skysight-inc/HackerNews huggingface dataset:
on windows you can run this:
netstat -na | findstr "\<16993\> \<16992\>
\<16994\> \<16995\> \<623\> \<664\>"

to see if you have LMS running, which apparently is required to remotely exploit it. PDF with details here: https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20...
Giant Otter Technologies | Frontend Engineer (React JS), Full Stack Engineer | Boston, MA | Full-time | Onsite | https://www.giantotter.com

Giant Otter is building on a proprietary natural language AI architecture to automate coaching for sales and support conversations

Check out our job postings & apply here https://angel.co/giant-otter-technologies/jobs

Interview process is phone screen, <0.5 day onsite interviews with future team members, short (untimed) coding exercise
I have a feeling you misunderstood the parent's idea. The jail there is not to prevent someone from breaking out from the browser into the system. It's to contain simple attacks on your data, exactly because the browser is a stateful system with lots of stored secrets.

If you have a full sandbox breakout exploit, both cases are broken. But if you have just a stupid JS issue that breaks same-origin, or causes a trivial arbitrary file read, jails will put you from them just fine. It's pretty much to stop a post you open from Facebook from being able to get your PayPal session cookie. Not many exploits in the wild are advanced.
Going with accident, Intel not taking care of a buffer. In my view, the malicious model would involve a 'special' asymmetric key that would let Mallory right through the front door, and we'd hear about it from someone like Ed or Julian.
I work at Quicken Loans and we don't require a cover letter. A one or two page resume is about all you need. Keep it simple. We have about 200 openings in technology. If you are looking feel free to email me at keithelder@quickenloans.com and I'll fast track your information to our internal recruiting team. Thanks!
I do not find it bizarre, we are talking about 98% of the customers who actually bought the product, despite its low sound quality.
I have a yelp page for my small business. I got a call from their sales team, listened to the spiel, thought about it for a few days and decided it wouldn't be worth the investment. I told the salesperson so, and that was it. No harassment, no noticeable impact on my page. Just an anecdote... Maybe I'm too small a fish to be worth their trouble :)
The equivalent of ring -2 privilege. Below the OS or hypervisor level.

The intel remote control firmware is a rootkit that lives on many many systems for which the full features and capabilities of, along with all vulnerabilities, are kept as trade secrets.
$35 Trillion to be rigged due to PCI Bank code used by major Banks
The paper: http://theorangeduck.com/media/uploads/other_stuff/phasefunc...
That's not a bug, it's a feature! User jawns posted some of their marketing copy elsewhere in this thread:

"COMPAS offers separate norms for males, females, community and incarcerated populations"

And they call that "defensible decisions"! In other words, they want to make sure the software doesn't rock the boat. If there's a bias, they want to preserve it so it doesn't look like their algorithms are "weird".
I don't know what you mean by "nope."

Certainly there are grammatical differences between Hochdeutsch, Plattdeutsch, Allemanisch, (much less the varieties spoken in Switzerland!) in addition to accent and (minor) vocabulary differences so I presume you aren't disagreeing with that. I have been to plays in Munich that were explicitly in Bayerisch and were deliberately incomprehensible (have had the same "problem" in Edinburgh). So I doubt you disagree with that.

Do you disagree that people use Hochdeutsch at home? All I can say is that my kid grew up speaking Hochdeutsch at home because his mother (from south of Hannover, near Goslar) speaks it in the house, as do the rest of her family, neighbors, etc so it's what he learnt when learning to speak. In Berlin and in the overseas German School the kids all commented that he was the one who didn't have to learn the accent (in the overseas school it was very clear that all the kids had different accents).
It seems that for network management vPro needs a compatible CPU, motherboard chipset, and a Intel ethernet controller. So in theory Macs are safe from remote exploitation?

What will really be interesting to see is if this is exploitable via PCIe for local privilege escalation on consumer processors with vPro.
Maybe it is just wishful thinking on my part then :D
What is your current “bathroom book?”
Mine is currently The Unix Programming Environment, Kernighan & Pike, 1984. https://en.wikipedia.org/wiki/The_Unix_Programming_Environment

(Ahh ... blue on white book covers.)

It's a pretty good substitute for Unix Power Tools, although obviously much less coverage, but a great intro.

It's also dated, so I don't know that I'd recommend it to anyone new as the book they should read (but back in the day I would have). But as an old fart I'm getting some good reminders, and the occasional "Oh, so that's why I've been doing it that way."

The authors were there at the creation, and there's some interesting historical comments. James Gosling gets a sentence.
AAC is also higher quality than MP3 at medium bitrates[1], but this is largely irrelevant for high-bitrate iTunes downloads.

[1] http://listening-test.coresv.net/results.htm
How do I "choose" ALAC? I thought only select albums were available losslessly.

Support Bandcamp. Support Databeats (storefront for many drum 'n' bass labels). Hell, support Beatport and Juno, even though they insist on huge markups for WAV/FLAC.
Title is extremely misleading. It is starting a funding round, it has not received the funding as the title states.

After Theranos I would expect any rational investor to approach this with extreme caution.
The only way for other business models to work will be to ban collecting invasive info about your users. Otherwise we're stuck with the spy-vertising economy forever. Boycotts (Boycott what? Most of the Internet at this point?) won't work for the same reason we can't just rely on boycotts to enforce e.g environmental regulations or safe workplace standards.
No.

> An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs

This appears to imply an "exploit $site-backend -> provision AMT -> be vulnerable to network/local attack (for provisioned AMT) -> get AMT system privileges" route.
VPro is not in all Xeons, AMT is in only two Xeons that I've been able to find so far, 3400 and E3-1200.
I can buy that it's accident that this vulnerability exists. It's still gross stupidity/incompetence/negligence (/malice?) that this vulnerability ever had the possibility of existing. That is, the feature should never have been implemented, to prevent exactly this scenario.
> The only companies that should be worried about "poaching" are the ones, for example, who are not paying market rate....

Well, "only" is implying it's not almost universal. Companies routinely pay market rate for new hires and then base raises and bonuses on KPIs for individuals, teams, or the whole organization.

Are there companies that say, "Well, we had a mediocre year, but market rate for devs went up 8%, so I guess that will be the baseline raise for everyone."? If a company does anything less, eventually employees are paid below market rate and they're forced to negotiate a bigger raise (convincing management to ignore KPIs and pay attention to market rates) or find a new job.
Sure. Let me know if you find a reliable source of data.

Our ice cream is great though.
I'm pretty skeptical of this claim. The barrier from $0.00 to $0.01 is huge, and it's even moreso with people young enough to not have credit cards.

It's not that "oh, if it'd succeed someone would have done it by now," but the attempts I've seen at this make me think that it'd be very difficult to even try.
The spyware is there due to customer demand. All the biggest customers of Intel buy in vast quantity and need these features for their fleet management. It ain't going nowhere.
I've used both homebrew and macports recently. Both are fine, but I do prefer macports. I like the way it tracks dependencies. Yes it takes a bit longer to install packages because it likes to install its own versions of everything, but that really hasn't been a problem for me. I suppose it would matter if you needed to set up a new laptop on battery power using crummy public wifi, but otherwise it isn't a big factor for me in picking between the two.

Homebrew does have the cask system for installing apps and fonts. It is useful for grabbing things quickly, especially stuff like the oracle jdk and vagrant which use package installers. Still, anything you install with cask is going to self-update, most likely, rather than providing updated through homebrew, so it is really a one time benefit.
In this case there's not really a naming problem either. The confusion comes from the idea that ((A -> B) && (A -> ~B)) is sometimes true. Capturing that subtlety in a name doesn't seem practical to me.
> sports teams benefit from being able to pay below market rates to players they have developed

They also pay to keep players off the payroll of their competitors. There's not strong incentive to develop the players in those cases.
As some one who lives very close to the bridge in Atlanta, it is hard to believe how disruptive it has been.

While I thought traffic in the past was bad, it recently took me an hour to go 1.5 miles. A trip that usually takes 10 minutes at most. People don't go to restaurants or out at all, anytime close to rush hour. I use to pop up to corner to grab a pizza, now it takes me 20 minutes just to get to the end of my street! Glad I can bike places.
I hooked up LuaJIT to emacs for fun. Emacs recently released a new module system where you can build DLLs that are loaded dynamically: http://diobla.info/blog-archive/modules-tut.html

Getting LuaJIT to work on 64-bit OS X required building a custom emacs with linker flags -pagezero_size 10000 -image_base 100000000. This is unfortunate since obviously users will not take the time to build an emacs with custom linker flags. But more generally, this is an issue any time you want to embed LuaJIT in an application plugin rather than the application itself.

There's a bunch of scattered info about the issue:

https://gist.github.com/nddrylliog/8722197

http://hacksoflife.blogspot.fr/2012/12/integrating-luajit-wi...

https://en.blog.nic.cz/2015/08/12/embedding-luajit-in-30-min...

http://luajit.org/install.html

I was hoping there might be a way of sidestepping the issue somehow. If anyone has any ideas, it would be appreciated. LuaJIT has some nice speed improvements compared to standard Lua, but more importantly it has a pretty amazing FFI library. The C declaration parser in particular is valuable.

(Yes, I know it's pointless to hook LuaJIT to emacs. It's mostly a "just because" project.)
I would suggest starting with the Klein and getting through the section on complex numbers, "Playing with C", which is at the end of chapter 1. (Note, Klein has a lengthy chapter 0 which is a review of prerequisites such as functions.)

After that, I suggest moving through them roughly in parallel. You may find that you prefer one or the other; I wouldn't feel bad about running with either one. (In my view, the Klein is more uneven: it has more weak sections, but is occasionally very compelling.)
> Even function has a definition in the philosophical sense unrelated to even the technical details of the lambda calculus.

Agreed, "function" has many concrete definitions, but arguably, there is some essence of what it means to be a function that we see reflected in each instance, and so virtually all of them are interconvertible in some real sense.

For "object", I see this essence as procedural abstraction. Every discussion of objects features access to data mediated by arbitrary code, which is how they implement behaviour. Object factories and numerical abstractions (fixed, rings, arbitrary precision, etc.) simply don't fit into your narrative of objects, so defining objects as requiring identity is immediately refuted in my mind.

Certainly you could argue that your approach to objects is better for software construction, but I don't think that means other approaches are no longer object-oriented, in the way that we can say that C permits you to violate the essence of functions.
Sean Spicer Tweeted a Bitcoin Address – Not His Password
Location: NYC, NY.

Remote: Yes.

Willing to relocate: Yes, depending on location.

Technologies: Rust, Haskell.

Résumé/CV: https://alexeyzabelin.com/assets/resume.pdf

Email: zabelin.alex@gmail.com

GitHub: https://github.com/alexeyzab

Self-taught Junior dev looking for work. Preferably Rust or Haskell, but I am open to learning some other technologies as well. I've built multiple projects, have an active GitHub profile with plenty of open-source contributions. Fast learner, don't need to be micromanaged, eager to improve.
I have to say, the way that the pfense team is handling it, and the moderators over on reddit, while I had been considering using it, I think I'll use ubiquiti when I upgrade the network
MissionU | Curriculum, Product, Marketing, Front-end Engineering & Admissions | San Francisco, CA | Onsite Only, Full time & Interns | https://www.missionu.com/

About MissionU: We don't believe anyone should have to take out loans to launch a meaningful career. MissionU is a highly selective one-year replacement to the bachelor's degree that takes 15% of the salary of grads making at least $50k instead of any tuition up front. MisionU's co-founders have previously founded Pencils of Promise & Degreed, respectively.

Email us your resume at jobs@missionu.com or apply at https://angel.co/missionu/jobs
Buy from Bandcamp.

Support indie artists and buy music in MP3, FLAC, Apple Lossless, AAC, Ogg Vorbis, WAV or AIFF.
Homebrew + Strap is a winning combination. (https://github.com/MikeMcQuaid/strap)

But I do think that the various taps and casks and sprockets and bits are potentially getting out of hand. Homebrew 2.0 - New API and usage pattern?

However:

cask outdated: Finally! Thank you!
search: Updates most welcome.

And plenty of others. Thanks for all. And one tip:

export HOMEBREW_NO_AUTO_UPDATE=1

That saves me no end of time and irritation on slower networks. And on faster networks, too. I don't want auto-update on by default, but if it has to be, so be it. There's the fix.
> Your argument that climate change skeptics are destroying the planet is only true if climate change is indeed man-made

Even if climate change is man made (and I believe it is), the argument is only true if the predicted dire outcomes of climate change in the predicted timescales are also true (this I'm not as convinced of). There are likely currently unknown variables that will retroactively devalue the predictive strength of our models one we observe how the future actually is vs. the predictions.

Also, skeptics aren't destroying the planet any more than non-skeptics - everybody still drives cars, eats meat, and uses electricity.

It can be argued that skeptics are hindering government policies that could help mitigate negative effects of climate change, but so far the policies I've seen proposed would have a near negligible effect other than making us feel good for doing something.
https://news.ycombinator.com/item?id=14242104
Senior Fullstack Engineer | Javascript, Node, Mongo, SPA | San Francisco (SF) | Onsite / Remote | Visa

At Localize we're creating a new way for companies to expand their products and services into new markets by simplifying the translation of websites and applications. Small startup offering the perks and stability of a big company.

Apply: https://bit.ly/localize-apply | jobs@localizejs.com

3x revenue growth in 2016 (7-figure). 8 person team. We value positive work culture and sustainable business models fueled by customer growth (we love our investors as much as we love customers who invest in us).

We're looking for senior engineers with 3-7+ years experience. Expert level Javascript experience. Management experience a plus. Competitive salary, equity, 401k + 4% matching, company-paid insurance (health, dental, vision, life), 3 weeks PTO, paternity & maternity leave, plus the standard free food + beanbags ;)

You should be excited by:

— Working in a complex, evolving codebase written in Javascript, Node, MongoDB, Redis, hosted on AWS

— Large-scale applications (we reach millions of end-users per-day)

— Native browser APIs, deep understanding of Javascript (w/o jQuery or frameworks)

— Understanding of unit / integration testing, TDD, and security + user privacy best practices.

— Learn quickly, act autonomously, think analytically.

Learn more: https://localizejs.com/

Apply: https://bit.ly/localize-apply
I was assuming dom0 meant that Hochdeutsch is quite widely spoken at home, rather than that it's never spoken at home.

I only know German as a second language (so have only studied Hochdeutsch) but I have the impression that it's rather common as a home language today. One reason may be that there are more couples than ever before who've come from different regions of the German-speaking world, and hence have Hochdeutsch as their main common language.
If you want to get an idea just how good LuaJIT is take a look at these benchmarks against the stock VM(which is already good) [1][2]

We used to run Lua on a 300MHz MIPS processor and it was impressive in how well it worked on that constrained platform(only 8mb is system ram, of that Lua ran in a fixed 400kb block).

[1] - http://luajit.org/performance_x86.html

[2] - http://luajit.org/performance.html
Announcing FOSSA Public Beta and Funding
Corporations, even if you look at the graph linked in that article, are biased toward Te users (with extroverted Te users being more favored than introverted ones), then the other extroverted judgers, then everyone else. That is, INTPs and others tend to not make as much.
Audio products are fashion statements.
it can't arbitrate news, do we really want it trying to arbitrate diagnoses?
So, "'Zilla" or Xgrid?
Russian social network Odnoklassniki ("classmates" in English) tried subscription-based model for two years. It nearly killed them.
Look into Corsi and Fenwick.
The traditional languages of France are basically an infinite fractal to the extent that many of the forms are basically unheard of outside of the areas in which they're spoken.

I lived in a (largely rural) department of France called Mayenne for a year. Old people there universally believe that they grew up speaking something called "patois mayennais" (let's translate this as "Mayennese dialect") before they had to learn French to get jobs in the city.

However, I can find very little reliable information about this Mayennese dialect on the internet, in French or English. There are a few "local color" type newspaper articles that reference it, but that's about it. French dialect maps I've seen don't mention Mayennese dialect at all, and claim that Mayenne spoke either Gallo or Angevin.
That's fallacious thinking. Just because someone made incorrect predictions doesn't mean that the trajectory is incorrect. Clearly, at some point along the path of exponential population growth we will experience diminishing returns in the yields of engineering efficiencies. Ultimately, we really are dealing with a zero-sum game.
Google Cloud API's Go Client Library
> The easiest way to do that probably results in a callback to Big Daddy G every time I access anything sensitive and I'm cool with that.

Why?!
Do you think that's a fair comment on the article?
/r/netsec pointed to what seems to be the mitigation guide. It has the same "SA-00075":

https://www.reddit.com/r/netsec/comments/68oy3q/pdf_intelsa0...

It talks about turning something off with a Windows executable. Was it necessarily on to begin with? Anybody familiar with this product? I thought this was a sub-OS level thing.
The postman, local mail company, phone line company, Microsoft (Skype).

Unless you talk to them face to face, most, if not all, forms of communication rely on third parties.
> Do you disagree that people use Hochdeutsch at home?

I assume he disagrees with your claim that almost nobody speaks Hochdeutsch at home (which you even seem to contradict yourself).
This is baloney. The workings of any machine learning algorithm is not beyond our understanding. Even on an intuitive level, it is easy to watch what it is doing and derive theories about what is going on. If you spend the time to investigate it is possible to map out what is going on. You can determine "This pathway delivers a high signal on pictures of brown cats, this pathway lights up with pictures of black cats." Or whatever.

This kind of breathless "Oh we CAN'T understand!" editorializing gets clicks because machine learning is so strange to most people, but it's terrible. We should instead be spreading knowledge about the very simple principles that are underlying the complicated behavior.

Our brains are far, far more complicated than even our most advanced machine learning right now. Yet we are constantly making progress on understanding the workings of our brains. This article is just terrible.
Who's going to buy and deploy those chips though? Don't AWS, Google, Azure use Intel exclusively and I assume have lock-in contracts? The exception are GPU's, which AMD (NVIDIA) has some cloud penetration[1] but still lots of work left to do.

[1] https://cloud.google.com/gpu/
> If you remove human decision-making and replace it with algorithms you will achieve better results.

Not really. We're not talking about computers inventing algorithms from raw data. People typically invent the heuristics and algorithms, so it's still people being clever and creative. They just have computers codify their decisions (i.e., code).

In other words, a spreadsheet didn't come up with the OBP correlation. A spreadsheet was just used to do the analysis more efficiently.
I was just doing some research on Intel Management Engine (ME), the independent subsystem on which AMT and other security applications run. Since I have them at my fingertips, perhaps these will be of use:

* By far the best place to learn about ME and AMT that I found, though it's a few years old:

Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan (security researcher with the Platform Engineering Group at Intel). Apress (2014)

* Intel x86 considered harmful by Joanna Rutkowska, founder of Qubes (2015)

http://invisiblethings.org/papers/2015/x86_harmful.pdf

* How to Become the Sole Owner of Your PC by Maxim Goryachy, Mark Ermolov, Positive Technologies [haven't read this one in awhile]

https://github.com/ptresearch/me-disablement/blob/master/How...

* How Purism avoids Intel’s Active Management Technology by Purism

https://puri.sm/learn/avoiding-intel-amt/
From their open positions list, it looks like it's US-only.
Exactly, any tool/service/software installed and running on a system is a potential vector of exploitation.

There's a reason you want to keep the amount of softwares installed on a critical system, other than performance.
The solution is included in 2.1.0-beta3: "LuaJIT for x64 can optionally be built for LJ_GC64 mode by enabling the -DLUAJIT_ENABLE_GC64 line in src/Makefile or via 'msvcbuild.bat gc64'." "This mode removes
the 32 bit limitation for garbage collected memory on 64 bit systems." [0]

[0] https://www.freelists.org/post/luajit/LuaJIT210beta3