skysight-inc/HackerNews huggingface dataset:
> Memory encryption doesn't prevent you from doing anything with your device, as far as userland is aware they still have access to the full address space with no knowledge encryption is happening

It depends what you mean by "userland". The purpose of SEV is to allow a guest VM (using hardware virtualization) to run without trusting the host, including remote attestation. Traditionally hardware virtualization is used to run a full operating system which was installed at the impetus of the user, but there is no rule that it can only be used for that. If this feature is enabled on desktop parts, it's equally possible for black box DRM software running, say, on a non-virtualized Windows system, to include a small unikernel and automatically set it up to run in SEV mode. The whitepaper proposes that people running VMs in the cloud use remote attestation to upload disk encryption keys such that the VM can only decrypt the disk if it hasn't been tampered with, but the 'cloudiness' could just as well go the other way: cloud DRM servers sending decryption keys, for both video and perhaps the code itself, to enclaves on desktop PCs.

Using SEV alone for DRM would have a significant limitation compared to using the PSP: since all interaction with the outside world is still through the host, it would be hard to prevent the host from grabbing the raw decrypted video data as it leaves. But this still prevents recovering the original bitstream; allows 'perfect' obfuscation of many facets of how exactly the code works; and could probably be used in combination with the PSP in some manner. And in some DRM applications, the ability to grab the output may not matter. Imagine a video game where the bulk of the game was inside an enclave, preventing piracy but also all reverse engineering and modding.

Of course, a video service or video game that only runs on AMD CPUs won't get very popular... but conveniently, Intel is coming out with their own feature, SGX, that provides similar capabilities, though with a different design (it's designed more directly for the DRM use case). One might imagine that eventually most systems will have CPUs that support one or the other.
It may sound a bit brash, but ultimately this is navel gazing. I accept your desire to take yourself out of the gene pool (yet don't really understand it), but this pseudo-scientific and pseudo-moralistic nonsense must be some form of apoptosis within a senescent society experiencing an existential crisis. The real question you should be asking is why you think your society, culture, nation or state should dig itself a grave.
Does he mention the clock speed of this thing? Wonder what the size comparison would be if it was built on say a 20nm scale?
Yes it's BS, good point.

But you seem to have the same problem.

It's not your ball game unless you're a time traveler who invented the primitive game X years ago from a society that no doubt killed gays and treated women like shit as all societies did back then and some still do.
Do you know what people call homeopathic medicine that is proven to work?

Medicine.
No worries, we'll deal with it.

A simple admission that there ARE hard problems that millennials have to face is all I generally ask for when people call us lazy, entitled and stupid. Its been very difficult to find economics of just living that make sense even during this current boom period. Its gonna suck REALLY hard when a bust happens, and you can bet a lot of existing institutions are gonna have to change.
Oh found it on the Reg article - 20khz (0.02Mips)
It's not an analogy - you are confusing the difference between CDS (which is what chollida1 described) and MBS (a type of collateralized debt obligation the is pooled together and various buckets of risk are tranched and securitized, which is the aspect you describe).
Don't. Use. Userspace. Random. Number. Generators.

It is 2016. There is no business for any major tool to be shipping a dependency on a userspace random number generator like this.

http://sockpuppet.org/blog/2014/02/25/safely-generate-random...

It's not enough for us to stop fielding new software with broken userspace random (all userspace random is broken random). We need to go back through all the software, find all the userspace RNGs, and replace them with urandom reads
this would be fantastic learning tool. i could definitely imagine it being used to great effect in a computer architecture course.
Jepsen [1]. For previous discussions on HN with MongoDB [2] Cassandra [3] RabbitMQ [4] and ETCD [5]. Others exist as well.

[1]: https://github.com/aphyr/jepsen

[2]: https://news.ycombinator.com/item?id=9417773

[3]: https://news.ycombinator.com/item?id=6451885

[4]: https://news.ycombinator.com/item?id=7863856

[5]: https://news.ycombinator.com/item?id=7884640
How much of an effect does the camera lens make in page warping? Correct me if I'm wrong, but for shorter focal length lenses I would think it would warp the page more. If a person accounted for that, could they get a near perfect result? Or does his algorithm account for that? It seems that one would need to know where the center of the image would be.
No, all word of mouth, often from the microcoders themselves (Moon and Greenblatt, at least). And it was either a compiler from Lisp to microcode, for making hot code faster, or Lisp primitives implemented in fast microcode. And the virtual machine that implemented the compiler's byte code as well.
No problem. I added a footer in the article stating it's satire.
This is probably true. It also applies to Java, C#, PHP, COBOL, x86, and ARM. Although, it might be noted that various things on that list dethroned others in certain segments. Still doesn't matter. You don't have to dethrone anything.

Just build an advantageous ecosystem with a good chance of short-term and long-term commercial support. Do that right, there will be uptake that can slowly build into something competitive. We've seen it happen numerous times with Mathworks (MATLAB), Borland (Delphi/Pascal), Eiffel (Eiffel), Microsoft (C#), Sun (Java), Google (Go), Mozilla (Rust), and Apple (Swift). Really useful and superior tech can also attract people into closer-knit, small, and high-quality communities as we see with Haskell. So, I tell people not to worry if vast majority will use your stuff. Just worry if a good chunk of them will find it useful enough to pick up and extend. Then you might make it.

Note: A cheat I've already mentioned is making your language or whatever integrate with a popular one and its libraries. Clojure, in an anti-LISP world, is proof of how unusually effective that can be. The typical example is how most C alternatives can compile to C or use its libraries.
That's exactly what an NSA shill would say.
They don't want to pay taxes for that. Given the choice, most evangelical Christians in America will pick lower taxes and reduced or eliminated government role in providing social services.
The amazing thing about this is that you can't critique. I mean, you can say anything you want, but you can't stop it or change this guy's mind. :)

It's pretty neat seeing him change the clock speed: https://youtu.be/z71h9XZbAWY?t=3m38s
I agree with your reasoning about how it could affect a one way race, but if that was actually the intention of the referenced portion of the article, I think they went about it in a very confusing manner at best.
The overhead due to the message ordering is constant, irrespective of the number of cores/peers. See the link posted above for an explanation.
Try Brooklyn to Brooklyn or between outer boroughs to see a larger disparity
The only use case I can think of for this is airports.
17 miles is not a long bike ride unless you do not bike. 90min at a slow 11mph pace. A lot of people do 90min commutes. Scary car traffic is a much bigger reason people do not bike such routes, not distance.

That said, for such distances a moped or ebike could be much faster, while still evading gridlock that would slow a car.
It's hard to ignore that after all that's come out against for-profit private schools in the US really exploiting these sort of aid programs. Then they have a third-party rating agency coming in and that's supposed to make us all feel better. Will saturating this market make it any better? Are we already at capacity for meaningful classes into potentially meaningful jobs? It's too hard to say.
I have a Verizon pre-paid plan on an iPhone 6s I purchased outright at the Apple Store.

My plan provides unlimited minutes and texting and 2 GB of data. I get an additional 1 GB because I'm enrolled in the auto-pay program. Including taxes, fees, etc., they charge $49.15 USD to my AmEx monthly (for the advertised $45/mo. plan). My average monthly usage is ~600 MB.

My girlfriend has a very similar plan on AT&T and pays roughly the same amount, though I don't know the exact details of her plan.
Kotlin Development for Android – The Good, the Bad, the Ugly
Why people in (south-of-110th) Manhattan bother to own cars is beyond me. That said, the outer boroughs are (a) a long distance, in public-transit time, from the centre and (b) relatively unconnected by mass transit to the rest of Long Island and New Jersey (and to a lesser degree, Connecticut).

As a Manhattanite who prefers cars (i.e. Ubers, Junos, et cetera), it comes down to a few factors. One, cars are door to door. Two, cars are air conditioned/heated. And Three, I can take calls (and naps) in cars.
Sorry, but the government does not own the atmosphere, and the point of rights is not to protect minorities.
> if 1000s of people are telling the same story, thats 1000s of potential data points... they lose value from being ill defined rather than being small in number.
reply

They don't exist in isolation though. If thousands are telling the same story and there is no independent corroboration then it's more likely that one person told a story and thousands repeated it.
What harm does obscenity cause?

What about laws like the Communism Control Act?
I have to admit, I just came here to read the hate. I've gotten to where I almost always hide Microsoft related posts because people are so emotional about them.
I would think that typically, a corporation has a large financial advantage over the individual in a potential lawsuit. For example, if they published a video of mine, I wouldn't even be able to pay enough to hire attorneys to file a lawsuit. It could be argued that Thiel was just leveling the playing field.
The problem with the Situationists is that they have no political program. They refuse to describe how they would like the world to be, instead coming up with convoluted explanations for why doing so is unnecessary and counterproductive. The assertion is basically that capitalism is so terrible that once we get rid of it, things will obviously be much better.

Apologists have tried to fill in the gaps with a utopian vision [1] where we maintain the a similar standard of living but without wasting energy on conspicuous consumption. I agree that developing a culture that avoids conspicuous consumption would probably mean we could get by with less work. However there would still be enough work leftover to either require capitalism, or socialist style forced labor, both of which situationists explicitly reject.

[1] see https://en.wikipedia.org/wiki/Hans_Widmer
I do believe that debord was aiming for more than shallow moralizing about the evils of capitalism. Marx certainly considered capitalism a step forward. But if we use the word capitalism at all, we are assuming that it constitutes a useful independent variable for analysis; cultural, sociological, or otherwise. Debord does a deft job at this analysis, irreducible to the average complaints about Facebook or twitter. For example, how might Debord's critiques be applied to the phenomena constituting the Arab Spring? Think about what sparked the Arab spring. Think about the Egyptian revolutionaries' adoption of the Guy Fawkes mask. Juxtapose those 'spectacles' against Debord's observation that 'the "society of the spectacle" offers false models of revolution.'

imho, these illustrations are probably counter-productive insofar as they turn debord into a parody of himself, a straw man to knock over, rather than what he was: a truly dangerous thinker.
> Why isn't there a building-block type server OS we do the same thing?

Because everything is built on Unix as an OS abstraction. Even Windows (since the early 2000s).

Consider: byte streams and file systems are less than ideal fundamental abstractions in a distributed world.

IMO we won't have what you're seeking until we rethink what an OS should be in an Internet-everywhere world. We're still using OS designs that predate the Internet entirely.
Well, that's not what you said, but portability, I'll accept.

The fact that Bus1 doesn't need init cooperation is good.

However, Bus1 is MUCH higher level than UDS. UDS is a two-way bytestream between two processes. Bus1 as much more complicated system, designed to send structured binary messages, and includes a permissions system, sealing, and a lot of other complexity. It doesn't belong in the Kernel any more than DBUS.

As for kdbus not being Lennart's baby, and that I should look at who wrote the code, I did. I direct you to https://lwn.net/Articles/580194/, where Lennart not only takes credit for KDBus, but also says it's application-level, implying it is intended to be used in high-level userland.

High-level abstractions for applications don't belong in the kernel.
There's nothing especially magical about Fortuna. There are basically three problems to solve with a CSPRNG:

1. Ensuring that it's adequately seeded before anyone can use it.

2. Providing forward secrecy by periodically rekeying ("refreshing the entropy pool", but we should do away with that terminology).

3. Carrying over state across reboots.

(There are four problems if you consider "being performant" a problem on the scale of fundamental design, but it's mostly not).

You wouldn't think CSPRNGs are this simple by reading either the literature on things like Fortuna and Yarrow or by reading the LKML and patch proposals for the LRNG. You'd think it was super tricky to collect "enough entropy" from enough "decorrelated sources", you'd think you'd have to deal with "depletion", you'd think about "high quality" versus "low quality" entropy, and the like. But these issues aren't just not important: they are mostly folkloric.

Generating a practically limitless stream of random bits isn't a hard cryptographic problem. It is an elementary problem. It's the problem that every stream encryption scheme solves. You can simply use stream encryption schemes, like stream ciphers or block ciphers and hashes in CTR mode, as CSPRNGs.

The problem we need to solve isn't upgrading the LRNG or getting everyone to use Schneier's favorite CSPRNG design (the section on this in Cryptography Engineering is one of the book's few warts). It's getting everyone to use the kernel RNG to the exclusion of all else. That's because those 3 problems I listed up there are easy to solve if you're using /dev/urandom (or the getrandom system call), but extremely tricky otherwise.
or a series of aqueducts
It all depends on what you want to do with it. Crunch numbers? No way after some point. Prepare the Air Force's annual budget submission without information leaking? A real example of a perfect fit. Or provide the IT for MIT's EECS department? Good fit, until MIT-MULTICS was shut down as part of Honeywell killing Multics and the Cambridge lab which did work on it (I played a role in moving off that).
Also, the open-source XNU kernel (OS X & Darwin) has both C and C++ components.
I think there are merits to diversity but of course there are also merits to a fully meritocratic system. But I think the ideal situation would be having a fully meritocratic system that has this "diversity" attribute. I feel as though that is a step up from a fully meritocratic system that has virtually no diversity.

Also, perhaps having diversity would allow for the development of new types of products and services in the tech industry that the "privileged" have no interest in. At least that's what people who call for diversity claim.
Uber to Roll Out Self-Driving Cars in Pittsburgh
> To discourage retaliation (I think) both downvoting and flagging are not allowed for direct responses to one's own stories and comments.

Yep, that's exactly right. Downvotes are also disabled for comments older than a certain time interval (IIRC it's currently 8 hours).

> Since "vouch" was added late, it reuses the same logic, even though the "retaliatory vouching" is not really a danger.

That may well be true, and enabling the "vouch" link for replies to one's own comments sounds like a good idea. You should email hn@ycombinator.com about it -- they're usually very responsive.
Still disagree. The country wanted this and bought into this. They voted in "tough on crime" mayors, governors, congress people, and yes, presidents for years - decades, even. It started before I could vote, and maybe before you could, but this wasn't some faceless elite "establishment" - it was the whoooole country.
Worried about your job, angersock?
Purpose-built RNG hardware is not a panacea --- in fact, it can be treacherous. Hardware RNGs can fail transiently, and you have to detect and compensate for those failures.
Yeah, and the tokens are a frigging hassle!

I assume you have not ridden the subway in decades.
Now you can see what a computer is doing.

Fantastic for understanding!
"Where did the memory leaks come from? In order to implement VectorDrawable inflation, the support library authors needed to update the way Context.getDrawable is implemented. But that function is final, so they had to make every View create a new copy of a Resources wrapper that could handle VectorDrawables. Besides being a large amount of work, this caused the various wrapped Resources to become out of sync, and to use a large amount of memory due to the duplication. If that function wasn’t final, that mess wouldn’t have happened."

Yup yup yup. Best practices are guidelines, not law.
He's joking, people. I mean, flag for dumb joke, sure!

I warned him he'd get flagged for this and he said he got flagged for quoting De La Soul on a De La thread and I have no clever response to that.
An easy way to browse photo(image) for iOS. v1.0.0
that is a good insight. thanks.
AMD started work on Zen back in 2012 after it became clear the Bulldozer was a complete failure. It's taken them 4-5 years to get it ready for release. They still had Steamroller and Piledriver in the pipeline, so they released those anyway, despite the fact that line of processors is now dead.

It took about the same amount of time for Intel to release the Core and Core 2 architectures after realising they had made a huge mistake with the Pentium 4.

I've heard some people theorising that Intel might have worked their current architecture into a corner and they might have problems innovating out of it. I guess we will see when information about Zen's performance shows up.
Reminds me of this DIY 4 bit processor: https://hackaday.io/project/665-4-bit-computer-built-from-di...

The paranoid in me wonders if in the future we'll have to resort to projects like this for sensitive tasks to know our hardware hasn't been backdoored...
So more discrimination. Yes!
Reminds me of the MOnSter 6502 project that did the same thing with a 6502 CPU.

It was actually shown at the Bay Area Maker's Fair:

MOnSter 6502
monster6502.com
Proponents of diversity engage in non-Bayesian updating whereby if a non-diverse company/city/person does well, they update their prior that the system is rigged, but if a diverse company/city/person does well update their prior that diversity has economic benefits.
Intel's IA-32 mote prototype could go into smart labels to sense rough handling
It means people with no ties to the property. Its a lot harder to get away with robbing a neighbor you see every day then it is to rob a stranger who won't be able to find you afterwards. Similarly someone who is tied to the property has a greater interest in ensuring its upkeep.
This is hysterically funny! Can you tell us who this CEO is?
I can't see this winning over PC gamers. They'll probably stick with Steam. Casual gamers will give it a shot though.
From last year: https://www.youtube.com/watch?v=FbGm66DCWok&t=42s
They say the same thing about the Ben Franklin Bridge here in Philly. I don't know if it's true, but it is under some amount of perpetual work.
Why Helen Maroulis’ wrestling gold was so significant for America
Gawker Media Was Saved, but Gawker.com Is Over
Yes, that's my exact concern.

The good ones will do well for a while until the bad ones get better at marketing. As they get better at marketing, more dollars will go to them and draw people who don't have the aptitude to be successful in the field. Then those people will - rightfully! - be pissed when they don't get $100k+ jobs and demand that "something be done about this!" And then the good schools will get screwed.

I'd rather see a salary-based payback program where a candidate pays back X% over the next N years, up to $Y.

That might motivate the schools to help in placement and encourage them to teach how to stay relevant beyond the JS framework of the week.
In the video he has it running just over 1Hz so the flashing of the LEDs can be seen with the naked eye. As he brings it up to about 8KHz everything blurs and goes solid (as you'd expect).
i miss being able to install a game without having to install a bunch of associated crap with it.

as much as i love steam it has always been borderline malware imo. sits in my system tray, uses my bandwidth, cpu cycles and memory etc... was even worse back when it refused to let you play your games without an internet connection too. :P
There's also the MOnSter 6502, an exact copy of the 6502 microprocessor built with discrete transistors on a 12"x15" board. It's operational and Apple Integer Basic runs successfully on it, slightly slower than the real chip. It's quite impressive, since unlike the real processor, the MOnSter 6502 has a bunch of LEDs indicating the internal state.

See http://monster6502.com/
You split off specific parts of your app into microservices because you want to scale those parts independently from the rest. It's not just a blind decomposition of a monolith for the sake of decomposition.
None of that changes the fact that they're easy to fool and have some pathological cases (that gambiting alludes to) that most humans consider quite dumb.
Not to comment on this particular debate, but I was curious about how homosexuals were treated in native populations, and it's quite interesting.

https://en.wikipedia.org/wiki/Two-Spirit

http://www.firstpeople.us/articles/the-two-spirit-people-of-...
NSA's BENIGNCERTAIN: remote exploit to extract Cisco VPN private keys
I haven't shipped a game on UE4 yet but in profiling our in-development game I've yet to see Unreal's GC emerge as a performance concern.

The UE4 GC is purpose built, simple (mark and sweep), and limited to only certain objects/allocations. The only time I've seen significant GC times/hitches was related to a bug that resulted in thousands of small allocations every second. I would much prefer if Epic dropped the GC - losing tight control over object lifetimes is as bad or worse than any potential performance overhead issues in my experience - but failing that I don't think its inclusion is a serious concern for shipping on consoles.
I'm not sure I'm that much of a conspiracy theorist, but I definitely don't buy what's being sold; making housing affordable. Affordable to me doesn't mean you can physically locate yourself in SF, it means you can own a home while growing your wealth and saving for retirement. The old wisdom was 1/3 your take home for housing, max.

If people really want to talk about making housing affordable lets here what affordable means to them and how many new homes at what price would be required to get us there. Yes, I KNOW if you build enough homes prices will drop. Tell me what the target is and how many homes are enough. Otherwise, yeah, it smells like people with some sorta ulterior motive selling snake oil.
A Message from Anand – About AnandTech