skysight-inc/HackerNews huggingface dataset:
The Turris Omnia [1] is an open-source router which uses a fork of OpenWRT as it's OS, and has auto-update. Kinda pricey, but the hardware is good.

[1] https://omnia.turris.cz/en/
Anyone else think this would make a great movie? Or perhaps a Silicon Valley-esque tv-series centered around the Scene would be fantastic.
Linus's software is installed on all the computers of my house so that preview of .pes files works everywhere. It is not as pretty as commercial software's preview. Does someone have an improved fork ? How commercial software achieve to give volume feeling to their embroidery previews ?
Not new, but as unnecessary as ever.
Especially microcode updates. Microcode is just a giant obscure binary for everyone outside of Intel. If there was a mitigation possible via a microcode update this could have been published months before disclosure without any meaningful risk.
This and ripple, with their non existent scarcity, are pretty much the best indicator that most people buying these coins now have no idea about the fundamentals or protocols behind the coins and are jut jumping in on the speculation. I know speculators have driven bitcoin but at least it was novel, scarce and understood (by many, not all).
In a unitary state (i.e. one without a federal system) you don't have this particular source of ambiguity - the central government passes laws, and they define what's legal [1]. The USA, however, has a federal system; the essence of that system is a separate of powers between Federal and state governments, which means you also have conflicts of power between Federal and state governments over whose law applies. Drug policy is a classic example; so was segregation, for example.

In this case, the act in question is the Controlled Substances Act, which makes a whole host of drug offenses federal crimes. It was ruled constitutional [2] in the early 2000s, in response to a challenge from California pot growers obeying the local medical marijuana laws who were raided by the DEA.

That is supposed to be the mechanism by which to decide these questions; go to the Supreme Court. However, it turns out that even if states don't actively prevent the feds from enforcing drug laws, most of drug enforcement is in fact done by local police. If the SFPD isn't going to arrest you for smoking joints or selling potklava in Dolores Park, what's the federal government going to do? Put DEA agents on patrol on street corners in SF? Which leaves the federal government in the situation of having declared something illegal, but without having anywhere near the resources to enforce those laws - and the states passively encouraging disobedience of those laws.

Welcome, young folk, to the USA's first real-life (if small) constitutional crisis since Watergate!

[1] Leaving aside the conflict between constitutional law and regular law.

[2] Under the Commerce Clause, which I think is a bit of a stretch, but hey, that's the Commerce Clause for ya
You're gonna squeeze all that info into an SSID!?

Why not just keep the SSID the same (more convenient for customers -- "returning" devices would auto-connect) and instead set up a captive portal that redirects to a custom web page that includes all that info?
The video looks really cool, even if it just shows how fast the bloodflow in the brain moves about. I didn't realise it was that quick before, so that was interesting. But their technology paragraph makes no sense:

"Unity takes advantage of the computational power of the graphical processing unit (GPU) thus greatly improving processing speed for real-time analytics and data visualisation."

And so does any other 3d application in the last 40 years. It's why we have GPUs. Unity does nothing special, and in fact doesn't even give you access to the full power of the GPU (like CUDA does).

"Streaming data from local files, the cloud or connected headsets improves memory usage and computational performance."

Streaming data from the internet improves performance? That makes no sense.
Meltdown Exploit PoC
A better analogy would be that they presented specs that showed that the building was supposed to be fire-proof but still insisted on dirverting from the specs and building best practices by cladding it with highly flammable material to improve its heating performance.

Now Intel has his own Grenfel tower.
For vulns related to linux packages you are welcome to try https://tactycal.com
I imagine Linus Torwalds as being always furious, at everything and everyone.

Although the content of the actual email hardly makes him come across as furious. Is it because he used the word shit?
There are three separate attacks.

Site isolation mitigates variant 1 of Spectre, which allows same-process reads.

It doesn't protect against variant 2 of Spectre, which could allow cross-process reads. While this is believed to be much harder to exploit than the first variant, there are several mitigations in development:

- Reduce the reliability of timing gadgets from JS

- Compiler defenses like LLVM's -mretpoline

- Intel's IBRS microcode update

As you mentioned, site isolation also won't help against Meltdown, which allows disclosure of kernel memory: this requires the kernel page table isolation patches.
Just US market capitalization grew up like 50% in just one year. With all those trillions sloshing around ... the cryptos' $300B is just meager 3% of those $10T that US market bubbled up in the 2017. Add the rest of the world ... The money pressure is growing and it tries to find any place to get into, and until that pressure is relieved the bubbling will continue. Ie. like with any bubble, there is no much value in seeing that it is a bubble, the value is in being able to tell when it is going to burst.
If anything, they went further underground, with the masses preferring the ease and availability of torrents.

Personally, torrents fulfill my needs these days, I can't be bothered to Sneakernet, DDC or FXP anymore.
Thanks! I appreciate it.
Interesting.. even us as "technologists" are much more interested in money.

Witness the number of posts here.

I think the original bitcoin post had about 3 responses. Wish I was paying attention that day!
Reading kernel memory is mitigated in the kernel and patches are already being roled out.

Site per process helps against the other two variants which are about reading other process memory and have been demonstrated to be able to extract passwords from firefox browser memory (which has been fixed in the newest version)
FanDuel offering Bitcoin prizes to players
Whenever I see extremely disproportionate volume coming from Bitthumb I'm immediately skeptical it's anything more than a pump and dump cycle. Same thing happened with BCH among others.
> Has worked as designed for almost a decade

"worked as designed" can be said for every thing. Everything works as designed. Yet gets hacked/stolen/cracked/misused. Banks are working as designed. And so is the government. Just that the majority will dislike the design because they have no say in it.

> You can store them yourself, no bank needed

And then you can loose it yourself too. Remove all the safeguards which was built thru decades of learning and allow everyone to shoot themselves and everyone else in the foot.
The Ernst Degner story (2012)
And they say this money is owned by just 10% of us all. I think this is what is driving valuations. People who literally can afford to lose money.
To elaborate on this, the write to the array isn't what's being read here.

array[value_of_kernel_memory_byte] = 1;

This assignment gets rolled back like it's supposed to. It's when reading the array after the rollback that the exploit measures that a read to array[value_of_kernel_memory_byte] is faster than the rest because that index is already in the cache.
An obvious flaw doesn't become less obvious if it has been found. So it might be that some blackhat knew about it before, but there a lot of smart sufficiently-pale-shade-of-gray people out in the world for obvious problems to be found in less than decades. So I don't think it's an obvious problem.

It seems that at least some ARM might be affected by both Spectre and Meltdown.

So far, I have only seen negative meltdown tests for older AMD cores. Is there anything known for Ryzen except for the PR by AMD (and the kernel patch, which might be based on the google project zero information about older AMD cores)?

While meltdown is "easy" to fix by not reading memory if unprivileged to do so, spectre is a lot harder. Even if the caches are made safe, for example by having "speculative" cache lines which will be renamed into the "true" cache when the speculative thread is actually accepted and retired: It's not the only place where there is hidden state. For example, the branch prediction might be affected, and might give a timing signal.
You’ve missed the point a bit which is why you are getting down voted. Much of our non physical world (money, value etc) are abstractions for something else and therefore the abstraction only has value in humanity’s collective imagination. If you try to give a goat farmer in the desert a bit coin he won’t take it as to him it literally has no value as he likely can’t access the internet or work out how to turn it in to something else. If we ALL collectively decided tomorrow that bit coins have no value (or the US dollar even) then it would loose its value. Much of our non physical world only stands up because we all agree it does, enough people change their minds and it all falls down.
This seems like confirmation bias to me. How many bubbles or fads were called by people that evaporated (beanie babies, troll dolls, etc)?
The browser would cache that automatically. And in many cases, you'd probably use a Service Worker to implement your own custom cache and "install" the application locally in the browser, so that is usable offline and only version updates are downloaded in the background.
i find it fascinating how some in a community notoriously anal about 'being precise' want to be less precise, presumably because of some incorrect assumptions about a word.

is it because they think it's a neologism? is it because they associate it with javascript developers, who they look down upon and sneer at?

the word and idea predates javascript. rather amusing. :)
I don't believe the car analogy is good. And neither is the Note one.

In both of those cases the products can cause serious harm without any third party implication. The brakes would just go of or the battery would explode during normal function.

However, in the Intel case there has to be an attacker that actively exploits an issue in design.

To me this would be like making a class action suit against all lock vendors because they can be bypassed with the right set of tools. The fact that this affects everyone (Intel more than others) and that it took 10 years to find grants them some excuse. Also the architecture is not secret as far as I know so anybody could have audited this. They most probably did do so and found nothing until now.

Now, I do not like Intel communication around this and if it comes out that they knew this for years and decided to sit on it then it would be a different story.

Class action lawsuits are useful when there is negligence, or bad intent but in this case what could it possibly solve?
Bad in the old days, IBM used to call this "BAD": Broken As Designed.
> schedule the public WiFi SSID to change daily and broadcast marketing info

I actually like this idea, though I would suggest you broadcast two SSIDs, with one staying the same always (so returning customers could connect to it automatically).
I can understand people arguing for the rule of law. Yes, we have laws, and they should be followed. Breaking them carries the risk of punishment.

What I can't understand is the moral grandstanding, e.g. "What gave him the right?" Are taxicab medallions worth it? I never take it seriously when someone starts talking like this about the marriage between taxis and local governments, like it was some holy industry that didn't deserve to be disrupted.

Imagine how long it would have taken for local governments to "fix" something like that. Can you explain to me what it would take for a city council to (1) identify a problem (and in a timely manner, instead of twenty years of "if it ain't broke don't fix it"), (2) come up with a solution, and (3) somehow prioritize this ahead of all of the other important things they work on?

You are correct, no one handed Travis Kalanick the "right" to change something, but I'm okay with the fact that he took it upon himself.
Just as long as they get the money out before the musical chairs stop.
Yeah, that was kind of my point. Including non-precise words in a legal document is like saying "a wizard did it".
The difference is very simple.

If you buy all ripple tokens in existence, they are useless.
If you buy all facebook stocks in existence, you own facebook.
Better yet, use an IP address to avoid DNS censorship.
H.264 vs. H.265 – Convert H.264 to H.265
Slightly more then 100 Mbit/s Downlink. But this also makes the 300 Mbit/s for Wlan useless. So maybe for some small stuff it is usable. But then again, it is not very cheap either.
> proper way to do this would have been to change the laws first and then make the business second.

Unfortunately, businesses tend to heavily influence the creation of the laws that give them an unfair advantage. Businesses get started, they get big, and then use their money to buy lobbying power. I wouldn’t be surprised if this was true in the taxi industry.

I don’t care for laws which exist to favor industry leaders.
It's not just one 20 minute session. It's the lifetime of care of an average person, or the average cost per person of care for the nation.
If the issue is completely fixed by the latest firmware update, they could be selling chips that are not vulnerable tomorrow.

The question is what's on that firmware update and does it fix the issue completely.

Last I checked, the kernel fixes only check if it's running on an Intel processor (and exclude AMD). They aren't checking if they are running on a certain revision of the chip. That could probably change very quickly if the firmware is indeed the full fix.

Otherwise expect new silicon to arrive in 6-18 months.
> And then you can loose it yourself too.

Admittedly, hardware wallets do a good job of keeping your private keys secure, allowing you to safely transact even on a malware infested PC.
What is "freeband"? Most chips have hardware limitations, so it does not matter what firmware you install. For most chips it is unrealistic that they can eg. use 1 W as output power.
Could you please elaborate more on the point that there's no reason for XRP's existence?
At the height of the dotcom bubble, people were very widely calling it an insane bubble.

I read just about every financial story about it that came out during those ~2.5 years it lasted (the actual bubble was short lived). It was fairly evenly split between two camps, one represented by the bubble pumpers calling it the new economy (or different this time; they had lots of bumper sticker sayings), the other by traditionalists focused on relatively normal valuation metrics. Guess who prevailed. Warren Buffett, as always. Nearly all of the public dotcoms collapsed or were liquidated for pennies on the dollar. Few survived and thrived, Amazon barely made it out alive. Those thousand crypto coins? They will not survive. A few will, and they'll thrive - thrive meaning, they'll be lucky to be worth what they are today, in another ten years.
I guess it doesn't fit the theme but for indie developers there is an equally important roadmap called the marketing roadmap or getting your product out there roadmap which consists of seo, email marketing, side project marketing, blogging, contenting marketing, etc which is even more complex than this and 1000 times more important than any web development you will ever do.
Well yeah, think of it like backups. You wouldn't keep just a single copy of an important document, would you? And certainly not on a cloud service with randomly-enforced ToS, right?

Upload to as many sites as possible, link between them. Keep offline copies if you can.
List of the oldest companies
Or just don't do this stuff at all. Either provide Wlan with Internet uplink and no bullshit (that includes captive portals), or don't do it at all.
Digital Banking is here to kick ass
>I’ve always been curious how much work the average person does per day. It would be a very valuable metric to have for setting expectations - of course we’re all different and listen to yourself, but just to have a ballpark...

I work in sessions of 45 minutes, then I take a 15 minute break. I use MagicWorkCyclce [1] to time this. I usually get 6 blocks of 45 minutes in on a good day. That corresponds to 4.5 hours of "real" work (deep work, focused mode work, whatever). I'm an academic, if that matters.

[1]: http://www.magicworkcycle.com/
did you find that the timings of the work hours and workouts make no difference?

I.e. working out at 7am with workhours from 9-5 are suboptimal but workhours from 4am to 8am with an hour of workout between 8 and 9 gives you a boost for the rest of the day
> Welcome, young folk, to the USA's first real-life (if small) constitutional crisis since Watergate!

Not even close. For one thing, it's no more of a Constitutional crisis than the structurally similar sanctuary city movement, which is considerably older.
Coinye
well, i guess in the same way that javascript or anything else is, when there are sandbox escapes. bugs are a thing.
I think their point is the exploit code would be obvious in open source applications and you could choose not to run them.
Violates the defense in depth precaution.
thank you guys!
$1/year for a billion years isn't worth a billion dollars. It's essentially a perpetuity, which is worth $1 / the prevailing interest rate. If that rate is 5%, you're only worth $20
I remade this great graph using breakdown-notes so you can have all of the graph on one screen and zoom in or out, make alterations for yourself.
You can find it here: https://www.breakdown-notes.com/makemap/load/kamranahmedse
Not specific for forms but have you looked at MobX instead of Redux? I think that is a better fit for most applications and you don't need so much boilerplate and diffrent thinking.
I had multiple MR and CT scans, some EEG - from all these only EEG is kinda "realtimish", isn't it? Do we have any technology in these days that can _map_ surface electrical changes to brain internals (depth data) or anything that can work in true 3d?
Probably with a lot less stress.
It depends. Surely they could not instantly dump all of their "ripple assets" and expect the market to absorb it. But currently the 24-hours trading volume is 6.6 billion USD (https://www.livecoinwatch.com/price/Ripple-XRP). A huge part of that may be wash trading due to some zero-fee exchangers. Nevertheless I am speachless how relatively speaking a lot of money is actually being poured into this right now.
Simple, Private, Fast Microtipping for Adult Material: Fornicoin
Honestly, you probably don't even need the barrier in your example. Getting data[a] into the cache is no information leak if the attacker already knows a. That's why the example in the Spectre paper uses an additional level of indirection.
I'm a dad myself. When my kids are old enough to own their own devices, I will seriously expand our router config. However, monitoring is not my focus. I want to disable social media at night, for example. That would even be good for us adults.
then the concept of copyright is dangerous to society

(could you really abolish copyright without bringing down the rest of IP protections with it?)
I take it you are a big fan of mccarthyism?
JavaScript Weekly Trending Repositories [Dec 30 – Jan 5]
I'm no fan of his, but he has been getting a lot of hate lately. After the signs[1] at his home, I imagine he's a little rattled.

[1] http://www.washingtonexaminer.com/fcc-chairman-ajit-pais-fam...
Why not stream X directly over ssh?
Chuwi announces new product lineups before CES
Online Proctoring: Making Online Recruitment Better and Secure
An audio professional would probably argue that there's a level of creativity required to create and edit such a recording for commercial use, but I'm no expert on the subject so you may be right.
Ruby on Rails.
I bought a Ubiquiti Unifi or whatever their access points is called. It cost me around $200 but it gives me kinda of shit wifi-speeds. I have 250mbit/s and get like 100 over the air.

I have changed settings many times, but it just seems capped for some reason.
The 10 Mind-Blowing Best User Experience Books in 2017
https://github.com/HouzuoGuo/headmore

Another interesting project, that's similar, but for VNC.
By the way, I have one ubiquiti and I'm planning to buy an additional one.

What's the recommend way to set up, does it works fine with the same SSID for all AP or is it better to set different SSIDs?
Doesn't that defeat the purpose of having soft currency ? Hardware wallets sure can be stolen physically right ? Leaving that chuck of currency useless (if not transferred fraudulently)
"But telling groups of marginalized peoples (like women and especially women of color), against whom the societal cards are already very much stacked, that simply 'believing in themselves' is the secret to getting what they want out of life is not only preposterous, it’s disingenuous, it’s poisonous—you could go so far as to call it traitorous. This type of thinking implies that the problem lies within us, the marginalized, the oppressed, within our attitudes, and not the fault of the inherently sexist, racist, and classist society we must struggle to thrive within."

I absolutely abhor this line of reasoning. The solution to the author's problem quite literally DID lie within herself, and the self-actualization was something she was entirely in control of. The article is literally about how her own perception of what it meant to be an engineer prior to learning to code was what was ultimately holding her back, and not any actual external variables. What is even more insane is if you give consideration to the resources/events she explicitly mentions which are set up specifically to encourage women to code, it makes that line of reasoning even more infuriating to me.

EDIT: And on another note: I have worked with exactly 8x more "women of color" than I have with white women, because in India and Pakistan, women are substantially more likely to go into software engineering. I feel like I'm taking crazy pills when I read things like this.
There are also downsides of course too. But I think the reality is that the future will have both crypto currencies and fiat currencies. Both have advantages.
> Well, during the mortgage crisis, very few economists would actually claim it was a bubble.

During the mortgage crisis, basically every notable economist and economic commentator was calling it a bubble; some had been for several years, and some only very late (but still before it popped), but it absolutely is not the case that the concept was rare my stated.

The closest your statement is to truth is that there weren't lots of people accurately predicting the timing of the bubble popping, but that's a different thing than recognizing the bubble.

> For the dot-com bubble it was much the same.

It's true that he dot-com bubble was much the same as the mortgage bubble, but only in that it equally did not match your “no one was calling it a bubble” description.
The article seems to make the case that when lots of people want to move to the same area, prices and density go up. I am unsure why this insight is worthy of the front page of Hacker News. Maybe I am missing something?
Because X over SSH requires a somewhat low latency and high bandwidth. The guy's requirement is unpredictable latency and low bandwidth (like 3 kbps). X is no fun at all over that kind of connection.
Burberry, Victoria’s Secret-how major fashion retailers experiment with chatbots
Cardaap, the New Generation Business Card