skysight-inc/HackerNews huggingface dataset:
The details are completely the same as the last time the author hacked TouchID on the 5S [1]. From that article:

"Next you have to “lift” the print. This is the realm of CSI. You need to develop the print using one of several techniques involving the fumes from cyanoacrylate (“super glue”) and a suitable fingerprint powder before carefully (and patiently) lifting the print using fingerprint tape. It is not easy. Even with a well-defined print, it is easy to smudge the result, and you only get one shot at this: lifting the print destroys the original."

The most interesting thing about the new article is learning that the iPhone6 TouchID sensor is more accurate and scans a bigger part of your finger. That's good to hear.

I can only agree with the author that TouchID is mostly "good enough" security, but it'd be really great to have "enterprise-class" security by simply allowing 2-factor auth including TouchID + passcode.

I may be a bit naive but I don't see Apple being able to reconstruct your physical fingerprint from their store info in the security enclave - I see it more of a one-way function and if it never leaves the device, then it seems safe to be collected.

[1] https://blog.lookout.com/blog/2013/09/23/why-i-hacked-apples...
There is really and truly a problem. I've worked full-time for several start-ups (I'm working full-time for one now) as well as consulted for several more. I've also networked with a lot of startup founders and know many other people in the industry. From my limited experience it seems endemic - the kinds of people who flock to this apparently easy money are the kinds of people solely focused on winning the startup lotto quick. Not the kind of people focused on building good businesses. This means you get all sorts of short-sighted approaches to things. When those are inevitably frustrated by complicated realities (eg. when business isn't as easy as people were led to believe by movies and books) you then see founders/managers scramble to justify these bad practices. I've watched companies loop like this until all their funding went down the drain and then the founders go and do it again somewhere else. It's one of the big myths that needs to get busted - Adam and Jamie we need you! I'm trying to do my small part on the daily.
Absolutely. There are edge cases where the firm doesn't want applicants, and plenty more cases where using appropriate jargon attracts only the qualified job seekers.

There are also plenty of corporations who consistently advertise positions with abominable phrases like "reliably exceed assigned activity and revenue quota within designated territory" or "leverage relationships across cross-functional multinational teams within a matrix structure" or "ensure developments are communicated appropriately to the line manager and relevant stakeholders through relevant channels" because corporate bullet points on expectations for new staff members weren't written with the idea of attracting them. (And in some cases were written to ensure a sufficiently large number of possible grounds for not retaining hires that didn't appear to be working out.)
I think that argument would be much stronger if forgoing deletion of the space was hard to do - but it's literally one key over. Further, it mucks with peoples' intuitions about what range w actually covers - something I'm only recently overcoming after 20+ years with vi and vim.

Meanwhile, I have found myself in the position of wanting to delete the space and had no way to express it (as a single action that I can redo with .).
Right, but we're disappointed that MongoDB markets itself to fit into NoSQL niche, while it doesn't. If it honestly declared its shortcomings, we'd have nothing against, we'd love it.

For example, it doesn't support crucial for NoSQL "compare-and-set" functionality to avoid transactions/locks. Their best suggestion is to use findAndUpdate() with the full object for "find". And it works (though slow) when you have static schema. But over time you'll want to change your objects, and findAndUpdate() won't find them anymore. Grief. Also, order of fields in nested JSON object matters for findAndUpdate(), so have a happy time debugging why it doesn't find some objects anymore.
... but not a single action. This is important when I want to repeat things.
MVP is about cutting out non critical features, not quality. Without the quality you just end up being slower at iterating and the whole process falls apart.
Very nice! Our work is different though: we create high detail 3d moving 3d models from youtube videos -- without any manual interaction (looks like there is quite a bit of interaction in creation of an avatar on 3d-avatar-store)
Ira
http://homes.cs.washington.edu/~kemelmi/
Thanks for that! I've long wondered what made Acme special, and never had the patience to read through Pike's paper.

TL;DW (my notes as I'm watching it for people who prefer text): Acme includes its own tiling window management for your open files/buffers. It is strongly mouse driven, where clicking or highlighting regions with the different buttons perform different actions. For example: highlight text with button 1, then with that held down clicking button 2 cuts that text. This mouse button combination/sequence is a "chord".

More powerful is the "execute" action (button 2) on various text. executing the word "cut" does that. You can execute external programs this way, with the output appearing in a new buffer. You can of course pipe or redirect selected text to/from external programs. You can add frequently used commands to the "menu bar" ("tag") by typing them there.

With the "load" action (button 3), you can load files by name and added references (such as open file at given regexp point and highlight to another point). This allows easy and native opening of filenames given by compiler errors.

Acme supports UTF-8 Unicode natively (aside: UTF-8 was invented for Plan9 where Acme comes from [1]).

Acme is an IDE that integrates external tools at the text level. As a Plan9 product, it exposes itself to other tools as a file system (using FUSE on Linux). Using this, the author created a simple presentation system used to demonstrate this very video.

An external script can read window events by reading a file in the file-system exposed by Acme. This can be used to implement a shell within Acme, or various things like mail readers, music players...

The button 3 (load) action can be used to easily open manpages and open related manpages by just highlighting "acme(1)", or directly view a given Mercurial commit by loading its hash, or even a UPS shipment by loading its tracking number. Things can be opened in external programs, and all of this is managed by a "plumber" program that has rules.

As a programming environment, you can run some 'watch' program on a work-in-progress buffer to (say) compile and run a program as you save.

TL;DR: Acme is a flexible editor that can perform programmable actions based on highlighted text and merge that into buffers, and exposes a filesystem-like interface for other programs to use.

PS: holy shit, I only just noticed that presentation was by Russ Cox.

[1] https://www.cl.cam.ac.uk/~mgk25/ucs/utf-8-history.txt
Isn't this generally done anytime you don't know the structure of the json document that will be unmarshalled? If a new field is added and you're parsing to a struct that struct will have to be changed to accommodate that field, rather than letting it happen anonymously as through an interface.
Thanks! That's good to know. I always struggle with whether brevity or depth is most useful to the audience. Sounds like it's good to stick with depth!
When I was thinking of moving and looking into what the tech scene was like in Atlanta, I found this post on "startups for grownups": http://academicvc.com/2013/07/05/startups-for-grownups/ .
Use weighted averages to sort your products
Go was originally pitched as a better C, but it seems to be finding a niche as a better Python or possibly a better Java. Go binaries have built-in GC, and Go will probably never reach C levels of performance. There is a lot to like about Go and it is working out very well for a lot of people, but it isn't appropriate for every situation.

If you want a better C, better to look into Rust: http://www.rust-lang.org/
Will we ever read at superspeed? The upper limits of brain uploading
You can't expect reforms made in the seventies to constrain intelligence agencies indefinitely. The Church Committee imposed real, effective limits on domestic surveillance that it took the best part of three decades to weasel out of. Why not do it again, and do it more regularly?

You seem to be arguing that because the Church Committee didn't fix the problem of government overreach once and for all, it accomplished nothing.
If the society in question crumbles, money won't save you and your fund gets bust.

Your only chance would be getting out of country, and this may not be easy in senior age.
Sure, I'll give you one example.

We want to show a sample immediately as a user changes what they extract. On a static website, this is fairly easy. You simply run what the user created on the currently visible page.

However, when you involve interactivity, you can no longer do that. The major problem is idempotent operations. Imagine a click that changed the dom of a page. And now imagine running the sample on that same page. Re-running the sample may no longer work, because the click could have changed the page in such a way that the extraction no longer works (e.g. it deletes an element from the page).

To solve this issue, we actually reset a "hidden tab" to the starting state of the page you're on. This happens every time you re-run a sample. Unfortunately, it's not possible with Chrome to create such hidden tabs. We also mess with the cache to make sure that this tab can be reset really quickly, something that we couldn't find an API for with chrome.

Hope that answers your question.
Anybody knows the deal amount?
Browser tabs are not a do-list
Except Bitcoin makes it free to send money to friends. One way I could see this being financially viable to build a company around is if lots of people are storing money in the company's webwallet. Then the company could invest customers' money, like a bank. But if you are using a webwallet like Coinbase, then you are asking to get screwed out of your money, since there are no FDIC protections.
(Stripe dev here)

You're probably already aware of this, but there are 3rd
party[0] libraries, including one for Lua[1]

[0]: https://stripe.com/docs/libraries#third-party
[1]: https://github.com/wsummerlin/stripe-lua
I would say it shares some design philosophy with C: simple, "New Jersey style", imperative, pragmatic, non-generic, explicit control flow.
Tips for the prospective founding CTO working from a clean slate with a non-technical cofounder:

* Get it in writing, and sooner rather than later.

* Do not work for free. A business cofounder should be in charge of finding money. If they can't get enough to pay you to build a PoC, you shouldn't work with them.

* Work together to set near-term goals for the non-technical party, and assess whether they can deliver. If they can't: beware.

* Do not accept less than a 50/50 split unless the other party has decades of experience in a vertical, glowing references, and an astounding Rolodex. A few years at McKinsey or Bain followed by an MBA isn't worth more than the work you put in to get here. (Although it is meaningful.)

* Check references on the other person and do background work. It's amazing how little folks put into this compared with, say, the amount they put into their first hire. This is a source of much pain.

* Qualitatively, you MUST feel a sense of respect for the other person, and it helps if you find them outright impressive. Again, a source of major pain.
The Narrative Fallacy: Why You Shouldn't Copy Steve Jobs
That's how you cut granite? It's one of the hardest known substances and for that reason it's often cut with a diamond blade.

No one's asking how they got a level foundation. That might be unclear to you, but it wouldn't be to most people, certainly not experts.

But no one knows how they cut that stone as well as they did. Not experts in any field. No one. I'm not saying they didn't have some amazing low tech solution we just don't know. I'm saying we don't know what it was.

And rather than saying, "We don't know," to say, "They rubbed the 80 ton stones together," or "They used the world's most massive jig," is just mind beggaring. Just say, "We don't know." It's not that hard.

Actually, I take that back. Evidently, for some people, it's impossible.
1. Fun. The preparation and cooking (and subsequent eating) is a good change of pace and can be zen-like

2. Not really. I plan special dishes once every couple of weeks, but have enough stuff on my 'normal' weekly grocery list that I can do a fair variety

3. Beef stroganoff, lo mein, stromboli, spaghetti, fajitas, tabbouleh, sushi rolls, steak&baked potatoes, etc

4. No, though I've been trying to reduce fat and cholesterol with low/no fat versions or substitutions (greek yogurt instead of sour cream, ground turkey, etc)

5. Mise en place (prepare everything before turning anything on). Experiment; tweak the recipes and try new things. Don't go cheap on essential equipment (knives, pots&pans). Try doing things without countertop appliances (fresh ravioli with a rolling pin and knife, hand kneed breads, mince with a knife instead of using a food processor, etc) to learn what to look for. Have fun cooking so you do it more often and it's a positive thing :)
> the characters that are permitted (even with escapes) in XML 1.0 text do not include all characters that can appear in JSON values

Do you have an example of this? I'm curious what character you could have in JSON that you couldn't represent in XML using the '&#' syntax.

Edit: To answer my own question, backspace is an example of such a character. &#8; is not valid XML.
Exactly, it is mostly a solved problem. The question is, what value does Bitcoin add (for the average customer not interested to buy narcotics on Silk Road) and what is the price for this, for example unsolved security issues and large price fluctuations during the early adoption phase?
And for a separate personal opinion: Acme indeed looks very very powerful, but I've gone too far down the keyboard-only path to ever accept its mouse-driven paradigm. Emacs (my poison of choice) has a bit of the same "interact with external programs through buffers" idea, though nothing as simple and powerful as Acme.
PayPal Vendors Can Now Accept Bitcoin
Heard that before. The question to answer is, "Why now?" What's different now? Nothing. Not yet. This will change someday, but I don't think that's today.

The day Bitcoin gets FDIC protections is the day it can go mainstream.
Startup Law Wisdom from Grellas
> We can't fix this by working within the system. That's what the Church Committee tried to do. They failed. There is no reason to think their twenty-first century counterparts will not fail again.

So take it to the logical conclusion and disband the state completely.

Or more to the point, be intellectually honest, and argue for the thing you actually want, instead of disguising it with smoke and mirrors about the supposed "impossibility of oversight".

The Church Committee was actually brilliantly successful, if the Snowden leaks are any indication of their effect on NSA. Instead of simply breaking the law outright, they employ every possible trick in the book to get what they need while staying within the confines of the law. Never mind that those interpretations don't hew to what you think the law should be, they were trying very hard to stay within the lines.
I have a few issues with this proposal e.g.

> 3.2.1 Agility: the user agent will choose the strongest hash function in the list

Aside from the fact this contradicts the next section (Priority), it also would discourage browser vendors from adding better (slower) hashing functions as then they would be "forced" to utilise them.

Instead the standard should be: The "the fastest hash function which the browser finds secure." So if SHA-256 and SHA-512 were available, it would use SHA-256 until it was found insecure, then the browser would use SHA-512.

> Validation using unsupported hash functions always fails (see the “Does resource match metadataList” algorithm below). Authors are therefore encouraged to use strong hash functions, and to begin migrating to stronger hash functions as they become available.

No. Just no. If Chrome was the first to market with e.g. SHA-9999, I'd be unable to utilise that until literally every single browser on the market supported it (as it was fail by default).

Imagine if this standard existed in the IE6 days, today if you tried to use SHA-512 (which, let's assume, IE6 didn't support) the resources would fail to load every time (and you'd wind up having half a dozen different hashes just to hit something that was supported).

It should just ignore unknown hash functions, not fail. If the integrity attribute only had one hash function and it was unsupported then the entire attribute should be discarded.

Fail by default isn't even the HTML way. Ignore by default is.
My total comp - including salary, bonuses and equity is regularly almost 2x my base salary.
It has changed a lot how this is organized in the last 10 years so I`m not really up to date anymore. I think currently besides weekly school the apprentice will go to multiple week long sessions at the school where all the fundamental things will be thought. But besides that the rest needs to be done by the employer.
Equity "compensation" is only compensation if the equity is actually worth something. At most big companies equity compensation is worth something but generally not even close to 100% of base salary (or even close to it). At (most) startups the equity is a joke that the owners and employees delude themselves into thinking is not one.
Extend it to hobby developers and you will get my attention.
Hans Rosling explains this quite elegantly with boxes: http://www.youtube.com/watch?v=ezVk1ahRF78&t=11m
After restarting the phone, you're required to enter the pin as well.
Mainly corrupt, well-connected private businesses who take a generous cut of the benefits the government contracts them to distribute, one way or another.
Have you actually read any of the items?
That's also quite low. (When I did contractor work (PHP) in the Netherlands almost a decade ago I already charged 500 euro/day, and up to 80 euro/hour for certain gigs.)

And none of that really amounts to much if you subtract the taxes, overhead and most of all the time spent between gigs.

If you do well you can make out considerably better than on a salary, but still, 490 per day for a .NET engineer (biggest shortage there is in IT in Europe) contractor is on the low end.
Go is a very pleasant language to develop software products in.

Unlike the dynamically typed languages, it doesn't trade speed for beauty of syntax. This means that sometimes syntax can be a little non-uniform, but there's always a reason. Unlike C and C++, it doesn't trade safety for speed of execution. There are no buffer overflow vulnerabilities in Go applications. It treads a fine line of where to let the language do the lifting and where to make you do it. In general, it does a really good job of finding the pragmatic side of the line to sit on in any particular situation.

I don't know of any widely used C garbage collection libraries. The benefit of it being a language-level is that everyone uses it, which means your code works the same as everyone else's, so you can easily just reuse other people's code, without having to restrict your search to some small subset of repos that use your particular GC Library.

Also, in Go, unlike most other garbage-collected languages, there is a stack, and you can pretty easily write code that only uses memory from the stack, and never needs to run GC.

Finally, Go's tooling is really phenomenal. Testing, doc generation, performance reporting, code coverage, linting, package distribution, code formatting, refactoring, cross-platform compiling, and soon, pre-processing, are all built-in and really well done.
Are World Governments Preparing Us for a Future Announcement?
> Could I trouble you to explain to me a little more about Python? Is it a starter platform?

Python is a programming language, that is used to do lots of things - it is used in production at Google, and you can do pretty much anything with it, from data analysis/machine learning to web development, from game development to shell scripting. It is also quite easy to pick up, so it's a good choice for beginners - although lots of experienced programmers use Python. That's why I recommended you python.

Since you want to help for your startup, I'd recommend to try to pick up whatever they are already using, since there are probably programmers with some experience working with you.

EDIT: by the way, my email is in my profile, so feel free to contact me if you need something, and I'll see what I can do.
Hey, Eric with BitPay here. If you're still waiting on information about AngelHack, email me: eric@bitpay.com

We just this past week launched our new REST API, which should be significantly better than our old API: http://blog.bitpay.com/2014/09/18/announcing-the-new-bitpay-... – we spent a long time thinking very carefully about making the developer experience as smooth as possible, but I'm sure there are things we can be doing better. If you've any ideas on how we can improve it, please let me know.
PayPal Embraces Bitcoin Payments, Partners with BitPay, Coinbase and GoCoin
My mistake, I am at work and hadn't read the article in question (until right now) but seen the comment about the app giving the status if driving or not which set me off.

My remarks were about personal communications which this app does not seem to be about. I do feel sorry for people in jobs who do have to reply at all hours of the day. That's not for me...
I foresee more devices being 'hacked' via pin codes being simple and/or written down than by someone lifting a finger print.

How secure is secure enough? The weak spot is, and always will be, the human aspect.
Udacity has done what any good start-up should and launched a solid MVP and iterated on it, delivering free, in-demand courses in a short amount of time. No, the materials and scripts have not always perfect but they are still more valuable than many college courses I've taken. If he is in fact leaving to focus energy on Udacity, isn't that a positive move in regards to your critiques?
I know you're just being cheeky, but I don't believe that "knowing latin" == "educated", same for its corollary.
It's not necessarily that I am worried about any of them, but it is much more likely that at least one of them will have a security breach than it is with just one provider.

For instance, I use Dropbox. If Box has a breach, I am fine. I am fine unless Dropbox has a breach. If I use This service, then my data is compromised if any provider has a security breach.
s/insurance companies/private hospitals and specialists willing to engage in questionable billing practices/
You might want to check out "Orphan Black" then - it's a Canada/BBC co-production and really really good.
Seattle's tech firms struggle with people shortage
I don't know why you were downvoted. Setting the root namespace provides exactly the effect of dropping "json:" from everything.
If someone has your phone and the ability to demand your fingerprints, what possible value is an additional 4-digit pin going to be?
Hmm ... a business opportunity for the production of "curved iPhones" ??
Reuniting Product Management and Lean UX
Does the CRTC Have the Legal Authority to Challenge Netflix?
Thanks for the feedback! This ifttt is only for Gmail --> Dropbox, my service supports any email client to any major cloud drive. Additionally, we automatically organize your attachments by filetype, so it's easy to find them later. And if you want to save on inbox space, we have the option of replacing attachments in incoming e-mails with the links to where they're stored on your cloud drive.