skysight-inc/HackerNews huggingface dataset:
Why you shouldn't use a web framework to build your next API
I'm loving elasticsearch. Never heard about it until now. Thanks!
I think it's fair. You are planning to leave, after all. You are actively working toward it. People hiring want to find someone they can rely on. Not someone who is striving to leave as soon as possible (from their perspective).

> Why is that not enough?

Because they can find someone with the same qualifications that will also bring that passion.
Why is the Swiss system superior?
Giving Apple a break? Just another layer of security? That's not how Apple describes it:

http://support.apple.com/kb/HT5949?viewlocale=en_US

And selling a stolen iPhone on eBay does not need a password or a fingerprint, a jailbreak is enough …
His website itself is interesting - check out the "Random Averages" post (http://pmsol3.wordpress.com/2011/02/12/strange-averages/):

- the average Golden Age male actor looks similar to his modern-day counterpart, maybe a bit older going by the receding hairline

- the Golden Age actress looks somewhat different from the modern - rounder eyes, somehow? Was that the preferred look for actresses of the era? (they doesn't look like averages, though...)

- the average porn actress is blonder than the celeb

Relatedly, it seems quite natural for average faces to be attractive - all the blemishes and asymmetries and extremes get evened out, leaving a very neutral look that most people don't have. Extremes are usually not attractive, after all.
I think you're missing the biggest security hole with passcodes: whenever someone on the subway unlocks their phone, I need to consciously look away or I'll risk inadvertently committing their code to memory. It makes me seriously uncomfortable.

I'll hazard a guess that abuse by acquaintances, intimate or casual, is the most common risk to smartphone users, and that the fingerprint is an incredible improvement over the status quo.
Porting Canabalt and Super Crate Box to C64
...2400dpi image of the person's finger...

Note: Finger Print, not finger.

Here, have a drink out of this freshly washed glass... no, don't worry, I'll wash the glass for you later. :)

On the last second point regarding access to a device, I could take a week to make up the fake print during which it won't matter if I have it or not. Since your print isn't changing I just need 5 minutes with your device at any point in the future.
As I gain experience over time, it begins to appears to me that free software is the only long-term viable option.

I think this is perfectly reasonable, after getting burned for the umpteenth time by proprietary software vendors. (Or vicariously discovering that yes other people have indeed been burned yet again)
Be glad you didn't bring family with you. Growing up I had a number of friends from South America and the Philippines whose parents came over and gotten their green cards. The children had to wait though, and when they all turned 18 the process started over from scratch for them.

Imagine living here since you were 7, 8, 9 years old and spending your whole life here not knowing anyone in your home country and not knowing if you could stay here either.
Some of them had to leave. One of my friends took until he was 31 to get his green card and the first thing he did when he got it was get a job overseas. Most of them spent a number of years here in some sort of legal limbo, with some living here outright illegally. The Brazilians among them especially had to arrange marriages to be able to stay.

These are all the hardest-working people that I know, because they had to be to stay. It's really shameful how we treat you all here.
Why not sails.js?
How to fake fingerprints?
I've written a lot of code using select and poll, and I don't think it's ever come out "simpler and easier to follow" than code which just used blocking I/O.
Ok, I see, but most of those are not considered "western countries" as per Huntington, as they are not comparable in economic development, HDI, etc. Apple and oranges.

I was referring to comparable nations, primarily to the anglo-saxon countries on the above list really comparable to the US. The U.S. has 4x more murders than the average of the western countries above. That is 4x, food for thought.
Uh, since "people not claimed by any country" is essentially an empty set, I don't see a reason to avoid using this term for it's more usual meaning of "people not a citizen of the country with the law to which we're referring".
I was just talking to my mom about 3D printers on Friday, trying to explain the processes of the different types, and how the most accurate ones like this (lasers, laser-sensitive liquid, directed high precision curing) are the best but also the most expensive. That conversation would have gone much differently had I seen this project a few days ago.

One hundred dollars is a major game changer. I've been somewhat reserved on the 3D printing hype because of a lack of necessity for most people, and a lack of precision/usefulness at the lower price range. This can change all of that. For one hundred dollars you no longer have to worry about longer term entertainment value or interest for children. It's the cost of a couple of video games. And for project work, you don't have to worry about needing it for multiple projects. At $100 a single use justifies the cost many times over. I'm looking into spending $400 right now on a single 3D print for a small product I'm working on.

I love rewarding ingenuity.
BACKED!
The ultimate Japan Horse Game
I actually experimented a while ago by running a long-running Twisted-based daemon on top of PyPy to see if I could squeeze more speed out. PyPy did indeed vastly increase the speed versus the plain Python version, but once I discovered that Twisted was using select/poll by default and switched it to epoll, my performance issues with the original CPython version were gone (and PyPy couldn't use Twisted's epoll at the time).

Another major issue was that running the daemon under PyPy used about 5 times the memory that the CPython version did. This was a really old version of PyPy, though, so they have probably fixed some of this memory greediness.
Yes. Please drop the hand-rolled crypto you have now and use libsodium or rbnacl.
Show HN: Solid, a scripting language with a tiny VM
What is the resolution of the fingerprint image stored in biometric passport, i.e., the kind of passport you need to enter the US?

Biometric passports store an actual fingerprint image and not just a hash like the iPhone 5S. So if the resolution was high enough, everyone with access to a biometric passport – for example by scanning people carrying such passports around at an airport – could forge fingerprints …
I'm not sure I follow...how did moot.it end?
> The $5 dollar wrench technique

I prefer Schneier's original rubber hose technique. Leaves fewer broken bones and bruises, but just as effective.
> Most security experts that I know agree that if an intruder has physical access to a device, it can be considered compromised because it is just a matter of time.

Anyone who says this is not a security expert. That hasn't been true since full disk encryption became available. A properly encrypted device is a brick if stolen, which is the only reason to have full disk encryption in the first place.
I got a 99. Color deficient designers unite!
As a happy non-citizen of the U.S., I think the term is acceptable and succinct.
I think they're missing the point. The passcode on an iPhone defends against other people in your environment - family members, coworkers, roommates - getting your information opportunistically. It doesn't defend against hackers, the government, or even slightly savvy thieves.

Also, if a fingerprint sensor is significantly easier to use, and in practice will deter a class of privacy violations, it could increase overall security. This is a question you can only answer by looking how people behave, not solely with an analysis of the technology.

The fingerprint sensor worries me more that it records biometric information at all. It's one thing to leave fingerprints all around your environment, but there is now the potential to steal your biometrics over the internet. The device supposedly hashes the data derived from your fingerprint, presumably with a hardware-based secret, but I worry someone will find a way around that. (EDIT: maybe this is physically impossible; can someone provide details?)

Also, the issues that CCC discusses about how fingerprint unlocking can be coerced are important. Many law enforcement organizations now have devices that can scan smartphone data, which is bad enough, but at least the use of those devices are controlled. A fingerprint sensor now allows a cop to handcuff someone, jam his or her finger onto the phone, and then to (for instance) delete an incriminating video.

Likewise anyone else willing to use force. Might become the next schoolyard amusement for bullies, if your kid has a smartphone.
The persons with the power and authority to enact change are precisely the ones who would lose power and authority in the doing. So it will not happen, not by working within the system. Rallies and petitions and the like are wholly useless.
We're not talking about the same thing. I'm not suggesting that Golang would be better off with fully evented I/O. In fact, the comment I wrote that you replied to agrees with what you just said.
i guess in sinclair's time it would have been the letter pages of the press where people would say how the work was nothing but hype, or plagiarism, or something much less important than whatever it was being compared to.

you've come so far, hn.
How Would An Entrepreneur Attack Your Business?
Also worth noting that unlike PINs, the fingerprint can never be changed.
Any person who used their company email to sign up to linkedin and then leaked the password by giving it to linkedin should be sued by the company that employs them for negligence. They are the same people who re-use their passwords and write them on post-it notes.

Frankly I have no sympathy for them at all. As you can probably tell.
Then create a detailed model using said high resolution fingerprint. If someone cares enough about your phone to do that, they can probably break into it by other means anyway (jail break, brute force passcode, etc)
I agree. I respect Stallman and the FSF, and I think certain parts of their message are important, but I prefer to keep my politics and my software separate. IMO, this is one of the reasons people really like FreeBSD -- there's no political agenda behind it, just people who want to build and use great software.

As for this article, I'm curious to know why (or if) anyone would donate money to the FSF to be used for lobbying rather than giving it to an established lobbying organization like the EFF or ACLU.
No, my internship was also in a data scientist type role. I was thinking of data science as a sub-specialty of software engineering. But I do expect that any internship, even if not in the exact role you are looking for, would help your employability.
>> upward mobility has been regressing in the US for a while now

> Do you have a source for this?

http://www.nytimes.com/2012/01/05/us/harder-for-americans-to...

This one doesn't talk very explicitly about the time trend, but it mentions studies conducted in different decades finding progressively higher levels of correlation between parents' and children's incomes; unclear if that's due to random chance or an actual trend.
Automation is inevitable. The question is whether or not society is ready to redistribute the wealth created by it.

http://www.metafilter.com/119592/Distribution-is-the-core-of...
Read support was dropped for only dBase II. Write support was dropped for all dBase formats.
I think the only way would be to make a browser extension available for those who care enough to use. Fundamentally, anything on a web page belongs to the server that sent that web page, and if that server is compromised so is the browser window.
This is true, but this is more down to people not covering their phone. I tend to shield my phone to the point where it would be obvious to me if someone were trying to see my passcode.

I think TouchID provides good security against 'casual attacks' - those by people who see you use your phone a lot, people who aren't going to put much effort into an 'attack', just try and post things on your Facebook account while you're out of the room.

However, in the case of 'real' security, where a person is being targeted for their data, or anything like that, I think it would provide less security.
Here's an idea that would improve security in conjunction with the new sensor:

Create a random pattern of ridges and, using the technique outlined in the OP, build a latex key. Attach that to your keychain (in some sort of case to improve durability, maybe). Then, enjoy 2-factor auth, between the phone's pass code and the synthetic fingerprint.
Most people outside of this community are not using disk encryption.

With that said and the caveat that I am not an encryption expert myself: given an infinite amount of computing power and an infinite amount of time, can full disk encryption not be broken? If so, then it is just a question of computing power and time, not of whether it is possible to get to the data.
Actually, its not okay. The reason is: fingerprints are not a valid protection against government intrusion.

A password is the only thing that really protects you from this. And now Apple are moving consumers over to a less-secure, more government-friendly intrusion ..
I wrote a textual steganography library and CLI in 2011, called Plainsight: https://github.com/rw/plainsight

Additionally, @workmajj and I wrote TweetFS using Plainsight. It lets you recursively pack up directories and post them as an encoded linked list of Tweets to Twitter: https://github.com/rw/tweetfs

I presented Plainsight at Hack'n'Tell NYC in 2011 and a video was recorded: http://bit.ly/pecGgW

Plainsight uses each byte of the input message to generate tokens. Bits are used to decide how to traverse the token tree, weighted by frequency. The drawbacks are 1) verbosity and 2) incorrect grammar.

One of the lessons of writing Plainsight is that spam can be used to contain secret messages. Send enough gibberish to enough people, with your intended recipient included, and you'll look like a spammer--not a spy.

I also wrote a fuzzing tool, called Shag, to find edge cases, e.g. for single-byte inputs: https://github.com/rw/shag/blob/master/shag.rb

-- Example 1 (regular text)

Type your message to encode:

echo 'Meet at Union Square at noon. The password is FuriousGreen.' > cleartext

Then, pipe it through Plainsight:

cat cleartext | plainsight -m encipher -f sherlock.txt > ciphertext

The output will be Doyle-esque gibberish:

cat ciphertext | fold -s

which was the case, of a light. And, his hand. "BALLARAT." only applicant?"
decline be walking we do, the point of the little man in a strange, her
husband's hand, going said road, path but you do know what I have heard of you,
I found myself to get away from home and for the ventilator little cold night,
and I he had left my friend Sherlock of our visitor and he had an idea was not
to abuse step I of you, I knew what I was then the first signs it is the
daughter, at least a fellow-countryman. had come. as I have already explained,
the garden. what you can see a of importance. your hair. a picture upon of the
money which had brought a you have a little good deal in way: out to my wife
and hurry." made your hair. a charge me a series events, and excuse no sign his
note-book has come away and in my old Sherlock was already down to do with the
twisted

Now, decipher that ciphertext:

cat ciphertext | plainsight -m decipher -f sherlock.txt > deciphered
cat deciphered
Meet at Union Square at noon. The password is FuriousGreen.

-- Example 2 (binary data)

$ dd if=/dev/urandom of=/dev/stdout bs=1 count=10 | plainsight -m encipher -f 1984.txt
10+0 records in
10+0 records out
10 bytes (10 B) copied, 9e-05 s, 111 kB/s
Adding models:
Model: 1984.txt added in 0.89s (context == 2)
input is "<stdin>", output is "<stdout>"

enciphering: 100%|#####################################################################################################################################################################|474.67 B/s | Time: 0:00:00

which is a war is real, the proles used mind on the telescreen. He could see through all right to. You have read what said. 'Yes,' only in the Ministry
I'm not sure I understand what you are saying.

Are you making an anarchical argument in which the entire notion of governmental authority and/or social contracts is discarded?

Or are you saying that nation-states are inappropriate sources of authority in preference for some sort of trans-national/global authority?

Regardless of what you want, the fact is that we still have nation states and their associated social contracts and a unilateral effort by an indvidual to disregard or violate those norms isn't without consequences.

There are certainly arguments to be made that some of those social contracts are perverse and one-sided in nature (e.g. North Korea as an extreme example).

What are the flaws in the typical 'Western' social contract that you would see fixed? what is your fix?
Where is the average American women?
AFAIK Office 2003 SP3 also disables dBase II support by default.
It balances universal coverage with competitive markets without creating a gigantic government beaurocracy accountable only to the political process. Waiting times to see specialists are low, unlike the UK. The country still manages to host a large pharmaceutical sector.
So is being "average-looking" a misnomer then? Because it's usually not used positively.
Funny not to capitalize country names, and why does India get a double entry? There are other places where geography correlates with different appearing faces too.
The fact that some very individually distinctive features are still present on some pictures (why do some of these faces smile, and some don't?), I would guess that the number of pictures that was averaged was ridiculously low, 10 maybe.

The result is therefore all about the original ~10 pictures that were chosen... and it is certainly not an "average face" (which would require a statistically representative sample, north of 10k for most countries). Chose 10 other people from the same ethnicity and you get a different face.
And now even DNA is being called into question.

http://mobile.nytimes.com/2013/09/17/science/dna-double-take...
How's that small government working out for ya?

http://norfolk.legalexaminer.com/medical-malpractice/investi...

http://www.patheos.com/blogs/kathyschiffer/2013/05/other-sho...

http://blogs.dallasobserver.com/unfairpark/2013/06/dr_christ...

I don't consider it a high quality of life when you can't have a reasonable expectation that a surgeon isn't going to kill you on the operating table and has been killing patients for years with complaints about him while the state board does nothing.
> I don't believe what they're doing is technically hacking

Social engineering is often considered hacking.
Presumably solvable by using a digit that isn't normally in contact with your phone - eg the pinky of your non-dominant hand?
Agreed. But they always blow it out of proportion. As if the existing fingerprint systems are extremely insecure and theirs is not. The truth is they are all the same- insecure.
Even DNA can provide false negatives in the case of human chimeras.
Encode your secret message as a bunch of numbers, xor them your OTP, and then look up users with those numbers and simply re-tweet their most recent message.

Now your message is encoded in the userids of who you retweet.
Regardless of whether or not fingerprint scanners are good security wise, it's a bit silly to think that phone robbing thugs are completely dim. The way it works in my first world modern country is that there are shops everywhere that unlock or reset phones as part of their services, and it isn't thugs running them. It's people with an affinity for 'tech' who just happen to deal with a shadier area.

If cracking fingerprint authentication is as easy as this article suggests then there's no doubt that these types of shops will do this readily. Steal a phone -> bring it to a place that does it.

The AppleID password is another thing though.
Do you mean that the author at Slate seemed to approve of the practice, or just that they talked about it in general?

(I assume the former, and I assume that this is the article: http://www.slate.com/articles/life/food/2013/09/chicken_stoc...)
Yes, we often say security and think it means total protection. It doesn't. Its rare to see any security feature that cannot be bypassed or broken by some means. This is why we implement security in layers. If it were a binary state then a single layer would be sufficient. The idea is to make it so difficult to break through every layer of security that it becomes impractical but there will always be someone who does it.

I also don't think Apple is dishonest in their marketing. Fingerprint scanning is absolutely better than a pass code and the marketing around it all gives the impression that using it ensures no one can unlock your phone without your fingerprint. Nothing dishonest in that. Plus the layperson really has no interest in learning the specifics anyway so I'm not sure it matters what they say about it so long as it sounds cool and futuristic.
This isn't new, some other guy broke TouchId by making a fake finger from gelatin and soy sauce.

http://blog.fortinet.com/iPhone-5s--Basic-Fingerprint-Replic...
Can't you use different fingers?
A better comparison would be to say that /r/mensrights is currently the 201st biggest subreddit:

http://www.redditlist.com/page-2

note: please do not take this comment as me subscribing to the views of that subreddit. I just like Reddit stats.
> The method follows the steps outlined in this how-to with materials that can be found in almost every household

I own almost none of the materials they list. They have a very different idea of what materials can be found in almost every household.
Wish I had a quick link to the reddit post I read from a guy who lived in an active police state. He explained what it's like to be contacted by the government asking for a "favor". And, "btw, we noticed some questionable items in your uncle's file."

It's not just about you. It's about everyone you've ever cared about being used against you. Now imagine anyone considering doing anything the govt might not appreciate in that environment...
"If you say 'Mae Holland; out loud it sounds like the same phonetic structure as my name,"

Kate Losse, May Holland, Kate Losse, May Holland... hmm.. is not particularly close.

Also, one is fiction, one isn't. Last time I checked it was completely normal to write fiction based on amalgamations of real situations. And given that it is satire, this would also seem to be a prerequisite in this case.

Now while there is certainly sexism in the world, in the world of books we are long past the days where female authors had to change their names to be successful. If her book did not do well, perhaps she should look to the form and content rather than her gender. If you look at the bestseller lists, women are solidly represented and are commonly the majority. The main disparity is not gender, but fiction vs non-fiction. Fiction sells much better.
Teletext Wedding Website
It makes me seriously uncomfortable.

Oh I think it's cool to notice, for instance, that a physics major uses 3141.
Legally, there's no definition of hacking.

LinkedIn does seem to be guilty of violating the same statute most "hackers" are prosecuted under, making it a felony to access a computer without authorization.

Really, what they're doing is textbook password phishing.
Wow. LinkedIn sure made sure that's difficult.

You have to go through every damn letter of the alphabet, and click like 4 different buttons, and wait for 2 page refreshes for each letter. Half the time it doesn't work and you have to refresh the page and try again.

I've gotten through "L" and now their server is giving me errors.