skysight-inc/HackerNews huggingface dataset:
UEFI is poorly understood by approximately everybody who doesn't work directly with it and it's frustrating to see so much misinformation out there.

UEFI does not mean that there is a huge binary blob that does not run open source. UEFI is a spec. It defines many steps that must be taken to boot in a compliant way. Large portions of the code that runs in UEFI compliant systems in the wild today are in fact based on an open source 'core' available on github. It is entirely possible to perform a UEFI boot on an entirely open firmware stack, though this tends not to be done. Large silicon vendors like to keep their silicon initialization code proprietary and secret, and they often 'require' tweaks to the open source version of the UEFI 'core' to meet their needs (read: it's seen as easier/cheaper/more-business-friendly to fork the open source core and sprinkle two or three changes throughout and keep the result closed), but there's no reason it needs to be that way.

The author is wrong - there is no 'UEFI kernel' running at any ring after boot. UEFI leaves some code and data in ordinary, OS-accessible memory which can be jumped to and run by the OS if desired to perform some UEFI-related task like setting a boot variable. This code is not protected or hidden or in a special ring and does not require any special steps to invoke. It just sits there waiting to be called and can be modified or deleted if the OS chooses to do so.

SMM is actually a special ring with its own privileges, but there is nothing baked into UEFI which requires using it or leaving code running there. UEFI is extensible and so some platform performing a UEFI boot can leverage a hardware feature like SMM to maintain some control over a platform, but that requires the firmware developers to go out of their way to do that and it can only be done on hardware equipped for it.

But you know what? UEFI is not at fault there. If a platform performed a UEFI boot without touching/configuring SMM at all, then the OS or the bootloader could do the same thing. The hardware capability exists and is accessible by ring 0 until somebody flips a switch to remove that accessibility.

Proprietary, insecure software is a problem. Making firmware fall into that hole is really bad. But UEFI doesn't make that happen. UEFI is just a way of booting that doesn't specifically disallow it, because it's designed to be flexible and extensible and powerful so that a lot of needs can be met. It's completely possible to put together a firmware image which is UEFI compliant and goes out of its way to disable SMM (or any other hardware feature), and boot to an OS that wipes UEFI traces from memory if it feels like it.

Something like Intel's ME existing as an option for businesses who want it is fine. Injecting it into every platform and making it roughly impossible to disable is not. Either way, UEFI is not implicated.

UEFI is not the bad guy. Those who ship UEFI compliant systems which happen to suck are the bad guys. They do it with UEFI, they did it before UEFI, and they would do it without UEFI.
It's https now.
The best time to plant tree is 40 years ago. The worst time is 40 years from now.

Let's not do the worst one.
They are a neutral third party, but they are choose and paid for by the employer. The employee doesn't have any choice, because it's part of the employment contract.
Yes, so you can annotate methods for additional tracing but the default agent alone provides a lot of metrics and it attaches using diagnostics API.
Ask HN: Has Google made you pay $15,000 to $75,000 for a security review?
Has anyone gone through Google's OAuth verification process for restricted scopes recently? They give you a choice of just two very expensive companies for security reviews.
This has to do with Uber's viability as an app/tech platform, which is very different than share appreciation of a public company. Uber is a smart(er) taxi service that doesn't own any fleets of vehicles, or anything else really, and operates at a loss.

Uber may not faceplant quite as badly, but look to Lyft's IPO to see what's likely in store for them. This IPO screams "cash out and give the bags to retail investors"
The time decay will also be astronomical on options.
Agreed with the sibling. Large chance I have just missed your goal.

It may help to expand on your proposal. For example, what do you mean with group by, but not summarize? The group by clause says nothing about how to combine data not in the group. That has to be on the select. And I have yet to find a solution that beats ROLLUP for giving a great overview of data.

About the only thing that sucks on the current syntax is that it is not possible to get auto complete in the select, without having some from.
With the University of Waterloo and Conestoga College, Kitchener-Waterloo is a hot bed of engineering and CS talent. And the whole area is quite underpaid and pretty affordable despite a massive shoot up in housing prices.

I think my point, other than boosting my hometown, is that there's a lot of really affordable talent out there if startups and VCs would just dare to look elsewhere a little harder.
Never? I disagree.

Recently in Seattle there was an incident where a gunman was sitting in a car, ostensibly pinned down. On Twitter, posts informed residents that the suspect was in a standoff with the police, and made clear where that area was. Residents assumed that other surrounding neighborhoods that were not cordoned off were safe and continued about their business. The police who were present waited through this initial standoff, trying to avoid shooting the suspect, due to potential political fallout and the undeserved scrutiny/criticism they have received in the past when doing their jobs. This gunman ended up suddenly flooring the car to try and get away, and ended up crashing into another car elsewhere, killing the other driver. Shooting the suspect when he was pinned down and not cooperating would have absolutely been the correct outcome and would have saved an innocent life.

Article on the above incident: https://www.nbcnews.com/news/us-news/2-dead-2-injured-appare...
It's Amazon's way of working. Starting from PR/FAQ and working backwards.
So reading about flutter, there's quick reload information in debug mode[0]

This leads me to believe that the seed and password entered in development / in the cookie jar from a previous attempt are somewhere in the `isolate_snapshot_data` file

[0] https://github.com/flutter/flutter/wiki/Flutter-engine-opera...
They wouldn't even need to outlaw competition in most cases of profitable subsections of public transport, because a profitable commuter train into $busycity /= a potentially profitable service driving commuters in large numbers of small vehicles through heavy traffic to the same destination...
Purism seems to be rather inept, they shat the bed with their recent Librem One product launch, whereby they rebranded Tusky and disabled all moderation tools on their Mastodon instance, then were suprised when their employees started quiting due to this ridiculous behaviour.

Purism doesn't seem to want to invest in the software that makes their services work, hence the commentary by Matrix devs on which services are helping to push development forward (and thus deserve subscribers).
Also the EU mandate to have a fleet average of 95g of CO2/km by 2021 (or, alternatively, large fines). We're seeing all the European manufacturers, including those that don't sell much/at all in the US and therefore CA, doubling down on EVs because they're an easy way to have a big affect on the average.
I think the parent comment was pretty clear in their argument - you have to build enough roads to get ahead of constrained consumption.

If they built an extra lane on every road between me and the pizza shop, I'd go the pizza shop more. I dont' go to the pizza shop as often as I'd like because I hate traffic, if there were less traffic, I'd be better off. But I won't drive any more than I'd like to, I think we could build more roads and build that capaity for more people.
Please let me know how my title was clickbait-y, or a better title you might prefer. It wasn't my intention to mislead, and I am open to suggestions for better titles.
> Yes rich folks will move into San Francisco at first. However their old house isn't in middle of nowhere, it is a longer commute away from San Francisco

It's potentially anywhere on Earth—people moving into San Francisco are not limited to people currently within commuting distance of San Francisco.

> and that house is available.

No, rich people can and do own multiple homes without renting any of them out, and are known to just buy another one if one meeting their interest becomes available. There is no fixed limit on the number of homes a person can retain exclusive use of.
Awesome write-up. I’m a normal visitor of your web site and appreciate you taking the time to maintain the excellent site. I’ll be a frequent visitor for a really ...https://psduikit.com
I'm all for anything that gets us back to the Moon, but this clearly feels underwhelming versus Starship.

It'd also be good if they got to orbit prior to marketing these grand plans. Gradatim Ferociter indeed.
Pretty cool to see mainstream support arrive for differentiable graphics. It's been incubating for years
Can you give a brief example of the situation you are describing? Or a link to an article on this?

I am really interested in improving my coding using functional programming, composition, etc... but so far, I haven't been able to understand the benefits in my current circumstances. (I've done a lot of reading already) I am hoping I will run into one, so I can see clearly why it's worth the effort to implement. (ie, implement something new when upgrading/replacing some old OOP code...)
1960s is a bit too optimistic. I personally think it'll happen in the 1970s.
> twice

My experiences of vast majority of white people (I’m white) is that 2 is enough to instill life long paranoia level fear. They just don’t get the difference between a bike thief and a rapist. This is also a news media driven thing
Ah, you're correct. From the querying side, there's a couple dozen that you need to know. Different personas would only need to know a small subset but it's certainly true the list of keywords itself is large.
How Much Housing Should the Bay Area Have Built to Avoid the Housing Crisis?
No it's not.

Maybe some specific content should be released as AV1, but most existing can stay as GIF (it just works)
Video isn't superior for sharable, loopable images.

Try downloading a video from a popular social network. Can you easily do it without inspecting the source? If it's a two second clip, does it loop on your system? Or does the video player exit / end the stream?

This is absolutely a problem that GIF doesn't have.

> You don't need a proprietary player to loop a video

> You can save any video file just like a gif.

Except social networks force you to use a locked down or DRM'd player. You can get chunks of the video sometimes. Your non-tech friends are out of luck.

> you just go back to the start of the video

"just". Yeah, how many players support that out of the box? Yours might, but there are many more that do not.
How about also:

- A property that is unoccupied for more than N days in a year is considered abandoned and forfeit to the public. Pick an N that makes sense.

We have too many “investors” just buying property (that could be used to house people) and sitting on it empty like it’s some lump of gold. Or they leave it vacant only to vacation to for a weekend per year. End this speculation and waste and prices become more affordable.
Animated PNG seems to be the least-bad option that covers every key GIF feature, and most importantly will be supported by every major browser once Edge-Chromium ships: https://www.caniuse.com/#feat=apng
Thank you to the project maintainers; while RedHat does release the source code anyone who’s actually compiled from source knows that it’s never push-button easy
Contrariwise, I see San Francisco as a city that is struggling with some of the worst demographic issues in the nation, mostly stemming from having an absolutely absurd amount of wealth inequality for various structural and temporal reasons, and doing an admirable job of it. The "homegrown tech industry" was intentionally fostered in response to the valley turning the city into its bedroom community, so the idea that the city is somehow corrupting your vision of what SF could be is disingenuous. I suspect the SF in your recollection is the SF you yourself had a hand in changing into what it is today.
A quick search on Google reveals that the U.S. biomedical industry spends about 3x more than the federal government [1], or about 67% of the total spending, so your claim turns out to be false.

[1] https://www.researchamerica.org/sites/default/files/RA-2017_...
If you're OK with limiting your computer interactions to the 20th century, then yes, there's no reason not to run Linux directly. The most awesome thing about the WSL/Win10/Surface combo, though is that I get all the best features of Windows, including support for touch & pen, and all the best features of a real Linux box (which does make it way easier to keep your dev env like your deploy env.) I will never go back to a "caveman computer" that I can't write on to sketch and take notes in OneNote or similar apps. No Mac can offer that capability at any price.
Thank you for your comment, it aligns pretty well with our current thinking about this.

> It could also be cool to explore interoperation with existing schemas written in plain SQL, so people could adopt it incrementally that way.

Yes, this will happen too.
Unfortunately for me, Slack’s moat seems to be its network effects. We have tech community groups setting up Slack instances, and other alternatives are rejected because “everyone already has Slack at work and it’s easy to add another one”. Between my handful of clients and the communities I participate in, I am currently signed into 9 Slack instances. It’d be fine (I’m also on about 9 IRC channels), but the RAM... and the slowness of switching around between them. X-Chat is my baseline, and it makes Slack feel really bloated and clunky.
Far more sense, but containers are a disaster zone in video. Is it av1 in webm, mp4,fragmented mp4/cmaf, or ts? Where does the flag go in each?
Ask HN: DNS Help?
Is there anyone here who would consider themselves a DNS expert? I am looking for very thorough understanding of the NAPTR record.
Thanks for those! I usually browse on desktop, so hadn't looked into other browsers, but I'll keep these alternative browsers in mind (and comment history) in case a situation comes up again. The only other instance where I considered switching was the whole forced Mr. Robot addon debacle a year or two back.
Tesla has a market cap of $42bn, so an EV of under $60bn. If you believe Tesla will be the first to market with their autonomy network, it's hard to see that as anything other than a bargain. They'd potentially bankrupt Uber if they're still paying for drivers while attempting to catch up.

It would be a hell of a moat; anyone who wants to compete has to burn a ton of cash to develop autonomy and buy a massive fleet.

I don't think the market has priced it in; I think it has pretty much disregarded Tesla's claim of leadership.
It's certainly not new, that's for sure. I do think that online communities have made the feedback loop much tighter, though. Previously, you'd have to find someone in person to express your crazy to. Now you can just go onto a neighborhood Facebook group or Nextdoor or whatever. I've personally found myself the subject of such posts, too, despite being a very average looking white dude. Simply because I have an older model car that I park on the street while living in a nice neighborhood, where the expectation is everyone should be driving a new Tesla, Benz, or BMW, apparently, and anyone else "doesn't belong."
I find it hard to marry up "Firefox user that cares about privacy" with being happy about the study mechanism.

Don't you, from a privacy perspective, find it more than a little disturbing that the study mechanism has so much access to internal APIs in Firefox that it can install certificates without your involvement?

That seems like a crazy security risk, let alone privacy risk. It's built in and enabled _by default_ in Firefox.
You can convert RHEL<->CentOS just like that, too.

Edit to clarify: RHEL and CentOS are binary/ABI compatible to the point where you can switch repositories, overwrite a couple key packages, and now you have the other system.
I call BS on that. The person who designed the software knew about testing for mission critical code and if they didn't know, they shouldn't have been hired. The investigation into Toyota's unintended acceleration problems found a widespread corporate culture of ignoring known protocols in the testing of mission critical software. Is this the same problem Boeing has?

Even this story manages to confuse the people responsible with the company where they work. It says "Boeing didn't know the feature was optional." What a crock. Surely someone knew, like the person who decided to make it optional, for starters!
That doesn't make sense, if I give you more things (I'm avoiding saying 'atom', but you know what I mean) then it's not the case that you can suddenly do less.

Expressiveness isn't inversely correlated to number of constructs.
yes, it can definitely still be paranoia even if there's occasional theft. We don't live in a utopia where crime never occurs, that doesn't justify a paranoid mindset.

It's akin to the constantly jealous boyfriend or girlfriend who keeps track of everything their partner does. Even if they catch one cheating eventually, it doesn't change the fact that the constantly suspicious state of mind is pathological.
So that means going forward if Mozilla don't want you to have an add-on then you won't be able to enable it?
I hate such problems as a job seeker but you can't deny their effectiveness in finding viable candidates. We typically don't whiteboard and it's easy to find candidates who can pass the basic build/consume an API test. But once you throw a different type of problem, they fall apart. I hope someone can counter that whiteboarding also has the same fallacy.
Bearish because an upcoming recession seems likely to have three effects

1) make money more expensive and harder to justify subsidizing rides

2) increase the supply of drivers.

3) decrease the demand

Less demand, more supply, but possibly higher overall prices due to subsidy withdrawal feels like a dangerous thing

On top of that regulatory pressure to treat drivers as employees could decimate Uber at any moment.

Not shorting because gambling on the stock market is not worth the effort. God could declare the true present value of a company’s future cash flows to be $10/share and I still wouldn’t count on the market to get it right- among other bothers.
If building a base on the moon created wealth and would have rewarded the builders with billions of dollars, then yes, we'd probably have a base on the moon by now.
Traffic law is the same.

If the government accuses you of j-walking or speeding, you need to go to court to prove your innocence otherwise they assume you're guilty.

I've heard that civil forfeiture is the same way. These are all unfortunate.
While there's a lot of MU I could take or leave and some I don't really see the value of, I greatly enjoy that there's finally at least one effort out there to wrangle the build system. Having not used MU's build yet, I can't say if you've succeeded, but I applaud the effort since current "standard" build processes and scripts and wrappers in use are.... not good.
Totally agreed. Just today compared the cost to get a mac air 2018 16 gb 512g with asus s. Just double the costs. Not sure chromebook can help.
Indeed. For many people, it's not just 'a bike', it's their only method of transportation to work, to the shops and across town. Price difference aside, it's like taking somebody's car.
There are times when it’s the least bad outcome. It’s never a good outcome.
When we asked to use another security company for the assessment Google responded: "We understand your concern but you will have to request a security assessment from one of the following independent third-party assessors: Leviathan Security, Bishop Fox".
The critiques of SQL arent' wrong. I have written 4 parsers and can tell you the lack of orthogonality is a pain. Luckily we have the NIST compatibility guidelines to keep us safe. A replacement of SQL which contains the same compatibility tests would sell me on a new language, but it's really hard
I view using nightly to be as much of a barrier to entry that I might as well switch to a totally different browser. If the issue had lasted longer, I would have found (someone on the internet who had found) a solution like that.
Well, they could tell us what the previous process was. Was the cert renewer on vacation, or was the wrong date entered on the calendar, or? How was it supposed to work? I think a lot of people are curious about that.
There we go. Try that with video formats.
I think we're both in agreement, I was phrasing things in a manner which I thought would better reference how GP thinks of unsafe. Obviously the API itself is safe, but the "cheating" GP was referring to was the fact that Rust requires "unsafe" under the hood in order to implement some safe operations (because the memory model doesn't cover all cases). You and I agree that this isn't a problem.
Singapore Passes Controversial 'Fake News' Bill
I was old enough to play the Diablos, Starcraft and Warcraft when they came out. When I was kid playing Diablo it don’t bother me. When Diablo III came out I played it as an adult and realize it was just clicking. I hated the game. Starcraft is still nice but I don’t play it.

Almost bought Diablo for my Switch this year and recalled how much of it is just clicking.
Agreed - Since MS has open-sourced PowerShell, it really should get picked up and used by more folks in the Linux community - it seems like its mostly decades of bad blood preventing that, even though it's a clearly superior 21st century approach. My allegiance is to great tools, and I'm learning PowerShell b/c of this...
So my first thought was that a lot of ads would have been printed during that 24 hrs? Anyone notice a blip in revenues of sorts?

I mean that's the most crucial add-on to ever work: ad blockers.

When I visit a site with ad-blocker off I feel compelled to clear all caches and cookies and go have a shower.
Even with annual certificate renewal, I'd find I'd make mistakes and/or that things had changed in the intervening time.

It's also infrequent enough to often remain a manual process when it really should be automated.

That said, I still haven't automated renewal of my personal ones using LetsEncrypt, but it's also so simple I don't really need to.

At any of my previous jobs where I've had to deal with certificates, a 90 day cycle would have guaranteed I'd have it down to at least just "run this script"
I disagree as the article clearly states they have other payment processors and were already moving away from PayPal.
San Francisco legislators' complete inability to understand economics never fails to amaze me. There are twenty different taxes and bonds proposed every single year by the city to "build affordable housing." And every year, that money is squandered in regulation and red tape, while housing prices continue to rise.

The issue here is, first and foremost, supply and demand. San Francisco has made the process of building new housing so incredibly onerous that, once a developer finally succeeds in erecting a building, the only ones they can sell to are the wealthy. If it was easier to build in SF, with less regulation, less restrictive zoning, and less expense, then housing would be built for the middle class. Then, the city could apply affordable housing policies to reserve units in middle income buildings, and the housing crisis could be averted.

But instead, our legislature continually enacts nonsense like this, which accomplishes little beyond rabble rousing.