skysight-inc/HackerNews huggingface dataset:
>The statistically likelihood of matches between distinct parties is in some cases well under the population of the world.

In addition to that, there are problems with bias and statistical independence. A given marker is unlikely to be present in exactly 50% of the population, and to the extent that it isn't it can reduce the probability by that amount that a test match is a true match. Meanwhile the suspect pool for a given crime is likely to encompass several (perhaps many) members of the same extended family, who for the obvious reason are significantly more likely than random members of the world population to have the tested markers match one another. Even within a city you will generally see concentrations of specific ethnicities who may have a higher statistical incidence of specific genetic markers than other populations, which can screw up the numbers by an amount that historically hasn't even knowable because we don't have good numbers on the statistical incidence of specific markers within geographical populations.

The place where this is most pernicious is when they get a sample from a crime scene and run it against some "DNA database" to find a hit. Then everybody is talking about the probability that X suspect would match the DNA at the crime scene rather than the probability that someone in the database would match even if the actual perpetrator wasn't in the database.
Do you inadvertently leave your pass code lying around in random placed all day long? How often can you change your fingerprint?
It's also worth pointing out that Safari's UI is not open source and not part of WebKit. Additionally, I find Chrome's UI (which is open source) superior to Safari, but it's subjective, of course.
What version of twisted and os you were using? I'm asking because all latest Twisted releases are using epoll by default.
Ask HN: How can I help my friend?
So I recently met a super smart developer who is developing a framework for building browser based web applications. He is falling short on money and needs customers to develop fully functioning prototype/mvp web apps for them. Can a basic website to make web applications generate clients?
How can I help him do that?
This is a bad way to get ideas.
There's still a large community of people making music on those old machines. Mostly chiptunes, rather than MIDI-oriented stuff (as far as I know)...but, some folks are driving their old machines via MIDI and simply using them as sound devices.

Boots Riley of the Coup talked about using an ST for many, many years after it was out of date. I think he was using it up until Party Music (released in 2001, but it might have been the prior record. Atari Teenage Riot also keep pounding away on their STs well past their prime.

I use a C64 and a Game Boy for music production these days; but I mostly play the 64 live (using the keyboard...not even a MIDI keyboard of piano overlay) and the Game Boy just exists as an independent music device. I've never tried combining its output with anything else. But, probably will eventually. If I were to find an Amiga 1200 or one of the latter day STs, in really good shape for not a lot of money, I'd probably pick it up. But, there are so many collectors of the old machines now, and so few remain in working condition, that it's not common to find them. I need to acquire a backup C64, though, for sure. I don't think there's good resources for repairing them the way there were when I was a kid.
The inbuilt reverseproxy is also handy for small tasks:

package main

import (
"net/http"
"net/http/httputil"
"net/url"
)

func main() {
target, _ := url.Parse("http://127.0.0.1:8000")
http.ListenAndServe(":80", httputil.NewSingleHostReverseProxy(target))
}

This will http proxy :80 to :8000.
I think the issue is that the stallmanites cling too much to the state. They think the state is there to apply rule of law(something which in practice rarely happens even for serious crimes like murder) and that it can effectively apply law to itself; this has been proven wrong time and time again, and is one of the failings of contemporary societies.

I am enchanted by the freedoms of free software, just as I am by freedoms in broader life; Freedom is part of the product when I pay for software, and the understanding is that I will come back to the author if I want the work of the people who best understand it, rather than the people who refuse to let me.

I just wish "free software" wasn't owned by Richard(for whom I have no personal gripe), because Richard has a government addiction(even when it comes to problems widely caused by government to begin with, such as software patent litigation).

If we can learn to separate our understanding of justice from our misguided best wishes for the state, I think free software, and freedom in general can prosper.
That's trying to solve the wrong problem. Rather than try to prove the server is trustworthy (which is impossible), make the server untrusted.

Which means finding a way to securely, reliably do the encryption on the client. Which would be a useful thing to build, since all the current ways of doing that have problems.
>Do you think everybody in the USA would agree that being able to fire people at will is a good thing for the US economy?

Whether or not they would agree, being able to fire people at will is critical for job creation. In countries where you can't fire people expanding your operation is a much bigger risk. So you avoid hiring people - automation, outsourcing, whatever it takes.

To remove this metric from any "Ease of Doing Business Index" is crazy, quite frankly.
> Since scores aren't shown, I'm not sure what comments have value, so I tend to not read anything besides the first few comments.

Maybe you should browse Reddit instead if you're used to reading the top comment (usually one liner) and collapse to the next without engaging in any real discussion.
Awesome work. How big is the executable?

Also, what did you not like about the Lua object model?
This is incorrect, a sample of 10 is statistically representative but has a high margin of error. If you can live with a high MOE then you can use very small samples, often small studies of 10 are used in medicine to see whether further studies should occur.

Upon doing 5 minutes of research the data appears to come from FaceResearch which has many thousands of images on file, seems like any issues would be related to sample biases and not sample size.
This is true, I do eventually want to move it to opus if they ever resolve the random seek issues with the codec since it gets better compression ratios and more importantly is open.

But I also figure my 60gb of mp3s would be at least 400gb or more as flac, though given how cheap storage space is that may not be an issue. I guess I should start trying to collect flac music after all!
The discussion here so far seems to be talking about something other than the general page that this link points to, as if the other commenter had some context that the current title no longer provides. I see Gamma Group being discussed specifically.

I'm going to guess that the title was edited again, so we don't have the intended context. What was the original title?
(Oops, I was wrong about that. Turns out that was a claim by someone else in the biometrics field, not Apple.)
These are non sequiturs.

Corruption or ineffective government are not exclusive to Texas. You're just spouting more ignorance and from your lower comment are clearly bigoted against Texans.

My original point stands that the use of exurbs as a pejorative in the OP is easily refuted by the experience of anyone who lives there. I used to live in Frisco, TX, an exurb of Dallas and the mere suggestion that it offered anything inferior is absurd and quite frankly just completely oblivious.
No, but i would have expected empathy given the proximity to my moms death. It was so self absorbed even that wasn't enough for me to like it.
or just spend more time around different people?
BigBearChaseMe.com
We just launched our new website BigBearChaseMe.com - You create and participate in photo contests that celebrate the ridiculous things in life. We're are looking for people who would like to join and test the crap out of this thing.<p>Thanks!
Let me guess-- you're going to "no true scotsman" all the actual existing open source mobile operating systems.
Good on you! Did Kosbie like it?
I can see why one would begrudgingly keep their Linked In account, but you actually pay a subscription? What value does that provide you?
Let's be real - if Twitter automatically deleted gibberish as spam, the majority of Tweets from the average Twitter user would be removed.
I don't think I've seen anyone parry an appeal to authority with an ad hominem lately. Good one.
Just use brute force or dictionary attack over the wire. Given that most users use 4-digit pass codes, this can be done usually in minutes, almost always in less than an hour.

Or, if your target is paranoid and uses a very long passcode, target the charger rather than the device itself. iOS assumes any physical device to which it is connected when unlocked is secure. Replace the usb brick with a small computer (e.g. Raspberry Pi) in a convincing looking Apple-esque case. Then wait until your target plugs in his iDevice and unlocks it. You can then dump the drive, or side load malicious code.
The README throws up huge red flags to anyone who has studied crypto.

For example, saying you use AES-256 without explaining what cipher mode really doesn't say anything at all about the security of your system.

And even if your crypto system is awesome, it doesn't matter at all because it's all running on the server, where the NSA (or local equivalent) can simply force you to turn it off at any time.

If you really care about bringing strong privacy to users, you need to give them something they can run locally, so they don't need to trust your server.
If you slightly smear your finger every time you remove it from the sensor you shouldn't have this problem. Additionally, if you are keeping your phone in your pocket, as I do, pull it out and take a look (like I just did) and you'll be hard pressed to see much of anything resembling a useful print. I use my phone pretty much all day long and it is devoid of useful prints.

Does that mean you couldn't find my prints in other places? Sure. But I can probably find your keys in other places, too.

We know that SSL is generally not implemented properly, that the CAs are probably all hacked or subverted by the NSA, that the NSA may have developed backdoors to a number of the more popular encryption suites, but I don't hear anyone running around demanding Google or Facebook disable SSL.

If you are doing something that requires sufficient security that you don't want someone to access it via your fingerprint alone, add additional layers of security.

If you are doing something potentially incriminating ... don't do it on your freaking phone because it's probably been exploited in a dozen other ways by various authorities who can use it to find out most of what they need without being in physical possession of the phone anyway.

Most people aren't worried about the mafia or the CIA or the NSA. Most people don't even bother using a passcode, let alone a passphrase on their phones. If you can add something as easy to use as this, then it adds an additional layer of security against the casual abuse most people will find themselves subjected to (random people making calls from your phone, spouses spying on their email, etc.).

If you are worried about the CIA and the NSA, using a phone at all for anything is probably not in your best interest at this point.
An unorthodox method: study for the LSAT exam

I'm an LSAT instructor. I'm convinced that for a couple of the sections the only way to become better is to improve how you think. No shortcuts.

Send me an email if you want some guidance on how to use the materials.
Jbool_expressions - lightweight propositional statement manipulation in Java
Why wouldn't they just confiscate it, and "oops, it fell in a bucket of water"?
So the big question is, how hard is it to get at 2400 DPI finger print?

They don't show if they can scan the finger print off the phone. I would imagine that it could be quite tricky to get that level of resolution.

I would like to see a complete hack purely based on a finger print on the phone.
U betr bewar fegits
How scared are banks of bitcoin and what will they do about it?
wow, so much faster than lua
This is my favourite piece of "biometrics don't work" material - http://www.cs.auckland.ac.nz/~pgut001/pubs/biometrics.pdf

It's a bit old now but it's still as valid.
Aren't go just publishing the otp and not the message? Or did I miss something?
>The "How to fake fingerprints" link [1], is one of the scariest things I have seen, given how simple it is, and how much we reply on fingerprints for linking people to crimes.

I think DNA evidence is even worse. Given how simple it's for anyone (from an oppresive government to a criminal to take DNA from someone they want to frame and place in on a crime scene. Heck, it's even easier than fingerprints, and it's also thought of as "irefutable".
you and others are ignoring the fact that the guy has been rejected more than a dozen times at technical interviews. He has demonstrated an inability to pass what's the bare minimum: basic programming, algorithms and data structure. If someone with a PhD cannot re-master this material (which he/she has supposedly learned in undergrad) within few weeks of preparation, no matter how fancy the PhD research is, then that in itself is telling about his/her commitment, drive or competence. These claims sound like saying oh I am a best seller novelist yet having forgotten (and unwilling or unable to revisit) the alphabet. At the end of the day, there is no evidence that PhDs have a hard time getting interviews (the author got 20 or so), and if they really ace the interviews, heck even do reasonably well, they will have no problems getting hired. A PhD degree by itself will not get them hired, but it will not jeopardize their chance either, provided that they do well in the interview.
Write a schedule and set tangible goals to keep track of progress and measure it. Read 40 pages today, finish course by end of month, write a program this week etc. It's the same as physical training, just keep going.
Yes, this is convenient and speeds up Dockerfile development. At the same time, this is an issue when you consider using Docker as a part of your production deployment toolchain. I think both ways should be supported: incremental multi-layered images for development or exploration, and then possibility of creating a single, compact image for lower overhead in deployment. In a perfect world, it would be a switch for `docker build`, but I'm not fluent enough in Go to propose a solution on that side.

Some people have considered another approach: flattening an existing stack of images. Scripts for that are linked from the Docker issue on GitHub. I wasn't able to get any of these working, and the logic behind these seemed quite convoluted.

Still, my script is just a proof of concept - I tried whether it is possible to take the approach I use internally for Docker build scripts, and use it to build Dockerfiles. It seems it's possible, and it delivers good results. Time and actual usage will show whether it's a good idea; if this approach makes sense, it will hopefully make its way to the Docker core, and my hack won't stay relevant for too long.
If cops wanted clean results, they wouldn't do anything that looks bad on your smartphone camera to begin with.
Cpantesters.org is down
Or someone just being careful with his DNA at the crime he commits, that then places someone else's DNA that he wants to frame?
the F.C.I.C.’s Mr. Bondi suggested “some substantial changes” to his testimony ... Mr. Bowen says the F.C.I.C. wanted him to delete his concern that Citi may have materially misrepresented its certifications of internal controls, which require corporate officers to certify the accuracy of their financial statements under Sarbanes-Oxley.

Isn't tampering with witnesses at congressional hearings very very illegal? Like, contempt of congress?
Read more.
Pick up a magazine on a topic you know nothing about.
Ask people what they do and how they do it.
Try your hand at a new craft/art.
Learn from all the above.
Write more.
Go to the library and take out a book from each section.
Seek out music you've never heard before.
Learn something new every day.
Ditch the TV/Netflix.
Surround yourself with people substantially smarter than yourself.
I have even linked to it in the article. I am going to comment and suggest this kind of approach - I wanted first to flesh out the idea and validate the proof of concept in this script.
These codes are dead. Try these:

64641c44-2d78-495d-b900-4534312f59be
1659560f-e90c-4617-9a1b-d909b7fdb3ec
2548e52a-050a-42eb-ab02-9bd4f00e431a
4f634b69-e77a-430d-9d44-9b831a695572
3042ae64-09aa-431f-beb2-8092c99827cd
bb049652-e7b4-479f-ab4f-6450bf4e152e
4c219d83-8c3b-4272-9df0-be2cae314df8
a4c5431d-061f-415b-9b31-9b87e4f76518
ea957849-8e8e-44f2-8dd4-50061c817fad
0fe3d4fc-c51d-47ad-93c4-c6328e387900
a6f64f88-93d3-490a-bc2a-ef3977e9d260
e6b8a89e-e93b-4af6-b2a5-349deebffac4
20b0225a-57a9-434f-a78a-72f612747c63
9496fc4b-fb2d-4bac-8d9c-43839f715fdf
406c5740-f8f3-4f62-ab67-c3fd20db955e
06c47d64-bb0d-4501-b45d-f684f84fd1de
554194d0-969c-4fe9-8aae-d8cd75225036
b599bf82-5d44-408a-b1c7-fe4f84c7d46e
eedea074-ca77-4d04-b575-47acbf5311ec
329e9855-30b0-46db-bfa5-5ffe37d84a78
a31e3833-4ea1-4296-aa3e-e285f926e9a6
35f61f09-3326-4c0d-9ca9-672a26231140
260fdecf-e555-48b2-be7e-c88b4ea5c50c
d11c6b47-c333-4ae2-bf7b-6ed28b3405c0
4443e955-9054-438c-bc80-5a56702fbc7a
e3694c44-c370-4e89-b8f7-25bb3ea67250
48797a6f-a5d1-40c8-bf30-2ab998413a90
0768289b-871d-4802-aef8-0fbb2ca0bf7b
24f20237-38c4-4be0-9d9e-8f30028796b1
a21c9beb-6a3e-4c37-9047-331fd9c6db62
maybe I can help with hosting your mvp in germany. No NSL is accepted here and I have one or two ideas how to show the server side's integrity status. PM me reddit:3f3nd1
I don't think you understand what QNX is or where it's used then. QNX will not be seeing serious competition from Android or iOS anytime soon in the domains it has locked up - ones which require hard real-time.
Well, to be fair, in this case it was a live finger.
Just to keep things in perspective, the goal of Touch ID is not to be unhackable. The goal is to get more consumers to move from zero security to pretty good security.

A very large number of people don't put any kind of passcode of any kind on their phone, simply because it's inconvenient. Touch ID is designed for them. It's not designed to secure nuclear footballs.

Touch ID is going to massively reduce the number of totally unsecured iPhones that require zero effort to access. That's the goal.

I think some people see "fingerprint scanner" and think "military-grade security" because that's where we've seen scanners before in movies and such. But this is really very much a solution for the consumer market, where convenience and usability are critical features of a security system. Sometimes infosec folks forget that. If you make it too hard to use (passcodes), people just bypass it. So you can blame the user, or you can try to design something easier to use. If in the end you've improved the overall security landscape, you've succeeded. I think that's what Apple is doing here.
What would you attribute are your biggest barriers to making more money?

Is it education? Lack of jobs in your area? A disability?

I'm not trying to be condescending, just genuinely curious about your situation.
Judging by the recaps of the film, I'm not surprised about what I see. The film is based off of books that make WifiLeaks look bad, so its not surprising that the movie does too. Also, Disney and Dreamworks gain nothing by making a movie that makes WikiLeaks look good; they gain attention by creating a movie that creates drama around it, like what is going on now.
@shire - Personal development and every day learning is something which excites me so let me give you an answer from own experience and what I do.

1. Have awareness - smartness is nothing but being aware of yourself, your knowledge and surroundings. Way too many of us are living a routine life and we have trained our minds to keep working at certain optimum level. People who are aware often looks smart and more importantly make smarter decisions.

2. Read and Learn - your smartness and decision making skills is directly proportional on how much you know, people who knows more will always look and make smarter decisions.

Btw, one thing I can assure you, smartness can not be taught through books and classes, be your own teacher, make your own lessons.
Author here - thanks for the comment (and please don't worry about sharing stories, its true after all!)

This was a big problem/mistake we made back then (and which isn't obvious from the slides) - we just didn't let people try the product, since we didn't want to be a hosting company ourselves.

We did show demos to people and did pilots in a few cases, but it would have benefited us a lot to have a public installation where people could have tried out the product.

I'm sorry we didn't get to work together then - there was certainly a lot of interest that we managed (and filtered through) poorly.

Luckily I've learned from that (I hope!) :)
I'm not particularly smart. But I am resilient and will keep trying until I figure it out. Books and classes are great, but you can't depend on theory alone. Practice makes perfect. When you do, you understand why things are done a given way.

If I could go back in time, I would tell myself to stop reading so many programming books. I'd make myself write the code everyday. Rather than read about it. Figure out what it is that you want to learn. Then start practicing and learning the theory.
And I'd fire him too, any IT manager that can't support a Blackberry doesn't deserve to be an IT manager. Not to mention his bad attitude in not even trying.
>The place where this is most pernicious is when they get a sample from a crime scene and run it against some "DNA database" to find a hit. Then everybody is talking about the probability that X suspect would match the DNA at the crime scene rather than the probability that someone in the database would match even if the actual perpetrator wasn't in the database.

Or the probability that, match or not, the DNA from the crime scene belongs to the criminal.

And not, say, someone the victim came in contact with earlier, someone that happened to be in the crime scene before the crime took place, or even some third guy the actual criminal took a DNA from in order to frame him.
I would say one of them could be in making the utility (electricity, gas, water) more user friendly. Transparency hardly exists and there are seldom interactions between companies and subscribers. Focusing on user experience in this area could be an opportunity...