skysight-inc/HackerNews huggingface dataset:
So confused by all the posts from people who say they run Swarm because kubernetes is too complicated or is only for huge deployments.

I’ve had all sort of difficulties installing Docker. By hand it’s not trivial to get a secure install. Docker machine is great except it’s often broken. The Docker machine dev team is a tired, understaffed bunch that’s always playing a sisyphean whack-a-mole against dozens of cloud providers and very needy posters on Github, myself included.

Kubernetes on the other hand is trivial with GKE.
It’s great for single node deployments. I run a single node on GKE and it’s awesome, easy, and very cheap. You can even run preemptible instances. The myth that kubernetes is complicated is largely perpetuated by the same kind of people who say React is complicated: the people who’ve not tried it.

And like React, once you try kubernetes you never go back. Kubernetes is actually the orchestration equivalent of React.
You declare what should be true, and Kubernetes takes care of the rest.

And the features it provides are useful for any-sized application! If you try kubernetes you quickly discover persistent volumes and statefulsets, which take away most of the complexities out of stateful applications (ie most applications). You also discover ingress resources and controllers, which make trivial so many things that are difficult with Swarm, like TLS termination. Swam doesn’t have such features, which any non-trivial app (say, Django, wordpress, etc) benefits from tremendously.
Plenty of legacy OSes will not receive any patches, plenty of current OS instances will not be updated by technically incompetent owners, and either way attacks using this exploit will continue to be profitable.
What is 'plain text' ? Is it ASCII ? 7 or 8 bit ? EBCDIC ? UTF-8 ?
Do you have any recommendations on sources to read about this? Everything I've read discusses the use of the Hessian to not only determine you are at a saddle point but to also use its eigenvalues to escape.
Why you single intel on this, ARM and POWER also affected

https://www.ibm.com/blogs/psirt/potential-impact-processors-...
It makes sense if you don't want a remote code execution in one of your app to provide a full root shell.
Especially for UDP this would work very well (as there isn't much of a network stack anyway).
> code executed on your server. Epic's servers are used for login, where people send you data, and for game logic, where people also just send you data like "player x moved his avatar here, player y shoots etc".

Have you ever heard of the term 'buffer overflow'?
The gun photo portrays instability.
Founding a Startup, Just One More Time
Encodings do not make text a binary format. This pedantry is uncalled for.
Can someone tl;dr this without all the medical jargon?
Well, look at their president. A good portion of them is probably just cowboys with guns. ;)
Are you using PV or HVM instances?
Correct, and so are Samsung and Qualcomm CPU’s, according to the original paper: https://spectreattack.com/spectre.pdf
Everyone is affected by Spectre, but my understanding is that Meltdown is a particularly powerful "version" of Spectre that only affects Intel CPUs ?
I'm just saying there is no such thing as 'plain text'.

I also think that plain text is a bad idea, binary files are much easier to parse.
The future of Docker, Inc. is being an Oracle acquisition.
Ethereum at $1000
The best part is when you get caught, you can just play dumb and say your npm credentials were compromised (assuming precautions were taken in not using a collection domain tied to you).
> Commonly you use PXE to avoid having these locally.

I’ve not seen PXE used anywhere that the DC wasn’t O&O (or essentially close to it). As that’s the exception to the rule these days, isn’t your premise a bit cavalier?

I’ve used PXE a lot in my past [0] to great benefit (well, more specifically iPXE through chainloading), so I’m not detracting from it, just saying it’s applicability is limited for most folks.

[0] I wrote “Genesis” for Tumblr which handled initial machine provisioning from first power-on after racking to being ready for deploys.
Only Spectre CVE-2017-5715 can escape a VM, not Meltdown.

Even then, you don't need to trust your co-tenants. Updating the host (which your provider has already done, or which is anyway out of your control) is both necessary and sufficient to protect from VM escapes.
You mean like https://openrisc.io/ ?
Exactly my thinking. Who care's if Friday is a social construction. It allows people to meet up, talk, and relax before they all have two days off together. How beautiful is that? If people were all working at different times and on different schedules, how would friends and family ever meet up in groups larger than two on any regular basis?
If they are using socket API for UDP, performance is not critical for them. Otherwise porting UDP servers to DPDK/netmap is not rocket science and gets you like an order of magnitude better performance.
Heroku buildpack for deploying keybase proof
I’ve noticed that restaurants have jumped in the “small plate” bandwagon serving tapas style dishes of a few bites and meant to be shared. This isn’t really my favorite kind of sit down dinning, but it allows restaurants to generate larger tabs while making the organization in the kitchen easier —- they send out dishes willynilly whenever they have a few ready.
I wonder if you can use Spectre to steal signing keys from the device and jailbreak them. I guess they probably only have the public keys though, for verification.
Do the startup thing. Tesla worked as a ditch digger for $2 a day after his startup went belly up. He was 30, I think. That must have been depressing. A then a year later he confounded another company and developed the AC induction motor.

You might end up as MGTOW because your socialite wife probably won't be on the same page, but hey... No balls, no glory.
I came in expecting the article to be pretty light on formatting, yet this one was one of the most oddly formatted articles I've read in a while. It's quite strange.
I’m not sure the text/binary distinction is that useful.

ASCII is much simpler than Unicode encodings, to the point where text can even become an attack vector. A fully featured UTF-8 parsing and rendering engine is a sophisticated thing.

Does it matter whether one or the other is classified as text or binary? Not as much as it matters which requires the more complex code to process.
Enough with Tesla already. Jesus Christ.
from what I understand AMD and ARM are also affected by the toy POC, quote

Out-of-order execution is an indispensable performance feature and present in a wide range of modern processors.

quote

However, for both ARM and AMD, the toy example as described in Section 3 works reliably, indicating that out-of-order execution generally occurs and instructions past illegal memory accesses are also performed

end of quote

it just need more work to make it work their

https://meltdownattack.com/meltdown.pdf
The abstract spells it out: "This suggests fundamental differences in these treatments’ therapeutic actions, with SSRIs mitigating negative emotions and psilocybin allowing patients to confront and work through them. Based on the present results, we propose that psilocybin with psychological support is a treatment approach that potentially revives emotional responsiveness in depression, enabling patients to reconnect with their emotions."
Elitzur–Vaidman bomb tester
All of them on HVM.
And web platform people remain convinced that HTTPS transport encryption is sufficient to protect everyone, even though desktop app, OS, and bootloader people have been doing code-signing for something like two decades.
Yes this looks like a good reference.
I think people have solidarity but it applies for a group that you can empathize with,I remember as child in school we had a poor classmate that could not afford to pay to particiapte on some activities and we would help him.
I am also thinking when a tragedy happens and appears on TV the number of blood,money, material donations increases so I think people need reminding where the health tax goes, like show children that receive legs,hand or expensive treatment because of the tax.
This is the correct, non-snarky answer. It's a known privilege escalation attack, turns a bad day (someone got a non-root account on my server) into a worse one (root account).
Having just read the Meltdown paper, but not the Spectre paper. My understanding is that yes Meltdown is much easier to exploit and more powerful. I believe Spectre requires the attacker to consistently fool the branch predictor while Meltdown enables reading kernel memory mapped into user space process via access in speculatively executed code and observing the affects on the CPU cache.
GoPro Cuts 200-300 Jobs
Very interesting! I had to look at some of your other comments to find out that MBL is "many-body localization" which i've heard of but know very little about.
Could you make the website viewable without JavaScript?

Edit: I think the downvotes are unjustified. For clarification, if that wasn't clear by context, I don't expect to get the JavaScript test results from my computer while viewing the website without JavaScript. Demanding that would obviously be nonsense. Rather than that I assume there is information on that website that is interesting to read even without using JavaScript personally. Or is using JavaScript now a requirement to learn about JavaScript?
7 Signs That Show You Have Great Personality
They are comparing the effectiveness of SSRIs and psilocybin on depression by analyzing brain activity and the response to faces with different emotions (both agents work on serotonin receptors). Their conclusion is that while SSRIs lessens reaction to negative emotions, while psilocybin helps people think through their reactions. They conclude “Psilocybin represents a novel intervention for major depression that appears to be safe, rapid and potentially enduring in its antidepressant action.”
And solve the C10M problem at the same time. Two birds with one stone.
anyone have an annotation for "the trolley problem" referenced here?
I saw some speculation that AMD might raise the kernel memory read exception earlier than Intel which prevents any subsequent instructions from using the value fetched from the kernel address space.
Pretty much every fast CPU is vulnerable to some subset of Spectre.
The last sentence of the abstract does a good job of this:

>"Based on the present results, we propose that psilocybin with psychological support is a treatment approach that potentially revives emotional responsiveness in depression, enabling patients to reconnect with their emotions."

This hypothesis was borne out in the data produced by the experiment.

Essentially, they were able to increase empathy in their patients which enabled the patients to experience less isolation, thus relieving (some/most of) their depression.
Was hoping this had some effect, making it less of a one track cesspool of ideology but alas, not yet. There used to be some sort of discussion that took place on there but now it's all "fall in line" with the Narrative.
I would argue it is very much related to web browsers. Sure, your torrent-engine or audio-player can be vurnerable as well, but how likely is that? If this would be the case, I'd say that the developers of this audio-player have seriously fucked up, essentially have allowing the third party to run an arbitrary code on your PC — something is doubtfully necessary for an audio-player. The most important question would be — what do you have installed? And, sure, it could potentially be all kinds of malware, but then chances are you are fucked anyway — because installing a software, ironically, requires much more trust than opening a web-page.

But in reality you (and billions of people around the world) have this thing called web-browser with JS enabled, where opening a simple text-document is basically indistinguishable from running a BTC-miner for the end-user. All these people are fucked right now and have been left to hang. All they can do is to ignore the news and hope it will just go away.

It did seem to me a viable solution some 10-15 years ago, in the time of Web2.0. Now, after mobile apps have spread around the world — I reconsidered. Having an app is just better even if it's just the HN-reader. Even better, if it would be a single app for some common "news-aggregator-protocol", to fetch content from HN, reddit, etc. But it is not only not the case — I heard people say that this attitude is "killing the web". Well, if so, fuck you, web should be killed. It should have never existed at all in the form we currently have.
And arguably better battery life.
There’s More to Naming a Company After Yourself Than Ego
Using PXE (or, rather, iPXE) is the recommended deploy mode for container linux, that's why I mentioned it.
Scientists unearth First direct evidence of First Americans
I think htop is a tolerable replacement for top but personally I find it just okay, not "nice".

The main reason I prefer Activity Monitor is that it has more features, like viewing open files by process, the energy usage pane and network activity on top of CPU and memory. I tend to prefer GUI apps any time I'm interacting with the interface a lot, like to sort, filter, drill down, etc.
VMSA-2018-0001: VMware VDP remote execution exploit
Thank you for the explanation, and especially for being non-snarky, which unfortunately seems to be getting rarer and rarer on this forum.
What about "First electric passenger plane takes to the skies in Australia"?
The problem with embargoes is that they tend to run so long that users are put at risk unnecessarily. Most of the reasons for extending embargoes way beyond the time needed to prepare and test patches are just bullshit.

For example, from the conversation on the KRACK embargo:

>Q. What is the rationale on extending the embargo so long? To give vendors a chance to patch? It seems like once people in the know know about a vulnerability, the shorter an embargo time the better.

> A. There’s a couple of different interests at play.

> For instance:

> Researchers want to make a timed media splash.

> Security agencies want to evaluate the problem and make sure they get patched before anyone else.

> Vendors want time to prepare patches, yes, but that alone does not justify such a long delay.

> Reviewing the patch, testing it, and preparing it for commit and publishing erratas took only a couple of hours of my free time.

Apparently Meltdown was discovered back in June, or seven months ago. Only a select few were told about it and have been working on it. It is apparent that some are more equal than others in the "free and open source community," which ironically apparently includes Microsoft, Apple, and the three-letter agencies.
oh sure, agree government is not perfectly reliable, as you point out. you are probably right about mispricing.. of course government bond is less likely to disappear altogether than any one corporation. and the bonds are just used to leverage further lending. the rate doesn't matter as much as the published (low) market risk.

but anyway, the gp was discussing issues with government taking or holding debt indefinitely.

I was just pointing out that government can use it's power and position to nullify the political issue of interest on debt that you rightly brought up.

from the lender point of view that is not a great deal, but I don't see why interest needs to be an integral part of government debt.. as it can, and as we seem to agree, mitigate the risk, demand and inflation factors I mentioned. through fair means or foul.

and if the market declines the offer, the government can increase the supply of money.
Unfortunately, I've learned this the hard way. Twice.

I'm sure it's more stable now than it was when I used it last, but it's frustrating when people say "no, this time it's really stable!" and then you lose data due to a bug. This same thing has never happened to me with ZFS on Linux, which is a shame because the licensing issues make it painful for me to use. I like up to date kernels.

I feel like btrfs should be phased out. It was clearly developed in a fashion that did nothing to prevent preventable bugs. This may be the same frustration that's leading RedHat to work on their own competing filesystem...
QEMU and the Spectre and Meltdown attacks
As a side note: I find it amazing how many private pictures the author is sharing on his public Flickr album, which is linked on the website.
This is not just Plain Text. Hugo is not that good for a bunch of text/markdown files. My advice is to look more into mkdocs which is a bunch of markdown files in a directory structure presented nicely (even implements js search).
but with stuff like printing not working properly

Wait, it breaks printing? In what situations?
While researching microdosing last year I learned that psilocybin and SSRIs have similar mechanisms of action, so I’m very happy they did this research. Anti-depressants are very popular drugs, and psychedelics have been suppressed culturally and legally, much like marijuana. I think there is definitely a place for ‘medicinal mushrooms ‘. Like MDMA, it’s an amazing substance psychologically.
> No one cares that a million toilets have to flush at the same time.

People care that they sit in two hours of rush hour traffic per day. There is zero synchronicity when you're staring at the license plates in front of you.
Principles of Programming Languages [pdf]
Oalley [0] is a simple tool to draw isochrones and the REST API is available here: https://api.oalley.fr/

[0] http://oalley.net/
disclaimer: I developed Oalley
> compilers that can prove the correctness of real world code when it's written a specific way

Do you have something I can read? I'm curious specifically what you mean by this.
My ELI5 attempt:

There are 3 vulnerabilities.

Meltdown is 1 of the 3. Meltdown is pretty much Intel only. Some ARM SoCs are also affected, but these are relatively rare. AMD64 is unaffected by Meltdown.

Spectre are the other 2 vulnerabilities. Spectre affects pretty much everyone.

Meltdown is more severe, and more of a blunder.

For a technical explanation, see [1]. Was recently referred to at HN as well.

[1] https://www.raspberrypi.org/blog/why-raspberry-pi-isnt-vulne...
You may not be able to grow an existing vdev, but you can add another vdev to an existing zpool. And although having all vdevs be identical gives more consistent performance, it’s also possible to mix different vdevs in the same zpool. Multiple vdevs also result in better performance, as each raidz/raidz2/raidz3 vdev only has the equivalent IOPS of a single drive, but without the write hole drawbacks of more traditional RAID5. Recovery time with multiple vdevs would also be much better than a single large vdev, which is becoming more and more of a concern as drive capacities continually increase while IOPS remain more or less the same.
I'd like to post my complements to the author here. I don't use Genode, but the first 5 paragraphs are a spectacularly lucid intro to the implications of both these vulnerabilities.
The first and most important phases of hardware design are a lot like software development. If open source folks can write an OS without much funding, then they can design a CPU.
Can confirm that review, my first MBP was the 2015 model with El Capitan, it has been nothing but sheer joy for me. I don't even have to deal with temptation because everything that has come out since has been terrible.
Introduction to the Mathematical Theory of Systems and Control [pdf]
There are already CPUs available that aren't affected by these bugs. The problem is that most people want the fastest CPU for a given price -- and making a new, slow, expensive CPU isn't going to solve that problem.
I'm aware of FreeNAS. I used to run a custom NAS setup. What I've learned is that its not worth my time to be making NAS setups. It can be a surprising ordeal from both a hardware and software PoV. If I were to build my own NAS, the first item on my wish list would be open source hardware with no firmware blobs and no hidden processors that I didn't ask for. Where do you go to get that? AMD has PSP, Intel has ME, ARM has TrustZone (yes I'm aware these are not identical,) and all of them feel untrustworthy to me now.

If RISC-V is fast enough to power a NAS and open source SATA controllers exist, I would absolutely prefer a setup involving that.

If I'm not going to get that... I'd probably prefer a setup from Synology. They'll do a good enough job, probably better than I could, even if the price is a premium.
I would be amazed if selecting text on a mac with a mouse was quicker or easier than selecting text on an ipad with a keyboard.
> They are under no obligation to host the videos, but they can't just delete them.

One implies the other. If your media backup and recovery plan is Youtube, then you need another plan.
Why do we want to reach AGI? There are around 7.5 billion biological general intelligences, and we already know how to make more of them. Is it to save companies labor costs and increase their profit margins? I'm not sure that's ultimately in the interest of most people, or even the long term health of the economy.

Seriously, why do we want to replace human intelligence? I get augmenting it with narrow forms of automation, but AGI is a different animal.
Section 5.3 pertains to requesting passcodes, and that an Officer may ask you for the passcode (I don't see anything about individuals being obligated -- though see 5.3.4, which could be interpreted by "legal remedies"). However, section 5.3.3 says:

> If an officer is unable to complete an inspection of an electronic device because it is protected by a passcode or encryption, the Officer may, in accordance with section 5.4 below, detain the device pending a determination as to its admissibility, exclusion, or other disposition.

Section 5.4 elaborates further.

Also, I found 5.1.2 interesting:

> Officers may not intentionally use the device to access information that is solely stored remotely. To avoid retrieving or accessing information stored remotely and not otherwise present on the device, Officers will either request that the traveler disable connectivity to any network (e.g. by placing the device in airplane mode), or, where warranted by national security, law enforcement, officer safety, or other operational considerations, Officers will themselves disable network connectivity.
Hybrid cars let you operate IC engines at fairly high efficiency depending on setups but you now have to deal the overhead of charging batteries for both setups.

Also, if you want total efficiency in terms of C02 then you need to consider. Gasoline takes a lot of energy to extract, refine into a usable state, and transfer around the world. On the other hand hydrocarbons extract energy from hydrogen bonds not just carbon bonds so they produce less C02 per BTU.

Net result electric cars backed by coal power still win vs IC, but not by as much as you might think.

PS: You can also use turbines in hybrid car which would boost it's efficiency even more. But, you can also produce very cheap solar power which once again shifts things back to electricity.
OpenBSD has struggled at times to pay their power bills. They don't have the resources to branch off into building new hardware from first principles.
I'd have presumed otherwise, but I'm not sure if you're understanding the API correctly.. it's not about sending multiple messages to the same destination, but to multiple destinations in a single call. The msg_hdr struct has room for specifying the target address.

From userspace' perspective, even if the same data isn't being broadcast at every client, just building up a big array (perhaps while looping over the input from recvmmsg()!) and spitting it out once would have the same semantics as just calling sendmsg() immediately on each, etc
Which widely available and affordable CPUs aren't affected by Spectre?
might be why they started making games. Firewatch (the tree icon on their home page). It was fun and different, but failed to make me more productive...