skysight-inc/HackerNews huggingface dataset:
When I hear 'food safety expert' in the US, it kind of makes me curious. I decided to search for an image of our expert, playing the favorable odds I suppose, and was not surprised: http://tobecofoodsafety.com/wp-content/uploads/2012/04/bill-... There's a giant elephant in the room when it comes to healthfulness in the US. Our life expectancy has actually be going down, even when it was already relatively mediocre - lower than even some places like Chile and Costa Rica. Mortality rates from 8 of the top 10 killers, heart disease in particular, have been increasing alongside our waistlines.

Many of the things we try to use to explain this, such as less physical lifestyles (or, equivalently, the rise of the internet) don't really mesh well. These changes are happening everywhere around the world, in many instances to a greater magnitude than the US, but what is happening to the US is fairly unique among developed nations. It seems to imply that something we're doing, or consuming, that we think is healthful - most likely is yielding unforeseen consequences that we haven't quite pin pointed yet. This is further emphasized by the fact that this trend is something that is often confined by borders. For instance the Czech Republic is rapidly headed towards its own issue here, yet it borders Poland, Germany, Austria, and Slovakia - none of whom are facing similar issues in spite of running the gamut among things like socioeconomic status.

Is it the water? Well, probably not. But I think having people who are happy to be guinea pigs here is a good thing for everybody. They get what they want, some entrepreneurs make a few bucks, and in the end we all learn a bit more. An anecdote I particularly like is of the discovery of penicillin. It took years for it to be accepted, even after the discoverer shared and published his findings. And I think a big part of that is that people instinctively felt that using a product from blue-green mold that emerges on rot to try to treat sensitive vulnerable infections was pretty much obviously idiotic - except it wasn't.

With things like vaccines people 'going their own way' can hurt others. In this case, that's not true. Well excepting medical costs if they end up hospitalized, but given the costs of these bottles - I suspect these individuals will disproportionately already have health insurance plans that will not leave society picking up their tab. So in the end, nobody really loses. If you don't think it's a good idea to drink it, don't. I won't - but I'm quite curious to see what happens to those that do!
Speculatively loading data across a protection boundary which is what happens in Meltdown can be argued to be incompetence or sneakiness. It certainly helps with benchmarks.

Moreover it would be hard to say "everyone is doing it" because it seems so far besides the latest ARM processors, most of the other CPU architectures don't do it.
This is really a fantastic resource - it doesn't hide too much away behind "helper" libraries so you understand where everything is coming from. It's the only beginner resource I've found that covers drawing multiple things: that was always my stumbling block with WebGL!

When you've exhausted this and are looking for next steps to try, I recommend this youtube series by Sketchpunk Labs: https://www.youtube.com/watch?v=LtFujAtKM5I&list=PLMinhigDWz...
It should be able to run X server as well, Xvesa with ATerm and Fluxbox should work fine.
Bitter almonds are good for cooking and more natural than benzaldehyde.
I think they could put 'media' between the 'interactive narratives' (interactive media narratives) and the associations with text-adventures will disappear. Maybe even 'rich media'?
We rewrite allcaps to reduce noise level. Think NVIDIA vs Nvidia.
Boiling would probably disrupt the homeopathic memory of the water molecules, causing the water to forget the pristine spring from which it was drawn.
LibrePlan: Open Web Planning
Hypnotise commentry
https://github.com/LibrePlan/libreplan
Joe Mercola claims that, and he’s usually wrong.
The 100-qubit quantum computer will not change the world right away
According to webglstats.com, WebGL is at 97% and WebGL2 is at 39%.

Unfortunately neither Safari or Edge support WebGL2 by default yet.
Isn't spring just a naturally occurring well?

Honest question, I have lived in a city my whole life and I would have boiled or at least purified water from either. OTOH, I drink unpasteurized milk so can't judge.
As given in the article, it's also the most annoying bash diagram ever...it needs an explanation of what the 7 different colors of arrows mean. All that was given is:

> It shows which scripts bash decides to run from the top, based on decisions made about the context bash is running in (which decides the colour to follow).

> So if you are in a local (non-remote), non-login, interactive shell (eg when you run bash itself from the command line), you are on the ‘green’ line [...]

With a bit of Googling I believe I found the origin of that diagram:

https://blog.flowblok.id.au/2013-02/shell-startup-scripts.ht...

The author there explains how the colors work:

> Fortunately, I’ve read the man pages for you, and drawn a pretty diagram. To read it, pick your shell, whether it's a login shell, whether it's interactive, and follow the same colour through the diagram. When the arrows split out to multiple files, it means that the shell will try to read each one in turn (working left to right), and will use the first one it can read
Well water is filtered by the soil and sediment rocks.

Drinking water from an open spring is dangerous regardless of where it’s form bacteria and parasites isn’t something you want to play with.
Snowden is working on this I think: https://www.fastcompany.com/40466986/edward-snowden-bunnie-h...
will be interesting to see the trend in sales of threadripper an eypc
This is a common misconception. It's been debunked many times. It stays around because it sounds interesting.

https://www.finishing.com/156/65.shtml

What is rain water? It is water distilled by the sun.
Are there electrolytes in your spring water that you can't get by eating food... no.

Can you get enough electrolytes just from normal water (e.g. Total Dissolved Solids of 200ppm, not Gatorade) without food that will prevent you from dying of an electrolyte imbalance... no. Eventually, only drinking water will kill you for a variety of reasons (starvation), but you have so much salt already in your body that it will take weeks to kill you.
> Lawsuits are a fine way to stifle innovation.

I'm not sure about this. At any large company like Intel, the cost of potential - even predicted - lawsuits are already factored into their budgets.
Yes, it’s indeed over the top. Here’s a map by the ACLU: https://goo.gl/images/HpPYby
Yes, it's also called rain water.
It's not just from the command line that these shortcuts are useful. Once you have a decent baseline on shell scripting fundamentals, the constructs are often highly optimized towards efficient and readable scripts.

Not having to put every command in quotes, for example, is a huge advantage all by itself, especially if any argument lists have quoted arguments.

The $(...) construct is pretty fundamental to bash scripting and should be covered in any decent tutorial.
It is not really comparable to climate change - people have been assuming that everything is OK, but there is no well-organized campaign to persuade people that these exploits don't exist now there is good evidence that they do.

There is one attitude that exacerbates those problems that are real - the tacit assumption that concerns do not count for anything until an exploit has been demonstrated.
Because I didn't ask for it! In fact, I already ran TrueCrypt and LUKS on those drives, so I was encrypting the data myself! But now, if any of the enclosures break (the controllers go bad), I have no way of recovering the data at all! That's a shitty design.

I
IceScrum: using Scrum while keeping the spirit of a collaborative workspace
In the never ending quest for yet more performance out of memory systems that are ever slower than the CPU's, this is likely exactly how it happened. The speculative reads, because they were speculative, were likely viewed as harmless (because the instruction that generated the read would never be committed if the speculation missed anyway, so CPU state (registers/flags) would not be changed improperly).

And if anyone even considered the results of the reads, they likely saw them as nothing more than free cache pre-fetch instructions that would enhance performance should the speculative path turn out to be the correct path after-all.

And because the push was for yet more performance, free cache pre-fetch operations were likely viewed as a great bonus.
The Raspberry Pi explanation is better in my personal view, although to the knowledgable who do not need explanations of CPU design by analogy the actual papers by Intel and Google are of course better still. (-:

* https://news.ycombinator.com/item?id=16080002
It's closer to the second, but:

1) the vulnerability is local, not directly tied to spreading as malware (but these days placing JavaScript in an ad is easier and possibly more effective than a virus...)

2) there is no such thing as "exposition carefully publicized so the flaw is not exploitable by malicious hackers". Just assume that black hats are as smart as white hats or smarter.
That's exactly the sort of new variation I was asking for. Interesting.
I deleted that because I thought it was too flamey after reading it again, but yeah refunding everyone is unrealistic.

Maybe just average out the performance impact across large cloud providers and offer that as a percentage? It probably wouldn't be hard for a company like Google to crunch metrics before/after the update and give a number for how much their performance has been affected
>And the Spectre vulnerability is the one that requires a BIOS/firmware update.

One of the Spectre variants. The other isn't mitigated by it and will require an lfence on your sensitive areas of apps.
Overblown concerns if pulled from a known good and tested source. Modern well technology and practices make the risks nill if followed; untreated surface water is an entirely different story and risky.

I've been drinking, cooking, and showering with aquifer water that only goes through sand for quite some time. Amazing taste, none of the chemical flavor, incredibly "soft" like fresh rain water - that slick feeling as though you have soap on your hands
JS as an attack vector can be effectively mitigated by denying access to high-precision timers (and a few features that can be used to construct high-precision timers). At least Chrome and Firefox are doing this, so just make sure that you are keeping your browser up to date.

If you feel paranoid, you might also want to disable JS by default and only enable by whitelist on any machines that hold particularly sensitive or valuable data.
The work book that goes along with it is also top notch.
I would be very surprised if the bottled mineral water I buy from Sainsburys has not been filtered after being drawn from whatever well or spring it came from.
The amount of electrolytes in non-distilled (e.g. spring) water is negligible. Any minerals/salts your body needs are easily satisfied by the food you eat.
Why does this thing take 12 minutes to boot? I think this software must be built incorrectly. I have an AMD Geode system, which admittedly is more of a pentium-class processor running at 233 MHz, but it boots in about 5 seconds.

When the Pentium first came out a 486 DX2 was just about equivalent for most purposes. Many people ran linux on the 486 in those days, building the software on the host, and nobody would have tolerated 11 minute boot times. And again, I'm running modern linux on a Geode and it's not anywhere near that slow.
Version 57.0.4 released a couple days ago contains the mitigations referenced in the post.
Anyone that thinks ISPs don't mess with traffic, should check out this malware research

https://www.virusbulletin.com/conference/vb2017/abstracts/la...
Because you expect your employees to behave like adults? I assume you don't just give everyone access without and set them free without any training or guidance. If someone can't handle a responsibility you take away the responsibility and/or replace them.

I have access to pretty much every Confluence page at work, including ones other people set up for executives to look at, but I don't go around making changes and editing those pages just because I have access.

People aren't robots. You can hold them accountable for their actions and they can make their own (good or bad) choices.
I know almost nothing about law but I would assume a large company would be insured against contingencies like this.

I remember reading something about how rich people can get 'everything else's insurance that's basically applicable to anything bad that could happen to them. Maybe its the same with companies?
Happened to me yesterday with my Proxmox host. It wanted to install firmware-linux-free, which conflicted with pve-firmware. It decided it wanted to remove pve-firmware which would also completely remove proxmox-ve... Had to upgrade with --no-recommends.
Agreed... this is definitely a fad of the "Elite" just based on the price.

Tap water from Hetch Hetchy is pretty great (they don't even have to chlorinate it). LaCroix is also a tasty fad.
No, that is not the case. The hypervisor is able to protect myself from unpatched guests, at a performance cost of course...
> If you rely on any other kernel tree other than 4.4, 4.9, or 4.14 right now, and you do not have a distribution supporting you, you are out of luck.

So, if you are running a (still supported) Debian Jessie a
simple apt-get upgrade isn't gonna cut it:-(
>This fixed and predictable rate pretty much means that UDP is near pointless and games that still don’t have a predictable tick rate and use UDP tend to be a rubber banding lag fest.

You're wrong. Head of line blocking is a real thing that happens very often in TCP.

Edit: parent poster removed that part of the comment between me reading and submitting a reply
If the spring is safe, there are no risks (kind of tautological, I know). Millions of people drink mineral water (Evian, Volvic, etc) and that's not treated. All you need is quality control.
I don't know the details of this particular "spring" but generally speaking there's not necessarily anything especially dangerous about water pumped from an underground water source. As the parent noted, it's really no different from the well water that many many people routinely drink without any treatment.

Yes, this is a silly trend and I wouldn't personally be inclined to drink untreated water that's gone through unknown to me processing and packaging procedures. But water doesn't inherently need to be treated to be drunk regardless of its source.
It's not about that guy's blog. This causes desensitization to non-HTTPS traffic and when people then actually visit non-HTTPS malicious blog, they get infected. If all "trusted" websites were HTTPS, then whenever there was untrusted access, people will notice it and raise alarm.
The article in discussion is the US CBP, so the jurisdiction is pretty clearly the US and not Germany.
Curious to know if there are other models like RACI adopted or tested at other places.
> No one cares that a million toilets have to flush at the same time.

I care about not being stuck in the traffic, not having to wait for a machine at the gym, not having to wait at long checkout lines at costco.
> Modern processors are insanely complex systems.

And until we align their market incentives properly, silicon vendors are going to continue to ignore this fact when it comes to verification. Intel is especially bad here; they’ve had an unreasonable number of hardware bugs in recent years.
Param types: Ah, of course. I had a vague suspicion that was what was going on. But my brain was overloaded. Yeah, one concept per example is ideal. :-)

'Year' alias: excellent! That's one of those "look and feel" things that can make the transition to a new language so much smoother.

I was going to add something about "now comes the hard part after the initial flurry of activity: steadily growing the language without losing the passion." But I didn't want to end on a downer. I'm truly impressed with what you have so far.
Currently, there is an application at the European Medicines Agency (EMA) for a large clinical trial of psilocybine therapy for the treatment of otherwise treatment-resistant depression, 400 patients in 8 European countries. As far as I know, it has not yet been approved, but I am optimistic.

http://www.appliedclinicaltrialsonline.com/compass-pathways-...
To a decent first approximation, an aquifer is nature's Brita.
Intel faces class action lawsuits regarding Meltdown and Spectre
The performance.now() patch changed one line of code, so backporting that shouldn't be hard. The SharedArrayBuffer change is just flipping a pref, so that should be easy as well (assuming it's even supported - isn't Palemoon a pretty ancient fork of Firefox? Even Mozilla's most recent ESR release doesn't have SAB enabled by default).
Yes, hence my question. I have tried to setup a HTTPS service and it seems incredibly complicated if you have your own domain name. Even with lets encrypt, if you are using github pages for hosting but your own custom domain, you are out of luck. The point is not that he is not serious about security, point is, it is too hard to get normal security correct. And I am not talking about "cryptography is hard". I am talking about tools which should be easy and standardized. Those are hard.
I have a well. I am not an authority on them but growing up having one I know it is treated. Our water is "hard" so it goes through a softener which requires a massive amount of salt. There are numerous filters in the basement as well. It isn't pumped from the ground directly to the tap and the system maintainers come and test it periodically when they do maintenance
The kernel address space isolation makes syscalls much more expensive than they were. A toy program that just repeatedly calls the cheapest syscall in the kernel would lose much more than half it's speed, but that's not what's reported because no-one actually needs to run that workload. Epic seems to have been particularly unlucky in how KPTI impacts them.
Why I should care about all systems? If targeted systems have bash4.x and GNU tools, why I should write scripts in sh?
If you care about all systems, ANSI C is better choice, IMHO.
What is this site about? I can guess but don’t read Arabic. (Though I’m interested in learning it and i do speak other languages too)

Respectfully, since this is an English speaking forum, you may wish to have a English version or at least add a comment describing what it is in English.
Of course it varies around the world, but in my whereabouts there're few rules-of-thumb regarding such springs:

- some popular springs are tested by gov/parks regularly and even have results sheet attached

- knowingly bad springs are marked. Maybe as simple as "do not drink" on a sheet of paper in a plastic bag.

- most good springs are prepared. At least home-made step to come without walking in the water/mud, cup to drink from etc. If spring is regularly used by locals - what to worry?

If spring doesn't match any of these - use your judgement. Moving water is good. Stale water is risky. Settlement upstream or on the hill - risky. Farm - very risky!

Boiling is good. Another good idea is hiking bottles with water filters. They do affect taste more than boiling though. I think they're usually carbon-based and/or UV?
untreated surface water is an entirely different story and risky.

From my understanding, that's what they're selling here.
> It bears mentioning that if cynaide were marketable in any capacity, it'd be fully legal to bill it "all-natural".

That pretty much exists already and is even sold through amazon.

https://www.amazon.com/Sunfood-Apricot-Kernels-Sweet-Organic...
The LG 4/5k monitors Apple had in their own stores didn't work half the time
The performance.now() change is due to ship to ESR users with the 52.6 release on January 23.
There's a trend rising for raw exotic water from Africa, I've heard. They haven't plenty of it so it's rare and quite exclusive! Retail sales only to rich white folks - USD 100k per barrel per person only! Get one while you can - reservations are already being accepted!
Is it even more than that one Juicebro guy?
From https://www.cbp.gov/newsroom/national-media-release/cbp-rele...:

> In FY17, ... Approximately 0.007 percent of arriving international travelers processed by CBP officers (more than 397 million) had their electronic devices searched

I would guess devices are searched at the border for parallel reconstruction (to find information they already know without disclosing details about surveillance)
Most likely yes. Boiling brings the water closer to purified water.
Nuls blockchain: Parallel chains, Smart contract, POC consensus mechanisms
Mineral water in Europe is still filtered and processed. The limitation is just that no additives are allowed and filtering has to use physical means.
Mast Brothers: An Insider’s Account of a Wholesale Debacle (Part One)
So that's a bit alarming for me since at least one of my several workstations is using a 5+ year old desktop board (an Intel board, ironically) that has been end-of-lifed according to its BIOS downloads support page

Buy stock in Gigabyte, MSI, etc.
I use AWS instances (multi-tenant). I understand that by now AWS hypervisors have been patched.

Does that fully protect my unpatched AWS instances from this CPU-level issues?

If not, is there any way to protect my AWS instance from a rogue unpatched attacker instance running on the same hypervisor?

In other words, with the current CPUs deployed at AWS, will it be possible for an attacker to simply launch an unpatched instance to steal data from other instances (patched or not) running on the same AWS hypervisor?

I hope not, because the cloud multi-tenant model would be effectively dead until AWS hosts with unaffected CPUs are available.
Pretty much. A spring does imply water coming to the surface naturally. However, in practice, a large bottler is probably pumping water from an underground aquifer in any case.

In my experience, people don't routinely treat well water before drinking it.
Smart Learning Techniques and how E-learning sites have used it
Distilled water increases the rate at which the body loses essential minerals. You can negate that by ensuring your mineral intake is enough. It's much easier to just water that has minerals in it though.
I've read the guidelines; you can just downvote instead.
I… wouldn't. I'm so much faster doing text operations on a Mac, it's not even close. A pointing device is just so much more quick/precise for me than fingers.
Can Competing Private Currencies Coexist?
This is also my number one thing I wish I'd known about Bash. It saves on so many trivial bugs.

The documentation is especially great, for ever problem it detects you get an unique reference which you can lookup on the wiki eg: https://github.com/koalaman/shellcheck/wiki/SC2086
It then not only describes the problem but also shows different ways of solving it with some great examples and reasoning.
I think I learned more Bash from Shellcheck than anywhere else.
I live in Kraków, Poland. It's a major city of this country, with population around 1M. Maybe it's a Polish phenomenon, but literally every major street has multiple bank branches on it. Of the bank I'm a customer of, I have 3 branches within 10 minutes from my home, on foot. I keep wondering what's the point in having so many branches everywhere, all of which have synced opening hours anyway.