skysight-inc/HackerNews huggingface dataset:
I'm curious, is there any commercial application for running Linux on a CPU implemented in FPGA, as opposed to any (presumably cheaper and faster) normal CPU? Some kind of custom modification this would allow you to make?

I've always thought of FPGA's as being for custom parallel computationally intensive tasks that run side-by-side with a normal CPU. So just curious if ZipCPU is just for fun, or something more?

(Or is there even something security-related about being able to verify not just the code, but the CPU it runs on, in this case?)
So, am I understanding correctly that this is a virtualization solution? Isn't that not the same thing at all? Virtualization has a lot of overhead, and that would be my first concern, so can you address that?

(My platform team balked at me when I suggested OpenShift, because they had it confused/thought I was talking about OpenStack, and they didn't want to incur the overhead of a virtualization layer. It wasn't until I said for the fifth time that it's a container solution and does not require any virtualization, that they actually tuned back in and stopped asking what hypervisor it used.)

My point is not that I couldn't use it, but that again, we're not talking about the same ballpark. A virtualization solution is not a containers solution. Wait. Wait wait... I'm wrong, aren't I? From a quick google, it looks like Solaris Zones are almost exactly like containers in this way. So this actually does both, huh?

> maybe that should tell you how "simple" Kubernetes is then, unless they're all there to grill smores

I told you in my first post, I'm not going to sugarcoat it. Kubernetes isn't simple, there is some learning curve, but that once you get over it, you are actually over it.

Can you honestly say there is no learning curve to SmartOS?

> I'm a computer science major with formal education and certification in Solaris. ... How much support could I need with such excellent and comprehensive manual pages with lots of examples in them?

I'll take that as a "no". And from what you're saying, it sounds like there is actually no community slack? I don't believe you; come on, where do you go to gripe when you find something stupid? I've seen some projects that appear to only use Github, but when you dig a little deeper, they also have a Slack or some other community organizing platforms where you can reach a person who also uses the software like you do, without an established billing relationship (often times right away) and simply ask about their experiences.

Maybe it's an IRC channel? Maybe you are all consummate professionals and just use mailing lists, but I am skeptical of that.
There is a book on this. Rise of the Warrior Cop: The Militarization of America's Police Forces. From what I've read, it's less about guns and more about certain historic precedents, training and organizational incentives.
There's enough "usual" vulnerabilities that the practice of fixing them has a name: hardening. For supermicro motherboards specifically, "open services with really shitty default credentials" is apparently one of them — definitely one that is common in a lot of other contexts.

In this context, "unusual" vulnerabilities would be evidence of a deliberate attack, rather than just common security mistakes.
> I know a few people with >130 IQ and they all have executive disfunction and anxiety problems.

Title of the article isn't

"High IQ always makes you successful"

Correct examples for claim in the title would be low IQ ppl becoming very succesful. Anyone know any low IQ successful ppl ?
Exactly what I meant. The whole vehicle tax, externality-pricing approach does not make sense if you walk away from the chalkboard and look at the big picture.

Also, not every 20% is the same. 20% reductions in emmisions because 20% of the fleet is electric-from-solar is a lot closer to 100% than 20% because of lighter cars and more efficient ICEs.
Reading further: The motion of the mechanism has been described as an "harmonious coordination of trochoid trajectories".
Show HN: Automatically share new blog posts on targeted subreddits
Small nitpick, it was the 20th Century, Fry got cryogenically frozen on the 31st December, 1999!
Hey everyone!

From launching our own blog we’ve discovered just how much a PITA it is to maintain it—let alone actively grow it.

Blogs are great growth mechanisms for products (SEO, targeted traffic, branding, etc.), but they also require a lot of love & attention. Beyond writing the blog in the first place, you also have to get it in front of the right people.

We heard all about this problem when we launched Scribble (an on demand blog writing subscription for startups), and thought we had the right background to address it.

Exclamation is a seamless way to promote your blog posts on targeted subreddits. Here’s how it works:

1. Send us a link when you publish a new post
2. We’ll generate a custom list of 10 targeted subreddits for each post you submit
3. We’ll hand-submit the posts (to avoid getting flagged as spam) to the subreddits within 5 days

Exclamation is for those who have enough time to write a great blog post, but not enough to share it everywhere they should. Your blog should help your product grow, not suck time away from working on it.

Exclamation is really exciting when it’s combined with Scribble: essentially with these two you can automate both the writing of your blog and the promotion of it. You can just sit back, relax, and leave your entire blog on autopilot. That way you can focus on what actually matters: product & users.

Would love to hear your thoughts on this! We’ll be around all day to answer questions.

️
There's an obvious difference between actively supporting ideas with which you disagree (e.g by donating money), and simply not using power to silence those ideas.

You seem to think that your response to any possible political idea MUST be either to donate to it, or use all possible power to attack and silence it. It's obviously a ridiculous false dichotomy. It is possible just to live and let live.
They throw out some massive numbers though. You can kinda discount 6 "apparatus" sources (but usually for stuff like this it's just one or two, so it's already unusual), but they also mention several people at Apple, Amazon and the FBI, plus someone else in the "discouragement" meeting. That's a lot of agents.

If it's made up, it's more realistic to believe the publication is complicit in the fabrication.
I've given up on F# because MS only half-heartedly backs it. In the meantime C# continues to pick up more and more F# features.
"The lady doth protest too much, methinks."
This is also part of the enterprise startup system... an enterprise startup doesn't need to and probably shouldn't build a whole enterprise sales chain. They just need enough to get a handful of enterprise sales - enough to prove their value proposition is high enough that enterprises will put up with startup shortcomings in order to get that technology. Then, sell the company to a big player like IBM, Salesforce, Atlassian, etc, who just add it to their sales/support portfolio.
Yes, but because you take two decades to reach reproductive maturity, and tend to sue if subjected to a lifetime of confinement in a lab being experimented on, we start with the mouse studies.
Their 5 desired behaviors are admirable. The 2nd item, "The government must not store data about innocent people for any lengthy period." is hard to implement given existing police department budgets. The only way for you to know you can delete is to perform an investigation to verify you can delete. Doing that every few months on each plate isn't reasonable. You could speed up the process by having a national database but I imagine they would be even less happy about that.

I love the ACLU. I donate monthly. I fear a US without the ACLU far more than I fear a US with the ACLU. But every now and then I don't think they have completely thought out the opposing point of view or the realities of time and money.
There are 20.4 million veterans in the US, so on that basis alone I'd guess a little higher for the number of people who had an idea about what to do.
Yeah I did say that. I covered both vectors.
The term they were looking for was "conspiracy theory", arguably one of the most important colloquial mistakes to correct when talking "cloak and dagger" politics.
I really don't understand why you're getting hit on this one.

There is a common perception in America that criminals are morally bad people who must be punished, instead of a perception that they're desperate or broken people who need assistance or reform of behavior. There is a private prison sector that is literally allowed to use prisoners for manual slave labor. We have one of the largest prison populations in the world even when adjusted for our large population.

There are a ton of factors that play into why there is a mistrust of the police (on both side of the political spectrum) but there is also a common air of ambivalence about how we treat people once they're marked criminals. You see it every time a large media stir comes up because of a high profile police shooting. "Well, he was no angel. That thug had a criminal record, so the cop probably..." as if it's impossible that the victim could have been a criminal AND the cop used unneeded lethal force.

Your point is a little blunt and lacks nuance, but it's sentiment seems in line with what many prison reform advocates perceive as being the prevailing culture in the US towards criminals and prisoners.
Provides only minimal substance here, but I'll mention I have worked in a company where there were times I knew information I wasn't even allowed to share with the CEO of the company. He knew who our customer was, but he was not allowed to know the substance of the work we were doing due to the non-disclosure agreements.

What I'm trying to get at is, it is possible for an agreement to be created for someone internally to know some "important" information in a company, and for it to not be known by others, even those higher than the employee.
The language is not very explicit. They allow the reader to interpret thier statement through an implied explicit denial. Great liars if not just plainly unclear.

This whole thing wreaks. Is it fake news? Are the statements from Amazon and Apple expertly crafted to fool people who aren't very good at reading comprehension (most people)?
It links to two studies.

Neotame (2018-02-09) @ https://www.mdpi.com/1420-3049/23/2/367

Sweeteners (2018-09-25) @ https://www.mdpi.com/1420-3049/23/10/2454
What i don't understand is how a phone can be so powerful with so little watt usage. especially compared to a PC
See, this is how FUD works. It works.
You sure that’s adequate cost evaluation if the bloomberg accusations are true?
Curbing Realistic Exploitative Electronic Pedophilic Robots (CREEPER) Act
One thing I don't see much about in the article is the supposed chip which allegedly compromised Super Micro servers. The cover image of the piece shows a surface mount component with three solder pads balanced on a finger tip. Looks like a very simple SMD part to me.

On top of that Apple, Amazon and Super Micro are flat out denying this - I suspect Bloomberg messed up here.
I do wonder how many people know about rot-13 these days. I remember having to use it to get the punchlines for dirty jokes on Usenet :)
This process seems well thought out and worth adapting. Few things:

So, what does your file structure in your home look like?

Are you now basically dumping everything into this wiki and you reference files by a number system?
That is possible but unlikely. Firstly you'd have to do this at the PCB fab phase as this can't be retrospectively applied, so you'd have to have infiltrated two times as many companies and add complex manufacturing exceptions to their workflow. Secondly you'd have to get it through AXI process which is used on these larger boards (Automated X-ray Inspection) which is used by the larger companies for manufacturing AND design validation. So you'd have to infiltrate another company.

Also stuff like this tends to show up on boundary scans. It's not that easy to cock around with signal integrity on these sorts of boards and get away with it.

I find the whole thing infeasible from a cost and logic perspective. The SMbus firmware and Aspeed sub-vendor are so much easier to hit and don't leave any corpses around to find after the fact.
Swift Package Manager Support in CLion
How can companies be forced to issue such press statements? They may be forced to give incomplete answers when asked, but these statements go far beyond answering questions.
If you only have three hours, can't detect fraud, can't tell if the the paper is even real. Then what's the point of even doing the peer review? Again, peer review offered no value at all in this case.
Exactly, this type of weasle word shit is littered throughout all of the statements.
There is a lot of information in the Bloomberg story, which I mean in the information-theoretic sense, and not in the sense that it must be "true" information for any definition of "true". A lot of very specific claims. Those claims did not come from the reporter writing the story, which is about 99.9999% likely to be incapable of making up such a plausible story with such details.

So one must think about "Where did this information come from?"

It is at least a plausible theory that the story is largely true (though as I posted in another thread, I'd bet money it's not all entirely true), and that the denials are either made by people who are unaware of the truth, or are being made deliberately. (Actually, the people who literally prepared those statements almost certainly believe the truth of the statements. One of the most plausible ways for a group of people to lie is for all communication to come from individuals who genuinely believe the lies; no body language tells or any other such leakage about it not being true.)

It is also plausible that the denials are in fact true, in which case one is left with the very interesting question of "Where did all that information come from and why is it wrong?"

As a couple of people have also said, there's also the option that the story is largely true, and the denials are true if you parse and read them like a lawyer, but meant to mislead anybody who doesn't. I can't say I've examined them for that, but it's definitely a possibility to consider.

I'd actually suggest "propaganda" isn't a great explanation; propaganda does not generally depend on making lots of specific, refutable claims, and certainly not followed up by refutations immediately. It is usually designed to speak directly to people's emotions and fan pre-existing flames in ways specifically designed to not be refutable. If this really was government propaganda (note how that is more specific than my previous unqualified "propaganda", because anybody can propagandize, not just governments), I would expect the American companies would be strong-armed into agreeing with the story for the propaganda's purposes, or that the story would never run at all if they couldn't be sure the companies weren't going to back them.

An alternate theory that might fit all the facts is industrial espionage. Let's say the story is completely untrue, the denials completely true. What is the result of this story? Supermicro in particular stands to lose some business. Perhaps someone who benefits from that planted this story.

Another alternative is stock market shenanigans. As I write this, the delayed feeds aren't showing it yet, but Supermicro stock (SMCI) just took a 31% bath overnight. Who benefits? Short sellers, put option traders.

I have no idea myself. "Unknown unknown" is still a pretty large chunk of my personal probability estimates.
> Reddit says it’s now averaging one billion “native” video views per month

I think that's important to emphasize. Reddit itself has way way more views than this per month.
I think the article is implying that the implanted chips might not have been detected due to their low profile design. Given that the bad manufacturers were subcontractors it's likely only a fraction of all the boards manufactured were compromised. It's either that or someone at Supermicro was in on it.
Did you look into Terahertz scanning?
The link in the article is to the wrong research, it seems.

The correct research is this:
https://www.mdpi.com/1420-3049/23/10/2454
Corporations are spending someone else’s money. They aren’t a mint. That is in no way different. A corporation is accountable to its owners, and a union is accountable to its owners. A corporation usually has fewer owners than a union, or at least can ignore most owners who aren’t on the board; whereas union leadership can be changed by its members, the workers.
Access != adoption.

Even if every house had a PC, it doesn’t mean everyone in that house used it.

Today it’s not uncommon for every person in the house to have their own smartphone. And they use them on levels rivaling television at its peak — hours and hours a day. And it includes the grandmas, grandpas, aunts and uncles who wouldn’t even touch the PC.

The iPhone and the smartphone era it ushered in a seismic shift in society, is that not obvious? Something like 2 billion smartphone users globally today, roughly a decade from the iPhone introduction. In the late 90s PC users measured in the millions.
Generally (and unfortunately) "national security" tends to override everything else.
As a Swede "Coöperate" looks very weird, as ö is a letter very commonly used in swedish.
> “Luck is what happens when preparation meets opportunity.”

"Your parents have funny names for their genitals"

I think that luck is the only one you can't replace.
You can bookmark the html version. Also whenever main gmail is loading, there is a link to load the html version in the corner.
I think it's not exactly that American police are trained to escalate, but that the culture is highly authoritarian, which changes their meaning of "escalation". Anything short of instantaneous and absolute deference and obedience is viewed as a threat. If that standard exceeds your ability to comply (e.g. deaf/hard-of-hearing, serious mental illness, dementia, traumatic brain injury), then your existence is implicitly threatening to them.
Same for me, but I want to join a particular wifi network. Was hoping I could do it via shortcuts. Oh well.
> In terms of user experience I would expect the car to continue to the destination.

For a production car, sure. But these are test drivers in test cars.
About that, I can only say that Chinese android POSes do everything in software, for sure, without any hsm present.

The question is, how Chinese banks coax Visa into allowing them using them.
Scientists are looking for ways to put the simulation hypothesis to the test
in driver's education they taught me to keep both hands visible at all times, ask for permission to get items from the glovebox, and to be aware that the cop has a hand on their gun at all times.

this was 15 years ago, long before things got as bad as they are now.

during a traffic stop or any other close encounter with the police, your life is at risk in america. ten times more so if you are black or look poor.
Agreed. "Normal people" might be able to get a shortcut pre-written by somebody else working correctly on their phone, but even that is doubtful.
Do something in the banking ecosystem to get your foot in the door.

What I have noticed in Malaysia are startups effectively handling the {credit card, loan, insurance} applications & such other Web forms that banks are far too incompetent to do effectively.

Once you do this well, you will be on the right path.
Not really. Code needs to solidify before you document it. Documentation is best saved for after a major release.
EBay accuses Amazon in merchant 'poaching' row
There's a lot less of it, and PCs aren't nearly as optimised for low energy usage.
The people issuing press statements are almost certainly out of the loop. And of course, no one with knowledge of the situation is going to step forward, given they have a strong incentive to stay silent.

I mean, think of your own company's PR team. If you've worked for a large company, you've likely had interaction with a PR team that was pretty ignorant about the inner workings of the company. Now, add to that the fact that this is a classified investigation being run by FBI counterintelligence, and interfacing only with cleared employees (none of whom work for the PR team).
The article is a bit confusing in that they refer to two separate studies. Both of the studies are open access

(Neotame) https://www.mdpi.com/1420-3049/23/2/367
(6 sweeteners) https://www.mdpi.com/1420-3049/23/10/2454

Also there seems to be a typo in the article:

> ...the bacteria found in the digestive system became toxic.

I don't think they mean the bacteria themselves became toxic.
Except that's not what happened in the specific example given - it was a strategic decision to spend a billion dollars and multiple years to replace an old system that processed transactions in daily batch jobs with a modern system that can do transactions effectively instantly - which is exactly what the parent post was arguing should occur
See my comment here: https://news.ycombinator.com/item?id=18139739

I don't find that method feasible.

Infiltration of supermicro IS but then you have to ask the question: who really did it as they are on US soil.
This isn't the sort of thing to do as a cold startup. The way to do this is what is sometimes called "intrapreneur", as a "startup" within an existing large corporation that can bankroll such a large project.

Are you an engineer, or a banker? If you don't have a track record in the banking industry, you're hosed. No one will give you that kind of money. If you've actually been there for the founding of a bank before, then maybe. Moreover, if you're an engineer without banking experience, you probably have no idea what you're getting yourself into.
These denials remind me of the vehement denials the big tech companies gave when the Snowden leaks came out. Did they turn out to be false?

https://googleblog.blogspot.com/2013/06/what.html
TIL that Apple is using Facebook's React. Thought they were using Ember before.
So what was different with AT&T? You couldn't just create a phone company and compete with AT&T. They had franchise agreements with cities and exclusive rights for space on telephone poles.

They were still found to be an abusive monopoly even though their monopoly was created by government regulation.
I don't understand what the operational burden is. We literally do nothing to our K8s cluster, and it runs for many months until we make a new updated cluster and blow away the old one. We've never had an issue attributed to K8s in the 2 years we have been running it in production. If we ever did, we'd just again deploy a new cluster in minutes and switch over. Immutable infrastructure.

It is not like I haven't done it the "old" way. I spent many years doing hand deploys, making deployers, running Ansible/Chef. It is just that we always found we can never confidently update servers running many apps as it would step on other applications. So we'd just make new ones, test and switch. This was not an easy process either. Plus we'd encounter issues like oh someone didn't make a startup script or filled up /var with logs, or had something eat up all the memory. All of these operational problems are gone with K8s. I know what you are thinking "well you did it wrong". Yes sometimes developers do things wrong. But in container/K8s land that wrong stuff is contained, and if you don't do things "right" you can't even run.

So we had operational issues there. Now we have a universal platform that someone can ship their app anywhere and have it run the same. That is a huge win. All for no extra work.
Certification. Worked in the same industry, and there were very strict both hardware and software requirements for POS software. Having gone trough credit-card audits, early EMV certification programs, and certification to place non-payment software next to payment software on such systems, I can tell you - it's no joke :)