skysight-inc/HackerNews huggingface dataset:
The attack against you would be interdiction, where the NSA (or whomever) would MITM shipping and receiving.

What shipping and receiving? Somewhere between where you will receive the package -- be it your home, PO Box, postal office, etc -- and the originating storage facility (ie: warehouse), there is a long list of hands exchanging your product. One of these hands would be an NSA agent's hands.

https://en.wikipedia.org/wiki/Interdiction

Who is targeted? In all likelihood, businesses, but I'm sure individuals are targeted as well.

The attack requires physical access to the hardware.

And just to be clear -- it's not just Lenovo products. The net seems to have been cast much wider and other devices seem to be affected (HP laptops, desktop motherboards).
REST Design – Choosing the Right HTTP Method
tl;dr

Mobile boom is slowing down, phone makers have to satisfy themselves with selling less phones, because humans aren't reproducing fast enough/don't buy a phone for another hand.
>> how similar situations have been handled in the past

Has there been anything like this before? If I work for the government and forward confidential and secret emails through to a server I'm running myself I imagine I'd have criminal proceedings against me.
As I read the post, I was thinking - that won't help the situation when royalty in the UK has a baby and announces a new holiday. Well... now I have two examples why the definitive list is impossible.
The people who are determined to believe the fix is in, will believe the fix is in.

Because what could be harder to believe than that Hillary Clinton is basically an honest person trying to do her job?
Show HN: BTC-E API Go Client
Oh boy.

Every time some nitwit government decides to screw with its dst (after they get done trying to set pi to 3), it's a cascading exit wound costing millions downstream.

First the OS vendor needs to scramble to get the new TZ database incorporated. This might or might not entail a lawsuit[1].

Next, the ISV's and OEM's scramble to update the OS in their offering. If you're talking life and safety equipment, validating a new OS might be expensive and painful, especially if it screws with localtime() and all those subtle bugs.

Next the field hardware has to get updated. All that embedded stuff at customer sites? Yeah. Another upgrade.

Localtime, just say no!

1. http://www.techrepublic.com/blog/australian-technology/time-...
That's why you need code reviews as well as testing. Another set of eyeballs can spot the soft spots in the testing regimen.

This is also a huge win for pair programming - code review is built in.
Could a mod please retitle to "ThinkPwn: Intel 8-series firmware exploit affects multiple vendors" ? It's a bit of a mouthful but reflects that this is more widespread than just ThinkPads.
> Which can start a fire, destroy a phone or laptop, etc.

And will the insurance company say when they find out that the fire started from the junk metal-and-plastic piece you shoved into the socket?

Even if they don't know or care right now, they will in the future if (or when) it becomes a problem.

> There's a google engineer who reviews USB-C cables

There's that. We clearly need some third party testing these products. UL and CE tags receive little or no verification. The results of said testing was that the majority of cables could possibly damage your phone, if I recall correctly.
Is there anything more stupid that they do than pool merchandise? I've heard a horror story about a DVD reseller who was foolish enough to do that, an "equivalent" pirated unit was shipped to a customer, which prompted Amazon to cancel his account and force him to pay money he couldn't afford to either ship the inventory back or destroy it (Amazon is very sensitive to media piracy, I've gathered, with their video service I guess they have to be, which suggests to me they should have stayed more focused).
Wouldn't user reviews technically be a form of "curation?" It's not like when I search "SD card 16gb" I go past page 2 on the search results.
>"Are you saying that an fMRI, when taken of a subject at rest, twice - then what the data here show - is that this is likely to be interpreted as a subject in two different states?"

Yes, that is what they seem to be saying. I didn't read the code, or even the paper very closely. However, from what I quoted, they seem to be saying there is some assumption about autocorrelation that introduces what they call "false positives".

I am saying they have mischaracterized the problem. These are true positives.
Go get some political connections and/or $$ in order to join the next tier of our justice system.
Yeah, who cares about people using screen readers! Or search engines...
4800 people died from chocking in the U.S. in 2013. Less than 10 died from terrorists.

Not sure what you consider a problem, but I personally NEVER hear anyone say we have a choking problem in this country.
In Russia there was all year DST since 2011 until 2014 (https://en.wikipedia.org/wiki/Time_in_Russia#2011_zone_bound...)

It was frustrating in December when Sun rose at 9.30am while first lecture in my university was scheduled to 9am.
I've always liked the build quality of the ThinkPad series though it's been a few years since I've put my hands on one. That said, it looks like they need to spend similar attention on the software. On the flip side, though, I wonder if this solves the issue with the Yoga laptops I read about recently where the user could not disable SecureBoot in order to install the operating system of their choice.

It's a little sad to be excited about a vulnerability because it might provide an opportunity for a consumer open up the products they rightfully purchased.
As a practicing Christian¹, I can honestly say the BSD Daemon never bothered me. It's kind of clever. Also, I have it on good faith (heh) that the FreeBSD developers aren't satanists.

Expressions like “speed demon” don't bother me either. The general concept of a demon is somewhat different from a fallen angel; I don't have trouble with demons being painted in a neutral/jokingly positive light, unless the demon obviously refers to the devil or affiliates (in which case “woo the devil is awesome!” makes me moderately uncomfortable).

¹ Odds are I could even get labelled as a backwards religious fundamentalist.
Let me add a tiny suggestion: sometimes even old, and obsolete has value. There might be an intermediate step in the paradigm or exercise that will suit your mind better. For instance: I failed twice at the calculating change problem in courses (Coursera, SICP). I find a variant in an old Caml problems book, that made me able to revisit the change problem and solve it on my own.

Seek for stimulation and keep growing.
Cheers.
The line height is too small as well, making long multiline comments difficult to read.

I wrote a userscript to tweak that as well as add some other things like highlighting and unfading downvoted comments:
https://gist.github.com/kennethrapp/a2e5ad8fe2e81e4cd852a868...
The only real error is the parent comment not using literary present tense, but that is being pedantic at best.
Until your agency's spec goes among the lines of "UI implemented in modern technologies (eg. React.js, Angular, Ember.js)".

And no, I'm not making this up.
It seems to me like Comey is basically saying that the FBI does not believe that there is enough evidence to suggest that Clinton's intent was to violate the law. Therefore, regardless of the effects of her actions which might have had consequences in a different context, the evidence is not substantial enough to prosecute her.
Selling My Passive Income Stream: JSCompress.com
Spot on!!!

> all alternatives have either lower revenues or the shittiest ads ever

or both...
Looks Good to Me is commonly used in code review at my employer (not Google).
This isn't really new, the page itself says it was released on February 29, 2016
Agreed. Now kindly point to the mistakes the author has made so others can learn from them.
Oh come on, how practical is this attack? I don't think Lenovo will default boot off a usb drive without user intervention.

If you can get someone to run a USB that'll boot you open the user up to a bazillion exploits already and already own the machine.
>> So 3 more lines. If I said you can write a very verbose accordion in under 20 lines would that be good enough for you?

Since that's more realistic, yes that would do nicely.
What are the differences between an LMS and an LRS?
Thats line printer output. Dot Matrix was only invented in the late 60s and in any case was too slow, being character at a time.
Some people still do, well, a reconstructed version. Search for Religio Romana.
TL;DR: She was careless, not criminal.
Show HN: Sold turns any social network into a marketplace
Clearly you are just another corporate Java and Microsoft drone!
HN Discussion of actual FBI statement: https://news.ycombinator.com/item?id=12037042
In general, if you go to the musician's page there's a contact link next to the 'Follow' button (and in specific, he has a gmail address).
Did anyone really believe that the laws governing the handling of classified material applied to HRC? There was zero chance of an indictment. Snowden should be so lucky.
The Top Ways That Millennials Invest Differently
True, testing won't always catch unknown unknowns. BUT.

When the bug that slips through the testing is discovered, the first thing to do is write a test that exercises the bug and makes it repeatable. This is sometimes difficult in the case of intermittent or highly condition-dependent bugs, but simply learning how to repeat the behavior is an important learning experience.

The bug should not be fixed until there's an automatic test that induces the bug. That way, you can test to know that your fix actually works.
The ultimate answer to startup idea validation
This is a great post with lots of great pieces of commentary. I love it.

My only criticism is that while CD has a lot of benefits for developers working on a product, it definitely comes more from a web/SaaS perspective than a desktop perspective. Some ideas don't directly carry over to software products that are desktop-based or embedded software (make incremental changes often, recovery from failure is important).

Some systems either can't update frequently, such as desktop products that don't natively have networking built-in. And some systems really should not fail if it can be avoided, like medical device software. Of course, context is everything in software but I do feel like CD needs to address these contexts and realize it may not work for them.
Honestly that paragraph is the biggest WTF I have read in like six months.

Who approves this nonsense? This statement, his bald-faced lies to Congress during the Apple unlock testimony. We (as in, We, the People) need a housecleaning at the FBI and we need it fast.

We have always had a two-tiered justice system and advocates working against it, but if it becomes accepted as fact like this, how can the public keep faith?
Lossy vs. Lossless Compression
Superbugs were found in the waterways of Rio de Janeiros, which is hosting the Olympic Games.
There's no question she intended to use a personal email server to exchange classified information--that's the violation of law.
> In other words, "don't think that because Hillary can get away with it, you can, too."

Yeah, the whole statement had bits like that thrown in and its a terrifying example of corruption simply because its basically an admission:

A) Clinton gets special treatment because she is politically popular.

B) She stands a good chance of being President solely because A shields her from any criminal charges that would be leveled against someone without A.

A shouldn't happen and the fact it leads to B is horrifying because its clear the political class, wealthy class will always receive special treatment unless there is a landslide rebellion that blocks her from the Presidency.
Medical professions risk losing a patient or being sued if hey misdiagnose a condition, so the understandable reaction is to throw antibiotics at the problem rather than waiting for test results to come-back to determine whether a specific course of care is appropriate.

The good news is that some test times are decreasing dramatically ... from days to minutes in many cases:

http://nanologix.com/test_results.html

* tuberculosis from 21+ days to 1.5 hours.

* e.coli from 18 - 24 hours to 30 minutes

* salmonella from 24 hours to 30 minutes

* group b streptococcus from 48 - 72 hours to under an hour

My hope is that faster results leads to fewer unnecessary prescriptions being administered, and better overall care for the patients.
It's been a while since I last checked, but if I remember correctly, Windows has a 255 character path limit.
I am personally pro-Hillary, and she may be basically an honest person trying to do her job, but even I can see clearly that what she did was wrong. It was serious and shouldn't be hand-waved like it wasn't a big deal, even by supporters of her. Listing all these violations was essentially proof that she did something wrong.
The author (Dmytro Oleksiuk) tweeted [0]: 'Dear vendors, “give us your 0day vulnerability for free and don’t publish anything” — it’s not a cooperation request'.

[0] https://twitter.com/d_olex/status/748806692754714625
You don't need intent. From the press release [emphasis mine]:

> Our investigation looked at whether there is evidence classified information was improperly stored or transmitted on that personal system, in violation of a federal statute making it a felony to mishandle classified information either intentionally or in a grossly negligent way, or a second statute making it a misdemeanor to knowingly remove classified information from appropriate systems or storage facilities.
If it involves jQuery then it is not 3 lines. The original claim was 3 lines of Javascript. Making a claim something is only 3 lines of Javascript without including the fact that jQuery is required is a disservice to the many people that made jQuery the wonderful library that it is. That is the source of my disagreement.
It gets more interesting with branded goods which are completely fungible. In theory they have a global MSRP or at least a globally optimised one, to avoid arbitrage, and brands get pretty advanced in fighting the grey market (for example, I read Chanel is now using custom molecules to identify fragrances destined for different export markets - the invisible ink serial numbers were too rapidly found and copied).

But the UK MSRP just dropped 10%. I'm looking forward to see how fast the MSRPs will adjust.
Pretty cool idea, ebay should be ringing you guys soon!
So basically "the evidence says she broke the law, and we recommend no charges be filed". That makes perfect sense.
He lives in Belgium, because he says "thanks for coming to Brussels"
Sure, but I was talking about Rust's ownership system which certainly does alter the lifetime of objects. Rust automatically frees objects when the owner scope ends.
ThinkProgress posted an article attempting to explan why the bar is high in prosecuting:

http://thinkprogress.org/justice/2016/07/05/3795414/hillary-...

"Yet, as ABC News Legal Analyst Dan Abrams explains, several key words in this provision also weigh against charging Clinton. For one thing, a 1941 Supreme Court decision interprets the phrase “relating to the national defense” to require “‘intent or reason to believe that the information to be obtained is to be used to the injury of the United States, or to the advantage of any foreign nation.’ This requires those prosecuted to have acted in bad faith.” That’s a high bar — there’s no apparent evidence that Clinton had reason to believe that her use of a private server would cause information to be obtained that advantaged a foreign nation or that would have caused injury to the United States."
Implementing Dictionary in Swift
To be clear, I find all eight-hour meetings exhausting, be it at work, making plans for Christmas, or sitting through school. Mentioning Scrum was a red herring in this thread, but a very effective one(?!) :)

I guess our meta-problem is that Scrum was a buzzword-based requirement chosen by non-programmers, so we naturally have programmers subverting the process out of spite, lots of politics and distrust, and inexperienced folks managing the whole thing in a horribly broken JIRA installation (what else?).

As a result, our development team is _really_ far behind on a huge backlog of very fuzzy stories. If you realise in a meeting that you've misunderstood key requirements, there's no point going back to building the wrong thing after the time-box ends. You have to come up with a new plan, and at the same time you need to make it fit into the desired Scrum schedule, and don't break that burn-down chart or JIRA, ...

Of course, at that point it is not really a Scrum meeting anymore.
Also found in an HP DV7 4087CL from 2010: https://twitter.com/al3xtjames/status/749063556486791168/pho...
Congrats -- was actually visiting an old app that still used dday.ical, glad it is getting some love now.
Similar situation here... I just purchased a refurbished L420 which arrives today. Hopefully they re-flash the firmware as a matter of course.
M&G suspends trading in UK property fund shares
> From the group of 30,000 e-mails returned to the State Department, 110 e-mails in 52 e-mail chains have been determined by the owning agency to contain classified information at the time they were sent or received. Eight of those chains contained information that was Top Secret at the time they were sent; 36 chains contained Secret information at the time; and eight contained Confidential information, which is the lowest level of classification. Separate from those, about 2,000 additional e-mails were “up-classified” to make them Confidential; the information in those had not been classified at the time the e-mails were sent.

(emphasis mine)

This seems like a clear contradiction of a common Clinton talking point, that none of the e-mails were classified at the time they were sent. Director Comey even goes so far as to use the same language the Clintons have been employing. Will we see a walk-back of that line in light of this?
Basically what FBI is saying is that she broke the law, compromised national security, could have been hacked by foreign actors but we don't have enough evidence that she did it intentionally so no charges!

From the group of 30,000 e-mails returned to the State Department, 110 e-mails in 52 e-mail chains have been determined by the owning agency to contain classified information at the time they were sent or received. Eight of those chains contained information that was Top Secret at the time they were sent; 36 chains contained Secret information at the time; and eight contained Confidential information, which is the lowest level of classification. Separate from those, about 2,000 additional e-mails were “up-classified” to make them Confidential; the information in those had not been classified at the time the e-mails were sent.

It is also likely that there are other work-related e-mails that they did not produce to State and that we did not find elsewhere, and that are now gone because they deleted all e-mails they did not return to State, and the lawyers cleaned their devices in such a way as to preclude complete forensic recovery.

There is evidence that they were extremely careless in their handling of very sensitive, highly classified information.

For example, seven e-mail chains concern matters that were classified at the Top Secret/Special Access Program level when they were sent and received. These chains involved Secretary Clinton both sending e-mails about those matters and receiving e-mails from others about the same matters. There is evidence to support a conclusion that any reasonable person in Secretary Clinton’s position, or in the position of those government employees with whom she was corresponding about these matters, should have known that an unclassified system was no place for that conversation.

With respect to potential computer intrusion by hostile actors, we did not find direct evidence that Secretary Clinton’s personal e-mail domain, in its various configurations since 2009, was successfully hacked. But, given the nature of the system and of the actors potentially involved, we assess that we would be unlikely to see such direct evidence

Although there is evidence of potential violations of the statutes regarding the handling of classified information, our judgment is that no reasonable prosecutor would bring such a case.
In China, we do this in schools (at least in my hometown). High school starts at 8:30 in the winter, and 7:30 in the summer.
The Problem of Bolt-On Acquisitions in a Digital World
Given the small number of emails, I'd assume they reckoned it to be negligent but not grossly negligent.
Kids, today! You have no idea how lucky you are. At the time of writing this code, there were no 32" color monitors, IDEs, code text editors, or source code management systems. Code was first written out by hand and then typed onto punch cards or paper tape. These were fed into a mainframe computer for assembly. If you made a mistake, you had to find cards (by hand), remove and replace them with corrected cards. Get the cards out of order, you were toast. In general, the only way to gain a big picture of the code was to print it out, often over and over. Needless to say, paper was in huge demand.
Seems a good strategy. Given she wins, they can ask for things they want for themselves.
We use github-review-helper instead https://github.com/salemove/github-review-helper . It also has fixup commits support which is quite useful in our workflow.
She is certainly not what you said. This video sums up her character perfectly https://www.youtube.com/watch?v=UtH7iv4ip1U

Pure evil but you'll believe what you want.
I believe yes. Similar things occurred with Colin Powell and Condoleezza Rice. The precedent being set is: if you're a government officer or official, you're exempt from the law. And even though that may not be the full truth, its the perception that the public is picking up on and it's very bad to be occurring. Depending on who you are, who your friends are, and who you know, if you have the connections you can rest not having to know the law(s). You and I? We must always be on alert, vigilant, and know all the laws at all times lest we be prosecuted. No wonder trust in government is eroding. We need to either a) actually enforce the laws on the books or b) remove the laws from the books we don't intend to faithfully enforce. Selective enforcement is a tragedy.
violating the terms of your security clearance agreement is not generally a criminal offense. You will almost certainly lose your clearance and your job but you have to have committed an actual crime to be prosecuted. If their is not evidence of classified material being leaked then there is no crime. My guess is that there is no evidence of a crime in this case. If she were still Sec. of State she would have bigger problems I imagine because she would lose her clearance at the very least and likely her job. Where things get interesting to me is that by being elected to office she is put in a position to require a clearance. A typical person (one that has had a clearance revoked) would not be granted a new clearance. I suspect the rules are different when you get elected president.
When has Clinton ever flipped on an issue? cough
“Structure” in Computer-Generated Novels
What it means is that it would be a firing offense at a lot of companies, but it's not a criminal offense.

But this is politics through and through, so I flagged the article in any case.
No, there will just be:

>I was cleared of any wrong-doing by the FBI

>At this point does it even matter
Of the 30,000 (plus more found by investigators), 8 email chains were Top Secret, 37 secret, and ~2,000 confidential (a vast majority of those upgraded after the fact). I'm actually surprised it's not more, but that's still ~10% of the volume.*

(* It's hard to compare apples-to-apples with individual emails vs. threads.)
I'm going to have to "up classify" your comment and get back to you later on that.