first appeared, it didn't exist.
I recently tried the PlayStation VR in a store; it was a really strange experience to look down at myself when playing the EVE demo, to find out I a) had a body and b) it was of the other gender.

I thought that was the most interesting part of the experience; the spaceships looked pretty flat in the distance and I was sad that my hands in-game didn't move along with my controller (as they do in some games).
Hack one of them and release their email/recordings/etc. showing the plot.

Maybe you'd burn some sources or methods, but if the alternative is that you get taken over, is that not worth it?
Mass Surveillance Breeds Meekness, Fear and Self-Censorship (2016)
That was just an example. You could also pair the key to a person by some other method, such as storing a copy of it on a storage medium other than their phone.
Commentary on this at Volokh -

https://www.washingtonpost.com/news/volokh-conspiracy/wp/201...
This is absolutely standard in the UK financial services industry, and ultimately required for compliance with financial regulators.

The alternatives are running agents on your machine that capture everything you do (which most shops I've been at do as well) and removing local administrative rights to prevent users from removing auditing software and deploying workarounds like your VM (also the norm now).

This has absolutely no bearing on the security of HTTPS/TLS as a whole, the chain of trust is working exactly as it's supposed to in this instance. It's distasteful as an end-user (and even more distasteful as one of the network engineers deploying it, wondering why it's not Information Security's job instead), but you can always quit that job and find another one (yep, that's what I did).
Id only people cared about the Affordable Care Act this much, before! The election...
Wow I feel lucky in a way that my nausea and lightheadedness was so bad when taking oxy that I decided to just take the pain than continue with the liver damage.
The HRE had a very tenuous claim. They didn't even use the name until hundreds of years in, and most of their emperors were not crowned by any popes. Their claim was basically that the HRE was a successor to East Francia, which lands had been part of the Carolingian Empire, which had been ruled by Charlemagne, who had been crowned emperor by the pope in attempt to stake out his own very tenuous claim to be the continuation of the West Roman Empire (which had basically been defunct for centuries by then).

Couple that with the invented principle of translatio imperii [1], and they glossed over the multiple long breaks in lineage, and lack of even an unbroken connection between the territories ruled.

There's the old joke about the HRE: It was neither Holy, Roman or an Empire - the emperor ruled on paper, but it had very limited practical effect other than letting a smaller and smaller set of families reflect in the glory of an Emperor title.

[1] https://en.wikipedia.org/wiki/Translatio_imperii
> Not paying Verisign your rent?

Would have been a fair statement a couple of years ago, but we live in a day when you can get free annual certs manually (Startssl) and free 90 day certs automatically (Letsencrypt).
https://www.youtube.com/watch?v=nBleglF94CA

TLDW: Star Trek is exactly what Thiel describes: Utopian drivel.

DS9 actually abandoned a lot of that idealism for something more realistic, and confronted this issue in an episode called: "Treachery, Faith, and the Great River".
I don't think that private communities provide the solution. They seem like a good idea.
But I think they would just turn into self agreeing echo chambers.
BinitTech – A Small Blog with Great Quality Contents
Code camps were a product of the mid-to-late '00s, and the premise and format has largely remained the same.

In the late 2000s, the popularity of Ruby exploded when Rails gained mindshare. Rails, along with its healthy share of innovations [1] and productivity gains [2], was a good fit for code camps because it took little effort to crank out a basic CRUD app. Such fast feedback is very impactful on people who are just starting out programming.

Despite other frameworks borrowing from RoR in the years to come, Ruby's culture is largely compatible with the notion of 'programmer awesomeness' -- where a motivated coder is given a powerful toolset and is allowed to do great things, even if they're a bit quirky -- and is lighter on idiomatic dogma than some other languages that are popular for greenfield development today. While those idioms and mores are an asset to the languages that have them, they may stifle independent exploration and make people more afraid to make mistakes, which are quite detrimental to new learners.

Meanwhile, since the late 2000s, Javascript has become practically mandatory, largely buoyed by the HTML5/Web Platform effort and browsers finally getting their act together, but also by Node opening up an entirely new frontier for JS in a very desirable application domain. This, coupled with the JS community's tolerance and encouragement for exploration and independent re-discovery, also makes it a good fit.

[1] https://news.ycombinator.com/item?id=12758085#12761705 [2] https://news.ycombinator.com/item?id=13196431#13197538
> P.s. don't let my username fool you ;) I'm just unfortunately hipster.

The HN gods said it, you're not a n00bie but a real leet. ;)

user:	rubyn00bie
created: 1337 days ago

Back on topic, I would argue that it's more because bootcamps are here to get you a job fast, and that Rails and JS (maybe followed by Swift/iOS) probably offer the best (available jobs)/(time to learn) ratio of anything you can learn in a few months.
Absolutely wonderful guide. I've bought copies of the book and given them as gifts.
>while it's probably not reasonable to optimize for them

it's not an optimization, it's a best practice on the web. server side render and use javascript for progressive enhancement.
Sure, that is all pretty valid criticism of the terrible report the intel groups put out. It doesn't do anything to show the background, which Errata are taking as assumed knowledge. The first paragraph is basically a "we think it's true" and the rest is "that doesn't actually explain anything"
Why is it always assumed beggars and homeless are two of the same? Disclosure: I have been homeless and would never resort to asking strangers for money.
You still can.
We don't profit from paying out to providers; we're an insurer.

We profit when people are healthy.
I don't think it's a tech problem so much as it is a design/culture problem.

If you look at the most popular forms of social media and what is considered popular, you see that low effort content is what draws the most views and reactions. Low effort content being images, 140 character quips, so on and so forth. The most popular social media sites are either geared specifically around these forms of communication (instagram, twitter, imgur, etc), or are dominated by such forms of content (reddit). The reasons why these forms of content are so popular are well understood so I won't waste time on it.

The issue that arises when these forms of low effort content dominate is that they start changing the way people think and act. The mind will adapt to the space that it lives in. In other words, if you talk in 140 characters frequently, you are going to start thinking in 140 characters. That being said, this is not to say social media has somehow created a problem that didn't exist before. People are rationalizing animals not rational animals. I'm saying that social media is making the problem worse and creating a dominant meta where low effort content succeeds and reinforces its own success by creating patterns of thought through the designs they are built around. The fact that Twitter has become a dominant form of political discourse should speak volumes about the mess things are right now.

My feeling on this is that the current landscape is akin to us discovering alcohol for the first time: we haven't adapted the right cultural norms to deal with this sort of technology yet. The current situation can be thought of as us trying to figure out the rules of the road. I think the best path forward is to not speak out against groups, but against behaviors that are muddying the water in all groups right now.
Sure, but forcing healthcare on everyone makes the market failure a government failure--if "failure" means someone paying much more for insurance than it actually costs for that person.
The copyright on the site says 2016. The internet has been around for too long for a hardcoded copyright notice...
Downthread tptacek talks about how his company does verification of binary images. I assume there are limits to what is possible, but that's really the same as any verification approach.

I do agree that 'who is verifying' is a valid way of looking at it too.

Regardless, it's pretty clear that tptacek means formal verification.

Edit: see http://arieg.bitbucket.org/pdf/seahorn.pdf
WhatsApp retransmission vulnerability
Isn't this article a couple years late considering it is YC publishing it?
I'm reminded of this article (posted here a few months ago)

https://www.lawfareblog.com/why-president-obama-wont-and-sho...

I found it to make a compelling case, if only because it offers less emotion and more citations than I've seen elsewhere on this topic.
WhatsApp Backdoor / Vulnerability demonstration [video]
Except that will be disclaimed as being faked, and it will be impossible to prove otherwise.
This.

There might be more Python jobs, but a lot probably require knowledge that most people can't get in bootcamps.

A simple indeed search of Django vs Flask vs Rails shows there are much more demand for Ruby web developers, which is what bootcamps train for.
Quite obviously the military-industrial complex on all sides has gotten rather bored of the relative peace we saw for sometime after the fall of the USSR, so we need another cold-war potentially building up into contained, localised conflicts again, so we can expect allegations like these fly thick and fast now and in the future. Quite obviously nation states of all hues have stopped protecting or even representing the welfare of the majority of their people but instead work for the powerful minority, be it a fuedal clan or a sophisticated network of big business or anything in between. And these are served well by continuing conflicts and poverty and localised war. The only thing they don't want is an all out global war but they don't realise they have to be careful what they wish for, as history has shown repeatedly.
I also have the same impression. Looking at various Passmark CPU benchmarks Hardwell has been the last big upgrade (but also only when considering battery usage). Since Haswell I have seen any major must have big improvement. It would be great if Intel will develop a true 4 core i7 processor with TDP like 18-28W... I also have the feeling Intel is getting lazy (since the have the monopoly on mobile desktop CPUs). Especially when comparing speed of innovation to ARM mobile phone processors.
The course instructor should stop copy & paste stealing code from other repositories and claiming it as his own. It's an issue to varying degrees across most of his repos.

https://github.com/llSourcell/predicting_stock_prices.

"100% Siraj" or 95% https://github.com/chaitjo/Regression-Stock-Prediction?

https://github.com/llSourcell/antivirus_demo or https://github.com/Te-k/malware-classification

etc

etc
Uh, the point is that, on a slow connection, everything is going to suck in unpredictable ways, because of server-side bloat, and the trendiness of developers deploying 5MB js libraries.

Worrying about whether the browser was recent or supported misses the point. Any browser can suffer these sorts of problems on a 56KB dial-up connection. (3G mobile data is frequently throttled at 128KB by popular ISP's, btw)
What about the possibility that Snowden dies from a freak accident or suspicious circumstances while in exile? Either will look like a government coverup. It's probably better to get him home one way or the other - I'd prefer a pardon -, or you very quietly make sure that all his needs and wants are tended to.
> Not only are the costs outlandish, there are no high deductible plans available for people who are generally healthy. All of the plans, gold, silver and bronze, are geared toward heavy users or highly risk-averse users.

Isn't this just because now insurance companies have to cover preexisting conditions and also not charge them exorbitant prices? Naturally, they would be taking a loss in order to do this so that burden is instead shifted onto the healthy people. To prevent healthy people from just not buying insurance, the mandate was made because it's economically unfeasible without them.

If you're the type of person who would normally use a high deductible plan, you're worse off, but that's the way it was supposed to be. Presumably if one day you get very sick though, you will still be able to get insurance.
Honest question: what is the greater cause of this situation we're now in: the five eye's obsession with all things offensive "cyber" over offering even the most primitive defense to industry or Russia ruining the fun by deciding to exploit this overtly rather than just for covert information gathering/polticial advantage like everyone else?
Yes, anyone can make their own Android app store and charge whatever they want for the apps there. http://lmgtfy.com/?q=android+app+stores
Interestingly however, the plaintiffs don't allege anything about the practical impossibility of loading non-app-store apps.

(At least, not as far as is mentioned in this decision -- I haven't read the original case, only the summary discussed in this decision, but it seems fairly complete)

Instead, they point out (1) Apple's threat to ban apps that use other distribution channels from the app store, and (2) Apple's threat to void warranties of phones onto which apps have been sideloaded

So a monopoly on signing keys is actually different from what (the plaintiffs are claiming) is the problem with the app store monopoly.
I can buy Candy Crush from Amazon and Google Play, isn't that the same thing? It won't run on my iPhone, but it's fundamentally the same app, isn't it?

I'm asking this genuinely, from a position of ignorance, interested in hearing an answer.
If whatsapp allows few experts or companies access to code they can always verify but the issue is centrally hosted , that is the issue not open or close. If i can build software on and host on my server that might be better
Whatsapp became popular because they worked out a way to not have to have people create an account and a password, you're overestimating humans
How is that related to this case?
Previously posted: https://news.ycombinator.com/item?id=13385264
they'd get that message every few weeks to month from me, as i flash a new ROM....
I agree, and I think right now the timing is really bad.

It is the wrong time to weaken the IC any further given how that would play in the "IC vs Incoming administration" showdown that seems to be squaring up.

"It's OK to share information and run to Russia" is not a good thing to pardon when you're trying to investigate whether people close to the incoming administration have shared information with Russia.
To your first paragraph: Sure, the effect is hard-capped at 30%. How is that an argument that it's not a real problem?

If someone was cheating you for 30% of your bill on anything, wouldn't you complain?

To your second paragraph: transparency isn't what's being discussed here. The developers aren't suing Apple; end users are.

To your third paragraph: nobody is alleging that Apple has a monopoly on computer programs in general; the point is that they have a monopoly on distribution channels for -- specifically -- iOS apps.
I would think the added weight of a battery on your head would be one additional factor also.
Well, whether it is or not, why does that matter?

"Google does it too" isn't a valid defense if it does turn out Apple is found to have done something wrong.
Whether or not the DNC was hacked by the Russians or someone else, or it wasn't a hack at all, but a leak instead is less important to me than the fact that because of this incident we all were made aware (with proof) of the shit-show and corruption that exists in our government. The DNC chief worked against a candidate to bring forth another - honestly, I'm glad this incident occurred to highlight the mess.
Created an account just to say this- Putin is evil. Yesterday we had our class monitor elections. And this guy who likes Russian women got elected. Someone pointed out he has a cousin who once visited Russia and we all immediately knew Putin was behind this. We even contacted the local newspapers who obviously know everything about everyone and they immediately published stories corroborating our claim. Lidderaally everybody else also agreed. We're almost done with getting a re-election but by God this evil president wasted so much of our time. I hope Putin dies someday.
Telegram made different choice. Secret chats do get broken, if ephemeral key renewal fails. Queued messages won't get encrypted with new key automatically. Of course at times this is annoying.
"It won't run on my iPhone" is a pretty gigantic difference, big enough IMO to thoroughly contradict the claim that the two apps are "the same thing".

Anyway, you could also fly across the country to Target and buy "the same thing" there (in GP's analogy).
Other cases that trigger a key change:

Buying a new phone and switching to it
Reinstalling your phone OS because "it's slow"
Reinstalling WhatsApp because "it crashes" or "it's slow"
Swapping a phone because the screen is broke or I dropped into the toilet

I think it's romantic to think that 1 billion of WhatsApp users can be taught about the risks of MITM attacks and how to do a key check.

This is what I do: I have the warnings turn on. When the key change warning appears, and if I care enough about the person and the discussions we have, I try to match the warning with a real world event, so either I already know that something happened, or I try to remember to ask somehow if the person repaired or changed the phone. If I can match the warning with such an event, I feel satisfied. Otherwise, i ask for a key check when I meet that person in real life.

It would help if WhatsApp provided a UI to show whether I have verified the current key of each user (something like a green check-mark next to the name) because it's hard to remember.
How many media buys are done to get you to do something bad for yourself to profit some company some where. :(

This article just jumped on the pile and only got paid in clicks instead of revshare. I'm doing media buys for youtube videos I make that I think will make the world a better place. You should too.

If you don't advertise for a better world, who will? What a hilarious article to provide contrast.
Visibility.

Most people imagine that if they lose their homes, the fate that awaits them is the one they step over each morning on their way to work.

Most people don't have contingency plans, should they find themselves out of a job, and evicted from their residence, with no family or friends to assist with temporary resources.