skysight-inc/HackerNews huggingface dataset:
Yes.

And Samsung is really in a panic right now since the chip & pin rollout is going to effectively nullify their investment. Initially they can just strip the "require pin" flag from the magstripe, but eventually opt-out won't be supported.

So Samsung is investing massively into Samsung Pay adverts and promotions in order to get people using it, with the hope that once this functionality breaks that people will continue using it via NFC supported terminals.

I believe they give you $50-100 just to use Samsung Pay right now for one example.
Agreed. I think for it to truly work it would require support from the terminal in the form of letting the processor know if the terminal does or doesn't support chip & pin.

If the terminal doesn't support it the processor always lets it through. If the terminal does support it the processor only lets it through if using chip and pin. Then again, maybe there won't be non chip and pin terminal much longer so that won't matter.
We've actually been looking at getting some newer devices, I'll look to add this to our list. Thanks!
Some clarification: The MyCPU was not inspired by Magic-1. It is a completely parallel development. It is very difficult to say which CPU was first.
- Dennis, the developer of MyCPU, www.mycpu.eu
Check http://www.intelligentmemory.com/ECC-DRAM/; maybe you can fit these on cots laptops. Heard it mentioned in relation to Purism Librem laptops (https://puri.sm/librem-15/); better ask them if it's still an option.
It's a very weird stance. So if a country officially trains forces (wouldn't say soldiers) in another country, it isn't like it influences and directs them just a little bit?

I see it like directly comparable to what the US did in most of the significant conflicts ever since the ww2. It didn't say what Osama bin Laden should do (back when he was a "good guy"), but it did give him intel support, training and guns, which is almost the same.

Not saying that the US is unique in this, it's just the most prolific and egregious by far. Turky is just learning from the best.
Take a look at the JAWS stack which makes heavy use of Lambdas:

https://github.com/jaws-framework/JAWS

Previous JAWS HN post ~4 months ago:

https://news.ycombinator.com/item?id=10005415
In time there will probably be mature build tools to compile unikernels from application sources. Instead of running maven or gradle to output a jar, you'll output a unikernel VM image. Containers complicate things because they add an extra layer onto a host OS. With unikernels there will be a layer removed, the host OS itself. You'll still need tools to manage and orchestrate the VMs running the unikernels, but I think things will get simpler, not more complicated.
I don't blame you. I basically don't use any libraries any more because the proliferation of promises (and libraries with promise-like architectures) has made everything impossible to reason about or debug. But I have the luxury of being a wizard in the forest who answers to no one.
Papers are the top of the iceberg if we consider applied science and technology. Patents, actual products / services and, above all, money generated are much more important imho.
My simplified version: A container is a way of sharing the resources of a kernel, with some resource isolation. A unikernel is a way of sharing the resources of a hypervisor.

There are pros and cons to each: a container lets you run other things on the same kernel, and introspect the running process (as well as do interception of things like sysdig does.) However, root-on-container generally means root-on-all-containers. So we use VMs to host containers in.

x86 is much smaller in terms of instruction set to a Linux kernel, there are historically fewer vulnerabilities, many fewer LoC, etc. The unikernel compiles your OS and libs together, meaning you can share a hypervisor - which is good for security. You lose some of the convenience of management of containers in order to get this.
The exercise in the article is really fantastic:

> Unless your responses were: 1) False, 2) True, 3) True, 4) False, 5) True, 6) True, and 7) True, you chose to interpret at least one of the words "Congress," "no," "law," "speech," and "press" in what can only be described as something other than its ordinary sense. Why did you do this? Were your responses based on the "plain meaning" of the words or on certain normative beliefs you hold about the extent to which the federal government should be allowed to interfere with citizens' expressive activities? Were your responses objective and neutral or were they influenced by your "politics"?

These days you read a lot of comments about courts "ignoring the Constitution." I don't imagine those same people were upset when the Supreme Court "ignored" the word "speech" in striking down restrictions on video game sales, or conjured up a "right to privacy" that it could not place anywhere within the text of the Constitution.

That said, law being political does not mean that adherence to rules is unimportant. The "rule of law" means that people are willing to abide by legal decisions. That willingness depends on judges at least justifying their decisions in terms of broadly-accepted rules.
I just stumbled onto this Lambda example project today, looks pretty interesting:
https://github.com/awslabs/simplebeerservice
It's pretty much the same as what's being described in the article. Samsung calls it Magnetic Secure Transmission (MST): http://www.samsung.com/us/support/answer/ANS00043865/9974103...
I pretty much stay away from all this stuff, but I keep a keen eye on it. The whole virtualization space is pretty interesting (potentially), but it seems like people aren't too clear about the different use cases. Rather, they promote whatever bit of tech they learned as The Solution, even though VMs, docker, unikernels, et al obviously have different characteristics.
which books are we missing? want to take a look....thx.
Yes, they deploy multiple times per day, but this is usually only a subset of the entire application. For example, it might be that the Messaging Component gets deployed today but not tomorrow etc. It feeds into the whole CI/CD, DevOps culture where teams are responsible for independently deploying their piece of the application as often as they feel the need.
By generating a magnetic field.
Would you give up every treatment not on the market in 1970 if you could pay 1970s prices for healthcare? How many people do you think would?
There are insane competition in the gaming scene, so if you are very good at the technical side you are probably better off making engines then actual games. And it's probably easier to have developers as customers then to have (teenage) gamers as customers.
I work at Mondo. People's savings are generally insured in banks.

Once we're a bank, customer funds up to £75k per account will be insured via FSCS.

In the meantime, the customer balances held on our prepaid debit card sit ringfenced in customer-specific accounts. If we went bankrupt, the funds can't be touched by our creditors and will simply be returned to the customers.

Edit: spelling
[WebAppSec]Testing for username enumeration with proof of concept
I had the back button problem too. The solution is for the app to add routing, which is tracked in this issue: https://github.com/nolanlawson/pokedex.org/issues/2.
+1 for plaid. It's awesome, I built something similar to OP about 6 months ago just using plaid and my existing bank account.
Or if you want to remove a potential layer of security issues.
Yeah, I did consider that. However the price makes me wanna handle it with extra care. Would be worried about getting the screen scratched when I sleep wearing it.
Yeah I certainly see the contradiction(?) in things. That is the world we live in though. I think the biggest issue is with the tools we use to manage things. Looking at things as "a computer" with storage/network/cpu seen as one unit is pretty natural now as it has always been that way pretty much.
Though it's officially not the same, it's practically indistinguishable, because of the feeling of national identity and common purpose.

It's like if you really REALLY wanted to kill someone whom your neighbour also hates, and he bought a gun and just peacefully placed it on a table in front of you without saying a word.
Fun to explore, but I can't wait until someone maps out the whole thing like this https://xkcd-map.rent-a-geek.de/#10/1.1000/0.2000
This isn't world-changing by any means. Just as individuals can reduce our energy consumption with high-SEER HVAC systems, high-efficiency lighting, etc, I think that programmers as individuals can reduce energy consumption by using higher-efficiency computing languages.
Nobody is stopping you from using VMs instead of containers. I bet most deployments aren't using containers. And unikernels are very much experimental and research right now, especially since they aren't made to easily package an existing application.

Containers, VMs and Unikernels all have different characteristics and philosophies, if one fits all your needs there is no need to make it more complicated by introducing another type. But if you need something specific, they are there.
The way markets boom and bust so frequently these days, one could almost interpret this as unveiling how ludicrous purely free markets can and probably will behave if they're given free reign, in the modern world, to "discover" market value.

Instead markets are in many ways indistinguishable from casinos anymore.
Give SNS/SQS a look for polling solutions for API Gateway. We got around it by having a health check call in our set up.
This is too damn cool to pass up - talk about convenience... I would have been willing to pay for such an item!

Yes everyone is going to run around and scream 'security!!' when they realize how ridiculously trivial this process always has been, but it does not change facts - it has always been this easy, but this is a new way to highlight that fact.
From a recent post, here's a talk[1] about containers where they use SmartOS (Solaris/IllumOS derivative) to containerize Linux by just implementing the syscall table. The future of hosting legacy apps might be providing legacy interfaces on modern OS's (IMO).

1: https://www.youtube.com/watch?v=coFIEH3vXPw
> ...homelessness, refugees, war, climate change, income inequality

These are all directly caused by an economic system which optimizes for profits instead of people. I would also argue that the other problems you listed are perpetuated by said system. You are looking to solve a social problem using individual means. You cannot do that. Join local fights, help replace this broken system.
Bitcoin Is Not Anonymous
They do allow exporting transactions to JSON and CSV, so that could be a starting point if you're willing to work with the challenges of authentication.
https://www.simple.com/help/articles/account-info/statements...
Also Microsoft have been fairly laid back about the "Registry hack enables free Windows XP security updates until 2019" stuff
SF's mistake has been not allowing much of any housing to be built. This is what I'm suggesting needs to be avoided at all costs.
The answer is "it depends". If you work for the lab, the answer is "not very" (I know of 2 or 3 full time remote workers, and they're all in the IT department and completely indispensable). If you form a contracting company that jumps through the pile of legal and bureaucratic nonsense in order to be appropriately incorporated, the answer is "we don't care where you work", though getting hired is a pain.

So, mostly, no. On the other hand, there are a number of national labs spread around the country (http://www.energy.gov/about-national-labs), and the rules may differ depending on the main kinds of work done at each of those facilities, I'm not entirely certain.

We do have a fairly liberal "work from home when you want" policy, and a formal work from home agreement can happen (a coworker works from home every monday).
Sure. Now ask yourself where you'd rather invest in property: in the USA, Russia, China. If you answer "China", "Russia", or "It doesn't matter", you're also in denial. Because the current real estate bubble is being driven largely by foreign nationals who are putting their money where their freedom is, and they are not choosing Russia or China.

The article is well worth reading. It makes some truly provocative points, but in real life we have to choose between unpleasant options, not an unattainable theoretical place and unpleasant options.
Someone I know said they had their card cloned and when the CSR went to reissue there were already attempts to use the new number, so it seems like this may have already been known by fraudsters.
> I would love to see an opensource bank, open code all the way down to the core services that a bank depends on

Yeah, no thanks. I would not trust my money with a bank like that. A lot of fraud prevention is based on obscurity, and multiple steps of hurdles to make it easy to reverse a transaction. There's a reason money transfer takes a few days.

Source: I work in a tangential field
Ah. It wasn't clear from your prose that this was your intended statement. The statement about the fallback position substantially muddied the waters, as it seems that the fallback position described is more-or-less the situation in SF right now. Oh well. :)
> If you have to talk to the application over HTTP, then it's not your application

Huh? Just to give one counter-example, I talk to my Kodi mediacenter over HTTP (using https://github.com/jez500/chorus) and when I'm at home the packets never leave my apartment or touch a device I don't own. The whole stack is open source to boot.

I guess you're talking about Facebook-style walled gardens, but HTTP give you more control over those (vs some proprietary protocol), not less.
You could potentially use that task as an availability test too.
It happens! On with life. :)
I'm not sure what is so unusual about an advertising agency having input into a product name. In the B2B tech industry, you'd typically engage with a separate firm for product naming, but in consumer sales branding and product names/titles are part of the whole advertising/promotion package. I don't read that so much as the agency being in charge of naming as arguing that name X would be more effective.

For better or sometimes worse, good agencies are about more than just coming up with ads.
Agreed! but rsync isn't nearly as fast over the network as something like this. rsync has to track tons of metadata (and the bigger the tree, the bigger the slowdown). Tar just screams (try it and compare):

tar -zc /somedir/ | ssh remotebox tar -xzC /somedir/

(you can play with -z vs ssh -C, but my experience is that -z is faster because it compresses before passing across the wire; don't do both, though..)

I've also had really great luck doing this on a single filesystem (tar into tar), since it does a better job with things like /dev compared to cp.

rsync has a lot of other awesomeness, though, especially with its hard-link capabilities. That can save a huge amount of space on remote backups over multiple days. (We use glacier for backups at Userify (ssh key management), but we also use this trick for remote pull backup to the backups without server access.)
The Thing King (1972)
I'll be honest, performance is not the best one :) That's why for the time being, we're using a combination of Lambda with ECS. Please don't quote me on that, but I have a feeling that by the time we're building the work-arounds, mine and your problems will be solved by the services ;)
There's a lot of configuration. Using APIs keys takes like 25 steps. And I haven't really figured out a non really complicated way of creating a session between a web front-end and the API. And uploading code changes is a real PITA. But after that it just works.

As I've been programming an Alex backend I haven't really run into the cold start issues.

I have to admit this sort of Dashboard Driven Programming is quite alien, but there are benefits.
I can't help but notice Blair (the fellow who, in theory, drew the troll's ire) is basically never looking at the camera, and is wearing a Postal t-shirt. Not exactly somebody I feel much sympathy for.

The real point, though, is only brought up towards the end of the article: it's the hyperactive and hyperconvenient systems in place that allow for such easy exploitation and harassment. Swatting wouldn't happen if police were a bit more measured in their responses.
Not yet (sorry) but will do soon!
That's really neat. So tiny a fly could trip over it haha. Many of the advances in process nodes are making complex hardware small & efficient enough to do stuff like this. However, I still think there's worthwhile gains in R&D where we just throw more limited hardware in there w/ dedicated functions. We're seeing that with 8-bits + smart peripherals but I think there's more to do.

My last idea was several hundred 8-bit processors in a multi-core config that could handle many data-processing problems. Turns out it wasn't entirely original:

https://en.wikipedia.org/wiki/Kilocore

Doubted about its marketability but supports my assertion these little CPU's & such can go much further on modern nodes. Just gotta experiment. Your work is another example.
Similar quote from "The Name of The Rose:"

https://www.goodreads.com/quotes/849150-and-don-t-succumb-to...

Where is yours from?
Do the seated philosophers in your suggestion all have long, white beards?

This is the problem that philosophy has, and it's evident in PG's essay, too: "philosophy is old dead Greek dudes". Philosophy is much broader than that, and philosophers are not distinct entities from scientists. Philosophy and science are intertwined; knowing how to ask and answer valid questions are core functions of the fields.
Well, English has situations where the word is written the exact same way, but pronounced differently.

The case that accents change meaning is also existing even in many european languages.

So, it’s not like latin-1 doesn’t deal with those issues either.

I’d assume it’s more other issues that are problematic with Arabic script.
Actually it apparently started as a pay-per-hint system. https://en.wikipedia.org/wiki/InvisiClues

(Although I know the various people involved I don't remember all the details.)
It is said in a very confusing manner. The core idea is dependency inversion: instead of the admin dictating the capabilities of the kernel, dictating the capabilities of the applications, we turn the whole thing around.

The client application might use a library dependent on, say, a high-frequency clock. Therefor, during the build of the application, the specific capability is build into the kernel. Synchronisation and sanity checks of this high-frequency clock runs only when this specific image (or unikernel) is loaded.

It's a pretty neat idea and fits well in the global trend of dependency inversion. It also highlights the gaping architectural hole in the current container (docker) offerings: by using a base-image, you specifically ask for everything that is necessary for: networking, IPC, process management, scheduling, file system management, package management, printing, the whole POSIX interface etc. etc. This in turn creates a huge attack surface from a security perspective and makes maintenance and quality control much harder.

My sole question with unikernels is: doesn't this just move resource management (scheduling) upwards and security (access to resources) downwards? Or in other words, are we not creating two extra rings?
> Honestly, if you're thinking about all the levels an application is built upon, it's a miracle things even work.

One mitigating factor is that all those russian-doll levels don't switch back and forth all that much (thinking in computer, not human, time). Moreover, some of those levels (like the BIOS) do their thing and then they cede control until the end of time (i.e. reset).

So yes, the multilayered cake is pretty impressive, but the situation is not that dire.
Everywhere I can find is calling the new dual-GPU card Nvidia's "flagship", though. Call it a "niche card" as much as you like, but you're moving the goalposts here.
If it's the same as it was back in the days of Credit Master 4 for DOS, it bumps up by eights and sixteens.
There was a recent post about about Unikernels and Docker [1] (that post is also linked in the OP).

[1] https://news.ycombinator.com/item?id=10585404
Have you reported any of your issues with the API Gateway to us? Please feel free to send them to me via the contact address in my HN profile and I will share them with the team ASAP!
Based upon my knowledge of EMV liability, the merchant would still be clear from fraudulent charges if they had an EMV reader. If the device tells the reader it can't do chip & pin, then the buyer is the least secure part of the transaction.
Yup, yup!
They're not public domain, where'd you get that idea? Copyright lasts a very very long time now and Activision is no charity.

they're still commercially available on Gog.com

they were temporarily offered as freeware to promote a later game, but that neither makes them permanently freeware nor public domain.

if they are public domain and I've somehow missed that happening id love to hear about it
I voted against developing on tempelhof because there are 101 better places in the city to do it that won't take away green space. Berlin could start building up a bit more for one.
That's something of a false dichotomy as there are many other options. However, diminishing returns kicks in so you eventually start making risky investments.
Thanks for the response! Firefox definitely has some speed issues (FirefoxOS included), but I haven't diagnosed it yet. Chrome on Android is the current "best" experience.

As for the back button, yeah, I need to add routing: https://github.com/nolanlawson/pokedex.org/issues/2
Me too, and I started coding it. It got a little thorny so I solved my problem with git on encfs and moved on.

I still really want to see this solved. But it needs to be secure, easy to use, and clean... it'll take some effort.
Today's world is amd64, armv7, and soon aarch64
I'm aware of that, the question was about the sorts of research that are likely to recieve funding.
"The charts on the EDN article are flipped, 8 bit usage is dropping. Time is from right to left. ;)"

I saw that. They still had almost 10% of a huge market, though. My point was Ganssle's points of them not gone for most cost-sensitive markets seemed still accurate.

"My argument is that the economic cost of production between 8 and 32 bit MCUs is negligible. There is a _need_ for market segmentation, etc. But the cost of the package makes up for the cost in gates."

That does seem to be true. Especially package vs gates.

"I don't think they are dead and useless, but they are definitely on the out for most designs."

I won't argue there. 32-bit space has improved significantly on cost and efficiency. Dropping down process nodes helped a lot, there. ;)
Are waterways more efficient? Trains can be powered entirely using electricity. Ships require either burning heavily polluting fuel or using nuclear power (which is so unpopular politically that it is not in use). So I would argue that by one major measure of efficiency, environmental pollution, both of particulates and CO2, electric-powered trains win out. Of course, it's a lot easier to do electric-powered trains in built up areas that already have power grids; less so if the area you're going through is completely undeveloped.