skysight-inc/HackerNews huggingface dataset:
Why did CERT modify their vulnerability disclosure to remove the text:

> Fully removing the vulnerability requires replacing vulnerable CPU hardware.

Proof: https://webcache.googleusercontent.com/search?q=cache:rzc6iQ...

This smells really bad to me, as if Intel pressured CERT into removing language that could have caused their market value to instantly vaporize as every consumer for the last 20 years joins a class action suit...
As a former BART station parking user: it’s not about liking your car, but your time. When you get used to a 10 minute drive, no one wants to switch to a 30 minute walk or 40 minute bus ride.
The comparison with AWS Spot instances are meaningless since with recent shift to per-second pricing, AWS spot market has changed significantly, there is very little price volatility but also its almost impossible to get a spot instance with GPU allocated. I almost always get spot-capacity-not-available message.

Googles preemptible model achieves a lot more fairer distribution of GPU's as opposed to AWS's model. Though AWS ended up with spot market since you got charged for the entire hour up-front and if AWS evicted you, then you got the entire hour for free, this made pricing spot instances complicated for both users as well as AWS very difficult. With shit to per second billing this issue has been eliminated to a large extent since you only get first 10 minutes free if you get pre-empted within those 10 minutes.

tl,dr; GCP preemptible instances are superior to AWS along all possible dimensions, price, flexibility, IO etc.
the /s at the end is silent
‎Chromium Security‎: Site Isolation
This branch prediction inside a "gadget" needs to be mapped into the address spaces of both attacker and victim (i.e. shared lib). But even if the attacker can get this code to run on both sides and examine the dependent timings to find out underlying values, the victim code can't be tricked to sequentially read-by-speculation all its internal data.

Does the instruction cache get poisoned as well on a mispredict and carried over?
Gas Station Attendants and the Working Class Economy
I see, so the pessimistic view you suggested above is that Apple has had such remarkable success selling to its subset of the market in spite of its inability to integrate big data into its products. This could be true, though it seems a bit less likely than a more direct explanation that Apple is selling its customers what they prefer.
the v4 can
Really? Show me a consumer grade router that can handle anything near the PPS even the cheapest edgerouter can and router with proper QoS implementation that actually works.

100 uplink utilization with no affect on latency isn’t something I’ve seen before on consumer routers even with rate limiting and fencing.
Thank you for the recommendation! It seems like a much better illustration than I’ve seen before of this direction of argument.
I would hope the older and more popular original video would ‘win’ in that scenario
Seattle city growth time laps over 3 years
I'm running an older version because I prefer to let other folks grind the rough edges off of the APFS filesystem before taking the plunge myself.
> In your opinion, are those also the reasons why you wouldn't use PAST for stateless sessions?

Yep
I'm the same. Exercise just makes me more tired.
You can read stuff like

https://www.smallnetbuilder.com/wireless/wireless-reviews/33...

https://www.smallnetbuilder.com/wireless/wireless-reviews/33...

And also just read their forums.
Since you are paying 50% discount and if you save at every 5 minutes you still come ahead, not to forget that if you get pre-empted within first 10 minutes (assuming 4 minutes to spin up the training) you got those batches for free!
This nicely summarizes the work that had to be done.

Hats off to the developers that got all this done on a tight deadline. These are fairly substantial changes, akin to implementing the code for a significant new Intel microarchitecture.

But, the amazing contortions necessary are quite disappointing. Intel isn't going to live this down for a while.
It's like being against gay marriage because you'll be forced to see gay people happy.
It's mostly assumed the refered performance advantage is directly related to the better and bigger caches in the microprocessor. I'd be surprised that their OOO technique is fundamentally different than other vendors.
my bad, I was specifically talking about wireless performance. I misread your post.
I think Oracle's push into cloud is changing their approach. If only because a) Java is still slightly more than half of the enterprise app workload (the rest is .NET), b) those customers like opensource because it gives them options.

Right now it's a buyer's market and Oracle are way behind AWS, Azure and GCP, with Alibaba trying to smash through the side door.

Which is another thing. Oracle went on a hiring spree and pulled people from the other three willy-nilly. A large fraction of whom will have never really been fans of the classical Oracle way of doing things.
What I don't understand about your making this argument here is that the article uses "peopled" exclusively to describe what happened 11,500 years ago. It doesn't use it at all to discuss the much later arrival of Europeans.

Is your argument that the verb "to people" is so poisoned by its misuse for the arrival of Europeans that it shouldn't be used even to describe those who were genuinely among the first Homo sapiens to arrive in the Americas? (I'm aware that "the Americas" is a contentious term, but I'm following your usage here.)
I'm going to go out on a limb - learn to meditate. I suspect that for most people, once well learned, meditation will be a recharging activity. And it seems like an activity that will be a good baseline for helping figuring out the energy impact of other activities.
This is good to know about, but the reporting is not great and is imprecise about many things.

For example, the map portrays an enormous dead zone covering maybe 10-20% of the pacific ocean. It seems improbable to me that the entire highlighted region is devoid of life (or even fish). Is the article saying that it is? If not then what exactly are the implications of that region having O2 less than 2mg/L?
The GP is saying that after you have the cash in hand from your customers, how do you transfer it into a digital currency like btc or monero or anything else?

You need to physically have an armored transport take it to whoever is selling you the cryptocurrency.

Edit: I guess that's a potentially profitable but unfulfilled niche. Create a company that can take cash in big amounts and sell cryptocurrency. Not sure how feasible is it but that is the missing link as I see it.
Read OP again: "Can't it also be about families simply not wanting to be stacked and packed into dense urban sardine can housing?"

Who is doing the "stacking and packing" in that sentence? Who is forcing anyone to live in an apartment building? OP seems to believe that anyone living in an apartment was taken and put there.

Does OP find it so literally impossible to imagine that anyone might not share his over-the-top, grandiose disgust for apartments?
See https://millcomputing.com/topic/security-on-mmooo-processors... and https://millcomputing.com/topic/meltdown-and-spectre/

The Mill has portals (possibly) gating everything and making microkernel design easy and fast, so Meltdown would not work. Spectre, not so sure, there are claims the NaR (not a result) option might prevent it.

I bet this will come up in the next talk, looking forward to it.
According to https://support.google.com/faqs/answer/7622138, "Site Isolation ... can be enabled to provide mitigation [against CPU speculative execution attack methods] by isolating websites into separate address spaces."

To enable, use chrome://flags#enable-site-per-process
Avid Media Composer, one of the most popular non-linear video editors in the industry, does a stat of every piece of media referenced in every project you have open when you change focus from another application back to Avid Media Composer.

Since I work on network attached storage for video editing, I'm acutely aware of how much slowing down a few simple syscalls by just a little bit can be for certain very commonly used applications on macOS.
Agree. It’s probably partly about sweat, partly about protecting the eyes, and partly about communicating facial expressions.
FCC Chairman Ajit Pai canceled his appearance at CES because of death threats
Laws that aren't enforced should be repealed.

Selective enforcement is a recipe for tyranny.

Though I personally think that weed should be legal, I'm not going to fault Sessions here. The ball's in Congress's court.
Yes, it is. OSes protect that ability to prevent malicious microcode, too. The update mechanism is published by Intel, too. Section 9.11 (not page 9.11) https://www.intel.com/content/dam/www/public/us/en/documents...
Zuck's mandarin is terrible, and reading 25 books is hardly difficult. Maybe he's signalling that he's getting back into actually doing real work as the CEO? I personally don't care as long as he doesnt have a chance of holding any political office. I don't have any stock in Facebook.
That's because they can amortize the server over a longer time window than a GPU.
I think that's almost but not quite exactly right.

Spectre variant 2 attacks vulnerable indirect jump code patterns that exist in the kernel (or some other process), but doesn't require running the attacker's code.

Spectre variant 1 allows you to infer the contents of memory in the same address space, so that's the one where you'd use eBPF to attack the kernel.

Meltdown (variant 3) if I understand correctly can infer memory contents of other address spaces without relying on any assumptions about the code running in the other address space.

https://security.googleblog.com/2018/01/more-details-about-m...
Script Lab – use JavaScript with Excel
Maybe things changed recently? I installed and configured 3 AP AC Pros in September using only my iPhone.
To me the fine details are incongruent: the grain of the hair sporadically changes direction, patches of skin have different qualities. It looks like a bit of Frankenstein's work.
Remote Control a Mac from an iPhone via Workflow – Six Colors
Ubuntu certainly used to rely on Debian. When did it change?
True story: on soundcloud, I had a private track that I later (months) released on a label. Shortly after that label published the track, soundcloud reached out to me to say that I had illegally-uploaded content. I told them I owned the rights to the song and they confirmed this with the label, but it was still a weird experience.
I like your username.
The concept of free speech has become fertile ground for ideologues and culture warriors. It's been an excellent wedge issue for pulling generally-progressive centrists to the right by appealing to their intellect and penchant for abstract principal.

But what of policy? Free speech doesn't feed the hungry or provide healthcare for the sick or protect the environment.

I suppose there will be plenty of time for those things after we've dealt with censorious college students.
This video of the ending of Star Wars without John Williams' music got a copyright claim from the rightsholder to Williams' score [edited from original post, not actually claimed by Williams himself]. The little bit of music at the beginning is from Gustav Holst and is public domain.

https://www.youtube.com/watch?v=Tj-GZJhfBmI

edit for more context: https://www.wired.com/story/the-star-wars-video-that-baffled...
There's an Ubuntu Kernel Team, and they have a very handy archive:

http://kernel.ubuntu.com/~kernel-ppa/mainline/daily/2018-01-...

They have a 14MB base patch, and then a few small ones.

CHANGES mention KPTI, so it should be good to go.
List properties of PowerShell object
Nteract: Native Desktop Jupyter Notebooks
Uber Co-Founder Travis Kalanick Said to Plan Sale of 29% of Stake
You can build C++ as .NET, absolutely. So far as I know, it can handle everything in the Standard except for setjmp/longjmp. All it takes is compiling with /clr:pure.

What you're referring to is probably C++/CLI, which wasn't removed, but it hasn't really been updated for a while. C++/CLI is a set of language extensions that make it possible to interface with the .NET object model.

If we go feature by feature, the .NET type system and bytecode has:
- unsigned types
- raw (non-GC) data pointers with pointer arithmetic
- raw function pointers (distinct from delegates)
- structs and unions
- dynamic memory allocation on the stack (like alloca)
- vararg functions
Wealthfront | Redwood City, CA | Engineers | Onsite | Visa

At Wealthfront we believe everyone's personal finances can be optimized and automated for a very low fee using high-end technology. To achieve that, we built a software-only approach, which also helped create a new category: robo-advisors. Over the past six years we've paired the expertise of our PhD-clad research team with the exceptional talents of our engineering, product and design teams to deliver sophisticated products and services to our clients that are easy and fun to use. We have loyal clients from every state who trust us with over $9 billion in assets... and we're just getting started.

We've recently closed a $75 million round of funding and are rapidly growing the team. We are hiring across the board, but are specifically looking for DevOps Engineers, iOS Engineers and Android Engineers.

Feel free to check out the job descriptions and apply here: https://jobs.lever.co/wealthfront (please mention Hacker News in application).
Cats can right themselves in about 12 inches.

The problem is they land with legs extended down from floors 1 to about 7 (bad: impact is transmitted up through shoulders and hips), while higher than about floor 7 they spread their legs out and attempt to parachute (better: impact is uniform over entire ventral surface, terminal velocity is lower, mortality rate drops).

Source: am DVM and interned at AMC in Manhattan.
My Story suicide,depression,selfharm
> I'm acutely aware of how much slowing down a few simple syscalls by just a little bit

I'm going to go out on a limb here and say that a NAS isn't slowing things down "just a little bit". It'll be more on the order of a million times slower, for those operations.

It's always nice to keep this popular latency table in mind:
http://norvig.com/21-days.html#answers
> * Coil whine

Damn it Dell, fix this shit.

It existed on my HSW XPS 13 developer edition, and this "non-developer edition" KBL XPS 13 I just purchased.

I can totally sympathize with problems like this that surface, but I have no sympathy for a company that seems to ignore this issue for several generations. My next development laptop will probably not be an XPS, and will probably not be a Dell.
> If you think Apple has fallen in terms of quality

I don't. I've found Apple (hardware) to be reliable and long-lasting. It's the developer-hostile designs where I think they've gone crazy.
What does the mesh gear offers over the combination of an access point and extender? I skimmed the Eero site and wasn't able to see any kind of a white paper. They do look great though.
Doing 14 minutes when you aren't in your optimal energy zone can be worse than zero. When you are fatigued, you create more work by being sloppy or in general doing things which require more work down the line (especially for programmers).
> I suspect that under the current fcc rules you can't sell hardware that isn't locked to its firmware (because if you did users would be able to freeband).

You absolutely can and most companies do not lock their firmware. There are companies that commercially sell routers with DD-WRT and other OSS firmwares by default, like Buffalo. http://www.buffalotech.com/news/dd-wrt-nxt-routers

End users are expected to adhere to FCC rules even if they have the technical ability to violate them.
Related question about spectre and the cross-process(!?) mem read possibility: the attacker "influences the victim to execute the gadget speculatively.", and then the "areful selection of a gadget" (i.e. in the victim process) can be used to read arbitrary victim memory.

How is that possible? I can understand an attacker reading its own memory, but foreign one via a common mapped gadged section... that is just incredible!
I'm also in the 16:9 camp. Side-by-side is so much nicer than having to use a different workspace for something that won't fit next to the term editor is a pain. I've gotten rather good at (in vim) using tags and fuzzy searching, so the 'lost' vertical space doesn't really bother me much anymore.
Codeship Integrates with GitHub Enterprise
1989 California medfly attack
That’s already been done. See here: https://youtu.be/dQw4w9WgXcQ
Funny, support said they weren't effected when I called them after I absently mindedly installed the next macOS 'patch' and thought it had bricked my Mac Pro. This lead to a long conversation with support where they showed me that the indirect jump bug had been fixed, but they never said anything about Spectre...
It should be independent, the Linux x86 microcode code ( https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... and /amd.c) seems to write to MSR (model-specific register) 0x79 on Intel and MSR 0xc0010020 on AMD.
Using a CNN for detecting glaucoma
This patch was released on December 6th, and there haven't been reports of decreased performance from scientific/video editing/etc folks. The worst-case workloads are probably not happening on macOS anyway.
‘worst ever’ CPU bugs affect virtually all computers
TeaVM – Ahead-of-time transpiler of Java bytecode to JavaScript or WebAssembly
Are they still lacking ipv6?
The industry was careful when they wrote the DMCA to make sure it couldn't be used against them. Theoretically our lawmakers should have taken the public interest to heart before passing the bill, but that appears to have been too much work.
Well, yeah. It affects a lot of computers.
It was better. I'm confused how the title says Intel and ARM but the first paragraph says all processors.
How does the Clipper Chip compare to more modern technologies like the Intel Management Engine?
I want to give the support person the benefit of the doubt that they weren't fully informed, but they should not have been making statements like that if they weren't.
If the state laws were written explicitly referencing 'OTC medical use', I would agree.

However, the state laws of Oregon, for instance, specifically use the "recreational" terminology. It is not an invention of the media.

https://www.oregonlegislature.gov/bills_laws/ors/ors475B.htm...
Disclosure: I work on Google Cloud (and helped launch this).

Actually both Keras and raw TF have a check point thing built in (as does Torch). I believe it can be setup to do so every epoch, but unless you're talking about many many GBs of parameters, you can also stream lots of data to GCS in 30s.
That's Spectre variant 2. Variant 1 is only able to read memory in its own address space.
Author here (waves). Have to agree with you on title, it's a bit rough and was unfortunately assigned to me. Thank you so much for reading, all, and for comments!
I am as well - this is something I can link to people who do not understand microarchitectures, so they can understand what these bugs are.
Most repliers are missing the point. I'm not arguing for turning the city into suburbs. Nobody is arguing for this, I'm arguing against turning the suburbs into a city, which is what most of these development fights are about.

Say I like suburbs. I move into a suburb. I expect a suburban life when I do that. My neighbors expect a suburban life. Now developers want to roll in and stack apartment buildings all over the place. If we argue against this, we're apparently terrible NIMBYs, opponents of affordable housing and stooges of the wealthy landed elite.

I'll turn the argument around. If you want to pack yourselves into cities, go move into cities. Go build more dense apartments in the cities. Why are the aesthetic preferences of suburban dwellers invalid and the aesthetic preferences of city dwellers valid?
Then this game is a great outlet for frustration and disappointment...

:thumbs-up:
better link: https://support.apple.com/en-us/HT208394

>"Apple released mitigations for Meltdown in iOS 11.2, macOS 10.13.2, and tvOS 11.2."

I have older hardware with iOS 9.3.5 ( without patch )
> Intel said its chips, which power Macs and devices from other manufacturers, contain the flaw as well as processors based on ARM Holdings architecture, which is used in iOS devices and Android smartphones.

Has it been proven that Meltdown can affect ARM processors, or is this Intel speculation?
Well... https://ukupat.github.io/tabs-or-spaces/
Title of article : "Apple Says All Macs, iPhones and iPads Exposed to Chip Security Flaws"

First paragraph: "Apple Inc. said all Mac computers and iOS devices, like iPhones and iPads, are affected by chip security flaws unearthed this week, but the company stressed there are no known exploits impacting users."
Accepted (apart from the unsubstantiated claim about representing the majority). To quote myself, these perceptions are only based on "anecdotal & biased samples".

The problem is that a lack of accurate & reliable information can be a great incubator of unsubstantiated perceptions. I'm just suggesting that if the Dell team believe the XPS's not to have reliability problems, it's in their interests to come up with tactics to manage perceptions where possible. It's in our interests really, as we all would want a wide range of good developer-friendly laptops available.
Moving to the suburbs is not enough. These fights are often about developers wanting to roll into existing suburban areas and stacking dense housing in them.
Someone on the internet is mean, I have no doubt. I haven't seen a lot name-calling here. Let's stick to HN and let reddit deal with its own drama.
The Kevin Rose Crypto Quiz
Dupe of https://news.ycombinator.com/item?id=16075348

Has 74 points, 34 comments.
Serwer Error: Misunderstanding Trump Voters
Nope, no Intel chip recall after Spectre and Meltdown, CEO says
AutoGravity | Automative FinTech | Irvine, CA | FULL-TIME ONSITE | Senior Web Developer (React)

Posting: https://boards.greenhouse.io/autogravitycorporation/jobs/144...

Who We Are: https://www.autogravity.com/about

What We Offer: Competitive salary, and industry-leading benefits including: paid health insurance for employee and beneficiaries, unlimited discretionary time off, relocation assistance, and $5,000 tuition reimbursement.

Technologies You Will Use: React, Redux, Jest, Node, Webpack, Sass, and Sentry.

What You'll Be Doing:

-- Design and build new features for our Web app to enable delightful user experiences

-- Improve our code quality through writing unit tests, automation and performing code reviews

-- Share technical solutions and product ideas through design review, pair programming, and tech discussions

-- Work seamlessly in an agile environment with product managers and designers to understand end-user requirements, formulate use cases, and implement pragmatic and effective technical solutions
Good question, I did some Googling and couldn't find anything either.

Interestingly, not a single result is returned when searching "Meltdown" in Intel's website. Hopefully Intel will fill us in soon.
> "just not from someone with their best interests at hear"

Oh dear...I really wish your kids have the best parents in the world. I really do, my parents probably believed that too, but unfortunately they were not - surprise!

But I'm really happy that I was born at least two decades too early for that shit. I hope kids can still outsmart their parents today. If not, we've lost.
It can impact them, just not to the same extreme. I believe ARM is only impacted when data is user space to user space.
According to ARM yes, but only on a few architectures: https://developer.arm.com/support/security-update (Meltdown is CVE-2017-5754 and is responsible for Variant 3 and Variant 3a). See also https://github.com/marcan/speculation-bugs/blob/master/READM... which tries to summarize every known attack/platform/mitigation.
What's the inconsistency?