skysight-inc/HackerNews huggingface dataset:
The rice is indeed small, but it is not small on an IC chip. When people check the chip, they usually use a tool called microscope, like this https://goo.gl/1XK4YK.
That secret "Chinese weapon" you hold on your finger tip is a very common electronic component called the signal conditioning balun, worth $0.29 and sold here https://www.mouser.com/ProductDetail/TDK/HHM1932A2?qs=6JAMGB.... The Bloomberg report can really win the Ignorance and Stupidity Award of this year.
10 Famous Indian Celebrities Who Married to Foreigners
Kinda surprised it's jira and not Microsoft's own TFS. Oh well. Nice for those who use jira.
How to Realize OTA Updates for Connected Cars
Observation: Here we have an old HD, and we're able to look at it at the signal level. Oh sure, because the case is removed there's air in there so we won't be able to read/write stuff at a super-high/super-dense bitrate. But does it matter? Couldn't we use the HD as a low density/low bitrate device? The purpose? I'd love to try building a classic platter-based hard drive from scratch one day...
The headlines are somewhat over-the-top, but none of those articles show examples of them deliberately making up a story.

I wouldn't read it, because they seem to repeatedly overstate the possible impact of their stories. But if you work in the space, or are the victim of an attack, this thread-level-orange style of writing may feel entirely appropriate.

It's no different than, say, insinuating that something is wrong with <x>. But instead of clearly explaining the criticism, to "let smart people figure it out for themselves". That's the laziest conspiracy sales tactic, and it exploits peoples' insecurities by tying the carrot ("I'm one of the smart ones!") to the stick of accepting whatever theory is being peddled.
Agreed that the problem isn't directly Jira, but (anecdotally maybe) there seems a clear correlation between Jira and unhappy developers who feel their tracker has way too much process. Jira doesn't cause the root problem, but Atlassian are profiting from it existing, and so maybe people are encouraged to use it in those ways. I'm not letting it off the hook so easily.
Pushing the conspiracy theory just for the sake of argument. You could imagine that some employees have been in contact with the NSA about these chips and been told that they cannot disclose anything to their employers. The management of Apple would deny the claim in good faith. It would be hard to make a claim that Apple meant to mislead investors.
Why we’ll always be exploring new programming languages at Canva
"ORBIS is designed for modern browsers and uses technology that works best in Chrome or Safari.
If you want to try ORBIS in your unsupported browser, click here"

Double sigh, me & my Firefox.
I’m not sure that the research cited supports the editorial position of the article, which I understand to be that wind power is less useful than expected by a consensus of scientists because it causes local warming that will not be quickly offset by carbon savings, and has inadequate energy density (per unit area) to practically provide the entire power supply.

However, as far as I can see the article does not cite any claim by scientists or anyone else that the success conditions for wind power are to replace all other power, or to completely, immediately, or locally, negate climate change. It is not claimed that local warming around wind farms will ever increase considerably beyond 0.5C, while global climate change has been predicted to greatly exceed that amount if not remediated.

Miller and Keith find that policy makers have over estimated the energy density of wind power.[1] The study finding that wind farms cause local warming wasn’t linked, but I found it myself, unfortunately pay-walled by the journal.[2] At least we can read the summary, which reflects some statements found in the Bloomberg article:

“Wind's warming can exceed avoided warming from reduced emissions for a century.
[…]
We find that generating today's US electricity demand (0.5 TWe) with wind power would warm Continental US surface temperatures by 0.24°C.
[…]
The warming effect is: small compared with projections of 21st century warming, approximately equivalent to the reduced warming achieved by decarbonizing global electricity generation, and large compared with the reduced warming achieved by decarbonizing US electricity with wind.”

Physics Today published an article discussing this study (hopefully after being allowed to read the whole thing, unlike us). It sounds like the local warming effect is more complicated then just a change in mean temperature. The paper finds that the effect is much stronger at night, depends on location, and might be managed by placement, and might be beneficial in certain cases such as reducing the chance of night time frost damaging crops. A 2010 National Academy of Sciences by Roy and Traiteur seems to have similar findings.[4]

I think it’s important to evaluate the claims in popular press articles about science findings against the actual cited sources. Research findings tend to be complicated and subtle – the easy stuff is done already! It’s easy for journalists mis-characterize, exaggerate, or even contradict the source when things are already hard enough to understand. In the worst cases, people read something like Prevention magazine claiming “Scientists’ find coffee cures cancer!” one week, and “Scientists’ find coffee causes cancer!” the next week, and then blame scientists for stuff other people said.

[1] http://iopscience.iop.org/article/10.1088/1748-9326/aae102/m...

[2] https://www.sciencedirect.com/science/article/pii/S254243511...

[3] https://physicstoday.scitation.org/do/10.1063/PT.6.1.2018100...

[4] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2964241/
This looks a lot like getting short term profit increases for losing long term control. I wouldn't do it, at least not with just Airbnb suggestions.
My nearly 15 year old PPC Macs take offense! Seriously, for light tasks around the house, they are still useful (granted, not at all secure or current but that's not an issue in all use cases.) Yeah, I get that I'm an edge case...
And there is xray to detect what is inside a chip like this:
https://www.youtube.com/watch?v=XXDsM3mUv3Y

These are quite mature and popular technique.

Rice is too big to be unnoticed....
Pop_OS on Lenovo is the bomb.
Well, on a T480S at least.
Reading the title, I expected something like

update screen
set red=3, green=200, blue=125
where (row-100)*(row-100) + (col-200)+(col-200) < 12345

That could be a wonderful hack, certainly if combined with triggers that generate or even react to screen updates. Carefully done joins could easily blit in character bitmaps and icons.

If you have time at hand, feel free to implement this idea by adding a storage engine that stores on screen to your favorite sql database. Bonus points if you manage to run many of the updates on the GPU.
Did you miss the other hacking news from yesterday?

https://www.cnbc.com/2018/10/04/doj-charges-7-russian-intell...
Their account seems pretty solid and the story itself I think is less incredible than what Snowden leaked: a password check bypass on the hardware remote access systems is all they need basically.
The article doesn’t have to be correct, it just has to be well sourced. If it turns out to be incorrect, then it becomes a story about how or why the sources got it wrong.
https://outline.com/xk5MMp
Is it possible that only lower level Apple/Amazon employees were involved in the investigation and that they are forbidden from telling anyone else, even senior legal executives?
So now to get "just as good, but cheaper" laptop which isn't as light or thin since somehow thouse aren't the primary functions of a laptop. I now should also buy a new expensive phone which sends all of my data to Google or I would have to buy the same phone and then research how to install 3rd party ROM which gets updated months later than stock Android and has god knows what security holes. Then I'd need to spend even more money on new watch/health tracker that syncronized seamlessly with both my new phone and my laptop.

Before you get your panties on a knot I run both Windows and Linux and at home whole trifecta Windows, Linux, and OS X
The Future of Digital Marketing in Mobile App Development
I used it 6-8 years ago on-prem. I remember hearing it needed a rather beefy server and I don't remember it behaving particularly fast but it wasn't particularly slow, either. My jobs in-between didn't use Jira, but my most recent one uses the hosted version--it's very, very slow. What's annoying is it doesn't seem to cache either, so a second reload or navigating around is also slow.

I only read this in passing, but I heard it's the growing pains of changing a codebase intended to run on a single-server and trying to rebuild it into "services" that scale.
Well, all of the above mentioned want a slice of Chinese pie.

I'd say that market linkage in between China and USA in tech was just beginning to heal up after the credit crisis, but before that Chinese companies were rather wary of going to USA because it is expensive and risky market to enter, and instead chose easier markets for overseas expansion.

As any hope of rapprochement is now done for, they will revert to their old ways.

Comrades from AS4134 must be now scrambling everybody and everything into damage control mode. I think they firmly believed that they had an impenetrable cover.
> Jira gets the flac, because but the problems isn't Jira.

I recently had somebody come up and tell me: "I can't get a grasp of the status of the sprint because of Jira."

The issue, in stead was that people were creating epics all over the place and nobody ever updated their stories. So there was no clear structure and the burndown never burned down. I've worked with Jira for a long time and I can, almost, always adapt it to fit a process. However, when nobody knows that the process is, it's impossible to create a good version in Jira, but Jira ends up getting the blame.
I think the application of VR for finance applications like what you describe is definitely a really exciting use case that will become more realistic as the headsets improve in terms of comfort and resolution - per your comments. We actually explored some other similar use cases, for example customer service - where a VR HMD could in effect replace the 2-3 monitor / desktop + headset set up that customer service reps drive to call centers to use every day.

However, these "full day" applications are definitely a few years out. We've seen sessions of dream where people have little issue of up to 90 minutes, and on average something like 45 minutes. Effectively the duration of a meeting - and this is where we're focusing our efforts, where productivity and collaboration intersect.

I think that from the perspective of investing into these technologies as a financial institution to change the way people access financial data all day, it's a not here yet. However, to get there, we need to start building these platforms today. This has been our intention, and think that even in the meanwhile - being able to have a remote meeting with 4-6 people that are all over the world. Then being able to bring in content like presentations or generic web pages will provide a level of utility out of reach of even some of the $300K teleconferencing solutions out there.

Regardless of the hype the industry has received, these headsets are still in their infancy. One of the big steps is about to be taken by the upcoming Quest headset due to launch Spring 2019 by Oculus. The big step this HMD takes is detaching the umbilical cord to the computer, and providing the first fully 6DOF headset (both HMD and controllers). They even through in a healthy resolution bump, which we're excited about. This well could be the 'blackberry' moment for VR.
As an outside observer of us politics it seems to me that the democrats want Russia as an external enemy whereas the republicans want China. Perhaps now it seems like the republicans have the upper hand but it is not obvious how it is going to end.
Reading the title I had the complete opposite expectations. Thinking that he is talking about a system where you want to have meeting with random people to talk about business.
Created an account but your JS seems a bit buggy, so nothing loaded...

https://pastebin.com/Xrzeg16g
I can't imagine hating Facebook as a developer. Just because some people hand over their personal information to them? I'll gladly overlook that when they gave me things like React, React Native. GraphQL, Jest, Flow.
Feasible yes. Unlikely yes.

It would require multi master bus arbitration which isn’t built into the SPI protocol so it would have to intercept the protocol’s MOSI/MISO lines. Thus requiring more pins.

That means larger package.

And a larger piece of steaming evidence sitting there.

I can’t see any logic however in doing this because there are tens of not hundreds of easier vectors involving the software side of it. Edit: which are all plausibly deniable.

Also rewriting SPI would be difficult to do fast without dedicated silicon (expensive dev cycle) or FPGA (physically large).

Edit: to note, eSPI was only formalised in 2016 by Intel to replace LPC so this either predates that or talks to the LPC bus which has a much higher pin count.

Edit 2: also these would be very easy to find. You pull the known components attached to the SPI bus off the board at a rework station, dump a few hundred volts down the SPI bus and look for where the smoke comes out. Then you buy another identical board and analyse that part of it. The change in impedance and current drain of the device would be evident as well.
Really cool to hear the insights here. I've always wanted to learn things by myself, and so I picked up the guitar ages ago. I wish I spent a lot more time on it.

I can read guitar tablature from Ultimate-guitar.com and once upon a time (OLGA). I'm afraid I'm very robotic because I need to see where I'm going to play it. And because of that, there's no melody, and I can't remember chords and notes or know what scales and notes to play when. I think I have reasonable finger motion, even to the point where I don't need to look at the fretboard at all.

Like I said, amazing to hear from the experts. I envy!
Almost every computer has a security chip now.

At least if your computer has something related to one of these names: AMD, Hewlett-Packard, IBM, Intel, Microsoft, Wave Systems Corp, Digital Management, Inc., Cisco, Lenovo, Infineon, Juniper Networks, Fujitsu, etc.

These are the member of the consortium Trusted Computing Group[1] who pushed for Trusted Computing[2] through hardware or software.

Do you remember the Palladium fiasco (now Next Generation Secure computing Base[3]) ? The TCPA (Trusted Computing Platform Alliance) ? This was the beginning and it happened in the late 1990's/early 2000's.

[1]: https://en.wikipedia.org/wiki/Trusted_Computing_Group

[2]: https://en.wikipedia.org/wiki/Trusted_Computing

[3]: https://en.wikipedia.org/wiki/Next-Generation_Secure_Computi...
I seriously don't understand why you are so much against DNSSEC. Just about every HN article that involves DNS had one of your anti-DNSSEC rants in them.

Yes, we know DNSSEC has some flaws, but how is DNSSEC worse than the alternative, which is no zone signing at al?

> if you screw the deployment of DNSSEC up, sites vanish off the Internet.

If you screw up your TLS certificate, your site also vanishes off the internet, should we also give up on HTTPS then?
well, the article said that amazon noticed pings to c&c servers in its beijing datacentre. it did also say that these were more sophisticated hardware attacks but didn’t make it clear if these chips were also found
Honestly, I know that's the conventional wisdom, but I've never once heard an engineer go to their manager and say, "I'd like to spend some time documenting this important process you asked me to implement" and being told "no, we don't have time to document! just keep it all in your head!"

I'm sure this literally never happens.

What I do see quite frequently is developers who don't like writing documentation finding ways to not do it or justify doing a poor job.
The Register has an interesting article about it, and how it could be possible. On the other hand, they point out that it would be more likely that the actual firmware to be changed. It reminds me of the fiction book "Ghost Fleet", where China starts a war with the US and a bunch of the US war machine is compromised.

https://www.theregister.co.uk/2018/10/04/supermicro_bloomber...
> JIRA has a tendency to.... decay.

Is there any enterprise scale tool that doesn't, when it isn't managed correctly? It needs management just like any other tool that's being used on an enterprise scale. People just want to be able to set and forget, but then it doesn't adapt well to individual departments and teams. Then people either start messing with it, or if they can't, they start hating it.

The benefit of a smaller tool is then, that teams can just get their own instance and mess that up without impacting the organization.
Rayon[1] is artificial silk.

[1]: https://en.wikipedia.org/wiki/Rayon
When you ask "why would they?" you can intuit a seemingly good case either way that they would or wouldn't (maybe they would because they're incompetent.)

Instead of relying on intuition, a more to-the-point question is "did they do it?" We have to wait for a definitive answer to this from the authorities.
I don't know, I've seen some really high quality BBC shows too and I'd love to see more of that- agree if they're just going to phone it in to hit a quota then this is no good for anyone
> And the paper is proposing to cover almost 100 TIMES! the land area of the interstate system with wind farms.

That wasn't a proposal, it was a "what if" scenario. Plausible in the sense that it would be highly implausible to see even more wind installations than that.

By the way, it does not seem quite as daunting if you factor in the very different densities of highway systems and wind farms: individual turbines are typically spaced about 10 rotor diameters apart (some studies say 15 would be most efficient), and with rotor diameters having passed 100m long ago, creeping up to a 1/10th mile, that leaves us with about a mile between turbines (assuming that rotor sizes increase is slowing down). With your generous 1/10th mile wide highway width assumption, area equivalence would be at one turbine each ten miles, 100 times area equivalence would be one turbine for every 1/10th mile of interstate. That would be definitely huge and nothing you could build in a singular focused effort, but it sounds far less inconceivable than the initial "100 times the interstate".
A curated collection of isochrone maps can be found here: https://alternativetransport.wordpress.com/category/isochron...
Implying that "unwavering loyalty to the brand" is the only reason to want this. I like that my computer is locked down and potentially less vulnerable to random attacks thanks to proprietary locks designed and reviewed by security experts.

(I also use an iPhone for this reason.)
I'm sorry, what's the value added here? In the demo video (in vimeo) the team is going over some work tasks in Trello. Considering the bad HMD resolution and general clumsiness of doing things such as typing, I'm really unsure as to what is the value added of doing a meeting in Dream VR session as opposed to just regulard desktop/webex type of thing with possibly desktop sharing and voice/video conf. I work extensively with VR and I have a hard time seeing the catch here. Thanks!
Free+Your+Android+-+FSFE
Northwest’s cell networks disrupted after ‘presidential alert’ text
Yeah, even more intuitively, there will just be a Nash equilibrium:

1. Everyone wants to make money.

2. People will look for the best way to make money.

3. If enough people are in index funds, the best way is to go active. If enough people are active, it is best to do index funds. Therefore we’ll have an equilibrium where it doesn’t matter too much which you choose (as long as you’re reasonably smart not to get ripped off).
But then who gets to decide which groups deserve to be legitimate targets for hatred?

Exactly, you cannot do that without bias.
Obviously they didn't get a hold of an actual chip, they just claim they were made to look inconspicuous (like a signal conditioning coupler).
Link without (illegal) GDPR noise:
https://web.archive.org/web/20181005074604/https://slate.com...
Done, and thanks for pointing this out. I wrote this on mobile, and thought the app (Materialistic) had lost what I'd written, hence I wrote it again.

Not targeting you with this, but it seems a bit harsh to get downvoted for what was obviously a mistake.
I learned about clubhouse.io last week. Testing it now, but it seems very nice. Just enough configuration and structure.

(We are coming from Trello which just doesn't deal well with a large number of tickets as you have only one view on them.)
Show HN: Steam Giveaway App
If you’re looking for a motive, how about this administration’s obsession with getting manufacturing jobs “back” to the US? Seems to me that this along with the current trade war, could be part of a strategy to do just that.
Flydubai to operate flights from DWC during DXB refurbishment project – Aviation
Basically everyone in my family used to call me for tech support (parents, grandparents, aunts, uncles, cousins), but in the past 3 years or so, I’ve convinced everyone to iPhones and iPads and MacBook Airs, they have have basically zero tech support calls to me. Everything just works as long as they keep track of their Apple ID and iCloud login. There is definitely value to not spending any time or brain cycles worrying about how to do something, and having everything integrated and always working.

With Windows, it’s always update this, restart that, where is this menu option, drivers? It’s not for people who don’t want to spend their time figuring that stuff out. Plus Microsoft is not as trustworthy of a brand.
Polish BSD User Group – Behind the Scenes
It's actually possible they have a National Security Gag order. If that's the case they could only deny anyway.
How possible is it for users to have haptic gloves for typing instead of using controllers? I remain positive on VR productivity tools in future but think we have to get flexible and creative on hardware. Personally, I would love to have collaborative meetings with my colleagues worldwide, even just to demo my modelling ideas on a whiteboard which I think would be tremendously helpful (I believe FB keynote last year also voiced the same sentiment). I fully agree with the hardware limitations at the moment but certainly don't think investment and work now is a waste of time. To push this area forward, we also need to find compelling experiences that are unique to VR, like remote presentation rehearsal, collaborative white board brainstorming sessions for 3D design etc. Wearing a VR headset to work 8 to 10 hours straight is not the answer I look forward to, at least not for now. What VR is strong about to me todate are: minimising limitations resulted from physical distances and fading memories of past experience, as well as its ability to create limitless imaginary worlds, boosting multi-dimensional communication.
One of the keywords you're looking for is "statistical forecasting."

It's a fairly specialized data science skill since it requires experience with some fairly specific techniques (e.g. dealing with seasonality, autocorrelation, etc. within data has all kinds of interesting solutions).
> Did player expected them to package the optimized lisp virtual machine they had back then

Well, yeah? It's a remaster, not a remake. A remaster implies taking an existing project and updating it. And it makes sense to keep the old game logic - why write from scratch if you already have the whole game in a working state?