skysight-inc/HackerNews huggingface dataset:
> No. The real vikings (not the TV ones) were almost universally blond or red-headed. If you are black, your ancestors were not vikings any more than my ancestors were Zulu warriors.

I'm confused why you think "blond or red-headed" has anything to do with whether you have any viking ancestry. Just because my father is blonde does not mean I am. And the point of the article is that our lines merge much sooner than we intuitively believe.

If you are black in any society that has had a mix of European and African ancestry more than ~200 years ago, you are almost certainly partially of European descent. Unless somehow all of your 200+ descendents avoided any sexual contact with any colonial. If you're of Western European descent, you are almost certainly of Viking (i.e. Danish/Norse) descent: they spent centuries pillaging and colonizing different areas of Europe (including England). Therefore, if you're black in the Americas, you're almost certainly descended from both Vikings and the ancestors of the Zulu (considering the Zulu were a kingdom from the 19th century, so you're right, it's unlikely everyone with European ancestors, or even everyone with African ancestors, is). If you're from any country that was a European colony more than 300 years ago, this is likely true, too.

And remember, cross-continental trade is old. People from the African continent have been having children with people from the European continent for thousands of years.
But if there can be no data about it. Does it even make sense to talk about it as existing?

IIUC everything in the observable universe is sufficiently far away from anything else that any causal relationship with anything is either from before inflation or within the universe we can observe.

And given how the existence of matter seems to be rather connected to time, it self a by product of interaction, it seems to follow that there is, relatively speaking, nothing beyond the horizon.
Was just going to post this, JWT with public keys is very handy for stateless verification of claims, which is what it seems was the primary motivator of the spec.

As someone who had to work with XML-DSIG, JWT seems less bad :)
It's just a simple matter of distance, as things get farther away, they are farther away.

But in this case, not actually as far away as you are thinking, because of something called pedigree collapse. For example, the second row in your family tree, your grandparents, has 4 people, 2^2. The 20th row, only about 500 years ago, has mathematically 2^20 = 1,048,576. In reality far fewer, because the same people fill multiple spots. Only 1,000 years ago, 2^40 = 1,099,511,627,776.

A trillion ancestors 1,000 years ago? Doubtful.

So you can see, this exponential explosion is not an accurate way of thinking about ancestry.

Pedigree collapse within a certain area is what leads to the various human races. The distinction of race is simply the description that someone is descended from some localized subset of the global population.

You're far more closely related to your g^40-parents, than the g^40-parents of someone half-way round the world because your g^20-parents are more closely related to your g^40 parents. And so it goes up and down the tree.

So yeah, maybe only ~3% at a certain level, but that is as closely related in terms of match-able DNA sequences that it is possible to be at that distance in time. You're still very closely related in terms of the overall DNA "color palette."

And it is likely somewhat more than 3%.

Many Ashkenazi Jews have a 'genetic relation' that is in fact higher than their 'genealogical relation' would suggest because there has been such a high degree of intermarriage among a small population over the years. This is the case for all races, just maybe more pronounced in Jews because of the smaller population.
We need to go 3d
Where does AlphaGo try to detect deception? What is deception in perfect information games?
> I see the chances of any contact to ever occur as zero.

Yes, especially if you take into account the speed that entire galaxies travel in space. It's mind boggling high. So the effort for any civilization to build technology that allows them to travel through intergalactic space until they get "hooked" by Milkyway's black hole magnetic field is infinitely complex. That's where the whole idea around worm holes makes sense.
When iOS throttles requestAnimationFrame to 30fps
But it will cost them on I/O which they can not be passed to consumers as the price is contractual. Either the cloud providers on the hook or have to pass it somehow to Intel.
so much fake hype for ripple scam today on several news sources.
You're muddying the waters.

> If the message is "everyone is boned," then there's no reason to expect Intel's share price to fall

That's a weak defense agains insider trading: the underlying (and incorrect) assumption is that share prices are 0-sum. It is possible - likely even - for the shares for all 3 to drop if it affects their businesses. It would still be insider trading regardless of who else on the market is affected.
Using the API, and every hour crawling a users posts that are < 10 days old for new comments.
Section 3.1:

> The JWST science operations will be driven by ASCII
(instead of binary command blocks) on-board scripts,
written in a customized version of JavaScript. The script
interpreter is run by the flight software, which is written
in C++. The flight software operates the spacecraft and
the science instruments.
The on-board scripts will autonomously construct
and issue commands, as well as telemetry requests, in
real-time to the flight software, to direct the
Observatory Subsystems (e.g., Science Instruments,
Attitude Control, etc.). The flight software will execute
the command sent by the calling on-board script and
return telemetry, which will be evaluated in real-time by
that on-board script. [...]

Section 3.5:

> JWST uses an extended version of JavaScript, which
was developed as a COTS product called Nombas
ScriptEase 5.00e. ScriptEase provides functionality
common to many modern software languages and
follows the ECMAScript standard. [...]

Also see the diagram in Section 3.3.
> A thousand years ago, we Europeans share all of our ancestry. Triple that time and we share all our ancestry with everyone on Earth. We are all cousins, of some degree. I find this pleasing, a warm light for all mankind to share.

I've always found it mildly disturbing, to know that anybody you could possibly mate with is related to you somehow.
The risk of getting found out is huge and Apple isn’t gonna do that. I would think any half decent security research can detect if encrypted data is being sent somewhere when they are not supposed to and report it to the public
I love it! But why would you need to verify that your email is associated to your username? What if you'd want to stay anonymous and not let whoever created the app know your private contact information?

The information is out there for the public anyway, I don't see an issue with following someone else's username if that is the reason. And if the reason is to prevent other people from signing up random people to get spammed with notifications, or because the service will only handle one email per username, why not use email verification instead of username verification?
Wasn't that the goal of Itanium which failed?
They need code execution to observe that cache timing, though, and they need to prime the branch predictor and cache.
Thanks for answering the previous person's questions; your answers were very helpful. Can you talk about how long it takes most people to reach staff level (or how long it took you)?

At what level do most engineers plateau at Google (meaning most people are unable to go past it)?
Typical allocator free() calls don't actually overwrite the memory, meaning that the data stays there until it happens to get overwritten by a future process, which is an unpredictable event. When I was doing research on the cold boot attacks I did a lot of "strings /dev/mem" and would notice stuff related to things I was working on several days ago. As our cold boot paper described, this could sometimes include things that you were doing even before the computer was last rebooted.

There is a really nice paper on this particular topic

https://benpfaff.org/papers/shredding.html/index.html

which describes some useful countermeasures which haven't been widely implemented. If they had been, they could have somewhat reduced the impact of opportunistic exploitation of memory disclosure vulnerabilities.
The compiler only knows about the program and maybe statistical information about the data.

The CPU knows about the actual data currently being processed.

Therefore, the CPU can do more by using branch prediction and speculative execution. It is more expensive in terms of energy per computation but so far it was worth it. The CPU can also optimize old code on-the-fly.
What is eager execution?
PHP: Mocking Time in Unit Tests
Im less worried about my steam client reading my chat cache than something inside my web browser reading the keys that encrypt my home directory. Short of abandoning all sharing, the least we can do is isolate kernel cache.
The tools that we could use to get the "uninterested" to believe the truth work equally well for falsities, and are usually used to spread beliefs of convienience. If those tools were just sent down entirely, you'd be left with "right" and "random," and the random would always average out at the polls. Sadly, in our present world stupid is dangerous because machiavellians and martyrs alike are magnetizing it with arguments that are as wrong as they are emotionally convincing.
Yes, but the two have nothing to do with each other.
It's not a need or a right, it protects your rights. A right is something your have by nature, not something that can be provided to you by others.
Did Itanium really fail because of the technology or because of x86's momentum and lock-in effects?

AFAIK Itanium has explicit software control of speculative loads.
Thanks. Not sure why the article doesn't link to the video. BTW, there's also an HBO miniseries made from the book that's well worth watching:

https://en.wikipedia.org/wiki/From_the_Earth_to_the_Moon_(mi...
Sure, I get all that, I want the technical details though. Or pointers to where I can learn more. His advice says what not to do but not really what to do or where to learn more.
Tracking and hacking ships with Shodan and AIS
Right, that's the problem. Doing a social media search for "meltdown" brings up irrelevant (to me) messages about the purported Trump vs Bannon feud, nevermind anything else in which "meltdown" is used to describe celebrity drama (i.e. every reality TV episode wrapup ever).

Compare to "Heartbleed" and "Sandworm", which while at the time had a little mocking for being a bit too polished/branded [0], at least had the benefit of being relatively scoped. "Heartbleed" seems to have very few collisions period as a noun/proper noun [1]. And while "Sandworm" will perpetually collide with sci-fi fans of Dune (a subgroup that likely overlaps with security research), discussion of Dune's sandworms won't be trending on a weekly/daily cycle.

[0] http://www.zdnet.com/article/the-branded-bug-meet-the-people...

[1] https://en.wikipedia.org/wiki/Heartbleed_(disambiguation)
If you're open to questions, I'd be curious for your take on token binding as well, as that seems to be in the same ballpark (or same sport at least).
Friends of mine at least 3 decades ago were forced to take their cod-liver oil in liquid form (their mother was a medical professional). 4g of it contains the USDA RDI for VitD apparently.
I have never felt any kind of euphoria with alcohol; experimenting, I've reached large enough amounts to severely affect my balance, coordination and concentration, but was otherwise hardly affected at all (as confirmed by a teetotaler friend who was with me in some of those times).

Some people, when I tell them that, respond with "well, what did you expect? that's drinking" and some with "that can't be, perhaps your vodka was watered down". Your comment reminded me of that.

Having experienced both versions (euphoric and non euphoric), do you have any insight about the difference, how much of it is physiological vs. psychological?
Other 'the compiler will sort it out' approaches have also failed though, so it seems likely.
> This just sound like the Intel Management Engine story waiting to happen again

Excuse me, implementation details matter. Outcomes matter. Apple has deployed 10x more devices with no known breach or defect.
mods: correct date for headline is 2007 ...
I don't think those use x86 chips so they should be OK.
Sure, the BSD kernel is good, better than the Linux kernel, however why limit your options when NT kernel can easily run any subsystem? Does not make any sense.

When people complain about Windows, it is usually the win32 subsystem they complain about. That has nothing to do with the NT kernel.

After last major update the interop for WSL works very well.
The fabled RESF home base.
Why one solution is put secrets in kernel and use meltdown mitigation to protect.
The faces are pretty good but the ears and craniums are awful, presumably because of a dependency on neighboring pixels and getting confused by diverse backround images. Why ruin their work by including he garbage parts in the presentation/claims? And why not leart foreground and background separately, and mask them together?
"I've escalated internally" wow almost as cool as "I called the POTUS and the TSA thing is fixed now"!! Kudos and thanks
Agreed, but there's not really something inherently insecure about JSON vs concatted strings vs binary (well readability on that one). It's all about the JWT spec being complicated and easy to mess up.
I'm glad we have Bob Ferguson here in the great state of Washington standing up to the Feds. Apart from this case, will also be interesting watching what he does in relation to Session's revocation of the Cole memo.
From Much Ado About Nothing: "The world must be peopled. When I said I would die a bachelor, I did not think I should live till I were married."
Not really.

I've built Hackintoshes so I'm familiar with kext replacing and what not, my idea was more that Apple could do something to limit apps/OS from running on anything that didn't have a t2 chip and it might be difficult to get around, like OSX on exotic or AMD chips can be a bit of a pain. Haven't used one in a few years though. Also the chip stuff is out of my realm of expertise.

Was just a thought I had.
Managing Passwords and Secrets: Common Anti-Patterns
> is WPA2 on a public Wifi with a publicly known key a workaround?

You're thinking of packet injection (or data intercept) by any nearby individual, which WPA2 with known PSK would mitigate. However, as an attacker would know the PSK, they could simply join the network to side-step this.
Also, separate BTB for each process and privilege level.
that's a pretty harsh thing to find disturbing, given that you're the product of 4 billion years of incest.
Though they do it for guns. Here in KS the law says firearms and accessory made in KS are exempt from federal regulation. Two guys were recently convicted in federal court for making a suppressor.
FWIW, I was specifically trying to leave the actual purpose of eyebrows out of the argument.

We will probably never have a definitive answer to the question of why we have eyebrows. The best we'll ever do is some decent hypotheses. So if the argument is that eyebrows serve function X, but we find out in the future that eyebrows do not, in fact, serve function X, then a naive observer will think that eyebrows did not evolve to serve any purpose and are, in fact, just a random feature.

IMO, a more thorough argument is to point out that the only way species-wide, complex morphological features like eyebrows can possibly exist is if they serve an important purpose, even if that purpose has a miniscule impact on the outcomes of any given organism. This argument is resistant to any given explanation for the purpose of eyebrows turning out to be wrong.

Plus it gets to a deeper understanding of evolution.

P.S. I'm skeptical about the sweat in the eyes explanation for eyebrows. Anecdotally, my eyebrows have never kept sweat from getting in my eyes. And less anecdotally, if you spend a few minutes looking at somebody's face and imaging sweat rolling down their forehead, you'll see immediately that eyebrows aren't very effective for sweat diversion.

My money is on protecting our eyes, which are our most important sense organs. If you google image search "mma black eye", you'll see what I think is kind of remarkable: despite serious trauma to the surrounding areas, most people's eyes are intact.
Doesn't Nvidia's new eula make that Difficult. Anything requiring more than a handful of gpus would be classified as a data center deployment. Which is against the eula.

IANAL though so I might have interpreted this incorrectly.

http://www.nvidia.com/content/DriverDownload-March2009/licen...
Btw. Exactly same what facebook does also.

Is this really news to anybody?
As far as I remember, both. It was only slowly executing x86 code and the compilers didn't deliver what was expected. It was a gamble on non-matured technology. They didn't fail completely, though, HP was selling systems using Itanium processors for a long time.
I’m a bit puzzled how this helps prevent handcrafted binaries from exploiting CPU designs.
I think that it's been proven that any computational system with shared resources is susceptible to side channel attacks. The only generic way to solve them is to share each resource equally across all its consumers (e.g. each thread gets 1/num_of_threads cpu time).
You are both right. Animal reproduction is exponential as long as resources are freely available -- the more animals you have, the more they can mate. Like the parent post, the greater the perimeter of your knowledge, the greater the boundary you can now explore from.

Once animals hit the resource limit of the environment, the exponential curve flattens out. Like you note, the more of the map you cover, the less there is left to explore.

The interesting question is how big is the map and how close are we to reaching it's boundaries?

Personally, I think it is effectively infinitely large. If you consider "discovery" to include new combinations of existing things, then you're talking about permutations. If our universe consisted only of 52 playing cards, there would still be 80,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000 different ways for us to discover that they can be shuffled together.
No: he's using public key as in public-key cryptography, as opposed to secret-key cryptography.
I found myself lacking to fully understand this.

I sort of got the idea that you are fond with freedom with the greek story.

But then I sense a little disregard for the free market with the > "commoners chose your app", and how there is a circle trying to be privileged at expense of others.

Do you mean the state (with laws) should fix this circle?
Year 2017: technological highlights
Executive orders as military directives definitely applied to the south specifically because it was a different country. The president is command and chief after all. If we considered the south a part of the USA, it would have been much murkier.
Was it ever decided?
Maybe more like a meteorologist excited by a really bad storm.
Tomasulo algorithm – efficient use of multiple CPU execution units
What LastPass Users Need to Know about Meltdown and Spectre
Pandora is only available in the U.S. right now
Galactic Algorithms (2010)
> Thankfully, Sessions is legalistic. If congress got off their butts and legalized it/returned the legality decisions to the state, Sessions would surely respect their decision.

This is a bit like saying "Thankfully, the black hole hurtling toward us is influenced by gravity, so all we need to do is move a star into its path and it will be flung off course."

The fact that a terrible situation could theoretically be saved by something wildly unlikely isn't anything to be thankful for. This isn't going to force this awful Congress we're stuck with to suddenly legalize marijuana. It's most likely just going to lead to a lot of good people being imprisoned.
I don't understand the conflation. 'tptacek is arguing that you preferentially use secret-key crypto to public-key crypto, because public-key crypto is significantly more precarious. It seems like you are raising a new point, not arguing with his.
What does "top grossing 10" on App Store have to do with anything? Do you think Android users regularly check out Apple App store to look for your software? :P

Your attitude is very common among iOS developers and it's the main reason why you only have 10% of userbase on Android - companies that actually understand their audience have no issues reaching wide users and profits on both platforms.

If you deliver a subpar submarketed product on App store you will fail. If you deliver a subpar submarketed product on Play Store you'll fail as well. It seems you did the second thing.
Unless you never get the real time doesn’t this just push out the problem to statistical analysis of differences between real and fake time?
EternalBlue was worse but easy to patch.
Meanwhile the lawyers and original plaintiffs will be able to buy their own sex islands...
Well we also constantly mass-murder our cousins (cows, fish, pigs, etc.) So not sure mating is more disturbing. Well unless you're talking about cows.
You don't need public-key crypto to do stateless verification of claims. Secret-key crypto does that just fine. You need public-key crypto if you want _other people_ to be able to verify the claims -- that's an important distinction, because it specifies what you're buying for your much more complicated crypto.
Interesting! Feel free to email me with the oddities you discovered, I'd be very pleased to know, and happy to keep them in confidence. But if you'd rather not, no problem.

Email in my profile, in case you're interested.

Cheers!
> but it seems he was born around 742 B.C.
What exactly is supposed to have been "unlawful" here? Companies regularly sell your information to anybody willing to pay for it. In this case that selling actually had some overlap with improving lawfulness in an area. As for 'selling', this article omits the information that desk clerks were receiving a 'bounty' of $x per illegal immigrant caught.

I'd certainly understand some outrage if we lived in a nation where there was any value whatsoever put on strong individual privacy protections, but we live in one that's rather the opposite - and so I'm not seeing the issue.
Dell XPS 13 9370: Ultrabook with Four CPU Cores Sweeps USB Type a and Micro SD
Please re-read mine. How is the number of syscalls (which is the only thing that matters in this context) changing if there's no API change to apps? mmap already exists and already avoids the syscall. DAX "just" makes the implementation faster, but it doesn't appear to have any impact on number of syscalls

As in, if you call read/write instead of using mmap you're still getting a syscall regardless of if DAX is supported or not. Not everything can use mmap. mmap is not a direct replacement for read/write in all scenarios.
Name one other country with backlog more than 1 year which is not Mexico.
https://github.com/baidu/openrasp/blob/master/README.md Looks like a good rasp solution and with dast that gives IAST. But it is Java only.
"I remember when I used to be really into nostalgia"

- Demetri Martin
These are pretty damn good but it seems to me like the program is sort of over optimizing the pictures: in my mind, the pictures from the 5th to the 7th day are the most realistic.

After that, it feels to me like the "realness" slowly degrades.
what about performance impact after new CPU architecture arrives? how is that going to work?
I don't know any way to leave enough breadcrumbs to do that in four clock cycles, do you?