skysight-inc/HackerNews huggingface dataset:
Physical device access is where this kind of security ends. If someone stealing your phone just to get your 2fa codes is a threat vector for you, you should be using different/additional factors.

In any event, as was pointed out, adb needs usb debugging turned on, which needs the device unlocked to be enabled.
In principle, it's possible that plant-based meat substitutes could become cheaper than real meat, simply because raw plants are always cheaper per calorie than meat. So the question is whether the conversion from raw plant to meat substitute can be done for cheap enough.
>with a conservative bent ... what are the chances Cloudflare will wake up one morning and shut me down

>are they willing to abide by their role as utility?

I can remember when the conservative position was to support freedom of association, and to oppose regulating private businesses as utilities.
Not sure what you're talking about. Apple Pay is so much easier and more pleasant to use than chip-and-PIN. It is designed to be easier for the average consumer.

And in terms of speed, are we living on the same planet? Chip-and-PIN is notoriously slow in the U.S. Apple Pay takes a second.

Also I'm not saying plastic will go away anytime soon. There will be legacy terminals. I'm saying Apply Pay and its ilk are superior to chip-and-PIN, a two decade old technology.
It's also available on the iPhone 8 models.

If history is a guide, this will be a new normal that will carry through to future hardware as well.
It's time to get serious about Developer Relations
Building Maintenance and HVAC techs spend a lot more than four hours a month on the campus they support. Or landscaping businesses for example. Or security guards.

I just don't see how the building that you work in defines who your employer is. There's lots of counterexamples for that.

If I own a business, and don't want to have expertise, training, etc, in food service, laundry, security guards, landscaping, etc...I should be able to get a company to do that for me. That company has expertise in hiring, training, regulatory compliance, etc. They are delivering that service to many companies, not just me. Their employees might even be transferred from one client to another. They charge me whatever the going rate for that sort of thing is. They then pay their employees however they do. If they are underpaying their employees, that's an issue, but not one that's my issue to solve. That is, barring some odd thing where my company, specifically, is using some unusual kind of leverage to NOT pay market rates for this service. I see no difference in whether that service happens on my campus or somewhere else.
What's the nutrition content of the impossible foods burger?

The NYT article neglected to discuss that iirc
We don't get many or very powerful earthquakes in the UK, but once I was working in the loft of a house near the epicentre of one, you could see the beams move in wave.
If free will does not exist, then also the prosecutors, judges and jury are not free, and there is no point deciding what they _should_ do. Hence it is safe to choose policies based on the assumption that free will exists.
But that’s all we’ve seen in EVERY thread about FaceID.

“Biometrics are evil because you can’t change them.” Or “They’re usernames/passwords/whatever.” Or “FaceID can be subverted by a nation state with 3 years and $75 trillion”. Or “You can just unlock it with a single picture from Twitter.”

And of course “If only they added an esoteric and complex method of unlocking a fake environment under duress by winking the word tomato backward in French Morse code...”

None of it seems helpful. Using a FaceID discussion to argue TouchID is insecure... seems pointless. The arguments about how it can be bypassed (supposedly) with JUST a 3D printer and thousands of high resolution photos and a video of you looking into a camera and........ come on. This stuff would be unbelievable in an Oceans 11 sequel.

And people argue as if FaceID has to be perfect when it replaces a fingerprint (which is easier to fake) or basically nothing. We’re not securing the Crown Jewels here. We’re trying to keep the guy next to you at the bar from tweeting as you.

So in the end there is no useful on top discussion. It’s just a irrelevant story that people can use to tell about their pet biometric issues even when they don’t fit.

People are still arguing about things Apple said during the initial keynote. The only one I don’t see from before is the ‘will it work in the dark’ question which Apple explicitly mentioned in the keynote.

I want to know more about FaceID from people who know more about security. Instead we’re discussing how the technology it replaced is bad and fringe internet conspiracy theory level nonsense.

Edit to add one more thing: maybe this is rose colored glasses but I don’t remember the threads around TouchID being anywhere near this bad. People argued over how easy it was to get a fingerprint, sure. That’s fair. But the rest of the discussion seemed much more relevant.
Here is a C library I wrote in 1999 which can convert, in-place, a container between Red-Black, AVL and linked list:

http://www.kylheku.com/~kaz/austin.html
That's assuming the consumers were informed about the source of the compromise.
BTW, I think one important take-away for programmers is:

Don't invert matrices.

For example, the solution for the least squares (=linear regression) problem is

beta^hat = (X'X)^-1 X'y

and you might think that the best way to compute it is to compute X'X, invert it, do the multiplication, yada yada yada. But it's really better to just ask your library (Matlab, LAPACK, ...) to solve the problem for you, and it'll probably do a QR decomposition. For small problems, it doesn't really matter, but for big problems you'll be both faster and more accurate.
Technically, isn't that because anything else would practically impossible and yet we want to have concept like limited jail time and ex-prisoners who live non-criminal lives. In order to allow for such concept, we also allow a less than perfect results from DA's, parole boards, and courts.

If we want to have concept like people being cured of medical conditions, then we must also accept that doctors will make imperfect distinction between healthy and sick.

The question society must make is how far we can accept that mistakes happen, and what safe guards we impose to handle the situations when someone fails.
Ah right. Forgot ITA.
To be fair, I WAS ranting :)
I've just inherited an absolute mess at the new place and yes production data in Dev was the norm, I rapidly started fixing that, starting with proper virtualized instances running with Dev configs etc.

It's bonkers how often I've seen that over the years.
Zuckerberg Responds to Trump
Who do you believe when a famous Internet hoaxer is said to be dead?
In college, my programming classes were mostly in C++, Java, and C#. Those languages are generally important/important for working at companies like Google, Microsoft, Amazon, etc.

A vast number of jobs these days are looking for developers with experience working with web applications. Full-stack and front-end developers will almost always need to know JavaScript (mainly for client-side application development).

If you are hoping to just get your foot in the door and feel out if you enjoy programming or not, I would recommend starting with Python. It is widely used language that is easy to jump into and learn.

If you are hoping to learn programming via working on a small side project there are some great NodeJS courses/tutorials online. Personally, I've found some good courses of Udemy.com and some great tutorials at Thinkster.io.

Hope this helps!
The bank is the victim of the crime. The person whose identity was stolen is a victim of the bank's negligence in properly identifying people.
> Can not find any other source of this though.

It's in the marketing materials for the phone, was mentioned multiple times on stage during the introduction, and is in the introduction to the whitepaper that this entire HN thread is about. So yeah - a couple of sources are available...
The doctors are likely professionals, but why do you believe the doctors are trustworthy professionals?

There is science, and there is Science.
> I can remember when the conservative position was to support freedom of association, and to oppose regulating private businesses as utilities.

I can remember that as recently as this year, in the debate over net neutrality.
This AI Startup Is Changing How We Find Information
Would they? The only data we have says that even though people should secure things they don’t. Is it really going to be that different for people who have a REALLY good reason? I kind of doubt it.

And does it matter? If a government wants to repress they’ll do it. They’ll beat you or harass you or something like that.

“Well we think you’re trying to overthrow us but FaceID is turned off on your phone. I guess we’ll give up today. You’re free to go, have a nice time. ”
For once I am happy to had an education because this was clearer when exposed by my teacher 25 years ago.
Yep, in order to engineer microchip we had to learn how to code SPICE and were never aware of Djikstra BS or math but had to deal with real life capacitors and resistors and how to model them.
Taking Privacy Seriously: Leaving Google Behind
Getting Started with Linux Container Monitoring
That's a pretty fantastic idea. I think even courts will find that the government can't compel you to change your face expression, as they tend to do that for anything the government can't physically force you to do anyway. For instance, they say the government forcing you to unlock with your fingerprint is legal, because the government's agents can use force to put your finger on the phone anyway. So it's legal. But the government can't force you to "remember" your password. So trying to do that is illegal.
> Docker abstracts away the network and the filesystem.

Not neccessarily the network, if you're using --net=host.

Docker does not screw with writing logs to files, to stdout or via UDP networking. When it comes to unix sockets or syslog, depends if the target is inside the container (which works fine AFAIK) or outside (e.g. due to bind-mounting /dev/log or such), but I have not tried the latter.
No, because Google made the Chromecast library require Google Play Services.

At the same time, Netflix also stopped supporting Chromecast on many devices, as did many other services. If you always had devices with Google Play Services, you’d never notice, but if you didn’t, it was quite an annoying change.
I think we're talking past each other.

My point is that the GPL undermines software-based business models. This is the foundation upon which GPL fear is built upon.

Your point, if I understood correctly, is that the GPL gives the users freedoms to modify the software. That's all well and good (and that's why I love it), but that's unrelated to the business model. Further, you dismiss the business impact of the GPL redistribution "loophole". I recommend looking at the history of all open-source based companies to understand the real impact of that loophole. For example, VA Linux Systems or any commercial Linux distribution other than RedHat (and there, the impact of CentOS), and there's a reason Ubuntu has struggled with controversial money-making strategies like including ads in desktop searches.

Undermining a business model undermines the livelihood of companies, and thus the salary and livelihood of people working in that company. That is where the fear of the GPL stems from. Understanding that fear is necessary if you hope to address it successfully.
It's not only that. I was unable to read any text even after the facebook-popup since scrolling did only sometimes lead to scrolling, and arrows did not do anything either.

How was I supposed to view this website?
> If we could trust them to lock them up we need to trust them to release them too.

That's not true. Doctors didn't make a decision to lock up the individual.

It's much easier to say that someone who executed other people is crazy than it is to say that person's craziness and tendencies toward evil have been cured.
Visit it from an archive: http://archive.is/uTdNq
This is huge for chromeOS. Hope we learn more next week from Google on the 4th.
PS Plus and Xbox Gold October Free Games Announced
A huge disadvantage of Apple Pay is that you must have an Apple device.
Show HN: Tool for Drawing Lines, 3D, moreorless just a revised graphics project
They're sensitive to the optics of megacorporations undermining local control as neighborhoods and cities determine what's best for their own futures.
You'll need to be able to delete certain customer data in response to a valid request. To do so, you need to be able to find and review all such data, not just in databases, but also in unstructured and semi-structured forms such as file shares, SharePoint and email, and even paper files if they're in a filing system.

You also won't be able to keep backups of this data longer than is necessary for operational restore purposes (more on that below).

The rule is that you shouldn’t keep personal data for longer than is necessary for the purpose for which it was collected.

There are five exceptions to this, one of which is:

2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

This addresses the need to meet other regulatory requirements that you mentioned.

You'll need to keep a metadata record of what you have deleted.

In the event that you have to restore data from a backup for operational purposes, you need to cross reference it to the record of deletions that occurred since the backup was created to ensure that any such data is either not restored, or is immediately deleted again.

This is only a fraction of an organization's obligations under GDPR, being those most directly relevant to your question.

Disclosure: I work for a company that provide solutions in this space.
Why doesn't a billionaire just buy up 95% of all the factory farms and start converting them to free range, while lowering output and raising prices? Why don't we as a society subsidize the cost?

Would save a lot of lives from suffering.

Whatever argument you make against this can also be made in favor of making more cramped prisons and working human prisoners to the bone.

Capitalism is designed to exploit externalities, including animal welfare as well as antibiotic resistance.
> So you can buy used or refurbished phones from some third party retailer, great, but you cannot buy a Pixel or Chromecast or Google Home.

New nexus devices are still for sale.

> Also, is it Google preventing Amazon from getting Prime onto their devices? I've always been under the impression this was Amazon's choice, as it helps them move more Fire sticks.

Correct, Google requires Play Services nowadays for Chromecast. Amazon Prime Video and Netflix both used to support Chromecast on Kindle devices and elsewhere, Google disabled that functionality, and Amazon removed it elsewhere. Fire sticks are sold at a loss.
California Considers Following China with Combustion-Engine Car Ban
Just pointing out an unintended consequence I saw in a cartoon:

As soon as nobody farms cows for meat, milk, and leather, cows will become an endangered species/extinct because nobody will pay to keep them alive. And there's not much space where they could survive on their own in the wild.
What you're talking about is what I call the "specification-implementation gap". In some domains, that gap is vanishingly small; webpage layout is a good example. Sometimes the specification is as simple as "when the user clicks this button, display this message". There's nothing to be gained by formally verifying that particular property of the specification.

But sometimes the gap is wider. An only slightly more complex example would be "the shopping cart contains all items added to it in the current session and not subsequently removed". Sounds trivial, right? Well, as it happens, just a couple of days ago I bought two items from a site whose cart was broken -- it would show only the most recently added item. (I had to make two transactions. Fortunately no shipping fees were involved.) Okay, that's a rare sort of bug, but it just shows how even very simple invariants can get broken on occasion.

Sometimes the gap is even wider. "This app must have no XSS vulnerabilities." There's no one place in the program where you can see that that property is correctly implemented.

You see where I'm going with this: the wider the specification-implementation gap, the more useful formal methods can be.
> Message history up to 25K messages

No thanks.
The problem with software as opposed to most artifacts that humans produce in the world is: "chaos". Sofware is insanely sensitive to initial conditions and a single logical error anywhere along the line leads to... well, chaos[1]. A single errant system may also have insane reach (as opposed to e.g. a bridge), so the consequenses just amplify.

Unfortunately, we've started to rely on the reliability of software in unprecedented ways. (I'd guesstimate that it's probably mostly short-sighted economics that's driving it.)

[1] This is inherent to Turing Machines[2], so if we keep insisting on Turing Complete languages in every realm of computation we'll forever suffer this problem. Please don't think that I'm making an argument against general computing, I'm not. I'm making an argument for restricted DSLs for things that don't need more.

[2] We're not even talking the 'ordinary' chaos of dynamical systems here. Those can at least usually be approximated numerically for the near future unless they're actually really close to a point of divergence. Not so with programs.
Could there be a similar scheme for floats?

Also, is there a penalty for using float16s for CPU centric code?
This is what I was getting at. Keep them sequestered until they’re statistically unlikely to cause further harm. This doesn’t work if you’re locking up pot smokers. It does if you limit long-term prison sentences to violent offenders (and maybe corruption).
Deloitte hacked
Zoos would likely be collectors of last resort. A lot of people think milk cows in particular are cute.
> given Apple have my decrypted contents

Where exactly is Apple storing the entire content of your iOS device unencrypted? Hint - they're not...

[1] https://support.apple.com/en-us/HT202303
I'd wager this sort of aggressive and possibly effective mass nudging toward effective encryption will lead to China further isolating itself from the rest of the Internet.
Though, the classic dense methods have been implemented and optimised and ported to death with LAPACK/BLAS, haven't they.

What you're talking about is parallelisation, moving to GPU, and modern (combinatorial) methods for sparse systems, and that's fairly cutting edge, and not trivial to implement/port.

You'll need to have a pretty good understanding of the language and its paradigmatic use, and of linear algebra, and of modern computer architecture.

However, I assume that you're right in that there might still be some low-hanging fruit.

BTW, Julia is an awesome language with excellent LA support, and it's nice in that most algorithms are coded in Julia itself (unlike the two-language situation in Python, Clojure (AFAIK), etc.)
> which is something science isn't sure even exists.

“Free will” isn't something “science isn't sure even exists”, it is instead fundamentally incompatible with the model of reality which is required by science.
I find that many comments on HN relies on knowledge of acronyms that are really close to insider knowledge (GDPR not being one though).
Thats how most Medical Device software is written :)
Not screwed, because a hw wallet can easily be backed up by writing down the 12/24-word seed in a safe/hidden spot.

Our discussion thread demonstrates that more education is needed around hardware wallets, as most people have no idea how they work or even that they exist.
Hi Richard - the nutritional information is listed on their FAQ: https://www.impossiblefoods.com/faq/

They've made it similar to ground beef I think.
I find the argument in favor of sunset towns in your second link rather disturbing.

The article about Vienna shows that the forces of supply and demand work very well, given an adequate supply. That seems very instructive.
Interesting that the winning submission exploits a known bug: https://github.com/rust-lang/rust/issues/38899. Underhanded C submissions don't need to exploit bugs; the C language already has plenty of loopholes!
If your Zotac is running everything, then there's no real reason to use a Pi3. DTS passthrough works great though.
Looking forward to listening to this!
Couldn't the old owners just open new factory farms and outcompete the now-free range ones by being cheaper?
This car would probably never pass safety standards in the US.
I think you are wrong about Julia, at least when it comes to linear algebra. Julia also relies on BLAS/LAPACK, at least those libraries that strive to be fast.
Amazon Alexa Voice Assistant Will Work with the Big Mouth Billy Bass
The context, but not the quote, which refers to computers and not cookies. Also the example that I didn't quote is referring to text editor commands, which clearly are not cookies, so the argument seems more general.

Of course Norman and Nielsen could be wrong, even if they are renowned experts of this field. But please consider that you might be wrong, too :)
It sure can happen: breach at the bank, predictable patterns used, intercepted mail. I'm sure there are more situations I haven't thought of.
> You don't need to shut off the phone to get into the hardware.

I'm genuinely curious if this has been done before and if you can provide examples.
Yes this is a problem, though also serious for 'clean meat'. :)

Interestingly, consumers are more likely to try out vegan products if they don't say they're vegan on the front of the package...
Lewis did put his finger on a nasty little quality of modern man with that quote. I don't know that the Hideous Strength is a good book - it's positively regressive in quite too many ways - but that quote there could stand to be put in plaques in many offices as a caution.
The thing that I worry about in these cases is the lack of "enforceability" of treatment. If keeping the person in control of themselves (such that they don't become violent again) means they need to be on medication for the rest of their lives, how do we ensure (post-release) that they'll always be on their meds?

I know of people on various medications for psychiatric reasons that have (against their doctor's recommendation) gone off their meds because they didn't like the side-effects. That might be fine (if unfortunate/difficult) for a mental illness that doesn't drive the sufferer to violence, but in the case where it does, how can you responsibly release someone if you don't have a mechanism to ensure they stay on their medication?
Women Power
You are not required to have the Pi in a case. It's nice to do though. Fake USB SNES conrollers that work great on RetroPie are about $3 each if you search around.
The fact that it's not licensed for redistribution or even any regular use is a pretty good reason to not futz with it.

https://software.intel.com/en-us/articles/what-if-pre-releas...

> Intel grants to you a non-exclusive, non-assignable copyright license to make only the minimum number of copies of the Materials reasonably necessary for your internal testing and development of your products.

> You may not distribute any portion of Materials, whether in source or binary form, to any third party, except as specified in this Agreement.
Pretty much exactly this and clearly your knowledge is greater than mine.

I'm still finding everywhere we store data and fixing as much security stuff as fast I can (some of it I'm not sure programmers on here would believe).

It's a gargantuan task.

Which company do you work for if you don't mind me asking? (If you do no worries :) )