skysight-inc/HackerNews huggingface dataset:
"Only if you're typing in pass codes to the lock screen, which isn't how its done. An attacker would instead image the flash, grab the Dkey from effaceable storage, and decrypt the filesystem. Indeed this is exactly how professional iOS forensic analysis kits work. This will get you access to SMS, photos, and anything else that doesn't fall under Data Protection."

Yep, as I suspected, you haven't done this ;) Please don't discuss how "simple" it is if you're getting your info from third parties. You can't image the flash. None of this works how you think it does, because the forensics toolkits left out a crucial detail in their marketing.

The dirty secret? You need a 0day bootrom exploit. The professional kits use the limera1n exploit, which was patched years ago.
>If you're making a high wage but can't convert that to assets where you live, are you really middle class?

Well, a family of two folks making valley sysadmin/programmer wages is making like $200K/year. Even single-earners in that tax bracket can buy real estate. (during the crash, I know a lot of single people who bought condos.) Real-estate here is not unaffordable for employed Engineers.

I would certainly have a fairly nice place (or several shitty rentals) if I wasn't spending all my money on servers.

But yeah, I agree that if you only have income from labour and don't have any assets, well, you aren't really middle class in a meaningful sense of the word. I'm just saying that it's pretty reasonable for people in my industry to buy real-estate around here. And that's not the only 'means of production' you can buy; that's just the easiest means of production to get loans on. All my money goes to servers (well, I buy servers... I actually spend more money on labour, electricity, and data-center space, but I rent those things, which is a rather different thing.)

Edit: most of my developer friends aren't big spenders; if they don't own a house, they have a thick 401k, and often a stock portfolio outside of that 401K. Most of them have substantial savings. I think it's fair to call them upper-middle class, even if they don't own the house they live in.

(Note, I'm mostly speaking of the previous generation here; the 30+ folks who came of age during the first dot-com.)
Does this fallback to gravatar? I'd be interested in a service that does something similar to Rapportive and just gives me a picture for an email from any source. Only a quarter of users have avatars [1] but when you add in linkedin, facebook &c that gets much higher.

[1] http://euri.ca/2013/how-many-people-use-gravatar/index.html
Thanks I'll look more into how TweetFS works.

I was just kidding about the hijiacking comment; don't people know how to interpret emoticons anymore? :D
good suggestion. you probably want to encode some redundancy so you can pick plausibly interesting people to retweet, rather than your xor'd number being an obvious bot, or it's still suspicious.
You can swap the logic board. They sell these for $80 or just trade with somebody who has a backlisted IMEI in UK/Australia for your US blacklisted phone. There's a bunch of crime forums that offer this service
> Arg! That's not a unit test at all! It touches the database, which is hot lava! Worse still, it touches the filesystem! It'll be really slow! And it has too many dependencies!

The reason these things are bad is because something outside of your tests can break them. You can have odd failures when you're running two sets of tests in parallel, for one.

It is not because it's just slow.
What about gargling cream? Objects are difficult to gargle when they're below their solidification point.

Off-topic: Would it be accurate to describe non-frozen ice cream as "molten"?
It's a great question. I'd say for myself I've been hesitant to use CPython or PyPy simply because their documentation seems focused on the extremely technical, rather than a person just trying it out for the first time.

I know Python, and I know C. But I'm worried ending up down rabbit holes in PyPy and competitors. I've not been able to find a really solid tutorial or parse the docs very well.

Perhaps it's just me, though. That's always possible. I just see a large barrier to adoption.
Is it a big deal if it's obvious that the corpus is of tweets? There's many many ways to build one and order the tweets, right?
I just watched the trailer for the movie (http://www.youtube.com/watch?v=ZT1wb8_tcYU)...without knowing WikiLeaks' and Assange's distaste for the movie, it's hard to see the trailer as anything but positive for Assange. No mention of the sexual assault charges, but instead, a prominent focus on the early revelations that earned Assange the sympathy of many: leaking the footage of the U.S. Apache attack (http://www.collateralmurder.com/) and of internal documents from the Kaupthing Bank (http://en.wikipedia.org/wiki/Kaupthing_Bank).
Writing "The group simply called “CCC”" when referring to Chaos Computer Club, one of the most important hacker collectives in the world, around for 30+ years and responsible for the largest hacker conf in Europe makes me wonder if the OP has any knowledge about the security industry in general and biometrics in particular.
I don't get why people are making such a big deal out of this. The iPhone lock screen is not intended to provide very strong security. I suspect the fingerprint scanner is more secure than the 4 digit PIN it's replacing for most users.

I've got a Thinkpad with a fingerprint scanner from 8 years ago. Works fine, but frankly it's easier to just type a password.
What about drugs? Are there any?
I find it funny that you say you're treated as a second class citizen. You're not a citizen so why would you be treated as such? I immigrated to the US many years ago and was treated very well considering I was a guest in this country.
Your post implies that rare interactions with the utility are somehow a problem - IMHO a perfect true utility would get even fewer interactions, ideally 0; just bill my account for what I owe for water and ensure that water always works...

In an ideal world should have exactly 1 interaction with my utility ever - when I move in, give them my details and sign an agreement. If they need a second interaction, then that's likely due to some problem or failure.
Funding, VC, entrepreneurship, products, customers, failing, etc.
http://www.theaustralian.com.au/arts/film/julian-assange-say...

Basically layers of silly Iran nuclear weapons fiction.
Sure, but that doesn't mean it's widely known enough to use in marketing.

I associate it with a 3D player model like in Second Life, not 2D photos in large social networks since they mostly don't use the term.
Interesting link!

I think the explanation is that homeschool parents are not providing "tutorial instruction" to their children most of the time (that's the 2 sigma effect). I don't know of good statistics of actual parent behavior but from my homeschool readings it seems like parents often provide something like "reinforcement", "cues and explanations", and "student time on task". Those are 1 to 1.2 sigma effects.
People actually do other actions on their phone after unlocking it.

If somebody swipes on their homescreen, browse the web, etc, the trail would not be just the unlock pattern.

The exploit you're talking about may work if you get hold of the phone right after the user unlocks it since the trail only has the pattern.
> Free software does not mean "non-commercial," it's free as in freedom.

Stallman strongly disagrees with you about that.
One serious use case is to seed the generator with a spam email corpus. This lets you generate messages that look like spam. Example:

wget https://spamassassin.apache.org/publiccorpus/20030228_spam.tar.bz2
tar -jxvf 20030228_spam.tar.bz2
cat spam/0* > spam-corpus.txt

echo "The Magic Words are Squeamish Ossifrage" | plainsight -m encipher -f spam-corpus.txt > spam_ciphertext

$ cat spam_ciphertext
(8.11.6/8.11.6) 3 (Normal) Internet can send e-mails until to transfer 26 10 [127.0.0.1] also include address from the most logical, mail business for your Car have a many our portals ESMTP Thu, 29 1.0 this letter on internet, <a style=3D"color: 0px; text/plain; cellspacing=3D"0" how quoted-printable about receiving you would like width=3D"15%" width=3D"15%" border="0" width="511" Date: Tue, 27 Thu, 19 26 because zzzz@localhost.spamassassin.taint.org for

$ cat spam_ciphertext | plainsight -m decipher -f spam-corpus.txt
Adding models:
Model: spam-corpus.txt added in 2.57s (context == 2)
input is "<stdin>", output is "<stdout>"

deciphering: 100%|#####################################################################################################################################################################|543.84 B/s | Time: 0:00:00

The Magic Words are Squeamish Ossifrage
What a brilliant (if unintended) publicity stunt for the movie ;) More seriously, I think Assange is acting a bit like Zuckerberg vis a vis The Social Network. All in all, Zuckerberg was the hero of the movie .. he was portrayed as a brilliant hacker and visionary (if flawed) businessman. My feeling is that Assange will be similarly portrayed (except of course replacing "businessman" with "journalist").

If a movie were ever to be made about me, it would feel insulting to be portrayed as flawless. There are no great characters without flaws.
>More risk for me as an employer means I don't hire anyone until I've exhausted every other possibility.

Doesn't matter, there would be someone else who does hire. Or you thing jobs would dissapear if people dont have a cushy road to business success?
just as hard to break if you're doing it properly: one bit per tweet, encoded as 'message ends with period = 1, no period = 0', and that's your ciphertext stream. from then, AES or RSA or a OTP or whatever you want.

Then what you're writing will be functionally indistinguishable from random.

hmm ... but maybe too random, humans are bad at being truly random - the entropy in your period usage will be too high ... perhaps xor the RSA output with a OTP of something 'random' you scribbled yourself on a page ;-)
I find why's book really obnoxious, but I think learn you a haskell is excellent, so I don't really know if there's just a point where it's too much, or if sometime it's just done terribly.
Teaching users to create separate accounts might be better, but so would any number of impractical suggestions.

It is perfectly reasonable to expect an application to provide more security than the user account provides because in the real world, we know that people don't always lock their computers. Not all applications are risky, but one that centralizes a users credentials is clearly so.

Pretending otherwise is simply not acknowledging the real world.
Its an improvement. The typical pass has 4 characters so 10,000 possible combinations. Doing about 1 per second would find the password in the worst case scenario in about 3 hours; simply by trying all possible combinations.

I think trying to lift a usable fingerprint off a glass surface would be significantly more difficult than that.
We prefer the kinds of companies that offer stable employments and long term businesses in Europe (and "lifestyle business" that is what we call "actual companies"), rather than startups aiming at some acquihire or fast cash-out that benefit mostly their founders.
Prediksi Skor 1860 Munchen vs Dortmund
Prediksi pertandingan kali ini akan memprediksikan pertandingan 1860 Munchen vs Dortmund. Siapakah yang menjadi pemenang di pertandingan kali ini.
The content of the corpus doesn't matter, so the answer to your first question is no, and yes, if you're clever in terms of how you've composed the corpus so that no one could re-create it easily, then it's ok (relatively speaking, of course).
It may not be necessary for all those people to give LinkedIn access to their email address books. Say you're A and you see a suggestion for B. Maybe a mutual friend C uploaded their email address book, which includes both A and B in it, and LinkedIn's PYMK can use the feature "A and B have a mutual email-network-friend", which might be useful.

Given that email address books are really large, only a few of them might give lots of these sorts of second-order connections.

Second order connections on the LinkedIn network could be driving these recommendations too. People's friend-of-friends sets can be really large, like typically tens of thousands if I remember right...
When you say CPython, do you mean Cython? I've only recently learned what "Python" really is myself, and it's easy to miss the difference between these two:

http://en.wikipedia.org/wiki/CPython

http://en.wikipedia.org/wiki/Cython
This is fairly unsurprising to anyone with even a modicum of understanding as to how these sensors actually work and the decade long history of researchers breaking them with Photoshop, gummy bears, latex and spit. What concerns me more is the claims they make about the "secure enclave". Maybe I'm just paranoid, but historically if data does exist, then it will be abused. The TouchID sensor, coupled with its strong bullshit security claims by Apple, in addition to the claims made about how data is never sent by Apple because of the "secure enclave", makes me think that this would be a very convenient way to create a global voluntary fingerprint database tied to every aspect of everyone's identity without freaking anyone out. If a government were to release something like this, they'd be sued into the ground and screamed against for breaking core privacy covenants. But when Apple does it's just brilliant and revolutionary.

Reasonable technically informed paranoia is what made the NSA releases fairly unsurprising to me as well. My rule with security is that if it can be done, then it will be abused. It's basically a Murphy's law for humanity.

Trust nothing. Trust no one. Doubt everything.
With the right rotation, any direction can be pointing "up".
No...in America, the standard to prove defamation against a public figure is very high: the plaintiff has to prove actual malice (http://en.wikipedia.org/wiki/Actual_malice) was used in publication. I imagine the standard for a movie, which besides using the "based on real events" disclaimer, has the additional benefit of artistic license on its side.
This is actually VERY true. I talk to people in the top 1% income bracket and they talk about not being rich because they can't afford things like: private school for their kids, a house in one of the most expensive areas of the country and retiring at the age of 55.

I make a very healthy income in the US, but live in a very expensive area as well. However, I consider myself very fortunate to have the life that I do, even though I have to settle for things like: public school for my kids and not driving a new car every few years (shudder!).
Thanks for raising the level of
discourse by several notches!
Very cool. I would love to see immutable, persistent data collections as offered in Clojure.
Get a users Facebook email via client side(HTML5) only auth
Brain technology. Eventually 'wireheading' is going to stop being science fiction and start being science fact. The people who commercialize that technology first are going to swim in oceans of money.
PyRadio - CLI Internet Radio Player
PyRadio is a console based Internet radio player. It is implemented in Python, and uses mplayer for media playback.
>That would work in the sort of Hollywood movie where the government has everyone's DNA on file.

You don't have to have "everyone's DNA on file". It's actually pretty trivial even for your neighbor or whoever to get your DNA.

As for the police falsifying evidence, there's a wikipedia-long history of cases, in Europe, Latin America, Asia, etc. Especially in politically charged times, like the sixties and seventies. Heck, something like half of Italy's government in the 70's have been proved in later Italian courts to be involved in such things.
Anything that is currently controlled or regulated by governments will get decentralised to the net by private enterprise.

Education,
Medicine,
Law,
Jobs,
Banking,
Sins (Most already there),
Importation (3d printers).

My guess.
It's important research. Everyone seems has their own idea of what the "intention" of a security feature is. Now that we have results, there is no need for speculation and debate. This is how we improve security and keep an informed public.
Space / asteroid mining

http://www.youtube.com/watch?v=dVzR0kzklRE

"Space is where the first trillionaires will be made"
Probably to get across the message that biometrics are not a secure replacement/alternative to passwords, contrary to what most people think because they feel that no one else can "fake" their fingerprints.
Coppola didn't use American helicopters though, he borrowed them from the Philippine army. That's what Hearts of Darkness (the documentary you probably saw) revealed, at least.
>I don't think it's reasonable to expect a movie about Wikileaks to be any more accurate than, say, a movie about Facebook.

That's why I have a problem with movies like The Social Network and Zero Dark Thirty. It's fine to composite, or eliminate less significant details, or even play some details up for their metaphorical significance. My problem is with movies containing counterfactual plot points that change the entire moral calculus of the events being depicted, often in favor of the status quo.

It's as of you made a movie about the Iraq War, and based a key scene around how they find a bunch of WMD in the desert. Or depict Martin Luther King on the phone to his handlers in the USSR, or delivering "I Have a Dream" at a rally against racial quotas in hiring.

These movies become history.
I've started getting a lot, at least once a week from accounts barely a week old.
I'm saying that the ideology behind the American could be mistaken as being from a self help book.
I don't see hundreds of thousands of fingerprints being lifted from people to fabricate 2400 dpi fake fingers 'every day'.
> They're probably more worried about bad press than the payout for the case.

That makes sense. But they have to weigh the pros of arguing the case in public, versus the cost of exposing their reasoning, such as it is.

Also, by saying they had the right to mine people's address books, but without explaining how they think they acquired the right, they risk a pretty big public backlash.
Thanks :) I'm working on improving the UI a little more, as well as provide a little more clarity. It's checking OpenTable every minute (and will attempt to book it right away if it's available) even though the UI doesn't show it. I'm even thinking of showing a persistent progress bar or Ajax spinner just to get that motif across.

I wrote a program too for Momofuku Ko. I'll add in more adapters depending on user interest.

I also wrote the program partly in response to https://news.ycombinator.com/item?id=6101161
There is not a market for every idea. There are, literally, a thousand other entries in this market. Sometimes the best help you can give is "let it go".
what happens if you have more than one js? of course you should only have one, but I may have a js file from my server and load jquery from google cdn.

in the example you can just appens the same code for each file
The last film to mock the U.S. military was Dr. Strangelove, after which there was no military-sanctioned Hollywood film until Top Gun, 30 years later.
Looks like fingerprints have 30-40ish bits of entropy depending on how forgiving the device is, so unless they're doing some key stretching it should be practical to produce an image of a similar fingerprint by brute-forcing the hash with every biologically likely fingerprint.

http://lukenotricks.blogspot.com/2009/04/on-entropy-of-finge...
I found it interesting that you can see faint traces of where some of the sample images from Burmese/Myanmarese women were wearing thanaka. It seems like in a lot of other countries the sample images are likely to include that particular culture's makeup styles.
I'm not a lawyer, but I thought most contracts had clauses that said that if one part of this contract is found to be invalid, the rest of the contract still holds. In other words, each part of the contract has to be struck down individually for the whole contract to be struck down.
> the journalist apparently didn't know a password he was given for files for his own use was being reused to secure a public insurance file

I think he got the file from bittorrent so he knew it was public. Not making an ecrypted archive just for him with a new password was Assange's mistake, no doubt about it, but publishing that password in a book takes it to a whole new level.
I don't believe Apolcalypse Now was made with any cooperation from the U.S. Department of Defense. It was too soon after Vietnam.
What's to prevent one of the incorporation mills from creating a flat fee syndication platform to manage the LLC and provide template documents? Asking for % carry as a platform that streamlines the legal filing and record keeping seems aggressive.
I think that how smart you are is influenced a lot by inner psychological traits, specifically:

1) How rewarding and enjoyful you find learning new things. I don't mean learning pi to one 1000 digits, but higher level concepts like learning macroeconomics.

2) Generally enjoying thinking.

3) Being a perfectionist. For example, when I see some corner case problem in one of my "theories" of something (usually related to computers, economics or philosophy), it really bothers me (i.e. it has nothing to do with being smart, it's personality trait).

So perhaps if you try to nurture these traits, it could make you smarter, but that's just a speculation :)

More practical advice: read quora.com. There is a lot of really high-quality, interesting and thought-provoking content there, written by some incredibly smart people.
I didn't say "simple." I said "trivial" :)

Nope, I've never done this live. For this I'm reliant upon what I've read. Feel free to tell me what's wrong. Stating how it works, or pointing the way to an accurate source, is infinitely more helpful than saying "you're wrong", even if it might feel satisfying.

Here's my understanding of how the initial loading works. BootROM uses a series of RSA validity checks on the chain of software components to load the RAMdisk (which is used for update in DFU mode.) To load your own RAMdisk, you need an exploit in bootROM (which are the same exploits used for jailbreaking, and thus of high value for the community to discover.)
Another example is all modern JS engines — they are JITing compilers very much tuned for the short-runtime use-case (often to the detriment of long-runtime use-case).
Wouldn't it make more sense to dig deeper into the crust first? When it comes to minerals mine-able from an asteroid.
I think the point is that to some people, having an extremely flattering view of them put forth is less important than having an accurate view.

In part, that may be because people assume if their reasoning is exposed then the public would be with them, so that's flattering enough. (Logically, it's not possible the public would always agree, because otherwise we would never have disagreements).
I think robotics. We'll eventually see robotic transportation, construction, supply chains, agriculture, and cooking.

Much the home will be automated, includes search and storage and cleaning. It will get smaller, lose the need for a garage, and be easier to lease out, reconfigure, move, replicate.
Getting a precise enough print is the hard part. Note that they started with a perfect, carefully staged print, so they haven't really cracked it.
Why we don't sell ads [2012]
Yeah, that's going to move consumer devices. "Now harder to use!"