skysight-inc/HackerNews huggingface dataset:
Control Your Raspberry Pi from Anywhere Using AREST
...and not one with a crippled CPU like the MacBook. The MacBook would be my perfect 11" Air replacement if it were anywhere near as fast as the i5/i7 Airs. I can live with the keyboard.
Credit where it's due. It seems this is illustrating a sinister use of the original code found here:

https://github.com/benfoxall/cursory-hack
I like Julia's posts enough to subscribe to her blog. Her posts on Hacker News also routinely generate extremely interesting, technical discussions. I enjoy both. Also, I don't know Julia except through her blog and twitter.
> What's the point of disabling the ability to install another OS?

It comes down to the trusted base concept: once the OS is running, it can provide strong assurances to prevent unauthorized code from running but that can't protect against malicious code starting before the OS. An attacker could use the built-in virtualization support on most modern CPUs to load your normal OS and, with care, make it extremely hard to tell that all of your actions are compromised. Some people like that because it could be used to attack DRM schemes but it could also be used to record keystrokes, steal crypto keys, install ransomware which waits for the user to be utterly hosed before triggering the payment prompt, etc.

Having the firmware verify every bit of code before executing it avoids that problem but that poses the problem of having a trusted signing key which needs to be managed – imagine the mess if, say, Dell's key leaked – and poses the problem of getting new keys on the list for legitimate purposes (e.g. booting Linux) but not making it realistic for malware to do the same thing. I'd like to see some sort of government regulation requiring the latter but having some fairly cumbersome process to complicate social engineering attacks (e.g. reboot while holding down a switch, answer a prompt that you understand this will expose all of your personal data to the new OS, etc.).

This is also why Intel is introducing things like SGX - note the selling points on https://software.intel.com/en-us/sgx:

> * Remains protected even when the BIOS, VMM, OS, and drivers are compromised, implying that an attacker with full execution control over the platform can be kept at bay

> * Benefits from memory protections that thwart memory bus snooping, memory tampering and “cold boot” attacks on images retained in RAM
No, there is only one unknot and only one 3_1 knot, for example. Am embedding is not a knot, the knot is the embedding + the equivalence relation. So, just the embedding would be a presentation of the knot.
Thanks!, of course, you can encode/decode the Xaddress even by hand so it can be used in low tech environments, the guide is https://github.com/roberdam/Xaddress/tree/master/by_hand
Maybe they're trying to show off how tough they are. Nobody ever made the mistake of thinking military basic training was an all inclusive vacation. Its plausible.

In an absolute sense it may be a hellish place to work and the average turnover might for the sake of argument be 6 months. But lets say you have a job hopping stain on the resume and you gut out 9 months of amazon, well, that's fifty percent longer than most survive, that employee must have a cast iron stomach and be a focused dedicated team player, etc etc. Paradoxically Amazon being hell on earth is a benefit in that scenario, obviously you don't want to waste your life on HR nonsense, and if you can prove you're tough in 9 months instead of 2 years, well, thats great. Actually, make working conditions worse at Amazon if at all possible so "tough guys" can prove themselves in only two months instead of the made up 9 months.
After ~2 years with no update, the mere addition of a newer Intel CPU will be a nice addition (even if the speed bump is marginal, even across 2 or 3 previous generations).
Did not think compiling Go programs was that much of an issue. Many texts reference the fact that the whole standard library can be compiled in sub 10sec.
I actually wasn't talking about XML, I was talking about the general design of SMF. Murray Hill purists, champions of worse is better, would call SMF's architecture overly complicated and call for the use of BSD init, daemontools, s6, or runit. As a linux user, I see SMF as the good bits of systemd (service management, etc), without a lot of the bad bits (creeping scope, gradual introduction of lock-in, kills your screen sessions for no reason, sinister plans for world domination...). It's almost like Lennart has an instinct for getting good ideas exactly wrong.

As for Lisp on Illumos, which Lisp did you try? For Common Lisp, CLISP, CMUCL, and SBCL all claim to support Solaris. SBCL is the most popular of the three, but its solaris binary is a little out of date, so you'll have to use it to compile the latest sources. Instructions at http://www.sbcl.org/getting.html.

However, I am primarily a schemer, and if you're excited about lisp-1s, hygenic macros, tail calls, call/cc, and case sensitivity, you may want to look into scheme. Because of the minimally defined spec, every scheme is a little different. Chicken scheme, my favorite implementation, claims to run on x86 solaris, although it hasn't been tested on the latest versions. It may still work. MIT scheme explicity claims to run on any posix system, but it's kinda dead. Guile will probably run, as GNU projects usually try to be reasonably platform independant, but it's hard to tell. As both the above are GNU, so you'll need GCC, but I assume that's already installed on your system.

Chibi Scheme, Gambit, and Chez Scheme are also worth a shot, although they have less libraries than the above.

Finally, Racket, which isn't really a scheme so much a a new programming language descended from Scheme (as I understand it, many of the Racket implementers backed the ill-fated R6RS, but wanted to go even further, and got sick of compromising with Scheme). I don't personally like it, but you may, and it also claims POSIX.

If none of the above run at their latest version, which I very much doubt, you could always try lx zones as a last resort.

sexprs is an abreviation for s-expressions. They're what make up a lisp program, and how lispers store data: Typically, in a lisp program, your config file won't be a unixy .cfg, but instead a lisp program, which is much more powerful. However, like XML, it's kinda hard to grab data with regex, although unlike xml, it's trivial to parse.
I'm OK with being shown a moderate amount of ads, if they're relevant and not obnoxious. I realize the site needs ads to bring in revenue and that they don't always publish out of altruism. But over the last 5 years .. whew! I've started reconsidering following any links: "Do I really want to take the risk?"
Time-Delayed Eating Leads to Better Food Choices
Runtime Checks and Coercion of Complex Types in Python with Voluptuous
The site doesn't work for me as the Google Map API seems to be broken, Authorization removed or something
Yes. And everything works fine, but as it is not a real ad-blocker you can still see the place of the ads (e.g. Google Ads, you can see them but if you click it won't work, same for pop-up.)
Thanks wscott!, I put the first version here on HN 2 years ago, from the feedback here is the improved version.
All I can think of when I see the acronym in the article is For Fuck's Sake...

From my understanding, this essentially allows an attacker to compromise specific memory of a victim VM by bit flipping, since the host uses shared memory for both if the contents are the same. This would allow the attacker to then change the contents of the memory to something malicious and the victim VM would not know.

Let me know if I'm wrong; I think this is essentially the attack based on my understanding of the article. I didn't watch the 5 minute OpenSSH video in the article, though.
Possibly useful as part of PR buzz for food delivery services and grocery proxy-shopping services...
On systems trusting Microsoft as a CA, unless it has these certs blacklisted yet, yes.
Alexa Top 1M Crawl – August 2016
Having spent a number of years in Seattle working with ex employees, having friends that work there, and even having a very cool project with Amazon that I'll probably never be able to talk about- I can tell you it is 100% about the team or group you are in that determines whether you live one of these horror stories or not. I have no doubt about the accuracy of anyone's story when they're saying how screwed over they got by Amazon, but I'm also not surprised when I hear someone say they love it.

There seems to be hot-spot groups that seem to originate a majority of the complaints, and they're not the tech teams we think about first when we're on HN reading these stories- a lot of the horrors happen on the 'non-tech' side.

With all that, I'd still never work there. It's generally a very tough place to work and I've heard of all kinds of funny ways those big bonuses have a way of disappearing/shrinking. As I tell the recruiters every two weeks when they inevitably call or email- I appreciate the tools they've built for me to run my company, I'm a Prime subscriber, and Alexa basically runs my house, but I want nothing to do with stepping foot in that campus as an employee.
1-2 years ago, before all the public coverage, I was interviewing one person from amazon. He was not happy with his former work situation (pager duty pushed on him, requests in the evening, ...) and he was terminated in the trial period because he brought it up to HR. I didn't believe him at that time.
who are these countries that make big investments in science and not in sport?
pretty sure politicians everywhere love funding big spectacles over backroom things like research
WikiLeaks is becoming a political mess with Assange leading the charge.

The philosophy that all information should be public is just absurd. There is a reason that the whistle-blowers prior passed their information to reporters, it allowed for certain pieces of information to be redacted.

Sending out the name of every woman voter in Turkey does not benefit anyone. Leaking the private conversation of a man and his daughter does not benefit anyone.

Assange's crazed obsession of having WikiLeaks in the news doesn't help either, it only leads to further politicization and larger claims. The whole site has just turned into a show more than anything.
Ask HN: Which linux/unix C++/C IDE are you using?
Currently using eclipse, but looking for a better alternatives. I tried the popular ides, but still haven't found something close to Visual studio :

-Eclipse : Slow, unstable
-Vim + ctag : code navigation not as good as eclipse , no debugging
-Qt/netbeans : weak indexer, no macro expansion/C++11 support

Any suggestion i missed ? (tried Clion but i need remote debugging/project capabilities)
https://www.mjt.me.uk/posts/falsehoods-programmers-believe-a...
From talking to ex-amazon coworkers you don't have to have gone to a handful of ivy league unis, you don't have to be exactly 22, you don't have to be a white male, you don't have to be in the same frat as the CEO. Doesn't mean you aren't going to get put thru the interview wringer like any other low social status job.
Yup, as one of those Australian who solely uses an iPhone I don't give a crap about contactless payment via the iPhone. I use my card, which I keep in my wallet.

If I break my iPhone I pay a fortune to replace it. I really do to want to lose the ability to pay for stuff at the same time.
Better Android Development with MVVM and RxJava
In the EU interchange is capped at 0.2%-0.3% and still UK banks (and now French banks) offer Apple Pay (they are said to have gotten a better deal by Apple than in other countries).
I just tryed and still works fine, not yet reach the 2500 pageviews of google today :D
Visitors to Thailand to be tracked by special SIMs
Doesn't seem to work in Safari.
Running `go build` is a lot like running `make clean` before you compile.
New Cyberespionage Group Has Targets in Russia, China, Sweden, and Rwanda
http://locationawarenames.org/
I stand corrected. I last checked 2 or 3 years ago when that was not the case.
Indeed. You might be interested in this article about Wikileak's recent activities: https://theintercept.com/2016/08/06/accusing-wikileaks-bias-...
The about page for Ragel: https://www.colm.net/open-source/ragel/
>Where does it say that the government has the right to expect the evidence obtained from a warrant to be useful?
If the government can't do their job effectively with the presence of strong, pervasive encryption, that's their problem.

This is patently absurd.

US courts have, time and time again, upheld limits on the 4th amendment pertaining to the risk that evidence might be destroyed. The textbook example of this can be found in the so-called "motor vehicle exception". This exception holds that because of the inherent mobility of automobiles, there is exigent cause for a warrantless search, since evidence may trivially be destroyed, obfuscated or hidden.

>The right of the people to be "secure in their persons, houses, papers and effects" is non-negotiable (at least in the US, barring a Constitutional amendment.)

The 4th amendment protects against unreasonable search and seizure, not warrantless search and seizure. Granted, a warrant often (but not always) renders a search/seizure reasonable, but a warrant granted absent probable cause is invalid.

Further, there are other well-established cases in which warrants are not required for searches and seizures. Three such examples are (1) Terry stops (2) the "in hot pursuit" exception (3) the "plain view" exception [0].

Hell, the text even states it plain as day:

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

The only mention of warrants is that they are only valid if issued based on probable cause, supported by oath or affirmation, and are specific.

>They have the right to serve a warrant for my phone, and I have the right to hand them an encrypted phone. There may be circumstances where, legally, the government can demand a password, or pay for an exploit, and that's fair enough. But I don't believe any government does or should have the right to demand that encryption not exist, or that it should be fundamentally broken.

I agree with one caveat: while I would hope that phone-decryption would be subject to a warrant, it's unclear whether or not this is constitutionally required. We may well see a "mobile electronics exception" appear. You and I might not agree that it's a good idea, but prima facie, there is a legal basis for such a statute.

[0] http://nationalparalegal.edu/conLawCrimProc_Public/Protectio...
Apple’s iPhone 7 A10 Processor Gets Benchmarked Again
Yeah, some of her articles don't add much to what I already know, but I bet other people say the same thing about articles I find really interesting, and where I like that she starts with basics.

Many (maybe "more interesting") articles about deep details of something don't get much attention because you need a lot of previous knowledge to understand what is going on, that hurdle almost never happens with her articles. Introductory articles often get more attention that way.

And sometimes I notice that apparently I didn't know as much as I thought about the details...
Honestly I'm not that sure, and that was a shitty way for me to word it about Unity. The big thing with PPAPI is that it can be much more sandboxed than NPAPI ever could, which means it already has a big step up in security, but obviously anything whose purpose is to circumvent the restrictions put in place for the browser is going to be inherently less secure than just running a website. In the end PPAPI could let you run code from a webpage as "root" on your computer, and there is nothing Chrome or anyone else can do to stop that.

That being said, I think Unity is going in the right direction trying to get away from plugins altogether. They are trying (successfully IMO) to compile to "true" web technologies and let the game be exported as HTML5 and javascript which is the right choice.
I got a oops something went wrong while clicking "try it now". using chrome on a desktop.
Rodeo for Windows is here
Why cities need to care more about who works in them, not just who lives in them
Smartwatches market by user perception
https://news.ycombinator.com/item?id=8803498

https://news.ycombinator.com/item?id=6391266
Whereas here in Germany, ordering English-language books through my local bookstore is something like €50-per book cheaper than trying to order through Amazon. For them the work of getting the book from some foreign book distributor into their store is bread and butter. For some reason, for Amazon, mailing things out is a big thing that requires huge markups.
What is a trial period in US terms? Isn't employment 'at will' ?
I love the pull requests and the messages in data/exclude.conf
This just reaffirms that I don't want to work with any company in the 3's. My current company is a 3.3 but if you read their subreddit you would think they were going to murder your dog.
USB-C finally becomes a standard. Hopefully, the PC market joins in so we can make this a quick transition.
My observation is that exposure is more a function of thoughtful content and dumb luck than timing. If there's an interesting question waiting in the wings, my advice would be to just ask it.
I'm pretty sure it isn't this.
Good. Maybe that'd force Facebook to update their OpenGraph video embedding. Right now it essentially requires an URL that's either application/x-shockwave-flash or video/mp4 (with undocumented <iframe> embedding for chosen parties), which doesn't really cover all the cases for online videos (e.g. live streaming with DASH or HLS).
Average Black Family Would Need 228 Years to Build the Wealth of a White Family
I find it weird that all these critiques from liberals come just when Wikileaks released info that the DNC primaries were rigged. Before that, it was pretty much all praise. Now, it turns out one of their informant may have been the victim of political assassination and you focus on the fact that they released a conversation of a dad and his daughter, which is of course a blunder but still, compared to the other potential news... Not that I want to see Trump win of course, but I don't want to give a free pass to the other side either.

edit: grammar
If disk encryption keys are tied to the secure boot keys then you can maintain security and freedom at the same time. Swapping in user-supplied signing key would render the disk unreadable and thus protect the existing data from being attacked by malware.

Don't drink their coolaid if they're trying to convince you that they're restricting your freedom in the name of security.
Just use `go build -i` to install everything and compile only packages that have changed.
So I thought this was just doing something on click (showing the fake HTTPS info), but that it maybe didn't work on newer or non-Chrome browsers, e.g. Chrome 52, Safari 9.1, and whatever bug was fixed there. But then I noticed that it causes really weird interactions at the top of the browser, at least on Mac; if you open the page in either Chrome or Safari and move your mouse towards the address bar, it jumps around on Safari and does a "double take" on Chrome. Really interesting!
You need an H1B. You would need a job and sponsorship from an employer. So, yes apply for a job and discuss/organize visas.
Wikileaks, and Assange specifically, keep implying Seth Rich leaked them DNC emails to attention whore on his death. Really disgusting behavior.
How to Set Up Facebook Instant Articles for WordPress
Well the OP's quote continues with "because the design offers the power efficiency and thinness necessary to fit inside the slimmer Apple notebook". It's not like Apple would just ignore power efficiency.
Golden Handcuffs in Caps. Explains the other posts.
"HN Hug of Death", just resize the droplet, you can try again
Wikipedia article about Asymmetric Numeral Systems
Seems broken for me as well. I'm on desktop Chrome. Message says to check JS console. In case it helps, this is the error message:

Google Maps API error: RefererNotAllowedMapError

https://developers.google.com/maps/documentation/javascript/...

Your site URL to be authorized: http://xaddress.org/try?lng=en_.bb

@ js?key=AIzaSyAOUib5wvPGPSazgnTc-Mq415kxB1fNuu8&v=3.24&libraries=drawing,places&language=en:32(anonymous function)

@ common.js:52(anonymous function)

@ common.js:224d

@ common.js:46(anonymous function)

@ AuthenticationService.Authenticate?1shttp%3A%2F%2Fxaddress.org%2Ftry%3Flng%3Den&4sAIzaSyAOUib5wvPGP…:1
it's still better than the intel integrated video all but the top of the top of the line macbook pros got saddled with.
> there are good/great departments and bad ones.

I find this to be true of the megacorps I've worked for but the problem at amazon seems to be the entire culture starting with Bezos.
5 Agile Rules to Follow Now
There is precisely zero evidence the DNC primaries were rigged in the Wikileaks DNC content.
I interviewed there several years ago and although the interview process was long (several phone interviews and then a full day on-sight) it never really felt like a hard interview process. Of course after I interviewed there I heard nothing from them for 2 months, assumed they weren't interested, then they gave me a written offer out of the blue for a completely different job that had nothing to do with what I'd interviewed for and wasn't really aligned with my skills or interests, so I have no idea what kind of bizzaro twilight zone interview process I might have fallen into.
Need I even mention that if you're looking to broaden your horizons in programming, you may want to try 6.001/SICP? It's hard, but you'll probably learn a lot.
Still will have horrible GPUs. I at least want to occasionally play a game and not just code. My ancient 2009 Mac Pro won't run Sierra but at least I could sometimes update the video card. The Mac Pro is way out of date. Only the top iMac is vaguely decent.
I wish they would stop with this obsessive, compulsive need to make everything thinner.
> Sending out the name of every woman voter in Turkey does not benefit anyone.

But who does it hurt? And who would make the decision about what should be redacted?