I recently switched operating systems on my phone and lost some of the automated workflows I had during the transition. While I've rebuilt some of it, but it sometimes feels like I'm missing something or that I could do more, I just don't know what exactly. I'd like to hear from others here and see if they can inspire me to implement what works for them. I'm using an android phone with automate and here's the workflows that I got:

• When plugging in the phone, set it to do not disturb and enable Bluetooth. This is for when I go to sleep so that I don't get woken up by notifications and I can listen to podcasts on my headband.
• If at work (Based on cell towers, not GPS) set phone to vibrate, when leaving it set it to ring. I actually lost this one but haven't rebuilt it since I've not been to the office in a while.
• Learn location. For a set time, grabs the cell towers around and stores them in a JSON file.

What kind of automation have you implemented on your phone?

Input wanted for an article.

Let's say that your company is considering the purchase of an expensive new application to help in the company's software development. The demo looks great, and the feature list makes it sound perfect for your needs. So your Management arranges for a proof of concept license to find out if the software is worth the hefty investment. The boss comes to you to ask you to be in charge of the PoC project.

I'm aiming to write an article to help developers, devops, and testers determine if a given vendor's application meets the company's needs. The only assumption I'm making is that the software is expensive; if it's cheap, the easy answer is, "Buy a copy for a small team and see what they think." And I'm thinking in terms of development software rather than enterprise tools (e.g. cloud-based backup) though I suspect many of the practices are similar.

Aside: Note that this project is beyond "Decide if we need such a thing." In this scenario, everyone agrees that purchasing a tool is a good idea, and they agree on the baseline requirements. The issue is whether this is the right software for the job.

So, how do you go about it? I'm sure that it's more than "Get a copy and poke at it randomly." How did (or would) you go about designing a PoC project? If you've been involved in such a project in the past (particularly if the purchase wasn't ideal), what advice could someone have given you to help you make a better choice? I want to create a useful guide that applies to any "enterprise-class" purchase.

For example: Do you recommend that the PoC period be based on time (N months) or workload (N transactions)? How do you decide who should be on the PoC team? What's involved in putting together a comprehensive list of requirements (e.g. integrates with OurFavoredDatabase, meets performance goals of X), creating a test suite that exercises what the software dev product does, and evaluating the results? ...and what am I not thinking of, that I should?

Grandma is understimulated in assisted living, and while Mom is looking into ways to either bunk with her, or drag her back to our place, I'm exploring other options. Her apartment does have wireless internet, so we could set up some sort of telepresence or video calling device, but even something as simple as a Relay or a KC2 isn't great, because it loses power, and needs to be explained to her.

I'm thinking that we might have better luck with a Tablet or a PC solution, and I do have a Kindle Fire (5th Gen?) and an off brand Windows 10 tablet around, and I am open to a Pi Project or speciality devices, but it has to be simple enough to plug and play, and the dream would be if it could start a video chat without the receiver having to pick up, or at least as simple as a nurse being able to come in and start a call. Any suggestions?

I've been using Textra for years, but there's some new protocol whose name I don't remember that Textra isn't compatible with. This results in some messages (primarily from other LG phones to my LG phone) going only to the LG Messaging app and not Textra, which is annoying. Any recommendations?

Update 12/03/2020: this is not a telemetry, but a kill switch from Colombian carrier - confirmed by HMD. Kill switch will be removed from most devices soon. I updated an article and posted it here.

Original article below:

I have recently purchased Nokia 6.2 and wanted to check if it sends any data somewhere, considering what happened with previous models

First, I noticed approx. daily connection to dapi.hmdglobal.net
This is a Google Cloud that could belong to a company behind Nokia - HMD Global.
But the Privacy policy in my phone only speaks of "activation" process, not of daily diagnostics data.
So I used developer tools to remove the following packages (warning: this may break your device, I am not responsible for any consequences)

    com.hmdglobal.enterprise.api
    com.qualcomm.qti.qms.service.telemetry
    com.qualcomm.qti.qmmi
    com.qualcomm.qti.qdma

Before removing them, I used APK Extractor to save APK files just in case it breaks my phone and I may be able to attempt reinstall. This part comes into play later.
The first was my blind guess about what exactly connects to dapi.hmdglobal.net
The next 3 I found mentioned in various forums for other devices as "safe to remove", however, I have not seen any telemetry sent to Qualcomm or anywhere else, except what I mention next.

After removing these packages, I noticed that there are some remaining unknown connections my device attempts several times per day.
They are all done in same order, one right after the other:

    www.pppefa.com
    www.ppmxfa.com
    www.forcis.claro.com.co

After some investigation, I found that the first two domains point to some Microsoft Cloud servers rented in US.
The last one most probably belongs to Colombian telecom company, and this is where it becomes interesting.
After many hours of fruitless removing of different apps in my attempt so stop it, I suddenly remembered something.
When I used APK Extractor previously, there was an empty first line with some generic icon where an app icon should have been.
I went there again and indeed, this is a hidden system app, that you can not see in the list of all apps in Settings, normally. But it turns out, you can see it in Data usage (after it successfully sends some data using your mobile connection).
The name of the app is deliberately left empty to hide it, but if you click it in Data usage, you can see that this app is co.sitic.pp , which can receive SMS, can make calls, and has access to internet.
As with all Android apps, you can reverse read the name to guess what it is.
Turns out, http://sitic.com.co is a Colombian company, who "are leaders in innovation and create mobile and WEB applications for new products and services." (credit goes to Google Translate)

screenshot of the app with permissions

In other words, this app is a 3rd party telemetry, hidden from user, not mentioned in the Privacy policy, that has access to SMS.
This looks very bad and I really hope this is a malware injected by factory and not something knowingly distributed by Nokia, HMD Global, the EU company.

After removing the co.sitic.pp app, requests to Microsoft Cloud and Columbia stopped.
I was later pointed to a German forum, where (I believe) it was first found in a Nokia 7.2 device.
So, we have it confirmed in 2 devices in 2 different countries.

On German forum they contacted Nokia (I assume support) but got tired exchanging emails for weeks without any result.
On 02/03/2020 I have requested an official reply from Nokia and HMD Global via press.services@nokia.com and press@hmdglobal.com and waiting for reply.
Since I am not a journalist, I may never get one.

TLDR: 3rd party telemetry is found in Nokia 6.2 and 7.2 devices, is hidden from user, has access to SMS, and sends data to Microsoft Cloud in US and a server in Columbia.
It is probably supplied by SITIC S.A.S., a Colombian company, and looks more like a malware than a telemetry.

Developing topic, don't see any news sources on it yet. Lots of pro-CCP troll issues being opened, as well as people starting to open issues going against the original trolls. (e.g. pro-HK protester messages)

Hacker News discussion

Notepad++ v7.8.1 : Free Uyghur announcement

Notepad++ GitHub issues page

Sample issues

I made a separate post about the hand-tracking specifically because I think it's especially cool, but Oculus is announcing a lot of things today. Here's a list of some stuff so far, and I'll probably add some more if there are other details/articles/videos.

There's an official overall summary post here: Oculus Connect 6: Introducing Hand Tracking on Oculus Quest, Facebook Horizon, and More

Official individual blog posts (mostly with embedded videos):

• Introducing Hand Tracking on Oculus Quest—Bringing Your Real Hands into VR
• Introducing ‘Facebook Horizon,’ a New Social VR World, Coming to Oculus Quest and the Rift Platform in 2020
• Oculus Quest @ OC6: Introducing Hand Tracking, Oculus Link, Passthrough+ on Quest, and More
• Introducing Oculus Media Studio and the New and Improved Oculus TV, Your One-Stop Shops for Content Consumption and Distribution on Oculus Quest and Oculus Go
• A Closer Look at the New Oculus for Business, Launching in November
• Time to Play @ OC6: New and Upcoming Games Recap
• Learn the Ways of the Force in ‘Vader Immortal: A Star Wars VR Series - Episode II,’ Available Today on Oculus Quest and the Rift Platform
• Respawn Entertainment Reveals the Future of VR with ‘Medal of Honor: Above and Beyond’—Coming Soon to the Rift Platform
• Half Dome Updates: FRL Explores More Comfortable, Compact VR Prototypes for Work

Other posts:

• Ars Technica - Oculus announces plans to build augmented reality glasses
• Gamasutra interview - Respawn's first VR game is Medal of Honor: Above and Beyond

Occasionally, I lose control of my account on StackExchange. I don't visit for a few months, I get logged out by some process during that time, and, when I try to log in, it tells me my password is incorrect.

When I go through the "forgot password" process, get the recovery email, and reset my password... I then get told I'm about to create a new account on StackExchange. I actually did that once, many years ago, and trying to figure out how to combine the accounts was messy.

It's happened again.

How do I reset my password without creating a new account? StackExchange has always been a little bit like High Dark Magic to me. Its account structure seems more confusing than necessary.

After being skeptic of password managers for a long time, I've decided to take the plunge and get one installed. The burden of remembering dozens of passwords is simply getting a bit too much. So, I was wondering if anyone here has any recommendations of password managers? Maybe one you or a trusted friend use? Or maybe you think password managers are rubbish, and want to share you opinion?

Any suggestions are welcome, in the interest of fostering discussion/having the thread be useful to other people too. But in my specific use case, I want to be able to sync between devices. I'd prefer something open source, but it's not a requirement.

Just happened minutes ago, so not much information yet.

I think it's likely that this article from Monday might have finally pushed it over the edge (since it's usually media attention that does it): You can’t offer to murder cops on Reddit unless you’re on r/TheDonald

The quarantine message says:

It is restricted due to significant issues with reporting and addressing violations of the Reddit Content Policy. Most recently the violations have included threats of violence against police and public officials.

As a visitor or member, you can help moderators maintain the community by reporting and downvoting rule-breaking content.

Here's the message the admins sent them:

Dear Mods,

We want to let you know that your community has been quarantined, as outlined in Reddit’s Content Policy.

The reason for the quarantine is that over the last few months we have observed repeated rule-breaking behavior in your community and an over-reliance on Reddit admins to manage users and remove posts that violate our content policy, including content that encourages or incites violence. Most recently, we have observed this behavior in the form of encouragement of violence towards police officers and public officials in Oregon. This is not only in violation of our site-wide policies, but also your own community rules (rule #9). You can find violating content that we removed in your mod logs.

As we have discussed in the past, and as detailed in our content policy and moderator guidelines, we expect you to enforce against rule-breaking content. You’ve made progress over the last year, but we continue to observe and take action on a disproportionate amount of rule-breaking behavior in this community. We recognize that you do remove posts that are reported, but we are troubled that violent content more often goes unreported, and worse, is upvoted.

User reports and downvotes are an essential way that Reddit functions to moderate content. Limiting or prohibiting them prevents you from moderating your community effectively. Because of this, we are disabling your custom styling in order to restore these essential functions.

As stated in our Moderator Guidelines, our goal is to keep the platform alive and vibrant, as well as to ensure your community can reach people interested in it. Accordingly, here are the specific terms of the quarantine and the next steps we are asking from you as a mod team to resolve this situation.

Quarantine terms:

Visitors to this community will see a warning that requires users to explicitly opt-in to viewing it. This messaging reminds users of the importance of reporting rule-breaking content.

Custom styling has been disabled to restore the report and downvote buttons.

We hope both these changes will help improve the signal around rule-breaking content and improve your ability to effectively address it.

Next steps:

You unambiguously communicate to your subscribers that violent content is unacceptable.

You communicate to your users that reporting is a core function of Reddit and is essential to maintaining the health and viability of the community.

Following that, we will continue to monitor your community, specifically looking at report rate and for patterns of rule-violating content.

Undertake any other actions you determine to reduce the amount of rule-violating content.

Following these changes, we will consider an appeal to lift the quarantine, in line with the process outlined here.

We hope that this process provides a viable way forward to restore the health of the community. However, if this situation continues to escalate, we will explore further actions, including the possible banning of your community.

Please confirm that you have received and understand this message.

So I kind of want to try the Nokia 8110, it's a feature phone with an app store that contains it's own version of Google Maps and Assistant. I use my phone an awful lot, and I'm thinking that a less capable phone would be helpful in using my phone less for browsing the internet, news, and discourse and using it more for what I would want to do with it, calls, texts, navigation, music and podcasts.

Unfortunately, the Nokia 8110 is only available on AT&T in the States, and they stink, so I was wondering if anyone had any picks for devices that would scratch that itch, specialized apps, or other tools that could be used. I like the idea of another device that I could use as a daily driver so I can put some physical distance between myself and my current phone, but if you have an app or a system that you swear by, I'm down for it.

Also kind of interested in maybe combining the ZeroPhone Raspberry Pi with support for Alexa or Google Assistant, but that seems like a time waster and a half.

It’s no secret that data science is a good career path. The jobs are in demand, the salaries are compelling, and the work is interesting. So how does someone break in?

In particular, I’m interested in how an experienced IT professional can move into data science. What advice would you give to someone with, say, five years of computing experience, who wants to break into the field? Tell me about the skills required, where you’d tell your friend to go to acquire them, and how to get a job without a specialized degree. What would make you say, “I want to hire this person, even if the individual lacks the relevant schooling”?

An undoubtedly horrific subreddit that always seemed to comply with reddit TOS and the admins has been banned, probably related to the NZ shooting video that was in the subreddit yesterday until it was taken down by admins. Looks like they're getting ahead of MSM discovering that this shit exists on the site?

Will add any updates here.

r/gore is gone as well.

From @nacho:

It's not ahead of controversy, it's in response to the Reuters article calling out /r/watchpeopledie.

Members of a group called “watchpeopledie” on internet discussion board Reddit, for example, discussed how to share the footage even as the website took steps to limit its spread.

Reddit - which has over 20 investors, including Conde Nast owner Advance Publications - said it was actively monitoring the situation in New Zealand.

“Any content containing links to the video stream are being removed in accordance with our site-wide policy,” it said.

I have an amazon server that I use to host my email and my simple website. I'm considering setting a vpn up on it, but I'm not sure if it's worth it. Would my data be as secure as with 3rd party vpns? Would Amazon see my traffic? It seems like if I go this route, anything that I do could be traced back to me, because the see the ip of my server and than ask amazon who owns it.

I feel like it's impossible to remember passwords that are long, random, and unique for every service. I have too many accounts.

On the other hand, I don't like the idea of giving up control of my passwords to a password manager and using the ones it generates and stores. It feels weird that I wouldn't "know" my passwords.

Is this a hangup I should just get past? What do I do if I need to login somewhere but cannot access my password manager?

What are you all typing on?

Right now I'm using a Planck with gateron reds. It was a gift from a friend and I'm loving it. It didn't take too long to get used to the ortholinear layout and I'm starting to like it more than staggered. At first the lack of keys seems like a con, but once you really start digging into the power the firmware offers it's easy to counteract, and it can become easier and faster to use than a full size keyboard

It's hard to get a straight answer on this because there are allegations of shilling everywhere when it comes to VPNs (particularly when you discuss specific providers). There's also this post which gets linked pretty frequently and which seems to throw a wrench in the whole idea.

For context, I ask because I have two main concerns:

1. I have been the subject of a mild internet stalking/doxing, and I have no wish to relive that experience.
2. I live in the United States and, if I am understanding things correctly, my ISP now has the right to sell my browsing data without my consent.

I have no love for my ISP and am all about the idea of blocking them from gathering data about me, but it seems the only other option is to hand all of my data over to another company who simply promises not to do anything with it. While I'm sure some of them are legitimate, how can you tell the difference between a genuine privacy tool and a honeypot?

I currently use Lastpass, and while I'm overall happy with what I have right now, some issues (like slow firefox support, android functionality that only works arbitrarily) makes me want to look at other solutions.

I have heard about other popuar managers like Keepass and Bitwarden, but haven't made the plunge yet. So I thought I could kickstart a discussion on this topic.

Which password manager do you use or have you used? Why do you recommend it (or not)?

There was a story posted to Hacker News, The Return of the Super-Elite from Jacobin magazine. It was on the front page for a little bit of time. I refreshed and it was on the 2nd page.

5 hours later and it's down to #113, page 4. It has 88 points. The second youngest submission on page 4 is 16 hours old. On page 3, the youngest item is 6 hours old, and has only 7 points. So this article is newer, has a respectable amount of points but within 5 hours has been relegated to page 4, whereas an item that has fewer points and is 1 hour older is sitting on page 3.

edit: the rank keeps dropping, when I first wrote this post it was at #111, then #112, and when I submitted it was at #113, I just refreshed and it's at #114. Other submissions near the range of points and hours are ranking on page 1. On page 5 all items are from 1, 2 or 3 days ago.

I've noticed that any pro-unionization talk seems to disappear much more quickly than other stories.

So let's get our tinfoil hats on and ask is Hacker News suppressing leftist articles or suppressing articles of a certain type altogether?

Or maybe it's just a conspiracy of a bad algorithm for determining where submissions rank?

Online/digital bookmarking and excerpting is something that really interests me because I think most if not all existing options for it fall very short of the functionality I wish existed, and that I think could exist.

One of the first online bookmarking services I used was Delicious, and for a few years it was irreplaceable for me. However it languished after it was bought by Yahoo and then resold, and since then I’ve observed its slow and steady decline from afar.

The purpose of this post is twofold:

1. I want to know the current state of online bookmarking for you. I’m curious to know if it’s as much of an unmet need in anyone else’s life as it seems to be in mine.
   • Were you once a bookmarker and gave up due to the seeming futility of it?
   • Have you never been interested in bookmarking and/or don’t see the point of it?
   • Are you an active bookmarker, and if so what tools or workflows do you use, and what kinds of content do you bookmark?
2. I thought I would share some of the research I did into Delicious’ various design iterations over the years via the Internet Archive. It’s a cool birds-eye survey of how the service’s ethos, goals and design changed over time. Beyond the value it provides as a case study, I think there are greater lessons and insights that can be gained from observing the rise and fall of what was once such a beloved online service.
   • del.icio.us | 16 September 2005
   • del.icio.us | 20 December 2005
   • del.icio.us | 11 October 2006
   • Delicious.com | 11 May 2011
   • Delicious.com | 27 November 2011
   • Delicious.com | 12 May 2012
   • Delicious.com | 30 August 2012
   • Delicious.com | 14 October 2013
   • The period between 2013 and 2016 seems to be one endless loading screen from the archive’s perspective
   • Delicious.com | 15 March 2016
   • At some point in 2016, they went back to their original domain name – del.icio.us | 14 May 2016

As a sidenote, I also found this explanation of Delicious' approach to tagging to be very interesting: del.icio.us/help/tags | 21 February 2006

I hadn't realized that Delicious was actually the first to introduce the concept of user-controlled tags for bookmarks:

When Delicious was first launched, it was the first use of the term "tag" in the modern sense, and it was the first explicit opportunity where website users were given the ability to add their own tags to their bookmarks so that they could more easily search for them at a later time. This major breakthrough was not much noticed as most thought the application at the time "cool" but obvious. – Source

Edit: I hope it's alright to edit a post this many hours after having submitted it. There were a few important updates that I really wanted to include here.

So I've nearly finished my exams and am going to have a bunch of free time soon. I want to try and learn to do some electronics stuff. I already have an Arduino and Pi and have done the basic flashing lights projects, but want to try something a bit more interesting (but not too expensive either)