skysight-inc/HackerNews huggingface dataset:
It was just a simple example. There are counter-measures WAY more complex than a simple two lead sensor. I was part of a CC certified chip design, and I can tell you we must implement tests for every single countermeasure in the chip. But still you have no means to check whether your sensor/countermeasure hasn't been tampered all together in the supply chain.
The Gameboy sound chip is definitely one of the trickiest part of the console, if only because there are a million tutorials out there on how to start a Gameboy emulator but very few go all the way, and generally the sound chip is what you do last. It's also surprisingly quirky and many games will misbehave if you don't implement some weird edge cases.

It's also annoying to debug because it's not as obvious as video when something is wrong, especially when you've just spent two hours listening to the same chip tune square waves in a row...
That's true, but if I'm reading the subtext of your post correctly, you're saying that this is pointless, and I don't think it is.

For a lot of people, we're well below the level of security where hardware security is relevant. The average person is still willing to run software that downloads/installs/runs malware on their machine (browsers with Javascript enabled). So in that sense, we've got a lot of work to do to get developers and consumers to practice better security at the software level before the hardware level is even a significant concern.

However, I do hope for a future where software security is both a fairly solved problem and the norm, and if that time comes, I want to be ready for the inevitable arms race when hackers move to hardware vulnerabilities.

Recognize that yes, there are always more layers, but each layer of vulnerability has decreased capabilities. It's a lot easier to read someone's hard drive using an installed app with full filesystem permissions than it is to read the same hard drive using their power supply.

Also recognize that these layers require more capability from your attacker. A Russian hacker can write an app that reads people's hard drives from anywhere in the world. The power grid simply lacks the networking infrastructure for long-distance remote access in many cases, requiring more physical locality.
> It's the height of arrogance for an individual cook to believe that they possess genius exceeding the crowd-sourced collective imaginations of an entire people.

It's not just cooks and chefs, but all artists. What's the number 1 reason hollywood/publishers/author's guild are vehemently against users modifying their movies/books to better suit their tastes?

"It destroys the artistic intent of the creator. The artist intended it for it to be consumed in a specific way, and by [removing the mushrooms/censoring the swear words/making all the characters zombies/etc.], you've created something the artist did not intend for you to consume"

And my response is: well, obviously! It is the height of arrogance to get offended when someone modifies your (dish/movie/book) to be more to their liking as it implies your original creation was perfect and could not be improved upon!
> I agree that NAFTA is one major inflection point, but it supports 25 years ago, not your 10-15.

Things take a while to have an impact. The factory my dad worked at for 25 years didn't go to Mexico until 2007 [1]. Manufacturing in the area really didn't start moving to Mexico until the financial crisis. Whether as a result of the crisis itself or just a convenient side effect, I don't know.

> I didn't say "Southern racism", I said "Southern Strategy"

I know the Southern Strategy. My point is that people in the northern states are much less motivated by racism than you imply. You can choose to believe that or not, but I firmly believe that its true.

[1] https://globegazette.com/news/imi-cornelius-to-close-mason-c...
Everyone who cared to comment seems to agree that open source is a prerequisite for proper security in software. Interestingly I got down voted :)

Good point that the security of FLOSS stems from the culture surrounding FLOSS...
few things:

I'm not building a competitor to Signal, so most (if not all) of that list is completely irrelevant for my application.

I'm also totally paranoid that I have, indeed, got some of this wrong. I'm trying to find people I can trust who know more about this than I do so they can look at my code and test my application. So far everyone I've approached to look at it has said it looks OK. I've come to accept that I'll never "know" completely for sure that this is bombproof, because there just isn't any single person out there that can verify that this is bombproof.

And, as Bruce Schneider puts it; security is not absolute, it's about delaying the bad people for long enough so you can catch them. Bank vaults are rated in hours (the number of hours that a competent attacker will need to get into the vault). No software implementation is 100% secure, but it can be secure enough to be useful.

But building a basic protocol out of Go's standard library building blocks is pretty simple, and hard to get wrong, for given values of "simple" and "wrong". These aren't absolute, and depending on your application, may be quite low.
Networking Guides for Linux Sysadmins
It seems like “delegation” is the idea that would most help build on this. I’ve had assessors tell me that I had only a single factor in the cookie on disk after an authentication process that involved TLS client certs and an off-device OTP.
How was your diet before you started intermittent fasting? When I read anecdotal accounts like this, I often wonder if your previous diet was so poor that doing anything to change it would've made it better.

In other words, without a control group that switched from high carb to low carb without intermittent fasting it's hard to know if the benefits you've seen are from intermittent fasting or just from eating better generally.

You and I are about the same age and I've been the same weight the past 30 years. I know what you mean about non-sweet things tasting sweeter - I gave up obvious refined sugar about 6 years ago and the bag of plain raw vegetables I eat every day for a snack tastes amazing.
There is no DevOps role. There is no DevOps team. Devs doing Ops != DevOps. DevOps is about tearing down silos (Dev and Ops), not creating new ones.
Chinese apps no longer rule in India as domestic rivals take over
> someone who has lived in one for 5+ decades

Graham's sale of Viaweb essentially exits him from the society most of us live in; he achieves a level of wealth that lets him ignore most aspects or truths he finds inconvenient (good or bad, small or large). As he's now writing in absentia for over 20 years, I don't think we should assume he knows anything about how the world works for most people today.

> and paid some attention

Extremely questionable based on his other essays.
Renters Feedback
All,

I launched my first web application rentersfeedback.com.

An application where renters can provide reviews of the places they have rented before or are currently living at.

The blog post about why I created this app, is https://betterjavacode.com/2019/12/21/rentersfeedback-com/

Ask me any questions or if you have any feedback, I will appreciate it.
It sounded like the papers were ungraded. Which is something I encountered a few times in philosophy seminars and really appreciate.
The law does not prohibit “jamming”; it prohibits “willfully or maliciously interfere with...radio communications of any station...authorized by or under this chapter”.

If you’re objecting to the phrasing in the boingboing article (which called it “jamming”), ok, but the law seems clear to me and the interpretation thereof I think was correct.
A couple things:

1. FPGAs are easier to verify cause they are regular structures.
2. How do you insert a backdoor in an FPGA at the supply chain if you don't know what is the exact logic that is going to be uploaded?
I don't calorie count. 4pm meal can be a cheese burger, Chinese food or paki food ( like chicken Karahi) I do an evening workout around 7pm with kettle bell swings to burn the sugar. Then i have a snack after. But Its very odd I am NOT hungry just like "used" to eating as if it's a memory. I am still getting used to this. I can't explain it clearly. I guess you just have to try it. My whole family has diabetes even my little brother who is 10 years younger than me. Could be the bad south Asian genes ( Pakistani) , I don't know. lol. I try to stay away from carbs such as white bread ,no ice cream / sugar etc... or i limit the amount of naan breads i have to like 1 when eating with a curry dish but i do love a chicken bryani once in a while but the portion size is less , i just can't eat like i used too before i started the IF diet.
> That's true, but if I'm reading the subtext of your post correctly, you're saying that this is pointless, and I don't think it is.

I'm not saying this is pointless at all! Just that so far there seems to always be another layer that can be used to circumvent the protections.

I guess I'm more like saying we should not ever take security for granted. Instead, we should look at the whole system and try to find the easiest attack vectors. Which might not be purely software issues anymore.

For example, at some point we might need to consider the physical effects of the code being executed or how the physical environment can affect it.

When the software is sufficiently strong, the attacks will be directly or indirectly against the hardware.
None of the great trappist beers contain glucose syrup.
Maybe you're mixing it up with candi sugar.
Lurking in the swamp the Florida “volcano” (2018)
You could try 5/2 fasting (5 days eating, 2 days fasting)
Why not? You have saliva in your mouth with enzymes that usually get in a number of remote places anyway. Not sure why you would assume flossing is required if there are other mechanisms that already take care of that problem.
> In Buddhism, human existence is a source of inevitable suffering. The only way out is to ... not be born again.

Framed that way, Buddhism sounds remarkably nihilistic.
Self-employed, but it's not in software.

Like you, I have way too much to do and not enough time to do it all. But one of the great tools in our arsenals is flexibility. It makes it possible to radically adjust the when, where, what, and how aspects of our jobs:

when - I do most of my work in the afternoon and evening. I may also do a few hours on Saturdays, Sundays, and holidays. I rarely work in the morning, and schedule all calls to take place late.

where - I usually work at home, but also work outside (libraries, in my car while waiting for kids' activities to end, etc.). I do take my laptop with me on vacation just to keep things going. A few times I have done longer stints abroad, working FT but enjoying life in another country.

what - I choose what to work on, new projects to launch, and what can languish. If something is not generating revenue or is too troublesome, I will make adjustments accordingly (killing project, hiring a contractor to maintain it).

how - No one tells me how to get the work done. That's my call. Increasingly, I have been outsourcing things I don't like to do or don't do so well.

One other thing: I have set up a monthly payroll, so I get paid regardless of how much or how little I do. That is, there is no "unpaid vacation."

I have operated my own business for 7 years.
> There are counter-measures WAY more complex than a simple two lead sensor.

Fair enough.

Has there to your knowledge ever been documented evidence that a mask had in fact been tampered with in a way that caused a system to be compromised?
Not denying IF has an important role, but daily strength & cardio training are surely confounding also.
Make Apple will introduce it and call it breakthrough ;)
There is already bloodshed, but right now it just happens to not be yours.

The point of MLK’s quote, in my opinion, is that moderates can always find reasons to maintain status quo especially when the issues at hand are not deemed personally impactful. People are being harmed, but because they are not me or look like me it’s not worth risking potential upset.
Yeah I've seen i3 and it looks cool but does it work with regular graphical X window applications? It seems like it's mostly text based though I have seen images in panes.
Its a straightforward side effect to avoid as well, don’t use bags. Austin and Chicago come to mind as cities that don't accept bagged items for recycling. Neither has bottle deposit but I don’t see it being a huge issue to add, if they so chose.
For this to happen, a couple things have to be in place:

1: Ordinary people have to find the deposit so small as to not be worthwhile, so they chuck the cans in with their normal recycling rather than returning them to claim the deposit.

2: The recycling has to go out in bags rather than bins or carts.

I'm in Michigan and even our 10¢ deposit, which was impressive in the 1970s, has ceased to be worthwhile for many people. We should've upped it to 25¢ a decade ago, and expanded it to include juice and other noncarbonated things, but I digress!

However, my city uses a big rolling bin for recycling, so there's no bag to slice open. If someone wanted to root through the bin, they could do so without making a mess.

(And if they decided to dump the bin on the street, after once occurrence I'd be sitting on the porch on trash night with a blunderbuss full o' rock-salt...)
I read a recent article [1.] about the state of the antibiotics companies. It was interesting and revealed how over-prescription, fear of over-prescription, and market economics have governed the fate of promising new drugs.

[1.] https://www.nytimes.com/2019/12/25/health/antibiotics-new-re...

I like the idea of bacteriophage therapy and would like to see this field researched more in the U.S. Here is an article about the limits on wider use of bacteriophage therapy: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3821673/
Thsi is how nuclear war with North Korea would unfold (2017)
Cultural differences apply. I remember realising when socialising with Italian students, that arranging a time to meet was a precursor to 60-90 minutes of chat about what we might do, who was going to turn up etc, etc.

I warned a friend who I took on a subsequent visit, that meeting at 7.30pm probably meant eating at 10pm. And in fact I was 15 mins optimistic! This included a visit to someone's house, being invited in for a quick aperitivo, driving 40 mins to restaurant etc...
Ask HN: How would you implement an indoor map system?
Suppose you had the chance to implement it from scratch, frontend + backend. In my case the data is represented as SVG. So my prototype is based on CSS animation/transforms and SVG interactivity. Now, I can pan/zoom, switch between levels(an animation plays that shows them all in perspective), interact with any element with context menus and popup tooltips and whatever. I can click on a room and see the hours and book a spot. It kinda looks like Apple Maps now. The backend systems are based on Haskell and Postgres to store data, because it is part of a larger system, didn't want to extend the tech stack. For some context, the company I work for is transitioning into a new building and my job is to make it as smart as I can, 100% freedom.

What would you do, even without my particular constraint?
You also can't just rename your Dev team DevOps...

Ops people come from a background favoring stability, security, and connecting components.

Developers come from using new and great tools... Writing the connections between their own systems, and following API docs of their partners.

Ops people usually have less CS training, and developers frequently don't understand security aspects of running systems or containers. You should merge the teams, not drop additional responsibility's on one side or the other that are outside their training/experience
Presumably the amount of work that a girl can do in one year. Similar to the "man-hour/month/year" unit.
They also have GPUs.
It was there in the first version, even.

https://guidebookgallery.org/pics/gui/settings/appearance/wi...
That's what my employer also did. In addition to a lot of metrics on which they base performance and awards. In other words easily and frequently gameable made up numbers
Perhaps check [1] for practical tips. (I found this link through the page on gwern.net someone else linked to).

[1] https://gettingstronger.org/2010/11/learning-to-fast/
Is Chess Doomed by Artificial Intelligence?
But package lock is ignored for all users of your npm. Only root package’s lock file has effect. This makes it useless in most cases. It’s even more useless if you think that production apps are built very often as tagged docker images = are reproducible by design.
It's self-evident that humans can grow teeth, since we almost all have them, and many women grow extra sets in their uteruses. The devil is in the details of growing them on demand where desired.
There was a huge (flawed) news story back in 2016 that reported flossing wasn’t worth it and it spread like wildfire because people don’t like to floss. Kind of like how there’s a big “wine/chocolate is good for you” article every couple years.

I’ve worked alongside dentists in and off in a marketing capacity. I’ve also been married to one for 15+ years and I can tell you that every dentist in the country can look in your mouth and knows whether you floss regularly or not by the amount of plaque built up between your teeth. And plaque is bad. The NIH published an article shortly after the one I mentioned above to try and combat the misinformation: https://newsinhealth.nih.gov/2016/11/dont-toss-floss

More on Snopes: https://www.google.com/amp/s/www.snopes.com/news/2016/08/06/...

TL;DR: flossing is poorly executed by most people (much like brushing) and the studies on it are flawed, but you’d be hard pressed to find an oral healthcare pro that would recommend against it, and almost all are for it. And no, there is no “big flossing lobby” pushing it.
> How do you insert a backdoor in an FPGA at the supply chain if you don't know what is the exact logic that is going to be uploaded?

Popularity of certain open core designs might be one way to gain advance knowledge of how an FPGA might be used.

That suggests an interesting option: to scramble the input to an FPGA in such a way that the device will still work but that it is even more unpredictable how its internal connections will be used (otherwise you could take a number of open core designs and arrange for your attack to work with those configurations, which might be detectable in hardware or in the toolchain).

Better yet, scramble the bitstream on every boot (but what would do the scrambling?).
> I use it mostly to remap CTRL to Caps Lock

Heh, I had to do a similar thing with AHK when I vacuumed a key off my laptop.
> Relative wealth buys you status, position, and power in society.

Social cohesion (including political involvement, etc.) buys these things far more effectively than money or any market mechanism. "Relative wealth" is a highly imperfect substitute for high social capital.
Binary Bot
en.wikipedia.org/wiki/Stem_cell
Autohotkey supports this on Windows
Build your own character class inventories
Hire an AI-detective to know the truth.
Did you get to keep the molar?
I can understand that my question was provocative but ignorant?
As a TA I led computer labs for a large intro class for several semesters. One semester I got stuck with the 8am section, which I wasn't terribly excited about (especially since it was winter), but it turned out to be great--the section was smaller than the others because most students also didn't want to be there at 8am, and the students who did sign up for the 8am section were more motivated and self-directing than average.

Having to be on campus ready to teach at 8am still wasn't great.
You should be able to make that case to your prof. You would probably get points for it :)

Some profs are subject matter experts who have no actual understanding of Pedagogy. So they pick up whatever rules someone else tells them to use, and then with time figure out what works and doesn't from feedback (which students are always very hesitant to give).
For those interested in learning more, a colleague of mine wrote a book (of which all proceeds go to charity, I believe): https://www.amazon.com/GANs-Action-learning-Generative-Adver...
> Mapping to uops is a trivial translation that hardly counts as compilation.

That's fair, but now we're just arguing the semantics of what is and isn't compilation :) I understand your criticism though, it's just a 'translator'.
So, is Cisco breaking the law by making rogue de-auth available? Is there then any circumstance where it is acceptable to use?
It's just as easy to press harder "force touch" as it is to right click.

Sorry, but the Windows 95 user interface had the exact same discoverability issue.
You don’t need to wait, the current version is pretty close, if not better.
This is a perspective I have not heard before. Iiuc, you are saying that there is a risk that the AI will come up with plausibly deniable things and just give us the rationalizations.
I think you are underestimating the capabilities of marketers to create products and then selling them. I also don’t think IF will be healthy if people eat whatever they want during non fasting time.
In the US, what law makes it illegal to MitM network traffic using a WiFi evil twin or other technique? I'm genuinely curious because I was under the impression there are generally no such statutes and that the only thing that would be illegal is if the MitM used found credentials.
Was he so talented or has the bar for CS master thesis lowered significantly since then?
Interesting, in my last company the team themselves thought DevOps was not a role, but more a responsibility that should be shared among all devs and they renamed themselves "Production Engineering".

They said it was admittedly not the best, clearest of the names, but the important thing is that DevOps should be shared, not owned. As a dev, it made a lot of sense to me
I think you have no argument to claim that homeless people actually travel across the country to reach California. That's why the quick goodbye.
You aren't wrong that x86 is terrible. But it's only terrible because it has survived so long and offered so much value through so many periods of change. I believe that any architecture that lives long enough will become "terrible".

It's not a bug. It's the scar tissue of hard won success. Long live x86!
Topology and complex analysis for the unsuspecting game dev
Dentist here. The main take away from the study is that if you’re not flossing the right way, don’t bother because it won’t do any good. So floss the right way.
Problem with implants is that they cause compressive stress to the bone, which causes bone to deteriorate.
Teeth are held by
https://en.wikipedia.org/wiki/Sharpey%27s_fibres. This converts the forces acting on the tooth to
tensile stress on the bone, which causes it to grow more dense.
Randomly pick samples every now and then, in randomized intervals and test them?
Ultimately, it's just a personal belief that all knowledge should be free as in freedom. SoloKey Hacker Edition in particular lets you run custom firmware, so you can at least be confident in the software side of things, and build upon it.

Open hardware has the benefit of being able to build it yourself, which is the only completely secure option. The downside is, indeed, the ability to easily create malicious clones, and the fact that you simply won't be able to build it yourself for any remotely modern hardware. So yeah, there's really no security benefit to it in terms of hardware.

Proprietary hardware has the upside of needing reverse-engineering to create a malicious clone / part, and the transparent design helps you make sure that they can't do a sloppy job at it.

It's a shame that tradeoffs have to be made once technology reaches a certain level of complexity, but alas.