skysight-inc/HackerNews huggingface dataset:
If a bad actor get access to my LAN, rebooting my Google Home device is the least of my concerns.

> "I am genuinely shocked by how poor the overall security of these devices are"

If there's a remote access exploit in the wild, then I'm going to be worried.
> Tuners can be cheap or they can be expensive depending on the features you want. I don't think Broadcom's full-band capture tuner, which IIRC is basically a 2GHz ADC, is very cheap.

True, but a basic ATSC/DVB/ISTB shouldn't be too expensive. Maybe cable ones are more expensive, but the tech is basically the same. Satellite is pricier.

> Cable box SoCs(usually from Broadcom) are beasts and also not cheap. They support things like HDMI in and out, transcoding, multiple video streams(for Picture-in-Picture), etc.

Yes, depends on the manufacturer, I've used/tested a couple of products from different manufacturers (including Intel's adventure on that area) but most stream boxes use the same hardware, chromecast is the exception, not the rule

"Not cheap" but IIRC $10/$20 for the SOC itself (but that was 10 years ago)

> STB software is generally horrible

YES. MPEG-TS decoding (especially metadata) usually goes "how sausages are made".
"for most people" -> "for most javascript devs" ?

totally ridiculous dev machine for scientific or financial computing, no?
Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in MacOS, and More
EC2 PPS vs. Amazon’s Published Network Performance Designations
Many cryptocurrency libs like Web3 opt to use bignumber js for all money manipulation
How is this difficult?

"This is the first time you are using this phone to modify the settings of your google appliance. Please locate your google device, and press <some button>, or tap the microphone firmly, to confirm your intent to trust this phone."
> An important point is that once compiled, an eBPF program is guaranteed to halt …

That's made me curious. Got any links or search terms I can use to learn more about that?

I'm guessing nobody has solved the halting problem, I wonder what constraints are? Is the eBPF programming language not Turning Complete? Are the inputs bound in a way that means they don't need a general solution to the halting problem? Does the eBPF program get compiled with a killswitch to guarantee halting?
I don’t remember the detail but if that were sponsored then I suspect the revenue wouldn’t have covered a month of sending out free CDs, let alone doing any propping up.
How unfortunate when your audience crosses your carefully laid lines and is active both as a business user and as a private individual. Screw them on the one and expect mercy on the other and we'll see how that multiple reputations theory works out in practice.
I imagine one time. Then everything else imports the `MZ_CONST` file which then references the `MK` or `ZBERG` variables.
This looks like you could potentially hit from the browser with a DNS rebinding attack, just by visiting a website. (Although I'm not sure how far modern browsers defend against those by themselves)
Get a mesh wifi solution like Google WiFi, and spread the other access points around. Much easier than the alternatives and you'll have fast internet throughout the whole house so you can stream video in any room.
I realize that the web version works fine, but I'd love to have a local version for iOS.
It is generous of you to assume that they will
Secure their ad network against paying bad actors.
> Graphene can do just about anything except leave the lab.
What if:
- kill the "hard ones" first
- wait for the easier one to get very close to atmosphere, and then kill it.
- will the algorithm learn to evolve toward easy ones?
Tether Drama: A Behavioral Review
According to that table, Helium is 260, and water is 265, and there are a few more under 300.

Does that mean that water (in some form) also acts like helium and would be able to get through that seal?
I actually get this perspective, as the endpoints listed here aren’t super sensitive (notifications do seem worth protecting). However, I’d still prefer to see security by default. With the current scenario, we have to track whether new, more sensitive features are introduced and whether or not they’ll introduce more security.

As far as the local network, I think it can be assumed it’s insecure if you’re using any IoT devices. If not, then you might be able to trust it.
Which is what I think parent was pointing out. Even if they ran ads saying "vote for me", it probably wouldn't fall under that language. They'd have to be inducing action in their official capacity, not as a candidate.
How is Cloud Spanner adoption nowadays? I seem to be hearing lately that more and more teams are looking seriously into adopting it.
Anything you can run on Linux, you can run on a Chromebook, without even having to do anything hacky these days, as I understand it.

So, nothing to do with JavaScript specifically.
>the 120 liters ended up going outdoors and how much ended up inside. Helium expands about 750 times when it expands from a liquid to a gas, so that’s a lot of helium (90,000 m3 of gaseous He).

the math seems couple orders off - the 120l would make less than 900m3. The 90000m3 would be on the scale of the total volume of a multi-story hospital building.
It's better to go down hard than to have a crappy fix that tries to keep things alive.
>What is the computer doing now? Why is it hanging? Why did that app crash?

For what it's worth... On a computer, I'd look at log files.
On an iPad, I'd plug it into my computer... then look at log files.
I would hate that.
As long as he helium doesn’t displace the oxygen it is fine. Saturation diving has people living in “heliox” environments where the atmosphere is helium and oxygen.
At least AWS has solved that problem. The iPad Workspace client supports a Bluetooth mouse. I wish it were supported system wide.

https://docs.aws.amazon.com/workspaces/latest/userguide/amaz...
Do they have premoderation in ad system? I see lots of outright money scam and gambling ads in Instagram every day (in Russian language) (AFAIK, Instagram uses the same ad system as Facebook). Most of ads that I see in Instagram have pornsite-grade quality.
You can mitigate that somewhat with a really good pen. A lot of the fatigue comes from pushing down the pen to make it write. Something like a fountain pen that just glides across the paper with very little pressure is much easier to write with for an extended time.
FaceID makes a lot of sense for the iPad, arguably more than the iPhone. What I like about my TouchID is being able to unlock my phone in my pocket or as I'm sliding it out. I'm never going to do that with an iPad.
Chibi Scheme is sort of a spiritual successor:

https://github.com/ashinn/chibi-scheme
> It's definitely a case of hanlon's razor for Facebook but it does show how easy someone with the right resources can exploit social networking sites to manufacture consent for example.

It doesn't even look like you need the right resources, just the motivation and willingness to exploit it.
Actually cable's origin was to bring broadcast television to areas with poor or no reception. Cable systems were often started by neighborhood groups and local small businesses, which is why "cable" is sometimes called "CATV" — Community Access Television.

Later, satellite-carried "Superstations" were added like WPIX, WTBS, WGN, etc...

Later still, pay television services like HBO and Cinemax were added.

Even later, we ended up with what we have today.
She buys into an assumption that the hate speech is grassroots, meaning that it is from ordinary citizens.

There is a lot of evidence that much comes from powerful parties such as governments and political actors, who seek to promote conflict, division, and/or the far right (EDIT: and others too, but the far right seems especially prominent). For example, one report I read said that the Russia government's Facebook activity for the 2016 U.S. election focused "overwhelmingly" on race,[0] and recently I read that Russian government Twitter bots sent thousands of tweets criticizing NFL anthem protestors.[1] I'm going to try to find the links and add them. (None of this is surprising: During the Cold War the Soviets tried to aggravate U.S. racial division; for example, a former officer said that they would send racist hate mail to African-American leaders, then 'leak' to the press that the leaders had received hate mail.)

The real question is how powerful the technology is. How effectively can you manipulate public opinion? I hardly see that issue discussed.

[0] https://eu.usatoday.com/story/news/2018/05/11/what-we-found-... More coverage: https://www.theguardian.com/technology/2017/oct/30/facebook-...

[1] https://www.si.com/nfl/2018/10/22/russian-twitter-trolls-nfl... which links to https://www.wsj.com/articles/how-russian-trolls-inflamed-nfl...

EDIT: Minor edits to make my comments more consistent with the citations.
The MAP_ARRAY access goes through an external function call, which gives you a nice place to hook for mitigations. And this stuff is going to have to be fixed properly, as running sandboxed untrusted code in a higher context is waaayyy to useful in a post Moore's law world. Kernels like XOK relied on similar techniques up and down their system call layer; it had three different virtual machines.
These commands don't work on my Google Home Mini device despite it having the same open ports as the one in the article. I get a `HTTP/1.1 403 Forbidden` response when trying to reboot it with this method.
Yes but that’s invoked at the client side. The mIRC vulnerability discussed is where a message would trigger an /exec due to mIRC auto-downloading a boobytrapped .ini file enabling /exec from external chats.

The equivalent UNIX example would be Irssi auto-downloading a Perl file, loading that, and that Perl script then /exec any commands sent by a remote machine. But as you know, Irssi wouldn’t support auto-downloading, let alone then loading that file too.
What will happen to the Kepler space telescope?
I've lived in Ontario my whole life, North Western and South Western and I've never heard anyone sound like that. It seems like that's such a stereotypical Canadian accent, but I've never heard it and assumed it only existed in the maritimes, although on my recent trip to Halifax I did not hear it. Maybe it's a bit longer and I don't notice, but at least not like the overly portrayed version on TV.
I remember hearing plenty of whispering that Intel had a major bug disclosure coming up, but for most of that time I feel like the majority of speculation was centered around the Intel ME.

Sadly my immediate reaction to this post on /r/sysadmin was to discount it, or rather attribute it to some external factor that nobody could possibly figure out and entirely unrelated to the MRI. In this case I was quite happy to be proven wrong by the follow up posts and subsequent article.

I'm really curious why something they can generalize to "helium leaking into the quartz oscillator" only affected Apple products. What feat of manufacturing keeps a broad range of OEMs safe on the Android side but so eludes Apple? Worse yet, was some "cost savings" engineered between iphone 5s and 6 that ultimately introduced this issue?
When corporations and governments run social media campaigns, isn't that a single centralized power influencing the narrative?
AngelHack's Global Demo Day and Startup Bash
That is a complete non-sequitur. Json in no way enables that. Just having a defined format enables that.

Emacs org-mode is proof that a simple text format with markup rules is all you really need to support multiple languages in a single file. You lose some of the simplicity of parsing the file, but you gain a ton more.
Comcast won’t sell me internet past 20MB without a TV package I don’t have hooked up to TVs. Super awesome.
I don’t think we could see a rocky planet like earth though.
At that scale, I find odd people didn't come up with an optimized OS that sees and manages the resources and also plan the communications between them.

It looks more like a private data center with 4000 dedicated machines in the same network to run distributed algorithms than a "single super computer". Are we just "wow-ing" at what is basically a data center here?
You have to give Facebook a copy of your ID, your SSN and wait for them to snail-mail you a code before you can get as far as Vice did. There's nothing friction-less about it.
Yeah, but at the same time, it wasn't enough to set off the alarms for low oxygen content, which is at least a little disturbing, right?
This is great, lots of my classes are using textbooks similar to this. On (13) "Please type SQL query to get 3 largest orders from orders table", it doesn't really tell you what column to order the results by.
AWS Lambda Programming Language Comparison
> And remember, those devices (especially Google Home) are capable, and often used to capture more than a directive of streaming media. Asking for your schedule, making a phone call, etc.

But that's not super exploitable even with a hijack. You can know I asked for my schedule if you took control of my device, and feed me a fake one, but the work to make that useful rather than just a dead giveaway that something is wrong is non-trivial, and involves getting a bunch of personal info more worrying than the hack itself.

And you can know I tried to call a particular named contact, but again doing much with that is non-trivial.
That's probably one of the only people they could actually be sure wasn't buying Facebook ads. Whereas a senator buying Facebook ads is, in itself, quite likely. Not really a fair comparison.
They have to know where to shoot, the dark forest theory doesn't seem to account for the ability to send probes.
So are they going to leave it just like that, on the orbit? Why not push towards the earth to burn on reentry or give access to students (assuming the electronic parts are still working) to play with?
Ask HN: Who are the most efficient Founders? How do they manage their time?
I have two businesses that are growing modestly, maybe a couple percentage points a month. I have 4 employees. Bills are paid. Some months are slower but I don't so much worry.

I'm trying to figure out how to efficiently GROW.

some tasks I do:

- helping my employees grow our current accounts
- help write pitches
- help with account optimizations
- help without
- get more accounts
- google advertising
- facebook advertising
- blogging
- Do HR/Bookkeeping/admin(this is only like 3-5% of my time)

Does anyone have a better way to visualize all my POSSIBLE tasks so that I can prioritize them?
86% isn't bad, particularly considering you can easily polyfill a date-picker in the missing browsers and attach it to input[type=date] elements.
I was a Windows user all my life (Started with Win98 as an 8 year old) but switched to MacOS once hitting "Windows Key" and typing 'Downloads' to jump to my Downloads folder became non-deterministic.

Like Windows 10 actually suggests some web / app store results first, and after about a second, it will remember that I have a local folder called 'Downloads', so instead of using 'Win+D.o.w.+Enter' as a shortcut, I have to wait for the computer to suggest Downloads as a suggestion.

This is on a top of the line Surface Book.

Besides that I spent hours trying to get colors working in a terminal emulator so I could use vim and tmux with syntax highlighting. I gave up and bought what I figured would be the last Macbook Air with USB-A and a decent keyboard.
I believe you're right. They go into their design in their MySQL HA post:

https://githubengineering.com/mysql-high-availability-at-git...

> In MySQL’s semi-synchronous replication a master does not acknowledge a transaction commit until the change is known to have shipped to one or more replicas. It provides a way to achieve lossless failovers: any change applied on the master is either applied or waiting to be applied on one of the replicas.

They only require one other replica (as opposed to a quorum) to be reachable from the master for the master to continue acknowledging writes. If a new master has been elected on the other side of the partition, both will continue acknowledging writes.

They noted this as a limitation that they were working on (but unfortunately a bit too late in hindsight):

> Notably, on a data center isolation scenario, and assuming a master is in the isolated DC, apps in that DC are still able to write to the master. This may result in state inconsistency once network is brought back up. We are working to mitigate this split-brain by implementing a reliable STONITH from within the very isolated DC. As before, some time will pass before bringing down the master, and there could be a short period of split-brain. The operational cost of avoiding split-brains altogether is very high.
The Ultimate Guide to Customizing Your iPhone – 100+ Features to Tweak
You can store recovery keys externally if that is consistent with your threat model.
No internet access at 7 years old? That's pretty brutal. The internet was a central part of my childhood, I can't imagine myself without it.
> When corporations and governments run social media campaigns, isn't that a single centralized power influencing the narrative?

No, “corporations and governments” are not “a single centralized power”.
I'm not particularly interested in starting a start up so I've never looked this up, but are conventional small buisness loans impossible to get for an internet based buisness?

From a lay persons view it seems like handing out small buisness loans to internet companies has a higher chance of profit and less risk profile than other types of buisness.

To start a restaurant for example you need furniture, cooks, wait staff, need space, suppliers, etc. You can start up a SASS with a couple of computers, an AWS account, and a WeWork subscription. There is zero marginal cost, I would bet productivity per employee is very high compared to other industries, what am I missing?
From elsewhere in the thread I found this link https://lwn.net/Articles/740157/

> There are inherent security and stability risks with allowing user-space code to run inside the kernel. So, a number of checks are performed on every eBPF program before it is loaded. The first test ensures that the eBPF program terminates and does not contain any loops that could cause the kernel to lock up. This is checked by doing a depth-first search of the program's control flow graph (CFG). Unreachable instructions are strictly prohibited; any program that contains unreachable instructions will fail to load.
The reason Apple cares so much more about iOS than MacOS is easily obtainable through earnings reports.
I am pretty sure you were thinking of 0.1 which, indeed, requires an infinite number of digits to be represented in binary (like 1/3 in decimal).
I remember the double-click (which is time-dependent) still working on my Mac Plus when the clock was stuck at midnight. It also didn't crash the OS and make the computer turn off.
Don't.

For the love of God, just don't.
I used to hate Gnome a lot but switched to it when Ubuntu made the switch. The big problem is the default setup really sucks (for me.) However with the right number of Gnome Shell Extensions, you can really customize it to something more pleasing. These plugins are straightforward to add so it is mostly finding out what you like.
Out of curiosity, what difference does that make? If you can still work with and access those photos from within the app, what difference does it make if they get imported into Photos first vs. a file system?
Create your own dysfunctional single-page app
That’d be an interesting way to defuse a bomb hooked up to an iPhone with a power-off failsafe
Executive accused of harassment at Alphabet 'X' unit is out
Well, they are centralized powers, but I agree they are not the only powers. Who are you thinking of?
Why wouldn't Zuckerberg ever buy Facebook ads? I doubt they'd let him run personal stuff for free, and I doubt they'd be sure he'd never want to run personal stuff.
TL;DR: Apple uses MEMS clocks (while most Androids contain quarzes), which can be affected by Helium molecules even though they are sealed in the attempt to prevent that.
I might suggest reading https://doc.lagout.org/science/0_Computer%20Science/3_Theory...

This is in general how floating point math works.
> ... no support from other people in their emotional struggle.

Are you actually proposing better mental healthcare for Americans (which would be super awesome), or are you suggesting that gab.com and its likes count as "emotional support"?
So there are "hidden" side entrances to the Louvre. With your back to the glass pyramids, cross the road, and next to the arch on the right is an underground staircase that will pop you in without queues.

Likewise, pick your times and you'll have La Joconde (Mona Lisa in French) to yourself. And then scoot off to the other sections that are actually so much more interesting - including a literal castle in the basement.
It's not frictionless - all ads are approved. It takes some time and I don't think image and video approvals are entirely automated. I read in fact that a human being checks out every single one.
Ah, you’re definitely on the prog / technical death side of the spectrum then, which is what the article completely ignores unfortunately. All those bands are among the more technically proficient that the genre has to offer. I can only get into them to the extent I can get into someone playing a bunch of etudes and suites as a demonstration of raw ability. Granted, there’s some pieces that are real tough to stay together in classical (every other Stravinsky piece comes to mind) but metal will always be like jazz in that it’s all about a representative of each instrument or part rather than the raw power of many as a tour de force.

I just tune out the vocals and unless you have some really awful vocals or something seriously crazy like from the likes of Regurgitate it doesn’t really register in my memory. This isn’t to say that doing extreme vocals doesn’t take any form of talent but trained singers in opera have been putting their vocal cords to the limits in other ways that are impressive, just more conventionally recognized.
Well normal ads you do not need to do any of that, you just need to have an account and a credit card. But yes for political ads you are supposed to go through their "Identity Confirmation and Authorization" process https://www.facebook.com/business/m/one-sheeters/ads-with-po...
Many comments are about implementation details such as JSON format of Jupyter and comparing user experience with IDE and shell and fail to see the fundamental difference between Emacs and Jupyter, which is in this quote in the article:

“In many cases, it’s much easier to move the computer to the data than the data to the computer,” says Pérez of Jupyter’s cloud-based capabilities. “What this architecture helps to do is to say, you tell me where your data is, and I’ll give you a computer right there.”
I taught myself how to swim as an adult. The main challenge I found wasn't "new muscle memory things are hard", but "as an adult, I'm not used to committing serious time to things that I'm terrible at".
Why don't we just when we feel hungry?
People need to think very carefully about the consequences of any policy they propose to curb this sort of behavior. Do we really want Facebook making judgment calls about the content of political ads? Do they need to do thorough real-life identity verification of people buying any ads, or any ads that may be construed as political? Then the real kicker: does every ad provider need to do this, or just the ones that are too big to fail? Requiring that level of effort would quash small ad providers in the same way that onerous copyright verification laws would quash small content hosts. Not doing so has its own obvious problems.

I see no good solutions.
yeah my nexus 5x melted thanks to a USB-C cable that I didn't strike me as off-brand or fake. So I'm skittish about USB C now. oh well.