skysight-inc/HackerNews huggingface dataset:
The main CPU is no longer the "main" CPU. And before you ask, no you can't run your instructions on the real "main" CPU. Whose computer is it now? I went to Linux because of Sierra and things like Windows unavoidable "instrumentation" (whose OS is it?). Now Intel hardware is putting off that "you don't actually control me" vibe :(
reminds me of CIA's Simple Sabotage Field Manual[0]

https://www.cia.gov/news-information/featured-story-archive/...
you kind of can't get to _all_ the things, but you can choose to approach the problem with containment. We are one option (see my profile) but there are lots of others.

IMHO the problem isn't known vulnerabilities checks and patches but the vulnerabilities you don't know. The problem is, of course, that it is very hard for most people to get to a default-closed model for their servers.
Another aspect, one that I've encountered many times, is that even when someone has to implement the idea from scratch, they don't work to understand it and instead just translate pseudocode. I once had an interview where I was asked to explain why a piece of code (that the interviewer wrote) worked, because the interviewer did not know.

A benefit of the bottom up approach, of starting with the math and no reference implementation, is that you are less likely to implement it unless you understand it. And I should stress, these are tradeoffs.
ah now I follow, my bad :)
Will there be internships in SF during Fall/Winter?
We know that it's either very light or it's a low orbit, otherwise spacex would have done a water landing.
Is a stand-your-ground law a perk that you'd advertise? Interesting job description though.
So New beach front development coming online soon after?
Twitter reimagines as Live TV
"So, AMT being a part of VPro "

I thought AMT was a component of VPro. I assumed all VPro systems had it based on early marketing of the management capabilities of VPro. They were just bundling management and security features. Memory too broken to be sure but that feels like what I said to a lot of people over time.
You're talking about about OOP-B, everyone here is talking about OOP-A. OOP-B isn't really a part of what's being discussed.

Anyone can bring it up, but "education" isn't relevant here. It's not what was discussed in the article, or the comments.
Location: San Jose, CA, US

Remote: Yes

Willing to relocate: No

Technologies: Javascript, React, Angular, Node, Express, MongoDB, MySQL, HTML, CSS, Mocha, Chai, Python, Swift

Résumé/CV: http://jillcrobinson.com/docs/jillrobinsonresumeMay17.pdf

Email: contact@jillcrobinson.com
Bitsig.io and Blockchain.info appear to show everything in UTC. This Gizmodo tweet, screenshotting Spicer, will show up in whatever timezone you set Twitter to https://twitter.com/Gizmodo/status/824635801657114624 - you can easily verify it's several hours earlier.
IIRC one of the things that the TPP was supposed to do was "harmonize" (read: ram the US idea of down the throats of everyone else) software patents and other relevant aspects of IP law that were near and dear to major US companies.

Since TPP is dead, the IP-dependent industries may start looking for a new venue, as they appear to have been putting a lot of eggs in that particular basket. But there may be a short-term reprieve for countries not currently toeing the US party line.
The Definitive Guide to the Ketogenic Diet
Google at least has hedged Intel domination by building PowerPC servers themselves. I doubt any major provider would have a 100% lock-in contract. It would be more likely they would contract for XXXX servers per year, where XXXX is some percentage of their likely demand.
Is it just me or is this first time they've caught video of stage separation from the ground?

Beautiful video in any case. It's fun to see the first stage engine cut off, separate, flip over, and the second stage accelerates away.

https://youtu.be/EzQpkQ1etdA?t=857
And knowing that I'd never be naive enough to embed it in every CPU I made since 2009. Not to mention allowing AMT to exploited even when it's disabled, and not share the source code so it could be properly audited. Every decision Intel made points to either them thinking this system was bulletproof (at least at the upper decision making levels) or they're so incompetent they shouldn't be trusted with anyone's security.
It looks like a wi-fi password.

I harbor a strong intuition that Sean Spicer lacks a certain je ne sais quoi, required to even consider trying to bitcoin.
Cogent Labs | Research/Software Engineer, Research Scientist | Tokyo, Japan | ONSITE, FULLTIME, VISA

We are a well funded (about 11.5 million dollars series A funding received in March this year) artificial intelligence startup located in the heart of Tokyo. About 20 members total, from 10 different countries. The focus is on bringing the latest in deep learning / AI research to industries in Japan. We are looking for research scientists and research/software engineers. Japanese language ability is not required, as the main language within the company is English.

Please apply here: https://cogentlabs.breezy.hr/

The main website is https://www.cogent.co.jp/ , but the English version is not ready yet (only Japanese).
MIT’s new device is a step above wearable health trackers
You guys seem great! I'm currently at Melbourne, are there any front-end opportunities ahead?
I'm not getting funded to build Ethereum, I'm using Ethereum as a working technology stack. People pay me to build and deploy other projects on top of it, and some of the projects I've built are also in production.
When I read about using both iris as unique identifier, it came to my mind this question:

The iris of a living been do not change with age ?
I do not know of any big OSGi success apart from eclipse. At one point Spring put a lot of effort and then they dump all that at eclipse project after not seeing much traction. Apache has bunch of OSGi related projects and they do not seem very popular compared to straightforward Java/EE components.

For my applications I see some value in Jigsaw specially modular images. Despite being available for long time OSGi still is some esoteric technology without mass developer appeal whereas Jigsaw seems to have potential to be really useful to lots of developers.

It is rather sad that OSGi people keep piling on Oracle for not using their barely successful technology.
and how good is the ecosystem? honest question
Surprised Angie's list was able to get this much, every impression I had was they were doing poorly, especially after the layoffs a while back. Would be interesting to have been a fly on the wall during the negotiations.
I love the concept, but I think the added complexity is hard to trust, at least for now.
How the ACLU Is Leading the Resistance
The Elementary Kool-Aid Acid Test
I don't care who owns them as long as they make reviews searchable. Drives me mad.
This will always be true for any subjective rating system, i.e. stars, upvotes, etc.

The solution is classification instead of ranking.

I am more interested in a Mediterranean place that cooks falafel to order and has tahini sauce than I am in a 4-star Mediterranean restaurant.

Conveniently those are all verifiable facts, so there's no need to wrestle with subjectivity.
Asthma: Certain bacteria protect against a disease that is a growing threat
Blockai | Sr. Backend Engineer | San Francisco | FULL TIME, ONSITE, https://blockai.com

We're hiring our first backend engineer to work on a greenfield, large-scale, image search engine. Our ideal candidate has experience with database systems, computer vision and is proficient with at least one of Python, Java, C, C++, Go. You must have a solid CS/SE background and be reasonably comfortable reading academic papers.

If you're up for the challenge, send me an email (oli@binded.com) and mention HN.
>If you run multiple tabs per process to keep memory usage and Xvfb instances limited then you won't be able to have separate browsing sessions, e.g. two concurrent navigations to the same origin could interfere with each other (cookies, local storage, etc). Another obstacle I have discovered is that you can only take screenshots for the tab that is currently active.

This is a huge flaw in NightmareJS, which is disappointing because of how beautifully simple its API is. A Nightmare fork rebuilt over headless Chrome would be the best of all worlds for browser automation.
I think maybe there's some confusion here regarding the definitions of symmetry and antisymmetry, because they're very closely related. Symmetry says "whenever A, then B" and antisymmetry says "whenever A, then not B". I.e, given a piece of information A, symmetry and antisymmetry tell you to draw opposite conclusions, which is why one is "anti" the other. The only time a relation can be both symmetric and antisymmetric is when the antecedent in their definitions is never true, which is the trivial case.
I'm a middle aged former investor in AMD back in the Athlon days. I find it remarkable that the dialogue about AMD vs Intel is identical today as it was 20 years ago!
The line that I use on my students is that: No one is paid to explore, they’re paid to find.

You're a teacher, not an employer. It's not your job to tell people what to be interested in. This is exactly the wrong attitude to bring to any scientific endeavor, but I guess you don't get tenure for letting your students dick around on their own.

All I can say is that heavens I didn't run into anyone like this when I was first learning technology.
google managed to index this within 2 hours and so it now shows this comment as the only instance of that "word" on the internet
Yes sure, I just wanted to stress some less known aspects of how repressive the system is. There are good things about China, there are things that work and scale more than in the US, for sure.

China works very well for you if you are aligned with the party, or you are indifferent and don't get in their way. Otherwise it does not work very well.
Had never heard of this. Walk (and podcast) all the time for light exercise. Just ordered a GoRuck GR1, Field Pocket, and 20 LB plate. Thanks!
Edit - here's the job posting for the Associate Product Manager role: https://angel.co/bestreviews/jobs/234378-associate-product-m...
It's not misleading and I don't think the GP is responding to the headline alone. The guy chose to present his idea this way and the headline is a fair summary of his attitude.
Agreed. Until the last year or so there was not a single Android OS+Hardware combo that basically had the same full file based encryption capabilities of iOS 4.0. 4 .... dot .... zero. It took some super small subset of Android to reach the security of iOS 5 years ago. I think (think!) Pixel comes close to having most of the features of Secure Enclave -- but you can hardly wave one of the most recent and expensive Android devices around and say "Android is as secure as iOS"... Odds are almost certain any Android phone a consumer will buy today will have far less platform security than iOS.
Flipping the Agile Switch
I thought of the same thing. I have a feeling it's not the same organization however because when Cicada 3301 refers to themselves, they use 3301 rather than Cicada.
But MP3 is what made it possible to share music on the Internet and to play music off of iPod-like music players. Shouldn't the inventors benefit from their work? Don't algorithmicists deserve the same protections that say electrical engineers do?
Not only does LuaJIT have platform-specific assembly in its source, but a big part of its advantage over PUC Lua is of course that it's compiling down to machine language on the fly. And that process is also platform specific. I have definitely seen bug fixes along the lines of "fix X for Y platform's JIT output."

I have also seen non-jit-related bugs impact us in production.

BUT, LuaJIT really is FASTER. Even when JIT cannot be used (e.g. on iOS), it can still be several times faster than PUC Lua.

And that speed is a real killer feature for us. Otherwise, we'd just use JavaScript.
all memory writes are also to disk

I'm pretty sure that is wrong. What most likely slowed down with VM was that as soon as a page operation had to be performed, the OS would block and do nothing else until the disk access was done.
They mostly don't. The models help us make detailed predictions, but you don't need a computer model to know that warmer air holds more water vapor, or that reducing snow cover reduces albedo.

A lot of the biggest questions about how climate change will play out can't be well-modeled yet--like cloud formation, methane deposits in deep ocean or permafrost, etc. We need to learn more, and as we do, we feed that into the models and they improve.

> How do we know that the plants won't absorb all of the excess CO2 without studying the local effects?

We know that plants aren't absorbing all the excess CO2 because we directly measure CO2 concentrations in the atmosphere, and they are going up.
The thing is, in our society athletes represent one of the few paths to life-altering financial success that's still somewhat open to people from poor or otherwise disadvantaged backgrounds. While there are people who win the genetic lottery and get well-above-average physical capabilities, and people who win the birth lottery and get parents who can afford private coaching and training, there are still plenty of athletes who lack either of those advantages but still manage to succeed through putting in work.

Which means they do end up being role models, because "work hard and you can succeed" is something we desperately want to teach children, even when it doesn't seem to be true. So athletes' stories get told as a means to inspire people to better themselves, and that makes their character extremely relevant.
I put together a caching system so the generated wrapper is made available for overview/manual-patching, etc.... It currently validates the generated file against a generated-from-the-json file at import, and falls back to blindly importing the json file if the tooling to generate the class definition is not available.

Ideally, any patching for the class file should really be done as a subclass, as well as any more complex logic. That way, if the protocol json file is changed, it can be just updated without breaking anything.

Anyways, generated class is here: https://github.com/fake-name/ChromeController/blob/master/Ch...

Oh, as an aside, you're actually missing a significant chunk of the protocol json file, mainly because there are actually two of them. There's a `browser_protocol.json` AND a `browser_protocol.json` file. They're both produced as build artifacts, so I can't point to them in the source, but the total json size should be > 800KB (mirror in chromecontroller: https://github.com/fake-name/ChromeController/tree/master/Ch... ).

As it is, this should kind of just splat into your source tree, but I don't want to move everything around without at least asking you how you want things structured.
No, apparently all software is created in free time, for hobby purposes. That's why all software should be free, open source and patent-free. Software devs can make an easy living off supporting their software.
Some of their competition have gone through the trouble to create or buy high-assurance security for such purposes optionally with the code written in languages like SPARK provably immune to errors hackers go after w/out runtimes. This approach goes back to the 70's-80's with modern tools super easy and cost-effective. I mean, a handful of people at ETH made the Muen separation kernel with a similar handful doing a high-assurance VPN at Navy Research Laboratory. There's companies that would do it for them with whatever mix of robust or complex they want.

They just don't give a shit. Like you said, systems like this ought to be bulletproof. I'll add it's especially true when they're in most of the products of a company making hundreds of millions to billions off them. Even small-to-midsized firms are doing medium to high assurance designs. I'm sure Intel could afford it. ;)
I have been thinking about it. Are most of these "clients" owned by people who don't know much about Yelp?
That's kind of the problem. It is, as you say, fluffery - designed to arouse desire rather than to inform. And we already have far too much of this.
Social media has really become a cesspool. All these "influencers" promoting crap without a single care for their actions.

It's like how the search landscape was about 10 years back. Google clamping down on terrible affiliate pages was the best thing to happen to search.

Social media needs similar policing.
Aside from being incredibly low on bugs (often, there are no known bugs at all, although complaints are likely to be treated as feature requests rather than bugs), PUC Lua is also far smaller, and vastly easy to hack on. There are various patches available for it. On the other hand, the guts of LuaJIT are difficult to say the least. Most opportunity to eek out a little more speed by making the code twice has dense has been taken. However I found that adding custom library routines to LuaJIT (for operations like concatenating tables) was actually pretty easy as long as you don't want to be able to JIT them (since library routines call into an internal API which is well shielded, and there's still a lot of PUC Lua code in LuaJIT).

Also, LuaJIT has other extensions aside from FFI; see the website.
F-Script was a very interesting array programming / objects hybrid. Smalltalk meets APL is not far off.
Florida is hardly a state with almost no crime; on a per capita basis it ranks well within the top ten, usually close to #5. Miami, Jacksonville, St. Petersburg, and Tampa all have higher violent crime per capita than, for instance, New York, Seattle, Portland, and San Jose.

Source: Justice Department's Uniform Crime Reporting data.
>Intel® Setup and Configuration Software (Intel® SCS) Deployment Guide [0]

>5. Select Unconfigure this system using admin password, enter the admin password (P@ssw0rd) and click the Next button.

I can just imagine the conversation that lead to this:

"Johnson! This password doesn't meet our corporate password policy of having digits and symbols."

"But... but this is the default password. It's publicly available and is not supposed to provide any security."

"I don't care what your excuse is. Change it right now.

[0] http://www.intel.com/content/www/us/en/software/scs-deployme...
AMD has lost money for the past 5 years. They still lost money last quarter - they just haven't lost as much money as previous quarters/years. Now your sentiment with regards to the brutality and short term thinking of the stock market has some validity - IMO. But in this mad world (to quote you) I'd argue that AMD has already failed. I've long wondered how the hell AMD is still in business given the losses over the past 5 years. That's not an indictment against the good engineers there - just a simple business judgement. How can a company lose that much money in 5 years and STILL be in business. And for the record - I'm looking at you too UBER!
> I am more interested in a Mediterranean place that cooks falafel to order and has tahini sauce than I am in a 4-star Mediterranean restaurant.

You preferences aren't the mean or the median, I suspect.
Gappaticaltirement
Become a Best DevOps Developer from OnlineITGuru
all cities with almost no blacks.. hmm!
> Citizenship is a job requirement.

You're violating federal labor law. Specifically, the Immigration and Nationality Act (INA), 8 U.S.C. § 1324b.

"Employers may not treat individuals differently based on citizenship or immigration status. U.S. citizens, recent permanent residents, temporary residents, asylees and refugees are protected from citizenship status discrimination."

Friendly intro: https://www.justice.gov/crt/types-discrimination

If anyone applies for this job and is denied based on citizenship status, here's where to file a charge: https://www.justice.gov/crt/filing-charge
Where Do the Service Workers in San Francisco Live?
Thanks for your feed back. It's understandable that this might be too much for some people.

To date, we've had a single person skip those questions and still submit. This person was not a qualified applicant.

Based on the applications we've received this very minimal list of requirements appears to be working as desired. We're interested in employees who are going to do the best work of their careers. I'm okay with having a slightly higher bar (in terms of application effort) for that type of person.
Generally the process is that you send us an email, and we try to get you on the phone with the best hiring manager for the role. We often request a 3-hr work assignment, a couple of Skype calls, then move to an onsite if that makes sense for all involved.

Usually we can touch base in the first call to get on the same page. We operate a bit differently for management roles, or other key positions. Looking forward to your application if you're interested!
For some reason, the fact that it was Ja Rule makes it even more morbidly funny. The only reason people remember Ja anymore is because of Dave Chapelle's bit, and that was in the context of an actually huge disaster - 9/11
You're right about a lot of things, but there are still missing pieces. Whatever the sandboxing idea is used in Chrome (and you're right, Chrome is the gold standard now), a simple issue can still bring it all down. The are RCEs in Chrome published almost every month. Some will be limited by sandbox and that's great. But I disagree with:

> It cannot be tacked on.

Security as in prevention of the exploit cannot be tracked on. But separation of data can be. And there's a whole big scale of how it works, starting from another profile, to containers and data brokers, to VMs like qubes, to separate physical machines.

Chrome still uses a single file for cookies of different domains. And because you may have elements of different domains rendered at the same time, it needs that access. But that's exactly where either profiles or a stronger separation like containers can enforce more separation.

Yes, it does involve some interaction from the user, but it's not that bad. The UI can help as well. "This looks like a bank website. Did you mean to open it in a Private profile?", "You're trying to access Facebook, would you like to use your Social profile instead?" Realistically, people only need 3-4 of them (social, shopping, secure/banking, work)

We practically solved spam clarification already and that's in a hostile environment. Detecting social sites should be simple in comparison.
Jesse Livermore's strategy.
You know it will become a boast to have been there a few years from now. I just got back myself, I could tell you some stories if you were to ah, hook me up.
Signifyd | Backend Engineer, Machine Learning Engineer, DevOps Lead Engineer | San Jose

www.signifyd.com

Our engineers build systems that catch bad guys. Using all available payment, user, and machine data, we have to separate legitimate credit card transactions from fraudulent in under 400ms. That means doing just-in-time mash-ups of internal data with external APIs and reducing it all into a single score with a few critical insights for end-users.

To solve this problem, we're looking for world-class engineers who are eager to learn, adopt, and contribute to a reactive style of programming. The tools you build will immediately impact the 5000+ merchants that already rely on Signifyd to help them grow without fear of fraud.

Our stack: Java, Python, Cassandra, MySQL, Solr, Apache Spark, Play! framework, Linux, Docker, AWS

Apply here: https://www.signifyd.com/careers/
> the explosive growth from cloud providers is starting to level off too

Any reports on this? I work in the cloud space and that's not what I'm seeing at all, I think we're at least still a few years out from leveling off.
A nice demo, but still doesn't show examples of a customer going through an example dataset and building dashboards. The kx site is good at talking about all their customers without giving a whole lot of real info. I wish they had a 64-bit hobbyist license.