skysight-inc/HackerNews huggingface dataset:
There's more to the story of 900 people on some contract to the MTA, and only 700 people actually being hired, that would be fraud and should be prosecuted, someone should go to jail for it. That's theft. It's way different than overbilling where you hire 700, but either overpay them by 28%, or even overcharge the MTA by 28% while pocketing the profit. Charging money for something that did not in fact happen is fraud, it's a crime.

But yes the first statement is overwhelmingly true, the MTA has lost the ability to build cost-effectively. More to the point, they've lost the ability to write coherent contracts, hire competent contractors to fulfill those contracts, and then hold all parties accountable. Their ducks are not in any sense in a row.
Why do you think affirmative action is needed?
Interesting. I'd assumed the performance degredation resulted from disabling the offending cpu optimization feature at the hardware/firmware level, which would seem to address the issue for anything on the box (vm and hypervisor).

But, perhaps that assumption was wrong and/or Amazon has another workaround.
Worked on my system.

(Set cache_hit_threshold to the default value of 80, my cpu is an Intel i7-6700k.)
I think what people mean when they say "reinforced with metal" is "reinforced with substances in metallic form".

From that point of charity we can start to say things like "Organic environments cause corrosion in commonly-available pure metals", or "Pure metals can be toxic to animal cells in large amounts".
It's optional. It can be turned off if you want it off:

https://blogs.opera.com/desktop/2017/12/opera-50-beta-rc-cry...
window.customElements.define('subreddit-van', class extends HTMLElement {
// Only get callbacks when our 'name' attribute changes.
static get observedAttributes() { return ['name']; }

// Called when our 'name' attribute changes.
attributeChangedCallback(attr, oldValue, newValue) {
if (newValue === '') {
return
}
fetch(`https://www.reddit.com/r/${ newValue }/top.json?limit=5`).then(resp => {
resp.json().then(json => {
this.innerHTML=`<h2>${ newValue.toUpperCase() }</h2>`;
json.data.children.forEach(item => {
let ele = document.createElement('post-van');
ele.item = item;
this.appendChild(ele);
});
});
});
}

// Provide default content before the reddit content is loaded.
connectedCallback() {
this.textContent = 'Loading...';
}
});
I love my life and am very thankful that my parents decided to give it to me.
who says one person can't run a non-profit

I'm guessing: the IRS. A non-profit is a specific type of entity, not a business model.
Well, while your rant is true, I haven't had to deal with BAT files (or even Powershell scripts) in Windows installs for a very long time.

(One reason for that may be NSIS, bequeathed onto us by Justin Frankel of Winamp, Gnutella and Reaper fame, which allows for streamlined (un)installers).
It looks like `dep` will be this tool for Go.
The Spectre paper includes this line in the acknowledgements:

> We would like to thank Intel for their professional handling of this issue through communicating a clear timeline and connecting all involved researchers.
Twitter is strongly incentivized to err on the side of caution (for them) by deleting in unclear cases. If they wrongly believe a tweet is legal, they are punished. If they wrongly believe a tweet is illegal, nothing happens. To pretend a company in this situation is not being legally forced to delete "protected" satire is sophistry. The only rational thing to do in that situation is delete all tweets anyone could possibly claim are illegal if there's the slightest bit of grey area to them. The matter is made worse by time limits: they have to delete NOW, not have staff discussions and legal assessments.

The supporters of the law said exactly what you said, ignoring that reality. The result is in the article.

Additionally, from outside Germany, this looks less like "stopping hate speech" and more like enforcing the "basic consensus" of the CDU cited in the article.
Missing production targets is obviously bad, but after giving this announcement more thought it doesn't seem like awful news if you put this in context with other EVs rather than Musk's always overambitious projections.

Tesla says they are producing Model 3s at roughly 1000 per week now. Considering they are selling Model 3s as soon as they can build them, that would make the Model 3 already the 2nd best selling EV. The top seller is the Model S at a little less than 1,200 per week. The way production is currently ramping up the Model 3 will become the best selling EV sometime in mid January to early February. That isn't as fast as people wanted, but I don't see how this would be a sign of some overall failure with long term side effects rather than a temporary stumbling block as they ramp up production.

If I was a long term investor of Tesla, I don't think this would have me worried and I might even try to pick up some extra shares tomorrow at a discount.
> "Let's train/condition 300 million people"

the vast majority of people in the US know not to run from bears. They also can identify pikachu on sight. Knowing how to respond to the unexpected appearance of police who think you're a bad guy seems to me at least as useful of a skill. And it's not a difficult concept that requires a great deal of training -- just understand that hands kill (nobody ever draws a gun with their feet, except maybe James Bond), and if you're in a stressful situation, slowly move your hands into totally visible open space (unless you're a cartoon character, you definitely can't draw a gun from midair.) No, this won't prevent 100% of police shootings, but it can prevent an awful lot of them. It's also useful for defusing a lot of other potentially violent situations.

> "and put at least part of the blame on them"

There are two types of blame. There's the "you shouldn't have done that" that you say to the guy who stabbed his neighbor over a fence dispute, and there's the "you shouldn't have done that" that you say when you're watching a zombie movie and someone wanders off alone.

One is about moral culpability, about someone's intent being wrong. And we should NEVER impose that kind of blame on victims.

The other is about risk management, about someone's actions increasing negative outcomes. It's why we have things like debriefings and post-mortems in contexts ranging from military to software development -- learn what factors can lead to negative outcomes, and develop tactics to mitigate them. And we should stop being so afraid of "victim-blaming" that we instinctively balk at this.
Intel® 64 and IA-32 Architectures Software Developer’s Manual, Volume 3A 4-30

4.6.1 Determination of Access Rights

For user-mode accesses:
— Data reads.
Access rights depend on the mode of the linear address:
...
• Data may not be read from any supervisor-mode address.
Personally I find HackerNew [1] to be quite a sensible addition to the HN theme.

[1] https://chrome.google.com/webstore/detail/hackernew/lgoghlnd...
I never said they don't. Simply that in this case there is no evidence, direct or circumstantial, pointing to Intel ME being born out of an order by an intelligence agency. Could it be? Sure. But critical thinking demands facts, not speculation. Facts are:

1. Intelligence agencies have been known to force companies to give them access to their products.

2. Companies have been known to comply, if reluctantly, at least until a whistleblower exposes the program.

3. Intel ME was developed as an on-chip version of an external card that is actually useful.

4. Intel has made poorly engineered products before.

5. Intel isn't in a habit of open sourcing firmware.

6. From a technical standpoint, Intel is fully capable of creating a system that doesn't allow C&C through a bug and an exploit.

7. AMD, the second largest computer chip maker does not have a matching system that can't be disabled and that has similar bugs.

Based on this, I'd say it's possible that the NSA (or equivalent) asked Intel to develop ME and add a bug to allow C&C, but very unlikely.

It's also possible that the NSA (or equivalent) asked Intel to develop ME and add C&C and Intel did it through a deliberate bug, but very unlikely.

It's also possible that Intel tried to develop a feature the market might want, and screwed up the implementation. This seems to me to be very likely. It's the simplest explanation (Occam's razor) and it requires only incompetence, not malice (Hanlan's razor), so it's sort of by default most likely.

If someone can produce an iota of evidence to the contrary I will change my allocation of probabilities appropriately, but so far the evidence is "it could have been done" and "they've been known to spy on people in the past". In my book that's not a strong enough argument.
Beautiful. But I don't see Coinye listed.

Would like to submit my experience rage-deleting my wallet after the pre-mining shenanigans were revealed.
Reading the GIMPS forums, some think they've missed a few.

The occurrence rate is surprisingly (or not?) irregular.
2018 Boston Building Boom Prediction: From Records to Rent Plateaus – NEBS
Bigotry is not a reasonable attitude, and you can't reason someone out of an attitude they didn't reason themselves into in the first place.
lol! thanks for your comments.
Mitigations landing for new class of timing attack
> Production is coming along better than anyone realistic could have ever expected

i think he might have knowledge of tesla's "private expectation" i.e. what tesla is seeing internally, vs "public expectation" what tesla is telling the press.
Because only 2% of their teachers are male. Thats a massive gender inequality.

Speaking seriously, if you want to normalise women in roles where they aren't you need to normalise men in roles were they aren't either.

If more men go in to teaching, there are more roles for women to take up, or speaking in the inverse - if you exclude men from roles (such as teaching) they need to find jobs elsewhere, and thats usually in positions where men are the majority.
I'd say it's a failure of GM's marketing department and dealership salesmen that for some reason steer (no pun intended) people to ICEs.

GM should be capitalizing on Tesla's failure to bring the Model 3 out. They could absolutely sell the message of "Why wait 18 months for an affordable electric car when you can drive one TODAY?"

They could devour Model 3 reservations, but for some reason are choosing not to.
"Before the issues described here were publicly disclosed, Daniel Gruss, Moritz Lipp, Yuval Yarom, Paul Kocher, Daniel Genkin, Michael Schwarz, Mike Hamburg, Stefan Mangard, Thomas Prescher and Werner Haas also reported them; their [writeups/blogposts/paper drafts] are at"

Does anyone have any color/details on how this came to be? A major fundamental flaw exists that affects all chips for ~10 years, and multiple independent groups discovered them roughly around the same time this past summer?

My hunch is that someone published some sort of speculative paper / gave a talk ("this flaw could exist in theory") and then everyone was off to the races.

But would be curious if anyone knows the real version?
> Opcodes and values can be combined to yield a vast array of possible contracts, just like any programming language.

It's not Turing-complete and doesn't even have loops (or goto to provide an alternative). Definitely not "like any programming language", you could as well try to use Brainfuck (which is, BTW, Turing-complete).
That was one of the best scenes in the movie IMHO. Personally, I also had no idea that level of investigation took place. This strikes me as similar to how energy trading firms will pay for thermal imaging data of power lines and such to gain an edge, or how other companies look at satellite imagery of parking lots to predict retail performance.
So charge for approvals. Why am I paying $99/yr to deploy apps to my own phone when I am already forced to buy their phone and their computers.
As if upholding "the Constitution and the vision of the Founders" magically makes people informed about everything else?
That’s true for 4 desktops, but what once you start having 8? Or 10? Having a row instead of a grid keeps things simple, both in terms of gestures, shortcuts and mentally. For me, I like functional simplicity like that, especially when I know Apple put a lot of thought (and probably some UI focus groups) on it.

As far as Apple not giving you the simple switch.. that’s just how Apple is. Again, I like it, because it means any Mac or iPhone I pick up I can instantly work on.. with Linux, the shortcuts differ even between Ubuntu and Fedora! That unified ‘foundation’ gives developers a solid base they can bolt stuff onto. For example, Spectacle. Its a sort-of window manager that would never work if it had to keep dozens of key configurations in mind.
> he also recommended as president that Mazda build the Miata, arguably the best two seater sports car ever made.

The BMW Z3 would like to have a word. (I was actually going to say the 911, but not being super familiar I had to look it up and it does have a rear seat. Who knew?)

But Mazda has always been a great innovator, especially for the cost. They are the last enthusiast car brand available for the average buyer.
Techniques for Factoring Numbers in Your Head
Awesome stuff!
A few months back I found a double pendulum simulation in less than 100 lines of JavaScript. It was a ton of fun to play around with the code.

Code and explanation:
http://www.physicsandbox.com/projects/double-pendulum.html

Demo:
http://www.physicsandbox.com/projects/double-pendulum-sim.ht...
The Most Important Charts Setting the FinTech Stage for 2018
I would recommend trying to find an internal transfer. That way you don't have to do another round of whiteboard interviews, but you might find a better / more interesting project to work on. Any change of scenery might help.
Is it wrong that I am hopeful for my own job prospects going forward if this is the case?
I'd argue that this argument is invalid for practical uses.
Saying that luck is unfair is in my opinion a useless and even evil idea, it can be used to justify terrible acts.

Everything is luck, or did you choose what family you'd be born in?
Did you choose your physical attributes?

Inequality is inevitable, it is natural, and its fair, everyone got a dice roll, no one had control over it, no one can.

In spite of these starting points, which are not the only luck based you will encounter, people can rise where others won't.
There's no mitigation. We'll need new CPUs.

Meanwhile, don't ever run untrusted code in the same process as any kind of secret. Better yet, don't ever run untrusted code.
Is there anything comparable to NoScript that works in Firefox Quantum?
> On the positive side, the flaw is very difficult to exploit in a practical setting.

Is it?

"As a proof-of-concept, JavaScript code was written that, when run in the Google Chrome browser, allows JavaScript to read private memory from the process in which it runs"
Indeed, with all the CPU sidechannel attacks that just came out, allowing any untrusted code to run on your machine, even sandboxed in a browser, seems like a horrible idea.
Google’s Project Zero team discovered critical CPU flaw last year
> computer security Nobel prize

While they're not as big of a deal AFAIK, we do have the Pwnie Awards: https://pwnies.com/
The play queue view have a history "tab" though
This is very similar in style to my favorite presentation and paper of all time, titled On The Turing Completeness of PowerPoint [0]. The research, presentation and paper were all created inside of powerpoint and it is probably the greatest thing ever made. If you enjoyed the above video you will definitely enjoy this.

[0] https://www.youtube.com/watch?v=uNjxe8ShM-8
https://cyber.wtf/2017/07/28/negative-result-reading-kernel-...

Failed attempt in July which is being attributed as earliest work via https://twitter.com/lavados/status/948700783259811847
I can't imagine better marketing for cloud services than making it as clear as you can that the world is a very dangerous place for computers and if you don't have a crack team of hundreds of battle-hardened security engineers then you have no business hooking your computers up to the internet.
Hm that's tricky. These awesome findings didn't exactly provide net value for google, not even on the not so short term (next 10 years?). They've created a large problem for Google! :-)
Because the latter can and will be displaced by a shift in the marketplace. The former can literally shut down its competitors with state power.
> If you're spending more in developer fees than you're making from the apps it might make sense to make them free/ad-free so you can qualify as non-profit.

That's not how you form a non-profit [0]; not deriving revenue from products is neither necessary nor sufficient to establish non-profit status.

> Plus, who says one person can't run a non-profit

One person can run a non-profit, but it still probably needs to be incorporated as a separate legal entity, and may (in some states) need a three-member board.

> Surely they have to start somewhere like any other organisation

Yes, they have to start somewhere, but that “somewhere”, in some jurisdictions, involves more than one person overseeing operations.

[0] as a starting point, see: https://www.nolo.com/legal-encyclopedia/form-nonprofit-eight...
Doubtful since they're pouring every extra dollar they have into making originals.
> The actual conditions to which Jews and others were removed, even prior to the implementation of extermination, was not overt.

That is not correct. Most Jews in Germany were sent to work camps and used as slave labour for local factories. Check out this response: https://www.reddit.com/r/AskHistorians/comments/3mnglz/did_t...

Generally Germany knew, or at least had an idea that something was wrong. Everyone who tells you differently is selling you an agenda.
IMO the advantage of small functions is that they act as a form of documentation. In the given example (short main) I can see that it loads some configuration without having to worry about how it does it. With the long main, I'm forced to see the details.

Also, if we're talking about OOP, small methods are better. With small methods it's easier to change behavior by subclassing. In several occasions, I've been forced to make a subclass with a copy of a big method with only one line changed.
My read is that vulnerable processors generally have to:

1. Have out of order execution

2. Have aggressive speculative memory load / caching behavior

3. Be able to speculatively cache memory not owned by the current process (either kernel or otherwise)

4. Have deterministic ways of triggering a speculative load / read to the same memory location

2 is probably the saving grace in ARM / low power land, given they don't have the power budget to trade speculative loads for performance (in the event they're even out of order in the first place).

Caveat: I'm drinking pretty strong Belgian beer while reading through these papers.
Trump Disbands Commission on Voter Fraud
Certainly, but I think that's an unfair comparison. You're comparing the single available thing in OS X to the multitude of options available in Linux. If you want consistency, always use the defaults, and they'll always be consistent. That's what Apple forces you to do.
ClearChannel front; they own all major terrestrial radio in the US
Apparently potentially: Red Hat Security statement https://access.redhat.com/security/vulnerabilities/speculati...
Don't know if you're being sarcastic. Advocating for more diverse teachers doesn't seem insane to me. I am male and think that my school experience was bettered by having a larger than normal number of male teachers. We should probably pay teachers more to encourage more high performers of both genders. I suspect paying better would attract more men as well.
Fine, I should perhaps say "in this context, 'most societies' is a meaningless term." - though I would hope that contextualizing is obvious.

As far as expertise goes, I think all one needs is moderate acquaintance with statistics to learn the "most" is a slippery generalization whenever one gets to get complex phenomena in wide-ranging contexts. And human societies and their interrelations are some of the most complex and slippery of them.
Thanks for the links. As an undergrad with limited knowledge of this subject, I would love to see these annotated on Fermat's Library (https://fermatslibrary.com)
Depends on the quality you want, I guess.

A 640x480 VGA camera for Arduino, where the lens is about 1cm, so it'd fit pretty well, is about $5. Throw in a Nano for the board for another $5, and an SD card module for another $5, and you can probably build your own for about $20 all up.

Prebuilt, I've seen a few wireless "drone" cameras of similar quality for $20, and a few Chinese shops carry cameras like this [0] for $25 or so.

But... If you want better than a crappy VGA, you'll be looking for a while.

[0] http://www.dx.com/p/super-mini-small-portable-camera-button-...
What’s Your Favorite Engineering Tool? Continuous Integration
Jann Horn's results & report pre-date the blog post though. The topic was "ripe", so to speak, so multiple parties investigated it at roughly the same time.
Problem is that people clearly brighter than me are not easy to come by.

...wait, that sounds like I mean that I think I'm really super smart. That isn't the case, I just don't meet many people, and those that I do meet I don't think are clearly brighter than me. The ones that are, usually don't really seem interested in being friends, so whatever.

Turns out these things aren't so simple as random people on the internet claim.
You’re mixing up equilibrium payoff and Nash Equilibrium (which is a strategy profile). Yes, the payoffs of player A randomizing and player B playing scissors is the same as both players randomizing, but observe that this profile of strategies fails the ex-post facto definition of Nash Equlibrium, i.e. in retrospect player A would want to change their strategy choice to “play rock every time.”
Your comparing apple displacing a lumber company and a 10 year old startup in a rapidly changing field to companies that are over 100 years old in a field where a mistake isn’t an OTA fix away, but a recall costing hundreds of millions.
https://insideevs.com/monthly-plug-in-sales-scorecard/

December: Tesla 9335, GM 5173
> Am I overreacting here?

Still skimming the paper, but the JS attack appears to be processor-intensive (please chime in if you interpret it differently!). Any widespread, indiscriminate use of such an attack in the wild seems like it would eventually be detected as surely as client-side cryptocurrency mining was discovered. If you aren't a valuable target, if you don't visit sites that are shady enough to discreetly mine bitcoin in your browser, and if you use an adblocker to defang rogue advertisers, then you probably shouldn't lose too much sleep over this (which is not intended to diminish how awesome (in the biblical sense) this attack is).

That said, if there were ever a time to consider installing NoScript, now's it: https://addons.mozilla.org/en-US/firefox/addon/noscript/
I can personally assure everyone that plenty of people are still partying and have no problem with social interaction. This is an article that's practically targeted towards the hacker news audience of older introverted people who feel like they don't understand younger generations. One difference that might be real is people might be a little more responsible, because our education system is better and parents are more careful and have more support. But plenty of people still love going out, even when they can't legally drink.
You can develop Android applications in C/C++ using the NDK, thus, giving you full software control if needed.
Building a Todo App with Laravel, Vue.js, and Tailwind CSS Part III
Don't give up friend. After 10 months of waiting I got an offer to move. I hope circumstances change for you going forward.