skysight-inc/HackerNews huggingface dataset:
The me-cleaner is getting more and more bugfixes over time. For the average person simply sanitizing a firmware image to disable the ME will be enough. The question is more at what point are you confident you won't brick the system doing it.

I have not done any research recently in the success rate of ME cleaner, but it isn't that low, it usually works to the best of my knowledge, and once we have good documented statistics saying "this works most of the time" it becomes more feasible for those not directly involved in its development to start using it more proactively to get rid of this vulnerability.
>It boggles the mind why not in a single one of the zombie stories out there nobody bothered to wonder where the zombies get the energy? The way most of them work it's like cold fusion landing in one's lap.

Zombies, like vampires in the pre-industrial age, are meant to represent the horrors that lurk beyond the limits of human understanding and control. Although I'm sure some author has attempted to "harden" zombies like that, to me the more you try to explain them, the less effective they are as monsters. Because they don't work rationally, they're demons of the Id.
Someone is salty. Feeling personally slighted today?

EDIT - to clarify, you shouldn't just parrot what some Stack Overflow answer says; we all know the horror stories of blindly copying stuff from there.

As you can see, W3C includes acknowledgements just fine: https://w3c.github.io/html/acknowledgements.html
Solidarity is one thing. $2,000,000 is another.
The same kind of rich people has existed for ever. It's fair to always take them in consideration.
0.) LastPass login page is hacked with a skimmer.

1.) Game over.
PAIRIN Is Hiring a Full Stack Web Developer (RAILS)
Or microservices are strongly indicated if you are in a SaaS industry as we are (HR software), where individual customers want choice over the components making up their own stack.
As a scientist, I can tell you that there is plenty of agenda in a lot of research. One thing in particular I take issue with is the notion that IQ is some reliable tracer of "inherent" and genetically heritable "intelligence". This is used to drive all sorts of agendas and has nothing close to what I'd call consensus among scientists.
A hiring freeze is when a company is no longer hiring fulltime employees. This is beneficial to consultants because if the company needs more manpower they will hire contractors instead.
> That source (Free Press) is an advocacy organization, so it by definition presents one side of a story. The pros without the cons, or something.

That doesn't make it wrong. You can research each instance and find it documented in other sources too.

> I'm in the boat where I trust companies more than I trust the government, and believe that the original NN regulation was a path for the government to start actively censoring the internet, China-style.

This belief is flawed or misdirected for the following reasons:

1. Revolving door policy, lobbying and elimination of PAC contribution limits for corporations has unified the two and for all intents and purposes there is absolutely no difference between government and companies when it comes to who should be trusted.

2. the government doesn't need to censor the internet anymore. For years, deliberate propaganda using sockpuppets has been proven way more effective in influencing public opinion than straight-up censorship, especially in western societies. Also, if you're looking at censorship, look no further than companies with no backbone but with a lot of greed, not the government (1) (2) (3).

3. Censorship is a different matter. I hate it when people bring it up to oppose NN as it diverts the conversation. NN is about regulating a public utility and limiting monolopies, not necessarily free speech or free internet (whatever the hell that means as I don't know anymore after the republicans use it to define exactly the opposite of what the common understanding would be). Regardless of regulation, referring to censorship, look at Comcast passing the buck (4): "We do not and will not block, throttle, or discriminate against lawful content. " Who decides what's lawful or not? If the Government deems far-left/right or any other website opposing something which the government/military-industrial complex deems as unlawful, how does that work with\without net neutrality rules? Just look at what happened to Wikileaks. Overnight, censorship and corporate economic boycott was in full effect, regardless of laws or regulations.

(1) http://money.cnn.com/2017/08/24/technology/business/cloudfla...

(2) http://blog.dilbert.com/2016/10/03/the-week-i-became-a-targe...

(3) https://www.nytimes.com/2016/07/30/opinion/sunday/the-blog-t...

(4) https://twitter.com/comcast/status/933394263689351175?lang=e...
While the focus is on the original business case for building Mega planes like the A380 the knock-on/hidden impact of closing the A380 line has detrimental impact on Airports that invested millions into being 'A380 ready'.

Airports around the world spent millions of dollars building out A380 capable terminal gates, wider taxi-ways and bigger baggage handling systems to deal with A380 arrivals and departures. Food caterers invested money in special trucks that deliver food to the upper deck. At the ATC level, slots and flight seperation guidelines were changed to accomodate the whale jets. Some airports were chastised for not investing fast enough (ORD?, SEA) to be A380 ready. I guess they now look wiser. The death of the A380 will reduce risk taking by airports in the future.

Failed aircraft projects have a large negative impact on future appetite for these crafts. Just look at what happened to supersonic flight. We have not seen any commercial investment and research into supersonic air travel. While the case can be easily made against these white elephant projects, the knock on R&D benefits of these airlines projects are amazing.

Selective R&D 'Hand of God' moments that allow government support could be the solution here. At minimum, it would be great if China, Japan or any other aspiring aerospace super powers can buy the project and invest in its future.
1password registers a specific keyboard... but I'm not a big fan of that method. It's a terrible keyboard tbh.
> when those people try their best to provide accurate information

It is not enough to trust them to do their best. Journalists should be in a structure that strongly incentivizes telling the truth and strongly punishes false information. It is very unclear that US media outlets, almost all of which are highly politicized, have this property.
As many other commenters have pointed out, it is possible for net global wealth to increase (e.g., the increase in total real GDP). As far as I understand, the main reason this is possible is the development of new "technology" -- in the very general, economic sense of the word technology [0], which includes anything that increases the productivity of a single worker; this can include everything from new technology in the traditional sense to new processes (e.g., agile vs. waterfall for software development, or more optimal supply chains) and investment in infrastructure (e.g., better road networks).

For example, a single farmer today can not only produce many times more crop compared to a farmer 100 years ago, but also safely and efficiently distribute this produce to consumers across the globe. In general, assuming everyone in the economy works equally hard, the total production (i.e., the global net wealth) can increase as long as technology is increasing.

[0] https://en.wikipedia.org/wiki/Production_function
Note that this document is dated 2017-12-05, so it's not anything new to those who have seen the previous items about ME on HN.

According to page 12, one of the conditions for remotely exploiting this is that AMT has to be activated, something which probably isn't going to be true for PCs used at home and not part of a corporate network.

Such a vulnerability has the potential to jeopardize a
number of technologies, including Intel Protected Audio Video Path (PAVP),

Good. Fuck DRM.
Are you saying stock value increases only come from reducing employee benefits and compensation or from lowering the quality and safety of products and services? Seems like that is simply not true across the board. If a company sells say software they could easily grow revenue and profits without changing their product or reducing employee benefits and compensation. Their earnings would be higher and their stock would go up.
> What can an ordinary person do?

Use non-x86 platforms such as an ARM based Chromebook, or potentially an x86 with the ME partially disabled (coreboot or similar, but it's not a 100% guarantee).

> Plugging out the network cable?

It depends on the vulnerability scope. If it's over HECI (virtual PCI device between host OS and ME) then removing the network cable won't save you from local malware owning the ME via HECI.

> But then again the moment you plug internet back in you're done.

Well considering how few people ever update the firmware of their devices, it's unlikely a majority of computers would ever be patched against an ME vulnerability anyway.

Starting with ME12 Intel is going to start checking the ME firmware version number in the ME's silicon (read-only) boot ROM to prevent firmware downgrade attacks. [1] This version number is stored in single use eFuses which can only be incremented, and are during an ME update.

But it depends on your threat model. As stated in the PDF, there are only 3 known exploits against the ME, and only one results in unsigned code execution. Until someone weaponizes such an exploit, which at the moment it seems physical access is needed, then Intel x86 owners are safe.

If your adversary is a three letter agency or nation state attacker, then you've got bigger concerns than someone hacking your ME (starting with, say, your OS).

[1] https://github.com/corna/me_cleaner/issues/111#issuecomment-...
Ahhhhh no, but you might want to check your confirmation bias.
1.) Find exploit in forum software/server.

2.) Modify login.php to send form username/password to attackers server.
An ordinary person can buy a PC with it disabled. Dell has started offering to disable the management engine for $30. Choose "Intel vPro - ME Inoperable, Custom Order" when ordering.
Ah, I see.

Is cotton production significantly affected by oil shortages? I thought cotton was an issue mostly because farming it is water-intensive and too much of it is produced in dry regions.
Most buzzword chasers end up implementing a distributed monolith.

Services work well when you have one or two services per team, the problem space is divided in the right places and the teams provide a service to each others, not code.

When you see more services than developers it's often a bad sign.
And which just got revealed,and will probably be fixed.
Project Galileo
Many flights in Dubai happen late at night / very early morning due to a combination of time zone alignment and daytime heat making it harder to service large planes.
That's not what I said. I didn't have a problem. It was mostly women in their 30s and 40s who weren't slim and didn't have the "instructor body". Even though they were usually in better shape and taught classes that were physically tougher but didn't always teach more complicated but physically easier classes.

A lot of the women didn't want to work hard. They just wanted to have "fun".

I got a pass from students because I was a male and they didn't expect me to be dancing and prancing across the stage. I had people said they were going to try my class because "I looked like I would give a good workout". That was when I first started and I really sucked when it came to the fundamentals.
What is harmed most directly by publicizing Intel ME vulnerabilities?

Is it in the interest of this entity to restrict the publication of Intel ME vulnerabilities to the general public?

How does the general public obtain information on a day to day basis?

Who runs the mass media?

Is the mass media affected by this entity?

Is the mass media narrative influenced by this particular entity?
> it's usually the wealthy that benefit from inflation

Inflation is a regressive feature of modern currencies. It transfers wealth from lenders to borrowers and away from investors. The degree to which it does so is a function of the amount of wealth one has.
The Guardian isn't perfect, but you can't seriously compare it to Breitbart, which intentionally distorts facts on a regular basis, and goes out of it's way to sensationalize and offend.

Would the guardian be caught dead printing these?
https://www.mediamatters.org/blog/2016/08/17/breitbart-news-...

Or have they peddled lies as big as these ones?
https://www.snopes.com/climatology-fraud-global-warming/
https://www.snopes.com/immigrants-california-wildfires/
https://www.snopes.com/planned-parenthood-satanists/

Look, maybe the media has a left bias. And it's plausible that right-leaning sources face more skepticism. That's not fair. But the reason Breitbart gets flack is because they really are that terrible.
Yes, it’s interesting reading, but it is unlikely that the GP is a devoted Arian.
The 747-400 set the stage for large aircraft that could be operated with only a pilot and co-pilot. That, in turn, paved the way for the 777's fancy new avionics. Those avionics then went down market, including the then-new 737NG.

At least, that is my insider's perspective from the era (95-00).
The irony is that AFAIK the ME cleaner itself depends on exploiting some vulnerability in ME in order to disable it... so it may get more difficult in the long term.
Current military here. Starting the process of resigning and will be out in around a year. I’ve gotten some great training, but after ten years, the job is becoming a PowerPoint and briefing hell. My masters is in CS with a focus in machine learning, so I’ll be trying to find a position leveraging that or my work in network security.
This is true. High efficiency and low carbon emission are not always in the same boat.
For whatever reason I always get too tempted and have to jump into these crypto-arbitrage posts that appear on here about twice a month.

This is by far the most informed reply I've seen in all those threads I've read.

Especially wanted to highlight the last two sentences: there is no way to do risk-free arb in crypto due to counter party risk with exchanges. Even if it might seem small, it isn't small! The opportunity size, scale, roi, etc need to outweigh that risk and (despite playing in this sandbox which I guess makes me a hypocrite but w/e, just trying to help...) I don't think it is worth it right now.
If you were to write a review of a product you really liked, how would you do it differently?
Decent switches are relatively quick. It's not instant, but in my house close enough that I open the door, say "Alexa turn on the lights" and lights turn on before I close the door behind me.
Extremely relevant, there's a rational fic that's about exactly this topic: http://archiveofourown.org/works/3451040/chapters/7569143
But Israel occupies a large portion of the Palestinian Territories and maintains settlements throughout the occupied lands.

As the saying goes, Israel wants to have its cake and eat it too.
It is patenting the application of math.
Right. So in other words a VPN isnt actually a work around at all.
Are there any statistics on what portion of parents actually tell their children that Santa is real? I was raised in the Midwest US in the 90s, in a conservative Christian family, and as far as I can remember I never thought Santa was real. My parents confirm that they talked about Santa and wrote “from Santa” on some Christmas gifts, but they never intended us to believe Santa was real.

I also don’t remember belief in Santa to be common among my friends. I remember one friend who expressed belief in Santa as a supernatural being, and everyone poked fun at him for it.
Seems like it would be better if modeled after the criminal justice system. You have to prove beyond a reasonable doubt that the invention is novel and patent worthy. And duration of the patent should be dependent on its scope, and reviewable in the future. Of course this may be way more expensive, can't say I've calculated out the economics of it.
I appreciate the reporters critique, but what I believe they're missing is that there's an inherent value in the network and its market share in the space.

Bitcoin is not the check, it's the store of value and the bank. Bitcoin is the investors, developers, the miners, the ledger, wallets(accounts), the speculators, the store of value. Bitcoin is the headline maker in the WSJ, NYT, etc. That multilayered coupling is what makes BTC valuable.

The reporter talks about intrinsic value of companies, cash flow etc. The underlying healthy and stable economy is not some axiomatic truth. With BTC, You have all of the components to have currency emerge into existence and stay from bitcoins incentive system.

How much is it worth? That depends on what the alternatives are worth, and that evaluation changes every day. I hope it's long term near worthless, but you can never be too sure.
A high price on an exchange is a symptom of problems withdrawing national currency. In order to get around this issue, users will spend their on-exchange national currency by purchasing e.g. bitcoins, and then transfer these to their wallet or to another exchange (where they can sell and withdraw the proceeds). This buying pressure pushes up the price, as measured in national currency.
In the early years of the post-communist era state disintegration that is currently going on in Bulgaria, the national airline "Balkan" was sold for a funny sum of $150k [1] and subsequently liquidated supposedly netting a lot of unaccounted money for its valuable slots.

[1] https://en.m.wikipedia.org/wiki/Balkan_Bulgarian_Airlines
I’ve wondered about this. I was keenly interested in programming as a kid, but I was never into hardware or operating systems. I wanted to write text based d&d style games, as well as simulate outcomes from dice games like risk (or know the odds of one character defeating a monster).

Those are real programs, but looking back, I actually do think this might contain a seed of why I never did become as strong a programmer as my peers from those days. I floated away fr programming, got into writing and music, floated back in. Some of my peers from those days couldn’t take their eyes off computers, it was a deep fascination.

There are lots of good ways to be a programmer. But the real experts do seem to have a deeper fascination with the inner core, the hardware, machine code, actual design of programming languages (debates about ruby vs python or similar almost always go beyond my depth, I just like how ruby looks on the page. I just like how quickly I can get my answer in python).
I don't know that make is a good example here. This is a tool you use constantly, so I imagine you'd know to pipe std err if you wanted its output. We seem to be talking about turning the terminal into a full blown editor (when we already have editors...) to satisfy a rather limited use case of 'oops, guess I have to run that again."

But hey; your time to spend :)
> I would love to use one of those fancy graphical terms that comes up on HN every now and then

One of these (Black Screen) is among the many inspirations with which we started.

> Any attempt to improve the terminal has to be something that I could switch to on a whim and then gradually grow into.

Backwards-compatibility is a hard requirement for us because of that. And oh boy, it causes a lot of pain.

> I've essentially duplicated the evolution of HTML+JS webapps

This is a huge fear of mine. We need to find a way of opening the GUI can-of-worms without ending up with terminals that are as bloated as contemporary web browsers.
That just pushes the problem to the next trade. Even if you diligently keep your accounts funded, you’ll need to rebalance them after most trades (by definition of arbitrage), so your velocity will eventually be limited.

Concretely, imagine if every ten minutes you made an arbitrage buy on GDAX, and sell on BitFinex. As long as GDAX remains the “buy side” of the arbitrage, you will need to keep refilling your fiat funds at GDAX. You could “keep it filled,” but this becomes more unsustainable as you deplete your bankroll. You will eventually need to rebalance which will affect your velocity.

Disclaimer: I am not a financial professional.
Hardly a unique phenomenon. In society we have so many terms as a nod to their (deceased) inventor(s), or as a nod to a (deceased) person of interest.
As you write, not comparable, but in their defense, NASA's administrative side is pretty thoroughly hoarked. It shouldn't suprise anyone that they occasionally make idiotic decisions.
Compare the "regular" person of today to the "regular" person of 50 years ago.

Is it easier or harder to afford basic foodstuffs?
Do they eat out (luxury) more or less?
If they own a home, is it larger or the same size?
Who travels more?
Who has better healthcare?
Who spends more on entertainment?
How much do they spend on the family pet?
Who spent more time furthering their education?

All of these are measures of wealth, and the modern "regular" person would be wealthier in every one of these categories. And that's not even factoring in advances in technology that make the quality of life of a person better even if there share of societal wealth goes down.
It doesn’t have to be symmetric. If there is $2 consumer and $4 producer surplus, both parties benefit.

And just because enrichment, as you call it, can happen other ways than exchange, does not mean it doesn’t happen via exchange too.
Yep, I've tried to do arbitrage on one exchange during dumps (there's quite a lovely way to realize there will be a massive dump done on the exchange) and most of my trades couldn't even execute because the trading engine can't meet the demand.

When you look at the price history (and open orders history) between some pairs on one exchange you'll find that during these spikes there was no arbitrage being done at all.

One example is seeing the price on ETH-BTC pair being constant despite BTC dropping 10-20%, and then combing back in 5-10 minutes.
In Ruby, God === Jesus.
The Washington Post, IMO, has taken a serious dive in the past few years. Unlike the NYTimes and WSJ, WAPO has simply become another click-bait, hit-piece site like Salon or Buzzfeed. It's shameless.
They're owned by Citrix so they have automatic credibility.

In this case, the name is important too. It's easy to remember and it explains the product as well. The only alternative with a better name is 1password
Lots of remote companies if you look hard enough. Wikipedia and Automatic come to mind.
I removed Intel ME from my Thinkpad x230 last weekend. I highly recommend this machine. Still quite powerful, very serviceable, upgradeable, Linux friendly and cheap (you can get one in good condition for ~$150 USD in USA).

I used the following guide (very easy to follow): https://steemit.com/tutorial/@joeyd/run-don-t-walk-from-the-...

EDIT: You can also get a laptop with Intel ME disabled. As far as I know you can get a modern laptop without ME from System76, Purism. For a while Dell offered such machines, but that might no longer be the case.
I stopped disclosing what I do for a living a long long time ago.
I'm not surprised that the IDF targeted the unarmed amputee in a wheelchair...