skysight-inc/HackerNews huggingface dataset:
No, it is totally inconceivable AMD and Intel CPUs are backdoored this way. Inserting a microcontroller somewhere on the Ethernet traces and then using IPMI is not as sophisticated as this article wants to describe. Sophistication is necessary from the payload to be stealthy but not the hardware.

There are at least two problems with China messing with CPUs: a) they are not made there. TSMC is Taiwan, the Asian parts of Global Foundries are in Singapore, Intel is manufacturing CPUs mostly in the USA with some in Ireland and Israel, only 3DNAND / 3DXPoint ICs are made in China. b) the hardware knowledge to change here, well, think of it, the microcontroller on the motherboard is on the few millimetres scale, the parts here are on the few ten nanometres scale so as a rough but not unjust quantifications would say it's 100 000 times harder.

Whether the platforms are hackable / hacked, that's harder to say thanks Intel ME and such but the CPUs aren't.
I just mean that I don't hang out in nursing homes, so all of the 70+ people I know are those who aren't in nursing homes. This may cause me to believe that older people don't normally live in nursing homes. Probably I could have explained that better :-)
The headline could just as well refer to the practice of talking...
It’s not sexist neither against men or against women. There are tons of cases of both men and woman having extra marital affairs or cheating. Depicting a situation which is realistic to occur does not have to imply that all woman or all men are anything. If I take a picture of my SO making a sandwich I’m not somehow trying to make implicit assertions about the maternal patriarchy. If that was the case every single picture of overweight men or overweight woman would be “sexist” because they somehow imply everyone of that gender is overweight.
Wow that’s pretty neat.

Terrifying and neat; thanks for the explanation!

How easy is it for us (or rather the companies making the hardware) to detect and mitigate this?
First, wow this is both incredible and crazy! Both the China-side hacks and your side's anti-hack. Mind. Blown.

Second, would have it been cheaper to manufacture somewhere more trustworthy (another country?) instead of spending all this time/money on your anti-hack systems?
Given that it precisely indicated the time of death (and given that the body wasn't found for days, much more precisely than any other method would have), it would have remained incredibly useful.
But in that case you have qualified people actually performing battle-testing. If you don't, then a staging area can be more than useless because developers think that making sure their code is bug free is someone else job. Also in most companies testing is deemed inferior to programming, so the least capable is assigned testing duties while the better programmers write the code. Which is wrong because battle-testing software takes just as much skill as developing it.
Networks where security is taken seriously implement data diodes, and this attack vector is mitigated.
My post was a bit flippant, but it does capture my strong feelings on this matter.

Not that is matters now my post has been downvoted to oblivion, but I do think we need a complete clear out of the Arts facilities and to start again from scratch. The arts are far too important to be left in the hands of the people who have passed through an arts degree of the last 40 years.
Sure, you'd still rather the video get out even if you've been wrongfully killed.
Accurate? Sure. But accuracy is only one part of the picture: a system with 32% accuracy but a 0% rate of false positives would be very useful.
yeah. this is how it had been done before the invention of writing. time has proven it not to be a very efficient method.
Try Unraid on your home server: boots from USB and runs in memory, no raid risks but have network share span several HDDs, parity HDDs, use SSD for cache.

No kubernetes involved - just a webinterface to run containers, install dockers as "apps" on your server.
And Unraid is linux, you can but dont need to tinker.

Unraid is how i started using Dockers and became happy friends with my home server again. (tm)
Top Tips when moving your site from Wordpress to Gatsbyjs
Oh man, the original article went way over the author's head. The point of the original article was that even though Kubernetes is primarily useful for tackling the challenges involved with running many workloads at enterprise scale, it can also be used to run small hobbyist workloads at a price point acceptable for hobbyist projects.

Does that mean that Kubernetes should now be used for all hobbyist projects? No. If I'm thinking of playing around with a Raspberry Pi or other SBC, do I need to install Kubernetes on the SBC first? If I'm thinking of playing around with IoT or serverless, should I dump AWS- or GCE-proprietary tools because nobody will ever run anything that that can't run on Kubernetes ever again? If I'm going to play around with React or React Native, should I write up a backend just so I can have something that I can run in a Kubernetes cluster, because all hobbyist projects must run Kubernetes now, because it's cheap enough for hobbyist projects? If I'm going to play around with machine learning at home, buy a machine with a heavy GPU, figure out how to get Kubernetes to schedule my machine learning workload correctly instead of just running it directly on that machine, because uhhh maybe someday I'll have three such machines with powerful GPUs plus other home servers for all my other hobbyist projects?

No, no, no, no, no. Clearly.

But maybe I envision my side project turning into full-time startup some day. Maybe I see all the news about Kubernetes and think it would be cool to be more familiar with it. Nah, probably too expensive. Oh wait, I can get something running for $5? Hey, that's pretty neat!

Different people will use different solutions for different project requirements.
5 Free Facebook Audit Tools to Do a Quick Audit
There is a highway here that is engineered for 80 mph and the speed limit is 55. It is painful to drive on it.
I just found the first couple of courses on edX where graded exercises are only for those who pay for a "certificate". It's all courses in a UC San Diego "MicroMasters" program around data structures and algorithms. That's all the programming exercises, more than 80% of the value of those courses for most people. Unfortunately I found the quality not worth the price, and I would say that is true even for beginners (I have a CS degree from 20 years ago and only watched to remember a few things I forgot, just for fun).

Anyway, I think this might be a sign for the things to come. A lot(!) of edX courses, despite being okay or even good, have very low participation judging by forum activity. I think the course makers at the universities are going to feel more and more pressure from money-counting management about cost/benefit for the institution.

It's sad that to me to see that everyone does their own (often inadequate) little course instead of working together to create something bigger, better. I would like to see platforms like edX and Coursera not as market places like Ebay for lots of still very traditional little courses, but as platforms that encourage jointly working on something better (in addition to the current model, not as total replacement). Of course, 90% of why they don't (can't) do or become that is that those making the courses won/t or can't do it. Everybody works in isolation on their own small course(s).
Superhuman: The Fastest Email Experience Ever Made
In Germany, speed cameras are placed where accidents are likely to occur when the speed limit is exceeded.
"I think the point I'm trying to make is: do you actually need all of this?"

Yep! For any thing which goes beyond the initial viability test, I make an OS package. SmartOS has SMF, so integrating automatic startup/shutdown is as easy as delivering a single SMF manifest, and running svccfg import in the package postinstall. For the configuration, I just make another package which delivers it, edits it dynamically and automatically in postinstall if required, and calls svcadm refresh svc://...

it's easy. It's fast. The OS knows about all my files. I can easily remove it or upgrade it. It's clean. When I'm done, I make another ZFS image for imgadm(1M) to consume and Bob's my uncle.
The problem?

I wonder whether it was the same VP who got promotion for decision to cut corners a couple of years back, and another promotion for decision to fix it by contractors.
which yields better outcomes: organic growth (open source) or central planning (microsoft)?
The US has a few things to gain from this story: Economically, because Chinese products are perceived as compromised. Politically: because the Chinese government is seen in the offense.

The US has something to loose too: Being perceived as dependent on Chinese manufacturing and potentially compromised down to military hardware. (The first everybody knows, the second would be devastating for trust.)

All in all it would be a weird angle for a false-flag attack.
>Is there a slope to where everyone is a neo-nazi equivalent though?

No?

The problem with the slippery slope argument here is that it assumes the political, social and legal energies involved can and must only flow in one direction (in this case, towards maximum censorship.)

Yet human society doesn't operate like a fluid in a vacuum. Most people are capable of appreciating nuance, and of objecting to certain kinds of speech while not equivocating all forms of speech to the point that "everyone" becomes "a neo-nazi equivalent," simply because most people can see a difference between "neo-nazi" (read: someone who espouses white supremacist and/or anti-semitic ideals resembling those of the Nazi party) and "everyone" who espouses an opinion with which anyone else may disagree.
I think what is described is an issue with process.

If the device is sealed with an anti-tampering system then the contents must be checked by a trusted entity before being sealed.

Trying to guess the contents of a box that you cannot open sounds a bit like madness.
can you be sure that fabs haven't been infiltrated and masks changed between design and production in any factory, be it tsmc, samsung, glofo or intel?
You're right.

One question though. Would a politically correct, by-the-book US president have had the balls to sanction China? Considering such sanctions could affect the US economy.
7 Useful Tips to Make a Killer Motion Graphics Video
I can't agree more with the author ;).

I work in my day to day 100% and fully dedicated automating Kubernetes cluster lifecycle, maintaining them, monitoring them and creating tools around it. Kubernetes it's a production-grade container orchestrator, it solves really difficult problems but it brings some challenges though. All of their components work distributed across the cluster, including network plugins, firewall policies, the control plane, etc. So be prepared to understand all of it.

Don't get me wrong, I love Kubernetes and if you want to have some fun go for it, but don't use the HA features as an excuse to do it.

But overall saying "NO" to rsync or ansible to deploy your small project just because it's not fancy enough it sounds to me like "Are you really going to the supermarket by car, when there are helicopters out there?"

Great article!
Strange that there's no mention at all of RISC-V. RISC-V also runs on FPGA, right?

Does it really justify yet another RISC instruction-set?

Impressed that there's apparently already a GCC backend though.
Guru meditation error.
Using "cowboys" as a pejorative term ignores the fact that cowboys are fine in their natural environment: The wild west, where self-sufficiency, resilience, adaptability and creativity are more important than engineering processes, documentation, and bureaucracy.

A cowboy is a loose cannon in the big city, but a "proper software engineer" is useless in the wild west. These banks have just realised that there are a few ranches left.
This story could easily be interpreted as anti-China propaganda. Could you think of any other sovereign power who would want a backdoor into servers used by billions of people across the internet? Hardware comes from China. This doesn't mean that the Chinese government orchestrated the attack. The United States government is having a trade war with China. This article's publication isn't just coincidence.

Further, those with insight about how to use the backdoor definitely made use of them. This is one of the central issues with government-mandated backdoors. They are introduced for one group but used by others.
>When will this stuff finally have consequences for China?

Never, unless hardware manufacturing will take off somewhere else.
Effective Cold Calling Tips and Techniques to Succeed in Modern B2B Sales
Same for me with the Pokemon anime. A few years ago, I re-watched the first two episodes and GOOD LORD was that horrible. Some childhood memories should better be left in the past...
That's an illusion. People can comprehend paper voting on a source code level, in that they know what should happen in theory. No single person can even fully observe a single counting station, much less a whole election. You still end up having to trust the system.
SaleHoo to start and grow their online businesses
"Oh man, the original article went way over the author's head."

No, the author of the Kubernetes article completely, so utterly missed the point that it's not even funny: none of those Kubernetes complications are necessary if one runs SmartOS and optionally, as a bonus, Triton.

Since doing something the harder and more complicated way for the same effect is irrational, which presumably the author of the Kubernetes article isn't, I'm compelled to presume that he just didn't know about SmartOS and Triton, or that the person is just interested in boosting their resume rather than researching what the most robust and simplest technology is. If resume boosting with Kubernetes is their goal then their course of action makes sense, but the company where they work won't get the highest reliability and lowest complexity that they could get. So good for them, suboptimal for their (potential) employer. And that's also a concern, moreover, it's a highly professional one. I'm looking through the employer's eyes on this, but then again, I really like sleeping through entire nights without an incident. A simple and robust architecture is a big part of that. Resume boosting isn't.
> guess the contents of a box

Use X-ray? or whatever can penetrate the exterior shell
Dunno, ask the ones in charge. But as I understand the matter, they wanted them to turn around and leave Denmark again.
The "Vigilant" database mentioned is actually a product of a private company. There is essentially zero limitation or oversight on what they do with license plate data. From the point of view of the law, there is no expectation of privacy on a public street. One of their main customer bases are people who "recover" vehicles where the buyer is not keeping up with loan payments. They have thousands of private cameras in operation, making an ever expanding private dragnet available to anyone with the money to buy the data.
There's a black mirror episode that closely parallels that story.

('Crocodile').
I would do what I do now, but I'd not feel threatened.
>"And how is that supposed to work, exactly?"

Abolish the popups entirely, move the consent forms to a voluntary options page. Implement a user profile system, so people can create a profile and opt-in to tracking and profiling through that. Turn off tracking and profiling completely for anonymous users who choose not to create a profile, or who haven't opted in.

I know there will be an outcry of "but the amount of data we would be able to gather is miniscule!", and I say that's a good thing. Companies have absolutely no right to my personal data and to infringe on my privacy, unless I explicitly grant them access to do so.

The default should be to not track and not profile and not store privacy-infringing data, unless the user has taken specific and deliberate action to allow it.

>"There is nothing "onerous" about their terms. They have every right to require your consent in exchange for their services, the GDPR's infringement of that right notwithstanding."

They have absolutely no right to my private data, unless I specifically give them permission. They do not have any right to success, no right to a specific business model being viable forever.

>"For that matter, they have every right to collect, store, and make use of whatever data they are able to gather from your interaction with their service without your consent. The law in this case is blatantly one-sided, and consequently unjust—you aren't forced to beg for their consent to remember and/or communicate whatever data you can gather about the them."

No, they do not have that right. There are very clear differences between corporations and people. Corps are not people, they do not have the same rights a person does.

>"For that matter, where is the GDPR equivalent for the government? They collect more information, and more personal information, than anyone else. Based on the same principles as the GDPR, you should be able to opt out of all those income and sales tax reporting forms, for a start, or demand that they delete you from all their databases, with no change in services received."

The GDPR applies to governments as well. There are very specific rules in place for what information they're allowed to keep, any PII data can only be kept if there is valid purpose. The same rules go for companies, they're certainly allowed to keep information, as long as it's appropriate and necessary to provide the services they provide to you. And yes, taxation is part of the overall service government provides you to, specifically it's the payment for those services.

Facebook doesn't need to endlessly track, profile and monetize you, in order to run a social network that lets you chat with people, exchange cat videos and arrange events. Google doesn't need to endlessly track, profile and monetize you in order to provide search, email, calendars and their other services. It's perfectly fine to keep your calendar data, because that's a service they provide to you. But it is not OK for them to analyze and monetize your calendar data to target ads, unless you give them explicit consent.
*was written in C
> nor is rotting away in a forgotten corner of a human warehouse

To play devil's advocate, a lot of older people in Asian, Latin, and Middle Eastern societies don't end up in retirement homes.

Yes, they exist, but it's culturally expected for children to take care of their parents in old age (just like the parents took care of the kids when they were young). Sure it doesn't make the quality of your last decades in life much better but I think at least it'd involve less crippling loneliness.
Why does this keep getting quoted in the comments. Yes we read the article too.
Would you have a link? I found those videos that I did watch pretty good, definitely not lacking in quality. That was mostly math, just a few chemistry videos (some 20?).
I don't know enough about this, but isn't the article saying that the appearance is deceptive:

The chips on Elemental servers were designed to be as inconspicuous as possible, according to one person who saw a detailed report prepared for Amazon by its third-party security contractor, as well as a second person who saw digital photos and X-ray images of the chips incorporated into a later report prepared by Amazon’s security team. Gray or off-white in color, they looked more like signal conditioning couplers, another common motherboard component, than microchips, and so they were unlikely to be detectable without specialized equipment.
Not all fpgu are equal. Maybe this targets those with lower specs.
And how about the software that runs on these things?
My point is that you should care about privacy, even if you're using, for example, apple services. Thinking that nobody has the resources to hack a company that big isn't an argument and has just been disproven.

In other words, if you have plans to ever be a politician that china may not want in any position of power, don't store your nudes on icloud/dropbox/google drive, or they may suddenly get leaked when you least expect it and ruin your career in favor of a more... Shall we say "convenient"? ...alternative.
The other difference is that individuals don’t have a reputation for genocide, whereas governments certainly do.
New moon found orbiting giant planet about 8,000 light-years away
Ugh, this thing with "gate" has to stop. How many people even know that "watergate" is referring to the name of an office building in DC.
I'd be really interested in how you're approaching persistence? I've also found self managing clusters provisioned with kuibeadm fairly hassle free until persistence is involved. Not so much setting it up (e.g. rook is fairly easy to get going with now), but the ongoing maintenance, dealing with transitioining workloads between nodes etc etc.
> extra marital affairs or cheating

That's not a situation shown in the picture.

I find it annoying that it pretends that man are solely focussed on appearance, as if there's no mind or thought in men.
This is the sort of thing that I think a containerised deployment platform can really help with, and I'm doing much the same – specifically because it completely avoids interactions between applications' environments.

But I would recommend looking at the Hashicorp stack as a possible alternative, which might be entirely suitable for your use-case without the complexity of Kubernetes. This involves running Nomad and Consul to provide cluster scheduling and service discovery respectively - these are both single binaries with minimal configuration. Then you'd need some kind of front-end load-balancer like nginx or traefik which uses Consul to decide where to route requests.

It doesn't cover all the use-cases and features that Kubernetes does, but it does have the benefit of being much more straightforward to work with, so definitely worth considering!
Such men lack moral fibre
As others have pointed out indirectly, git bisect is designed with the patch stack in mind and could be made to support pull requests better.
Hm, but DMA messages get distributed over a parallel bus and this chip seems to employ a serial interface, so I would assume that it's not directly connected to anything that requires high throughput (i.e. memory, disk and peripheral access).
https://www.thelocal.se/20180508/why-sweden-doesnt-keep-stat...

https://www.politico.eu/article/sweden-bombings-grenade-atta...

There are no problems when you outlaw reporting them.
9 Content Pitching Mistakes That Drive Editors Crazy
If every business in an ecosystem takes that kind of stance it becomes true.
As in if the whole ecosystem pays an significantly proportional wage result is an economy that outgrows costs because fact people's work create more and more value is generated.
And also it's good showmanship. I bet at the time word of mouth was even more significant sales route. And you have literally a factory full of people. Now tell me if you know a guy working on it will you not ask him? So keeping him happy meant a customer who doubled as promoter. In my mind Ford just cut some marketing branch and rerouted the workload to factory workers and payed for it.
It does not mean it BS if it can drive sales. The two don't have to be mutuality exclusive. I wish more people would not forget it
The thing is, those who disagree are not willing to compromise on that. They state as an absolute that any depiction of a gender stereotype reinforces that stereotype in those who are exposed to it and thus keep sexism going. If they stopped believing that premise, their entire argumentation would fall apart, so I doubt it's possible to convince them of that they're wrong.