skysight-inc/HackerNews huggingface dataset:
Or maybe, if you are a mac/iOS develpoer locked into the ecosystem, looking at the emojibar with a wtf face.

I mean I knew what I got into, I just hoped Apple won't neglect the people made its platform desirable for the masses.

I hope this is just a wave serving the 'starbucks pros', and next time we get to get a decent update.
It seems so.
The B-1 can not even reach Mach 1 at such a lot altitude. It's maximal operating velocity (at any altitude) is Mach 1.25.

People tend to really underestimate how much harder it is to go faster once you reach 0.90 or so, especially at low altitudes.
How so? It's definitely an unfamiliar system, for me, and there might or might not be vulnerabilities in the current implementation, but I have no reason to believe that the windows NT model is intrinsically less secure than the unix model.
"Science" is not "developers". Apple wanted to sell them on a full stack all the way up to clusters of expensive Mac hardware for parallel computing. And the article you link even admits that companies which have targeted scientific users with hardware have mostly failed -- that market is more likely to buy either extremely specialized hardware or, more likely, commodity machines that they slap Linux on.
Seems like it should tweet at me once a day with a event nearby based on my Twitter's location (in bio). That would be great :)
+Yandex
Video pros need high-end, fast, high-memory machines with fast storage.

99% of us developers don't. Even if you have a lot of VMs.
Lugovoy, the murderer of Litvinenko is now a member or parliament in Russia with extradition requests of the UK being denied. It's pretty clear the assassination had the highest possible approval. Sometimes, things are exactly what they look like.
If I needed CF Pro though I'd already be on it.

I mean I guess it's good if you're already on Pro and could do with the freebie year but it's not really much to get the whitehats auditing your systems for free*

* free unless they find something
>Also unlike Windows or Linux, a single macOS installation can last pretty much forever and doesn't need to reinstalled every year because of the lost performance like Windows.

You need to update your arguments. It's 2017, not 1998. I haven't reinstalled Windows on my desktop system in years and it's running perfectly fine.
I just want to randomly poke in the discussion to say that out of the three big OS, MacOS user interface is the most vomit-inducing. I know this feeling isn't shared by most.

Now that windows has nice workspaces and an already usable UNIX environnement (Windows Subsystem still has things to iron out, but it's very nice for a beta), my personal ranking became:

Linux > Windows > MacOS

I see nothing that MacOS offers that Windows doesn't, whereas Windows has potential for much better hardware specs, games, bigger user base.

The only thing left for Apple is their 16:10 screen and their per-monitor scaling.
> I refused to type passwords since I was worried it might have been another app imitating Google and I had no recollection of any action that would have required me to sign in again

Same for me! So follow-up question, how do we know if an android app is the real deal? I opened the app switcher and it certainly said "Google Play Services" on top of the window asking for my password, and had the correct logo, but could other app present itself in the same way?
> Mossad attempted to use poison to assassinate the head of Hezbollah. It went comically wrong, with his driver chasing down the assassins with a rolled-up newspaper.

Mossad successfully poisoned the head of Hezbollah by spraying a delayed action toxin into his ear. His driver (who did not comprehend what had happened, and whom he was dealing with) chased after the assassins who in turn fled fearing he was a bodyguard.
Nazrallah was for certain a dead man and was only saved by the personal intervention of the the Jordanian king who ordered the Israeli ambassador to provide an antidote or deal with the consequences of a hostile Jordanian state.

The Sheik was administered the antidote on his hospital bed and survived.

There was nothing to laugh about.
Not entirely true, it relies on SHA-1 for security when you use PGP signatures. That makes it possible to fetch git repositories from untrusted sources if you can validate the signatures.

I don't really see how HTTPS is relevant here either, I clone most of my repositories over SSH for instance. And you can use git over plain HTTP too.
For what it is worth, I used to feel exactly the same way until I got a machine that had one. Now I miss it when touch is unavailable. Being able to use touch, mouse/trackpad, & keyboard all at the same time is, perhaps surprisingly, a very pleasant way to work.

To pick one example: being able to flick through long documents with a finger while keeping focus on other parts of the screen alone has been a huge productivity booster, and I do not say that lightly.
That is a great attitude, and it not only helps you (by being more knowledgeable and less worried about hypotheticals), but also the rest of us by reducing effectiveness on the profiling of those who read certain things - the same way that being a normal person that uses tor reduces the "use tor"="pedophile" fallacy (and substitute tor by end2end encryption, torrents, decentralised communication, or what have you).

So thank you!
No, you misunderstood what is actually the problem here. Pulling under
deployment some code from random resource from the internets that can go down
or get deleted at a whim and you can't easily move to just some other mirror
and you don't even control when the thing will be up back, that's the problem.
Not the trust you need to put to use the code (this is still there,
obviously). And the very same comment applies to third-party package
repositories, like PPAs in Ubuntu.

Not to mention that with pre-built binary packages your deployment speed and
repeatability get significantly better, as you don't need to rebuild the
artifacts every single time.
Ask HN: Why HN has no visible upvote number for comments?
Save your startup with a “no B.S.” manifesto
I'm a free customer, also no email...
For me the "thicker margin" argument only holds if Apple were cash constrained or could get a better return elsewhere.

Apple has a massive massive pile of cash sitting around (over $200 billion) and I'd be surprised if standard investments make a higher return than actually investing in their Desktop line.

That's what confuses me about Apple's approach. Just because you make less margin in a line doesn't mean you shouldn't do it...
One simple explanation could be the road was between very large concrete buildings or the area has some sort of GPS interference (there is one place in Tokyo that jumps my GPS and probably others' by about 300m to the same location every time). Another simple explanation is the software has a bug on when it thinks you arrive in some extremely bizarre scenario (hence you both had it happen simultaneously).

I don't know how it works in the back so this is all speculation of course.
There are blobs in the kernel and speed was a very important motivation when kernel switched to git.
Unless the web site was paranoid enough to encrypt your password client-side before sending it to the server, it's possible the password was leaked.

With 2FA, your password and a one-time code were leaked and cached somewhere, but in order to log in as you today, an intruder would need to know a new code. And they wouldn't, unless you happened to set up your time-based one-time password (TOTP, e.g. Google Authenticator) during this timeframe as almost_usual mentioned. The reason here is because it's possible the secret key was leaked, so now someone can generate the same numbers your app is generating.

xuki mentions that 2FA doesn't protect you against stolen bearer tokens, which is another issue. The usefulness of a stolen token depends if it's expired or not. If you haven't, force a signout of all your sessions to invalidate old tokens (and change your passwords).
> Voter fraud could become more easier to commit

Why?

> Swing states would disappear.

Thank fucking god for that.
Everything can be formalized, even uncertainties in knowledge about experimental environment (e.g. by making a statement that unaccounted parameters do not influence the result - indeed, this will be challenged and proof requested and things like fire alarm affecting mice behavior should be reliably excluded). Something that cannot be formalized, cannot be proven or falsified and thus is not a science. The only difficulty may be to build the necessary apparatus, but that's doable and that's the way to fix the science.
I was signed out several times today. And I couldn't attach pdf-files bigger than 200Kb from Chrome. Then I logged in on Firefox and it worked again.
Most servers run linux, which means many developers are bound to access them remotely, which makes the desktop OS a bit irrelevant. And many people may work faster with windows desktop (win7 for me please, none of that tablet crap).
Could you explain to me what would make Britain or France not a state far before that time?
Except the GPUs were crap even on release. And there are like 3 applications that can use both? So unless you were in that niche, you'd end up paying a ton of money for two dubious GPUs of which you could only use one.
This actually happened because they started to rewrite it all, according to their blog post.
> When I was a young hoodlum, one time I took a piece of a paper shopping bag, wrote my home address on it, and dropped it in a mailbox. About a month later, it was delivered to my house in a zip-lock bag, with the same note the OP got.

I have to admit I did get a chuckle out of your outrageous act of teenage rebellion. Fight the system!
What Every Developer Should Know About CouchDB (2016)
If there are multiple treatments/drugs that achieve the same thing then the job of the SG is to recommend which to use. Usage of anything else should be viewed with a healthy amount of suspicion.
Single thread performance is completely irrelevant to Moore's law.
Guess what happened to me on my iPhone today in the morning when I put it out of the airplane mode. Same thing I didn't enter my password for the above mentioned reasons
What if there's a deep-cover operative for KGB/NSA/... who's already a respected kernel contributor? That's not implausible - those agencies already have people with the relevant skills. Hell, the NSA openly contributed SELinux.

Now suppose they've contributed a commit that collides with another one that puts a backdoor in, and they use this very selectively, MitMing git clones made by high-value targets. If anyone were to compare one of those clones against the real kernel repository then that would burn their operative, sure. But how likely is it that anyone would ever do that?
Discovery will likely find more things, no?
A factor of 10 and at least 3-4 years of engineering work? Yeah, that's no small potatoes.
It would surprise me immensely if they did not. Many mobile operators also operate caches.
Your why questions can all be answered by "It's cheaper than hiring a team to do it in-house". At the end of the day it's all about money and non-techy people are often the people in charge of the money.
Git has tag signing, surely there's a way to clone a specific tag and check the signature against a specific GPG key fingerprint?
App from Scratch: Building a Pomodoro Timer in React and Deploying It to Heroku
Or look at how many websites are still vulnerable to Heartbleed.
I'm a Cloudflare (free) customer, and I've had no email or contact of any kind from Cloudflare.

My understanding from reading this and Travis' post is that all Cloudflare customers are affected, is that correct?
Irrelevant for this particular issue since finding SHA-1 collisions is embarrassingly parallel.
Thanks for the reply. My apologies for the delay. I'm used to places like reddit giving me notifications about replies so I just didn't really realize there was a reply. Risk tolerance is a very personal thing. It varies with individual and as a short seller I've grown to accept it a bit more.

For any investment, one simply can not know everything. I gave TSLA up for another area which as paid well. I use to own in Google after the IPO, even during my ownership I would short at times. The same is true with any stock I'm long. If there is an opportunity that I'm comfortable with then I take it.

I think too often people talk about short selling without any real experience doing it. So often it's realities get distorted with chatter. 2008 I learned to short basically during hands on learning as there just wasn't any great opportunity when things were going crazy. There were other great opportunities, my personal favorite was the government shut down under Obama and the predictable re-opening. That was some glorious profiteering right there...
CF should be thankful Google is doing any of this, clearing their entire cache would cost Google $ to index web from scratch.
You can't even hackintosh a Mac with a decent GPU any more, since NVidia hasn't put out drivers for their 1xxx cards for OS X.
That's the fundamental Cook flaw. He prioritises short-term margins over long-term product farming and ecosystem management.

And he's very good at it. But it's a strategy that literally has a limited shelf life. First you get an exodus of early adopters and creative users, and eventually you get a catastrophic product failure that does a lot of damage to the brand.

Apple isn't there yet, but I'll be surprised if that failure hasn't happened by 2020.

Of course there may be One More Thing in the R&D labs to save the day. But Cook has a poor record with original R&D, so it's optimistic to assume that's going to be happen.

I'd love to be wrong about that, but the smoke signals suggest otherwise.

WWDC this year will be a turning point. The theme is the liberal arts and we'll see whether that means a return to pro hardware, or just some hand-wavey presentation rhetoric.
I'm a non-American as well. Hate is a strong word, but it is terrifying having someone so stupid in charge of a huge nuclear arsenal.
Yes, but you picked two hash functions which are known to be insecure. Their complexity reduction argument appears to apply to cases where you are not using pure brute force for either hash, which would be the case if you were attacking MD5 and SHA1.
That's the page linked from this post, not an actual sign in
Thank you for your comment. I'm familiar with that. I'm asking about this case.
Totally agree. It's like the company actually decided to stop standing for something real.
She's a 'lifestyle blogger' so it's not like she's trying to be anonymous and then being outed by some troll. Also she didn't mind everyone celebrating her second place.
Jony Ive has become too senior to be effectively challengeable by more engineering types. That's why all the Mac hardware since he was elevated to his current position, always errs in favour of design at the expense of high end functionality.
The controversial plan to fill a mine with nuclear waste
The Git docs have some very specific claims about cryptographic integrity of git:

https://git-scm.com/about/info-assurance

These claims are wrong as long as it uses SHA-1. Full stop.

It'd be really nice if git had cryptographic integrity. Not just because it'd prevent some attacks on git repos, but because it'd make git essentially a secure append only log. Which would be interesting, as it'd more or less automatically give some kind of software transparency for many projects.
Are this rules also applicable for FreeBSD or any other BSD like systems?
I had the same issue. First I wanted to check whether the password I was using was still valid. So I verified/signed-in on another machine in an incognito mode. Once I had verified that the password was correct and still working. I then restarted android. After scanning using Lookout (honestly not really sure how good they are.). Rather than going through the "Google Play Services" notifications, I opened GMail app and checked if the past emails could be opened, after confirming that it was a legitimate app. I intentionally entered a completely incorrect password twice assuming that if it went away it was a really well crafted phishing attempt. Eventually I entered the password.
fear of ridicule you say.

I deleted my account because a workmate found my lightsaber rotoscoping on DA.
Question: what about the %99 of the internet users who have no idea what SSL/HTTP/any other web tech is ? How are they even going to be notified?
I wouldn't mind buying something like a Xiamo Air if it had native MacOS support. I'd be picky about display quality though. I've never gotten more than 7h of usage out of my new 2016 MBP 15".
> If you are a verified victim of this bug CloudFlare will contact you.

Where do you have that info from?
if an illegal immigrant were to try to get a driver license wouldn't they have to prove that they were legally in the US?

Varies from State to State as far as know. At least in some states it's enough to prove that you live in the state, not that you are living there legally.
> 15 to 25km/hr

just btw, 25 km/s is almost 100.000 km/h.
Wqeqwe
qwewqeqwe
If you ignore the prepend part, it is in essence taking known input and calculate a collision.

> This is an identical-prefix collision attack, where a given prefix P is extended with two distinct near-collision block pairs such that they collide for any suffix S.

And

> Our example colliding files only differ in two successive random-looking message
blocks generated by our attack. We exploit these limited differences to craft two colliding
PDF documents containing arbitrary distinct images.
Apple is the Teflon company. It seems like no matter how many subpar (yet overpriced) products they put on the market, their reputation and public perception never suffers.

To this day, I have a negative opinion of Microsoft for their questionable practices in the past and god knows they've been lambasted in the past for their general attitude (though it feels like this is starting to change). Apple on the other hand can totally afford to rehash their products from a few years ago, sit on a stash of gold, disappoint designer and programmers alike for years, leave Mac OS on a sidetrack and never has to face any kind of serious backlash.

It really says a lot about their marketing genius.
Nobody cares. Hashes are plenty fast. Even the code complexity doesn't matter: I've implemented both SHA-256, and SHA-512, take less than a hundred lines of code. And of course, Linus would have use some existing implementation.

Also, "more secure" doesn't necessarily mean "more complex", or "slower". Blake2b for instance is as fast as md5 and has a simple RAX (xor, rot, add) core from Chacha20.
The Function of Reason – Edge.org
They aren't stupid - it's entirely possible that Apple have run the numbers and found it uneconomical to keep pro gear up to date. So they simply give up the share of the market that contains video pros and similar. Obviously they'll lose the whole families of those professionals, and perhaps their whole businesses too - but Apple must have calculated that risk.

So most likely it's simply better business to cater to the consumer/prosumer part of the market and ignore "true pro" gear.
Steve Jobs certainly understood the importance of developers:

https://youtu.be/4QrX047-v-s?t=459
Anyone know if Zoho mail is vulnerable too?

According to doesitusecloudflare.com Zoho isn't using Cloudflare, was it previously?
So now we need to assess whether hashes are a significant bottleneck.
Who's writing the unit tests, the same bot as writes the code? The customer?
We are in the process of contacting customer who we are able had information cached by a search engine.
I did so quite on purpose. Both are concidered broken, but combined, only the bruteforce attack is known to work, i.e. "the whole is greater than the sum of its parts".
I fixed the uploaded list, it now appears in the text file.
If the case is that the "assassins" were bystanders that were convinced to participate into it, it is highly probable they were expendable
As a developer on windows, I'd have to disagree with most of what you said.

Windows hasn't been less stable than a mac for years if you buy equivalent hardware (instead of scrapping together a system with junkyard parts or getting a cheap walmart laptop).

Windows does not need to be reinstalled every year if you don't treat it stupidly. My current work windows install is 4 years old, has seen two machines (disk swap) and two major windows versions (in-place upgrade), and it runs as well as when i first used it.

OS X is only faster than windows on mac hardware because apple ships bad windows drivers on bootcamp deliberately. On equivalent hardware from other vendors it is just as fast.

It sounds to me like you don't actually know windows all that well. I use a mac mini at home and a windows laptop at work, and I'd say that they're pretty much equivalent for my purposes.
Free Online Wedding Invitations with RSVP Tracking
Not really. If a site is using Cloudflare protection for only some of their subdomains they do not show on this list even if the site itself is in the alexa top 10k sites.

And of course all other sites that are not in alexa 10k are not in this list (if they are not on some other lists used, you can see the source of lists in the README of the Github repo).
The thing is that they could be upgraded if Apple had released new GPU or SSD cards since the current Mac Pro launched.

Alternatively they could have used industry standards in the first place, certainly for the internal SSD connection.

It doesn't help that they've also failed to keep either their openGL, openCL or Metal drivers competitive either.
"Understanding the importance of" is different from "develop product line with explicit goal of catering to".
It also says a lot about the composition of their market: Apple is likely not super concerned about snubbing professionals because they've moved on to bigger fish.

I seriously doubt that it simply has not occurred to anyone at Apple that not providing higher end GPUs and other features that various professions rely on will mean losing their business. Especially since the internet has been screaming that at them for a good while now.
One part of the answer is the prediction that ownership will move from personal ownership to fleet ownership.

There is also a factor that those predictions do not seem to be factoring in: That the need for a car is concentrated at commuter hours in the morning and afternoon. So the sales reductions will be tempered by the fact that many cars will be needed simultaneously.
The trade I'm interesting is simultaneously shorting Tesla and Daimler.

Sceptics emphasise the difference between Tesla's market cap (£40 bn) vs its current sales (75,000) and profits (close to -$1bn). I can imagine a state of the world where they grow dramatically and justify this price tag, but in that case I see serious problems for Daimler.

Similarly, if Daimler flatlines and doesn't see a crash in sales of Mercedez, I'm seriously pessimistic about Tesla.
All sites are compromised. Anything which was in memory, which could be any site, would be spewed out. Regardless of which site was used as the trigger.
were gonna start seeing a lot of 'most expensive' soon due to opportunity cost loss
Facebook and Google have bug bounties. That's pretty big scale.
There's definitely something going on with the Mac Pro - but I don't think this is it.
It is victim/eyewitness testimony, that's definitely evidence (although not conclusive obviously), and given the ease with which the specificity of these claims could be disproven, its easily enough to warrant the sort of investigation that the investors are asking for.
Hard drive LED can leak air-gapped data
I think you're significantly overestimating the degree to which people will follow recommendations that are explained by complaining about features they didn't even know existed, even if they are much less informed than the one giving the advice.
Cloudbleed flaw exposes sensitive data from millions sites behind #CloudFlare