skysight-inc/HackerNews huggingface dataset:
I think doing this type of work, causing possible disruption in another countries infrastructure during peace time is ethically problematic. Much more problematic that the ethically dubious things alleged on FB and Google. I hope there is some outcry against doing this type of work.
It has to go somewhere, we can't launch it into the sun. Burying things is not a long term problem - coal is trees buried for millions of years.
First of all, to give words to the obvious question here: what leads a group of people to flaunt their insanely unethical desire to profit from <insert antonym of freedom>? They are literally trumpeting the ability for their clients to forcibly copy data without the permission of the owner of the device in question. Is it just money? Is it that simple?

Annnyway, more importantly: are there any details about how their claims are even possible? I guess that somehow, in every case of both iOS and Android, the symmetric key with which the data directory is encrypted is somehow gleanable?

It's a bit puzzling, because it seems that something as simple as 15-year old LUKS (eg, using dm-crypt) is sufficient for this purpose... right?

I mean, this company isn't claiming it can perform the same attack on an off-the-shelf laptop that has FDE with dm-crypt, right?

What's the difference? Why are phones such a security nightmare? At least in terms of encryption at rest on a cold device, isn't this a solved problem?
Still bums me out there's not an active market like this but for jailbreaking iPhones.
"This is quite a quantitative study which gives credence to the claims of advocates of dynamic languages"

You have to be careful with that.

In a dynamic language your test system is your compiler. It is essentially a domain specific compiler. With a statically typed language, half your tests are already written, and you just have to activate them with a type signature.

For my money the trade off is down to whether forcing structures into a type system and getting the 'free advanced tests' is more advantageous than constructing a domain specific test harness 'compiler' and getting the flexibility of duck typing.

And you only learn that when you run up against the limits of the type system and have to start complicating structures to work around it.

In terms of a rough metric I'd suggest you have to include the test code in both cases to get a fair comparison.
Yes! Way back in the day, before my family had cable¹, by Windows 98 machine was networked to an OS/2 machine that actually had Internet. It also had some weird thing with SOCKS, though I don't fully remember the specifics, just that I had a rough idea of what settings to look for and what to fill them in with.

But there was definitely TCP/IP support. I remember the day I migrated my parents off Netscape to Firefox.

¹The cable didn't have anything to do with it. When when finally upgraded to cable, we also got an Ethernet router/switch, so my Windows machine then hooked into that.
You'll probably enjoy https://apollo17.org then =)
"that it takes considerable time and effort to come up with the right set of types. "

I've written once here before, this is one of the 'accidental advantages' of TypeScript: you set the compiler 'loose' when you're hacking away, writing quickly, and then 'make it more strict' as you start to consolidate your classes.

I almost don't bother to type something until I have to. Once I see it sitting there for a while, and I know it's not going to change much ... I make it a type.

It's an oddly liberating thing that I don't think was ever part of the objectives of the language, moreover, I can't think of any similar situation in other (at least mainstream) languages.
It's a tit-for-tat response... until some treaty is signed which forbids it and then there is follow through from Russia. US plays hard ball if the other side is not playing fairly. You can hardly blame them.
The Inner Workings of a Commodore 64 PLA Chip [pdf]
It would be interesting to know what kind of bugs they are exploiting for this. Are they attacks over USB, bugs in the lock screen, or in the radio hardware.
wget has a recursive mode which is perfect for archival
AKC name /= the dog's real name. Just like horses, show/race name is often totally different than the "stable" name the animal actually knows.
Why do movie credits use roman numerals for production year in the first place?
You need to be party of the conversation being recorded. Ownership is irrelevant.
user stories and delegation
If I understood correctly, The Reflection part of the Metaprogramming can be broken further into multiple parts like,
- Introspection: Code is able to inspect itself
- Self-Modification
- Intercession: Acting behalf of somebody else

To me, Proxy is more into the category of 'Intercession', isn't it?
Have a look at Lazarus (https://www.lazarus-ide.org/), an open source clone of what Delphi used to be. Active development, can compile to single executables for Windows, Linux and Mac OS. And the language is way more powerful than Basic.
The US plays "fairly" in international relations? Honestly amazed if anyone truly stands by that statement.

The irony of mentioning treaties too. That's some next level true believer stuff.

Would love to have a chat about:

* Chemical weapons convention

* Mine ban treaty

* Rome Statute of the International Criminal Court

* Comprehensive Test Ban Treaty

* Anti-Ballistic Missile Treaty

* Biological and Toxin Weapons Convention

* Kyoto Protocol

* Reneging on the Iran deal and then forcing Europe to do the same despite US intel chiefs saying Iran they held up their end of the bargain.

* The half dozen worldwide commitments Trump has pulled out of in the last year, there's too many to count.

American foreign intel agencies have far more funding and skills than the next 10 largest countries combined. They do not play fair nor do they have to. Anyone claiming otherwise likely doesn't know much about it or wilfully ignores it out of nationalism.
Awesome Discussions, Learned from it, Thanks!
"If brain activity is suboptimal, the device provides a small zap, undetectable to the patient, to strengthen the signal and increase the chance of memory formation."

I always wonder if things like this are worded like so for the layperson to understand? Because to me it sounds like an incredibly crude and hackish way to do anything. "Yeah, just shock the brain and it forms better memories! We're not entirely sure how or why, or what the implications are, but it seems to work for some reason!"
>isn't this a solved problem?

It’s only a solved problem if you’re using high entropy passwords (6 digit pins are not). Otherwise you’re relying on some sort of anti-hammering/auto erase to make up for it.
I think I played some sort of predecessor to that game, called Star Emperor?[1]

But from the first link in your link… they also made Trials of Battle! That it's listed under "Other Products" does not do it justice, IMO. And Stellar Frontier. I did not realize how much of their stuff I had played.

[1]: https://www.os2world.com/games/index.php/native-games/strate...
A friend works at Target corporate, and yes from what I've heard kubernetes is probably involved.
Another big takeaway is the reusability of integration tests.
Write once, verify implementations in any language.

Static or dynamic typing doesn't matter that much if you can verify your software, and there are many different reasons to choose a particular programming language.
Jailbreakers aren’t willing to fork over millions of dollars and don’t have a monopoly on violence.
>“I don’t think any of us are going to be signing up for voluntary brain surgery anytime soon,” Sanchez says. “Only when these technologies become less invasive, or noninvasive, will they become widespread.”

Are you kidding? 15-37% improvement in memory formation/recall? Where do I sign?
No descent is implied when numbers are used for monarchs and popes. John XXIII was the 23rd pope named John (20th century), a long time after John XXII in the 14th century. Queen Elizabeth II of England (current) is not a direct descendant from Queen Elizabeth I (16th century).
I'll just leave this other side of the story: https://cointelegraph.com/news/study-over-74-of-bitcoin-mini...
> The US plays "fairly" in international relations? Honestly amazed if anyone truly stands by that statement.

If you consider how much power the U.S. has and how often it does not use that power to its fullest advantage, it's pretty remarkable how much it holds back.
I was actually expecting this kind of comment.

People in HongKong only have this few years left to able conduct protest at that scale while keeping themselves relatively safe.

In China mainland, you do that, you're in prison for life or worst.

You know what, "worst" is not good enough to describe what could happen. There was a case that might show you what could happen if the police got you: https://en.wikipedia.org/wiki/Yang_Jia

Yang Jia was a man who killed 6 police mans in 2008. Why? Because the police interrogated him for riding an unregistered bicycle. The method of interrogation which the English version of Wikipedia does not fully mention (But mentioned in the Chinese version) including electrically shock this man's genital cause it to dysfunction.

Let me ask you this: Will you risk your life to protest for your right knowing there will be no good end for you after?

So that's why currently, the safest thing for mainlanders to do is focus on earning money, and use the money to trade for freedom (For example: to have a better social status and/or to be able to move to another country etc), and hope for things could change for the better in the future.

I hope now you can understand why I'm so "hypocritical" on this.
No dog may be called exactly "con" or "aux" :)

(kidding)
Every time I consider the simplicity of computing in the early 90s (when I was a kid) I have a pang of nostalgia.

We've made some wonderful things together as an industry but the author reminded me of something poignant in his last paragraph.

When I was younger I used to strive to keep my computer running as long as possible. I relished the idea that in the future, it would never need to turn off. Now I live a life where I seem to be hoping to do the exact opposite.
It is much more likely imo, that they have zero day exploits for something that does not require the phone to be unlocked, eg wireless, 3g/4g, bluetooth, or via the lightning connector.

If they are not doing that one of the only other options i can see is if they can clone the phone and perform a offline brute force against the pin code but my understanding is that the secure enclave is meant to prevent attacks like that.
Agreed. My HS aged son does well in all of his math classes but is entirely dependent on his calculator to solve any given problem. I worry he will struggle as he reaches college level math since he hasn't ever internalized what the calculator is doing. He simply plugs in the numbers and gets an answer.
I am a critic of the US but in this case it's not as if Russian hackers don't keep screwing with the US power grid.
You can still make a varchar(7) column if you want
I assumed your parent was using 'morally' as it is sometimes used in mathematics: https://math.stackexchange.com/questions/1434043/sources-of-...
Some other examples:

- seat belt laws

- speed limits

- traffic lights

- car and airplane safety standards

- clean air and water regulations
Possibly: "deception theory".

https://web.archive.org/web/20120822041637/https://newsblaze...

http://news.bbc.co.uk/2/hi/uk_news/1934990.stm
Feels obligatory to mention Steel Battalion with its massive controller setup [0], that was an early 2000 console game.

[0] https://en.wikipedia.org/wiki/Steel_Battalion#/media/File:St...
These clowns are assuming miners are using the same power distribution as the local grid is.
Honestly I've found alot of help on specific questions on quant.stackexchange.com , also as another person commented - /r/algotrading will very rarely occasionally have good nuggets of info. If you ask a 'good' question there, you'll likely get some decent response.
> Every time I consider the simplicity of computing in the early 90s (when I was a kid) I have a pang of nostalgia.

Nostalgia is a very subjective thing. Today, people fondly reminisce their first BASIC application or developing their first program that created a network socket. In the future, the old hats may look back longingly over setting up their first multi-server cluster or modifying an app to take advantage of parallelism or a GPU. Nostalgia isn't going anywhere.
> Still, not enough people care.

There's that saying that reality is what, when you stop believing in it, doesn't go away.

I don't think the harm of grave robbing is real in this sense. It distresses people to know about the grave robbing. If they don't know about it, what damage does it actually do?

And if people are taking care that victims remain ignorant, such that no harm occurs, what is the appropriate amount to care?
Show HN: Sudo – Find scavenger hunts nearby
That's a great point about slide rules and precision. I wish more people understood it. I am sick of seeing statistics where n < 100 reported to 4 significant figures.
This part:

They're:
Spot I
Spot II
...

is not quite correct. The AKC does not assign a number to the first one.

Open the Dog Name Check [1]. Pick a breed, enter a unique dog name, and the page will report it is available. Now pick a semi-unique combination ("Shih Tzu" + "King") and the page will say "The name chosen has been used previously, but may be used with the following change: King XXXVII." This implies the first person to pick "King" got "King" and the second person got "King II."

One dog per breed can have the name Spot/King/etc. But the AKC is a rent-seeking monopoly and 6 Roman numerals is short enough to still appear somewhat exclusive.

[1] https://www.apps.akc.org/apps/reg/namecheck/index.cfm
That’s how I felt, too. I was envisioning some sort of high framerate camera that could take an image of the cards as they’re dealt.
You should partnership with a good web designer.

You can Ace https://ace.c9.io/ for editor.

Idea is powerful, You can improve the design a lot.
Disney’s Toy Story 4 Lego Kits – I Hope Not to Step on Anyone of Those Perfectly
This is sadly typical from my own experience with institutions like that -- too many mini-kings and queens who are only interested in their own self-preservation and glory.
Might as well? Be serious, it's a lazy hack.
Add it to pocket, or maybe use firefox containers (I haven't actually tried that one).
Looks like India’s foreign policy is not that good after all.
Descent is implied, just not genealogical descent. John XXIII is the 23rd Pope John in the same line of papacy. Pope Benedict XIII (17th century) is the 13th Pope Benedict in that line, but Pope Benedict XIII (14th-15th century) was the 13th Pope Benedict in the line of Popes in Avignon. Henry IV of England was the fourth King Henry of England; Henry IV of France was the fourth King Henry of France; like the Popes, they are two different people tracked in two different lines of descent.
How would an exploit in wireless, 3g/4g, etc lead to a full compromise of the device? These components don’t have full access to the device to begin with, and definitely don’t have access to the disk encryption keys.

And yeah, you can’t clone an iPhone and get anything usable. The pin is entangled with a secret that never leaves the Secure Enclave, so an offline attack would be an attack on the full encryption key, not on the pin.
Total casualties. Even civilian "collateral damage" casualties are like an order of magnitude lower than they were in WW2. Bombing raids used to kill tens of thousands of civilians in a single night. Bombs were so inaccurate the only way to ensure you hit the target was to employ them en masse.

Now, we can hit a single building with a handful of guided bombs or cruise missiles and civilian losses are typically in the double digits.
It's more of a back up system (for now?) than anything, so when things go south for them they can rely on something else. Just like gps has many alternatives by other super powers, so when American military decided to turn it off, things would still work.
Here is the link to the original study:
https://www.cell.com/joule/fulltext/S2542-4351(19)30255-7

I was part of the peer-review process on this study. High quality research, although they made a last minute edit that IMHO lead them to overestimate CO2 emissions by 50% (15 vs 22 MtCO2/yr): https://mobile.twitter.com/zorinaq/status/113943906857019392...
>First of all, to give words to the obvious question here: what leads a group of people to flaunt their insanely unethical desire to profit from <insert antonym of freedom>? They are literally trumpeting the ability for their clients to forcibly copy data without the permission of the owner of the device in question. Is it just money? Is it that simple?

That's one way to look at it. Another is that they provide law enforcement the ability to catch and trial criminals (for instance sex offenders) who are using the phone manufacturer's naivete to hide their nefarious deeds.

It depends on your point of view.
iPhones have anti-hammering already. The Secure Enclave counts password attempts and enforced a lockout period (and wipes the keys after 10 attempts if configured to do so).

There was an attack years ago, where you could kill power to the device after failing the attempt but before it incremented the attempt counter, but they fixed that, and that may have predated the Secure Enclave anyway (and required taking apart the phone, which I assume this on-premises device doesn’t do).
Before anyone makes excuses along the lines of "it's renewable from remote dams", that energy could could have always been used for something more productive. If it weren't for Bitcoin, they would be incentivized to build a datacenter there, build a smelting plant there, or even just build the transmission lines to get it to the grid.

Using renewable energy for Bitcoin takes that renewable energy out of the supply. How much coal is being burned in China because electricity pours into Bitcoin miners instead of onto a grid?
I was programming ESP8266 yesterday and I noticed I felt acute distress of the program size, whopping 250 kilobytes, only 40% left. This was a latent memory from 1970's when 250 single bytes was aplenty and enough for almost anything.
There was a small study giving oral carnosine (2g/d) to participants to study whether "carnosine supplementation in individuals with overweight or obesity improves diabetes and cardiovascular risk factors".

https://onlinelibrary.wiley.com/doi/full/10.1002/oby.21434

The supplement has been readily available for years, has anyone here had good experiences with it?
How big tech companies like Google and Facebook set salaries
> So they were not exactly novices in their language of choice. Writing a compiler is not a task for novices in general.

Only having a few thousand lines of code written in Haskell very much makes you a novice. With that said, writing a compiler in Haskell is actually pretty trivial. It's at the very least considerably easier than most other languages.
Are you seriously shocked that there are people out there that would be willing to assist law enforcement? It's not like they are advertising this service for anyone to drop by with any arbitrary phone to unlock.

They are no worse than locksmiths advertising the ability to crack safes.
I don't understand if he is accusing them because he denies it, or is it because of wording/"for being anti-american"?
I see a few things at work here.

First, over a period of decades, LaTeX's syntax became the lingua franca of nontrivial mathematics in plain text. I regularly emailed quite sophisticated equations to people as part of discussions because you could assume that anyone who could understand the equation understand its LaTeX representation. Given that cultural fact, providing LaTeX as an input syntax for equations is totally normal.

Second, most LaTeX users are not trained in any other typesetting system. This quote from the article is typical:

> “For me, LaTeX is the tool when I want to get the typesetting just so,” says Casey Greene, a bioinformatician at the University of Pennsylvania in Philadelphia.

I spent a lot of hours typesetting in the family business using Quark Xpress back in the 1990's. I turned in most of my graduate level math homework in LaTeX generated PDFs, because rewriting three page long proofs by hand because you realized you had an error on page one is a pain. Of my two books, I typeset one in LaTeX and one in Adobe InDesign. If I want the typesetting just so, I would use InDesign over LaTeX every time. It's simply a better tool for the job.

The book I did in LaTeX I did because I happened to know that it would fit extraordinarily smoothly in that. It was a long flow of text with a few inline figures and equations and a really disgusting number of references. If I had a comparable reference tracking system in InDesign, I would have absolutely used it instead.

Finally, a lot of writing I'm doing these days is meant to be read on a screen, with all the vagaries of reflowing and unknown screen size that implies. In that situation your best bet is to wrap yourself in a straitjacket. Markdown and pandoc with blocks of raw HTML as needed is where I've landed, not because I love it, but because it's a well supported straitjacket with an easy escape hatch.
> I don't think the harm of grave robbing is real in this sense. It distresses people to know about the grave robbing. If they don't know about it, what damage does it actually do?

Lying or hiding truth causes harm. If grave robberies are being covered up, it means that the government or some other institution is lying or at the very least shielding the truth. If people do not have access to reliable truth, they won't be able to make reasonable decisions, which can result in real harm.
Right, they have it, but whether it's secure/bug free is uncertain. Much more uncertain than say, wether AES-CBC is secure/bug free.
Fair enough, I suppose I should have worded my complaint the other way around. A better title would have been "Why only 37 dogs of each breed can have the same name registered at the American Kennel Club".

Self-diagnosing a little, I think my skeptical attitude towards institutions is acting up here. It's weird to me when people use "name" when what they really mean is "name registered with institution X". I don't see why anyone should care what the AKC thinks of their dog's name, in kind of the same way that registering a name for a star in a star registry is similarly stupid.
Quite interesting but it doesn't seem very intuitive, I read the article and still am not sure what it is trying to explain and what the value add is. It seems a bit complicated and qualitative.

I'm super interested in ways to map risk and security. Or measuring maturity of a security team or organization - so was wondering that these Wardley maps might be something to look into? Anybody with more experience know if that would be worth it? I find graphs pretty useful to represent security and risks.
Wow! The memories - I wrote an OpenGL game in Realbasic for the Mac 15 years ago... the trouble with Real Software was that they changed the language and broke backwards compatibility... that turned me off big time. Back in the day I used Amos on the amiga and Microsoft QBX on the PC to write though-the-window display software for real estate agents (this was 26 years ago). The issue with basic in those days was libraries - doing system level stuff (e.g. using Super VGA graphics required a paid 3rd party library)... ahh the memories... these days i’m C++ / C# / PHP / etc. although the most fun I’ve had recently has been with 8088 assembler...

Back in the day basic was frowned upon - but I think these days the stigma is pretty much gone...
storage is irrelevant to presentation. store the number as number and convert in Roman numerals on the front-end. even a short would run you up to 255