skysight-inc/HackerNews huggingface dataset:
The Samsung i9300/i9500/etc use separate Exynos application processors coupled with stand-alone communication chipsets from Intel (originally Infineon). Check out the Replicant wiki for more info. The Replicant devices are unfortunately quite old (i9300 being the latest), but newer models do continue the trend (SM-G920H for the S6 international Exynos, I believe). You'll just be stuck on their proprietary OS, or need to fund a bunch of CM/Replicant development.

Of course the same branded (eg "Galaxy S6") has many different models for across the world, most using integrated Qualcomm chips. Honestly looking at the list of variants and thinking about the conservatism of RF and telecom regulatory regimes, you'd have to be naive to think the whole ecosystem doesn't simply exist under the control of major intelligence agencies. Communications have always been regarded as dangerous.
> As someone said "you can't successfully run marathon by running a series of sprints".

I think that's a lazy argument.

If you don't like the word 'sprint' use another term to denote a period of time.

> natural cycle of plan, design, implement of the stuff slated into the next release (ie. the dirty word of "waterfall").

Actually, if it's in small units of time/work, then it's pretty close to agile.

The problem with waterfall is the big upfront planning where you try to estimate how long it'll take to implement things months ahead of time.
It doesn't mean that they are actually recording though.
I'm more intrigued by the "Super Cloud". How different is it from the consumer AWS?
+1 to this

On the burnout and working with jerks, spot on. Sometimes, there is nothing you can do. Sometimes you can even recognize it in time, other times you can't.

Best lesson, learn to recognize burnout and either take a vacation / get some distance and/or find a new gig.
Problem with them open sourcing their platform is that the platform base is used in enterprise and how the bulk of their revenue is made... Who wants to buy milk when the cow is being given away?
Again, the implicit assumption that machines will automatically be better drivers than humans, because, magic. As we all know, all of the technology and computer systems we make work flawlessly and never miscommunicate, crash, or fail for any reason, unlike those damn meat puppets that operate them.
Cityami | New York, NY | Will support visa | Partial remote OK (we all like to travel a lot)

**********************
=== About Cityami ===
**********************

Cityami is a home sharing concierge. We are an integral part of the home sharing economy. Across the globe, people are finding the best way to travel is to rent their home out on Airbnb, VRBO, etc. while they’re away. We’re here to make that happen for them, without all the hassle. We not only handle the essentials like guest check-in, check-out, and emergency care - we also serve as their guest’s local guide, offering an insider’s view to the city and an experience they’ll continue to share!

******************
=== The Role ===
******************

Cityami is looking for a strong CTO to come on as co-founder, helping to own and implement the technical vision of the company. We've come a long way using our current MVP, but with your help are ready to scale and grow. A good fit for the role will have hands-on experience building large, complex web applications. This means you know your way around a browser and have 5+ years working with JavaScript, HTML, CSS, and a backend language like Node, Python, Ruby, or Java. DevOps experience is a huge plus too, though not required if you are at least handy with Heroku or a similar platform.

***********************
=== What You'll Do ===
***********************

You’ll be helping refine and implement the technical vision of the company. That means building an enterprise scale, responsive web application that can handle increasing amounts of traffic in different regions of the country and eventually world. As long as it meets our business requirements, the software stack will be the product of your imagination, which means you’ll get to use the tech you love to help build a business everyone will love.

************
=== You ===
************

You’re a tech-savvy entrepreneur at heart and ready to take some risks for big rewards. Cityami is a new business, starting to make its way in New York City (and preparing to expand beyond), but we need your help to reach our full potential. The sky’s the limit, but you'll have to be willing to fly. If you want a stable job where you do the same thing everyday, look elsewhere. This is about thinking big and building something new and needed in the hospitality industry.

************************
=== What You'll Get ===
************************

We’re looking for risk-takers, which means you’ll have to take a risk. By joining Cityami at this stage, you’ll be on the ground floor of a new business that intends on growing fast. You’ll get a founder’s share of equity in the business as your compensation, and the opportunity to forge a lucrative destiny as your reward.

Apply =====>>>>> www.cityami.com/cto

.. or send an email to michelle@cityami.com
Now I want more competitors for platforms like Heroku just so that they can put their prices down. Heroku is great, but it is crazy expensive. Furthermore, I don't see any signs of Heroku lowering their price at all.
>Academic performance can't be held equal because the various applicants are competing on playing fields that can differ radically

Caltech manages to do this just fine. So does UC Berkeley. Harvard could stop racism if it wanted to.
I got frustrated waiting for improved PR code review, so I built https://reviewable.io. It's best suited for private repos (since there's a learning curve that make throw off potential open source contributors) but it addresses a lot of the issues with PRs. Take a look!
There's a prank sound that makes it sound like someone is knocking if you're wearing headphones. Casual mode is to just send them a link with a picture that plays the sound. But if you wana be a baller, shot caller, one can write a script to detect if someone's headphones are in and play the sound at random intervals.
While experts are present (and since the notes on security in the readme are refreshing), I'd like to ask a general question about securing OAuth 2 tokens.

My use case is to have a server that uses the explicit OAuth flow (redeeming a code obtained from the user in order to get permission to operate on the user’s behalf) but also have a front end client that uses the implicit flow (retrieving an access token for direct use) to make requests from the browser or mobile device. That way the user can surf freely and only hit the server when it needs to save something (which allows the app to scale).

The problem is that I don't want the user to have to authenticate twice. Ideally the user should be able to OK the standard OAuth web page to obtain a front end token AND also visit the server callback url with a redemption code. However I can’t find a single social provider that does this!

I scoured the web and Stack Overflow and can’t find a good discussion about the security of sharing tokens (all they say is to pass it over SSL). So the best I could come up with is to authenticate implicitly on the front end and pass the client access token to the server. This seems safer to me than sharing the explicit access token from the server to the client in the outside world.

Token sharing from client to server presents several security issues, because the server has to trust that the token belongs to the current user. It completely negates ever using the explicit flow, because most users are on mobile these days. The best the server can do is ask the social provider if the token’s app id matches the server’s app id, to prevent the confused deputy problem:

http://blogs.mulesoft.com/dev/connectivity-dev/google-oauth-...

http://technotes.iangreenleaf.com/posts/closing-a-nasty-secu...

Believe it or not, several prominent social providers don’t even provide a token validation endpoint!

This whole experience has left me wary of OAuth 2 and I am concerned that it may not even be able to fulfill my very common use case. Am I completely missing something here? Thanks in advance for any insight you might provide.
> Every 7 or so transactions that bitcoin has processed in that couple or so seconds cannot be clawed back, as in NEVER

Normal people read this and hear “if you don't notice theft instantly there's nothing you can do”. This is not the persuasive sales pitch which you seem to think it is.
Wow, what a bunch of whiners. If you hate github so much why don't you just fork it and fix-- Oh, right. It's not open source.

Well, there's your problem right there.

(I have sooooo much more in this vein but I'll spare you. ;-)

EDIT: No I won't. Fuck it. This is too ridiculous.

These guys (and they are all guys) chained themselves to github's metaphorical car and now they're complaining that the ride is too bumpy and the wind is a little much.

Don't whine about not getting to sit inside the car! Unchain yourself and go catch one of the cars where the doors are unlocked and open and the driver and other passengers are beckoning you to join them. (Apologies for the mangled metaphor.)

These folks come off to me like masochistic babies.
Lol these types of assumptions, that I have the luxury to just interview for weeks on end, really get to me
"Being happy" does not adequately describe the comment.
Yeah. There are no panaceas. And change for the sake of change isn't useful.

This certainly mirrors some of the horror stories of "agile" adoption I've read online. With most of those, either an executive read a book and forced change on everybody, an over-priced consultant tried to force change on everybody, or some combination of the two.

Counter those exmaples with my own experience in an organization adopting scrum. My current employer started that process 3 years ago and it has been reasonably positive. There were growing pains, but the company invested in training to alleviate FUD, there way buy-in across the board, etc.

Based on this one article, it really sounds like the executive team failed to get buy-in from the broader management team and then doubled-down on the failure by not providing the employees with enough training to overcome FUD-induced panic.
Please don't.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
Standing desks may boost students’ cognitive function as well as health
In the algorithm's redistricting of Maryland, two of the districts have parts on either side of the Chesapeake Bay. The algorithm should consider the actual travel time between two points, and not the straight-line distance.
The SGI "Reality Engine" was also the GPU that ended up in the Nintendo 64, wasn't it? How much more powerful was the RE2?
Many posts turn into copy/pastes of solutions found elsewhere. A direct result of: 1) not allowing answers that are just links to elsewhere, regardless of how appropriate or canonical the resource and 2) a mad dash to answer first to maximize internet points (karma).

Will they start policing their own platform for copyright woes?
then bitcoin is already officially fucked.
Can a private company trademark Yosemite landmarks?
Your friend in the oil industry is probably assuming that the products are fairly high value, which is pretty much guaranteed versus the value of electrical energy. Minimum approximate price for anything is the value of the energy you get by burning it, doing essentially anything else will result in a much higher value product.

The costs would be (first order) feedstock + O&M + capital amortized. For a chemical plant, the feedstock is irrelevant not because it's cheap compared to the value of the energy you get from burning it but because the difference in price between the product and feedstock swamps the O&M + capital costs. What bigger plants do is decrease O&M and decrease capital (per unit capacity), but they can do nothing to decrease the feedstock price...

If a barrel of oil is $50, a barrel of oil equivalent is 6.1 GJ, so if we translate to the weird US units we use it's just under 3 cents per kWh if conversion were 100%. In practice efficiency is closer to 45%, which I'll call half, so the 2x gets you to an absolute minimum cost of around 6 cents per kWh for oil electricity generation.

That's including no wear and tear, no capital costs, and no staff to keep an eye on things. This is the absolute thermodynamic floor on the cost of oil based electricity, with the plant size getting bigger at best driving the price to 6 cents as O&M and capital costs are driven to a smaller percentage of the total costs (i.e. O&M + fuel).

For comparison, look at figure 44 of this report:

http://energy.gov/sites/prod/files/2015/08/f25/2014-Wind-Tec...

and you can see that the median marginal cost (i.e. operations and maintenance) of wind power is ~0.8 cents per kWh ($8/MWh).

So I stand by my claim that the marginal cost of wind power is much lower than the marginal cost floor for oil base electricity. Chemicals just have a different first order approximation due to very different margins.
I think what the author was implying is that the code that runs the UMTS/LTE/whatever else stacks is still based on that nineties source, when the firmware was initially conceived for GSM.
Which is my (implicit) point. The userbase of SO does not include entities who have any incentive to litigate to protect their posted code.
That's just iOS being iOS, on Android the baseband firmware can usually be flashed using fastboot. However, there will presumably still be a bootloader on the baseband processor that checks the authenticity of what you just flashed to it.

It's very interesting to just download a baseband firmware (usually called radio.img) from a random Android forum, unpack it and run strings on the code you get. It'll usually be an ARM processor running a homebrew RTOS, which is concerning enough. When you search for NMEA and realize the baseband processor is running the GPS chip, that's when you are starting to get doubts. And when you finally realize theres a bunch of audio codecs and the baseband is controlling the microphones, that's when the full force of despair hits you. You don't own it, you don't control any part of it. Your Android doesn't either, it begs the baseband for a slice of its information.
Folks at LessWrong did quite a lot of discussion and research on the topic. I recommend going there for some in-depth, science-based reading:

- lesswrong.com/lw/3w3/how_to_beat_procrastination/

- lesswrong.com/lw/9wr/my_algorithm_for_beating_procrastination/

- http://alexvermeer.com/getmotivated/ - has a pretty neat anti-procrastination poster that I'm still procrastinating about printing out and hanging on the wall

- https://wiki.lesswrong.com/wiki/Akrasia
GitHub does certain things very well, other - not so much. I really think the best way to get them to focus is to start contributing massively to GitLab.

Anyway, implementing just voting won't be a such a good idea in the time of Emoji Reactions!
What you speak of RE: claw-back ability is easily solved by multisig transactions with bitcoin. However, the so called "moderator" must be trusted.
The baseband chip is a separate chip than the one providing wifi, bluetooth, nfc, etc. Essentially, the wifi/bt/etc chips fall on the computer side and can be controlled/manipulated by the phone's OS. The baseband chip is a standalone system that is controlled by the cell towers, and then is tied into the phone's cpu directly. Phone builders essentially buy the baseband chip that is certified on different network types and add it to their PCB.

In reality, the baseband should be connected more like a serial port (with some audio channels to the mic and speaker). In fact, it's treated very much that way in software - you interact with it by sending AT commands. But, as others have pointed out, it can send commands directly to the phone's CPU and access the phone's internal memory.
"Cheapest cloud hosting service as a service"
How your purchasing process is costing you more than you think
Did we read different articles?

It doesn't read at all like the US Govt is investing in developing self-driving car technology, of course plenty of private automakers are already doing that, it looks like US Govt is investing in self-driving car public infrastructure and guidelines.
This is going to be wildly unpopular but 7.6 billion would be a number worth mentioning. (Although I also feel VW should be banned from the US, no negotiations.)

What kind of message do you send by only fining them a tiny portion of what they were only able to make by breaking your laws? I'm 24 and I know my peers already justify their potentially unethical business decisions by citing Uber. Really all I've taken away from this is to not really worry about state laws.
You aren't providing any reasons why anyone not blessed with the appropriate three letters should be barred from accessing this data.
>somehow even among people who describe themselves as "hackers", most just want to run Android or iOS and buy/run closed-source apps, and are more interested in Javascript and employment [read: eating, having shelter] than reverse-engineering and doing things that have never been done before.

How many opportunities are there to work on secure communications software full time and still put food on the table?
I saw this video that you linked in HN. I think you should add it to your page too.

I found these screenshots: http://www.exeone.com/vintager-gallery .

I still would like to see more/bigger examples. Something like http://alvinalexander.com/design/gimp-catalog-filters-effect... (130 is too much, pick the best 10 or 20 of your effects) (I'm totally unrelated to this site, it's the second link in https://www.google.com/?q=gimp+filters+examples+galery )

Don't worry about the inconvenience. Here is usual to try to give feedback. Most users go to the site and if they don't find what they want, they just go away. Here we try to provide some advice (sometimes it's good advice, sometimes it's bad advice). I hope these comments help you. Welcome to HN!
Were you able to find more information about the runtime? I'm curious about things like message queueing and ordering guarantees.
Please update the link to https://github.com/dear-github/dear-github
Move to electric vehicles and produce the electricity needed by burning fossil fuel in large scale regional plants with higher efficiency, where it is also economic to invest in filter systems to reduce pollution.
>An unalienable right can exist without being granted (that's the definition, in fact), and it exists whether or not something is in place to protect it.

Would you mind naming an example?

>They are not mutually inclusive.

I have a feeling that this may devolve into an argument over trivia, but I hope not.
Seattle Seahawk Russell Okung Responds to Paul Graham
Rise of the artistic machines
No they haven't. There's no TPM in modern Apple computers of any brand. And there's certainly nothing like the NGSCB Nexus, which I'd think essential to calling something "literally Palladium."
Only if people don't know about the dummies, things tend toward zero sum with awareness of the situation.
Please don't name things like this. The Linpack library and associated benchmark is an old and well known piece of software.
Nice, I'd use it. Having the ability to search by address would save a lot of zooming though. Is this just a straight overlay on the existing Google Map widget (which would make customizing easy)?
The important question: did his wife find it funny?
Where are you getting that they don't dogfood the issue tracker? It's a private tracker (private repository) but from what I've seen in the Github blog, they do... it wouldn't make much sense if they didn't.
I feel like it happens every few years, just depends on the job. So far, I've always bounced back, usually through change of scenery or taking a vacation.

Every time I get too far down the hole, I'm reminded of what Tony Robbins said in his TED speech. Sad people get sad, happy people stay happy, angry people get angry.

After too many burnouts, too many long weeks, too many days on the road, it's all in your head and your ability to recognize what you're feeling/experiencing and developing mental tools to handle that.

I've met people who swear by meditation, for others it's exercise. Find your habit, the thing that let's your mind "unclench".
That's a fair point. Ugh I don't want to have to wait for overseas shipping.
"Evil USB" (or "bad USB") is possible thanks to the U part of USB - universal. If you connect a pendrive to your computer, it can easily say that it's a keyboard, because your computer cannot easily verify that you haven't just connected a keyboard. It would need to ask you in some trustworthy way to be sure, which sometimes can be problematic.

OTOH, on the device like Neo900 it is well-known what kind of device is connected to the internal bus and software stack (at least on Linux) can easily be advised to not accept anything that doesn't look and behave like the included modem should.

In a properly configured user OS, the modem would need to use some software vulnerability to exploit the USB stack, so the same principles apply there as with, say, OpenSSL, browser or the kernel. Secret zero-days aside, when some bug is found, it is patched and you upgrade the vulnerable component, just like on PC.
Holocratic organizations are not flat. It's a common misconception.

Holacracy is just agile redirected towards defining roles in an organization rather than building a product. You take on roles when you can help the organization by doing it instead of having a manager tell you what to do. Those roles are constantly iterated on to make them better.
A Guided Meditation for Visualizing the Destruction of Your Enemies
Drinking tea, shopping at a gardening store is probable cause for SWAT raid
I'm still not convinced about the product life. We have 20 year old ICE vehicles running absolutely perfect (well-maintained and designed ones), is the same possible with an electric car? Also are the byproducts of manufacturing an electric worse than an ICE vehicle. We need to think about the environment as a whole. I'm still convinced electric mass transportation would be better than investing in individual carmakers.
While there are differences in what people use internally vs externally for some operations (see Apollo vs CodeDeploy in a few blog posts and talks), what they're talking about here is migrating Zappos onto/into the retail infrastructure and applications.
To clarify my stance: I am not pitching bitcoin to anyone on hackernews (this is not a Show HN). The ability to not claw back bitcoin is a reality, unless there are flaws in the technology behind bitcoin. I believe this is a feature and society could manage to change its ways regarding transacting as a result of that reality.
That would disproportionately penalize poor people. Imagine gas prices suddenly spike due to a new gas tax, poor people who can barely afford a used 2001 Toyota Camry are now even worse off, while your typical doctor or software engineer just goes out and buys a fancy new hybrid or electric car.

Sure it may eventually change market conditions to favor electric vehicles, but it will be a long time before there are cheap, used electric vehicles for poor people to buy.