skysight-inc/HackerNews huggingface dataset:
Not quite: for example, iOS doesn't allow apps to access the SMS database.

In light of recent leaks, it's still pretty obvious: think a repackaging of OTA jailbreaks (like jailbreakme from the iPhone OS 3 era) plus Foxacid.

You could make jailbreakme not display a dialog or install Cydia, and the user wouldn't notice anything except their phone got warm for awhile and has a newly opened port for SSH.
No, Google sort of does this with their bug bounties for Chrome.
So what, you're going to get all the way to the job offer without knowing their name?
Ask HN: Who is building something new in Python 3?
The post today about Python 3 has me thinking about what to use for new projects. It is clear that many people are choosing to stay with Python 2.x because they have a large, active codebase that would be difficult to migrate.

If you have started a significant project recently in Python 3: What is your project, and how has the decision to use Python 3 affected the project?
It's a nice story, but anyone familiar with mechanical feeding systems[1] could tell you air jets have been commonly used to reject parts for decades.

[1] http://en.wikipedia.org/wiki/Bowl_feeder
He speaks 22 languages in a 3min one man show.
Sorry, deleted because I was going to check out of this, but you replied.

I'm glad you finally found yourself a primary source, however that still doesn't prove your thesis that this particular incident is an example of what you are talking about.
Seems Gmail tabs don't work with multiple inboxes, but I've set it up. I guess I'll have to be more liberal with unsubscribing without emails being sorted into tabs.
Doesn't matter if any of this is true or not, it's the perception that counts.

I'm quite interested to see what, if anything, Tim Cook will do or say to reassure the faithful.

"Apple is erasing discussions on this topic at their support forum, right now the whole forum is shut down for a complete cleanup."

http://forums.appleinsider.com/t/161398/nsa-worked-on-iphone...
The reality is that most people are willing to take that risk, intentionally, or more likely not (bystander effect, as you say).

Unless there's literally seconds until the hijacker will be untouchable, that's likely the most rational choice: play chicken with the other passengers, to see who gets desperate enough to act first.

Now, the moment someone acts, all bets are off - some non-negligible subset may quite likely follow the first person, depending on that persons social standing (people are more likely to jaywalk behind a jaywalker in a suit than one in less formal clothes, for example, if neither of them does anything else to get people to follow - our propensity to deviate from the group behaviour depends on how authoritative the person "leading the charge" appears)

Similarly, if at any point it appears that the hijacker will suddenly become impossible to take out, it becomes more rational to go first, out of the risk that nobody will act.

But the bystander effect is there for a reason: It is generally quite safe to do what everyone else is doing. Except when it isn't.

In terms of hijackings, as it turns out, it is quite safe: Most hijackings, even after 9/11, ends with no dead victims. 9/11 represented a small set of extreme aberrations from hijackings both before and after.

With that in mind, throwing yourself on an armed hijacker only becomes rational once it appears they'll otherwise gain control of the cockpit, at the earliest.
I only understand people have irrational fears. Even with flying planes into buildings, flying is safer than driving. Yet people are afraid their plan will fly into a building... but have no problems jumping into a car and zipping off. There is evidence that TSA causes more deaths, as more people took to driving after 9/11.
I believe some places have much larger prices for businesses, and those that want to offer free wifi. Getting internet through phones is also very expensive. And not everyone has access to DSL.

So cheaper albeit restricted internet would be very welcomed by many. And if you don't want it, then don't buy it. It's just another choice.
"18 new users in North Korea"

How do you avoid violating US sanctions on North Korea?
I'm still waiting for a website to make free websites that let bands setup a free website ;)
> Since every time there has been intervention by my boss prior to an apology, I have no idea if that was requested by my boss or not.

Now that is interesting, I'm guessing that your boss was responsible for those "sorries".

> May I ask what the conclusion was? Did you end up changing jobs?

The conclusion was I got into a lot of trouble for shouting at her, the 2IC was warning me that I could be put on an employment blacklist (he was lying through his teeth), and everyone else just believed her side of the story. I was released from that job a month later. The boss was almost an alcoholic, so I'm not surprised that it was a horror house. I was told that I was "hired by mistake", have you ever come across this situation?
I, like others here, have Glass. My girlfriend dumped me and I lost all my friends but hey now I can wink to take a picture so it's all good.
"physical access", or "we'll run a jailbreak tool and set the 'hidden' property of the Cydia app to true"
I think an interesting question is how many of the 21 million without IDs regularly vote (or have ever voted)?

Hypothesis: Less than 50%
Thank you for your reply.
Option 1. I have a full time job, I am limited in time to learn how to code.
Option 2. I looked into websites like Elance and Odesk and not really sure who to trust based on some bad reviews.
Option 3. I believe can build the website with funds I have. I prefer not to have a partner at this time. Been there before and I usually run circles around them.
You did not mention hiring a web developer / company?
A DSLR from many metres away can capture a far higher quality image of you than a Google Glass camera could, even at close range.
I think Jacob's and Alex's criticisms and attacks on other communities/companies would be more relevant and credible if their own Django community would start being more inclusive, I only see one woman committer: https://github.com/django?tab=members
I read it more that he's expecting Apple to be the company that comes along with the sexy, socially-acceptable version of Google Glass that takes it mainstream. Admittedly based more on the author than his words.
That's why I'm here.
Thanks!
It's a good place to start: http://readwrite.com/2011/01/18/baseband_hacking_a_new_front...
Because it can. Also, because doing things differently is fun. It's API is something to behold, and besides, would you say the same thing about Plan 9, or BSD, etc?
Totally agree. And when one of the suggestions for porting to Py3 is "Decide if the feature is really that important. Maybe you could drop it?", you know something is wrong.
what about the software that he creates? will you stop considering using Django in future projects?
Aren't we missing a critical point here??

> "The initial release of DROPOUTJEEP will focus on installing the implant via closed access methods." [2007]

OK, we knew this much already. I remember seeing a number of stories on how law enforcement can pull data off an iPhone, etc. Not really much new here.

> "A remote installation capability will be pursued for a future release"

Here is the interesting bit. You don't put this in a document unless you have a good plan on how to do it. Obviously with iOS devices having ports closed and being behind NAT, the NSA can't exploit them remotely. However, the NSA is pretty clear that it will have the capability in the future. Note the date on this - 2007.

Since 2007, what has changed? iCloud allows Apple to install and run code directly on your device remotely. Is there any doubt that the NSA would request Apple give them full access to iCloud? So the real issue here is what that last little line hints at: the NSA was looking to get remote access rights to all iPhones back in 2007 and with the knowledge now that they will happily backdoor AT&T/Google/Microsoft to retrieve data, is there any doubt they are now using iCloud to gain remote access to all iPhones?

I'm sure NSA/Google does the same with Google Play Services.
Being obsessed with productivity I would say sanebox.com is a must have and coupled with the boxer iOS app it truly is the best email solution I have used in the past 20 years. I hate to pay for service in an arena where most is free but the cost of sanebox is worth it to me. I don't work or know anyone at the company so this is truly a not bias recommend. I have zero inbox and a killer reminder capability built in. Btw - sanebox did what online service companies "should" do, same as 37signals, they offer a service worth paying for, and don't need to get acquired to make money, only sell their service for a price people are willing to pay - seems like a solid biz plan, eh?
If you were to install some packages on a system, would you install unsigned ones that are allowed to modify every other package, altering how other programs work, without confirmation? That's effectively the state of browser security right now.

We must stop living in this fantasy playground of pretending no security in the browser is acceptable, because important things like passwords, PIN numbers and credit card numbers pass through it.

An ability to sign (not hashes, signed) and verify JS, CSS and HTML would be a start. Once verified, a security policy* is applied further sandboxing an app so it doesn't go to shit with modifications or inappropriate introspections by injected or malicious code (while usually retaining normal things like the browser and plugins). Also reasonable limits to mark objects and parts of the DOM as only available to certain objects, not Orwellian mandates to throw webdev into chaos.

This is something that would take a great deal of coordination with reluctant vendors that see change as cost, but it would be the biggest win for browser security.

* Something a bazillion times easier to use than SELinux.
The root problem was them shutting it down because the game client hit their servers and they were shutting them down. Running servers is costly. But game developers should do an update or at least provide a way to turn off multiplayer or allow others to run servers when the game is finished. There isn't really a system for this yet but there needs to be, multiplayer support ends for most games eventually. The good ones allow it to live on in communities if they so desire. And killing single player missions for DRM sake highlights the problem. Good networking middleware and cloud services for this could solve the problem rather than every game company remaking this over and over and having to deal with this.
There is a broader issue here than just gaming, too. Many high-end applications now have obnoxious DRM/copy protection schemes that require varying levels of Internet connectivity to work.

I have asked a reseller about how this operates if the original developer of the $X,000/seat software my business relies on goes under, and they basically laughed my question off, saying that would never happen. I have also, in an entirely different context, had some knowledge of legal actions involving that same developer, and I don't share the reseller's faith in their guaranteed longevity.

There have been occasional court cases on these matters, and at least in Europe the courts mostly seem to have taken the view that if it looks like a purchase (for example, if there was a reasonable expectation that once money changed hands the new holder of the software would be able to use it indefinitely) then it must be respected as such.

Still, I wonder at what point primary legislation is going to become necessary. Copyright reform has been vigorously opposed by Big Media and mostly successfully so far, but when you start hitting large numbers of customers in the wallet and they can't just pirate their way out of it and get away with it any more, sooner or later I suspect something has to give.
"They were iterating and releasing tablets even after the iPad was released. They just didn't make the leap that Apple did to create a tablet that appealed to the masses."

I think this is a succinct refutation of the Tablet PC being a counterexample to something "ahead of their time". The lack of success of the Tablet PC wasn't because it was "too early for the technology", but it's because Microsoft and HP were developing the wrong device for the wrong market.

That said, I do tend to agree with your premise that you certainly can be "ahead of your time", and that being first to market does not always correlate with being the best to the market.
Okay, but if you want to convince others to share your view, you need to state your objection to it. It's more credible if you back up your objection with realistic examples of what you are concerned about. It's also more convincing if your concerns are consistent with the technology. For example, many people state that they object to the camera on Glass. Yet, DSLR cameras are far more effective at taking high quality pictures from a distance.
Netflix hikes CEO salary by 50% for 2014
I started an open resource for people interested in teaching and learning Python: http://introtopython.org

This year I hope to bring the project to a level such that people brand new to programming can go from hello world to completing their first games and simple web apps. I aim to make the project section useful for experienced programmers who want a clear explanation of how to build interesting projects in Python.

It's on github: http://github.com/ehmatthes/intro_programming
I'm pretty sure their EULA mentions that you agree to such terms, so there is not much buyers can legally do.

The simple solution is to do a quick scan of the EULA( tools to help exists ) of the next game you would like to play for a longer period to and then if the it includes these ridiculous terms simply don't buy it.
Splitting hairs over "not encourage" vs. "discourage" is sort of in the same vein as "these women" vs. "women". It's missing the point.

He said it's "too late" for women at this stage, if they haven't been hacking since 13. What part of "too late" suggests that pg thinks there's more proactive stuff we can do?

pg's point is clearly that we're fine and the problem lies 10 years up the line because middle school isn't doing enough to get 13 year old girls interested in hacking, because god knows how the heck you do that. It's passing the buck.
Hmm, a new meme...

"nothing matters unless that tinned shit works"
Crowdfunding for sustainability: how Synfig project did it in 2013
Before the Internet arrived, very few people had a big need for it. It makes some things marginally harder, and it's more work to implement, so it makes sense that it got left off.

By the time the Internet generally arrived, and people generally realized what the Internet meant, we had accumulated enough backwards compatibility burden that sweeping architectural changes were difficult.
Very interesting! Could be a useful tool to teach algebra. I've posted some bug reports on github. Please keep up the good work!
No offense intended but what am seeing are ad hominem attacks at worst and pointless agreements at best over suitability of a fellow hacker, pg in this case, to put things clear on a generally clear topic. We are introducing abstract reasons why he is correct or otherwise. Why don't we take him at face value, cause in general it's isn't good practice to discuss someones intellectual ccompetence unless they are a potential hire in our university start-up
The golang link says "binary compatibility for compiled packages is not guaranteed between releases." Compare to, say, g++, which takes ABI compatibility very seriously, even to allowing you to select an ABI at compile time: http://gcc.gnu.org/onlinedocs/libstdc++/manual/abi.html (maybe Go has that feature too, I don't know).

Anyways, I can see how from a Ruby perspective, Go's policy may appear strict. But from my C-family perspective, "we reserve the right to break ABI compatibility with each release" is a liberal policy, not a strict one. What's even neater is seeing your app get better without a recompile!
Hiring someone was option 2.
The article does not make clear if the single player aspects of the game were running on the now defunct servers or not. There's a pretty big difference in "DRM" and "requires remote hardware running server code".
A wooden stick with sharpened steel ribs sufficiently strong to penetrate a body sticking out in front of it does not strike you as more likely to be useful than a pair of scissors or something along those lines in keeping other passengers in check?

My point is not that it'd be a great weapon - it's not. But compared to the stuff they are confiscating, it's miles ahead in terms of potential damage.

It demonstrates either a total lack of critical thinking when deciding what to allow, or how little this has to do with security, or both.

Personally I'm quite pleased they don't ban my umbrella, but I'd prefer it if they removed most stuff from the list of banned items.
Bongs can't be returned for health and safety reasons.
The main appeal of the game was apparently the multi-player, which isn't going to be that great if nobody bought the thing. You can't expect a refund for this type of purchase from either Steam or the studio that developed it, that is ridiculous. They shouldn't have removed it from people's libraries though, and the developer should have released one last patch that disabled the DRM and let you run your own server.
"Your misogyny is visible from space."

So is her hair.
The contractual legality of and superceding of consumer rights by videogame EULAs seems to vary on a country by country basis, if not province by province/state by state.
I agreed with you that it's likely out of "hobbyist". But you said "way" out of hobbyist, and that's not true at all.
Is Facebook Losing Teens?
Even if it's included in EULA, it doesn't mean that this would be allowed in a lot of jurisdictions. A lot of clauses from most EULA are not applicable everywhere.

I think there'd be a case in most european countries.
Isn't that decision problem also in NP? The traditional TSP decision problem is in NP, and it seems like you should be able to run that a polynomial number of times to solve his version.
I really see this working remotely, as long as you have control over a cell phone tower or you use a phony portable base station, both of which are within the NSA's reach.

The thing is phone baseband software (which is reused on different phone models and controls the phone's I/O including GSM, USB, etc.) has hardly ever been under attack. When the iPhone arrived with its new security model, baseband bugs became one of the major ways to jailbreak a phone. Those bugs have been fixed one by one, but they were mostly on the USB side - the GSM side has been impractical to attack. A carefully crafted GSM packet could in 2008 and probably could now cause a buffer overflow in the baseband and gain access.

An interesting presentation on the topic: http://www.youtube.com/watch?v=fQqv0v14KKY
Running your server is probably too much to ask for since their server is likely integrated ito many of their other systems and the code is probably something they want to keep out of public hands BUT I like your idea of one last patch for DRM free version. Online will no longer work but at least single player would.
But it doesn't now, and there is no indication that it ever will aside from people not involved with the product inventing hypotheses. Fair enough if you want to express concern about the trajectory that you envisage, but in your original post you're simply saying it does something that it doesn't.
I bought glass and wore it for a week. I felt like an asshole while doing so because 1) I was making people uncomfortable and violating social norms (basically keeping a camera pointed at anywhere I looked) for my own convenience, and 2) it signaled I could blow $1700 on a mostly useless device (like having an expensive watch).

I didn't stop using glass because I felt like an asshole though, I stopped because it was just another device to charge with minimal utility.
I agree that people fear to do something if they think they might fail or have that the something might have a bias against them.
However, I would argue YCom graduates are people who do a thing even if THEY ARE TERRIFIED.
Being afraid of failure is not a justification for not trying, it is in fact a thing any healthy person has.

The successful among us are the ones who operate even though they are afraid of failure. Otherwise only the people that were born with a perfect hand dealt to them would ever succeed.
what about the loongson laptops? they run on their own proprietary silicon, designed and built in china. yep, this is where we're at in 2014...the technology designed in a communist country is more trustworthy than the stuff designed here.
Ask HN: What hacking will we be involved in in the year 2014?
In making our resolutions, we are thinking on what we will be involved in 2014. I am interested in a startups most specifically a mobile wallet. How do you intend you make it a milestone year.
Bystander effect is less about safety and much more about leader/follower. The bystander effect is basically what happens when you get a lot of followers together near an "event". It can be prevented by the presence of a leader.

Anyway, I don't intend to wait and find out what the hijacker intends, and as the best window for action is going to be right after he/she walks by your seat, your window for action is small. When they are far away, you have to close the distance, which costs you surprise. So waiting to see if they are going to try to breach the cockpit is probably not the best plan.

Well, I guess if they take a hostage at the back of the plane and yell "take me to Prague!", it's probably not worth it, I guess there would need to be some attempt to read their intentions.
Completely false :)

http://en.wikipedia.org/wiki/FedEx_Flight_705

"About twenty minutes after takeoff, as the flight crew carried on a casual conversation, Calloway entered the flight deck and commenced his attack. Every member of the crew took multiple hammer blows which fractured [the flight crew's] skulls. A lengthy struggle ensued with the flight engineer and captain as Tucker, also an ex-Navy pilot, performed extreme aerial maneuvers with the aircraft, at times flying upside down, with the intent to keep the hijacker off-balance."

It worked, too. Everyone survived.
He's completely changed how people in the non-elite-security world view computers.

Certainly his influence isn't limited to tech, but I think his impact on tech, at least IT and communications (god I hate the term "ICT"...) and startups and software and hardware... has been beyond any other single person this year. Or any company (2013 didn't see a lot of interesting products, IMO).
And that might very well happen, but if it does, it will still be described as Apple copying Google, which probably drives Gruber crazy.

Personally, I think that the simple fact that Google came up with the idea means that Apple will never create such a product.
I love using this visualization tool with students who are new to programming. You can create code snippets, and share them through a url.

Here is a quick example demonstrating why you need to use a slice to copy a list:

http://pythontutor.com/visualize.html#code=my_foods+%3D+%5B'...
Oh, indeed. Geography is no small part of it. Folks from corners of the world in proximal contact with other cultures end up with far more cultural cross-talk and the ensuing ability to understand other cultures... or they have the inverse reaction, of outright xenophobia.

Our government isn't democratically elected - had they enacted the electoral reforms that they said they would, the next might have been - but they won't, and it won't be.