skysight-inc/HackerNews huggingface dataset:
Advantages of Pearly Penile Papules Home Remedies
No one questions its ability to do some amount of math. The doubt is in how it scales.
Hmm, I think potted history is more correct...

There is no mention hardware here. HP, Compaq, IBM and Sun all produced hardware with HA ability. Meaning that normal software could be run on two or more nodes, and should one break, it'd fall over with no loss of data, or outages. Here is a (contrived) video where they literally blow up a server stack: https://www.youtube.com/watch?v=qMCHpUtJnEI

You can do this with VMware, and if AWS could see a way to make money, they'd do it to. (For a while AWS's platform was not capable, but that was 7+ years ago. its much more lucrative to make people build in HA and redundancy into software, as its requires more services to run)
But they don't, they explicitly mentioned they are not under a gag order, which is the first thing you are forbidden to mention when you are gagged. That is the reason why "warrant canaries" exist.

https://en.wikipedia.org/wiki/Warrant_canary
You always have to start somewhere. Do you want to code all the OS from the ground up, or do you have minimal expectations about the environment your software will run on?
Do you want to look at all the tiny details, or do you wish to focus on a specific aspect of the problem? The article author could also give an explanation of linear algebra, but I guess he expects the reader to be familiar with this part of the problem.

I guess that there's always a software layer which may be considered "backbone". For people designing networks, all the tedious work of building the network is just plumbing, and they probably expect it to be automated from a formal description of the network.
So how much inspiration was rekindled when you guys watched Ready Player One after working on this?
> ...every hardware pentesting shop will be going after these boards like they're looking for golden tickets.

The way the original story was written, it suggested that four subcontractors were identified, and almost 30 targets selected, with the implied suggestion that either the boards were custom special order boards, or destined for a specific lot order made by a customer. If true, then it is unlikely these boards will be found in the wild except by slipping through those almost 30 targets into the used market.

Supermicro has about 600 board SKUs, so finding these needles in the haystack is likely more feasible by approaching data centers offering to help find the boards for free, in return for allowing the pentesting firms to take physical possession of such found boards.

The story did reveal that the original "tell" that gave away the chip was odd but not obviously malicious at first glance network traffic, and that the suspected intent was implementing an Advanced Persistent Threat model. The article also mentioned the chips were connected with the BMC, but it wasn't specified in the article whether or not the chips got out onto the Net.

So finding the boards in the wild probably will focus upon finding them in the same manner, over the network. Power down the server, let the BMC stay powered on, and watch for unwarranted network activity. Or boot a Linux on a stick that deliberately does as little as possible and premises networking allows it to do just enough routing out to the Net to capture traces of what unauthorized network traffic is trying to do, and watch for unwarranted network activity, in case the chip design is clever, and hides its activity until it detects the mainboard is already running before trying to inject its network payloads onto the mainboard's network interfaces.

What are others' thoughts on how to find these "golden ticket" boards?
How can it be a decent tool if any operation takes

.

.

.

.

forever
Does this story have the potential to invalidate any CC assessments / certifications?

eg, this one for Ubuntu from earlier this year that was assessed at EAL 2:
https://fmv.se/Global/Bilder/Verksamhet/CSEC/Certification%2...
Feeling high, while flying high?
Security is a completely baseless excuse here. Apple could easily provide a repair unlock key to users via their Apple accounts.
Yup. lol.

I wanted turkish delight for years until finally spotting the Cadbury's turkish delight bar. Did not like it :)

I like it well enough now, but as a kid the consistency really turned me off. Also, that bar isn't really turkish delight.
mgl64 is generated from mgl32 though [0], so no big deal, no? Who's hurt by this?

[0] https://github.com/go-gl/mathgl#contributing
If this is actually true (and I have doubts), the reporting will explode in the next few days/weeks with all the detail you could wish for.

A few pins can be enough to write to memory, if there's an interface for it (SPI, I2C, but I'd be surprised to see those unprotectedly lying around on a server board ...). It's be very slow, but I think networking could work as well. With efficient software the resources needed on the chip itself could be held very low and eventually offloaded to the main processor.

I don't think it has any wireless or DSP stuff.

I don't know enough about processors, memory, networking and low level software security to know how difficult it is to compromise a computer with such a chip on the main board, but the chip itself certainly seems feasible.

But: It must be really expensive to manufacture the compromised devices. It just seems stupid to manufacture every device with such a chip. 1/1000 seems reasonable. The larger companies have (had?) lots of them anyway.
This is cool, nice work.
Intra: encrypted DNS for Android 4+ (open source)
Almost obligatory, but Stanford cs231n [1] lets you implement a complete (deep) neural network from scratch [2] before venturing into pytorch/tf. Its super fun.

[1] http://cs231n.stanford.edu/

[2] http://cs231n.github.io/assignments2017/assignment1/
Sorry Microsoft, but Apple just showed how to do dark theme right
The whole point of this story is that you can get such machines fixed at independent repair shops if the manufacturer is not playing ball. Apple is trying to stop that, Dell et al aren't (as far as i'm aware. )
That makes no sense. What do you think is the difference in "denial levels"? Kind of like Dragonball-Z power levels? Does a "vehement denial" cost the one making it any more than a "meek denial"? If making "vehement denials", coming at exactly the same cost as less strong denials, are more effective, you would just have made all PR companies/people extremely happy - they get a stringer weapon for free. All the have to do is issue "vehement denials" instead of just "denials" and a larger share of the population believes them (for no valid reason). Especially when the public has no way to get the "real truth" but can only watch a Dragonball-Z style "strong statement" vs "incredibly strong statement" showdown.

> People claiming gag orders are crazy, mostly for thinking that Apple, or anyone else for that matter, would ever sign a document forcing them to lie to their customers

Why do you think a "gag order" is something that has to be signed off on by the one getting it? That too does not make any sense. An order is issued by someone who has more power, here, the government. You don't have to sign anything for the order to exist. "Gag order" has "order" right in the name.
Though some academics are challenging the conventional consensus that active management is not worth it:

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3247356

Also, I'd like to note, it probably depends on the maturity of the market you're looking it. It will probably be harder to beat passive investing in US fixed income than frontier economies equities.

Edit to add: A few big & cheap index funds and a couple of rock star active managers sounds good to me, actually.
The opening about availability and our expectations hits right at home.

I'm originally from France, where stores closing during lunch time, sundays and mondays all day is normal.
I remember when I moved to Canada, it seemed so amazing that stores were opened 7/7, and sometimes until 9pm (on Thursdays and Fridays). Wow!

Then I got used to it, and now, anytime I'm back in France, I just find it unacceptable and wonder how those store survive and make any money while always being closed!
Have you had bad experiences with them (genuinely curious)? The only time I've had to use dell onsite service, they came out the same day... So I bought their 12 month onsite warranty, but I also figure that after 12 months I'll feel happy to start doing repairs myself.

Side note, I'm not normally a massive Dell fan by any stretch, but no one else had a 8750h/16gb ddr4/1060 geforce for the money I wanted to spend (and available on the shelf), even though the chassis is super plasticy and doesn't really inspire the same 'wow' factor I got from apple hardware's look and feel.
It's a G3 17 I've landed on ($1,900 aud with a docking station included), as the G7 was out of stock, and I'm an impatient prick. I'm hoping I don't regret it, haha.
Great insight. Thank you.
Alpine containers in production? Possibly not a good idea
No, Turkish Delight is wonderful. The crime is the monstrosity Cadbury call Turkish Delight.
The article reads like it's the only network that existed. BBS software also got its start in 1979. CompuServe also got started in 1979.
I'd love to get one with Frankfurt/Germany in the center and would probably buy it as a Christmas gift for all our employees based here.

Do you know how much hand massaging the data was necessary?
I don't think Blomberg is politically motivated. Maybe their sources are. Bloomberg is traditionally anti-Trump.
Well, DOS is very old and incomparable to modern systems in regard of comfort and program availability. Therefore Microsoft has little value from it.
On the other hand, Windows has lots of value. Because even when most private customers get recent versions as free upgrades, the corporate site looks very different. Just think about different server versions of Windows, which most possibly share huge parts with the Windows 10 kernel. They cost real money + user access licenses.
Therefore - although I hope you are right - I don't believe that Windows will get open sourced anytime soon. I like the idea very much, but I'm trying to be realistic about this.
> Seriously BOSE makes bluetooth headphones.

With serious build quality issues. Mine are literally falling apart.

> So far legitimate criticisms include your iphone's playlists not syncing with a different laptop.

Neither windows nor linux come close to how seamless macOS is. Keyboard navigation with consistent shortcuts across apps and a fantastic touch pad. Watching someone use Windows (a developer even) is like nails on a blackboard. They move unbelievably slow and take forever to do something.
D-wave have spent a lot of effort to show that their machine is quantum, and it seems convincing enough.

However, it's not a computer (i.e. a general-purpose machine, able to run arbitrary programs https://en.wikipedia.org/wiki/Universal_Turing_machine). Instead, their machine is a special-purpose calculator, which finds an approximate minimum value for a certain sort of problem ( https://en.wikipedia.org/wiki/Mathematical_optimization ).

I always take D-wave's claims with a pinch of salt, since their original announcements were incredibly misleading. They claimed their calculator could solve problems orders of magnitude faster than a program running on a classical computer, but they turned out the be comparing apples with oranges: their machine finds an approximate solution, while the program they compared against was guaranteed to find an exact solution (i.e. it would carry on going until all other possibilities had been eliminated).

Other researchers did a more apples to apples comparison, by writing an approximate program (essentially simulating what the D-wave machine does). They found that a normal consumer laptop was actually much faster than the $10,000,000 D-wave machine.

D-wave's newer machines are more powerful, but I don't know if their machines benefit from the scaling properties of quantum computers (their qubits are noisy, which AFAIK prevents them all entangling completely)
Have you read the paper you linked to, or just the abstract and quotes in the right wing press?

You're confused about how NSF grants work. The publication is listed as an output. The grant was awarded before that paper was published. The listing of the paper on that page implies nothing about its quality.

My example paper was torn down by mathematicians, not diabetes researchers.
Regarding 1) could you offset ptr backwards and y forward, so that last iny makes zero?
About halfway down, the Bloomberg article mentions a BMC, a baseboard management controller. This is an existing part of mainboard design that has been around for just under a couple of decades. Read up about IPMI and BMCs, what they do and what their capabilities are. Then consider the threat, explained elsewhere on Hacker News several times, of simply supplying an extra ROM chip containing different firmware for that processor to run.

Focussing on the technical is focussing on the wrong thing. Bloomberg's point was not that BMCs can do this, nor that they can be made to do this. People have discussed these on-board systems and their problematic natures rather widely. It was that the supply chain is vulnerable, and that (on the assumption that Bloomberg is right) this problem with the supply chain is no longer a hypothetical case of what an attacker government could do, but is now a documented case of what one government has done, a few years ago.
Because "getting caught"'s only consequence is that you have to use a new method. There is no punishment, no negative cost to be applied retroactively to compare it to the received benefits. The net effect still is highly positive since while it worked you got what you wanted. Same as in every spy operation, ever.
Resource Limit Is Reached

The website is temporarily unable to service your request as it exceeded resource limit. Please try again later.
Power up your terminal workflow with tmux tricks
It's a lack of any well designed standard library for JS, combined with weak namespacing and modules, as well as the rougher compilation step.
> They can if legal

I am talking about illegal immigrants who work for shady temp agencies and then are contracted to work for big players.
I think what GP was suggesting is that lower level employees might be under individual gag order, keeping them from ever reporting the incident to their higher ups (including those responsible for the warrant canary).
The outrage also mostly comes from people in their 20s and 30s at these companies. These people have a binary approach to politics: you're either a moral saint or a Nazi. Since Kav. is a Nazi, all his friends are too. I blame our schools and universities that have taught people to hate other people while managing to pretend it's all about tolerance.
Elon Musk: Tesla boss mocks US regulator days after settlement
Any different link available for viewing ?
That’s a very good point. Yes, it would be incredible if publishers would take archival on and have code + source assets as part of the deliverables.
It's hard to say what the truth is here, but what I will say is if that Bloomberg reporter doesn't have substantial evidence to prove that claim he could be in serious trouble. SuperMicro's stock was down 50% straight after that articles release, and it's not looking so hot right now either.
He could be looking down the barrel of an SEC investigation very soon.
illegal?
I wonder what they mean by this:

APOUT: AND #$7F	;eat Apple idiot char codes, type Ascii
JMP COUT

did the Apple II not use ASCII?
Is it extremist to support Kavanaugh?
There are probably a good number of Republican voters hired at Facebook. Most of those employees will be supporting Kavanaugh's nomination. There are obviously many Democrat voters employed at Facebook who won't be supporting Kavanaugh. Anyone who finds either of these two facts unacceptable should immediately walk away from their jobs or be terminated. The only alternative is to accept that there is effectively a civil war happening, one side must be cleared out, and pick a side. To me that is just insanity.
High Energy Physics Community Statement
Step 1. Write function that evaluates cake. Step 2. Use genetic algorithm to bake perfect cake.
I wonder why this article didn't even mention that the Millennium Tower is not even anchored to bedrock.
Is there any info on how much revenue is extracted per software item? Windows is most widely used one, but I am sure it is not one that extracts money the most.
If it's real, it could be part of a bigger persistent threat. Maybe those chips would react to some signals, start to heat and fry the motherboard.

In case of military war, it could DoS many servers at once from the inside.

It could also be used to prematurely break the motherboards, and sell new ones.

There could just be there to ping C&C upon activation in order to locate datacenters, including military ones maybe (information that could be useful in that case of war too).

We can think of a few use cases than just spying on network packets.
I suck but it helps me just cool down
it is odd that JIRA is so slow, and I doubt it's due to the JVM. Clubhouse is built using clojure and is delightfully fast to use. (not affliated, just a Dev who has used mingle, Jira and clubhouse)
Modern tests are delivered by computer and typically are adaptive. This means that as you answer questions correctly you get asked increasingly difficult questions until you get some wrong.

This means that you aren't limited to asking the same questions to everyone so you can have appropriate discrimination through the range.
There's a phrase we use in investment banking: "talking his own book." A trader is talking their own book when the superficially neutral view they give of the market is designed to promote the value of their own positions. The active managers that Levine quotes are talking their own books when they decry passive funds. As ever, one should follow the money, and ask who stands to benefit if a view of recommendation is implemented. "Where are the customers yachts?"
Yes, so if you get your Mac or iPhone stolen it’s useless to the thief. This already happens with iCloud Activation Lock, but people just disassemble the motherboard and sell parts like the screen instead.
Whereas when I boot my games box into Windows 10 and it sits there saying "Applying updates" for 45 minutes before rebooting and then thrashing itself into unusability for another 45-60 minutes doing ... something ... I feel like I'm being trolled by MS.
This has a greatly reduced effect. What you have to keep updated is the accessible properties.

As I said, it's similar to writing a SQL view and giving access to that. Difference being, GraphQL is a lot more appropriate especially for web REST endpoints
Norwegian Blue, indeed.
> Some of us live to hack, crack and diy. We are jealous of the right to repair, tinker and transform.

Completely off topic, but here in Norway we also have a right to reverse-engineer software if the vendor can't or won't provide what you need to complete an integration. This has been the case since the 1960s if I remember correctly, and it's still in there after revising the law this year.

Ref: Åndsverkloven of 2018 §42 [0] (in Norwegian), https://lovdata.no/lov/2018-06-15-40/§42
The article mentions sharding (a scaling technique, not exactly something that helps with HA), but then it stops. Does every node in CockroachDB store all data?
My native language is Dutch (Flemish, technically). As a Belgian, it is not that weird to me. We don't dub things on tv, so we grow up being fairly familiar with English.

So when learning programming it did not strike me as 'weird' that the language was English.

Nowadays, because of online gaming, it is probably even less of a problem for kids.
True
I’m a make cheerleader, and tricker on one half but the other half of me loves dance but I’ve been dancing not for long in a serious way an I’m scared to show anyone cause well I suck
This might be referring to the regular grammar of Turkish.

In Turkish, if you have a plural noun in the ablative case (roughly meaning 'out from'), you show this by attaching the plural suffix and the ablative suffix to the noun. For example, 'ev' means 'house', '-ler' is the plural suffix, and '-den' is the ablative suffix, so 'evlerden' means 'from (the) houses'.

In Latin (and most Indo-European languages that preserve case), on the other hand, you have one marker for 'ablative plural', that's completely distinct from (most) other case-forms of the plural, and from the ablative singular. So 'domus' means 'house' (in the nominative singular -- there are no zero-marked nouns in Latin, which means that every noun has an explicit case+number marker), 'domibus' means 'from (the) houses', and 'domū' means 'from the/a house'.

This also applies to verbs. In Latin, you have one single marker on the verb that signifies tense, aspect, mood, and person. Passive verbs conjugate completely differently from active verbs, for example. In Turkish, you generally have one marker per thing signified.

(English has lost most of this inflection, but we still have -s for third-person singular present active.)

There's also a lot more irregularity in Turkish than in Latin. Latin has five declensions for nouns and four conjugations for verbs -- so 'domus' takes a completely different set of case markers from 'Rōma'. In fact, 'domus' doesn't really fit into the declension system at all -- it's entirely irregular. (Think English strong verbs.)

The thing about this is that it's actually Latin that's crosslinguistically weird here, rather than Turkish. Most languages are more like either Turkish (lots of affixes, each of which with one and only one meaning) or Chinese (not many affixes at all) than Latin (affixes which mean several different things at once). Most Indo-European languages are to some extent like Latin, but most non-Indo-European languages aren't very much like Latin.

Turkish also doesn't have grammatical gender, or any sort of noun class system at all. (Grammatical gender is one type of noun class system, common in the Indo-European languages.) But noun class systems aren't cross-linguistically uncommon.
It sure feels archaic!
As mentioned on HN previously, B&H (a large New York based photography store) do not take online orders in accordance with Jewish holidays.

https://news.ycombinator.com/item?id=12183263
> it needs to be a platform that people want to develop for

Have you tried developing an app for it? Docs are solid, but time is valuable. Why don't they include a bunch of super simple apps to show how it all works and make entry as easy as possible?

I want solid to succeed (well, anything comparable is also ok), but as much as I don't like it, marketing wins over how good the product is. That's just how it is today. That's how open source libraries and projects grow. It has to do with tons of available information, world moving forward very fast and our limited attention.
My elders don’t even read English, I just don’t see how Google and Windows offerings are as usable as Apples. And in fact experience shows they weren’t, I tried and all the login and quality issues made me go out and set everyone up with FaceTime. Although their recent decision to hide the switch camera button was asinine, they mostly kept it clean and consistent and easy to use.

Same with iOS. If I give the same elders a Windows or Linux or Android device, who knows what kind of malware they will click on when visiting their news websites or clicking WhatsApp links. But with iOS, I never have to worry about malware. All they have to do is go back to the home screen and kill the website or process.

That’s not marketing, that’s creating software and hardware that meets a need. A need for privacy and security and usability with minimal hassle.
Women must always be believed! Everything else is an extremist sexist view, enforced my old white cis males in powerful positions! /s