skysight-inc/HackerNews huggingface dataset:
Agda and Idris are languages with more "real world" applications that can validate totality and offer proofs.

It's pretty cool because you can essentially ad hoc extend the type system to understand all transitions valid for types, then prove then.

Idris is different from Agda in that it has great introducory literature (the Idris book is just fantastic) and it also has F# style type providers that let you do things like query the AWS API with a given account's creds then extend the type system with a series of descriptive types for all valid operations for every asset.

It means that you can (and I find this really surprising) assert code totality on very real world use cases like code that orchestrates containers, binary parsers, or network protocols.

I spent my Christmas break studying Idris and what really delighted me most was that in many cases systems like that end up being simpler to use (even though their "Verified" constructions often involve simple inductive proofs to the compiler. You don't have to prove everything, but things that are proven are safe to use
The last few art students left in silicon valley (jk)
I actually think you could pretty easily fill 24 hours with talk about policy if you had the funding and willpower to do so. The question is whether a market exists for that, or whether you can create one. I’d love to see any television station present meaningful policy discussions, regardless of political alignment. To me that’s a much more important indicator of quality than “conservative/liberal/whatever.”
I think the whole concept of "live" water are the "friendly" bacteria. So yeah, boiling kills them
The relevant point is that all systems running bash should also be POSIX compliant. So, taking some care to avoid bash-only constructs in a shell script can reap substantial gains in portability at fairly minor cost.
On a material basis, not absurd at all. I mean, air conditioning is pretty damn amazing as is electric power (which was non existant for much of Rockefeller’s life). The Haber process for nitrogen based fertilizer, the list goes on and on.
Because when displayed in a variable width font two single quotes can look very similar to one double quote, that last line is very easy to misread. Here it is in code mode:

if [ "$(grep not_there /dev/null)" = '' ]
Even if so, if a group shouldn't be judged by its worst constituents, then should it also not be judged by the silent majority who do nothing?
I've seen rumors that new bios/uefi versions have a toggle to disable PSP.

So AMD looks like a fair choice if this is true.
You can easily cheat, without bad faith, by being sloppy or careless. You can also cheat in bad faith and call it being sloppy or careless. Breaking rules often has nothing to do with intent.
Raw water, aka spring water or mineral water is safe. In Europe it is bottled straight from deep well, without any processing.

Something fishy here...
What do you mean "no known exploits"? The authors of the paper have an exploit that reads arbitrary system memory from a browser. And even after the meltdown patches, spectre "fixes" we have seen are only partial mitigation, and still potentially allow reading of passwords and third party cookies. But I guess if you want to wait til it's too late...
Does boiling destroy taste?
> That means that if I pay $1000 in tax, or buy bottles of whiskey for $950 and drink them all, I have made the same contribution to the economy.

No, that would be just bad accounting. If you pay $1000 in tax, then there's $1000 less currency. If you consume $1000 in goods, then while there's less of the good, there's likely some profits through the supply chain and anyway the currency goes to the people who supplied the good and exists for them to use again.

But the rest of what you are saying is true. The question about spending is always what do we spend on…
I once drank a bottle of lake water straight from the lake, way out in the wilderness in northern Ontario. No negative effects. I don't remember the water tasting particularly good or bad.
Hmmm, maybe file with art critic Mike Pepi's "Asynchronous! On the sublime administration of the everyday"
http://www.e-flux.com/journal/74/59798/asynchronous-on-the-s...
>You can only verify properties you've thought of, and no-one conceived of this particular 'feature' causing issues like this until now.

I've read for years about supposed insecurities with branch prediction -- it just wasn't shown practically. To say that it wasn't conceived of is a little off.
My younger days included a good bit of LSD ingestion and even I could recognize pseudoscience when I saw it.
> Aside: lots of industries are shift workers, and most low-income people work off of the Mon-Fri 9-5. It's oddly a pretty solved problem but we decided against adopting that for office work in most cases. I bet kids and school don't help things

But I mean, really, if you're obligated to keep a schedule anyway, don't you want to keep one that allows you to be awake during the day and sleep at night, and to generally be available for other commitments? I've done both and I'd take the 9:00-5:00 over the irregular schedule every time. Convenience scheduling a doctor's appointment or job interview doesn't make up for all the inconveniences.
A side channel attack in WebGL similar to Spectre/Meltdown is probably not possible, simply because you don't know when stuff is going to be rendered and how long it takes. You tell the GPU "do this computation" and if it took too long vsync will take 32 ms instead of 16. Maybe you can get a bit more precision with gl.readPixels but I seriously doubt it. I tried to micro benchmark features and changes and I always get too much noise.
I wonder if we'll start seeing more userspace storage drivers because of this.

If anything, for big shops like this one, I wouldn't be surprised if we saw a move away from hosted providers (the "cloud" .. god I still hate it when people use that word), and return to co-located setups.

At least for people who need immediately performance needs, AMD might make a lot of short term sales right now.
Also: do I need to run a producer & consumer (and maybe some intermediary filters) on a stream of data, and want to run them in parallel? Shell pipelines are trivially easy to set up & test.
Interesting, now I wonder why they don't let ME share a core (or parts of it) with the main CPU. That could impact performance a little, which could be detectable, but I mean, it's a "Management Engine", not a "Spying Engine", right?
What do you mean by “no known exploits”? There are several PoCs out, one of which is in JavaScript for meltdown.
This is neat, i think i have a laptop with a 486 somewhere around here so i might try this at some point. The only trouble is that said laptop only has infrared for I/O (not even floppy) :-P. Also i have one with a Pentium although that is a bit faster, obviously.

However i wonder if it would be faster if you went with a Linux From Scratch-like approach and used some lightweight init system and only installed minimal stuff - perhaps replacing the some of the more heavyweight GNU tools with alternatives from suckless [1].

[1] https://core.suckless.org/
Fair enough, and I suppose that strengthens my explanation of the OP's observation, that the differences in quality are a result of different national priorities, not lower means.
Learn Biology without ever forgetting anything (university level, free)
Sbt 1.1.0 release
I usually care about a specific bank company; any of its physical offices will do.
Hmm yeah, it's doing that for me now too. I'm afraid the IPFS node is a bit unstable, I've restarted it and hopefully it'll work better, thanks.

Any other IPFS node will work just as well, such as https://ipfs.io/ipfs/QmQU1bCPsg7VY5puKqH6wZfAv1ZWBteKTCgHRKz....
I can't imagine the liability involved for the vendors selling this stuff.

That being said, a UV sterilizer (available from most camping stores) will destroy most bacteria and viruses and should leave you with all the minerals and (literal) shit that make this water so delicious. I'm not sure how bottling will affect the dissolved oxygen content though.
http://furnituretransfer.com/
I am not criticizing the academics behind Haskell and Scala for “not doing enough”. I am criticizing them for doing counterproductive “work”.

(0) Haskell and Scala are already very complicated, and they are becoming even more complicated at a very fast rate. This will only make life harder when we finally bite the bullet and admit that we need a formal semantics for the mess we have created.

(1) Moreover, this complexity only yields at best marginal increases in the extent to which these languages aid software verification. Effort would be better spent trying to figure out how much verification you can wrangle out of relatively simple type systems like ML's. I have actually tried this, and obtained (IMO) promising results: core types prove some simple things, proper use of modules proves a few more simple things, but most importantly, they make complicated things easier to (formally!) prove by other means.

(2) On more philosophical grounds, the extended community behind typed functional languages draws inspiration from the wrong source. Martin-Löf type theory is doubtlessly a beautiful foundation for mathematics, but it has a fatal flaw for programming purposes: it makes no distinction between values (which are already there, you just use them) and computations (which you need to run to produce values, and might have effects during the process). As a result, a programming language based on Martin-Löf type theory has to be crippled in unacceptable ways (e.g. totality, IOW, “fixing a prior notion of acceptable recursion”) to prevent it from being type-unsound.

(3) There is ample theoretical and practical evidence that no single language can be good for everything, so there will be situations in which we need to compose program fragments written in different languages. Alas, type theory is conspicuously silent about FFIs. Is this perhaps because of a refusal to acknowledge that computation is a prior notion, which types can help organize, but by no means define?
My strategy was to wait a day or two and see if my buddy got sick before I tried it. But, yeah, after seeing the other comment here, boiling probably would have been a good idea!
Not toxic although it does lack minerals which could potentially be an issue over time.
Is that remotely feasible? You're basically suggesting that Intel needs to refund or replace every PC and server CPU they've sold in the last five years.

The fdiv recall cost Intel almost half a billion dollars, and that was for a small subset of processors that most people didn't replace. Intel has a lot of assets, but replacing five years worth of CPUs might actually bankrupt them.
Any tips on what is worth tweaking?
The amount of electrolytes in spring water is so small compared to a peanut, or a raisin, much less a banana that it's relevant.

Unless you're talking about Gatorade or Brawndo, which of course has "what plants crave".

https://www.youtube.com/watch?v=GFD2ggNxR1g
> JavaScript ... is a demonstrated attack vector

OMG, I didn't know that. Thanks.
To be fair to Intel, mitigating this type of issue isn't at all trivial. If it were, it could have been fixed in a microcode update. You can't rush a chip design for something as complicated as x86_64. There are long multi-year development cycles and tons of regression tests.

With this they need to add even more tests before they can start on attacking the issues with the design.
Living on the SW corner of Lake Erie, I have access to the rawest water of all, with it ripening every July-August. For any intetested in the effects raw water can have on your health, I'd be happy to price-match against SmartWater at your local grocer... ;)
The key thing to take into account here is that for every one of those early warnings that turn out to be true there's also a plethora of speculation that never amounts to anything.
I share your concern. Based on my admittedly loose understanding, although the Spectre vulnerability is "more difficult" to exploit, I suspect it's a matter of time before exploits become more common. And the Spectre vulnerability is the one that requires a BIOS/firmware update.

So that's a bit alarming for me since at least one of my several workstations is using a 5+ year old desktop board (an Intel board, ironically) that has been end-of-lifed according to its BIOS downloads support page. Meanwhile, some of the bigger server motherboard vendors (e.g., SuperMicro) are not yet prepared to supply firmware updates for recent motherboards.

Recognizing that the operating system vendors/maintainers are not responsible for our systems' BIOS and hardware, the flippant advice to "talk with your device's vendor" gives me a sinking feeling. (E.g., Microsoft: "Consult with the device manufacturer about the firmware version that has the appropriate update for your CPU.") As a technical person, I am going to find it difficult to bring all of my hardware—especially the older hardware—up to snuff for coping with these vulnerabilities. I fear for people who are less technically inclined.
The entire point of ‘raw water’ is that it’s unfiltered and untreated (no UV) and from a spring. I think you may have missed a few details from the article.
I guess you live in a denser area than I do. If I wanted to go talk to the guys who have my auto loan, for instance, and the closest office is closed, it's a pretty significant difference if I have to go to the next-closest one.
Ignorant question for those who have had to transit the US border (it has been many years for me) - are these device searches now routine? I.e. do they automatically request access to any locked smartphone, etc?
No, it is not significantly better. Contrasted with the months that the likes of Microsoft, Ubuntu, and (going by what Paolo Bonzini has already said on Hacker News) RedHat got, FreeBSD and OpenBSD were in practical terms in the same boat. The difference of a week, when that week is Christmastide, is insignificant when put alongside those.
Reading between the lines, it seems this is a pretty colossal fuckup by Intel; both in terms of the bug but especially how it was handled.
Recover My Files 5.2.1 Crack Full [LATEST] Free Download Here
Cool project, but at some point we have to move past the "Make XXX great again" joke.
> but your professor assures you that implementors have been very careful to ensure any partial execution is properly flushed and rolled back.

And, at the time, your professor was correct, to the extent of what he/she defined as "any partial execution".

But his/her definition of "partial execution" only considered state changes to the programmer visible CPU architecture state (i.e., the user level register set and the flags register). Their definition ignored the cache, because at the time the cache was considered simply a transparent optimization system that did not effect the values of contents of the CPU architectural state.

And in a way, that definition is still valid, even after the knowledge of these exploits. The CPU architectural state (registers/flags), even after executing exploit code, is exactly what it would have been had sequential execution happened. The exploit takes advantage of the fact that you can arrange the right set of code to run just the right way to leave a different state in the _cache_ (i.e., that thing believed to have been merely a transparent optimization).

It turns out now that the belief in the cache being transparent and only providing optimizations was the flaw in the belief system at the time.
Err, no. Distilled water is perfectly safe to drink.
Version 2.0 exposes options for the following on two or more different pages that are not kept in sync and there’s no indication which is followed:

* power status after ac power loss
* SATA ahci mode enabled
* DDR speed
* advanced ram timings
* enables NICs
* cpu overvoltage enabled
* iommu enabled status

And others I’m forgetting.

X399 IOMMU support is completely broken, as well as ASPM. These options must be disabled to even successfully install Windows 10.

The X399 Taichi bios shows me tons of options for hardware/controllers that aren’t even physically present.

These motherboards cannot run RAM at the rates speeds due to the infinity fabric design. Look at the compatibility list AsRock published. They cannot achieve 2666MHz without jumping up to ram rates for 3200MHz, if I recall correctly. That’s because X399 is built as two separate sockets that happen to share a heatspreader and lga connection, and the interconnect operates at the same speed as the ddr bus; it just can’t keep up with tight timings.

After updating to Firmware v2, 4/5 Times the bios says “no connection” when trying to check for online updates (despite the wired connection in both ports plus a 10gbe pcie card), and a full power cycle is needed to try again.

This is the first chipset I’ve seen that won’t let me run a stick of ram at a slower speed (but it let me run other ram at slower speeds, so I’m not sure why) and fails to post if I set my ram to less than the XMP 2 setting manually.

The bios is built for gamers and overclockers. The options to enable OC are “auto” or “manual” and there is no “stock” or “disabled” option.

This wasn’t a platform built for stability. Motherboard manufacturers are treating ThreadRipper as if it were Ryzen, as if we were all gamers and this wasn’t a workstation chipset.

Intel lets you run Core i7 on its server boards. AMD won’t let me use a motherboard sold for Epyc with my ThreadRipper CPU. Nor should they have to.. except my current options are all crap.

My biggest problem of all is that X399 (not just the Taichi) randomly stops recognizing certain PCI-E cards. My PCI-E 10gbe x520-da2 NIC worked ok for a couple of weeks hen suddenly wasn’t seen any more. I thought it was the card and bought a new one. Same problem. I thought it was the os so I installed another. Same problem. I thought it was the bios so I reset it. Same problem. I manually toggled each option pertaining to PCI in the bios and rebooted to test between each one. Same problem.

Took a look on NewEgg. All the x399 boards have 3 star reviews at best, and are filled with similar PCI-E complaints and “worked for a month then stopped working” across all the manufacturers and models. Which isn’t saying much, since there are only a dozen or so, really.
> I don't think anyone major ever disputed that.

Is it that obvious though?
Any good evidence that human brain on the planet scale cluster can't be modelled with DL?
A browser extension which gives different filetypes different icons on GitHub
I'm calling bullshit. TCP has to retransmit lost packets whereas UDP can keep on going without waiting for transmission. Ephemeral data like controller input or past game states can be ignored because that time has passed, while TCP is still trying its best to get the packets there in order and reliably.

Latency is still absolutely an issue. I play games from Japan with my friends in the states and I often have a ping of 140 ms or so. That is latency, and properly implemented games (Rocket League, for example) will deal with it using UDP among other techniques.

Slower paced games can still use TCP though because latency issues are less sensitive.
You need to look at other stuff than performance - relevancy is probably the biggest thing when implementing search. Is it more relevant than what you experienced with ES?
Of course it is. If hardware A is built to a standard S and hardware B claims to fully support that same standard, then issues with A on B are 100% a bug in either A or B.
I would assume that majority of QNX deployments are on ARM these days and also ARM is the only platform supported by complete QNX "ecosystem" as some parts are not available for x86 (which is the only other currently supported platform).

Wikipedia states that supported platforms historically were i386, PowerPC, MIPS, SuperH and ARM. And I would not be too surprised if there was support for Altera Nios-II with MMU in the times when QNX was owned by Harman (As at least the touch screen part of some versions of Harman made Audi MMI is based on NiosII).
Google Maps uses WebGL to render the map, even in the 2D view.
I believe PCID is supposed to help mitigate the performance impact from the KPTI changes.

Both the hardware and kernel have to support PCID
Anyone who played Oregon Trail should know how this could end

(Or anyone who went to school, basically)
Jailer: Database Subsetting and Relational Data Browsing Tool
> it’s a bit surprising Apple doesn’t have a workaround that makes this not crop up.

If the problem is in fact lazy device manufacturers botching the identification data then I'm not sure how a third party could effectively work around the issue.

If I make two devices that report identical ID information there's no practical way for the OS to tell them apart.
I'd consider it my lucky day and auction it off to security researchers.
This is why I use xonsh (http://xon.sh). It lets me use Python as a shell, and I don't have to remember too much awkward syntax.
Business Insider is trying to make this story stick, but this is not a "Silicon Valley" trend. Shameless clickbait.

This stuff is sold in Rainbow Grocery, which has been selling hippie products to Bay Area hippies for decades. While the Venn diagram of techies oftentimes intersects with hippies, they are not the same groups.

On the object level, this stuff is not safe (as others in this thread have mentioned), and I'm sure there will be a lawsuit when someone gets sick from this product. It's not as dangerous as the anti-vaccination madness, but this is still a harmful meme.
> it's not more expensive to use GKE than to roll your own Kubernetes elsewhere.

$13 per month per egress rule, bandwidth costs a factor of 100 more expensive than dedicated hosters, and costs for hardware 10x of what dedicated hosters offer.

I’m not sure what your definition of "more expensive" is, but compared to renting dedicated hardware (e.g., from Hetzner), or colocating, GKE is significantly more expensive.

Of course, if you’re on the scale of Spotify, you can get much better deals – but from what I see on https://cloud.google.com/products/calculator/, it’s not cost-effective.
Only kinda effective. Retpoline on Skylake and later isn't completely reliable as a mitigation for one of the spectre variants, and IBRS is one of the processor features that will supposedly correct that.

You'll still be vulnerable, it'll just add another layer of difficulty to the exploit.
Does anybody know what are the penetration numbers for WebGL and WebGL2?
http://Nebulas.io

Uses something called "nebulas force (NF)" which is a self-evolving blockchain (no hard forks). Created by co-founder of NEO, he started the project in 2016 and went to work on it full time early 2017 after implementing a blockchain at Ant Financial (alibaba).

The testnet is out now and the mainnet is launching by end of Q1.

https://nebulas.io/docs/NebulasTechnicalWhitepaper.pdf

Very interesting project.

https://www.youtube.com/watch?v=bFB1b1hopmc

^ Interview with founder of Nebulas
Yea I hated that too. They put up a graph but with no key! Arg! The article said they updated one host, so I'm assuming the spike is from that one VM that got patched.