skysight-inc/HackerNews huggingface dataset:
Yeah, while it seems that every modern CPU is affected by the recently discovered vulnerabilities, Intel and AMD still refuse to release their source code for the ME and PSP. Therefore, everybody on this planet has to run hardware with a lot (by all odds) of unpublished zero-day vulnerabilities.

And to make matters worse at least for Intel we have indications that those security wholes are the result of a calculated risk to afford a higher development velocity: https://danluu.com/cpu-bugs/

This year is going to be fun...
I always wondered they were able to sell these devices so cheaply. I recently bought 2 4tb ones to take the hard drives out as they were each $30 cheaper than buying a regular 4tb hardrive.
What happens when you run `import unique from “lodash-es/uniq”`?
This has less to do with your choice of process monitors and more to do with the potential security issue that allows a userspace app to halt a running system.
These are taken from the megacorp's private parking lots and left as trash by the thieves on public sidewalks and waterways. It's an eyesore and a nuisance. GEM cars also fall below the amount request to be called grand theft. Would you steal those as well?
While that may be true, it no one should expect to be backdoored by using a proprietary product.
Moonrise | Chicago, IL | Full-time | ONSITE (2x/wk + WFH) | $70-100k + Performance bonuses every 6 months | Fortune 500 backed spin-out

Moonrise is seeking a NodeJS Platform Engineer. In this role, you will be responsible for maintaining the current infrastructure our prototype service runs on, establishing plans for future expansion and separating the application out into microservices, monitoring system health, and advising leadership on platform investments. Additionally, you will maintain current microservices (authored in NodeJS) and develop new microservices as required.

See the full job description here: https://goo.gl/igrYuf

Learn more about our company: https://www.moonrise.works/landingpages/videos/pilot.mp4

Chicago, IL area required. We're work from home friendly, but trying to build a new, core/foundational team, so want everyone in the office twice per week. We're not currently sponsoring visas.
If you look in the document there is a section about a hard-coded backdoor admin account that cannot be changed. So secret hard-coded backdoor does make sense to me.
I have another problem related to sleep. Once in a while my eyes get "spicy"... as in I am unable to keep them open for long periods, and am forced to force close them and prevent myself from staring at the screen for any moderate periods... like touching chili with your fingers and then rubbing your eyes...

Anyone with tips would be appreciated. So far the only thing that works is sleep, but spicy eyes can resume immediately after waking from sleep.
>> So far he didn't cause something worse than, or similar to, what's going on in Libya and Syria
>So you're saying that because the US is not physically on fire with untold civilian deaths due to violent uprisings and political unrest, everything must be "alright?"

I suspect he's referring to the USA's usual military aggression towards other countries. Unlike just about every president before him, Trump (for all his many many many faults) hasn't attacked another country (yet). I'd wager that, so far, Iraqis and Afghanis think Trump is better than Bush II!
How Douglas Engelbart Invented the Future
Or sleep. Or studying. Or taking a walk with a loved one.

The point is that a lot of the benefit to us of such an innovation is not going to show up in GDP, even if some of that time is used for fun activities. GDP doesn't count increases in fun either.
What part makes no sense? The backdoor in question is "secret", it's "hard-coded" and it's a "backdoor". Saying "secret backdoor" may be redundant, but it still makes sense.
"Secret hard-coded backdoor" makes sense to me, because the linked webpage illustrates a secret hard-coded backdoor in the product.
Adi Shamir, the S in RSA, has done tons of work on side channel analysis, especially of hardware crypto, for decades. Timing attacks, voltage attacks, EM, you name it.

So it's not unknown. But as a counterpoint I had a shocking moment in the 90's when I learned that Faraday Cages (to prevent TEMPEST attacks) were being designed with a second Faraday cage inside them to protect the light bulbs.

Seems that the interference between a CRT and a fluorescent bulb are sufficient that you can detect information on the power lines leading into the room. So they caged the bulbs to keep them magnetically isolated from the computers.
Algorithmically is it possible to pass only 'safe' interpreted code to the CPU? The majority of Javacript engines (Chakra, V8, Spidemonkey and JavasciptCore) are under a security-auditable FOSS license. Browsers claiming Spectre/Meltdown immunity would be in the next release notes, surely.

I'm not discounting that CPUs should operate correctly into the future but the current sandboxes would seem to rely on whims of a CPU's microcode. And the question for browser makers is whether to trust them.
Which in turn initially was based on postgres. But there indeed isn't much in common anymore...
Another Hindu Nair here; it’s not offensive to ask, only discriminate.

Nair is actually included in my name so you get the caste info just by getting my name.
Geez; does this mean it could do the same when compiling a large codebase with Make?
PostmarketOS inches closer to letting you breathe new life into old phones
Regardless:

> […] Otherwise please use the original title, unless it is misleading or linkbait.

https://news.ycombinator.com/newsguidelines.html
Staging endpoint for ACME v2
It's more the 2012–14 MBPs... I think Apple just couldn't be bothered to give their QA staff anything that was made before the past couple of years...

I feel like my 2014 rMBP is silently yelping "What have you done to me?" every day.
Cool! Why exactly did it take so long BTW? (not complaining, just curious about the hard parts). Although the first computer I've used was a ZX Spectrum I was too young to program it at the time and have never had time to actually revisit it later. About a decade later (that was the epoch of Windows XP and Ubuntu already) I had a dream of running Visual Basic 1.0 for DOS on it, developing text-mode pseudographical winforms-like apps (clones of Total Commander and Excel :-)). Ever since then I have been passively curious about whether it actually is hard or not and why nobody actually tries this (isn't the GUI alone actually a fairly easy thing every computer can manage as long as we give up all the eye-candy effects and accept the fact actual calculations on data are going to be fairly slow?). Cool to see people have implemented something like this actually and have even done it in graphics rather than in just pseudo. Also, why can't we use modern languages like Python or their subsets to write Z80 programs, at least very simple ones?
Just giving up speculation entirely is too much of a performance penalty. So one possible solution is: when you know it was a misspeculation, processor can just kick cache lines out of cache if the speculation caused the cache line to be loaded (probably you only need to do this at the last level cache closest to the memory). More states to track, but not impossible.
GDP is an enshrinement of the Broken Windows Fallacy of economics. It completely miscounts externalities as benefits.
The web is poised to make a big comeback on mobile. New browser features and PWA techniques have closed the gap considerably. There will always be a market for real native apps but a lot of people are going to realize that a PWA is good enough and easier to build and maintain.
Caste is a very complicated issue. It's not all black and white, oppressed against the oppressor. It's a major fault line in Hindu society today which has been used by politicians to divide the voters into fiefdoms. It is also one of the reasons why despite India having functional elections, has a under performing political class. Indian politicians flourish even when they grossly under deliver thanks to the caste divisions they nourish in the society.
disagree- it reads in an interesting way, cultivating a mood that wouldn't exist if you just stated the "facts". its also, i would say, in thematic agreement with the linked article.
Honestly, as I know the industry, I wasn't really thinking of the review process as something Elsevier provides that is worth much.

Aside from sending a few emails, the review process is largely managed by academia, although I suppose academia may be happier thinking they are being managed by Elsevier than their peers (who tell Elsevier who to enlist for the work anyway...).

But the non-academic work is what you have to do yourself if you break the lock in.

It is not trivial and as it scales it gets increasingly complex.

There are two moats that protect Elsevier's business.

The first moat is that academics don't trust each other and perpetuate the "Publish or Perish" mindset.

In some disciplines (e.g., Liberal Arts, Math), there isn't enough money flowing through academic circles for this to be a real problem. But for the Life Sciences and some Physical Sciences in particular, there is a lot of government and industry money sloshing around, and academics seem perfectly willing to undercut each other and themselves as a group to get a bigger slice of it.

Elsevier takes advantage of that.

Maybe academics will get mad enough at them over it to unite long enough to break their ability to take advantage of them. Seems like it would be in their best interest to do so.

The second moat is that building a web platform to efficiently distribute hundreds of thousands of pages of content a year while still maintaining access to all the previously published pages is a seriously non-trivial task.

Now just providing that web platform can be done for much less money than is currently paid to publishers.

But, as I'm sure all the web developers and sys admins on hacker news would be happy to point out, hosting terabytes of data and generating consistently formatted HTML/CSS from thousands of individually created Word docs and graphics with nifty social media integrations and customized search/browse options is not a thing that can be done for free at the scale Elsevier is operating at.
I believe the semicolons in question are in your comment, not in your language.
Deep Learning -> "Dynamic Learning"? Post even describes it "dynamic".
this will get downvoted as all held, but I really think most socially apt people should have Facebook accounts these days
I hate to admit it, but I have both Transmit and Coda for iOS and I never use them. I've never really used them. I know a lot of care went into making these applications, so I don't want to say it was a waste of money, but I just can't make iOS any more of a productive platform... even with great software.

Honestly, this story/link should be considered maybe a both a blow to the "post-pc" narrative (we're going on 8 years of "post-pc") AND to Apple itself.

MS didn't go about Win8 very gracefully, but honestly, I think A LOT of the thinking behind Win8 was right-on and future-minded. These concepts just needed a gentler, multi-staged introduction. I think Win10 is turning things around.

Also: I wonder if this reality has anything to do with that "cross-platform" UIKit/AppKit replacement PR drop we got a few weeks ago?
I've had a similair problem with Transmission for years. Doing more then a few transfers locks up transmission and then the entire machine. Issuing a halt at the terminal sometimes will reboot the machine, but moist of the time it just hangs.

I would switch but to what? Windows/Linux are just as user hostile.
Or the other way around... He has been throwing around the term for awhile now.
I feel it's offensive. But a foreigner may do so out of curiosity and ignorance so I can't be angry about it.
Any idea why? The previous CEO apparently started only about 2 years ago https://en.wikipedia.org/wiki/Robert_B._Schnabel

And what does the ACM do that's different from the ACM President's role?
This still happens for me on OS X Sierra sometimes.
TL;DR: The postmarketOS Linux distribution is far from being usable as day to day OS. But instead of just a demo interface, which was not suitable for mobile devices, it runs KDE's Plasma Mobile, LuneOS UI (remember WebOS?), Hildon (remember Maemo?), Gnome 3 and XFCE4 on real devices now. The development process has been improved, so it's even more fun to contribute to this (when viewed from the inside) amazingly fast progressing project.

There's also the official blog post, which is kind of a long read. But it talks about the progress that has been made in detail and with lots of photos and some artwork:
https://postmarketos.org/blog/2017/12/31/219-days-of-postmar...

In case you're wondering about the strange title ("219 days of postmarketOS", this comes from the previous articles starting with "100 days of" and "50 days of"). We decided to post some time after the 200th day, because wanted to provide a better experience for the people who join the development, instead of having something half baked, just to make a certain date. The previous post is available here: https://postmarketos.org/blog/2017/09/03/100-days-of-postmar...
Agree. Have the GW and it has worked extremely well. The app is 1st rate.
> you instead get an interest-free loan

My employer has lent me money in the past. While they were happy to do so interest-free, they were advised by their accountant that if they did so, what would be at least the prime rate interest they were foregoing would be declarable by me (on the basis that you generally cannot get an interest-free cash loan in the market).

(Which is tangential to your point and even so, it could easily take $5K-10K to set up a workspace. That could be a big loan to repay in 3 months.)
Organic Computing
You're not kidding. We recently bought a few dozen of them from bestbuy, ripped them apart for the disks, and put the disks in a NAS.
Vacuum in Redshift is doing something entirely different from vacuum in Postgres. You really need to look at the documentation.
Purchased the Google WiFi and has worked extremely well for our busy house. Have 8 kids and our house is the house to play.

The app is 1st rate.
Ah yes, Marissa Mayer, a woman who became the CEO of a company. So oppressed by the "boys club".

https://medium.com/@marlene.jaeckel/the-empress-has-no-cloth...

She definitely agrees with you.

Women who actually code and are revered in their community like Sandi Metz definitely are outspoken about it.

Women I work with definitely seem to feel disrespected and let down by me.

To act as if people who are activists and speak about these things don't have an agenda, is ridiculous. It is a well paying, cushy job that is becoming more prestigious. Of course it burns activists that other women won't do what they want them to do. Why isn't there a movement to get more women working on oil rigs? That's a pretty male dominated field as well that has a pretty similar salary to programming.

I'm perfectly fine with more women being in programming, I think that's an opinion most men in the industry share. I just don't feel I have an obligation to treat them any differently to anyone else. If someone wants to learn, I'm happy to teach.
I recently moved to a FreeNAS machine, as these devices had the weakest CPU and little ram as possible to function. It made buffering media on the network a challenging task when it should have been effortless.
I'm not here to defend arguments I never made.
ParcelJS dev here. Currently engaged in a #BundlerWar vs webpack. I made this debug visualization and figured it might be useful as a standalone feature.

Parcel just spits out a DOT graph, which you can run through dot/neato/circo as you prefer.

Some graphs can end up looking pretty wild! https://i.imgur.com/gLXJvx8.jpg
> "this will get downvoted as all [hell], but"

It'll have a better chance of avoiding down votes if you leave this out. It's against the guidelines:

> "Please don't comment about the voting on comments. It never does any good, and it makes boring reading."

https://news.ycombinator.com/newsguidelines.html
Unless I'm missing something, they wrote an entire article about an ISP threatening customers for warning customers that throttling may impact remote access:

"Please be advised that this may affect other services which you may have connected to your internet service, such as the ability to control your thermostat remotely or video monitoring services."

I don't like the repeal either, but this is hyperbole.
The whole MS Office suite. Their competitors are worse though.

They're very slow and tedious. It takes a while to draw a border, adjust an image. I write my business plan in Sublime instead of Word because of how much easier it is. I think this has been why so many people have adopted Markdown. It would be nice to see a Word style text editor that's as easy to modify as Markdown, or even a more user friendly version of LaTeX.
Google will on their pixel phones. But the other OEMs tend to not be good about updates. A big plus for the Pixel in the Android world.
It’s still reasonable to push discussions away from FB and walled gardens in general.
This is just sensationalized clickbait from Engadget.

The ISP didn't say "we'll mess with your connected thermostats" at all.

They did say that they might throttle customers and "that this may affect other services which you may have connected ... such as ... your thermostat".

I work for an ISP and, upon reading the headline here, I thought, "Wow, that sounds absurd!" -- and it is absurd because that's not even close to what the ISP said.
How long did you wait on the page? At first when it loads you can read it just fine, but then an obnoxious pop up appears. There is a little "not now" link on the bottom that will get you back to the post, but I can see how someone would miss that (it's a great example of a bad UI).
Google will for the Pixel and if the other OEMs drag their feet more will get the Pixel. That is on the OEMs.
Why do you feel a sickening dread that you won’t have time to explore them all?

You won’t. That’s a fact.

We are all limited beings. You can do anything, but you can’t do everything.

Bill gates didn’t choose polio eradication because it was the most intellectually interesting, or the most profitable, or the most trendy - he chose it because he assessed all the options and found a goal that was challenging but achievable.

You need to do the same. It’s ok to be interested and open minded about other areas, and it’s ok to spend time on them, but don’t let analysis paralyse you, pick a few challenging stretch goals and go for it
Even longer.

What's really wild is that they even got the rough proportion of security cost for losing it down to 5% of the numbers were seeing with today's security patches.

I submitted this because I think their technique is preferred for lots of stuff distributed systems developers do with crypto primitives (as opposed to retpoline).

There are lots of well-known things no one seems to know outside of Academia, like how generalized sorting is O(n) and compilers that can prove the correctness of real world code when it's written a specific way
If you've not seen it, the "Turbo Encabulator" is a good watch.

https://youtu.be/MXW0bx_Ooq4
Ah, epic swoosh :) They fill a clear purpose as a step between commas and periods, which allows putting more structure into sentences and helps express meaning more clearly. I've been told that they're more commonly taught and used in Europe than the US, and my first language was Swedish. On the other hand I definitely write more code than otherwise, so that probably explains some of my fascination with punctuation. In the end, languages are tools for accurately conveying meaning; (see, there he goes) and whatever rules don't contribute to that goal may safely be tossed out.
APFS has been nothing but pain for me. File system changes show up in Finder minutes later! I should have stayed in Sierra.
While I'm not a fan of the title it was submitted with, a backdoor is a heck of a lot different than a "normal" vulnerability; to the point where just saying "vulnerability" is a bit misleading.

Perhaps: "WD MyCloud Multiple Vulnerabilities (including hard coded backdoor)"
Are you worried about potential licensing issues? Some projects make contributors agree to certain license contribution guidelines before they can accept pull requests.

If there is a question about non-OSS code coming in from Gitmask in a lawsuit, the affected project will most likely have to discard and rewrite all those contributions.
I (strongly) disagree. You should expect the worst when using crap that you, or anyone else (publicly) cannot verify. To expect any less is to become complacent. Products, and companies behind them, must earn your trust, and hiding behind binary blobs is not the way.
It was most certainly the other way around. Marcus does not focus on differentiable programming in his paper. See my edit.
I've been doing it for more than a year, first two weeks were very painful and I've almost regret doing it. However it has become a lot better after I established long enough whitelist and put my fixes in place.

Only thing which I'm missing is to run my custom scripts on page I disable javascript on. I am able to fix quite a bit with stylus but not everything.

Also it's so weird to me that firefox which cares about privacy(?) doesn't have domain js blocking like chrome does and I have to use 3rd party addons.
Unfortunately, people don't seem to understand what the Incognito window or FF privacy windows actually do. I've heard people tell me they use it at work so their boss can't see what they're doing face palm.
> Store the screen layout using serials from the EDIDs

What does this mean/how do you do it?
Earn money from viewing webpages
it's really a pity that after 75 years of AI research the best thing we've got is still based on gradient descent, a brute force trial and error.
Well QE is still going on in that the fed still holds all of the assets it bought. Here is an article from last September saying that the fed is starting to sell (or not turn over) the assets:

https://www.ft.com/content/caf45d6a-9e28-11e7-8cd4-932067fbf...

Of course I agree with you on the global wage increase, I ignored the fact of multiple currencies.

I kind of think that all prices are related to (possibly delayed) labor costs, along the lines of "how much work do I have to do to buy it?" and "I'll extract that oil for you only if you are willing to pay at least what I have to pay my employees to do it".
Right so, if the previous options of running UI apps remotely don't work, you'd need a web browser with JPEG, PNG, JS and Linux framebuffer support.

Dillo and Lynx are quick. Dillo last release was 2 years ago. Lynx is in active development. They don't have JS support though.

Links has support for JPEG/PNG and Linux framebuffer but somewhere in '00s they removed JS support (it was an unmaintained port of spidermonkey). ELinks port which also supported all 4 features is dead.

There's surf and uzbl. I don't know the latter much, former is used with keyboard shortcuts only. AFAIK these don't use the Linux framebuffer. Dooble is a lightweight web browser, but no Linux framebuffer support.

I question wanting JS 24/7 locally. You can also just not load all these JS nonsense and have a quicker experience (with NoScript or uMatrix). Same with loading all images. You could use a proxy to downsize JPEG pictures as well. The very first Opera versions on mobile phones did the same thing. They didn't even serve HTML! They spoke a different language with the browser. I'm not sure if Vivaldi (formerly Opera) still employs this feature. But you need to remember there's a market for this in upcoming economies where mobile bandwidth is scarce.

Sources used [1] [2]

[1] https://en.wikipedia.org/wiki/Comparison_of_web_browsers

[2] https://en.wikipedia.org/wiki/List_of_web_browsers_for_Unix_...