skysight-inc/HackerNews huggingface dataset:
> Going after budgets won't really bring about meaningful change.

Sure it will. If the cost of arresting someone was potentially a few hundred thousand dollars each time, the police would have to be a lot more careful about whom they arrest. Cities and counties would literally be unable to afford to arrest everyone.

As far as the rest of your comment is concerned, full agreement here, even regarding the pipe-shapedness of the dream :(
(That said, every time I read an article about Android these days I get the urge to buy a Windows Phone.)

I just did that two days ago, the update situation being one of the reasons (the other that I like a reasonable quality dual SIM phone).

For now, it's just an extra phone to play with (Lumia 640, cheap, great build quality/performance for the price). But who knows ;).
It's a vital protection. Look at how messed up anti-money laundering enforcement became in the USA after the PATRIOT Act removed the mens rea requirement.
Well, if the broadcasters get $ for cable subscriptions, broadcasters have a reason to want you to subscribe to cable. Also, the cable companies really don't want you to get into the OTA habit, since OTA has many of the things you want linear TV for and goes together with OTT like peanut butter and jelly.

Do people think there is something ritually unclean about getting OTA television? I know that a lot of people that I talk to about my OTA setup seem to think I am doing something illegal.
LOL.

Is there a real reason for them to need to rearrange the channels? I don't get it.
Just as a point of reference, a single LTO6 tape costs around $25-$35 only. So we're talking about $105 at absolute most for three.

That is likely to be cheaper than a 16 TB SSD for a very long time to come. Tapes aren't going anywhere.
Boost version 1.59 C++ libraries is released
Dr. Farid Fata, America's Greatest Cancer Fraudster
You could also set up a statistical hierarchy of workers to blame for you anomalies.
Russia unbans Reddit – Meduza. News, reports, interviews, videos from Russia
The Performativity of Networks [pdf]
Government prosecutors are generally unwilling to charge police with crimes because they see themselves as being on the same 'team', and the 'blue wall' will stop them. In addition, we should remember that police officers are an arm of the state, not a charitable organization out to help people. There is simply no reason for anyone in the bureaucracy (including the prosecutors' offices) to care about or want to fix these problems.
> Even if Google patches this, there's an incredible delay in getting the patch to users.

I don't think delay is the problem - not being able to get or apply the patch yourself is the problem. Ignoring the somewhat ridiculous requirements to compile Android (200GB of HD space and 16GB of RAM [1]) - you couldn't put it on your Android device due to proprietary drivers for wireless and/or video.

Assuming you can get an updated version - I have noticed that after getting root on my Nexus 6 it won't install new versions of Android. I don't know if it's a by-product of getting root/installing a new recovery or if they have an actual check. I have a legitimate reason for root because I use FreeOTP and it does not have an export feature - so I use Titanium backup to backup and restore the app. Getting the OTP QR codes for: dropbox, gmail, Microsoft account, facebook, srchub, github, paypal etc would take a very long time and considerable effort to recover (hint gitlab).

[1] https://source.android.com/source/building.html
I'm curious... in a situation like this, could you sue for wrongful arrest?
The original bug was demoed with another privilege escalation exploit, it wasn't clear which one was used. See https://www.youtube.com/watch?t=64&v=PxQc5gOHnKs
But Google has been heavily pushing their new "Android for Work" concept. Microsoft's support lifecycle is expected by enterprises today. Why on earth should people trust Google with their business data if they won't provide enterprise-level support?
We started as app developers ourselves set to fix the problems we were facing building our own app, and the ability to surface content was our biggest challenge.

You’ve know the problem - generic interstitials that prohibit people from using the mobile website with the intention of driving an app install. A user clicks on a link and is taken to a full page advertisement for the app. It’s basically the worst.

Thousands of apps use Branch deep linking to route users to the right page after they install the app. We wanted to take this to the next level and give app developers the ability to route users to the right page before they install. What started out as a suggestion from a few developers in the Branch community has turned into a full-fledged product offering.

Branch Deepviews are previews of your native app content that are:

- dynamically created
- automatically formatted
- fully customizable
- desktop or mobile web compatible

Every Deepview comes loaded with a download call-to-action (CTA), powered by a deferred deep link, that will route users to the App Store and give them a personalized post-install experience. If a user already has the app, the Deepview will not be shown and the user will be taken directly to the content in the app after they click on the link. Moreover, because now every piece of content in your app has a webpage, we automatically add Apple Universal Link tags as well as Google App Indexing tags, Facebook AppLinks tags, making your app content discoverable.

Let us know what you think. Don't hold back.
Startup School Radio Ep. 13: Jesse Volmar, Nick Carson and Phillip Akhzar
There seems to be a lot of NGOs opposed to cops, the prison industrial complex, etc. but AFAIK there's none that will provide bail aid, which would likly make more of an impact than anything.
You linked to an article about Intel's 3D XPoint memory, which isn't NAND flash or any other kind of flash. They are also doing 3D NAND flash, and that's what will be competing against Samsung's 3D NAND flash.
How important was the collapse of the Air Canada deal to the Google acquisition? (I worked on the RES/Avail systems in '09)
Any competent malware developer must have already figured out how to exploit this the first time around. Now that every single one of those malware developers has learned it is still exploitable, the payload they've spent the past month perfecting can now be deployed in the wild.

So, can someone explain why a disastrous worm hasn't already swept the globe and infected 99% of Android devices on the planet within ten minutes of being released in the wild?

1. Text payload to victim

2. Payload executes on victim's phone and texts itself to all of the victim's contacts

3. Repeat

Assuming the average Android phone owner has 20 contacts who also have Android phones, and assuming also that texting the payload to those 20 people would take two minutes to complete, the infection would spread exponentially and only take ten minutes for the initial text to result in the infection of 10 billion devices worldwide.

Why am I not currently being bombarded with MMS video texts from infected devices? It frankly seems a bit miraculous. Did Google set up an emergency arrangement with all of the carriers to block suspicious video texts so this wouldn't happen?
> I don't think delay is the problem - not being able to get or apply the patch yourself is the problem.

Almost all users would be incapable of applying patches themselves.
Sounds like we're moving in the direction of Russia where every driver has a cam because the cops literally don't care and it's the only way to prove that someone didn't stop mid road and went into reverse into you.
Amazing videos website
Do you know if that's because Tesla is not selling enough cars, or the market demand is just not there? China used to be thought of as the big market eventually but with everything going on there, it seems that's not a good assumption anymore.

The utility of a hybrid is just much higher. You get the gas saving in city drives, and the range on the odd weekend trips. The latest Prius can be charged too: http://www.toyota.com/prius-plug-in-hybrid/ and it cost less than 50% of the cheapest Tesla. The only thing you don't get in these Prius is the look factor, though they look cool enough for many people.
> Without bail — and the quick guilty pleas
> that it produces — courts would come under
> significant strain. "The system would shut
> down," Goldberg says.

It doesn't cost much to bail out some poor people. Seems like a great opportunity to screw with an unjust system!
I believe mediaserver also has microphone and camera access which seems scary, though I don't know what harm a crook could do with it. Spy agencies might be more interested.

In general though I totally agree, the media hype has been irresponsibly overblown.
You need to look at the amount of moving parts in the factory, not in the product.
I too have started medication in the past week, albeit Concerta XL. Absolutely life changing.

I'd learned and used various techniques to structure my day, such as breaking down projects, scheduling, reminders and what have you but the medication has been in key in both bringing all that together and amplifying my abilities. It's like I'm looking at a whole new world.
Because unsigned overflow will not happen in C, and will instead wrap the value. The variables in question were unsigned.

This is defined and perfectly normal.

However signed integers will cause undefined behavior on overflow and there is a common flag in most compilers to trap on overflow.
Is it fair to assume that time, code, effort, and complexity would be some degree of cheaper?
May very well be more expensive. Language choice isn't a silver bullet.
I sympathize, but there weren't enough details for Joe Random to build an exploit. This was an attempt to apply pressure, and it did it in the right way, by telling people how they can defend themselves.

Unlike Shellshock which was all over the freaking place, neither I nor my colleagues have gotten any suspicious MMS messages.
Well, it has to make sure that the person/car using the supercharger has actually paid for the privilege... which means it has to identify you somehow. The fact that it keeps a record of this data is no more surprising to me than a store keeping electronic copies of my receipts.
Hey HN! I'm not the OP, but I am the burrito-eating, Game of Thrones watching researcher mentioned in the article.

This story focuses on a fun application of the Apple Watch's heart rate sensor, but there's a lot we can learn about the human body through this type of data.

For example, on the super burrito causing my heart rate to spike to 123bpm, there's very sparse medical literature on what this means. First off, what type of foods cause heart rate spikes? Does it relate to macronutrients (carbohydrates, protein, fats)? Ion balance (e.g., sodium, potassium, calcium, and their effects on the cardiac action potential)? Something else? Is this behavior universal across people? Are there clusters of people, e.g., do people with prediabetes respond to a different set of foods? Most importantly, what does this mean for health? Am I more likely to get diabetes? To have a heart attack? To die?

And that's not even mentioning more acute conditions like cardiac arrhythmias:

http://qz.com/472522/how-the-apple-watch-may-have-saved-this-mans-life/

We've seen the same thing--a person who discovered they have atrial flutter through their Android watch.

Finally, if you have an Apple Watch and want to play around with this data, we just started a public beta of Cardiogram on the App Store:

http://cardiogr.am

If anybody has questions about Apple Watch + healthcare, or anything else, happy to chat on this thread.
The core problem is the entire idea of timeslotted television content. Content is only available on a certain channel at a certain time of day.

What cable companies should be doing is acquiring the rights to broadcast CONTENT. Cable really should just become a massive collection of on-demand content plus live events (think sports).

The whole idea of television by timeslot is archaic.
The problem with general updates is that they tend to screw up your workflow, settings, etc. in different ways (they call that "features"). Personally, I'm also more and more reluctant about installing updates for most apps and systems.

Ideally, security updates would be distinct from general system or application updates. Don't Apple and Microsoft do that for their OSs?
It hasn't even been out that long, so what kind of data amount are we talking about? Century Links 1Gbps has told multiple friends, and friends of friends that they absolutely enforce the 250GB/month limit. That's 33.33 minutes @ 1Gbps before you've hit the cap. That's untenable. XBox games are hitting 100GB each. And now the OS is pushing and pulling maybe 10% of this cap? Umm, yeah, good luck with that.
The naive check-and-branch approach on current x86 only costs a couple of percent in integer-heavy and well tuned C code (see http://danluu.com/integer-overflow/). Integer operations in Python and Ruby are so glacially slow compared to C that the overflow checking overhead doesn't register at all due to all the other overhead there.
Apparently the exploit doesn't work on devices that have good ASLR (based on a /. comment by someone who works on the Android security team).
That insight about the home button is brilliant! I never realized how important it is to have that.
Well, looks like they need to get their systems from some seller that is interested on satisfying their needs.
> I am left to wonder where the places for these kinds of articles are

Sites that are not specifically about other topics? How about places that are primarally focused on the US, because as discussed, it really is a US only problem.

Should every site everywhere only be posting about social problems? Can no other topic ever be discussed until every socail problem is solved?

HN is actually pretty broad given its topic of things that are of interest to 'hackers' which is why articles like this will be posted and discussed but there are other things that are also of interest to 'hackers.' Those will also be posted and discussed.
I'm curious if you writing a "mobile app" that works in the browser, why you labelled it Android/Ios? I do love the optimism abound that you think your app will need to scale so largely. It is better to build in scale from the beginning, rather than as an afterthought.
Very cool. Having made mobile splash pages in this past, pretty sure this will save a ton of time on projects going forward.

Is there a way to customize the site? I want to maintain a consistent UI/UX.
That's not how you'd implement it if you had a choice though. You'd rely on a certain page of memory not being mapped on the target platform (the page that starts at address 0 is often a fine choice) and you'd issue a conditional move that touches that address. You'd rely on the CPU exception interrupt mechanism to branch.

I know modern ARM instruction sets don't have conditional instructions like that, but they may have something similar for extremely infrequently triggered control flow. The same kind of trick can be handy in a variety of programming language and GC implementation techniques.
1. Maybe it's not as easy as you think.

2. The MMS system isn't as anonymous as the Internet and someone didn't want to burn an identity making this worm.

3. A combination of 1 and 2, where the people with technical skill to do this would only use it on specific targets.
How would you know? A well written exploit would immediately hide the notification of itself.
Because, despite the hype, the bug doesn't give full root access to the phone.
Every piece of storage news I've seen for the past year or two reinforces my opinion that there is a great deal of price-fixing happening in the consumer storage market. The price trend of 2TB HDDs, for example, just does not make sense.

When I see that a company can now create SSDs with ~16x more capacity than the best consumer option, I feel like something fishy is going on that is artificially slowing the pace of larger capacity drives making it into the hands of consumers at a reasonable price.
DPOW: Stock options Explained [video]
I wonder how this compares to just adding a few extra bits to the sensor data. The paper (http://web.media.mit.edu/~hangzhao/papers/moduloUHDR.pdf) compares against an "8-bit intensity camera", but most cameras today use 12-16 bits internally. Isn't "this pixel overflowed" essentially just an extra bit of information?

The pictures using the "modulo camera" are definitely better quality, but don't look noticeably better than what I could do with a RAW from my camera and 2 seconds in Capture One or Lightroom adjusting the shadows and highlights.
is the pricing better than imgix?
Also, for as an opensource alternative, we use https://github.com/die-net/fotomat as a S3 proxy. It's very fast and scales well
Uh, no. The entire point of the criminal justice system is to determine if arrests are wrongful or not.
Please post this again when it doesn't come with "Current users of the service should be expect frequent downtime and even data loss during the Developer Release period. "
Because my wife's iPhone has not been saturated with MMS messages from bots.
Uh, that's where I got my definition.
And no thanks for the snarky link.
How much does it cost? I think it is at least 10k for the least serious crimes.
Honestly, I'm not surprised. As Robert Griesemer, one of the core Go team members, confirmed the other week in his GopherCon talk "The Evolution of Go", Go inherited a lot of concepts from Oberon. Oberon is from the Wirth family of languages, which are generally regarded as good teaching languages. He aptly described Go as using C tokens, but having an Oberon structure.
React’s JSX: The Other Side of the Coin
How will this work with iOS 9's deep linking functionality?
Tape?? You can get 6TB spinning HD for 300 bucks. Call it 12 grand for 1:1 redundancy on spinning disks @128TB. Spinning disk sequential throughput is more than big enough to do this overnight every day, and probably enough to backup almost live.
I'm sure phoning home only uses a small amount of data. But downloading the update and then sharing the update with others is where I think she got in trouble. Sharing is now turned off and the data is starting to normalize.

I know I won't get any money back. But I wonder how many other people ended up paying more for Windows 10 by downloading it then had they been able to purchase it on a DVD.
Startup School Radio: Campus Job Founders on Leaving Google and McKinsey
Right when I have finished porting all of my Autodesk products....
Your demos might be good... but I can't see without logging in. One suggestion... if you are trying to showcase your work, don't make people set up an account to try it out. Maybe have a demo site specifically for that purpose that doesn't require login or has a demo account for people to use so they don't have to sign up themselves.

EDIT: BTW, this is exactly how I got my first job... I wrote a demo app and showed it to a potential employer. It was enough to get my foot in the door at a place where I had the privilege of working long hours for low salary until I had enough experience to apply for more desirable positions. Confidence and shoe leather can be as good as an formal education... good luck :)
Communities function better if people work and live in the same place.
Mostly the interest and upkeep that are keeping me away from purchasing.

If I bought a 200k house, in 5 years I would have paid 43k in interest and still owe 180k on the mortgage (according to some amortization table I found), and probably many thousand more fixing stuff that breaks.

After 30 years I will have paid $164,813 in interest, so even if the house doubles in value it doesn't seem like a great investment.

Am I missing something? Maybe I'm not understanding it correctly but it doesn't seem like that great of a deal.
There is no legitimate reason to make the the arrestee pay the bond fee in this case. The state (taxpayers) should pay.
Didn't a number of texting apps, possibly including hangouts, update to fix it separate of this botched fix?

EDIT: I just checked and sure enough my texting app, QKSMS, updated to remove the Stagefright library
Add code folding and I can finally dump Sublime.
I think we may have gone overboard with the wording there!

Updated to more accurately reflect the situation:

Current users of the service should expect some downtime and must careful to backup their data during the Developer Release period.

We haven't had any unexpected downtime or data loss with current users, we just wanted to make sure to warn people that they're using something so new. Thanks!
This just looks like expensive managed hosting. It's still just cloud hosting on someone else's hardware.

For truly personal 'cloud' apps, I recommend projects like Freedombox or Sandstorm. They make it this easy to deploy cloud apps on hardware you actually physically own and control.
Well, the Brooklyn Community Bail Fund is mentioned in TFA:
http://www.brooklynbailfund.org

Also in NYC:
http://www.thebronxfreedomfund.org
Useful video must watch
Still, just because a police officer arrests you does not mean that the arrest is legitimate.

(especially in a legal sense, I guess in a de facto sense this is a relatively safe avenue for police to abuse their power)
I was under the impression that it was to fight insurance fraud.
It's a bit surprising because so much of Android is written in Java. Given hardware decoding of the video itself I wonder why Stagefright needs to be written in C++ at all. Media processing code has been notorious for being exploit ridden for years, so it's not like this problem was unpredictable.
SSDs may have issues with long term 'disuse', as in you unplug the drive and leave it on the shelf, data loss may occur. With most tapes you can put them in cold storage and they should last decades.
That's not an SELinux policy? That's just a service statement for Android's init, defining the process' supplementary groups. There is no explicit seclabel I can deduce.
Yes, audio and camera are there, which means that you also have access to the graphics memory managed by gralloc/hwcomposer too (though surfaceflinger itself is a separate process -- whether mediaserver has access to all such buffers or just ones passed to it from elsewhere is platform-dependent I think), as well as enough of the display driver to spit audio streams out via HDMI, etc...

All that kernel code tends to be complicated and poorly audited, so it would be a plausible hole. But that's not a "sandboxing" problem exactly.
I agree that DEVICES should be covered for n years, where n is somewhere between 3 and 5 and we can quibble about the specifics later. I don't think that backporting fixes should be the way we gauge this if newer versions are available instead.
I could have sworn I read in the OP a few minutes ago, that mediaserver runs as "system" on some devices, which would probably be worse. I'm not finding it now, so maybe it was edited or I'm mis-remembering.

Anyway, vendor customization diverging from AOSP makes it hard to say.
Marine biologist explains why the pro surfer attacked by a shark didn't get bit
Do you do any accounting or normalizing for clearly erroneous heart rate readings from the watch?

Just anecdotally, the heart rate monitor seems to be wildly inaccurate at times. Over the course of a workout at the gym, my heart rate jumped to 170bpm while benching (probably close to correct), and dropped to 45bpm while deadlifting (definitely incorrect). My resting heart rate is ~55bpm.

After a few days of seeing my heart rate have a delta of ~100bpm in the matter of seconds, I've given up on the heart rate monitor being good for much.

Maybe I'm an outlier and it's accurate for other people, but for me, it was very disappointing.
Easy solution: square platters
Yes, the entire system is flawed.
Cool, good to know!