skysight-inc/HackerNews huggingface dataset:
Hackers targeting #Drupal vulnerabilities to install the Shellbot #Backdoor
I bought a mini PC with 4 Gigabit Ethernet ports and Wifi, i5, 4G RAM, 32G SSD (probably way overkill for a router but I can do other stuff on it) on Aliexpress for about 250 USD and put Debian on it. I heard it works well with pfsense too.
This looks like every Chinese factory website I've ever seen... did not expect it to be based in Texas!
GoAir Delhi-Phuket flight launched; soon to operate from Mumbai
Physical devices are named based on the driver used. Floppy is fd0 (fd1, fd2, etc. if you have more than one), cd drive is cd0 (cd1, etc.). These are generic drivers, with hard disks it gets more specific - for example, a Western Digital disk would be called wd0.

These physical devices are "mounted" into a single logical filesystem hierarchy, starting at /, with user data in /home/<username>/ (vs. C:\Users\<username>\). Various disks (and partitions) can be mounted basically anywhere in the filesystem, under any name you choose. You can mount your floppy as /A, your CD as /D and your other disk as /G and the OS won't complain at all. Traditional location for that is /mnt (ie. /mnt/G), but it's just a convention you don't have to follow.

You can learn about all the other places in the filesystem, basically what goes where, in `man hier`[1] It's like reading about the internal organization of C:\Windows, though, and can be ignored for the most part: normally, you stick to your home directory for everything and can organize it any way you like. Some desktop environments will create (and display in a special way) a more traditional set of folders, Documents, Downloads, Music and so on, but they will all be inside your home directory. You can mount your other drive (or a part of it) as your Music folder if you want, too.

As a side note, I'm not sure I would call Windows naming convention logical. It's just what you're used to. A single filesystem for everything vs. a separate filesystem for every disk/media is really a minor difference, just like the different path separator (\ vs. /) is irritating for the first week and then you stop thinking about it.

A warning, though. OpenBSD is not a desktop-oriented or newbie friendly OS. It's meant for servers and power users. There's very little hand-holding - even the installer has no GUI at all, not even console-based, it's just a command line where you type responses to printed questions. The primary interface to everything is the command line. The OS is focused on security and stability, not convenience. That being said, the system is incredibly well-documented and discoverable, and the community is very nice and welcoming, so it's not hopeless; just be aware that you're going to struggle for quite a number of hours before you make it work exactly the way you want it. The upside is that when you finally make it, it will stay that way. Forever.

[1] https://man.openbsd.org/hier
Hm. If I don't include emoji and smileys in text, nobody understands jokes these days...
Does anyone know if Ubiquiti's edgerouters are any good?
Just spit balling their response:

"These updates secure the user against using dangerous counterfeit cartridges that might damage the printer"

If you really wanna push it, they might add something like

"Moreover, these counterfeit cartridges could come with malicious hardware meant to infect the printer"

Because sure, if you wanna get really inventive you probably could get some kind of hack going by getting hardware in the printer.
You can also donate time and/or money to those running - see for example: https://techsolidarity.org/resources/great_slate.html
I can agree with that, AVM Fritz!Box are also quite capable routers, the only problem I ever had was that it doesn't properly forward IPv6 ICMP.

It's 100% worth the extra cash getting an AVM over most ISP routers you get in germany.
Bohm's pilot wave theory is interesting to me not because it is so intuitive or tasteful or something, but because it works without sacrificing realism, and thus demonstrates that the Cophenhagen interpretation (neither local nor real) claims strictly more about the nature of the universe than is required by the evidence we have. Nonlocality is established by experiment, non-realism is not. In my experience, this tends to be underappreciated (or I'm misunderstanding - please teach me if so).

I personally favor epistemological interpretations, in which the wave function models our knowledge, and the universe operates via an as-yet-unknown dynamics. Wave function collapse on measurement isn't weird anymore if the wave function represents your knowledge of the system. Thinking about it this way makes "shut up and calculate" work nicely in my head.
One excercise that is fun to do: reduce the Schrodinger equation by splitting the real and complex parts, the figure out how to build a damped spring system that can support the wave. My interpretation of quantum mechanics is that everything is springs and dashpots in the end.
Amazon patents Alexa tech to tell if you’re sick, depressed
Adobe released a way to attach data tables with PDFs. But I think it hasn't been adopted fully, since many organizations that release open data as PDFs don't tag the accompanying data tables. https://www.w3.org/TR/WCAG20-TECHS/PDF6.html
If Epson were smart, they would make it accept the currently installed, no matter if fake or real, and then reject the next cartridge installed.

That way they wouldn't be caught.
FYI your references are swapped.
The Therapy Dogs
DBS: Treatment for Parkinson's Disease
Also, while Mikrotik security practices are not great (as I recall, before this vulnerability, admin passwords were stored in plain text), by default, I think zero services listen on the WAN port. Owners must specifically configure their device in a not recommended manner (exposing the low-quality web admin interface to the world) for this vulnerability. It's like exposing your printer web interface to the world and expecting it not to get hacked.

The main problem with Mikrotik is that the configuration interface is too low-level and it's easy to fall into such traps.
The delta-V would be a big problem. Though, if the probe is reansoably small and you would have reservation for a F9 Heavy flight, you could get some impressive delta-V. Detecting a candidate for such a mission early on would help a lot too.
I think it's too soon to say it failed. A few high profile cases need to be fought before that is settled. This is a typical example of an extremely high profile company that is very blatanly in violation. So it should be the perfect fit for a legal battle.
Video Rendering – Blockchain Cloud Solution
I wonder how networking equipment manufacturers can motivate regular users to update their equipment more regularly? Auto update would seems like a logical one but plenty of people have reasons to not update and don't want there router going down at times they cannot control.
> it will be buried somewhere in Arizona desert

https://en.wikipedia.org/wiki/Masquerade_(book) which then lead into the Hareraiser game which is unofficially the officially worse computer “game” to ever be created.

For more info about the affair in video form there is this talk from the Norwich Game Festival a few years back https://youtu.be/ouvi-fwrfIY
Motorola just did that on the Moto E4 Plus phone.

The August security update (only delivered last week) disabled NFC support unless you used a sim card from a specific network provider (who had presumably paid for exclusive NFC ability).

'Once installed, this update cannot be removed' say the release notes, with no details about lost functionality.

My phone just lost a feature, and I'm not happy about it.
You cannot have (local) hidden variables, Bell showed that. You can have hidden variables only if you forgo locality.
Over half the electricity in China is generated with coal (https://en.wikipedia.org/wiki/Electricity_sector_in_China).
FactorDaily is well-known for its click-baity headlines. They published an article about India's Shakti processor being an "ARM-killer" and the lead architect had to clarify this on HN itself: https://news.ycombinator.com/item?id=15685019
The politicians will rejoice!
> There's been no GDPR enforcement so far and it seems to have basically failed.

Bold statement considering that it's been only 4.5 months since it came into effect. All government investigations take longer than quick business decisions.
Thanks for the link to Bell's Theorem (I recalled there being a result like that, but didn't remember the details of it). If the hidden variables really are in a higher dimensional space, then maybe superluminal communication (in our observable dimensions of space) isn't off the table either? But that comes with its own can of worms that would have to be taken care of as well.
I'd be quite interested to benchmark this in production, possibly as a master replica to see how it compares in real-time.

What is the best way to pull real-time metrics from it into some sort of dashboard?
> Think about it: ads are nearly always unwanted. You can tell because advertisers have to pay to put their content in front of users.

This isn't true. Advertisers pay to access a target audience, because publishers control that access and their business model depends on their ability to monetize it. In general adverts are not unwanted. In fact, some consumers even request companies to send them adverts intentionally, and even subscribe to marketing publications.

Heck, some consumers even pay to subscribe to catalogues.

In general, web adverts are disliked because they are very intrusive and degrade the performance of a website, and in some cases expose content that is socially frowned upon.
China's building new coal plants to met increased demand.
Thsee questions pop up every time Julia comes on HN and have been answered time and again for example by Chris Rackauckas [1], at the end of the day there will always be pros and cons and people unwilling to change from languages they’re proficient at. Personally I’ve been using Julia for scientific computing for 4 years and I’m hooked.

[1] https://thewinnower.com/papers/9323-i-like-julia-because-it-...
Apples and oranges. You're comparing a physical thing to 'intellectual property'.
Why should I have to pay for the state enforcing an artificial monopoly on a recording your (great grand)father made?

The natural state is no such enforcement. Copying the original is essentially zero marginal cost.

P.S. Pro musician here.
The 555 is already overkill if you want a simple oscillator with fixed parameters. You can build one with two transistors.
Ubiquiti makes great little boxes, Edgerouter Lite, Edgerouter POE and Edgerouter 4 have all served me well over the years.

They have hardware offloading for routing and iptables, will route 900Mbps, and get regular software updates.

Edgerouter Lite is $99, and draws about 5W.
Mobile money transactions in Somalia are overtaking Kenya
The physical vs non-physical aspect makes it more complex, but I think the situation is ultimately the same..(?) A painter like a musician can keep and pass down a physical representation of the original image (a canvas vs a gold disc/master) but the rights to the image/song itself can enter public domain and be reproduced (a print vs an MP3).

It's kinda interesting to me that in art the physical object is revered above the image itself, whereas I can't imagine there are many people who spend millions on gold discs or masters of culturally significant songs.
Automated GitHub Documentation Checks
Titan V in my testing only approached 100+TFlops in purely synthetic large matmuls.

With carefully tuned Transformer (matmul-heavy!) I could only make twice as fast as 1080ti (at 4 times the price).

The only undisputable benefit was using double batch size.
So no photo is ever copyrightable?
He said, she squirmed: The pickup artist game that is the talk of IndieCade
They are. They run a fork of Vyos (https://vyos.io/), and get regular updates.
I'm afraid I don't follow. Can you elaborate on how that "paradox" is an analog of the double slit experiment?
I was trying to hire specialists in a similar field, in Europe. Applicants were at least 50:1 m:f. Instead we focused on getting diversity based on other things - country of origin, industries worked in before, age etc. It has worked out really well, we have a dynamic team, and yes, once we started hiring for other roles the gender balance of applicants flipped completely.
Ask HN: Tech stack for Fintech web app
Hello HN,

I want to build a Fintech Web app i am confused with the tech stack to be used, the will have a dashboard with admin ui( each customer having their own admin dashboard) i want to the ui to be beautiful and responsive, I want the app to scalable, which stack should I use? MERN/MEAN? Django? Or something else( I've resources to hire developers )
This is such a great concept. It is a win-win scenario. The employee wins a better place to work, motivation and fun. And the employer gets loyalty, productivity, commitment and a better performance.
The Soyuz has an exemplary track record. Sure, there were a few accidents 50 years ago during the Soviet space program that were very bad, but it has transported people to and form the ISS for such a long time astronauts swear by it. This is almost like making a big fuzz about whether or not it's safe to drive after hearing about a highway crash. Yes, there are risks, but even more so than with driving the crew knew what they were doing. And they are even more aware of historical space related accidents than most people are.
Multi-account containers, Switch container, Google container, Facebook container.
> all is paid for by advertisers, it has always been.

No. There have always been websites by people who just want to share with the world, and paid services, and useful government programs, and nonprofits (go on, find an ad on https://www.gnu.org/). Your belief is mistaken.
> Somebody here on HN just very recently claimed the exact opposite. Could it be a regional dialect thing?

FWIW, I have never liked the "back=later, up=sooner" thing. Thinking of a calendar, and time going left-to-right, back seems to me to mean "leftward," which would mean "sooner." This tended to confuse me for a long time, but finally I figured out how to think of it in a way that could stick with me, i.e. the "back=further, up=closer" thing.

> This is how science and engineering works, you keep revising and improving your models taking new evidence into account.

That's one way to look at it. But eventually you have to say that enough is enough. We aren't revising and improving models of the Aether. And just like the Aether, the models and predictions of the IPCC have proven to be inaccurate.

So you seem to be applying science backwards here: you're trusting the models first, and trying to make them accurate as you go. That's not science at all. Indeed, it's much like ancient philosophers who imagined a way that the "invisible" (i.e. microscopic) world worked and then devised a model to explain it.

The scientific thing to do is to remain skeptical until a model is proven to be accurate.

> This is the exact opposite of religion, which never changes its opinion regardless of any new evidence.

That's not true at all. Actual religions change over time. Actual religions study ancient texts and invent new theories about how to interpret them, which often spawn new sects. Actual religions even discover new texts (e.g. the Dead Sea Scrolls) and update their interpretations based on them.

Or to put it another way: religion does not have an opinion--people do. Some people are stubborn--and that includes some who claim to be scientific.

And the way science is currently organized is not so different than many religions: schools which educate experts who study and discuss and write peer-reviewed journal articles and offer simplified versions to laypeople through the media. That's literally true for both science and religion today. Perhaps we should be less concerned about "science vs. religion" and more concerned about searching for the truth.
Do you have some examples of what you're talking about?
A 6 inch sub to refuel...a BK at lunch gives short term pleasure but post afternoon brain melt.
Why are the base64 placeholders so long? Why have a placeholder at all rather than a fixed size div?
They can show me 200 ads per article if they want. But I don't want them to show me "more relevant ads" by tracking me. Simple as that. If they want to make their content subscriber-only that's fine. If they want to have an ad-funded tier without tracking ads that's fine.
If privacy-intruding tracking ads is the only way to give advertisers enough "value" for the impressions to make the economics work - then that business model is a failure and they should just pick another.

The usual questions here are

"Shouldn't the option to give up (sell) some privacy in exchange for something of value (such as viewing an article) be a decision that is up to each visitor"?

And the answer is:

Absolutely not, no. Why? because I don't think the transaction is, or can be made clear to consumers wrt what is being exchanged.
> This so-called flaw isn’t a big, it’s a design problem for which there’s no effective mitigation other than applying moderation on a massive scale.

You are against corporations and nation states exploiting social media so you want corporations and nation states to moderate it? Doesn't make much sense.

Odd that you aren't calling for the moderation of traditional media.

All the wars, the arab spring issues and even trump isn't a social media issue, it's a traditional media issue. If you are truly worried about corporations and nation states exploiting something, you'd be up in arms over traditional media.
https://blog.mikrotik.com/security/new-exploit-for-mikrotik-...

"Regardless of version used, all RouterOS versions that have the default firewall enabled, are not vulnerable"

I don't believe all MK devices OOTB had the WAN interface firewall'd (they do now though their wAP's run same license level 4 of RouterOS and do not have fw enabled on the ethernet port) though I do recall that being made very clear in both the documentation that came with the hardware and in any wiki/docs I looked at at the time I was first setting up my MK device.

The issue I have is the lack of communication with customers. I have not received any notification of this vuln since August 5th (well since patched in April) but they in general seem rather blase about the whole thing. I haven't followed the link to story but I follow BPR on Twitter and saw that it's around 421K according to censysio.

https://twitter.com/bad_packets/status/1050533001824595968
> How is Julia different than Pypy

Well, no GIL for a start, which is a pretty strong selling point when running on several dozen of cores at once.

> I don't see the plus value in Julia compared to Python or Java

I don't see how you can put Python and Java in the same bag.

> It will still be slower than C/C++

Not that much https://news.ycombinator.com/item?id=17204750

> probably less portable

Who cares? 99.99% of HPC are Linux clusters anyway. And Julia runs on macOS and Linux, that cover the overwhelming majority of the concerned users.

> and all the legacy libraries have to be rewritten in Julia.

https://docs.julialang.org/en/v0.6.0/manual/calling-c-and-fo...

> I don't know where to place that effort in the grand scheme of things.

According to you interrogations, browsing their website would be a good start.

https://julialang.org
Sorry Civil, 'crypto-economics' and 'constitutions' won't save journalism
Every Byte of a TLS Connection Explained and Reproduced
So, how many billion years more would it take to convince you that it's not going to happen? If earth is 4.5 billion years old, that's already more than 25% the age of the universe.

What does the evidence show? Are you willing to believe the evidence?
> but because it works without sacrificing realism, and thus demonstrates that the Cophenhagen interpretation (neither local nor real) claims strictly more about the nature of the universe than is required by the evidence we have

Nicely put!

> Wave function collapse on measurement isn't weird anymore if the wave function represents your knowledge of the system.

To me it is intuitive if you consider that the wave function of the small entity is interacting with the much larger (and more specific) wave function of the observing apparatus. I never understood the mystical aspect with which this was treated in the typical explanations of the Copenhagen interpretation. And I would also appreciate the guidance of someone with a better understanding of the physical theories, if my stated perspective is confused.
Parkour Atlas
If they deliver why anyone should care about PR/marketing? There are thousands of such unknown companies making huge buck.
The whole value of pilot wave theory was that it was an interpretation of QM in terms of things that behaved like ordinary macroscopic particles and waves. Given that ordinary particles and waves don't actually behave like that, there's absolutely no reason to prefer pilot wave theory over simpler, more direct interpretations of QM.
If you happen to have access to a Bloomberg terminal, the SPLC command gives you similar (though less comprehensive) info for whatever company you’re looking at.
I don't buy the regulation argument. Regulators will not have a sufficient understanding of the systems they are regulating, and of course regulation is too slow to react to a dynamic phenomenon. Perhaps more basic regulation stipulating liability if something goes wrong would be of use.

I suggest we apply some lateral thinking to the underlying problem and approach it from another perspective entirely. Over the last 30 years or so, really since the end of the Cold War, high on idealism and technological utopianism, we've built a whole new high tech infrastructure to replace the low-tech infrastructure that preceded it. In so doing, we have invariably embraced technologies that we did not and do not understand, technologies that have never really been tested (as in been subjected to the test of time). Was this wise? Should we be using new, unproven technologies for security critical systems? These new systems have untold vulnerabilities, and their often centralised structure makes them very susceptible to disruptions. Should we not be building robust, decentralised, low tech solutions instead? Could something as fundamentally vulnerable as modern undersea cables have survived a cataclysm like the Second World War? I anticipate that any valuable data sitting on a networked device anywhere is at risk of eventually being lost, leaked, or stolen. Any networked safety critical system will be hacked or otherwise exploited (or fail catastrophically). It is only a matter of time. So much of modern (hybrid) warfare hinges on sowing discord, confusion, using disinformation and misinformation to cripple adversaries--and we have collectively built an infrastructure that is tailor made for this kind of disruption. What I mean is virtually everything that has come into being in the last 30 or so years, from complex global supply chains to modern banking. What that exists now would survive a SHTF scenario (not hard to imagine)? Again, we should be designing systems to be robust, decentralised, secure, and wherever possible, totally independent of high tech gadgetry. What use would 'identity theft' have been in the 1970s? Exactly.
Completely different example. Those advertisers are a customer of the service just like you. In most social media, we're not paying to post, but advertisers are. The rules of the game might be stretched to allow benefit to advertisers, but it's not rigged like you seem to think.
I read a comment once by a helicopter pilot that said that helicopters don’t fly, they beat air into submission. Seems to check out with this design.