skysight-inc/HackerNews huggingface dataset:
Can't speak for anyone else, but you are making the tiresome and fundamental mistake of arguing about a security system without actually considering economics, usage, and threat scenarios, which are key things that define security.

>All of these system have been proved easy to trick.

By what standard, and in comparison to what? Even ignoring that implementations vary dramatically and importantly in inherent hardness [1], even what you're describing is already significant effort. In terms of security categorization, what you're describing ("3d prints", "specially prepared photo", whatever) all fall into the fundamental form of a targeted physical attack. But once we're into targeted physical attacks everything becomes much harder. Passcode? We live in a world where cameras are everywhere already and becoming more ubiquitous still, along with drones. Even simple shoulder surfing is a thing, but when you're out in public and need to unlock your phone how certain are you really that there is not a single camera, anywhere, pointed in your direction? Even if it's not directly down at the screen merely seeing your finger/thumb movements may be enough. How much work are users in general actually willing to go through to unlock something they use constantly for often very short bursts of immediately desired information? Because if your system isn't actually something people will use and has a good work/value tradeoff, it's worthless. It's not the people who are wrong, it's the system.

This is why threat scenarios are vital in security evaluations, always. In general, there is a big topological difference between scalable attacks and targeted attacks, and with remote vs physical presence requirements. Coming up with convoluted attacks and scenarios quite literally misses the entire point. You need to consider what a system is trying to do, how well it does it, what it is trying to defend under what circumstances, the value therein, the audience targets, etc etc. You didn't do any of that, and on HN people really should know better.

FWIW, I do have significant concerns about Face ID, both in terms of implementation in practice, and in terms of how amenable it is to some real practical security practices I'd like to see like coercion code/variable unlock for example. But my list of concerns do not include anything that relates to a targeted physical attack unless it proves trivially scalable in the real world, as that's outside the core scope.

----

1. Seriously, it's immensely irritating how many tech people think ideas, theory and so forth have much of any value whatsoever vs real world implementations, or think they can always talk broad categories rather then specific implementations.
I think you may have some technology terminology confusion. There are 4K panels that really can display colors that are physically impossible for other panels to display.

It is true that these systems ship with fake-o postprocessing to take conventional content and smear them into these new colors, but that's a stopgap, and you aren't actually obligated to use them, you know. Just like TVs tend to ship in what I call "claw your eyes out mode" for display, but it's the work of just a few seconds to turn them back to something sane for any decent quality panel. (There are certainly panels that have no decent quality setting, no matter how much you fiddle; if you care, do some research. I do and did.)

Per what I see of your other comment, whether you like it or not, there are standards being called "HDR" that includes true expanded gamut support: https://en.wikipedia.org/wiki/High-dynamic-range_video#Stand...
What it's like to be a statistical super minority in tech
Good luck with that. Hoarding old phones so that you never have to let Apple scan your face, despite the fact that your face is likely in several facial recognition databases just from walking down the street.
> This fixes only one of the problems caused by the immunity.

Again, it's not immunity. It's sovereignty, which manifests as immunity (this distinction is important, it's like saying the problem is the smoke, and not the fire that causes it).

The tribes are recognized as federal entities at the level of states. Any violation of that sovereignty has consequences. State universities and colleges for example own patents under similar laws.

Also you probably can't strip their immunity without a constitutional convention and multiple 2/3 votes. Because it's sovereignty, it would be like voting whether California is still a state, or whether states can regulate the companies they incorporate.

> And if we want to bring up past wrongs, that gets messy really fast. What tribe actually has a fair claim to the land they own that they didn't steal from some earlier tribe?

Well often it isn't their ancestral land that they live on anymore anyway. But some tribal claims go back thousands of years one specific tribe near my hometown has been inhabiting the region for 8,000 years [0]. Not that I am claiming there was no violence, but there was a lasting culture, not unlike similar ancient city states, that stayed in the region.

Our still existing government committed a genocide against these peoples. This isn't just about stealing their land, it's about breaking many many treaties, murdering them, sterilizing them, forcing them to abandon their culture, destroying their culture, and plenty of other terrible things. It's war taken to a different level.

And you want to break another agreement through tyranny of the majority? Thank goodness it's way harder than that. If you really want to end corruption and abuse (of power; it's not like they are torturing anyone) around the tribes, convince them to trust us enough to give up those powers themselves. We have slowly been working on that trust in my hometown, it's a long road. Good luck.

[0] https://en.wikipedia.org/wiki/Lower_Elwha_Klallam_Tribe
IntelliJ is expensive if you want languages not covered by the free edition (like JavaScript), though, and even if you pay for it some things are frustratingly distinct such as if you have a Java/C++ app you need two different "IDEs" (CLion + IntelliJ), and you need to then juggle between those windows. Android Studio is able to work with both even though IntelliJ Ultimate isn't (why, Jetbrains, why!?), but getting Android Studio to work on non-Android things isn't the nicest of experiences.

I'd be more willing to pay for the quality if a nice, unified experience was the result, but it annoyingly isn't. To say nothing of the lack of support for things like Rust.

That's what this new generation of IDEs is exciting to me - the unified language server standards. Let the compilers handle understanding the code which is what they are best at. Especially if it helps make IDEs less tied to the build system in general (no, CLion, I don't want to use CMake)
That notch is definitely bizarre, It makes all the apps look weird.
If they remember to look away, it won't unlock. Seems very unlikely to me.
This happened with the 3GS (which should have been 4), and has continued since then.
Exactly. The Snapchat demo was evidence of how this will be opened up to developers.

The new photo features clearly showed how it will be used by the Instagram crowd as well.
Except for that large padlock icon that shows the unlocked state when Face ID has identified you?
> There is no such thing unless you are in a hurry.

I think this is easy to say because we don't have to wait hours every time we use cash or our debit or credit cards.

It's reminiscent of using checks for everything. Businesses would have to factor in the possibility of checks bouncing or Bitcoin transactions being rejected after the POS transaction.
"lulled the driver"

Did it? Or did the driver know what they were doing and not care? I don't think it's responsible to make such assumptions about the driver's reasoning.
You really honestly think that those same companies would achieve the same record without FAA?
Looks like the tech from the Faceshift company they purchased, I'm curious if that's why they grabbed them
A fine gesture from Philip Morris for a smoke-free world
How many iPhone X will sell this month and how many Samsung phones sold the 1st month they released edge to edge displays? I think part of Apple's problem is success, they have to launch with a profitable phone the 1st month; no delays & no defects. Samsung can have a higher internal scrap rate for the 1st few months because they sell less and it impacts the bottom line less.
Not true for Javascript, the cool thing about VS code is that it will automatically download the typescript definition files even if you aren't using typescript. So you get much nicer hover and autocompletion than intelliJ/webstorm.
No, it didn't. The screen said "Enter PIN to enable Face ID." The phone had been rebooted, and a password is required first. Same as TouchID. He failed, FaceID did not.
Dimon calls Bitcoin ‘a fraud’ and may have delivered the biggest blow
Bet the chip that allow those snapchat feautures could be used for on-device machine learning, that'll open up really interesting app.
Google had face unlock back in 2011 when the Galaxy Nexus came out but I'm not going to pretend it was anything like this. It worked alright but had plenty of warnings saying it wasn't perfect and that someone that looked like you could unlock your phone. I always found it quite cumbersome to use because it turns out my natural way of holding my phone doesn't point the front camera directly at my face. I hope for the sake of iPhone X users that that isn't true for FaceID and that the sensors are wide angle enough that it isn't as annoying to use as Face Unlock is.
Legislators, the best investment money can buy.

It's amazing to witness the compound effects of interest^H^H^H^H^H^H^H^H long term changes in tax policy, particularly when the advantage becomes the new normal and is then the basis for further changes. How many people look at tax legislation based on how much better it is than 50 years ago?
> Why does an init system do DNS lookup?

For caching and DNSSEC validation at the system level instead of needing to be handled ad hoc by each individual framework or application.

> And in such a breaking way?

See https://github.com/systemd/systemd/issues/5755#issuecomment-...

Systemd designers optimized their new resolver's behavior for one common use case, but apparently never considered that it breaks another (undocumented) use case. That seems like an example of a lack of real user testing for an important feature before cutting a new release.
A padlock icon in the corner unlocks when Face ID has authenticated.
Mathematicians Measure Infinities, Find They’re Equal
For a 4 digit pin, yes. I believe iPhone now defaults to a six digit pin (equivalent to the 1 in 1,000,000), and the enclave will delay and lock out repeated attempts. They didn't say, but I would hope a similar lockout is employed on the iPhone X.

I strongly suspect that the number 1,000,000 was chosen due to marketing, and that the actual strength of the security lies in the enclave preventing repeated failures and this feature that disables Face ID by repeatedly pressing the power button.
Yes, this is talking about the "average class." Individual circumstances vary in both directions, that doesn't make it questionable. Though, the difference between going to jail or not pretty quickly adds up to the 250k number.

Yes, this is way more complex than my two minute writeup of a small chunk of a 94 page paper.
I look forwards to your pull request! One challenge you'll run into is that (as I recall) the Boehm GC linkage no longer works with newer versions of Boehm.
This is probably vestigial from before the interstate/numbering system:

https://en.wikipedia.org/wiki/Southern_California_freeways#F...

> When Southern California freeways were built in the 1940s and early 1950s, local common usage was primarily the freeway name preceded by the definite article. It took several decades for Southern California locals to start to also commonly refer to the freeways with the numerical designations, but the usage of the definite article persisted.

"Take the Ventura Freeway" -> "Take the 134"
This feels like the killer product from the presentation.

The no home-button iphone feels like 'meh, I don't mind having a button there at all actually', the 4k apple tv might be nice for people who enjoy sports, while this is the feature everyone has been waiting for.

It appeals to women because fashion, and appeals to men who don't need to check social media/message/calendar on a daily basis.

A total win for everybody involved. The pricetag for what it is, I find to be too much, but it's Apple, so.
I have one with ubuntu 16.04. The only thing that didn't work was the volume up/down keys due to some weirdness in the Asus BIOS. I changed it to be shift + Fkeys instead of fn+FKeys in the keyboard settings.

Other than that, because the Intel chipset has pretty good open source support, it's an excellent laptop.
The product page is up now: https://www.apple.com/apple-tv-4k/
One good heuristic to use when evaluating scientific research is the Lindy Effect. Essentially, the longer a finding has stood without being falsified, the longer you can expect it to continue to stand without falsification.

This runs contrary to what I was taught in high school science classes, which was that newer science is more reliable than older science. The truth is that the old stuff that still stands is really where it's at. Most "novel" scientific findings are not true. A smaller portion will be thought true for a while, then discarded. Only a very small amount of research will stand for a long period of time.

Another thing to consider is that the scientific method and its modern, institutionalized implementation is not very old at all. You cannot exclude the possibility that some of our fundamental scientific understanding is totally flawed, and we've yet to discover how.
I don't think anyone's considering faceid a "wow" factor in terms of its high security (or lack thereof). It's hard to get the general public excited about levels of security. Face ID is pretty much a hack, one that's existed on android phones for many years, that Apple has to polish as best it can.

I didn't watch the keynote: do they have touch ID on the back?
Unreachable emergency stop buttons? Moving parts of a fan next to workers without safety covers? Workers fighting for space next to a crowded conveyor belt? Missing guard rails? Repeated fines for lacking safety? Everything about this factory sounds like a death trap.
Strictly speaking you are right, but in practice HDR term is used to describe both HDR and wide color gamut.
It looks like it unexpectedly rebooted prior to the demo as the message on the screen was something like "You must enter your passcode before using Face ID".

Something similar comes up on reboot for touch ID users. You have to enter your passcode once on startup to decrypt the storage where the fingerprint data is stored.
Pretty cool. One nitpick: I wish the darkness was proportional to the number of companies. The U.S. is at 1062 and is as dark as countries with 7 or 29. I wish there were more contrast.
or if it's confiscated and you're compelled to unlock it.
>Also, why do people keep calling the cops on relatives and friends who OD?

They probably call 911 in the US, and the dispatcher is deciding who to send. Is there something that suggests otherwise?

Separate from OD cases, though, friends and family DO often try to turn in loved ones. Addiction often turns your loved ones into genuine risks for other family members. And, sadly, jail is often the only existing place to send them if you can't have them in your house.
US humiliated Russia? Care to provide some clarifications?
Is it limited to priming or is it a bunch of other parts of psychology too?
"This is an image straight out of the camera, with no post processing. All we've done is apply a Portrait Filter to fade out the background."

Uhhh, I guess that doesn't count as post processing, then.
I would love that kind of support. I initially thought that was what you were providing, and I was rather excited. My subscriptions have become an unmanageable beast.
I'd like to say that most of cognitive psychology does not suffer the issues so frequently reported in the news by social-psychology research..but this is wrong. Too many neuroimaging studies have n<25.

To this affliction, my own research has luckily been relatively immune. Developmental studies need large Ns to track age-related trajectories, and most of my graduate research has N's greater than 100...for which I am grateful to my advisor and NIH.
No, the new standard is called "HDR10" [1] and it standardizes the use of BT.2020.

Can we not even trust people on HN to only speak to what they know about?

[1] https://en.wikipedia.org/wiki/High-dynamic-range_video#HDR10
It uses an IR camera, so it wouldn't matter the skin color. Also people's skin color changes over time so that wouldn't be a reliable system anyways
As a powerlifter who's been going to various gyms religiously for years, I don't visibly judge anyone. Except people who use equipment egregiously wrong, or worse--people who don't put up their weights.
Seems likely/plausible. Most of these tech companies prefer to buy a company and then integrate their tech over developing ideas like this in-house these days.
I'm not saying 1 in 1,000,000 is great, but I don't see how the birthday paradox applies. Assume that I want to analyse whether face unlock is secure enough for me -- why is the chance that anyone else's phone gets unlocked by someone else's face even relevant?
I've been building for the web for 15 years, and Aurelia feels more natural to me. Granted, my Angular projects were all in Angular 1 and it has since undergone a massive rewrite, almost as if it's a different framework now. But based on my extensive experience with web applications using Java, Ruby and Node.js on the servers (sometimes Single Page Application frontends, sometimes minimals JS with jQuery libraries, etc), Aurelia just felt more naturally web-like. That doesn't mean Angular is not able to do the job, but it feels more like using a heavier tool that doesn't belong.

Aurelia also feels easier to build with (less unnecessary boilerplate) and more maintainable in the end. The community is small but has made immense strides in a short amount of time. There is a company backing it, but a very small one, not a giant one such as Google or Facebook (and those giant ones make no guarantees, but the small one backing Aurelia has emphasized their long-term commitment time and time again). They have an ever-increasing number of community contributors and features have been added at a rapid pace. Since I began a year and a half ago, UI toolkits have regularly added Aurelia integrations. The CLI has improved by leaps and bounds.

You can find out more on their website and other blogs and articles around the web, but you may find this helpful:

https://stackoverflow.com/questions/41853743/angular-2-vs-au...
Missed my point, maybe I didn't make that clear: if there's an org with brilliant math PHDs and security people with virtually unlimited budgets, that's NSA.

Yet, their info got out. If they got hacked....
Very important point. With the current iPhone, by the time you have brought the phone up to look at it, it's already unlocked by Touch ID. It was very clear from the demonstration that there was a delay and he had to look directly at the phone. The phone did not even wake until he looked directly at it.
You've omitted buying drugs and the like from your list. Like it or not that's a substantial use case.
But swipe left/right on the bottom bar shouldn't be too hard for them to learn. This also switches between apps, and it was blazing fast in the demo.
This is a cultural holdover from the late 19th and earlier 20th century when novel results were much more plentiful. But now nearly all of the low-lying scientific fruit has been picked so the scientific endeavor needs to adjust its expectations. Unfortunately, culture changes more slowly than science.

BTW, the lack of new results is actually a good thing. It means we've got a lot of stuff figured out.
I'm from/in Southern California and I've never heard it said as "Take 10", but rather as "Take the 10".
There is no TouchID on the X
And you could/can unlock TouchID with playdoh casts, even high res fingerprints printed on paper... so?
Micro Center is charging $10,000 for multiple GPU orders to thwart miners
Yes, the "hack"-version existed in Androids. You know, the one that can be unlocked with any photo of your face.

This one goes a bit deeper with IR and depth mapping.
Nope... I am actually happy to admit that I am a below average driver (as driving is sooo boring), and from what I read, the AI is already driving better than me - if used in the conditions it is designed for.
But does it need to be published in the same venue as the original research? Maybe each journal should have a counterpart for replication attempts. Then you can read about stuff you probably haven't heard before in the main publication and go look for replications in the other.
Ive also been using a UX305C for a bout 2 years now also, Its a great cheap fanless macbook air clone. Been running Ubuntu Mate and out side some issues with the function keys, its worked 100%.

Its pretty great for a fanless laptop thats sub $600. Its too bad you can't buy the latest model(UX330CA) right now outside of ebay. Its only available in Canada for some reason
Here's more detail about the naming system: https://en.wikipedia.org/wiki/Street_layout_of_Seattle
They have 2D faces?
Why the downvotes? transverse is right. The medium of exchange doesn't have to recognised by the Government, only accepted by both ends.
Or any answers. At least for the US, I've read before here on HN that it may be due to the company's fear of being litigated against for some sort of discrimination.
Take a look at full Visual Studio, it's a much better IDE for F#, the free version beats vscode for F# dev hands down.
Though I like VS code for its portability.
> all DNS servers are expected to return the same result

Really? My local DNS server should return the same results as 8.8.8.8? Should one never use unregistered suffixes?
So, I guess I'm the only one who thinks the notch looks great? Gives it a bit of character! I won't be buying one though, I'm hoping my iPhone 7 lasts at least another 2 or 3 years.
- No wireless

- Less space than a Nomad

- Lame.

Let's not mince words here, this thing is gonna print money.
There are some security problems with Bitcoin. My PhD is concerning this subject. The PhD was funded by our government and I was banned to publish it. I am trying to get it released but it is very sensitive and may affect my family also.
I think "serverless" always just implies there's not a server that you yourself have to spin up and manage. Of course there's still a server...
Maybe in preparation to get off the annual release cycle, that has seemed rather forced lately? If this generation stays the latest one longer than previous generations, having it called "7S" instead of "8" would be a permanent reminder of the fast iterations of the past.

Apple's central brand value has been the promise that everything that looks good in an announcement also works good in practice, better be last and best than first and worst. But they are bound to lose that if they force themselves to fill one "new iphone!"-presentation year over year even when the smartphone is mostly done.
Construction of Boulder Dam (1936) [pdf]
He went to the backup phone after and said as much, it clearly failed. No way that was intended behavior.
Blockchain relies entirely on the value of bitcoin for its functionality. If bitcoin goes to zero, everyone stops mining and blockchain ceases to work.
Or they've simply wanted to finish what was started in 1920, but was halted by Russian nationalism?
Should be pretty easy to find out in a replay or screenshot. If it was indeed after restart it’s not failed but a deliberate design decision.
Why does it matter if it's dangerous if used incorrectly, if the majority of users use it correctly, and the overall effect is that fatalities go down?