skysight-inc/HackerNews huggingface dataset:
No, it's not. BIOS supports LBA48 for a _long_ time now (which can address a couple of PB).

The main issue is the MBR format which doesn't allow >2TB easily (there are hacks, but those break with older systems).
It would be perfectly possible to teach BIOS GPT, and use the boot sector of the system partition for booting (ie. what happens today).

2TB disks are just the excuse to finally force the issue (after about 10 years of promoting EFI without much success).
Those people doing "trivial" startups are learning important operational skills. Later on, they might go on to do greater things. It's a levelling-up process...
With iOS 6 it's not necessary for updates, at least. Still required for installing paid apps though (which arguably it should be).
I think you can replace it with that (I used to do other stuff for relaxation and focus change, I just now like this more), but i think you'll get more out of an old computer than a rock garden :)
The secret to B2B is that it's almost never somebody's actual personal money.

If I as the manager approve the $5000 WooFiz 7 Platinum purchase, I might feel a some concern to ensure that the ROI is defensible.

But that's it. Because it's not my money. If WooFiz turns out to be junk ... well, that sucks. But I'm not personally out of pocket.
He changed his moniker: http://heartiste.wordpress.com
I agree that solving people's pain points is one of the best parts of doing enterprise-y stuff.
> When I set it up, years and years ago, that seemed pretty secure at the time.

If you did not change your password in those many years, an attacker had years and years of time to find or crack it. Regularly change your passwords. And use special characters.
Trading volume is number of shares traded, not number of trades. Re-reading, it was actually ~600% greater volume.

"The difference reached a peak at 9:58 a.m., when the volume was six times greater."

That's pretty noticable!
Every machine we have has local backup in the form of a sizable external USB drive. Some also backup to a network drive. Windows and Mac. With dozens of machines it is hard to justify paying for remote backup. Although, every time I say or think this I also think: fire, theft, earthquake. I wish there were a reasonably priced multi-machine remote backup service at an affordable price with storage measured in terabytes. One hundred gigs doesn't even begin to scratch the surface.
1 - gold confiscation illustrates the power of the political class over private interests in the US

2 - oil nationalisation illustrates the power of the political class over commercial interests globally

3 - Google is your friend

4 - The future size of SpaceX is mostly irrelevant as to whether they fall victim to the whim of a politician's nationalisation decree. The only excuse they need is SpaceX took the cheque and, after all, we know Musk didn't 'build it on his own'.

Your 'moneyed interests' point hints that you may be a partisan leftist? Since they are generally uninterested in discussing the facts we should probably stop here. If you are not a partisan leftist, I suggest you get up to speed on the abuse of political power in the West since FDR's Executive Order 6102.
One thing that worries me about iCloud is that it puts a lot of data and services behind one single password.

Said password is therefor used a lot, with a lot of chances for interception. But most of all, it's used for trivial matters in which password typing is a nuisance (installing a cheap iPhone app), which pretty much invites people to use a weak, easy to type password.

iCloud should have multiple, completely separate forms of authentication for services like Find My Mac, instead of using the same login for wiping all your Apple hardware as you use to download Angry Birds...
"He and Gawker’s Scott Kidder then got on the phone with contacts at Google and Twitter trying to help me put the brakes on."

Of all the issues surrounding this event, this one concerns me most. Most users would not be able to escalate like this. Hosted services need to be providing this level of support to all customers 24/7/365 - or at least offer it as a premium option.
I believe the phrase is "advertorial", this is nothing more than a product plug padded out to satisfy a word count quota. This is not, in any sense, "Hacker News", there is no product comparison and nothing other than gushing praise. Workflowy must be pleased with themselves.
Comedy Stage Hypnotist
Experience a new world of hypnosis with Isaac Lomman, who is a Comedy Stage Hypnotist, exhibiting hilarious, fun and comedy hypnosis shows for corporate people through the power of their own minds.
Unfortunately, my AppleID password is one I _do_ need to remember - I need to use it often, and in places that 1Password won't auto fill. At least: the iCloud website login, various iDevices when using app store, and iTunes on several machines (all on the home sharing network). The alternative seems to be to have all those devices "remember" my AppleID password, which seems like a security lose.
A rocket at infinite distance from the Earth will have infinite PE and can have zero KE.
Cosmopolis 2012 free download movie in HD
I'm a filipino and I am not glad cause this is even not a hackton to begin with.
http://gangles.ca/2009/01/20/the-six-layers/

It applies equally well to innovative business ideas as to other creative fields - it's hard to "see" into the internals of entrepreneurial activity, but if you don't, you're going to be a "CEO" that copies the surface.

I don't think we should criticize so much as seek ways to educate past this problem.
How to find the best iPhone apps development company
The iPhone apps development stands in an unique position as it belongs to Apple Inc. A latest study on iPhone apps revealed that the iPhone apps development is going to have a shining market in the mere future. The iPhone, iPod and iPad all are Apple's product.
this is issue nothing to do with speculative trading. Knight is a broker. They provide an interface to the market for retail brokers, spread betting outfits and so on. Their algos execute orders placed by their clients. Their new algo had a bug. That's it.
That's what live CDs are for. If your system gets owned, you can't trust it anymore.
So I've done a B2B company before and am doing one now (current place isn't intrinsically B2B but that's our main focus. It's certainly not something normal consumers would use).

I think this understates what incredibly hard work selling B2B can be. Large companies will pay you a lot of money, but are ridiculously high maintenance - they expect custom work on your product (often of the "Can you integrate it into our ActiveDirectory/Exchange/etc" form) and the sales process to them is incredibly long.

Small companies on the other hand are often strapped for cash and have weirdly distorted views of the value of their time - If what you're selling them is something they can "do now" by spending 3 hours of an employee per day it can make it very hard to convince them to pay you at a rate you'll be able to sustain a profit on.

Neither of these are impossible to overcome of course. People can and do do extremely well with B2B businesses. I just want to point out that there are real problems with selling B2B as well, and that it's not nearly as easy as it might sound.
For Google Apps paid users: http://googleenterprise.blogspot.com.au/2011/11/24-x-7-phone...
Perhaps it should ask an additional security question or passphrase for 'dangerous' operations like remote wipe.

Two-factor authentication (using say your phone like Google) wouldn't work however because typically it's your phone that is stolen and you are trying to wipe.
People pretty much never change the operating system of their ARM devices anyway. They are a lot more heterogenous thing than PCs and getting any OS to run on some specific ARM device is always quite big a task. There's of course some examples of this happening, say TouchPad or N9 Android ports, but these devices already ran Linux kernel.
There seems to be a lot of confusion around market making, brokering, execution algorithms and HFT in this thread.
Intex Avatar 3D 2.0 Price India: Dual SIM Touchscreen 
The new Intex Avatar 3D 2.0 is a bar shaped Dual SIM GSM phone with touchscreen display. It has 2.8 inches QVGA touchscreen TFT display with 240 x 320 pixels screen resolutions. It supports digital 1.3 megapixels camera with video recording. This Intex Avatar 3D 2.0 model comes with instant messaging, Up to 16GB external memory, work as modem, webcam & social networking apps like Facebook, Twitter, MSN Messanger. It is user-friendly handset comes with great multimedia features like audio player, video player, FM radio with recording, video recording, sound recorder, king movie player, loud speakers, bluetooth, GPRS, torch light, multi languages, USB port and WAP browser. Intex Avatar 3D 2.0 is powered by Li-ion 1100 mAH battery which provides talk time up to up to 3 hours and stand by time up to 250 hours. It is low price Dual SIM phone available in silver and pink colours.
Same reason why I worry about Google Accounts.

Your email, contacts, calendar, location, phone security, documents, files, music, videos, games, apps, credit card details, merchant account, search history, web app hosting, etc., all on one account.
Small business Blog|Definition |Ideas and Online Solutions
Enter the world of Online Small Business definition, blog, services and other solutions. Get growing - with our reasonable, scalable business software, SAP Business One.
The application shouldn't have to work around flaws in the underlying protocol, especially when a solution exists (perfect forward secrecy http://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-se... provides a good overview)

The problem with challenge/response and nonces is that the server and the client both need to have access to something secret to encrypt the nonce with. This usually means storing the plain text password on the server or at least a hash of it which then would be used to encrypt the nonce.

But this also means that when your user database gets lost, all accounts are instantly compromised without the attacker having to do any kind of brute-forcing.

Unless you notice an intrusion immediately, the damage that can be done in such a configuration is way bigger than if the server gets the secret thing from the client and does the hashing there, because now an attacker has to individually brute-force the various accounts (keeping at least those who chose a strong password safe).

Even if perfect forward secrecy was not doable, I assume it's far less likely for an attacker to brute force my SSL private key than it is for them to acquire my user database - not that I want that to happen of course.
You could use something besides a phone for 2-factor authentication--e.g. YubiKey.
How to get selling business through internet?
To perform fast emerging market you need to start your own web-based retailer, you just need to deliver the goods. This business offers the opportunity to do just that, by providing packing and freight services to a variety of customers. For more info visit http://www.skyerbiz.com/
The plastic MacBooks never had latches. Not sure about the iBooks, but possibly they did too - at least, post clamshell.
The rule in our house is that, for work that neither of us wants to do, we do it together.

I had my 15 year wedding anniversary this month, and it's worked pretty well for us. :)
That still rasies some questions. You're either implying Apple allow enough login attempts for brute force against their live web services to be possible, or that someon somehow got hold of the password hash.

Without knowing the guy, I strongly suspect a reused password that was exposed somewhere other than Apple/iCloud. Anyone want to bet against this Gizmodo guy's password being in the Gawker password dump?
It was guest access. No logging in required.
(really) simple command line sleep timer for Mac
So he takes legal action. I'm sure the University will love the publicity that goes with that!
There is Backblaze[1]. Unlimited backup at $50/year/computer.

[1] http://www.backblaze.com/
Http://www.addthis.com/bookmark.php?v=250&pub=braisu
Startup is the new MLM
b2b is viable, but is this startup noise any more than the latest ponzi scheme? See Amway - I mean, in twenty years, what will you have done except create more suckers for other suckers to exploit, really?
Why TCP is evil and HTTP is king
This Is What Happened When Knight's HFT Algo Went Totally Berserk
I have this - and I had reason to call it recently due to a technical issue.

In short: I'd advanced paid for a 1 year Apps account a month before the monthly billing came in to place. My credit card expired with 11 months of the contract left, but they suspended the account as that appears to be policy with new monthly billing system. I received no email asking to update the card prior to suspension. This suspended all the services it was connected to. Call centre couldn't help, account was down for 18h - they just said wait for new card to propagate.

I'm sure if a journalist from Gawker had posted this to HN it would have been resolved with more urgency.
...Wait, you mean, an online backup service that sends emails (and password reset requests) to an email account that can be compromised?

Hm.
Dubai Cosmetic Surgery Forum
>Nothing can stop LinuX.

Not even spelling mistakes.

hint: it's spelled Linux
JSF and Java EE Newscast - Episode 9 - July 2012
this is a generic windows issue. usually noticed by users who switch over to it after using a mac for a while. lets just say font-aliasing is not one of windows strengths.
CrashPlan has swooped in and knocked every cloud backup system I previously used to use out of contention.

They've made an awesome product and they provide it at an awesome price.

Previously, I was a user and big proponent of Jungle Disk, but that product has become all but completely abandoned since being gobbled up by Rackspace. (I love how their solution to comments about going radio silent and not updating their blog in over a year was to just take the blog down and put up a "The Jungle Disk blog is currently unavailable" message, as if the blog were just temporarily offline. One of their last blog posts was a "Future of JungleDisk" post, outlining tons of features that, 16 months later, were nowhere to be seen).

I had been recommending Carbonite to friends and family for an easy-for-normal-people backup solution, but their performance falls short of CrashPlan, and their heinous near-silent default exclusion of video files from backups would have led to serious tears if we had ever actually needed to restore from backup. (Automatic backing up of video files is reserved as a feature for the new $150/yr HomePremier plan - which at least now makes this fact somewhat visible. Previously, there was damn little to indicate that this exclusion was happening). That made Carbonite something much less than the "set it and forget it" backup for my non-technical friends and family that it was supposed to be.

CrashPlan is nice and friendly, has no hidden "gotchas" that I have found yet, and has a great PRO service as well. The client GUI can even be made to connect to the daemon on a headless server through an SSH tunnel, just with a simple change in port number in the config and forwarding the remote port through the tunnel.
I _strongly_ suspect the iCloud web login will block brute force attempts. What I do wonder though, is if there's some other place an iCloud/AppleID login can be brute forced without appropriate rate limiting? Maybe an IAP API endpoint? Or an in app advertising endpoint? I wonder if the "check whether an IAP succeeded" API that the "just redirect you dns to my server and add my root cert" "exploit" uses is failing to block brute force attempts?
US Congress opposes revised UN telecommunications treaty
>>They weren’t able to stop the wipe on my Macbook. Or give me a pin to log into it.

I don't use a mac so this question might seem a little off.

Wouldn't disabling the computer's internet access stop his data from being entirely wiped?
I made tindie, so if anyone has any feedback I'm all ears!
I must say the site is very slow.
Do people really think these services are actually much good though?

Sure there's a few amazing stories they use for the marketing campaign, but that's about it.
If you actually loose it (i.e. not stolen) then they work.

Most people that steal them though know exactly what they're doing and how to wipe them properly. Same with mobile phones etc.

I guess something is better than nothing, but really it seems to me they're selling you the same as the dream of winning lotto without mentioning the actual odds.
erasing someone's things is such a juvenile thing to enjoy

I don't know what part of the world you're in, but here (in the UK) it'd actually be a criminal offense carrying a multi-year prison sentence under the Computer Misuse Act.

I'm wondering at what point the police or law enforcement get involved in the US?
This is from 2003. It's not entirely outdated, but it is rather quaint.

The author foresees a future where everyone has to use personal certificates to communicate, which has various pros and cons - while enabling commerce, it could be the end of anonymity. He didn't anticipate a world where the government is simply hoovering up all the plaintext.
Similarly, I don't understand the strong insistence on having sex that so many people have. Can anyone explain why this is such a big deal?

/sarc
I had forgotten all about that. I agree, it's very good. Its chapter on monads is decent, iirc. But the book is also quite light, being a basic intro to the language, and doesn't get into a lot of things you'd want to learn in order to actually get stuff done (concurrent programming, networking etc.).
Turn on 2-factor auth.

I thought about it and worried about it and thought about it some more, and finally did it.

And I had no problems at all - it works really well.
Please don't downvote just because you disagree with someone's opinion.
Generally if the person is important enough.

This is the only case I can think of where non-classified information leaks were prosecuted: http://en.wikipedia.org/wiki/Sarah_Palin_email_hack (There are probably more, but I can't imagine any would actually disprove my point.)
And the nanex guess at why it happened: http://www.nanex.net/aqck2/3525.html
Because it shows people the effect that someone getting your iTunes password can have, especially if you've enabled Find my X in your account?

It shows that (maybe) it's possible to brute force an Apple password?

Because it's generally interesting reading, in the same way that people like to rubberneck at car crashes. I'm not saying that's right, but it's human nature.
On the contrary.

Put all your eggs in one basket and then watch that basket.
Unfortunately, my AppleID password is one I _do_ need to remember - I need to use it often, and in places that 1Password won't auto fill.

Write it down on a piece of paper (or use a password manager that will show your password).

Back in the 1990's "writing down passwords" was considered a huge security hole.

Now day's attack vectors have changed and it is probably more safe than using a memorable password.

The alternative seems to be to have all those devices "remember" my AppleID password, which seems like a security lose.

If your devices are physically safe, and iCloud has remote log-out (does it?) then this may be more safe too.
> usually

And even in the case of a billion elements, the difference in time is still negligible. Developer time is almost always better to optimize for. There's a reason Facebook and Google weren't coded entirely in C.
Starting to see this myself. I'll look into making some changes once the traffic dies down. Thanks for the feedback- emile
That's a good point. On the other hand, with the ECDHE / PFS scheme, aren't you still at risk for an implementation specific bug like the Debian incident? (I.e. the server or client only ever picks the a/b factors from a very limited range?)

Anyways, your suggestion sounds much better than my initial nonce suggestion. :)
They are gradually adding more options. There are now single use passwords for some services (I have them for Chrome and Android). Plus they support two factor authentication.
> I don't like it when people suggest that we "throw another server at it". First I want to see that the code is as tight and fast as can be.

I understand that you don't like it, but that doesn't mean it's actually more efficient. Except in very rare cases, it usually saves money in the long run to add additional servers. The correct way isn't always the best way.
I don't think getting hold of the iCloud password would let anyone "own" my mac. (The only things they should be able to do with that would be messing with my synced address book, notes and photostream - and if "find my mac" was enabled, perform a remote wipe).
Only tangentially related, but I think it is very unfortunate that Everett's interpretation is called "Many Worlds". Talking about "Many Worlds" paints a picture of parallel universes that one can travel between. That makes no sense, and it is not what Everett says.

I was introduced to quantum mechanics from a TCS point of view, i.e. via quantum computing. After some time of getting used to the mathematics, it seemed quite natural to me to suppose that the universe "really is" a vector in a Hilbert space, without any spontaneous collapses, and so on. This actually caused me to reject the notion that there are "Many Worlds". After all, it's all just components of a single vector describing our universe. It's a single world that just happens to work according to rules that are unintuitive relative to our everyday experience (and the real mystery lies in how consciousness works, but that's a mystery even without QM).

So I was really surprised when I found out that what was meant by "Many Worlds" is almost exactly how I had interpreted things as well, and to this day it feels to me as if the name as an attempt to popularize this interpretation dilutes a proper understanding.
LiveReload for Chrome automatically reloads the page you're on if a file changes
Never understood Apple's insistence on asking for the password all the time.

For such a customer focused company, it just seems so bad.
This isn't solely about an information leak, though -- it's about willful destruction of property (i.e. all the victim's data getting vaped).
Well it's still much preferable to not being able to wipe data from stolen hardware.