skysight-inc/HackerNews huggingface dataset:
The Kernel being mapped in userspace isn't actually used in any of the current hacks though. ROhan, the only implemented and public way to get userland Arbitrary Code Execution, uses ASLR leaks in both Webkit and SDB.

Kernel being mapped in userspace is interesting for save hacks though, which would allow us to escape out of the webkit process (webkit is limited to 700MB of ram, so escaping into a game process is very much interesting).

The SMMU bypass is not usable outside of 1.0.0 for Kernel ACE. They have a carveout that denies DMA access to builtins and kernel, the problem is that in 1.0.0, the Kernel would allocate some objects outside of that carveout. It does allow ACE in any other process though.
We know about that. Let's not bother to talk about it; it smells like trying desperately to change the subject. We're talking about how, with all that you said about financial markets, bitcoin is worse. Saying "but the financial markets are manipulated" doesn't refute the claim we're talking about whatsoever.
You can get pretty rich on salary (say, 95th+ percentile net worth), it just requires:
1) a lot of time, like 20+ years,
2) living below your means,
3) investing consistently, based on savings from the previous,
4) don't screw up (much.) one bad investment decision or a nasty divorce can derail all of this.

If everyone could do it, we'd have a lot more millionaire-next-door types.
1. Essentially, yes there's a list. Since there doesn't exist a higher level formula to identify primes it's been verified by some variation of a brute force method.

2. That all smaller primes are known can't be verified. Primes of this size are usually found by a number of formulas that find "likely" primes and then verified by brute force (afaik). Because of that fuzzy match to start there might be smaller primes that haven't yet been identified.
> What about your email address? Your publications? Your personal projects? Your github?

What portion of people do you think have any of those other than the email address (which for many people's personal addresses doesn't even include their full name)? For my wife at least, the email address is what convinced her to change her name because it made it possible for her to get the address firstnamelastname@gmail.com.
Sorry, I’m not buying it. It takes supervisor approval to void a duplicate scan of a $3 item at Trader Joe’s. No way in hell does an emergency alert system allow just anyone sitting at the computer to send one just because they want to.
It is there is, technically the act of finding vulnerabilities especially over a network is a violation of every computer crime legislation I know off.
Oh, the elusive toaster/fridge hybrid.

https://www.pcmag.com/article2/0,2817,2403481,00.asp

This type of products is always higher cost, higher maintenance (two different powertrains), and generally the worst of both worlds (small battery and weak ICE).

The future is fully powered EVs. If buses and semis can be that, then certainly passenger vehicles can, too.
Go to a bank and they’ll give you significantly more money than 1000 euros. At a certain point you’ll be expected to explain what you need the money for (anti-laundry efforts).

For safety reasons, you might not want to carry around cash. So banks provide cash-like instruments that are safer to walk around with.

Also, often “cash only” includes debit cards. In which case you debit card limit is probably an order of magnitude higher than your daily withdrawal limit.

Finally, do what I’d do as a poor grad student unwilling to pay bank fees: start withdrawing a week in advance ;)
Free Your Mind from Smartphone Addiction – iWithdrawal
One of the few remaining forums with articulated content.
Hospital chargemasters are required to be public in California https://www.oshpd.ca.gov/Chargemaster/

Unfortunately,

1) The price agreements between hospitals and insurance companies are confidential, as both sides compete in their own industry and don't want to reveal their hands.

2) Consequently, chargemasters post some ridiculous price per procedure (with discounts available, naturally, to insurance carriers, who are the bulk buyers in the business). Which makes chargemasters similar to list prices you see at most retail establishments - only schmucks are expected to pay those.
That did look interesting. eg:

https://neuronmocap.com/content/product/perception-neuron-li...

But, pretty much Windows only. :(

They do have one demo + their data reading SDK also working on OSX. Not really sure if that should be considered real OSX support though:

https://neuronmocap.com/downloads

Reading the license in the SDK, it's 100% proprietary. My interest completely died at that point.
Fashion and Politics
Funny because I just went the other way. I was running Arch/i3 on a Lenovo W530 I had for work. At some point I couldn't take it anymore. I wanted to use my headsets over bluetooth. I wanted to have no issues with monitor DPI and scaling and the dreaded optimus Nvidia technology. I don't want to have to think about which port I use to connect to an external monitor. I want Wifi to be a solved problem. Boot the laptop, choose the network, enter password, done. I want good battery life and the most basic compositing features enabled.

In hindsight it's crazy that I'd fiddle with WM_STATE_SOMETHING in compton so that X has shadow but Y doesn't if they overlap with transparency (or something like that). My dunst notifications looked very aesthetically pleasing but... so do countless default notifications on mainstream distros.

Yes, the whole mopidy/mcp/whatever looks really rad, especially if a program uses vi(m) keyboard shortcuts, but my music player really isn't something I want to think about and learn. Playing music isn't such an integral part of my work day that I need to make it more efficient.

I am now using a MacBook Pro at work and on my desktop at home I use Antergos with Gnome. The latter is perfect as it gives me up-to-date packages and easy access to the AUR, while still coming with the bells and whistles of Gnome.

I am also not sure if tiling windows really improve your productivity. I would say that most people would be better of having their apps on full-screen, to minimize distractions, instead of having all sorts of windows side-by-side.

Ultimately I nowadays resonate more with what some other posts have mentioned: pick a platform and programs with sane defaults and only deviate from them if it's really worth it. If your job requires you to look at several terminals at the same time constantly and things like terminator/tmux/gnome-terminal don't do it, then sure, look into i3 (herbstluftwm/[insert flavor of the month]). Anything else I would now consider premature optimization.
After reading this article [1], I created a small "disconnect box" that sits by my front door (it's a repurposed iphone box). When I'm home, and especially when the kids are awake, the phone stays in there. I can hear if someone calls, but otherwise notifications are off. Working quite well so far!

[1] https://www.theglobeandmail.com/technology/your-smartphone-i...
DAUs? Really? Do you have a citation for that figure?
Is that rose tinted glasses / nostalgia though? Do you have a bunch of examples to support your conclusion?
Interning at Boeing in 2005, when the Dreamliner was still 2-3 years away from production, I asked a BD manager if Boeing was worried about A380 (the burning question at the time was "Who is going to win, A380/Airbus or Dreamliner/Boeing").

Without pause, he said "Not worried at all, A380 serves the hub and spoke model, which is dying. People hate layovers, they want more direct flights."

Not a hard insight to grasp, and one which seems to have doomed A380 from the start.
In Finland we have an official 112 (that’s our 911) app which you can use to make the call and pass location info.

The app will send the phone number and coordinates and then initiate a normal call. Officials can see the calling phone number and connect that to received location.
I had a previous landlord who was a shady motherfucker who wanted to "play businessman" but had no business skills and ignored the law with his various "businesses" and was a general terrible human being. After I moved out I reported him to the town (for violation of various town rental ordinances), the EPA (for violation of lead paint safety statutes), and the banking department (for violation of security deposit collection laws).

He got his comeuppance.
Chances are the prosecutor can manipulate that evidence to look good to the judge/jury much better than the defense lawyer can make a counter-argument for why it cannot be used in court. At least that has been the trend with stingrays and other bleeding-edge surveillance technology that is poorly understood by judges.

The prosecutors are backed by government and FBI resources (including technical expertise). Your average defense lawyer isn't. Hell, the FBI was even teaching prosecutors and the police to say that using a stingray was under NDA with the company providing it and therefore they couldn't talk much about using it in court (but still benefited from the gathered evidence).

https://www.scmagazine.com/fbi-stingray-nda-instructs-police...
"Cash" here means 'not wacky insurance schemes'. Their FAQ says

"To keep our prices as low as possible, cashier’s checks or cash are the methods preferred. Credit cards are accepted on a case by case basis. Human resource departments or divisions of self-insured companies can make other arrangements if necessary."

(They also have a partnership with some sort of personal loan/financing company which presumably would take credit cards or bank transfers.)
> A bunch of seeds and a pot of compost?

...and a location with proper sun. Outdoor-sun-grown weed... that brings back memories.
Highly parallel direct RNA sequencing on an array of nanopores
I agree, the version of the paper published for the Workshop on the Economics of Information Security http://weis2017.econinfosec.org/wp-content/uploads/sites/3/2... has a large number of small mistakes and the statistical analysis performed is pretty poor and badly explained.

And you're right, it is not really market manipulation, it is blatant fraud by Mark Karpeles and he will almost certainly be found guilty of that charge in Japan. It is strange that the paper makes no mention of his conviction for fraud.
You're using different meanings of the word 'anarchy':

2. (uncountable) Anarchism; the political theory that a community is best organized by the voluntary cooperation of individuals, rather than by a government, which is regarded as being coercive by nature.

3. (countable) A chaotic and confusing absence of any form of political authority or government.

4. Confusion in general; disorder.
If you're going that way, you can also interpret it - pardon my programming - as the following:

int result;
for (int i = 0; i < 77232917; i++) {
result = 2 * 2;
}
return result - 1;

... which obviously results in 3. Also a (mersienne) prime, but not quite as big as you'd expect, and certainly not millions of digits long.
Since I wrote the software for a 911 CAD (computer aided dispatch) used by a primary PSAP (public safety access point) -- yes.

But... The 911 operator has to initiate the SMS exchange. Kind of strange. I believe that, in certain jurisdictions, TDD service for the deaf was a revenue stream for the incumbent telcom carrier. So, cell phones are specified to have to be "registered" to allow 911 SMS (this is just my speculation). The 911 operator has to initiate the exchange (in the areas that the system I work on is used).

Incoming 911 data already contains location data (from tower triangulation, etc.). More interesting is that the 911 operator must manually request location updates (secondary reports) and that these cannot be requested more frequently than 35 seconds apart (again, these regulations apply in my area). Again, stinking regulations.

Anyway, the data available (formats) are documented by NENA (National Emergency Number Association). www.nena.org. But... carriers (Bell, Telus here) use supersets of those formats.

The problem is not flexibility -- the systems are in place, and must inter-operate. IP networking for these systems is not completely in place (some use serial communications). The cut-over to IP networking is still on-going, and some places use parallel serial and IP networking.

And, of course, 911 operators get ANI/ALI (automatic number identification, automatic location identification) data for home phones (ALI by database, usually), and the mobile needs to be incorporated in such a way as not to confuse the dispatch operators.
I agree, and think it might be smart to include "Iowa" and "Missouri" among the foreign countries SFBA startups hire from.
Also potentially https://common.net/ though I’m not sure which specific transmission mechanism they use.
Because you're clever enough to restore from a clean backup, and double check you're patched up and not running untrusted code. You're on HN, after all.
It’s trivial to implement a channel read with timeout using select and time.After(). The first N google results for “golang channel timeout” show exactly that.
That’s like saying the recent California wildfires are equivalent to the Great Chicago Fire.

Both are tragedies and both have a certain element of scale to them, but the Chicago fire was actually much much worse. It killed far more people, made far more people homeless, and destroyed far more economic value (adjusted for inflation).

Yes the current regulated markets have serious problems and are in need of reform. But the scale and scope of fraud and manipulation on all crypto currency markets is vastly larger and far more pervasive.
> I can't have edited after you posted that comment, because HN doesn't apply [allow?] comments that have been replied to to be edited.

Is that true? I'm pretty sure I have edited comments after they have been replied to, as long as it was within the two-hour edit window. But I could be remembering wrong.

Want to try editing your comment now that it has one or more replies and see what happens?

Edit: Testing an edit after this comment has been replied to. Indeed it can be edited.
There could be more hubs though. Pittsburgh was once a major hub. Could it come back again? Any other airports like that?
So they will see that the phone was on continuously for two years, then the night of the murder it was switched of for 6 hours and has been on ever since. Not at all suspicious...

(this is data your service provider already has, and I wouldn't be surprised if this is already used to flag weird behaviour)
Homelessness in the Bay Area (2017)
I think you can't have it both ways. Either you hire only accredited investors (and personal connections), or the job candidates have no legal way to acquire equity.
Mishaps That Might Have Started Accidental Nuclear War
Firespotting – A Hacker News for Ideas
Which search engine do you use? I don't think it's possible to search for "Cudalasa" and not immediately be corrected to "Culadasa", seamlessly and with zero ambiguity.

In which case, why are you even pointing this out? The commenter spelled a name wrong and anyone with a single ounce of intelligence can understand from context what was meant.
Good point. But the person getting an extra $10,000 a day for losing an hour of sleep every day would need financial discipline (harder when we don't sleep) not to bump up their expenditures otherwise it would just set themselves up trading health for short term financial gain. It's very difficult to just snap your fingers when you're wealthy and overweight with blood pressure issues in your 40's and 50's to get back to and maintain a normal BMI for the rest of your life.

I think the hard part is that cooking and cleaning (some items) can be done while effectively multi-tasking, chatting about someone's day or collecting one's thoughts. I have a young daughter and when I put something in the microwave, cut up vegetables, fetch spices, or load the dishwasher, we can generally keep the conversation and activity going. Cooking or baking something from scratch is obviously much more time-intensive. Getting food delivered doesn't really save that much time. However, cleaning the bathroom or vacuuming are generally blocking activities and thus easier to rationalize outsourcing. I would agree that we as humans have a very hard time valuing our present and future time, so I would always love to have sometime critique my day. "Hey, you enjoy your job at tech company X enough for the next two years, so it seems like you can afford a laundry service for the next 10 years, time which you can spend more at playgrounds and working out, why don't you do it?"
Calling it brute force isn't quite right. There is an efficient algorithm for prime determination (Lucas-Lehmer primality test) on Mersenne Primes (numbers of the form 2^p-1).

https://en.wikipedia.org/wiki/Lucas–Lehmer_primality_test
Given that we know that there are infinitely many primes, why are we interested in knowing ever larger ones?

It's somewhat like asking, what is the largest known natural number?
Unless you live in a van, or in a low cost of living situation, which admittedly 99.999% of programmers choose not to do thanks to the power of "lifestyle inflation".
It's a tool specifically designed to allow the first party to open access to a third party. It doesn't lock anyone out of anything.
Depends on the airline. Most Middle Eastern airlines, for example, own the aircrafts they operate though a small number were indeed leased.

A brand new A380 lists for $300 million dollars so not all airlines have the cash to pay for them upfront, enter leasing companies who put down the capital and rent the planes out to interested airlines. Normally when the lease expires it is off to another renter at a marked.down price, however in case of the 380 this may be a bit difficult since only a few airlines have enough volume out of hubs to fill the plane, and chances are they already have more aircrafts than necessary.
True, but it sucked that Coke was so hard to find.
The problem is that you cannot simply ship a not "absolutely perfect" plane. Or, actually, it's not a problem but a blessing given that there were no commercial flight related fatalities in the USA in 2017 (per http://www.latimes.com/business/la-fi-aviation-safety-201801...).

No doubt: Without the drastic levels of regulation the FAA (and JAA) impose on civilian flight, fatalities would be orders of magnitude higher.
Yes and no.

No, it's a descriptor. In the debate about the best way to handle knowledge of vulnerabilities, there arose a vaguely-bounded subset practices that got this name.

Yes, it's also great marketing. Whatever has the name implies that it's the best of all possible alternatives, fait accompli.
Leaflet has been a pleasure to work with. I recently used it to build animated wildfire maps, such as this one of the Thomas Fire in California.
https://firetracker.scpr.org/thomas-fire-santa-barbara-2017
Realize that what i least liked about me was me a part of me I was that person- it gave me the leeway to appreciate my humanity to put myself in your shoes
Teamspeak Client portable for Windows
The context is a historical fact. I think you mean the motivation. And that is a historical fact as well, actually.

The unfortunate fact is that the policies which India's leaders thought at the time would lead to better wealth distribution and economic growth didn't work as expected and economic growth was significantly impeded. India wasn't alone in this failure, China also suffered under the same problem, due to similar problems with a top-down command economy dominated by public sector.

> It's plain to see that inequality is considerably worse now.

Again, that's not an issue with the context, but with execution. And the inequality you see now is more because after the liberalization of 1990, while certain sectors and people working in them grew tremendously, others were left behind. And the tax system in India was broken, so wealth redistribution through taxation also did not happen as expected.
Which deregulation? The data in this study is from 2015-2016.
Token Incentives Are F*cked Up, Here’s How Vesting Should Work
This is a philosophical difference, in a way - running an asset-light business vs an asset-heavy business. Hotels have mostly moved towards not owning their properties, for example.

Increasingly, many new orders of aircraft are leases. However, they are not usually leased directly from the manufacturer. The airplane is usually owned by a holding company ("trust"), and tranches of the trust are sold to investors - somewhat similar to a mortgage bond.

The benefits of this is that investors from all over the world can invest directly into the airplane, then lease it to the airline. The plane itself is the collateral, and international treaties make it easy for investors to retrieve the plane if the airline isn't making its lease payments. They could then choose to lease the plane to someone else, sell it to someone else, or to scrap it for parts and materials.

What are the benefits for airlines? Typically, if things go south, they don't owe anything beyond giving the aircraft back. Also, given that many US airlines have gone through Chapter 11 recently, I'd assume they wouldn't get great interest rates if they actually want to buy the plane - it's likely cheaper for them to lease through an EETC. For example, American Airlines issued a bunch of EETC's the past few years.

It's a fairly niche subject, so the wiki page isn't too great, but here it is: https://en.wikipedia.org/wiki/Equipment_trust_certificate
Yes, it's used to castigate hackers who don't do exactly what the vendor wants. And the more common term now is "coordinated disclosure".
No one can predict the next prime. That's why people want to compute the next prime.
Dang ol' off-by-one errors.
This reads as similar problem as https://www.exploit-db.com/exploits/14875/ (which impacts certain Dell switches)

What is somewhat relevant is that for most of these Accton switches exploiting this vulnerability is the only way to perform factory reset of switch that you don't know password for that does not involve paid out-of-warranty service. To some extent I'm able to believe that this money-grab is the reason for existence of the whole backdoor, only the manager who had this brilliant bussines idea didn't expect that the password generator would get reverse engineered.
The Dark Path, or, What if I Don't Want to Quit My Job?
Maybe enable voting only while viewing an item could work, to ensure that the reader at least saw the discussion or description.
You can do more with your email signature
Even better, I find that not murdering people is a much easier solution to this problem.
The USD backing Tethers could be used to buy Tethers! Instant capitalisation!
The 7.5% is not income tax - it's just salt-duty! If we were to add a 7.5% duty for salt alone to your current 50% tax burden, I'm sure you'd be marching too.
The Borg would be a better analogy; Skynet was just an AI with a specific purpose, no hive-mind about it.
Building Pogo
The number of seemingly throwaway accounts (created in the last few days) commenting on this thread is interesting too:

- https://news.ycombinator.com/threads?id=astund

- https://news.ycombinator.com/threads?id=simplemath__

- https://news.ycombinator.com/threads?id=zhjansbnas

- https://news.ycombinator.com/threads?id=barbegal
Oh fuck off. What are you even on about? You think drug cartels are diversified investment portfolios? Ones that can just sub one illegal commodity for another?

You're out of your fucking mind. And if you can't tell how out you are from the first line, you can tell when you assign a moral aspect to the things you don't like.

Jesus, you're a piece of work.
lmao, I imagined doing this one night, as a thought experiment. smh
Well whatever I don't edit my comments after they've been replied to. And it wouldn't make sense to have edited because I've repeated the same information several times in replies to my replies.