skysight-inc/HackerNews huggingface dataset:
I'll bet you'll see lots of companies that require huge scale finding ways to monetize extra capacity and opening their platform with tools and API to access that platforms. Win/win.
Zhao Bowen Wants to Crack a Genetic Mystery: What Makes Some People So Smart?
Thanks Apple! This email was super helpful, now I know exactly whats going on.
Nobody wants AV to die faster than I do, but these complaints could just as easily have been written in 1995 as in 2013. Polymorphic malware, for instance, is older than many HN readers.

The forces that keep AV chugging along have more to do with how the market for AV software works than with anything fundamental about how effective AV is.
I got email from Apple about 15 minutes ago with this text. It probably takes some time to send to everyone.
Thanks to the first comment posted here, which pulled out the key quote from the parents, "The most important thing is that he can relate to his peers and not be seen as any different."

I hope that is just a journalist quotation of an imprecise statement during live conversation in an interview. By contrast, as soon as I knew that my beloved and I would marry into an "interracial" marriage (she is from east Asia, and I am an American of a mixed assortment of European ancestry), I figured that my children would have no hope to "not be seen as any different." (I later learned my children actually look like typical members of the local population in some central Asian countries that none of us have ever visited.) I also had Taiwanese friends tell me even before I met my wife that if I married a local girl and had "mixed-blood" children (that is a polite term over there, not an offensive term), that the children would surely be smarter and better-looking than most children.

I'll leave to other people to judge both the intelligence and the personal appearance of my children. But what I very intentionally did in bringing up my children was plan to give them support so that whatever differences they have with other people in their childhood environments--whether height, weight, hair color, low IQ, high IQ, physical weakness, athletic prowess, or whatever it would be--they would still be cherished as our children. I haven't wanted my children to be other than who they are. Yes, everyone should indeed "relate to his peers" and not be arrogant or aloof. Everyone should cherish everybody else's differences. But that also means children ought to be able to follow the life path that fits them best after the shuffle of genes they receive from their parents, the influences of their early childhood, and the constraints of their youthful circumstances. A great artist shouldn't have to set aside his painting to have buddies in the neighborhood. A young hacker shouldn't be told to set aside the computer and play Little League baseball. To each their own. It happens that my children grew up in an environment in which most of their acquaintances are supportive of young people who pursue their own passions, and they haven't had to be ground into sameness to have peers who like them.
Good scary point (I don't). At least I've pre-emptively disabled Find my Mac to avoid another Wired-like remote wipe. Imagine that being pushed to all ios and mac developers at once!
Agreed. I personally find very short high quality video with no sound to be more pleasurable to view than short videos with sound. The first few times I used Vine I had my phone on vibrate and thought it was so smart of them to not include sound. Of course Having sound is nice sometimes but when you're browsing a bunch of short videos I think the sound kind of ruins it. Not to mention it's harder to produce a quality 6 second video if you need to account for what the viewers are going to be hearing too.
Passwords could be hashed, but credit-cards are the big one you have to keep in plaintext. If you want to bill the card without asking for the number to be reentered, there's no way to avoid storing the number and expiration date. PCI does mandate that you keep less than necessary to initiate a new charge, though: you are not allowed to store the 3-digit verification code from the back of the card. Future charges from the same vendor can go through based on the stored information (without re-sending the verification code), but charges from a new vendor would need the code, so this is intended to make it harder for someone who stole the saved information to initiate a new charge. A loophole is that in-person charges do not use the verification code, so someone could use the saved information to fabricate physical cards, and try to use them at stores (the U.S. doesn't typically use either chipped or PIN-protected credit cards, so cloning a card from the number is relatively easy, prevented more or less only by the heuristic fraud-detection algorithms).
We believe still there's hope and we can do something or at-least there is some people out there that can call for more and urgent help on this. Please help to spread the word.
Why should companies care about selling software for $9.99 when there are free alternatives, while instead they can focus on other things where they really add value ?
You will get one soon...

http://i.imgur.com/PNMZrtn.png
I highly doubt Apple keeps their master keys anywhere near a public facing web server.
Yes, but it doesn't take more than a day to know that an intruder had accessed the system in a way that may have compromised your personal information.

Basically, once the problem was serious enough that they felt like they needed to take the site down, I'm pretty sure they knew which machines had been accessed (or at least may have been accessed). They knew that some of those machines had developer's personal information. They could have posted as much up front, rather than waiting 3 days to do so.
Apple jargon for "oh "
Hi there, I'm the author of this article.

I wrote this about a year ago, when the average salary of an Indian developer was significantly less, and there was a huge market in low-quality low-cost development houses out there. These days you can replace "India" with Sri Lanka, China, or any of the other countries with a significant poor minority and an up-and-coming tech market.

My primary point was that there are people with a price-point way below that of your average US or UK worker, so the cost of production is much lower.
Can someone explain to me why you would do this very hacky thing instead of:

void *global_ptr;
int callback(){
realcallback(global_ptr);
}
int main(){
global_ptr = whatever;
atexit(callback);
return 0;
}
> this seems slightly amateurish for a company with so much cash

I know there are people here who probably have been in the start-up space for all of their working life, but never underestimate how piss poor architecture can be at big companies.

I would place a large amount of money that every single person here who has done a stint at a large corporation has a horror story about terrible, awful architecture, outdated practices, and shoddy insecure software. And yes, that includes companies like Facebook, Google, etc.
For a simpler and weirder example, consider the TCP accepting socket. I learned socket programming in the early '90s and accepting sockets were just the way things worked; I never questioned them. A few years ago I had the occasion to teach someone socket programming, and accepting sockets were a giant W-T-F for me as I tried to explain how things worked.
Oh my goodness, I've been looking for this (mocky) for weeks! Thank you. There really isn't much by way of this particular service, and I found it immensely valuable when I used it last.
The dev center seems to be able to autogenerate code signing certificates at least. But maybe those can be revoked via online checks. I wouldn't mind having a wildcard enterprise cert with a 20 year expiration =)
I received the same email.
I got the email then came straight to HN to check the discusson.

Received: by 10.50.11.202 with SMTP id s10csp27972igb;
Sun, 21 Jul 2013 16:01:44 -0700 (PDT)
X-Received: by 10.68.172.34 with SMTP id az2mr27321730pbc.201.1374447703980;
Sun, 21 Jul 2013 16:01:43 -0700 (PDT)
Return-Path: <developer_bounces@insideapple.apple.com>
Received: from msbadger0508.apple.com (msbadger0508.apple.com. [17.254.6.162])
by mx.google.com with ESMTP id yo6si9958126pac.15.2013.07.21.16.01.43
for <XXX>;
Sun, 21 Jul 2013 16:01:43 -0700 (PDT)
Received-SPF: pass (google.com: domain of developer_bounces@insideapple.apple.com designates 17.254.6.162 as permitted sender) client-ip=17.254.6.162;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of developer_bounces@insideapple.apple.com designates 17.254.6.162 as permitted sender) smtp.mail=developer_bounces@insideapple.apple.com;
dkim=pass header.i=@insideapple.apple.com;
dmarc=pass (p=REJECT dis=NONE) d=insideapple.apple.com
I've been pronouncing it Puffet, and just ignoring the second P, because otherwise it sounds kind of silly. It's so awesome though, great job!
I really appreciate the art, but my training makes me say: did Ulrich do the 'control experiment'? Did he take unrelated people and juxtapose their faces, matching up the points that he normally does, and the blending and try and see if he could match them up just as well?
Apple use a centralised credential system. If I was to speculate I would assume what's happened here is the metadata attached to the developer portal (developer contact information, company info, etc) was compromised, not the actual Apple ID. This would explain why Apple are saying no 'sensitive' information (passwords?) was taken.
This rings so true from what I took away from living in another ex-communist country (Czech Republic.)

Very few people understand that for most people life was pretty good in Soviet times.

It just turned out people preferred the outcome of a having a little less comfort and a bit more progress, which is what really drove the Soviet collapse in the end.

It was kept propped up by purposefully (and often viciously) keeping the populace ignorant of the progress made beyond it's borders, but in the end the allure of the shiny and new behind the curtain won.
There is still hope. And we need support. Please help our brothers.
I just finished reading City of Fortune (http://www.amazon.com/gp/product/1400068207/ref=pe_180000_31...), and this is closer to the truth - the rise of the Ottomans, the fact that Christian Europe couldn't get its act together after the debacle that was the 4th Crusade, etc etc - at one point, Venice was almost single-handedly fighting the Ottomans.
I think this page may predate archive.org, and that it may have lived at a different location on his site. I remember it as part of the ucspi documentation, which (I think) just barely predates tinydns.
...and I was expecting an article about buying drugs through BitCoins. Oh well.
This may explain some strange occurrences I had yesterday.

Starting at 7am, I received an Apple ID password reset request every 4 hours and 19 minutes, ending last night at midnight.

This Apple ID is also the login for my personal developer account (several years old). My developers IDs used for work never received a password reset request.
Headline: "the anti-virus age is over"

Final line of article: "Now don’t get me wrong, AV still has its place in the security world ... However, it’s no longer much more than a filter for the most basic attacks."

So... not really over at all. In fact, escalated.
Dull perhaps, but spurious? As someone who writes SQL in a couple of dialects, these are the sort of things that I need to keep in mind.
Purchases of developer memberships are handled through Apple's online store. And that is still up.
> ...but credit-cards are the big one you have to keep in plaintext. If you want to bill the card without asking for the number to be reentered, there's no way to avoid storing the number and expiration date.

Not necessarily, if you're using a payment gateway that supports token billing...
How is that smugness working out for you ? Windows users are fewer than iOS users. Would you now compare Windows phones to Ferraris by using the same analogy ?
I have a lot of practical stuff i've made. The fact is that 3d modeling with any precision is time consuming. The learning curve is STEEP, and open source modeling software is rarely intuitive, e.g. blender is absurdly complex. That is the thing holding back buyers. Modeling stuff is sketchup is great, but getting the measurements as you go requires lots of redundant measuring. Give me an intuitive, free solid-works clone and there will be an audience.
Without describing in what way it's "typical" (I presume in a bad way), this comment isn't helpful at all.
Author here.

This was written a year ago. Keep in mind that I'm not saying AV isn't useful - it is in some situations. However, I'm of the opinion that the "AV age", where AV companies battle it out to innovate and beat the competition, is pretty much over. It's not useful against any determined attacker, and it's ridiculously easy to bypass AV simply by changing a few bytes here or there, or by running it through whatever random packer you found on some forum.

Yes, general purpose computing does necessitate some form of filtering, but there are much better solutions than AV in most cases. Mobile platforms like iOS / Android can be locked down quite well - install what you want and then lock installations. Desktop OSes like Windows, Linux and OS X are harder to deal with, but there are still protective measures that can be taken, such as whitelisting, that are more effective than any AV.
I think the easiest way to figure it out is to try and make your software in your spare time. If you can make progress every day, you'll be fine. An objective measurement of your ability only becomes critical if you quit your job to work on your startup fulltime and have a hard deadline. Don't put yourself in that position.
UPDATE-8 (22-07-13): 0400hrs PST
Kooh News reports that the committee coordinating rescue attempts from Iran, says that although ATP believes the climbers are no more alive, the rescue operation will be abandoned only after discussion with climbers present on ground.

Currently, Afshin Saadi, with a porter, is in C3, whereas Ramin Shojaei is at K2 Base Camp.
The government is not subsidizing diesels because it's yet another combustion engine. Other than the quoted "industry representatives" want you to believe, diesels produce plenty of carcinogenic, extremely difficult to filter particles. If anything, the government should be taxing these cars 10+ grand for the extra costs they will incur in the health system down the road.
There was some discussion in previous threads about how their systems seem (like many others, to be fair) to be a taped-together mess of old perl scripts and server-side includes and CMSs and who knows what else. So they're probably trying to come back online with a cut-down version that presents a smaller attack surface and contains only components that have been vetted in the last 10 years, which is overall not a bad idea.
I'm pretty sure that, despite what the article says, Formlabs' 3D printer is based on stereolithography and not any forum of laser sintering. (Laser sintering involves using a laser to fuse plastic granules, whereas stereolithography uses a laser to selectively polymerise a vat of photopolymer.) It looks like most of the 3D Systems printers are also based on photopolymerisation rather than SLS, though they do apparently own patents in that area.
The anti-virus age was the era when AV companies battled it out to innovate and keep ahead of the competition. That era is, in my opinion, over.
>>I think I just heard many system administrators collectively clutching their chests in pain.

I was trained to do this by reflex. Anytime you expose anything on your network, not matter what it is, without some layer of security between you and the internet, you're asking for trouble.

Whether this is a warranted reaction or not, I don't know. I'm pretty sure its from spending too much time hanging out with hackers and sys admins. It's just locked in my brain not to doing something like this - ever.
1 US mpg = 1.2 UK mpg

and the EU method for calculating those numbers is, so I hear, more lenient than its US equivalent, so those numbers sound more impressive than they really are.
I started using it after the recent prism fiasco (taught my wife how to use it).

It's ok, adds a few extra clicks to each email. The main problem is I haven't found a good solution for reading email on my iPhone.
I think you missed the sarcasm and irony that was fairly evident in his comment. However, perhaps we can expect a user who can gem install something to have an acceptable level of awareness of the security implications of such a tool?
A $45 Android tablet
I suspect that's probably due to C++ being a lower-level language than Python, not due to any inherent problems with OO programming.

BTW, Python describes itself as object oriented, so it illustrates my point that OO and functional are not at odds.
Credit cards don't need to be kept in plaintext. I'm a big supporter of having the frontend encrypt the data using a public key. The private key is stored only on backend servers.

So now if something needs to kick off a billing process the frontend sends a signal using a defined service method (preferably something so simple that it is secure) and then the backend goes off and decrypts the data followed by doing the actual processing required.

If the frontend and backend are on two seperate networks, and the frontend is only allowed to talk over TCP/IP port 5930 for example to the backend, now you have reduced your attack surface tremendously while making customer data more secure.
Part of the IQ test includes vocabulary, and it's not that much of a leap to say that more highly-educated people have a broader, deeper vocabulary, even when controlled for cultural effects. A smaller vocabulary will give you a lower IQ. There are likely to be other factors affected by exposure to wider experiences than you might not get when impoverished; for example, in general, the more you handle numbers, the better you get at manipulating them.
Access to an API to get certificates from a different server one at a time is different thing from having the actual private signing key.
Yep, I totally agree. From my (a technical co-founder) point of view - the JFDI approach is a master factor here. If you don't know how to do something - that's good! Take the second step and get to know how you can do it, then double check how to do it right and the just do it. Plus: take the responsibility for what you've done.
I think 3D printing will really take off when startups develop ways to make them useful, not faster. People just don't have a good use case for them today, if they had, they'd simply wait for the machines to slowly churn out what they need.

For instance, when people can print out custom handset chassis and form factors to go with easily swappable electronic internals. Custom input devices. The printable stuff will have to integrate with electronics (or print them anew) as to make it useful in order for it to outgrow the current market of prototyping enthusiasts.

I'd really like though to be able to print a paperback for reading and then tear it down in the machine when I'm done so the material can be fully reused. That's the ebook revolution for me.

Actually, I agree with you. When 3D gets fast to the point of instantaneous and cheap and with fully reusable material, we could have really interesting things. Imagine a 'physical' computer. I issue some command in bash, and a little physical representation of a file pops out from my workstation, and it has built in sensors and input so I can interact back with my workstation by interacting with it. I could have actual printed pseudo-ebook-readers tied up as tabs in my web browser.
People don't see much demand in 3D printing is because we are accustomed to mass manufacturing as the way of life for consuming goods. Just like the Web created the "long tail" demand for goods and services, customized manufacturing will open the doors for highly personalized goods. Imagine printing a helmet exactly for your head or printing very comfortable Car seat for your body shape. There will not be the shortage of demand but because the technology is so new there is definitely a shortage in imagination for its potential uses.
> "give them support so that whatever differences they have ... they would still be cherished"

This is so important, even for kids who don't have really obvious differentiating factors.

My wife and I are both educated, white, middle-class background, able-bodied, and so on. But that doesn't make our son "normal" or "average"; he's still different from every other kid. Part of supporting him is encouraging him to embrace differences, and encouraging other kids to do the same.
Annoyance: on an iPhone the mobile site has some sort of custom scrolling hysteresis which makes it behave differently from any other mobile site. The difference is enough to make the site unpleasant to use.
#Support
`rebuilding our entire database`. So the database was... destroyed...?
Note that I wrote this article a year ago, when the lowest-possible-price outsourcing market was rampant in India. These days it's more common in China and Sri Lanka. Yes, security specialists can come from India, China, Sri Lanka, or any country for that matter, and I wouldn't suggest otherwise.

My point was that programmer salaries in India were significantly low enough at the time to make it at least ten-fold cheaper to hire developers over there. These days it's a different country (or set of countries) but the point still stands.
Not quite seeing the problem when you can use the secure flag to enable it on only https http://en.wikipedia.org/wiki/HTTP_cookie#Secure_and_HttpOnly
Heh.

You don't think "Think of the Children" is part of the "Women need to be controlled" category? This is also where we get the notion that there is a magical mystical maternal mojo.

Women are resources, not players.
Anyone who has my name can find my email address with a simple Google search. My mailing address is on all kinds of public records.
It's interesting that the spying and the Bostom bombings are mentioned in one breath. How come all that spying did not identify the bombers before the attack?

With the current foreign policies terrorist attacks are as inevitable as car accidents (albeit far less dangerous).

We accepted car accidents (I do not see a war on driving). And since foreign policy remains largely unchanged it seems we have accepted terrorism as well.

The terrorists have achieved their goal anyway. They instilled fear in the US populous, and set us all on a path to willingly give away our liberties.

We should look at Norway, which kept its cool after the 2011 attacks; that is strong, confident reaction. Ours is one of cowardice; with lemmings like Hayden repeating the party line ad nauseum.
Windows is full of exploits that are enabled by default. Plugging a usb stick into your computer could automatically install a virus. Or a bug in flash or java could expose your computer.
I understand everyone's frustrations with this, and the fact that Apple haven't been immediately clear on exactly what happened. As a developer, I too am alarmed by what has happened.

But these things are complex, and it takes time (i.e. a few days) to fully and properly evaluate what has happened and what information leaks/security breaches have occurred.

Let's give this a reasonable amount of time, and only then pass judgement on their handling of the case.

I don't want to appear like an Apple apologist - and maybe it is a serious fault on their side. But in fairness I do think it's reasonable we give them time to evaluate & respond appropriately.
I'm glad that my parents never pushed for me to be "normal".
Certainly, but an unrestricted code signing certificate would be quite useful too (until they are revoked)