skysight-inc/HackerNews huggingface dataset:
You just have to make sure you turn off the feature in the APs that keeps checking if the controller is there, otherwise they stop working. Or at least that was the case when I got mine.
Inventing the Lisa User Interface
If they don't force a minimum number of days to be taken per year it often turns into a guilt-tripping fest.
Wait what?

Murdering people and stealing land turned out great for the murderer's ancestors so it's all ok? Not from the point of view of those who were murdered.

Using that logic - if space aliens came and murdered all the technologically inferior humans and took Earth for themselves, it would be all ok. After all, they are building a more technologically advanced and superior society on Earth for their children.
Obscurity does provide additional security.
I can't comment about speed, but I think that his security claims are a bit off.

Now I never looked at Linux code or FreeBSD code (so it really can be that FreeBSD has fewer bugs), but the question is if you will be hit by them.

Application code tends to be the most dangerous code - it tends to not get stringent code review and tends to get less talented engineers relative to kernel engineers. So, in reality, if you use WordPress plugins, Linux security vs FreeBSD security is probably not relevant.

Now let's say you secured your webapp. You wrote it in Rust. Now does it make sense to worry about OS security? Still not necessarily. Really, if you set things up right and apply patches as they come out, the chances of getting hacked are quite slim - is your site worth wasting a zero-day on? And if it is, its likely they'll find a zero-day in FreeBSD (or in nginx, or apache, or ...)

Now comes the million dollar question - where is it easier to apply patches? Linux or FreeBSD? And this is one of Linux's big advantages - RedHat, Ubuntu, and to some degree Debian has a multi-year "stable" track, where you get security, and only security (OK, and non-security bug fixes) upgrades.

Meaning, that its set up that once software is in "stable" (or LTS), its API is locked. If the PHP foundation decides that the future is version 7, I don't have to jump on the bandwagon and rewrite my code. RedHat/CentOS will continue fixing the old release for years.

As a result, you can actually install upgrades unattended (yes, maybe it shouldn't be completely unattended, but you don't have to dread upgrading).
what a stupid, rhethorical question. But of course there was, just all moved one or two levels up.
Thanks, I won't be actively looking for 6 months or so. I'm just keeping an eye on what's available. Precisions are prohibitively expensive here (Aus) -- starting at about AUD$6000! Thinkpads raise a nostalgic smile. My little x40 with dock was probably my favourite ever machine.
Https everywhere extension fix it right?
The Five Stages of Engineering Feature Accaptance
This image is linked in the e-mail thread, with (some of?) the errata: https://www.geek.com/images/geeknews/2006Jan/core_duo_errata...

I'm just surprised that the URL is still valid after 12 years!
Google <sjw star wars>. There's a large group of people convinced that the new Star Wars movies were "ruined" by "SJWs" because they have too many female characters.
VMC Recruitment 2017 for Public Health Manager and Pharmacist Posts – 04 Vacancies
Vadodara Municipal Corporation (VMC) published an advertisement for recruitment for Public Health Manager and Pharmacist Posts on Contract Basis. For More Details you may viist the officila site of VMc.www.vmc.gov.in
All this marijuana to crypto currency stuff is great in theory.

But at some point, you, the skinny geek with your bags of cash and bitcoins is gonna run into people who have already solved this problem and have been doing it for the past 40+ years. The drug cartels. Probably gonna be some conflict there.
How about threats-of-butt-probes-before-next-flight?

I'm pretty sure that one is more likely.

(edit: I interpreted "Internet" as in "Internet users", but I now see it was a joke for the Internet itself)
> Coinbase runs in Amazon Web Services (AWS) and our general security posture is one of extreme caution.

Now more than ever, this statement just does not compute. What good reason could something as sensitive as Coinbase have to remain on a third-party cloud provider and let Amazon hold the keys to the kingdom, especially after this disclosure that informs us that our imagined VM sandboxes have been a fairy tale all along?

There's a secret from a time not so long past that makes these attacks nearly-irrelevant: "don't run untrusted code". Maybe the corollary "don't run on hardware that runs untrusted code" is necessary (though I personally feel it's a little redundant).

It's embarrassing that Coinbase would continue to expose their application to this attack surface after yesterday's disclosures. Honestly, it should've been that way before; this isn't the first time VM isolation has been broken, and it won't be the last. It's just the least-fixable breakage so far.

> Sensitive workloads, especially where key handling is involved, run on Dedicated Instances (instead of shared hardware). Where we do run on shared hardware, we make it more difficult to accurately target one of our systems by rapidly cycling through instances in AWS.

I'm quoting this just because I know people will say I'm excluding the context if I don't. If you're going to run on "dedicated instances" anyway and pay the huge price premium for them, there's no reason to continue to put your secrets in Amazon's hands.

Little ragtag startups may use the excuse "We're scared of real sysadmins, they will laugh at us because they're over 25", but that excuse should not work for something as big and serious as Coinbase.

Playing Instance Roulette by "rapid cycling [instances]" in hopes that you get away from any bad neighbors ASAP is extremely silly, please give me a break. Just buy some hardware. How is this so hard?
You’re absolutely right. And Travis needs to be criticized for that (and he is). If the question, though, is about judging a company’s contribution to society based on how morally upstanding the founder is I think the point I’m trying to make still stands.
> It wasn't allegations of sexual harassment

The "sexual harassment" claim was for an employee (or employees), it wasn't him who sexually harassed someone.

There is sexual harassment everywhere. Probably at your company too, it's just that people wanted to see Uber fail, and that's why he's become the sacred cow.

I'm not saying he did a great job dealing with these issues. I'm saying a lot of the things Uber was accused of was something that EVERY other company does. You just aren't aware of it.

And in this particular case, this was used as a weapon to bring down Uber. The narrative you're following is really just a result of politics and media manipulation by some parties which benefited from this result.
You'll also have to manually configure UPnP if you want to say, connect more than one Xbox One to Xbox Live at a time (learned that the hard way trying to host a LAN party - thank you broken/crippled EdgeRouter PoE UPnP implementation ruining my event).

Besides the router issue, I've become very apprehensive at installing the latest UniFi AP firmware releases because I've experienced one revision absolutely tank WiFi performance (which took me a while to figure out the culprit thanks to the controller auto upgrading firmware) and another make APs periodically crash/bounce like every 20 mins.

So yeah in my experience after using Ubiquiti products for a few years, they are way overhyped. I guess people are willing to overlook a lot if you have a nice sleek industrial design.
Quantom computers are going to be much "slower" in terms of becoming a problem. We just had the public disclosure of Meltdown and Spectre, and I suspect that, with what is known publicly, a non trivial amount of CS undergrads would be able to successfully craft an exploit based on this.

In contrast, even if we suddenly solved the engineering challanges of building a large quantum computer, it would likely take a while for the economics to work out where a quantum based attack would be economical. For one, for the foreseable future, quantom computers would be expensive (needing high cooling at a minimum), so a 'casual' attacker would need to wait for an economical rental type service to emerge. Also, it would take time to scale up production, so the first bunch of quantum computers will be expensive due to market pressures from big players.

In reality, it is likely that quantom computers would see a gradual (even if exponential) rise in power that would give some idea of a timeline for when we have to adapt. Not to mention the research into replacing quatom vulnerable crypto with quantom resistent crypto for over a decade, and has already led to (seemingly) quantom resistent replacements.
Poker Online Indonesia – Domino QQ – Dewa Poker – Bandar Ceme Terpercaya
Kepuasan dan Kenyamanan Anda adalah Prioritas kami.
Selamat Bergabung dan Raih Kemenangan Anda bersama kami di ASETQQ.COM...yang terbaik untuk anda.
Mainkan Game-nya & Menangkan Jackpot-nya.
Ayo segera daftarkan diri anda.
Track bugs and manage test cases with JIRA integration
Oh My Aadhar!, Heights of negligence by the Indian government
If they need help, they should look at Google's release. Despite effectively saying the same thing, Intel's is disgusting and defensive, like a guilty man in a police interview yelling "I didn't do it!" Google's is facts, no bullshit language, and effective.
While I don't doubt the legitimacy of the death threats, I can't help but to think Pai is taking advantage of the situation in order to fashion himself as a martyr figure, especially in the eyes of Trump's hyper-reactive base.
Every great entrepreneur profited from a trend and an opportunity.
Rotate, Repave, and Repair “Its idea is quite simple. Rotate datacenter credentials every few minutes or hours. Repave every server and application in the datacenter every few hours from a known good state. Repair vulnerable operating systems and application stacks consistently within hours of patch availability. Faster is safer.”
https://builttoadapt.io/the-three-r-s-of-enterprise-security...
And just what are the chances of you making 100X? I think people underestimate being able to time the market. This is a small sample size but all my friends who have attempted to day-trade the cryptomarket have not beaten my gains of just hodling.
> In the UK Nalmefene is approved for this kind of alcohol treatment also. It's less toxic to the liver than naltrexone so GPs can prescribe it (without specialist intervention and liver checks).

Hadn't heard of nalmefene, thanks for the reference. Naltrexone is also useful in much lower doses than the standard 50mg tablets, as "low-dose naltrexone" (1-5mg).
Poo. My current ISP (Cox) does offer 130Mbps. But for $20 this seems like a great replacement for my TP-Link that I put OpenWRT on.
Who did Travis sexually harass?
Glad you found it helpful! Cheers!
It just seems like consumers don't care that the MacBook design is hostile to connectivity (my biggest issue) or developers in general. They're used to it from Apple, and want the latest and greatest regardless. Apple is honing in on that market, like it or not.
My+Dot+Com+Business+Sales+Funnels+Bootcamp
It's completely possible to do insecure things with PAST.

There is always going to be someone who hardcodes the root password into a public GitHub repo.

The problem with JWT is IMO largely that things became too easy, so people coded without thinking. I'm not sure that's easy to prevent. I don't blame the JWT spec for mistakes that are so obvious.
Is it organised crime having piles of cash from otherwise legal activity?

Let's assume there is no federal vs state legality issues and instead it's just "legal". If selling X product generates large quantities of cash, is that organised crime?

I would think not, but then again I'm not a lawyer so I could be wrong. If I am wrong then yeah, the idea is definitely not sound.
>Who voted for Kalanick? What gave him the right?

You could say people voted with their wallets.
>regulators and the public

My question is: Why do we need separate this two "faces"? And if we need, even when they want the same thing, should we have both?
just trollin', y'all: https://en.wikipedia.org/wiki/Write_once,_run_anywhere
On the iMac Pro, will PCI devices be able to DMA into both the Intel and ARM CPUs? Is there a single IOMMU which will arbitrate DMA for both CPUs?
There's a long history - I suppose it's a tradition - of composers leaning on one another for inspiration. Sometimes this takes the form of them outright copying another's melody and elaborating upon it.

Beethoven, Mozart, Haydn, Bach, Mendelssohn, Brahms etc. all did this. Put in this context what Williams has done in borrowing from Holst and others isn't scandalous whatsoever and shouldn't be thought of as such.
Ray Peat is a quack. cowseatgrass is based on his work.
I think so.

But I'm just inferring that from Google's security blog posting; I can't say with real expertise.

Would love for an expert to chime in.
> contribution to society

I think it’s too early to judge Uber’s “contribution to society” when the investors are basically footing the bill for all of Uber’s customers. Let’s see Uber make a profit and it still be less costly/better service to what consumers get now and then we can talk about their contribution to society.
Personal data of a billion Indians sold online for £6, report claims
Shadows of a 4th Spatial Dimension
You are confusing different things.
thank you; some consolation to know it's not just me

does this seems like another instance of the annoying practice in our field of someone giving a name to a thing because they think it's new, though it's not (ie, source-to-source compilers have been around as long as source-to-bytecode compilers)--no need to re-name them

wish they would just stop it and get the hell off my lawn
>You're the one saying we should effectively stick with the current mechanism, despite its flaws. The onus isn't on me to provide an alternative, it's on you to defend a problematic solution.

If the alternative is not flawless, then one needs to show that the disadvantages of the alternative vs the current situation are outweighed by its advantages over the current system.
No. If that was the case you could buy a vinyl record, play it a few times (such that some slight crackle developed from wear) and declare it a derivative work. If the distinction between two slightly different works (eg two white noise recordings) can't be perceived by a reasonable person (or a jury with 6-12 of them) then it doesn't exist for legal purposes.

You could sit there in court with a hex editor and show how every byte of two noise files in different, but nobody procures or pays for audio recordings for the aesthetic pleasure of hex dumping them. Law isn't a competition to see whether you can figure out a way to articulate what the difference is.
Disclaimer: I'm not a CPU designer or a kernel developer so I'm not sure I've grokked this yet, but I think I did. Someone who knows, please correct me if I'm wrong.

My understanding is that Spectre will allow an attacker to read any memory anywhere in userspace, so yes, that would include the clipboard. Meltdown is just an enhancement to Spectre that allows it to also read into kernel space (ring 0). Spectre is the systemic issue that accurately deduces memory values based on CPU cache heat. Meltdown is the implementation-specific issue, which affects many ARM SKUs and virtually all Intel SKUs, that makes privileged memory susceptible to the same.
Travis Kalanick has spent his entire career in P2P space...wouldn’t be surprised if his next move is an ICO!
It shouldn't be illegal, google can do what the want on their hardware. The problem is that everyone has centralized to googles hardware, and issues like this will happen for as long as that remains unchanged.

We need a path back to the distributed web where people upload videos to a server they own and control. Instead of IoT juicers we need "video broadcasting in a box" solutions.
>MST3K

Thanks. Must check that out.

What I ought to have said: we've have had movies where movies or video games are part of the adventure e.g. Wargames (1983).

But an adventure takes place against a background of people living ordinary lives, which used to consist mainly of communal office work, socialising, chatting, families at the breakfast table and whatnot. Whereas now ordinary lives consist more and more of digital interaction. So the background will have to change too.
This is basically how Amazon thinks (e.g. AWS, FBA)
Thanks for weighing in.

Speaking as a layman:

Running on the same physical core is a pretty common case on laptops.

Sharing a library with your target is probably a very common case. For instance, libc.
Website mentions fully open hw+sw, is this public?
You have a point.

I guess this really does boil down to a federal vs state legality then?

So if it's legal in a federal level then banks should be able to accept the cash right? or would they have a "right to refuse the business because we don't like it even if it's legal at the federal and the state level"?
There's a brief note in the article about the rescinding of the Cole memo noting that it happened after the article was written.

Honestly it seems like this is exactly the kind of business that the Federal government would want involved in the pot business - one that's getting cash off the streets while aggressively making sure that all of it is accounted for both coming in and going out.

On the other hand, the alternative of a return to a high-cash high-risk business might not be something that Sessions et al would object to - after all, if you weren't involved in criminal activities you wouldn't have risked being robbed or assaulted and robbed. Kind of like so many other things, don't listen to what they say, look at what they do and the impacts of those actions.
Updated processor microcode has to be loaded to the processor on every boot, and this can be done either by the system BIOS/firmware or by the OS (or both).
The book mastering Bitcoin is available for free on github, it is really well made. I also secong the Princeton course (available on YouTube).
And the will of the people of California appears to include affording its cities, and not to include an unlimited tolerance for single family neighborhoods dumping externalities on everyone else.
> Within limits of course--people shouldn't be able to exclude based on race, religion, sexual orientation, etc.

California statistics indicates that artificially constraining housing supply has created housing costs that in effect limits access to the rare opportunities found here to blacks and latinos as well as the poor.

It makes it almost impossible to grow up with lower middle class parents or work in a low-pay low-skilled position, and mingling with the tech crowd to work your way up.

* A snapshot of more recent U.S. Census migration numbers shows that nearly three-quarters of those who have left California for other states since 2007 earn less than $50k a year.

* San Francisco's African American population has declined from 13.4% of the population in 1970 to 6.1%

* 41 percent of San Franciscans spend 30 to 50 percent on rent, despite a lot of rent control for longer-tenure residents and a population average income being $104k as well as median $77k

* low skilled entry level jobs are moved elsewhere https://www.google.com.tw/amp/s/www.wired.com/2016/03/those-....

I understand that this might not be the intended consequence for all people fighting for the current zoning rules, but due to its effects on blacks and latinos as well as the poor I find the effects immoral.

Anyone supporting these policies knowing this has the right to do so, but not while at the same time claiming they fight for diversity and the dispossessed.
(playing devil's advocate here, to be clear)

What leads you to believe that Intel has any reason to think that there's an issue that needs changed? Or that "the community" knows anything about their business processes or what Intel should do? They have their highly-paid C-levels to figure that out.

From their perspective, there's no problem. Nothing needs fixin'. You'll keep buying their CPUs, anyways -- you don't really have much of a choice, do you? [0]

Just go install those updates from your vendor(s) and go about your business, you'll be fine. No big deal, nothing to worry about. Carry on. Just like you did with that recent little ME/AMT issue. There'll be another issue to deal with in a few days and everyone will forget all about this one.

[0]: Oh, you're gonna replace all your infrastructure with AMD's CPUs, huh? Yeah, sure you are. They're no different.
[related] Has anyone considered the possibility of a Spectre-style attack in Ethereum's Turing-complete EVM? Not that the state would be unique for all contracts, but there's a possibility of communicating to an external contract with the output.
There was also a bomb threat when voting on net neutrality, but he definitely didn't miss that.
Ask HN: What is the most nonsensical crypto currency you have seen?
Best UX UI Design Tips for Your Mobile Apps 2018
I think it depends on the topic a lot.

Desktop apps are good if you are actually making a use out of desktop capabilities.

They can also be good for low maintenance low churn apps if they don't need any servers. Because you can publish a working program and then forget about it until the next version (not babysit/monitor servers 24/7).

But if it's not making much use out of desktop, and needs servers to function then why bother with desktop anyway?

If something can easily be a web app I'd say it's the better choice. Quick safe easy access and you get to control it however you like (like pushing lots of updates every week).
votes.
Mods, please do not revert the article title to the different but significantly less obvious one on the journal article.
HN needs a Godwin's law but for UBI instead of Hitler.
My understanding is that meltdown is due to the implementation, but spectre occurs due to issues with the specification.
>"Things are comfortable because people like Travis were willing to take the blame on the wrong side of history and forge ahead anyways."

Wait what? What did he take the blame for exactly? Were the sexist comment making, the berating of his own Uber driver, or Greyball things that were necessary for ride sharing to become successful? I think most people are quite capable of being able to separate ride sharing the technology from a ride sharing technology company's CEO. Ill feelings for the latter do not imply ill feelings for the former.

>"We all sit comfortably in the Bay Area because our ancestors murdered and stole lands from Native Americans."

"We all?" Wow. You live in quite a bubble if you really believe that everyone who reads HN lives in the Bay Area or is an American. Or has ancestors that killed native Americans. What an incredibly outrageous statement and comparison. Speak for yourself.
Certainly it does when the Windows NT Subsystem for Linux does not actually implement it.

* https://github.com/Microsoft/WSL/issues/129
This looks amazingly cool!

And I apparently starred the repo previously, but don't remember ever having seen this particular badass shit before.

Am I losing it?
Phòng Khám Tai Mũi Họng Hoàn Cầu
What are you talking about? Without further details I'm under the impression that you're just invoking the mystery of quantum computing. "Anything I don't understand is a threat."
Direct or indirect is meaningless at this point. The exploit is proven, they just have to determine the "best" memory locations to read to make something "useful" out of it. Then it's bundled together as an exploit kit and it's Armageddon.
Prescient money quote:

>As I said before, hiding in this list are 20-30 bugs that cannot be
worked around by operating systems, and will be potentially
exploitable. I would bet a lot of money that at least 2-3 of them are.