skysight-inc/HackerNews huggingface dataset:
> space probes occasionally do get software updates

Sure. In 2014. Not in 1969.

I once had the very interesting experience of developing an in-place update for a mid-1980s-vintage spacecraft instrument: the magnetometer on the Galileo spacecraft. It used an 1802 processor with 2k bytes of memory and was programmed in Forth. The development system ran on an Apple II. The instrument developed a bad byte of RAM and so a patch had to be developed, but the Apple II that ran the Forth compiler had long since been decommissioned. (It was nine years between when the spacecraft was completed and when it arrived at Jupiter, three of which were a delay caused by the Challenger explosion.)

I ended up writing a complete 1802 emulator and new Forth development environment that was able to compile the original source code and reproduce what was then running on the instrument. That code ran in Common Lisp on a Macintosh II. Using that new development system, I produced a patch, which was only about a dozen bytes long. It was quite an inexpensive project by NASA standards (took about three months from start to finish with just me working on it) but the cost per byte of output code was pretty staggering :-)
No, but it's reasonable to wonder why sauce for the goose isn't sauce for the gander in this case.
Kristian Saucier - https://www.google.com/search?safe=strict&q=kristian+saucier

He took photos of a sub he was stationed on, apparently just for his own use, with no intention of "spying" He's going to jail for a few years.
Who doesn't love the politics of consequentialism?
https://jsfiddle.net/e77f4hhz/
No, I would not. But a bunch of people discussing it on Hacker News should definitely say to each other "How come the cop didn't pull over that other guy?"
iTerm 2 now stable
Not every employer has to switch at once. One company can switch, then their clients and contractors, and then /their/ clients and contractors, and so on and so forth. It's not too big of a deal if you're off by one hour vs other companies.
"DST is a simple hack"

You lost me.
So cool. Thanks.
The reason DST exists is to shift the electric grid peak load time. As the summer base load is larger due to air conditioning during office hours, you can postpone turning on the street lights by one hour while the offices turn off their air conditioning units, avoiding bringing up peak power plants just to supply this one hour demand.
Not in the case of actual security classifications. Take the helicopters used in the Bin Laden raid. People knew of them in the 90s, that's when the stealth helicopter program they came from got started. Then it went silent. Why? Because they got picked up for these particular types of missions, and consequently their development and existence was kept classified. Undoubtedly, any internal documents about it at the time that could be collected and reclassified as Top Secret were.

A lot of programs go this way. "Oh, hey, we have X, it's kind of cool" (Confidential or FOUO at that point). "Oh, that's actually really useful, stop telling anyone about it" (Secret or Top Secret, past documents reclassified).
Here's the same author discussing retail arbitrage: http://www.arbing.co.uk/retail-arbitrage/
Thought all these posts were about classic Roland polyphonic synthesizers for a second...
Tell me more about this.

In particular, I am curious about "extra regulations were passed."

Did Congress pass new laws because of Colin Powell?
Yes, with BIOS replaced with free software and wi-fi card replaced with a freedom-respecting one. I do not see any problems in that.
How the Internet's Bad Pennies (Eventually) Turn into Gold
Ok, the U.S. has lots of problems and terrorism is extremely low on the list (to the point where many wouldn't even call it a problem at least relative to the others). Does that work for you?
Yet, immediately after she realized she was being investigated, she immediately deleted relevant data in a way that made it impossible to recover--or words to that effect.

What's more, the FBI director said that any reasonable person should have realized the sensitivity of information they were transmitting regardless of its markings.

I find it really bizarre how people go out of their way to tune out any information that paints Clinton/Trump/Sanders in a bad light (depending on your temperament).

I'm not saying Clinton should be tarred and feathered (or even sent to jail), but she has hardly been exonerated of any wrongdoing. Why do people find that so difficult to admit?
Thanks, we've updated the submission title to reflect this.
Examples using matrix transforms in SVG
Huh, here[0] is a a tutorial on removing the whitelist for the X230, via desoldering and an SPI flasher. Looking at the images, the chip looks like an SOIC-8. I wonder why they didn't just use a test clip like this one[1]...

EDIT: The obvious answer would be that they didn't have one handy and were competent enough that de- and re-soldering the chip was not a big deal.

EDIT (again): Also, they wanted to flash a NEW chip with the contents of the original so that they could fall back to the original in the event of failure.

[0] https://www.bios-mods.com/forum/Thread-TUTORIAL-Lenovo-X230-...

[1] https://www.digikey.com/product-detail/en/pomona-electronics...
Said contractors hire employees to build the ship. They also hire other contractors who hire employees to build components that are used to build the ships.

So some of these congress members were going to bat for their constituents.

Now, you can argue that congress members voting for boondoggles to employ their constituents is a perversion of a republican form of government, but at least they've got their voters in mind.
Honestly, the 2016 presidential election really does feel like the 1996 Simpsons Halloween special. (only without bothering with the meat-suit disguises)

It's a two party system; you have to vote for one of the green tentacled monsters.

Don't blame me, I voted for Kodos!
> and admit that they ship code of both unknown author and purpose.

That's literally what every vendor does nowadays. Do you think LG can get the code for the firmware of the SoCs they use in their phones? Do you think the coreboot guys can get the source for the Intel Management Engine firmware? Do you think any of the firmware in your system comes from your OEM and is secure?

This is a failure in the entire industry, and it's getting worse every day.

The proper solution would be simple, too: Allow everything to be flashed with custom software, but allow the user to set a cryptographic key with which updates have to be signed. By default, the system could accept the OEM key, the user could lock it further down.

Provides additional security for corporations and nerds, provides additional flexibility, provides the ability to modify the firmware.
Download+Windows+10+(Pro+Enterprises)+ISO+Torrent+Full+Version
I would go for morning pub gardens though--might that be a solution?
Also, for all but the richest programmers who had direct access to the computer, the typical experience was that you submitted your stack of cards at the end of the day and got a printout in the morning... Probably why my old programming teacher scorned our iterative approach to repeatedly stumbling upon syntax errors by hitting the 'compile' key and adding the missing commas.
Also hanging on to my W530 for a long time. One of the reasons (in a long list) is the centered keyboard.
Still a suprising number of old safari builds out in the wild, from a very quick look at our GA. Largely elderly iphones I assume?

Either way, I'm reticent to pull the WebKit prefixes from our mixins for now.

I wonder if my employers would be interested in releasing (& aggregating with other relatively large sites) our browser usage stats to create a categorised set of current 'real world' stats?
>there is evidence that they were extremely careless in their handling of very sensitive, highly classified information.

>Our investigation looked at whether there is evidence classified information was improperly stored or transmitted on that personal system, in violation of a federal statute making it a felony to mishandle classified information either intentionally or in a grossly negligent way

What is the difference between "extremely careless", which he says she was, and "grossly negligent", which he implies she wasn't?
I'm not trying to get into an argument, but you specifically said: "If you believe that previous people in the same position also had private servers and received classified information on them, why do you hold it against her?"

That pretty clearly implicated previous people and my beliefs/feelings, no?

I feel like you're trolling me here.
The Food Lab: Why Does Pepperoni Curl?
Some psychedelics would probably make the experience far more effective as well.
That has been my experience, as well. I could look past decades of Republican harassment but her own campaign has been a real eye-opener.
The readme at the linked Github repo mentions that it probably is exploitable from a running OS if you implement your own EFI_BASE_PROTOCOL.Communicate() function.

I'm assuming that would probably need admin/root access to exploit, but it does mean that you can turn an OS-level privilege escalation bug into something substantially more persistent and difficult to recover from.
I've been quite happy with my work-issued ThinkPad W540, it's a brick compared to my Dell XPS 13 (9333) but I would expect that considering the hardware it packs.
Yes, here are four reasons that only took a minute of contemplation:

(1) Because not all masters are benevolent

(2) Because it removes the possibility of charge backs

(3) Because not everyone enjoys being monitored by companies and/or governments (foreign or otherwise)

(4) Underground markets are only "underground" because of laws. If a society outlaws birth control and abortions, but a women wants an abortion she probably wants an alternative (I.e. something an underground market with provide). An anonymous crypocurrancy (or cash) is the easiest way to do this. If it's not a crypocurrancy or cash, they can always trade goods. So in all honesty, there's no way to stop it.

There may even be other reasons, but it seems pretty obvious it can inherently good to have.
BlackBerry confirms it will can its Classic smartphone
False. They did not have private servers.
[Hardware Startup] How building a lean hardware startup can make hardware easier
I think it's a very cool project.

The main idea seems to be to standardise the connection between a case (a tablet frame, a laptop frame, or a cellphone frame) and a SoC.

The SoC they're developing is tiny, entirely libre, and low power enough to be used in a cellphone.

The project is entirely libre, and the dev is involved in the allwinner GPL stuff. It should be a lot more open then the rPi or similar.

I'd be pretty sad if this project didn't get funding. It looks like a big step towards standardising SoC's
The more interesting fact would be to know the Original Classification Authority for each of those emails. As the SoS is one of a very short list of authorities. I would find if difficult to believe that some of those if not most were actually originated at State.

Also, the argument that the action was not knowing or purposeful, seems very unlikely give the fact that the vast majority of executive level State Department correspondence would be classified by authority.
Would a Work-Free World Be So Bad?
Lenovo is soon likely to add a disclaimer:

THERE IS NO SECURITY FOR THE HARDWARE OR SOFTWARE, TO THE EXTENT PERMITTED BY APPLICABLE LAW.

SHOULD THE HARDWARE OR SOFTWARE BE COMPROMISED, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
Right, which you also get via the web animations API (queue up animations, and have them run on a separate thread)
The archive page -- http://xkcd.com/archive/ -- has each comic listed by title, with the publication date in the hover text. Server Attention Span was published 2011-3-7.
7 Mobile App Trends to Watch in 2016
Take a look at the best selling products in the "Laptop Chargers & Adapters" category. Many are obviously fakes and some fakes have better reviews than the real ones.
Of course, I would love to elaborate. We found that there was a lot of duplication between .com and .org. Same news (tweets, blog posts), overlapping email lists, overlapping members, etc. That duplication lead to duplicate effort, confusion, people missing news or comments on news, and bad SEO.

The reason for having two sites in the first place was to separate the open source project from the commercial organization. In practise the same people controlled both sides. It felt like a Potemkin village https://en.wikipedia.org/wiki/Potemkin_village

We realized that it doesn't help to present yourself as an independent project when you are not. What matters is that the commercial organization is a good steward of the open source project. So we detailed how we want to do that https://about.gitlab.com/about/#stewardship and instituted a core team https://about.gitlab.com/core-team/

At times situations will come up that will allow you to show your true colors. For us it was the VLC people asking to open source a feature on HN and our competitor Perforce adopting GitLab. How you handle those situations is far more important than having multiple domain names.

I recommend that you consolidate everything under one website but you open up your company. See https://about.gitlab.com/handbook/ for inspiration.
The thing is, these are like conspiracy theories. Any rebuttal is proof you are hiding something!

The Director of the FBI lays out very clearly what he found, why he won't prosecute, and that this was impartial. But you dismiss all that and say it's because she's an elite. I understand if you believe that - but it's apparent you have already made up your mind and that his response would just confirm one of your two conclusions. She should be prosecuted or she should be prosecuted but she won't because she's an elite.
Wow, that's incredible! Hard to believe he hasn't just been sacked... clearly cannot do his job fully?
If you can't think of anything legal but not wanting that thing to be associated with you, you are probably trolling.

Being able to host web pages for a causes you believe in, but getting fired for them if your names pops up (lets call it the Internet Mob Protection).
Might want to edit that link to:

https://www.google.com/search?safe=strict&q=kristian+saucier

or flag it NSFW - when I clicked it, SafeSearch bounced me to the one I just posted. I'm actually at work, so don't intend to investigate, but my guess is "Kristen Saucier" is a different person in a different line of work.
nope I agree, like I said it's as bad as it ever was. The past wasn't better.
I'm surprised that you expected it to.

edit: Having looked at Reason more closely, I now see where the confusion came from. Sorry, I didn't mean to deceive you.
Docker: 12-Factor
I work as a freelance developer/consultant for several clients, and giving feedback with no regards for hierarchy or my own future is awesome. So my job definitely beats school.

I still need to sit through a few dumb meetings before I can give feedback, though, and even then it doesn't always work.
Caylent – Migrate Parse to a Self-Hosted Docker Cluster
Startups need to respect the laws of retail physics
Robust Stream Processing with Apache Flink
What idiomatic C code uses thunks? Is this an interpreter/runtime for a functional language or something? Or do some optimizers introduce thunks?
You are making a valid point and there might be nothing to gain remaining closed. We are not against open sourcing the code either, the main reason is that it is not on our radar, simply because we focus on building the platform and open sourcing it would be a distraction just now. There is no reason this might not happen in the future, but it will require a larger effort to focus on putting processes and tooling for the community in place, to really take advantage of open sourcing it.
Did any of you wannabe fast-readers LOL over the misread title?
Although you are correct, I don't feel it's bad to blame the vendor who was running code that they didn't know the source of, nor the reasoning behind it's existence.
Comcast will let Netflix onto its X1 platform
Contrasting the fall out from her actions compared to whatever possible gains from using private email servers, I don't see how to describe this whole fiasco as "cunning". She may still be elected, but this is making her campaign more difficult than it needed to be, even if she is not prosecuted.
Have you considered using https://pinboard.in? It's a great tool for bookmark organization using tagging. I have over 3500 private bookmarks on that site, but I rarely lose links or have issues isolating sets of links relating to particular projects. It costs something like $15 for an account, but there are no ads and your data isn't sold or shared if you don't want it to be.
Replace "anonymous pay" with cash, then you'll find your reasons.
do I understand correctly that v3 stores sort-of closure in C?
5 capabilities that should be in the next version of your favorite IoT PaaS
Neoliberalism is a phenomenon with quite well defined characteristics, so no.

'Lefties' used to dismiss another's point of view as invalid withiut actually explaining why is just baselessly tribal and antagonistic.
Here’s how Snapdeal will make it really hard for users to leave its app
Would you subscribe to Windows?
>This seems like a clear contradiction of a common Clinton talking point

Straight from her website:

>Clinton only used her account for unclassified email. No information in Clinton's emails was marked classified at the time she sent or received them.

https://www.hillaryclinton.com/briefing/factsheets/2015/07/1...
Keeping mind that HRC's attorneys screened the original emails collection for examination by the FBI. Seems she might need some better attorneys if they let 130 get through that screen.
Awesome I would love to get to grips with this and start building.
This is interesting, to treat a high suicide rate as a symptom of some other problem, rather than the main problem in and of itself. I wish these fancy American social scientists were capable of taking a similar look at USA, but alas it's all beams and motes.
Private as opposed to public or government. Not private in the sense of their own set up for themselves.

I didn't think that was the distinction you were focused on.
No one is saying we shouldn't.
If you define legitimacy so that it perfectly coincides with the law, there is little legitimate reason to use Bitcoin. But do you really think the law has always been just?
Perhaps financial compensation was indeed not Cr4sh's motivation for this zero day, but I felt it's a stretch to call this disclosure responsible. Also his name-calling (ThinkPwn) campaign was inappropriate and premature when the root cause was later discovered in Intel's reference code and propagated to IBVs's products.
My understanding is there is the statute and then there is the evaluating if a prosecution would be successful. From what I can tell, no one has been successfully charged for just gross negligence here.

That being said I don't understand entirely why that is at play -- if past convictions under a statute were required to prosecute, then no one would ever be prosecuted for anything.
On a computer of that vintage, they're called blinkenlights.
> There's probably a book that explains all this much better than I can here, but perhaps this conveys the general idea.

Why should I read a book when you have done a great job in one paragraph. Seriously, everyone who has built large systems should understand it immediately. This is a big part of the software engineering craft.
This isn't even in the same ball park as the long list of war crimes committed by the Bush administration, committed with the full cooperation of the Justice department concocting tortured legal interpretations to condone them. Not justifying what's happening here, but Bush administration is very bad comparison if you are trying to show Obama breaking new ground in "dismantling the rule of law".
Grimoire Lab – OpenSource Development Analytics Toolkit
Thanks, we updated the submission title to make that clearer.
My bad, thanks for pointing it out.
Agreed, but I've gotten so many games through humble bundles and steam sales that I've had to find an alternative to browse my library.

http://www.lorenzostanco.com/lab/steam/

https://github.com/rallion/depressurizer
How to customize notifications in Slack
I wouldn't call it a "careless attitude toward security". She's thinking in a different way than we do, because she's a diplomat, not an engineer.

There is no technical reason that a privately administrated email server would be inherently less secure than a government-administrated server (there are good arguments that it's likely to be more secure). However, a private email server is likely to be far more user-friendly and free of "security theater" constraints. Speaking from experience, the usual approach of government and other large organizations to "security" is to throw user experience out the window, forcing ugly/retro "proven" tech on users, requiring complicated and difficult administrative steps to use the system, slow approval and ticketing processes, etc.

The primary job of the Secretary of State is to communicate. Any time wasted on arbitrary tech hoop-jumping, any restrictions on how that communication happens, is keeping the SoS from doing their job. Can you imagine if we were in the middle of a political crisis and suddenly the Secretary of State is on hold with tech support while dealing with a forced password reset or something equally stupid? American lives at risk, and Lotus Notes is the only way to communicate? Etc. See the issue here?

To really resolve the problem, they would need a relentlessly service-oriented approach for whomever is responsible for email at the State Department. It would have to be as friction-free an experience for the user as possible, within the boundaries of security.

Until then, every Secretary of State is going to put their ability to communicate quickly and easily with the most important and powerful people in the world ahead of the kinds of technical wank that the average HN user thinks is important.
Losing her clearance may not mean losing her job - https://www.washingtonpost.com/news/checkpoint/wp/2016/01/27...

I found that one, but I was looking for a case with an Army General had lost his clearance but kept his job...

I'm not sure what clearance the Sec. State gets, but as President she wouldn't need any clearance as the power to classify material stems from her office.
How was your experience using firebase to build the app?
I have heard a lot of people complaining about this -- there is even a cartoon of Clinton in front of her computer with drone strikes and bags of money in the picture with her looking super guilty on the WikiLeaks page.

I have yet to see a single concrete example of anything that implies Clinton is or was profiteering from war. Can anybody provide one? The leaked emails are in the thousands and I did a few searches (like 30 minutes) and found literally nothing unexpected or incriminating in the slightest.
Hmm, I mostly work with Stash nowadays and they have the approve/disapprove buttons which I like better than LGTM comment.
What I come to HN for. Interesting, thought provoking and very well written. Thank you very much.

The line "Why are you laughing? It is backed by a study." Sums up so much not-quite-science. Delightful.