teagoat

Some of scottevest's can apparently fit a laptop in the pocket: https://www.reddit.com/r/onebag/comments/6w2p0o/scottevest_o...

You can get push notifications to your phone from a website through the browser, even when that website isn't still open.

But presumably developers have more control over app notification look & feel vs browser notifications?

Are you suggesting moving operations to the US with this comment? It's the US adding all the uncertainty and instability to this environment. Having your operation based in the US makes this worse. You still have tariffs being applied to most of the components you need to assemble your product. You're now subject to more laws and rules changing overnight without the ability to plan ahead for them. If you're a company selling this product worldwide, you now have 100% of your operations subject to uncertainty vs. say 30% that was destined for the US market to begin with.

Is increased glymphatic clearance good or bad?

I've been playing daily and really enjoying. I take it the play store version is now gone? I would gladly pay a few dollars for a curated list of puzzles.

you could just ask folks to mail it in (and pay for the privilege)

I use a plate.

You keep a credit card on file in your Tesla account. The supercharger recognizes your car and it automatically charges your card.

huh - TIL: https://www.worldwidewords.org/qa/qa-com3.htm

TL;DR: Compleat and Complete were originally different spellings for the same word. In UK, compleat is still just an archaic spelling. In USA, compleat is used as an adjective to refer specifically to having all the necessary elements or skills.

To sum up the article, they claim:

  * Somebody (probably America) sabotaged the Nordstream 2 gas pipeline.
  * That's related to the war in Ukraine because? wars are always about resources?
  * The EU doesn't have any options to replace the gas that needs to come from Russia.
  * That's going to drive all EU citizens back to an agrarian lifestyle.
  * And also, the EU is too weak of an institution to defend its citizens.

It reeks of conspiracy theory to me. EU citizens should hate the US for driving them into poverty and should embrace Russia invading their neighbor.

One of the first results that comes up for me when I search "Nordstream 2" is the Brooking institute discussing similar conspiracy theories spreading among podcasters in the US, parroting the Kremlin: https://www.brookings.edu/techstream/u-s-podcasters-spread-k...

I would hope so. I don't think that place of birth, or ability to get a visa should determine salary.

However, personal experience and friendship group makes me think that US tech salaries have only accelerated over the last couple of years. I went looking for some data to back up the idea to tech salaries have accelerated, but https://spectrum.ieee.org/engineer-salary was the best I found, and was less dramatic than I expected.

Personal Capital actively prompt to try to set up a meeting pretty much every time you log in. They're hoping that you'll sign up for some active management stuff, or do they have a robo-investing option (I can't remember.)

At a certain net-worth, they'll start calling you on a regular basis trying to get you to do the same.

It's all pretty annoying. Perhaps do that, and after a 6 months of so of calls and prompts, then offer to stop calling / prompting for $10 a month.

Would he be allowed? Is he a "natural born citizen"?

What does postal voting have to do with that? they could also force you to film yourself at a polling station...

I do the same. I just have one saved. No one has ever complained, even when it's blatantly obvious that I didn't sign it by hand.

I figure even if they do complain, it doesn't matter. Its not like I don't have permission to do what I want with my own signature. The worst might be that they come back and say "sign it properly please" and then I have to go through the effort of printing it out and scanning it back in.

"... And then it burnt down" was probably the funniest thing I heard touring the "thousand" year old castles in Japan. Being completely levelled by a fire seemed to happen about once every 200 years.

Source?

I've found that typically the easiest and very close to the cheapest way to get foreign cash is to simply withdraw it from an ATM in the destination country. Always make sure that they're charging your bank in the local currency to avoid poor exchange rates. You'll usually pay a couple bucks at the ATM and a couple more at your bank (unless you use somebody like Charles Schwab), but even with a $5 surcharge, the market rate used usually beats out the rate you can get at a money changer or from your bank before you travel.

From previous reading of Linus rants, it sounds like they're pretty particular about keeping source code and git history clean. Why didn't they go back and reverse the new root created by the README.md repo?

Usually as easy as trying the default master password

https://gizmodo.com/5837561/can-000000-secretly-open-your-ho...

https://www.independent.co.uk/travel/news-and-advice/hotel-r...

Play Cities: Skylines instead. It's what I always wanted SimCity to be.

Ada is the name of a character in Fallout 4: http://fallout.wikia.com/wiki/Ada

It is a wonderful, thoughtful project, but it's an art project.

While that's great, I don't come to Hacker News for the latest interesting art project.

I think like many people that clicked the link and scrolled through the images, we made the assumption that these were put together using some algorithm that mined Google's 'visually similar' search and then somehow found the best results in order to create a set of images that 'flowed'.

It's a little disappointing to learn otherwise, but it's now kicked off a train of thought about how I might automate something similar. :-)

I'll start by saying that I approve of security testing networks and the telco industry could do with more of it. I agree that security can be lax sometimes.

Sure, Telco SS7 networks and the equipment within them are just like any other in that there can be bugs that cause it to go down.

However, there are much higher barriers for entry to get an SS7 network link (c.f. a connection to the internet) and you're not going to keep it for very long if all you're doing is sending out SS7 messages crashing HLRs left, right and center.

I'm assuming that the packet he's talking about is a fuzzing attack and only affects a particular vendor's HLR and may have even been fixed by now. So if everyone in the world used the same vendor, all used the same software version and you had unfettered access to all of them, then yes, you could crash all of the HLRs in the world.

And really?... "World's HLR". Well I'm glad someone is nice enough to host a HLR for the world. And apparently crashing the "World's HLR" will stop one country's communication. Oh noes! Which one is it?! I hope it's not mine! And I'd be interested to see how crashing a HLR stops my landline and my internet connection from functioning.

It's not the end of the world though. You're browsing on your android phone and suddenly it dials an unexpected number and you can see that it starts 900XXXXXXX or 976XXXXXXX. Most people are going to hang up pretty quickly. Sure, you might be out of pocket for up to $10 (I don't actually know how much mobile carrier charge for the connection charge), but it's not the same as losing all your data.

A more common attack vector to make money on compromised accounts would be setting up a call forward to an international number and then dialing the subscribers phone number. Illegal low cost calling cards often steal service by doing this. If there was a way to also retrieve the user's phone number, I can imagine a system where you dial the calling card company, input your code and the number you want to dial.... It tells you that it's trying to connect you and that it may take a couple of minutes... It snares the next person caught out on the website, sets their call forward to the number you want to dial, then dials that subscriber for you and connects. So then it's charging the wireless subscriber for your international call, and even if they then disable the call forward on their account, until you hang up, it's still charging them for the call forward.

When you say "Imagine if comments were displayed like this instead", you realise that you can simply modify the colour scheme of your editor to make it so, right?

And I still don't think that solves your "problem". Even if they appear brighter colours, then it's still very easy to phase them out so that you're just focused on the code. It's only when the comment colours begin to hurt your eyes that I find it distracting.

I was interested in how they were detecting monitors and whether they were just picking out any anomalous peers (say ones that don't accept connections). I was also wondering if the paper was going to be obviously flawed and funded by some copyright agency with the aim of articles such as the one we just read being created. I still wouldn't rule it out, but I feel that the methodology was sound.

To summarize for others indicators were:

"""

1. The proportion of a subnet that has been seen in BitTorrent swarms. Monitoring agencies may use a large proportion of their subnet for monitoring.

2. The length of time a peer spends in a swarm. Monitors may spend more time in the swarm than regular file-sharers.

3. The number of different (IP, port, infohash) combinations per IP address. Monitoring agencies may operate many clients from a single IP address.

4. Whether a peer reported by a tracker accepts incoming connections. Monitors may block all incoming connection attempts. (((This was discarded as an unreliable indicator)))

5. The number of swarms in which IP addresses from a particular subnet appear. Monitoring agencies may monitor many torrents from their subnet.

6. The number of times the same (IP, port) pair is observed concurrently in different swarms.

... we found 1,139 IP addresses that were in the top first percentile for all four features (((1,2,3 and 5))) IP addresses assigned to a company named Checktor [3], which offers commercial BitTorrent monitoring services, and 16 addresses assigned to a medium-sized computer security consultancy company that does not publicly acknowledge monitoring BitTorrent. Another subnet, which we saw in over 500 swarms, belongs to a company that advertises itself as providing “intellectual property advice” ... We also found two subnets assigned to hosting companies ... We speculate that copyright enforcement companies are using these hosting companies as a front to disguise their identities. We also identified a number of IP addresses allocated to large ISPs, such as Vodafone, Etisalat and SingNet. ... This feature (((6))) found IP addresses assigned to Peer Media Technologies [16] (a well-known copyright enforcement agency) monitoring seven Harry Potter ebook and movie torrents, and the INRIA research institution [10], which had been overlooked by features 1–5 because so few torrents were being monitored, and because a very small proportion of INRIA’s subnet was being used for monitoring """

I didn't read too much further into their methodology for detecting "direct monitoring" other than to see a pretty graphic showing peer lying about their download completion.