skysight-inc/HackerNews huggingface dataset:
This story is getting more incredible every day.

Bloomberg only has second hand sources, and all the exploit details are based on speculation from security researchers -- not from insiders.

It looks like Bloomberg heard several rumors of supply chain manipulations, mixed that up with plausible scenarios thought up by security researchers, added a few photos from random electronic parts, and voila you have a compelling story to tell.

This "new evidence" talks about a completely different type of attack than the original article. It corroborates nothing. It just shows how misleading the original story was.

I think the most damning part was the use of so many misleading photos and illustrations. All photos were pure speculation (this is what this chip might look like, this is where it would make sense to put the chip). But neither the captions nor the text made that clear.

The only thing I believe about the story is that they have a couple of sources who have vague, second hand rumors about supply chain manipulation.
I mean I want to have ~/dev/personal/some_go_project and ~/dev/personal/some_java_project side by side, instead of being forced to move some_go_project to ~/go_dev/some_go_project. Java (and, well, just about every other language I've ever touched) is perfectly ok with this, Go isn't.
My only experience in that area makes me convinced it's not a good choice for exactly this reason. I would hate to be forced to drive everywhere.
That's a good point about "connect you to people you don't like." I was just thinking the other day about how the people I know in real life are likeable, but their online personalities are petty, bigoted, closed minded, and mean spirited. I don't know who's the real them, the people I know in person, or the person online. But for the most part, I wish I didn't know their online persona.
>Perhaps you're creating a distinction without a difference?

There is certainly a difference. Your body, physically, will be fine without heroin. But emotionally, you feel empty without it, and as soon as some emotional trauma - stress, sadness, fear or despair rears its head, you relapse. I guess you could argue that emotional need is no different than physical need, but I don't think that's quite the point you're trying to make
You can choose to use:

def my_very_very_very_very_very_long_function_name(
self, param1, param2):
...
> As in, why would a mainstream user go with Linux over MacOS or Windows?

How are you defining "mainstream"? Because in the context of the Linux Desktop, my experience is that people always define it to mean "someone who is exactly uninterested or stupid enough to win me this argument". Resist the urge to target some nebulous "mainstream" user because you'll just end up with another internet kiosk.

What should be being targeted are the kinds of people who use desktop computers for work and hobbies and actually like computers. Some will claim that that's what Linux Desktop does, but the evidence says otherwise. If you aren't a webdev or OSS zealot, chances are you aren't using Linux Desktop. Personal computing is a hobby I grew up with since the 80s and I don't use the Linux Desktop. There are people who've been in personal computing since before that who are outspoken critics of the Linux Desktop.
"I also hesitate to describe any right at a check on power. That suggests planning, an overall design."

I suppose you don't consider a sort of grand, overarching code of laws, as constituting any sort of plan? And if there was a plan, would you imagine that there would be sort type of foundational precepts of that plan - a sort of legal "constitution," as it were? And if there was any type of plan, do you think there would be any group of people, or maybe men specifically (if it were a centuries old plan), who founded it?

The claim isn't that the constitution was wholly novel out the time, or that it is the only type of legal system that can (or even necessarily does) lead to a long running stable government. The claim isn't that the plan is immutable, or tightly controlled by a singular central authority. The claim is just that the US legal system was, literally, planned.

Arguging that the BBC (or really any singular news source in 2018) is "probably the most trusted source of news on the planet" is a hyper-contentious claim. And this is the UK's "freedom of speech" -

Article 10: Freedom of expression

1. Everyone has the right to freedom of expression. This right shall include freedom to hold opinions and to receive and impart information and ideas without interference by public authority and regardless of frontiers. This Article shall not prevent States from requiring the licensing of broadcasting, television or cinema enterprises.

2. The exercise of these freedoms, since it carries with it duties and responsibilities, may be subject to such formalities, conditions, restrictions or penalties as are prescribed by law and are necessary in a democratic society, in the interests of national security, territorial disorder or crime, for the protection of health or morals, for the protection of the reputation or rights of others, for preventing the disclosure of information received in confidence, or for maintaining the authority and impartiality of the judiciary.

This faux freedom of expression is most importantly non-foundational, and explicitly provides several extra-legal restrictions against it, which is manifest by the UK's continuing tradition of censoring art and prosecuting people for things like making unthreatening jokes on Youtube.

edit: added and emphasized that the UK's freedom of expression is not a foundational part of UK law
Speak for yourself. I adore these features.
Practicing for Disney Auditions
Brilliant, just like the dimwitted TA at university who claimed full of conviction "NO amount of memory can represent pi!" Which is funny, because he represented it with a single character.

Pi and e are both algebraic numbers, there are expressions (algorithms) for both. And guys like you are funny: Faced with proof that almost all real numbers do not have a name, you immediately try to name an example.
The blades needn't have been twisted as their tips were sharp pin points. So, pulling paper/fabric across just tips in would have resulted in cuts.
Looking at it (https://www.python.org/dev/peps/pep-0008/), that is one of the options, but you could also do:

def my_very_very_very_very_very_long_function_name(
self, param1,
param2):
pass

Shrug. Seems okay to me, and preferable to what they say no to.
The issue, specifically, is that the display ribbon to connect it to the board needs to go somewhere [0]. For years, it was the bottom. So when it comes to removing a chin, you need to find a place for that ribbon. Apple achieved this by folding the screen at the bottom, so the screen isn't technically ending at the bottom. This is why it's easier to stretch out screens to the sides and the top.

[0] https://www.theverge.com/2018/3/28/17152840/oneplus-6-notch-...
How would that help? SuperMicro was not able to verify that what they designed and ordered is what was shipped.

What makes you think that just because it's open source, that that would change?

i.e. the design is "Open Source" to SuperMicro - but it didn't help them.
"SSL added and removed here ;-)" doesn't sound like a FISA court order.
Thanks for sharing. I resonated with a lot of what you said. That's all, I have nothing to add :)
Yup. And if you get enough users to make it onto Zuck's radar, he'll buy you for unicorn money and you'll be rich! Hey.. whatsapp?
The most basic "friends" system is, IMO, an authenticated mailing list with P2P sharing for pictures and movies. Not a lot of money to be made there at all, though it fits the bills for privacy and decentralization.
This isn't true anymore. I'm using Docker on my Pixelbook right now. No hacks required.
I assume that OP meant saying no to taking on more expenses / ongoing obligations than you need, not funding reserves.
Scott Manley released an excellent video today about what this really means in the context of Hubble's various attitude sensing and control systems: https://www.youtube.com/watch?v=MY169HtCazE
The “Disgusting Food Museum” in Malmo, Sweden
> The real answer to solving technology addiction is the answer to sustainably solving most problems: innovation spurred by capitalism. A new group of businesses needs to emerge that gives us the choice to help ourselves and rediscover the benefits of disconnection.

> Dieting may be the most helpful analogy here. In the US, many of us have poor diets either on occasion or frequently. Few of us have the discipline to eat well for long periods of time to optimize our health. When we gain too much weight, we pay for a personal trainer or a diet program or a book or an app to get us back on track.

Is this article real, or a brilliantly crafted satire of Silicon Valley VC culture?

The weight loss industry is worth $66 billion and obesity in the US has never been worse than it is today. Arguing that we should let unfettered capitalism solve tech addition like it's solved obesity is... I don't even know how to finish that sentence it's such an inane fly-in-the-face-of-reality statement.

> People that use those solutions to effectively curb negative habits will end up happier and more prosperous than others, just like it’s always been. How’s that for incentive?

Completely insufficient is how it is. If long-term incentives were enough to prevent people from making poor short-term decisions, we wouldn't have addiction or obesity in the first place.

The tool that has been effective at getting a large number of people to make choices that favor long-term outcomes over short-term ones is culture. By attaching a heavy negative moral weight to a poor short-term choice, we leverage the emotional wiring people already have so that they are able to push against their urge and do what's best for their long-term health and for society as a whole.

Cigarette use has cut in half over the past fifty years. That didn't happen because tobacco startups invented innovative technology, and it didn't happen because we outlawed them. It happened because we shifted the culture. Instead of cigarettes being cool, sophisticated, and intellectual, they are gross, selfish, and dirty.
When it comes to the Pixel Slate, it will be interesting to see how long it takes Joshua Stein to get OpenBSD running on it.
> But Bloomberg is a serious news organization and they are holding strong on this story as well. So what to think?

When the articles published by those "serious news organizations" concerns China, disinformation / lack of evidence are really common place if you carefully examine their source. I used to do so from time to time but grew tired of that
The other resolution to Fermi's paradox is much simpler and much less interesting. Maybe interstellar travel is as difficult as all our scientists tell us it is. No civilization has colonized the Galaxy because it's simply too difficult. Maybe FTL travel really is impossible. Maybe SETI hasn't detected anything because generating a signal loud enough for us to detect is a stupendous amount of energy, and it's simply too much energy for a single planet civilization to justify using on a radio transmission that's going to travel at most a quarter of the way across their star system.

Maybe all the science fiction we love so much really is just fiction.
If it's a worker's market then minimum wage is both pointless and meaningless to begin with.

The people who pulled this PR stunt off probably are laughing at the fact that they get to pander to liberals whining about minimum wage while cutting overall labor costs at the same time.
KRACK WIFI Attacks – Follow up
If only he would publish his phone number there, then we could all help him hate it together ;-)
Meditation apps aren't doing the job apparently.
Have you tried using Github pages for that? Really easy to setup Jekyll blogs there
That was an awesome response - that helped a lot. Thanks for sharing your knowledge.
The death of Google
Release the Kraken: New KRACKs in the 802.11 Standard [pdf]
It would be great to have the Solid version of facebook where users control their own data with a great UI that accesses the data only as allowed by the users.
i would love to know more about this "custom OS X menubar application". Is it on github ?
Hmm yes right now I'm not sure if it's strictly REST or not :- )

I keep forgetting exactly what REST means. The web app is happy and the ones who use it too, even if ... maybe not strictly REST. :- )
No networked computers? I do not believe you. Even my little soft-skinned two-person wheeled command vehicle has a network of about twenty discrete computer systems, such as multiple radios, GPS, displays, input terminals.
Well, you never had to.

It's pretty disingenuous to compare Android and iOS like it's a 1:1 comparison. Google Play services and several other components get updated independently from the system. A Nexus 4 that is running the last official security patch still works "just fine" and gives you access to the majority of apps on the Play store.

While the update model isn't perfect and a bit concerning security-wise, if you want a device that "just works" for 5 years and won't be artificially crippled, Android wins.
They're $50.
That's a very sobering article.
Yup. Which is why I'm holding on to my discount bin supermicro shares.

The bloomberg story stinks to high heavens even if there are live examples of infiltrated supply chains
> numbers are man-made objects

That's plain wrong, animals can count too.
I am surprised no one is talking about privacy. In my view, buying a phone from an advertising company is insane. Think about your phone - everything about your life is in this one device.

I don't care if Pixel 3 was twice the performance and features than iPhone. Fundamentally, I have a problem with this device and it has little do with petty details such as megapixels and build quality.

Google is not interested in selling you hardware without "free" Google services built in. If they were, they would be a hardware company, not an advertisement company.
I'm biased, but I think Launch School is interesting :)
I've done the same thing with the sync. the only difference is that I have hot glued the bluetooth adaptor on the right side of the head band. I have a small 3.5mm cable that links the adaptor to the headphones.

Proper ear monitors are the holy grail, as they are comfortable (if you have your ear cast/pour done properly) and should have >28 db of noise reduction. Alas I don't have a proper cast anymore, its about £200 to get it done properly.

The problem with noise cancelling headphones is they are great for white noise/whirs/traffic, they are terrible at blocking voices.

However I don't have music playing in the office. I just use the ear defenders as attenuators. Its only on the commute do I listen to stuff.

The sync only knocks off 25db, you can get ear plugs/defenders that reduce noise by 34db. Some of the howard leight squidgy earplugs are super comfortable, soft enough to sleep in.
> Apple is an exception and I hope they continue to charge premium for their products.

> Netflix - I am conflicted between the choice of giving up my privacy to provide better suggestions.

I'm confused by this conflict.

Netflix uses your personal data to help you get more out of the service. An argument could be made that they do this because subscribers then tend to remain subscribers for longer; but the counterargument there is that it is because those subscribers are getting more out of their subscriptions. I struggle to see any scenario where recommendations make people who are getting nothing out of the service stick around.

Apple uses personal data to make recommendations as well, but these are advertisements, because they are recommending additional products for purchase (and typically the products of third parties for which Apple gets a cut).

Is the difference here that Apple asks before they use this information?

> giving up my privacy to provide better suggestions.

The act of watching something on Netflix (or even just surfing the app and not watching anything) constitutes giving up your privacy. Netflix now knows (even if it forces itself to forget) something about you. I don't think it is problematic for a company to use this information to improve its services. I don't think the cynical view–that Netflix does it because it keeps subscribers around for longer–really matters here. I can't imagine a scenario where recommendations convince people to stick around who would otherwise need, except in that they provide a better experience.

The owner of a cafe I frequent knows many things about me and uses them to provide a better service. She will sometimes have my drink waiting for me because she knows what I drink and when I am going to be there. She knows I am not going to skip out on a bill, so she will make my drink out of order and let me pay later when the line has died. Etc. etc. I don't see Netflix recommendations as a whole lot different than that; just less personal.

I think sharing personal information with businesses parallels sharing information with individuals. If I tell a friend something and he starts blabbing it all over time (for free or for pay) or tries to use it against me somehow, we're going to have a problem. The same with Netflix. If they try to use it to manipulate me or they start selling it to third parties: problem. I want to control what I share, with who.
That is true of any war that the US has even a remote possibility of losing.
Ask HN: My debit card is printing money
I purchased plane tickets last week using a debit card. The airline has verified that they have received funds for the transaction. But my bank claims to have never sent funds. It's as if money came out of thin air to pay for the tickets since it didn't come out of my account.

Should I keep bugging the airline and bank until I get to the bottom of this? Should I buy more things with this magical debit card?

Edit: I'm relatively sure that the airline makes no distinction between auth and capture in their payment processing, so if the processes crashes after auth but before capture, then you get my situation and free tickets. Unfortunately I don't know anyone in engineering at alaska airlines and customer service doesn't know what i'm talking about, they just trust the UI.
> (I will also forever wonder why Sega's 16-bit console didn't have hardware sprite scaling and rotation, since that was the main attraction of Sega games at the time...)

An interview with one of the hardware designers on the Mega Drive/Genesis VDP suggests they wanted this, but that didn't have enough die space. It's also not clear how comparable to their arcade hardware this would have actually been even if it was present. Scaling and rotation requires non-sequential access to the source data which the VRAM used in the MD/Gen is not very good at. My guess is that the limitations would have been similar to what you saw with the scaling hardware on the Sega/Mega CD (i.e. relatively low frame rate due to the limited bandwidth available for updating VRAM).
It isn't just those companies. Even retailers like Walmart, Sears etc. collect and sell your data. This is why loyalty cards provide so many discounts; its not just that they want to to be a repeat customer, but your habits are valuable for them to track and sell.
Sure, there's decent workarounds to solve this problem, but I take it as a general rule that, if I'm fighting against (rather than with) a tool, I'm either using the wrong tool, or I'm using the tool wrong.

If my fight against a language starts at the "I can't put my source code where I want without having to fight it", it's an uphill battle to convince me this is not a "using the wrong tool" scenario, and I'm happy to take my dev time elsewhere.
I loved how they kept harping on how the tablet didn't run a phone OS. Yet for the price of what they are asking you can get a surface that doesn't run a browser OS. That tablet is dead on arrival with those prices. Even microsoft charges less for the keyboard for the surface. It's not a cheap Nexus 7 tablet, Amazon took that market share, it's not a competitor to the iPad, and it's not a Surface competitor.
Show HN: MusicButler – get notified about new music releases
We were recently moved into a temporary space where there's a dozen or so people in a 40x40 room at any one point.

A lot of them have meetings with our business partners, which requires a lot of talking on the phone.

This noise isn't background noise, it isn't random white noise, it's noise that diverts your attention constantly because you may know what they are talking about. It's not something you can tune out.

I'm currently googling for noise blocking headphones.
> (or any other Android phone)

The first phone to have the notch was the Essential Phone, and the notch is much smaller than the iPhone (https://www.essential.com/#introduction). The pixel does have a dual camera that the iPhone does not have. And it's deeper, where the iPhone is wider. They seem to almost have the same footprint, but I could be wrong.
That's not a conspiracy theory. It's standard type of policy and it would be surprising otherwise.
I have major gripes with it too and don't use it unless a project enforces it.

The main ones that get me are the whitespace (4 characters) and restrictive line length (79 characters) rules. They don't work well together, and also don't work well with python's significant whitespace (can't easily break up a line), namespaces, generator expressions, and type hints. All for a subjective formatting decision.

I'll also often see people trying to cram as much as they can into 79 characters with one letter variable names and such while calling that elegant code because it's a "one-liner."
Yep, and it's not like "modern" glues/resins have been proved to last for centuries and/or be totally harmless for the humans living in the houses.

Think of formaldehyde based glues (widely used):

https://en.wikipedia.org/wiki/Urea-formaldehyde

https://en.wikipedia.org/wiki/Urea-formaldehyde#Health_conce...
Daniel Shumway

Location: Philadelphia

Remote: preferred, but willing to work on site if the job is particularly attractive.

Willing to relocate: no

Technologies and Skills: Modern JS, HTML 5+, NodeJS, Git, Linux, C#. Both functional and object oriented programming, Agile, continuous deployment, test-driven development, game design, documentation.

Website: https://danshumway.com

Resume: https://danshumway.com/resume/base

LinkedIn: https://www.linkedin.com/in/danielshumway/

Github/Gitlab: /danshumway

Email: listed on resume

I'm currently looking for full-time and contract work around the Philadelphia region. I come with about 5 years of heavy Javascript experience and both functional and object-oriented experience in languages like C#. In previous roles I've tended to wear a lot of different hats; I've worked on everything from Docker to AI to Tooling/Architecture to Game Design/Prototyping.

In particular, I tend to specialize in "weird" problems -- by which I mean if you have a problem that either doesn't have a clear solution, or where you're not sure where to even begin looking for a solution, come talk to me and I will help you find one.
..for insider trading. You are implying that he went to prison because of the NSA. He went to prison because he sold $52 million in stock after the intelligence community said they would no longer consider Qwest for classified government contracts because of his refusal to cooperate with the NSA.

He went to prison because he sold stock based on insider information. Regardless of the reasons for his trade, it was still insider information.
That's funny, but since I started using Go, I now organize all projects under GOPATH, i.e. in `~/src/github.com/user/project`, no matter what language it is in. GOPATH and HOME are almost synonims now.

I find it so much better experience than using tons of `~/Work`, `~/Projects`, `~/Code`, `~/SomeLang/` etc. as I used to have before.
Whaaatttt???? I don't doubt what you are saying, but not living in SF / Bay Area I've never heard this. Can you provide a citation / more information?