skysight-inc/HackerNews huggingface dataset:
> Back in 1999 we had MOSDEF and CORE IMPACT (...)

I'm not familiar with these. Googling "MOSDEF attack" suggests Massive Attack songs and "CORE IMPACT" various products by Core Security, I presume you're referring to neither? :-)

> Only executing native code is no defense at all. You're not even stopping attackers from the '90s like that.

> ROP is only a hardship until exploit code can find a way to allocate executable memory or hook the program's own dynamic execution (...)

Only executing native code loaded at deployment time, i.e. presumably from a trusted source. What I meant by "immutable page tables" is that after loading the unikernel image the set of executable pages is fixed, and all of those are read only. This is not something current unikernels do, but that's more due to lack of development time rather than any inherent implementation complexity.

If there is no way for the exploit code to ask the hypervisor for new executable pages or overwrite existing ones then the amount of damage it can do and its ability to persist in the running system is greatly reduced.

> Really, what you're describing here is the browser security model. When staffed by the largest, best security teams in the world, the browser security model almost works.

It's similar but not the same. The browser security model breaks down in a large part due to exposing way too many APIs, most of which are too complex to sensibly audit. Linux system calls have a similar problem, which is why you have to hand-craft things like seccomp profiles to match your particular application.

Unikernels (as used to implement network services) lend themselves extremely well to running on top of a well defined API / sandbox boundary, designed with security in mind. Again, we're not there yet, but the steps we need to explore in this direction are fairly clear.
As a counterpoint to that, I flat-out despised abstract Math until I got to college precisely because I found it useless. At best I knew I was probably going into engineering in college and I'd been told "engineers use calculus". That was my sole motivation to learn anything about abstract math, and it was pretty bad. It didn't help that the "examples" given in class were mundane toy problems (ex: "how long will this arbitrary tank take to empty?" Well gee I don't know and I don't care. Is this the last tank of water on the island or something?)

Now physics on the other hand, chemistry, computer science, any time I could apply math to a real-world situation got me motivated. I liked Math that could solve actual existent problems, and I learned said math better as a result. The first time I learned about projectile motion I literally started picturing vectors everywhere for the rest of the day.

It also didn't stop me from learning abstraction later in college. In basic signal analysis we learned about the Fourier transform, and then we learned about the Laplace transform and how it was simply a more general Fourier transform (or the reverse if you prefer). Mastering Fourier first gave the Laplace a relatable mental context, it made the abstractions more real.

By contrast I had a Math professor once who tried to teach us theoretical induction and work his way down to examples. I had no idea what the fuck he was talking about until he hit the examples, then everything clicked all the way back up.

Maybe that's just how I'm wired, but I would argue for more and more relevant examples. There are tons of historical uses of math that people would find interesting. Talk about the math used to build the Hoover dam, or telegraphs, fly satellites, or make medicines, or decode Nazi transmissions. And talk about it in real terms with character, if you must simplify for the sake of time then say that's what you're doing. Make people realize they're learning something that has uses beyond Math class or the rarified ivory towers of Math PhDs. That by learning the material they're learning how to do meaningful things. The original, wildly popular SimCity games were basically raw spreadsheets and formulae, but people learned those spreadsheets and formulae because the games had character.

I know to a lot of Math people the abstractions are the "real" part, but most people I know simply don't process the world that way.
Again, look up what Alex Mauer is doing with DMCAs.
Open source distributed ledger, Hyperledger Fabric 1.0 released
I also assume the camera is compromised, and like to put tape over it when I'm not using it.

Other than that, I don't assume any other part of the laptop is compromised, but maybe I should. Thanks for asking this thought-provoking question.
Awww this feels like a fresh shave, so many answers. Thanks a lot!

A month ago I didn't even have any web presence because I didn't need it. Since then I've polished my CV, made web portfolio, and every few hours I check each site that posts Remote/Freelance jobs. . .
I'm not inclined to presume that it would be less abusive (or more abusive) or abused than any other visa program which creates financial incentives for domestic capital.
I upgraded from Fedora 25 to 26 alpha a few months ago and even then the process was smooth and the resulting system stable.

Haven't tried the KDE spin but I did try KDE neon briefly earlier this year. Quite slick but I quickly ran into broken package dependencies when trying to install some random stuff I needed (QGIS and sqlitebrowser IIRC); apparently it's been an open bug since September last year [0]. Didn't leave me with a good first impression but I'm rooting for the project - KDE is fantastic these days.

[0] https://bugs.kde.org/show_bug.cgi?id=368792
Disrupting the fertility treatment industry? I wonder what Musk would do with that.
That's memory shared between the main thread and Web Worker threads. While it's exciting from an "easily implementing multi-threaded applications" point of view, given the nature of the objects, it doesn't actually allow sharing any data that couldn't be shared without the new spec.
Hebrew is already quite widely used in certain fields (specifically set theory).
In theory it shouldn't matter but it does. We brainwash students to think in terms of y being a function of x.

y = f(x)

If you give a problem with x = f(y) it really confuses people. If I label the horizontal axis y and the vertical axis x in the cartesian plane then confusion ensues.

t = b(a) where t is the velocity and a is time

That's confusing. I suppose it's analogous to me saying

"The male, fluffy, white, large sheep."

There is a certain amount of brainwashing that occurs with the symbols that we use. Using symbols other than the ones that have been standardized on is very difficult cognitively. What you say is true in theory but I think not in practice.
Cofactor Genomics (YC S15) Is Hiring a Lead Generation Specialist
I like a lot of what he is doing with Jai even though I don't agree with every single design decision. My biggest fear was that it wouldn't have C++11 level lifetime management and destructors. If these two issues get worked (and he actually RELEASES the language) then I could see a bright future ahead for it.
I think this is a response to this:
http://adamierymenko.com/privileged-ports-are-causing-climat...

See discussion here:
https://news.ycombinator.com/item?id=14712576
That's a pretty neat use of ligatures!
Ask HN: What do you listen to when you code?
Individual songs, playlists, artists, all suggestions welcome!
> I'm thinking of a certain ex-employee that followed that advice all the time, despite us constantly correcting him.

The natural addendum then is, "listen to feedback".
The terminal program that came with the Avatar 1064 modem had an awesome 80-column mode. It had a feature that would sound the bell at the end of each line, like a typewriter, to let you know there was more content to read.

I can't remember the name of it, but it was very good.
Interesting that String padding made it in -- sort of jumps out as the simplest of these additions. I wonder how much of that had to do with negative PR for JS-land due to left-pad-gate.
Suppose you're an Indian making 10k a year in India. Then you have an opportunity to make 60k in America so you go. Native born Americans get paid more than you but you understand that it's really an accident of geography and bad policy, but you don't care because the opportunity will help you break your family out of poverty and open up doors not possible in India. So you stay.

Why due to the accident if geography is an American entitled to a salary that an Indian would be willing to do for less? How is that fair?
You're wrong about the end result - in the end the job goes to the engineer making $10k in India.
I love that a technique that's so widely used now was the co-invented by a movie star. It's also used in cell phones.
What about one with a hardware switch for the mic?
Easy to say when you don't hold the pager.
If you have a floorplan, and get to draft a process, you can use that to draw turtlegraphics with emails.
How economics became a religion
Note that pytesseract has no bindings with tesseract's API, it merely uses the tesseract command line tool and communicates with it via stdout/stdin.

If you want native and complete access to tesseract's API you can use tesserocr: https://github.com/sirfz/tesserocr
Nobody was building long range EVs before Tesla. Short range city cars like the LEAF are really a different category.

Volvo has credited Tesla for pushing car makers into EVs, so at least one incumbent thinks that: https://electrek.co/2017/05/17/volvo-tesla-says-stop-diesel-...

Audi seems to as well, although it's not quite as clear: http://insideevs.com/audis-electromobility-boss-i-hate-to-ad...
That was half the claim. The full claim was that it improves fluid intelligence by improving working memory. The title of Jaeggi 2008 is "Improving fluid intelligence with training on working memory".

http://www.pnas.org/content/105/19/6829.abstract
'Indentured'? I call hyperbole. Quit, go home. That's something a true indentured servant couldn't do.

Its 'something like' indentured servitude, except it isn't. It isn't slavery either. Nor torture or any number of other emotionally laden words we could come up with.

Its an employment deal. Its an immigration option. Others exist. Don't choose it if you don't like it.
The rule, as proposed, required foreign entrepreneurs to receive "significant investment of capital (at least $250,000) from [investors]" or "significant awards or grants (at least $100,000) from [the government]" to demonstrate "potential to have accelerated growth" and job creation. The entire visa is based on the idea that startups have "significant public benefit".

https://en.wikipedia.org/wiki/International_entrepreneur_rul...

At the two year mark, you need to show further investment, to extend the visa three more years.

Failure to hit these numbers means your visa gets taken away.
What percent of Americans have zero dollars in stocks and bonds?

What percent of asset markets are owned by the 1%?
One more: http://remoteok.io
Aviation safety is a common recurring topic here. I don't think the fact that this happened at SFO is related.
Thanks for convenient comparison. Most significant differences from the first sight:
- Reduced / removed breadcrumbs: not OK.
- Inverse text/background: not OK in general.
- Removed "last contributors": not necessary, IMO neat "community" perk.
~ Increased colour contrast: not necessary.
~ More aggressive headings and sidebar navigation: not necessary.
+ Preserved Dino: phew, I'd miss him.
+ Search (bar?) at the intuitive place: YAY, FINALLY!!1!

And unrelated, the new Mozilla logo: still cannot get used to it; seems like the calligraphic humble old one was vandalized by some 1337 H4X0RZ :|
Actually, the opposite is true. If you dig deep enough, it turns out that arithmetic is far more complicated than most other areas.
Suppose.tv launches a service that helps cord cutters find the best deal
Will, speed breaks when you consider a specific instant in thing because there is no time span nor a distance the be traveled.
Intel, While Pivoting to Artificial Intelligence, Tries to Protect Lead
I love mdn. The old design was great and the new looks even better. There is no documentation I've ever seen that's better it clearer.
Anyone has the Reddit thread where Kaspersky posted? I'm curious to read it.
Intel’s ‘Purley’ on Tap in Brooklyn Navy Yard – Barron's
Really constructive answer. Thanks a lot!
No one gets fired for adding process, that's why it's so common yet a slow death.
>The author assumes that because he's able to register a domain name that matches several of the authoritative name server names for the .io TLD that it is "likely that clients will randomly select our hijacked nameservers over any of the legitimate nameservers..." This is wrong.

It is definitely not wrong for a large number of resolvers. This bears out in his traffic.

It is very common for a resolver to take the list of nameservers from the root and resolve them rather than using the A records provided by the root. Quite wrong, but common. If they didn't, he would have received zero traffic.

Thus it would have been quite easy to redirect traffic for bit.io by also supplying a different set of NS records for it.
>'Indentured'? I call hyperbole. Quit, go home. That's something a true indentured servant couldn't do.

What if they have debts to pay off at home, and it's the only realistic option available? Going home means not being able to pay those debts off.
Looks like ECMA's site is overloaded. Here's a Wayback Machine link for the lazy: https://web.archive.org/web/20170711055957/https://www.ecma-...
Even fiat currency has intrinsic value. The Zimbabwe bills that were inflated to hell and beyond, then replaced, which aren't even legal tender any more, still have value as collectible notes. You see them on eBay all the time for a buck or two.

Nobody will pay anything for your Bitcoin wallet if Bitcoin fundamentally fails, just as nobody will pay for your World of Warcraft gold when the pull the plug on the last WoW server a decade or two from now. It's just a bunch of useless numbers.

If you're "investing" in crypto, that is speculating, then fine. If you're thinking it's a safe and secure way to store money you're mistaken.
I worked on-site and became a Very Valuable Individual. I then told my manager that I'm moving out of the country and would love the opportunity to continue my work remotely.

In other words, I controlled more bargaining chips. I feel that is going to need to be true for any remote position. You need to be experienced and valuable enough that letting you work remotely is worth having you over someone on-site (for non-remote cultures).

For remote-cultures, the talent pool interested in remote work and the sheer number of people interested in it makes it far more competitive. As deedubaya said in their earlier response. You need to show without-a-doubt why they should choose you over anyone else. The competition is more fierce.
There are no syscalls as the fine article explains.
"Near miss" parses as "a miss which was near," not "nearly a miss."

I love George Carlin, bless his soul, but this is one thing he got wrong.
Keyboard tap easier (low bandwidth, highly compressible, high SNR) and scarier (passwords, emails) than microphone.
Intel's Xeon Scalable Processors Are Broadest Datacenter and Carrier Play Yet
Based on the description of the rule in the article, the emphasis is on fundraising rather than producing jobs or value. The thresholds of $250k and $100k remind me of Dr. Evil's $1 million. It's just not enough of a bar to separate friends and family funds from legitimate business rationales.

Edit: In response to comments, currently $100k and $250k are not uncommon amounts for a person to incur attending university in the US. Solo operational costs in The Bay can swallow much of either in a year without hiring anyone or building anything...but in fairness either is a lot of money for most people if its yours and not very much if it is someone else's.
I've found that a lot of the time the businesspeople with the requirements know the answers, though they don't necessarily know what they know - a lot of the programmer's job is in figuring out the right questions to ask them.
I'm not familiar with other countries entrepreneurship visas.

This rule originally required $345,000 in investment from US based investors before the visa is awarded. The amount was then revised down to $250k after comments from the executive and investor community. It then required $500k in recurring revenue and 20% annualized revenue growth in order to extend the visa after 2 years.

I'm not sure why a foreign startup founder with a product that raised $250k from US investors and can confidently say they will have $500k in revenue want to temporarily immigrate to the US? Nothing is stopping them from operating in the US and there are existing visas for business owners operating in the US they can use that don't have all of the related hoops.

I think ultimately this would be underutilized at best and gamed much like the EB5 program at worst.
Do any such laptops actually exist?

Anyway, I'm not going to take the laptop apart and analyze the internal microphone hardware to make sure that the switch actually disables the mic. So even in that case, I'd assume the mic was still on even if the switch was in the off position.

On the other hand, I'd prefer to buy a laptop with a hardware switch for the internal microphone, if one existed, as it's better to have such a switch in case it actually does work as advertised.
From the sound of things, this particular disaster hasn't happened before, even though it's conceptually easy to imagine how it could. Is that because it's easy for the controllers on the ground to wave somebody off if they're going the wrong way, or is it really because we're just lucky?
The X86 Battle Lines Drawn with Intel’s Skylake Launch
> A unikernel cannot do this. If the app is compromised and I don't notice and don't restart it...

I disagree. There's no reason such mitigations (not sure what exactly you're referring to) can't be implemented by the monitor process (ukvm in the Solo5/ukvm model).

I'd also argue that a normal kernel does not do any integrity checks on the code running in a user process, so the model is exactly the same.

> Even worse, the attacker could use it as leverage to infect other unikernel based instances of the app to gain some permanence against restarts by simply reinfecting when an instance goes down.

For that they'd need to break out of the virtual machine and into the hypervisor / monitor. Which is by no means impossible, but with careful design of unikernel-specific monitors can be much reduced. Of course, I'm by no means suggesting you should back your unikernels with a monitor along the lines of QEMU :-)
It used to be a decent channel. Modern marvels was great. Discovery, NatGeo, Animal and History Channel used to be good a times. They all sold out for cheaper to produce reality shows.

PBS and BBC docs are still hanging on and pretty good. NOVA and Planet Earth series are great.
The best advice I received from an old manager when I moved into management was that if I wanted to achieve anything my primary goal was to make myself and my position redundant. Hiring and empowering the right people is the only way to achieve this, its not easy but its definitely worth it. When you can truly trust the people you are responsible for its a different game.
If one company tries to acquire another but the purchase is blocked by the government, would you consider that a blow to either company?
It's a shame that chromebook's boot verification isn't easily extensible to open source.
...basically no.

Dual n-back was thought to be the only thing that worked, but even that now looks non-transferrable. (Gwern is great on this topic.) For young, healthy adults, I do not know of any brain exercise capable of directly raising IQ or its analogues.

You might, maybe, be able to boost neurogenesis. Exercise is a decent candidate for that, and I don't know the situation with drugs there. But I don't know of games that do it.

Realistically, you've got a few options. Your idea, spaced repetition of useful stuff, is great. Practicing memory tricks like mind palaces can improve your long-term memory on arbitrary facts. Picking up new topics dissimilar to the ones you know probably helps synthesis. Lots of things can maybe delay dementia. Meditation can improve focus and alertness.

All of those are worthwhile. The top-line, raise basic IQ stuff? To my knowledge doesn't exist.
I'm pretty sure SFO always has functioning ILS, otherwise the airport would have to close every time there was even mildly bad weather. Each runway has its own system, though, so an individual runway's ILS can be turned off.

If there was fog, they wouldn't have been using 28L.
PSA – snapshot your websites
Well, doing it on work time is more like getting mad at the musician because they're supposed to be in the next room recording a track...
I don't understand the hate for USB.

The machine does nothing with them unless you give them permission to do something.
Lacie, as far as I am aware, never manufactured their own hard drives. Look here for example in 2006 http://forums.macresource.com/read.php?1,85231,85262

> Thank you for your email. We use a few different manufacturers, so we would not be able to tell you which drives go to which item (except the 500GB drives which are Hitachi). In general we do use Western Digital, Seagate, and we did use Maxtor before they were bought by Western Digital. For DVDs, we use Samsung.

Wikipedia says , much earlier:

> As a subsidiary of Quantum, La Cie was licensed as the exclusive manufacturer of Apple-branded external SCSI hard drives, using Quantum hard disks.
Moving just a few hours south to Seattle will give you a huge increase in salary and lower cost of living.
After scanning some of the more promising subreddits, I made a few notes:

/r/augmentedreality

- 6K Subscribers
- Demos of things people have built
- Promising

/r/virtualreality

- 39K Subscribers
- Mix of gaming news and "see what I built" articles

/r/vr_ar_ux_design

- 220 Subscribers
- Very UX article heavy

/r/AR_Innovations

- 1K Subscribers
- Mix of consumer news and development resources about AR

/r/virtuality

- 1K Subscribers
- Mostly hype about VR, few development resources

/r/Vive

- 77K Subscribers
- Mostly about gaming, not development
Silicon valley H1B jobs are a tiny fraction of H1B jobs. Something like 90%+ go to InfoSys & Tata like consultancies which do exactly what the parent comment mentioned.

You're making an argument based on an infrequent exception to the rule
I wrote a binary for interacting with CircleCI from the command line that you might like. Notably you can type "circle wait" and get friendly output showing how long your test steps took to run and which (if any) containers of a multi-container test failed.

We use it a ton and you might like it too.

https://github.com/Shyp/go-circle
We're currently working on that, it should be available this month
That's specious reasoning -- there is something to be said for Silicon Valley's capacity to support a self-sustaining tech industry. This critical mass is difficult to achieve and your implication that it can be replicated elsewhere is just deceptive equivocating.

The rationale behind this legislation is that employers have been driving wages down via a self-sustaining lower class of tech workers, where low-cost temporary foreign workers constantly trickle in. This will close that spigot in favor of either the local talent pool or a foreign talent pool where immigrants find an employer to sponsor their application for permanent citizenship.
Uh-uh. This is an excellent article because it accomplishes 100% of what it set out to do:

Put the words "Apple" "vs." and "Google" in the headline to generate some pretty good clicks.

The rest of the words are just to fill the rectangle the headline sits over. They just need to be formed in a way that doesn't distract from the main purpose.