skysight-inc/HackerNews huggingface dataset:
There’s RFID antennas everywhere grabbing your toll tag number. Frankly this is a drop in the ocean of much more precise and voluminous data gathering on you. This one is the least of my worries.
U.S. warns of new hacking spree from group linked to China
The motors in the Tesla basically act as alternators. I hope they last longer. It's funny with alternators that the heavy mechanical bit is always ok and it's the semiconductors that have packed up but they try to make you replace the whole thing.
I have one that acts a generic file chooser “function”, which then serves as the base of a couple of other Shortcuts: one unzips archives, and another previews property list files.
I really wonder when Sweden is going to prosecute nature...
I found it perfect on my OLED mobile screen.

OLED works better with darkness than with bright backgrounds.
For me also the overhead played a big role, to just get a bare kubernetes cluster you already need 3 nodes + 1-2 load balancers.

In case you are using GKE, you actually need two ingresses to support IPv6 + IPv4

This adds up to like 10 times the cost of an single droplet. For personal projects this seems kind of wasteful to me.
Yes, lets see how big the runtime is and how "much" server is needed for interaction in the end...
Thanks! Was faffing with it... the "help" isn't very helpful on how it formats. Sadly can't edit now. :/
If you have not been in war for 200+ years, you can focus on real serious things...
Apple Magic Trackpad 2 Driver Support Queued in Linux 4.20~5.0 – Phoronix
Nope. I run that (on windows) and got an email telling me I wouldn't be able to use it on that machine any more.
very good answer ! (ok_hand emoji, 100 emoji)
When will this stuff finally have consequences for China?

Their behavior, not their communication, has been overtly hostile for a while. Yet, very few politicians openly adress the issue.
Hướng dẫn sử dụng thuốc giảm đau hạ sốt Tatanol hiệu quả
I started asking my family over ten years ago: What do you imagine life will be like when a super high resolution camera with terabytes of storage that can run on a solar cell costs $5? Because that’s where we’re headed.
A kinda okay text generator
> in the US it’s... probably slightly above zero

A good friend was an LAPD beat cop, then detective for 30 years.

Every single day he was on duty he took out his loaded firearm, pointed it directly in someones face and had his finger on the trigger, for fear they might pull a gun or do something else to harm him. Police friends of his were shot and killed.

He shot and killed two people on duty, and discharged his firearm many, many times.

He absolutely said "It's a war out there, and we want to come home alive"
Why not immediately send a bus to pick up the immigrants and get them off the highway?
I'm pleased to see that what the people are really concerned about, as defined by this page's popular articles section, is: Swedish road covered in herring after elk accident
Spotify has been given a number of APIs that lets them act similar to a first-party app in iOS 12. As far as I’m aware, they haven’t really used them yet.
In a surprise, first alien moon discovered is big and gaseous
You can re-issue international debit cards and sell them. The vendor will give you API and you build the interface. If you can convert local indian currency to USD, then it can work for you. From there, you get traction and then ask investors for cash.
"Two of Elemental’s biggest early clients were the Mormon church, which used the technology to beam sermons to congregations around the world, and the adult film industry, which did not."
> One country in particular has an advantage executing this kind of attack: China, which by some estimates makes 75 percent of the world’s mobile phones and 90 percent of its PCs.

Intel and AMD are both USA based companies.

Is it conceivable their processors contain backdoors in a similar vein?
I wonder if the folks at medium ever expected this reaction from their product.
They didn't do anything to the CPU, what they did is the modchipped the line from EEPROM and the board management controller.

They probably found it out when they were repeatedly tried to reflash the BMC flash, and saw that checksums did not match.
kubernetes has more advantages than pure horizontal scaling capacity. there are services, secrets, networking etc, which are useful for small size projects at the same way as big ones.
I agree that it can be over kill, but I would not throw away whole kubernetes only for assumptions
base on the size of the projects.
Always have a exit plan before you begin.

This sounds like commonsense for most people. But I learnt this the hard way while drifting through my 20's in a mediocre career. Still rebuilding after going back to college.
Yeah it is, but against men, what the hell?
> Given that there's this disconnect, I'd really spend some time with him to work out what it is that he actually wants…

This. Spend time with the guy, try to understand where he's coming from. When you do talk I'd suggest you:

- Make it clear that your motives are to help the company. I.e., you both have the same interests

- Listen, don't try to win the argument, don't push your solutions. The aim is to understand what he thinks is needed

- You can very well explain how you're feeling. Maybe you feel that you're not really sure what you're doing there given that none of your suggestions are accepted. Tell him

- But don't blame, don't presume ill feeling or ignorance. Ask him for suggestions

There's a chance that this is never going to work out and as somebody else said, you're set up for failure. I think you can figure this out if you do as much as you can on your side to understand him, and he still doesn't do his part to help you do well at your job (whatever that is! It may not be what you think).

Something else…

I'm not sure this is part of the issue but I've seen this a lot: you work on an amazing new way of doing things. You figure it all out, document it, dot the i's and cross the t's. And then when you present it nobody is interested. Why? Regardless of whether it's a great idea, you didn't involve anyone else. You need to bring people along with you: ask about their problems, ask for input, collaborate as much as possible…
Oh no! Prepare for a thousand articles about ChargeGate!
No it won't. Its literally a non problem. If an action like this will be applied unreasonably we will literally change it with a flip of a finger.
I recently started working with DCOS, and so far it seems that while it might have been more mature and ready platform 2-3 years ago, today I have to deal with issues I don't have to care about on K8s
The navigation bar hides for me once I scroll.
The problem you describe does exist but I respectfully disagree that's the reason why writing web applications has become as cumbersome as it has. I think the issue there is more down to standards authorities being glacially slow to recognise the change in demands. This has obviously allowed a situation where browser vendors such as Microsoft and Google have felt they needed to run amok just to offer many of the features developers were asking for (and to an extent, consumers too since end users were lured in by prettier and more interactive sites).

There have been other examples in history where programming languages used to differ - sometimes even significantly - depending on which compiler / platform you were targeting and where a standards body later stepped in to create a basic subset of said language that should be universal across all dialects (please note they cannot enforce this). In those instances that has lead to code to become greatly more portable.

To some extent, this is now happening with the web as well; however my secondary point to the complaint about differing outputs between browsers is that I believe HTML et al is a lousy way to design applications from the outset. That definitely is not a problem created by warring proprietary vendors or slow revisions of standards but rather just an artefact of technology evolving past it's original purpose yet still having to retain backwards compatibility. Maybe the time has come that we need a second language for the web so we have HTML et al for legacy applications, blogs and other stuff that is following some of the original visions of the web, but have a new language for web applications and anything that requires a stronger security model.
There's a big difference between "using an IDS" and "a few unintended/unexpected packets are noticed and properly followed up on".
I've been waiting for smartphone to have similar facilities for situations like these.

- police brutality
- mugging
- robbery

Basically evidence recording / storing / uploading and possibly pinging trustworthy people or nearby strangers to alert them.
Hey I guess I won the lottery twice!

This looks like a basic software issue though, no big deal.
Pre-flight overhead, yes (maybe 30ms?)

DB connections are pooled and cached using AWS Lambda.

btw- Our app is a plugin, so origin is always the platform provider... then our app makes CORS calls to AWS.
Did you try preconfigured Dokku images on Digital Ocean?
The point is to punish men for doing "manly" things. The feminist agenda is not some crazy conspiracy theory anymore.
While you may find a particular attack if you're looking for, in general, it's impossible for even the most thorough audits to check for the whole class of such attacks. You're not going to look into the chips. Well, you can, but that's prohibitively expensive and destructive - even if you could check that this chip was okay, then you still have to throw it out after analysis and plug in a different one.

The only feasible thing to do is thorough audits of all the supply chain for every component in your system, ensuring that your supply chain does not include even a single chip from an "untrustworthy" supplier, and even then it reduces the chances of an attack but does not eliminate it.
This is pretty unsurprising, as we're talking about Sweden here. This is the country that stopped gender quotas got universities once they reached 60% women and started getting sued by women who were rejected by programs in favor of ostensibly equally-qualified men. Though it doesn't mesh well with my personal ethics/philosophy, I'm not a die-hard opponent of identity-based tweaks to merit-based systems and think that support in some situations is at least defensible. But Ive seen little to indicate that there's any pretense of intellectual honesty or moral consistency in Sweden's approach to gender politics, beyond simply a special interest group throwing their weight around.
This app seems interesting! It requires a Flash plugin, unfortunately.
SuperMicro hardware in particular always struck me as such. Asking users to pay a license fee to be able to update the BIOS on their devices (after paying tens of thousands for the hardware itself) is a kick in the teeth.

https://www.virtuallifestyle.nl/wp-content/uploads/2016/08/S...

http://www.supermicro.com/products/nfo/SMS_SUM.cfm
That's not really a use case for [sic]. As per wikipedia: erroneous or archaic spelling, surprising assertion, faulty reasoning, or other matter that might otherwise be taken as an error of transcription.
Still gonna cost more than that $13MM, since that's the asset people are after.
So the chip shown in the article looks like a typical SMD balun, it is a type of transformer used to adapt impedance between two transmission line. It’s designed to replace a series a lumped element (capacitor, inductors, resistors) normally used for impedance adaptation (in a T or Pi network). The most common used for the device is directly between an antenna an a RF front-end to serve as an antenna tuner.

Technically you could embed and power an RF front-end inside a “flavored” balun to intercept or alter any communication passing through that front-end or even use the antenna to communicate during the down time. So this literally would hack Wifi / Bluetooth at low level and inject code and at the same time create a mesh network of malicious devices to relay information. Welcome to IoT Cyberwarfare.

But this clever hack is probably not limited to RF and is likely to also be embedded in transformers used for isolating Ethernet lines. Common mode chokes (some SMD chokes also look like the chip they are showing) or even some integrated ESD protection solution would be an ideal target as they are inserted in series of the signal.
Google activates G Suite email security alerts for state-sponsored attacks
Doing this saved my life. I went from a complete dead end to a very successful year overnight. Well over the year since I bailed and jumped on a good ship.
Except they didn't (I guess you forgot to add /S ^^)
Cupid's advice to women about how to avoid abusive relationship (Two)
Qt 3D Studio 2.1 Released – Qt Blog
Paid trusted curation?
In the fight against misinformation, the more you know the less you’re certain
> The 'problem' is entirely self-made.

And richly deserved. The finance sector can afford it, for now.

"Technical debt is your job." -- is what I once heard some PHB say. Not from a finance person but the attitude, I think, is the same.
I'm pretty certain they do. AMD's PSP and Intel's ME are really shady and are still enabled in every CPU sold today (and full of disclosed and undisclosed flaws for that matter).
It's not really up to you or me to dictate what other people think though, or what they feel is important to them, so the fact you think it's a dumb meme isn't relevant. That's why we have courts.
Please post this as a comment on https://news.ycombinator.com/item?id=18113144
> I hope this corrects the mistaken believe that China can't home grow sophisticated tech.

There's nothing particularly sophisticated about what they did, especially given what China has access to as one of the central hubs of tech manufacturing. There are two dozen nations (or more) that could do this from a strictly technical standpoint (few have the kind of required supply chain access to pull it off at scale in actuality). It's the audacity that is primarily impressive. China is encouraging all of their richest trading partners to further isolate them when it comes to supply chain and advanced tech. They're confirming for the 107th time what everyone already believes.
[Eastern] Slavic cultures historically used 40 to mean a lot, many. And forty of forties (40 of 40s) means 'great great many'.
That is an extremely interesting experiment, I had never heard about it before. Searching for it, I found the original article by Feynam (.pdf scan) : http://calteches.library.caltech.edu/607/2/Feynman.pdf
Is this wikipedia page supposed to make a point?
Proposed Changes to Intel GPU Top Would Make It a More Useful Utility – Phoronix
> logic would point at the US

But then, since the logic points to the US it only stands to reason that is a false false flag! Why those wiley spies in Beijing really are clever. Discredit The USA and plant spy chips in important computers!
This is silly. I use Phabricator and I don't commit my changes directly to `master`. I always make a branch, exactly the same as you would for pull requests. And I have multiple commits on that branch.

Why? Firstly it means I can still pull master and rebase my changes to update them fairly easily. Secondly it means I can work on more than one thing at a time (who only ever has one task in progress?), thirdly it means I can reorganise my commits easier (`git rebase -i master`), and finally having a change split into several commits can make code review easier.

As far as I can tell the only significant difference between these two approaches is that with `arc` the history in the repository ends up nice and linear, without loads of branches.
There are two distinct things here. One of them is a meme, the other one is a job ad.

You're talking about the meme, the Swedish ad watchdog is talking about the job ad.
> ...but not a single time is it questioned who they planted it for...

The article and some accompanying reporting on Bloomberg audio/video segments says the attack seems targeted relatively specifically towards nearly 30 organizations (only US-based organizations were mentioned as targets, unknown if the list included organizations based in other nations). One known vector was through four subcontractors in China that built the boards for Supermicro's main Shanghai factory, specifically by bribing and/or coercing managers of those subcontractors' factories to go along with accepting the chip shipments and to make changes to the plant floor from the design to perform the chip insertions.

Designing and building a chip like this and then mounting the logistical effort to performing the insertions costing some non-trivial funds, coupled with the known targets, (Amazon didn't seem specifically targeted, Elemental a company they acquired was, who notably has US national security clients), form the circumstantial allegation that a PLA spy unit was behind the attack. You are correct that this doesn't entirely rule out a false flag possibility, but until we get more details about this, we're operating in the dark.

A false flag is an interesting supposition, but how would the US benefit from successfully convincing the world of the false flag's cover story?
The article specifically mentions the PLA as the bad guy. So that part was not left out. The whole story is hearsay so far. It's plausible, but best read with a good dose of salt.

If we believe the story up to the point where subcontractors are forced into planting the chips, we must accept that it's easiest and least risk for Chinese government actors to force them into it. Mounting a false-flag attack at Chinese subcontractors would be exceedingly difficult for foreign agents. They'd likely blow their cover when trying to represent Chinese officials.

If you want an alternate version, I suggest you start with the easiest: The whole thing didn't happen. And Bloomberg is a victim of propaganda.
Is this similar to Mercurial Queues?
Take that with a grain of salt. According to IQ scores, the average person in the 1930s was within one standard deviation of litetally being retarded, and when Feynman was alive, he was a mere two standard deviations above the norm.

Personally I dont believe IQ correlates with g. And anyways, how can you even define g in the first place, let alone IQ? There seems to be some colloquial tautology here: Ddoing so by defining it as IQ, then testing for IQ and calling that g. It is ridiculous.

From Wikipedia:

>Ulric Neisser estimated that using the IQ values of 1997, the average IQ of the United States in 1932, according to the first Stanford–Binet Intelligence Scales standardization sample, was 80. Neisser states that "Hardly any of them would have scored 'very superior', but nearly one-quarter would have appeared to be 'deficient.'" He also wrote that "Test scores are certainly going up all over the world, but whether intelligence itself has risen remains controversial."
This is because, contrary to what a lot of people say about dark themes (even though it's mostly a meme at this point), dark letters on white background are better to read than white letters on black background.
Bagpiper: decentralized secret management at Airbnb
It makes me wonder though, what is this even about? Nobody can possibly profit from this directly, so is it to show how much political power a certain movement has?

Regardless of what it is, this is just mean and unjust. People are being essentially punished for crimes they didn't commit.
To be clear, this is only for the ability to update the BIOS over the BMC interface, not for BIOS updates in general. (unlike some other vendors, where you need a support contract to be even able to download the updates)

At least on some boards you can boot the USB drive image containing the BIOS updater through the BMC and do a remote update that way.
Ethereum to paypal instant account
Ethereum is invovative method of cryptocurrency with blockchain technology, it is popular now a days in all over the world. As you know, it works on the internet. if you are interested to learn more about it, you can exchange or convert ethereum into paypal easily with this website
https://www.ethereumpro.net/exchange-ethereum-to-paypal.php
I do it like this:
https://github.com/ktsn/vue-template-loader

There's also a plugin for VSCode that let's you switch between Button.js and Button.html for example.
Ask HN: Are there still companies that don't use version control systems?
If so, what alternatives do you use?
The article says:

But they were capable of doing two very important things: telling the device to communicate with one of several anonymous computers elsewhere on the internet that were loaded with more complex code; and preparing the device’s operating system to accept this new code. The illicit chips could do all this because they were connected to the baseboard management controller, a kind of superchip that administrators use to remotely log in to problematic servers, giving them access to the most sensitive code even on machines that have crashed or are turned off.

To me, that makes it sound like they could download from a remote host and inject code and do literally anything.
For me it depends greatly on the department/agency. If I am around Palo Alto or Mountain View or Bellevue or Redmond or WA State Patrol or CHP, I feel safer (unless they are there due to some specific situation, in which case my goal is to get out of the area, but I’d still want them there.). There are a lot of departments where enough (10%?) of the officers are incompetent or malicious, so I’d rarely want them to be around.
Well, in a way, the fact that this is a problem in 2018 really shows how good our lives are, that we can focus on that kind of ridiculous non-issue.
Obesity and Diabetes Explained: The Overflow Phenomenon
> Having lambdas made C# cool in 2007, but it's not 2007 anymore and that the four features you listed are probably the important new features I can think of since 2007 is why I like C# a lot less today.

It's not lambdas but expression trees that are the key feature that made LINQ possible. That is pretty unique feature among programming languages. So you might want to reevaluate your opinion about "table stakes features".
I have worked in card payment industry. We would be getting products from China with added boards to beam credit card information. This wasn't state-sponsored attack. Devices were modified while on production line (most likely by bribed employees) as once they were closed they would have anti-tampering mechanism activated so that later it would not be possible to open the device without setting the tamper flag.

Once this was noticed we started weighing the terminals because we could not open the devices (once opened they become useless).

They have learned of this so they started scraping non-essential plastic from inside the device to offset the weight of the added board.

We have ended up measuring angular momentum on a special fixture. There are very expensive laboratory tables to measure angular momentum. I have created a fixture where the device could be placed in two separate positions. The theory is that if the weight and all possible angular momentums match then the devices have to be identical. We could not measure all possible angular momentums but it was possible to measure one or two that would not be known to the attacker.
Ask HN: What are some powerful iOS Shortcuts you came across?