skysight-inc/HackerNews huggingface dataset:
In May Yubico announced IOS support for their nfc keys:

https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-...
While I understand that it's a bit sensationalized. At the end of the day, they're transmitting 1 bit of information at a very slow rate. While's that's only 1 bit more than 0, it's still an infinite percentage increase, and still leaves me super excited.

Despite my bs-filter having toned it down and given me just the facts that it's 3 people in a room with wires on their head playing tetris, with 2 looking at lightbulbs to send signals, it's still got me pumped.

I really believe BCIs be game changers in the way we communicate with electronics (if not other humans), and I for one would love to play a game of tetris over the internet with an unknown mind.

Edit: even in its current transmission rates, I think this tech could have far reaching implications in a better form factor. 1 slow bit is all I need to take a picture, lock/unlock my car, flip the light switch, turn the tap, open/close the door, Start the washing machine, turn the tv on, start the car, close the window, etc.
China developing laser weapon to destroy submarines from space
Open core is freemium. You can use the base under a free license but if you want fancy features, those are under a non-free license.

Selling exceptions (or what someone else called, "dual licensing") means everyone gets the same software, both free and non-free, but people who don't want copyleft have to pay.
Zilog Z80, 1976

> Faggin: Yes, we were concerned about others copying the Z80. So I was trying to figure what we could do that that would be effective, and that’s when I came across an idea that if we use the depletion load the mask that doesn’t leave any trace, then I could create depletion load devices that look like enhancement mode devices. And by doing that we could trick the customer into believing that a certain logic was implemented, when it was not. Then I told Shima, “Shima, this is the idea how to implement traps. Put traps, you know, figure out how to do the worst possible traps that you can imagine,” and then Shima with his mind, that was steel mind, was able to actually figure out a bunch of traps that he could talk about.

> Slater: You want to tell us a little about that Shima?

> Shima: I didn’t count [on] talking about that mostly. I placed six traps for stopping the copy of the layout by the copy maker. And one transistor was added to existing enhancement transistors. And I added a transistor looks like an enhancement transistor. But if transistors are set to be always on state by the ion implantations, it has a drastic effect on very much. I heard from NEC later the copy maker delayed the announcement of Z80 compatible product for about six months.

http://archive.computerhistory.org/resources/text/Oral_Histo...
we are using similar setup and ended up using ansible for installing and setuping kubernetes cluster itself together with some other configurations like ipsec between the nodes etc. Learning curve for a new employee is small as every internal project is using the same directory structure and is completely gitops.
Actual services are then deployed to the kubernetes and it works great.
This story is what, one week old now? Why are talking about it again?
Symaps.io | Full stack | Paris, France | Full Time | Onsite | Compensation based on profile | VISA Symaps.io is a fast-growing tech startup located in Paris, Station F : it's an AI application that finds the best location for your business (restaurants, stores, etc.), based on profitability.
It's currently used by clients in the EU, Switzerland, Korea and Taiwan, incl. Tesla and Décathlon. We just closed a 700K seed round and several clients contracts, and are urgently looking for passionated peoples to strengthen our team of 6 peoples (incl. 3 full time engineers).
Esp. we're hiring 2 full stack engineers. Our stack : Python, React, Scikit-learn, Kubernetes, Elastic, PostgreSQL / PostGIS.
More details here :
https://jobs.stationf.co/companies/symaps-io-1
I downloaded “Calculate tip” from their library and it returns total garbage. Most of the time it adds some random percentage to the total I enter instead of calculating 20% of it. Maybe it has to do with my regional settings, but I already stopped bothering.
All big and security-responsible companies issue their employees special phones and laptops when they go on business trips to countries like China or Russia and these are quarantined immediately after they return. They get wiped, X-rayed, disassembled and checked, including any accessory (chargers, mice, etc.).

The more critical the field, the more you have to treat those devices as untrusted before attaching them to your trusted zone.
The guys who run the British National Grid disagree that the grid needs major changes: http://fes.nationalgrid.com/media/1264/ev-myth-buster-v032.p..., http://fes.nationalgrid.com/media/1253/final-fes-2017-update.... The Norwegians aren't predicting the need for supergrid either: http://publikasjoner.nve.no/rapport/2017/rapport2017_77.pdf (sorry it's in Norwegian and too big for Google and Bing to translate).
This is fairly analogous to my comment here: https://news.ycombinator.com/item?id=18138847

Presumably the organisations responsible for hard coding backdoors in chip designs know how to test to confirm their presence.

Presumably some adversarial nation-states have moles inside these organisations > know how to remove them prior to fab.
Presumably these adversaries export genuine chips to their adversaries, thereby tricking them in to thinking the backdoors made it through the fab process, and only use chips that have the backdoors removed in their own critical infrastructure.

Presumably.

I’ve always had this fantasy of being a hextuple agent involved in this type of deep espionage.
I see a lot of people complaining that it is done in bad faith, and doesn't prove much.

But is there really much to prove? What's the baseline? I mean, we're talking about a field where this got published - and it was not a hoax:

http://journals.sagepub.com/doi/full/10.1177/030913251562336...

The people behind this hoax had an unenviable task of matching and beating a paper like that (since, apparently, by itself it was not sufficient to prove the point). How would you do so?
Every single day he was on duty he took out his loaded firearm, pointed it directly in someones face and had his finger on the trigger, for fear they might pull a gun or do something else to harm him.

I understand (although do not have evidence to hand) a number of LAPD beat cops manage to go quite a long time between instances of having to draw a firearm and point it at someone's face. If this officer was doing it every day, was he simply the world's unluckiest police officer, or was he the kind of police officer who makes situations more violent rather than less? I understand that typical US police training (if there is such a think in a nation with such a large range of police forces) does contain rather less "how to make situations less violent" training than their counterparts in other countries.
Yup. Why bother with eyeballs if you can stream ads to brain directly.
Imagine if this had happened the other way around. Death threats and calls of oppression and foul play would only have been the start.
Linux-based
BSD/Unix
How to lose your inheritance
> as once they were closed they would have anti-tampering mechanism activated so that later it would not be possible to open the device without setting the tamper flag

You didn’t specify what type of anti-tamper was used, but I wanted to jump in and say usually that means nothing. The US government intercepted packages [0] and put in back doors (removing and replacing the seals), so I’m not sure why you were so quick to dismiss state sponsored attacks by something as simple as an anti-tamper seal. You can learn how to do it yourself at most medium to large hacker conferences too (DEFCON, BlackHat, HOPE, and CCC to name a few, but there’s more with it).

[0] https://www.techradar.com/news/networking/routers-storage/ph...
> giving a point of a view of a pure developer

Kubernetes really looks like designed by the software developers for the software developers: dump all configs of your services in one place, imagine that they run on the network. The uninteresting parts of the job (like managing nodes and ingress, fixing internal overlay network and DNS, adding services for centralized logging) aren't mixed with the actual services. Obviously, the package management is solved by using containers (essentially OS images) as the package format.
As linked in that article, here the Print Gallery has been un-transformed and animated: http://escherdroste.math.leidenuniv.nl/
Poll: What is your primary operating system?
The page you link claims that there is no hypervisor running, so it's not a VM, but "true" Bare Metal.
I've often thought about the use of Facebook Live video in this situation. If I have done nothing wrong it would only be minimally embarrassing to have friends and family see the encounter, on the other hand to have a silent witness with redundant friends, family and a preserved recording of it would be useful in the case of abuse of power or worse. Of course along with this thought, I've done mental exercises of how to address an officer with respect and how to not make sudden moves which would cause increased concern.
Watchdog groups should only exist for a short period of time and for a specific purpose. If it is open ended, it will inevitable arrive at an extreme.

In a sexist society, if I was paying you to find sexism against women, you'd be able to find obvious examples of it. But as society changes and societal sexism against women disappears, what are you left to do? You still have to find examples of sexism to justify your job. Imagine in your quarterly report, you tell your boss there is no more sexism. Well then, your boss might think, well why is your position need any more? But you like your job and the easy paycheck. So you are now incentivized to see sexism where none exists.
Maybe a setup to measure inertia tensor and center of mass (in that setup's axes) will be easier and I think it's what your call "measuring all angular momentums".
Apple strongly refutes report that it found Chinese spy chips in iCloud servers
Police use of force training is really nothing like military combat training.
if ultimately design sensibility is subjective then ultimately code quality is subjective as well.
Dang is a cunt.
> There are a couple of supermarket chains that have gotten pretty good at having chargers in many of their supermarkets.

Not where I am. I've recently driven several times from Drammen to Trondheim and never seen a charger at any of the supermarkets I passed on the way. I don't mean they don't exist, just that I didn't see them, can you list a few of them?
Anti-China propaganda? These chips were designed by the Chinese military and inserted by PLA agents. Do you have to start calling things propaganda to make it seem like this is baseless criticism of China to those who have not read the article?
Gosh, I would love to read everything about this. I know there are some videos about anti-tampering card readers on youtube, but not on the feedback race between hackers and security.
Holy wow. I can assure you that this is NOT what the majority of Americans who send elders to nursing homes think. It’s more often to simply avoid the burden; laziness rather than spite. Other major reasons are because their families aren’t properly equipped to take care of them. E.g. physically, mentally, financially, or non-existent family members.

Anecdotes based on my experience with mother working as nurse in nursing home, and being American.
They may find a way to hide things out of view. My thinking would be to x-ray it. Airports are pretty good at that.
Not so long ago a large amount of Google documents were indexed by Yandex search engine, including very sensitive personal data and became publicly accessible via search results. Not really Google mistake because documents had public access, but I personally think Google should have added no-index by default to all documents if a document is only available to those who have a link to it.
Sure, an SoC exists, but it runs on FPGA too.
Bad papers get published in all fields. Linking to one bad journal article shows nothing.

Here, for example, is a reference to a bad paper published in a field which is not usually the target of this kind of criticism:

https://academia.stackexchange.com/questions/9602/rediscover...

https://math.berkeley.edu/~ehallman/math1B/TaisMethod.pdf
Scribble Free Font for Prototyping and Wireframing
Not OP, but here's generally how you would do it [0].

However, in the EU there are a few other banks to try [1], [2].

In the US, you could try [3].

There's also companies which partner with multiple banking services to provide a cohesive offering [4], [5].

For anyone wanting to do this, here's two issues that I have found.

1) If you don't have banking licenses, the conversation will stop abruptly. Even if they advertise that they may work with you from their website. It's a big hurdle.

To overcome that, I know of 1 company that may help [6]. If anyone knows of any more, please reply.

2) It's rare to talk to VP/Management level operatives, which is where you want to be. Unless you manage to dig out the CEO/COO email and contact them directly. Going from the bottom (contact us form) upwards just means you'll end up speaking to a Z level employee who doesn't know the banking business at all.

Disclaimer: I've contacted over 100 fintech companies. The whole state of affairs is pretty bad. It's improving, but won't be there until 2020 at least.

[0]: https://blog.faisalkhan.com/money-transmitter-license-applic...

[1]: https://www.fidor.com

[2]: https://www.mambu.com

[3]: https://www.crossriverbank.com

[4]: https://www.railsbank.com

[5]: https://www.unnax.com

[6]: https://www.coinx.com
> Could you think of any other sovereign power who would want a backdoor into servers used by billions of people across the internet?

I cannot think of any sovereign power that wouldn't.
Truck speed limits are lower than other vehicles exactly because of physics. Your suggestion that the speed difference is the thing that should be consistent across scenarios doesn't account for physics though. Kinetic energy goes with the square of speed, so the thing to look at is stopping distance from a given speed.
I will just link to my recommendation of CaptainDuckDuck:

https://news.ycombinator.com/item?id=18128575
I find myself in a similar situation. I took a job as a software developer at a hardware shop. They have different processes to what I am used to. I keep pushing for more robust project management but I am getting a lot of push back ("don't tell me how to do my job" level push back).

There are two parts to this:

1. Build a better relationship with the founder (carefully)

2. Focus on adding value. New processes are not going well, so scrap them and do the best you can with the processes they have. Your arguments for change will go over better if you are adding a lot of value to the company. That is were credibility comes from in small groups like this.
Charles Aznavour just died 94 yo. He was still fully active.
Your car likely gets its picture taken, and probably license plate automatically read, every time you drive through a toll booth, too. No one seems to be outraged over toll booths doing this, so why should any other public road sign (or private road sign that you, the driver, don't own) be any different?

Don't like being tracked by YOUR plate? Find other ways to achieve your transportation goals: ride a bike, take the bus, walk, use a taxi and pay cash, borrow a car, etc. Sure, you could be tracked by facial recognition but that's a lot harder to do currently than reading some very well defined characters from a highly visible license plate and it's much easier to legally change your appearance than to change your plate.
I don't think the parent was talking about this specific type of attacks but other types of hardware backdoors. I think the answer to that is very obviously yes, and given what we know about intelligence agencies I'm even willing to go as far as saying that it is likely (or at least, if you have reasons to be worried about Uncle Sam getting to your stuff you should consider it a very real possibility).

Modern ASICs are so complex that I'm sure that sneaking a tiny backdoor into the behemoth that's a modern CPU or embedded SoC would be almost trivial. They'd also have great plausible deniability in case they're found, if something like SPECTRE was an intentional backdoor how would you ever prove it for instance?
Most up to date usb stick best for use with kali / parrot
VIAVI's Observer 17.5, a network performance management and diagnostics tool
Most speeding in residential areas (both in frequency and in delta relative to the limit) is done by the people that live there. There was quite a bit of research done regarding this and one of the conclusions that stood out for me was that the familiarity with the territory was a big factor in this.
It's actually common OPEX, CAPEX optimization. Executives are paid better when doing this, but is's definitely bad for a long term
> No, it is totally inconceivable AMD and Intel CPUs are backdoored this way.

That’s a fairly strong statement.

It could be argued it is conceivable as evidenced by the fact we are here talking about it.

Also, I’ve read that it’s impossible for any one person to fully comprehend the circuit diagram of a modern CPU. In light of that it seems conceviable any number of wayward circuits could be hidden.
https://timingapp.com seems to fit the bill, it’s a local app for os x with optional sync capabilities
I completely agree that people in general do not want to deal with near death elders , or elders who need caretaking. As of course this is a huge burden and very distracting. I’ve also dealt with this a number of times. It’s certisnly not fun or easy.
BUT all the other undertone and reasoning (e.g. spite), I completely disagree with and do not think this is representative of the majority, or even a large minority.
/e/ is LineageOS + microG + a custom launcher (which is kind of rudimentary ATM) + a few apps from f-droid.org with minimal UI changes to give it a "personalized" look. They provide 50MB cloud storage a mail account (50MB) and that's all there is. Plus a lot of PR. They imply to be the only Google-free Android OS (considering the multitude of roms based on LineageOS this is BS).
In all their published material that I've seen there is no mention of LineageOS which is like 95% of their product.

So relax, you didn't miss much.
It's not the chips that are the problem. Most of Intel's fabs are in the US, and their assembly sites are in a number of countries.
But then again nearly every CPU runs on FPGA these days. 6502, Z80, various mainframe CPUs, x86, and more modern CPUs. Modern CPU development often goes via FPGA - after all, the CPU development tools are the same: Verilog, for example. Which you first synthesize to FPGA, and, after some testing rounds, to silicon.
Am I the only one who doesn't want this? I am spammed enough as it is.
This is not microchips, this is basic PCB assembly

But I'd guess momentum is hard to change.
I feel you about Keep, but it looks like Microsoft's Sticky Notes will soon get an update with syncing and a mobile phone client - https://winbuzzer.com/2018/09/03/microsofts-sticky-notes-3-u... so that's an option.
Somewhere poor, where labor is cheap and people are still susceptible to bribes?
Yes, TVS Diode Array (image google to see they look just like in the article) for ESD protection is the obvious candidate, inserted on serial communication lines - perfect spot for signal interception/injection.
Linux Mint, currently on 18.3 but thinking about upgrading to 19 at some point.
Git Rebase by Default
Not quite my tempo.
Weight loss earnings
The smallest fargate container in us-east-1 will cost you USD 13 per month if you never shut it down.

Avoid using a load balancer as they are quite pricey (although it will allow you to create and use auto-managed SSL certificates for free.)

Of course you will also pay for egress traffic.

The nicest part of Fargate is that:

* you can define your whole cluster using a docker-compose like format.

* you can manage your cluster using the ECS CLI. No extra tool needed.
Hortonworks and Cloudera are merging
The Romans had a saying for this: "Quod licet Iovi, non licet bovi". While 20 centuries might have gone since it was coined it still holds true.

Going back to the original assumption that someone did not read the article it should be noted that socket performance in 18.10 is lower than that in 12.10 even when the spectre/meltdown mitigation is deactivated.
Haha, version of Linux is another poll in itself
In the US there are many groups that feel safe around the police as well — to the point where using white people to shield black folk from cops isn't unusual.

In Scandinavia, the state was involved in forced sterilisations. I truly doubt everyone shares your view of the trustworthiness of their cops.

The biggest difference is that the "high profile" thing happens less: cops have less guns. So people don't get shot as much, they're just harassed, beaten up and arrested for little reason. Yay Europe, I guess.
This is only really valid for protocols or products designed before the Morris worm of 1988. Anything designed beyond 2000 has no excuse for not thinking about internet security.
I haven't read this but that's really high praise considering how war and peace is impressive in exactly that way
To design the new ISA to be any good, is not that easy.

> ARM paid millions to Hitachi to use SuperH patents in Thumb instruction set

http://j-core.org/ELC-2016.pdf
A photo of such a motherboard with a big arrow pointed at the additional chip would be a useful addition to this discussion.
So hard, I really use all of those. But no multiple/all of the above choice. Chose Linux, because if there's just one choice, that's what I'd go for.

Edit: Ooh, I can actually choose multiple... hehe, did so.
"But this clever hack is probably not limited to RF and is likely to also be embedded in transformers used for isolating Ethernet lines."

I was thinking along the same lines: a balun could harvest energy and use it for other purposes, but it should either store it for later use using maybe a tiny supercapacitor inside, or inject it into the data stream on the fly not unlike RFID dongles do. Or maybe just have enough power and memory to store a few hundred bytes and alter a few fields here and there, so that for example a network frame coming from a compromised machine can have its source field rewritten as it came from a trusted source.
In theory small pull up resistors also could be swapped with lookalike malicious parts capable of tampering with i2c traffic between boards peripherals so that devices can be activated/deactivated no matter what the CPU tells them.

We're going straight to the point when there won't be a single device in the world, from toasters to supercomputers through top brand network gear, that can claim and guarantee to be secure; inserting malicious hardware and firmware is getting just too easy for those with the necessary knowledge and resources. A technically interesting and scary scenario.
Assuming Bloomberg's story is true, I wonder what reason Apple has to hide. Not wanting to upset relations with the PRC govt?
It depends heavily on the neighborhood. I don't know if you have anything quite like the inner city slums of the NYC housing projects or the the bad areas of Chicago, Detroit, Philadelphia, etc. in the Scandinavian cities you have in mind. They aren't places seen by most tourists.
I have always been of the mind that every commit should be a working state. My coworkers who often commit with the message “WIP” disagree. I doubt I’ll ever sell them on it.