skysight-inc/HackerNews huggingface dataset:
I can't find the exact "100% success" quote to put it into context, but for one thing, it's a six-plus year old document. It's possible that they had an exploit at the time. An exploit doesn't require Apple's cooperation.

The document also doesn't claim this success remotely (only "A remote installation capability will be pursued for a future release", which really gives no clue as to how possible that was or is). We've always known that pretty much any mobile device can be vulnerable with physical access (that's what "jailbreaking" you phone is doing).
Water has been found on Mars, again?
By all means, have a separate, passphrase-protected key for each separate device (desktop, laptop, tablet) and push them to your machines using something like chef and the 'users' and 'sudo' community cookbooks, at a minimum, and destroy the .pem after you initially set up the host.

There is a reason that Amazon only configures one user with only one key, and it's not because that's how sane people access their machine.
Believe it or not, it happens, just look at the cases at the foundation
When you put it that way, it seems clear that this kid should be working on Wall Street.
I appreciate the author's opinions overall, so this is a nitpick of just one of his core arguments. I think he is inverting the value of certain kinds of questions. To me, Stack Overflow is valuable primarily for the simple answers to simple questions, and secondarily for the complex answers to hard questions.

As a software developer well into my second decade of professional experience, I maintain a small number of technologies at what you might call an expert level. These technologies shift in and out of focus depending on what my current projects are.

When I complete a project and don't use the technology for more than a year or so, I've found that I forget all of the nitty gritty stuff and remember all the big conceptual stuff.

For example, I recently returned to Java after several years of disuse. All the bit conceptual stuff that was really hard for me to pick up initially, like polymorphic behavior, multithreading, etc., was still there. The easy but nit-picky stuff was all gone. I'd forgotten when boxing happens and doesn't happen, the behavior of equals in reference vs value types, even where I'm supposed to put certain syntactic elements. Simple questions on StackOverflow to the rescue!

As another example, I did a large project involving SVG in the early 2000's and got to the point where I knew as much as there was to know about it. I recently did a quick one-off project that utilized SVG, and I found that I'd retained the big conceptual ideas, such as the behavior of the coordinate system, the hierarchy of shapes, viewports, groups, etc., but I'd totally forgotten a huge laundry list of practical nitty-gritty things about actually making an SVG experience work.

In the Java example I was embarking on a large project, so I hit the books and re-taught myself to fish again, because it was quite worth my time investment to start from the fundamentals and work my way back up. In the SVG example, I literally just wanted to do something in an afternoon, and I knew SVG could do it, and I wasn't going to do any SVG work after that. Hitting the books and teaching myself to fish in that scenario would have been a waste of time. So I plowed through and was helped immensely by the simple-question simple-answer Stack Overflow scenario.

Then there's a whole list of technologies that I really don't have the brain-space to keep abreast of, but I still need to use. For example I am not an expert at shell scripting, but on occasion I need to write one. Back to Stack Overflow and the simple answers to simple questions.

Before Stack Overflow I wouldn't have been in the dark--as a long-time Internet community member, I would have gone through the usual: find the right community with the most helpful people, hope the community has a search engine or is well indexed by Google, read through long lists of replies without a voting system or assessment of quality, rinse-repeat. Stack Overflow speeds that process up immensely.
Scaling WooCommerce - The 5 Largest Stores
IAM rotates ssh keys?
That must be the most comprehensive study on binary executables I have seen so far. Looks amazing!
How is Google supposed to determine copyright status of arbitrary sites/"links"?
I suggest using a TrueCrypt volume with your credentials, stored on Dropbox.
A few things you can do back up your private key safely (correct me if I'm wrong here.)

- Encrypt the pem file with a gpg passphrase you can memorize or put in a password manager

or

- Create a new IAM AWS account with a strong password, turn on 2-factor authentication, and grant access to the keys bucket for just that account. Make sure you turn on S3-side AES256 bit at-rest encryption for the file.

The latter still has the risk of a complete AWS breach and S3 encryption key compromise, or someone hacking into your admin account somehow (in which case you have bigger problems), but that seems much less likely than say someone just snagging your laptop and getting the key off of it.

In practice I have a single jump node in a VPC facing the internet in a security group with my IP whitelisted that has 2-factor authentication with a PAM module for google authenticator and a strong password, so they would need my phone, the password, my IP, and the backend nodes' private key to get to any machine.
One thing to take note of is that they specifically deny working with the NSA. They could very well be working with a contractor or another US government organization and not be lying.

Not saying that they necessarily are. Based on what I've read about the NSA I think it's very plausible that the NSA both has a backdoor from Apple, one from the baseband software (http://www.osnews.com/story/27416/The_second_operating_syste...), as well as a several hacks they've developed on their own. Their strategy is not a single path but rather as many attack vectors as possible.
The irony that Atlas Shrugged is on the list and massively protected by government IP law is deliciously sad.

More interesting is that Tesla is part of the class of 2014 for 70 year countries :)
50 year countries get some nice additions (some real heavyweights): Robert Frost, Sylvia Plath, William Carlos Williams, Louis MacNeice, Jean Cocteau, C. S. Lewis, Aldous Huxley
What about encrypting your pem file with AES (using 7zip on a Windows or OpenSSL on *nix) and then backing it up to the cloud?
Furthermore, with scientific computing, it's important that code you publish in a journal (fossilizing it) can still be at least near-usable to others over time horizons of years to decades.
Ironically, the question you linked to is exactly the kind that gets closed so often on StackOverflow as being "not a real question" or some such. Thankfully, when they close something it doesn't get deleted.
That's really cool, and each of those pictures makes sense. Anger, for example, looks like turning on the brain and arms in order to strike; disgust is the gut and mouth trying to retch; happiness is mostly in one's head; depression is a void; pride is a bursting chest and so forth.
I don't think Bitcoin will ever be a viable currency, at least not on the scale of national currencies. Despite all the flaws fiat currency has, it is actually backed by something - the power of the country's government to tax. Thus, any buyer of sovereign debt has a calculable probability of return. Despite America's printing of dollars, inflation has actually been mild so far.

Bitcoin has nothing backing it but an artificial supply limitation. That in itself is not a solution because its monetary base cannot possibly grow at the rate overall goods do, and thus have a stable price point.
I only answer questions that aren't googlable. Edge cases in hedge libraries basically. I give comprehensive and detailed answers that reflect the hours of research I had to do. They get upvoted a few points every now and then.

I once answered a Java frameworks question with an opinion. It has gathered nearly a thousand points over the last few years.

The game is broken. Bad answers to stupid questions get all of the points and I raise an eyebrow every time a CV lands on my desk enumerating the candidates SO points.

But it's still a well optimised site that beat experts exchange, so it doesn't matter too much.
It is amusing to read about people complaining about how many homeless people there are in SF without seeming to consider the reasons why other cities have fewer homeless. This article further implies that with such high taxes we should be able to "get rid of our homeless" more effectively than other cities.

On the taxes, SF doesn't have a city income tax. So unless the writer is a property or business owner, they're not directly paying taxes to SF aside from a 1% higher sales tax. Compare this to the 3% personal income tax in NYC (on top of the taxes listed above).

Homeless factors include: good climate, fewer beatings from cops, fewer beatings from citizens, no bus deportation out of town, crazy people often head west until they hit water, better free health services for the poor, popular tourist destination means good pan-handling.
Build your leveller's idea of Stack Overflow, then, and let it compete on its merits against the one which already exists. I'll be interested to see the result.
Required reading for anyone who didn't see the paper last week:

The Slow Winter by James Mickens
https://www.usenix.org/system/files/1309_14-17_mickens.pdf
Web Audio API showcase: AV MultiTrack Music
Another +70 for now in 2 hours on HN, not bad, hmm I should link some answers of mine here ;)

Coming back to the SO topic, I got my initial ~600 pts within just a few days on "who's first", but it's not fun to do it long term. Then got ~400 pts for Java trivia [1], now I usually just write my 2 cents when googling for something and finding the best answer not satisfactory.

Sometimes I also self-answer myself for certain things I think could be useful for others, or me-in-the-future e.g. [2]

[1] "What does the “+=” operator do in Java?" - it's more than x = x + y;
http://stackoverflow.com/questions/7456462/what-does-the-ope...

[2] http://stackoverflow.com/questions/5924937/lucene-custom-sco...
>The AWS Console is perfectly usable for 99% of what you'll need to do. Most users won't need anything beyond it.

I believe the author was referring to navigating the filesystem and running commands via CLI (e.g. `cd` and `ls`, not `ec2-describe-instances`).
But internet transactions for most people are a one way street. You still have to pay the fees to go from USD to bitcoin for all the bitcoin you have.

Also, this exposes you to crazy risk because of price fluctuation. Bitcoin has fluctuated over 3% today, and today is a relatively flat day for it.
...unless the subject of your inquiry is something like Angular, where the documentation is severely lagging the info available in their own Disqus comments and SO.
Did you work at Entertainment 720?
What if I've never heard of Madonna? Does the law actually encode some sort of pop-knowledge into itself? If I see a screenshot of an apparently home-made video am I supposed to think "small band that probably intentionally released this video to get more attention = OK" or "probably a filter added by a popular band that doesn't need more attention = Remove"?

This is ignoring jurisdiction, too. IIRC, AllOfMp3 operated for a while since in Russia they could buy a blanket copyright licensed and successfully used that to legally make sales until Visa illegally turned off payment and finally the Russian government got them to acquiesce. Yet the site was legal, despite everyone else accusing it of infringement.

Edit: Also, yes, perhaps the law is saying "well if you really knew" and leaving it to the courts. But there's also cases of where Viacom uploaded content, then sued over it, not knowing they themselves had uploaded (and hence licensed it) to YouTube.
Given that almost all early iPhone OS and iPhone have bugs and vulns that allow jailbreaks and carrier unlocks, it's completely unsurprising that the NSA had a 100% success physically.

For example, iPhone 3GS released in 2009 can be jailbroken with 2010-era latest iOS 4: http://www.iclarified.com/jailbreak/iphone3gs/mac.php?firmwa...

I don't think you even need baseband access to do all the spying. I think all of that can be done on a jailbreak.
Had a quick look at Bytengine. Like the idea of using Linux-like file paths to refer to documents.

>Files are JSON documents to which you can attach any binary/text data (docx, txt, pdf, jpeg, etc...).

I'm guessing you store the filename(s) of the attached data (docx, txt, pdf, ...) in the JSON fragment?
What I can learn in 10 minutes that would be useful for the rest of my life?
> Linux has been a very viable desktop for over a decade.

I've been using Linux regularly for the past half decade and daily for the past year as a PC (as opposed to as a development and deployment target for 12 years). No, it's not viable. Not when the competition is Windows and OS X. I'd explain why, but it'd devolve into a huge rant about poor UX, drivers, audio services, file system snafus, grub upgrades gone wrong, bad advice on forums compounding problems, all of which get brought up ad nauseum in any Linux thread. Linux is very good as a server, but that in no way translates into being a good PC.

And no, Chromebooks are not a desktop, they're "browser appliances".
6 months residency is more than enough time to become acclimated to the cities problems and be a champion of fiscally acceptable infrastructure solutions, right? No. It is not.

The author makes a very fair observation. Side note, the idea that some people "deserve bad government" is one if the single most ludicrous things i have ever read on HN
I use Pinterest (http://www.pinterest.com/anthonycreek/), but I'm quite selective of what I pin so I can easily see and appreciate everything on my boards. I also only have a handful of boards.

I see people with dozens of boards and thousands (even tens of thousands) of pins. I don't know what the point of that is unless you are trying to simply grow your following by being everywhere.
If that's the case, it's kinda pointless advice - none of the commonly used Linux AMIs have GUIs installed, and someone who can install X on one probably knows the CLI already.
He quoted me, then proceeded on a tangent completely unrelated to it, about free health care which doesn't cost money, and a make-believe world which apparently I want to live in.

I have trouble relating the quote with his arguments, because I said nothing about 'free' healthcare, things which don't cost money, or something make believe. If anything a bankruptcy in a centrally funded department involves make-believe, because it implies that there is no more money; it's a question of priorities and what you want to spend the budget on, and much money has been found for other projects by HMG during this recession alone, for example bank bailouts, wars abroad or tax cuts.
> I don't really like Seattle very much. Their airport uses TSA. [..]

So does SFO. Don't all airports in the US use TSA?

Also, literally every other city you mentioned has Uber available. Speaking specifically to Seattle, we also have Lyft and the other "popular" transportation-as-an-app services available.
So now we're rewriting post-WWII history to glorify entrepreneurs even further?

If anything, most efforts and programs that resulted in the remarkably fast restoration of countries ruined by the war would today be labelled as examples of "socialist" big government.
Distributing "The Lord of the Rings by George RR Martin": Boatloads of cash
> Why should I on the death of an author be able to reproduce their work and sell it? Why should that be the case after 28 years or 75 years after the death of the creator be able to take their work and profit from it?

Because information truly wants to be free, and should be. Copyright is a legal construct that exists to make it financially viable to create. Creation and innovation drives society forward.

> The chilling effect on work is not a result of the author, but the company who pays for the work that allows the author to work on the book for years. Why would a company give advance an author, spend money promoting/printing/distributing a book if they can not make royalties on it x years after the author dies?

They do already. There are 220,000 books published in the United States annually. What fraction will still be in print in a decade? 50 years? 100?

> That serves the purpose of Disney spending billions on theme parks to further develop the brand, to further invest in their brand, establish their brand all over the world which creates jobs fueling the global economy.

Letting works slide into the public domain doesn't prevent that. Disney still retains the ability to evolve the story (ie. create). Let Mickey and Minnie have kids, and make that part of the Mickey Mouse canon. Two hundred years from now, Disney can and should evolve their brand, including their theme parks.
Making friends is what ultimately drove me away from SF. I went in knowing one person, whom I relied too much on socially. As he and I were both working long hours, in separate startups, it became more and more difficult to sustain myself and fulfill that personal need.

I loved the size, the atmosphere of where I was living, the noise, the weather (MN kills), the amazing coffee and food, and the lack of need for personal transportation. It was strange in that everyone I met outside of tech was great, while a majority of those who were I really didn't care for (this is being kind; although it's not my intent to state that everyone in the SF tech scene is my enemy). But again, working in a startup, with those expected hours and meeting deadlines, it would've been borderline impossible.
me and my alt currency enthusiasts think of bitcoin as simply virtual gold.

done.
Look at http://thefoundation.com/three-students/, those guys do that over and over again.
I wonder who actually made the call to destroy these things? Does an individual customs agent have the authority to do this?
The note I got from support says: "A pro-rated credit will be applied for any unused portion of your existing plan towards the new service."

That said, since they are choosing to break a pre-paid annual agreement I presume one can demand and get a pro-rated refund.
You seemed to be implying that most peoples' interest in BTC is related more to its inflating exchange than anything else. I was remarking that I like to see willful ignorance, people who care not about actually understanding BTC, be punished for it.

At any rate, there need not be any point to what I'm saying. Sometimes, a comment is just a comment.
"It is only those with post-graduate degrees who see a sharp rise in the upper income brackets. However, we tend to lump them all into a "college degree" category, which allows the latter group to bring up the numbers. Unfortunately, this leads people to believe that getting any college degree is a prudent financial decision, even though the data does not back it up."

Incorrect:

http://www.bls.gov/emp/ep_chart_001.gif
He should be paid no more than attorneys paid by the government under the Criminal Justice Act, 18 USC 3006a. He has no reason to interview board members--that's ridiculous.

On the other hand, what is really going on here? You would think that Apple would roll out the red carpet. Most companies, when faced with the imposition of a monitor--most often you see IRS auditors--go overboard making them feel at home. It's a way of winning the monitor over to the company's side. Did Apple try this and fail? Or did this monitor, accustomed to that kind of treatment (remember, this is his fourth "monitoship") blow his stack because he didn't get a key to the executive washroom? I suspect the latter.

In any event, there is no reason for the USG to be paying at greater than government rates and if Apple is reimbursing the government that is still no reason to charge greater than government rates.
You're thinking of AWS access keys. Not the same thing.
This is like RSA saying they had no secret contract to create a crypto backdoor. Really finely phrased, doesn't actually say much.

Apple most likely wouldn't work directly with the NSA but with an entity like the FBI. The contract wouldn't be with the FBI but with a company also contracted out to do some of the work like Booz Allen Hamilton.

I'm started to wonder who "we" actually means in these responses as well. Is this the stock-holder we, the CEO we, or we as in employees of Apple as a whole. I suspect it is not the latter one.

We still don't know the point of entry for this malware and I have no more reason to suspect it is done by the shipping carriers than I have reason suspect the hardware makers themselves.
Hi Michael, I didn't know you were on HN! For those who don't know, "Nielsen and Chuang" is the bible of the field of quantum information science.

The eqref-expanded-in-margin is a very cool idea. It could probably make sense for referencable environments like theorems and lemmas.

Do you have any recommendation for the .tex --> .html conversion?
Your post is very helpful because of the examples.

Lets take the Disney example. Lets assume the non-disney original Snow White had a Copyright and was not in the public domain. That does not mean Disney's version violates the copyright, it is very likely there was enough change in Disney's version from the original that Disney would not be found to infringe.

Pride and Prejudice with Zombies: Assuming the creator of Pride and Prejudice had a valid copyright, without being familiar with either work I can almost guarantee this would not be Copyright infringement because it would be valid under the satirical exemption to Copyright infringement.

The Clueless and West Side Story examples are more difficult because I am not familiar with the works and the verbiage "inspired by" "based on" is all I am going off of. But this was my whole point regarding the OP that there is an assumption of copyright infringement. Just because a work is "inspired by" or "based on" does legally mean there is infringement. These individual examples would need to be analyzed on a case by case basis to determine if they violate copyright law or not.

All I advocate for is extension of the term of a copyright not an expansion of the right itself. In which case I would argue most of your examples would not rely on the underlying works being in the public domain, because they were changed enough to not constitute infringement as opposed to say a 1 on 1 copy of the original work.
let's change the jargon!
if you're pro/bullish on alt currency --> bitish (B)
if you're con/bearish on alt currency --> dolish ($)

this is the internet. make it happen.
Looks like CBP's own guidelines explicitly allow dried bamboo products. https://help.cbp.gov/app/answers/detail/a_id/1359/~/importin...
I was careful to say "Unix strings", not "ASCII". A Unix string contains no nul byte, but that's about the only rule. It's certainly not necessarily human-readable.

I don't think a programming language can take the position that an OS needs to "adopt better encodings". Python must live in the environment that the OS actually provides. It's probably a vain hope that Unix strings will vanish in anything less than decades (if ever), given the ubiquity of Unix-like systems and their 40 years of history.

I understand that Python2 does not handle Unicode well. I point out that Python3 does not handle Unix strings well. It would be good to have both.
Making the Paper Snowflake Web App, Part 1 – Layering canvases
What could possibly be a better backup than a bit-for-bit identical copy of your drive, kept constantly up to date? All you have to do is remember to remove one of your drives and replace it with another one... your backup isn't very safe if it's still in your PC!
Why do you need so many failure stories?

One failure story per week should be sufficient to be constantly aware of typical problems.