skysight-inc/HackerNews huggingface dataset:
There are many solutions. First is requiring un-catchable keyboard shortcut to enter the password. Something like "ctrl-alt-delete" for Windows (I'm not sure if it's un-catchable, but you got an idea) or even better some unused key like pause/break. User will be trained to press this shortcut and app can't replicate it, so user won't be tricked. Second is using fingerprint. iOS should just use fingerprint always instead of asking the password (an exception is first boot or failed fingerprint). Now the case of failed fingerprint might be exploited, but I think it could be solved too. Require pressing of "home" button to acknowledge fingerprint. If fingerprint is real, OS will ignore this press. If fingerprint is fake, OS will just close an app.

Unfortunately operating system developers are not considering this attack. But they certainly can defend if they want.
Oh. I see what you mean.

I see enough references to the phrase (like: "everyone knows this is a dog-whistle for xyz") that I started to wonder if that phrase wasn't in itself, in certain contexts, a form of virtue-signaling itself. Maybe I was wrong.

Q: How is it that all the anti-racists know all the code-words that make up a dog whistle for racists? Isn't it supposed to be, by definition, unhearable?
This seems like what you are looking for.

https://unglue.it/work/153041/
The restaurant biz is brutal.

I had been in the management side for 16 years, and my partner had sold his software company so he had some money. He had always dreamed of owning a restaurant, so he ponied up a large % of the money.

Our food was good, our location was okay, our service was pretty good as well. We closed 3 months later.
Only password outside of my password manager is the Apple one. Exactly because I need it so often that it would be really big issue for me if I have to loose 30 seconds every time I want to enter it.
VCs raise less cash to fund Silicon Valley’s next big thing
"luck favours the prepared mind"
I often wonder how these things are calculated. I just don’t know that there is enough time in a year and enough buildings in a city for there to be 100 times as many attempts as there are successes, unless you include everyone who has ever thought, “I’ll open a restaurant!” And goes back to watching TV. Put another way, if 10 restaurants were successfully launched in a year, that implies 990 failures.
It is useful for sandboxing processes
I agree, it always seemed to me that most of us didn't want people to think we're stupid. It seems sad that you have to worry that a kid will just fill in whatever so they can go to lunch. That seems like a self-esteem or discipline problem, not a fault of test taking.

For all the complaining, I'm curious what a better solution would be for finding out how much kids are learning.
A fair question. There is actually a sizeable movement within American Christianity that fits within your expectations, calling for the end of the death penalty, visiting and ministering to prisoners, etc, however there is certainly a more dominant retributive aspect. I'm not qualified to fully answer your question, but I think a partial answer would involve remembering that Christianity overall explores the tension between mercy/forgiveness and justice/judgment (ex. Romans 11:22), and in the work to build a functioning society, some gravitate more easily towards one or the other...
A solution is to only ask for the password when absolutely necessary. I still don't understand why I need to enter a password (or use touchID) to download a free app. Shouldn't it be enough to login when I want to buy something for the first time in-app? AFAIK that's how android handles it.
I've added a gif to the docs and the README.
Star Wars the Last Jedi: The New Trailer
It's currently out of stock in US.

I love X1 Carbon and it's on sale 30% off w/ coupon https://imgur.com/XqJeZej
The calm before the storm? A study of the current state of the VR industry
Yes. This is the most horrible UX I have ever seen, especially from a company as security-sensitive as Apple is. In my experience, none of the mitigations given by the article are actually helping in some of the cases:

> Hit the home button, and see if the app quits:

if the prompt was caused by some in-app purchase related framework having to re-check something, then the app will quit and the prompt will go away.

> Don't enter your credentials into a popup, instead, dismiss it, and open the Settings app manually

if the prompt was related to that in-app purchase, the prompt will not re-appear inside of the Settings app. If it's because of something else (no idea what - nothing tells you), then it's still asynchronous and might or might not appear after a random delay.

Anyways. Overall, Apple is slowly getting better at this, reducing the amount of magic prompts, though during the beta period and after updates, it might still happen here and then.

Apple, if you're listening: You need to fix this. Centralise this in Settings and prompt users to go there. And do everything in your power to not having to re-prompt the user.

Every time I'm seeing this prompt, I'm wondering where I'm being phished or not, especially the really bad one that's not listing the Apple ID (my apple-id is using an apple id specific email address I'm not using anywhere else, so if I'm seeing the address, it's very, very likely legit).
systemd should have a "whitelist" mode, where everything is locked down by default. Or at least, some /usr/share/doc/systemd/locked-down-example.service file with all of the relevant options set to "secure mode". It can be hard to follow all of the new features :)
SoftBank leads a $164M investment in location platform Mapbox
All apps have always had complete freedom to draw their UI in any way they want. Look and feel is completely up to the developer. There's nothing "special" about the design of system dialogs themselves, it's all just pixels.
I don't think this necessarily addresses the security vulnerabilities in the article, which involve abusing the application reading the CSV, not the file format itself.

If Excel decides that text between Start of Text and End of Text that begins with a "=" is a formula, then you're in the same spot.
I completely agree - most often the spec is wrong. For example, it doesn't matter if you have a completely correct implementation of Euler angles for a control system. If gimbal lock wasn't considered in the spec, you are going to have issues.
So where does it fall down? Excluding the social ones I mentioned.
> This is just how the human mind works - if you don't follow an unlawful action by a negative experience, they will never learn to change.

Not only a property of the human mind: if there are no negative consequences then they have no rational reason to change their behavior.
Aviation safety is also a domain to look up to.
I think, in a year or two, someone will build a crossword puzzles solver using AR, ML, and computer vision. Granted, it is more difficult because we need to recognize the alphabets and solving crossword puzzles is much harder than solving sudoko. At least, the crossword puzzles solver can give word recommendation if it can not solve the puzzle completely.
I didn't say 'paste your made-up indignation question into a blog post verbatim'. Just 'don't abuse Ask HN for thinly disguised commentary'.
One solution would be for an OS to never have such a popup that requested credentials to be entered right there. Instead, the popup should just say "Visit System Settings to enter your account password to download whatever."

This would be similar to measures companies say in emails, "we never ask for your password, always visit our site directly," etc.
Windows has this sorted, albeit in a super annoying manner: UAC https://en.wikipedia.org/wiki/User_Account_Control#/media/Fi...
Maybe I'm recalling things wrong (the incident is very old and I last read the details before some HN-ers here were born), but at the heart of the Therac-25 issue was flaky code, written in a language without any type enforcement (assembly language). What's worse, the code was juggling concurrent events with interrupts and whatnot and was laden with race conditions (probably a phrase not even in the developer's vocabulary).
Did anyone ever notice that it happened?
Yup. And I'm sure there's some implementation of this in the form of a sketchy library.
You still don't have a clear path forward from WPF. I don't understand why they even needed UWP. Why not improve WPF?
I interpret your point as "in a perfect system, school will be a playground, with no connection to a career, and everyone will have equal wealth."

I do agree that schools are culpable when a child (and parents) fails. I do not agree that we should take away the student's agency.
I've found that quickly changing the color of Terminal windows is pretty much the only useful application for the MacBook Pro Touch Bar.
> Working remote is great but there are some drawbacks like everything in life. Those you need to be mindful of before onsetting on that path.

I totally agree. Working remotely is not just awesome. But I prefer it over a regular office job which has more downsides for me.

> First of all working in a van for a long haul will probably be painful for your back. No standing desk no office chair and desk set up will not be comfortable to code for more then a few hours.

I do a lot of sport (surfing, cycling, swimming pull-ups and other exercises for my back). I usually take regular breaks to avoid sitting in the same position for too long. My back feels great!

> Most of time working remote you need power and wifi. There is an expectation that you will be online during similar hours as your co-workers as peers. Maybe not exactly but similarly. So you gotta have a pocket wifi if doing this.

Check out my mobile office setup: https://ruby-on-wheels.github.io/blog/turning-my-van-into-a-... and https://ruby-on-wheels.github.io/blog/turning-my-van-into-a-.... I have power and internet 24h 7 days a week. My connection is more reliable than some of my co-workers who work from home.

> When you work remotely to you will know how bad things are and it will trouble you more if you try to work in a van connected to nature. It's gonna be hot.

Yes, sometimes it just to hot. I've experienced this in the inland. My solution: I drive to the mountains or the beaches where the climate is milder. Or I take a siesta and wait until the sun sets to work. I can work whenever I want. Another advantage of a remote job!
At least with TouchID I think I've stopped having to ever type my iCloud password into random popups anymore.

I'm sure there are still corner cases where it would want the literal iCloud password but I don't remember the last time I saw the prompt, versus before TouchID the random password prompts were pervasive and discomforting.
At first, I was repulsed by the lack of empathy from Mark Zuckerberg. But now I wonder if it would have been better for him to put on an act of feigned sorrow and solidarity, or if that would have made it even more disgusting.
People get swept up with the idea of 'being your own boss' all the time, to avoid working A Job.

Many business owners are working A Job in disguise.
Thanks for sharing , I setup now a production profile for Konsole with red on black for the tab I use for ssh into servers
There's a toggle (in Settings > App Store, iirc) to ask for auth only on non-free (as in beer) apps/IAPs.

Edit: apparently there's no toggle if you have Touch ID enabled. You have to disable it for the App Store for this to work, but I think Touch ID is fast enough anyway...
Correct me if I'm wrong, but I don't think AMD physically swaps out defective cores. I believe they're disabled individually in some kind of firmware. That's effective because the interconnect region is significantly smaller than the core area (and possibly made more reliable through feature size manipulation?). I think this has been standard practice almost dating back to multi-core introduction, where they sell high end multi-core chips as low end with some cores disabled.
Cultural bonds tend to be stronger. I don't necessarily buy the arguments that follow from that premise but I do think there's some truth to that statement, especially because ethnic heterogeneity(sp?) tends to go hand in hand with immigration and hence mixing of cultures. I like the diversity of cultures that immigration brings, but some people like feeling as though they are part of a united whole.
The consequences might have been unintentional, but surely they were foreseeable.

It's not reasonable to expect anyone to accept increased risk for zero increased upside.

And rightly or wrongly, this is what harrassment and assault allegations present.

Sadly, the article, like many others on this topic, doesn't suggest much in the way of solutions or even a path towards a solution, so here's my suggestion -- chaperoning. Or maybe a virtual version, with video cams everywhere, a la the UK.

I know, it sounds like I'm planning a middle-school dance.
So, I owned the OnePlus One, two OnePlus 3T and currently run the OnePlus 5.

I always used CM (or LineageOS) before the 5, they never completed the first setup once before I unlocked the bootloader, thereby reset to factory and I flashed a different ROM right away. Right now I'm on the stock ROM (and affected ofc) though.

Question time:

1) Do you use your camera? I had the feeling that everytime I went from stock to CM/LineageOS I lost features and quality.

2) Why would you pick "Sultan's LineageOS ROM" (not trying to slight Sultan, whoever that might be. I'm curious) instead of going with the official LineageOS builds?
The fake one is in the "Apps" section and the real one is in the "Extensions" section. Since apps aren't as popular overall as extensions, it's easier to game that section to get to the top.
It's an interesting case - they're unlikely to have any legal impact on me and my ad views are probably of very low value to them, lacking even a common language with most ads. Some people feel more comfortable with a government they voted in having their information, but ultimately one that's in some ways an adversary of your state is far less likely to have any impact on your life than one which is in your own state.

Additionally, restrictions on things like copyright aren't nearly as draconian in China - last I tried Baidu's cloud drive service they offered a torrent downloader built into the thing. Other speech restrictions are obviously very nasty and present, but as you're not a citizen there's nothing they can really do to you.
RT used to be half-way decent. Some might argue that they've turned up the agitprop dial a bit recently.
Are you agreeing with Amir or Cacti? "Hola amigo" is an expression that many US Americans understand and do occasionally use to greet one another.
It does, I was a bit confused at first as well. It should be noted when project fifo says "lx jails" it does not mean LX branded zones from SmartOS. It means FreeBSD's native Linuxulator. Which has been in FreeBSD for.. many many years. It's a similar take on LX zones, but FreeBSD native. It does the same thing. Runs native Linux binaries.
True, but those savvy enough to find that will probably notice when an application requests a password artificially.
4 Proven Ways to Avoid Data Leakage in an Android App
Excel protects for this, at least mine does v2013
No, the fact of the matter is that Apple gave Über this special permission which allows it to do whatever it wants with the frame buffer. It did not ask for permission to get that permission, nor did it tell you what it would do after it got said permission. This is directly in contrast to your trust in the platform to "ask the user explicitly whether telemetry should be enabled or not".

As to the tin foil hat statement I'd like to add that 'tin foil hat' refers to the belief in unsubstantiated rumours of a conspirational nature. In this case it has been proven beyond doubt that something fishy is going on - and has been going on for years - so the statement is not applicable.
You need to enter your password when downloading a free app so that if someone finds your phone they can’t install a malicious hacking or key logging app on to your phone. Installing apps is a security risk, not just a financial issue.
Surprised to see the random comment I made surface on this. Dug back out the anon account if anyone has questions or needs encouragement to strike out on their own.
> You are trying to tell me that the phrase is supposed to make me think in racist terms, right?

No, I am saying the phrase is meant to be interpreted in a racial context by the target audience while passing off as non-racial. Non of the phrases I listed are racial by the dictionary definition.

The difference between a dog-whistle and a regular whistle is that dog-whistles are inaudible to humans and go unnoticed, hence the "dog-whistle" tag for such coded language.
What would be a new, efficient approach?
Yes but I'm not sure if that's where the author would like to go. 4G coverage will likely be weaker (making it harder to code on the go) and with fewer camper vans you'll not meet as many people. Security can also be a concern, as can be political influences (esp in Turkey at the moment).
For some context in case anyone was curious, Wikipedia believes that both vi and Emacs were (originally) written in 1976, which is 41 years ago. Unix dates from ~1969--1973 depending on your definition, which is 44--48 years ago.

Accordingly, the reference to "54 year old" appears to be to the first standard as well as first commercial use of ASCII, in 1963.

That first ASCII standard from 1963 specified eight "separators" simply named S0 through S7 at codes 0x18--0x1F. The 1965 update reused the first four for other purposes (eg cancel and escape) and labeled 0x1C--0x1F with the more descriptive names we now know.
Introducing AthenaX, Uber Engineering’s Open Source Streaming Analytics Platform
The good news is that now you can use your coding skills to have a career in finance.
I also ask the same, why webdev doesn't have tools like that, why everyone love to write a ton of css to make a button on the middle page, See struct, it's a wysiwyg gui builder for react
Show HN: Devilbox 0.12 released: dockerized LAMP/MEAN stack (any version combo)
Show HN: Pose – Unconstrained isolation/mocking framework for .NET Standard 2.0
I totally agree. But the set of rich people and the set of billionaires are only overlapping. They are not the same. And funnily it's not even true that one would be a subset of the other. It's possible to be a billionaire on paper and starve to death. But at least I personally would say if you are starving you are certainly not rich. Rich means having the ability to get what you need and a lot of things you want, including things that are unavailable to most. Would you agree?

It can be considered a subtle difference, but it's the point I'm trying to make. Stop worrying about the number "one billion US dollars" and instead start worrying about becoming rich.
I wrote this email to sjobs@apple.com back in 2011. Never heard back :-/

Dear Steve,

There's one thing that's always bothered me about MacOS security.
When a MacOS dialog pops up (e.g. to ask you for your password),
there'sno way to tell for sure that it's MacOS that owns the dialog. A
similar problem exists on the iPhone when I am asked for my iTunes password.

I wanted to write and suggest an easy fix, that would make the next
version of MacOS and iOS much more secure. Why not have the users set a
personal phrase, that MacOS will store and show them in every native
MacOS dialog, to prove that it's really coming from MacOS? Of course,
you'd have to prevent apps from screen-capturing that portion of the
screen for the entire time the dialog is up, and capturing the
keystrokes that are being sent to the dialog, but that shouldn't be too
much of a problem. You can do something similar for the iPhone.

I really hope this finds its way into MacOS. After MacOS X came out
I switched from the PC and haven't looked back. It's awesome.

Sincerely,
Greg ...
Blog post - https://eng.uber.com/athenax/

Documentation - http://athenax.readthedocs.org/en/latest/

Built on top of Apache Calcite, Apache Flink and LevelDB
Why Software Is Eating the World (2011)
It always amazes me [wrongly] how much money niche sites/services can make.
Devilbox v0.12 released

The devilbox is a modern and highly customisable LAMP and MEAN stack replacement based purely on docker and docker-compose running on all major platforms. It supports an unlimited number of projects for which vhosts and DNS records are created automatically. Email catch-all and popular development tools will be at your service as well.

-----

* Webpage: http://devilbox.org

* Github: https://github.com/cytopia/devilbox

* Changelog: https://github.com/cytopia/devilbox/releases/tag/0.12

-----

If you have any questions, recommendations or other feedback, feel free to let me know.
I feel it's worth noting that the doctrine of annihiliationism asserts that non-believers will simply be consumed by hell and cease to exist, with proponents asserting that the doctrine of eternal conscious torment is a mis-reading of the original text influenced by Western/Platonic notions of the immortal soul.
The patient can provision who does and doesn't have access to it.

Patient health data is sold all of the time. Large organizations are monetizing data and the patient never shares in that.

With Hyperledger, the patient can approve who has access to their data...rather than ScriptDrop selling it to the highest bidder.

Companies put in a request to us, we reach out to the patient and get their approval/denial and report back to the requestor. If they are approved, they send the patient tokens and get access to the data requested.

It's all stored on the blockchain. The patient knows at all times who has access to their data and how they are using it. It's how healthcare should've always been.
There are a number of sources of statistics, and while they vary a bit, they all show that the popular story of a ludcirously high failure rate for new restaurants is not true.

That said, the majority do either fail or get sold within three years, which (given that owners generally aren't building them for an exit) suggest a high combined rate of failure or burnout. But nothing like the 90, 95, or 99% short-run failure rates often tossed around.
Different types of gates use different amounts of silicon area. Combining gates "cancel out" different number of transistors. So the gate density you'll end up with also depends on your specific application.

I think the number of transitors per unit area would be better. Though advanced applications mess with transistor sizes too, the situation would be better than gates.
Open source licenses traditionally have give permission for people to do what would otherwise be prohibited by copyright law; i.e. copying, modifying and redistributing the software. But if you have a patent, people are still forbidden from doing that, by patent law.

The way out for you would be to use one of the license texts which include a patent grant in addition to copyright license; e.g. either the GPLv3 or Apache 2 licenses.

Of course, if you do that, one could well ask what you wanted the patent for in the first place.
I think you don't hear about the sudo variant because it's almost never used (though I'll be honest, I never considered impersonating sudo, going to have to add that to my bag of red team tricks).
I think impersonating UI's is pretty common though, tons of ads/malware made themselves to look like windows alerts.