skysight-inc/HackerNews huggingface dataset:
Considering the volume of what Intel ships and the complexity of their product, it's astounding that we are reaching back 20 years when looking for a comparable situation.
Yes, but site per process is harder: iframes need to be booted out of process when they cross a site boundary.

To illustrate how much complexity this brings, consider a browser feature like find-in-page. It used to work by traversing the document and descending into subdocuments synchronously. It was basically a big for loop. With the page and its iframes split across multiple processes, now we need a protocol and interprocess communication to coordinate the find operation, and assemble the matches together into a tree. The results of this async operation can arrive in any order, and you need to filter out late arriving responses for previous queries, when the user modifies the search string.

This pattern needs to be implemented, rinse and repeat, for hundreds of subsystems. It was really hard.
It is very hard to find system that has CPU powerful enough for doing any kind of cryptography while not having any usable entropy source, there is always something non-deterministic that you can measure (hash contents of memory at start of boot, time accesses to EEPROM, ADC noise, timing of events, the actual data that your system processes...).
Calculus, by Spivak (an analysis textbook despite the name). I found this book clear, with good exercises, and it starts at the very beginning. I think the most difficult exercises are in the early chapters, so stick with it!
except they are hardly visible, most people filter them out again and it really doesn't impact the experience for them
You're misunderstanding. The "National Debt" (this only applies at federal level for currency-issuing governments, not state, local etc) is the effective form of the currency itself.

Eliminating the "debt" that a currency-issuing government has in its own currency is the same thing as eliminating the currency.

The U.S. federal government "owes" dollars to creditors kind of like the way the the score-keeper in a game "owes" points to a basketball team.
Sure, I know that now. But I didn't know that when I was 10 years old :)
Branch prediction alone is insufficient. Speculative execution alone is insufficient. You need speculative memory loads for any of these attacks to work.

The Cortex-A53 branch predictor [1] does prefetching to keep the core fed. This ensures that the instructions are ready for decoding, but has no architectural effects beyond the L1 instruction cache, which is already a well-studied timing sidechannel.

[1]: http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc....
I'm not one for publically sharing my personal life in greater detail than above, so my reflections will remain internal =)
Unless it becomes more appropriate for more people to work remotely, which is the case. I imagine is one of the main reasons people move to urban cities is because of employment.
IIRC, some of those old machines interleaved CPU and GPU memory access windows, since memory was so much faster than CPUs back then.

Edit: this is what I'm talking about: https://www.bigmessowires.com/2011/08/25/68000-interleaved-m...:

> The Atari ST and Amiga appear to have both used a more aggressive scheme where video circuitry access occurred during known dead time in the 68000 bus cycle, so the CPU never had to wait
>There are two angles to consider for this question:

>Can an untrusted guest attack the hypervisor using Meltdown or Spectre?

>Can a guest user-space program attack a guest kernel using Meltdown or Spectre?

There are two angles if you maintain Xen yourself. However the vast majority of people aren't Xen customers, they are customers of Amazon or other cloud provider. In which case the main concern is:

Can a fellow customer guest running on an AWS instance attack my guest account?

It seems like the answer is "No", but it looks like the answer might be "Only if dom0 is patched", and might even be "Yes". Since it's not in AWS interests to publicize that the answer is Yes, and since AWS is a large user of Xen, I find the it unsettling that this question is unanswered. It makes me thing it is unanswered for a reason. And if the response is "Oh, we didn't think about it from that perspective", then that would be even more disturbing.
Yes, in principle you can have a language that lets you cover the gamut from statically- to dynamically-typed code. Indeed, Haskell is such a language...

But it's not just whether the language supports it, but also:

- what is the default
- what is the cultural default
- the extent of type inferencing
- the extent to which the compiler can generate efficient code (i.e., pass around unboxed, naked values sans run-time typing information)

CL basically doesn't go far enough. To begin with, the default is dynamic typing, and IIRC it has no type inference, though at least CL compilers can do a fair bit optimization but you'll always pay the price of some type encoding in pointer/fixed-sized-integer values' low order bits.
The official page: https://projects.csail.mit.edu/jeeves/about.php
Sprawl only has a minor effect in all of those, and has many positive effects. My kids play in s 1/3 acre yard all day. for example.
They are obviously way differently powered CPUs, but if they were as incomparable as you suggest then this article wouldn't even exist.

It doesn't even matter though, I said technical details aside...

I'm not stupid i know a pi zero is slow, but it's a cheap computer that happens to be invulnerable to three really bad sidechannel attacks that plague all big shiny expensive ones. How is that not a little amusing. Not any more now I've had to argue for it.
> Similarly, now that cannabis is legal in Nevada

Cannabis is no longer illegal under Nevada state law. As Nevada has not achieved independence from the US federal government, cannabis is not, however, legal in Nevada.

This is important in he context of your comment because, given the history of the Las Vegas Casino industry, I don't think they would want to wave a red flag of what is—from a federal perspective—organized crime in the face of federal authorities.
There's no reason to predict a branch if you're not going to execute speculatively.

I need to re-read the papers but I think the real problem isn't even speculative execution but allowing speculative cache changes.

The notion that "gadgets" didn't even need to return properly was both amusing and eye opening for me. It doesn't matter because the result will be flushed anyway! ;-)
The Graide Network | Chicago, IL | $80k | JS and/or PHP Engineer with Bootcamp background

https://github.com/thegraidenetwork/job-openings/blob/master...

We match teachers up with on-demand grading assistants who are studying to be teachers. This allows English teachers to assign more writing (thereby improving writing skills) without spending every weekend grading.

The software we write helps Graiders work more efficiently and will (eventually) augment the grading process with AI.
No, Wavecrest has a stored value account which their payors must top up ahead of time in order to be able to fund payments.

This is identical to Paypal, or any other payment rail in the industry. Payment companies don't in general make loans to their customers (though anything is negotiable in principle).

Source: have integrated with Wavecrest.
We get it -- you're not an expert.
I'm glad this resurfaced. The only thing I have in common with the author was that we both work in tech, but that doesn't have much to do with their story. It was so well written I couldn't put it down. I hope they're feeling better now, a few years later.
If bank credit isn't backed by fiat currency (fractionally reserved or otherwise), then does it have any real basis to it?
At least it could describe some evidence in why there is a reasonable suspicion exists that something is wrong. Saying "well, some woman thinks something's wrong and because she happens to be a statistician she must be onto a government conspiracy" is not very informative. The only thing the article gives is:

> Clarkson has said her statistical analyses of elections over several years have shown discrepancies indicating vote tampering.

What kind of discrepancies? Indicating how? What kind of tampering? No idea.
True - I wonder how much actual KYC those guys are doing though, so much as claiming they don't market to US citizens and then doing no real background checking. It won't pass muster if there aren't any real teeth to it.
Ask HN: What CS and Math books did you read in 2017?
Digging into Node by Numbers 2017 – NodeSource
As mentioned by jrsmith, I try to minimize the amount I am switching to a new context, so I generally avoid any 'time waster' which is mentally involved. I do like short breaks, however, so often I will walk around for a few minutes. During that period, I will get a drink if what I was drinking has been finished since my last break.
Thank you. That is roughly what I meant to convey.

Mind you, because these subsidies are never really temporary, I suspect the immediate effect on prices is always to raise them. And perhaps even temporary subsidies cause price rises just by increasing demand, though the price rises might only be temporary.
A dear favorite of mine was Baldor's Algebra. Everyone else in high school was scared of it, but I found it to be very methodical and easy to follow from one topic to another.

Picture of the cover, with text in Spanish: https://es.wikipedia.org/wiki/%C3%81lgebra_de_Baldor
Yes, there are still many areas with a lot of potential to get worse.

but there are certain areas that can't go much higher and sooner or later each area will reach a price point where prices can't go any higher. Ultimately, it just depends on how much people can afford to pay: which comes down to salaries, commute distance and # of wage earning people per roof. Sooner or later all the coping mechanisms will be exhausted.

The bottom line is, RE prices can't outpace salaries forever. If you double the number of wage earners per roof, you can double the RE price. But, after that it becomes harder and harder, as people aren't willing to live with multiple families per house.
I don't understand this part of your criticism. Your core criticism has been that we don't really need hardware TRNGs because the math of CSPRNGs doesn't lead to "entropy depletion" in the way that people's mistaken mental models might suggest.

That's fine, but boot-time seeding problems are also a real source of RNG-related security problems, as described in the "Mining Your Ps and Qs" paper. (E.g. "The removal of IRQs as an entropy source has likely exacerbated RNG problems in headless and embedded devices, which often lack human input devices, disks, and multiple cores. If they do, the only source of entropy—if there are any at all—may be the time of boot.") Having a hardware TRNG for seeding in this case would presumably prevent these problems.
Your definition of healthy wages is absurd. I work with a woman delighted to move to Phoenix from the Valley. She makes less, but has a house with a yard and constantly remarked on how cheap things are here. She’s living better despite her wages being “less healthy”.
The C Programming Language, by Kernighan & Ritchie (2nd Edition). I picked that up and was hooked.. 30 years ago
http://archive.is/Sy6sJ
Container Linux patched to address Meltdown vulnerability – CoreOS
Chemception/Chemnet do just that with OK performance.
https://arxiv.org/abs/1706.06689
https://arxiv.org/abs/1712.02734
> 5 to 20 μs resolution

Updated for those of μs confμsed by this μngainly grammar
What about Alpha Go Zeros approach of reinforced learning based on self play? Arguably the game of go has really simple, explicit rules, and evaluating the final end state is also easy, but it shows that with enough compute NNs can identify important features without supervision or labeling.
Please don't post uncivil or unsubstantive comments, regardless of how wrong someone else is. The 'economics' of that are backwards in that it damages the container more than any value it contributes.

https://news.ycombinator.com/newsguidelines.html
From Wikipedia:

A monopoly (from Greek μόνος mónos ["alone" or "single"] and πωλεῖν pōleîn ["to sell"]) exists when a specific person or enterprise is the only supplier of a particular commodity.
I still think it's crazy that if you bought a MacPro or MacMini when it launched and bought Apple Care it would have long run out, and the same computer is on their store.
What do you think pensions, IRAs and 401Ks are invested in?
For the most part, I agree with the article's premise.

But they were pretty unfair to the Stanford lab (Vijay Pande). The Stanford team is using graph convolutions to process molecular structures. The article complains that the Stanford team is biased because they are not using sequences to represent the molecular structures. But this actually makes a lot of sense because molecular structures are graphs. The article then goes on to say that the Stanford team has an agenda to get everyone to use deepchem instead of TensorFlow or PyTorch. But TensorFlow is a dependency in deepchem, and deepchem looks like a bunch of useful tools wrapped around TensorFlow.

I'm not buying the articles arguments
AI can't help much in drug discovery (i.e lead generation) because the pharamecutical industry is suffering from Eroom's law ( https://en.wikipedia.org/wiki/Eroom%27s_law ). It's a play off Moore's law (spelled backwards), but the fundamental problem is the pharma/medical industries do not understand biology from first principles, unlike hard physical sciences, such as computer hardware engineering.

First principles understanding of computing hardware allows chip manufacturers to create novel, new chips from scratch, as we fully understand the physics behind electricity, how logic gates work and signals propagate through physical mediums. Lock most college students in a room with resistors, diodes, wire, etc, and reference material, and they could recreate basic circuitry and very simple computers. You can not do the same with biology - no student or expert, given unlimited resources, equipment, or reference material can construct a new living cell from scratch (proteins / molecules). This is not a slander of those sciences and scientists, but there is simply a huge gap in how well we understand the basic principles of life and how well we understand the basic principles of computing.

Throwing more resources / computing into "drug discovery" is like trying to build chips by wiring computer parts differently. Occasionally it might work and produce a "useful" result, but it's fundamentally a broken approach.
> "If some nefarious actor has the users credentials (e.g. username / password) won't they then be able to circumvent both of those checks?"

They would. However, typical ACH fraud entails pulling money using only the routing and account numbers, which can be found on all paper checks; this mechanism prevents that.
I found Berlin even better. Very cheap, great service (and they speak German and English), great connections, easy app (Google Maps shows it all as well), tourist friendly tickets, and the best of all: no mandatory NFC card!!

It also depends on where you live in NL. Every 10 min a train to Ehv is neat, and I got a bus from Ams to my home city every few minutes whole day long, but the rural areas don't have such luxury. The joke for the trains goes, that "they don't drive on time, they drive on rails."
They get a cut of the ~2% processing fee that Visa charges the vendor, and they charge some additional fees to the payor as well.

The details are very dependent on commercial negotiations (i.e. how much volume the payor is bringing, etc).
Only if you managed to find a flaw in the arm cores used in the Pi.
People use mainframes to this day for similar reasons.
My bet is driverless cars, whenever they arrive, will actually increase the value of rural/small town land that's ~1 hour from a city center.

Hypothesis is many people live close to the cities because they hate commuting. But if commuting means work on a laptop or watch a movie, then the commute time is less significant. It's the near ring suburbs that will take the biggest hit. Small towns outside the suburbs will increase.
Introduction to Probability, by Blitzstein and Hwang. Builds your intuition for the most unintuitive subject.
There might be some side-channel attacks if your rows are too close to each other....
It's still enforced legally but tempered by bankruptcy laws. It's backed by the supposed (hoped for) future productivity of the debtor. Or by real property (like a house in the case of a mortgage).
Employment, entertainment, education and culture.
The classic example of "not enough randomness" is the Debian openssl vulnerability: https://www.debian.org/security/2008/dsa-1571 . But it isn't what you are imagining -- they didn't run out of entropy -- they just broke their RNG by removing all entropy sources.

There are no known issues with running out of randomness over time. The main reason to re-seed a CSPRNG is as a defense-in-depth against implementation flaws leaking state.
Modern DDR4 SDRAM can run up to 2133Mhz, but DDR SDRAM is designed to increase speed by taking advantage of CPU caches. For peak performance reads occur in batches so one read command also fill the cache with nearby data.

SRAM can go fast since that’s what caches are made with, but that’s expensive. Also it would need to be close to the CPU as wire latency is non-trivial at high clock speeds.
Imagine you were given raw data from the large hadron collider and you were asked to find interesting things in the data. What would you do ?

Any serious scientist would see the folly of trying to run only machine learning algorithms to find the Higgs boson. What you would need (in addition to ML algorithms for processing) is a good theory of what you're looking at. This also means just applying computer science methods to the problem isn't going to work, you need to inject theory from physics.

For drug discovery this means you need to actually do biology at some point in order to make progress. ML strategies involve tight loop around trying different models, implementing them, and checking to see if it does better than other models. What's needed is then good experiments to test your models and good models to make novel predictions.

There is no getting away from wet lab experiments in biology if you're going to make any significant advances. The theory just isn't there to do purely computational work.
That was extremely quick. Did they have this paper up their sleeve, expecting browsers to implement these kind of mitigation?
Causality. We know that everything follows a cause-and-effect model. And if you're a physicalist -- philosophical term that you believed the world doesn't have any supernatural forces -- then, leaving aside quantum uncertainty for a second, the next state of the universe is determined by all the previous ones.

They didn't teach you in your physics PhD that stochastic != Undetermined. We may not know how to predict stochastic processes but that doesn't mean they don't follow cause-and-effect.
I've seen SICP and Elements of Computing mentioned already. I'd like to throw "The Nature of Code" in with these.
Don't discount the impact of investors who have no intention of living in their owned real estate, though. For these individuals, there is no salary or commute distance factor to consider, so price sensitivity is very different. Thanks to globalization this is an increasingly large factor in rising real estate prices. See cities like Vancouver as an example.
How to make Rawhide
Britse politicus wil daklozen van straat in Windsor voor koninklijk huwelijk
Yes, but you don't need some dedicated source of high-bandwith random noise for that, using sources that already exist in essentially any system is almost certainly sufficient.
That's pretty neat. Do you know if there is protection against rollback?
Educate me -why would that be the case? Don't banks lend out money on a fractional reserve basis- that is, money that nobody really has deposited in a savings account? Unless we are counting the value of the loan as "savings". Perhaps what I am missing here is that "savings" is really just another kind of debt with the arrow pointed the other way.

..If that's the case, it's interesting that we consider savings to be something solid and real but debt to be something which is speculative and can be cancelled, considering that they're really the same thing.
Ask HN: How do you manage your work-life balance?
Nice. I wish I could get hold of some inexpensive general purpose RISC-V hardware for hacking on. Hopefully soon!
It's true that such moderation comments break some of the same rules they're advocating. But this a necessary evil, for the same reason that many medicines are toxic. If it's any comfort to you, I can tell you after writing 20,000 of them that they are more tedious to write than to read.

Interpretations differ, but mine is that the comment is unsubstantive because it is in equal parts obvious and dismissive. This is the sort of thing whose general purpose is to make the writer, and some readers, get a cheap hit of smart-feeling, while alienating the frankly more valuable part of the audience.

You're right, though, that it really wasn't that bad a case, especially relative to other top comments in this thread. I wouldn't have singled it out except that it was the first one posted.
A bit removed from drug targets, but have you seen AMELIE - it's for ranking causal variants (genetic mutations) for patients based on literature + patient's phenotype?

https://www.biorxiv.org/content/early/2017/08/02/171322

I'm not in the NLP field, but this does seem like a legitimate use
It's not just metadata.

You can tweet photos, videos and GIFS. My average gif is 500kb.

If these were excluded I suspect it would make the archive much easier to manage.
Embedded systems may be physically small enough that plugging in a USB key doesn't make any sense. An embedded HWTRNG chip onboard or in the SoC may make sense.
That Chasing Coral documentary is well worth looking at. They had the perfect metaphor - the divers were filming a dying reef, and staying on a floating bar/club just above it where people were partying.

https://www.netflix.com/title/80168188
If you actually passed that course the professor should have their tenure revoked. The S&P500 rate is a rough proxy for the return on invested capital in the country, and it always crushes the risk fee rate over time.

I’ll give you a hint that may open your eyes. Volatility is not risk.
Spectre isn't fixed yet – despite Intel saying so
Graphviz can output to svg and that's all this seems to be doing. I guess it saves you install it.
It's because we're so clever! https://www.smbc-comics.com/comic/humans-are-special