skysight-inc/HackerNews huggingface dataset:
Microsoft[1] and Sony[2] devices support VP9, and there is no reason to believe they won't support AV1 as well. GP was obviously talking about consuming video, so GoPro isn't relevant.

[1] https://www.google.com/amp/s/blogs.windows.com/msedgedev/201...

[2] https://www.flatpanelshd.com/news.php?subaction=showfull&id=...
> click the lock and enter your password

or just enter root with no password
RISC-V is not an architecture, it is just an instruction set. People still need to design the architecture for an implementation of RISC-V.

Intel ME is a co-processor that runs at the same time as the main processor, it is not related to the instruction set.

To answer your question: Intel ME is a problem that happens on an higher level than the document that defines instruction set.
Original thread: https://news.ycombinator.com/item?id=15800676
Is this address easily discoverable without needing too much insight into tech company workings? Like, do they have a help menu that tells people where to report stuff? I'm not an apple user.
They don't need to be perfect. Just better than humans.
Overall this post has some helpful advice, but the advice regarding embargoes is entirely wrong.

Before a reporter has explicitly agreed to an embargo, he or she is under no obligation to keep a story under wraps. So, in the example email from this post with EMBARGO at the top of it, the journalist could immediately publish your funding amount, investors, etc. without breaking any of the established norms around embargoes.

The correct way to do this is: write an email with very little information ("we just raised a round from a top VC") and ask for explicit agreement ("if you can agree to an embargo of date_time, we'll send over all the details")

edit: I've used Upbeat and think the product is really cool – so while I find this post to be lacking I don't mean to diminish the team that worked on it.
I wonder how profitable these I make $X,XXX,XXX in revenue and here's how type posts are. I counted 17 people in one of their pictures and if you assume they cost $100,000 each, that's $1,700,000 in salary cost alone. Then there's 3 offices and all of the other overhead/costs they have to pay.

I've worked on some hobby SAAS stuff and every time I look at the numbers to see what it would take to equal my salary the numbers are staggering.
https://developers.google.com/speed/public-dns/privacy

Unless you're the tinfoil-hat wearing type who believes they're lying, their privacy policy looks pretty good to me.
Current workaround / fix:

1) open Directory Utility app (via Spotlight or other)
2) Click lock to make changes, log in with admin account
2) Click Edit -> Enable Root User
3) Click Edit -> Change Root Password…
4) Set a password
5) Do NOT disable root user!

If you disable the root user, the admin prompt will create it again with an empty password.
I think it is only a local exploit. The bigger risk are the Macs in schools and libraries.
Mac OS X doesn't have a real root account, it uses sudo exclusively. This enables a true root user shell.
Ha, ya. That way you know it's still needed!
I highly recommend the free courses on Stoicism by Donald Robertson: https://learn.donaldrobertson.name
In what version did the issue appear?
> a RISC-V SBC in my ThinkPad X220 chassis

afk, changing pants
Perhaps you have a root password set?
As Linux user who does kernel-mode development for a living, root escalation bugs come a dime a dozen. And, well, Linux runs everything but the average persons laptop, so the impact, while different, is much greater.

So lets keep the snark to an appropriate level, shall we?
Calling for iOS app beta users for fashion social networking app
Thanks for your inputs!
Apple doesn't "just use it". LLVM was originally developed at an university, then made production ready at Apple, and is still very much influenced by Apple, as Apple bases almost everything they make on it.
It's slightly oversimplified. Apple hired Chris Lattner from academia to ramp up work on LLVM & create Clang. (Apple always hated GNU stuff so the motive might not have been purely technical.)
The poster practiced Full Disclosure, which is also a valid disclosure policy.

Since we're just making up statements, I guarantee that Apple would never voluntarily disclose this issue if it was reported privately. So Full Disclosure is the only way to put Apple's feet to the fire, as it's the only way in which this issue would have had any visibility whatsoever.

https://en.wikipedia.org/wiki/Full_disclosure_(computer_secu...
Impact worse how? Funny how leftists who claim to be less materialistic and greedy than conservatives can only think in terms of money.
Critical - Blockchain and Deep Learning landscape are changing rapidly, and you've got to pick the winners

... I suspect I'm an outlier here though, vast majority of the time the customer and the problem being solved doesn't care about the tech
Is that what this is? The employer is Gap.

[Edit: Didn't think of the referral. I already have a couple of former collegues who work there as Sr. Software Engineers. I guess I could contact them. Thanks!]
And even beyond that, comments that bring up endowments usually come from a misunderstanding of what an endowment is. Its not like Brown has a bank account with $3B in it which they can access whenever and however they'd like. Endowments pay out a certain amount of money each year (I think its around 4% each year for most universities), and usually have strict stipulations on how its spent.
Correct. And "litigation hold" is the term that I knew existed, but didn't come up with.
Have you seen iOS11? Apple doesn't seem to value testing too much
That's a matter of opinion and finder is a terrible UI for a file manager for any one who has used windows or Linux file managers.

And the way Apple has diverged from a more traditional UNIX like Linux is a big problem if you are developing to run on Linux as it adds a whole new set of risks.
this is so downvoted that I can't even read it.
whether this will help provide the kind of production volume needed to make consumer products (like laptops and desktops) more likely to be viable?

It probably won't, despite a lot of wishful thinking to the contrary.

Are general purpose chips likely to be one result of the development of RISC-V, or have I missed something fundamental?

Out of the whole RISC-V ecosystem it looks like only SiFive is working on that, so it will take time.
It's certainly true that corporations do put a lot of work into languages and runtimes. Apple created LLVM and clang, Microsoft created .NET and CLR with C#, F#, VB.NET, etc.

These projects were valuable to Apple and Microsoft for a variety of reasons:

* promoting their IDE: XCode builds faster, and has better error messages. You can use any .NET language with Visual Studio in the same project.

* promoting their platform: Objective-C and Cocoa let you create fast GUI apps in a standard way, and we don't need GCC anymore. .NET provides a useful feature-complete standard library over a variety of languages.

To contrast, Rust was made with the intention of simply making a better systems language. Rust doesn't have a standard library or environment tied to a specific OS or proprietary dependencies. Rust itself doesn't promote Windows, OS X, ASP.NET, Cocoa, IOS, Android, etc. That is what makes it seem much less likely that rust would be created by a corporation.
Wow. Surpised (and pleased) to see this comment has not been downvoted.

Usually this simple truth is not ackowledged in HN votes and comments as a valuable viewpoint.

Instead HN voters and commenters often prefer comments about how Microsoft security has improved over time.

The other issue that is never discussed is whether a user can have "security" without having full control of the OS. For example, can Apple, Microsoft, Google, Intel, etc. give users "security" while withholding from them full control over the OS and the computer they purchased.
>$100,000 each

I think that's the key point made here, that these high salaries are not demanded if you aren't hiring on the U.S. west coast.
Worked for me on the second try (10.13.1)
IMO, It's just a different approach to the idea than the React world. I would assume the idea here is that you always want to write your UI layer "natively" in order to take full advantage of platform-specific performance accelerations/hardware APIs, but the entire stack underneath what's actually rendering visual components would be shared.

It forces you to start out more modular between your UI code and domain logic code, whereas React (& React Native) leaves the door open right at the start for tight coupling between UI code & domain logic, unless you expressly build this separation into your initial architecture.
But do they? And what portion of them do? And are they using it? There's a lot of speculation here. But surely the average person doesn't know and with this being public knowledge, AND easy to execute there is a bigger chance for crime of opportunity.
Smaller designs, easier to license designs, simpler and more attractive ISA extension mechanisms, no royalties, no license negotiation periods, no incremental cost to adding more cores of different designs.
Step one, move the task bar to the top of the screen. Step two, maximize all your app windows. Tada! Tabs!

I'm joking of course, but this is the problem with Windows in general. Microsoft always adds new UI features on top of old functionality that usually does sort of similar things, making the end result more complicated and disconnected.
Bk5-64, a New 64-bit RISC-V Processor
You make me wonder if Eventbrite might be that solution, do they not have groups?

Still, a better one might exist, and since there's no friendsters on Meetup (tmk) switching costs are lower if people only need to create an account and join a group (i.e. where Meetup pretty much stopped developing).
Maybe. Look at his twitter page though: https://twitter.com/lemiorhan

Not impossible to believe he's unaware of the right way of handling this kind of issue, but that banner photo (Enthralling My F-ing Audience) [1] and stats there suggest he should be aware that there probably are sensible and polite procedures for this, even if he didn't immediately know what they were.

[1] http://jesuschristsiliconvalley-blog.tumblr.com/post/4653787...
AWS Re:Invent Day 1 Recap
we've seen it only in 10.13.1 (17B48) so far
For you as an end-user? Nothing. For WD? They escape paying ARM licensing fees on every drive. They'll see an extra couple points of margin on every hard drive they sell.
I know it is a promotion, rather than a discussion, but I think that sort of thing is acceptable here, and it is corporate charity in support of causes that are popular here.

I do find the idea of self interested corporate charity to be an interesting one; I think it can be available social good if done right. Prgmr benefits from good open source software, but you could argue that society in general does, too.
Read and understand lots and lots of code to the point where you could reimplement it yourself. Eventually you'll be able to see the difference between simple needles buried in artificially complex haystacks, and actual problem-domain-mandated complexity.
How much of that code is safety critical? I occasionally see misbehavior from my Tesla's center screen, like the network connection failing, or audio glitches, or even the occasional spontaneous reboot. This can be mildly annoying but it doesn't worry me because I know that the center screen is separate from the stuff where bugs can actually get me killed.
Am I missing something or does this require the attacker to have access to an unlocked computer? In which case all bets are off anyways.
Vanguard Founder Jack Bogle Says ‘Avoid Bitcoin Like the Plague’
It wasn't meant to be a damning criticism.

Here is a chart of exchange volumes. It's far from a two-horse race. There are structural reasons why there will be business for more than just a couple of exchanges, and it's closely linked to arbitrage players actually.

https://www.sec.gov/marketstructure/datavis/ma_exchange_trad...
> That's to prevent leaks from driving the stock price up, and causing the buyout cost to increase. That's a little different than using it to hide the fact that they were knowingly breaking the law. Do you understand the difference?

You're making the assumption that they did it for that reason. It could be that covering up the crimes was just a side effect.
Phoenix without Elixir sounds interesting! Do you have a blog post or some other documentation at hand?
There's only so many times you can answer a client "this won't work on Safari" before adding another layer feels inevitable.
PrivateLink is used to provision Endpoints, which can accept TCP connections, but not originate them. It's designed for services such as webservices, web sites, databases, e-mail, and so on.

VPC peering does allow you to do full bi-directional communication between two VPCs, though the IP ranges have to be unique and de-conflicted across the two networks, unlike with PrivateLink.
So WD is switching their hardware to in-house designed processors after purchasing a RISC-V developer, do I understand this press release correctly?
How do the banner or stats suggest he should have known about this?
The proponents of both have, in the words of a paper on the subject[1] agreed that "the two achieve the same distributive outcome through an appropriate tax-benefit system, [but] are fundamentally different from economic and ethical points of view".

Consider trying to introduce a universal health care system. You might say why do we need a system that subsidizes Jeff Bezos's health care? He can damn well pay for it himself, he might even agree since it's going to cost him less in terms of his tax contributions.

That's the equivalent of trying to sell NIT. Right out of the gate you have to not say "this is for everyone" but "it's just for the poor, but don't worry because...". That's what I mean by the marketing being different.

Of course with UBI the benefit is literally fungible, it's money. So it's really not like universal health care, but in the minds of a lot of people it is. They find it easier to accept the state providing a service if it's provided to them as well, even though it's a net cost center for them.

Humans.

1. https://mpra.ub.uni-muenchen.de/2052/1/MPRA_paper_2052.pdf
Who cares? I've found articles better than PG's best essays on at least a weekly basis. There are billions to choose from -- losing PG isn't going to make much of a dent.

Also, his last essays that I can remember, defending wealth inequality, were uninformed rbagege and (rightly) excoriated on HN and the wider media.
> I still can't believe more people complain about this being publicly disclosed than this being possible in the first place.

I think the problem is due to the fact that they are fans. In this case, it's Apple, but there's no reason it couldn't be Linux or Go or whatever. Regardless, any bad news about their hero is irresponsible to disseminate. We see this same phenomenon in politics, in sports and elsewhere — I daresay it's regrettable human nature.
nope. you can log in at the login screen, it creates a new root admin user
Now that this is public, it's likely worth passing this message on to non-technical folks too (e.g. share this or write a similar post - this is my only public post):

https://www.facebook.com/amar.sood/posts/10209545863036116
Sorry if I was not clear, I suspect that DRM caused the buffering issue, or at least an open source player could be implemented that could keep more back buffer so you can go back 30 seconds. Wouldn't be illegal to reverse engineer the players that include DRM? or you would have to be careful not to look at the bytes that implement the DRM.
I still think you have to give authors and artists a way to make money from their works, and in principle at least copyright is helpful. But copyright seems to be becoming effectively perpetual and that's not helpful. And the whole scientific publishing bullshit is even worse.
That's a thread for Sierra, this thread is for High Sierra.
from https://groups.google.com/forum/#!topic/chicagoboss/ekU5gZ_T... :

> And now, the bad news: it's been a fun ride, but I am planning to retire from Erlang and Chicago Boss. But don't cry for me: I've been having success with my desktop software business (wizardmac.com) and realized that going forward I will no longer have the time to dedicate to both CB and Wizard. (Incidentally I also left grad school a couple months ago to focus on Wizard.) Finished software products require a ton of focus and work, and I just don't have the mental capacity to manage two projects at once. I wish there were more hours in the day!
This bug exists regardless of user reproducing it or not. If there is anything good, reproducing it actually brings awareness to the user (make them change the password maybe). Hacker will "enable" the root user anyway.

What should be done is that Apple releases fix to this problem.
You appear to be describing the difference between a communist society and a capitalist one.

The elders, and everyone, helps to raise the child in the "agrarian" because they realise the benefit acrues to all of society, and they have humanity; the modern way is to not do it because you can do other stuff that makes you more profit and puts you ahead of the others.

People in "The West" are much more involved in competing against other people rather than cooperating with them.
I wonder who they're going to ask to write a public letter of apology this time.

This isn't just a snarky comment. They have just released the most awfull iOS upgrade for a long time, and now this. Something's messed up, and they better fix it soon.

I've think i've read somewhere they merged the iOS and macOS teams, i suppose the wrong people were promoted during the operation.
Is there any evaluation of quality vs quantity?

Technology adds more and more distractions, reducing effects of physical presence.
He lifted it several millimeters off the ground!
> It's unclear to me still how much of Startup/Founder Mythology was intended for PR purposes, and how much did startup execs end up believing for themselves.

Why choose? For a while, everyone who counted won - execs, investors, ibankers, even some of the workers, some of the time - when the rubes bought the line.

But eventually it starts causing problems - like when the rubes start actually expecting accountability. If you're the, ahem, ubermench, then you are also at fault when you screw up, as much as the Kalanicks of the world try to weasel, bully or deflect.

The sooner this bullshit dies, the sooner we can behave like a somewhat sane industry.
That was my first thought. Based on some bounty reports I've seen recently I would assume at least high five figures.
> Are we really ready for self-driving cars?

Firstly, car automation is machine learning, not programming. Completely incomparable.

Finally, we've known how to prove the absence of bugs for decades. It's not a matter of not knowing how, it's about incentives to do it right.
ARM chips have a much higher production volume so they are going to be much cheaper than RISC-V chips, at least for the foreseeable future.
No, it's just inaccurately titled. It only works for High Sierra
This is pretty much just the purview of R&D departments in general, which includes Mozilla Research. It's just a happy coincidence that, thanks to open source, software companies are relatively incentivized to share their projects with the public rather than keeping them proprietary, which is the default tack for R&D units in other industries.
It works remotely if remote login is enable.

edit: Screen sharing is is vulnerable not ssh. Either way its bad.
Kotlin 1.2
Fortunately, I'm OK. The latest OS upgrade failed to install and bricked my computer so that no one could log in, let alone root. I was able to restore it using Time Machine but I don't think I'll go through that exercise again for a while yet.
Security flaw lets anyone gain root access to a Mac running macOS High Sierra
why so Employers benefit from state provided infrastructure and from the education of workers.

Or are you suggestion that Amazon pays a tax for every truck mile they use or pay for the cost of their employees education.
and from my experience a self employment true 1099 contractors are ripped off by employers.
Typically with these systems they will continue running until you turn them off (or stall).
I would say it's pretty basic common sense, not to publicly announce ANYTHING that could immediately affect millions of people. Unless he's just a sociopath.

From his Twitter account, he's not just some layman stumbling across it.

Agile Software Craftsman, iyzicoder @ http://www.iyzico.com , Founder of Software Craftsmanship Turkey @scturkey, The community guy http://bit.ly/lemiorhan
Nah, that thread is just mistitled.
How do you square 'impossibility of competing' with rent-seeking? Rent seeking is when one obtains economic gain without creating wealth; if big capital is outcompeting you, aren't they providing more value than you for less?

Examples of rent seeking that come to my mind are things like obligatory licenses (license owners can charge higher prices because possible competitors are shut out of the market); excessive zoning (property owners extract value because no new property construction is allowed); subsidised production.

What's an example of rent-seeking caused by someone having a pile of capital much bigger than small companies, that does not happen through lobbying for regulation?
Yeah that was my thought initially too but there may be invisible ways to leverage an existing root user that we're not aware of. After all, this bug exists...
I'm sure many of us can often see how some kinds of bugs managed to slip through testing/QA, but this is crazy to me given it works on the login screen if it's happening for everyone on whatever version: is "user cannot log in as root when root account is disabled" not a test case? That seems.. insane?
anybody here was surprised realizing how much of life was known to people 2000 years ago, and no matter what the society and technology .. these ideas do matter
Thanks for answering. I looked at the video again and I can see that a couple of setups use multiple muscles- that's what you're talking about I think. I'm guessing that it's going to be a lot easier to wrap a hundred individual muscles of this kind around an artificial skeleton than it is with "hard" ones.

I wonder also what all this means for more, let's say, traditional robots- like the ones we often see from Boston Dynamics. I guess it's still early to say but if I understand this correctly, people can now make cheap, light robots. Where does that leave heavy, expensive ones?

It's not a rhetorical question- Ferrari and McLaren didn't hang up their spanners just because Toyota and Datsun sell lots of cheap cars...
These are great suggestions, but I am going to add my own, as an experienced mother of three. Whenever the getting-to-sleep process starts, once you've gotten comfortable, baby in arms or in the stroller, you have to let your mind wander, even if you're rocking or singing a little sleepy song. Babies can tell when you're sitting there thinking "is he asleep yet? how about now? what if we're up all night?" As long as your attention is in the room, the baby will be alert. Cast your mind outside of the house, think about the yard and the street, then just let your thoughts wander, almost as if you yourself were drifting off. You'll be boring, and the baby will fall asleep.
If they are even a little smart, they'll now have a test for this ;)
Edward Witten Ponders the Nature of Reality
What if it's a stolen laptop with an encrypted hard drive?
Is the authentication subsystem in a Tesla machine learning as well?