skysight-inc/HackerNews huggingface dataset:
I should have clarified: I'm talking about "abusers" here, not those who genuinely need the drug.
IP = suitcase word (it contains any and all sort of meanings you can cram in).
If the activity is wholly legal then there isn't a problem looking for a solution: existing cash handling services will gladly do business with you.

Taking in large sums of cash and swapping it over for some cryptocurrency or another is bound to attract at least a few people who have need to launder cash. Thus, the service is likely to run afoul of Know Your Customer regulations etc etc.

As others have pointed out elsewhere in the comments, we ought, in my opinion, fully legalise and regulate the industry.
If something is a HttpOnly cookie, and I get XSS, why can't I just hit your API as much as I like anyway?
Perhaps proving that you're running on the same hardware as Coinbase is most easily done by statistical attacks, which requires collecting data over time.
See https://news.ycombinator.com/item?id=16074531 .
If only he had come up with a catchy name and a logo, we would have listened.
>> Let us know by filing a ticket ...

Last few tickets I filed with Coinbase took days/weeks/never to get a response.
Others seems to have a similar experience:
https://www.reddit.com/r/Bitcoin/comments/735yqe/how_do_you_...

>> However, there are a few actions you should take right now to limit your exposure ...

None of the actions suggested includes the action of keeping cryptocurrency in user's own deterministic wallet to avoid any exposure from Coinbase side.
Basically buying new Intel processor to replace old will yield 5-60% performance in I/O-heavy workloads even without any other changes but fixed processor bug, unless you're ready to tweak with your OS settings and fine with potential vulnerability. With proper marketing they can make huge profits from this situation. Sure, you can buy AMD, but Intel is still faster for many benchmarks. Given that they knew about bug for 7 months, I think that soon new processors will be without Meltdown bug.
I doubt the people working on this knew about the embargo. Most people didn't.
This article is garbage. It's a typical case of a complete outsider trying to analyze a scene he doesn't understand or know anything about based on "research", and trying to write for an audience that also doesn't understand the tech or scene or know anything about it.

There's not some "guy" responsible for online piracy, and there wasn't a "dawn". If Napster hadn't existed something else would have. Piracy existed outside of Napster. Napster did not give birth to piracy. Piracy has been huge since removable storage was invented, whether it was data cassettes or floppy disks. Piracy was in demand and Napster was the answer, not the inspiration.

Considering the source, The New Yorker, none of this comes as a surprise.
disable high resolution clocks for non-sudo programs?
You don't need to have Java enabled in your browser.
If you think Uber is uniquely evil, you are too naive my friend.

Again, i'm not trying to say Uber was ethical, so don't try to tell me I'm some Uber fanboy.

I'm just pointing out among all evil corporations Uber was the one to fall and there are plenty of disgusting reasons behind it which most people who criticize Uber have no idea of. And I'm talking about this point. The world thinks they've won because they've punished Uber, but what they've done is just play into hidden politics that made some shady people behind the scenes more money.
There are a lot of practical challenges here because this country was already built for cars as the universal form of transport.
They (NVidia) don't have any recompense beyond withdrawing support. The ELUA is on the (free) drivers, so a court would find no monetary damages. (IANAL etc)
There's a twitter thread where some cryptographers speculate on the possibility. The upshot is that it doesn't seem like it will be possible:

https://twitter.com/bascule/status/948725249842937857
it has a higher likely-hood of being secure because all of the code is fully audit-able

If that's true, there should be a way that you can compare the amount of security vulnerabilities in iOS vs Android and the time it takes to get it patched and get the pst h distributed.

It should also be possible to have the same metric in Windows vs Linux, the various open source databases vs the closed source databases etc.

On the other hand there is an existence proof that closed source software doesn't prevent smart people from finding security vulnerabilities in closed source software - the number of vulnerabilities that researchers have found in iOS.

But why is everyone acting as if reading assembly code is some sort of black magic that only a few anointed people can do?

And if open source, easily readable code was such a panacea, the WordPress vulnerability of the week wouldnt exist.
Exactly. Worse, it cedes any appearance of a moral high ground, and justifies retaliatory violence as self defense.
If you're using DQN or pretty much anything in DRL, you don't have any guarantees about convergence in the first place, and using a RNN does give you the history summary you need (at least up to the minimum error achievable with that fixed-length summary, not that that is any more likely to converge than the overall DRL algo is).
Alright then, when do we see some Netgear R6220 love?
> If the state laws were written explicitly referencing 'OTC medical use', I would agree.

There would make it a much easier argument, sure.

> However, the state laws of Oregon, for instance, specifically use the "recreational" terminology.

Other states, like California, with general legalization do not.

> It is not an invention of the media.

The use of it for all legalization regimes that aren't predicated on a physicians recommendation is, though.
This is awesome, I've always wanted something like this. Zoom is the killer feature.
/offtopic

> I'm thinking particularly of 4'33".

I read that using Apple's Text to Speech (macOS High Sierra) like:

> I'm thinking particularly of 4 feet 33 inches.

LOL Apple. You haven't heard of Classical Music yet, have you?
> Kalanick, who owns 10 percent of the company

The planned sale is of 29% of his stake ie 3% of Uber. I guess 3% doesn't have the same flourish.
Those who trust Amazon with all of their secrets don't like to be told that they shouldn't be doing it.
No worries. If we were talking about Lambda I could air grievances there too - unpredictable cold start latency, quarterly major outages, random periods of increased latency w/ no visibility as to why, etc. ;) (unless things've changed a lot in the last 6 months)
From the official statement: Over the past year we explored several related projects, and we’ve now made the tough decision to eliminate one new project in favor of greater focus on our core business.
What Can You Expect Out of a Professional ASP.NET Development Company?
Somehow I doubt Sony's going to be updating the BIOS for this VAIO laptop I'm typing this on, given that the last update was in 2012... and they don't even make computers anymore.
I find it cool that he sees Steve Yegge's as a great blog post even though it's hyping Kotlin and critical of Clojure.
>They can a handle a bit of criticism from a bunch of nerds on HN.

What a reductive and shortsighted evaluation of the situation.

Can they handle the loss of faith from big companies? Can they handle the loss of faith from the entire tech community? Seems to me that AMD et al have now got the perfect opportunity to erode intels market share and build up a large market base amongst cloud providers etc (not to mention security minded users) that require technology that is both resistant to meltdown and not underperforming hardware.

It's silly to act like this is a storm in a teacup because the HN community is up in arms over it. Monopolies fall, and the loss of trust and key clients tends to precipitate that fall.

>But if it needs help drafting a better PR release, someone is welcome to point them to HN's comments section.

Their PR was shocking, but on the order of things people are upset about over this incident, this is literally at the bottom.
> The JS thing is a huge deal so someone might get their online banking credentials stolen and then account emptied. In which case, how helpful are the banks in helping to recover the money?

Completely. These are banks we're talking about, not bitcoin exchanges.
This is an interesting perspective. It reminds me of waking up one day and watching a video of boston dynamics' atlas sticking a backflip. Yes, these things have been in development for decades, but there's something very startling about when you suddenly realize how much they've matured.
It was a failure because the thermal characteristics made it extremely difficult to expand. They’re not going to market something that is essentially an Apple-branded hackintosh devoid of custom components.
They had $4.5 billion in profit last quarter. If they want help, they can pay for it.
Then maybe you should be lobbying your idiot Senator to introduce a federal legalization bill, rather than complaining about laws that are on the books being enforced.

The problem with laws that "aren't enforced" is that they often do wind up being enforced. Selectively. Against anyone the government doesn't like for whatever reason.
Actually, the world is all run by 3 dogs making decisions in Japan. Trust me, Uber is just their pawn. Nothing else matters, every other ethical fault is meaningless.

You're going to have to actually provide some examples and/or evidence before I believe most companies do all of this regularly. I'd argue most terrible ethical actions of companies are out in the open and more socially accepted.

> "The world thinks they've won because they've punished Uber, but what they've done is just play into hidden politics that made some shady people behind the scenes more money."

This is one small thing, but I'll take it over nothing.

I'm not blind to the larger power struggle of the world all mostly hidden from view. But, if this didn't happen, a different group of shady people wins on the other side of the hidden politics. Last I checked there aren't big differences in the shady hidden political system's parties.
Ripple is for people that prefer debt based money over equity based money and lack the imagination to understand that a ledger entry is money. For those in debt that enjoy being a debt slave, buy Ripple. For those that want to end debt slavery buy pretty much anything else. Bitcoin would go a long way, but Monero is great as are many of the others.
Credit Score Request for Startups
Wash trading does wonders for exchange numbers.
That's like saying that grocery stores are broken because you can just print out bar codes and use them at the self-checkout. Stores have enough security for their needs and balance it with customer convenience. I don't think even Google would claim that their system is perfect, only that it's currently good enough to stave off ravenous lawyers and keep them from losing safe harbor.
Philosophy of Systems and Synthetic Biology
Neurovis: Visualizing brain signals in 3D in real-time
Let's look at this from the standpoint of Pascal's Wager.

If eating too much sugar is bad for you and has negative consequences and you choose to cut back, you have significant gains in living a healthy lifestyle.

If sugar is not bad for you and you cut back, you've given up on a few pleasures, but in the grand scheme of things, you've lost nothing.

So, why not cut back and eat as if sugar is bad for you? I think there is enough credible evidence to take a chance and cut back.

No, I don't feel the same way about non-gmo, organic, grass fed, gluten free food, grown and cultivated by virgin nuns. I think the "natural food" cruft is just a bunch of marketing.
sigh That's what I get for assuming humanity is capable of being sensible about obvious things.
We don't really know when it was first found, iirc, only when it was publicized.
Known not to be the case if they actually worked in real life, that is. We're still waiting for a solid demonstration of quantum supremacy to prove that though.
Manuskript: Open Source Alternative to Scrivener
Very much not necessary. You clearly haven't played the paperclips game.
macOS Meltdown Patch in 10.13.2 was also in El Capitan & Sierra Security Updates
Apple just updated About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan[0] with the following additional information:

> Kernel

> Available for: macOS High Sierra 10.13.1, macOS Sierra 10.12.6, OS X El Capitan 10.11.6

> Impact: An application may be able to read kernel memory

> Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

> CVE-2017-5754: Jann Horn of Google Project Zero, Werner Haas and Thomas Prescher of Cyberus Technology GmbH, and Daniel Gruss, Moritz Lipp, Stefan Mangard and Michael Schwarz from Graz University of Technology

> Entry added January 4, 2018

[0] https://support.apple.com/en-us/HT208331
What about meltdown?
Important [info re 2018-01-03] Windows security updates […] and [A-V] software
Possibly off topic, but is this a bad time to use any software that knows your cryptocurrency private keys. Such as wallet software?
What language is "Scandinavian"? Also, perhaps the intention was that "Emacsen" was the literal name of a version of the emacs family of editors, of which GNU Emacs is only one (XEmacs, for example, being another one).
From my understanding there are a couple things that probably make this a non-issue:

1) Worst case scenario, it only allow you to read the memory of systems running validator nodes. There aren't very many of these (tens of thousands perhaps) and they generally don't store particularly valuable secrets. A small number of them may store private keys to Eth accounts with a small amount of Eth, but that's not typical operating procedure.

2) The EVM doesn't have any internal mechanism for measuring time (beyond existing blocks), so any timing attack within the EVM would require some very clever way of measuring time.
well when the account is emptied, the money will be going places. Seems like a similar scenario to someone stealing your credit card.
Grossing is the only list that is relevant to anything. The other lists don't measure how much money an app is making.
IMO that actually would be a legitimate case of copyright infringement (not that I'm a proponent of it) - I'm surprised you were able to get it put back.
For regular consumers, the FDIC insures up to $250k IIRC.
I have an older Dell laptop with a 4K touch screen running Fedora 27. The touch screen works very well with Gnome and Chrome. So Linux users can get the same benefit that Windows users get.
The Rigetti Quantum Processor
Is there a way to specify active hours or time zone? Seems like there are no notifications during my day, and a lot of them in the dead of the night. I am in India (UTC+0530).
Linux Mint 19 Release Date and Codename Has Been Announced
I think I see where you are coming from and had, I think, a similar feeling.

This class of attack sits in that “uncanny valley” of:

1) possibly easy to spot when looked for in the right way [edit: to use the QC analogy: search for classical algorithms which are easily broken]

2) totally systemic across almost all currently deployed technology

is that what you mean?
I am baffled. What does quantum computing have to do with the topic of this thread - Meltdown/Spectre attack?

Please provide specific details as others have said - this comment just sounds like you just had something vaguely related to security that you wanted to mention.
Doesn't (compiled) java run slower than c++ though?
Google: CPU patches cause ‘negligible impact on performance with new technique
The problem with that is you'll essentially re-download the entire JVM (and libraries) on each page load. If you don't want to use a Java applet, you would need to reimplement GC, JNI, and so on. Java didn't work on the web for a reason.
Selecting a Cloud Provider
For those that don't get the joke: https://gimletmedia.com/episode/106-is-that-you-kd/
Casteism = Racism + Slavery

https://www.petition2congress.com/ctas/anti-caste-discrimina...
This is a very bad example. USSR had "civil law" system, which, unlike "common law" in the US does not depend on the interpretation. "Civil law" is direct and is not up for interpretation by judges. So, naturally, criminal code under Gorbachev has been very different from Stalin's (as well as civil code and the constitution). For example, the article 58, counter-revolutionary activity, which has been used to send millions to GULAG under Stalin, has been removed in 1960s.
Specter and Meltdown have nothing to do with cryptography
Tip: scroll to the bottom of the article and click play on the embedded video so you can listen to the song composed with the synthesized Otama while reading the article.

Also, for those wondering what the heck an Otama is, it's a toy music synthesizer:

https://en.wikipedia.org/wiki/Otamatone
It is an area ripe for disruption, but probably not in the way you thought of.

We already know that we need to do more and better controlled burns to manage the fuel sources. However the current funding situation more or less forces the Forest Service to spend most of its funding on active fire fighting instead of controlled burns (ie, they just need more money).

See: https://massivesci.com/articles/wildfire-prevention-californ...
The linked intel erata pdf file is 404'ing, but I think this [0] matches if you are curious about this line:

> Note that some errata like AI65, AI79, AI43, AI39, AI90, AI99 scare the hell out of us.

[0]: http://download.intel.com/design/processor/specupdt/313279.p...
Govt will make a "low level" UIDAI employee as responsible and fire him
Yes and no. Was it operating in a gray area, yes.

However, that gray area wasn't the equivalent of dumping toxic waste into a river to build some product. The gray area was around how taxis were regulated in markets.

As a frequent Uber/Lyft/Taxi user in NYC I can say that the experience for the consumer has been fantastic. I never want to use a taxi again for many reasons.

1. There's very little recourse for lost items
2. You can't get one on-demand (now you can with apps but not before)
3. There's no recourse for having a bad driver or ensuring a good pleasant ride

So while it operated in the gray it was around archaic laws, it wasn't like it was destroying the environment.
very creative, looking forward to giving it a try.
Yes that's what I was saying:

>other than the flaw that leaks information,

But that flaw is pretty hard or impossible to detect.
You need to think bigger; Oil is an economic weapon. Flood the market with oil and a few key countries lose their cash cow.
Facebook beats YouTube a& TV as best place to launch new ad campaign in survey
Binance: the fastest profitable unicorn in history?
Insurance companies usually try to reduce/manage risk.

Does the FDIC have security / computer / process requirements for the banks which they insure against hacks?
The value has already been cut in half from the peak raise, however him selling shares isn't a bad outlook for company.

He's no longer CEO, part of the deal is he won't be chairman, he will be for all intents and purposes not involved with the business and at arms length so why not cash out $1B dollars and go live your life instead of stewing waiting for something to happen.

Is there more value to be created? Perhaps and very likely. But I think Travis just wants to close this chapter as quickly as possible and move on.

Certainly to have $1-2B in the bank changes your life completely and he will go figure out what all of this means for him now.
You are arguing that since to the me that is now, there's no way of knowing if I am a restarted perfect clone of me, or a resumed me that woke up from a nap; dying and falling asleep are the same thing.

That is crazy talk.

I understand the reasoning that leads you there. It's still crazy talk.
This is absolutely key. And likewise, don't feel like the time spent working (especially after hours) is any way to judge your effort. There's little point working each night until 2am if you're operating at 10% productivity. For many people, you'd likely get more done in 30-60 minutes before breakfast while you're fresh.
Please cite the original post: https://support.google.com/faqs/answer/7625886

Verge article literally says nothing.
> Only run Javascript on domains you really need and trust, and even then the minimum amount required for the site to function.

This is so inconvenient that practically no one is going to do it. I used to use NoScript but found I was just constantly clicking "temporarily allow."
Xen Project Spectre/Meltdown FAQ
> gray area

It's not gray; it was black and white. Companies need to follow the law.

> archaic laws

The laws Uber is accused of violating, including their attempts to deceive law enforcement, are not archaic.
Everyone can absolutely cash out at once from a stock. In fact, in many ways, companies would love that to happen. If a totally believable story hit the market tomorrow that the government will prosecute anyone owning apple stock, the stock might tend to be worth 0 because of it, but apple as a company can re-buy all of them for a very cheap price, and then it would increase its revenue enormously.

If bitcoin dropped too much, the network effect could fade to a point it will never be worth mining it again, or used again and some other coin can overtake its role. Much like myspace died after it lost its network effect.

Its completely different. The stock will not go to 0 because 1 cent apple stock would be a bargain.
Federal Reserve Regulation E covers bank account fraud. See page 13 of this PDF: https://www.federalreserve.gov/boarddocs/supmanual/cch/efta....

Basically your fraud protection involves your responsibility to notify the bank, and the bank's responsibility to refund the money if you notified them in time. Check your statement or balance at least once every 60 days and report fraud immediately, and you can't lose more than $500.

Fraud and theft are not covered by FDIC insurance. FDIC insurance protects your balance, up to a limit, if the bank fails or if there is a run on the bank.
And roll them back? It can, but it doesn't for performance reasons. What the performance impact would be is unknown but this requires a silicon change so unless you work at Intel you'll probably never know.
If it's possible to get an eventual legal judgement against them, perhaps instead of paying x-billion dollars in fines, maybe they should be forced to make their future work open source.
Microsoft's title was too long for Hacker News' submission interface.

More information:

* https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLp...

* https://support.microsoft.com/en-gb/help/4072698/windows-ser...

* https://support.microsoft.com/en-gb/help/4056892/windows-10-...
Internet Users in China Expect to Be Tracked. Now, They Want Privacy
FDIC insurance doesn't cover theft or fraud. It covers your balance (up to a limit) if the bank fails. There are separate regulations for fraud.
You may like my side project.

https://www.techtldr.com/posts/2018/summary-for-2018-01-03/

One sentence summary, keywords and statistics for best HN posts with score greater than 50, aggregated daily.

The theme does not look like HN, so thought you might like that.
> Exactly what happened to Steve Jobs.

Jobs wasn't fired for serially violating the law, risking his company's survival, damaging its reputation (EDIT: and mistreating everyone from female employees to rape victims).
I might be super confused about versions, but security update 2017-002 Sierra claims to include the patch according to this page: https://support.apple.com/en-us/HT208331
How long has Apple warned users that 32 bit software wasn't going to be supported?

For context, the only phones that are not being supported by the latest patch are iPhones introduced before 2013.