skysight-inc/HackerNews huggingface dataset:
This issue is best explained on Rich Rebuilds' recent video here:
https://youtube.com/watch?v=o-7b1waoj9Q&t=525

This has been a known issue for some time, and it's amazing Tesla hasn't fixed it yet. As explained in the video, the issue is simply the base linux OS has full syslog's still enabled, which over time burn own the eMMC chip used for storage. Currently Tesla just replaces the entire media unit when this happens, which is extremely expensive for them. In reality they only need to replace a tiny part instead of tossing entire boards.

The GOOD news is this issue is almost fully solvable through a software update. They just need to disable base syslogs, or at least only store logs in RAM while car is running (if they need those logs for debugging purposes, which I doubt). Long term, they should replace this eMMC with a proper SSD, or removable SD card that's easily serviced when it goes bad (as is the case in other parts of the car).

I think this must be an issue of visibility in the company, and the right engineer just isn't aware of this issue yet. I hope this gets more visibility and gets patched in a future software update.
https://en.m.wikipedia.org/wiki/Sensitive_Compartmented_Info...
The late 90's security systems electronics for Mercedes were pretty temperamental. Bricking the car is what it was designed to do. I know firsthand that it's capable of bricking the car for the wrong reason.

EDIT: Also, I don't know how it was for dealers, but 3rd party repair shops just throw their hands up for those systems.
kind of is though

https://www.ctvnews.ca/canada/manitoba-cfs-will-not-erase-fi...

https://www.theatlantic.com/national/archive/2014/07/arreste...

https://www.cbsnews.com/news/protective-services-called-on-m...

https://reason.com/2015/06/11/11-year-old-boy-played-in-his-...
Twitter Announces Developer Labs and the Next Generation of the Twitter API
Hold it underground until we can do a Futurama and blast it into the sun.

/end sarcasm. Didn’t work out well for Futurama.
Yeah I don't like it either, but doesn't that delay you in the airport a lot? I thought they take you to some room to do their questioning and that it can take half an hour to an hour. Do you just go early in expectation this/find it to be worth it?
Tell me about it and tell me why they seem to be no alternative.
Whatsapp vulnerability allows hackers to install spyware by making calls
They learn / don't learn that skill from kidfluencers on YouTube. From what I've seen with my daughter that's a super-weaponized form of advertising compared to what I grew up in, anyone who survives Ryan and turns out halfway adjusted will have made it through a real crucible.
> Lucky for us

Are you sure?
>We are now finding algorithms that have implicit racial biases because the only people who worked on them were Asian and Caucasian

How do you know that these biases aren't just representative of actual biases in reality? More importantly, given the relatively small proportion of AI applications that operate on human data, indication of such a bias is a poor argument for the value of diversity across the industry.
> The last few times I've returned to the states I haven't even had to talk to a customs agent - but signing up for Global Entry might be too much of a violation of privacy by some standards.

You have to hand your receipt from the machines to an agent who may or may not decide to question you at that point. After baggage claim, you may or may not get stopped by a CBP agent who decides to question you based on their "discretion". (At some airports, these two checks are consolidated and done once, after baggage claim).

Some people are stopped for these checks more frequently than others.
In flight simulators, every aspect of the environment is able to be controlled by the user. Programming in the details of the accident involves setting up the same conditions as were present during the accident including altitude, airspeed, etc. Then the user/instructor would activate specific malfunctions that will cause the plane to behave like it did during the accident. Now the pilot is, for all intents and purposes, flying the same plane in the same conditions that the pilots were during the accident.
The worst thing about heartbleed is that it introduced marketing into vulnerability disclosures :(.
Deepest ever dive finds 'plastic bag' at bottom of Mariana Trench
Point Checklist for Starting a Business
Bloomberg piece on it: https://www.bloomberg.com/news/articles/2019-05-14/biggest-c...
It’s a completely different technology that’s solving a different problem. And sun tracking is more complex when you are reflecting onto a fixed point as opposed to simply pointing the surface (in the case of solar cells) toward the sun.
> Enhanced Passport--the requirements for getting the photo include not wearing glasses and not smiling, ostensibly so that their algorithm works better.

When I renewed my driver's license a number of years ago, they required a new photo to be taken without my glasses or a smile, so that's not only a passport requirement.
Transformers is great advertising - it delivered good entertainment value, it made the toys more fun to play with because your imagination had already seen a bunch of Transformers stories play out.

Contrast this with cable TV ads if you haven't watched cable TV in a while. Annoying, gimmicky, manipulative.

I don't have a problem with commercials on principle - I have a problem with how they're implemented. Banner ads on website that give me good content for free? Great! Informing me there are hot MILFs in my area while I'm pair-programming with my boss? No thanks.
Thank you, this confusion between very different International and US/NA versions with the same marketing name has been a headache for open source projects. You wouldn't believe how much trouble I had sourcing a few International version S3, from US eBay (claims of an item being the GT-i9300 model number for the International version were usually wrong).
I'm not saying "it's too dangerous" at all.

I am saying that deaths/TWh is NOT a useful metric. It is a ridiculous reductive way of looking at this that assumes a continuous random failure rate.

The same applies for fossil fuels although, as you state, it isn't punctuated with the possibility of an immediate catastrophe like a meltdown but something else entirely-- irreversible climate damage.
Oh my god this! Why is is so hard to balance the audio between commercials and shows?
>or even implied that

Thats an unusual take when the direct quote is him not only specifying a number of jobs, but the quality and pay for them. People dont usually assume that when I say "This would add 7000 jobs" that me removing 23000 jobs net is the end result as long as the jobs were added somewhere
You will always have masses of people that think government can create jobs.

It's not a fact driven problem.

It's that companies will pay the members of a political party to create special interests.

I don't know the best solution, but I certainly don't trust the federal government to be the solution.
Right but they don't have the "we pulled a counterfeit widget out of the community widget bin and have no idea who's to blame" issue that Amazon had since they aren't co-mingling inventory from multiple suppliers.
Cake Panel with Ahmed Elsamadisi of Data Modeling Company Narrator.ai
I like to say that the environmental NGOs, politicians etc. have been given the choice between pneumonia (nuclear power) and cancer (CO2 emissions), and they answer "oh no, my grandma died of pneumonia when she was young, so I'll have the cancer".
Pretty sure this has had significant discussions on HN in the past, but I can't find them. Anyone?

(The purpose is just curiosity. Reposts of a story are ok after about a year, as the FAQ explains: https://news.ycombinator.com/newsfaq.html.)
The article is misleading. The manufacturer does fix this. They just don't fix the bad chip. The replace the card instead.
We set up a PC with two mirrored video outputs for netflix. One goes to the TV in the living room, and another is VGA over CAT5 to a smaller monitor in the kitchen. Makes monitoring consumption easy.
You definitely got put on the "probable drug smuggler" list. Luckily you seem to have fallen off of that list but if you went back to your old behavior I'm sure you could find your way back on it.
The problem with calling something biased is that it carries a connotation of racism. There is a difference between disparate impact and disparate treatment, to use Eric Holder's terminology. I don't think humans are "projecting their own experiences", I think that the dataset that is fed to algorithms over-represents whites because they constitute a larger portion of the population. It may also over-represent asians because they are a larger portion of the silicon valley labor force. This does not mean they are attempting to mis-treat blacks, hispanics, etc.

Maybe there is progress to be made, but it will be difficult to make a facial-recognition algorithm work as well on the 13% of the population that is black compared to 77% white. That is, until the third world becomes a market. Then, they will be tremendously biased to non-whites, though I don't consider either bad.
It's not so much about money, the implication is that making solar panels costs some amount of resources that according to the parent, could possibly be spent in better ways. The money just represents, indirectly, the amount of resources.
In a Dutch article (https://nos.nl/artikel/2284630-nederlanders-vinden-beveiligi...), one of the researchers says "het aantal mensen bij bedrijven als Intel die zich op dit niveau met beveiliging bezighoudt, is echt op de vingers van twee handen te tellen." = There are 10 or fewer people working on security at this level at companies like Intel.
This sounds very hard to believe to me. With the previous attacks there surely are bigger teams working on this kind of stuff?
"30 Hour Jobs" is the title but the site is intended to capture all sorts of working environments that embrace reduced working hours or flexible work in some capacity.

You can read more about thoughtbot in issue #2: https://us19.campaign-archive.com/?u=f8a0d9af744b2eb7002632d...
It was discovered June last year according to this timeline, so a lot of people must've successfully kept mum for a long time: https://mdsattacks.com.
When someone else does it, it's Politics. When We do it, it's Science.
You and I agree, for our own lives. I derive meaning from my agency.

For some reason, though, there are a shitload of people out there that don't have this ambition. I understand difficulty empathizing with it, because to people like you and me it does look like a "waste of time." But for some reason it really is just ideal for a lot of people to be able to switch their brain off and sit comfortably in front of a TV and be entertained.

For these people, you could argue "you should be doing something better with your time," but all you'd get back is "why? This is comfortable."
> 47 percent of scientists at the National Park Service and 35 percent at the Environmental Protection Agency report they had been asked to omit the phrase "climate change" from their work.

I guess a certain percentage of those who asked scientists to do that did it for the same reason I dislike many (but certainly not all) blockchain initiatives: it has been bolted on a something where it didn't belong just to "profit" (or profit in the case of blockchains) from something that is hyped by the media.

Climate change is serious, but it detracts from important work when people are abusing those words to get funding for other unrelated research.
It is a bit baffling that a company which enables “autopilot” OTA does not do this as well...
> Then, we had 18 years of no major terrorist attacks.

Maybe so, depending on how you define "major terrorist attacks", but that's only because that's when I started carrying my anti-terrorism charm.
There's smaller companies that keeps designing them. Nobody buys them for the most part. One example that can handle lots of security policies is CoreGuard. It's based on work at crash-safe.org.

https://www.dovermicrosystems.com/

Academics keep coming up with stuff for timing channels like partitioning, masking, and randomizing components. Personally, if not physical separation, I'd just do SMP with secret parts on different CPU that untrusted parts. Both memory safe on a separation kernel to isolate them. One design used different DIMM's, too.
Control Your Dreams Lucid Dreaming Music – Deep Sleep Hypnosis
Well, dedicated machines for each security domain for each customer, a lot of the time it's fine for many applications to be in the same security domain.
I just cancelled mine and let me tell you, the added 10 to 30 seconds of ads before the video starts are already bugging me a lot.
To my ear 'reflect' could also mean to shield from. More so, in fact, because it tends to imply a 180 degree angle where 'deflect' implies something else. Of course people have many different associations.
I'm fairly sure the article is wrong. I looked at 3 of the sources they link (Delta, Jet Blue, and the ZDnet article), and they say that the "biometric exit program" is only for flights entering or leaving the US.

The TSA has their own facial recognition program that is being trialed, but currently I believe it's still only for international flights and they don't say anything about requiring a passport for domestic flights. In the past, their biometric stuff has been only opt-in, and if you don't even want the possibility of being asked to opt in, all you have to do is get in the regular security line since the TSA is only testing on people using precheck.

https://www.cbp.gov/travel/biometrics/biometric-exit-faqs

https://www.tsa.gov/news/releases/2018/10/15/tsa-releases-ro...
Nim has a library (ormin) that does this, although it is still far from production quality:

It parses your sql (in compile time), including the "create table" definition, and does type checking, rebuilds it with parameters (so that it is SQL injection safe and the DB optimizer can make a plan once and reuse it).

Obviously, it needs to be aware of specific SQL dialects if you need to use them .... so, it's unlikely to be very popular.
> At the same time, doesn't this feel a little like the advertisers are extorting us for some $$? Lest they jam more ads down your throat.

They wouldn't have succeeded in this extortion (online) if it wasn't for companies with billions of dollars hiring the smartest people in the world to enable advertisers to spy on people en-masse.
Thank you. What a willful ridiculous article from the author.
Turing Machine |Hyperglitch
you might look into using youtube vanced
You can but even then you risk not following the rules correctly.

> The Consumer Protection Act prohibits advertising that targets children. To determine whether
advertising is directed at them, the Act stipulates that it is necessary to take into account the
context of the advertisement’s presentation and the impression it gives.

> The Act also provides three criteria that correspond to the following questions:

> • For whom are the advertised goods or services intended? Do they appeal to children?

> • Is the advertisement designed to attract the attention of children?

> • Are children targeted by the advertisement or exposed to it? Are they present at the
time and place it appears or is broadcast?

[...]

> Goods or services essentially intended for children and that therefore appeal to them. Ex.: certain video games, toys or candy primarily consumed by children.

> The ad must not:

> • be designed in a way that appeals
to children;

> • be broadcast or distributed in a place
where or at a time when children are
normally reached.

[...]

> The fact that an advertisement or advertising method appears to target adults does not mean
that the advertisement is intended exclusively for them. Following an analysis of the two other
criteria, an advertisement that attracts the attention of children can still be considered as
advertising directed at children even though it seems to target adults because of its verbal or
written content. That may be the case if the product advertised appeals to children.

- https://www.opc.gouv.qc.ca/fileadmin/media/documents/consomm...
I've seen this claim made for routers and other low intensity low latency workloads.
> Nuclear plants do not "blow up".

The reactor of Chernobyl did blow up. Just not like a nuclear bomb, if that's what you meant. Which may be a bad thing, Hiroshima is actually inhabitable.

>People are unreasonably scared of nuclear energy, and we might lose a planet because of this.

People are quite reasonably scared of nuclear energy. What's unreasonable is that they are less scared of global warming.

Your data is not convincing -- in fact, I think it does not address the danger of nuclear and fossil energy at all. Using fossils kill a fairly predictable number of people each year. For a country, let alone humanity as a whole, that is not a danger but a cost.
> also worth noting: as a US citizen re-entering the country you do not have to present anything more to a customs agent than your passport.

But as a practical matter they can detain you and do a more intense search than they would if you didn't dig your heels in and silently hand them your passport. You'd be surprised how intrusive a search absent reasonable suspicion can be at the border - they just don't have the resources to do one on everyone.

The info I've been asked for at the border is usually info the government could get if it wanted (Ex: asking where I visited when they have flight records and are looking at my passport stamps)

I'm fine with doing a little participatory security theater if it gets me home quicker and has no real cost to me.
I thught Theo deRaadt was exaggerating when he said that Intel does not know how to build a CPU.
Oh absolutely, and one of my biggest customers in 1999 was one of those "private phone companies" that was made possible by deregulation. They also allowed me to experience having a customer file for Chapter 7 in the bankruptcy code :-).

But the article that is linked, and which we are commenting on, was specifically calling out AT&T which lobbied strongly for the 2018 Trump "tax cuts" which cut corporate taxes specifically. AT&T argued in favor suggesting that the money they saved in taxes they would invest in building out their fiber and creating "hard hat jobs". The union argues this never happened.

I doubt anyone here was surprised that corporations, receiving a large chunk of cash to the bottom line with a reduced tax burden, did not turn around and dole that out into either infrastructure development nor worker salaries. Rather, it has largely been used to pay one time bonuses to executives or returned through dividend to investors, or just sat upon as these companies are all too willing to do.

I was pointing out that giving someone money and suggesting uses for it that you would like, is less successful than holding on to the money and giving it to them after they show they have done something you would like and then "rewarding" them for that.

For example, adding a corporate tax that would add 1% to the corporations general obligation for each multiple of 100 difference in pay between the executive staff and the non-executive staff, would "reward" them for more equal pay and penalize them for less equal pay.
Do you want them to constantly ask for useless junk or unhealthy junk (e.g. sugary cereal)? Throwing a tantrum when they don't get their way?
Do you break your Driver's License frequently? Mine is a tough laminated card. I've never had a situation where I thought it was going to be damaged.
This is not a sane way to install third-party software because by adding their repository, you allow them to "upgrade" and package in your system, including Linux kernel, bash, sshd. Is your system secure if companies like Microsoft, Sublime Text, Slack Inc have root access to it?

So you either give them root access or install and update software manually. Because package managers like apt do not have a sane method to install third-party proprietary software.

And even with open source software, it is a bad method. For example, a developer that provides a Debian repository with different versions of PHP, has overwriten openssl library for users of his repository despite it can break something else.

So there should be a safer way to install third-party software.
Felt pretty bad for SuperMicro after they took the huge financial hit from the story which offered no physical proof. Glad to see they mostly recovered from it.

The story was extremely interesting, but as people dug into it, it seemed like the reporters had a bunch of conversations like this:

Security Researcher: So, in theory, you can do a lot of crazy stuff! Embed a tiny chip on a motherboard, stick it in an Amazon datacenter, sniff all sorts of things...

Reporter: Are you winking right now? I swear you are winking! So you are saying this is true? OMG. Wow, what a bombshell!

Security Researcher: I was not winking.

Reporter: Suuuuuuuuuuuuure you weren't.
Is it time to just write an X86 API on top of GPUs and get rid of CPUs? Seems like the shortcuts we've been taking to get sequential speed are all blowing up in our faces, and fixes aren't possible without huge performance regressions.
I'd really like to be given a choice, at least. My gaming PC is used exclusively for gaming, so it needs to be performant, but does not need to be secure.
One CPU per process makes a lot more sense, especially now that we have so many specialized CPUs in our machines anyway.
> CO2 is not the only thing that counts.

In terms of existential threats to human life as we know it, it is.

The choices aren't "renewables and nuclear" or "renewables and ponies and magical unicorns." The choice is what proportion of energy do we want from nuclear vs renewables vs fossil fuels.

The best option is reducing energy requirements. After that, though, a large proportion of every unit of nuclear energy you ban goes straight to fossil fuels. Which is death.
From the paper, this doesn't seem to be able to create a collision while retaining the same length of input data.

It seems that checking both the hash and input length would be a very cheap way of identifying attempts at hash collisions.
In English digit comes from the latin word for finger (digitus)
Ottawa selectively bars media from Lima Group talks
I think the article is wrong about this. The linked EFF post mentions nothing about passports and the TSA currently accepts a wide range of ID documents for domestic flights:

https://www.tsa.gov/travel/security-screening/identification

Which makes sense because if you're opting out of the new automated process then you just go back to the manual process - somebody looking at your documents. Those document requirements have not changed.

In 2020 when REAL ID comes into effect then you'll need a special ID (typically a new drivers license), or failing that, a passport - but that's a separate issue.
QuiteRSS on CentOS @ work. I like it
While I have a very high disregard for San Franseptic, I do applaud this decision if it comes to pass.

I think the broad use of facial recognition by governments will lead to nothing but disaster for its non-violent citizens.
A few years ago I sold everything I owned and moved on to a sailboat. I was frustrated with my prior job and knew I was going to leave no matter what. I fretted about what to do for a while but finally decided to give sailing a try - because I could and I knew if I didn't I would regret it the rest of my life.

Turns out I both loved and hated it. I ended up only staying gone for about a year and moved back to the city I had left. I still don't regret that decision, I'm significantly happier now than I was. I think of radical life changes as tools for perspective, by doing what I did I realize how little of what I have I need and how easy it is to create a new life if the one I have isn't suiting me.
Wow, this is exactly the tutorials that you get on "How to get your Rasberry Pi to run stable for extended periods of time". Exact same failure mode, exact same fix proposed.