skysight-inc/HackerNews huggingface dataset:
The authors don't know much about cheap smartphones. I examined a cheap Android tablet's ROM dump and it had a backdoor that would allow manufacturer to install any application remotely and an adware that would activate about 2 weeks after turning the tablet on and show ads above browser window (so that the user thinks that it is an ad from a website).

If the user tried to delete adware, the backdoor would reinstall it. The backdoor would not activate if the phone is in China.

I downloaded ROM from the link at the manufacturer's website to make sure it is really built-in into the ROM and the tablet was not infected by virus. Either manufacturer or those who made the ROM pre-installed backdoor to earn money from clicking on the ads.

Also on a Russian forum about smartphones I saw similar reports about other cheap models.

UPD: I googled around and it seems that the backdoor (named Cosiloon) has been found and described by antivirus vendors:

- https://news.drweb.com/show/?i=10345&lng=en

- https://www.androidauthority.com/cosiloon-malware-android-de...

- https://blog.avast.com/android-devices-ship-with-pre-install...

When I found it, there was no information about it anywhere.
Jumppl Is a Project and Team Management Platform
Jumppl is a Project & Team Management Platform that delivers measurable improvement in Team Productivity. Jumppl's USP is our unique Client Portal which empowers the organizations to manage Clients, Contractors and Consultants through a single platform.

Whether your team needs to manage their projects, Team managers need to assess the performance of the team or the team needs to stay connected through chat, Jumppl has you covered.
Something to consider: Which individuals would be capable of and personally benefit from mimetically manipulating your own desires and systems of belief, and is there any evidence that they have done so?
Oh, Mediatek is so-"friendly" to unlocking, with no verified boot and the ability to flash it with the infamous SP Flash Tool.

SC9863A and many other SOCs are flashable with Spreadtrum's ResearchDownload Tool. However, Spreadtrum actually does verify the whole boot process, meaning that booting a modified binary is impossible. If you change the boot partition, it will infinitely reboot with a black screen and vibration. If you leave the boot as-is, but change system, it will get to the splash screen and then reboot. etc.

It genuinely does cryptographicaly verify the signature and hash of every partition. Which is great for security, in theory, unless the OS has preloaded spyware, but the secureboot process prevents you from removing it.

re-edit: Doogee N10 costs 85$. I don't think you can go much lower-end, without basically giving the manufacturer a huge profit margin (i.e. a phone that costs $60, but has 512 MB RAM, has a bigger profit margin than a phone that costs 85$ but has 3 GB RAM.)
If you look at the data its about race, income educational attainment and age. But race and income are two of the examples with the obvious disparities. Them's the facts.
How to install /e/ OS on Android devices and not rely on Google services
You obviously do not know China and this issue.

Hongkong's takeover by the British has been a humiliation for China and the Chinese people, which has been provoking strong feelings on their part since well before the Communist Party was even founded.

That China must get Hongkong back is a highly consensual opinion among the Chinese. This was a policy of the Communist Party because that really is something that every Chinese strongly wanted.

There are elements of wanting independence for Hongkong in the current protests and of foreign interference (whether it is true or not, this is how it looks). This is an absolute red flag for Chinese. In fact if TVs were showing everything we are shown in the West the government would have to act more strongly against the protesters by popular demand.

The Chinese government may not be democratic but that does not mean that it can ignore public opinion or that its policies never align with what the people want.

Campaigning for democracy was always going to be a uphill struggle in Hongkong, but these violent protests (which can be qualified of 'riots') have been highly counterproductive.
If you value personal property and freedom you probably don't buy Apple products to start with.
Why is time relevant here? I'd have thought it would be better to compare the CO2 emitted by one heli trip to the airport from central NYC to the CO2 emitted by one taxi trip to the airport from central NYC, in both cases divided by the number of passengers.
They're called standups for a reason: you're supposed to do them standing up so that people whine if they go over five minutes. That tracks out to 25 minutes or less than one-eightieth of your week.
This is not practical for many phones and many people (even those who frequent this site) because you need to unlock the bootloader, which may be impossible, and then port LineageOS, which is probably not too hard in the best case, but is not a trivial undertaking.

I tried building LOS from source recently for my OnePlus 7 Pro, which is mainlined into LOS. Installing build prerequisites was easy for me because I use an OS with a package manager and a large catalog of packages. Then, it started downloading the LOS git repos. After a few hours all 58 GB of the free space on my disk was used. I cancelled it and will just stick with the provided LOS builds. Time is worth something too.
Air breathing engine.
> We’ll be reaching out to her directly to apologize for the lack of process, privacy, and to discuss next steps. We’ll keep those discussions completely private unless we both agree to share any of it with the community.

I don't know... it's really awkward if so.

There are three "we"s here. First we = SO. Second we = ambiguous, following on from the first we it could be read as meaning SO like you say. But then, clearly, the third we = SO + Monica (and incidentally she is not named).

The part about her being free to share whatever she wants is not stated.

It's a small point to be sure. But consider: these statements are almost always run through multiple layers of approval before they go out. PR, legal, and relevant C-level execs, typically. And if it is an issue that has blown up, everyone is doubly and triply cautious about phrasing.

At best, the phrasing is innocently awkward. At worst, it's... revealing, I guess?
Clearly you are entitled to your own opinion about the value of your own life, but suicide is a thing.
A good summary and the timeline here: https://meta.stackexchange.com/questions/333965/
The moment you want you access the internet as a chinese kid, you can google tianmen and get information about it. Its not of course always the correct information that is on the first results, but its not like its completely wiped.
SO is marvelously designed and I often discuss this with friends and colleagues. First imagine this: Experts who are often paid big dollars per hour are coming over and spending time in answering your questions for no apparent reason. The quality of content is very high when you compare with any other Q&A or even general social media website. I often find 50% of my programming answers at SO. If there is an accepted highly voted answer for a technical question, I would probably have better than 80% of chance that it works for me. I have saved enormous amount of time because of SO. It has accelerated my learning by 2X or 3X on specific language or framework. In many ways, general productivity of developers and in some cases their entire professional careers hinges on quality and content of SO. Now think about it: Why these highly paid people coming over to answer your questions? Why SO has not already became trash like many of its other predecessors and contemporaries? What is the magic resisting power it has?

The answer lies in its magnificent design. SO has community based voting for almost everything. Almost everything is gamified. There are people literally writing essays on why everyone should vote them to be an "officer" for X and how they will work hard on keeping quality bar high. There is an extra-ordinary passion in what they do. Its HN on steroids but with much better mechanics. It is almost completely decentralized and operates without needing people blessed with special dictatorial powers 99.9% of the times. Again, lot of these volunteers are highly paid IT/tech folks, not your ordinary 8chan Joe. They could have been doing anything else in their free time instead of technical answering questions at SO. This is much harder than dishing out fact-free opinions on non-technical websites as armchair expert. Again, no one gets paid for anything they do on SO. This is the beauty of gamification and extremely well designed community driven completely decentralized governance at its extreme. Its almost magical to me and I haven't found any other website on Internet achieve it at same scale and importance.
No. I maintain a pretty popular iOS open source project, as well as many low level projects for my job. It’s always unstable. Every year, new bugs pop up. Is it the end of the world? Probably not, but is it acceptable? It shouldn’t be. Before 10.15, I could run Mac software built 15 years ago. If AppKit developers can preserve backwards compatibility, so should UIKit developers.
I'm not looking forward to the ads and spyware I'll get in 10+ years.
Can dang please add a (2016) to the title? This a very popular post, and rehashed every once in a while.
Yep. I had a Nomu S10 which got a Triada infected OTA (!) from the manufacturer.

For those unfamiliar with this: Triada, and it's relatives infect zygote, the java bootstrap system on Android. From there on rooting on it's own can't help, because the process binary is changed, so unless you can replace it with an uninfected one, it's gone. If there are ROMs out there without the infection, flashing helps.
I share your concern and findings.

Famously, Nokia (HMD Global), also had apps that could perform such functions, developed by Evenwell Digitech Inc. I wrote about it here -- https://news.ycombinator.com/item?id=17329825, though it didn't gain much traction for a while.

In the end, Nokia (HMD Global) appologised, and said that the apps were mistakenly included in global phone versions (they're supposed to be China-only), but they are being investigated by the Finnish DPO. -- https://uk.reuters.com/article/uk-finland-telecoms/finland-t...
why can't I see your website with javascript blocked?
Provincial != unfamiliar with your preferred area.

NYC and SF are about the easiest places for foreigners to integrate. Residents of those cities might not have been to Kansas, but lots of them have been to or come from Latin American or Asian countries--so definitely not provincial, but in fact multicultural.
I’ve worked at two of the FAANGs, and some of my teams had daily stand ups and some didn’t. Some teams had stand ups but didn’t track points or velocity of any kind. Others did.

When we were working to disambiguate deliverables or working on design or implementation, stand ups were useful. They held everyone accountable, when folks weren’t making progress because of some issue, it was super obvious - it gave management a really good insight into where things are and what blockers are.

Your characterization certainly doesn’t represent my experience. We went through phases of launching a products or services and focusing on them and then going back to pay off some of the tech debt until product management, engineers, and leadership arrived on the next set of big features.
Wonder if this route would be perfect for an electric helicopter? It's a pretty short trip (8mins?), and it could charge while people load/unload? Not sure if the tech is mature just yet of course...
> First of all, we hurt members of our LGBTQ+ community when they felt they couldn’t participate authentically

> thank you for acknowledging that. I will be able to sleep in peace tonight knowing that I have still a place here

If users were genuinely unable to sleep because one random faceless person asked if they could continue their practice of only using gender neutral pronouns, then this seems to be a situation in which you shouldn't apologise to them, because they'll never be satisfied. It must be a nightmare being assigned to a CoC project now.
With great fear of this, I opened a question on SO a while ago and at the bottom linked to several other SO questions under the heading "similar but different, because ...", and it went quite well, although moderation was quite angry that I didn't choose an accepted answer within a day.
Advanced iOS Memory Management with Swift
I hear all that, but you know how it is about writing - you can help dozen / hundreds / thousands of people at once. It’s probably worth it to write something and show it to some people.
You speak of strawman, yet respond with more strawmen.

Interesting tactic.

But, ultimately, the security and safety of the American public is served best by actually using software and services that are safe and secure. When the Federal government works against that they are undermining the security of the American public.

It's not very complicated. The interests of the government do not align with the interests of the American public.
YouTube Terminates Addy A-Game and Street Attraction Channels
Unnamed Seed Stage Startup | Founding Engineer OR Founding Design/Product Role | Remote and Bay Area | Full Time

We are a new startup in the UX design tool space, with a mission to radically lower the barriers needed to build full-fidelity prototypes and products, and bridging the design-engineering gap. The stage is very early, pre-product, but we have enthusiastic early feedback.

The team of four has three ex-founders. We've previously built startups where we've hired over 100 roles, sold to 20% of F500s, raised over $45mm in aggregate, gotten the businesses acquired, and built/ran teams of engineers from MIT, Harvard, Stanford, Google, FB, YC, MSR.

We received strong funding offers from a number of top tier VCs. We’re lucky to be working with a senior GP at our lead investor, along with a number of esteemed angels/funds, including well-known leaders in the design community.

We're looking for two more individuals:

- Founding generalist engineer. No particular tech specialization necessary (we use Typescript and React), but we’re ideally looking for a product-oriented engineer who has deep frontend experience.

- Founding design/product role - someone who has worked in a few different orgs (esp. the big product tech companies with strong design), knows their design tools, is interested in or has done product work, and has an extensive network of designers / can wear the evangelist hat.

In either role, you would be directly shaping everything from product direction to team to culture.

If interested, please drop us a line ASAP at designtoolstartup@googlegroups.com. Thanks, we're excited to hear from you!
Missing from where?
Well, price got revisited[1], now is more 40€/year for that

[1]https://www.velib-metropole.fr/en/offers#subscription
> SC9863A and many other SOCs are flashable with Spreadtrum's ResearchDownload Tool. However, Spreadtrum actually does verify the whole boot process, meaning that booting a modified binary is impossible. If you change the boot partition, it will infinitely reboot with a black screen and vibration. If you leave the boot as-is, but change system, it will get to the splash screen and then reboot. etc.

Been there, and I didn't even realised the cause. I'm sorry if my previous comment seemed light hearted, I didn't want it to be so.
My friend didn't lie. The reason he is liable is because he dated her, a fact she kept evidence of, in order to present at the alimony hearing. The judge assumed this was enough to prove his responsibility for the child she then conceived (without him). That's the crux.
Wow, that is extremely cheap!
The IRS has tremendous power. They can find small discrepancies (everyone has some) and tell you the penalty is 5 years in prison, or offer you the chance to pay $50K instead as a penalty, or you can pay $150K to lawyers to fight it and maybe lose. Who wouldn't just send the $50K?
Not fixed by a random seed and not fixed by siphash. Only fixable by not allowing a linear search in the collisions. (counting or promote to a tree)

The random seed can by extracted, exposed or calculated, and then siphash doesn't help you at all, it just makes everything 2x slower.
Route42 and StoryChief Raise 100K in Fundathon Led by Peak Captial
I didn't say it was completely impossible. I am insisting removing access to cars makes a hardship even worse in general and, yes, impossible in some cases. Keep in mind that some people get special license plates because doctors do not believe they are capable of walking across parking lots to get to their destinations.

At any rate, people with babies and mobility problems don't take elevators to the subway platforms because generally they don't exist or they double as outhouses.

In Manhattan, these people spend a lot of money on delivery services or rent for walkable neighborhoods (because the subway won't cut it, as I explained). It is a luxury to live this way. People with these concerns generally move out of places like this.

In outer borroughs, there is bus service, but one doesn't wait 10-30 minutes each way (not an exaggeration) in freezing weather for a bus with a baby or a heart condition. And the bus stop that probably wasn't accessible to stroller or walker due to unshoveled sidewalks and berms of trash-pepoered ice.

I am not saying it's impossible to live this way. People somehow do it, though I suspect they are shut in for large portions of the winter. I am saying it takes various forms or privilege or hardship to make it work. It's flippant for able bodied and financially well off people to hand wave about how walkable New York is without trying it out with their own canes and wallets.

It's a bit like saying, "let them eat cake" to be honest. It's just lacking a sense of experience and practicality.
Daily Standups do make sense to some.

In an ideal world everyone would be perfectly professional and not need any supervision at all. In the real world some times you might be in a rough period or have some other problem that makes concentrating hard. In an ideal world the thought of getting a paycheck would be enough motivation. Sometimes it isn't.

A daily standup, if done well and short, helps one to focus on what's important, sets the tone for the day, and unites the team as a tribe.

When one is not motivated enough by looking a big fat dashboard with tickets pending, or the though of getting another paycheck at the end of the period, one can be motivated by the thought of not failing to their tribe, their peers, their coworkers.

You gave them your word, face to face, that you would work on something, so you better do, they are your people.
Since the change - from Cyanogenmod to LineageOS - the amount of supported devices shrinked and nowadays I can't even find old LineageOS builds any more for devices they used to support, but not any more. I've lost faith in LineageOS.
Once you're established a reputation in a company and been there for a while, it is relatively easy to go remote with them. It is always a temptation.

The risk is what happens when that job is done and you find yourself in the boonies with no meaningful tech work within hundreds of miles?

I was at Sun during the era when they made a big push to get people to give up their offices (save on real estate) and go remote, work from anywhere! It was so tempting to move to Hawaii and keep the silicon valley salary. I'm glad I didn't. I know many people who did. When Sun was over, they found themselves owning farmland in the middle of nowhere, no job and no possibility of getting one in the area.
similarly, I don't get the whole automated driving thing.
-Would you get trust a car with your safety and the safety of other road users? Uber already killed a woman.

-"Planes already fly themselves" actually they don't and you wouldn't step into one that did.
I think that was the point - that answering questions on SO is like having a conversation, and feels pleasant to some people, not like work.
Except if you're already deep into work because you start earlier than everyone else then they just rip you out of your flow.

They also tend to be longer than five minutes in terms of herding people to them etc.
I like standups. They keep me updated on what's happening in the code base, and give us the opportunity to discuss what's going to happen next. The repo is vast and we're gown adults that don't need to be micro-managed because story A or B is taking too long.

The problem doesn't come from standups, but rather from dysfunctional startup culture.
When I first wrote that comment, I wrote something like “you could do it, but the end result would be absolutely terrible”. Then I decided that actually it wasn’t possible after all in any meaningful way, and changed it to “except probably even less plausible.”

In reality, with what I have in mind, it’s kind of a bit of both: what I have in mind is that you’d need to split each piece of the Knuth-Plass layout (box, &c.) into a DOM element of its own first, so that the layout can determine their sizes and shuffle things around appropriately—since the layout API is only giving you the set of CSS boxes to lay out and their sizes and any engine-decided inline breaks in them, and not the ability to inspect what’s in them or to break them up into further fragments.

Once you’re doing that, it’s probably a bad idea to use the Layout API, because you get no substantial benefit (a ResizeObserver to notify you when you need to redo the layout is just about as good), but are using a lot more DOM nodes (which is bad for performance, and I strongly suspect it’d cancel out the benefit that the Layout API version can run away from the main thread), and are using a new, less-well-supported and probably-buggier API to boot.

Also browsers have some pretty terrible bugs around how hyphenation especially works when you have zero-width characters, and they have shown no interest in fixing them. (Chromium’s are the worst, but Firefox has a couple of interesting ones as well.) Therefore you’d probably need all of your line-breaking opportunities (most notably, soft hyphens) to be in boxes of their own. And now you probably won’t get your ﬀ ligature if a hyphen could be inserted between them, so I’m probably going to have to disqualify it as not being able to produce the same output.

In the end, I’d be surprised if a variant of https://github.com/bramstein/typeset using the Layout API as far as possible while retaining identical output (excepting this soft-hyphens-inside-ligatures case, if my guess is correct) could get down to even 20× slower than it, or using less than about 10× as much memory. In practice, I think figures like 100× slower and 500× memory are more likely. It’s possible that it would be less janky for large amounts of text, given that it operates in a worklet which may be run off the main thread by the browser; but I doubt it, due to the increase in other requirements.

This is all assuming that my understanding of what would be needed and possible is correct—I may have stated it too strongly given my lack of particularly detailed knowledge in the area.
There's an e-mail address in the user info...