skysight-inc/HackerNews huggingface dataset:
That's comparing apples to oranges.

One is replacing signed system components, the other is volunteering to share whereabouts with a third party.

The biggest concern with this is that Google has the resources (and pressure) to get something so central to the security model correct. I've no inside information on how Google develops Play Services, but I imagine they have quite stringent policies with regards to testing and peer review.

The actual functionality of Play Services is only one part of the work that goes into delivering it to your phone, and it's a lot of trust to place in anyone to get something like that right (considering the personal, security-sensitive information we keep on our phones now).

My point was that the FAQ was a big red flag for me in thinking that the developers grasp this aspect of what they're proposing here.
How do you define attack surface? I trust my personal computer more than my phone.

My personal computer runs an open source bios (coreboot) with an open source operating system (linux) and no closed source software (at least one of my PCs does). My phone on the other hand has many processors running on it (that I know about) that can interact with my device without me knowing and binary blobs (yes even with lineageos and with microg) that I can't control and many parts I can't update or update as fast/easy as my pc.

My point: for most people the attack surface of the smartphone is far larger than the attack surface of the PC
For those wondering: "upgrading the Estonian ID cards" means switching to ECC (P-384).

New certificates are generated on the chip, and the public part is then transmitted to the government public keys directory.
Regarding native cross-platform UI frameworks, isn't this what Xwt is supposed to be (https://github.com/mono/xwt)? There's no XAML non-sense and it's an object-oriented approach to building your UI, similar to Windows.Forms.

The primary benefit to it over something browser-based is start-up time. Since it's ultimately using native assemblies and there's no web server that needs to be spun up causing start-time lag.

Is anyone using Xwt? The NuGet packages for it are up-to-date (but don't have very many downloads), and the official forum for it seems very dead.
I love the transcripts that Pluralsight provides to go with the videos. I use them after I have watched the video to find the section I'm interested in. I only actually noticed them when another staff member pointed them out to me, but they're available from the course details page.
Not really a problem, if a "basic thing" is common enough you just put it into a library. Maybe even the C++ standard library.

The "interface" definition should probably qualify for that.
It was just a meme, bro
Gaming with peripherals.

If you are playing a VR game where you are using a joystick or some other peripheral, you still may need to use your keyboard for some actions, in-game chat, or simply to pull up a browser and google something while in-game.

If you primarily have your hands on a joystick or game controller, you would have to take your VR headset off just to figure out where your keyboard/mouse are.
The patch was submitted, it's unfortunately not visible to the public: https://review.lineageos.org/194562
Show HN: Eurosat - european satellite imagery for iOS
Why your (and almost every other) computer program is biased
> It is your house, your rules.

Spot on. The first amendment prohibits government from limiting speech. It does not require private parties to allow arbitrary speech, let alone to broadcast it. One could argue that social media should be regulated as public utilities, subject to rules (but still not first amendment) about what speech must or must not be allowed. I happen to disagree, but even if I agreed it hasn't happened yet and even if it happened it would still be commerce clause rather than first amendment.

> Right wingers tend to conveniently bend the borderline between public and private whenever it benefits them.

So much this. Conservatives and libertarians constantly complain about environmental or financial regulation, but when it comes to "too big to fail" bailouts or stealing taxpayer money to provide free infrastructure (of all kinds) for big business they're mostly silent. Sure, there are always a few who speak up, but "not all libertarians" in economics is a lot like "not all men" in gender relations. It's an excuse, a mere fig leaf of concern that doesn't really conceal a generally neo-feudalist agenda.

P.S. I see some of the snowflakes are taking advantage of the "censorship" options here on HN to downvote, thus essentially proving my point.
Carmakers launch pan-European e-car charging network
It's also great as a secure and anonymous alternative to something like noip.
Portable cross-platform GUI library for C
Thanks. I wonder if adversarial training helps prevent overfitting too. Could you use adversarial training to beat alphago ?
> And finally from the casuals user's PoV, the only thing that changes is that new onions are bigger, tastier and they now look like this: 7fa6xlti5joarlmkuhjaifa47ukgcwz6tfndgax45ocyn4rixm632jid.onion. For more information on the nitty-gritty details, please check out our technical specification.

It's a shame they don't have a description for technical users. I'm more interested than "bigger, tastier, and looks like this", but less interested than 13000 words of specification.
R's wealth of libraries and syntax was always appealing to me, so maybe now I will look at how compatible and faster Renjin might be.
> Have you ever had this happening to you: when a teacher shows you a new method to compute something, it all sounds perfectly clear and simple, until you sit down and try it out on an unseen problem yourself?

Yes! I think it's the raison d'etre for sites like StackOverflow.

Somebody once told me that since make was created, nobody has written their own makefile. All makefiles are decendants of the ur-makefile.
A lot of banking apps store cached transaction data and authentication tokens on the "protected" (not accessable to non-root from other apps) part of the data partition. If you run without encryption or with either unlocked bootloader or TWRP installed, someone could just pull that from a device in recovery mode. That's also why unlocking the bootloader wipes your data partition usually.
If you need another basket to have access to it (even if only initially) then it's not really a separate basket on a national level.
for the Apple Watch, Apple Pay and Apple TV products... The 36% year-over-year growth for this category, meaning Apple Watch and AirPods sales have been strong.

How do you come to that conclusion? Couldn't it simply be that one of those products is selling better than a year ago?
And any other word you'd expect a comic book villain to utilize when describing their world-domination plans(decimate, eviscerate, blasts, etc.)?
The market has spoken!
Yeah, I wouldn't use facial and eye tracking instead of traditional input interface. They are meant to enrich interaction with other people. Eye tracking could be used for some optimizations, like dynamic LoD based on user focus.

I thought about input interface that could replace keyboard for VR and mobile devices. Brain implant would be perfect, but that's not feasible with today's technology. Voice is good contender, except for privacy issues, and it's not really usable in work environments. Keyboards are our best solution so far, but they don't evolve and to me they seem like a dead end (plus, they are not portable and require both hands to use effectively).

I was thinking about touch sensitive surface that recognizes drawn glyphs. The idea is that anyone who is literate can start using it without any training, just draw letters instead of typing them. With machine learning and some clever visual feedback, both user and machine could adapt to each other to increase the input speed (by simplifying glyphs and by defining 'snippets'). Interface could be expanded to both hands to double the speed, but it would be completely functional with just one hand. It could even be used blindly. For mobile devices, such sensitive surface could be placed on backside - virtual keyboards that take half of screen are just horrible.
Or at the very least, if there are people producing measurable value, figure out how much less those people would produce if they had to do the other jobs themselves.
Fraud Detection in Pokémon Go
That though is a really long lifecycle for a product that may have a six month qualification and burn-in periods for a production enterprise implementation . You’re basically saying a change of config file parameter should take a year-plus?
I don't think I agree with this. While medical diagnosis has often required some sort of overarching theory (which is usually advanced beyond our available treatment options), treatments (pharmaceuticals in particular) have most commonly been discovered empirically.

If we were to wait for solid theory before using such treatments, we'd probably still be living in the medical stone ages!
Of course it did, you were directly manipulating the a resistor in its circuit. Getting the channel just right...and keeping it there...that was, of course, the flipside.
From a IT Security Assessment, what would those be and their associated risk and impact factors?

One would naturally be the onion address. If they could break the 1024 bit RSA key, they could hijack the name. Risk of this happening: very low. Impact: massive especially outside the realm of tor.

Any additional risks you were thinking about? Backdoors in tor project? Hardware malware specifically designed for tor (rather than than being general)?
> It's a pretty effective union busting tool and has contributed to the decline of organized labor as a political force.

I think it's fair to say teachers have the right to be teachers without joining a teachers' union. I don't think enforcing that right "contributes to the decline" of unions. Organizational models should be able to handle that sort of freedom to choose.

To me, the question is why unions don't innovate in their organizational models and policies so that giving employees freedom to choose is moot?
How we analysed our increased AWS data transfer usage
And in 3 dimensions (which a sub does too, but not a ship)
If it's just tiles in a regular pattern, how do you know one is made by Invader and not a random copycat? Asking seriously, someone paying 200k must mean they have something unique to hem right?
You mean APIs that provide market data? Quite the opposite.
Are you against any and all use of methylphenidate?
He fully deserved that.

He had the right to destroy the work since it was his and in his property, but to then whine about it just because he learned of its monetary value... It's just wrong.

Pfft, and calling it a "work of modern art" after the fact.
I am utterly baffled by this project. What's the benefit of using open source software to access a completely closed-source set of services? If you're going to trust Google with your data anyways why would you care whether you're running a Google binary blob on the device?
Minor nitpick. Closed source software is of course audit-able. Being able to audit binaries is table stakes to even call someone an auditor.

There may be many valid reasons to prefer open source software but security audits aren’t one of them.
Guitar Overdrive Pedal Shootout :Danelectro Cool Cat Drive V2 Review
There isn't a fraction of a fragment of evidence that Russia influenced the election.
>Those worrying about security should remember that device drivers already run in ring 0 and can do anything they damn well please.

Not in a proper microkernel, so that's fixable.

>Thus I say: Good on Savitech for not being afraid to rebel against; and fuckings to the corporatocracy that is certificate authorities and the authoritarian security industry.

"Fuck to the CAs" I get.

But there's nothing about what Savitech did that's good.
Well, it's just the Google play services and some other API they are attempting to replace. Not even mentioning poor documentation.

But anyway, what's the point if I'm going to use ~10 of proprietary GApps anyway (maps, keep, inbox...) ?
You can't use the remote APIs you need to deliver the same local APIs that are required to run modern apps without spoofing the signatures of applications - otherwise google's remote APIs would forbid access. This is where security measures are also inherently DRM-ish, and to deliver the experience typical end users expect using free software (free-er than stock android) it's necessary to circumvent it. One could argue that such circumvention is illegal. I hope no one deems it to be so.
That is easily disproved: Khoisan people are the earliest offshoot off the sapiens evolutionary tree - they split from the rest of us cca 175 thousand years ago, and they are behaviouraly modern in all possible ways - they have large social groups, language, culture etc, which indicates those characteristics were already evolved by 175kya.
Yes, steam demand controls the power response of a nuclear reactor.
Someone built a location API or crypto API or whatever so that apps can use that data.

If there is a permission that violates the trust between the system and an app using aforementioned APIs all bets are off. This is similar to why rooted devices are bad for security.
Here you go: https://www.torproject.org/docs/tor-hidden-service.html.en

It's dead easy. Setup a web server basically like normal, but make sure it's listening only on loopback if that's important to you.

Then install tor, and add a couple of lines to the torrc and restart tor.

HiddenServiceDir /usr/local/etc/tor/hidden_service/
HiddenServicePort 80 127.0.0.1:8080

The keypair will be generated and you'll find the onion address in /usr/local/etc/tor/hidden_service/hostname, and it'll forward all traffic to 127.0.0.1:8080.

You can run as many hidden services as you like on the same tor instance, with different onion addresses, and forwarding to different places.
Fair enough, but you were getting useful fallback, the image quality progressively degrading, and even with almost no image, the audio was still intelligible. With digital boradcast, it's all-or-nothing: all is fine, all is fine, until the error correction can no longer save you...and you get soundless picture, with block artifacts. Very useful for emergency broadcasts, when anything unicast will be overloaded as well.
I think this issue is caused partly by the design of modern keyboards. Back in the day, keyboards would have clear, lasting, physical markings on the F and J keys and the 5 key on the numpad. They also had special keys that were easily recognized for caps lock, return and so on. This meant you could put your hands almost anywhere on the keyboard and always know where you were. Finding the home row without looking took a fraction of a second. Another feature that keyboards used to have, which is becoming increasingly uncommon today, is grouping of the function keys into fours. This meant you could always press the right function key without looking. Modern keyboards more often than not don't do this, and reliably pressing the right function key without looking is nearly impossible today.

Old keyboards were (generally) designed to allow for touch-typing. Modern keyboards are (generally) designed to be looked at.
He also helped in the development of J with Roger Hui and Ken Iverson, the creator of APL, by writing a one page interpreter for J over an afternoon or two. I am always drawn to prototyping and writing solutions in J. I am not a web developer, but for mathematics and statistics, it is amazing. I've always wondered how similar and different K and J are on a deep level, but I have always stuck with J.
Am I the only one who finds the term "Adversarial Attack" a bit funny? See [1].

[1] https://en.wikipedia.org/wiki/Pleonasm
From the Communist Manifesto:

>The Communists do not form a separate party opposed to the other working-class parties. They have no interests separate and apart from those of the proletariat as a whole. They do not set up any sectarian principles of their own, by which to shape and mould the proletarian movement.

If one were dead-set on following he original principles of communism, which I don’t necessarily recommend, as the world has changed a bit since they were published and new ideas have sprung up since then, I think the best method would be as follows:

1. Support workers’ rights without settting up separate political entities or telling people what to do.

2. Make and support great free software so that the most valuable things in the world are free from private control.
Bondi, a programming language centred on pattern matching
Thanks to the MVP religion the expectation is now set that for any business should be able to get $2m in revenue with a $5,000 investment from your uncles and cousins. More often than not you’re taking these risks because you don’t have the money or infrastructure to ‘do it propperly’.
Maybe non-Xamarin-employee interest has declined sine the announcement of Xamarin Forms coming to the desktop?

https://blog.xamarin.com/glimpse-future-xamarin-forms-3-0/ (2017May)
Ask HN: Where do you go for political discussion with a somewhat good discourse?
It's easier to point to the medical profession than to admit to a failure of policy. Fentanyl is rampant as a street drug simply because it's so concentrated and, therefore, quite profitable to smuggle.

When the "war on drugs" cracks down on safer recreational choices and alters the risk/reward equation, producers will move to more potent substances - I bet the $/lb of Fentanyl makes it a very attractive street drug for organized crime.

But sure, let's crack down on people in pain by making it more difficult to legally acquire opiates. That'll fix the problem...

It's similar with Pseudoephedrine. Because it was a popular precursor for methamphetamine production, many allergy products replaced pseudoephedrine with phenylephrine, a much less potent alternative. Who suffers? The vast majority of people legitimately buying products like Sudafed to treat congestion.
This is btw. changing very soon. All lawyers agreed and mysql-trunk for-profit will be back on pypi as soon as we fix a few a tiny technical issues (I lead the team working on Python and other things in MySQL)
I was about to post exactly this sentiment. This guy can suck it, he deserved what he got.
Just because it's worth a lot of money doesn't mean shit. The original authors of the game are the real artists.
Well, my thought was that you'd just have different profiles, like is already used:

-std=c++20-full

or

-std=c++20-light

Perhaps c++20-light could never become the default, since it would break backwards compatibility, but you could always set the flag.

I dunno. It was just a thought I had when reading about the new feature, not something I've thought through.
It's hard to find anything like a schematic of a Nimitz-class carrier for obvious reasons, but as far as I can tell yes, it's all directly steam powered. The reactor boils (sea)water, which is used to power 4 steam turbines[1][2][3], those turbines drive the propellers.

You've probably seen aircraft carrier decks covered in smoke. This is because the Nimitz's catapult system is directly steam powered, service steam is widely used on the class. I can't find a citation for this now (this is from memory) but I saw some documentary on it once where it was mentioned in passing that even the washing machines on the ship were steam powered. There's service steam everywhere on the Nimitz.

Having steam power everywhere introduces a lot of complexities, which is why the Navy's moving away from it with their new carrier class[4]. The Gerald R. Ford-class does away with service steam in favor of more powerful electric generators. There'll be no service steam, just steam to drive the electric turbines.

1. http://www.nimitz.navy.mil/FACTS.html

2. https://en.wikipedia.org/wiki/Nimitz-class_aircraft_carrier#...

3. https://www.marinelink.com/news/dresserrand-propulsion302604

4. https://en.wikipedia.org/wiki/Gerald_R._Ford-class_aircraft_...
WooCommerce Email Customizer
UK citizen here. We're in the middle of political and economical turmoil right now, but even still, comparing the most basic services and systems here with their American counterparts is just shocking.

For example, our currently struggling NHS is still a million times better than the mess that is the US medical system.

America isn't "great" at all. It's not even that free. But people there just smile at their freedom while everything around them burns.
Darwin and the Evolution of Expression, or: When Darwin made babies cry.
We commute because businesses can push off the cost of commuting to their employees. I'd personally be in favor of a "congestion tax" or somesuch for companies that force their employees to come in rather than work remotely. Commuting takes up energy and resources, and the congestion incurs costs on third parties (car accidents, higher gas prices, and the like).

While it's debatable whether remote works for businesses that can work remotely, it imposes costs on the rest of us, especially those who can't do their jobs over an Internet connection, and those costs should be paid by those who willingly incur them, not whoever they can push them off to.
HN guys are generally blockchain haters. Not the best place to ask...
People use it a lot for payment and also trustworthy
microG also reimplements the Google Maps APIs (using OpenStreetMaps) and the Location APIs (with different backends, like Mozilla Location Services or a local offline database). The main Google-based service is Google Cloud Messaging, which is disabled by default in microG.

As you can see, microG doesn't strictly depends on the Google cloud services.
Not even sure what that means.

They let you write stuff (even with a pen, on a touch capable display) and have others see what you write (and even write/erase themselves).

What else is missing?

Standing in person before an actual whiteboard? Smelling the marker's ink? Maybe with the advent of cheap VR and smell-o-vision we'll get that too.
While everyone is focusing on the bottlenecks and such that this might have caused in homo sapiens, the main thing for me is the relation between Toba catastrophe and the main human migration out of Africa, which came 60kya. My theory is that Toba killed off or severely weakened populations of other human species (Neanderthals primarily) that were claiming the areas in Middle East and thus blocking our expansion.

So instead of (or along with) having being a major threat for us, I think it's what enabled us to become the global species we are today.
Ask HN: Why is Bitcoin rising but ethereum remaining stagnant?
Around November 16th there will be a fork to a new coin Bitcoin2x. The moment this happens markets will put the same amount of Bitcoin you have in Bitcoin2x to your wallet. I think at least for this month this is the sole reason the prices are exploding.
That's actually a great point: "missing an absence" is far harder than "noting a presence of opposite indicator".
There is yet another Bitcoin fork (seg2wit) coming. If you hold BTC at the time of the fork you might get free money like with the last fork (bitcoin cash). If and when it will fall? Hard to predict, but it sure looks like a Ponzi scheme.
Earth's ozone hole shrivels to smallest since 1988
Do you not trust people to seek out and pick the optimal options for themselves?
What would be a good place to ask?
Mostly a bubble. Partly more people realizing that it's interesting and wanting to try it out. Partly people wanting an alternative to their national currency when it's weak or difficult to exchange.

I'm hoping the value becomes much more stable so I can go back to using it as currency and not as a high risk "investment" that I'm afraid to spend.