skysight-inc/HackerNews huggingface dataset:
Dep (which is very similar to bundler) really solves most of the problems with Go dependency management and is the official tool everyone is converging to now: https://github.com/golang/dep

For the problems it doesn't solve I've created virtualgo at my job, which is similar to rvm or virtualenv: https://github.com/GetStream/vg
I don't understand why this is getting downvoted. Not being able to control what you run on your own computer is kind of ridiculous.
Where is the data showing this?
Fuck you and your bubble world.
Apptentive |Senior Backend Engineer | Seattle | attrs: ONSITE, SALARY: Sr Market + Equity, https://www.apptentive.com/
As a Senior Software Engineer, you will be responsible for the design, development, testing, and deployment of products that help companies communicate with their customers in deep and personal ways. We service over 1.5 million API requests per minute and our SDK is installed on over 1.75 billion devices around the world. We are a small team ~15 engineers and our technology stack is built with Ruby on Rails, Scala, and Python, running on Cassandra, MongoDB, ElasticSearch, and Kafka. https://www.apptentive.com/about/careers/ $130-$170
A CPU from 2017 is going to run your programs a hell of a lot faster than one from 2003. Even if they technically have the same clock speed. Look at benchmarks for instance: https://www.cpubenchmark.net/high_end_cpus.html
The Roman empire contained a lot of geographically segregated cultures. There was definitely a lot of influence on each other over time but 'when in Rome' didn't come out of nowhere.
You could just compile the kernel without it on?
>getting very sick or hurt shouldn't cause you to lose your entire livelihood.

We've had great mechanism to address this, namely insurance and savings. The underlying principle here is planning ahead, and sacrificing some of today's sweet instant gratification in exchange for protection tomorrow should you need it. This is a concept that people have seemed to lose sight of, so we're now seeing people want protection today even though they made no sacrifice yesterday. Those people with zero foresight have now ruined it for the people that did plan ahead.
My son is 17 now, and for years I begged him to go hang out with friends. Didn't want to. He wanted to "meet" them online in games every Fri/Sat night (the nights he was allowed to play video games).

I thought about cutting off the video games, but it was his only form of socialization, so I was really hesitant to try that experiment.

I have had dozens of conversations with him, over the years, about the possible negative side effects of not meeting people in person (for later in life, when patterns solidify).

Now, he does go to parties with his online friends a few times a year. There are usually 8-10 of them there and they have pizza and watch movies. Usually is a bday party (but he never wants to do this for his bday).

I've given up trying to influence him (given his age). He is very mature in most ways. I'm just worried about the future.
Turbolinks is also used by Basecamp 3, I assure you.
I think the article is just illustrative of what data is sloshing about, how it's being gathered, who is taking an interest in it, and an indulgence into the possible motives fueling it all.
Weird. I've been online since I was 12 and I never made stuff up about myself. I'm 39 now.
There are suggestions it applies to Arm, as there is an arm64 patch for Linux although it hasnt been merged yet I don't think (although the performance hit for the fix might not be as bad).
Because "beyond a reasonable doubt" is a much higher level of certainty than we have for making many decisions in life? The NSA isn't jailing people based on a lie-detector, they are just using it as a necessary but not sufficient criteria for granting security access. It's OK to deny such access based on weak or circumstantial evidence.
They sure do get scooters, at least in New York. Literally every single child over 5 has one.
This Cat Sensed Death. What If Computers Could, Too?
Erm, who made this and why should I trust it? Wallet apps need a lot of trust behind them, more than a normal app. It could be really well made and still run off with my money if they're malicious or just implemented the crypto wrong.
You've been able to do that with Xposed and Xprivacy for a while now. You can spoof just about any information that an app requests.
Heh, you're right. I promise I knew that. ;) It's too late to fix the typo now, but I appreciate the correction.
Do we know the actual bug yet? I sort of assumed it was a timing attack on KASLR rather than a leak of traditional kernel data.

Although I guess that there would have been cheaper mitigations like mapping an empty page to all of the other KASLR slots rather than doing a full world switch in that case...
not really, it is very hard to test any very large number for primality... this project only test numbers that satisfy the Mersenne prime definition though... 9 of the 10 known largest primes are Mersenne prime numbers probably because there is more people testing these numbers.

http://primes.utm.edu/largest.html#biggest
Delve's main doesn't seem all that exemplary. It's irritating to open up main only to find that the princess is in another castle.
Ahhhh, solid reference. At first I thought you were saying insider trading was a good thing and I was thoroughly confused.
I did indeed - I used a few tools like Junglescout to get estimated sales of competitors and scope out availability as well but I also optimized for buying a small enough amount so that if I lost all of the money I would still be OK with having tried it
The illiteracy-promoting interior design abomination called “backwards books”
It's actually the #1 benefit not the problem. It's not ready for the layman yet.
Wow, must be a great job:)
I always get surprised when I see someone at the same company for 10+ years in IT.
Not defending Intel here, but devils advocate...

You will find many clients asking how to disable, for example, the Linux patch. Linux is releasing with a flag to disable it, so there is some merit. Why would you want that? There are a lot of times you trust everything running on your box and don't need to take the perf hit.

Intel (and possibly other archs/families) found a perf win that ends up having security implications. A perf nonetheless. If you're willing to bet on your userspace not reading kernel pages, does Intel have a feature for you!
> This is the same problem Netflix & Amazon have been successful in combating. The answer is to become a content owner by competing with the big labels directly.
> All Spotify needs to push the big labels back on their heels is to sign a few top 40 artists of their own

No way that's going to work. Music is VASTLY different from video. In video it takes more time and resources to produce each one and replays are rare. In music everything is super cheap to produce and replays are off the chart.

If Spotify became their own label and signed 100 of the top artists, their old songs are STILL with the previous label and will likely never leave. Spotify still NEEDS those songs or it's SOL.
Thanks wonder_er! Apparently that did the trick. I'll give this a fair shake now and maybe my harsh comments will be irrelevant soon. :)
> nobody is forcing you to use Echo or watch TV

At one time nobody was forcing us to pay private health insurance conglomerates every month, yet here we are.

All it takes is some clever lobbyists and some cash, both of which Amazon has in spades.
I mean, I am. I have a really nice laptop that I'd rather not have to replace.
We know that AMD is not affected:

https://lkml.org/lkml/2017/12/27/2
One explanation of the difference in outcomes, especially your "Number of deaths per 100,000 from preventable diseases or complications had adequate healthcare been available, in 2013" statistic has mostly to do with accessibility. Lack of access. That, and a cultural avoidance of seeking help, but I bet it's mostly the lack of access.

If you have bad insurance? there's huge variance in what a procedure will cost, and in my experience, hospitals aren't setup to deal with the "how much is this going to cost me?" question.

The ACA may have helped with this. With my yearly out of pocket limits, I have some peace of mind that it won't, at least, go over that.

Personally, I think we can continue to compare this to the education system, we need something like 'community colleges' - Sure, you need paperwork and to go through a bunch of hoops if you want to go to Stanford- and you get a better product than at the community college, if you can make it, but anyone can walk into the community college and get half a pretty decent education that is almost completely paid for by the government. I think we need something similar in medicine... a place anyone can walk in where they know they can get care that meets minimal government standards that is next to free.

But... my point is just that making the whole system cheaper is not the best way to solve that. We don't want to replace Stanford with the University of Phoenix.

To continue my analogy, the private sector does beautifully at the high end, in both schooling and medicine. To bring back the University of Phoenix example, at the low end? I would much rather have the low end government product than the low end private sector product.
Process Context ID for TLB entries to make the flipping efficient - if results in constant time failures, will solve the perf issue.

PCID is in Intels since Westmere.
"The Anatomy of Inequality" by Per Molander delves into this. It's a pretty good read.
AAC owns its testing facilities, so their margins are much better.

I have quite a bit of knowledge, having worked in this industry for a few years for one of the largest providers. The industry is a weird mix of small do-gooders and people at the top who purport to do good, but their actions belie that.

Addiction treatment is insanely expensive and incredibly unsuccessful. (Part of that is insurers will generally pay for a much shorter length of stay than is shown to be successful).

It's a dirty industry, run by people who tell themselves they're good people but in reality are incredibly exploitative of a very vulnerable population. At the same time, most of my colleagues are/were decent people.

It's amazing how something bad can grow from good intentions.
I think we're going to find in the coming years that there is a lot of white collar crime going on at any time. It seems like it would be foolhardy to attempt this stuff, but greed compels people to do stupid things all the time. Wealthy C-suite people are not totally immune to that.
Near as I can tell, every country is like that for some people. I have friends that are alcoholics, they will drink themselves to death no matter what their circumstances are like. One nearly died from not having a drink for a couple days (lucky him, his mother and sister-in-law were both nurses).

I also have friends that are depressives, they feel everything is horrible not matter what. As soon as Trump was elected one was having trouble leaving his house because he was afraid one of his neighbors might be a Trump supporter -- ergo a closet "I HATE ALL THE THINGS" person.
How art makes better tech
which is a shame, because it was a lovely car.
Corporate-speak -> human-speak:

- Yes, the flow/bug exists

- We don't yet know if it can be successfully exploited at scale.

- It's quite possible that other CPU designs are affected as well, we don't have concrete data though. AMD and ARM have already started looking into the issue.

- Patches will be coming from as many manufacturers and as many OS-vendors as we can convince this is serious on a short notice.

- The patches do affect performance, often significantly, but there's nothing we can do in such a short period of time. We can only hope we can come up with better solutions down the line.
Any noticeable performance penalty? Any benchmarks?
Disclaimer : I worked for one of Spotify and Google competitors.

>Most people would agree that Spotify is a better music player while each of Google's music apps are bad in different ways

I am not so sure about that. Spotify is on top of its game : adjusting the loudness of tracks, using ogg, .. I am however pretty sure that to almost all the users, it makes no difference.

Furthermore, it is very hard to differentiate as a music service. Most of the features are present in all the services (albums, playlists, AI generated recommandations, radios, podcasts, etc) .

Regarding the price, it is up to Spotify to start creating its own content in order to make it go down. Right now the real issue IMO is that the majors are dictating an extremely high monthly price for the service.
What about 10.12 and earlier versions?
Northern cities that are more inland seem to avoid them. Maybe they have the same earthquake vulnerability you mentioned, but I think it's extremely unlikely, but there's Chicago, Detroit, Toronto, even Montreal that are able to deal with the large snowfalls they get, and in general don't seem like they'll be hit as hard by climate change-caused extreme weather as other areas.
If only they held their own system apps to the same standards
I presume you're considering this per capita, and not a raw comparison of volume compare to the US? Norway has a population of around 5 million.

Whether comparing very large and very small populations is reasonable is a separate question mind you, but that aside, the comment stands.
5 downvotes and counting. Why is that? Isn't it remarkable that we're relying on another startup, one who may not even be revenue positive, to archive the output of another failed startup? Is this not an interesting thing?
To expand on humanity's historical experience, the best known method of reducing wealth inequality seems to be revolutions and world wars - the more devastating and catastrophic, the better.
+1. Wonderful tips for optimizing self. Definitely stretches your intellect, with great book references.
I moved to Opera a few years ago because it performed better than other browsers when kept open for weeks on end. Its ram usage would often clock in at multiple gigabytes less than chrome or firefox over the same time frame even when keeping < 10 tabs open. It allows total customization of keyboard shortcuts and has been an excellent experience. Their iOS version has a built in ad-blocker which prompted me to switch on my phone as well.

Just this week i swapped to Firefix quantum to test the waters here. My initial reactions are fairly muted. It is almost an identical experience given my browsing and development habits. If anything, i would say i still prefer the speed of Opera's (well, Blink's) dev tools.
Clearly they should have done the acquisition on the blockchain instead.
Not disagreeing, but why do you say that?
Actual information about the bug itself is still embargoed. Most people are assuming it's the attack you suggest based on recent commits, but it's a guess.
How is that different from any other product I use regularly?
True, but no one claimed that. We are, however, claiming that Intel is not the most secure in the world.

This, prior issues as linked, Intel ME, tons of undocumented instructions—some which mess up the system—, etc.
>>> If you make $50,000 per year in the US, which is the median full-time wage

That's household wage, not full time wage.

I'm confused about the top 1/3 references. You're not comparing like with like at all.

Are you under the impression private insurance is inaccessible to the top 1/3 of Canada?
Thanks. Let me know if I can help with anything
I'll give you an example. You took my comment too literally and completely missed the point.
WepSIM: Simulator of Elemental Processor
> Recent reports that these exploits are caused by a “bug” or a “flaw” and are unique to Intel products are incorrect.

A possible reading of "not a bug or a flaw" could be "works as designed", or better, "works according to the spec". The spec probably never considered cache timing side-channels (if that's what the issue is) as something to be defended against.
> I think it's completely okay to ask them to pay $99 then.

Sure, just like Linux distributions charge developers before allowing them to enrich the Linux ecosystem while getting little in return. No, wait...
German hate speech law tested as Twitter blocks satire account
Doctors may be making those recommendations based on blood tests indicating specific patient deficiencies. As you note, though, research does at least suggest daily vitamin D supplementation in the thousands of IUs per day range may be considered safe.

I'm not a doctor, but I believe if you've been directed by one to supplement vitamin D, blood tests probably should have preceded that recommendation.
> Same reason people don't move from Amazon to Wal-Mart, or Apple to Android, or Netflix

The big difference is Apple has its own ecosystem, Amazon and Wal-Mart sell a lot of different stuff, Netflix has a TON of original shows to differentiate itself from Hulu and others.

Spotify? They literally offer the identical catalog of music as everyone else. Literally. Sure their apps may be slightly better but who cares? If they raised their prices why not move to the more native solution your platform offers for cheaper? Google Music, Apple Music, Microsoft Groove (lol), Amazon Music; they all offer the same damn thing.
The fact that they've chosen to go with a horizontal-only grid (instead of both horizontal and vertical) simplifies everything greatly and makes switching to another Space a breeze: either swipe with 3 fingers or press ctrl+left/right or (if enabled) press ctrl+Spaces number.

As far as your point goes: it depends on if you see your Spaces as isolated desktops, or just 'more desktop space' which you can then loosely thematically organise. I fall into the latter category, and I suspect as Apple has chosen that cmd-tab style because most people do.
I haven't seen any articles about AMD PSP security vulnerabilities yet, but there's a new one about IME every other month. If Intel truly is the most secure in the world, why are their CPUs riddled with security bugs big enough to drive trains through (IME has de facto become a integral part of Intel CPUs) and where are the news about non-Intel CPUs with similar bugs?
Don't Be Evil: Utopias, Frontiers, and Brogrammers
That worked. Strange, normally links as on your FP redirect to the right app store (region).
All the Oracle DBAs out there are in for some suffering. Forget the cost of 30% extra compute, what about the 30% increase to Oracle licensing?
But you can't spend any Bitcoin unless you possess some wallet's secret key. Explain to me how that poses a comparable risk to the egg baskets that are today's financial institutions. If your secret key isn't compromised, there's just no way your coins can be transferred. Furthermore, in the event that any kind of mass fraud takes place which exploits some flaw in the protocol itself (contrasted with a flaw in an exchange platform or something similar), the ledger could be hard-forked. It was done after Ethereum's DAO debacle with /relatively/ little consequence.
If you have malicious applications running on your laptop you have bigger problems already...
One vacation day translates roughly to a 2% raise.

I've been looking at this recently - I'm overdue for a raise, and I might just ask for Freedom Fridays instead of a salary bump.
The mitigation (KAISER) is being enabled for ARM as well as Intel x86 in the Linux kernel.
We have an incubator project for Kubernetes as well as software to access the backend.

I don't think our team is releasing software to let others start their own cloud service if I understand you correctly. Are you thinking of something like what GitLab does? If so our team isn't doing that sorry!
9360, it came with some flavor of Ubuntu preinstalled. It didn't have "Linux edition" or "Developer edition" moniker on it.
This is probably one of the most important questions possible: How should I teach my kids?

I was denied access to computers, and I don't think it did me any good. I'm 27, so a bit old for this topic, but my house was specially up to date bc of my dad's job. The internet was dangerous and diabolic in my mom's mind though, and my access to computers was extremely limited.

This, I feel, made me want computers even more. I realised early the magical powers of the internet. I wanted nothing more than a computer for myself. Even now, I easily get hooked (wouldn't say addicted) with videogames, porn, or just browsing.

Observing my friends, those who had more freedom in this regard are the ones that cares less about any of this; those of us still playing too much videogames are the ones who had very stingy restrictions there.

I'm under the impression that what my parents would have been better advised to do is give me more freedom. All of my younger siblings had more leeway in that sense, and I'm by far the most introverted of the bunch. All of my peers were very obviously more socially apt than me; they had been going out for years by the time I was allowed. Feeling at a constant disadvantage in social situations stifled me.

Of course, anecdata. Also, raising a child might be one of the most difficult and terrible things you can do. And at the same time, kids are more resilient that we give them credit for, as long as they're loved (!) and fed.

(I feel my parents did a fantastic job, even though I could point out a dozen things I think were very wrong. I'm sure if I had children of my own my opinion on my parents' job would increase dramatically.)
I know typically jokes like this aren't HN material, but have an up vote lol

Literally, the first thing I though of was GIMP as well :)
One does not follow the other. Where are any references to how this will let you bypass read & write? User-space applications are still interacting with a filesystem, which they access via read/write and not a block device.

There's no talk in the DAX information about how this results in a zero-syscall filesystem API, and I'm not seeing how that would ever work given there would then be zero protections on anything. You need a handle, and that handle needs security. All of that is done today via syscalls, and DAX isn't changing that interface at all. So where is the API to userspace changing?
Intel may have code that shows PoC on other brands/ISAs.

But if they do they haven’t shared it.
The 4-5-6 certainly do not handle capacity fine during rush hours...
I am not sure I understand your analogy (male homosexuals vs pedophiles).
Why blending together a sexual preference towards one's own sex, and a preference towards children?
> Another promoted benefit of bytecode is compile-once-run-anywhere. However, I think this is a hoax.

I was once working on a large project on the JVM: our Fat-JAR was really working on Linux, Mac and Windows. The exact same JAR. And it didn't matter on which system we have built that JAR. This may not be possible for every use case - but I don't think it is a hoax.

> It is not special, for script languages code runs anywhere without compiling.

IMHO scripting languages like Ruby, Python, etc. are quite hard to deploy, especially if they have dependencies. In comparison to languages like Java, Go or Rust.
> You can send something that looks like email using Signal, but you cannot use OpenPGP for instant messaging or phone calls.

Of course you can use OpenPGP in IM [0] but as you note it won't have perfect forward secrecy and has some disadvantages but could you show me how to send an e-mail through Signal?

[0]: https://xmpp.org/extensions/xep-0027.html

> This is aside from the fact that Signal is also an open protocol

By open protocol you mean I can read specs and run my own server but I won't be able to communicate with anyone else?
Yeah, usually you have more control over IRA than 401K investments, and I think the penalties for withdrawal differ. Otherwise they're pretty similar.

The other benefit of the 401K is that the annual contribution limits are higher, so you can sock away MORE pre-tax than you can with the IRA.
Aren't you cool.