skysight-inc/HackerNews huggingface dataset:
I thought, based on anandtech review, that this scanner is not optical but electrical, hence "sub epidermal scanning", so why does a printed finger work?
Ask HN: How to become smarter?
This might sound like a silly question but I want to increase my knowledge and awareness of everything.

I've been taking courses on https://www.coursera.org/ and reading ton of books.

Can anyone recommend what they've done to get smarter? perhaps books, classes they've taken. I have a lot of free time and want to learn anything.
As I remember, after using a similar technique they started working backwards and found a simple photocopy (no gelatin or other simulated finger) would do it. Apple has at least beat that horrifically low bar.

That was a great episode. Beating the thermal sensor was great too.
Well he did approvingly quote some nonsense that the reader would only work on a 'live finger' (presumably it is supposed to be able to detect the presence of a soul?).

http://daringfireball.net/linked/2013/09/12/5s-fingerprint-s...
Just in time. Who knows how long these research projects stay legal in Germany.
And the advantage of this over gravatar is? The page mentions how to move from gravatar, but gives no reason why I should. Maybe a better API? As a user I don't care.
No, I was implying that what the parent comment meant by "small government" was actually "useless government" and that his supposed higher quality of life was anything but.

Texas sucks. Hard.
Overall security will be increased because of Touch ID because most people don't use a pass code at all.
It doesn't look it. From the description in the article it appears to be a very similar process to what has been used before, just with a higher resolution printer, but not one that is outside the realm of photo printers.
> Because PyPy is a JIT compiler it's main advantages come from long run times and simple types (such as numbers).

It is not inherent to JIT compilers that they need long running times or simple types to show benefit. LuaJIT demonstrates this. Consider this simple program that runs in under a second and operates only on strings:

vals = {"a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o"}

for _, v in ipairs(vals) do
for _, w in ipairs(vals) do
for _, x in ipairs(vals) do
for _, y in ipairs(vals) do
for _, z in ipairs(vals) do
if v .. w .. x .. y .. z == "abcde" then
print(".")
end
end
end
end
end
end

$ lua -v
Lua 5.2.1 Copyright (C) 1994-2012 Lua.org, PUC-Rio
$ time lua ../test.lua
.

real	0m0.606s
user	0m0.599s
sys	0m0.004s
$ luajit -v
LuaJIT 2.0.2 -- Copyright (C) 2005-2013 Mike Pall. http://luajit.org/
$ time ./luajit ../test.lua
.

real	0m0.239s
user	0m0.231s
sys	0m0.003s

LuaJIT is over twice the speed of the (already fast) Lua interpreter here for a program that runs in under a second.

People shouldn't take the heavyweight architectures of the JVM, PyPy, etc. as evidence that JITs are inherently heavy. It's just not true. JITs can be lightweight and fast even for short-running programs.

EDIT: it occurred to me that this might not be a great example because LuaJIT isn't actually generating assembly here and is probably winning just because its platform-specific interpreter is faster. However it is still the case that it is instrumenting the code's execution and paying the execution costs associated with attempting to find traces to compile. So even with these JIT-compiler overheads it is still beating the plain interpreter which is only interpreting.
Holding on to the slim remaining chance you're not trolling...

I quote you again:

"[M]otivating inventors was not the purpose of patents, it's merely the side effect of the method used to get inventors to give up their trade secrets."

Let's break this down a little:

"X was not the purpose of patents, it's merely a side effect of the method used to get Y."

And now you're claiming you weren't talking about X and Y?

Note that I've shown this to others, and they don't understand your position either, so if it's brain-damage it's not uniquely mine.
Jailbreak is enough... When it exists. And for now it doesn't.
To my biased cultural sensitivities, this is some fucked-up bullshit.

But beyond that: it feels like this gender unbalance simply can't be stable in the long term. At some point, women become a scarce resource and thus more valuable.

Maybe there are some hints of that happening already. For example, this episode of Vice shows that dating in China has started to become more and more difficult for men. http://hbo.vice.com/episode-four

I can't imagine what these countries will look like if this gender disparity persists for 100 years or more.
I stand corrected. Google does not respond to incorrect domains. I mistook the auto search from the address bar in firefox as similar behavior to OpenDNS.
They do everything he did not claim.

He never said that they do not show you a form that tricks you into thinking that you are logging into LinkedIn but in reality you are handing over your email password.
Steganography conceals the existence of the message, not just the contents.

if David Miranda gets stopped at Heathrow and:

On the following morning, the gener·al requested permission to return the emperor's visit, by waiting on him in his palace.
A pitched battle follow·ed.
But the pride of Iztapalapan, on which its lord had freely l·avished his care and his revenues, was its celebrated gardens.
...

is in his twitter account, it's in no way plausible that they're just innocuous tweets, and he can be compelled to reveal the secret.

A true steganographic message would have looked indistiguishable from any other tweet that he would have made normally. this is a cute system, but it's not steganography.
Sorry, I am probably overreacting. It does annoy me every time people complain about security or privacy when they themselves hold those two in the lowest regard possibly crossing over to contempt. And in some cases those people know what they are doing is lazy and wrong and do it anyway. I start looking for the bottle just thinking about it.
Orwell agrees. "foreigner" or "alien" convey the exact meaning you are looking for without implying the person comes from a barbaric non-democratic country (ironically on the day they elect their deputies, and transitively, their leader).
It's reasonable to assume that a PhD has lowered themselves to work in industry because they couldn't get a post-doc.

Let's conduct a poll. Other than you, did anyone here who's been involved with PhD holders or grad-school and academia themselves actually think this? How many of us actual academicy types actually think it's "lowering oneself" to work in industry?

I don't. I do think that both academia and industry need to drop their utterly ridiculous notions of professional passion, because most people most of the time will never work on Their Life's Defining Passion when there are bills to pay, but industry can certainly come up with problems just as big, just as hard, and just as worthy as academia.

http://matt-welsh.blogspot.com/2010/11/why-im-leaving-harvar...
Yes, or carry a unique cat around as a security token.
http://m.techcrunch.com/2013/09/19/watch-a-cat-unlock-the-ip...
Princess Cruise Sweepstakes—Canadians must answer math question
Scientists take big leap towards creating universal flu vaccine
Absolutely. It's a totally scummy company. I don't and have never had a LinkedIn account.

I'm just trying to argue that why should a company even be trying to get access to your email account? They shouldn't be trying to defend the practice.

What does this mean for all of the email providers out there who in their own TOS say that they're providing a service and that you can't give any other party permission to access your account? Can LinkedIn be absolved of blame fot accessing something you were never allowed to give them access to to begin with?
Or you could use https://scrambls.com/ which uses strong crypto and works for facebook or any site. Keeping in mind that any short message protocol is vulnerable to cryptanalysis.
First mistake: starting with someone else's config.

Second mistake: using a distribution.

Third mistake: forking a distribution, itself built by amateurs, after only three months and advertizing it on the net.

Seriously, when did parents stop teaching the value of patience (among other values) to their kids?

You are the one in charge of your config, people, not some random guy on the internet.
Stanford biologist and computer scientist discover the 'anternet'
"Who wrote this? Who is Blake Lawit?"

From the inside of a business, it might seem like a proper business behavior to have the Senior Director, Litigation at LinkedIn publicly address a class-action lawsuit, but the source doesn't do much to assuage LinkedIn-users' concerns, and the source's defensive role in the situation could be interpreted as an indication impropriety.

A response from the CEO, CTO or someone in charge of user experience or user relations would have been much better if LinkedIn wanted to "(set) the record straight" w/ their users.

https://www.linkedin.com/in/blakelawit
Well, I am done here. I imagine if we ever met each other in person we'd find each other reasonable people, but over these channels it's not coming across. Until then, good luck.

And I can't resist: you'd be hard pressed to find a better cryptographer than Dan Boneh, one of the authors of SJCL.
My post on this topic, which is in agreement with this post. http://peterlyons.com/problog/2012/09/managing-per-project-i...
I like this extremely short postscript raytracer I saw quite a few years ago:

http://www.is.titech.ac.jp/~sadayosi/lab/h-takasi/ops.html

%!IOPSC-1993 %%Creator: HAYAKAWA Takashi <h-takasi@is.titech.ac.jp>
/C/neg/d/mul/R/rlineto/E/exp/H{{cvx def}repeat}def/T/dup/g/gt/r/roll/J/ifelse 8
H/A/copy(z&v4QX&93r9AxYQOZomQalxS2w!!O&vMYa43d6r93rMYvx2dca!D&cjSnjSnjjS3o!v&6A
X&55SAxM1CD7AjYxTTd62rmxCnTdSST0g&12wECST!&!J0g&D1!&xM0!J0g!l&544dC2Ac96ra!m&3A
F&&vGoGSnCT0g&wDmlvGoS8wpn6wpS2wTCpS1Sd7ov7Uk7o4Qkdw!&Mvlx1S7oZES3w!J!J!Q&7185d
Z&lx1CS9d9nE4!k&X&MY7!&1!J!x&jdnjdS3odS!N&mmx1C2wEc!G&150Nx4!n&2o!j&43r!U&0777d
]&2AY2A776ddT4oS3oSnMVC00VV0RRR45E42063rNz&v7UX&UOzF!F!J![&44ETCnVn!a&1CDN!Y&0M
V1c&j2AYdjmMdjjd!o&1r!M){( )T 0 4 3 r put T(/)g{T(9)g{cvn}{cvi}J}{($)g{[}{]}J}J
cvx}forall/moveto/p/floor/w/div/S/add 29 H[{[{]setgray fill}for Y}for showpage
I'm struggling with how we can have any real commentary on a book which has not yet been published.
"Eleven percent of Americans aged 12 years and over take antidepressant medication."

from CDC/NCHS Data Brief: "Antidepressant Use in Persons Aged 12 and Over: United States, 2005–2008": http://www.cdc.gov/nchs/data/databriefs/db76.htm

"Nearly 70 percent of Americans are on at least one prescription drug, and more than half take two, Mayo Clinic and Olmsted Medical Center researchers say."

from Mayo Clinic, "Nearly 7 in 10 Americans Take Prescription Drugs, Mayo Clinic, Olmsted Medical Center Find": http://www.mayoclinic.org/news2013-rst/7543.html
Pandik - monitoring tool for web services, self-hosted Pingdom alternative (Go)
Roll Your Own Customized Ubuntu With UCK
Actually, it predates the movie. https://en.wikipedia.org/wiki/Secret_decoder_ring
You seem to not understand the point. SQL databases don't count because these mechanisms are not visible, and the programming model is changing data in place.

No-one really cares how DB's are implemented under the hood, we just care about the programming model. (And speed, CAP, ACID, etc...)
Well, so it's hard to do in part because you need code to load code, and there's only 64 words of RAM. But if you got the code to the core, let's say you're only changing 32 words of code, about five-ten functions, you'd have to use 32* ~10 ns = 320 ns to do the reload. Not too shabby, but you have to get it there, and that means using other cores. It's hard, but in theory there is no outstanding reason it would be a problem. Is the GA144 a poor fit? Barring that you crack the problem of getting the code there, yes, it's a poor fit.
Youtube is down
Also http://www.downforeveryoneorjustme.com/youtoube.com
This only measures relative mobility, not absolute mobility. It doesn't show at all that it's harder to move up in the world, but merely that it's harder to move up relative to someone else.
The keys would not be transmitted via tweets, just messages.
I agree it'd be cool if it didn't amount to an enormous breach of computer etiquette :)
Another way is to use the netpbm toolkit. First, use its ppmdraw command to rasterize each character to a canvas, then convert that canvas to xpm format (you have a separate canvas / picture for each character). The xpm format has the nice property that it is also a valid C structure. Real easy to then convert to whatever you want.

Oh, and the netpbm toolkit has not only stand alone binaries, but it also has a C library for each of the conversions that it includes. Seems to be an older under-rated toolkit.
Google Street View Trekker Projects
PyPy also manages to speed this program up (or at least, what I understand this program to be):

Alexanders-MacBook-Pro:tmp alex_gaynor$ time python t.py
.

real 0m0.202s
user 0m0.194s
sys 0m0.007s
Alexanders-MacBook-Pro:tmp alex_gaynor$ time python t.py
.

real 0m0.192s
user 0m0.184s
sys 0m0.008s
Alexanders-MacBook-Pro:tmp alex_gaynor$ time python t.py
.

real 0m0.198s
user 0m0.190s
sys 0m0.007s
Alexanders-MacBook-Pro:tmp alex_gaynor$ time pypy t.py
.

real 0m0.083s
user 0m0.068s
sys 0m0.013s
Alexanders-MacBook-Pro:tmp alex_gaynor$ time pypy t.py
.

real 0m0.083s
user 0m0.068s
sys 0m0.013s
Alexanders-MacBook-Pro:tmp alex_gaynor$ time pypy t.py
.

real 0m0.082s
user 0m0.067s
sys 0m0.013s
Alexanders-MacBook-Pro:tmp alex_gaynor$ cat t.py
def main():
vals = {"a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o"}

for v in vals:
for w in vals:
for x in vals:
for y in vals:
for z in vals:
if v + w + x + y + z == "abcde":
print(".")

main()
Considerably harder? From the article:

"In reality, Apple's sensor has just a higher resolution compared to the sensors so far. So we only needed to ramp up the resolution of our fake",
Yeah, just a matter of time. Bring a flashlight though, because the sun is projected to burn out far sooner than the largest supercomputer will be able to brute force a 256 bit key.
Least known? I think we know the topics even if we aren't good at them.

There are lots of medical problems and brain problems and large scale coordination problems we know about but haven't solved or reduced to solvability yet.
"Overall, the number of book readers in late 2012 was 75% of the population ages 16 and older, a small and statistically insignificant decline from 78% in late 2011."

http://libraries.pewinternet.org/2012/12/27/e-book-reading-j...
"I can't imagine it's changed dramatically" Why can't you imagine that? It's exactly during the 80s that the reaganomics started favoring the rich, and the 90s that saw the rise of China and the new globalisation. I would completely imagine the that situation changed dramatically during the last 20 years.
Gravatar now requires a Wordpress account for new users, which is an annoying extra step to ask users to do.
Wow, Clipper brings me some memories... I remember APPEND BLANK and REPLACEs, and also having to tell customers to reindex (and regenerate the dreaded .NTX index files) every day before starting operations. Good times!

One nice thing about Clipper is that it had "code blocks" that was the first time I had contact with what we today call Closures. It had a syntax close to Ruby blocks: { |X| ... }
Do you have any examples or data to support that there is any benefit by employing a explicit asynchronous IO pattern rather than relying on the Go IO libraries perform the select() (epoll or whatever...) syscall and then rely on the goroutine scheduler to switch control to who is registered to do something when the data is ready?

Is the default minimal stack segment size too big? Or the scheduler too heavyweight?
Creating electricity with caged atoms
How To Drink Gatorade (2011)
That's because the robber barons where more like the 0,001%, not the 1%.
In Schneeberger's case, it seems that he was simply infusing a part of his body with another man's blood and then making sure that the lab tech drawing the blood sample drew it from the same place. Once they tested his hair and saliva, they had a positive match.
The most secure computer is the one locked in a room and unplugged.

There has never been a method of security that is secure. The first thing you learn when dealing with security is there are tradeoffs between opportunity, time, money. and usability.
I find the idea that the typical 4-digit password provides any more security against an attacker dedicated enough to make a copy of your finger pretty hard to credit. You're placing a lot of weight on your "covering" ability. (There have been times I've had to try hard not to infer someone's passcode purely from their hand movements.)
Youtube is working for me, and isitdownrightnow.com states that it is currently up (last officially down roughly 8 hours ago from when this comment was posted).

I think it might just be down for you.

http://www.isitdownrightnow.com/youtube.com.html
Yeah I would agree with that. It's "unauthorized access" for nearly all reasonable definitions of "unauthorized".

I guess when I said "not technically hacking" what I meant was that I don't believe they're doing XSS or brute-force or SQL injection or something along those lines.
Poland in the 1970s produced around a tenth of US 2013 per capita GDP from nationalised heavy industries and peasant farming, under a system that was at least theoretically Marxist. What makes you think the US is headed in that direction?

I'm not sure which US metrics the peaked in 1970 either?
Tried emailing at hello@getchute.com, and it was denied by Google's mail servers. May want to check into that.
The first round of sleephack data exposures will put the failure to that point.
That depends on why you want to become smarter. Personal growth & development? Impressing your friends at cocktail parties? Worldly rewards and money? Ability to accomplish an objective in the future?
Drake Finds His Tougher Side on ‘Nothing Was the Same’
It seems that that guy directly made a 'copy' of his own fingerprint in a mold. I agree that it is breaking TouchId, but the CCC did a more realistic crack: making a fake fingerprint without the person's finger.
> It's one thing to leave fingerprints all around your environment, but there is now the potential to steal your biometrics over the internet.

Correct me if I'm wrong, but the biometric data never leaves the device.
Game Changer - Portable Solar Window Outlet (vid)
I was contacted through some posts on Edward Tufte's forum by the admin of an anthropology forum about filtering for hate speech. Suffice to say, my big take-away after taking a look is that anthropology on the internet attracts a tremendous number of xenophobes, racists and bigots. That these folks are not known for their intellect, let alone intellectual integrity, is not surprising. My only regret is not knowing how to solve that problem other than massive education overhaul at the K-12 level.
You're literally the only person left who doesn't think this was an NSA backdoor. Including the people who wrote the document, and the companies who went public saying not to trust them, at great expense to themselves.
Why Living Cells Are The Future Of Data Processing
But presumably in this case it is Nevada who is buying the tickets. That doesn't strike me as they particular care for the well-being of the homeless. Sending them to Arpaio certainly decreases the chance of them returning to Vegas.
Professor Kofi Awoonor Passes On In Nairobi Terrorist Attack
Let's think about the real point of Touch ID technology. Is it to secure your phone against high-tech criminals with a lot of time and resources? No; it's to give you enough time to realize your phone is gone and remote wipe it via iCloud.
Agwa, thanks for coming to DJB's and my defense. Unfortunately, anyone who disagrees with tptacek gets an automatic downvote.
In the case of a proxy, the select(2) call implements the simple predicate "should I read from the client or the server". It turns a pair of coroutines into a single normal routine. The single routine is clearer, perhaps marginally less performant for a single connection, but probably marginally more performant across a large number of connections.

The "asynchronous pattern" thing is a religious canard. Golang devotees are (rightfully) happy to abandon event-structured programs in favor of programs that look like socket tutorial code but perform like event servers. But we're not talking about asynchronous control; we're talking about a synchronous loop. I've noticed this when talking to Golang people: they hear "select" or "poll" and automatically a switch goes off in their head that lights the "BAD!" lamp. I'm not sure that's valid.

Another example, which I gave upthread, was a high-speed port scanner; when I left it to the Golang scheduler to handle the sockets without Golang's timeout idiom, I quickly starved the program of sockets, because of the interaction between timeouts and the scheduler. I pulled select(2) into the program (for that one use only! Just to avoid using Golang timeouts for a simple connect(2) timeout) and the program not only ran quickly but properly handled the socket descriptors.

This isn't a critique of Golang, which I like working with. Rather, I'm criticizing a specific Golang idiom.
Which is an incredibly absurd position, in any context.

Security is not binary.
So many sites/apps do this sort of thing as "growth hacking". If this goes through, it will set a precedent allowing for many many other suits. I think where the line will be drawn is how well were users informed of what they were consenting to. This will generally improve the quality of ToS, eventually. Hopefully. It also could potentially kill off the business growth model that a lot of social sites use to build themselves off others, e.g. Zynga on Facebook. This is a bigger deal than people are making it.
Not seeing anywhere in that article where he had success replicating a print. He did get the iPhone 5S to enroll a fake print and unlock with the same fake print. He was unable, however, to replicate an enrolled fingerprint from a real finger and successfully unlock.

Additionally, all of this was done with molds of the target finger - not from lifted fingerprints. Completely different target.
Tada The 20-year crusade to solve checkers
I've never made the connection before... but the ideology behind the American Dream could fit just as well on the back of a Self Help book.
FTA: "... first algorithm intended to be processed by a machine ..."

Not only is the title inacurate, and this exact same Wikipedia page has been posted numerous times, but music boxes are "machines" that have been "processing" "algorithms" long before Ada was born.
The exact same arguments could be made for having crappy passwords, which, I might remind you, are defeated hundreds of thousands of times a day, at a massive cost to its victims.
Ha,

Very cute.

Back in the late 1980s I wrote a full clone of the teletext system on my Commodore 64, witn priority news pages and full support for all the special features like double height text, reveal etc.
Federated, open source alternative: https://www.libravatar.org/