skysight-inc/HackerNews huggingface dataset:
> However if I was a customer it would have me questioning the capability of and their commitment to the current hardware.

If I was an investor, I would not be very happy if they did no research at all in this area.
> In a subsystem change that will be detailed in the talk of Intel ME version 11+, a vulnerability was found.

Okay, so this effects 11.x, but I wanted to clarify that there seem to always have been circumventions floating around out there.

I stumbled on https://www.reddit.com/r/onions/comments/5i6qa3/can_the_nsaf... (mirror: http://archive.is/T8yVz) some months ago. It reads a little like a skiddie (a well-connected one) strutting a bit, and I think some of this person's views on ME as a viable attack vector are slightly careless and un-thought-through, but whoever this person is, they seem to be very confident about some of the things they said, particularly the following quotes (to be completely clear, I've removed first-person references):

> [This person] know[s] that at least up to firmware version 8 is traded underground, and version 11 (the latest) is available without difficulty to people who know how to find it. [This person has] access to version 8's signing keys [themselves] ...

> It's certainly not common but it is absolutely something that FVEY and related contractors (Raytheon, Leidos, half the people you'll see at ISS, etc) will be able to get their hands on, if they haven't already.

> [This person has] an enterprise ThinkPad that proudly boasts having WiMax support, requiring extensive configuration. It was expensive. If you don't have a BMC card (and you do not), then it is not possible to remotely control your system. Even if you did have a BMC, simply having the signing keys and toolchain for the ME would not be sufficient to get in. An attacker would need either a 0day, or your credentials.

.....Well then. Oops.

> Having the signing key allows nothing more than writing malicious firmware over SPI and allowing it to persist. It's just a little more powerful than the UEFI kits cr4sh can write, and just as easily detectable by reading your flash chip.

That's still bad! (And I have no idea who cr4sh is.)

> But it's not like you're analyzing your microcode (of which there are likely signing keys being traded as well), which can also be installed on a large number of systems, considering the BIOS functions to load the latest microcode it has into the CPU.

The above bit is unrelated, but I couldn't leave it out, because that's worth filing away too (...ouch).

--

Sources/past comments: https://news.ycombinator.com/item?id=15187540
If its a turbo (i assume not?) the car’s ECU will compensate for lower octane. Source: me when, half asleep, I accidentally half-filled my 03 WRX tank with 87.
I created a website a year ago and I simply cannot find it using Google. Searching for the site title: Google - not in top 100, DDG - result 8. I am in Google, since I can search for the exact URL (which is the same as the site name), but otherwise I don't show up. It's incredibly frustrating considering the amount of no-content and repeated articles Google does return.

Related, my biggest gripe with the WWW today is how difficult it is to find personal websites among (what I'd call) all the ad-revenue garbage.
I'm not sure every mile in the suburbs needs sidewalks, but it seems like sort of a necessity in any city. The area referenced is smack dab in the middle of downtown Atlanta.
> Where is the law that doesn't say "if you murder, you go to jail" but instead sets things up so you physically can not murder?

is the only way to prevent murder a physical impediment?

does talking an attacker out of their plans count as preventing a murder?

> I pointed out the case of extreme punishment, death, not even THAT being capable of preventing the simple stupid crimes like stealing a pair of shoes.

again, you seem to be suggesting that 'deterrence doesn't real' because crime still exists. it seems you're presenting deterrence as an all-or-nothing dichotomy.

> 'Some' are individuals. I was speaking of humans overall.

indeed, and that's the point. pointing to a vague generalization about humans doesn't keep your kids safe.
The New Paradigm Against Hackers: Email Addresses as Passwords
The new ones having much better local storage helps... it's honestly my second biggest complaint (behind the first, which is with my kernel version jack autosense has literally never worked correctly, so I have to manually toggle between headphones and the built-in speakers, which is maddening, but that's what you got when you wanted to run generic Linux and not ChromeOS or Linux-over-ChromeOS. I haven't had a chance to compile one of the kernel versions after the community upstreamed all of Google's drivers into Linus's tree).

Despite being called a "Chromebook", it's really more of an Ultrabook, albeit one with slightly less refinement than a MacBook. However, it's still a pretty sturdy machine and fills the role of a travel ultrabook pretty well. The screen's form factor and the random-shitty-key-free keyboard were honestly the two biggest selling factors for me, and I'm quite enjoying them both. It's much more convenient to code on than any other laptop of its size I've used, thanks to the screen's unusual aspect ratio and high DPI.

The biggest things I don't like about it are all about refinement; scrolling isn't as nice as two-finger scrolling on a Mac, you can accidentally hit the power button and suspend-to-disk the machine if you don't forget to configure your machine to disable to power button after boot, keyboard doens't have a "Fn" key, so you can't use the multimedia keys and the F-keys without some software jiggery-pokery... and just small bits like that. Most of these are complete non-issues if you intend on using ChromeOS... but I have absolutely no desire to turn my PCs into the same kind of walled gardens that we have in the mobile space.
I certainly grant that consciousness might not be a distinctly human phenomenon. I disagree that there is no reason to believe such is the case, however. There is some evidence: Humans are conscious. And we don't know anything else that is. That is weak evidence, but it is some. Which is more than we have for the claim things other than humans can be conscious. For that, there is indeed nothing.

The logical reason why it would possibly be a distinctly biological phenomenon is that we have not observed any non-biological system which has the property. Also, every examination of how consciousness works illuminates solely how it works in a biological system.

It is completely possible that consciousness is imply a necessary property which emerges once any complex system and its interactions reaches a certain sort of complexity. However, that might be meaningless. I mean, we might be totally incapable of recognizing other conscious entities as conscious. If a machine were made to be conscious, not as an emulation of a human, but as a machine - how would you tell? Asking it questions would be pretty pointless. There is no reason for it to develop language or even guess that there might be another conscious entity in the universe for billions of years. It would be quite a ridiculous leap for the machine to suppose that, in fact. It wouldn't have multiple individual machines against which it could develop a Theory of Mind (referring to the psychological way we model other people (or things or animals) being conscious and thinking inside our own heads, children develop it around age 3 I believe). It would presume the sensible thing, that it is the only conscious entity in the universe, and go about exploring the universe. It would see the microphone or video input as just weird useless noise as it traversed and explored its ACTUAL work, that of bits and bytes and networks and switches. You could watch its execution... and it would be exactly as useful to you as watching the flashes of electrical activity and a readout of the activity of neurotransmitters at each neural gap as far as determining whether it was conscious. And that'd be for one we might reasonably presume to operate on our own timescale and close to us in space. Could the Sun be conscious? Quite possibly. I'll grant it as something we can't rule out.
I just block a lot of this booking.com noise with uBlock. These are my filters so far:

www.booking.com##.sr_rooms_left_wrap.only_x_left
www.booking.com##.sr-booked-x-times.clearfix.lbsr
www.booking.com##.soldout_property
I never said any of Golang's developers are stupid. On the contrary, they're clearly smart people. I like golang, and I think it's a great language.

But even smart people have bad ideas sometimes, and GOPATH is one of those.

I think I fully understand GOPATH.. I've been programming in GO every day for several years. But sure, go ahead and tell me what's so awesome about GOPATH, that can't be achieved by using the current working directory.
I am not sure what you think the definition of contempt is but from Google's definition (and example sentence) it is precisely the word to describe Equifax's behavior:

The feeling that a person or a thing is beneath consideration, worthless, or deserving scorn.
"he showed his contempt for his job by doing it very badly"
All I'm pointing out is that knowing is the only thing that is there. The experiencing structure is only the knowledge that is there of the experience. Otherwise if knowledge wasn't there you wouldn't know what you are experiencing, or when you're experiencing it.
Bill Gates: Control-Alt-Delete 'was a mistake'
This is a bug that was already fixed. It means nothing in the grand scheme.

In the current grand scheme, Apple and Qualcomm are also currently suing each other and I'm pretty sure part of that is Apple withholding billions in payments.
Seems sincere to me. (french speaker here)
As a relatively tiny data point, I've introduced Haskell at a small telecom doing $350M/yr in revenue. This kind of environment screams "Enterprise", but as it turns out the vast majority of problems that need solved can be done quite gracefully with Haskell.
A suggestion for people who are upset with this behavior:

Use Booking.com (and Google, Expedia, etc) as a showroom, after you have found a certain hotel, find their web site or phone and arrange a booking directly.
Perhaps I'm reading it wrong, but the article seems to slant in favor of FedEx using contractors. And then you look at the pros and cons.

FedEx Ground Cons:

- No benefits, no overtime pay, no sick time, no insurance

- Drivers pay for vehicle, gas, supplies, insurance, and everything else

- No company retirement, seemingly less stable environment

- No Teamsters contract or collective bargaining

- Drivers have only one client: FedEx

That's one step above glorified pizza delivery driver for a career. I wouldn't wish that on anyone. My wife has extended family, on the other hand, that have worked 40+ years at UPS and retired with benefits. Now, I'm not saying, "UPS rules, and FedEx sucks." But I'm hesitant to throw my support behind any business model that treats people like temporary commodities instead of long-term resources.
Well, bad is a relative term, and that's part of the problem. A number of "activist investors" consider it bad if they're not getting huge dividends and growth from every company, pressing short term gains instead of long term sustainability. And what's worse, sometimes these investors buy the stock specifically so they can do that.
Anyone know if the employment situation with Fedex or UPS is different now, 13 years after this was written?
I always use DDG first, and then as a last resort ill look on Google. I think I only really checked on Google maybe 2 or 3 times this past month. For me Google is mostly irrelevant, and I could quite happily not use it.
+1 to Starting Strength
Interestingly this was not part of the original iOS11 security announcement: http://web.archive.org/web/20170919182359/https://support.ap... and (a mail to apple-security which is no longer archived at https://lists.apple.com/archives/security-announce/2017/Sep/... )

But instead published after the fact as an additional update:
https://lists.apple.com/archives/security-announce/2017/Sep/... and https://support.apple.com/en-us/HT208112

Why delay the announcement? And why remove the original "APPLE-SA-2017-09-19-1 iOS 11" with "Date: Tue, 19 Sep 2017 -0700" from the apple-security email archive?

Also, are Macbooks vulnerable to the same bug until next monday when macOS 10.13 drops?

Also, there are about 6 other similar issues recently posted to Google Project Zero: https://bugs.chromium.org/p/project-zero/issues/list?can=1&q...
That's a tactic used across many industries. There is a Dutch insurance company (Promovendum) that actively advertises as 'the insurance company for the higher educated' (in NL this means college or university). It is illegal to discriminate on this, so they do in fact accept anyone, they just don't say so.
It's a lot less charitable than "OP was probably referring to the fact that video evidence shows tank guy being pulled away out of sight before the tanks continued past the point where he had been standing, rather than showing the tanks just rolling over him as that comment kind of implied". If you're going to be very careful to correct people who assert that the guy wasn't crushed, you need to jump on people who say he was crushed too, or you look like you're using the argument as an excuse to attack someone rather than being deeply invested in correctness.
A startup product search engine I built
Several months ago I was looking for cool new startups that might be doing something interesting. I know that there are thousands of startups that are doing cool things, but if you are really looking for a particular type of thing, it's hard to find out if a startup has thought about it and started building it yet.

So I built this thing called UpHunt.

I've collated data from thousands of startups and modern businesses and made it searchable so you can just search for the kind of product that is on your mind and see if someone has made it for you.

Search for whatever product you hope someone has build, or services they might be offering, and see if someone has thought of it and started a business doing just that.

If you are doing something I haven't listed, or know of someone let me know: https://neutrino.typeform.com/to/MJczkK

Right now I only have businesses operating in London, UK, and I do have alot of work to improve it; but I hope to rolling out new data sets in the coming weeks. Let me know if you think your location should be next: https://neutrino.typeform.com/to/zMr14u

You can find it here: https://uphunt.neutrino.io

I'd appreciate feed back on all aspects of the site. Design, content, any ideas you guys might have to make it cooler.
YC wants to let people invest in its startups through the blockchain
I'm a bit surprised by the fixed fee of 5 USD/month (compared to AWS S3 and Google Cloud Storage which have no minimum).

The documentation says nothing about durability of stored objects (replication, etc.).

I'm wondering if there is a way to restrict delete operations to some privileged users (for backups)?
Its possible that this isn't so because the performance would be relatively crap.
Wouldn't you be studying WW2 era German military tactics rather than Nazi tactics? I'm genuinely curious, but I didn't think that Hitler invented Blitzkrieg.
Ehhh?

Computer vision algorithms are hardly non-deterministic. And hell, Neural Networks (which are the best simulation of the "human brain" we've got) are fully deterministic.
In my view it is a sign more of the fact that Venezuela thought it could depend so much on oil that it failed to diversify rather than a failure of its mode of planning, though that's not without criticism, one would have hoped they learned from the disaster of the USSR's Five Year Plan.

Price controls aren't really a Socialist policy - the Socialist policy in this case would be the gradual change from the production of commodities to the production only of use-values, lacking their exchange value dimension. If price controls are a Socialist policy, then it doesn't take much for Socialism to come about - but that's clearly not what Socialists are talking about when they talk about Socialist policy. Marx, for one, wasn't in favour of price controls to my knowledge. Nor were the other Socialist economists and theorists. I'm not sure where you're getting the idea from other than the oft-repeated myth that Socialism is merely when the government "does stuff".
> 35.7 ±2.5% believe that Private Browsing “Prevents search engines from knowing my searches.”

This doesn't seem too inaccurate.

When you search for something on the Google search engine using private browsing, presumably you have not taken the time to login to your Google account in the private window. Therefore your search won't be saved in your account's search history. That's the behavior the user is expecting, and it's what they mean when they say "prevents search engines from knowing my searches".

It seems pedantic to point out that of course, technically, the search engine knows your search.

How else would you advise a typical user to perform "embarrassing" searches? Don't do it at all? Even if you use DuckDuckGo it will be in your browser history.
This is unsupported by facts. China has a very tight control on areas that they want to develop or open to outside capital, and their growth has been stunning. On the other hand, undeveloped countries that have open their markets with little oversight have suffered tremendous economic problems, Mexico is a case in point. There is no correlation whatsoever between lax oversight of markets and robust economic growth, as most people tend to believe.
Expedia does "n people booked this location" and "price of this flight expected to rise by x%" ALL the time.
This and the recent Ticketmaster expose make me wonder: is it possible to objectively identify dark UI patterns like this via a browser extension? Usually I can try to see through them, but something that flags stuff like this with a non-obtrusive warning would be nice to add to the list of extensions I automatically throw on new installs for family members (that list currently includes PrivacyBadger and uBlock Origin)
Why GoPro Is Migrating Their Online Video Hosting Services to Amazon ECS
>Grocery stores can market these meal kits as more affordable, healthier, and 'hip'.

I did a meal kit service for a little while, and my biggest complaint was that it was not any cheaper than if I were to go out to eat, but I still had to cook the meal and clean up afterwards. If there were a cost savings versus going to eat at a restaurant, I would have kept the subscription.
Airbnb does this too. No matter where or when you search for, you'll see a notification saying something like:

"Only 13% of listings are left for these dates. We recommend booking a place soon."

As a random example, apparently Kamloops, BC is filling up fast for Dec 3-6 (midweek in the middle of winter). And so is Flint, MI on Feb 19th, a Tuesday.
All the benchmarking code and log is located here: https://github.com/dgraph-io/badger-bench
While kotlin doesn't have random symbols as operators, it does have inline functions, which look pretty good too, and are especially useful when designing DSLs.
You don't hide features you implemented in order to sell your product to customers.
> You’re inspected two or three times a year, you never know when. Every meal that goes out could be inspected. That means that, every day, one of the 500 meals that leaves the kitchen could be judged.

It sounds like he wants to be able to relax the quality without hurting his reputation. I can't help but to feel that it's disingenuous somehow, but maybe I'm being unreasonable.
Interesting considering all Teslas currently come with Nvidia cards (AFAIK)
Plated should be able to lower costs by participating in Albertson/Safeway's purchasing system. Everything that they pack in a meal kit is also an SKU for a grocery store.

Then, there's lovely marketing synergy. On the one side, people going through the store looking for the stuff they need to cook for dinner, are going to see how "oh, I could have all this packaged up for me and sent to my door and I wouldn't have to futz with this list."

While on the other side, people who are stopping by the store to pick up their Plated box -- which they would be incented to do because the subscription price would be lower for that mode -- will take a few extra seconds to buy a bottle of wine or a dessert to go with it.
Sent in an application today and will talk to them Friday!
Interesting business space. Both UPS and FedEx manage to raise rates at a clip that is higher than inflation, every single year. Even when their costs decline, like when fuel prices dropped.

I guess there is technically no collusion, but it doesn't seem like there is much competition either.

It makes it difficult for smaller companies to do well because only the biggest companies get reasonable shipping rates.

This is one space where I won't shed any tears if Amazon hands them their ass.
Sometimes the direct prices are actually more. Your best bet for sticking it to them might be to use an alternative booking service.
It's entirely possible they've overspec'd the compute in current vehicles. Give yourself 10-20x the compute you think you'll need, because the cost relative to that of the vehicle is still small. Optimize in future generations.
Makes total sense to opt out on top. I'm surprised more chefs don't do the same. If people say that "it's not the same" after a few years, you can make a come-back with all the free PR that entails.
Reality check: You were not involved in the project and you definitely do not know what the Chinese government wants or needs. Stop making shit up as you go.
And maybe people like you can accept that there are more people than yourselves in the world, and those people have a right to be in society too.

And no, it is entirely realistic to have 100% access in a city. There is zero reason whatsoever that the sidewalk in the story wasn't usable, other than a complete lack of empathy.
I can promise you the average user of a laptop doesn't have the first clue about the difference between an SSD and HDD.
I'll share for others. My dad served in similar role. They consider themselves silent professionals, and he didn't say much about it. He sent me a link today that one of that crew just got Medal of Honor, I think my dad was proud to see that. I asked him 10 years ago to record his history on video. It took him two years, we never discussed, I just got some DVDs in the mail one day. He said explaining history was hard for him to do, and discussed atheism in the foxhole. He discussed everyone's routines before you drop in - rechecking ammo, puking, praying, napping, nerves. In the end of second DVD he said the most important thing is to keep your sense of humor and be happy which surprised me, I expected grit. He is still really upset about losing one friend overseas. He went to the Wall 15 years ago and broke down and people surrounded him and helped him (apparently happens a lot). I think he graphite-copied his buddy's name. He is normal with stable finances and married 50ish years, now works with abused kids in retirement. Of that military group, most went on to normal lives and you wouldn't be able to pick out of a lineup. One owns a tire shop, one worked in tech, one refuses all contact with military folks and a notoriously shady one became an attorney. They all love the outdoors and meet at a convention once a year.
> Let a healthy private sector self-organize the production of the economy, and let taxes pay for social programs.

The problem occurs when the private sector is so overwhelmed by greed (always) that decides to make social programs part of their market, as can be seen in real time as they try to privatize NHS in the UK.
Show HN: Where's my Green Card?
These are just the most beautiful pictures.
Given the things that people complain about under the guise of complaining about "PC Culture", yes, to them it probably is.