skysight-inc/HackerNews huggingface dataset:
A canary in itself does not offer any cryptographic proof. The entire foundation is that the government cannot legally compel speech.

The canary does not protect you against the service provider and nobody has claimed that. The theory is that it protects you against NSLs that would otherwise force the service provider to not disclose the NSL.

Sometimes a canary is attached to a public financial report or something else that it is already illegal to lie in, so that would require the government to compel you to break a separate law.

It seems like you are thinking of canaries in the engineering, cryptographic or social sense, in which case the are useless. They only have purpose in a legal sense as a literal "canary in the coalmine".
It is foolish to think people actually want to work more and that we tie our success to working harder and making more money.
... you're tacitly admitting you either dont believe in prisons as an effective tool for correction ...

Can one not believe they are effective while also hedging that, for example, perhaps the rate of recidivism remains slightly higher than the crime rate of everyone else? It doesn't seem like it has to be a binary, correction can be effective without being perfect.

Going from there, it's not hard to imagine a world in which ex-felons (is that the right term?) are considered perfectly hirable, but worth just a little extra oversight in exceptional circumstances.
> Chicken rice isn't unique to Singapore though. It's pretty much the same in Malaysia and the Thai version is quite close as well.

Funny enough, many of the chicken rice vendors in Singapore sell a Cantonese-influenced version (though many places continue to label their chicken rice as "Hainanese chicken rice").

From what I understand, the Cantonese-style steamed chicken gets dunked in ice to keep the gelatin in the skin. The rice also tends to be slightly wetter and more flavourful.

The chicken rice I've had in Kuala Lumpur, Malaysia, and in some other "Malaysian" restaurants around the world, tend to be dryer and yellower.
Yeah, because the real deal costs $130 per pound: https://firstwefeast.com/eat/2014/09/real-wasabi-is-one-of-t...
assume that the counterparties are the same as they are now, in identical proportion to their current outstanding balances.
>If you are interested in a (FREE PRODUCT), please get back to us with the screenshot of your review.

>Note: you can click the link below directly to leave your positive review: (LINK TO AMAZON TO LEAVE REVIEW)

>Please rest assured that we’ll arrange (FREE PRODUCT) to you ASAP after we receive the screenshot of your review together with your shipping address.

It'd be interesting to see what they do if you left a neutral review. (Eg: "Three stars. Cheap build quality but decent for the price I guess").

I suspect they're trying to maintain the illusion they're not paying for positive reviews, just for reviews.

If they're dumb enough to reply back over email that only positive reviews qualify, you could probably forward that to a regulator.
You're serious? Without a shred of evidence?

Warmonger. Murderer.
If it can write to the applications dependencies isn't that as good as writing to the application?
TypeScript Introduction
High Performance Container Networking
You should. It's surprisingly good. You won't get pivot tables (at least until someone codes them up, which isn't out of the question in Emacs community), but for regular calculations it's awesome.

Here's a short intro: https://orgmode.org/worg/org-tutorials/org-spreadsheet-intro....

Here's some documentation: https://orgmode.org/manual/The-Spreadsheet.html

And if you feel that TBLFMs are getting unwieldy, here's a bunch of features I absolutely love: https://orgmode.org/manual/Advanced-features.html. Turning on an extra column lets you name columns and cells, and have Org Mode recalculate the table automatically on any change, instead of on explicit command.
Where can I find the other rules?
> > The odds of the next baker you higher knowing SQL and emacs? Pretty low... the odds they know Excel? Probably higher.

> Odds that you can teach them the basics of SQL and Emacs? Pretty high.

Have you ever tried to teach a regular person how to use Excel? The above reads like satire if I'm honest. Even teaching someone how to use Emacs alone would be seriously pushing it.
Don't we know this already from Kahneman (Thinking, fast and slow)?

"Humans who are thinking fast are not general intelligences."
Awesome, these are exactly what I mean! Even if I don't attend to apply, they are usually really fun to do.
Hah. Now that’s a Zero day Zero server exploit. :)
> Yet, if TSLA's price signals anything, it'd be that he's in no danger.

Or Tesla is in no danger. Musk still might be.
Giide interactive audio beta for learning
"Many are into what I'd call cults but what most would call run-of-the-mill superstitious beliefs (voodoo, etc.)"

Voodoo is not a run-of-the-mill superstition/cult any more than a major abrahamic religion is. It is a valid, recognized religious practice [1].

1. https://en.wikipedia.org/wiki/Cuban_Vod%C3%BA
Can't you edit the review or just take it back once you've received (FREE PRODUCT)?
>There are so many fake reviews on Amazon that the "average" stars for a product are no longer reliable indicators of quality.

Is it just me, or is it harder to sort by critical nowadays? I find I have to click into all reviews to reveal the option for "all critical".

And recently when looking at one product, when I tried to pull the "negative" reviews, they included several five star reviews.

I'm seriously considering ditching Prime and signing up for a Target credit card - there's no annual fee, you get the same prime style free shipping, and there's a base level of quality to the products at Target that just doesn't seem to be present in Amazon's offerings.
A 500+ lb deadlift is no joke, nice work. Conventional or sumo?

Regarding the fasting time, I think there's a big difference between the IF you are doing and eg the multi-day fasts people here are talking about. They don't sound helpful for strength sports.
Wikipedia is well known as an encyclopedia.

Changing that name to encompass a project which is quite different will be detrimental.
This reminds me of an old post with a dice rolling machine for a gaming site capable of producing 1.3 million dice rolls per day,
http://gamesbyemail.com/News/DiceOMatic
> I know people who buy the low quality oil because they prefer it. My grandmother preferred corn fed beef to grass fed beef.

I had a roommate in college who couldn't stand the taste of anything that wasn't aggressively processed. He would take a microwaved TV dinner over a home-cooked meal in a heartbeat.

He was also the pickiest eater I've ever met. The only thing he really liked was meat seasoned with whatever stuff Stouffer's and Hungry Man put in it (I'm guessing lots of salt). Didn't like Chinese food, or pretty much anything ethnic. Didn't like anything with sauce on it. He wouldn't eat chili dogs because he said the chili sauce was gross. Whenever we'd get him to try something new, he'd take a few bites of it, say "it's dead to me", and then push it away. At one point, we dragged him to a Chinese restaurant, he only got fried rice, and then did exactly that with the fried rice he got... and then to make a point, he stuck his chopsticks in it vertically to make it clear that it was now an offering to the dead.

He was a strange person, though I understand he's changed a lot since college.
Ah that makes sense. I'll stop complaining about this now.
Agreed. Don't forget about tablets too; I'd happily pay for someone to make Emacs usable with touch gestures and optimized for touch use (e.g. with a clickable, context-aware button row).
Given the debacle of how much "Italian olive oil" isn't actually olive oil, I am dubious any product that claims to be both "Italian" and "authentic".
> Correctness and consistency were the two important metrics, rather than today’s metrics of performance and availability.

Sounds exactly like what the businessy people say to me. I've just learned to stop responding honestly.
I view this less as Anti-Amazon and more of anti-closed door, NDA bound, tax handouts for jobs. It includes Foxconn and others as well.
Is there any centralized place to find out about workshops like this before they happen?
Measurably? I think you have a point about length hiding, although many models seem to just dismiss it, but I'm not sure the accidental padding you get from CBC is measurably better.

Scenario 1: https, downloading a file. Plus or minus a few bytes is still accurate enough for identification, no?

Scenario 2: ssh, where one keystroke equals one packet, regardless of length. I can still hear your password.

Did you have a scenario in mind where CBC padding provides a meaningful degree of length obfuscation?
What are the best platforms to find capable, mid-level developers in 2019?
Wondering if HN had any love for specific platforms (or posting boards or what-have-you) when it comes to finding dependable/capable developers for contract/hire.

Striking out lately in this arena, aigh.
"We don't just borrow words; on occasion, English has pursued other languages down alleyways to beat them unconscious and rifle their pockets for new vocabulary."
I don't think taking somebody's property is an attempted murder, nor is mugging.
> Supermicro Servers Can Be Easily Backdoored After All

The implication that the Bloomberg article is correct is false. The Bloomberg article specifically spoke of the a small chip inserted. This is about the firmware.
If I'm reading this article correctly, this isn't just about past convictions, but cops who were convicted of crimes on the job, as well as former cops and those "who at one time had tried to become a cop".

Furthermore, the Attorney General is trying to argue that simply being in possession of this list is a crime. But given that the article says some of the convicts are still working as cops, I think that it is important to the public interest that this list be seen and reported on. Not necessarily to be printed out in its entirety just to shame every name on the list, but to find out which departments have failed to vet their police officers. Just because the government keeps a list doesn't mean that they do a good job of checking against it, especially when it might be up to each individual agency to do the checks themselves.
The way it was written, I'm reading between the lines that your parent comment is describing their own personal life experience, where they are the "person with integrity", and generalizing it to the world.

Going just a bit further, I would observe that people I have felt best modeled integrity... do not openly identify themselves as "someone of integrity". It's just something they do, it's just the way they are.
Depends strongly on the jurisdiction. Some states are "duty to retreat" states. Some are "stand your ground" states.[1] Big ongoing controversy over this, because it affects when it's legal to shoot somebody.

[1] https://en.wikipedia.org/wiki/Stand-your-ground_law
Google assistant or similar limited-AIs are a much more likely future. My kids already have (silly) conversations with google-assistant all the time.

An obvious extension would be google-ai-tutor. Inspired by _Diamond Age_.
Hmmm, on Windows whenever I plug in a new Thunderbolt device, it requests permission to activate it. I assumed this was for this very reason. If I hand someone my computer logged in and unlocked, it's as good as compromised.
You must not have been here a few years ago when lifting and workout regimens were the talk of the town. Other communities have similar irrational obsessions.
Now if you take a look at how many people got hits to their credit score thanks to the recent government shutdown or due to massive medical bills or due to identity theft/other fraud, things look differently.

Credit scores deserve to rot in hell forever. Humanity has managed to exist for thousands of years without this degradation of human worth to arbitrary totally intransparent numbers.
yes that’s basically it, it’s outside their core competency, not with tech/r&d/product but with the value chain.

amazon knows how to source, warehouse and deliver non-perishibles, but groceries (perishables) require a different, more urgent value chain that doesn’t build on their existing expertise. they effectively need to build a parallel business (which they jump-started by buying whole foods).

with google, it boils down to “google sucks at sales and service” (value delivered outside technological expertise).

this is a high-level initial analysis (as you’d do in an mba strategy class), which is probably why it feels generic. you’d typically delve deeper into the leverage points, like logistics for amazon and sales and marketing for google.
The Sound of Philosophy
I don’t think you fundamentally understand what I’m saying, fiat money steals from savers (otherwise where does the value of the new money that’s printed come from? There’s no free lunch.) and the boom/bust cycle is greatly exacerbated by central banks who can print money at will.

There are obviously various strategies that can be implemented to deal with the disaster money situation everhone’s in, but that really has nothing to do with what I’m saying or why a hard money standard is superior to fiat.
Me too. I've had to start using DuckDuckGo, NOT for privacy reasons, but it get around Google's lunatic forced geolocated search.
Taxing Uber and Lyft rides is L.A's latest plan to free up congested roads
Chicken rice isn't uniquely Singaporean, though, or Singaporean in origin. You can find it in pretty much any place with a significant Chinese diaspora.
Yes, I normally do not press the brake pedal until I have already decelerated to about 5 MPH, when regen basically stops. I know that some cars automatically apply the brakes as part of regen to make the transition smoother but I'm pretty sure the Model 3 does not.
A line connecting the points would be very helpful.
>Perhaps this is one use of a blockchain which could add credibility to reviews.

Amazon offers the option to only view reviews from confirmed purchasers.

The problem is that people often receive free products in exchange for the review.

"The blockchain" would show that the buyer sent BTC to the seller, but it does nothing to address the fact the seller can put more things into a box and ship them after the review is posted.
The quote above was an example as such:
"Nonetheless, other experiments show that sugar may at least influence behavior. Dr. Wesnes conducted a study in which he found that having a large amount of sugar for breakfast led to a severe deterioration of attention span"
I used to run separate Emacs instances on both Windows and Linux, but these days I settled for a different workflow. I keep my main Emacs running on my home Linux desktop. From other computers and locations, I just SSH to the desktop and run an Emacs frame in terminal mode (the command is just: emacsclient -t). Turns out, this is usable for about 95% of things I use Emacs for (the remaining 5% are when I need to view a picture or a PDF, which obviously won't show in terminal). Hell, if you configure your terminal/SSH client to run in 256-color mode, the resulting terminal Emacs will be nearly indistinguishable from the GUI one!

That's one of many hidden strengths of Emacs-based workflow - it works the same whether you're running in GUI mode, or connecting remotely with text terminal. That also means I can work on heavy projects from my underpowered 2-in-1 netbook :).
Show HN: Juniper.Units: unit of measure conversions and printing
This seems like a narrowly thought out proposal. Contrary to what Wikimedia may think and see today, Wikipedia is not the future. The future is something closer to robotopedia or machinepedia or autowikipedia, if you get what I'm saying. The name Wikimedia is fine.

I have seen the future, and there is no place for human writers in it.
Okay, but the presence of an attacker implies you are in danger (from the attacker) and thus are justified to assault them until they leave or are no longer willing/capable of assaulting you back.

If you can't safely defend yourself then, why not just become a criminal yourself? You already might become one sooner or later due to circumstance, so just turn to the dark side and start jacking cars! (This is sarcastic, do not turn to the dark side and start jacking cars!)
One more step towards youth liberation!
A payday-lending insider tilted academic research in the industry’s favor
All cops are crooks anyway so who gives a fuck?
Beware the Rise of Censorship Under the Guise of Stopping Fake News
Check out Reframe: https://github.com/reframejs/reframe

It's a web framework like Zero Server and Next.js but everything is ejectable.
> we extracted a software model of an Intel E1000 from the QEMU full-system emulator and ran it on an FPGA."

I need to look up what they did for this - lots of the tools promise the ability to turn a pile of C into SystemVerilog, but require a bit of manual massaging.

Edit: "used the Arm Cortex A9 CPU on an
Intel Arria 10 FPGA" well that's boring and much simpler.

It does not surprise me that drivers are not secure against maliciously-constructed messages from the "hardware". Most drivers are tested in a fairly limited fashion, and nobody's even got the infrastructure to fuzz them like this.

(There are lots of FPGA-on-PCIe boards, but they tend to be horribly expensive. This one is almost $5000. https://www.digikey.com/products/en?mpart=DK-DEV-10AX115S-A&...)
While I agree with Mozilla's decision, the reason that there are rules is so that it isn't arbitrary. Who is to say who is trustworthy? What if Mozilla wants to charge a fee or else they will remove someone?

Those circumstances would easily fall under the purpose they serve.
Try doing the same for React (in the same express project). With SSR enabled :)
Ask HN: What is your prediction for next 10 years?
Which niche technology today will have high impact in coming 10 years ? share your thoughts in couple of sentences please.
Title is highly misleading. Outright dishonest.

Their argument is essentially: If you can remove and repogram a network connected micro-controller (specifically the BMC) you can introduce a backdoor.

Which is both obvious, and has absolutely nothing to do with Bloomberg's claims.

I'd strongly recommend the mods change both the link and title to the original eclypsium source:

"The Missing Security Primer for Bare Metal Cloud Services"

https://eclypsium.com/2019/01/26/the-missing-security-primer...
> The future is something closer to robotopedia or machinepedia, if you get what I'm saying

Can't disagree with that enough. Wikipedia owes its incredible quality to the human editors doing thankless work behind the scenes. A machine-driven alternative would be awful.
Title would be more descriptive if "Indie Retail Website" was replaced with "Amazon.com".

What I find most notable here is that the FTC's settlement is with the manufacturer/seller, and doesn't seem to affect the company that wrote the reviews (amazonverifiedreviews.com).
If this list were only comprised of felons who later became cops, that would be one thing. But it seems like a lot of it is crimes committed while being police, some even in the course of their duties as officers:

> The list includes cops who trafficked drugs, cops who stole money from their departments and even one who robbed a bank wearing a fake beard. Some sexually assaulted suspects. Others took bribes, filed false reports and committed perjury.

You can say that should be a separate list, and sure — I can get behind that. I certainly don't like the idea of the justice system being retributive! But it seems clear that there is data on this list that should be released in the interest of public safety.
The mindfulness exercise for me is to think about people who have wronged me -- real or imagined -- and to forgive them. Just take all of the negative emotion about someone, realize that the emotions aren't helping anything, and just let it all go.

There's a difference between wanting prisons for rational reasons: deterrence and reform are useful. But if you're just wanting bad things to happen to bad people, how much can you really trust your own interpretation of "bad"?
Tying buyer to review, although not perfect, in that you could still have a confederate problem, it would help.
ExSpectre: Hiding Malware in Speculative Execution [pdf]
My i18n/l10n experience is limited but I actually thought it was really positive to get everyone thinking about variable content length and appearance from the outset.

A lot of times I get designs that look great with just the right amount of lorem ipsum in there but fall apart when the real content with all its variety and imperfect.

I think sometimes having to step back and generalize helps avoid specific problems.
Hey @throwaway128932, I re-read your post, and I wanted reply again with a softer tone. The short answer is yes, there is hope.

One of the things that really helped me when I was homeless was accepting the fact the no one really understood what I was going through. The reason that helped is because I was putting a crap ton of energy into looking for solutions outside of myself instead of doing what I could to help myself. I was very much like a drowning person yelling for a life preserver while forgetting to to what I could to stay afloat. Nobody gonna tread water for me. I didn't like coming to understand that, but it did help.

If you happen to be in the SF area, and you really do end up needing a place to stay, look me up. I have an air mattress you can crash on for a couple weeks.
I'll chime in too but about balsamic vinegar since someone else mentioned it. I've purchased store bought massed produced balsamic vinegar, American produced balsamic vinegar made in Napa, and DOP regulated balsamic vinegar aged 24 years from an acetaia in Modena. The difference between the first two is enormous. Massed produced balsamic vinegar is quite runny and quite "shallow" in favor. But between the latter two, the difference is much, much more subtle. For some things I honestly prefer the Whole Food purchased, produced in Napa balsamic vinegar I picked up for about $10 because I can really be a little indulgent. The Modena balsamic vinegar is almost too precious to use because the bottle is TINY and costed almost $50 (price I paid in Italy; double that if in the US). I mainly use it for special occasions or to flatter dinner guests. Also, Costco's IGP regulated balsamic is pretty comparable but I've found that their quality actually differs quite a bit between brands despite being regulated. But it's like $14 for a big bottle.
My point is that it is NOT legal to circulate claims to gold in storage as money, that’s why it doesn’t exist.

GLD is not the same as a gold backed currency because you cannot use GLD as money in everyday transactions, it is literally illegal to compete with fiat currency.

If hard money is non-threatening, why not let the two standards compete and see who wins?
I'm really not talking about defense in depth. There are vulnerabilities that are not relevant to any layer of defense, such as the hypothetical grep vulnerability I talked about earlier.

Taking a risk-based approach doesn't get you to skip out on thinking about any category of vulnerabilities, at any layer of defense.
Period Three Implies Chaos (1975) [pdf]
Because there are a lot of those in the vicinity and it's very small?
They are talking about changing the company's name behind Wikipedia to have the same name as the product.
On the other hand IOMMU helps protecting system memory not just against malicious but also faulty devices that could otherwise write anywhere.

And people who use GPU passthrough rely on IOMMUs, so it's not like those code paths are not being exercised.
Tim Minchin's Storm the Animated Movie

https://www.youtube.com/watch?v=HhGuXCuDb1U