skysight-inc/HackerNews huggingface dataset:
Charles works by sitting between a server and a phone. It decrypts traffic from the server, displays this to the user to 'inspect', and then re-encrypts the traffic to be sent to the phone.

It re-encrypts the traffic using its own SSL certificate (technically a CA, but no need to get bogged down in details).

In many modern apps, code has been added such that an app will only accept traffic which has been encrypted by the original server certificate (ie: the Uber iOS app will only accept traffic which has been encrypted by a certificate from www.uber.com). When Charles attempts to sit between this traffic, the app will not allow network connections, and thus no traffic can be inspected by Charles.

This procedure of an app only permitting traffic encrypted by a predefined certificate is known as "certificate pinning" or "pinning" for short. It is becoming more and more common for native apps.
If I had a developer who was breaking stuff often enough to worry:

* Do they have too much access to systems?

* Is there something really wrong with the deployment system?

* What training can be provided?

All of that is more constructive than your comment, as cathartic as it may be.
"Mark Zuckerberg Employee Helped Cambridge Analytica Before It Harvested Data"

I mean this is getting a bit silly. Why didn't they just say "Palintir Employee".
Ultimately there is very little consumer grade software anymore because modern consumers won't pay for software.

The only people who pay for software are enterprises and they aren't going to skimp a few hundred dollars on software that makes their $X0,000 creative workers X% less productive.

In this space there is basically Pixelmator and Affinity trying to eke out enough sales to keep their developers paid.
Why humans learn faster than AI
no because the headline here is wrong, the CEO of Palantir is a known Trump critic and CA isn't even prominent enough to be on the same level as any of these other companies.
Of course, pinning is trivially defeated if you have debug-level access to the app because you could just intercept any network call.
How about a Google created always on device in your pocket?
R/tennis James Blake answers not visible due to anti-spam rules
> "NTSB should look into this in the event that the person was under autopilot at the time, or if there was some flaw in the design of the model X that should have helped or mitigated the death of the driver. I would love to see better guidelines for tesla and for emt/fire staff as the road was shut down for about 6 hours while they tried to deal with the battery. Someone from tesla eventually came down and helped the fire dept deal with the fire..."

This is explicitly what the NTSB mentioned in their tweet (included in the article) announcing the investigation:

> "2 NTSB investigators conducting Field Investigation for fatal March 23, 2018, crash of a Tesla near Mountain View, CA. Unclear if automated control system was active at time of crash. Issues examined include: post-crash fire, steps to make vehicle safe for removal from scene."

https://twitter.com/NTSB_Newsroom/status/978651644417265664
As you're noticing, you get modded down to goatse.cx territory on here for suggesting that it might actually not be a good idea for pedestrians to step into traffic without looking. You also get nastygrams from the admins for posting what they judge to be off-topic material or flamebait. I don't get it either, but HN is what it is.

Yes, this should have been an easily-avoidable accident for any autonomous vehicle that's permitted to use public roadways. No, no one has a good excuse for what happened, including Uber, its engineers, or its attending driver. Yes, the pedestrian was either intoxicated or suicidally stupid. No, the vehicle shouldn't have hit her, and yes, it's very unfortunate that it did.

Now let's find out why it hit her and fix it. Because several other people probably died in human-caused auto accidents while I was typing this post.
According to the website, GNU Taler gives governments an exclusive view of all of a merchant's private transactions:

https://taler.net/en/governments.html

"With Taler, the receiver of any form of payment is easily identified by the government, and the merchant can be compelled to provide the contract that was accepted by the customer. Governments can use this data to tax businesses and individuals based on their income, making tax evasion and black markets less viable.

Thus, despite offering anonymity for citizens spending digital cash to buy goods and services, Taler also ensures that the state can observe incoming funds. This can be used to ensure businesses engage only in legal activities, and do not evade income tax, sales tax or value-added tax."

It's not a backdoor in exactly the same way the Clipper chip was, but it's a backdoor nonetheless.

The fact that the government is the gatekeeper in GNU Taler means that it would have been unable to empower people to get around the financial blockade against Wikileaks the way cryptocurrency did.

That's a practical consequence of giving up privacy and decentralization.

>>This seems like an immature view to me -- taxes are very important for a country to continue functioning.

It's not immature to point out that this gives the government a backdoor to monitor private transactions.

You think this reduction in privacy is necessary to levy sales/income taxes. That's a value judgment, not a refutation of the fact that this is a backdoor.

Something doesn't stop being a [negatively associated noun] because you think its effect is positive.

Speaking the truth instead of sugar coating it for ideological reasons is not immature.
Are you my coworker? Because you sound like him /s

No really I appreciate risk management but when it cripples your ability to make decisions, innovate or otherwise ACT on information that could help you be a more efficient team and the develoment team becomes a room full of people doing nothing but maintenance for years on end people leave and companies fail.

I just watched that very thing happen this year to my company for exactly that reason. Someone with the word "senior" in their job title was so risk averse that the market caught up, passed us and started eating our lunch.

God help them because I can't do it anymore, and writing on the wall says they'll be closing up shop this fall. I'm out the door for good at the end of the week.
How to Rip UHD Blu-Rays with DVDFab UHD Ripper
She should have used Rust for a fearless pregnancy.
>Having written services professionally in Java I have seen performance scale linearly with connections, until one day it suddenly spikes massively - why?

I'm going to guess: lack of load testing. Something I imagine you still need to do in Rust too.
124 mph is 200 kph, corresponding to 'U' speed-rated tires. So its probably about less-expensive long-life tires, rather than a fundamental power limit.
AI commoditisation, digital forgery and the end of trust
Isn't that still tightly coupled from the publisher to Google?
Could you go about describing how this would work for a 3rd party app like Uber for example?
On machine learning and structure for mobile robots
China says North Korea pledges denuclearization during friendly visit
Thanks for the plug! In theory being poor just makes Beeminder all the more effective. :) You can cap the amount at risk at $5 and have it be plenty motivating to stay on track.

Actually the first derailment is $0 so if you're extra poor then you'll be very motivated to not derail even once, in order to prevent having to ever risk actual money.

And it can't hurt to try because if you do derail with the initial $0 at stake you'll have a chance to abort before there's any danger of losing your first $5.
What Clayton Christensen got wrong
Stop linking paid content
This is so true. Providing the incentive to squash bugs than punishing people for making them is the driving force for innovation in a team. Take that away, and you get a toxic culture where everybody starts finger pointing when an issue arises.
If you read the article it says that """Palantir revised its account, saying that Mr. Chmieliauskas was not acting on the company’s behalf when he advised Mr. Wylie on the Facebook data""".

So it's a Palantir employee in their free time.
Forth Version 1 Runs Again
I suspect it's not a super-useful comparison these days anyway - hotcopy never worked for INNODB tables from memory, and even if it did, most of my MySQL instances these days are RDS, where I don't have the option to run perl scripts from the command line...
I agree that the USA driving test system is insanely weak, but they definitely do something. I failed my driving test twice before passing it when I was a college kid in Arkansas. One thing I noticed is the examiners seemed to intentionally try to yell and stress me out. In retrospect, that was a smart way to ensure only someone who has become comfortable enough with driving that they have extra processing power left to handle dealing with passengers is able to become an unsupervised driver. It's a low bar, but it's still higher than "that's the brake pedal to stop, that's the gas pedal to go, have fun"
Where does it process its speech and with what?
Related discussion (over 150 comments): https://news.ycombinator.com/item?id=16690721
If in soccer the opposing team scores, who is to blame? the goalkeeper, defenses? the coach? the whole team? the referee? nobody?

Preventing goals means that the strategy needs to ensure good ball possession, and staying on the offense, to reduce the burden on the defense, to reduce the burden on the goalkeeper, who is the last line of defense.

If the last line of defense fails that's not an individual failure but a team failure, coach included, since the coach selects who gets to play, when and their roles.

Same in software: bad management passes the burden to developers, bad development passes the burden to testers, bad testing passes the burden to release management.
As the parent says, it's presumably not material to the company.
FRANCE ANNUALLY EXPLOITS FORMER AFRICAN COLONIES OF 440 BILLION EUROS
For some reason, this is the exact response I would expect from Uber.
I think what's being massively overlooked in many crashes that involved Tesla is the insane inferno caused by the impact on the batteries. I mean, the guy died from the burns from the inferno, not from the actual impact of the crash.

The picture shows the front side of the car completely incinerated. Not to mention, the cleanup of the crash took much longer than it should've because of the EMS had serious concerns about the melted batteries.

Tesla cars are great until you get trapped inside a battery-fueled inferno. Youtube it, those batteries literally create a meteoric fireball.
For some of us, "Firefox with X extension" was functionally a different browser that happened to resemble Firefox. Tree Style Tabs, Tab Groups, etc. completely changed how one used the browser.
Hackers Got Arrested in Spain for $1B Theft
You can roll your own and get better throughput: https://www.pfsense.org/
https://arstechnica.com/gadgets/2016/09/the-router-rumble-ar...
There's a huge difference between "fraud" and "scam." It's just not a meaningful difference for the people who buy in.
The main issue with smart speakers is that they're in your home and they have access to continuous power, so they're always on. Sure, they might not have all of the processing power of your flagship smartphone, and you can check their traffic, but this doesn't mean that they aren't less dangerous. With smartphones, you can tell pretty quickly if someone's been recording audio in the background: just check to see if your battery is depleting quickly. Smart speakers also have better range than smartphones: they're meant to pick up noise from far away.
> But if you think there will be people willing to self host and maintain a whole voice assistant service, you're off your rocker.

There were probably people who said that about open source operating systems, once upon a time.

Extremely complicated software is packaged down to an installer and installed by non-expert users all the time.
This is written by "Condor." When did Blizzard acquire this?
I think that's actually part of a general journalism style guide. It definitely sounds strange, but so does the constant third person passive voice you tend to see in journal articles.
> Can you elaborate on how Hobbes tried to imitate Euclid's "Elements?"

Please!
The NTSB gets to pick its highway investigations. No one has to call them in. (49 CFR 831.30)

They don’t investigate many per year though, so this is something special. I’m guessing they will be investigating these new technology crashes.
Similarly, I am very interested about how they'll handle real, relatively less rule-oriented more entropic traffic, like NYC and other old eastern cities....

Depending on how they are coded I feel this will be not a big deal at all, or a huge, huge showstopper that will require rearchitecting, but not much in between.
Sure, I agree that the US defaulting on its debt would at this point be a choice. If we got into Japan levels of debt, it's not so clear; inflating away that level of debt means massive inflation, which could be economically devastating.

I disagree that the US couldn't pay off its debt. Back when Greenspan was running the Fed, this looked like a possible outcome. People were worried that it would be problematic if the US stopped selling T-bills, as so much is benchmarked to them. The easy solution was to keep on doing some borrowing at the same time as running a surplus elsewhere, so that the US did have some debt, but was not a net debtor. But I don't recall anybody saying it would be devastating.
Facebook Not Complying with the Privacy Act, Says Commissioner [NZ]
> The public wasn't turned off of Equifax because they weren't Equifax's customers in the first place.

The public aren't even Equifax's users.
Wish I could get a more consistent way of intercepting websocket traffic from iOS (specifically, wss traffic).
Ask HN: Why is Facebook on the rack for questionable practices but not LinkedIn?
Nah forget rain. Rain is easy peasy. You compute the limits of how much force to apply and stay below them. The only real challenge is dealing with other drivers, but in a rainy climate, that's not bad either since they are used to it.

Ice and snow is the real terror, which affects driving discontinuously and in many different ways. You can go from almost total control to almost total loss of tire grip almost instantly with black ice.
> + the camera

What camera?! Seriously though, I don't necessarily want to write device drivers for a camera, maybe it's time I start looking at usb webcams to use?
Seems like setpixel now wants more than just your email:

https://twitter.com/charlesforman/status/978808181425082368
There was a discussion some time ago about mitmproxy (a tool similar to Charles) and specifically about certificate pinning / iOS apps. See here[0]

It seems like you need a jailbroken device, and that there are tools such as SSL Kill Switch[1]

[0] https://news.ycombinator.com/item?id=15757878
[1] https://github.com/iSECPartners/ios-ssl-kill-switch
Nonsense. I'm happy to pay my actual health care costs (nevermind doctors don't know how much they'll charge me). I want health insurance for the crazy once in a lifetime bankrupting event. I want insurance, where if I end up in a random ER through no fault of my own I don't have to pay a $100k+ bill. Meanwhile, let me have a large deductible so I can 'self insure' as much as possible, and save money on monthly premiums.
I can only imagine the SNL fake commercials for this. People are already half-convinced that Facebook is listening through the existing app; every couple of weeks I see friends posting weird coincidences between real-life conversations and Facebook ads.
Well, they have one shot at this so it has to be 100% perfectly correct because once it's gone it's gone.

I, for one, would much rather have them work out all the kinks on the ground than shoot it up into space before they're absolutely sure and then find out the thing is lost because they set a cotter pin at 28° instead of the required 32° so the heat shield didn't deploy.

Though I'm sure if they successfully get the thing where it needs to be and there is a problem they can just send up some robots to fix the thing in another 20 years or so...
I was caught off guard, but it was pretty hilarious.

I just realized you have a very old hackernews account. You must've been one of the first people to register.
> why do you trust that it isn't hiding non-VPNed connections from you

Ahh, so you don't trust the operating system itself, rather than the apps running on it. In this case, you're free to physically turn off cellular data on your phone (e.g. by removing the SIM) and connect it to Wi-Fi.

> The A8 is a 4 year old processor and the HomePod is by far the most expensive and powerful of these devices. Maybe I was downplaying their potential processing power too much, but the fact still stands that a modern smartphone is much more powerful than a modern smart speaker.

Sure, but you don't need a whole lot of processor power. What you need is a reliable power source, which is something that a smart speaker has.

> And phones aren't overlooked when they spend almost 24/7 within a few feet of the owner

While smart speakers don't have to even be within a few feet of the owner to work.
Because the target market is luxury customers who are not price sensitive and are willing to pay a bunch for what they perceive as the cool feeling of being in a cool car?

Listen, I don't understand why Gatorade comes in flavors other than orange, but if I was Gatorade, I wouldn't discontinue all the other flavors. Some people seem to like them for some reason.
Mirror shields in the Culture series use the 'field' magic that so much of the Culture's science relies on. Presumably a reflector field is both insanely reflective (99.999% or better, like dielectric mirrors) and resilient to the air the field's being projected in heating up massively from the small energy fraction which is absorbed.

Your typical "glass with metal on it" mirror will fare very poorly against a high power laser. They're only ~90% reflective, and 10% of a high power beam is more than enough to turn your mirror into a 0% reflective smoldering black lump.

Even if you build a mirror with very high reflecting factor in the wavelength of your enemy's weapon, all it takes is a smudge of dust or oil on the surface and the thing is toast.
Never mind, they updated the post. As of my post the first few examples had some type annotations in the form `methodName(varName: type, ...)`, which I assumed was TS. All the examples are plain ES6 now.
Sorry to be the bearer of bad news, but there are a rough Fermi-number million or more, of this kind of event, and this decision, which most people in the practice of writing software would consider a massive reversal, quite aside from being a retrograde step, implies that both sides of the deal are now in some sense duty-bound to investigate.

You could be the unwitting, unintending offendor by trivial API copying, entirely normal in your prior working experiences.

You could now be the person who has to inform senior staff that due to this decision, code your company owns as IPR is the subject of this kind of copying.

Think about it: If you discovered that any activity you did was now potentially valuable in a lawsuit to generate income, by what right do you not inform senior staff? What you feel about the lawsuit is distinct from your obligation as a company officer, regarding its status surely?
The problem with the fission powered aircraft was the weight of the shielding to protect the pilot. My dad worked on the project, although I never talked to him about it.
Deep learning scaling is predictable, empirically
Why not get all the people, poor, middle, rich, all at once? Why leave any money on the table if you don't have to? That's business.
The terms sociopath and psychopath are tossed around a lot these days, but Cruz is the prototypical psychopath if there ever was one. He seems to have shed warning signs almost constantly, and he was clearly dangerously disturbed. Someone like that has no place around other people.
Solution: single use email account. For bonus points, and address book where each entry it a complaint about LinkedIn.
It's all based on emotional manipulation.

Have you seen Nix's presentation at the 2016 Concordia Summit?
https://www.youtube.com/watch?v=n8Dd5aVXLCc

For what targeted ads lose to fake news with having to stay clean, they regain with psychological accuracy.
You're correct, I didn't choose the right word. I usually will wait for the rain to stop, but I also do ride in the rain. I prefer most rain to the bus. I have chosen the bus a few times over cycling over the past 5 years, but only when the rain was particularly bad.
Based on the marketing site only, this looks like a nicely thought out tool. Hope to see it develop even more.

Congrats.
I guess it's a question of who's asking. Practically anyone can whip up an ICO, and there's a finanvial incentive to do o, so obviously the majority of ICOs will be lousy offerings. Knowing how many in total are fraudulent is interesting, but for most people the question is how many of the non-obvious scams are still scams.

It's like if you analyzed every piece of fiction ever written and concluded that nearly 100% of fiction is awful. That's probably true without any prefilter, but most people will get their books from a curated selection of some sort and will not find that conclusion very useful. Instead, they'll likely conclude that just 90% of everything is crap. ;)
Right, that’s why the only way to win is not to play, there is no safe level of exposure to Facebook or Google.
At these energies it’s less about ablation and more about thermal effects on propellant and warhead assemblies. The problem is that coating a missile in a thin layer of something designed to ablate is a lot cheaper than building a laser to overcome those countermeasures.
This is awesome! The first thing I discovered was how much network noise crashlytics.com was causing. Used AdBlock's[0] DNS proxy feature to black-hole the offending domain (they even mention blocking crashlytics.com in their FAQ[1]).

Note that both AdBlock and Charlex rely on iOS's VPN feature, and only one can be enabled at a time.

[0] https://itunes.apple.com/us/app/adblock/id691121579?mt=8http...

[1] https://www.adblockios.com/privacy/
Rachel is an excellent writer who was on a long break from writing. Seems like HN is happy to read her posts again.
Lasers can never replace anti-missile systems completely, simply because fog or rain will stop them. Also they're completely incapable of taking on reentry vehicles. Other energy weapons might do the trick, but they're not even in protytpe phase yet (as far as we know).

The only thing lasers can do is provide low cost per shot for assymetrical warfare defence/offence. They also have other niche applications (ie sensor blinding/soft kill defense) and of course they can easily make warfare an even worse hell, with the next semi-symmetrical war leaving millions blind and hundreds of thousands rotting away from skin infections.
Such as?

edit: I'm not implying LinkedIn doesn't have any bad practices or issues. But it helps to know which ones you have in mind so we know exactly which apples and oranges are being compared.
In 2017, Mark Zuckerberg sued hundreds, seeking privacy at his Hawaii estate
Sorry for my question, but I am not familiar: What is the difference of the "Christian health bill sharing ministry" to health insurance. It seems to me to follow the main idea of health care, just you know in a social humane way closer to EU approach and not that of a we are going to gouge your eyes out like health insurance companies in the U.S. do. What am I missing?
...then how does it help that you can compile xnu?
How good is Godaddy Cash Parking? This article covers it all