skysight-inc/HackerNews huggingface dataset:
Everything can be backdoored, but what about costs?

If the interconnection between the baseband and SoC is restricted in a way baseband can't just do DMA requests and mess with the system, the compromised baseband has to talk to the the compromised SoC to compromise the OS.

NSA have to either develop a specific backdoor for a specific device (or, better say, schematically similar devices group) and hook into their supply chain (hmmmm...), or develop a quite cost-adding generic backdoor system.

They surely have resources to design anything and even beyond that, but added cost to the production just can't be easy to conceal. There must be some sane limit to NSA's possible omnipotence.

And then there are reverse engineers who love to peek what's done in silicon. NSA has to shut up not only original part vendor (easy for them, sure), but a bunch of engineers around the world, stealing designs for the chips so they'd make a clone. You know, some countries are famous for that stuff.

Add: as for base stations - they're outside the phone. We don't consider plaintext data outside to be secure. If you're about the voice calls - E2E-encrypted VoIP to the rescue.
Rustation: Playstation emulator written in Rust
That is hilarious. Such a memorable game.
EURGBP: Risk Remains Lower Below the 0.7421/42 Zone
If only a similar process existed to check the editorial bias that permeates purportedly non-editorial content.
Tomte is right. Your comments have broken the HN guidelines by calling names (indeed, the ultimate name) instead of sticking to substance. The harm in this is not just the incivility of calling names but also how it dramatically increases the noise in subsequent comments.

Please stick to substance.
I would be interested in driving a big naturally aspirated diesel engine for its longevity and torque, but they don't make those anymore at least in Europe. (Pollution restrictions.)

Diesels have gone from simple and nearly infinitely durable to complex and easy to break constructs. There's EGR, DPF, direct injection, turbos, you name it, and those are expensive to replace/repair.

On the other hand, modern diesels are quiet, they don't vibrate much, and they deliver a crazy amount of power. But that's just something totally different from what diesels used to be, and modern petrol engines are catching up, in a good way. I could imagine driving a 3-cyl turbo petrol, PSA makes a few surprisingly good ones.
I haven't tried Flywheel, but I ditched Uber a long time ago and switched to Lyft. How does Flywheel compare?
Install CyanogenMod 12.2/13.0 when it comes out (probably in 1-3 months according to past performance)
Users Have Been Betrayed in the Final TPP Deal
It's nice being able to invalidate tokens on demand.

However, in the case of a hack/theft, shouldn't changing your password also invalidate all login tokens? You'd be doing that anyways. Right? ;)
In that case, we'll give you: News Feed, Pages, Groups, Messenger, Events, the Platform, and Connect, which have all been pivotal to Facebook's success (I guess more than one of these has been the first time email was dethroned as unquestionable medium for doing some thing or another).
Ads like these (NSFW obviously):

http://www.buzzfeed.com/angelamv/the-28-raciest-american-app...
The whole thing still doesn't make sense to me. You keep the people in the military industrial complex in labor but you are not generating any wealth for the nation. You collect taxes from people producing real wealth for the country to feed weapons producers and an army only to then throw those expensive bombs into some random dessert village at the other end of the world. Why not use all that money and manpower to build things useful to the nation? So what am I missing? How is war an economical effective way of using those resources? Some would probably say it is the access to oil and other resources but whenever I looked at that it seemed to me that no exceptionally profitable deals or other outcomes were reached.
Any news on whether Marshmallow offers audio latency improvements over Lollipop?
As a subscriber it's pretty irritating that ads aren't turned off, particularly the take over the page modal/interstitial ones.
Show HN: Cancel any account for $2
It's possible to write software with very few bugs if you're very experienced in the language/framework and software development in general, writing all the code yourself, and perfectly understand the requirements. Otherwise, good luck.
Global coalition to Facebook: “Authentic names” are dangerous for your users
Sure, the kernel development process "works", but wouldn't it be nice if it worked better?

The trouble is, the nastiness drives away people not based on their level of competence, but based on their willingness to put up with nastiness. So you end up with fewer good developers, and people talking about how the senior kernel maintainers are so overworked that they "have" to be nasty, because they don't have time to be nice.

Do you really think that widespread open nastiness means there are no politics now?
> you can maintain and repair them very easily

I recently had to send mine (a PC 122 layout unit) back to Unicomp when the left Alt key stuck internally at the pressed position. The pictures of the disassembly of a Model M didn't look too encouraging, so I thought it'd be best to send it back to the factory so someone familiar with the design could repair it. Would you like to point to some resources so I can do it myself the next time it fails?
If only Gen Y/Millenials turned out in decent numbers.
Do you have (or know of) a good set of practices to follow on this?

I've tried this in the past but some ports (typically big ones like web browsers) will run out of some resource or other during the build.

Also it seems that if you build from ports all the dependencies are built from ports too, even if they're already installed as packages? It ends up taking hours in some cases.
Ask HN: Startup ideas for the mobile App developer market?
I read that there are 8.7M of app developers worldwide. I don't know if that's accurate but probably there are way more than 500K developers.
That's a huge market, which also is highly technical and value software tools. There should be a lot of products to build. I would like to know your thoughts and ideas.

There are some threads out there, but not so accurate to this very specific topic: https://www.reddit.com/r/SomebodyMakeThis/
https://news.ycombinator.com/item?id=10320865
If I already know that I can’t get a refund if the newspaper sucks, then I will stick to the known / reputable newspapers and avoid paying for small time newspapers.
It would be nice if you included the financial motivation in the article as well. Makes total sense, and I totally agree that 7 day certs are better (security wise) than 1 year, I just wasn't sure that in the absence of any financial motivation whether it would be worth the effort (having to roll private keys every week) for the limited protection it gives you.
Social Media Business Tips
> $ billions have been transacted as micropayments in social games

Web content and gaming aren't remotely the same. Micropayments in gaming is almost akin to gambling for many games. Then there's the whole "pay to win" aspect, and "pay to play" aspect where you have points or stamina that gets eaten/spent as you play. When it reaches zero, you need to wait hours for it to recharge, or pay to recharge.

Web content is like buying a magazine in a store, or a newspaper from a gas station. It's nothing like mobile gaming.
Long live the Capslock-as-control-key master race. :)
They are the sysadmins of the individual networks that compose the internet.

They arrange with each other to connect their networks, sometimes payed, sometimes with no money exchanged.

These admins are not self-appointed admins over the 'internet', but they just maintain their own networks.
It could be much simpler than that. People as a collective massively over-react to spectacle of terrorism in similar ways to how they over-react to the spectacle of airplane crashes (you are far more likely to die each time you drive to the grocery store than from a flight around the world).

Politicians have adopted a "Under my watch: zero tolerance for any risk at any cost! ANY. COST." approach because no one wants to be held responsible for anything slipping through at all. It's not about saving a few hundred lives (vs tens of thousands/year in car crashes). It's about denying responsibility by spending other people's money. It's a redux of "No one ever got fired for buying I.B.M.". This way, when something bad does happen, they can point to the massive over-spending they already did and say "Don't blame me. I did far, far more than was reasonable. What more do you want from me?"

You 5 points are valid, but IMHO they are the grease that gets the rest of the machine to cooperate. I think a 5-why's approach would lead back to the politician's fear of reactionary voters.
It's a stretch to say it's "secure".

Yes, there aren't any known attacks right now, but since MD5 itself already has practical collision attacks against it, there isn't any good reason to use HMAC-MD5 in a new cryptosystem when there are better alternatives.

---

Supporting evidence: new versions of OpenSSHD do not use HMAC-MD5 by default anymore: it has to be enabled manually.

The default is:

umac-64-etm@openssh.com,umac-128-etm@openssh.com,
hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,
umac-64@openssh.com,umac-128@openssh.com,
hmac-sha2-256,hmac-sha2-512

http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/...
Please stop demonizing companies and recognize that companies are made up of employees. This very well could be a life or death situation for a company's employee.

The will of the people is fickle and ruthless - that is the most pressing reason why the USA was cast as a republic rather than a democracy.

Where does the ultimate power of the electorate end? Does the will of the people override your ability to travel to another state for better work or pay because you're needed desperately at your current locale? Does the will of the people stop you from working in tech because we need more people swinging a hammer? Where is the line in the sand?

I know this comes off as a slippery slope argument and it is easy for people who agree with you to simply write these questions off because, gosh darnit, tobacco is bad and we've seen this with tobacco on an HBO show - but really, where is the line?
So, it appears, would Sarah. But that's not why she has left.
I think you've lost sight of the context of the comment you're responding to.

A billion non-geek, non-HN, non-ArsTechnica device owners are not going to re-flash their phones with a custom ROM. Those consumers will have to get Android updates as a seamless upgrade from their phone carrier, or not at all.

In other words, the "I can't wait for this one to be solved" was not a personal plea for help but instead, a commentary on the old software the 1 billion consumers are stuck with.
you, as a citizen cannot infact "vote it down"
Why do some people have to think everything is about politics?

There is a difference between demanding and expecting great code and being an asshole. You can demand good code without alienating others.
Given they are managing the certs anyway they can revoke on behalf of the "average pleb", Just like CloudFlare did.

It is debatable how useful revoking is anyway so I agree that this provides more security, I just wasn't sure (until reply from Sandstorm) whether it would be worth the effort of setting up private key rotation.
Actually you're right on the mark-AA was much more fashionable in 2008.
The same applies to psychologists. What happens to them if they heal their patients so they don't need the therapy anymore...
I agree with your characterization of not being able to inspect+understand every good, from things being too complex and reliant on the invisible (grade of metal etc). A lot of that kind of testing is destructive testing, which obviously an individual looking to buy one item is not going to do.

But all of this speaks to the needs for standards and guarantees in the commercial marketplace, yet you're applying them to private after-market modification.

We can't prevent someone from ordering paper brake pads and internally-stressed-steel bolts direct from China, putting them on their own car, and then selling it. Or jury rigging repairs in any manner of ways. Which is why there is such a market for "immutable" new manufacturer-authentic cars.

Presently there's no way to know if one's ECU's software was modified by the previous owner, and even if it has some modifications that are necessary because other hardware has been changed - such that replacing the ECU with a "stock" one would actually make other things stop working.

Free software actually solves this aftermarket-modification problem with regards to software, since a buyer would be able to re-flash the car to stock (and even require the seller do so before money/title changed hands).

And this fundamental problem of aftermarket inspection is also why state vehicle inspections don't certify the "entire car", but the bare modicum of external behavior (gross safety, signaling, and emissions). These are the "standards" we're talking about with respect to individual modification, and currently one can modify most anything they like as long as it meets that external behavior. Preventing any aftermarket modification whatsoever is a much stricter regime, one that I don't see the necessity to change to.

> But I honestly think that what I understand of the libertarian / anarchy / whatever approach places waaaay to much emphasis on individual ability to determine the reliability / safety

Anybody driving a car, at any time, can choose to steer into others, drive drunk/high, speed, drive on the wrong side of the road, park on the highway, use dodgy aftermarket parts, ignore mechanical upkeep, tow unsafely, be distracted, or fall asleep.

And despite all of this, people's own sense of self-preservation and personal responsibility does actually work to keep traffic mostly flowing!
Thanks.

FYI to anyone who is curious but not enough to check out both: The actual writing appears to be the same, but they have different titles and different photos (+, of course, photo descriptions/comments) and I guess one has a video the other does not.
You don't profit from assets, but from hegemony and all the networks and paths that come as a result.
National defense also happens to be the most lucrative. No one has ever lost an election by demanding that we throw more money to defense contractors.
Yea but even looking at an aggregate score of a site before deciding to pay to read an article adds a lot of friction to the process.
> but some communities just have people with a rough way of dealing with others, e.g. drill sergeants in the Marines.

This isn't an arbitrary cultural choice. Drill instructors are hard-asses because they are training people to be able to perform professionally in life-or-death situations and sacrifice their own basic self preservation instincts out of loyalty. That kind of training requires some pretty hardcore psychology.
All of those Google Now changes are in 5.1.1, not new to Marshmallow.
Take a look at this:

https://github.com/mquan/cortex

"Cortex is simply a store that works for updates at any level. It achieves this by utilizing cursors, which lets each nested node keep track of its path as accessed from the root. When an update occurs, the affected node emits an update event whose payload contains the path of the node as well as instructions on how to update the data at the root. Cortex's internal PubSub picks up the event and routes it to the affected root node. From there, every affected node is rewrapped and updated to maintain immutability while leaving all unaffected nodes untouched. This allows for extremely simple and efficient"
Wait, you pay and still have to look at ads?
http://www.windytan.com/2015/04/trackers-and-bank-accounts.h...
Values, Activists and Oil
Nexus 5,6,7 and 9 will get Marshmallow.

This meets my expectations for what is reasonable, but I understand others will have a different opinion.
Mutable structures should be optimizations of immutable implementations.
Making the world's most used kernels doesn't give you the right to be a bully. Ironically, I largely believe he isn't.
There's multiple ways to reach equilibrium. As people migrate, rents and wages adjust. And freedom of movement would also include allowing workers into the US, where wages are higher presently.

As an aside, you don't even have to have large migration to produce a new equilibrium. As long as workers could feasibly migrate, they can negotiate for higher wages in their home country using that as a BATNA.
I didn't like the Kinesis Advantage because it put an even bigger load on my poor thumbs. I am using a Kinesis Freestyle w/ the Ascent, vertically. Now that's ergonomical.
Yes, from the Readme:

> Export to obj and pyl
gilles operates in a community where problems like this are taken very seriously, and where enough developer resources exist to sweep the smtp code base several times over.
I expect a lot of fixes coming up over the next few weeks.

The real problem is that the OpenBSD community didn't realise the state of things internally, because gilles and eric were trusted to not fuck up. This happens, since not everybody has time to follow every corner of the tree all the time. But when focus on a particular area is needed we can do it.

It's good that Jason pointed out these problems, however the manner in which this was done creates huge public exposure which puts pressure on all of us (especially gilles and eric) to produce results very quickly while we prefer moving slowly and being careful because that produces better results in the long term.
The most obvious answer is that the NSA pwned them.
AA was built on their wholesale business, and only later built their direct sales model. So it's hard for me to believe 'edgy' had much to do with their initial growth. As of Q1 2015, retail sales still only made up about half of their total sales[1]. I don't think the wholesale buyer is interested in edginess, but rather price/quality/variety, which, IMO, AA had, especially considering it was all domestically made.

[1] http://investors.americanapparel.net/releasedetail.cfm?Relea...
>the modern chiclet-key Lenovo equivalents

I kinda like them actually from a tactile point of view.

The trackpads on the Lenovos on the other hand...someone deserves to be shot for that. Same for the person that switched the CTRL and fn keys. Seriously WTF?
Then it was written, that we had to be doomed by animations everywhere!
Your quote cut off the critical word "say".
> You're paying for that byte to get from Point A to Point B. You haven't paid for the creation of that byte, though.

I don't know why you were downmodded but this is absolutely correct. Just because I bought a car and paid for its gas doesn't mean when I get to the theater, the movie should be free.

Better yet, it's like buying a TV then expecting all the stations, including pay-per-view channels to be free. You bought the TV, not the content that gets displayed on the TV. You can watch the free channels but guess what pays for those free channels? Yep, ads. Ads subsidize (pays for) your free content. That content isn't actually free at all, the ad companies paid for it. And they're allowing you to see it in exchange for seeing their ad.

> Are they? I mean, why do you feel entitled to read someone's content without paying for it?

Amen. Why is everyone suddenly so entitled? Makes my skin crawl to see people so naive about how the world works.
You're predicting CEO wages among the Fortune 500, will increase by 10 fold in a decade?

Are you sure you're not being just a little bit overly dramatic and emotional about this?

Numerous higher minimum wage laws across the US are already in place, from states to cities. Those laws are not set at the federal level. The US Government has practically no control over it. Los Angeles, Seattle, etc. are moving to ~$15 minimum wages. The TPP will not alter that in any regard what-so-ever.
Show HN: DividendStocks.io – Dividend Growth Stocks list, updated hourly
Flux seems linke the FP equivalent to the OOP mvc to me. So there is no need for what you say.
Ostensibly, it's actually a loan word from French, if Wikipedia's etymology is to be believed.

That said, I can certainly attest to the word being commonly used in a host of other languages besides English, including Slavic ones. Perhaps it is the case that it is not frequent in Spanish-speaking societies.
Saudi Arabia Continues Hiring of American Lobbyists, Public Relations Experts
Biggest problem with analyzing terrorism is in the definition.

Classifying both Hezbollah and al-Qaeda as terrorist groups means that you have spread the definition for any group that may have bombed civilians at some time or another. I would claim that Hezbollah is much more than terrorist group. Their success or failure does not depend on terrorism.

Second bias might be exclusion of successful terrorism that is later legitimized. For example, are IZL and Stern Gang included? I would say that they were highly successful. How about Stalin and early communists in Russia? If terrorists have enough support and are successful early, terrorism turns into ethnic cleansing and/or revolution and it is taken out from the list.

Third problem is that terrorism seems by definition be the underdog because official or state terrorism is excluded. Many dictators use terrors successfully as tactics (kidnapping, torturing and killing civilians or relatives of their opponents) but this does not fit under terrorism. Taiwans White Terror or Augusto Pinochet used terror as tactics but it's not classified as that.
Kartograff – Help Us Prove That World Exploration Isn't Dead
The terms of the thought experiment are intended to dictate that Monty will always reveal a losing door. However, they are often worded such that a reading that Monty merely has this time revealed a losing door is a valid interpretation. In that case, the problem is under-specified, as we don't know how Monty picks (randomly or always a losing door) and that changes the answer.
I assume you're being downvoted because you're bringing up a highly controversial issue which is, at best, tangentially related.
The three features that my ideal mail client has are:

1. ability to snooze emails

2. rich handling of things like calendar invites, flight reminders, attachments, etc.

3. Vim keybindings for message composition

From other comments, it sounds like you're working on (2). How about (1) and (3)? I took a look at some of the documentation for plugins. Do these sound like features that could be easily added through plugins?

For example, Atom has a package for Vim keybindings [1]. How far from has N1 diverged from "dropping Atom packages in"?

[1]: https://github.com/atom/vim-mode
That sure goes a long way toward showing how powerful Stingrays are, and why Harris and the government really, really don't want information about them getting out. I got a chuckle out of this near the end of the article:

> Whenever someone does dive into baseband software, many bugs and issues are found, which raises the question just how long this rather dubious situation can continue.

Well, the baseband software was written in the 90s, the article was written in 2013, and I'll bet nothing has changed in the last two years.
Conversely, the powers that be are likely of the view that strong propaganda is vital for democracy. See: Edward Bernays, father of PR.
That is out of context for this discussion. Banks have regulatory capture. Plus, I'm not aware of bank execs committing fraud. Plus, I'm not saying that the tort system works perfectly, I'm staying that is what we should fix, rather than having a command-and-control regulatory [capture] system like progressives/Marxists want.
What a wonderful society we would have of we were all high-performers being nasty to one another.
If a Google account compromised all of the assigned features are available at the web console anyway, having ssh access doesn't add that much risk.