skysight-inc/HackerNews huggingface dataset:
Apple doesn't need to do shit.

What are our options?

Windows? Where Microsoft is collecting every bit of data possible while pushing ads.

Linux? I'm a geek and Linux is annoying, I've been a Unix guy since 1984. I run it on my daily laptop only because I'm not willing to spend $2,000 extra for a Macbook Pro with the same specs as a $750 Dell Laptop because it weighs 9oz less

MacOS is the only real game in town.

Apple knows they are in the drivers seat and they are skull fucking the public to the best of their ability. If you doubt it, see their quarter of a Trillion in cash. If they release just a Mac tower it might just break the spell and convince people they are getting skull fucked.
The feedback loops that cause everyone to worry come from global climate models.

How do we know that the plants won't absorb all of the excess CO2 without studying the local effects? The world is full of positive and negative feedback loops, discussing linear effects on the earth without taking into account these loops won't get us very far.
Because you haven't started one yet. :-)
yeah, that's why in a previous job I try to stick to OpenJDK even though IntelliJ would warn that it might not be fully compatible. At least it's built and packaged by the distro so it does not leave a mess on the filesystem.
Smart Cities Are Going to Be a Security Nightmare
AMT is a part of the vPro management suite. All 3500 of our desktops had AMT at the school I worked at. They did not, however, have vPro. Having it was as simple as paying extra per machine. I would guess that it's in all of their CPUs, just disabled at different levels depending on the OEM and the system you order. Typically, you will not find this enabled on consumer desktops / laptops, but a lot of the business ones at least come with AMT, even if vPro does not.
Nice. Just after proposing to using AMT for remotely controlling workstations at university.

AMT 6.0 up to the current version? are affacted.

Here is a handy Wikipedia Table: https://en.wikipedia.org/wiki/Intel_AMT_versions

Core2 seems to be not affected.
Yes. There are standards, they're the Building Codes. There are several versions of them that have come out over time, and they've been evolving with the advances in the science and engineering. When I was in Engineering school, we were generally taught off of a newer code than was in common use in the wild, but that transition was occurring in the couple of years that I was actually doing bridges.

In the case of bridges, you're going to get the basic Steel or Concrete code, maybe some federal guidelines if it's an interstate, definitely state DOT standards.

As for modern vs not -- There are definitely classes of bridges that I'd not consider modern. Anything with rivets, or sections that are built up by lots of little pieces (like the old style riveted trusses). Those aren't done anymore for several reasons: onsite labor is more expensive than shop labor, rivets are inconsistent and weak compared to bolts or welds, and the ongoing painting to control corrosion is a nightmare. In places like the West Coast, the older bridges are not built to current seismic standards, which have been evolving as quickly as the rest of the codes (e.g. tiedowns, base isolation, column jacketing). A lot of the older bridges also have details that aren't terribly good for fatigue performance.

There was definitely an inflection point, probably in the 80's where precast prestressed concrete started being the go-to design for more than just a plain old girder bridge over the interstate.
The recent Intel ME problem may mean big corps at least give AMD a look.
Parkour | Development Lead | Budapest (Hungary) | Onsite, VISA

---

We're building drive-thru payments, turning your car into a payment token - to park, fuel, and (sure, why not) buy fast food without stopping to pay.

We're looking for the right person to take up software tech and build a team together with. It's not meant to be an easy comfy job - be in it if you want to learn and gain experience rapidly, and take part in creation instead of production. A love for car tech doesn't hurt either.

Engineering will boot off on 3 legs:

* Payment handling via visual identity

* Parking (1st of 7 focus areas) product

* Consumer mobile app

VC backed. Pre-money. More engineering hires happening.
Founders' backgrounds in tech and finance (OnePlus, KPMG, Macquarie, etc.)

More to see: https://dreamjo.bs/en/job/parkour/development-lead

Drop your message to: jobs@getparkour.com
English is member of a language continuum, albeit a disjointed one by virtue of the English Channel and the Norman conquest. The Ingvaeonic languages is a "gradient" including Scots, English, Frisian, and Low German/Plattdüütsch. Frisian is certainly legible to an Anglophone with a wide exposure to English dialects and historical periods.

https://en.wikipedia.org/wiki/Ingvaeonic_languages
The biggest threat is politicians (and voters) who don't understand that "structurally deficient" means we need to invest in inspections, repairs, and replacement.

The I-35W collapse was near my house at the time and the fact that Governor Pawlenty had long pushed for reduced government spending (inspections in particular) was not lost on many people. His replacement, Governor Dayton, was partly elected due to promises to rebuild/repair even if taxes had to be raised to fund it (what a radical theory!).
As a layman, the difference I notice between "modern" and older bridges is, less exposed steel and more concrete.
Narmi (Techstars NYC '17)| Full Stack Engineer (Front End Focused), Mobile Engineer, Product Designer | New York, NY (NYC) | https://www.narmitech.com

Narmi is helping the 10,000+ community banks and credit unions in the United States reinvent themselves with better online and mobile banking. We want to create a more diverse and engaging financial ecosystem by empowering these institutions to compete with the top 10 banks that hold almost half of all deposits in the United States currently.

Narmi was founded by two Georgetown University alums who previously worked as CEO and CTO of a $18 million credit union and also at some of the largest banks in the world. We are a team of 3 and looking for engineer #3 and #4, and also a lead UI/UX designer. Even if you don't think you are an exact fit for one of our current openings, we'd still love to talk. We are always looking for well-rounded engineers that have expertise in AWS, Ansible, Terraform, Swift/Objective-C (iOS), Java (Android), python (Django), visual design/UI/UX, and/or security.

The interview process entails a call to get to know each other, followed by a half-day in-person interview that includes a code pairing session.

* Full Stack Engineer * Mobile Engineer *Product Designer

You can learn more on our website and apply via email:

jobs @ our domain
I have two comments about the Prolog code:

First, the article claims: "the sudoku solver above does a brute force search", but that is specifically not the case. In fact, quite the opposite holds: The Prolog Sudoku formulation shown in the article uses a powerful technique known as Constraint Logic Programming over Finite Domains, which automatically performs pruning before and also during the search for solutions. This effectively eliminates large portions of the search space in practice, and degenerates to brute force only in those cases where almost nothing can be deduced from initial constraints. In the particular case of Sudoku, the pruning is especially effective and can in many cases eliminate the search entirely, since the initial constraints (hints) basically determine the whole solution.

Second, yes, it is easy to write an O(n!) search algorithm in Prolog. However, it is almost as easy to implement much more efficient search algorithms in Prolog. For example, here is Quicksort in Prolog:

quicksort([]) --> [].
quicksort([L|Ls]) -->
{ partition(Ls, L, Smalls, Bigs) },
quicksort(Smalls), [L], quicksort(Bigs).

Note how natural the declarative description of "first the smaller elements, then the pivot element, then the bigger elements" is in Prolog. This only requires a suitable implementation of partition/4, which is very easy to implement in at most 7 lines of Prolog code.
That's preposterous. If it's not human influence, what is it then? What is this magical alternative to the emissions right in our face? What else has made the Arctic ice sheet shrink over the years?

Are we magically absorbing more heat than 200 years ago? Getting closer to the Sun? Axial tilt shift? Gremlins?

Wake up.
I doubt that. Security issues of vendors only become problematic if they make bad press for companies using it — or become a compliance issue. Things can move so fast in a bureaucracy if there is a compliance issue, it's really astounding!
Specifically the Clarksfield processors from 2009: https://en.wikipedia.org/wiki/Clarksfield_(microprocessor)

Predating the i7 entirely, there were also quad core laptops using Core 2 Quad CPUs (Penryn QC) in 2008.
Systems like this ought to really be bullet-proof. You can do all you want to secure the other layers (the ones that you have regular access to), this one bypasses all of that and gives an attacker the equivalent of physical access to the hardware. To me that's a level above the kind of flaw that can be attributed to faulty system administration, operating system or application bugs.

It's essentially a monkey riding along on your shoulder that suddenly turns out to be malicious.

To me these systems are accidents waiting to happen. And this won't be the last bug either, you can bet that AMT and ME will receive a lot more hostile attention than they got so far in the next coming months.
one most of our windows machines it's on. You can run this:
netstat -na | findstr "\<16993\> \<16992\> \<16994\> \<16995\> \<623\> \<664\>"

to see if it's actively running. the binary is LSM.exe. Intel recommends you erase the file. see the PDF for details.

Apparently this will make it locally exploitable only now and A firmware fix is required to completely fix the problem.
I remember pg replied to my comment once, and it felt pretty strange, like something I could brag about to future engineers or my (future) kids.
One is legitimate criticism: "It would be easier to use this software if it used more conventional naming."

The other isn't even close: "Instead of criticizing this free software, write your own".
Why has agile marketing been limited to only email campaigns?
Your MBA program (or some other MBA program you know of) was designed to specifically to give people the skills to found companies? I doubt strongly that it was.

The only exception to this I know is Babson, but I'm not certain whether they qualify their entrepreneurship degree as an MBA or not. I think they don't, but if they do I may have missed the mark by 1. Otherwise what I said is correct.
Installing an ad-blocker does not stop you from supporting FB indirectly. Your contacts, many of whom probably look to you for advice on all things technical, will still see your using FB as an example that it is a good platform. The only real way to change is to lead by example and leave FB permanently. Then foster communication and events outside of FB. Be the change.
Stealth startup | Ruby (RoR), Node, or PM | Bay Area + remote (we're flexible) | Full-time and part-time | Competitive salaries depending on experience

We are a stealth company, with millions in seed funding, founded by serial entrepreneurs looking to crack open the unyielding world of real estate and homeownership. We're a global team that loves to move fast, laughs in the face of nasty-hairy challenges that lay in our path, and isn't afraid to spend money to get the best and leverage our time. If you're an audacious soul looking to tackle one of the biggest problems that plagues our society today and yearning to join an experienced team at the ground floor, then hit us up!

We have a slight bias towards developers with a few years of experience, but if you're especially intrigued and are a self-motivated developer, hit us up anyways. Let's chat!

Email your resume and (optional) references to code to us at jobs <at> zilly.email
Why are they so dominant? Do they rank so well on a Google in the U.S?
Well, if there is a vulnerability for Nginx on Linux, you wouldn't say Linux had a vulnerability right? I think this situation might be similar.
That was because Psystar advertised and sold the machines with Mac OS installed.
If they expected exploits, then they knowingly sold their systems with their own little private rootkit that was exploitable.

The intel management engine has and continues to be a security threat. And now everyone can see it.
I am sure that $3/month wouldn't be a financial problem for the majority of Harvard students, but I agree with the first part of your argument.

We have yet to learne to pay for nice things on the internet.
"The computer revolution is a revolution in the way we think and in the way we express what we think.", SICP, 2nd Edition.

The article misses what I believe is the most important point, which is the concept of the abstraction of a function. A function is more than a computer concept: a function is a hammer, a violin, and a microscope; you put an input and you get an output.
> this kind of multi-version dependency is discouraged, and at Google we completely ban it for Java

Good to hear. It takes a surprising lot of backbone to resist the call to "just do" tortured things to fix a problem--sometimes I play the bad guy, saying "no, that's stupid, figure out a better way" but yet we see repackaged Java classes shipping here and there...
They might, but I'm sure there are a ton of large companies that run their own datacenters or at least operate their own bare-metal servers (e.g., Dropbox, OVH). It would at least be a start for AMD.
> What was Intel ME trying to solve that couldn't be done without it?

ME is an independent platform that runs parallel with the main CPU. ME has it's own CPU, memory, bus, etc. The general purpose is to provide an isolated subsystem on which to run security and management applications.

AMT's out-of-band remote access allows support to access the computer when the OS isn't or can't be loaded.

From the IT and security perspectives, these features are very valuable.

EDIT: If you want more info:

https://news.ycombinator.com/item?id=14242213
> R. Odaira, J. G. Castanos, and H. Tomari. Eliminating Global Interpreter Locks in Ruby through Hardware Transactional Memory. In Proceedings of the 19th Symposium on Principles and Practice of Parallel Programming (PPoPP), 2014.

Well thanks for this, can't wait to sit down & read it.
I think we're being naive over most climate change 'denial'. These people are not dumb, they just want to keep the debate going while being fully aware climate change is happening.

By delaying society's mustering of will to face it, they a) confirm their notion that we can't do anything about it (because in their minds, fixing it requires the kind of kumbaya UN cooperation they loathe) and b) cash out while there are still profits to be made in dirty industries and practices. And we're enabling them by continuing to make this a debateable matter.
We have even better social networks: free as in freedom, ad-free, non-tracking. See https://prism-break.org/en/all/#social-networks for a quite comprehensive list.
Did anyone else play with the BEAM robotics circuits back in the early 2000s? They were an excellent introduction to both the basics of artificial neurons, and to the analog side of digital circuits.

Neurons were constructed by passing an inverter's input through an RC high-pass filter. A ring of these would slowly feed a single pulse, or a pattern of pulses, around the network by something equivalent to phase-shifting an incoming pulse. Sensors, and current or voltage feedback from a straining motor, could adjust the timing or even alter the pattern of the pulses. The pulse train would directly power the movements of the robot.

http://solarbotics.net/bftgu/starting_nvnet.html
Better than after deploying a few hundred machines no?
I think downloading an illegal copy of something is still illegal though right? If I download a copy of a DVD for instance I've committed a crime in the UK at least.

I agree it's not due to anything specific about Apple - it's just that it's an illegal copy as you are not the copyright holder and so have no right to make a modified copy or download a copy or modified copy.
What can I sell these teens once I've identified them? Makeup? Clothes? Teen Spirit?

I really hate both marketing people and advertising people (present company excluded of course),
"know thyself" :D

Even if I did, I don't have what it takes to make it popular.
It's not a diagnosis, it's an ad. Worst case is you're shown irrelevant ads.
The Leaked Fyre Festival Pitch Deck Is Beyond Parody
If it meets the guidelines, thesecuritynews.com might make a good 'Show HN'. Show HN guidelines: https://news.ycombinator.com/showhn.html
Hi Jack,

I notice SeatGeek has been hiring iOS engineers for a while, but are you currently looking only looking for mid/senior level?

I have about 2 years of iOS experience, and finished a short iOS contract not too long ago as my first iOS job.

Would like to apply if my experiences matches with what SeatGeek is looking for!
What speaks against making subscription an option as with Spotify?
Shh... Every now and again, I browse books in my city centre public library and it's almost impossible to sit down to read due to the number of people with laptops using the free Wi-Fi and electrical sockets. There's actually an interesting mix of native and foreign students and the odd homeless person reading the free newspaper.
It is pretty amazing how fast tech can go from tiny niche proto-community to mainstream awareness if not yet mainstream usage.
Nobody wants to pay for it.
You're forgetting about teleportation, the irrelevance of money, energy usage so efficient it's no longer a problem, the maturation (slowing) of population growth, etc.

Google is hot air embodied. They can't deliver and care much less than many realize. Even basic products from them end up sucking.
This is awesome. I've been wanting something like a "brew browse" command for a long time to see what popular tools I should consider trying out. I'm probably going to spend the rest of the night googling everything I don't recognize on the most installed list.

Anyone have any suggestions for things to look at first?
I was just about to post to AskHN about how much data these social network behemoths can garner from unposted data, i.e., I write something into my status box or a comment like "fuck the police," then delete without posting, is that data gathered and mined? My gut and brain say yes, because it's easily possible to gather it and with the little bit of research I found no evidence that really shows one way or another what happens behind closed doors at these mega companies.
Would you please elaborate.
The angry pfSense team member just went through and deleted/removed all the comments involved in the thread he was arguing in.
NAT is not a firewall. It's not intended to protect, and usually it doesn't. There are many ways to circumvent it...
But it's definitely thought-mining.
Alexander’s Knot: A Different Way to Solve Hard Problems
Agree, I am waiting for powerful, yet cost-effective bare metal servers.
It says on the page "This vulnerability does not exist on Intel-based consumer PCs." I'm not sure if that's true or not but Intel seems to think you'll be ok.

EDIT: Ok so it seems all Intel CPUs that have AMT from Nehalem processors to the current Kaby Lake's are vulnerable. Even if AMT isn't enabled, it's still vulnerable to a local privilege escalation to ring 0. So all you people that have Celeron or AMD CPUs and got picked on for years, enjoy your moment of schadenfreude.

https://semiaccurate.com/2017/05/01/remote-security-exploit-...
> feature-negotiation

It's words like these. We should not be looking to negotiate with anyone -- not as an author, and not as a consumer.

If someone builds an auto-login browser, or an auto-login feature, then fine. But when Mozilla decides to put this in by default without telling everyone, then not fine.

If font boosting was part of some cross browser mobile web standard then fine. But if you're Google and it's a feature specific for your browser, and you turn it on be default, then not fine.

Of course, it seems like the premise is always that your feature can do no harm. But in practice it's always the opposite. There are always edge cases where something is broken or not right, that leads to these features as a cause.

Login is actually extremely important. To tamper with the behavior of the browser when it comes to logins, and to do it automatically, seems extremely dangerous.

But either way, it's about communication, not negotiation. If the user wants to turn it on, great. If the author turns it on, great. If no one turns it on, but the browser developer just "thinks it's a good idea" for every site ever built, then not great.
If you admit that "eternal optimist, borrower spender American" is a stereotype, would you also concede that "realist Japanese" is a stereotype?
I understand what those customers need AMT for but the end result is that somebody else could be managing their fleets too and this is not something they want.

I expect to see some lock down in the next years.
Finding Good Books: A How-To Guide
There is, but I don't want to post it here as it's unfinished (for one, Mac only). I'll write a blog post about it when it's further along. If you're really interested you'll be able to find it.
>My feeling is that we have entered an age that youth is not naive anymore and would happily pay $3/month

Are you joking? When I was a broke student there was zero chance I would sign-up for a monthly subscription service.

It's a pipe dream.
There is OpenPOWER, or ARM. Unfortunately all new Intel chips have the Management Engine, and all new AMD chips have the equivalent Platform Security Processor.
Arachnys | London, UK | Full-time | Onsite

We're a big data startup fixing banking compliance, with offices in New York and London. We're looking for software engineers with any skill set - particularly graph data, big data or enterprise data management - to join our small dev team.

We're breaking up a monolith into [micro]services, playing with big ElasticSearch and Hadoop clusters, terraforming AWS assets, you name it. We have a very focused culture around delivery, honesty and directness, and accountability. It's not for everyone but if you like it, you'll love it.

Email jobs@arachnys.com with your GitHub profile and/or code samples.
We just use it for power fencing and serial console. So nothing fancy. However after this exploit a seperative VLAN for AMT just got on the list :)

I don't mind AMT but I was an idiot to think it's something you can expose to the Internet.
I also had an interesting experience.

My Intel network card would not work at all with AMT disabled. It simply refused to work, resetting every few seconds.

I ended up simply using an old Realtek network card, but that’s no long-term solution either.
If you value your time, don't apply to this company.

The hiring process isn't professional, and also the "competitive salary" is below average for the amount of work they require you to do.
Fake news! Someone put his password in the blockchain after he tweeted it. Laurelai needs a bigly education on how bitcoin works. Sad!
If remote management is used for servers, it's normally IPMI with a completely separate baseboard controller that has its own NIC connected to a physically separate network [although some boards cheap out on that, notably older INTEL boards, where the separate NIC is an option you have to buy].

No mainstream (2-way) server has AMT, anyway.
So this article assumes that the problem of understanding how an AI solves a problem is a problem beyond any possible AIs ability to solve?

Aren't we constantly iterating over these AI algorithms specifically to give us ones that can help us understand things "We'll Never Understand"?
Twitch user Ice Poseidon banned for getting 'Swatted' live