skysight-inc/HackerNews huggingface dataset:
Maybe they phoned for a ransom after breaking in?

Your post is pure speculation and depends heavily on what Apple means by 'sensitive'. I'm guessing that Apple means your CC numbers, certs, shared keys, etc.

Possibly also your support tickets, your bank numbers, etc.

As for how encryption works, I'd suggest Applied Cryptography by Scheiner. I think there's a problem in that book about Bob keeping speculative posts to Alice secret from Eve. After reading that book, I'd suggest applying for a job at Apple to give you first hand knowledge of what they're actually doing and then you could make an informed judgement about what may or may not have been exposed.
At first glance it looks like ngrok supports Windows without Ruby or Python, which I really appreciate. Not sure why that market (Win w/o Ruby/Python) has been completely ignored so far. But it seems like a strong selling point. Thanks guys! signup
My Utility Function
New Type of Neutrino Flip that Could Explain the Existence of Matter Confirmed
You wouldn't get on HN with that :-)

It might be more useful in cases where you want to have multiple callbacks, and don't know how many at compile time. I would still try and avoid it, though.

(And aside, I would make global_ptr static. That makes it invisible from outside its compilation unit. Even more pedantic: callback should be a void function)
Plenty of Apple and tech-related news sites have posted the email:

http://9to5mac.com/2013/07/21/apple-explains-developer-cente...

http://techcrunch.com/2013/07/21/apple-confirms-that-the-dev...

http://allthingsd.com/20130721/apple-developer-center-was-ha...
Transparency? After 3 days? Transparency would be telling us right away (with an update as soon as they know more). They should also tell us what kind of info was taken and what does sensitive information mean to them since they don't seem to be sure about that.

> Sensitive personal information was encrypted and cannot be accessed, however, we have not been able to rule out the possibility that some developers’ names, mailing addresses, and/or email addresses may have been accessed.

Edit: and seriously, what does this "updating our server software, and rebuilding our entire database" mean?
Like China, the socialist engine-room of the world? No concept of a work ethic there?
I just wanted to point out that this is a UK family, talking to the UK press - so their attitudes (IMHO) may not be being interpreted correctly in 'American'. (I'm from the UK, but have lived in NYC for over a decade).

I strongly doubt they're pressuring their child to be normal : Eccentricity and 'being interesting' are cherished qualities in the UK. I'm guessing that what they're saying is that they're making sure he has 'space' so that when he wants to do ordinary stuff, and that there's no-one whispering in his ear that he needn't be interesting in playing football (soccer) because he's a genius with a higher calling.

Also, maybe the art thing is just a childhood phase, and that's Ok by them too.

From what I see from the people around me in my office, attitudes to children (and their education, aspirations, etc) are very different US vs UK.
You can install .ipa files easily via http and mobilesafari, and enterprise certs are valid for ALL UDIDs :)

So (again, assuming no revocation), you could set up a web based alternative app store, or re-sign cracked apps/games, or just enjoy being able to run code on your own devices (and distribute to others without going through the app store) without maintaining the $99/year subscription, or you could start linking/redirecting unsuspecting web browsing users to install malicious apps (would only need 1 confirm click)
> As others pointed out, Plan 9 is much closer to a proper realization of the everything is a file design philosophy. Unsurprising, since it was grown entirely within Bell Labs under the supervision of the original Unix team. It's unfortunate it hasn't reached a point of being ready for mass adoption.

I don't think it's unfortunate, having used it for a month straight I'm not convinced at all it's the right thing, and in fact, is exactly the opposite direction from where I think we should be going (as far away from the filesystem as possible).
I hope you were using good encryption Apple. This guy cracked 400,000 md5 hashed passwords: http://www.youtube.com/watch?v=0WPny7wk960 He says even with password salts, it could be done.
We've been making this prediction for decades, and it still hasn't arrived. I think the problem is that as our software tools become more capable, we tackle larger projects. As time goes on we'll be able to solve a greater number of problems by 'defin[ing] your goal, and that's about it', but we won't be able to solve a larger proportion of problems.

That said, I still see a lot of potential for this sort of programming. One of my side projects is an attempt to bring intentional programming to embedded hardware design.
I'll bite (woe is me, poor karma...)

HN is all about showing people how extraordinary you are (or at least, how extraordinary you think you are). Normal is equated with a state of stasis that needs to be overcome (or, as the cool kids/rockstars/codeninjas[sic] call it, "disrupted"). The same HN regularly upvotes and heavily "discusses" stories about people who were "screwed over by the normal [education] system", who were too special without other people realising.

HN is about getting rich, or at least richer than average (or, as the boring average-Joe lives are sometimes called, normal), about creating, sticking out, being the one-in-a-million, yes-you-can wholesale embodiment of the American Dream(tm), according to which we will all one day be rich and famous if we only work hard enough with as little interference as possible (regulation is a horror, HORROR, I tell you) from state, ethics or, worse even, "average" users, the normal users very much akin to imbeciles.

Is it a surprise many here do not want (or cannot?) understand why aspiring to be "normal" and to fit in might be a diserable thing for other people?
I see up and down arrows, and I think you'll find my current karma level to be particularly relevant.
Maybe, even with that, they wouldn't be persistent enough or would be too easily traceable to a source, or blockable? Or maybe js doesn't allow the level of access that flash or java might, so the ROI isn't worth it.

Although the case might be different for browser plugins (I don't know), it might be more effective to poison one of those than, say, run something directly in a browser.
If it comes rooted / can be rooted, then an android device can install Google Play and everything by mimicking a Galaxy Nexus (or any common device) by editing build.prop. There are lots of tutorials online about this topic.

http://highonandroid.com/android-apps/how-to-install-google-...
What neutrinos might tell us about the big bang
Can you provide an example of anything like that being 3d printed and actually used? The only use case I currently see for 3d printing is prototyping and very, very simple fixes(e.g. clips for chip bags). Sure there's various types out there used in one off manufacturing scenarios, but what home user needs anything like that?

Traditional manufacturing processes produce higher quality parts and are more cost effective for most things you'd use a general purpose 3d printer for.
> What happened to the 10,000 hour rule and all that saying that there are no real instant successes?

Just because some moron creates a heuristic that crudely models reality doesn't mean that nature has to follow that heuristic.
I've found this story a bit odd because if a child even just a few years older made paintings like these, they would maybe win a prize, but certainly not sell for $70,000 a piece.
"Developing enough empathy for consumers is definitely necessary, but also really difficult to do. Design thinking is the best approach to solving that problem I've encountered so far, but testing is still a huge component."

I guess we agree then.
It doesn't have Google apps because they probably didn't go through Google's testing and licensing program, not because of some technical incompatibility.

If you're going to go through the hassle of getting some EOL'd device to install an unofficial hacked-up port of Android, it would be much less painful to just side-load the Play Store app (or get Amazon's market app) on this $45 tablet.
I'm mainly complaining about the delay in telling us anything.

What I would love is an update whenever they suspect an intruder has accessed sensitive information. Many websites like Dropbox and last.fm do have a server status where they tell us if they have any planned maintenance or just general status of the server. Why can't Apple and the rest of the big companies do that?

Also, Apple first said it was just regular maintenance. I'm just confused as to why they said that instead of telling us the truth.
Your phrasing is frustratingly confrontational.

So was the phrasing of the post I responded to. He didn't even raise the question of whether the mother's drinking might have benefits (such as the one you cite) which might outweigh the risk the alcohol poses to the child. He just said, "oh, it's not really all that dangerous". That, IMO, is not a justifiable mindset for a parent.

If there is no compensating benefit, then IMO a parent should not incur any avoidable risk to a child. There must always be a reason for incurring the risk, and it must be a stronger reason than "well, I like drinking". If the mother's stress level would really be increased that much by not drinking, then that could be a valid reason. (Though I would tend to be skeptical of such a claim; is abstaining from alcohol, for a person who is not an alcoholic, really that hard, hard enough to outweigh the risk to the child's health?)
Heroku was killing the request at 30 seconds, so it worked locally, but failed after deploy.
If anyone thinks this is the complete truth, well be prepared to be fooled many times more. I mean the thing is down for 3 days now. This must be a huge breach.
The World’s Largest Data Centers
It is possible though that this kid might not relate to the kids in the local neighborhood that well. With the Internet now though I think this starts to become less of a problem, if you are an outlier you can now relate to like minded outliers online or at interest based meet ups.
>> It's about a security breach.

Well, you're very much mistaken. It's not about a security breach at all. If you read carefully, you'll notice it's merely about a "security threat".

:)
Ferrari is quite an outlier, though.

In any case, super-luxury cars are more and more being built by robots anyway...
names, email adresses, and mailing addresses aren't particularly sensitive. These are all pretty easy to get for most people without hacking anything.
What worked then?
Show HN: Any Lorem (built during Dev Bootcamp hackathon today)
Where do you go instead?
Shadenfreude? Do you mean something other than just enjoying their misfortune?

And 'taking responsibility' means solving the problem. They have told us what they are dealing with. What more do you want from them?
I would like to be able to take an older smartphone and use it as a smartcard-like device but with a full-fledged computer on it. For example, being able to use a Motorola Droid with a USB cable as a password manager. Keep the key secured on the SIM card. Use the touchscreen to enter the unlock password, and choose a password off a list. Send the password to a computer over USB by emulating a keyboard, or a custom driver that creates a secure channel to a specific app for authentication.
> A loophole is that in-person charges do not use the verification code, so someone could use the saved information to fabricate physical cards, and try to use them at stores (the U.S. doesn't typically use either chipped or PIN-protected credit cards, so cloning a card from the number is relatively easy, prevented more or less only by the heuristic fraud-detection algorithms).

This is untrue. The magnetic stripe contains significantly more data than what is printed on the card and much of that Discretionary Data (DD) is used during authorization of 'card-present' transactions.
Summer Night Product Person Party and More
Most banks provide the ability to get a billing token to avoid having to store card details at all. In order to do recurring billing you only need to store the token and the CVV on the back.
No. That tells us nothing about how big the breach is. Only how much effort it is taking for them to be confident that they've properly patched it.
Brzezinski: Will be possible to assert continuous surveillance over everyone
Manage your Apple ID/password/security questions here: https://appleid.apple.com
I'm imagining bank account numbers over CC info/passwords was the sensitive part.
You mean, besides providing a standard way to access hardware that ARM systems still don't have to this day?
How are names, mailing addresses, and email addresses sensitive personal information?

I would imagine that for most of the people signed up, it wouldn't be that hard to track down their name and email just from knowing the name of their app.
A little more info from TC:
http://techcrunch.com/2013/07/21/apple-confirms-that-the-dev...

Update — Just got off the phone with an Apple rep, who confirmed a bit more:

- The hack only affected developer accounts; standard iTunes accounts were not compromised

- Credit card data was not compromised

- They waited three days to alert developers because they were trying to figure out exactly what data was exposed

- There is no time table yet for when the Dev Center will return
I'm not familiar with the side effects of steroids, etc, but nobody tells pregnant women that they shouldn't eat any salt, any fat, any carbs, etc. Nobody freaked out at a restaurant when my wife ordered a nice ribeye or a piece of chocolate cake.
I got one similar to this using points from my credit card, I checked online, many similar ones for around $50 these days. The one I got was a profound piece of crap, I fooled around with it a little, then disassembled it for fun. Honestly, destroying it was the most enjoyment I got from it.
How many PCs ship with it?
"The intruder had good intent with trying to "secure" our personal information. But despite nothing being hacked, as it was only a 'threat', we still need to tear down and build up the system from scratch again. In the spirit of transparency we've waited 72 hours before giving you this nonsense bullshit. Please note that some (that is all) of you will from now on get regular viagra offerings in cyrillic. Good for you!"
When it's the bank that issues you the token, the buck stops there. The bank has the card details anyway.
Formlabs is definitely not laser sintering.
I'm sure you knew that Social Work is low paid before you invested in such a degree. While it's a valuable field hypothetically, who actually hires a social work master degree person -- no company that actually expects a profit. As a result the market doesn't value such qualifications. Just sayin'. With software, engineers are hired to add value to a company which means they can make more money, which is kind of the point of a company in the first place. There's also a supply and demand issue. Low demand for Social Work and an oversupply. Social Work is almost as low-valued as an English literature degree. I'm not hating on Social Work, but your plight is certainly no surprise and elicits little sympathy as social work has never been a high demand profession but folks still spend tens of thousands of dollars in schooling and wonder why they aren't getting hired.
Okay, I'll bite.

One in obvious production would be dental fixtures and fillings--there are already CNC devices available.

Another would be sex toys, or for auto shops.
You can utilize Mechanical Turk to gain valuable insight into your startup idea.

If you have a small prototype in Rails, consider using my gem Turkee ( https://www.github.com/aantix/turkee ). There's a couple of helper methods that make doing usability surveys with Rails and Mechanical Turk drop dead easy.
You shouldn't get your news from unions. Unions don't like walmart because it's not a union shop, and it's large so make a nice target.

Walmart itself is no different from any other large retailer.
How? They took it offline.
Will these techniques allow for the eventual control over things like grain and annealing, or is this technique always going to be limited to the very basics of metal deposition?
> And security breaches take time (> 2 days) to properly investigate and report.

We can see that they did their job correctly by the overwhelming amount of details they provided us with.
yeah, this seemed quite a decent approach from the family to me (english). the idea that they're not being supportive of their kid seems way off the mark. they're just trying to find the right balance, as far as i can see.

i wonder how bad we are at interpreting nuance in american media? maybe honey boo boo isn't a parenting guide?
"I'm pretty sure."

No, they likely took the portal down as soon as they knew there was a breach. Highly unlikely they left it up while they investigated, and it takes time to figure out what happened and how much information was taken.

What motivation would there be to wait anyways?
There also is the bank account information for apple created payments to the developers... that could be part of the compromised items.
So my wife was a summer associate at a law firm while she was pregnant. The difference between having a drink with dinner and not drinking at all was the difference between being a regular summer associate, interviewing for a job, and "the pregnant one."

In our society, where drinking is an important social rite, not drinking makes you "the other" and we're tremendously eager to force women into that position based on little to no evidence that it actually has any impact on children at low levels. Even the justifications that are possible ("doctors say not to do it at all because women might drink too much") treat women like children instead of adults who are capable of evaluating truthful information from their doctors and reaching reasoned conclusions about their behavior.
Farmers markets
Of course, the follow-up question; in what way is 3D printing superior to CNC dental fixture machines that already exist? Said CNC machines are already fast and small enough to fit into any dental practice.
Some info on enterprise adhoc ocsp services are here: http://stackoverflow.com/questions/9216485/how-to-manage-ent...
Been using forward since they were showoff, since it was a beta, love it.
Read the Lean Startup. Then build something. Who cares if you don't have the answers to problems you don't yet have? Startups are businesses first. If you make a product people want, even if it's badly engineered, that's a much better situation than being an expert hacker with an awesomely engineered product that nobody wants. If you have traction, you can hire people better than you to fill in the gaps.

Besides, nobody gives a shit about algorithms. ;)
Ever since I got exposed to Haskell, I've been wondering why RBDMSes--notionally the things which should have the strongest type-systems of all--have the moral equivalent of nullable pointers, rather than an Option sum-type. There are many cases in the use of SQL queries where weird inconsistencies with NULL could be solved by just distinguishing between Nothing, Just Nothing, Just Just Nothing, etc.
Yes, when they discovered it. We don't know for how long they have actually been compromised. Also, imagine if it happens again and is not discovered.
My argument was that you were impressed by the press-release. Your opinion of Apple was improved such that you made a post in public expressing your admiration of them for telling you that they'd lost some data that you'd entrusted to them.

This shouldn't happen.

When my 4yr old tells me he did something "wrong" without any prompting (eg. "Dad, I broke your phone"), I'm impressed because he didn't have to out himself, but did so because it was the right thing to do.

Large corporations rarely think in terms of right and wrong... they have a duty to their shareholders, and nobody else. As far as their shareholders are concerned, they shouldn't release damaging information unless not doing so could potentially negatively impact profits down the line. So when Apple tells you they messed up, they're only doing so because they're worried you might find out some other way, which would be worse for them. They aren't doing it out of the kindness of their hearts.

Now if there were a law requiring the disclosure of incidents such as this when personal information is compromised, then Apple wouldn't have a choice in the matter, and they wouldn't be able to fool people like you into thinking they're awesome when they just lost your data through negligence.

> It's entirely possible that this is a massive oversight by Apple and they've been extremely negligent in their security policies.

They just said they'll be updating their software. Why would they do that if they didn't think that that would make the data safer. It's pretty much an admission that they chose not to update the software earlier ie. someone made a decision to use outdated software.
Yes. This.

Personal anecdatum: when I was 5 or 6, I beat my father in a game of chess. That was the last time he ever played me, and the last game of chess I was allowed to play for a number of years (this was about the time Bobby Fischer was getting a lot of notoriety as a maladjusted prodigy). It still rankles after 60 years.
Learn statistics.
What use would changing passwords be if passwords weren't stolen?

If you think having your email address out there means you are at higher risk of being attacked, I've got news for you...
Curious to know, other than SQL, are there any other examples of successful technologies that achieve this intentional, goal-driven programming?
I agree with you partially, and upvoted you, but part of what makes HN great is that it makes me feel normal to be ultra motivated.

Maybe some people make pompous comments, or complain about first world/high class problems, but it is the only place I have found, on the net or otherwise which the ultra motivated outweigh those seeking to fit in.
> Edit: and seriously, what does this "updating our server software, and rebuilding our entire database" mean?

my WAG: paving systems; reinstalling the server OS; updating packages; restoring db from known clean backup; replaying logs/binlogs that are known clean?

That would be my guess.
> The prevailing form of programming today, object orientation, is generally hostile to data. Its focus on behavior wraps up data in access methods, and wraps up collections of data even more tightly. In the mathematical world, data just is, it has no behavior, yet the rigors of C++ or Java require developers to worry about how it is accessed.

Er...I thought one of the underlying parts of OOP was creating a domain for data, such that derivable attributes and relationships were encapsulated in the data model? The way that R treats data as a first-class citizen is nice for some statistical modeling, but doesn't seem robust enough for all the other ways that we need to organize and munge data.
Apple should have kept us informed from day one.

But, in their defense it may take days to ascertain what exactly happened.

Once a system is compromised it's nearly impossible to trust anything about it. Auditing the logs, and reviewing the code, crypto, and the mix of platforms they're using (see https://news.ycombinator.com/item?id=6078854) in order to understand what data could be accessed and fix all vulnerabilities is not an easy task.

The PlayStation store was not down for such a long time without reason.