skysight-inc/HackerNews huggingface dataset:
Thanks. I had actually started reading The Spy in the Sandbox but it was too hardcore for me.

So, how does this work? I set a timer, and then read the time a bit later, and somehow I recovered an AES key from a different process? I'm still missing a piece :-)

Notably, how can timing data leak things?

I mean, I can see how I can do

1. Start hi-res timer
2. Kick off something that involves out-of-sandbox data
3. Stop hi-res timer

and do this often enough and with well-tuned input to read useful data out. Is that how it works?

But how can I use this to read stuff in entirely different processes? Moreover, how can I do that in a targeted manner? Eg I suspect my target is using internet banking but I don't know which other programs are running, how many cores the machine has, etc etc etc.
I haven't read them but I'm familiar with the area of discussion.

My argument here rests on the idea that we are late in the game of software development. Most of the software we need has been written already. What we are doing now is a thundering herd attack on the global mind-space of algorithms+data. (How many chat apps? how many serialization formats, etc.)

I am kind of off in the corner. For example, I don't see Rust lang as cool and innovative, to me it looks like a tarpit.

There is a better way.™ ;-)

Over in the "The Power of Prolog" thread https://news.ycombinator.com/item?id=14045987 there are posted three solutions to teh Zebra Puzzle. There's one in Ruby all bloody minded, one in python even longer and more bloody minded. Then there's the one in prolog I wrote after reading the docs for half the day instead of working. (D'oh! Hi boss.) The Prolog version is less than a page of code and half of that is direct translations of the puzzle hints to CLP constraints (the other half just sets up the variables and such.)

The other two aren't bad because they weren't written in Prolog. They're bad because they both would be better off implementing the resolution algorithm (i.e. mini-kanren) and then using that to solve the puzzle. It still would have been shorter and easier and faster.

Now, why didn't they know that? That's the essence of my concern.

The prolog solution is much shorter, returns the solution instantly, and I'll wager it took me much less time to type it in once I had figured out how to translate the puzzle into CLP(FD) style. Am I the 10x programmer? No. I think what I (and others) do is learnable. I've maintained for years that anyone who can solve a sudoku puzzle has the intelligence to learn to program. In fact, I've just realized that anyone who solves Sudoku puzzles already knows the resolution algorithm, that's what their mind is doing to figure out the puzzle.

So most people can be taught Prolog. The machines are vast and fast enough now. Why is everybody so keen on cracking out code, to make a buck or scratch whatever itch, but not on doing it better using tools and techniques that are hella old!? Is humanity really so perverse? ;-)

(P.S. I'm still working on replying to your kind and excellent email.)
I'm going to look into this for you and will follow up by email. (If I find something which is useful for similarly situated companies, I will post what I learn here.)
If something like this existed, with the source code on Github with a detailed contributing.md document, I would spend time on it. We have great tools available to do this and it is a worthy cause.
>They just promise not to.

Google makes the OS and the keyboard. If they wanted to run a keylogger on every device against the express wish of users they could.

So I think the more important question is if someone else could steal or "legally" request that data from Google and recover my keystrokes.
Facebook to Offer Free Version of Its Slack Killer
I started a company at 36. That was eleven years ago. It worked out fine.
All but predicting a "permanent prosperity" makes you sound like pundits just prior to the 1929 market crash.

Historically, booms and busts are what the market does, go back over the last 150 years, since the end of the American Civil War - you'll see a boom, following by a bust - the Federal Reserve and the changes enacted in the aftermath of the depression has dampened it a fair bit, but it still happens - and could happen just like it did before.

Our financial system is very very fragile, and like a chain stitch, one loose thread in the wrong place, and the whole thing could unwind - thats the problem. So Remember in the end, a wave of bank failures are what made the depression last a decade, not just the recession itself.
Does nobody on Hacker News watch Silicon Valley? Or are references in comments frowned upon?
The site is not mobile friendly - images weren't scaled on mobile, could not be seen, only their left side, and site could not be aide scrolled. Imho a marketing site should be completely mobile friendly.

I recommend fixing this.
Operation Cloud Hopper – #APT10 Goes After Managed Service Providers
> "Though "savvy" and "smart" today, tomorrow other words might be used to describe this type of behavior."

Iconoclastic and resolute.

Half-jokes aside, why do you think people will have a negative view of this sort of thing, in the future?

Its main purpose is to circumvent the short-term groupthink of investors that plagues all modern companies (I'm looking at you, Amazon). Even if this means the CEO sets course for shipwreck (ex. Uber), the people being hurt the most are investors.

They'll be seen as populists fighting the fat cats who can't keep their fingers out of everyone's cookie jars.
JIT can be faster than static compilation.
This is possibly configurable, I don't know and didn't care. In GNOME, this is configurable behaviour. I liked this default and kept me on Unity because of that.

This comes down to personal workflows. I got very frustrated dealing with the alt-tab behaviour of only showing windows when my focus is what application I need to use when I do the alt-tab. This is also the one holdover from using OS X daily, the one feature I felt was right (really, for me and probably a lot of people.)
It's improved in that the causes of failure are now better understood. Getting it working means generating some UUIDs and things. e.g. https://www.tonymacx86.com/threads/an-idiots-guide-to-imessa...
Forgot the crucial point.

* Rampant spying in Microsoft's products is at an all time high.

And it's not going anywhere.
References are generally frowned upon, at least when that's all there is to the comment. There is a strong fear here of becoming reddit.
All helicopters have to be able to land after an engine failure to be certified. Google autorotor
Stunning Beaches in Zanzibar, Tanzania
Bán+đất+quận+bình+thạnh+phân+lô,+giá+3,2+tỷ+một+nền,+hẻm+Nơ+Trang+Long
"The reason for this strong focus on quantum physics and quantum technology in Australia is due to a range of factors including historical precedent, governmental policy and playing to the Australian psyche. Since at least the 1980s, Australian and New Zealand have an exceptionally strong representation in the field of quantum optics."

Is there any attempt to go beyond the basic science and start new industries? All that basic science and competitive advantage will go off-shore if products are not built.
Nah, just a coincidence. 17 is the part of the address here.
It's a very vague reference and it completely slipped past me the first time reading through.

Compare that to something like Szechuan Sauce.
Typically, yes. One of the most frustrating things about Reddit is the neverending cliched references. It's why HN comments are so much higher in quality.
You would be physically alive, but not spiritually yourself. Although I suppose you wouldn't be a baby either way.
Censor thyself, lest ye cause the plague.
A FOXO4-DRI Breakdown – Senescent Cell Apoptosis
Best of luck. If you really didn't have a diagnosis after 3 visits, you probably should see another doctor. I'm just curious, what you mean by metabolic problems?
Check out https://bolt.cm
It truly is "Easy for editors, and a developer's dream CMS".

I did my first and for now only website with bolt and am very happy with it. Took about 30 hours to build, starting with zero knowledge of html/php.

Edit:
30 hours for:
- managing (crud) news, dates, galeries, members (group, functions)
- 5 static sites
- basic internal section (one static site)
- view-layout of the above
mike cassidy is a brilliant man.

he is strong promoter of speed when developing business:
https://www.slideshare.net/dmc500hats/best-strategy-is-speed...

I am looking forward to what he achieves with his new journey.
Comparing plain React with Angular and Aurelia is completely useless. You cannot write a big serious application with Form Validation, Data Fetching, Testing, etc, just with React itself. A fair comparison would be to write a whole "real world" project and then see what parts you have to use and learn to be able to write a full React application.
To be very simplistic, timing attacks are a bit like buffer overflows, if you do then just right you can use them to read information about other processes, such as processes you aren't meant to be able to see into.

Where they are different is that timing attacks usually serve as information extraction tools, which attackers can choose to further leverage by basing subsequent attacks on the information they obtained, where as buffer overflow attacks can do pretty much anything up to and including rooting a box or breaking out of a hypervisor.
Don Rickles dies at 90
I think there is something to increasing voting preference based on tenure of shareholding. Giving more control to longer-term shareholders leads to long term thinking aim governance.

Something like vesting for stock voting would be interesting. What if we had the number of votes equal to the number of years the stock was held by that investor (with some max)?

On the other hand, I don't agree with CEOs having board control. That prevents any company oversight (which is exactly the point of the board.) No one should be immune from reproach. The article gives examples of great CEOs being fired, but there are at least as many examples of poor CEOs retaining power.
Best case scenario, it gains attention. Worst case scenario, it gains attention and I drive my car into a tree one night or spontaneously OD.
There's a big difference between leaving your DNA on a cup and storing it in an easily-queried database. To collect your DNA from a cup , an interested party has to have an a priori interest in you specifically. To get it from a database (or databank, if 23 and Me is retaining physical samples, as their terms indicate they might), the interested party just has to have an a posteriori interest in "people's DNA", and hoover yours (and by probabilistic inference, your relatives') up along with everyone else's.

In the US, the protections against insurance companies using your genetic data against you are about as deeply entrenched as the protections against letting ISPs sell your internet history, and subject to much more intensive lobbying. Other countries have no protections at all - Canada's current bill is strongly opposed by the Trudeau government. Remember, even though most of these genetic risk scores are incredibly weak predictors, it is only necessary for insurers to believe they improve their actuarial models slightly to have a huge effect on differential insurance costs.
Plex just uses ffmpeg, the version bundled does include GPU support although I believe it depends on the codec, from memory it does x264 but not x265 or vp9 but I could be wrong.
Yet another chat platform. Just what we need!

On the other hand I wonder if Slack will be able to live up to the expectations as the (enterprise) chat market is getting more and more competitive, with more and more big fish entering.
They did hire the Homebrew folks. Max Howell, Homebrew's creator, was famously rejected by Google and then hired by Apple.

It's pretty presumptuous to assume you know what John Gruber does with his Mac. I suspect he might sometimes open an app other than BBEdit.
Well, let's just wait how people will react when they will understand that they accepted to invest billions in assholes who got lucky but have as much vision and management skills as a 5 years old kid.
This kind of comparison is meaningless. Compare React to Veu.js, as these are both view renderers, not full MV* frameworks. And compare Angular2 to Ember (with Fastboot), both of which are opinionated MV* frameworks. Not sure why this is on the front page
There's a self-flying taxi drone supposed to start operating in Dubai this summer.

> The Ehang is electric-powered and can travel for about 31 miles with a person and bag that weigh up to 100kg. It can go at speeds of up to 63 miles an hour and takes two hours to charge fully.

http://www.telegraph.co.uk/technology/2017/02/14/self-flying...
The law and the right thing are not always the same. I personally prefer to do the right thing and $#it the law. Especially if I'd have the power to do like twitter does. Law is decided by stupid people (eg Trump) for stupid people (his voters).
Whatever energy you have left to feel guilty about "not doing enough", reinvest it into letting go. Don't take being bored, in the moment, and content. We've unlearned these very basic things in this contemporary age.

Make a goal because it's a good exercise to start the journey. But just follow your heart after you start walking because if it was meaningful, you will find some way to incorporate it into your life.

Go slower. Enjoy the things you could only in university; there's no need to graduate earlier; you can work while going to school, but you cannot go back to thinking like a student after you've started working.
I see many people comment with "so what".

Well, let's just wait how people will react when they will understand that they accepted to invest billions in assholes who got lucky but have as much vision and management skills as a 5 years old kid.
Is there any news on a Pro MacBook Pro (ironically named)
This is very exciting. In the EU the fintech revolution is also banging the gates, as in 2018 all banks must support a standard protocol, if I recall correctly.
What if this item would change the way you travel?
Both AMD and Intel fail the test. From the Libreboot FAQs

> It is unlikely that any post-2008 Intel hardware will ever be supported in libreboot, due to severe security and freedom issues; so severe, that the libreboot project recommends avoiding all modern Intel hardware

> It is extremely unlikely that any post-2013 AMD hardware will ever be supported in libreboot, due to severe security and freedom issues; so severe, that the libreboot project recommends avoiding all modern AMD hardware.

One wonders what we are left with and where Libreboot will be in five years, when all the hardware it can run on will be obsolete.

It seems somebody managed to disable ME on some hardware, let's hope there is more to come. However I am not hopeful that they'll be able to do it quickly for newly released processors.
Doesn't physical adress extension (PAE) circumvent this problem? Then you are just limited to 4GB per process (or thread, can't remember), but that's a lot better.
I would advise anyone living near US/Nato launch sites and major military bases to look at possibly reserving a ticket to head as far from there as they can. Good bicycles are the best since they can go without fuel and bypass jammed roads. I am contacting friends in Northern Europe to give them a similar advice. My impression was that this chain of events was likely to happen last spring, but they seem to have taken a year longer. Spring is the war season in the Northern Hemisphere. Everything is now possible.
The snackbar problem is actually what redux is built to solve. You would "provide the toast()" function by having components dispatch a "toast" action. From there, your reducer would modify the snackbar state accordingly, e.g. by implementing a stack of toasts, and you would have a single global component render that state into popups.
> Angular's routing seems to involve "one big routing config".

That's wrong. You can split the routing configuration just like in react-router or Aurelia. It also supports lazy loading of child routes and components. So you don't have one giant application to serve at bootup time. It is also documented really well: https://angular.io/docs/ts/latest/guide/ngmodule.html#!#lazy...
Totally agree with everything you said, although I believe the price is closer to 500 than a 1000. I worked at a lab last year which did methylation analysis on rat genomes, and the price for sequencing was not nearly a 1000. Although the analysis was slightly different since they pulled out all the non methylated DNA, we still ended up with >50GB of 50 bp reads that had a decent coverage of the genome. I'm certain that whole genome sequencing would be easier than what I described.
> It's why HN comments are so much higher in quality.

Not always the case. Sometimes just boring. More relaxed attitude on reddit attracts more diverse expressions and sometimes that can be a bad thing, but sometimes it is a good thing.
We were profitable with 7 figure revenue in under 2 years and we couldnt get so much as factoring from SVB, even with Fortune 500 invoices.

Any big bank will give great service, there's nothing unique here anymore. They all want your company to succeed as it means more business for them.
Boeing's Proposed Deep Space Explorer Will Be Our Stepping Stone to Mars
Well, forget Apple for a moment (that was just an example, since parent asked about them specifically): my point was what Google's describing is separate from differential privacy. There's no controlled noise or randomness being applied.

They even say at the end of the paper: "While federated learning offers many practical privacy benefits, providing stronger guarantees via differential privacy, secure multi-party computation, or their combination is an interesting direction for future work." So, the "practical privacy benefits" here is referring to the dimensionality reduction from running the raw data thru the LSTM.
7 Studies That Prove Live Chat Boosts Your Conversion Rate
That is largely because Azure CDN unlike other azure services it is not really from Microsoft at all, it is basically re-branded solutions from two competing vendors who both have different feature sets, different service qualities ( as you noticed) and compete with each other.

This is also why it is not simple to deploy on both of them for the best coverage. Akamai has better PoPs in some markets and Verizon has better in others.

If you want to use both to their strengths it not possible directly from Azure, you will need to set up both services and then configure your DNS for geo-location routing based and track effectively in which geographies which would be better .

MS recommends also largely on these lines in their own docs "Azure CDN from Akamai POP locations are not individually disclosed. Both providers have distinct ways of building their CDN infrastructures. We recommend against using POP locations to decide which Azure CDN product to use, and instead consider features and end-user performance. Test the performance with both providers to choose the right Azure CDN product for your users."
And this is why I'm curious why nobody yet written a social network on top of NNTP.
`<++=` is deprecated and will be removed.
> [...] which also lets you have a reputation system and ban spammers which you can't do easily with a pure DHT.

Sounds interesting. How can you ban spammers when they can just create a new public key/identity if their old one is banned? And also, what does "banning" comprise, in a decentralized social network? I would assume it would be sufficient to just "unfollow" that particular identity.
I think it's often a better strategy to do sharding or micro-services and if possible keep the service so small that it's state can fit in a single machine. If you can have data boundaries, like for example one customer do not need to access the data of another customer, then you can separate customers's data and place them in different databases.
Something like this is almost Oshii's gits https://twitter.com/archillect/status/699657007599656962/pho...
People aren't proposing privacy extensions, it's a finished standard that's been enabled by default in most major operating systems for many years now.
Wait, are you saying MMS messages are direct peer-to-peer? My understanding is, they go through the operators' MMS servers, where all sorts of antiviral activities can take place.
If Uber fails due to the fact the Uber board cannot fire its CEO, the trend may reverse. Uber is too big to fail without industry-wide repercussions.
The initial two-seat design uses battery packs, with a
flight-time duration of only about 20 to 30 minutes. It
will be certified for sport flying, Zosel says, and he
plans to sell the copters for about $340,000. He’s also
working to develop a hybrid power system that would extend
flight time to over one hour.

https://www.wired.com/2015/06/18-rotor-volocopter-like-flyin...
Diabetes drug could be the first to reverse the disease
This still works, if paste the correct link to the article you want to read:

https://www.facebook.com/l.php?u=https://www.wsj.com/artic.....
> afaik it's even deprecated.

No, it's not. You use providers on a component when you want to have a new instance of that Service when a new Component instance of that type gets created. So you have complete control over the DI.
More details here: https://angular.io/docs/ts/latest/guide/dependency-injection...
Part of AWS Activate. You can get it through various VC's, accelerators, programs like Atlas, or applying directly.

Usually somewhere between $5-25k of credits that will be applied to your bills automatically until they run out.

Azure and GCP both also have similar programs (and both also have very high end packages that are $100k+).
Good luck, America
Unfortunately youtube has removed my video, twice. The first time I thought it was because of the music I used, the second time I have no idea why. If I were paranoid I'd think that I'm on the right track towards the path of artificial intelligence and some existing AI (like the one in Person of Interest) doesn't wan't me to publish this. :)

Edit: Never mind, it seems to be up now.
Consider that it's not Google as a whole, it's the keyboard team, who obviously have only a small fraction of Google's compute power.

Also, gboard is installed on between 500 million and 1 billion phones.

https://play.google.com/store/apps/details?id=com.google.and...

So I can't confidently dismiss the computational cost away just yet.
Ok, I'll bite: so what? Should I care about private investors losing money in Uber or something? Haha pass me the tissues, I feel tears coming up already. Poor oil sheiks! Poor rich people. Didn't do due diligence and are now losing money on a bad investment! The world is cruel and unjust. Something must be done!
Even if investors could easily fire Travis, I doubt they would. This is the man who has taken the company from zero to $60bn. He has it embroiled in numerous commercial, political and technological battles around the world, most of which--until recently--Uber has been winning. Any replacement would, at the very least, need extensive mentoring from him.

Kalanick has described Uber as his baby. He won't properly mentor someone he's forced to accept as his replacement. This means a CEO totally unequipped to know where Uber's chips are, let alone play them properly. Keep in mind: Uber is largely forging new ground. We don't have a playbook for replacing a durable good purchased by consumers with technologically synchronised fleets.

Replacing a CEO is usually seen as a textbook cosmetic change. A swap at the top and nothing below. Bringing in a Schmidt to Travis's Page looks like the savviest option.

Uber has been drawn through the dirt for good reason. They need to change or die. That said, assuming they can get past the Waymo bullshit, there's nothing the press loves more than a turnaround story.