skysight-inc/HackerNews huggingface dataset:
> > Opensource software is, by default, non-malicious.
> So is closed source software.

Sorry what? 99.999999% of all the malware that exists and has existed today, is/was closed source. Compare that to the other 0.0000001% that got once or twice into opensource and was removed as soon as it got detected.

> The main ones are 1. untrusted users being hosted 2. javascript off the web.

I've never talked about (1), of course my comment was not targetted to server owners but by normal workstation owners that only have one user.
WRT 2: that's precisely why I mentioned NoScript. Nowadays the only untrusted software that could be run in your computer if you were using opensource OS and opensource apps exclusively is javascript from the web (which is by default closed source).
What is the difference between cross-compile and transpile? (Honest question, no sarcasm)
Cryp4.us, My first draft of class01A is finished
Hello World,

My first draft of class01A is finished:

http://cryp4.us/cclasses/class01A

This draft is a discussion of some topics described in the first video lecture:

https://youtu.be/fOMVZXLjKYo

https://www.coursera.org/learn/cryptocurrency

In addition to the discussion I coded up some Python and Java examples which attempt to interact with some of the ideas presented in lecture.

Tomorrow I will start work on class01B.

Holler if questions,
-Dan
IIUC, you're not misreading.
KPTI solves the problem of leaking data from the kernel address space (besides a bare minimum). But this was an issue because Intel was speculatively accessing kernel addresses in the first place.
The Harriet Hall piece on Gary Taubes may give some good insight on this essay:

https://sciencebasedmedicine.org/gary-taubes-and-the-cause-o...
90s? There was "online" piracy and organised piracy groups through BBS systems in the 80s!
Eh, it still sounds a bit hand-waivy. I'll wait for a post from Joanna Rutkowska on this, as these bugs may directly affect Qubes, and Xen has kept her on the dark about the bugs/patches so far.
Thanks for the clarification. I've only worked with fMRI, so wasn't aware of the ins and outs of EEG processing despite being aware of the spacial / temporal resolution difference. It makes this method even more suspicious!
Put time aside for reading like you would for anything else; say, 3-4 hours should be enough to get through a decent novel. If you read in transit, on the toilet, and then a bit in time set aside for reading, you can easily read a book a day -- which is what I tend to do with the Kindle when I have a backlog of books I want to read.

If your reading speed isn't up to par, just set aside an hour or two a day to read; the more you read, the faster you'll get over time. I used to read several books a week when I was a kid, and that amount really helped contribute to my reading speeds today, I think. :)
संवैधानिक प्रक्रिया पूरा गरेर सत्ता हस्तान्तरण गर्छौं: मन्त्री बस्नेत
Creating the concept is hard. But not harder or less hard than inventing the press.

However, alone, you CAN make rope. It's painful, but you can.

You can't invent the press alone. You need ink, paper, metal, and people being able to put it in shape for you.

Everybody had access to plants to make rope. Not everybody had access to the money, education, market and knowledge necessary to invest the press.

Now today, it's even worst.
I did mean electrodes in the brain (or spine) and mentioned that for completeness, to make it clear there's another method besides fMRI and EEG. Which indeed has the obvious disadvantage it involves some surgery, but does the type of signal recorded with it does have advantges over the other methods.
I run LEDE stable on two WRT 1900 ACS routers with good results. USB storage / Syncthing, WireGuard, ad blocking were all quick and easy to set up.

Also, great news on the merge, hoping the documentation will get unified at some point as well.
GoPro lays off 270
I've been extremely impressed with Apple's PR as of late. It's almost unbelievable how many systems these vulnerabilities affect.
Yes. This is why it kind of frustrates me to see all the "experts" hate on the naming of bugs. This is how you raise awareness about them, which in some cases could be as important as discovering the bugs (especially if the vendors are unwilling to fix them otherwise - think airline industry, and so on).
So still no fix in sight for 10.12? My personal laptop refuses to upgrade to High Sierra and my work laptop is yet able to upgrade because we have do some work with our mac management before that time. I haven't seen anything from Apple on older OSes and their status
ssh -Y is insecure, unless you completely trust the SSH server.
I always understood it as this

Transpilation: text to text (eg: Scheme to C)

Compilation: anything to anything but usually it implies text to binary code

transpilation is compilation but compilation is not necessary transpilation (the all squares are rectangles but all rectangles ...)
this is a good reminder for everyone to stay away from from those engineering sample Xeon processors on ebay/taobao.
Guidance on Repair Hole in Down Jacket
thanks everyone for your input
Bitcoin Visa debit cards are cancelled
It's definitely true that Meltdown is a more immediate problem--but Spectre is basically the problem that will last. We can move kernel memory into another process space, take the perf hit, and correct most of the meltdown problems.

Spectre style issues had JS pulling browser process memory using timing--the patches being "put every page in its own process" (Chrome) and "don't let people get accurate timings" (Firefox). They are way worse in the grand scheme of things, because even if they aren't as easy to exploit, they will continue to show up, probably for the foreseeable future (next 5-10 years), long after Meltdown is patched and old news.
I'm a CTO of a cryptocurrency business.

Due to the nature of what we do we require access to blockchains for various currencies. We have a mechanism in place for this but I'm thinking of splitting it off into another company.

i.e. Crypto curreny blockchain API service for wallets, exchanges etc.

So here's what I'm offering.

* You will be CTO and sole developer of a new Startup and your 10K would be seed capital.

* I will show you what is required and how to go about it.

* We will be your first customer.

* We will take a 50% stake.

Technologies

* Ruby on Rails

* node.js

* Kotlin (possibly)

* Elm

If this is intesting to you let me know.

Your worst case scenario is the business doesn't take off but you learn a shit load of skills including how to run a crypto business.
The linked advisory 254 claims that SP2 is limited to code after bounds checks and similar when SMEP is used.

This is incorrect: the BTB can be poisoned to speculatively jump anywhere in the text segment of the supervisor.
Sounds good, Three Commas Club here we come! (Let me first start with a course on constructing Blockchains though... or who cares, lets just use an Excel file for bookkeeping!)
"PR flacks" has a long and (dis?)honourable history http://www.edsonpr.com/NEWS/Cheklist_summer06.pdf
to make it work on my test system running debian, gcc7 I changed the CACHE_HIT_THRESHOLD and fixed errors/warnings gcc choked on:

[] joachim ~/src/spectre $ diff spectre.c.1 spectre.c
50c50
< #define CACHE_HIT_THRESHOLD(80) /* assume cache hit if time <= threshold */
---
> #define CACHE_HIT_THRESHOLD (100) /* assume cache hit if time <= threshold */
136c136
< (value[0] > 31 && value[0] < 127 ? value[0] : "?"), score[0]);
---
> (value[0] > 31 && value[0] < 127 ? value[0] : '?'), score[0]);
142c142
< }
\ No newline at end of file
---
> }

and compiled it with:
gcc spectre.c -o spectre -march=native -g -O3
(not using -g or -O3 wouldn't work)

CPU:

vendor_id	: GenuineIntel
cpu family	: 6
model	: 142
model name	: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
I think this rando was confused by the realization that there are children on the internet who read HN and want to share something with the group of people on here.

Personally, I think it's interesting to see what kids these days are up to. There was a game written by a 12-year-old on HN this week that was quite good; and at least one JS framework with actual users that made the HN frontpage is maintained by a 13-year-old.
Why Arent My Vitamin D Supplements Raising My Vitamin D Levels?
Great, now I'm imagining some sort of Planet of the Apes crossover..
>This article is garbage. It's a typical case of a complete outsider trying to analyze a scene he doesn't understand or know anything about based on "research", and trying to write for an audience that also doesn't understand the tech or scene or know anything about it.

You mean, like all journalism?
A Robot Wrote a Chapter to a Harry Potter Book, and It's Absolutely Insane
197 occurrences of the word like.

This particular section of the transcript annoyed me the most.

---

He’s fired. And becomes like basically a celebrity for certain parts of like the right. And they were kind of like… Like this is not what he was necessarily saying about himself, but for them, it’s like… He’s like this perfect symbol of like the qualified, brilliant, genius coder who’s the best person for the job, whatever his race or gender happen to be, who said one reasonable thing and like got fired because of political correctness.
Being open source and peer-reviewed doesn't mean software won't have bugs, exploits, or that backdoors can't be hidden in it. 'Peer-reviewed' sounds good on paper, but people can still miss things, be lazy, or not understand the code they are reviewing (but it works, so accept merge!). It's hardly the silver bullet to this problem.

As for your original post - moving to FOSS only is not viable for a lot of people. Linux has no good video-editing software, no good CAD tools, gimp has nothing on photoshop and even Libreoffice is rather lackluster when compared to the MS Office package. On top of that, javascript is used pretty much in every site these days, many of which require javascript to run. You can't seriously expect an average user to manually whitelist javascript in the sites they browse.

If the FOSS world had software that worked for everyone, people would use it. Right now, the only major group this is true for however, are developers. Until this changes there will be no 'year of the Linux Desktop' or whatever.
> You have two systems: A) T2 SOC B) Multiple chipsets working on its own. In both cases, it is a closed system.

Sorry but I have to disagree with that. In the latter case, it's not a closed system because the manufacturers of the chips (Intel, Realtek, etc) have publicly available datasheets describing in detail how to configure and use the chips. This allows people to write their own drivers for the hardware.

The article says the T2 is implementing, at a minimum:

* RAID

* Sound

* Storage encryption

I have yet to see a public datasheet from Apple describing how a third party OS like Linux can utilize the features of the T2.

You can get chipset datasheets from Intel which describe the registers, how to configure them, chipset IO pins, etc. [1]

Similarly, you can get datasheets from audio chipset manufacturers that describe their chips in detail. [2]

Same goes for many other components in a standard PC system, such as the SuperIO chip, TPM, USB controllers, etc.

What Apple is doing is making more and more of their hardware proprietary, and (to my knowledge) not publishing a datasheet for these replacement components. This will actively harm anyone trying to run a non-Apple OS on the hardware.

Sure, the component datasheets can't help you verify that the chip isn't doing something nefarious interally, but how is that any different than trusting Apple not to have any bugs or do anything nefarious in the T2?

The replacement of components having publicly available datasheets with one that is a black box bothers me.

[1] https://www.intel.com/content/dam/www/public/us/en/documents...

[2] http://realtek.info/pdf/ALC888_1-0.pdf
They're both bytecodes though? I don't see how that is compilation.
You expect, or you want? These words often mean different things.
Yarr. In me day, "piracy" didn't involve computers and had actual pirates, Matey.
The speed isn't the issue. It is all about speculation and prediction
Travis Kalanick selling nearly a third of Uber stake for $1.4B
> The nazis rose to a measure of acceptance in Germany in large part because of political violence on the left.

Yeah, that's just not correct.
Your stats need a citation, otherwise they mean nothing. CVE lists have plenty of entries for FOSS software, so it's definitely not '99.whatever' you're claiming.
rick roll opportunity totally missed ;D
This is exactly what I was going to say -- but it is worse! Since they (2017 song) already claim a violation, they are essentially admitting to a violation (except, on themselves!)
I'm actually surprised if it's legal for a bank to refuse to provide cash withdrawals. Unless it's a case of "we'll do this now, because we have to, but we're also closing your account since we're allowed to choose out customers and your business isn't worth the hassle for us."
I don’t think it’s snooty, but I did clarify as to the absence of (traditional) music.

I’ve preformed pieces like this several times, but not Cage specifically. I agree all performances of these types of compositions will be unique, which is something I admire about all performed pieces. Our canvas is not only one of tones but also time and space.
At the time of this reply, there are at least five competing definitions being argued for and against in this thread; some either requiring that the input and output be machine code or disallowing it, some necessitating that both input and output be at "the same level of abstraction" and others arguing that inputs and output can be at different levels of abstraction.

Given the large inconsistency and incompatibility between all these definitions and the existence of a well-accepted term that comprises all of these definitions, is it a mystery why people question the utility of the term? After all, what use is a nuanced term if it can't reliably convey that additional information.
Any chance you've got it plugged into a 100 Mbps port?
> I can't think of any other explanation why the compensation of (non-founder) CEOs is so high.

Really? Have you tried?

As a thought experiment, imagine (just hypothetically, of course) that companies were mostly run by grasping plutocrats, and members of the same group of greedy plutocrats sat on the boards of their friends' companies, and set their compensation.
How to Scale Your Uber-Like Service
Poker Online Indonesia – Domino QQ – Dewa Poker – Bandar Ceme Terpercaya
asetQQ.com Hadir untuk semua pecinta permainan kartu poker online yang khususnya berada di asia. Dengan system teknology baru dan server kecepatan tinggi akan membuat permainan poker anda lebih seru dan menarik bersama teman2x anda maupun saingan anda. Cukup lakukan login dan langsung bermain tanpa download. asetQQ.com dengan encrypsi server yang tinggi akan menjamin keamanan data para member.
Java provides access to high resolution timers without JNI and optimises them very well.
> That's a pity BitCoin has failed to do this. Hopefully Monero or something new will succeed once and set the people free...

I guess the first step on the path to success for a new currency would be to acknowledge and understand the relationship between credit and modern efficient money (the relationship here being equality). Fractional reserve banking was disruption of money much before SV started to use the term. Unfortunately it looks like the cryptocurrencyfolks seem quite stubborn in sticking with the monetary concepts of stone ages, so I am not holding my breath waiting any cryptocurrency to succeed as real world money any time soon.
Yes, it is. But why 'the worst' aspects of each, though? I see it as the opposite: linked lists built on top of vectors combine good cache efficiency of vectors with algorithmic benefits of linked lists (many operations become O(1), or at least in the amortized sense).

Of course, arenas do have tradeoffs - I'll try to summarize.

Pros:

- Completely safe.

- More ergonomic than dealing with `Rc<RefCell<T>>`.

- Improved cache efficiency of linked data structures.

- Fast node allocation and deallocation.

Cons:

- Any two simultaneous node accesses must be immutable.

- Accessing a node incurs the cost of a bound and liveness check.

- Vector growth can be costly and cause a spike in latency.

- Vector growth moves all nodes in memory.

- Removing a node creates a hole in the vector, possibly wasting memory.

Generally speaking, I think anyone learning Rust and trying to implement a graph data structure should first do it on top of a vector. It's easier than other commonly suggested approaches and it's not a bad one either. In fact, that's how rustc builds some of its data structures, how conrod (a GUI toolkit) represents its widget graph, and how Way Cooler (a window manager) manages window tilings.
Can you make money out of running a set of independent ATM's? Do people use ATM's?
That weird. Bitcoin has been on up swing the last 3 months since the insider trading scandal has been dying down.

https://www.coindesk.com/price/

Maybe there's a crack down from EU on Bitcoin backed cards WaveCrest didn't want to deal with it yet.
>Techies are going crazy after "Meltdown" and "Spectre," two new methods for stealing passwords, were revealed

Imagine being a journalist and having to churn out this pointless drivel for a living.
There are lots of different types of exercise. Cardio, weight lifting, stretching/yoga, tai chi/chi kung.. I wonder if different people respond differently to different types of exercise? Did you try them all?
I think its the knocks are starting to match their quality for 1/3 the price.
I still remember the original submission, One VM to rule them All.

https://news.ycombinator.com/item?id=6232240

Gosh 4 years already.

Cant wait to see how TruffleRuby perform with SubstrateVM.
(It's called an "Otamatone")
Dogecoin Market Cap Hits $1B, to Its Creator's Dismay
I would expect some kind of compensation, especially for Xeon series. If you are paying that amount of money but your computer power decreases in one day, it hurts your business. Will those people buy more servers?
While a song might be public, it doesn't mean that a specific recording of the song is.

The owners of the rights to the recording can only exercise rights over their recording, not on the song itself.

Sorry to nitpick, but if we are going to talk about legal issues let's, at least, be precise.
I'm not sure cryptocurrencies can help legal cannabis sellers all that much. Unless they can conduct their whole business in cryptos, they still need to have a bank somewhere. And since these sellers are legit, laundering money via crypto to hide the source of their income from the banks isn't really an option.
> changes in the December 2017 updates resulted in no measurable reduction in the performance of macOS and iOS

Yeah right. In reality iOS 11 and macOS High Sierra are have such a degraded performance that we can buy new devices - Apple bricked iPhone 6, iPad Mini 4, MacMini, etc
I haven't received mine yet, but I've read that you have to get the latest snapshot lede to profit from some WiFi performance bug fixes.
I wonder how much of the ticket market increase comes not from increased volume but from outlandishly increased prices and "convenience" fees tacked on.
Yes of course. Did you? The balance of evidence is strongly toward polygraphs having non-trivial predictive power. People frequently conflate unreliability with being fully random.
Regarding your second point, sure, it wouldn’t have changed the outcome much, but most people have more sympathy for someone who is burnt out than for someone who is just lazy. Also, a burnt out person can be helped to recover while a lazy person probably should just be fired.
I'm no expert, but what about seeing the brain using radio-waves diffraction pattern.

You take an emitting antenna in-front of the person, 1 meter behind him you make a grid array of Software Defined Radios (like 10x10=100 SDR (SDR are so cheap that it will be ~ the price of an OpenBCI set) ), and you record the diffraction/interference pattern, then you software analyze it to produce a 3d image via solving the inverse scattering problem, to get the fluids flows and densities (you should even get the speeds through Doppler)).

My simple back of the envelope calculations, says that at 5Ghz we should rather easily get a spatial resolution of lambda/4=1.5 cm, maybe more using super resolution techniques. Going to 60Ghz, we should soon be able to reach millimeters spatial resolution.

It obviously won't reach the quality levels of FMRIs.

Can someone from the field tell what kind of bandwidth we should expect from such a setup?
The last time I've checked, Mikrotik Wi-Fi wasn't great. It sporadically rebooted in crowded environments where you see like 50 Wi-Fi stations nearby.

It's an excellent router though. But the built-in Wi-Fi is pretty crude. That's why we had to turn it off and use Mikrotik exclusively as a WAN/LAN router in our office. The Wi-Fi part was delegated to AmpliFi HD mesh system.
A full working model of the Antikythera Mechanism is for Sale
Private Keys in Software from Blizzard, Electronic Arts, Microsoft
Already in process, but we hear you. The most helpful thing is to actually use the Send Feedback features throughout the docs and console (you need to be signed in) to highlight things that you find unclear. Often the initial documentation is written by the product manager in concert with our docs team, but it's easy to gloss over "obvious" things when you know it in your head.
Can't replace the HDD either in those. And forget about a proper docking station a la TP.
The touchpad problems are well documented, e.g. https://bugzilla.kernel.org/show_bug.cgi?id=197683. If your XPS is still under warranty you can request touchpad replacement referring to the thread I linked to above. I'm just scheduling mine, hope it fixes the problem.
This is effectively a dupe of:

https://news.ycombinator.com/item?id=16066968
India's Aadhaar System Breached, Personal Data of 1.2B People Sold Online for $8
Anything can be a currency so long as enough people agree there is value. Bristol (a smallish city in the UK) has it's own currency that can be used locally that is accepted by shop keepers etc. You can't pay your mortgage with it but you can buy you apples with it.

We could use shiny stones as currency if enough people agreed it had value.

I think you are thinking about currency within the confines of the current system (eg government, laws etc). What I am saying is that government and laws are only valid in our collective imaginations and therefore everything is imaginary and made up (the USD is just as imaginary as bitcoin, it's just that more people believe in the USD so it is mainstream) and we can collectively apply value to anything want to and remove value from anything we want to.
I've been using LEDE on my C7v2 for 6 months now and have not had any issues. I switched firmware because the mac address reservation for dhcp wasn't working in the official firmware.
Intel's CEO reportedly sold shares after already knew about security flaws
> Under the Commerce Clause, which I think is a bit of a stretch, but hey, that's the Commerce Clause for ya

My favorite bit of the federal drug policy: magic mushrooms grew wild on my college campus since...forever. There was in no way, by any stretch of the imagination, 'interstate commerce' involved in any part of their life cycle yet it was a federal crime to pick them.

How's that work?
I won't take anything Coinbase says seriously until they implement SegWit.
That would be recursive:

"Compilation means taking one type of compiled code and translating it into another type of compiled code."