skysight-inc/HackerNews huggingface dataset:
IM won't replace e-mail due to two important things you seem to be neglecting (for a long time :) ). They are:

* human psychology and ways of working

* lack of features on IM (and this problem is bigger than implementing crypto in e-mail).

_

Let me describe them more, starting with humans:

* we love to separate things in our minds, like work/home linkedin/facebook profiles that will never merge, no matter how much money fb will pour into fbworks or others.

* we assign e-mail, an aspect of 'longer asynchronous communication'. We desire this 'asynchronous' aspect, allowing replying us with a delay. We demand that a separate (sic!) tool with such characteristic (and publicly agreed typical use) exists

* we need communication tool for longer (like this or yours post) exchanges, where MULTIPLE people can participate. We need to able to put into one message 10..20 minutes of work. And no, we will not be publishing and exchaning academic papers (read attachments/separate documents) for such discussion to happen.

* it can't be tied to instant/short comm tool.

_______

Features:

* we need (must) to have a searchable archive of this communication tool, instantly available, surviving device changes (telegram and signal are out), and multiple years to store

* this tool must be connected to publicly available namescheme of internet: domain names - no IM are, they create they own space. This is ultra crucial: I must be able to send and receive information to a participant who I know only a domain. Like for examples yours: youagain@latacora.com

* I need to be able to talk with multiple people, knowing who they are (domains), and @Immuppet1980 or @894984320123 is not, while tptacek@latacora.com is

* we need to to have multiple addresses all being accessed with relatively small number of clients (read 2). Welcome to the IM hell, when if you're 40 and have friends from around world you need to ahve: signal, telegram, fb, whatsap, sms, ghangout, alo, and I'm not even started with asian tools!
This sucks.

_

So no, while I share your despise to current crypto-email state, the proper way is to try to secure e-mail, not to get rid of it. Incrementally, getting rid, one by one all bad things of it. There is no bing bang approach.
How do you start it though?
LATEST ATM/Online banking scam
It's not "per gram", it's an dual function dial, used for both time and weight. If the lower dial is switched to defrost mode (2nd position) then the upper dial is switched to weight input. There is no scale inside.
It starts automatically a few seconds after entering a time.
The label means "time or grams", where "grams" only applies for defrosting.

Defrosting x grams typically takes y seconds, which is just a table lookup.

As defrosting most typically involves leftovers (rather than pre-packaged meals or ingredients), you will probably only know their weight, not how long it will take to defrost off the top of your head.
I did say commercial failure. Good will doesn't put food on the table.
could we actually take a snapshot of npm’s top used but relatively inert libraries every 6 months or so and freeze them? (call it UserlandJS 2018a, 2018b, etc) and then have a separate dependency manager that only downloads those frozen libraries we include. Userland Package Manager or something. this would approach a stdlib without much effort and we would have more of a chance to catch up on malicious security stuff since there are commonly agreed upon frozen versions that everyone can pore over.

im a total noob at security, please attack/modify this idea if it has any value?
The problem is that this forces you to make a confusing decision right at the start. You almost never know what temperature to heat something to -- you just want to put it in the oven for 30 seconds, see if it's good enough, and then repeat.
Right, so to stick a label on it: the exploit is novel, the vulnerability is not.

Why does that matter? Because people seem to imply intel isn't to blame here; that since the attacks were unforeseen, it's essentially just bad luck. But that's not the case: the risky bits of architecture were known. It's like finding a memory corruption vulnerability and then deciding not to fix it since you don't also know of an exploit - that's just being careless.

Furthermore; finding holes like this isn't some divine act; although there is luck and skill involved there's no question that others can do so too. Even if an attack were completely new, you have to ask yourself how hard it was to find. Does a supplier have any responsibility to provide secure things? Then they should be looking for these kinds of holes. Obviously to a novice any hack like this looks almost magical - but there's a risk that by interpreting any novel attack as not-their-fault that the vulnerable supplier never bothers trying to make anything secure.

Intel was being careless. They should definitely have known this was exploitable even without knowing how to exploit it. And it's at least conceivable that they could have found this or an exploit like this if they had tried.
Do you really think that it's reasonable to require users to read user manual in order to use a _microwave_?
The author is walking on thin ice by suggesting that sexual dimorphism has a significant effect on cognitive abilities. For her own safety, I hope she doesn’t live in San Francisco.
Slamming out apps I won’t use.
Vouched for your comment, because human connection - even in chat form - seems to help me. I have also found that as a "computer person" who has to spend a lot of time in front f a screen, I felt far more connected in the 90s IRC world when I was actively engaging with other frontier folk in the field.

After a 10-year hiatus, I rediscovered that IRC/Discord is still where it's at - and for some communities Slack (with its own set of problems).

When I am unable to have facetime, another mind online can anchor me offline.
On linux:

[ctrl + shift + u] then write "2014" and press [enter]
Deleting insidious social media accounts (Facebook for example) half a decade ago when it became clear which way the wind was blowing.

I seriously doubt I would be as happy, or even alive, it I hadn't.
Yeah, I have a gazillion buttons on my microwave, but the only button I really use is the Start/add 30 sec button.

If I want to adjust power I can adjust from 150 to 600, and then there's a "Jet" function, but I have no idea what that is. More than 600? 750 maybe? Who knows.
Game development: Physics cheats
I think the key thing that makes my microwave easier to use is that it has a big dial to choose the function. No clicking through menus, you just turn the dial to the function you want, then the second dial to adjust the settings, or press start to start and add time.
> He said that society increasingly sees groups instead of individuals, to the extent that group rights may supersede individual rights in all sorts of contexts, including politicised work environments. Because contemporary moral codes delineate women as vulnerable or marginalised, we stop seeing them as individuals with unique talents and idiosyncrasies, but as representatives of a victimised class. The reverse is true of men. Because women are now a victimised class, men are increasingly seen as victimisers, irrespective of their individual attributes or actions.

> The second factor, he thought, was an attachment to an outdated, blank slate view of human nature. He says that many people still insist on seeing the human brain as predominantly moulded by culture, despite scientific evidence to the contrary. There tends to be a hesitancy towards attributing any differences between people to any cause that is biological in origin. This hesitancy has been around for decades, and appears like it will not be alleviated anytime soon.

I agree with the first paragraph here, but not the second. I really believe that culture plays more of a part than most people think. Cultural differences would explain the higher wages among Asian Americans and Jews, this despite the historic racism that both of those groups have experienced. Both groups are minorities, yet on average still exceed in our society more than others.
Where the article seems to go wrong is with the very idea that this is a microwave. It's not. It's a combination of microwave and grill hence the hinging of the door not matching a typical microwave.
Acing a product manager interview
But why did you get a new CPU if you don't need horsepower? Not saying this is you, but I don't understand people that have to have the fastest processor but then rationalize away these losses in power with "I don't use my CPU much anyway."
Hence the pseudonym and the quote saying "If he didn’t get the message that the women in science movement wasn’t interested in dialogue and is glad to destroy anyone who questioned it then he must be [on the spectrum]. The only reason why it was him rather than me winding up that [kind of] situation is that I realized what was happening well enough to keep my mouth shut at work and to also turn down an offer from Google, since I knew that they [are] one of the worst offenders, if not the worst."
I think a small improvement to the design would be to use words (COOK TIME / DEFROST GRAMS), with the "DEFROST GRAMS" text colored to match the defrost option on the bottom (which should also use the word, "DEFROST"). This would let you figure out what the dial does without having to think as much about it.

You could also change the screen backlight color in DEFROST mode to reinforce the mode change.
(I did leave out some bits that made it more complicated than I indicated.) Also, this was years ago; I know PG has improved its FTS a lot since then. ES is just a useful tool. If you can express your problem in relational terms then a RDBMS is almost always the right choice.

By the way, I am a huge fan of PG and relational databases in general; PG, especially, is a great database, and the first tool I reach for when it comes to data storage. However, we had other requirements (aside from the complexity I left out) to do with versioning and so forth that swung in favour of ES. Ultimately the problem with FTS in RDBMS, for me, boils down to doing FTS across disparate -- let's call them 'documents' -- stored across multiple tables. Basically you have to use materialised views (with manual refreshing) or complex join mechanics that affect performance. Perhaps PG 10 has improved in this area also?
Ease in on TLS. Gentle Intro
Why bother with Cancel when you can just open the door?

I prefer 0-9 buttons, and lots of memories, mine has 3.
DOES DONALD TRUMP NEEDS MENTAL SCRUTINY?
Thanks! I replied to the OP; but weighing, although critical to our needs, was a small part of a larger problem space we had to solve. I hate introducing new technology unless it's strictly required, but we ran into limitations that forced us to down the road of using ES.
I don't understand the "You are Not the User" mantra. In the past I've worked in teams where we were actively using the product we were developing. Dogfooding is a pretty established practice these days. For most purposes, I was The User - the user finding bugs, performance problems, etc. - but not user interface problems. For the UI I was Not The User. The Users for UI were these hypothetical beings only UI experts could came up with.
> What if "emacs" was a smear in Portuguese, or "vim" was an unspeakable slur in India?

You can even get this kind of problem without involving a different language, because words can have different meaning in different fields.

There is a (probably) urban legend about a mathematics grad student working in algebraic geometry returning from a conference, who finds he is sharing the security line at the airport with another conference attendee and they start chatting about algebraic geometry, talking about "blowing up points on a plane". It does not go over well with the non-mathematicians in line or with the TSA agents.

Efim Zelmanov, a noted algebraist, tells of being stopped by the KGB on the way to a conference and being questioned at length because he had books with him about "free groups" and "radicals".
That's a noble goal albeit completely unattainable in practice.
I am in NY, can you send me your contact info?
>Is there another communication system that is decentralized (...), and is also widely used?

XMPP, maybe?
That all sounds about right, except for the generation part (see below) which is but a minor factor anyway.

Indefinite solar-powered flight is understandably not a goal of Pipistrel for this craft; it will be interesting once it gets to the point where it’s a more commercially feasible design goal.

I love how you rounded up to 1kW/m² to get a nice round number, then multiplied by 13.9!

It’s worth noting on the propeller generation point that it’s going to be more efficient not to use it if you’re trying to maximise range: it will diminish your glide ratio; it’s mostly for when you actively want to go down, and might as well retrieve and store most of the lost kinetic energy. If the Trainer gets 17:1, I’d expect the Electro would get roughly that 17:1 if merely idling, but lower if regenerating; I don’t care to speculate on the numbers—I’m not a pilot or an electric car expert and it’ll take me too long to calculate the actual energy rates involved. But physics more or less decrees that it can’t regenerate more power than it will take to regain the additional lost altitude. (I say only “more or less” because of things like gravity assist manoeuvres, which are fascinating but not applicable to craft like this.)

I was rather sloppy in the way I brought the regeneration up in my earlier comment. It was true, but not relevant because of this last paragraph. I didn’t think it through when I mentioned it at first.
> Did you read the article?

I believe not, or given the length of the thing and current attention span trends, GP skimmed over it (!= genuinely read), because the following is a direct quote from TFA:

> Get a therapist

Also,

> You aren't qualified to condemn every "lazy" person on the planet, so quit it with the victim-blaming.

The essence of the column is precisely the opposite. The columnist directly says that the person should not blame herself like she does and that she shouldn't call herself lazy.
This is almost a good design, but there's a potentially dangerous flaw. Although it's not obvious in the picture, the dials have skeuomorphic fake machining marks. These marks can make reflected light look like lines radiating from the center. And the indicator mark is only a shallow depression, which is low contrast under some lighting conditions. The reflections on the fake machining marks can camouflage the indicator mark and make it hard to see. If you mostly use the microwave on full power, that's what you'll expect to see, so it's easy to miss it if the power setting is actually lower. This could result in food being heated less than you expect. It might be warmed instead of cooked, resulting in fast bacteria growth.

This can easily be fixed by coloring the indicator mark with a black permanent marker.
There are two components: the branch prediction needs to be trained (to get it to speculatively execute the right instructions on context switch to the victim process) and precise timing needs to be available (to exfiltrate data using differences in what got cached). Without executing code, it's difficult to see how the two components could be triggered.

Loading complex file formats is structurally similar to interpreting code; the output of the interpretation is some data structure, rather than some side effect, but otherwise it's very similar. There may be some loaders that are controllable and configurable enough to be programmed by data - perhaps something in the video decoding space that isn't offloaded to dedicated hardware or GPU - but I think it would be tough to find. JS or a downloadable game (which already lets people in the front door) of some kind are the best vectors.
FYI this is precisely how commercial kitchen microwaves work. Next time you’re at a fast food restaurant have a look and you’ll probably spot one.

https://www.webstaurantstore.com/panasonic-ne-17521-stainles...
> Because each thing has a constant price in learning effort

That's not, in my experience, how it works. Learning your first tool (or language) takes a lot of time. Learning your second is quicker. By the tenth, you're able to learn it by skimming the README and changelog.

It works like this for languages too, at least for me. My first "real" language (aside from QBasic) was C++ and it took me 3-4 years to learn it to an acceptable degree. Last week I learned Groovy in about 4 hours.

It still "adds up", but to a much lower value than you'd think.
While the StackExchange link is awesome, the rest are just horrible. As with all these wannabe designers they go for the wow effect. It takes about half a second of rational thought to see why.

All these art mockups are just that: art mockups. "How do I make a thing look pretty". A tired mantra of programming smays: make it work, make it fast, and only then make it pretty.

Touch screens in the kitchen. In the effing kitchen! When you are often up to your eyebrows in grease, oil, flour, vegetable juices etc.

Oh, look, you have to turn the knob to set the time. To set the power you have to touch some other area and then turn the nob again. To set the time, you have to touch that area again to switch modes, and then set the time. BUT WHY? This is solved with just having two knobs! https://johnlewis.scene7.com/is/image/JohnLewis/233182566?$p...

Oh, look. As it starts, it shows you time remaining, and a stop button. Because you never ever in your entire life would want to, say, adjust time. Nope? The thought never even occured to the designer.

Oh, look, there are still multiple small buttons (that are already awkward on a vertical pane), but let's make them touch buttons! Oh, and let's leave them exactly the same as they are now, because the only reason why people don't understand how they work is because they are not touch buttons. Make them touch buttons! They will immediately become intuitive!

Oh, look, the iOS time scroller! Because that's exactly what I need: to be able to set 23h 29m 31s by scrolling through infinite lists of numbers. I wonder why is it that the vast majority of microwave uses are around 30s to 5min range on max power?

I could go on
Un1x Hacker First Album: The It Shinobi -#TechRapMovement
It didn't take 20 years to be discovered; PoC's for variations on this theme were found over 10 years ago.

The details really matter for making an exploit: so the amount of speculation and what gets speculated, how caches work, how good timing is (and how large the difference between cache and memory is) etc.

Merely knowing that the combination of speculation, caching, and timing have the potential to break through memory protection barriers is a far from enough to actually exploit that weakness.

For comparison: it was widely known that sha1 had weaknesses, yet it took many years for somebody to construct two pdfs that actually demonstrate a hash collision.
A second after you stop dialing the time
This is an interesting article. However, it makes one important error.

It compares the cost of hand translation with the cost of auto translation, but fails to account for any time developing the translation tool, as it was done "in my own time". Clearly not a valid comparison.

The author has also done lots of free ot-of-hours work for his company which he doesn't seem to realise.

In quite a few companies this would also cause problems with IP ownership, particularly due to alignment between in-work and outside-work work.
The last time I bought a Microwave (about four years ago) I remember specifically looking for two knobs just like this. I remember the first microwave I used in the nineties and it worked similarly - just like an oven (also two knobs normally) everyone knew how to operate it almost instantly.

The one I eventually found was also the cheapest one and almost the only one. The more expensive models were usually designed around a button interface and had plenty of features like thawing, grill, and so on. Of course all these extra features amount to little more than switching the magnetron on and off according to a programme. Go figure...

My mom (who has since taken over it) was very confused about the one second delay between adjusting the time and the microwave starting (just like the linked one there was no start button). She had obviously been accustomed to pressing buttons to get it to operate how she wanted. Which just maybe goes to prove that what is "simple design" is not necessarily the simplest interface but the interface most aligned to the users' previous expectations on how this particular item should work.
I don't think that's what the OP meant. Type 1 diabetes has no known cause, but I bet many mental health issues are preventable.

You're replying to a "Ask HN: What do you do to fix your mental health problems?", which is not the same thing. This thread is about prevention as much as it is about recovery.
But... they had done demos to many investors and at least one journalist who were convinced to give them money and write article. They have already announced that there will be product in 2018. What do you think they demoed and what the actual product will be?
That is not what I meant. My new CPU is much faster than the old one. I was hitting the limits at certain times. And now that I finally can afford upgrading, I did. But this was all before we knew about Meltdown / Spectre...

Of course I am annoyed by the fact that I will lose some power. But I do not have much of a choice now, do I?

Either way, I am not utilizing my CPU the way servers with many users do. These servers will feel this impact the most.

I personally don't care if I lose 2 fps or if my compilation will take 20 seconds longer after all these fixes. But if you budget let's say 5000 USD per month for servers and everything was running fine and now it turns out you need to add an additional 3000 USD a month, then that's where the impact is felt the most and not with normal users like us where the compilation time might take a bit longer.

Also, for some people it is just a hobby to always have the latest and best :)
Does the code actually work? Wouldn't you need to create a instance within meta_dec and return the result of the __call__ method. See at first glance I won't think it would work if I didn't know __call__ is a magic method in python. I don't think I'm being overly picky but I found the previous example much easier to read -- since it's a pattern I defaulted to myself before across several different languages. Mixing classes and FP like that doesn't resonate well with me tbh, but yeah you could do it ... but should you?
I wasn't doubting what I quoted was true. You replied to a post about speculated ideas of FCC regulations on selling routers and didn't mention the actual regulation on selling routers. It seemed worth adding.

Their original proposal for the revised rules specifically banned third party firmware, mentioning DD-WRT by name, and the revised version decided not to ban it.

The rule also doesn't hold the company liable if someone manages to hack a third party firmware onto the device. Before selling it,you need an approved application showing either a chip unable to break the rules, or a way of preventing unauthorized code from running on the device. If the FCC approves the application and you've implemented it, you aren't at fault if a workaround is discovered. This makes locking the firmware a cheaper than producing two models or selling a limited model elsewhere.

To me, it seems like they wanted a hard ban on the firmwares, settled for a soft ban, and will likely revisit the issue when there's some political capital justifying a hard ban.
I think pacala's point still stands - if you rent hardware, there is still a larger effort involved around running scalable services (DR, auto-scaling/load balancing, deployments etc). If you rent hardware, you likely will need a larger dedicated % of resources dedicated to maintaining that, over OOTB service providers.

Edit: got user names wrong