skysight-inc/HackerNews huggingface dataset:
The average user does not know much about security. They trust Apple's brand more than they trust their friends (with secrets and health apps) and they will now likely stop using many services rather than step up security.

What is interesting is that the perception among normal people I heard speak about this is that all of iCloud has been breached, i.e. everyone's photos are in the hands of hackers and they only released the pics of celebs.

The reality is of course likely that an attacker was able to hack one phone which among photos hosted contacts and mail addresses of other celebs and from there on they got their hand on more accounts to directly target.

Anyway, my point is that to average consumers it does not mean that they need to use stronger security or that they would understand about targeted attacks. They will believe Apple has been breached and they will think more before creating private selfies or putting health data onto their until now so trusted companions.
Japan firm showcases 'touchable' 3D technology
How to build a money making app
I like how dynamics of complex systems are getting so captivating and easy to understand by visually simplified simulations rather than mathematical expressions.

The human mind somehow grasps these dynamic, subconsciously creates an in-brain simulation and you can predict what will happen when you play with the parameters on the computer simulation. It just feels so natural.
It "eliminates" one attack vector.
Can't the same be said for Fourier series, which make no claims to be some kind of AI? And likewise humble polynomials:

http://en.wikipedia.org/wiki/Stone%E2%80%93Weierstrass_theor...
Trolls are dissent; they're just not always particularly polite about it.

This is almost the Platonic archetype of trolling:

http://en.wikipedia.org/wiki/A_Modest_Proposal
The “Internet” or the “internet”
Warning: under settings, "Tribler Profile" has a default nickname setting matching your hostname. Not great for anonymous streaming.

My networks status is shown as OK but the anonymity test is not downloading yet.

Getting Kubuntu fron the "Linux ISOs" channel worked, though it's labelled as not anonymous.
Graph89 is a port of a TI-89 emulator to Android. Works quite well. You need a ROM image from a calculator, but TI actually has them for download on the website, which saves effort.
YouTube's biggest gaming celebrity shuts off comments for good
Simple social networks integration. Just add social network asne module
you can use most google services without google "tracking" you - search, chrome, gmail, youtube, gmaps etc.

and for years i did just that but what makes google insanely useful is that the more it knows about you the better its services become for you.

iow, as the amount of data you give google increases the useful the services become. but google is still incredible useful even if you don't give it any data.
Fair enough but that wasn't the thesis of the OP which related to the "first" copy.
Location: Greater Seattle Area

Remote: Absolutely

Willing to relocate: Absolutely

Technologies: Ruby, Ruby on Rails, Javascript, jQuery, HTML/CSS, PostgreSQL, MongoDB, SQLite, MySQL etc...

Resume: Available upon request

Email: erik@erikdnilsen.com

Linkedin: www.linkedin.com/in/erikdnilsen/
Ask HN: Do they want a web app, but don't know it?
Being the outsourced IT guy (server/network infrastructure), I got an email today of this form from a customer:

"The ____ department will be using an Excel spreadsheet to track ____ through the ____ process."

To me this says build a web app. I have played with Django and other Python web frameworks but never made anything significant.

1. How realistic is it to commit to doing something like this with little experience?

2. If it's not realistic, what should I do now to be prepared for this in the future?

3. How do I approach this when, in their mind, they have already decided on Excel as their solution?

I work with many small business customers and feel like I am missing many golden opportunities to build cool things to help them that would also be valuable to others. But I'm not sure how to make the jump. Any advice?
Facebook doesn't commoditise hardware - but otherwise you're right. However, for hundreds of millions of people buying their first smartphones iProducts isn't even a viable option, while a sub $100 Android phone is. And those devices will be their gateway to the internet. So maybe something good will come out of it too

And I guess you can opt out of the Google tracking ecosystem even on "Android" hardware
We use a delayed replica for our off-site backups. It's a little bit of safety, plus it comes in handy for sanity checking previous state after making big global changes.
SoftBank to Sell Robot in U.S. Stores Within 12 Months
I don't think that's true. Or if it is, it places no value at all on dissent itself - anyone you disagree with on the internet would be a 'troll'.
Location: Green Bay, WI (trying to relocate to UK)

Remote: Yes!

Willing to relocate: Yes!

Technologies: C#.NET, javascript, jquery, SQL, HTML/CSS

Resume: http://www.reecesession.com/resume

Email: reecehebel@yahoo.com
Or, what it already has shown to be given the free market, fare multipliers. For better or for worse...
I've memorized a non-idiot password I use solely for iCloud.
I'm sure it is useful, except for when 1Password attacks take place.
Programming languages often don't make it to version 6
Nothing has changed, this is how Apple's 2FA still works. It's relevant because this is how the celebrity hacking happened this weekend: their passwords were brute forced, and they didn't need to break the 2FA as well because it is only needed to make purchases.
I have this problem all the time. My current process is to:

1. open the App store but don't click on anything
2. hit home button
3. launch keepass client
4. navigate to apple account entry
5. copy password
6. double tap home button to bring up multitasking menu
7. tap app store
8. click install
9. paste password

It feels really stupid doing it, but you can get pretty quick at it. I can't wait for my next iPhone upgrade with touchid.
Nice. But score keeping in one's head, while challenging, is at least doable. Truly impossible: keeping track of serve/receive pairs and partner switches during casual doubles play. I've never seen four trained engineers get it right. :-)
Monopolies are monopolies only when the State supports them.
A manifesto written after the first burst of agile enthusiasm (and the first major public "failure)."

Do you really read, say, the original Extreme Programming book as being in line with that manifesto?
aka 1PointOfFailure. Having spent several years maintaining and repairing computer systems for corporate and professional clients, I can tell you from experience that it is trivially easy to social engineer someone's credentials out of them.
Yes

Hopefully the idiots who call themselves security experts will stop making me answer "what's my mother's maiden name".

If they really want to make it safe, one easy option would be to make the question arbitrary. Of course then average people will have no idea what to put it there.

Of course, don't put "What is Love?" with the trivial answer...
I think Emacs eshell hits the sweet spot with this. Behaves like a normal shell for common tasks, with the ability to drop down to S-exprs if need be.
This could compile to React code and make beautiful standalone components.
That's not entrapment.

An undercover cop can ask you to commit a crime without entrapping you. It's only entrapment if the police induce you to commit a crime that you wouldn't commit otherwise. Hence, them offering you the opportunity to commit a crime is permitted by law.

See this illustrated guide to understand better:

http://thecriminallawyer.tumblr.com/post/19810672629/12-i-wa...
Lovelocks: The Gap Between Intimacy and Security
The government has so devolved -- they're using (most likely illegal) nsa spy tools and stolen data to arrest drug dealers, then lying to everyone involved about how they "stumbled" across the information, or so-called "parallel construction" [1]. While all the tools whine about slippery slope fallacies, the fact of the matter is we're already sliding down.

The undated documents show that federal agents are trained to "recreate" the
investigative trail to effectively cover up where the information
originated, a practice that some experts say violates a defendant's
Constitutional right to a fair trial. If defendants don't know how an
investigation began, they cannot know to ask to review potential sources of
exculpatory evidence - information that could reveal entrapment, mistakes or
biased witnesses. [2]

Although these cases rarely involve national security issues, documents
reviewed by Reuters show that law enforcement agents have been directed to
conceal how such investigations truly begin - not only from defense lawyers
but also sometimes from prosecutors and judges. [3]

[1] http://my.firedoglake.com/wendydavis/2014/02/10/dea-parallel...

[2] http://www.huffingtonpost.com/2013/08/05/dea-surveillance-co...

[3] http://www.reuters.com/article/2013/08/05/us-dea-sod-idUSBRE...
going to assume its along the lines of the old tale of, having pets is good for kids growing up. Responsibility and exposure to various organisms only have a pet will bring

Growing up on a farm probably gave us a bit more exposure, the only sicknesses I could recall really weren't, it was more like the breaking things as farms tend to be unforgiving
an amazing team of surfers? It's funny, if you go to their facebook page, on a lot of posts, they'r either praising their "engineering team" or making up excuses on downtime and bugs. And from the looks of the team it seems besides the elder ones (who must be the founders of course), the rest are recent grads whom they can sell their surf's up crap to then make work on weekends, and extra hours
Its too bad there is only one lane of traffic in the simulators. There are interesting insights to be had when simulating multiple lanes and adding "incentive" lanes. One of the first Java applets was a multi-lane simulator which showed the impact of people getting on to a 4 lane freeway, merging all the way across to the HOV lane on the left, then merging all the way across again to get off. Versus having the HOV lane on the right, vs having no HOV lanes.

The fun stuff is that queuing theory applies to all sorts of things like packets and getting seats on an airline. Lots of fun to play with.
Inside the Russian Short Wave Radio Enigma (2011)
> "Many of the"..."including"...

That phrase does not preclude the attendance of other officials, some of who may be actual security experts, nor does it preclude the attendance of their staff, some of who (one would hope) most definitely are the security experts.
One thing that people do is just say "the government" like it is a single entity. It is not one entity. It is made up of hundreds of thousands of individuals.

You know that guy that used to scare your wife/daughter with his stalking? Well he just happens to have a government job and may be in a position to abuse the knowledge that he has access to for personal gains.
No, this is effectively a drug sting.
The things you've mentioned are all generally Bad Things and things that we should be fighting to stop. Fighting to obscure your location information and even protect your privacy in general doesn't stop any of the things you mentioned if you believe the government is acting in bad faith.
> Is that something I should pursue?

I can only offer an emphatic YES. I think that there are enough geeks out there that would like to see this monopoly broken that I predict a Kickstarter would be a rousing success.
I actually agree with the IRS that gourmet free food should be a taxable fringe benefit.

The food at Google was awesome, but I would not have minded paying a fair income tax on it. Fair is fair.
and on everyone's computer after the leak of the day, too.
> buying a completely new phone, computer, laptop and software

Since this would only be a reasonable analogy if that new device and software were completely free, I don't think it would bother me that much. Now that I think of it, they already do this: Google still refuses to support my Ti-83plus. How dare they discriminate against me by supporting some devices and not others.
Because the neural network described there is just an abstraction that has mathematical and (with some modification) practical utility. Real neurons do not behave in the way the model behaves. Synapses have plasticity, not just neurons. I'm not sure if synaptic efficacy (i.e. how much pre-synaptic input influences output) is fully understood even now.

To put it simply, it is possible for ANNs to fail at something and for us to succeed at the same thing.
Yes, but if you encrypt your drug request you won't have the evidence binding you to the purchase without some kind of bitcoin trace.
GitHub is free for public repos up to unlimited number of participants. This is great for open-source projects.

BitBucket is free for private repos up to 5 users. This is better for closed-source projects.
Top tips for HDR Photography
Agreed. Keepass + A fileshare service to sync your database to all devices is heavenly.
Busy States of America
TI-83 is really sufficient for most engineering classes I've taken (Computer Engineering and EE courses) and many of my professors simply did not allow calculators. They pick problems that can be solved by hands, maybe with a few complex number tricks expecting students to know from doing homework or something they'd been picking up from lower-division courses.

But TI-84 is, honestly, the only calculator one will ever need. It has the extra functions that 83 doesn't provide and yet it's really enough do almost any practical calculations one have to be done by hands. The rest are just hypes.

The last reason is simply brand history. Once everyone owns 83 and 84 and everyone has good review about them, they go for the good review.
BBC Horizon just did a piece which talks about this topic [1]. The gist of it was that the hygiene hypothesis probably isn't correct, but it is close. Rather it is the diversity and makeup of the microbiome in our body that plays an important role in our immune system and hygiene, among other things, plays a role in shaping our microbiome. Pretty interesting I think. If it really is the microbiome, then maybe we can do something about it.

1. https://www.youtube.com/watch?v=6Y4ofojAe-k
Change Your Company Culture with Employee Perks
> The policy at my previous employer (we handled a lot of extremely sensitive information), was pretty draconian: data never leaves a company desktop, laptop, or blackberry.

Really? And how do these devices inter-communicate if data never leaves from anywhere to anywhere?

Burying a laptop to the ground would make it safe enough to keep out the bad guys.
A little history, folks. The Agile Manifesto is 2001. Scrum is 1995. Extreme Programming is 1996. ASD is 1997.

Easy enough to say that you're valuing "individuals and interactions over processes and tools" after detailing methods and processes that do not set forth this idea at all. Agile (in these earlier formations) was all about processes and tools.

Telling me that these formations (in which agile is effectively invented) is "not the true Agile," is like telling someone that the reason they don't like Lisp is because they have not meditated long enough on the Lambda Nature.
I'm using chrome on a Mac, at the moment. http://aboutbrowser.com/view/6lXX4

I'm interested in helping, if you're interested in outsourcing some of the changes and fixes. Shoot me a line—my contact info is in my HN profile.
Use a clipper card? What is the pain?
I think its a smart decision, given the nature of the product. An off time of 14 minutes on a Saturday very early morning is a price they were willing to pay to make this a one time operation with no (actually reduced) risks of losing data consistency and other pitfalls that come with a live migration.
The grandaddy of all of those is probably the http://perldoc.perl.org/Shell.html module in Perl. The idea is really nice for a lot small scripts but can seem to hide some magic because you're treating commands as functions.
For everyone suffering from analysis paralysis: KeepassX, KeepassDroid, and KeepassWhateverYourPlataform.

It's not my favorite manager by any dimension, except for portability... but portability is just killer for it.
While I think using password managers with random passwords is far better than sharing the same password between every account, I've never really gotten comfortable with storing passwords in a file on my computer.

What I'd really like is a password manager hardware dongle of some kind, like the Bitcoin Trezor wallet.
Forget preferences about the ringing, it's actually spilling light from one side of the image to the other, as a result of failure to pad.

But yes, the ringing is ugly— and while there might be some learned elements here, the images are not periodic, they're mixtures of regions with different statistics, and it's inappropriate to spill one to the other.
I'm currently having a failure of imagination here, but how would you social engineer a password manager?

The tricks I'm thinking of involve fooling the user into thinking a site is something it's not or guessing some sort of personal information. But with a separate application the former seems unlikely and the latter is stopped if you use a scheme such as diceware (https://en.wikipedia.org/wiki/Diceware). I understand that naive, theoretical musings on security are no match for experience, so how would you break that set up?
There's no entrapment going on here.

http://thecriminallawyer.tumblr.com/post/19810672629/12-i-wa...
See, for example, perhaps, this album from the Wu Tang Clan:

http://www.forbes.com/sites/zackomalleygreenburg/2014/05/06/...
Ask HN: How do I start contributing to open source projects?
Definitely seems to be -- they claim it's been used by a lot of different people (including, notably, the now-famous indie game Papers, Please) and is somewhere deep into version 3.something -- it's been around for quite some time.
I'm not seeing how is this relevant.

You were arguing that anyone else can decide to ignore the law and provide taxi services without the proper licenses. This obviously only works if you avoid getting caught, but Uber did not exactly fly under the radar. What they had going for themselves was an unusual entrance to the market, but that only kept them safe until their competitors complained to the authorities.

Convincing me is not a very good use of anyone's time

I did not say that. But it's not hard to do this 'research' by looking at Wikipedia or Google. Some examples I dug up in the last 30 seconds:

Tchibo/Melitta/Dallmayr (coffee), Südzucker/Nordzucker/Pfeifer & Langen (sugar, the one I was talking about), Unilever/Procter & Gamble (washing powder), De Beers (diamonds), possibly your friendly neighbourhood drug dealer (hey, I can watch TV with the best of them ;)).

As long as you don't get caught, it's good business sense - at least for a time. And that's why it will happen, time and again - no extra-market processes necessary.
Delusional misidentification syndrome
Porting a small ECMAScript6 feature to Clojure
You can't, but if you use a password manager, you can actually use different passwords on every service.

And you can use stronger passwords (if the service permits), thus if they only lost the passwords datbased (assuming it's hashed) you are still safe.
Only someone who knows the market can maximize the profit. These pictures would make a lot of money at the hand of specific low/high (depend on the view) magazines, on someone would wanna destroy JLaw's reputation or as ransom... How much money would JLaw pay for the original files?

However, how many people do you think can answer the above questions??

It's like when someone steals a huge pile of jewelery. He steals it, but he needs the mob to sell it... Otherwise he can't monetize.
This is probably going to be unpopular, but how exactly has Jennifer Lawrence come to harm from the leaked photos? So people will see the photos and...what? Fantasize about her while masturbating? I'm pretty sure that was happening already.

There's no doubt some embarrassment, but that's more a result of the fact that we've all decided that people need to be embarrassed about being seen naked. In a hypothetical privacy-free world where everyone has access to nude photos of everyone else, nude photos have no power over anyone.
Coding a Lisp Interpreter in Shen: A Case Study [pdf]
I think you may not be familiar with how "sellout" is commonly used. It's commonly said, e.g., of musicians when they make a popular song, for violating their assumed allegiance to being "true" to something other than career. It's more about an abstract idea of what someone or something "stood for" than about the actual person, and it takes place in the minds of observers more than anything.

I don't think what he does in his work for Apple has anything to do with it. If he tried to go back to the Anandtech style of journalism, I think he would lack credibility now that he has accepted a job at Apple.
The issues of online social security and privacy
Infographic: Media in Argentina 2010 – 2017
Hahaha. I live in japan and i can definatly agree with this!!!
Is it just me, or is this article is more about Doyon and PLF than Anonymous?
The entrapment defense is pretty much non-existent. The thing is that it's perfectly fine to entrap someone who is willing to commit the crime anyway. A government agent can give you everything you need to commit a crime, beg and plead and nag you to commit the crime, and still prosecute you for doing it -- because it's your job not to commit crimes even when you have means and motive to do so.

What's against the rules is to make someone commit a crime who is unwilling. But you, the defendant, pretty much have to admit you decided to commit the crime in order to convincingly offer an entrapment defense in the first place. ("I wasn't going to do it, but then the government did A, B, and C ...") So how do you also convince the jury that you did it unwillingly? Basically, A, B, and C have to be so compelling that the jury is convinced they themselves would have done the same thing in those circumstances. Short of "the undercover cop pointed a gun at me and ordered me to do it," it's a tough sell.
Generational garbage collectors achieve good/better performance by more frequently sweeping one or more heaps with younger items before promoting the survivors to an older heap, based on the thesis is that most garbage is short lived.

Modern marking collectors are evidently pretty fast and many collect mostly concurrently with running code, eventually the whole heap has to be collected and the "world stops". The standard (being replaced?) Hotspot collector, without any special hardware tricks, was said in the Pauseless GC paper to sweep 1 GiB/second on standard x86_64 hardware.

As in, when it has to do a full collection and stops everything else it goes that slowly, or at least it can be way too slow for many users with 10s or 100s of GiB of memory.

Pauseless and C4 use hardware tricks, C4 on standard hardware, like using large pages, and making mass VM operations in one (added to Linux) call, only invalidating the TLB at the end. Oh, yeah, however efficient/inefficient they are, they collect concurrently with running code.
I hope they're keeping detailed statistics, like how often each player wins a point on their own serve, which opponents are the best/worst against each player, etc.