skysight-inc/HackerNews huggingface dataset:
We had a problem with switching from 2.0 to 2.1 and, of course, it happened when deploying our app to production. We don't practice very good environment management and this was our first .NET Core app to go into production. Dev, QA and UAT were all on 2.0 but when it finally came time to deploy to production 2.1 had been released. 2.1 was installed on prod and we pushed our deployment and there were errors when trying to connect to the site (it was ASP.NET Core web app). We eventually uninstalled 2.1 and installed 2.0 and everything worked but it was frustrating to lose time to that.
AutoMicroFarm's vision is to enable people with back yards to

1) grow the majority of their food in their back yard (asymptotically converging to 100%), and

2) spend a minimum of time and effort in order to do so (asymptotically converging to zero time and effort).

AutoMicroFarm will provide products and services to that effect.

I started out with aquaponics, thinking the end product would need to be high-tech. But it turns out that good design (which the aquaponics industry has not completely agreed upon yet) can obviate the need for high tech.

Aside from aquaponics, permaculture goes a long way towards maximizing yield while minimizing time and effort needed on an ongoing basis. However, the time and effort is often front-loaded when the design is installed.

Robotics, when ubiquitous and affordable, will transform agriculture, whether on a commercial or a residential level. In the meantime, there are lots of opportunities that I hope to capitalize on.
Also, wide character sets. ASCII is all anyone ever needed.
> remember we're assuming everything is compromised

I think Bloomberg (and all related) web servers displaying the article are compromised and they're leaving out critical facts the point the finger elsewhere.
Is that something you'd be willing to pay for?
Smoke, Amazon’s Swift based microservice framework
One way I've solved this is to open the second PR against the branch for the first PR, and explain what's going on in the PR message. Then, once the first PR is merged, update the second PR to be against the real target branch.

This works better with a system that requires the PR owner to actually hit merge (so it's not accidentally merged into the first PR's branch) and where approvals stick across PR changes (which is undesirable in general, though).
Exploiting oEmbeds at Medium.com
what they describe isn't possible. which is perhaps why Apple et al. are easily able to refute it.

what actually occurred must be something a bit different, that they didn't understand and/or aren't conveying accurately or didn't receive accurate info due to it being classified. or you know, because the general press is still at movie technology ... the hacker is in the building!

A chip the size of a pencil point can't be inserted anywhere useful or do anything meaningful. Something that small amounts to a discrete component, not a "chip", if packaged. If bare die, it still can't be vastly complex and needs to be mounted in a way that is very obvious (epoxy blob).

So, it must be an additional discrete that inhibits the burning of a W/O fuse in the BMC or some other management function. Thus preventing the disabling of some debug function.

There is no way it has communication capability, etc, on its own.

EDIT: ah, @baybal2 perhaps figured it out. it's likely flash memory and the bmc already has provision to read it as the "recovery" flash.
Make a DIY Nintendo 64 Classic: Odroid XU4 N64 Build
The option to also require a pass phrase for decryption would help.
There have been studies done where patients were given lots of fruit and it did not cause a laxative effect.

https://nutritionfacts.org/2017/02/23/can-you-eat-too-much-f...

> Seventeen people were made to eat 20 servings a day of fruit. Despite the extraordinarily high fructose content of this diet, presumably about 200 g/d—eight cans of soda worth, the investigators reported no adverse effects (and possible benefit actually) for body weight, blood pressure, and insulin and lipid levels after three to six months.
Not at all. It would be quite damaging to their reputation if it came out later that they were affected by this, knew it, and lied about it. Especially since the privacy of customer data is a key part of their marketing message these days.
Where is the _actual_ explanation of how the chip works? I assume it's been dissected to bits, and that's way more interesting than just "it's been found on lots of boards". What does it actually contain that apparently lets it do things that apparently no one else has managed to achieve at that scale?
Glad to hear your data, because every statistic on police homicides by country tells the same story.
Show HN: Bidboard – A digital billboard to promote your startup
Seriously, pitch this story to an editor at one of the major tech blogs. It would be an incredible read.
The deserts of Titan have organic dust storms
Nice article! Great info
"In the three years since the briefing in McLean, no commercially viable way to detect attacks like the one on Supermicro’s motherboards has emerged—or has looked likely to emerge."

I know a commercially viable way to detect hardware attacks.

Standardized hardware designs, such as the "x86 standard," ARM IP licenses, and more recently, RISC-V, decentralizes manufacturing and drives the cost to commodity levels. I'm specifically proposing that the U.S. Government appropriate the patents on whichever hardware design and declare them a National Security asset, and then guarantee royalty-free licenses to any company that wants to use them.

When it's no longer a big profit center, China is no longer as interested in owning a monopoly on it.

And presto: there's no longer a monopoly on the hardware. Thus it's no longer a guarantee that your hardware is being bent to the will of a single nation-state. Hardware attacks can be detected as variations between the hardware made by one nation vs. the hardware made by another nation.

The downside is that Apple can't have the same profit margins that come from closed, proprietary hardware.

The upside is that manufacturing and process innovation (such as Intel used to do) becomes extremely desirable. It becomes so valuable that we saw Intel reluctant to offshore their best processes.

There: economic solution and political points, to boot!
So so true. Every time I go back to programming microcontrollers in C I'm amazed at how much can be done with just a little code. We waste so much on fluff. But then, we do enjoy the fluff.
Spark, Sentry and Kakfa are not cloudera projects. They all existed as open source before i left. Also cloudera never truely dominated any of them. Spark has databrix and Kafka has confluence.
2017 earthquake off Mexico broke through an entire tectonic plate
What about bacteria? Unfortunately weighing the value of life is hard. As cute as kittens, and spiders, daffidls and protozoa are, we aren't equal. And evolution did not 'make humans', and we are not the intended product of the big bang. Seems the ultimate hubris to bill the total energy expended by the universe so far to the creation of us forum posting meatbags.
APT10
Can you quote a single source from that article, or is it all anonymous?
Perhaps they want an unpleasant mobile web view, to herd more people towards the blessed app?

There's only a few ways to monetize a site like this, and selling sensor, identity, and behavioral data from phones is one of them. Maximizing their bean count would dictate not leaving that money on the table.
Anyone know what Amazon are using it for?
No. The denials did not turn out to be false.

Conspiracy theorists aside, the main new thing that came out of the Snowden revelations was that Google’s physical security for data-center-to-data-center traffic was compromised by the NSA, which Google never denied, and responded by hardening server to server traffic.
Average IQ among intuitor types (xNxx; MBTI) is said to be one standard deviation above the norm (115+ SD15). They are also very overrepresented online.

Having an IQ 2 standard deviations above the norm (130+ SD15) tends to attract problems/difficulty/friction in corporate environments. That is, companies are biased toward Te users (xxTJs) and extroverts + judgers (ExxJs) with IQs in the 115-125 range.

Synthesis usually starts at 130+. Companies either don't like it, or want it cheaper.

115-125 is also most common among students enrolled in big-name universities. They also get an edge in high school, as they are smart enough to be better, and yet, not smart enough to get bored or be seen as a threat.
It's hard to compete domestically against low prices caused by China's completely different standards for wages and human rights for laborers. Plus, here we don't like the idea of manufacturing industries being subsidized by the government (except in the case of "defense" of course...), while China obviously has no qualms with doing so.
indeed. or controlled them
Yeah, it's not like statistics totally back this up.

Or that, "someone who has multiple police in his family" could be biased.
Ok, great... I have a bunch of simple projects like that, one web instance running on a single host.

How do I safely upgrade it without downtime? Ensuring that the new version starts up properly and can receive traffic before sending it requests and stopping the old one?

With k8s: kubectl set image deployment/my-deployment mycontainer=myimage:1.9.1 (or just use kubectl apply -f)

With your nginx config: ????
I'm curious as to whether Eric Berger (the reporter who wrote this piece) saw the op-ed on the Houston Chronicle first (he worked for them before Ars) and smelled something fishy.

The fact that the Chron used a screencap of Musk smoking that blunt to go along with the anti-SpaceX op-ed is unbelievable. Letting a PR firm throw mud at a client's competitor via a thinly-veiled op-ed is one thing, but helping them by taking part in the propaganda machine to that extent is something else entirely.
I'm not a fan of artificial sweeteners since there is always so much bad news about them. I still drink them from time to time though
I mean what are they gonna say? "Yes, we have been aware that an unknown but possibly huge number of our servers have been compromised, but decided to keep our customers in the dark"?
" A virtualization solution is not a containers solution. Wait. Wait wait... I'm wrong, aren't I? From a quick google, it looks like Solaris Zones are almost exactly like containers in this way."

Yes, and they are true containers: fully functional UNIX servers, running at the speed of bare metal, because the OS is virtualized and not the hardware. I was running zones back in 2006 when project Kevlar first came out. Few months later we were running eight 4GB Oracle database instances in a single T2000 server, each database inside of one zone... GNU/Linux didn't even know what a container was yet, and wouldn't for several years...

Yes there's an IRC channel. Don't remember what it is. I've never needed to go there. I pop up on the SmartOS mailing list every few years to ask not a technical, but an architectural question. That's about it.

"Maybe you are all consummate professionals and just use mailing lists, but I am skeptical of that."

A lot of us are professional system and/or kernel engineers or architects, yes. Many of us are freelancers and consultants. Most of us are true engineers, with university degrees in engineering. But there are a lot of newcomers too, especially from ISP's, where SmartOS is a popular hosting solution for infrastructure and customers. The kind of stuff that has to work and has to be unbreakable because it's making money.
A very good article on this topic:
https://waitbutwhy.com/2017/04/neuralink.html
Glad to hear it, and you’re welcome <3
Yeah I gotcha, sometimes that's all you can do. Sounds like they were terrible managers. I hadn't even considered the (obvious) fact that automating your own job can be dangerous.
Thank you for the Matthew Garret quote, very nice "alternate" definition of UEFI.
I understand the Dutch are doing a good job but it’s all indoors. Spain and Portugal has the right climate for other crops grown outdoors.

The Dutch have been working on saline water crops and so far they have done a great job with potatoes. Also working on carrots, beets, cauliflower,kale etc all grown in salt water. Non GMO. They are testing in Kenya, bangaladesh, Vietnam and places where salt in soil makes it impossible to farm. I want to say I am really impressed with Dutch Ag.

I also understand EU got a lot of produce from Africa but placed restrictions about it being non GMO. Now that China has taken over management of Africa and spending on infrastructure (their belt and road initiative) so they can outsource farming to feed their billion plus population. In the US, they bought Smithfield foods to start exporting pork to China and they also own a lot of farmland in the USA, the pork operation because regulations are lax in North Carolina rather than in China. (Open air lagoons with pig poop...disastrous with ). But I digress. Different topic. I am trying to get back to my initial thought which is that..local food is food security. We live in a globalized world where we can and do ship food all around the world, but a fundamental self sufficiency to feed the local population is a food security issue and I would say..even national security. But this has also gone horribly wrong with stockpiling(corn and grain subsidies in the states leading to surplus leading to HCFS, ethanol and then animal feed..) and to entirely handicapping certain industries(like our dairy sector that is highly subsidied ..bottled water is cheaper than milk. Dairy farms can’t make it anymore). It’s a balance.

I am afraid I might have digressed..thanks for reading!
> we also hacked all of their internal communications too

my take on the article was that US counterintelligence sort of cobbled together some hacked phone communications with some info from human agents working in or around or near Chinese factories. to say that "we own them" maybe goes too far?
It seems a bit nieve to think that you need to have an above average IQ to make it into Middleclass society.
Is time or energy a more scarce resource?
Perhaps that's just what you've seen then and not really representative? For example the Roslyn compiler service written in C# uses expression trees to do what it does, and it opens up an entire field of possibilities for meta programming in C#.

> But it doesn't and shouldn't change one's programming life.

What's an example of something that would?
Plenty of claims by "senior intelligence officials" have proven to be factually incorrect. Same goes for press statements.

It's simply too early to tell who's telling the truth, who's mistaken, and who's lying here.
Have you read the article?

Apparently one of the big factors in Supermicro success is that it has over 900 different motherboard designs, and hundreds of hardware specialists which can customize them further to client wishes.
Another problem is anti-tampering measure is applied before the initial tampering check have been applied. Anyway, that wouldn't solve everything considering that if the chip itself is tampered with, that's undetectable short of an electron microscope analysis and even that wouldn't solve the problem of backdoor in the original chip design.

As you say, that's un-winnable. The only way to really build trust is the capacity to sue your manufacturer to oblivion - I mean the real oblivion (destruction of shareholder value) with criminal charge for the company officers, not the lame single digit percent of a single year of profit with a discount if you settle.
Yes and no. Often, and I think in this situation, the government wants the story out, but not officially, so certain people are told to leak.
whatshisface is correct.
Counterpoint: even if we ignored the fact that you cannot possibly produce the volumes of chips necessary at the price necessary in your country rather than in "we don't have to acknowledge all the human rights violations" countries, why would you believe this problem goes away if chip manufacturing were done in your own country, rather than another?

The moment the option of taking control of a production line of something _this important_ becomes available, your local specialized organized crime outfits will start to figure out ways to insert themselves into those production lines, learning the ins and outs, and figuring out a way to get something, anything, in there that won't be noticed but will give them a hook into millions of systems.

The law does not prevent crime. It just puts a price on it. While that price is typically too high for individuals, for organizations that have no business registration to revoke, and no CEO to drag to court, it is an entirely trivial cost.
Did you have wicked reddit karma? I have maybe 50k combined on an 11 year old account, and I've never received such a message. I wonder if it had to do with your previous posting history or subreddits you frequented.
> What was this company doing in hiring an untrustworthy manufacturer to handle secure devices? That's playing a game you've lost from the start

You're assuming that there were feasible alternatives; from their comment below:

"wasn't our device. There was a big, reputable company behind the device. We were ordering a number of those and they would be shipped to us directly from China. ...
Also, we were basically locked in due to the magnitude of investment in the software we have developed for the device.
...
Fortunately this only lasted for few months until it was dealt with"
Yep, pretty disappointing.
Looks like it, yes

> People may have heard of Kelly Canary because of her work Seattle grunge–era bands such as Dickless and Earth, but she now spends her days more often in front of a jury instead of a crowd of concert goers. From bartender at the Cha Cha to staff attorney for the Innocence Project here in Washington, she has led an unconventional life.

http://www2.kuow.org/program.php?id=24366
There’s also [Scriptable](https://scriptable.app), which is sort of like a JavaScript flavor of Pythonista.
Extending upon this, Sync for Android is pleasant.
Get you a man who can do both. Architects in particular seem rather high-falutin' until you read the understanding of their work. Aesthetics often means making something so beautiful that it harmonizes with the rest of how you live. Ugly things stand out and cause greater disunion in our lives.
Wallaroo goes full Apache 2.0
Right, but IQ is still one of the best predictors of success.
A lot of people seem to be voicing strong hate without understanding what this even is. (Not the parent comment, but others)

Wasm (Web Assembly) is still early in development. It's looking like it will create a high performance & excellent VM to compile code to for the browser. This is great for any language. A lot of proposed features could give it all the same features you have in JavaScript. But those features are only proposed. Lin Clark gives a great intro on this podcast - https://pca.st/5rjS

Blazor is an experiment at utilizing Wasm to do JavaScript like things with C# in the browser. I've never heard anyone say use it for production yet. The YouTube video here is 1 of the best talks you'll see on it if you watch it. I was lucky enough to attend in person.

You can use Blazor without a server to create static sites & host them on servers like Netlify.

Performance & file size isn't something they've put much effort into at all yet on Blazor. Way to early & easier problems.

There are other experiments going on with .NET, Mono & Wasm . See Uno & Ooui.

Steve Sanderson did an experiment a few years ago to see if this was even possible based on some interesting research he found. It grew from that. They have put a really awesome team behind it. It's gained a great following & has a very active Gitter channel that the MS team (notably PM Dan Roth) talks in. They're also quick to respond on GitHub.
How I was scammed selling Ether by Zelle
> the real oblivion (destruction of shareholder value) with criminal charge for the company officers

This very rarely happens even if people have got killed. Also, good luck suing a Chinese company in China.
Wait, what's wrong with razor?
Of course they do, the amount of data you can gather in an app compared to what you can get in a browser...
Apple is very strongly denying it as well

https://www.bloomberg.com/news/articles/2018-10-04/the-big-h...
>There are still plenty of fields where you can start late in life and not come from wealth but still be the best in the world.

Such as?
I'm intrigued by the concept of literate programming and interested in exploring options for a Scala project I'm working on right now. It looks like this one was done using Docco [1]. Docco supports Scala, and it appears to be a pretty lightweight approach, largely using Markdown. I'm curious whether any literate programming veterans have tooling they prefer?

[1] http://ashkenas.com/docco/
Scraping the Web in Go
With Joule Ready, ChefSteps Establishes Sous Vide Food Delivery Business
What does success mean?
Preferably into the buttcheek and not the thorassic spine
Hmmmmm, in case you are a middle eastern immigrant tackling a Ph.D. in the US, it takes around one year (including security check) to take a visa just to get into the US. :D Meanwhile your German rival has arrived 11 months before you and probably had applied for an internship by the time you arrived.

I can't stop myself comparing people. :D
No idea, but for the few interesting topics that arise, I find it good to keep a pulse on the “zeitgeist”. About 30% of the time. Would you consider contributing articles?
"Don't waste your time, he's a troll that pops up on every thread that has anything to do with things like docker or k8s."

Thank you for an off-topic opinion. Yes, I do "pop up" on every Kubernetes and Docker topic because both are nothing but hype and bullshit (this topic with "no thanks" is a rare exception, and I wholeheartedly agree with the author of it, even though I vehemently disagree with some of his methods). What the hell do I need an "orchestrator" like Kubernetes for if all my components are packaged and I have a software deployment server where I can mass deploy to all my systems at will? (Hint: I don't.) Kubernetes is a solution to a string of bad decisions, making the situation even worse.

And Kubernetes is nothing but a provisioning solution. If you think Kubernetes is an orchestrator, you've never seen one. Nolio is an orchestrator.

So what if Joyent has Kubernetes support? Joyent isn't infallible, just because they make SmartOS that doesn't make them right in everything. It's not like they can do no wrong. Let's refrain from fanboyism; being Joyent doesn't automatically make them right in everything they do.
I think it’s fair. If the management is incompetent and keeps rushing programmers to build poorly thought out features, they’re also usually unable to evaluate the quality. The programmers on the other hand know exactly how bad the things are that they’re building and if they sign their name and say “I built this!” then it’s on them.

Maybe I’ve just worked for companies where developers have a lot of say in what and how gets built.
Whataboutism wasn’t necessarily the point I intended on making. Rather if Google employees feel morally infringed at the prospect of Dragonfly for reasons described why then do they give a pass to their own state? Of course the USA & China differ vastly on governance but what’s the use of principles if you selectively apply them?
When I was young, graphics programming is what got me to try coding in the first place. At the time, all books I picked up for intros to graphics programming were more about teaching DirectX, and DirectX in the late 90s before IntelliSense was no fun. I found it horribly arcane and ended up a backend/web engineer.

I think if I had better examples like this to follow I would've gotten a lot farther.