skysight-inc/HackerNews huggingface dataset:
> Starting to believe me now that far more systems are affected?

No, that system still falls under Intel's advisory, it's just the Lenovo page that doesn't help to distinguish. It was already known that laptops could be affected.

Your claims were about 'All systems running VPro' and 'All Xeons'. Neither of those claims has - so far - being substantiated, the only Xeons affected are the ones - though there may still be more - that I dug up earlier.

Really, you should let this go or come up with actual proof for your claims it is getting annoying. You pollute this whole thread with a bunch of unsubstantiated claims presented as fact. It's almost as if you would love for it to be true that all those other systems would be affected too.

Don't get me wrong, I'm very much against ME and any non-free software on my machine starting with the BIOS but I'm also not going to wish for just about every server on the planet to be remotely hacked just to prove my point.
First observation: In Post a Job, there is a typo for Job Desciption (should be Job Description)
Second observation: Under How to apply, I think there should be a link to the apply page (example: http://careers.hotjar.com/o/full-stack-developer-europe), maybe a button to indicate Call to Action. Currently, I need to select it, copy, paste it in the url to get to the page.
Show HN: VPS Comparison – Automated tests to compare VPS by yourself
Software patents are banned in Europe, so the whole shebang is really only relevant in the US. While the patent offices in Europe allowed software concepts to be patented, these patents are not enforcable.
Haven't seen a reason to use any type of NoSQL aside from a cache layer. Most Modern RDBMS have Json support if you still want to use a document approach for specific cases but overall Postgres and SQL Server are able to perform equally if not better then most recent NoSQL implementations (unless it's a really specific one off use case for reading)

just look at the nightmare MongoDB has created in most startups a year later.
You should at least isolate all your containers from the host machine using a virtual machine.

LXC security can doubtless be mis-configured; how much info can you share regarding your setup? From a few minutes research it sounds like you need user namespaces and seccomp for starters.

Redhat|OpenStack relies on SELinux much more than seccomp: https://news.ycombinator.com/item?id=14220503 http://rhelblog.redhat.com/2017/01/13/selinux-mitigates-cont...

Abusing Privileged and Unprivileged Linux
Containers (2016) | https://www.nccgroup.trust/globalassets/our-research/us/whit...

You should get some free testing from your Show HN! https://news.ycombinator.com/item?id=14245447
I see what you're getting at. IANAL, but generally, the only purpose of an arrest on a subpoena is simply to compel your appearance in court. The judge could theoretically slap you with a contempt charge for not coming in on your own but that isn't likely. At least not the first time around. But still, I imagine it isn't pleasant to have guys in suits show up to take you to court in handcuffs, so probably best to deal with it before it gets to that point.

By the way, it's very easy to tell which subpoena actually requires compliance. It'll be the only one with a judge's name, signature, and (hopefully) a court seal on it. Anything lacking a judge's signature could theoretically be used as toilet paper. Ask anyone working at a big corporation's legal department. They will be quite familiar with these self-generated "administrative subpoenas." I'm sure Apple and Facebook throw these out by the dozens every month from various prosecutors and law enforcement entities and tell them to come back with a judicially issued version.
The Kevlin Partnership
Seeng the joy with LaTeX:

LaTeX users significantly more often reported to enjoy
their work with their respective software than Word
users (t (36.27) = -3.23, p <. 01).

From: http://journals.plos.org/plosone/article?id=10.1371/journal....

You are not alone. :-)
I've already posted on HN how I use SQL in my public affairs data journalism class [0]. To me, there is no better, in terms of accessibility and return on investment gateway language to the power of computation and programming than SQL, with the exception of spreadsheets and formulas. Even if you don't go further into programming, SQL provides the best way for describing what we always need to do with data for journalistic purposes -- joining records, filtering, sorting, and aggregating. Ironically, I learned SQL late in my programming career, and initially thought its declarative paradigm to be mysterious and inferior to procedural languages. In fact, I don't know how to do anything in SQL beyond declarative SELECT queries (and a handful of database create/update admin queries). Turns out this is just powerful enough for me for most app dev work (Rails, Django), and the simplicity is a boon for non-programmers.

ProPublica just published a bunch of data-related jobs and positions. The phrase "Proficiency in SQL is a must" makes an appearance: https://www.propublica.org/atpropublica/item/propublica-is-h...

[0] https://news.ycombinator.com/item?id=8505000 https://news.ycombinator.com/item?id=10585009
I absolutely agree with everything you said with one exception.

> "Protect and Serve"

Everyone thinks that the police's job is their motto. It was some strategic messaging, but they came up with that. Police weren't created to protect and serve. Going back to the foundations of the country's policing strategy, police exist to maintain order. That's why they arrest protesters, shoot unarmed guys who are noncompliant, arrest people for selling cigarette singles. That subtle shift in how we perseve their job explains vertically all of their behavior as of late.
We did see some effects when the world started avoiding US cloud providers and network gear vendors. This time there's kinda nowhere to go.

https://fcw.com/articles/2013/08/07/price-of-nsa-surveillanc...

https://www.theguardian.com/books/2014/may/12/glenn-greenwal...
Indeed, I think Latex is one of this things you like or dislikes forever the first time you tried.
The Most Commonly Reinvented Wheels in Software
Fares as high as $10,000 on board Japan luxury sleeper train
Aside:

"Can you imagine the outrage that would occur in Palo Alto California if anybody presumed to keep chickens in their back yards?"

When we lived in Palo Alto (~2008-2011), we had about twenty chickens and three goats. The neighbors all loved them. There are some ways in which Palo Alto is a pretty weird place, but almost all the people there are just like people anywhere else.
This is exactly right. Almost every company sees security simply as a cost.
That is a low estimate for an hour, I am too focused on getting the train to get the stopwatch out and count cups served, but there is a queue and a lot of fast action behind the counter. Unlike Starbucks there is also multi-tasking and multi-threading going on. But yes, I will have to ask him the direct questions on how it works as a business one day.
Programming with a love of the implicit
Can't speak as to how it scales but I had to use both webex and Zoom in the past year. Paid corporate accounts etc..
No affiliation to either.

Webex linux support is unbelievably poor(literally, greater than a 1/2 days work to get it installed on linux).
Sound quality deteriorates on international calls.
Just really crappy experience overall.

Zoom has rpms/deb packages available. Installation- 30 secs..
Sound quality was crystal clear on international calls.

Webex is one of the few product offerings that makes me truly angry.
It depends. If the calculation can be split into nice chunks you can throw in some gevent.sleep(0) to prevent them from hogging the process. We use python for handling web requests, anything heavy tends to be handed off to another process. It's rare for us but yeah, sometimes you need threads.
You can say it's not true all you want, but that doesn't change the fact that administrative subpoenas exist as a concept and are used regularly by governmental agencies.

Your inability to distinguish between a document signed by a judge and one that is not doesn't automatically imply that it is fraudulent.
Transform Robot Shark
Tnx for this. I will fix that typo and implement a link to apply page. Not immediately, but in the evening, after kids go to bed and wife is satisfied ;)
I use Vim with a customized `.vimfile`, but rarely if ever do I tinker with a lot of plugins. If I'm doing "development", then usually I'm using a JetBrains IDE product with the IdeaVim plugin. If I'm in vanilla Vim, then it's because I'm just doing text editing from a shell, and have no need for a lot of plugins.

This is anecdotal speculation, but I imagine that most Vim users are in a similar boat. I talk to so many lifelong Vim users who have never even heard of "pathogen" or other plugin management systems. I'm pretty sure that heavy plugin users are the minority.

Most people who seem excited about NeoVim (or even talk about it at all), fall into three categories:

1) Heavy plugin users, who want plugins with some feature not well-supported by Vim.

2) Developers who would like to embed Vim within their own applications, but find the classic Vim codebase or license unsuitable for this.

3) "Ideologues". People who don't like Bram Moolenaar. People who wish he would have accepted a pull request that he declined or ignored. People who wish he would release Vim more frequently, make it more trendy, or bloat it up with this or that new feature. People who just don't like the way that the Vim project is run, ideologically speaking. (EDIT: i.e. the brigade crowd who's downvoting every comment that isn't unqualified praise and support for NeoVim.)

So like I said, I'm pretty sure that the overwhelming majority of Vim users do not fall into category #1. And the other two categories are tiny subsets of that first one. So to turn the question around... why WOULD people go out of their way to abandon the default, and flock to something else which might drift away from compatibility over time?
I don't think the title does a great job of identifying how cool this is. Having the animations especially is great!
> Only in America" is hyperbole.

Yes. Yes it is.

> The advice is still sound in any part of the world: don't call the cops if you don't want someone to get arrested.

The advice very much isn't sound in any part of the world, and I suggest you go live in a place with a friendly police force for a while.

Your statistics prove nothing. You're taking a random country and asserting that the statistics for that country are true everywhere. Furthermore without arrest statistics it's a rather hollow argument.
There are a bunch of options for low-latency video conferencing solutions available for people who actually need it (tele-medicine/surgery, sports/media broadcasting, enterprise conferencing). The thing is they just cost a lot of money and require dedicated hardware. Here's one company I know of that does this: http://www.haivision.com/
I've recently started learning Pandas (dataframe library for python) and i find most queries cumbersome compared to the absolute minimal SQL I know
That's funny, the main reason I cite for going from spreadsheets -- which are powerful enough with pivot tables and VLOOKUP -- to SQL is the ability to use JOIN statements in the latter, i.e. when you need to work with data from multiple tables. Most production SQL databases involve multiple tables, not as a legacy hack but by deliberate design.
Will the real F# idioms please stand up?
> SQL and relational database management systems or RDBMS were invented simultaneously by Edgar F. Codd in the early 1970s.

Codd didn't invent SQL. Donald Chamberlin and Raymond Boyce did.

> SQL is originally based on relational algebra and tuple relational calculus

Maybe "originally based on", but not "an implementation of". For example, it is perfectly possible for an SQL query to return duplicate rows, which isn't possible under relational algebra/calculus, a relation being by definition a set of rows (or, more precisely, of tuples).
How Bugfender Saved Me [iOS/Android Remote Logging Tool]
I don't understand, this has been a feature since forever. You can tell the emotional state of people by the music they listen to.
Last few months I have used Zoom, RingCentral, Skype for Business, Google Hangouts, and Gotomeeting.

Zoom was best followed by gotomeeting.
It also doesn't matter if 10xer's exist for most companies.

Most just don't have the money, culture, management, fellow coworkers, or whatever else to keep that 10xer (often times even get them in an interview).

Seriously most companies can't even keep a 10xer janitor if they tried.
San Francisco, Airbnb drop lawsuit over regulations
So if I buy such a phone, what is the relationship between the baseband chip/OS and all the bullet points you listed above?

https://www.fsf.org/blogs/community/replicant-developers-fin...

It's a real pain, but I can buy a laptop/desktop that doesn't have Intel ME (or its AMD equivalent) running on it. But there's no such thing as a working phone without a baseband OS. And AFAICT there isn't a single available baseband OS running FLOSS, even including the zerophone.

In fact, there isn't even a phone that has a physical hardware switch that allows the user to turn off the baseband.

edit: clarification of "Intel ME"
It makes it easier to get started, and you can often kinda-ish reuse some effort from your webpage at the cost of bad performance and non-native look/feel.

It's a trade-off for me, I use it when the trade-off feels right.
I plan to make many different types/colours of pins for different topics (social, informative, advertisement, etc). Cheers.
Akamai blocks unordered HTTP request headers
No Friction – Bad Earthquake
QuantumWise | GUI software developer (Python/C++/Qt/PyQt) | Copenhagen, Denmark | Full Time, Onsite

QuantumWise is a mid-sized company (approx. 30 people) located in Copenhagen, Denmark. Our product, Virtual NanoLab, is used for atomic-scale modelling in the fields of electronics, materials science, and chemistry. Don't let the heavy focus on science discourage you, though! We're looking for an additional member for our GUI team (currently three people). Some familiarity with developing Qt or PyQt applications is required, and experience with OpenGL is also welcomed.

The application process consists of solving an exercise. After the exercise there is a skype interview, and if all goes well we'll fly you over to Copenhagen to have a final chat. You can find the application and exercise here: http://quantumwise.com/about-us/jobs#1046

edit: Don't forget to mention you're coming from HN ;)
Construction Task and Project Tracking
I once worked on a rather convoluted bunch of microservices where 40% of CPU time was spend inside cJSON library. Cap'n Proto does exactly what you propose - sends bytes over, except in a documented, organized, forward- and backward-compatible manner, instead of a haphazard implementation burdened by technological debt.
Another avenue is a complaint to the state bar. This is an unethical practice.
Nice thing. Can I also stream the audio?
Does it work now? I have modified my nginx ssl config, but I haven't got any devices with the same issue you had.
I just replaced my nearly 6 year old Core i5 laptop with a newer Core i5 laptop. CPU performance was fine on the old one, and while the new one probably score better on benchmarks, it's not noticeably faster than some previous jumps(such as the old Core i5 laptop replacing a 3 or 4 year old Core 2 Duo laptop). Of course there were still reasons to upgrade with the biggest being far better battery life and of course non-CPU upgrades in the new laptop like a much better screen and an SSD(which I probably would have upgraded the old one with and kept it if not for the screen and battery life).
Putting aside the question of whether these folks are serving malicious JS to users, seeing no network activity at the same time as your keystrokes doesn't tell you much. The client could easily be caching your keystrokes locally, then uploading in a batch with any AJAX call.
They use "Intel® Optane™" to refer to the whole "solution" including their awful Windows-specific hardware-supported caching hack (Rapid Storage Whatever), because that's how they're going to sell it to consumers. Of course the drives are normal NVMe and you can use them as L2ARC+ZIL in ZFS :D
Firefox Nightly Marks Legacy Add-Ons
Yeah, I use MongoDB whenever my tables get too big. It's web scale!
The name "Cap'n" was forever tainted for me, from my traumatic experience with "Cap'n Software Forth".

http://www.art.net/~hopkins/Don/lang/forth.html

"The first Forth system I used was Cap'n Software Forth, on the Apple ][, by John Draper. The first time I met John Draper was when Mike Grant brought him over to my house, because Mike's mother was fed up with Draper, and didn't want him staying over any longer. So Mike brought him over to stay at my house, instead. He had been attending some science fiction convention, was about to go to the Galopagos Islands, always insisted on doing back exercises with everyone, got very rude in an elevator when someone lit up a cigarette, and bragged he could smoke Mike's brother Greg under the table. In case you're ever at a party, and you have some pot that he wants to smoke and you just can't get rid of him, try filling up a bowl with some tobacco and offering it to him. It's a good idea to keep some "emergency tobacco" on your person at all times whenever attending raves in the bay area. My mom got fed up too, and ended up driving him all the way to the airport to get rid of him. On the way, he offered to sell us his extra can of peanuts, but my mom suggested that he might get hungry later, and that he had better hold onto them. What tact!"
https://talky.io/ works for a reasonable amount of people, but it's not ideal for regular calls and definitely not secure enough.

There is also https://www.bluejeans.com/ which usually works fine in the company.

Skype for Business? Lol. If only it was possible to _join_ a meeting without an account, that would be great.

EDIT: someone asked if I'm seriously recommending bluejeans; I am, yes. Indeed it's hilariously CPU heavy and their linux support is a joke, but it's still working compared to other solutions. At work we have some vidconf equipment in some rooms which can dial bluejeans on their own and they usually work pretty well, so yes.
is it that their visual cortex doesn't work, or that it does but the pathway between the visual cortex and prefrontal cortex is severed? It seems like she can see, but her conscious mind isn't getting the data - so when she's acting automatically, her subconscious mind still picks up the visual information and reflexively acts accordingly.
MVP: Yes.
Production, complete products: No.
Excellent points, thanks for the thoughtful response. I suppose it depends on the use case and certainly there are limits to gevent, but for our use case--serving and routing web requests, they rarely come up and are easily worked around. In some cases these pain points can be avoided by only patching the libraries you need rather than monkey.patch_all(), other times we can just spawn another process to do the work. I can appreciate that there are workloads where asyncio is better suited than gevent, but gevent is just so easy.

We communicate across languages quite a bit using sockets. A given system may have 20 processes that communicate with each other and the outside world. Most but not all of the python processes use gevent. Composing software with sockets scales well and avoids compatibility issues. It's rare for our python processes to be cpu (or core) bound, but it's easy to be IO bound and that's what gevent solves.
I really like https://appear.in - simple, straight-forward, and "just works". Don't know how well it works for more than two people, though. You can add screensharing with a Chrome plugin. It's all I need, really.
Well, I can't reproduce it now because I've already upgraded, and as far as I can tell there is no way to go backwards.

Its underhanded in the sense that there is no message to the user that this is occurring. I do understand your need for this feedback, but I do not think that home-brew should change this setting once the user has set it to "do not report". This is key to the adoption of homebrew in some environments - for example, on some corporate networks having automatic exfiltration of analytical data, anonymous or otherwise, is instant disqualification for installation - and I've already had that conversation with our sysadmins, who notice these things almost immediately.

If there is something I can do to help you debug this, let me know - otherwise I'll just happily continue upgrading home-brew as time goes by, and if I see something, I'll say something.
I'd say Electron is "good enough" for many purposes, meaning its advantages overweigh the disadvantages. Lower barrier to entry compared to native solutions, developer productivity, cross-platform sharing of code.. Plenty of large companies use it to build (even flagship) products.

The disadvantage that is most talked about is its final bundle size, and I'm not aware of any developments that are trying to solve it. I'm in a project with a number of Electron apps built and in the pipeline, and we're searching for a potential in-house solution, of a central app that hosts/downloads/embeds "mini-apps" that run on the same foundation, to share the same Chromium run-time. Really hoping for a community solution to this though.
I am just working on my own solution for myself, I gave up on foursquare and yelp.
Thanks! I'm the author of the paper, glad you like it, and especially glad that you think the animations are cool :-)
Courts Must Allow Online Platforms to Defend Their Users' Free Speech Rights
> with the exception of spreadsheets and formulas

You may want to check Oracles MODEL clause. Not as powerful as a spreadsheet but you can already do a lot of things in the middle of your SQL.
Chinese Government and Hollywood Launch Snoop-And-Censor Copyright Filter
Storage engine design
Moore's law doesn't concern it self with clock speed, but with the number of transistors. While the clock speed have stayed about the same, the number of cores have increased. The problem is that it's really hard to make a program that takes advantage of all those cores, so you as a regular consumer doesn't see any difference in your day to day usage.
Thanks and sorry, not yet. Email features@tux.io if you want this to be considered for the road-map.
Magento 2 product designer – Brush Your Ideas
Those were good. Thanks for sharing. My standards have been raised.
The toxic thing about social media is that people are only sharing their best moments or are even trying to portrait their lives to be a lot better, then they actually are.

So if you're a depressed person on social media seeing all those awesome things people are doing, just sends you down a downward spiral, even though a lot of people are probably not much better off.

And you just said it yourself. You didn't need to know your "friend" got her doctors and your life probably had zero impact from knowing, which really is the best case szenario with social media.

I am not saying, social media serves no porpuse though. For event organizing and crowd funding and probably a lot of other things, it comes in handy.
Yes but it becomes really noticeable (for me at least) when you get down the the final 5-10% of battery life.
Define "good" :)

If you need to have a desktop app quickly (for multiple platforms, even) and it's the difference between launching something or not, then yes it is good.

If memory footprint and performance is a critical part of what you're doing (it's not always), then maybe you should look at a different technology.

I think Electron has allowed a lot of cool things to come into existence that wouldn't have if not for Electron.
I have a solution I am working on that might interest you.
In a lot of places I think people would not appreciate chickens.
Clarifi – Real-Time Hotel Mapping and Descriptive Content Delivery System