skysight-inc/HackerNews huggingface dataset:
I wonder, is it in the realms of possibility for big-budget organizations like the NSA to simply read the UID from the silicon by means of physical analysis (e.g. a scanning tunneling microscope)?
A meta observation: naming someone's logical fallacies seems to be positively correlated with being wrong and/or arrogant, and generally tends to derail discussions quickly.

The failure mode Eliezer used to write about[0] seems to be true - in many, learning about logical fallacies tends to induce dysrationalia. Instead thinking about what other side says, one can just pattern-match anything they disagree with to a fallacy and cry foul.

[0] - http://wiki.lesswrong.com/wiki/Dangerous_knowledge
I can't think of any reason I'd want any less POSIX. In fact more is probably better for us all.
> Also, it's my understanding that authentication can be trivially bypassed if the phone is kept powered on? (ie. authentication data is stored in memory? Seems to be the case for at least Touch ID)

It can be bypassed if the phone is kept powered on -and someone is able to start running code on it-. The normal approach of Apple signing a malicious recovery/update image would require rebooting first; there are probably exploits to be found somewhere, but Apple probably doesn't have any intentional mechanism for running code without either rebooting or unlocking the phone (at which point a lot more services open up including developer tools, etc.).

Also, Touch ID expires after a while, and (edit: I said the key is probably wiped, but that makes no sense if the phone continues to display contact names and such on the lock screen; there may be details in Apple's white paper, but since I don't remember any, disregard.)
The problem is the attack surface for an app on a device vs. in the wild is much, much larger and much, much less secure.

Once its on your phone, it can just screenshot things if nothing else.
To see how this relates to computer security, download the pdf linked in the article. After it exposes the methods of exploitation, it gives examples of internet computer scams.

http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.pdf
Many people say that DBs are not good for large blobs, hence the advice to put large files such as images in the files system, not in the database. What's different here that makes it acceptable to put files in the database?
I'm not sure if this is meant to contradict my comment somehow, but I think we are saying the same thing -- read differently, it sounds like you might be suggesting they don't even need the new data. Whether on VMS, or notice to mariners, or whatever, what they had was a report of discolored water. Different, therefore from new data revealing underwater topography.

Removed redundant and pedantically incorrect extra use of word "new".
Thanks, these are inspiring. Makes me want to add genetic mechanics.
Available as a docker container:

https://registry.hub.docker.com/u/imiell/sthttpd/
The speculation and trading of bitcoin, if it succeeds as a currency is a given, I think. But right now, some of its most vocal/visible supporters view it as a long term, buy and hold investment, and not just as a hedge.

With equities, no matter how far a stock price declines, profit is still there to be returned to shareholders. Other currencies don't provide the same kind of guarantees, but the backing of governments and inertia might be more valuable. Once people grow concerned that the only thing propping up the long term value of bitcoin is the person next to them believing in it, a quick reversal of sentiment, with ugly consequences, seems likely.
You're really not. This is the best comment I've seen here for a while.

Mot sure if we could ever reach collective conscious of our so sociery. Anthropologists like Marshsll Sahlins was onxe enamoured with hunter-gatherer for societies for this reason. But large scale industrial societies? I can't see a way for a microbe pool that complex to feel truly whole
FSF: Respects Your Freedom hardware product certification
I fear the American government's totalitarian/police state leanings far more than I fear the PRoC.

Though the Chinese government is undoubtedly an enthusiastic squasher of political dissent, and their secret police are surely quite brutal, and I hate commies with a passion, I am hardly ever likely to have a conflict with the Chinese state.

An Unconstitutional American surveillance state is a far more immediate problem. The NSA can break down my door tomorrow after reading my politically unpalatable text messages, and there's nothing I can do to stop them. So if I had to pick someone to have the keys to my phone's backdoor, I'd pick a "hostile" foreign power any day. Though of course it would be better to have no backdoors at all :)
The books they forced me to read, just what the heck
were the intended lessons? Tough to say. Since
then I saw that I should have just gotten the
CliffsNotes; they make it clear and explicit just
what the heck the really big lessons are supposed to
be. The books and teachers didn't.

> but there is a lot to learn from fiction if you
are open to it.

Being "open to it" is not nearly enough. Knowing
about people is important, darned important, and I
knew that in quite clear terms in the fifth grade
and since.

A big problem is, the works of fictional literature
just do not make clear just what their points are or
give solid support for their points. Instead, it's
all just a definite maybe. For any intended
lessons, the works of fictional literature just are
not solid enough to take seriously, and there are
now much better sources, ones that make clear just
what they are claiming and provide relatively solid
support for their claims.
Ah, fair enough. Good point :)
There's Seek Thermal Camera that has a decent resolution (200x156) and a low price ($200): http://obtain.thermal.com/category-s/1818.htm
I thought it was already proven that a neural network with two hidden layers is as powerful as any neural network with an arbitrary number of layers?
Is jailbreaking becoming more difficult and would that be a sign of iOS/iPhone becoming more secure?
Há anos essa urna é usada e o pior que não sabemos se outras eleições foram fraldadas, cade a democracia em nosso país???
Desktop PCs aren’t going anywhere–because they’re cheap (2011)
Because sales and marketing are mostly about scamming people, period. Sure, there are people who are honest about their products and services, but it seems to be an extreme minority. And why we as the society are willing to be lied in the face by advertisers and salesmen is beyond me.
The amazing part here is that the immune system is very much involved in the early parts of the pregnancy. Successful "implantation" of an embryo in a transplanted womb with an immune-suppressed host is no mean feat...
I wrote myself a database that I use for passwords and the like. I get around this by masking text until I tap a button, and then waiting a random number of ticks before decrypting the value and progressively unmasking the text. It takes between ½ and two seconds. The problem I've yet to solve is hiding the text. Leaving it on-screen for, say 10 seconds before re-masking and encrypting is fine for now but sometimes that's not long enough.

The other thing it does is with a tap and waiting for the same random number of ticks is to copy the value to the clipboard so that I can paste it into a browser.

Not perfect but its a version 1 at least.
The archerfish in the Baltimore aquarium hunt cooperatively. The fish that takes the shot is not the fish that gets the cricket. Advanced physics and society. Not bad for a tiny fish.
H.O.T. Security
Is remote working possible for the machine learning / data science roles you describe?
Your advise is good, I'm not trying to dismiss or counter it.

> In particular, if you use fingerprint access, there is no reason not to have a long, complex password.

Very, very often my fingerprint isn't recognised properly and I have to type in my password. It has been getting better as of the last few updates, but I still need to input my password multiple times per day.
The "relevant" xkcd: http://xkcd.com/882/
That's pretty cool. I had a chance to travel on the Shinkansen from Osaka to Tokyo last year. It was in the evening and so I couldn't see Mt. Fuji or anything. But it was just incredible esp. the part where the train bends like a bike to take corners.
Right, but the narrative associated with this result is that the single-layer might require a lot more units to achieve the same performance as a deep architecture.

It seems this is not necessarily the case---based on the empirical results shown.
The problem is that this doesn't scale. Sure, people are sharing the information now, because it's part of a current story, but 2 years from now? And the party affected isn't an organisation with the reach of the Times?
> trust in authority, a desire to act in the same way as our friends, or a tendency to act in a consistent way

Sounds like how most people get suckered by politicians, over and over again.
The doctors "should" have gotten a clear travel history too.

I recently went to a doctor, he came in and shook my hand, THEN went to put on hand sanitizer. Then I did too. He said he was sorry.

Well, with Ebola, "oops" isn't going to work out too well.
It's very probably within the realms of possibility, yes.

It's very probably not within the realms of practicality just yet, however.
> Secure Enclave allows firmware updates -- but before doing so, the Secure Enclave will first destroy intermediate keys. Firmware updates are still possible, but if/when a firmware update is requested, you lose access to all data currently on the device.

Given that the end-user has entered the passcode it shouldn't be hard to retain the data: after upgrading the Secure Enclave firmware simply unencrypt all data using the old key and reencrypt it using the new key (derived from same passphrase but a new UID).

You can also use a "two stage" approach where the encryption key derived in hardware is only used to protect a secondary key. In this case you just reencrypt this secondary key which in turn protects the data.
Yahoo acquires MessageMe
I don't think this policy is bad for the EU. Google will remove articles faster than publications can notice and report on their removal. Most EU citizens will not care enough to use non-EU Google sites on a regular basis.
How to Advertise on Facebook – A Roundup of Tips, Guides and Costs
Once its on your phone, it can just screenshot things if nothing else.

If it can't run, how can it screenshot things?
Contrary to speculation ( there are whole articles which "explain" the secure enclave to be ARM trustzone) secure enclave is documented ( only very recently) to be a _seperate_ chip inside the A7 chip running it's own L4 based microkernel.
(From https://www.apple.com/privacy/docs/iOS_Security_Guide_Sept_2...)

"
The Secure Enclave is a coprocessor fabricated in the Apple A7 or later A-series processor. It utilizes its own secure boot and personalized software update separate from the application processor. It provides all cryptographic operations for Data Protection key management and maintains the integrity of Data Protection even if the kernel has   been compromised.

The Secure Enclave uses encrypted memory and includes a hardware random number generator. Its microkernel is based on the L4 family, with modifications by Apple. Communication between the Secure Enclave and the application processor is isolated   to an interrupt-driven mailbox and shared memory data buffers.
"
Crossposted to my blog - feel free to comment or reach me there - http://pavel.karoukin.us/node/15
What I'm familiar with is described here:
http://neuron.eng.wayne.edu/tarek/MITbook/chap2/2_3.html

Basically, one hidden layer networks are already universal approximator; however, it's a nonconstructive result. This article is semi-constructive, - they train more complicated model, then emulate it with a simpler model, but do not know how to train the simple model directly.
What I don't understand is the medical effort to do this in a world overrun with humans. It seems to be that we could be making better use of our time.
Bjarne Stroustrup: “I did it for you all” (1998)
Android requires root privilege and/or system-level app to take screenshots. iOS is probably similar. I don't think an app could spy like this without user enabling it (which is a valid but separate concern about how knowledgeable the average rooter/jailbreaker is.)

[0] http://android.stackexchange.com/questions/10930/why-do-we-n...
It's a very interesting result, but as always with neural networks we have to keep in mind that what matters is not whether a model can be encoded in a different architecture (even at equal entropy), the question is whether the model can be learned in the first place. When you work with shallow nets trained with regular backprop + dropout, you see that their learning capabilities tend to "saturate" much quicker than deep nets. Often with shallow nets, after a point you don't get better results by adding more units or more training data. But deep nets are better able to make use of these extra parameters (extra layers) and extra training data.

Possibly because deep nets conceptually "break down" a learning problem into incremental steps (each new layer being a higher level of representation).

But then again, maybe the problem is simply that we don't have sufficiently good methods for training shallow NNs on large-scale problems. After all, it's only recently that we figured out how to efficiently train deep nets (either pre-training with Autoencoders or RBMs, or through Hessian-free optimization).
The Anatomy of Health Care in the United States (2011)
I think it's more likely the other way around. E.g. you have a team with one developer located in NYC making $100 USD ph and a developer in rural Romania making $100 USD ph. Both of equal skills. The NYC developer makes a good wage, enough to pay off his 30 year mortgage and the developer in Romania will be richer than the president of his country after a year of salary. I think that will cause more resentment amongst your development team.
So tell me, are you American? Do you have a car? Do you eat everyday? Are you gainfully employed? Do you have any savings?

Surely you should be concerned about starving people in Africa or something instead of, say, wasting time on Hacker News?

We all put our time and effort into things that make sense for us. You are free to invest your time, money and effort in those things that matter to you. This mattered to them.
For hobbyist? Yes.

For large scale project? Not enough.
> That's about the closest standard we can use to estimate so-called "sentience".

The problem is that choosing "sentience" as the line is also entirely arbitrary. Sentience at best is poorly defined and almost impossible to prove or disprove about just about anything. It's understood as an intuitive concept, but sentience, consciousness and similar terms have defied solid definition for centuries. For example, it's a trivial exercise to demonstrate that a mountain might be sentient, but have qualities about itself that cloud our understanding of its sentience.

As more and is understood by both AI and Cognitive Science communities, the ideas of consciousness and sentience are being better understood as perhaps just emergent phenomena and not underpinned by any spiritual or moral reasoning -- i.e. the concepts of sentience, and similar phenomena, may actually go away altogether and be tossed in with the pile of falsely observed ideas, like luminiferous aether, chi and humorism.
Nice weight loss strategy
I'm a bit baffled at Googles implementation here. They have turned a single decision (though at a high court) into a seemingly automated process where everyone can have stuff removed that just mentions their name by filling out some web form:

https://support.google.com/legal/contact/lr_eudpa?product=we...

Theres no obligation to go that far. Make people pay a lawyer when they want to get something removed.

Basically, treat it as the DMCA requests: remove the stuff and post the full request on a ChillingEffects-like site, and hint at that when a search included removed results.
Also, why isn't the solution "push for inclusion of aufs in upstream"?
Red Hat should have some non-zero weight in kernel decisions, methinks.
Eclipse and its plugins beat the most expensive version of VS.Net
And I say it's not a moral question. Disprove me rationally, down to the axioms.
On Android devices at least, you can use the always-on VPN functionality and a VPN Server and HTTP/S proxy to achieve this, it's actually not as hard as you might think.

For home users, Sophos has a Home Edition of their UTM that you can install on an old PC. The requirements are a bit high, there's an IP limit (that you could always overcome with a NAT) and it doesn't allow dual-homed ISPs, but the UI is better than anything else I've tried (not saying there aren't plenty of warts). Once installed, you can setup a VPN and HTTPS proxy within literally 2 minutes.

Disclaimer, I worked there for a short time.
Cialdini's book on Influence seems relevant here.

http://en.wikipedia.org/wiki/Influence:_Science_and_Practice

Edit: It's referenced in the article but that link points to Amazon.
I have a hard time seeing this as a magical part even in the eyes of a newbie. How common is it to hear about stdio but not also know about write()? I am pretty sure one man page refers to another. My point, just as it is with varargs, is you should be curious enough to find these answers yourself, run some experiments, make some good guesses.

Since Visual Studio is mentioned, I'll say that despite some extra layers (CRT, kernel32, ntdll) the concepts are identical and when I was a kid learning C I was able to dig through header files and documentation to conceptually figure it out.
PDF for those who can't access the journal: http://www.commed.vcu.edu/IntroPH/Introduction/2014/Thersoca...
Seems there are quite serious plans to even tap their blood: https://news.ycombinator.com/item?id=8410437
Looks like there’s a prototype iPhone 6 on eBay
I love reading about supercomputing, it's a completely alien world that has just enough similarity with what I do to be somewhat understandable.

I'm old enough (34) to have seen much of the revolution in computing and it is easy to get somewhat jaded after a while but the sheer power of the petascale systems just makes my jaw drop every time I read about them.
It's, "new data revealing 'actual/correct' underwater topography".

Not, "new data revealing 'new' underwater topography."

Sorry if that sounds pedantic, but it's an important distinction imo, these 'underwater mountains' didn't come into existence recently.
SF is the most expensive city in the world (according to recent data.) Spending company money to not only relocate, but to pay salary adjustments for half the company to come live there isn't just irresponsible, it's idiotic.
The fact that a commercial software empire with tens of billions of dollars in revenue can, in conjunction with an OS over which they have complete control, implement working resource fencing does not imply that a mostly-volunteer Open Source project, running on at least a dozen-odd different hardware and software platforms, can too — and certainly not on the same time scale.
Even when the error happens on the server and you're not inside an IDE, most of them (I'm sure Netbeans does it) allow you to paste the stacktrace from the production logs and makes classes/lines clickable, so you can enter the source code at the right points.

It's more or less what your tool does on the web.

Your tool may still be useful if some arcane third party app crashes, but how would you track the proper source code without info on dependencies' versions?
It's strange to have articles about suicides, prevention, and getting help next to articles that are actively trying put peoples back in a past they would like to have a break with.
iPhone 6 Review
As I understand it, the Flocker guys aren't really working on the CoW filesystem part of Docker, but solving the problems of data locality and persistence with regular (non-CoW) volumes mounted into a container.
True, in many studies, vegetarian diets, defined as diets with minimal, but some kind of animal sourced protein, have shown to have numerous health benefits over pure vegan diets. In fact the treatment for most common vegan dietary deficiencies if trivially treated by simply providing some omnivorous animal protein source.

Vegetarians tend to manage their diets better as a population and have far fewer of the kind of nutritional deficiencies and subsequent health problems Vegan populations tend to suffer from.
An automated process is cheaper than dealing with lawyers. It could also be that Google made it this easy in order to make a point that the law is a bad idea.
They don't :). Its upto you to make sure it doesn't crash into anything. Its not a co-incidence that all the videos of this tech is shot in large open fields ;)

Obstacle avoidance is coming though! The research world is converging on a solution!
Obviously, but I edited my comment. My inner pedant jumps for joy.
Technically, this sounds about right (am mostly a n00b though) but the comments on this thread seem to me terrifyingly naive for a post-Snowden world. Apple has semi-convincingly denied the presence of a few, very specific attack vectors, and the article is speculating about the details of those denials, which is all well and good.

But it is an absolute certainty that communications technologies built and operated by major American industry are wholly compromised. To believe otherwise is to grossly misunderestimate the nature of State intelligence actors. The historical record is clear that big telecom + hardware providers have always been in bed with State power, both in America and elsewhere, and the Snowden docs pretty clearly show that's still true today.

Maybe Apple's announcement means that the county sheriff can't read your teenage son's weed-dealing text messages. But if bin Laden had an iPhone, the men in the windowless buildings would beyond a shadow of a doubt be reading his communications, probably via seven or eight independent attack vectors (not counting the compromised publicly switched telephone network, over-the-air signals, etc.)

If you have secrets, keep them off of communication technologies run by large companies. Especially when those technologies are 100% closed source and the companies in question have openly admitted including backdoors in previous versions of the tech you're currently using.
Yes, we're seeing similar failures at 1 minute past the hour.
I don't follow, do your arguments make this kind of frivolous censorship any less ridiculous?
What's stopping Apple from being coerced by the PTA (Peeping Tom Agencies) from installing an update to bypass the lock for specific targets?
I've seen a few similar search engines, and also people who swear by Bing for porn search... but who searches for porn anyway?!
It's clear that the Time is way louder in bullying individuals in Europe that did something in the past, than bullying the CIA on torture happening right now.

But it's not self-streisanding, the Times actively wants to talk about that, they have an purpose, and it's not certainly not about a greater good, human rights and freedom, otherwise Guantanamo would be on the front page everyday. They are deliberately picking up on individuals.
That would be better and it would prevent certain types of attacks. But at the end of the day you cannot verify what software is running on the phone so circumventing encryption for targeted individuals remains trivial.
Any chance you'll put this on github? It would be amazing to use this style of retro-futuristic UI to control my laser hardware in realtime. Plus it's Star Wars. :)

Great work! It looks fantastic.
Show HN: Hackers Job Apply