skysight-inc/HackerNews huggingface dataset:
If drivers can decide how long they are willing to work, even if there aren't many/any passengers around, then Uber has no way to control costs.

Unless they already have something in place to manage how many drivers are on the road in an area at any time? I thought that was just controlled by supply/demand, but that gets skewed by Uber needing to still pay minimum page when there is an over-supply.
Any clue as to why they chose not to differentiate?

Is it too costly to build a separate non-remote CPU for non-enterprise? Does it provide some useful functionality for regular consumers?

The answer is probably they do not think there's a market for it, but still makes me wonder.
> the lengths organisations like Google go to to disable it

TIL about this detail. Where can I learn more?

EDIT: So this is now at 0 points. Interesting...
Well, it's debatable if the improvements in women's rights and the corruption-related investigations are reflective of core changes to the society or if they are superficial changes in the first case, and moves to consolidate power in the second case.
Health insurance is irrelevant to the discussion in the UK so long as the NHS exists.

What is relevant is NI ("national insurance"), which pays for a bunch of unemployment and similar benefits: https://www.turn2us.org.uk/Benefit-guides/National-insurance...

What is also relevant is driver liability insurance - normally if you take paying passengers it invalidates your insurance, so commercial drivers either need to be insured by their company or pay more for correct insurance.
Half Bakery is some awesome old-skool internet stuff. Back in the late 90s it was one of my favourite haunts. Sadly they lost all their content somehow and didn't have a full backup so, funny though it is now, there was some epic stuff on the old site that is lost forever.
On WikiLeaks' web based repository browser, some files referencing Kaspersky can be found here: [1] (e.g. client.crt and kaspersky.conf). In the dump, the files are in the directory /client/ssl up to commit da81be4.

[1] https://wikileaks.org/vault8/document/repo_hive/client/ssl/C...
Best VPN deals on this season
At first it looks nice "oh now we can get rid of it" but it also opens up a very scary near future security-wise.

We've now entered a realm where an attacker could simply plug a device on an usb port of your computer for a few seconds to have it access your cpu's ME through USB JTAG and take over it, allowing him to have full access and control over what you do/read/open/type over the network, without you ever knowing it since you can't see it.
And the only way to get rid of it for sure would be to pretty much throw that cpu away and buy a new one.

Or am I being overly paranoid and there is something I haven't considered that makes this scenario impossible ?

EDIT: given the answers I think my main concern wasn't well expressed above. I'm not saying this as in "ME is making it easier to be compromised". That may or may not be true, but that's not my point.

My point is, we all know that once compromised, you can't clean it and need to burn it all and start from scratch: recover from backup (not files on the compromised machine), format everything, reinstall.
Due to the nature of the ME, this is not a solution here. The cleanup needs to be done at the hardware level. Unless I misunderstood something, once it happens, your cpu is done for, period.
And 'using a hack to cleanup the hack' is still in the realm of cleaning up rather than start from scratch, it's not a solution for the same reason than cleaning up your comprised linux box is not one and you need to start from scratch.
Linux V/S Windows:Which Is the Best for You
Where is the typical place to put initial fetches? I've been setting empty state and then calling a method at the end of a constructor which ultimately results in a promise that calls setState with the data.

But I would never do something like that in, say, the constructor of a WPF/UWP windows app as those have "Loaded" or "Loading" events of some kind (which is parallel to componentDidMount).
There's an English synopsis on their website, with the same map: http://www.irsn.fr/EN/newsroom/News/Pages/20171109_Detection...
Basically a user chooses an audio track (this can be a wide variety of things. YouTube video, song, or other pop culture track, or silence), then they click record. The track is played and they can either match their lips or actions or both to the track. This simple style of recording tends to create some pretty impressive videos. Musical.ly took this and made it into a platform similar to Instagram or Vine.

Here are some examples: https://www.youtube.com/watch?v=njtMuGaSIGg
Social-Media App Musical.ly Is Acquired for as Much as $1B
you are sharing your labor with VCs ... that is about it
I think you're being overly paranoid. If the attacker has physical access to the machine, chances are you're compromised anyway, even before this vulnerability.
Go google "intel ME" and wade through the results. Optionally use date filtering to progressively skip back through the years.

Next, download Minix and get a good handle on it. The next step is getting access to the Minix kernel on the ME, and after that, it'll be a case of who has the best apps for the CPU in their CPU.
How can you see the amount of downvotes ?
Mirror: https://archive.fo/JPCLG
If the prosecution has evidence you have recently logged in it will be all upto whether the jury believes you.
How is that hardcoded into the device? It's not just on the drive somewhere. Is it changeable? Not something I'd really thought about before but maybe there's some way of changing it.
Half bakery is about ideas that seem interesting but are either absurd or impossible - but crucially are such for interesting or amusing reasons.
Interestingly, 'volunteers' get zero salary.

The law as it stands allows an employer to pay zero, or >£7.50 per hour, but nothing in between.

Lots of industries circumvent that by requiring 2/3 years experience to get a job. That experience can be as an unpaid volunteer. Now, over your career, you are forced to do 3 years unpaid, then the rest of your career paid, and guess what, on average you got under minimum wage. Live with your parents for the unpaid bit.
Then their FAQ needs to be updated:

To build H2O as a library you will need to install the following dependencies:

libuv version 1.0 or above
OpenSSL version 1.0.2 or above

As I understand it, regular h2o doesn't require libuv but libh2o does.
I agree.

I think this was Minix's first real-world use case (read: ego validation), and Andrew Tanenbaum was just unimpressed he learned about it by proxy.
It's by far not the first time that a highly-priviledged "security" component turns out to actually reduce security, because it is a large and gainful attack surface.

I can't help but to think of all those exploits that target anti-virus software.
And employees have to be given paid holiday. And you have to pay them PAYE (so ~18% employer's side National Insurance Contributions). And if they're self-employed below the VAT threshold, they don't have to charge 20% VAT.

Muuuuuuch cheaper.
I took a look at the repository.

The fake certificates aren't signed by a legit CA. It's not actually clear if they're in use or just examples; the code is a mess. The idea is clearly if someone is using packet sniffing tools to monitor their network, they see Kaspersky's name in the cert of an outbound connection and assume either:

1) It's their own AV installs grabbing updates or something similar

2) They've been hacked by teh evil ruskies

Interestingly these example certs aren't in the HEAD of the repository (WikiLeaks provide the entire git repo with history). To find the certs they were talking about I had to look at the first commit. At some point these files were removed. The start of the repo is in 2013, well before the current Red Scare.

It's unclear to me that this is the CIA impersonating Russia for political reasons, as might be assumed from the headline, vs just using Kaspersky and Thawte because these happen to be companies with many customers. However, Wikileaks does say the justification is simply to hide exfiltration. We already knew that western intelligence agencies like to frame their opponents and cause confusion around attribution, like the neat trick NSA/GCHQ use where they send data they want to a server controlled by someone they don't like/some random innocent, which ignores the traffic because it's not actually compromised. They then suck the data they want off the wire as it is transferred.

All that said it is depressing how well US propaganda works. Look at all the people in this thread saying, no no, it can't be true, it's from Wikileaks - even though the code and files themselves are available to download. The analysis they post isn't misleading either. It's pretty much describing what's found in the repo.

edit: lol, just as I was writing this the story is flagged. What a big surprise. We can't have anything interfering with the official narrative, now, can we?
The "government master key" idea is silly (for a number of reasons).

Yet, it's very possible to share a copy of every user key using methods like Shamir's secret sharing - therefore requiring P out of N entities agreeing on allowing the decryption to happen.

The secrets can be shared in advance with attorneys, civil rights groups, government entities and allows a democratic-ish process around decryption.
> You don't raise employment standards by making low standards illegal.

Yes, in fact, we do. A whole lot of practices have ended predominantly due to legal changes.

A major historical example from the US being the infamous Triangle Shirtwaist Factory fire [1] where 146 workers died in part because the owners locked the factory doors to prevent unauthorized breaks.

The outcome was both an increase in unionization and legal changes.

Employment standards are the way they are today not in general because companies have decided to act nice, but because they've been forced, through law and union action, over a very long time, to adhere to minimum levels.

> Low paying jobs work for some people because their circumstances don't give them the opportunity to get anything better.

Allowing these jobs to undercut competitors that pay properly propagates low paid situations where society end up having to subsidize the behavior of the companies in question because they don't pay livable wages. I for one would much rather have a proper welfare system than a system that rewards companies like that.

[1] https://en.wikipedia.org/wiki/Triangle_Shirtwaist_Factory_fi...
I'm not counting out google, but there are only two searches that actually count from a business perspective. product and services. All the rest are cost of doing business.

If you do your research on google and then buy from amazon or somewhere else and don't use the adword link google's business strategy fails.
I wonder how long it will take until an attack over the network is found.
3 Ways Machine Learning Tools Can Drive Sales Over the Holidays and After
Is that from the current ruling that is the topic of this article? Do you have a link?
There's a good reason that there isn't any real competition. Hardware design is extremely difficult, and extremely labor intensive. amd64 has an overwhelming number of op-codes, and competitively implementing all of them is a multi-billion dollar project.

If you want to compete with Intel or AMD in the CPU market, you are talking tens of billions in NRE before you ever have something that is remotely competitive. And then you have to do it all over when we switch from 14nm to 7nm, and then again when we go from 7nm to 3nm.

If you want more competition, you have to level the playing field by banning most of the op-codes. But even then you still have crazy amounts of pipelining and other optimizations which are nontrivial to figure out and very expensive to implement.

Intel is in a great position.
stealing bitcoins is like stealing a bag of money with a gps chip. its hard to spend the money without everyone knowing where it was spent
I hope people here are paying attention to the tactics being used to discredit wikileaks, even here. Its about numbers. Yeah most of us know you can't prove a negative, etc, but its about subtle influence of bias over time on the $% that are still blinded by their unsupported belief in the Russian narrative.
Had to look that up[1] as I've never heard of it before (I'm from the USA and it's a primarily UK concept). Based on my skimming of it, I think you'd still have the platform dealing with businesses, but the businesses would likely hire workers with this type of arrangement.

[1]: https://en.wikipedia.org/wiki/Zero-hour_contract
You can accidentally leave out a parameter and end up with a function instead of the result.
This gets complicated because you can vary the amount of support based on the angle the arms are at. Anyway, there is no need to account for extra weight simply supporting someone's arms can make a large difference. But, you get into a lot of trade offs.
I think perhaps the core sentiment of GP's comment is, "Dang, I didn't learn anything from this article."

It's super great that more and more people are learning about these cool features that have actually been around for a while.

It's super disappointing that none of this was new to me. Oh well.
Just a nitpick, but Samsung is Korean company.
thanks don!
You're correct, but you're fighting an uphill battle: https://certsimple.com/blog/ssl-or-tls
Complaint tablet to Ea-nasir
Its currently #58 on the app store. They are getting at least 150,000 downloads a month [1].

[1] https://www.quora.com/How-many-downloads-do-I-need-in-the-Ap...
Show HN: Create Lyft rides from the command line
It works with functions rather than methods. So you can do something like this, calling functions from various modules / services:

order = %{amount: 123, customer_id: 45}
result = order
|> Orders.validate()
|> Database.save()
|> PubSub.publish()

whereas with method chaining you can only call methods of the object being passed around.
My guess, because of cognitive dissonance
Nairobi Raha – Call Girls in Nairobi and Mombasa
Usually its on the logic board.
Like that time I was given two weeks of Vicodin for a scrape on my elbow.
10 years ago, Wikileaks promised an imminent expose on the Russian government. It has never materialized.
http://content.time.com/time/world/article/0,8599,2028283,00...
Yes, the people of Earth could never grasp the awesome complexity of a new edge gesture.

Of course the home button was such a simple UX though:

* Press place your finger on it to use Touch ID

* Press once to go the home screen

* Press twice when unlocked to bring up task switching

* Press lock button then press twice to initiate Apple Pay

* Press and hold to talk to Siri

* Press at the same time as the lock button and then release to take a screenshot

Yeah, it was such a SIMPLE bit of UX. If you’re a UX expert arguing for the supremacy of a verb with at least six overloaded meanings, imho you’re UX charlatan.
Uber CEO on SoftBank deal: 'It hasn’t happened yet but it will'
Cool, good job all the same! When I looked it was still a healthy mix of fun and serious :-)
see some on css design awards:

https://www.cssdesignawards.com/search?search_term=magazine
Cmd-Shift-4 is definitely my most used OSX shortcut.

The Windows equivalent is Ctrl-PrtSrc to copy the entire desktop into the clipboard, or Alt-PrtScr to copy the current selected window into the clipboard. If you want the clipboard saved as a file, open Windows Paint and paste the content of the clipboard, and then save.

If you have OneNote on your machine, Shift-Windows-S will open a snippet tool that behaves much like the Mac Cmd-Shift-4.
Hailo provided an ability for people who are largely already contractors an additional channel for bookings. The fact that these people are already operating a business and Hailo just provided an additional marketing and booking channel for them makes for a very different situation.
The judgement.
https://assets.publishing.service.gov.uk/media/5a046b06e5274...
You're completely right. And either way it's about $0.05 of old insight.
Thank you so much for your help i really appreciate it.
I'm in the opinion of if the government really care of it's citizen, they should do it directly, by providing low cost/free basic necessity or basic income, etc. This way their citizen is not "forced" to work with these company you deemed "exploitative"
Yeah, I've heard that argument from an employer who didn't offer any paid time off(even though the law requires 25 paid days off a year) and defended the decision by saying that no one is forced to work at his company and if people sign the contract they know what they agree to.
> The "government master key" idea is silly (for a number of reasons).

all of the security experts advising law enforcement, intelligence agencies, and politicians seem to think it is pretty reasonable.

care to share any of your reasons for disagreeing with them?
I don't really care if it's objective or not as long as they expose the truth.
I think the simplicity of the iPhone X lies in the fact that you don’t have to use all of the gestures to make the phone work for you. Swiping to go home is something you get used to relatively quickly, and I personally think faceID is great for unlocking the phone.
It’s interesting how Uber takes two very contradictory moral stands.
”We offer the ability for drivers to meet passengers, they should be glad they have this opportunity in the first place to make money.”

”The UK says that we have the ability to start a business, register a trademark and use the public infrastructure but they just don’t get that we’re way too cool and special for these ”labor law-thingies”. Doesn’t anyone care about how we feel about all of this?!”
Automated man – a poem
I hear this all the time: Flying exposes you to xyz radiation. Okay, hmm, so how in the hell are we humans ever going to travel in space for any length of time if even flying in the upper atmosphere increases cancer risk? Are we just kidding ourselves? I understand the concept of shielding, but then why don't airliners provide any level of protection?

Is there any evidence that flight crews and frequent flyers die from cancer at an increased rate as compared to the overall population?

I don't fly much, but only because flying has become such a horrible experience.
No such thing as objective journalism exists, at least nowadays. Surely not in large media editorial lines... They are a crapfest of partisan lies. Reading the NYTimes become harder every day because my eyes keep rolling up in disbelief.
[WEBINAR] Manage Complex Option Portfolios: Simplifying Option Greeks – Part III
The 'evil maid' attack is well known, and states that once someone has physical access to your computer, all bets are off. Anything that has DMA enabled (e.g. Firewire or Thunderbolt) offers an external device direct access to the system RAM that is very difficult to defend against, or they could attach a keylogger or modify your bootloader, basically unleash all manner of havok. USB JTAG is really no different from a security POV.

The concern with the Intel ME is that it has a native network adapter. You can bet efforts are currently underway to discover how to exploit the ME remotely. THAT'S when things get scary.

Your paranoia is not unjustified. Personally, I am nervous that some of my systems have the ME. When attention turned to it about a year ago, i knew it would only be a matter of time before someone broke into it.
> government's security for the master key will certainly be much better

It's foolish to assume this after Snowden was able to walk away with his archive of classified documents. In his case, storing that many documents within the reach of one person risked losing the entire archive, which is exactly what happened. If literally everything depends on a government held escrow key, You've painted a target on a huge single-point failure.
A colleague mentioned that ever since Windows 3.0 (maybe before) you've (usually) been able to close a window by double-clicking in the top-left corner, where the window menu button used to be. Later that button was replaced with the window icon, but the menu and the double-click still worked. Now, even though that button isn't visually there in many programs - such as Explorer - clicking where it would have been (usually) still works, and double-clicking there still closes it.

Sadly, there are some programs which haven't preserved this interaction, such as Firefox.
FWIW, it's exactly what I've heard when talking to Uber drivers in London. One guy used to work as a minicab driver; he prefers Uber because he can choose his hours, doesn't get cut out of lucrative jobs to the benefit of the company owner's nephew, and feels safer at night due to the rating system.
Look up the movie _Synecdoche_, where a theater production about the producing of a theater production (about... (about... )...) starts recursively eating real life.
So you're saying things are so bad anyway that this one vulnerability probably doesn't make any difference?

This interpretation of "you're being overly paranoid" is new to me ;)
Right. But this is just some news post and a claim but nothing that would say they are biased or even a tool in hands of somebody.
I always hated cups and now I hate it more.
A recent talk [0] by Ronald Minnich from Google gives a nice overview of their efforts to replace parts of Intel ME and UEFI with Linux, mostly for security reasons.

[0] https://www.youtube.com/watch?v=iffTJ1vPCSo
https://firmwaresecurity.com/tag/google/
They communicated the vision really well. Better pricing too.
I think, strictly feature wise - search was the only differentiator.

At the time we were using the rather obscure Flowdock[0]. Didn't feel like switching. Felt mostly the same. Before you know everybody was talking about Slack. Everybody understood the value of team chats. They made the competition irrelevant before anybody even cared to look for alternatives.

[0] have to mention the great support though, helped us a lot even as an unpaying customer
Ask HN: Should I worry about air traffic polution?
According to Flight Radar 24, I live right under a lot of major air traffic routes between Europe and Asia. Lots of planes go right above my city every day/hour.

How bad is this health wise?
Create a Twitter Politician Bot with Markov Chains, Node.js and StdLib
>largely already contractors

But why were they "already contractors"? Doesn't that beg the question?[1]

Take a look at section 2.1 of the link I cited. Just based on the text alone, it's not obvious why that "self-employed" criteria doesn't apply to Uber. Yes, the courts are free to interpret beyond the literal text but there doesn't seem to be objective consistency to it. The traditional UK taxi companies and the other ride sharing apps all seem to be misclassifying workers.

I'm not familiar with Hailo. Are you saying that a person who didn't drive a taxi before can't sign up on the Hailo platform and immediately offer their services? Did they have to be associated with a traditional taxi company first as prerequisite?

In what situations would drivers prefer Hailo over Uber and vice versa?

[1] https://en.wikipedia.org/wiki/Begging_the_question
I'd say the point is that the idea that the legal system suddenly has no way to deal with witnesses claiming forgetfulness "because encryption" is absurd.

The only novel issues encryption brings to the table involve self incrimination, because, AFAIK, IANAL, etc., the only time an encryption key is inarguably protected by the fifth amendment is where the fact that the defendant knows the key is itself incriminating evidence, because the fifth amendment only applies to self-incriminating testimony, not other self-incriminating evidence in the defendant's possession (e.g., the contents of a hard drive, encrypted or not).
That provides enough weight to take everything out of wikileaks with a grain of salt.

However, I don't think it's sufficient reason to flag/dismiss anything.
I think many don't realise that DCI is not supposed to be activated on production CPUs.