skysight-inc/HackerNews huggingface dataset:
Have you considered light instead of sound, a simple optical link either through air or fiber?

And it can be exploited in the same way it happens on any computer, somewhere in the path from reading the input through processing the message to sending the response is a bug and a specifically crafted sequence of inputs causes unintended things to happen, possibly allowing an attacker to execute arbitrary code.

However, if you specifically build a very simple interface and application, then you can keep the attack surface small as compared to your average computer. There will be no programmable NIC, no hardware driver, no TCP/IP stack, and probably only a single application processing messages and using the interface.

But this of course also depends heavily on the implementation. Controlling the GPIO pins of a Raspberry Pi with a Python application build on top of a Python library, Python, a GPIO driver and Linux provides quite a bit of attack surface. If you use a microcontroller and a hand full lines of assembly to poll input and drive output pins, then the attack surface becomes really small.
lol Goldman with a proprietary secdb where techs and strats are locked into an ecosystem that they can't move out of whilst the firm is ironically trying to move off the silo?
I think that what imaginenore is suggesting is that if you are communicating between your public network-connected machine and your air gapped machine, there is no longer an air gap (barring some very specific use cases). The technique you're describing is actually an attack used to defeat security of machines not on untrusted networks[0].

[0] https://en.wikipedia.org/wiki/Air_gap_malware

EDIT: This is specifically the method I was thinking of: http://www.jocm.us/index.php?m=content&c=index&a=show&catid=...
I suppose you meant geeksforgeeks.org
VC Myth #3456: “The only meeting worth having is with a partner”
Why not Amazon drive?
I think it's just that Apple in this case has complete control over the ecosystem so they can mandate screen reader support(there's probably a Linux utility out there which only supports GTK), has a culture of perfection(there's no way that these features provide a good RoI), and is able to charge a high enough premium to subsidise these things.

I read Free Software: Free Society and I was amazed at how RMS's economic plan was basically 1) unis fund early development, 2) developers flesh out the ecosystem for free, 3) users start flooding in and, 4) these users magically start paying(or the hardware manufacturers do).
Yeah, absolutely. It's a fun, lively, very modern country with an astonishing amount to do, experience and see. Lots of friendly people who are eager to share their country and culture.

There's some social pressures and responsibilities for people who live there that can make it difficult if you can't get into the groove of the place, lots of Koreans will complain about them in various ways -- but they are what they are.

Admittedly, white foreigners (men and women) get treated fairly well. I've only ever had a couple of incidents where I didn't feel welcome as a foreigner. Non-white foreigners have various observations on their own treatment.

Here's some examples:

https://www.youtube.com/watch?v=YRdhJEl5FTc

https://www.youtube.com/watch?v=-KTPpgjdl4s

https://www.youtube.com/watch?v=fGxrW_PB8gI

Same question to white people

https://www.youtube.com/watch?v=j9PscUvu_Dk
Peer-to-peer IrLAN [1] is less prone to interference then sound, and being directional is harder to attack if the air-gap is small. Nowadays its probably obscure enough to make creating an exploit prohibitively expensive, even more so if you write your own drivers. With some electronics knowledge you could probably build your own simple transceivers too.
You have gotten to exactly what my confusion has been!

I had assumed from the middle school itself that the set {1, 2, 3, ...} includes infinity, and I still am questioning if this not being is just a matter of definition or it has to be that way. More below:

We say that the size of the set {1, 2, 3, 4} is 4, in which scenario, the number 4 happens to be an element in the set. Likewise for {1, 2, 3, 4, ..., 100000}. Now we say that the size of the set {1, 2, 3, 4, ...} is infinity, but infinity is not an element of that set.

It seems what I am missing is the formal definition of this "..." or "and so on". If these two were not allowed in any of the proofs, how would you word Cantor's Diagonalisation and other theorems in mathematics that currently involve these. (Or alternatively, what is the formal definition of "...")

PS: I do understand limits and calculus but perhaps from an engineering perspective, not for pure mathematics where I have these confusions.

Thanks! :-)
Loved the write-up. Two more things that might make your Python code less memory intensive.

Instead of `open(filename, 'r+b').read().split('\n')` you can use `for line in open(filename):`, which avoids loading large files into memory. (small gotcha: `line` will contain the newline character(s) which can be stripped via e.g. `rstrip`)

You can also drop the square brackets from calls to methods that take an iterable e.g. `any`/`all`, `set`, and `join`. So `join([...])` becomes simply `join(...)`. Python will use a generator expressions instead of constructing and passing a new list list. To quote PEP 289: "generator expressions [are] a high performance, memory efficient generalization of list comprehensions"

These can really make a difference with big files/lists, but are a good habit in any case. I hope it helps in the future!
In pop culture, you might recall that Ozymandias was the name of the S05 finale of Breaking Bad (spoiler ahead).

It too, shows the decline of Walter's empire, and in the final scenes, he falls down on his side in the desert in a scene like the one in the poem ("The lone and level sands stretch far away").
Is this only going to be tech and business podcasts? Or will you consider including things like The Film Reroll and other RPG/Hobby podcasts?
Airgapped means it has no communication.

But yes, in practice it is often useful to move data to and from. In a "perfect" airgap this would probably be you typing and reading the screen. However this isn't the most convient but the more things automatically accessing it the less security you will have.

If you are going to connect it I won't bother maknig your own system and just use something standard (like ethernet) but now you have a firewalled system then an airgapped one.
Why do you think it is completely meaningless?

I agree that it's weakened but I think it's still meaningful. If someone is choosing between WhatsApp and Allo the former is more likely to be properly encrypted.

After all, even though we can't verify it WhatsApp has strong incentives to implement it properly, and OWS has strong incentives to only endorse WhatsApps use of their protocol if they are convinced that it's done properly.

I really think "completely meaningless" is dangerously misleading hyperbole.
Judges have historically been quite willing to kill people, statistically.

The Supreme Court's decision to block the Medicaid expansion, for reasons, has cost thousands of lives per year for several years.
I'd still try to change jobs. I mean you could make double and there is also a chance you don't run into the same types of assholes. I am not saying you won't, I am saying there is a chance. Also, high turnover rate is a big big red flag. Be a part of that turnover rate :). Of course, keep on trucking on your own personal projects and good luck starting your business!
IBM Researchers Store Data on World's Smallest Magnet – A Single Atom
Might want to read http://zebrasunite.com/
Wow ! Thanks for the ressource !!
Demonware: The Unsung Heroes Powering Your Online Gaming Experience
Depending on the PDF, there may not be any text there to read. As long as there is, I've found it to work quite well in iBooks for iOS 9.3.5, and will sometimes have it read a chapter at a time to me while I'm doing hand chores or otherwise unable to read from the screen directly.
Yes, I also considered using text input, and then something like converting encrypted bytes into english words for ease of input.

But I've noticed that not all my friends are very good at typing, so an automated solution is more user friendly... and a security solution that actually gets used is more secure than one that doesn't :)
> perpetually listed as 50% off of $8

Isn't that quite dishonest? I'm fairly sure this is illegal in at least the UK, so I'd assume in plenty other EU countries too. Are you in the US? Is this practice legal there?
The AMA is a cartel that has artificially constrained the supply of doctors to keep incomes high. It is the most successful union in history.
LinkedIn is full of spam and hackers
Yes indeed! A few years ago I read about a project using infrared "lasers" for a LAN. (Can't find it now since the concept has become quite popular.)

I only wish I was that badass... I can barely do C, let alone asm. I imagine attempting those now would only make the system less secure! haha. I'm just getting started with Arduino. I think I'll keep it simple for now :)

I do plan to learn them (c/asm) some day, then I will be able to make the system even more secure. Thanks for the tips!
Chinese Congresswoman: ‘PBOC Should Be Responsible for Bitcoin AML’
Ahh.. remember BadBIOS? :) It did need USB flash drives to spread though. (See BadUSB.. and weep!)
425M is a crime. Trello is a magnificent feature. It is a weekend project and should have been open sourced.
You don't have granular control over these permissions. You can either accept or refuse, you can't select which ones to grant or not. I think this is a terrible way to do permissions and poor security. I'd like to see true user-level granular permissions down to the level of being able to specify what hosts the app is allowed to connect with (if any).
While I'm a big fan of static site generators the reason for me not to use one for blogging is the trouble when you want to have comments without an additional third party service.
Give Haxe a try as well. It's surprisingly easy to write performant cross platform code.
Yes, I am considering precisely these kinds of solutions! There was an IR LAN project a while back (ten years?) but I can't remember the name (and the concept has skyrocketed in popularity making Googling difficult). Excellent suggestion :)
You have to tell that to the European Court of Justice:

http://www.ibtimes.co.uk/european-court-justice-ruling-bitco...
This is indeed very huge. Does anyone see this happening with trump?
Ask HN: Any biker to help
My bike mileage suddenly dropped about 16km. My mechanic told me to change air filter, I did but still I was 12km lagging from normal 38km/ltr
Even service centers aren't understanding what is the problem. Anyone has any idea what might be the issue?
Raspberry Pi Zero W is the key to the hackable future
Then you have to fiddle when you want the application to read/write a file in your home directory. So, then either the application has blanket access again or the user has to manager per-file groups or ACLs.
the book in the article you are posting under, perhaps. just a hunch :)
And they are changing a bunch of it for Swift 4: https://github.com/apple/swift/blob/master/docs/StringManife...
The US military has had an SBIR out for years to develop a gravitational wave radio. It could go right through the earth, no need for satellites. The transmitter though would probably use enough energy to destroy the enemy, maybe even the whole Earth.
The default permissions of the (typical Mac home) user are: read access to most of the filesystem, write access to the full home directory, /Applications, and some other locations.
since the poem was written in competition between Shelley and Horace Smith, it is fair to report the other too, which is also good [0]

In Egypt's sandy silence, all alone,

Stands a gigantic Leg, which far off throws

The only shadow that the Desert knows:—

"I am great OZYMANDIAS," saith the stone,

"The King of Kings; this mighty City shows

"The wonders of my hand."— The City's gone,—

Nought but the Leg remaining to disclose

The site of this forgotten Babylon.

We wonder,—and some Hunter may express

Wonder like ours, when thro' the wilderness

Where London stood, holding the Wolf in chace,

He meets some fragment huge, and stops to guess

What powerful but unrecorded race

Once dwelt in that annihilated place.

[0] https://en.wikipedia.org/wiki/Ozymandias#Smith.27s_poem
I very much dislike Javascript commenting, but you don't have to use a third party service if you host the comments yourself. Isso[0] for example can do this.

[0] https://posativ.org/isso/
Yes. https://en.m.wikipedia.org/wiki/Post-quantum_cryptography

Doubled key size does not mean twice as hard to break. Algorithm weaknesses are a thing.

This WP is pretty accurate though. It describes the world we think will exist after legitimate quantum computing.
Yes, this has always been the case: defenders put a foot of armor plating on all of the doors and windows, and attackers look for the key hidden in the fake rock outside, and simply come in the front door.
People use all kinds of proprietary technologies to get help with disabilities, all the time.
Or ticketed.
Show HN: Accessible W3C conform es6 JavaScript accordion
Elon Musk chats with South Australian Premier to save their grid from blackouts
The demo can be found here:
https://oncode.github.io/handorgel/

Features:
- ARIA accessible
- Keyboard interaction
- Animated collapsing
- Fully customizable via CSS
- No external dependencies
- Lightweight (~3.5kb minified and gziped)
Snap’s IPO Shares Should Be “Junk Equity”: CalPERS
IDM 6.27 Build 2 Serial Number and Full Crack Free Download
There is some very interesting stuff being done in this area. For example, this font[1] selects alternates as you type:

[1] https://www.behance.net/gallery/47374155/Futuracha-Pro-Font
The early releases of OS X were far more primitive, so more work needed to be done on the basic building blocks (e.g. CoreImage or CoreAudio). Besides that, half of these features I have never used:

- Dashboard: never used it. Fiddled for 10 minutes and decided it's not useful.

- Automator: maybe some Alfred workflows that I use, use automator, but I never used it directly. I also don't think anyone outside power users write automator scripts. And these are the same people that can benefit from APFS or Hypervisor.framework.

- Spaces: gone. I am still sour about this though ;).

- Time machine: not that great in practice. Especially with a Time Capsule/Airport often results in backup sets that are broken.

- Cover flow: never used it, not saw the point.

- Boot camp. Never used it.

So, I and most Mac users that I know don't use half of these features. I also know quite many non-techie users that don't even know that Spotlight exists (they launch applications via the Dock and use Finder).
A 7 inch PC that fits in your pocket
Source code isn't required to study what software may do.

If you were really worried about what a particular binary would do, trusting that the binary matched the source and studying runtime behavior would both be a waste of time compared to fully analyzing the binary in question.

If you treat the software as a black box and only study run time behavior, you have no idea if you have tripped a countermeasure that silences the malicious behavior; if you study the control flow directly, you can look for such countermeasures.
That's understandable, since the point of asymmetric encryption is communication. But people can use symmetric encryption when it's about your own data security (i.e. you encrypt it, you decrypt it).

If you're using encryption to keep your data safe (e.g. local files, full disk encryption), then you don't actually need asymmetric encryption.
My home town was an important Etruscan city, and still has a huge necropolis.

One of my grand-uncles told me that when he was a kid (early 20th century) when they found ancient vases they used them for sling practice, it was only later that people realized they had any value.
Famine warning signs were clear – so why are 20M lives now at risk?
>How sad is it that grownups jump to conclusions and construct strawmen in order to complain about imaginary complaining?

It would only be imaginary/strawmen if the author (and us all) hadn't already seen the same complaining in hundreds of articles... As it is, it's merely pre-emptive...
There is actually no checkpoint in RCT maze. The checkpoint in this case is just scenary items. AI cannot possibly know about that.
>and (more importantly) why in god's name is it the highest-rated comment in this thread?

Because it hit a nerve?
We do have a "Beta feedback" process for all users (which is essentially a one-way communication for now) which allows us to gather their input. In addition to our Pirate analytics, we also use Mouseflow to observe user behavior. So we are gathering data both directly from users (although we could probably improve the beta feedback process) and from analytics, we just don't have a lot of extra time since we have other jobs at the moment.
You can have permission models for these things. I am not asking for untethered access to the entire machine without any permission.

I fully agree with this. The ideal model if Apple cared more, would be: fully sandboxed by default, the application can ask extra permissions.

But given that Apple does not do this, for me as a user 'sandboxed' is a better default for me than 'not sandboxed'. I can install/purchase the few applications that are absolutely impossible without sandboxing (e.g. VMWare) outside the App Store.
Agreed. However, the kind of mass surveillance people are worried about isn't really concerned with personal data at rest. That data already requires targeted surveillance to get at.

Additionally... unless you generated all the bytes you are encrypting yourself without transmitting them over a network at any time... e.g. video/pictures you took yourself and then stored to your own encrypted disk, your data could be compromised by quantum-breakable encrypted communication protocols at the time of transmission. I would wager that most data worth surveilling goes over the network at some point using TLS.
Oculus catches a break as TRT lawsuit is dismissed
7 BENEFITS OF COCONUT OIL – LIFE HACK
It would be interesting to do a study of what features developers require no-sandbox for, then maybe Apple could address those specific areas.

Most of the apps I make use the sandbox with no problem.
I'm quite of my depth here, and while I can sort of understand the recursive construction of new types, it seems as if the type checker should be able to almost trivialy 'shortcut' the recursion unless the return type is unconstrained in some sense that it can be a recursive type with some type arguments.

Most likely there is something obvious I'm missing as I don't know a lot about rust, but unless the compiler isn't doing what is essentially a type level equivalent of tail call elimination, which it almost certainly does, finding the type of that function should be trivial unless the return type can become recursive with unbounded depth.
RMS is an extremist. I don't think it's reasonable to be upset that there isn't high-quality free software for every possible niche.
Characteristics of an efficient engineering team
There is someone evidence that QM will result in weaker signals to the point where you can't use it to break real world crypto. It's something of an open question at this point.
100℅ agreed, drives me crazy with Ubuntu, I have to google the names to get the versions.

Never understood what was wrong with 16.04.2 vs Xenial Xerus (had go google the xerus part just now).
If you're exchanging keys in person, I suggest looking into OTP, currently the only known mathematically unbreakable form of encryption, and so simple it has been used since at least World War I.
Like π-day, this can obviously only be used in countries that use month/day notation for dates:

https://en.wikipedia.org/wiki/Date_format_by_country
The Experience of Discrimination in Contemporary America
Would be nice if you displayed WHY it is 0 :)
And here's the same thing applied to car insurance: https://www.progressive.com/auto/snapshot/

It's not a surcharge if you don't plug it in, it's a discount if you do. Semantics...
> the NSA themselves are concerned that quantum computing will be a great threat to encryption in the near future.

pardon my ignorance. but, isn't this an inevitability? not just a possibility?
And here I thought it was death.
Funny you should mention it, as legal judgements are not the sort of thing I normally have reason to read. However (copyright troll) Prenda Law's 9th Circuit appeal on sanctions came up in discussions on HN a couple of days ago and, having watched the humorous video of the proceedings, was curious as to the outcome, so tracked down the ruling [1]. It was similarly well written.

As a lay-person I've come to expect convoluted legalese as found in contract terms, but where those are typically designed to bamboozle and obfuscate, or at least keep corporate lawyers employed decoding and negotiating each others writing, judgements and rulings are designed with the opposite goal in mind. If you are potentially creating case-law, it better be clear what you have decided and why.

[1] http://law.justia.com/cases/federal/appellate-courts/ca9/13-...
So that's not "full access to my filesystem" by any means. Maybe there could be a bit more nuance, but I don't think this is an unsolvable problem.
Can sleep deprivation cure depression?
I occasionally use password login, when I'm not using my own computers.

Login using the root account is disabled.
Current quantum computers lack the amount of qubits required to implement practical quantum integer factorization (e.g: Shor's algorithm) at the scale required to break encryption.

For example the NIST standard for the controversial dual eliptic curve deterministic random bit generator standard, involves two numbers, p and q, which are 100 digit long. To date, largest integer factored in a quantum computer is reported to be around 200,000...
So a text editor gets the user's permissions, a game that writes a local save file has its own permissions ... what's an example app that wouldn't be able to work this way?
I can't think of a non-magical mechanism for free will and so isn't the simpler solution (Occam's Razor) simply that it doesn't exist?
Then my notebook is 'airgapped'. It connects to internet via wifi :). More seriously, if it connects through non popular means (such as a protocol over sound) it is just security through obscurity.
Is the hardest part of a video game the end?
"The malicious apps weren't part of the official ROM firmware supplied by the phone manufacturers but were added later somewhere along the supply chain."

I'm not sure how they consider that 'pre-installed'.
What this model misses is that it takes a lot more investment to make great software than just some developer time. It takes designers, artists, testers and depending on the software experts in specific fields. That's a huge investment in resources completely outside the software development field itself. Universities by themselves just don't have the research and investment capacity to carry advances in every single domain software can be applied to. They have other things to do too.

Back in the 60s it might have looked like the majority of effort to develop software just took some time by developers, but nowadays in many areas the developer time is a fraction of the overall effort required. It takes huge investment and if there is one thing Capitalism is good at, it's the productive and efficient deployment of capital. It's right there in the name.
Honestly i dont see the point of big funding anyway. As entrepreneur myself i rather do it myself, ask friends or even take a credit but keep my company and go for small growth. Its a american thing i think to think that a company has to start big, and sure for social media things this is a very relevant factor but for everything else meh.
Mathematically unbreakable if your pad is truly random
Information Assurance by NSA