skysight-inc/HackerNews huggingface dataset:
Apple struggled with the production of their first iphone too. The good thing is that you have tons of orders and market hype.

market hype. market hype -> This thing is invaluable.
This is in the FAQ: https://news.ycombinator.com/newsfaq.html. If the unban link described there doesn't work for you, please email us and we'll take care of it.

I'm sorry that this is necessary, btw. We hate it when legit users get blocked, but HN is also hit by a ton of crawlers and it's hard to distinguish the two. Since our app server runs on a single core, we don't have a drop of spare performance.

Some big improvements which we've been working on for months will hopefully roll out soonish, which should allow us to loosen things up quite a bit.
the articles i linked suggest it is in part because of hospital / health system consolidation leading to higher negotiating power. i think that is an economic factor, although i think i can see where you are coming from

i assume youre suggesting that having a single payer would balance out the negotiating dynamic? that could certainly be the case. to be pedantic, if the US does get a single payer system, one could argue that the political act of creating a single payer system is driven by economic factors (local provider monopolies increase cost of care, payers adopt high deductible plans in response, people suffer financially as a result, therefore vote with their wallets)

i dont think politics supersedes economics or vice versa, theyre very intertwined
He lost me at the keurig analogy. Sometimes its just MUCH better to have a product that is focused on just being sold, not selling you shit afterwards. Look at keurig 2.0. That is very much how you create a market full of incomplete products and privacy invading information collection services. Apple is scared of open source and repair because they only sell hardware and apps, both of which they spend much effort grooming. Chances are if you break your phones backglass, youll be able to buy a replacement without an apple logo, if you don't want apples ridiculously (seriously is that even correct) priced glass back. That being said, this guys cause is pretty good. His sites teardowns are pretty spectacular. Hopefully phones do get more repairable in the future, I can imagine a company marketing a gimmick that the average phone repair is below x and takes less than y minutes in our future. Thatd be pretty sweet, but theres probably more hope for laptops.
I'm particularly impressed that they added a free VPN solution to their browser.

I'm not speaking to the trust or security of this specifically, but the fact that they're offering it built-in to the browser already shows an interesting and unique approach to out-of-the-box web browsers.
not my OC, but I think it's interesting how challenging creating a unified leaderboard for podcasts is because measurement is so bad today.
what i mean is: if a law just says 'people can't say mean words', is every private company expected to thereafter analyze all words that exist on it's platform (be it twitter, or sms text, or gmail, etc) make a determination as to whether those words violate the law, and are then expected to take some action, based on it's assessment that a crime or civil offense has been committed?

that's what i mean by deputized. if the law doesn't say the company is required to take an action, the company should be mostly indifferent to the law's interaction with third parties. further, it's a bit silly for a law to say that a company should make assessments of criminality or civil offenses, especially if they aren't provided the same legal privileges that police receive for doing the same thing.
So this confirms the suspicion that the bug allows VM-to-VM disclosure of memory, which would conclusively explain the rush.
Apparently you never experienced the aberration that was their earlier generations. Sony had decided in their infinite wisdom to make their laser lenses out of acrylic instead of glass, causing them to discolor and fail.

I've never been as frustrated with a console as I have reading "disc read error" dozens of times a day.
"We reported this issue to Intel, AMD and ARM on 2017-06-01"

What!
> This is deceptive. In the first sentence it combines two statements: 1) bug/flaw in Intel products and 2) that it is unique to Intel. In the rest of the paragraph it then claims that the previous statements are incorrect, but only addressing the second point.

This is excellent analysis. I guess my follow up question is has there been anything to suggest that AMD/ARM are or are not vulnerable in a similar manner?

I read this as Intel trying to imply that other vendors weren't probed and/or may not have this specific design vulnerability but can still be vulnerable...which I consider a vapid statement designed to distract the reader.

True, when a 0-day is found and disclosed it doesn't mean that there aren't other 0-days that haven't been found yet...but that has no relation to the significance of the newly disclosed vulnerability.

I judge this statement even more harshly because the flaw is so serious it's under embargo until OS vendors can try to protect users. Additionally, AMD seems to have said their processors are not vulnerable (https://lkml.org/lkml/2017/12/27/2)...

Edit: Some more information from Google Project Zero:

https://security.googleblog.com/2018/01/todays-cpu-vulnerabi...

So maybe AMD and ARM are vulnerable?

Edit 2: So it seems there are two slightly different attacks along this vector: Spectre and Meltdown. From the Google article(s) it seems Spectre affects Intel, AMD, ARM while Meltdown only affects Meltdown. This would appear to contradict the AMD statement regarding their processors not being affected.

I am not hardware guy and information is still coming out...but I am judging this Intel press release slightly less harshly (although it still reads pretty vapid).
I think this says more about the online culture which draws attention to problems real, exaggerated, and imaginary in equal levels.
> “My answer to the question, ‘What happened to the Ancient Beringians?’ is: ‘We don’t know,’” said Dr. Potter. “And I like that answer.”

What a great quote! That's what science is about
Carbon Five | New York City, San Francisco, Santa Monica, Chattanooga | Full-Time, Onsite | https://www.carbonfive.com

Carbon Five is a digital product development consultancy. We partner with clients to create exceptional products and grow effective teams. We work with numerous startups in addition to companies and organizations like Charles Schwab, Skype, National Geographic, and the San Francisco Museum of Modern Art.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/carbon-five

Here are our open roles:

- Technical Lead: https://www.carbonfive.com/careers/tech-lead/

- Test Driven Mobile Developer: https://www.carbonfive.com/careers/mobile-developer/

- Test Driven Web Developer: https://www.carbonfive.com/careers/web-developer/

Tech Stack: The majority of our work is in Rails, Node, and Java, but almost everything is up for grabs. The only tech we don’t work in is .NET and PHP.

Benefits:

- 15 days of vacation (20 days after 2 years)

- ~15 paid holidays, including the week between Christmas and New Year's Day

- 5 sick days

- 401k with profit sharing bonus (~4% per year) after 6 months employment

- 100% paid medical benefits for you and your family, including vision

- Tiered dental reimbursement up to $1500

- New parent leave (1 week PTO + 6 weeks partial salary + 12 weeks unpaid)

- Unpaid sabbatical after 2 years for up to 3 months

- $2k Professional development budget for classes, conferences, books and resources

- 5 days for professional development

- Sustainable work / life balance (40/hours/week for real)
Censorship attacks the very ability to question the actions of those with power.
According to project zero report, a lot more than intel CPU's are affected by this issue. See relavant HN post here

"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them."

https://news.ycombinator.com/item?id=16065845
Learning Mainframe Hacking – Where the hell did all my free time go?
If you're interested in developing that line of thought, I suggest reading Liberal Fascism: The Secret History of the American Left, From Mussolini to the Politics of Meaning which is well researched and deeply insightful.
This is not wrong, but for the majority of developers isn't it something like make people subscribe to Amazon Prime even if they only buy one book each year?

I feel most people aren't so upset about the idea or reasons behind a yearly fee so much as the yearly fee being so high.
Are there any cheap phones with unlockable bootloaders? I've only found it available on relatively expensive models, like Moto G5 (yeah, that's expensive to me).
There are edge cases in the private sector where it is similar, but it's very much the norm in government work.
> Requests like these are better sent to hn@ycombinator.com, but note that they simply won't reply to you if they get busy or don't feel like it.

In my experience, the response rate is 100%. Responses are thoughtful, professional, respectful, and even friendly, and they obviously read through even longer messages. It's probably the best customer service of any organization I patronize, besides my attorney who charges a bit more. Given the number of users, the size of the staff and, knowing HN, probably users' demanding nature, I'm impressed.

Now, do I get my 1,000 karma? :)
This is necessary because AWS does not support hot-migration of clients. To reboot the host, instead of pushing clients off to other hosts, they have to reboot all clients with the host.
This isn’t Tesla’s first car. They shipped 100,000 cars last year. Must be a problem making the battery?
It's not just that some of ads are inappropriate, but young children are extremely impressionable and I believe those years shape who they are for the rest of their lives. So I'd consider any ads, by design, inappropriate.

>But I think the key is finding things he enjoys just as much as playing video games or watching tv. It's hard, but they exist.

I agree.

I don't know what makes good parenting. I know no one is prepared to be a parent, but you sound like a great one :)
So, is AMD effected or not? This seems fairly important. The Google blog post sort of goes against itself in this regard. AMD itself has said:

"The threat and the response to the three variants differ by microprocessor company, and AMD is not susceptible to all three variants. Due to differences in AMD's architecture, we believe there is a near zero risk to AMD processors at this time."

So either AMD is lying or Google's blog post is wrong. Granted AMD's statement is a bit muddled, not sure if they mean they aren't susceptible to all THREE variants (as in only 1/3) or they aren't susceptible to ALL three variants (as in none of them.)
That's not even close to a thread...

You can see all the tweets here (courtesy of @svenluijten): https://twitter.com/i/moments/948681915485351938.
{lambda {www} factory}
You expect/demand self-reliance? Well, my father finished his studies and had a stable job as an engineer. Suddenly he got ill: Multiple sclerosis (MS). In the early stages he got called a fraud by his parents, people called him lazy. They didn't even know he had MS in the first place. He had tremors in his hands. He could barely walk. He could see less than 10%. He couldn't read anymore, except with special glasses. He couldn't drive anymore. (How this all affected me as a child is another discussion.) His disease slowly progressed. He eventually ended up in a wheel chair, ended up with dialysis, and the plaque in his brains made him look like Alzheimer's. According to the "American Way" [1] he should end up on the street, at the mercy of some philanthropist he'd have to know or magically meet, and if he failed to achieve that, well I guess he didn't pray hard enough? The "European Way" [1] shows mercy. I'm grateful my father lived in Europe when this all happened. The only sad part about the story, is that my father was so pro-capitalist that he voted on political figures who destroyed some bricks of the very system which supported him!

> our culture leaves very little room for appreciating, valuing, revering, looking up to, or attributing positive social accolades to anything but self-reliance.

Our societies are made up by individuals, but we are all in this together. All of us are human beings who are trying their best to succeed in life.

I believe that someone like my father made no known mistake in his life to blame him for his disease (the cause of MS is still unknown), and I have zero understanding for someone who beliefs that he, in his situation, should've ended up on the street, forcing him to be self-reliant. Like, how? He'd have died rather quickly as a blind, homeless man who cannot walk. And his example is just one of the many. I have one word for a society in the 20th/21st century who pushes people towards that path: compassion-less. And I judge a society by the way it treats its weakest links. Because that is a sign of wealth. Not United_States_Dollar-wealth, but maturity of society akin to how a parent nurtures their child. (Its not the same in this context because the child has a chance to succeed in life, but its close, and in case of temporary illnesses its accurate.)

[1] America is bigger than USA, and Europe isn't one nation either. These are caricatures of Europe and America. We're overgeneralizing, in so many ways.
Cryptocurrency focus should be on participation, not speculation
There's also the possibility of global disruption of these local monopolies from massive LEO megaconstellations of small telecommunications satellites.

Three big ones:
SpaceX's Starlink constellation is up to ~12,000 satellites around half a ton (maybe more in the future).

OneWeb's constellation of a few hundred to a few thousand smaller satellites. (these use a "bent-pipe" architecture, meaning no satellite-to-satellite communications, depending on ground stations near the point of use).

Telestar's LEO constellation is a few hundred small (~100kg?) satellites as well, using inter-satellite links (and therefore not so dependent on ground stations): https://www.youtube.com/watch?v=H03lpd-zVCs

None has gotten prototypes launched, yet. Telestar lost some of their prototypes in a R7/Soyuz launch failure late last year; I don't know when the next launch is set. SpaceX is supposed to launch in a month or two, with Oneweb launching prototypes in about 2 months after that.

I think there are other such LEO megaconstellations planned. (They offer huge advantages over current GSO satellites in that they're far lower latency; In SpaceX's case, the worst-case latency may actually be significantly better than fiber's worst-case latency.)
The apple app store is astonishingly bad. Searching for the exact name of an app doesn't give you the app half the time. the only reliable way to get an app is to search the web for it, find the developer/publisher's home page, and then click an itunes link from there.
Wait, what? If this allows code running in ring 3 to read from ring 0 protected memory then it's not an issue due to a lack timing guarantees, even if its internally caused by a timing issue. Now the speculation about the underlying problem could be way off, but if not it would be hard to see how Intel would argue that it isn't a bug.
But this isn’t their first car. They’re not even pushing the envelope that much (Apple was) compared to the Roadster, S and X.

It seems like they should be much better at this by now. Maybe not GM or Toyota, but better.
We should have an annual vulnerability/amelioration award (the Cerberus?) and give one to those guys.
It's an analogy founded directly on history. In the past, it was common to not see a distinction between male homosexuality and pedophilia. I'm absolutely certain some people still see the world that way. In short, it doesn't have to make sense, because it's historical fact.

To see this in film, watch the Sid Davis classic "Boys Beware":

https://en.wikipedia.org/wiki/Boys_Beware

> The film equates homosexuals with child molesters and hebephiles, repeatedly describing homosexuality as a mental illness. True to the stereotypes of its time, the gay men in the film have mustaches, sunglasses and/or bow ties.

https://archive.org/details/boys_beware - Original

https://archive.org/details/BoysBewarecolorizedVersion - Colorized

https://archive.org/details/BoysAware - Remake
Looks like everyone is vulnerable to arbitrary user memory reads, while Intel and ARM are vulnerable to arbitrary kernel memory reads as well.
Then again the octogenarian already lived all those years and the child obviously had no such opportunity.

How is giving to somebody who had something and used it and not giving it to somebody who hadn't had the same opportunity fair?
I've come to see Tesla as being very bad at production lines. I've heard almost nothing but bad news about working conditions, safety, output, etc. Top it off with the massive firings that happened right as the Model 3 production was set to ramp up.

However, I'm bullish, because these are solved problems that many other people have expertise in. It's easier for Tesla to find someone skilled in car manufacturing than it is for other manufacturers to build the brand demand that Tesla has. They have solved the hard problem, but failed the easy. And when they figure out how to build cars faster, the demand is there to meet them, which means that when they solve that easy problem, they will be sitting pretty.
How long does Tesla have before it runs out of cash? I know they just had a bond sale or something, but I'm fuzzy on the details.
'hate speech' is an oversimplification chosen by the media. The law acually forces large social media companies in germany to remove illegal* content from their site within one week.

Context is that Facebook has been ignoring illegal* content on their site and generally made an ass out of german law enforcement, so they got a law to rein them in.

*illegal: libel, Volksverhetzung (https://en.wikipedia.org/wiki/Volksverhetzung), supporting illegal organizations (eg. advertising IS beheading videos), calls on people to commit crimes, child porn, porn without consent
Setup your own experiment and let me know what you find.
I didn’t find out there were more than 4 posts until after I made my comment (thus the edit).

Thanks for the handy link.
Some projects dump everything in the root of the repo. I find that to be annoyingly messy.

Comingling non-Go dirs with Go code makes it hard to navigate, since some dirs will be Go packages, and some won't. You may want to have documentation (/docs, perhaps), test data (/test?), build output dirs (/build or /dist), Docker/Kubernetes/Helm dirs (/docker, /k8s, etc.), Protobuf files (/proto), and so on, usually all in the root of the project.

Secondly, these directories might conflict with Go package names. We have a project that has a package called "documents", which is about persistent documents, which we'd have preferred to call "docs", but the root already had a /docs folder for actual documentation.

Personally, I prefer "src".
AWS has always told customers they use both stock and custom Intel processors.
What about future generations, how much should be allocated to them?
I know you didn't. But a lot of people falsely think it comes from the Bible, so I figured I'd mention it.
How did you jump from $99/year to $330/yr in sales per developer?
Don't forget the depression. The way my grandpa talked about growing up in the depression, I got the impression that kids were basically independent by the age of 7-8, out of necessity. Many of them had what could be considered part time jobs for after school and were responsible for running errands which could involve walking alone many miles from home to go shopping or drop something off.
I think they are great for how old they are, price and their capabilities - 4k, HDR, HEVC decoding, inbuilt Plex server, etc.

Switch off CEC (this should stop the HDMI jacking). The supplied remote is truly awful. I use either my home cinema amp remote and/or TV remote (but this requires CEC enabled) and have no problems. Check the r/ShieldAndroidTV/ there's lots of good/cheap remote recommendations in there.
Why do you think cost per mile would be cheaper than the subway? With CBTC (existing technology, though not rolled out to most of the subway) and intrusion detection, we don't need any labor on a subway. What's less expensive to maintain, a 10 subway car set that carries 1500 people or 1500 pods?

Maybe paved roads are cheaper to maintain than subway track, but that's hard to really compare apples to apples.

Honestly, I find it easier to imagine a NYC where there are no private vehicles allowed at all during rush hour than I find it possible to imagine one w/o subways.
No one likes a story where the protagonist dies at the beginning and plot resolution centers on which of the antagonists profit more over his death.
> I guess overall I think this is fair to call a "flaw" but not a "bug."

Yes I agree, it's not a bug in the sense of a silly mistake that slipped through development and testing. It's a flaw / attack-vector that no-one thought of... until now.
Accusing the police of trying “to appease the barbaric, Muslim, rapist hordes of men” by putting out a tweet in Arabic is not just "opposing immigration".
So, as I gather, one of the main culprits is that unwinding of speculatively executed commands is done incompletely. That is something that the people doing the unwinding must have noticed and known. Somewhere the decision must have been made to unwind incompletely for some reasons (performance/power/cost/time).

As for the difference between AMD and intel. (From other posts here, not this one.) The speculative execution can access arbitrary memory locations on intel processors while this is not possible on AMD. This means that on intel processors you can probe any memory location with only limited privileges.

As for the affected AMD and ARM processors I'm none the wiser. How are they affected? Which models are affected? Does it allow some kind of privilege escalation? The next days will surely stay interesting.
I don't understand what exactly you're saying. All of those services have serverless services, but they also have server based instances which abstract compute to amount of cores and RAM rather than CPU cycles. And most use is out of the services which aren't serverless.
A state lottery is something you freely enter by choice. That's different from other kinds of randomness.

If random distribution is fair, and if souls are randomly assigned to bodies, then there can be no unfairness in the world. I don't think there'd be a difference in unfairness if souls were in fact allocated to bodies by some sort of deterministic process or by the whims of a maniacal god.
I only had a chance for a brief read over the papers, and to be frank, a lot of it goes over my head.

However, from what I'm understanding, this makes Heartbleed look like a papercut.
From what I can gather, one of the 3 issues found is Intel-only, very bad and very easy to exploit, and can be patched with a large performance hit.

Another is harder to exploit, and has no known workaround (likely requiring new silicon to fix), and affects basically all micro-architectures in use today, including AMD's x86 silicon.

The third, I know nothing of.
Google’s Mitigations Against CPU Speculative Execution Attack Methods
Not exactly; it says "we are unaware of any successful reproduction of this vulnerability that would allow unauthorized information disclosure on ARM-based Android devices."
"Testing also showed that an attack running on one virtual machine was able to access the physical memory of the host machine, and through that, gain read-access to the memory of a different virtual machine on the same host."

Holy shit.
I haven't down voted anyone.

Setup your own experiment and let me know what you find.