skysight-inc/HackerNews huggingface dataset:
On Linux I use the EasyGestures application which I've configured to send XF86Back and XF86Forward keys for the respective gestures. The added benefit is that the back and forward gestures work in the other apps too, not just in Firefox.
They will probably water it down to fast-lane/slow-lane where SaaS providers -- ie: you -- have the option to buy into the fast-lane.

As for affecting policy, that is a more interesting challenge.
> Linux has MILLIONS of lines of code. Please don't. EFI is already bloated as it is.

Well, if you're going to run Linux anyway, running Linux as your firmware + bootloader doesn't increase your attack surface. And, it can be argued that e.g. the Linux networking stack is more battle tested than the UEFI one.

> Support efforts like coreboot instead.

Ron Minnich is the father of coreboot. If it were possible to run coreboot on modern Intel server platforms, I'm certain that's what he would propose. As a sibling commenter mentioned, he views NERF as a backup solution if using coreboot isn't possible.

> And FFS, firmware should not persist once the operating system boots. Persistent firmware is cancer.

In NERF, the Linux kernel burned on the flash rom kexec()'s the final distro kernel. IOW, it replaces itself by the new kernel, it doesn't linger around in the background.
Great. As a European, I don't care at all whether the Congress thinks its legal to spy on me or not. I'll applaud anyone who takes a stand against mass surveillance.

And it's not like anyone really asked the Congress either, is it?

http://www.hasjamesclapperbeenindictedyet.com/

>ended up in the hands of unfriendly intelligence services

Sucks to be the NSA, I guess?
Stopping auto-play videos on Safari
@doctoring Do you think that those 5 pharma companies would be interested in the service that would take care of data collection and alerting patient/911?
If it is possible I would like to talk to you about this and other ideas. Could you contact me at redant409[at}gmail.com?
Wow. If my cable company (who I use only for internet access) decides to change pricing and it ends up costing me more to watch netflix (this includes if netflix increases its prices due to the cable company pushing back and charging netflix) then I will cancel both. I'll save more money and be free from the internet at home. I suppose that really is truly "Internet Freedom"!
I want it. Wearing multiple hats at a small company, I have to occasionally reimage machines and this would make it very useful for me.
In search of dragons
> I can guarantee you Google protects this data more securely than your carrier does.

This sentence is completely insane in this context, did we read the same article? Google should not have access to this data, and it sure as hell shouldn't be sending it up to itself when disabled by the end-user. It's absurd that you typed that out for an article titled "Google collects cell tower info even if location services are disabled".

In what world does one operate in if you consider this as "Google protects this data more securely than your carrier does"? Your carrier is supposed to have this information (and in fact needs it), it's a complete privacy violation for Google to be collecting it though.
> Guess what, a lot of people are underpaid.

> Contrary to popular belief, being a "company man" is usually still rewarded as long as you work for an employer which has basic common sense when it comes to employee compensation and morale.

It is mind-blowing that anyone could write this summary, expecting it to be generally applicable, when every study of wages shows they have stagnated since the 1970s, and at the same time every study of production through the same time shows it is through the roof.

In short, you advocate enshrining a work ethic, while pretending it's okay for ownership to totally ignore a pay ethic.

It's something akin to Stockholm Syndrome, if you ask me.
>I want there to be CENTRALIZED COLLABORATION on a platform, and not competition (eg of browser makers)

>only one major browser

>nothing is RESTRICTED from people and they are free to try new things

What happens when one does a new attempt at a browser, that cannot be merged into the original major browser when it gets big enough?

For a simple example, suppose Google Chrome was the only major browser in such a model. One day, someone decides that C++ is too prone to vulnerabilities, and creates a new browser, called Firefox, based on Rust (on an entirely new codebase). What will happen when Firefox becomes sufficiently large to be considered major?
Well, nVidia's goal is still to have some interface that their closed-source drivers can use. That goal is probably not shared by everyone...
Wheeler did end up helping consumers, but not from the start. His first year or two in office he was against net neutrality and very supportive of telecom/cable companies - although nowhere near as bad as Pai. It wasn't until Obama's Administration whipped him in line that he actually started championing pro-consumer policies.
ShopifyBasics?
This paper was extremely devoid of content beyond a basic summary of what neural nets are, what an FPGA is, some basics about both (forward propagation, back propagation, usage of HDL modules, usage of LUTs), and a statement that the author created a thing.

As a machine learning guy and total closet FPGA geek, this was sort of a disappointment. I would have liked to see topics addressed like floating point precision, actual benchmarks, how the FPGA can pipeline things better than best known CPU or GPU algorithms due to a lack of pipeline stalls, issues with I/O of training data and predictions, and probably a discussion on LSTM gates or GRUs (which I think the FPGA is particularly suitable for).
Yup, I mostly think that once an area dowser gets experience in where past pipes have been laid, then they get better at guessing on their next call.
what upsets me most is that I dont think I'll be around by time we get the technology and funding to capture one of these things and study/learn from it
This is essentially what capsized the Saewol and killed hundreds of people.

It can be detected with empirical tests however. Almost every ship should right itself from a roll within ten seconds or so, so anyone with a stopwatch can detect misloading. There are monitors that measure this continuously as well.

At one point I was thinking of making a phone app for this, so that ferry passengers could check stability themselves.
I understand the urge to remove networking capabilities, but why do privacy folks freak out about the entireties of UEFI/ME/SMM? It's a fact that the hardware is the one with control of the system at boot, and you're always at the mercy of the vendors in terms of bad code (whether intentional or otherwise). You can't get rid of hardware-specific code, and you also don't have any control over the designs of the chips. Both of those are places where it will always be possible to do something nefarious if the vendor feels like it. Unless you feel like fabricating your own chips from scratch, at some point you have to trust all these layers. Why suddenly freak out when it comes to new layers?
I like that idea, Joe Armstrong's split security idea a lot.

Can you link the podcast? I'd like to hear what he said.

I'm a strong believer in privacy, in not trying to legislate backdoors into encryption, but I'm also a proponent of the idea that everything in society is a balancing act between the individual and society (and we see this play out in every aspect of life, so it's not a radical new idea); the question is finding the right balance.

Interesting, very interesting. Please, if you can, link that podcast.
Ask HN: How do you manage the images which you upload at various places?
Question for owners of CMS sites or sites which use images more frequently then others.

How do you backup them ? How do you change them ?
There is a inverse relationship on youtube DIY remodel videos. The better the video quality, the worse the advice and vice versa. Many of these 'experts' are more interested in video production (and possibly revenue from it) than they are knowing about actual building codes and practices.
So maybe the stupid deplorables were not that stupid and were actually acting in their own interest which is only fare. The pressure on wages and work places from the illegal immigration was huge and detrimental for the American working class. The people in coasts didn't care while parading some kind of moral superiority. Turned out Trump was right on the point.
i am also using firefox 57 on ubuntu 16.04.3 and it looks fine to me. it must be something with your specific setup.
This Net Neutrality issue sounds similar to the issue America faced in the late 1800s with the railroads.

Some shippers (Standard Oil) wanted to monopolize the rails or at least they wanted rebates for shipping their freight. Others argued that the rails should offer the same rates to all shippers since they were using eminent domain in some cases to obtain property and they should exist as a shared resource.
There's having fun, and then there's violating the Principle of Least Astonishment. https://en.wikipedia.org/wiki/Principle_of_least_astonishmen...
>I say it also has to do with them just not caring about what their users want.

Why are people buying their products?
I used coercion because I knew that was how libertarians/other people who generally don't agree with me see it. I actually see it in the following way: the world is not a perfect free market, and in many cases letting a free market run its course results in the poor/disabled/children of bad parents needlessly being hurt or dying. I think its more just to pay to feed 20 poor people than to let 1 die due to poverty. Its not like this imposes some seriously constrained living conditions on everybody. I earn income in the highest nominal tax bracket and nobody I know making this much, including myself, is hurting because of our current system

There's also the argument that the money you own isn't truly yours. It's the product of a large amount of investment on behalf of your parents (which varies for everybody) and the government in terms of education (of you and everyone else to create an economy where you're able to perform your current job) and infrastructure, with the end result of you being able to perform your job. So its taxation is not theft because you do owe that money back to the rest of society. I think preventing hunger/homelessness is in general a good way to spend that money
Not generally, but if firefox is using gpu compositing, graphics drivers are not osx' strong point.
I'm personally really happy for firefox 57. I never switched to Chrome, primarily because of privacy concerns, and I suspect that there are a good number of users in a similar situation. The migration to web-extensions was a little annoying (had to find a different password generator).

While they could have split the product into two (like they did with Firefox & Seamonkey) and let the former product languish, I'm not that would have made many users much happier. For what it's worth, you can still use Firefox 56 (or even Seamonkey).
Then you don't get Netflix, Prime, etc, because AT&T marked up the price, or you do get it, but you get less of something else because AT&T is extorting you.

Would you be "fine" if someone stood in front of your house and intercepted all your Amazon packages and added a $5 delivery fee to each?
> ... it lends itself to security holes by way of accidental misconfiguration.

I'm not sure I understand how SELinux would introduce additional security issues. It doesn't permit any behavior that wouldn't be allowed if it weren't in use.

> ... I'd like to hear some good discussion about this.

Some people seem to have -- for whatever reasons (previous issues or whatever) -- sworn off SELinux completely which, IMO, is a mistake.

Unfortunately, there are way too many tutorials and how-to guides on the Internet where step 1 is often "turn off SELinux". Instead of taking the time to figure out what the problem is and fixing it, they just take the easy route and get rid of it completely.

I am the opposite. Most of my servers run RHEL/CentOS and I insist that it be enabled on all of them. This is primarily because I've seen, firsthand, SELinux prevent a compromise (well, kind of).

In my career, I've had one machine that I had responsible for (even though it was "shared responsibility") get compromised (that I know of, of course). It was because of a web application (used by Marketing) where a vulnerability had been found and a patch had been released but not yet installed. I was on vacation at the time and, when I returned, just mistakenly assumed that this had been addressed. An exploit existed and was being used "in the wild" and this machine was hit.

The first thing that exploit did was to reach out and download the rest of its toolkit via TFTP. Fortunately, that attempt was prevented by SELinux and logged. Thanks to that log entry, we began investigating, figured out what happened, and promptly updated the machine.

So, yeah, SELinux saved our ass once, many years ago, and so now I make sure that it is enabled everywhere possible. It didn't technically prevent a compromise but it certainly prevented it from being much, much worse. We were able to figure out that nothing else happened after the TFTP transfer failed. The attacker didn't "try again" and we got it patched and back online without any other issues.

SELinux is complex and requires administrators to learn new things, but it's nothing that someone running Linux servers isn't used to -- it's just one more thing you need to learn.
The End of Net Neutrality Isn't the End of the World
i'd be annoyed if i had to pay more for specific things, but i'll be livid if they can accomplish a form of censorship with the same
Isn't a bank run only an issue if the bank is using a fractional reserve? Cryptocurrency exchanges aren't banks; they're not supposed to keep a fractional reserve. If everyone suddenly demands all their coins at once, the exchange should have no trouble complying with that.

The only problem is that there's no way to know for sure whether an exchange is running on a fractional reserve or not.
Distance makes that mostly a non-starter except for the relative handful of routes where Amtrak or "luxury" bus services already exist such as Boston to New York City. Long distance [bus] in the US almost exclusively serves the low-end of the market and it's hard to see why that would change.
Freedom for whoever has the cable/phone monopoly right-of-way.
Why? The biggest ISPs in most markets aren't ILECs or CLECs right?
And this is how the American tech boom dies.

I blame the tech giants: Google, Apple, Amazon, Neflix, they should have done more to prevent this.

Looks like they don't care about it anymore now that they are the winners.
> ....you should discourage them from using Android.

You should discourage them from carrying a portable radio transceiver, ie a cell phone, with them at all times. You only know about this because you read it in the news - Android is not the only outfit doing this. Sending tower-data back home is a fundamental part of your cell phone's operation. Without that information, your carrier would have no idea which tower to route incoming data/calls to.
I thought blue collar often referred to e.g. welding, plumbing, electrician, etc. Would an undocumented illegal really be hired as a TIG welder?

Or are those jobs just a small part of "blue collar".
It's amazing to me how many comments here excuse Google's behavior by offering the impractical "solution" of just not using a smartphone (a false dilemma) when the obvious answer is to get an iPhone. That's the advice of pretty much everyone in the infosec field and I'm sure some of them will attest to that in this thread.
> But the saga reveals the passion and fury crows can elicit

Sounds like it reveals the passion and fury of the classic Seattle NIMBY homeowner more than anything.
>it's bizarre to me to see them take positions that don't even appear to be logically consistent.

Ever consider that maybe they are more beholden to those who give them money than those who give them votes?
Because SMM can be disabled. UEFI potentially replaced and should renounce direct hardware access after initialization and driver disable. ME cannot be disabled and has both networking and direct memory access bypassing even IOMMU. Running in background.
>Surveillance is for the rest of us.

Who has been spied on using Intel ME?
> then I will cancel both.

Which is exactly why it won't happen even if they were given the option... Everyone would flock to the ISPs who didn't do this. Or to technology options such as encryption and VPNs to circumvent it, while still using the cheaper packages.

Selective internet packages has been an incredibly unpopular idea among the public and has been for over a decade.

I'm not sure why people think the only thing that has held ISPs back from doing this is a 3yr old FTC regulation. Not to mention no ISP in any other country has tried it either in the ~2+ decades broadband has been available.
You mean the document that specifically noted it was not an audit? That audit?
In my very limited personal experience, it's not that hard to get a worker to come do a job on my house. It is EXTREMELY hard to get someone who actually does quality work and is reliable. You could argue that I'd get better and more reliable people if I paid them more, but the fact is, I pay them what they ask for. I have very low confidence that just offering to pay double would make a bad worker into a good one.
The mikeroweWORKS Foundation is doing a great job of raising the status of manufacturing and skilled trades work. Worth supporting.

http://profoundlydisconnected.com/foundation/
The problem is that the price you (as the ISP) choose to charge some new startup is not subject to competition.

That's because you're not charging your customers. You're selling them to that startup. The startup has no choice but to pay if they want to have a chance of reaching these potential customers.

That means ISPs will have to ability to milk every cent of value generated out of startups, limited only by their ability to measure it.

The normal mechanisms of a market don't kick in, because the customers will be unaware of what's happening. They're not going to change providers only because that provider is shaking down some startup they've never heard of.
Right, repealing net neutrality would only make sense if we keep net neutrality
Thanks ! Do you have any link where I can read this?
It's basically only about weed; pretty much all other "hard drugs" (cocaine, meth, etc) flush out of your system within hours to a few days (assuming you can abstain that long - which isn't a given depending on how far into them you are), while THC and such from weed hang around in the body for about a month (30 days or so), and as you noted - up to 3 months (for a hair sample test).

So you could smoke a joint today (ok, maybe a bit more than a joint), and nothing more - and three months later they take a hair sample and find you a dirty guilty pot smoker. Yer fired! Or not hired in the first place.

Even in the best case scenario, you have to abstain for 30 days; so if you're a regular user of weed, and you want to change jobs, you'll have to plan ahead, or just be out of work for 30 days while you let it get out of your system. Doable if you have savings, I suppose.

As far as "random drug testing", I honestly think its more of a threat to instill fear, than something actually done. Drug testing isn't cheap, and a true random test would test all employees, but due to the expense, only the larger companies could conceivably do it. Smaller organizations would tend to only do testing "after the fact" or if there is credible reason to believe that a certain person is having issues (visibly impaired or something) - then a "targeted test" under the guise of a random test can be done.

Even then, such a test might only be correlative, and not indicate the true cause; someone might, for instance, cause an accident or such due to a heated argument they had just before the incident with a coworker, but they get tested and fail the test because of a party they went to a couple weeks before where they smoked some weed.
I really love Gentoo's mask system. I upgraded to 4.12.12 not too long ago, it is the latest stable: https://packages.gentoo.org/packages/sys-kernel/gentoo-sourc... You have to explicitly decide to use masked versions, at your own peril. (Of course, many Gentoo users love the bleeding edge, and I too have a number of things I manually unmasked... But the kernel? Stable only please.)
Introducing react-pivottable
Thanks. I've lived in the north east since before there was IPSs and have never had a choice having lived in several town. Only people in one or two cities near me do.
I'd agree satellite isn't a great choice and I am not really counting that (or dialup if it still exists). But is choosing between a telco like Verizon and Comcast/Charter really much of a choice either? So I think those numbers are miss leading. There doesn't feel like any choice to me.
That's fine. If the charges are onerous enough, then the content providers may choose to build new carriers of their own.
…I mean, yes? This question is well documented and simple Google searches will turn up a large number of high-quality results, such as https://stackoverflow.com/questions/3177338/how-is-the-linux....
It's probably more correct to say "Nobody complained in a public forum for 6 years."
The right sees an unregulated approach and naive of the censorship aspects.

But Net Neutrality doesn't fix the censorship of companies refusing services to people it doesn't like. In fact many people praise such censorship.

The proposed Net Neutrality argument is just consumer access to the net, not the person wanting to be a host on the Net. That aspect, it doesn't go far enough to provide an unregulated and uncensored free speech.
Yea you're probably right, reading that way is also easier to focus in on the text
FCC instituted rules in 2008 abolishing the payola-style deals that stifle ISP competition in apartment buildings [0], but in the biggest surprise ever, the apartment owners and would-be-monopolist ISPs have been avoiding compliance by hiding the exclusivity part of their contracts. The apartment owner simply leaves open the prospect that another ISP could install access, but never actually allows them to do so. Or they make the now-legally-unenforceable exclusivity clauses of their contracts severable, but those enforcing the entire contract never actually know which of the clauses in it are invalid. So the clauses continue to be enforced in practice, by people who do not know they should be ignored.

If you can't get competing services in your apartment complex, get a lawyer and sue the owner.

[0] https://apps.fcc.gov/edocs_public/attachmatch/DOC-280908A1.p...
> Far too often businesses define churn as no purchases after N days; typically N is a multiple of 7 or 30 days

I'm working for a strategy consulting firm, advising large retail clients.
Even though we have looked at doing this kind of advanced modelling for churn metrics, we always end-up using the same kind of very basic rules of customer not purchasing within the last x days.

The reason is twofold: (1) it’s trivially easy to implement and explain, (2) at the end of the day using the complex method is not worth the effort. Because business-wise, there are many other external factors that are much more impactful than the modelling biais – like seasonality, variation by category of product, etc.

It all depends on the decisions those metrics are used for, but most of the time it’s not worth the pain.
> Because safety. Mozilla and others are just making the Web browsers safer.

And yet they broke things like NoScript, which provided security/privacy features missing from plain Firefox and unavailable on any other browser no matter what extensions you installed. If safety was really such a high priority, they would have waited until after a full-featured NoScript WebExtension was possible to implement before deliberately breaking XUL extensions.