skysight-inc/HackerNews huggingface dataset:
In this particular attack, it looks like the attacker measured the power drawn over USB. This could probably be defeated by buffering power.

Include some kind of energy storage on the device, such as a battery or an ultra-capacitor. Your external power source (e.g., USB) charges your storage device, and your computation is powered from the storage device. Only charge the storage device between complete operations.

Someone watching power over USB would then see no power draw during key operations, and a smooth power draw between operations.

If your threat model includes attackers that will be able to probe inside the device while it is doing operations, and so who could look at the power on the far side of the battery or capacity, then buffering power won't be sufficient.
The best case for GitHub would've been for Redhat to acquire them :-(
Just feeling sad for what has happened. Microsoft is in it for business. Talking about "change of heart" for a company is bullshit. It's all associated with the business model one way or the other. RedHat would've been the best model. Imagine. Buying GH, open sourcing it, selling a self-hosted version of it for paid support....
PLAYBOY GISELE – ESCORT ATHENS – ESCORTS ATHENS – ESCORTS
As true as this is, unexpected problems happen. Kevin may be the only one that can fix it, or at least be able to fix it a lot more effectively than others. The issue might not be Kevin's fault (i.e it's really a process problem), but being able to talk to him immediately (or at least know his schedule) will go a long ways in getting the issue resolved in an acceptable time frame.

Nothing against remote work, but knowing everyone's typical working hours makes things run a lot more smoothly.
> So again, it cures the symptom, but it benefits only the person with the loudest voice in the room, and not the one with sound reason.

..or even just the facts. I have, on (fortunately rare) occasions, refused to heed a manager's encouragement to speak with someone directly, because my disagreement isn't even about reasoning, but about facts.

It can be remarkably frustrating to have to repeat the same thing to someone who believes in something that is demonstrably false. At least over e-mail one can copy-and-paste.

It's as if (some) people can't tell the difference between matters of fact and matters of opinion (or judgment).

It may be true that face-to-face is best at resolving contentious disagreements on matters of opinion. However, I'd think it could only be true if those disagreements are based on everyone reaching their opinions from the same facts, and even determining if that's the case could easily be short-circuited by a premature opinion (e.g. loudest voice in the room).
> The only way forward is to stop group-based identity politics completely

I agree, that would be ideal. How do you propose to accomplish it? And failing that, which you almost certainly will in any conceivable timeframe, what is plan B?

Plan B is the problem we need to solve.

> things are changing for the better

Maybe, but the project is a complete failure unless success is measured in centuries. It's 2018 and discrimination against anyone who isn't white-skinned, male, and in narrower circles, Christian, is still overwhelming. White guys make up 33% of the U.S. population but absolutely dominate business, politics, tech -- as you look around TV, the news, etc., remember that an even distribution would be 1/3 white guys and observe how incredibly skewed it is.

So what do you say to someone of another gender, race, or ethnicity, who wants a career, a life? 'Things are changing for the better! Your great-grandchildren will have more opportunity!'? Be aware that's stereotypical language of privilege - when it's not your problem, it's easy to say, 'wait'. We need to act, now.
Oculus is vaporware, right? I don't see anything that encourages me that whatever thing they were aiming at will be a thing?
Odd, I felt they are kinda heavy, too low to the ground, have an overcomplicated set of levers, and not super comfortable.

I prefer a $50 chair from office depot...
Readymade Taxi Booking App Software for Andriod and iOS - CABSO
CABSO provide you the cheapest taxi booking software which support both mobile and web platform. We offer you cloud based taxi management software for Andriod, iOS to automate your taxi business. https://appkodes.com/taxi-booking-script/
Google is pretty much doing the same thing with Chrome. Opera has switched to its rendering engine and Firefox's share is dropping (after Google pumped tons of money in them and used their work to enhance their own offering). Gecko is barely on the map while Google's render can be found in newer versions of Opera, Vivaldi, and others.

I mean if you go back far enough, Microsoft did this with IE. IIRC, they licensed a bunch of stuff from NSCA Mosaic, who thought they were going to make some good money off a percentage of sales. IE was originally part of the Plus! pack which you had to pay for with Windows95, but then MS released their browser for free.
I used to work for the former VP of product for DOMO... the stories he told me does make me feel surprised by this story. The CEO led by a sort of "cult of personality" without having a clear direction (that was relayed to the workers/staff) of what he wanted Domo to do. Its a serious leadership failure.
> Working long hours or weekends is not encouraged nor celebrated.

What does this have to do with building a remote-only company?

Different companies have different cultures, and that's okay. Would Uber be nearly as successful if they were fully remote? Maybe. Would Uber be nearly as successful without a long hours culture? I'm highly skeptical.
I use rules I can defend. Be defense, I mean can explain impact on readability or maintainability - personal preferences dont count. E.g., if I have to use "I don't like it" then it is bad rule. Also, I deal with code in question, not with imaginary different code. This particular line is plenty readable and maintainable. People typically don't know about X is argument, but then people really typically must make mistakes about X. This is shared industry standard is an argument, but again, then is must really be industry habit. Not just me wanting it to be so.

Also, if the junior cant comprehend reasoning, he/she will have hard time with expressions like "inline side effects". The word inline is not much used in Java world.

If there is style guide, then it is different matter and the argument is about usefulness of style guide itself (e.g. you follow the rule unless rule harms, even if the rule is overly broad). Absent style guide, imposing your personal preferences on good lines, because entirely different line would be unreadable is not something I can support. I used to follow such instructions, but don't anymore because such blind follow tactic lead to all kinds of problems for me.

When I worked with juniors, I wanted them to understand so that they can make own decisions as soon as possible. I did not wanted them to memorize hundreds of random rules.
Yeah, it's so sad that an important topic like that is overrun by trolls.
That immutability is terrible feature. Type one letter wrong on your wallet address and your money is gone forever.

I myself have experienced something similar when a bank teller provided me with a routing number from a chase bank in a different state then I originally set up my account. Thus, my entire direct deposit pay for a month of $6,000 went to an account set for a chase routing number in a different state. Fortunately, I went to the bank soon after and they fixed it by putting the money in my proper account.

If they had used a cryptocurrency, I would have lost an entire months pay.
I've been using computers my entire life but this read like it was in Greek to me. Very impressive that people out there actually understand all that stuff. I'm not sure where to begin learning about that.
Only if you need instant visual feedback regarding how good you hit the center of the key. For LCDs there are patents for compensating the distortion caused by haptic spherical caps on the touch screen based on a front camera doing eye-tracking. I do not know how good this might work for e-ink, but a consideration could be somehting similar to a screen protector that you place on the screen to enable better typing, and take off for better viewing. Maybe with a hardware button that re-adapts the distortion correction to the current gaze, so you'd press this after sitting comfortably in a chair or such, holding it the way you want to for the next few minutes or longer.
LOL -Cubbies??? :P
Kevin's available hours should be common knowledge, or easily findable in a system of some sort, ranging from text file to excel sheet to Exchange to massively overpriced time-tracking software.
> Fast internet everywhere - 100Mb/s+ cable

Now that made me laugh out loud. This author must live in a nice bubble to think that.
As others have said, think of your Apple Watch app as an extension to your iOS app's UI: it enhances your iOS app vs. the competition that doesn't offer the wrist UI.

I've seen users requesting a Watch version in reviews for iOS apps. Even I have chosen some apps in the past over others specifically because they offered a Watch app, like navigation apps and flight checkers etc.

As a user though, I must say that if "monetizing" and "selling on its own" are more important concerns for you than make your product/service a better experience for ME, then I probably wouldn't want to use any of your apps.
Part of me is hoping this is in preparation of releasing an open source version of windows
How a POS App Can Benefit an E-Commerce Store
I was in Seoul last week. I had 400Mb/s on my phone... It's devastating how far behind some first-world countries are in data infrastructure.
Having one person only managing 50 kube nodes IS the definition of too hard to operate. Operating 50 linux servers with something like docker swarm would be a no-brainer.
Are any AV vendors marketing themselves as more secure than the competition, with technically founded evidence? Such as memory-safe PLs, VM or OS sandboxes, running 3rd party native code in an emulator, bug bounties, etc.

Though probably their customers are mainly corporate "intranet" environments where users open random content with Acrobat, Office etc and the high bit is to just halve (1) the daily mass malware infections - which are not av focused yet.

(1) or whatever the average AV detection rate is these days.
I remember ALT.NET, and I would not retroactively declare a success. What it did was push into the open the fact that the Microsoft of the day could not effectively handle having rival technologies on their platform, open or closed source. Their strategy at the time was to try to provide a solution for every single product category, to the point of maintaining various no-cost but proprietary tools and libraries just to fill gaps (most of which are now abandoned).
That's not how it works. The trezor is not a USB storage device, it is a usb serial port that communicates with an MCU.
It already uses Microsoft tech so why not?
What’s the Right Way to Secure LoT Devices?
Fusion 360 is free for hobbiests. Not just students.

If I _wanted_ to be unethical, I could surely get anything I wanted.

I want to buy something and be in good standing to use it to perhaps build something to sell.
There is a software solution called blinding. The idea is to 1) scramble your input (message, private key) by multiplying with a random blinding factor, 2) do the crypto math and 3) divide out the random blinding factor.

Since all the crypto math happens with what is now essentially random numbers, you gain no knowledge from power analysis.

Downside of this method is that it requires additional operations and your crypto algorithm needs to be suitable for this. There is literature on this method, but don't be confused by "blind signatures" which is something different.

Any crypto wizz around that can tell me if secp256k1 ecdsa can be blinded?
Ask HN: What should Microsoft do to show they are serious about open source?
Without open sourcing Windows and Office?

Let's not forget that GitHub wasn't open source either
> The most amazing thing about this whole situation is that there were experts in the field who were shouting out about the impossibility of Holmes' claims right from the beginning.

Links? Wasn't Holmes incredibly secretive about everything? It's not like she was promising overunity or anything, just a "radically new approach" type thing.
You have misunderstood. The grandparent is not saying that fast internet is expensive. He’s saying that there is simply no way of attaining it at his house for any price.

That describes a lot of places in the developed world. My little farming town in rural France, as well as the medium sized City in England where I lived previously.
> I really hope that AMD can continue to regain a healthy market share...

As someone long on the desktop market with the processing and storage needs of home/office-based VR/AR/holo in mind (a few years out yet) I am for the first time in ages genuinely interested in large scale processors and that is mainly to AMD's credit. Here's hoping to some AMD backed answer to Optane as well.
Probably a better comparison page https://docs.gitea.io/en-us/comparison/
You and I have different standards of awesome. Mine does not include placeholders following every click.

https://cl.ly/3p3a2e3C0K2T
The Wall Street Journal is the only reason the company was outed.

This same journal was also one of her early boosters.

We already have a framework that preserves independence of the media, the First Amendment. All of the NDAs and Boies style intimidation and legal abuse and harrasment of the whistleblowers and journalists was only stopped by the First Amendment.

We already have a framework that punishes journalists - it's people like Peter Thiel suing them out of existence because he doesn't like what they say. It's big funders buying a newspaper and destroying it like the Denver Post. It's the government putting sources on trial and in prison like happened with the NSA stories. Journalists are murdered constantly for reporting stories. And the industry itself is dying because of changing business models. They dont need a framework to punish them any more.
Seoul is not everywhere. South Korea is quite technologically advanced.

Try doing more traveling in SE Asia, you’ll see how bad it can be.
Looks like the AI bit is matching a template to your query maybe, i.e. a simple classifier.
Has the code always been licensed CC-BY-NC-SA or is that a recent change?
A grammatical nightmare whose content doesn't even match the title. Another Medium triumph!
It's not out of scope for a hardware wallet. It is by design supposed to be losable without compromising your private key. Using an actual secure element (engineered in-silica to thwart this type of side channel exoloit) or even clever software can prevent this attack, or at least make it exponentially more difficult.
> Probably just renting dedicated boxes.

Absolutely correct.
I don't think I've ever seen any objective evidence on this one way or the other.. have you?
My point is that it isn’t wrong to choose a place to incorporate based on a state’s laws. Just as it isn’t wrong to choose to live in Texas because it has no income tax or California for its recreational marijuana. It’s not breaking the law to form an Alaskan corporation even though you personally spend more time in Arkansas or put your factories in Arizona. That satisfies not only the letter of the law but the intent of these laws (as I understand it not being a legal expert).
Microsoft practically forced us to use Windows stack for anything and everything

This is called “dogfooding” and all companies should do it. How can you sell to customers or understand customers if you’re not using the product yourself?

One day I’d love to visit SAP and see how they do their own vacations and expenses. It can’t be with their own software.
Looking at my local system, you're exactly right. /usr/bin/cvs is still GNU CVS, and you have to explicitly use /usr/bin/opencvs to get this.

I thought I remembered -current moving to opencvs some time ago, but either I mis-remembered or they moved back.
Redhat? Company that is currently infiltrating every Linux distro with systemd bloatware? No, thanks.
Anyone measuring power will have the capability to bypass / defeat any external power filtering. To be of value this must be done at the die level.
I was thinking the same thing, he must not live in Australia where the government has absolutely shattered most people's chances of getting 100MB/s+ cable in the next 10-20 years.
> In my experience it takes a move to the cloud to actually see where those gains lie.

Whilst I realise you were being vague on purpose, the above statement represents no kind of business justification.
Selects for self starting people

The article has the arrow causality backwards on this one, and it describes the biggest pitfall with remote work: you absolutely need to seek out and only hire people who will find things to do and work around problems on their own, rather than waiting for instruction from above.

That describes a surprisingly small subset of employees. School trains you for the age of four to take instructions from the person in charge, act, then wait for more instructions. You can make it all the way to retirement on many career tracks without ever deviating from that pattern.

It does not work at all in a remote organisation.
[Study] Conversations Gone Awry: Detecting Early Signs of Conversational Failure
They have pre-written letters in all EU languages now
Yes so true. People should spend more time thinking about the side effects of their actions and speeches before they make them.
Seems to me pressure on the worker would just go up, as now the shorttermism is microtermism. We need longer outlooks, not shorter. Who cares about traders?
> Totally untethered individual freedom is unknown in East Asia

It's an old argument used by dictators to justify their repression: 'Individual freedom isn't our value; it's a Western thing.' But these are inalienable universal rights, not some cultural preference. If people want to live as the Chinese Communist Party says or in some other way, they have a right to the freedom, the self-determination, to make that choice.

The quote above is also obviously false. East Asia has free countries including Japan and South Korea. China has free regions, including Taiwan and, to an extent, Hong Kong. (Not coincidentally, these are by far the most prosperous political entities in East Asia.) The people of Taiwan and Hong Kong seem less than excited about giving up their freedom. Cultures all over the world implement and embrace these values, from East Asia to South Asia to Europe to almost all of the Americas. The only ones who don't are those who aren't given a choice.
I'm skeptical of any AV provider. Most try to lock shit down insanely, and thash my disk more insanely. I rebelled against having to use the top-of-the-line AV tool my company tried to enforce because it crippled development speed, scanning and locking files breaking builds.

It feels like grade-school collective punishment because the office dope is watching anime porn on sketchy sites on the office subnet.
Google is the only company that refused to do it, trying to find a workaround around Java licensing.

So yeah, companies were paying much more than pennies to Sun, until Google came around and offered them a (free beer) Java fork, thus torpedoing Sun profits regarding Java.
In this URL,
https://blog.talosintelligence.com/2018/05/VPNFilter.html?m=...

it mentions snort rules for detection and protection for VPNFilter and ClamAV Signatures.

But it didn't explain how to use them.

The way I understand SNORT after googling it, I need to able captures the traffic (wan port) and feed that to SNORT for analysis, is that correct?

Also for ClamAV, do I need to clone/mount the rootfs from the wifi router to Linux and use ClamAV to scan that rootfs for those signatures?

The URL mentions the infested device have /var/run/vpnfilterm, /var/run/vpnfilterw. I checked they are not in my wifi router's fs.

The URL also mentions it modified/insert entry the crontab, but I can't find what exe name, possible file locations I should search in my router. Do anyone else know such info?
The first mistake is they used a non-constant-time scalar multiply. So, first do that. Of course that just hides the timing, not the power usage.

There is a bunch of elliptic curve stuff you can do like "multiplicative blinding", e.g. https://www.iacr.org/archive/ches2010/62250433/62250433.pdf.
The paper looks at 50 million conversations across 16 million Wikipedia talk pages to create a framework for understanding linguistic markers of conversational trajectories. In a (very surprising) nutshell: if someone writes "Wow, you're coming off as a total d," the conversation is likely to end badly.
He buried the lede. The talk highlights some regrets, but the most interesting part is a discussion about a new framework he's building based on Go and TypeScript: deno https://github.com/ry/deno
Were his losses insured or recovered somehow after the collapse? Or was the investor money all gone by then?
Ultrascope is crap. I’m using lxi-tools and Ethernet to capture screenshots. It’s a command line tool. I run it in WSL on windows 10.

https://github.com/lxi-tools/lxi-tools

Or USB stick. But that requires carting the stick around.
Wow - just wow! You nailed it on the head! I've been trying to figure out what was off here, and you succinctly identified the key areas that make the "valley" the way it is! (I'm recently retired from the Air Force, moved here from Hawaii and ended up working in the tech field - I'm also a "member", did the whole missionary thing, and I've been racking my brain trying to figure out why the culture here seems to be so "off" compared to my military background and being around LDS outside of Utah). This place has become a huge multi-marketing campaign with everyone trying to squeeze each other for every buck they can make! Sorry, I better stop my rant! Thanks for the insight though!
> Many Americans say we don't have free speech here in Europe

I've never heard an American or European say that (other than a case of hyperbole here or there. What could this refer to?
highly recommend a book called 'The Last Speakers' by K. David Harrison
So Google is bad because they poured millions of dollars into Mozilla for Firefox development, but even so their own browser is still better and more popular, and the code is open for other projects to use. Which is a bad, evil thing to do and we want none of that round here!

And this is the same as developing a crummy browser, not sharing the code and not funding any alternate implementations, and leaving it stagnant for years.

Ok.
Qlik Sense Users List
Typical, lazy millennial. You should be getting out there and catching your own birds, lizards, and other prey.
Done right they are actually helpful for everyone involved, especially if everyone goes in with a growth mindset.