skysight-inc/HackerNews huggingface dataset:
But if these companies hold patents that are being infringed by AV1 they don't have to join AOM they could also… sue them.

This whole thing seems to be a breeding ground for submarine patents, where in the end nobody has an actual applicable patent to show but the thread of pulling one out of the hat is there to make things worse.
You could argue that Windows is the less secure default here.
Some additional context: when the system boots, the secure boot key that was used is recorded into PCR 7[1] in the TPM. This means that booting an OS signed with the Windows signing key will result in a different PCR 7 value to booting an OS signed with the 3rd party signing key. If you care about which signing key was used, you can provide a secret to the TPM and ask the TPM to only release (or make use of) that secret if PCR 7 has a specific value. This means it's possible to configure an OS such that it will only be able to access its secrets if PCR 7 has the expected value. An attacker who intercepted the laptop before it was delivered to its owner could obviously subvert this by sealing the secret to the incorrect PCR 7 value, but such an attacker could also just reconfigure the firmware to trust the 3rd party CA before the owner received it. There isn't a clear description of what threat model this design is intended to protect against, or why alternative approaches weren't used to achieve the same goal.

[1] Modern TPMs have 24 PCRs that can be used to measure different parts of the boot process, but the general expectation is that only 0-7 will be used by the firmware. On UEFI systems, PCR 7 contains information about what the platform's secure boot policy is, and which keys were used to verify the boot process. Booting something signed with a different key will result in PCR 7 having a different value, which is something that can be detected by tying encryption keys to specific PCR values.
I recalled this site: https://fixsleep.link/ just a bunch of advices based on peer-reviewed studies for this exact purpose, no buttons, nu subscriptions, just simple design and 17 advices
The truck seems to be white again…
This current scenario is very likely Device Guard that limits the CA's that may be used, that it's not Secure Boot with its defaults.

So the security benefit would be avoiding 3rd party and signed, but potentially vulnerable "bootloaders"
There could be good reasons to switch from Thinkpad to Framework, but I think this 'issue' isn't one.

It's a setting that can easily be turned off in the BIOS UI. One could argue that this shouldn't be the default (and I would agree), but in practice this is a none issue.
EU citizen here. I trust the EU, my elected representatives, more than the adtech sleazebags and the patent cartels. I prefer to vote with my votes than with my wallet.

There's a long list of consumer-friendly EU regulations that I like. I'm also very supportive of EU privacy protections. I think the only problem with them is that they're not aggressive enough.
It's definitely harder, but not impossible. The Realtek signing driver was stolen multiple times already, and I personally know that certificate management practices (in Asia in general) is abysmal.
Feels steep for a CBT app where I gotta do all the work!

I think you feel that way because you don't need the app enough. $188 to fix sleep when you're not getting enough is a bargain.
So, what exactly is the news here? This seems to have been a default for years now, hasn't it?

Disabling UEFI Secure Boot has been step 1 for installing Linux for as long as UEFI had existed, hasn't it?

What exactly is the problem here? I remember doing the same when installing Ubuntu on an ASUS laptop like 10 years ago.

The linked article is dumb, doesn't have any technical details, but has a stupid sensational headline.
I vaguely recall reading a story (probably 15-20-ish years ago) about someone doing exactly that with ICQ (or a similar service - memory is a bit hazy on the details!).

Create a fake profile of an attractive young lady who is interested in chatting to strangers, wait for inbound calls, pair them up with each other & record the resulting audio.

IIRC - the funniest one was a pairing where one participant wasn't phased by the situation they found themselves in, and still wanted the other participant to talk dirty to them...
This decoupling is important, true. But not for all applications. Especially applications you'll open at multiple machines at the same time (like password managers), syncing could become an issue, or at least tedious, since file-based syncing is (afaik) always all-or-nothing with single files. Sure, you could then switch to use multiple files, but then portability suffers.
The switch doesn't disable secure boot, it merely allows files signed using the Microsoft 3rd Party UEFI CA to boot.

(Context: I wrote a significant portion of the infrastructure used to support Linux booting on systems with UEFI Secure Boot)
I used to have really bad insomnia as well, and completely agree with this.

Also:

* Get up early (like 6AM early)

* Avoid stimulants (caffeine etc) after midday (I used to drink tea/coffee in the evening, and then wonder why I couldn't sleep)

* Get a dog (helps with the getting up early part, also makes you do exercise)

* Get technology out of your bedroom (a lamp is ok, but get rid of the TV, leave your phone/tablet/laptop in another room while you sleep)

It really isn't rocket science.
The safety of nuclear assumes no nuclear accidents.

Also, at the low deaths/TWh of renewables and nuclear w.o. accidents, the "cost of deaths" (at the $9M/statistical life that the NRC uses) is swamped by the direct cost of the produced energy. So renewables continue to beat new nuclear on the cost front, w. cost of deaths added in.
You need to rewrite Hacker News in Rust to prevent these sorts of things!
I'm a Linux fanboy. I don't mind having to change a thing in bios once. I care more about the standby sleep instead of S3 and other shenanigans messing my daily experience.
Interestingly, many Chinese believe that the two currencies use different symbols, with one of them using one crossbar on the Y and the other using two.

I am not aware of any such distinction being drawn in reality, though.
How are ordinary everyday users protected by this?
You encapsulate the waste so it survives any accident. This adds some weight, but not an enormous amount of weight.
It depends on what you are talking about. If you are talking about a battery car, then it is better to use a number that makes sense for the end user, and number of charge cycle is not an easy one. If you recharge from 70% to 90% every day, is that a cycle, is that 1/5th of a cycle?

The main problem is the number of full capacity cycling a battery cell can do can change widely based in how it is used. So it depends on how it is integrated into a car and how the car is being used. A typical Li-Ion cell will last a few hundred cycles if cycled completely at a high rate without proper thermal control. But this number can easily be multiplied by 10 with proper thermal management, not charging it to max voltage and doing shallower cycling. If you want to give a number for a final product, you are bound to make assumptions on how it will be used. And at this point you just have an equivalence between distance driven and cycling count.

Also, age has less impact than cycling count in the context of a properly designed battery pack. The two main factors for battery degradation are time spent at high temperature and high state of charge, and cycling count (with speed and depth being the key elements). EV manufacturers are keeping a buffer for that purpose and their batteries do not spend a lot of time at high state of charge where the chemical degradation is more effective.
Those that would like to eliminate poverty aren’t those making decisions.

If laws of economy were fixed, how come they change over time?
Nope. Hitting Enter or F1 brings you into Windows diagnostics rather than BIOS, at least on the Thinkpad X13 Gen 2 Ryzen Pro subnotebook w/ useless Windows installed a customer sent me for a project, and that is now contributing to a growing number of 3 bricked (brand-new!) latitude/precision and thinkpad notebook trash I'm accumulating at home. With the current state of non-existant quality in PC notebook hardware, I'm not going to buy anything except Apple hardware. Right now I'm back to using a 2016 XPS, with my 2019 Thinkpad collecting dust (and blocking its crap trackpad due to it); it's not that there are news regarding x64 performance since over ten years anyway.
A company designing potential catastrophes, without checking the most basic facts about the area and with no respect for all the other activities? Planning to build a nuclear plant in what is probably the most active seismic area on the Iberian peninsula (Last earthquakes registered in the area: 29 and 30 March 2022).

Yes. Not in my backyard.

Because sometimes, the plan is simply idiot and sometimes NIMBY is the correct choice.

We are doing really well forty years later with a clean ocean, a strong touristic sector (developed later, in the last two decades, so one of the last really wild areas remaining in the Mediterranean) and we have still a strong greenhouse agriculture sector. We don't need their pennies.

I hope this people had been be fired immediately after proposing the plan.
The grid doesn't have to be 100% green for it to be better than everyone burning gas in their cars. An electric car becomes greener as the grid becomes greener, a gas car is just as dirty today as it was last year.
Yeah, I think Microsoft should get some slack here for selling Microsoft hardware that only runs Microsoft software.

If people want a general purpose PC that runs OSs other than Microsoft's, they should buy their hardware from a 3rd-party company that isn't Microsoft, who explicitly make a point of supporting other OSs.

/s
Right, irony and sarcasm are universal (afaik). But I had in mind that americans tend to use e.g. “so bad” in a sense of “so good”, which is not so ubiquitous. (I’m only familiar with English, Russian, Deutsch and Tatar really, so my thought is limited to these four.)
The problem seems to be “but whose patents are deemed essential to (its) technical specifications” phrase.

I read that as an investigation on this (real or imaginary; that’s what the investigation is about) stream of events:

- AOM members created a standard for which they, together, thought owned all patents

- they found out that isn’t true. Other parties hold patent(s) that are essential for the standard.

- they strong-arm the holder(s) of those patent(s) to join AOM and, with it, license their patent royalty-free to the others in the group.

Whether it happened I wouldn’t know, but step 3 should, IMO, be illegal. Royalty-free cross licensing is more beneficial for those who have the capital to build millions of chips implementing the standard than for smaller players. It’s like a few elephants forcing a mouse to have dinner together and splitting the bill.
I know of at least one country that has had 'no face coverings & neutral expression' for ID photos for many many years, before computer facial recognition was really practical, possible or existed at all.
When my x230 finally gives up I’m thinking Pinebook Pro looks pretty good.
That's their own and their parents fault though.
Should gay people work with children?
In the heat of the moment, I forgot. Sorry!
From 2018: <https://news.ycombinator.com/item?id=16076041>

> We’re recently running two machines (master and standby) at M5 Hosting. All of HN runs on a single box, nothing exotic:
CPU: Intel(R) Xeon(R) CPU E5-2637 v4 @ 3.50GHz (3500.07-MHz K8-class CPU)
FreeBSD/SMP: 2 package(s) x 4 core(s) x 2 hardware threads
Mirrored SSDs for data, mirrored magnetic for logs (UFS)
We get around 4M requests a day.
The salary difference between US and EU makes me cringe.
Funny how other countries manage to protect their trade without invading Middle East.
Fast reactors are also in principle subject to Chernobyl-like criticality accidents (only worse) in case of meltdowns.
Your X13 is not the same as a Z13.
This is why we need more open hardware.
Three.js on HN? Interesting thought.
The 3rd party UEFI CA is a compromise in Secure Boot. MSFT runs the CA but they don't sign binaries, just issue certificates to anyone who asks nicely.

Fedora, Ubuntu, and rEFInd were some of the first to get their own certs.

So it's more "They don't trust who microsoft trusts"
Imagine a Beowulf cluster of those!!111!!eleven!!1!
Plural: Multi-cloud deployments for Kubernetes in minutes
It's an odd wreck, given that the car had to pull off of the interstate and barrel through a rest stop area then crash into the back of a semi trailer parked in the separate parking area for trucks only. It's hard to even do this accidentally. And the fact the wreck took place at 2PM means it's unlikely the driver was tired.
Europe is full of historic walkable towns, mostly the smaller / less central ones because capitals and important cities have been heavily changed aftere cars took over. But many still have at least a walkable central part. Last weekend I spent in Banska Stiavnica, a former important mining town in central Slovakia, and that is an example of such a town, as would be the centre of Cordoba in Spain, which was very important and then ceased to be, and so on. So the issue is, I think, more of marketing: the popular walkable destinations are overcrowded, but there are many like it, maybe without all those palaces but still beautiful and much much more quiet.
No contest, but if you are actually a person who is paranoid about this but still requires to have access to Windows software (in an enterprise setting), you would actually check the UEFI and reinstall Windows. If you're actually being attacked by state-sponsored actors the risk management is so different that I don't think it can be discussed here fairly (mainly because it's a case-by-case matter).
I am unsure if you've read my comment carefully, but the expectation was a $54B deficit. What they got was a $72B surplus.

> A single doctor at a single hospital developed this theory and then tested it. There is a foundation which is partly funded by the state, but they just promulgate the ideas... it's up to the hospitals to do the mortality review and apply what they've learned there. There's really no fingerprint of recent government efficiency to be found here.

I don't understand. Can you please provide citations for what you're trying to say?

> CMQCC was founded in 2006 at Stanford University School of Medicine together with the State of California in response to rising maternal mortality and morbidity rates. Since CMQCC’s inception, California has seen maternal mortality decline by 65 percent between 2006 to 2016, while the national maternal mortality rate continued to rise.

https://www.cmqcc.org/who-we-are

If you read through the links, you'll see that the Californian Government has made substantial investments in maternal mortality and perinatal care which has resulted in this staggering decline. The resources of the state were mobilized with the help of the best evidence backed medicine to save lives. That's a great outcome!

> What connection is there between government efficiency and life span of citizens? This is a minefield of variables.

It's not about efficiency as much as it is about policy. No large organization is efficient; rather they ought to be measured by their effectiveness.

Investment in hospitals, clinics and public health. Reductions in environmental emissions (air pollution dramatically reduces lifespans). Expansion of coverage programs like medicaid via systems like medi-cal; https://www.medi-cal.ca.gov/ Ensuring access to clean drinking water, adequate sanitation - https://www.npr.org/sections/health-shots/2020/11/23/9379451... . Preventing dumping of toxic waste. Public vaccination programs. And the many, many other levers governments can pull to ensure that people live longer and are healthier.

> Aren't minimum wages significantly different between California and Texas? Wasn't this phased in around that time? How much of this increase is due to this?

In the comment, the study compares California and Texas between 2000 to 2020.

I am not a specialist on the rest, and do not have the data on hand, but just a note, American infrastructure is crumbling in general due to a receding of the state from infrastructure investments.

Could you please provide a citation and explanation for your Idaho comment?
There are thousands of ways how to sell it to the kid, obviously the driest factual ones won't get much sympathy.

But yes kids are hard, I would love to see comparison of 19th century 10-kid family and now... I feel like we are doing something wrong to have raising kids well so hard, but maybe its just that circumstances and expectations have changed completely
Oh well, de-centralizing by centralizing. Catch-22.
He owns shares in those companies and thinks antitrust action is actively harmful for his pocketbook. Which it legitimately might be.

He didn't say anything caring about other people's privacy or business competitiveness or other such lofty ideals.
Is there any evidence that doctors in other countries have a lower rate of diagnostic errors?
Depends how hard it is to change the bios setting I suppose.

At this rate it prevents someone from booting in a 'malicious' OS quickly.
I’d argue there is a difference between what side of the political spectrum California is on and whether or not they are good at governing. You mention that we don’t have good public transit but California is famous for massively expensive infrastructure projects. It seems it’s less of a ideological issue and more of a competency one.

SF spends more on homelessness than any other municipality, but still has rampant homelessness.

SF’s muni is one of the worst in the country in terms of reliability and speed but we have a muni budget that is equal to London per capita.

Most complaints in California isn’t on its ideology, but rather its incompetence at executing its ideology
Poverty is a definitional thing, it does not refer to actual living conditions. Poverty in California and poverty in, say, your average red state are very different. Our people in poverty have access to a wide range of public benefits. Our poverty line is quite high which means people qualify for public benefits at higher levels of income. Living in California in poverty is far more tolerable than living elsewhere in poverty. Likewise how being in poverty in the USA is nothing like being in poverty in India or even China.
Hijacking this comment to share another alternative: the app Balance (https://www.balanceapp.com/) has really great sleep meditation, a bit similar to Yoga Nidra. They're currently running a promo where you can choose how much you pay for your first year (incl. a free option). I've tried a lot of Youtube/Spotify before and Balance works better for me. Plus doesn't come with the risk of being blasted awake by the next video/song/ad when I forget to set a sleep timer.

They also have excellent meditation for naps, where you can set how long you want to nap before they wake you up.
> The article never mentions Linux on the desktop.

The comment you reply to never claimed that it did.

Why not reflect on the content of the comment and be a part of the discussion instead of .. this?
I wonder if it would be possible to pass through an era appropriate graphics card to QEMU instead?

If one can dump the Mac VBIOS for an old PCI Radeon card and attach it to a supported motherboard, would it be possible to get the machine to use that GPU? Obviously the host system can't touch it since it's providing PPC code, but if it's all being handled inside QEMU itself it seems plausible enough
From TFA:

> [...] the firmware defaults to not trusting bootloaders or drivers signed with the Microsoft 3rd Party UEFI CA key.

The whole point of secure boot was that there is a known set of "good actors" who are trusted by default, so that you can boot 1. Windows 2. common Linux distros - without any fuss, and 3. Any other system - with a few extra steps to prove you know what you're doing.

They've de-ranked the set #2 and threw it in the bag with #3, which doesn't really do much at all to improve security, but it does inconvenience and disincentivise the users from using a Linux distro on this hardware.

It's most likely an honest mistake, a sign of incompetence, or a dick move. Write them an angry letter and carry on.
I don't think I understand what it means to work pseudonymously and esp. to hire/get hired that way. How does a company check references, past work history, diplomas, anything really, if the candidate won't share their name?

The idea is super interesting, though, but a detailed explanation on the website would help.
Another commenter claims that the car is a 2015 model. If this is correct that car doesn't have FSD. 2015 Model S is AutoPilot 1.5 by MobilEye. I have one and it is very good at what it does although it cannot 'see' stationary objects very well.

But it cannot autonomously change lanes or turn off the highway into the rest area (Navigate on Autopilot only applies to later versions of Autopilot).

So even if Autosteer was engaged there was almost certainly a human error or miscalculation in the chain of events. Perhaps the driver had a heart attack and pressed the accelerator.

There is far too little information available for us on the outside to make confident pronouncements about what actually happened and who, if anyone, might be at fault.
I believe if you are running a ThinkPad designed for Linux, you get a great Linux experience. I've found great Linux support on older ones that only target Windows. What do you think is missing?
There's a separate option for each.
Whether AV1 is patent free isn’t clear cut, it seems:

FTA: “…AOM and its members may be imposing licensing terms (mandatory royalty-free cross licensing) on innovators that were not a part of AOM at the time of the creation of the AV1 technical, but whose patents are deemed essential to (its) technical specifications," the paper said.”
I think there are three levels of understanding this topic:

1) Repeat yourself everywhere because you're a noob and don't know how to DRY

2) DRY everything because it's easier to maintain, learn all sorts of clever tricks to make DRY work

3) Realise that sometimes it's easier to DRY and sometimes it's easier to write repetitive code.

The problem is that if someone at level 3 (like the author) talks to someone at level 2 then the level 2 developer thinks that they're talking to a level 1.
And here we are discussing individual pedestrians' rights to safety on the roads, no?
If you don't mind me asking, where did you move to? I sometimes think the same thing in the time since I moved to Czech Republic. It's quite far from a utopia here but I feel like the most visible problems at least can be overcome. To me the UK feels subtly broken in an unfixable way - the main parties seem to believe that the problems are bad, but the causes are actually good.
Worse than that. If they are really decentralized, how come they can ever destroy somebody else's coins?
> they risk having Microsoft screw them over

How?
For me on both Android mobile and desktop Chrome, the effect is there but rather subtle. On desktop it was so subtle that I thought it wasn't working, at first. Perhaps screen brightness affects it. It is an extremely bright day now, here.
In my opinion, this news is exaggerated.

The 3rd party UEFI CA key is implemented by the Shim, which is an attack vector. To be certified by default for the shim, the workflow is a github issue [0]. This is not necessarily bad, but a vector for social-engineering and more.

If an attacker is signed by the shim, he can execute trusted code on most machines without problems.

IMO it is better to leave this choice to the user to take this risk and enable the shim. Who installs linux should make this choice consciously

[0]: https://github.com/rhboot/shim-review
It'a a photo of Uffe Isolotto's We Walked the Earth, at the Danish pavillion.