skysight-inc/HackerNews huggingface dataset:
> The sad thing is there's really no crypto to understand here. The simple and obvious point is this: if I could do this experiment, then someone at Apple could have done it too. Possibly at the request of law enforcement. All they need are your iForgot security questions, something that Apple almost certainly does keep.

It's an interesting meta-question about why Apple's claim was taken at face value. Not just by the public but by Apple's many scoffing critics? The Mat Honan incident should have been a clear sign that Apple's security mindset had a gaping hole:

http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-hona...

> Apple tech support confirmed to me twice over the weekend that all you need to access someone's AppleID is the associated email address, a credit card number, the billing address, and the last four digits of a credit card on file. I was very clear about this. During my second tech support call to AppleCare, the representative confirmed this to me. "That's really all you have to have to verify something with us," he said.

That's a pretty grievous oversight. Why should Apple get the benefit of the doubt that they've solved the holy grail of security...that is, having lockbox security without impact to user convenience? In the above-cited case of AppleID access, they hadn't overcome that tradeoff and appear to have erred on the side of user convenience, at the cost of security.
This is great, it's taken me months to learn all the things you just listed. Do you know of anywhere where this type of thing is discussed?
There doesn't seem to be any indication of usage limits on the API or a pricing structure (i.e free is 500 hits/hr). Free APIs are cool but expensive to run. Where is the money coming from to fund this service?
Havok's Project Anarchy [free] 3d game design platform available now
I never understood why this hasn't been modernized. The three-letter nearly-meaningless directory names seem so obsolete.
To anyone who thinks this is just a theoretical problem: It's worth noting that law enforcement complained abut both Skype and Hushmail being impossible to tap before tapping both. It seems vanishingly unlikely they either haven't figured out a way to get Apple to help them or to get will at some point. This just confirms it.

Also, for what its worth, at least one of the IMessage handshake headers mentions Fairplay. Which makes me suspect the system was done by Apple's DRM team. Given that DRM is typically an exercise in obfuscation more than actual crypto, this does not bode well.
I dunno... Allowing the language to be selected like a video codec or image file format seems like a reasonable request.

There are three issues:

1) Language pluggable?

2) Spec-ed shader languages

3) Mandatory languages

The proposal was:

1) No

2 & 3) GL SL ES

Microsoft proposed:

1) Yes

2) GL SL ES

3) None

The perfectly reasonable compromise would have been:

1) Yes

2 & 3) GL SL ES
It's not about me, not at all.

It's about the course and optimization as
a field, especially in business.

So, I contributed.

Since I've been there, done that, got the
T-shirt, I'm able to make some contributions
few others can, but to make these contributions
I have to draw on some of my personal
experiences. It's not about me or
"narcissistic".

And, it's not "babble": Instead, in some situations
it's darned
valuable information, that I very much wish
I'd had long ago. With that information,
I would have avoided trying to have a
career in optimization. Much of my
Ph.D. is in optimization; some of the
rest of my Ph.D. may yet prove to be
valuable, but the optimization part
was essentially a waste. Yes, we
expect some useless chaff in with the
good wheat, but still we don't like it.
Optimization cost me a lot.

Broadly optimization is a siren song, especially
for people with at least one foot in computing.
Since in principle and sometimes in pracitice
the field can save money, enough to give
quite high ROI,
the song
sounds good. Alas, mostly the song is not
good but an invitation to disaster, to taking
a career into a swamp.

I gave you some rare and good insight
that could be quite valuable;
ignore it if you wish.

"Experience is the great teacher,
and some will learn from no other".

I learned about optimization from
experience; it's the very expensive
way to learn; if you throw away what
I reported from my experience, then
you get to take the expensive
way, also.
2) Need "speed" - write that part in C.)

That's not so easy. Interfacing Python and C code is also incredibly hard, and no one true way exists.
In point of fact, my grandma drives a Mercedes coupe. So the answer to your question is yes.
That's funny, because I was walking around San Francisco today and there were lots of homeless people on the streets, not in prison or a shelter.
Every wire is also an antenna that is attenuated to the appropriate frequencies related to the length of the wire.

A 2 meter cable also receives on 144 MHz any spurious signals (amateur radio band). If that was an EMP, it would send a voltage spike up the port and blow out whatever it hit.
I haven't actually tried it, but that's really nifty looking.

I made something not dissimilar, which lists all the man page sections for a given term with a brief description, to help you pick the right section.
They are easy to type and do have meaning in and of themselves.
Unsure if I understand TransactionAwarePersistenceManagerFactoryProxy
Here's a WebGL fuzzer from Mozilla bug 614678:

https://bug614678.bugzilla.mozilla.org/attachment.cgi?id=493...
I find these self-righteous social justice types very irritating. If they have a problem with offensive randomly generated shirts, how about they just ignore them?
But why is that? If you're goal is to be a very knowledgeable and proficient programmer, I find not knowing C/C++ at all to be a lot hard to take seriously.
You think the PAL on one of the missing soviet "suitcase" nuclear devices[1] is that sophisticated?

They are booby-trapped against misuse though, so that's ok.

One such cache, identified by Vasili Mitrokhin, exploded when Swiss authorities tried to remove it from a wooded area near Bern.

I don't think civilians know enough about the current state of Soviet-era nuclear devices to be able to assess the risk very well.

Personally I'd be much more concerned about Al-Qaeda linked terrorists getting access to a Pakistani bomb. The Taliban successfully launched a raid on one of Pakistan's main naval bases[2], and NATO also admitted its concern over the Taliban's ability to target the Pakistan's nuclear installations.

Given that the Pakistan Navy noted Al-Qaeda members within its ranks it isn't difficult to imagine a scenario where they get access to the disarm-codes for any PAL-like on the bombs.

I'm not sure if this is an argument for or against domestic surveillance by the NSA, though!

[1] http://en.wikipedia.org/wiki/Suitcase_nuke

[2] http://en.wikipedia.org/wiki/PNS_Mehran_attack
ES is vulnerable if physically must be connected. Ideally, if he does a single-bit "I'm alive today" `annnuciator flag', say, once a week, and if this get's interrupted, his total autonomous bot wakes up swinging email, postings, and HWALL w3-wide `Guardian-class Bombshells'.
The Mercedes C250 (like almost all cars) has anti-lock brakes. The hydraulic (as you refer to them 'mechanical') brake cylinders are controlled by one of the cars ECUs based on data from the brake pedal, emergency brake, and rotational sensors on each wheel hub.

Everything in newer model cars is connected to the CAN bus (basically a broadcast serial protocol), radio, airbags, brakes, etc.

Your XM Satellite Radio could in theory detect that you are traveling over 70 mph and trigger just the right front brake cylinder. Any time you detect braking on other wheels, fire one of the 9 drivers side airbags to disrupt the operator.
I'm signed up in the hopes that I'll get grandfathered into better rates when you scale
The whole stali idea is pretty cool.

I was wondering recently if there could be any role for something like Docker in an experimental/radically different Linux distro.
It really is a societal agreement. We all benefit from it in the end, we can't do it all for ourselves so we divide it up. Just like agriculture allowed us to move beyond basic food survival needs to thinking people, we all do parts to advance quality of life.

It also gives you a sense of purpose. i.e. the power grid guys keep peace as much as soldiers as one example.
Language implementation sometimes gets discussed up on lambda-the-ultimate . Also, searching for anything and everything Mike Pall has written about VM design is probably worthwhile. Mozilla developers also have some pretty interesting blog posts about TraceMonkey, IonMonkey and all the other monkeys.
This only says that their SMS tap at the carrier won't have visibility into messages sent over iMessage.

Even without iCloud backup, Apple, or anyone they add keys for on your account, can decrypt iMessages.
What The F**k Kind Of Game Is Earthbound?
Can we standardize on a seed to compare scores? HN sounds good to me.
In a second study, researchers asked male and female participants to read fabricated newspaper articles. One article claimed that computer science majors no longer fit those stereotypes, while the other article claimed they actually do reflect those stereotypes. The articles were identical except when claiming the field did – or did not – reflect the stereotypes. Students then rated their interest in computer science.

Men were unaffected by how computer science majors were represented, but women who read the article with non-stereotypical images were significantly more interested in majoring in computer science than women who read the article with gendered stereotypes.

I'm now curious why the men seemed indifferent to the stereotypes.
Because I gotta get paid. Duh.
Yes, and specifically Roger Caillois's use of the term in Man, Play and Games[1]. And I suppose if you want to be technical about it, this simulation appears to have a little piece of each of his four categories of games, to include agon, mimicry, and ilinx with the aforementioned alea.

http://en.wikipedia.org/wiki/Man,_Play_and_Games
Square Market
This is one of those things advanced civilizations really hide from us, so it becomes so easy to think the world is full of roses and nothing to be afraid of.
I think there is room for a distinction between saving my own skin, and making sure that even if I am killed the information gets out.
While I am glad to see it, it looks pretty weak given the scale of the problem and might even backfire.

It is likely to increase the use of natural gas and thus fracking and methane emissions. The methane is troublesome because it could produce a fast big spike just as the CO from the last two centuries really has an impact.

http://science.howstuffworks.com/environmental/energy/emissi...
Please stay on topic, by implementing a genetic Edward Snowden who runs as far as possible from the NSA. This is HN, after all.
No, this is in fact real life imitating Hollywood -- Snowden has turned himself into a Doomsday device! I am hooked on this story like some people are hooked on "Keeping Up With The Kardashians."
Who said anything about agriculture? That shit's hard work. Does driving to the supermarket and buying food somehow preclude living off the grid?

;)
The National Weather Service is something we did really well. We give away free national weather data, ocean monitoring data, air monitoring data, doppler radar, plus predictions for everything from floods to hurricanes. Their weather stations are everything from thousands of fixed stations to over a hundred weather balloons they fly daily to supplementary data from ships that have weather stations on board.

It really is an impressive variety of data.
San Francisco does welcome the homeless with open arms, though. Did you hear the city was talking about paying the homeless a stipend, for being homeless?
The New McCarthyism?
Working as a slave I can afford many more shiny things than I could make on my own. The stuff I buy can be made with professional quality whereas the stuff I'd make would be shoddy, at best.
Why is a refined niche more valuable than a Swiss army knife? What if a Swiss army knife is exactly what you need, where the integration of the features is the killer feature? There are cases where the integration of a few features is more important than either of them individually, and where the whole is more than the sum of its parts.
If it is normal enough stuff, then won't one expect the same of a different job?
Just recently: https://news.ycombinator.com/item?id=5844063
When I was working on WebKit we would rearrange instruction bodies to influence the generated code based on opcode statistics, but back then the interpreter was using computed goto, so there wasn't quite a direct connection between the placement of the input code and the generated code. It's unlikely that any two instruction implementations will overlap on cache lines, since they are all typically larger than a cache line, but more temporal coherency throughout code execution will improve performance, especially on CPUs with smaller caches.

You can do it automatically by gathering statistics on frequent instruction pairs. In practice greedy algorithms for code scheduling work fairly well, assuming you have meaningful statistics.
I think Citrix does two things with this; it potentially stops losing more market share to KVM, particularly in regards to OpenStack, and it also will potentially eat in to ESX market share. In the last slides I saw at http://personal.crocodoc.com/4YprKmn KVM was at 71% of deployed OpenStack installations and Xen was at a combined 13%.

FD: I've worked at VMware for the last 11 years and have worked on ESX since 1.5.
Here's why: https://news.ycombinator.com/submitted?id=dom96
Maybe better to set the "fridge" phone to call the "outside" phone, then answer it after a few rings from the icebox?
One thing I've never been able to figure out is where to store web-application code for webserver backends not associated with any particular vhost. I ended up deciding to package them as full "applications" under /opt, but this still feels a bit off.

Under stali, would these be in /svc?
Javascript: A Better typeof
Square to challenge Etsy, Amazon, eBay with 'Square Market'
themckman's question is a valid one though. So far, almost everything we know about the NSA's surveillance capabilities seem to come from those leaked slides, and frankly, I don't think a couple of slides are going to be technically accurate. The truth is, we simply do not know the real extent of the NSA's reach.
It's a bit naive to write such pieces without asking the question why do start up founders do this, really?

Here is the entrepreneur's perspective.

After all, we are not dumb. We may love to work but most of us wouldn't just want to take so many initiatives if we didn't get the impression that we must to acheive goal x.

In this case, goal x is often more funding or traction. And as part of the funding process, you get feedback about the milestones you must hit to get your next round of funding. Moreover, you get shit load of very conflicting feedback, in some cases by the same VC just on a different day.

Entrepreneurs trying to attack from many different angles are basically hedging their bets due to a lack of clear signal from the market.

The solution to this problem is not as simple as the original post makes it appear.

--Entrepreneur
I mostly picked it up by working on interpreters and compilers, doing performance analysis on the generated code, trying to find all papers on the subject (some of them good, some of them really bad - you have to filter them yourself), and reading about what other implementations have been doing. It's also important to be able to run experiments quickly; you don't want to have to get every patch production-worthy before doing basic performance analysis.
A few SAK examples from the top of my head:

Buffer http://bufferapp.com

Segment.io http://segment.io

Zapier https://zapier.com/

ITTT https://ifttt.com/

DuckDuckGo https://duckduckgo.com/
botnets make that much everyday
sorry, man, just grabbed a link about Clarke.
In the rest of the country being homeless is usually a crime.
You assume that they have full access to all comms in and out of the system; it's entirely possible that a transmission could have happened outside of a monitorable band (for example, mega.com).

To those without the key, an HTTPS download of a porn video is entirely indistinguishable from a tarball of state secrets.
Find out why & how the color red will get more men to buy stuffs in your apps
The case for HTTPS support for Reddit
Thanks for the correction, I wasn't aware that Python uses floats. I would guess that most new languages starting today would use doubles instead of floats.
I agree with you...but to clear any confusion. What I'm implying is the same hypocrisy that Snowden is trying to thwart. By the gov releasing a PR statement (the one that I noted) as such, it instills confidence in iMessage, while the OP, you, and I have noted that there still are vulnerabilities.
Depends on what you are trying to accomplish.

I know that it would probably be far cheaper than organising it at some suitable resort, conference venue. But if you are trying to show them "who's boss" by having a lake side cottage, etc - then I would be concerned whether you are going to create some resentment, etc.

One of the big difficulties in being a boss is that you need to be friendly, but not too friendly. Hard to decide where that line is.

Having internet access and being able to work seems to confuse the issue of whether you guys are having a retreat or just working in a different environment.

Personally, I would consider that there is far less downside in going for affordable and novel venue followed up by a top notch restaurant dinner.
Even still. The fact that you have to pay taxes for services you have no means to access is a little unfair.
I was a little confused that you feel that chance isn't a strong enough factor in multiplayer games. It's so widespread and pervasive that I'm willing to "omnipresent" is only a minor exaggeration.
I'd add security to that list. Rails' most notorious vulnerability was the result of an on-by-default feature that 90% of developers never even needed. I'm not suggesting that Rails is inherently insecure or that Sinatra/Rack cannot be exploited, but less unnecessary code leaves less potential for vulnerabilities; this is especially true in the Ruby world where many developers are eager to `gem install` anything with a few stars on github.
http://xkcd.com/654/
When people say they have years of Experience, what they want to hear is that they have Expertise. While they often correlate, they are very different.

In scientific circles, the "I have years of experience" argument is known as an argument from authority. It is a weak basis for supporting a position.
Yeah but if you go this far, how could you ever trust the bank's security?
I favor putting the phone in the martini shaker, and the shaker inside the dishwasher while washing a big load of clanky dishes.
That's what I get for being specific. >.<

My point was that it's unlikely that you're dealing with malware so sophisticated that it can successfully corrupt any given OS disk image and/or fake-out a checksum verification on same -- and if it can, you're probably screwed anyway.
Assuming, of course, that you don't experience a network partition. MTAs are partition-tolerant; wget is not.

Whoops, that Github service outage just threw the world into political chaos. :)
Don't get me wrong but this is the classic example of "following the herd" of current gen startups --- too much focus on pleasing investors, raising money, eventually realizing you've relinquished control == don't feel sense of ownership in the company, straying from the vision or not getting enough traction, founders breaking up and then the ship sinking!
Perhaps they didn't want access so much as they wanted to remove possession of the files from Greenwald's partner?

The NSA presumably already knows what's in the archive.
I think you mean the "CPython environment"? "Cython" is something else.
That's some real James Bond shit, right there!

(sorry, couldn't resist :)
No mention of the somewhat confusingly named Cython [1]? It addresses the same issues in a different way.

[1] http://en.wikipedia.org/wiki/Cython
But he's already on record saying "The information is coming out, no matter what happens to me".

This isn't his ace-in-the-hole insurance for him as much as it is insurance that killing him can't stop the release of the information. That makes him far less valuable as a target for "extralegal field maneuvers".

By distributing the file, he's announced that the information has become a hydra - cutting off its head won't kill it. This won't stop the US from pursuing him, but it guarantees that his goals will be met regardless of his personal safety.
>That's not so easy. Interfacing Python and C code is also incredibly hard, and no one true way exists.

Can you elaborate on this. I've worked on python C extensions (just minor updates and fixes, I've never been the one to write significant chunks of it), and it seems like interfacing python with C is pretty straight forward.
An anti-static bag (even the metallized type) probably won't be the best idea. Faraday cages depend on the conductivity of the outer shield to exclude electric fields from the inside, but anti-static bags aren't very conductive (100k-10G ohm square resistivity[1]).

You might even be better off wrapping the phone in aluminium foil, but the problem is then going to be ensuring that all seams in the "cage" are actually conductive.

[1]http://www.esdjournal.com/techpapr/ryne/esdbags.htm
http://www.bom.gov.au/catalogue/data-feeds.shtml ?
I gather you're also not versed in the unix command line? Piping and redirecting long dir paths thru commands and arguments welcomes everything abbreviated. The mnemonics is just engineered happiness sugar-on-top of all the intrinsic greatness.
http://taxanalysts.com/www/features.nsf/Articles/557540D8F53...

I think this might provide some interesting background.
IIRC, Square already does around 10% of PayPal's transaction volume, which is impressive. Of course, Square is mostly offline and PayPal is mostly online--and here we see the beginnings of the inevitable conflict. At last, they begin the fight to enter PayPal's core market, using their offline clout in POS to enter online payments using existing brick and mortar stores for fulfillment. Google, just buy Square already.
I have to strongly disagree. Wikileaks has released minutiae about other countries as well. It isn't only about showing up hypocrisy from the US, it is about lifting the veil of secrecy that all governments misuse whether it is hiding big stories or trivial ones.

Saying that wikileaks has an agenda to oppose the US is basically confirmation bias. Leaks about the US get news coverage in the US. Just for starters, look at the 2 million emails from Syria - clearly most of those are about trivial matters too, but most people in the US haven't even heard about the release at all.
The OP is not suggesting the rejection of community, he/she is suggesting the rejection of a 'life'style -- the American lifestyle. Clearly community is essential and I doubt the OP would disagree with that.
If the course professor can have
a flourishing, productive group in
optimization in Australia, then good
for him, his group, and the good judgment
of his customers.

In the US, optimization was a field
with lots of effort back at least to
Dantzig at Rand in the late 1940s.
The main push for the field was just the
US DoD.

For US business, there have been
some niche applications, but
the overall situation has long
been just as I described --
the field "gets no respect".
With rare exceptions, people
just don't want it. Elsewhere
in this thread I've given
nearly exhaustive reports of
why basically in US business
optimization is a dead duck.