skysight-inc/HackerNews huggingface dataset:
The BMC is always on a maintenance vlan for any organization worth its salt. The software stack on those things doesn't deserve to see the light of the day. If you open it up to the internet, you will get pwned, china or not. So there seems to be something missing. It can't just be a compromised BMC.

Edit: Now that I think of it, a compromised BMC can inject payloads into the running OS, depending on the sophistication of the attack and the defenses of the OS. So it does seem possible.
Multiple locks are not always in the same scope. Method Foo::Update acquires a lock, then without releasing the lock calls into another class/object where Bar::Commit also acquires its own lock.
You're the one that raised the metaphor, but okay

And your response was absurd. You don't rebuild a transmission in order to run a shop. You don't even rebuild a transmission as an engineer creating cars, you shop that out to an organization specializing in the extremely difficult task of designing and building transmissions. I wanted to avoid this waste of time, but here we are.

As for the rest of your comment about reasoning about performance, none of that requires the work you did. Again, neat project (for you), but completely unnecessary in general.
The actual details on the hardware are also sketchy. Based on my reading of the article, this wasn't a chip swap where one chip is replaced by a backdoored version. The article implies that this was an extra chip so either dozens (possibly hundreds) of engineers were in on the operation from the beginning to slip the chip into the design undetected or the chip was mounted without any changes to the board design. The former is much riskier than backdooring the chips and the latter, as far as I know, has not been done before with a nontrivial chip.

Fitting any chip capable of exfiltrating a nontrivial amount of data onto a modern motherboard without going through many rounds of simulation or significantly impacting performance, while also putting it in a place it is capable of intercepting valuable data is practically impossible. Hell, just getting the right power domains wired to the chip is going to be tough enough.
Anecdote time: making yourself too specialized makes you easily replaceable too.

At a previous gig, a problem dev, who insisted on only using Erlang, was painted into a corner by eng at large who did not want to learn/support another language (Ruby, Python, JS, Java, and R were all over).

This dev eventually got fired, as they didn't really contribute much to "the big picture". Since their efforts were so limited in scope, their Erlang work was quickly replaced using the other languages, and consumers of the results never noticed.

YMMV. But that's a old standard that should probably die
These delusions that hateful ideas don't have any traction in America are exactly why Trumpism has been able to succeed. There are sizable groups of people in this country with terrifying beliefs. You've got to take off the blinders.

"The Times found that nearly 20% of Trump supporters did not approve of freeing the slaves, according to a January YouGov/Economist poll"

http://time.com/4236640/donald-trump-racist-supporters/
Won't this heat up the oceans? causing more of the blob of the pacific?
> If I'm thinking of playing around with a Raspberry Pi or other SBC, do I need to install Kubernetes on the SBC first?

No! Although you could deploy it as a docker container easily.

Simple heuristic: how many containers and machines am I dealing with? More than one machine and one container? Consider moving to Docker Swarm or K8s. A single container? What is there to orchestrate?
It's deeply immoral to use violence to control people. It's deeply immoral to hoard money and resources (to "be rich" in today's language) and ensure the system of resource hoarding continues over generations through lobbying and corruption. That's the extent of the comparison -- the magnitude of the immorality -- and I think it's fair?
Well, apart from all those people who protested the removal of Confederate statues.
This is sometimes true, but not always.

There are many auditors who will do a good and fair job.

This is especially true if the audit is not intended to be publicly shared, but rather for the internal consumption of the company in question.

I'd still say an audit where the reviewers are skilled professionals, but biased by the source of income, is better than the average open source project where few people will do such a thorough audit ever; likely none after the original author, excepting special cases like Linux.
Or: you can expect this kind of shit from pretty much any supplier. Even if you go to a western company, they all source their components from China anyway.
Don't forget physics.
How would one falsify a denial?
Yes. Just do it when they have $99 specials (at least twice every year) and download your raw data. I don't think you can find cheaper. At the same time, I did a whole genome sequencing for less than $400, so, maybe $99 is way too much anyway.
GoogleMeetRoulette: Joining random meetings
This reaction from Amazon / Apple is reasonable if Bloomberg is lying.

This reaction also seems reasonable if Bloomberg was telling the true.
"Libraries are considerably better than Golang and more all encompassing because you have 20 years of Erlang libraries that you can just use."

I'm wouldn't be sure of that anymore. For instance, Go has an official AWS SDK but Erlang does not. Go's been around for 8 years now and it is almost certainly significantly more popular than Erlang. It's been a while since I reached for a library for Go and couldn't find anything at all. (Though I have recently been in the "three libraries that all seem like 80% of the job is done with varying degrees of quality" situation. But you still get that in Erlang in similar places too, as far as I know.)
I don't think your reasoning is valid. A test might be unable to discriminate accurately at the extremes not because it's uniformly too inaccurate but because it doesn't have enough range.

Toy model: the test consists of one question that everyone in the top 1% can do and no one in the bottom 99% can do; one question that everyone in the top 2% can do and no one in the bottom 98% can do; ... one question that everyone in the top 99% can do and no one in the bottom 1% can do. This test discriminates very nicely and accurately throughout its range of applicability, but it will do no good at all from distinguishing a top-0.01% person from a merely top-1% person.

(Just as a tape measure 2m long will let you compare people very accurately by height provided they're no taller than 2m, but will be much less useful for people taller than that.)
I've said this before and I'll say it again. The problem with coming up with a test for being in a simulation is that the creator of the simulation might simply overwrite our memories. They could make us believe we succeeded in proving the simulation hypothesis false. There really isn't a way to test this properly when you aren't able to experience reality objectively. We're on the inside.

Side Note: I had an interesting debate just last night with some friends where I pointed out the creator of the universe might not even be aware of the aberration of our existence in it and from a high level thinks everything is running smoothly. And, we haven't made a big enough dent in the universe to get noticed. The question then becomes, if we for example destroyed a star or entire solar system to get the creator's attention would they go, "WHAT IS THIS?!" and delete the aberration? Contact us? Or, simply observe? Note: I was discussing a real god at the time, but my friend thought I was referring to a creator in the context of simulation theory at the time. Still an interesting brain buster either way.

Also, if it's true the creator is more of a macroscopic thinker than microscopic and are "asleep at the wheel" then it kind of explains a lot of things regarding injustices in the world. The creator just glances at the universe from time to time says to themselves, "Well, the galaxies are still spinning. All is well."

No offense to any religion. It was just a fun thought experiment.
Cyberespionage Experts Want to Know Who’s Exposing China’s Hacking Army
So basically, ignore 1/2 of the reasonable problems that are solved in the first article and then look, no need to learn anything!!!

As someone whom can setup and run a kubernetes cluster in my sleep, I can tell you that it is a superb production ready platform that solves many real world problems.

That in mind, kubernetes has constraints also, like running networked elixer containers is possible, but not ideal from elixer's perspective. Dealing with big data takes extra consideration. etc. etc.

All said, if you have an interest in DevOps/Ops/SysAdmin type technologies, learning Kubernetes is a fine way to spend your time. Once you have a few patterns under your belt, you are going to run way faster at moving your stack to production for real users to start using, and that has value.

I think the initial author (not this article, the other one) was just pointing out that you can indeed run kubernetes pretty cheap, and that is useful information and good introduction. This article is clickbait designed to mooch off of the others success.
a. Most people here are programmer or programmer-types. Assuming there's a strong correlation between "could attend college" and "could be a programmer," that likely implies an IQ of 115 or more.

b. Those instances tend to stand out (especially the people smarter than you with miserable outcomes), but also tend to not be statistically relevant.
> not much bigger than a grain of rice, that wasn’t part of the boards’ original design.

'original design' is hard to verify without help from SuperMicro.

> Amazon reported the discovery to U.S. authorities, sending a shudder through the intelligence community.

... especially for Amazon. Unless Bloomberg claims here that Amazon got parts of this SKU and compared them to newer parts of the SKU and found differences?

Is it legit to revise your design in terms of changes to passives without rev'ing the part and notifying downstream supply chain. Could the grain-of-rice 'microchip' be a different or new resistor/cap? Could it be logic masquerading as a passive?

> In one case, the malicious chips were thin enough that they’d been embedded between the layers of fiberglass onto which the other components were attached, according to one person who saw pictures of the chips.

Like a passive in a blind/buried via?

Anyways, for everyone who claims "it can't be done", "this is implausible" -- you're probably being a little naive. US intelligence agencies do shipment interdiction and adulterate products for this purpose, [1] why couldn't/shouldn't China do the same?

[1] https://www.theguardian.com/books/2014/may/12/glenn-greenwal...
> tools that solve real problems and, once you know them, make your life easier.

yep, i think you nailed here.
If you use Firefox, there's a local file called places.sqlite that stores history, queries, bookmarks, etc.: http://kb.mozillazine.org/Places.sqlite
My pull request branches are of the size that it only makes sense together.
So no hardware warranty repairs?
Is there an economic term to describe the type of market that the airline industry seems (from my point of view)?

It seems like operating an airline is such a capital intensive industry that once you've established yourself you can 'ignore' certain norms of competition and innovation.

Commercial air travel doesn't seem to have undergone much innovation since the Concorde failed. Domestic flights don't seem much faster or more comfortable than 10 years ago, and service has arguably gotten worse as usage has continued to increase. Airline travel is still so useful that many customers will simply take what is offered because in many cases travel by other means is not possible.

It does not seem like a monopoly because there are many competitors, but I don't know how to describe what I perceive in market terms.
Well we eventually got the fast-loading cartridges which turned the 1541 into a speed beast.
I think people here are just suggesting that the folks who believe producing things in America would avoid a culture of abject amorality and greed seem naive, at best. Even ignoring the current obvious examples, Americans frequently engage in profitable criminal behavior: https://www.businessinsider.com/mcdonalds-monopoly-game-rigg...
:) I like Hackernews a lot sometimes.
How to Build Cloud-Powered Mobile Apps with Expo and AWS Amplify
So counter to your point, Bloomberg reported on a mid-sized company I worked for. The vast majority of the article was sourced from one disgruntled employee, and was completely untrue based on objective facts. An example I could verify visually was the supposition that executive X was hardly in the office. I sat 30 ft from executive X, and he was there every day.

I'm not saying this particular article is incorrect, just that I wouldn't strongly assume either direction without more information.
I find it funny that you think in hundreds of years we are not going to be greedy or barbaric. It is basically hardwired into the human condition.
Aliexpress with DHL shipping

https://www.aliexpress.com/item/Global-Version-Xiaomi-POCOPH...

BUT I'm not sure you will get LTE coverage
Show HN: Ask us anything about the Bay Area. Our journalists will answer
In terms of raw capability, Haskell is the concurrency winner. Not only does it have basically every paradigm, they even all work together reasonably well. (Not perfectly, but reasonably well.) But I don't think you can argue Haskell is mainstream. It continues to be on a fairly slow growth trajectory from what I see, but it's not in any danger of cracking into the top tier language set anytime soon. Go just might in another 5 years.
Seems odd that national security officials would outright lie about a computer chip being implanted on hardware. Occam's razor tells me Amazon/Apple are trying not to sour ties with their suppliers.
On-demand journalism is here. You tell us the stories you want to know, and we will create news you can use.
No offense to this site, I like it a lot so far, but I wouldn’t favorably compare it in terms of non-technical knowledge to most of the educated population. You listed a ton of really infamous events, ones that are routinely covered in intro classes at all levels of schooling, and have entered even pop culture. If you think that most people are unaware of all, but a couple of them, you’re grossly underestimating people. I’d argue that the only two many people wouldn’t know are the actions of the pope one, and the Chin emperor. The rest are familiar to pretty much everyone who made it through high school.
That is my question as well, without getting their hands on the machine, how do the attackers start the attacks? And in case of AWS, since everything is so virtualized, does it make sense to install a hardware backdoor if it cant even map to your true target？

It could probably make more sense as a backdoor when the hackers get hold the access to the physical device, it is however quite incredible to me that this hack is designed for a remote network access, and could go unnoticed from infosec within the company if it is truly sending packets outside the firewall...
It’s a case of failing to find a workable solution despite there being one right in front of you, because you’re pointedly ignoring it.
From when it was sold[1]:

> "I'm shocked it sold at all," Lederman's wife, Ellen, told The Associated Press on Friday. "We would let little kids play with it and have their picture taken."

> Auction manager Laura Yntema told NBC News that the winning bid was placed online — but she declined to provide further information about the buyer, citing the auction house's confidentiality rules.

So an anonymous person provided for Lederman’s retirement in exchange for “ownership” of a piece of metal, with little intrinsic value, no sentimental value, and that will forever be know as “Lederman’s Nobel medal” never as belonging to the buyer.

Just another way to look at how the “mechanics of society” worked in the case.

[1] https://www.nbcnews.com/science/science-news/physicist-leon-...
Recalling the recent "how to smell BS papers" article, this doesn't pass the grandma test.

More specifically, you would imagine that if such a simple hack existed, we would be well aware of it in 500 years of printed press.
There were fastloaders for the 1540 too that boosted them 5-20x.

https://www.c64-wiki.com/wiki/Fast_loader
Yes, but that's included in my point. Maybe the slow-reading with this font is less overall time than the number of rereads required in order to hit the same retention levels. It's also possible that reading something slower allows for greater mental association or memory building than just speed reading something 10 times.

There's a bunch of reasons why this could be either better or worse, depending on a myriad of different factors. I think it's a cool tool to have in your kit.
Developer, User, and Business Process Workflows Across Platforms
It was used for all of the gameplay code. The C and ASM were just the engine level primitives. On the systems I've seen, the gameplay code can outnumber engine code 5 to 1.
The analogy shouldn't be hobbyists versus professionals.

It's more like you building your own car versus a Toyota manufacturing plant. You may think procuring and programming the robots to be an overkill for a single car, but it makes sense for a factory.
It depends on what political system we have by then. If we do develop further and progress to a one whole planet mentality (no countries/borders etc) then we will know our history as it was.

If we continue on the current path then im afraid we'll still be divided with all the consequences (same old same old).

" No they won't, it'll be whitewashed in textbooks and only those who study history will know. There's already so many so-called black marks that are worse and already quietly overlooked.
"
Show HN: **vbuild** let you use python components in vuejs app
vbuild (https://github.com/manatlan/vbuild) is a webpacker in pure python(2|3); which let you compile yours vue/sfc files components for your vuejs app (without a NodeJS stack !!) ... is now able to compile Python Components (https://github.com/manatlan/vbuild/blob/master/doc/PyCompone...) too.

On pypi/vbuild: https://pypi.org/project/vbuild/
I agree with you, but

> and the best healthcare

The US does worse across a wide range of health measures.
If it makes you feel any better, my IQ wasn't as high as I hoped it would be. Not high enough to brag about, for sure.
I've noticed FireFox quantum pocket 'recommended stories' are frequently front page HN news spam these days.
The endowment is over $7.5 billion, so it would be .01% https://annualreport.uchicago.edu/page/endowment
It makes understanding people easier - much easier, in fact - but it doesn’t necessarily help you use that understanding any better.

Firstly, as others have observed, it makes it hard to relate to others when the majority of people you meet seem to have the intellect of a child - I don’t mean this unkindly, rather more that one ends up looking at most folks as making grievous and avoidable errors incessantly, and almost as overgrown children. You want to help, but you can’t, because nobody likes being patronised or made to feel inferior, but if you don’t help, they resent you for not having helped. It isn’t intractable, but it’s most readily avoided by avoiding interaction in the first place.

Secondly, intimidation. Ties back to making people feel inferior, and generally stymies social interactions. It’s tough, even in a marriage, as they either know you’re playing dumb, or feel like you’re beating them over the head with your intellect. Either way you end up hurting their self worth every time you notice something or think of something and unwisely decide to share it.

Thirdly, overshoot. I tend to assign far more intelligence and cunning to others than there is, and resultabtly second, third, fourth guess their mind-state, as it’s hard to comprehend the disappointingly facile motives behind behaviour.

Finally, expectations. Once you let on that you can solve the intractable while half-asleep, you’re expected to do it day in, day out, and find that the world beats a path to your door with their petitions and demands, which feeds more than a degree of misanthropy.

I’ve met maybe three people in my life who I’ve felt on a level with, and one of them is my brother.
Making my peace
Those people will also be viewed as a black mark on American history
And?

I mean, what would the impact of them committing securities fraud be? Who would go after them and how much would the ensuing lawsuit cost them? The government isn’t gonna go after them if they asked them to keep it quiet.

Probably significantly less than telling their customers they’ve known about and hidden the fact that their systems were compromised for years (even if it was at the behest of the government).
Great write-up. It's the classic innovations dilema (squared) all over again - the simple things e.g. SQLite, CSV, etc. work far better than modern "state-of-the-art" offerings. Also doing my fair share e.g. trying to improve CSV - CSV v1.1 anyone? -> https://csv11.github.io and collecting text to SQLite dbs for football -> https://github.com/openfootball (aka football.db); beer -> https://github.com/openbeer (aka beer.db) and the world -> https://github.com/openmundi (aka world.db) All datasets / SQLite dbs in the public domain (no license, no copyright, no rights reserved), for example, and ready for use with Datasette. Thanks for the great (open) data publishing tool.
unless you already know how to do it. i can setup a production ready cluster in under a day and as long as things are containerized, run them likety split. Hardly insane once you know how it works.
Apple was listed on the PRISM slides but not Amazon. https://en.m.wikipedia.org/wiki/PRISM_(surveillance_program)...
6502 assembly is so nice, I wrote some apps in the early 80's. You can learn the language in a few minutes. But all sorts of interesting clever things were possible.
Well, they wouldn't be using all the filler in any splenda packet, would they? 12mg * 16 mixed into a liquid seems a bit more probable, if still unpleasant.
But no societies are free from organized crime. And last time I checked, no western country was free from card skimmers either.
Additional Building Won't Make City Housing More Affordable, Says Fed Study
You are speculating without evidence. Handwriting may be more effective for memorization than typing because forming letters by hand is a more memorable act than typing, nothing to do with "choosing what's important to write". Since handwriting is so laborious, it leaves LESS time for thinking about what to write down, not more.

You can test this yourself by making a fair comparision:

* Copy entire documents by handwriting vs typing, with no regard to choosing "what's important", and test which strategy leads to better recall.

* Take notes from a lecture by handwriting vs typing, setting a goal of say 10% of the total material note-taken, choosing what's important to write down, and giving yourself as much time as needed to write or tye everything

* Similar comparisons, writing all vs writing selections, typing all vs typying selectionsl
My IQ is quite low, maybe 85 or less. I'm not smart enough to understand why a bunch of smart people would argue about how unimportant it is to be smart.
Truly entering into a terminal infinite inflation spiral.
wow that was his book???

absolutely crazy what we have become here. and i thought this stuff was only happening in 3rd world countries (like russia) where world known scientist live in poverty conditions.
The general advice is: know when take breaks. Small + often.
so does this compile python into js using webassembly?
Can AI Put an End to Fake News? Don't Be So Sure