skysight-inc/HackerNews huggingface dataset:
>But security researchers from Finnish cyber-security firm F-Secure discovered that they could disable this feature by modifying firmware settings and steal data from a computer's RAM after a cold reboot.

I guess this is supposed to be the "new" thing. This is really obvious though, so calling it a "new attack" seems a bit ridiculous.

The talk wasn't bad though.
Kevin Kelly: New Rules for the New Economy (1997)
My money is on Tumblr having been the primary “big site” where this was an issue.
Those all sound like preferences, not innovation. Which is fine, most progress is incremental, and there are plenty of options in the world for individuals to find their preferred product.
15 Successful Tech Companies Founded by Columbia Alumni
It works in two steps: the first step resolve to "unqualified paths" (which are just the paths within the cache without the index.js/extensions resolution). This step is entirely static, no filesystem involved here.

The second step converts the "unqualified paths" into "qualified paths", and is basically the index.js/extensions resolution. We currently access the filesystem in order to resolve them (just like Node), because we didn't want to store the whole list of files within our static tables (fearing that it would become too large and would slow down the startup time because of the parsing cost).

So to answer your question: we get rid of the node_modules folder-by-folder traversal, but decided that the extension check was an acceptable tradeoff. We might improve that a bit by storing the "main" entries within the tables, though, which would be a nice fast path for most package requires.
That is the sole pollster that indicates this. The rest indicate low 40's to mid-high 30's. This is despite a growing economy.

https://projects.fivethirtyeight.com/trump-approval-ratings/
Notice that a French Nobel laureate in literature (Frederic Mistral) wrote his whole work in occitan.
kinda hard when your ram is soldered on top of BGA cpu
Ah the old, let's imply your racist/afraid so you let american companies do as they please argument.

It's easy to be trite, but it doesn't change the fact that foreign companies and governments were taking advantage of the EU while simultaneously having a different set of rules at home for EU companies. I think the EU overreacted her, hut it's hardly surprising that they had some sort of response
The headline is misleading... this is only for Java 8 not the latest release of Java
As best I can tell a more correct title would be "Oracle will charge for Java SE 8 starting in 2019" and you're okay on Java SE 9 but having read the license terms I'm not sure 9 will be free for commercial use in six or 12 months time.

Watch this space, migrate to OpenJDK etc.
An Emulated Commodore 64 in VR [video]
Scanning thousands of molecules against an elusive cancer target
Oracle aren't "charging for Java", they're charging for extended support for an old version of Java.

This is blatant clickbait.
I have a suspicion that at least part of the drive for Brexit comes from the determination of the British security services to preserve their last little island of unaccountable Empire. There have been conflicts with ECHR over torture, "extraordinary rendition", the treatment of Republicans in Northern Ireland, and (repeatedly) over mass surveillance.

One former "M", Richard Dearlove, is an overt Brexit campaigner.

(Edit: yes I know leaving the EU does not automatically exit ECHR, but it's a prerequisite, and the same people are generally campaigning against ECJ and ECHR as well)
I believe some AMD CPUs already support it, and there's some mention of it in Linux Kernel docs (https://github.com/torvalds/linux/blob/master/Documentation/...), but I'm not sure if it's actually used in practice or not.
Not just a couple, but many European countries offer two or more foreign languages. (The level of success varies wildly of course.)

The configuration is even more complicated in French schools where there is the optional immersion in the regional language. That immersion generally begins at the earliest ages. But my point was that this regional language in no way limits the choice of the first foreign language later on. Therefore: I don't believe that Occitan is in any way menaced by English, but English may be chosen over other European languages later in one's scolarity.

As an aside, I don't quite agree with your statement that the foreign languages offered cover your travel needs. Well, that may be true, but I don't think that the most important element is mobility for travel, but rather mobility for employment and trade, especially in border regions. And I can name a LOT of countries where proficiency in the neighbour's language is severely lacking. Neighbours that are sometimes just a kilometre away. I've seen it myself.
Where in the World Is Larry Page?
It doesn't impact OpenJDK.
They've always thought like this.
Yes the company behind the blog post has some skin in the game ... "Specialized technologies like Aspera SmartCollect and LicenseControl for Oracle are already built to take the surprise out of Oracle contracts and maintenance costs, and ensure that you pay the lowest price for Oracle licensing."
>Japan is intensely racist

Would you care to provide some substance to this claim? You're tarring over a hundred million people with a very nasty brush.
Yes, I would like to test for Scandinavian languages as there are not many multilingual NLP apis available. Not even Google/Microsoft/AWS has multilingual support.

The error I'm getting is:

Request Error
The server encountered an error processing the request. The exception message is 'Invalid JSON string literal format. At line 1, column 1.'. See server logs for more details. The exception stack trace is:
at System.Runtime.Serialization.Json.JavaScriptReader.ReadStringLiteral()
at System.Runtime.Serialization.Json.JavaScriptReader.ReadCore()
at System.Runtime.Serialization.Json.JavaScriptReader.Read()
at System.Json.JsonValue.Load(TextReader textReader)
at Tisane.Server.Parse(Stream json)
at SyncInvokeParse(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc&amp; rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)

using these parameters:

$parameters = array(
'content' => "Babylonians should not be allowed at managerial positions.",
'language' => 'en'
);
Everyone is different, and I can only speak to my experience, but here's what worked for me:

I meditated on the differences I felt when high and not. Getting beyond the physical sensations, which are very nice, the biggest difference was that I was able to relax my mind and enjoy things when high. When I was high, I was not eating an apple and worrying about my daily/weekly/big-picture stresses. I was just eating an apple. I already knew that this was preferable on an intellectual level, but getting high allowed me to feel it - to know that it was actually like.

The first time I quit, I had not practiced enough to enact this in my non-high state. Even though I knew I wanted it, I let my thoughts hurt me. This last time, I had practiced/meditated enough to naturally be in the state of just enjoying an apple (btw - I don't just eat apples all day). Enjoying nature, taking walks, and my interests/passions also help a lot.

I don't know if that will be helpful to you, but I hope it is :^)
The commenter above specifically says powered on, unlocked. If the phone is locked or powered off, things are much harder.
I think the point was that 3G -> 4G does not imply a literal 33% increase in performance, which one could guess was the case as 4 is a 33% increase over 3 (3x1.33333~=4)
I haven’t exactly seen trans folks being rounded up and out into camps. The people who said everything was going to be all right were correct. TDS remains in effect for others.
> Everyone of those involved knows what that law does. All of them could have walked away and said: "Fuck that law, I'm not enforcing it."

You'd like to think. But then those people would hang too. Sure if life in Malaysia were completely horrible there might eventually be a revolution all the way up the chain of command, but it's not. They live by laws that were enacted in a purportedly representative system of government.

When travelling, you need to know and take seriously the local laws and customs. Your naively idealistic view of "fuck that" won't save you.
Please stop keep posting this. I don't how many times I've seen this here.

See discussions here:
https://news.ycombinator.com/item?id=17721919
https://news.ycombinator.com/item?id=16869963
Does anyone know how I can have two different "Gmail" apps on an Android phone?

I like to keep my work and personal emails separate. So I use Inbox for business, and turn off notifications in the evenings & weekends.

When I go into my personal Gmail, I'm not tempted to check my work email.

Inbox had many great features, but the killer for me was that it was a separate icon!
Somebody could put a hardware keylogger on your keyboard interface instead. Or de-solder your CPU and replace it with a backdoored version.
I downgraded from a 6 to an SE and have been really happy. I'd like a slightly better screen (better black levels and contrast), but apart from that it's great.
Tell that to the FBI trying to get into an iPhone
And we still trust polls in a post-2016 world?
Is there any way you could make an eclipse plugin for this? This is what developers in a company usually use, and that is where the code is written. This tool is useful for a coding interview maybe...
Source on that? https://www.independent.ie/business/irish/ireland-expected-t...
> isn’t there a common understanding that if an attacker gains physical access to your computer, you already lost?

I don‘t think so. It would mean that securing information in the workplace is nearly impossible and colocation hosting security intrusion boils down to picking a physical lock (of your rack).
I teach at a community college. Our funding per student has been declining for 15 years. We raise tuition as a result. We have become more like a business. We need students to pay the bills. Our focus is on passing students and retaining them. It’s all about passing rate. In such an environment standards go down. Instead of society and the ideal of knowledge being our client it is the student who is the client. I can no longer be a real teacher who gives real grades with real expectations. I need a job and this shift in focus is bad and degrades colleges.
Surely if it's in cryptocurrency it will never be in their bank account?
I don't understand the title – the link just leads to google.com/inbox/. Is that service shutting down? It is not clear to me from the context of the website.
Or move to where it's legal, if it's that important to you.
None of which I missed. I'm a poweruser in most of my computer interactions, but e-mail isn't one of them. I actually really liked Inbox's restricted feature set.
Very cool, does this mean you can check in the dependency file to version control? Just like yarn.lock?

As much as I hate node_modules, there are times when I want to see how a library is implemented. Is there a way to have some libraries in node_modules? Say only the ones in listed in the package.json file
Why do you assume the basic values differ between these two set of people. That is seeing people in black and white. Let us take a nonnegotiable value of not being racist. Are you implying that 50% of the people are racist. Nope - that is certainly not the case. People who voted for Trump might have voted for various other things - there might have been certain issues that they resonated with him, vote for Republican party etc. They might have voted for him despite his flaws.
Alright, for a countering point of view, I bought a 6 the day it was released. Used it for a year. Battery issues aside, I found the form factor too thin, too rounded, and too slippery.

I had to buy a case just to not to feel like I was going to drop it.

I went back to the SE, and it reaffirmed to me that this design was peak iPhone. The squared edges let me stand the phone up on the side. There’s no silly camera bump. I’ve used this phone, the 5, and the 5s for over 3 combined years with no case needed.

I’ve dropped these phones a couple times and it’s survived them all. I can use it one handed without the reach, then cancel what my palm hit, then reach, then cancel, then remember the “reachability” home double tap. It has a headphone jack. The volume up button isn’t opposite the power button.

And you know what? It’s still plenty fast. All this for a cheaper price and more pocketable form factor.

The SE is a great phone, easily my favorite of the iPhone lineage. It’s too bad it seems to be going the way of the dodo.
Interesting initiative!
Doe Italy not have a minimum wage, or is it just really low?
The example seems weird: google.com almost certainly does redirect to HTTPS and send HSTS headers, so why does your tool think otherwise?
What is with this trend of "discontinuing" products that are already receiving little to no maintenance? Google is not the only one guilty of this.

From the announcement, I get the idea that if I use Inbox today, it will be gone and I will no longer be able to use it after the EOL date is passed. Is it really that hard to keep the lights on, for a product for which development has already been finished?

People like this product and it has features that no others do. I don't want to go back to using the Gmail app on my Android either. There are tens of thousands of unmaintained Android apps from developers who may have even died, or at least we may never hear from again. So why should this one need to be formally sunsetted?

I am far more likely to quit email altogether, than to embrace a vanilla Gmail experience at this point.
Does this mean self-hosting content on our own web sites will become a more realistic option for content creators? No upload filter to tackle?
I don't use Gmail but they seem offer regular IMAP, so you can install practically any IMAP email client and use that: https://support.google.com/mail/answer/7126229
Why would one wants to forget history?
I think the brains that are cleanly male-trait or female-trait are very very rare, most are a mix but there is usually enough difference to be able to make a very good guess.

Though I also do agree that gender dysphoria can have many different expressions, once you drop gender you get into a whole new world of stuffs where people hate various things about themselves (I've met people with self-described "whole body dysphoria" who are generally okay with their gender and simply hate the physical existence of their body)
I always used to talk to the current tenants before moving in.

You can also add things to your lease (guarantees that there won't be rodents or excessive noise, for example).
ECHR is not a part of the European Union, so Brexit won't take us out of it.

However, I believe that the EU requires members be signatories of the ECHR, so Brexit would make leaving it much easier.

It's well documented that Theresa May wants to leave the ECHR; somewhat alarming since both Russia and Azerbaijan, countries with comparatively poor records on human rights, are signatories.
If you're Greek, that _might_ be a dilemma, I suppose. :-)
It already exists on AMD: https://en.wikichip.org/wiki/x86/sme
How do you "carefully charge" a phone? And by how much would that extend the battery life?

I am on my second "flagship" phone that is down to an hour of battery life after 2 years. This time I will attempt to replace the battery because these things cost way too much to replace every 2-3 years.
I think the US idiom is belt & suspenders, not boots.
You can add multiple Google accounts and disable sync for one of them.
11 habits of highly effective devlopers
Removing `node_modules` would be fantastic, but not at the expense of native modules:

From the PDF:

"On the long term we believe that post-install scripts are a problem by
themselves (they still need an install step, and can lead to security issues),
and we would suggest relying less on this feature in the future, possibly
even deprecating it in the long term. While native modules have their
usefulness, WebAssembly is becoming a more and more serious candidate
for a portable bytecode as the months pass."

WebAssembly is not "more and more a serious candidate" to replace native modules.

The issue with post-install scripts needs a better long-term solution, but simply deprecating native modules is not it.
The ECHR is completely separate from the EU so no matter what way the actual Brexit goes, they will still be a member of the ECHR. Whether they might want to leave that as well is another matter.
"Where I vote in San Francisco, no ID was required. I was shocked, but they just asked for my address. You can register by filling out a form and they mail you a postcard. You sign the postcard and return it via the mail. All I needed was an address."

http://www.ncsl.org/research/elections-and-campaigns/voter-v...

This is no different than postal balloting, which only requires a signature. (Do you also oppose postal balloting? I only ask because every time I've attended an election certification board meeting, there's dozens of irregularities with postal ballots. Which doesn't get any attention.)

You may not consider this sufficient. But myself and many others do. Because the rate of voter fraud is infinitesimal and the legacy of disenfranchisement is huge. As an engineer, you cannot consider the costs & benefits, or the risks & rewards, separately.

All those other nations provide a free national ID. Do you support that in the USA? I do.

Further, in the United States, voters must be registered to vote.

https://en.wikipedia.org/wiki/Voter_registration_in_the_Unit...

So maybe the semantics are throwing you off. The voter has already been identified. On election day, their identity is being confirmed.

"Another problem is standardization. We need standardized elections, with standardized vote counting equipment, processes, registration requirements, etc."

Agreed.

"The U.S. is just a huge backwater in this area -- no real chain of custody, no standardization, and no IDs."

And now you've lost me.
If you logout or load in Incognito mode it shows the message.
> If you're security officer for a small company then you probably have a long list of things to worry about before you have to consider cold boot vulnerabilities.

Do you have laptops? Do you keep any personal data on them? Are you subject to GDPR? Then you do need to worry at least somewhat: https://www.databreachtoday.com/data-breach-another-stolen-l...
I don't say we should have this law but I also say it's less bad than some people make it out to be.
> we need to incentivize the best scientists and researchers in other countries to come here and become U.S. citizens

This may be outside of US control. There are always exceptions, but based on experience of my friends who came to the US from other countries and stayed, scientists generally did not go to the US; they go from something: economic shock, persecution, hungry kids, crime, no science funding (not low, zero), etc. and will to go whatever decent, stable country that would take them. Big inflows of energetic, educated folks happen after wars (e.g., WW2). Collapse of communism made lots of folks from Poland to Uzbekistan search for another home.

Those greatly benefited US but were one-time events that cannot be easily extended. To lead in science a country needs to grow its scientists organically and encourage them to stay in science. My 2c.
just fyi, bit.ly doesnt work in china, so i’m not able to use this, but i’m pretty sure that your target market isnt china at this moment.

how does this differ from indiehackers or others? my impression is that the barrier to entry is lower in terms of less forms to fill i.e. 5 minutes, but i was stuck after sending my email.

what kind of volumes do you have in terms of users that are looking for new products?
I think you misread me. IPhones are almost certainly vulnerable to some kind of cold-boot attack, yes. That doesn't mean that it's easy to break into them. Cold-boot attacks are highly circumstantial.

If the San Bernadino terrorists shut down their phones before their murderous rampage, or if they ran out of battery before the FBI got into their house, sorry, no cold boot for you.

Cold boot only works if you have physical access to the unlocked, powered-on, in-use device. The "data ghost" in memory that cold boot attacks take advantage of is only there for seconds.
Gerrymandering is easier is just easier for the GOP!!
https://www.blog.google/products/gmail/inbox-signing-find-yo...
You can have two of any app: https://play.google.com/store/apps/details?id=com.oasisfeng....
Discussion from earlier today: https://news.ycombinator.com/item?id=17971516
The EU Can Still Be Saved from Its Internet-Wrecking Copyright Plan
I'm assuming you're totally against Asia then? Asian countries have been far more staunch against refugees.

Japan for example accepted only 27 refugees in one year while rejecting 7,586 according to the Brookings Institute. South Korea accepted only 94 in one year. Refugees are pretty much shut off from Singapore and China and many other Asian countries.

I'm curious why these countries don't receive the same flak for their "ethno-nationalist" views against immigrants. There are no boycotts against buying goods from these countries as they are with Trump hotels.

EDIT: I see that you work for Google. Your company is censoring content on behalf of the communist government in China despite their "ethno-nationalist" views against immigrants (not to mention their abysmal human rights record). What's the explanation?
Deliberate the space station leaks or the US astronauts want to return to the ea
That domain must have been hard to get!
I guess I was confused by "If you shut off your machine", which is not the same thing as locking it.

If cold boot attacks only work against unlocked devices, that makes a lot of sense. But if they work against locked but powered devices, that would be quite possible for LE to exploit in most cases (just carry a battery pack).
I usually hate remarks like these, but can't help but say "Another one bites the dust". The unreliability of Google Products makes it so much less appealing to buy into Google's ecosystem nowadays, then it was 5-10 years ago. I'm hesitant to adopt any new product/service from them, because there's a high likelihood that they'll shut it down.
I really don’t understand why they are doing this. This is the app I use the most on mobile up there with the browser.
If there is an area where it makes sense to experiment with multiple UIs is email.
I agree that crash is the proper term, but i just forgot.

>, because where as a motorcyclists vision is significantly impaired from the helmet...

This is incorrect. My vision on the bike is not impaired by my helmet. My field of view in a car is more restricted -- and critically in SMIDSY situations, the peripheral field is obstructed by the pillars holding the roof up. SMIDSYs happen when the car fails to give way to the bike; usually this is due to the fact that bikes are small visual targets or unexpected ones. We may mitigate these problems by raising the visual salience of the bike, but we solve them by designing intersections such that they can't happen.