skysight-inc/HackerNews huggingface dataset:
No, chain-of-trust only has one trick... it can check that what you're about to run is unaltered from what was signed to some degree of probability.

If that is the - shipped and validly signed - bugridden nightmare-fuel like the propreitary Qualcomm 802.11 stack or proprietary multimedia bits that are a rich and continuous source of vulnerabilities (take a look through the last months here https://source.android.com/security/bulletin/2019-06-01 ) all the buzzwords did was ensure the vulnerable version is running so it can be exploited. The evil maid can get in that way.

Librem's security model is that of a Linux box, signed update packages... it's not a panacea against hacks but nor are the buzzwords you mentioned. At least they're trying to eliminate the really dangerous proprietary pieces that constantly provide new vulns.
If you are using react/redux it would be a rather trivial matter of defining an action/state tree contract between the teams. Other frameworks that use encapsulated state may have to resort to a message bus.

Edit: I misunderstood the context. If your front ends are separate applications this won't work.
I can't even count how many people comment on this website about how they host their own mail servers.
It looks like total yearly sales for all types in Norway is ~150k/year. 6 months into the year, electric is at ~33k total. However you look at it, this is a tiny market.
It's your moral high ground that keeps him alive so you can torture him by forcing ground food into his rectum using the largest, most painful, and most damaging tubes available as a form of "total behavior control" (https://www.theguardian.com/us-news/2014/dec/09/cia-report-r...).
I've noticed this effect as well. The white boxes, waiting and waiting, four or five different consecutive tests. All in all a terrible user experience. I thought it was because I used VPN, but this is another explanation.
If you get your own domain for that wordpress.com hosted site, you're free to move to other hosting if you need to.

One option is to learn enough to do it yourself on a barebones server, but that's not the only option. A google search for "wordpress hosting" turns up several turnkey solutions that a person without a lot of tech background could move to if they were sufficiently displeased with something wordpress.com did.

I think this is a good model for the hosting/platform piece of the puzzle. I'm not sure anyone has a great answer for discoverability yet
You provided a “yet another list if extensions” (from literally hundreds of such lists).

Nearly every single one of those extensions needs to be set up, configured or tweaked in a certain way (the ways differ from extension to extension and how to tweak/configure them can often be found only after some rigorous googling).

And so, you end up with an init.el which is 1500 lines long (which is a magnitude more than some of my standalone production code :) ) or more (I’ve seen some huge monstrosities).

So in my case this led to a sort of fatigue in the end, and I gave up.
They almost surely just close the account after some amount of time. Like any other bank if you canceled your accounts with them.
I really don't see how p2p scales better in economic terms. Because crypto currencies lack central authorities they need mechanisms that are highly energy intensive to guarantee consensus, thus driving up prices for transactions. The same thing is true for a federated social network. The sum total of all federated instances is harder to manage than facebook.

The benefit of decentralisation is redundancy and fault tolerance, not the ability to scale.
This is wild- anecdata but I feel as though a lot of campaigns like this get a lot of "put your money where your mouth is"-type responses that are skeptical that web activism will have any impact. It's a relief that this pulled through and had a positive effect!
Defense contractors have a huge spectrum of work- some projects will be horrible projects maintaining legacy products with outdated technology and numerous security flaws, some will be using cutting-edge technology and will involve innovative things. There is a lot of bureaucracy, they often move slow, and the pay is often below industry standards. The current backlog of security clearance applications (in the US) means it could take years before you're fully onboard your program, and means that hiring help takes forever as well. If you end up on a great program they can be rewarding places to work, it's just a matter of being careful about choosing your opportunities.
On Windows the pointer remains white so once you get used to the rest of the screen (a few minutes the first time, and pretty much instantaneous thereafter), the pointer appears to take on this very potent blue. Switching flux off at this point is damn near blinding, so it is definitely having a profound effect.
Can someone show me how to do this without running foul of my ISP's service agreement?
> requiring every CPU to implement strong memory-order guarantees is one of the things holding back frequencies

How does it hold back the frequency? I would have thought it would mean you can do less in each clock cycle, but not limit the frequency.
This project and its predecessor are so cool. I've been glad to see their continued progress.

It's probably not wise to post this, since I never talk about it publicly, he might not like it, and this thread should be about GrapheneOS, not Rust or myself. But with the mention of his Rust involvement and the history of CopperheadOS, I feel compelled at the moment to add some context and give him props.

He is an exceptionally skilled developer.

Some of his contributions to Rust were crucial. Of particular note, he re-designed Rust iterators to their current form. But he added to Rust so much more, both with his ideas and code.

And from what I recall he was in high school at the time. Amazing.

I happened to be the Rust team lead during much of his time contributing to the project, and a good deal of the blame for his departure belongs to me. It was a difficult learning experience for everyone.

It is totally fair to say that Rust would not be what it is today, both technically and socially, without him.

I was happy to see him rebound with CopperheadOS, and again here with GrapheneOS.

Good luck, Daniel.

(edited to remove some Rust cheerleading)
Sadly, it's not even close.
GP wasn't saying Firefox is difficult. GP gave a specific example of how it's easy to install an ad blocker on a system that's already running Chrome for someone else; no need to convince them to change browser, no need to tell them to double-click a different icon.
The people I know who work at defense contractors say that there's basically a cycle of new hires that come in, hate working there, and then leave quickly. Only a certain percentage of hires tolerate the environment.

The particular complaints I heard were all about bureaucracy, time tracking, accountability, etc. I can sympathize, but I know some people with the right personality type who thrive in that environment.
Really? I use a VPN most of the time and have not once had a captcha for logging into Hacker News.
It's almost like working with other people is important, and the ability to do so is probably the strongest indicator of future success.

That doesn't mean the way universities are doing it is good or productive, but the solution is to fix the way universities are doing it, not to abandon the need to figure out how to work with other people.
There is no fee. Having prime gives you the perk of 5% cash back but you don’t need it to get a card.
I'm really surprised that works, as I assumed the delay was random and it was looking for bots who were completing the image processing before the image has actually faded in. Huh.
Also https://postmarketos.org/blog/2017/05/26/intro/ - "Aiming for a 10 year life-cycle for smartphones" using mainline Linux kernels.
I was recruited for one of the first engineering positions at Tableau a very long time ago, but I turned it down as it just wasn't interesting enough. I think I was targetted in part because I was a SIGGRAPH presenter/author as one of the co-founders, Pat Hanrahan, was big into SIGGRAPH. Oh well.

It is a great success for a brilliant computer graphics professor: https://graphics.stanford.edu/~hanrahan/ http://www.graphics.stanford.edu/projects//polaris/
> Why can't people walk one flight of stairs instead of three, two up and one down?

Presumably because the management of at least one of the two systems thinks that the initial and ongoing cost (and therefore, ceteris paribus, fare) increase of either system integration or additional fare gate infrastructure (the latter of which may not be practical due to space constraints on the platform level) isn't worth the convenience increase, at least compared to other improvements they could make to their systems at the same cost.
I always thought it looked more like a vape-pen.
The mental gymnastics is in defining "selling data" as "selling all data Google has about you". This isn't a binary where it doesn't count if it's partial.

Google provides selective contextual data about individuals to advertisers who target those individuals in exchange for money. Those advertisers are 3rd parties. Google sells data to 3rd parties. End of.

They don't need to be handing over the full database for it to be a sale of data.
It reverts to a standard Amazon.com store card without extra perks.
If you have plenty of free time then I would argue yes, if nothing else because it gives quite a bit of context for various things that make up a typical Linux installation. The big problem with LFS is that it's a laborious process and it's extremely easy to lose interest part way through as a result.

If you have less free time (or a not-so-great attention span) then I think that something like Buildroot is ultimately much more valuable. You get the flexibility to choose exactly what makes up your new installation and you are introduced to the sophisticated level of configurability that a system can have, but importantly, you don't have to be the one to compile every single bit of it.
Definitely this has nothing at all to do with highway speeds. We’re talking parking lots mainly.

I don’t see the need for intuition. What’s the stopping distance at 3mph? Less than 1 foot with full pre-charged braking I’m sure. An effective system should be able to see a pedestrian 6-12” from the car in the direction of travel, and stop on a dime. At these speeds a false positive isn’t itself a safety risk, although of course you would seek to minimize them.

It goes without saying the system will not be perfect. Neither are noise makers. I see no reason why such a system couldn’t be made that is more effective than fake engine noise.
Wow, can't believe how one sided some people can be and still call themselves journalists. This is the only mention of why he is in jail:

> After his conviction in 1994 on terrorism-related charges

A euphemism if I ever heard one, he was directly involved in the 1993 WTC bombing [1], way to gloss over that..

I'm not justifying "torture", but it puts things in perspective. Six people died in that attack, including a pregnant woman seven months into her term. Hard to have sympathy for the perpetrators.

Not to mention the similarities of a hunger strike to terrorism, since he can't harm other people he's holding a gun to his own head to force the institution to change is policies.

[1] https://en.wikipedia.org/wiki/Mohammed_A._Salameh
Because electrical signals, required for coordination, can only travel so far in one cycle.
Having that kind of tight coupling (not only interfaces, but also libraries beyond the minimum you need for core things like the design system) partly defeats the purpose. If you have a lot of micro apps and they share dependencies/frameworks, you won't get the benefits of eventual consistency when the next big thing comes along.

For something like onboarding, any team handling that will either just be a "think tank" (PMs/Designers working with the actual owners of the individual affected apps to build the experience), or will be people who jump in other folks' code bases to implement it. Alternatively, they could only be responsible for building a suite of components that the app owners bring in their apps to glue things together.
In fact, it specifically recommends avoiding that, which is why I think this article falls short.
Do you know what "FWIW" stands for?
It's interesting to see the U.S. military retooling for these low-level occupation and anti-insurgency operations. Systems like the Zumwalt destroyers, littoral combat ships, America-class amphibious assault ships, Predator/Reaper/Avenger drones, and laser weapon systems are all adapted to low-intensity, close-to-shore work.

I also wonder whether the assumption that the next big war will a great-power conflict with China, Russia, etc. will actually hold. Our template for what war looks like is WW2, because that's the last time in living memory that the whole world erupted in high intensity warfare. So we've naturally built a military machine to fight the last war, but with bigger and more high-tech weaponry.

But historically, Peter Thiel's observation that "each moment in history happens only once" may be closer to the truth. The era of nation-states duking it out with industrialized armored weaponry started with the Russo-Japanese war in 1905 and ended with WW2 in 1945; it had never happened before, and it never happened afterwards. The previous template for wars before then were the "wars of nationalism" (U.S. civil war, unification of Germany, unification of Italy) in the 1860s-1870s - these had some use of industrialization, but still featured things like cavalry charges and generals personally leading troops into battle. Before then was Napoleon's conquest in 1812, and before that were the American and French revolutions, both of which were very different types of war with entirely different political groups on each side.

For all we know, the next major war might look like Syria but on a global scale, with numerous non-national actors all fighting over territory, resources, and mindshare.
There is no perfect comparison and there never will be. Having said that, YTD would at least smooth out the month to month fluctuations caused by Tesla's supply and shipment schedule.

Arguably a reasonable approach might be to throw away the month that Tesla had its highest deliveries but still use the sum of all other months.
Audio is not offered if you have non-default privacy settings, so this doesn't work when you're getting the most time-consuming captchas. So your extension is good for the captchas which take 15-20secs but not the 1minute+ ones, unfortunately.
And those who can program are split into those who can estimate work and those who think they could replace a product like tableau with a few scripts.
Amazon already has a regular Visa card and a store card that offer 5% back on Amazon purchases, so you don't need to get this secured card for that.

https://www.amazon.com/Amazon-Prime-Rewards-Visa-Signature-C...

https://www.amazon.com/Synchrony-Bank-Amazon-com-Store-Card/...
https://en.wikipedia.org/wiki/RAM_parity
Show HN: Mobile Money Support for Flutter/Dart Projects
At least we can all agree it's ugly.
That's not totally accurate... If you use our SaaS Chart Studio product then yes, but otherwise (i.e. in 'offline' mode) you can use our Python, R and Javascript libraries as much as you like: they're MIT licensed.
You recognize what category you're in. A lot of people who don't and have 'become' morning people think it's just a matter of discipline.
I'm not sure what the comparison is on Chrome vs. Firefox. I've had the pain of these slow animations, with a follow-up captcha, and it's infuriating - On Chrome. Is it better on Firefox?
Is this actually a common problem? Back when I started paying for a membership, I only really ran into 1 or 2 premium stories a month (out of the hundreds I read)...
The cellular, Wi-Fi / Bluetooth and NFC radios do receive firmware security updates. GrapheneOS isn't going to support devices without proper security support, which includes ongoing maintenance and security engineering / research for the firmware and drivers.

Focusing on the cellular baseband is missing the bigger picture. There are dozens of computers in modern personal computers running their own operating systems. Cellular basebands are very directly comparable to the Wi-Fi SoC. It's a mistake to think that the same things don't apply to Wi-Fi, especially when on so many devices it's much less contained than the cellular baseband. I'd recommend checking out https://googleprojectzero.blogspot.com/2017/04/over-air-expl... which is about exploiting the Wi-Fi SoC older generation device, which then provides full direct memory access since it wasn't meaningfully contained by the IOMMU. It was a configuration and driver coding issue, as the hardware was entirely capable of containing it but was unfortunately not set up to do it.
I think most banks had secured credit cards for long time. I got mine from bank of America with 300 deposit which gave me 300 limit. they refunded it after 6 months
LOL not in a million years
Show HN: Weekly email introductions to other makers doing cool stuff like you
We aren't retreating from anything, it's just that in this political climate it's hard to continue to scream about moral high ground when the reality always seems to come crashing through.
See my edit on the comment. It looks like that's only for the 5% back. There isn't a fee technically.
Edit: Voluntarily replaced with...

I had summarized public information and questions from as the implosion was happening, trying to be impartial and not voice my guesses as to what actually went on, and concluded that everyone should be given the benefit of the doubt, given all the unknowns.

But that impartiality could be upsetting to one of the parties (by bringing up things that, say, a good guy maybe can't talk about), and maybe this isn't the time, as people are recovering and moving forward.

At the same time, HN people might need to know some lessons from this noteworthy incident in development and privacy&security, since it should inform how we think about how other projects and startups can fail.

For example: a prominent security product can suddenly be compromised (e.g., in the sense of trusted security update mechanism broken, or a change in who controls updates), or a business partner can force out you and your intentions/stewardship of the product that you think depends on you being in the loop to not be evil, or a different business partner can delete very important keys, or (vaguely) this is another way it can be difficult to reconcile privacy&security goals with business ones.

These failures might be things we briefly consider as hypotheticals when planning or evaluating, but they do happen, in real life, on prominent efforts.
PS: and Dash, which is what the GP was talking about, is totally free and unrelated to Chart Studio :)
Yeah, and pmOS adds an interesting angle that they're adding legacy Android hardware to these companies' work on their own hardware, all running real Linux.

Note that Necunos' phone could actually be bought with pmOS preloaded as well, so you can really start to see how a few of these different projects are starting to work together and build on each other.

Hopefully we can have a truly FOSS mobile ecosystem in the next couple of years.
I'll give you a good reason, healthcare costs. You think all that life saving medical care after an overdose is free or cheap? It's the same reason why motorcycle helmets are required by the government in many states. The public doesn't want to pay for the un/under-insured comatose rider's prolonged stay in the hospital after an accident.
Impossible to keep any schedule at times. But what happened for me is just that I can't sleep at night but have to be awake for the kids at certain times; cue chronic sleep deprivation. Kids are older now, so am returning to "normality", hopefully I'll get a job with flexible working where I can work into the night too.
Ask HN: How does your startup keep employees well-informed?
I am looking for ways of improving information flow within a start-up. Our company's problem is that information is generally only shared on a need-to-know basis. For example, a lot of business discussions either happen face-to-face or in private messages. As such, only a few people understand (each only partially though) what is happening business-wise in the company.

I would like to increase transparency in our company by asking people to actively share what they have done/learned. I am wondering what format would work the best - Q&As? all-company meetings? newsletter emails?

How did you address the problem of how to share information with everyone?

Thanks a lot for any advice!
I'll buy too. I spend hours every day using firefox. It's worth almost every price they could demand. But I still hope they give me some freedom back I had before quantum.
I wonder if anyone here has been in a refugee camp for a modern war - perhaps, with victims from violence in Iraq, Afghanistan, Syria, Yemen, Libya .. I mean, these refugee camps are the modern equivalent of the trains in Germany.

The same violent crimes are still happening today in society.
That sounds reasonable, but here we are with Android's endless security disaster and all their apps written in not-Java from the beginning.

The most cancerous aspects of Android are by design, that you cannot control network exfiltration from apps, you cannot update or modify the OS pieces at will, and the apps are monetizing everything you do and everything they can find against you. Librem will answer these.
Once they gain a larger foothold on certain communities and districts, their incentives will change. As well as their ability to solidify votes in the affected states.

Kind of like how the electoral college system vs. popular vote system influences where presidential candidates campaign, I believe Raytheon will have a greater incentive to target one or two communities with a lot of sway at different political levels as opposed to several districts with little. It's cheaper to do and more cost effective.

Maybe I don't see it the way you do, but I do not see this as a net positive for communities whose sole employer is Raytheon. The measures I'm using are wages, employment, and quality of life.
Nobody outside China thinks what's going on in the South China Sea has anything to do with "self-preservation".
Complexity arises in software at the interfaces of systems. Putting a bunch of small apps into a larger container doesn’t address the elephant in the room of how to make these pieces work well with one another.

It doesn’t matter that they aren’t in the same repo, the minute one part of the app expects another to behave in a certain way there is a dependency regardless if that is expressed in code or not.
If you have okay credit, just get the normal store card.
> On top of that, the cell networks don't allow keeping a socket open for more than a few minutes without sending keepalive packets. Unlike on desktop, keeping a socket open isn't "free" on mobile.

You are wrong. Cell networks don't prevent you from keeping a socket open for however long you want.
For how to keep your sockets alive, see https://developer.android.com/reference/android/net/SocketKe...
We don't demand Supermax treatment for 5 victims, or 4 or 3 so why now? And it's hard to take your lust for draconian punishment seriously when many in the US are celebrating Gallagher who is up for shooting elderly and children.