skysight-inc/HackerNews huggingface dataset:
>If you can't lock yourself out, it's not secure.

It's not secure if you can lock yourself out either.

A court could hold you in contempt for failing to unlock or intently locking.

And a state actor or even mugger could just hurt you or even kill you, in frustration if you don't open it for them.
What I worry about is Google Authenticator codes for several financial institutions, getting vacuumed out of the phone with everything else and stored on some insufficiently-secured database.
I'm not 100% on the rules of Hacker News so I'm curious to know why a similar posting was flagged?

edit: I'm
It's a bit surprising to see that they've raised so much. Given that Eaze is only available in California and they will need a very local approach to deal with city by city and state by state regulations which have slight differences.

I can definitely see an Uber/Lyft dynamic emerge in the marijuana delivery space.
There is enough to disagree with Nestle about without even going into Water Rights.

What they do to women with their formula in developing nations is a crime. They miseducate them by telling them that Formula is better, give them free samples until their milk dries up, and then start charging them.

It's deplorable behavior, and as a result I refuse to buy any Nestle product.
Rivalry between Apple and Samsung in smartphones will grow fiercer
My spouse is in-house counsel (lawyer) for a software company.

Her objective, and the reason she's on staff, is to get stuff done efficiently and cost-effectively.

When she writes a sales contract she tries to write it so everybody can say, "that's fair" and sign it, rather than send it off to some slow and expensive review. Sales people love that.

Same for smaller stuff like NDAs.

She did that stuff for some of my entrepreneurial ventures. Big win.

Litigation: she looks beyond the white-shoe gold-tie-clip downtown firms to handle that kind of stuff.

Escrow for code: If some source code needs to be held in escrow, she says, "look, I'm an officer of the court, answerable to more than just my boss. Suppose you put the thumb drive or DVD-R in an sealed envelope. I'll put it in another sealed envelope and hold it in my locked file cabinet." Many parties say "good idea!" because escrow services aren't cheap.

She has a rubber stamp that says, in some kind of legalese, "We don't pay unitemized bills. Please provide more detail and send this bill again." That can save a bundle of money. The concealed "bonuses" for partners sometimes evaporate from the bills. The "stamp" works well; the billing firm has no idea whether it's legal or A/P refusing the bill, so they just provide more detail.

Financings: not much leverage there. They still have to hire outside counsel with expensive lawyers and paralegals who can bench-press massive tomes of dense legalese.

I suspect a software service that inspected and tracked legal bills payable by tech companies might pay for itself pretty quickly. (Ingest pdfs? Look for keywords and numbers?)
You had many questions, but source code doesn't need to be on Github to be open source, especially when it's being maintained and developed purely by people hired on the core os team inside apple.

You could ask why it's not on a private github repo, and the answer is that Apple's code predates Github by probably up to a decade, and depending on workflow and privacy reasons being on github is probably useless and/or veto'ed by their legal department.

There are so many ways to work on open source. Github is just one tool.
Upvoted because this is accurate, but it should be mentioned that "bad" means "bad for Apple", not "objectively morally bad". In particular, it's pretty easy to design an iOS-like security model which doesn't give you GPLv3 problems -- e.g., when you factory-reset the device, if a certain button is being held down, generate a new keypair and display the private key. If you don't actually write it down, nothing stores the private key, and your security model stays entirely intact. And because you can only do it on factory reset, it also ensures that you can't get a signing key that gives you access to any existing user data on the device, while allowing people to resell their iPhones and still comply with GPLv3.

There are some complexities here (and for Apple's goals with iOS, I totally understand them not wanting to work through those complexities), but for a team that has built the most secure general-purpose computing platform in the world, this isn't an unsolvable problem.
That would be comforting if both (a) and (b) were true:

(a) the world was only US citizens.

(b) nothing unconstitutional ever happened to the first group.
What’s behind the rise of cloud-native applications
quick plug for Equator Coffee. Their stuff is great. Woman owned business based in Mill Valley, CA
Or, you know, no settlement, and not even a "sorry, oops" either.
Of course it will. The iOS security model fundamentally depends on everything from the bootloader up being codesigned. Releasing the root signing keys completely destroys this. Nothing on the system can be trusted anymore if that happens.

Edit: Well, I guess the secure enclave can be trusted. But nothing else can be.
Can the VC be implicated for financing distribution of controlled substances ? There could be enough grounds for Banks to terminating their relationship with Bailey Capital et al. Why would a venture capital firm expose themselves to this, when its not even legal in half of the country?
The only public statistics available are 90 million unique people have flagged videos, and 1/3 of those have flagged multiple videos. It's hard to generalize from there because you don't know how many of these watchers are disjoint, but in the worst case, 60 million unique flags would be able 0.5-1% of all YouTube videos.
This is nice! I hadn't heard of this category of services before today. I particularly like the idea of events in goms. Thank you.
No, I was just giving a possible reason as to why people might act like its the role of others to raise their children. I neither support it, nor wish it extended to the Internet.

I'm not actually sure why you'd think I was supporting it? I'm merely showing why it may be that way.

In my experience, it became fairly popular to say/believe such in the early 70s, after the hippies took their clothes off and moved into the woods for a short while.
I only left ~ 2 months ago so it probably hasn't changed that much in that time. ;)
At this point (and I suspect for a long time), the only thing C++ hasn't that Java and C# have is garbage collection.
>Each transaction must be voluntary.

That's a regulation, and for that to be binding, it needs to be backed up by coercion and violence.

In an unregulated market, whether or not one can shoot people, or whether or not transactions should be voluntary, would be decided like everything else by success or failure through competition in the marketplace.

You can't have free market except for this one little rule... that's just a very weakly regulated market.
Because I've worked at a lot of companies and gone through a lot of interviews and NEVER has anyone said anything about my or anyone's github profile, whether interviewing or hiring (other than me, but my coworkers and interviewers have cared less).
I posted this above a few times, thanks for reinforcing this with your own post.

This is HEINOUS behavior, and the primary reason I won't support any Nestle company or product.
It's a bit more complicated, since you don't want a third party (e.g., your local police or your abusive ex) to be able to open your bootloader and run a modified OS that dumps your private data the next time you log in. This is completely straightforward on a modern desktop (unless you're using something like Bitlocker with TPM), but is supposed to be impossible on iOS.
Gets them another 27mo of runway, according to the other article that they burn 1m/mo. Wow, how can they be burning that much?
I am not a lawyer, this isn't legal advice backed by any level of expertise in the law. But if I had to write a complaint for small claims right now, here's what I'd bring up:

--

FCRA § 604. states that "any consumer reporting agency may
furnish a consumer report under the following circumstances and no other", and lists allowable reasons to dispense a credit report.

FCRA § 607. requires compliance, stating that an agency must "limit the furnishing of consumer reports to the purposes listed under section 604."

FCRA § 616. imposes civil liability for willful noncompliance at a minimum of $1000, even if that is greater than actual damages already sustained.

(a) In general. Any person who willfully fails to comply with any requirement imposed under this title with respect to any consumer is liable to that consumer in an amount equal to the sum of

..<snip>..

(B) in the case of liability of a natural person for obtaining a consumer report under false pretenses or knowingly without a permissible purpose, actual damages sustained by the consumer as a result of the failure or $1,000, whichever is greater;

..<snip>..

(2) such amount of punitive damages as the court may allow;

--

This suggests to me that you will be able to seek "actual damages sustained by the consumer as a result of the failure or $1,000, whichever is greater", plus any punitive damages the court awards (I do not believe this is generally done in small claims). You would need to demonstrate that the failure to safeguard your information was willful.
Thanks! I think I already had A File Icon installed, but somehow it broke on upgrade to 3.0, I'll try reinstalling.
It still depends, and it's a combination of two behaviors: (1) what a browser's resolver does when it receives multiple A/AAAA records, with some selecting the first unconditionally and forcing authoritatives to play spin-the-data and (2) failure behavior, both between timeouts and positive failures -- the difference between layer 3, 4, and 7 failures also comes into play. What happens if the connection resets after a single byte? What happens if a positive refusal comes back? What happens with a warm cache for the domain? etc. etc. The failure matrix explodes very quickly, and I seem to recall there being several hundred scenarios to test last time I looked into this seriously.

Last time I researched this, behavior was quite different across the board, and it's something one should test extensively when designing HA for HTTP. In some situations, the same browser on another platform will defer to the system resolver versus its own, for example, which will potentially change behavior #1 even for the same browser. Mobile is starting to perform weird tricks with TCP, too, so you really have to dig into this one to do it right. Then throw in HTTP/2 and you've magically created yourself about a decade of justifiable work ;)
brief: C is the winner of all the races ( time, energy and memory)
Well, Google operates more than in the web browser. They have a spawn in most countries and mine is no different.

If they employ people in Sweden, sick days are covered by the government, health, roads, parental leave, governmental services, public transportation etc..

If they avoid taxes by simply saying they have no profit here, because they give all the revenue to the parent company, it means that everybody else in Sweden needs to cover their costs since they will probably pay close to zero in taxes. While any other shop needs to pay taxes.

I don't know if skysports operate in Sweden, but my guess is that they do not.

The thing is, I don't want Sweden to become like the US. Because our way of doing things are so much superior in my mind. I don't want to get a bill after I go to the hospital, I want free education, I want good roads and internet connectivity. All the stuff we have companies like these help to destroy to increase their profits.
A second place Desktop OS in popularity (in desktop Linux, which itself holds just 1% or so of desktop OS share) and a niche PC manufacturer?

Doesn't bode very well from a commercial perspective. Would even most KDE project contributors switch to one?
Spring Cloud Stream Ditmars Introduces First Class Kafka Streams Support
On the topic of "test them all", I wrote this in my paper about error bounds and worst cases for complex multiplication (http://www.daemonology.net/papers/complexmultiply.pdf):

[For finding worst-case inputs] the approach taken was to perform an exhaustive search, taking several hours on the second author’s laptop, of IEEE single-precision inputs, using only a few arguments from Theorem 1 to prune the search.

Even though (2^32)^4 was far too large for it to be tractable to test all 4-tuples of single-precision inputs, a "pruned" search was able to easily cover and/or exclude the entire search space.
So then the task is to transpile the source functions into Morte, compile them, and see if the executables are equal; and somehow we have solved an undecidable problem (?) There must be a catch somewhere.
You know what would be really neat? A different, restricted/camouflaged unlock when you make a slight facial expression that would probably go unnoticed.

regular face: regular unlock
right eyebrow raised a tiny bit: hide my sensitive stuff from a casual search*

*and after a few minutes, if I don't deactivate it, start deleting.
The total value of my compensation as a formerly unionized technology guy was on par with a tech company and probably higher than average, adjusting for cost of living.

Everyone on HN is a performer, but the reality is that most people benefit, and most high performers will work for a lot less.
A quick overview of what makes IDA cool for those unfamiliar with it:

* It has one of the best decompilers available

* It supports a ridiculous number of platforms

* I trust its disassembler (especially for mainstream languages) more than almost any other disassembler

* Demangling of Swift names is a nice quality of life improvement, Swift moves fast and is hard to keep up with

* Still the best disassembler and machine code reversing tool out there

If you can't afford IDA, it is very expensive, there are a lot of great alternatives:

* Hopper (mac only). Its disassembler, is not so great, it gets confused and fails to find code in Swift apps pretty often. It is still generally good and with some encouragement you can get it to do a competent job.

* radare2. Works on a lot of more esoteric processors. Great for when working on small firmwares from less common processors. Not so great at big files. Slow. Very powerful regardless. Open source.

* ImmunityDbg still works for Win

* Other tools, just search.

The more time you spend looking at disassembled machine code the more valuable IDA gets. But you really have to do a lot of RCE. Most people first getting into RCE really think they need IDA when they haven't even cracked the docs for their target environment yet or lack fundamental knowledge about how CPUs work, which holds them back far more than a second class disassembler ever has.
That may be changing. FIFO SQS queues were only available in the Ohio region until several months later.

Looks like November 17 to June 14.

[1] https://aws.amazon.com/about-aws/whats-new/2016/11/amazon-sq...

[2] https://aws.amazon.com/about-aws/whats-new/2017/06/amazon-sq...
Migrating from RethinkDB to Postgres – An Experience Report
> Make compromises that are reasonable.

When it's so easy to use a community-vetted Linux distribution, I think "reasonable" gets shunted down a layer.

It's not all or nothing. Every reasonable step counts.
Ilfak, hire someone to proofread the release notes!
This is one of the core reasons dependently typed languages are difficult to make practical which I find never gets mentioned. Getting your program to type check requires proving arbitrary properties are true like (λx.2*x) == (λx.x+x), so when this is undecidable it cannot be automated meaning the user has to help by providing the proof which can be arbitrarily difficult (think of pen-and-paper maths proofs but more rigorous and it's a very different skill to programming).
Good luck. It has the airport and cheap housing, but no educated workforce or mass transit.

In my reading, Philadelphia and Atlanta have to be towards the top of the list, with Toronto a plausible dark-horse candidate.
I recently installed Artix Linux[1] (Arch with openrc) on a spare hard drive on my laptop, and although the GUI installer gave me a few issues, installing manually from the text ISO as I would normally with Arch worked flawlessly, and I've yet to run into any issues with it. I'm working up the courage to switch to it as my main driver on my desktop.

[1]: http://www.artixlinux.org
Cars are not really a valid analogy here because we're talking about services with network effects that impose behavioral norms for all users regardless of location.

To use your driving example it would be like saying that to use a car everyone has to drive on the same side of the road or accept identical pollution control standards. That's obviously not the case. Cars are adapted--sometimes quite substantially--to local jurisdictions.
It's worth pointing out that this solution neuters Activation Lock, because the thief can now put the phone into DFU, then factory reset it, and then use the new private key to disable Activation Lock.

Compared to destroying the security model of iOS in general this is pretty tame, but it is still a non-trivial downside.
> According to that, if Apple accidentally ships any GPLv3 on iOS then they'll have to release their root signing keys to the world, which would be disastrous (it would destroy the security model of the OS).

Were I an iOS device owner, I would want the ability to replace the root signing keys on any device I'd own. It'd be my device: why should Apple have the unique privilege of determining what software may run on it?
The official IRC client for the GNOME desktop (popular desktop environment for Linux) is named Polari. https://wiki.gnome.org/Apps/Polari
True, but OTOH iOS's closedness puts you in a weak position where if Apple changes their mind you can't do anything about it. It's annoying, too, because you need the horrific iTunes software and its cert infrastructure as a gateway to your phone.

It's really paradoxical that a closed source O/S is a pro-privacy option vs. Linux-based Android of all things.
Free excellent Python IDE is Visual Studio Code with a Python Extension installed by Don Jayamayne. VS Code is a solid Python experience.
Why not drop bash completely and make zsh the default shell? Apple has been shipping zsh for a very long time already...
It's expected that hobbyists will pirate it.
I don't know what you think the precursors to a civil war looks like, but...

Relevant blog: https://predictiveheuristics.com/
The implementations in the benchmark game are all targeting performance.

This will almost always also be the most energy efficient thing on modern cpus.

It will not always be the most memory efficient way. I neither agree or disagree with what they are measuring, its just data. I would not look at this if I was trying to get an idea of what languages are most memory efficient, maybe.
If the study reflects a reproducible effect, it could be genetic, i.e., the strictness of the parents and their kids are simply reflections of similar inherited traits.

I was amused when the "tiger mom" articles came out, and wondered about trying to be such a parent myself. I quickly realized that I don't have the self discipline and emotional stamina to pull it off, whether I think it's a good idea or not. For this reason, telling me that it's how I should raise my kids is a moot point.
They don't sell the $6 bread in the grocery store that the maid shops at and they don't sell $12000 couches where she buys her furniture.

She lives in a different world, so it's very likely that she has no idea how much a couch costs by looking at it.
> "why not just" or "just use" kind of comments that you see more in reddit

Honestly I think this attitude is much more common on HN than reddit
> Relative to the nanny, she told me, “The choices that I have are obscene. Six-dollar bread is obscene.”

I believe this is called humble-bragging.
Similarly, nobody would ever ship a pizza interstate or really more than about an hour away. In the short term, I suspect cannabis will work similarly, for legal reasons as well as practicality.

In some places you can get alcohol delivered, and others, you cannot. I'm sure that as time goes on, and with federal legalization, restrictions will ease on shipping cannabis.

One thing to note is that the black market uses mail to transport cannabis in a major way… Not just the darknet vendors, but many other people. They even make rap songs about it. Home delivery of cannabis has long been popular in dense urban markets such as New York City and San Francisco, also.
I wonder if the increasing cannabis accessibility leads to an increase in smoking? Lots of friends of mine never smoked but started „smoking“ cannabis, usually combined with tobacco (vapors not used once). Kind of a sad development in my opinion when lots of countries are pushing hard for a smokefree life.
Guess: its output has more lines of JS than the vanilla JS versions, and since a lot of the variation between scripting languages in these things often come down to how fast they can stop running themselves and start running some underlying C, those extra lines hurt it.

This may also explain why JS is really fast in a couple of the examples. Those script likely do almost nothing but call some built-in function that does all its work in C (or C++, or whatever).

[EDIT] OK, if I'm reading these[1][2] files correctly, it has more to do with the the TS version being written in "modern" "idiomatic" "beautiful" JS with promises and crap, and the vanilla JS one being written in "ugly" "bad" old-school 90's-lookin' C-ish Javascript.

[1] https://github.com/greensoftwarelab/Energy-Languages/blob/ma...

[2] https://github.com/greensoftwarelab/Energy-Languages/blob/ma...
IANAL, but if they had a way for a legit owner of the device (for some definition of being able to prove that) to use their own keys in addition to the apple ones then no security is compromised and gpl3 is satisfied.

It bothers me that you are confusing Apple's policy choices, which are not inevitabilities nor are they without dissenting opinions, with security, suggesting there is no possibility to satisfy the latter without making the same choices as the former.
Also in today's news: "Chelsea Manning named visiting fellow at Harvard." http://www.militarytimes.com/news/your-military/2017/09/13/c...
Mystery of sonic weapon attacks at US embassy in Cuba deepens
Glad to see some increasing activity for funding in the cannabis space. Prohibition is lifting, and it is exciting to watch it happen.
I think that this is true, but didn't Obama have a massive wave of Pardons of people like this before he left office?
Can you really expect a correct shipping date from someone who has just started doing it? They probably don't have established protocols and procedures for most of the process. Indie funding is mostly about doing something completely new with whatever money you can get and hoping for the best. I'm not saying it's ok to mess everything up but I do think you should adjust your expectations accordingly.
Ok this is uncanny, I just commented on the need for something similar yesterday:

https://news.ycombinator.com/item?id=15244655

I wish I could set up a notification of some kind to know when someone gets Erlang/Elixir running on this chip. It would be a great platform for stress-testing Go concurrency as well.

Beyond that, I would really like to see Octave running on it because it's the only approachable vector programming language that I know of. The holy grail for me is to be able to use something like the MATLAB libraries at 1000 times their current speed to simulate the interesting stuff.