skysight-inc/HackerNews huggingface dataset:
Meltdown affects Intel chips, Spectre affects Intel, AMD, and ARM chips.
What about macOS 10.12? I haven't seen enough stability across applications with High Sierra to make the upgrade for work machines. I guess we'll have to just wait it out to see what they actually release.
I can't say I like Pai, but I find death threats even worse.
if people think there is nothing wrong with it , then the concept of IP is dangerous to society
Maybe make a multi-computer db selector? That way you don't have to merge databases with a sync algo, just give a drop-down to view your other computers dbs in a read only fashion from some dropbox drive or similar.
Cache timing attacks are a pretty general technique, and just depends on the combination of speculative execution + not flushing the cache upon misprediction rollback (which would be very expensive).

It would be a huge surprise if ARM were somehow immune.
I can relate to that.
When I exercise in the morning I cannot get anything done during the day.

On the other hand I find it relaxing to workout after work. My mind becomes more or less empty afterwards. When I then do things that require more complex thinking the effect wears off pretty quickly though.
Google tested a Proof-of-Concept exploit against an ARM Cortex A57.

https://googleprojectzero.blogspot.com/2018/01/reading-privi...

disclaimer: I work at Google, but not on Project Zero.
I jumped in here hoping this was about sandwiches.
SDE II Amazon Seattle, ~$200k total/y
What I don't understand is why the kernel patches and microcode updates are still been worked out today.
They had 6 months to work on it.

No secret channel to communicate with Linux Kernel developers? No coordinated effort? Last minute findings?

On this thread https://lkml.org/lkml/2018/1/4/174 looks like that the author is disclosing the info on the last minute.
It seems to have been implemented in ASUS routers https://github.com/RMerl/asuswrt-merlin/issues/967
Except they forgot to tell us about older versions of macOS which probably 75%[1] of Apple users still use.

[1] http://gs.statcounter.com/macos-version-market-share/desktop...
Disclosure: I work on Google Cloud (and helped launch this).

I'm still sad about the PiCloud folks. They were trying to do this (sort of), but it's a tough business to be in as you sit between the cloud provider and the customer needing to make money in between. IIRC, they were an early Spot customer and as the cost of their infrastructure shot up, they got squeezed out. You could imagine something similar again for running CUDA programs in a "serverless" fashion, but it would probably have to come from a provider.
How are they affected yet no exploits can impact users?
Fear of Causing Offense Has Cost Too Many Innocent Lives
Does anyone know what sort of restrictions he could have on his stake? Is he allowed to do this?

I would assume a CEO of a private company couldn't sell this much without being removed, but since he has already been removed, I wonder what incentives he would have to keep it.
Motley Fool predicted something was up back in 19 December 2017 -> https://www.fool.com/investing/2017/12/19/intels-ceo-just-so...
None.

Propagating the salient point of the article allows the useful information to be communicated, without loading needless megabytes of adtech UI in your browser.

You should still read the article, and not blindly trust internet randos, but as participant in an aggregator, this kind of behavior is sometimes helpful, as long as things don’t get spammy.
I'm shutting down my side project; what did I forget?
or he is planning to get off the sinking ship
because nobody wrote the weaponized exploit yet and put it in the wild.
> Kimiko Ishizaka's open source bach recordings (under CC0)

Thanks for the pointer. I hadn't heard her recordings of the WTC and Art of Fugue, and they seem pretty good.
I assume the benefit is partly the fact you're taking a break for an extended period of time away from the computer, so why wouldn't you just walk down the stairs and get the elevator up?
I'll see your large number and raise you an army of monkeys on typewriters, which if I follow the pseudo-intellectual logic going on in this thread correctly, means I own the copyright of everything that will ever be created in the future.

Or maybe we can all agree that just being able to describe, view, feel, smell or listen to something doesn't necessarily make it something that we can copyright or patent. We can walk back from the brink of madness towards sanity, it just takes the first few steps. :)
Also, as far s I understand, the division has began as a conflict of 2 political parties - the leftists (CPC) and the rightists (Kuomintang) that has escalated into a civil war. And as the result each party now controls its part of what was once meant to be a single country and claims the right to rule both. What makes me curious is why can't 2 parties just control their parts the way they do in Taiwan and PRC but do it peacefully and without nonsensical claims when the people of one part are more sympathetic to one and the people of the other part are more sympathetic to the other. Why is it so important to have one party to rule them all, including those who doesn't want it?
When you choose to move somewhere, you're not just moving into an isolated square on the map. You're moving into a lifestyle and a neighborhood with attributes you desire. Those desirable attributes can include "no mid-rise apartments next door".

Apartments springing up next door hurt, if one of the primary reasons you move somewhere is that there are no apartments next door.
Likely as value function approximators for one piece of the whole algorithm (as is the case with DQN/DDQN). However the main algorithm is likely using variation of Bellman equation, that assumes Markovian property and gives strong guarantees about convergence.
It could just be that the statement is incorrect or misleading.
You left out the real-life version:

https://www.win.tue.nl/~aeb/linux/hh/thompson/trust.html
> Are there any viable platforms that people would rather use?

Email, Slack, Twitter, Secure Scuttlebutt, Rotonde, GNU Social
Extensive discussion here:

https://news.ycombinator.com/item?id=16065845

(and many other articles about this have been posted)
Mapbox does this too, even as we've grown to 300 people. When I first joined every single employee had to put themselves on the team page, going through the whole commit, test, and push process with the help of someone who knew how. We have repos for everything, and use issues for things most people would write an email about.

Not only is our website easier for non-technical folks to update, but that means we have built-in transparency for much of the business. There are private repos for things that don't need to be aired company-wide, but public is the default.
"as of this statement" is a big corporate speech.
Spectre likely affects any chip with speculative execution, regardless of vendor, even things like Power8. So that's fun.
To answer my own query on the returns issue:

> Restocking Fees: Unless the product is defective or the return is a direct result of a Dell error, Dell may charge a restocking fee of up to 15% of the purchase price paid, plus any applicable sales tax.

http://www.dell.com/learn/au/en/aucorp1/policies-returns (Aus version as this is where I am).

That's a real problem for online purchases in my view.
They have very little in common.

The Clipper Chip was designed by the government to be used in phones in order to give people communications security—but not too much communications security against government entities—and to pre-empt and outcompete other cryptographic voice privacy solutions that people might want to adopt.

The IME is designed by Intel to allow remote management of PCs. It creates risks of unauthorized access to those computers, including by increasing the attack surface outside of (one might say "beneath") ordinary operating system security features.

I guess the parallel is that both are hardware-implemented device functionality that many users might not want and that could expose their data to risks they don't appreciate.
Livestreaming Country Life Is Turning Some Chinese Farmers into Celebrities
I bought a Precision 5520 with Ubuntu pre-installed one year ago and it is still one of the best laptops I've ever purchased. My previous three were Thinkpads with the latest being an x230. The quality of the X series has really been in decline and x230 was the last straw for me (keyboard warping).

I've always heard about coil whine but maybe I just can't hear it (I'm 43). As long as the Linux support remains strong I will keep buying the Precision line.
It's gotten the same patches as 10.13. The original security advisory did not mention it, but it's been revised now: https://support.apple.com/en-us/HT208331

Kernel
Available for: macOS High Sierra 10.13.1, macOS Sierra 10.12.6, OS X El Capitan 10.11.6
Impact: An application may be able to read kernel memory
Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
CVE-2017-5754: Jann Horn of Google Project Zero, Werner Haas and Thomas Prescher of Cyberus Technology GmbH, and Daniel Gruss, Moritz Lipp, Stefan Mangard and Michael Schwarz from Graz University of Technology
Coming from one of the most centralized and closed platforms on the planet, i am cautiously interested in how this will turn out
Cooking recharges me. I have to set some time (1-3h) aside for it to work, which is the hard part for me.

There is something deeply relaxing in kneading dough and waiting for it to rise.
Ah whoops - that's right. This isn't Reddit. Thanks for your patience.
also breaking: Internet cancels appearance at FCC hearings because of death threats.
This might seem like a too easy theory, but if you l9ok 8nto the article posted by jedisct1 there is the somewhat unrestricted access of the L1 Cache and well with multiple mentions of Rowhammer, could it just be rowhammering from whatever the L1 Cache accesses?
Just imagine if they all claim each others videos lol
> Edit: I guess that's a potentially profitable but unfulfilled niche. Create a company that can take cash in big amounts and sell cryptocurrency. Not sure how feasible is it but that is the missing link as I see it.

That just pushes the problem down the road to somebody else, though. At the end of the day somebody's going to have a huge pile of cash, and no bank will accept it without knowing where it came from.
Peer comment has hit the nail on the head: what you're describing is the functionality provided by hardware wallets -- external physical input/display.
I see quite a bit of back and forth around Intel vs. AMD when it comes to Engineers, Architectures and so forth... even some 'name calling' if you will, around AMD architectures being 'too dumb' to be vulnerable to this type of attack.

What ever happened to the mantra of Keep It Simple Stupid?
I wonder what's going to happen to old Android devices that are no longer receiving security updates
Basically an admission that he has lost the power struggle.
Smart dude - bailing the sinking ship
> Create a company that can take cash in big amounts and sell cryptocurrency. Not sure how feasible is it but that is the missing link as I see it.

The problem is they would fall under the same money laundering rules that banks are and would probably not want to take dispensary cash. Even if they do take the cash, where would they deposit it?
I think you are on to something... "The Elevator Desk"
Hiring Node.js Platform Engineer in Chicago
Moonrise, https://www.moonrise.works, is seeking a NodeJS Platform Engineer. In this role, you will be responsible for maintaining the current infrastructure our prototype service runs on, establishing plans for future expansion and separating the application out into microservices, monitoring system health, and advising leadership on platform investments. Additionally, you will maintain current microservices (authored in NodeJS) and develop new microservices as required.

Learn more about our company with this video, https://www.moonrise.works/landingpages/videos/pilot.mp4, and learn more about this specific position at https://goo.gl/igrYuf.

I am the direct hiring manager for this position and happy to answer any questions. We're currently not supporting visas or interested in working with recruiters; direct applications only at this time.
> I am a bit confused about the volume of e.g. Amazon on Yahoo Finance[1], which is either 3 million or 3 billion USD.

Volume here refers to the number of shares.
Michael’s yearly list is always good. I am curious why he is interested in Prolog implementations.
My high school in the late 90's similarly handed out passwords all composed of 8 (or was it 6?) numbers. Combined with Windows 98's weak hashing (was it LanMan back then?), Cain & Abel on contemporary hardware could reveal them in seconds.
lexelby addresses the question, "why not just use Embroidermodder?":

"In theory, this project was going to be exactly what I wanted. In practice, it never got funded on Kickstarter and it’s largely incomplete."

lexelby also describes what exactly was used from the Embroidermodder2 project:

"...it contains a really awesome core library that knows pretty much every machine embroidery format and how to convert between them. I use it to convert the CSV files that ink/stitch outputs into the PES files..."

This is tangentially interesting for me, because in one of my pursuits, I want to fabricate a little over a hundred, uniquely-worded "Remove Before Flight"-style-streamers [1], and would continue to create them at a constant, reduced frequency after the initial run. The custom embroidery industry doesn't seem to cater to that kind of use case; all the vendors I visited online want multiple orders per design, and have high setup costs per design.

That made it expensive enough that it is worth it to me to purchase an entry-level embroidery machine like the Brother SE400 and have at it myself with the built-in fonts. But ink/stitch seems ideal if I ever extend my use case (which is just crank out some sans serif text with blaze orange orange thread onto some thick black fabric) in the future to include some simple graphics. Learning to re-hoop (since most of my streamers will be a foot or longer) seems tricky, though.

[1] http://www.aircraftspruce.com/pages/ps/coversaircraft_remove...
Meltdown also affects some ARM chips according to ARM itself: https://developer.arm.com/support/security-update
I like your take, we also don’t have TV and limited device time, and as a result the kid loves to read.
And an interesting follow-on question would be: of the OS patches now being implemented which sometimes cause a performance hit, will that code later be able to detect when it's running on a "fixed" processor? So that it can turn off the unneeded extra protections when running on a newer chip?
I could see that, though the title and abstract are redundant here.
Personally, I really hope Uber does well. The leadership is new, they have more capital, and can do really well if they execute properly. No other company has that sort of a global reach in the on demand transport business right now. It's incredible that I can use the same app to hail a ride in so many cities and countries.
Honestly, as sad as it is to say this, it's hard to not agree with this sentiment right now. I may wait until the next line of CPUs at this point. Which is a travesty, because these laptops are great and I was finally going to retire my old laptop. But if I'm going to get a 30% hit because of a processor hotfix, it's pretty tough to commit to that.

This isn't to say anything bad about Dell Developer XPS, Sputnik, or Barton at all with their great work here. It is just indeed awful timing for a new release.
Hello
My name is Welsh and I am from State, I want to give all thanks to Priest Fadhili Chausiku for helping me to recover my ex back, i was seriously in a breakup with my ex girl and i think all hope was lost until i was searching the internet and i saw a testimony that someone shared about Priest Fadhili Chausiku and i choose to contact him also to see if he can still help me, i gave him a trial but at the end joy and happiness filled my heart, i have never believed in this because i have been a victim of fake one, but Priest Fadhili Chausiku made me believe that there are still great men like him, but I must say people like Priest Fadhili Chausiku are rare to find, that is why I must not go out from here without dropping this email address of this great man who helped me get my ex back, so reader if you are out there you are looking for the help to solve your marriage problem or relationship issues, look no further, get in touch with Priest Fadhili Chausiku via his email; priest_fadhili_chausiku@priest.com once you contact him all your problems will be solved immediately. If you are interested, there is a link that I will provide to you below.
www.fadhilichausiku.webs.com
> It was better. I'm confused how the title says Intel and ARM but the first paragraph says all processors.

These are the processors found in Apple products.

Yesterday, there were comments [edit: on HN] about the Intel PR announcement that were critical of the fact that Intel name-dropped AMD in what was thought to be an attempt to deflect the issue from the Intel brand.
No, 10.12.7 is the right version. It's "available for" 10.12.6, which means that is the version that will be offered the update. I am not sure why it's not showing up for you. Consider contacting Apple support.
MacOS update packages include any relevant firmware updates at the same time.
Maxim acquires startups, not is a startup themselves. A good chunk of their products are one offs from firms that won the startup lottery.
According to the feedback we've got, the usual goal is to see combined stats from multiple sources. I also have a suspicion that having a DB with multiple connections in a cloud storage wouldn't end well.
Sounds more like the former captain absconding with the largest life raft and much of the passengers' riches after being fired. Whether he sabotaged the ship as well remains to be seen, but bystanders have noted it appears to be listing a bit to one side...
We’re recently running two machines (master and standby) at M5 Hosting. All of HN runs on a single box, nothing exotic:

CPU: Intel(R) Xeon(R) CPU E5-2637 v4 @ 3.50GHz (3500.07-MHz K8-class CPU)
FreeBSD/SMP: 2 package(s) x 4 core(s) x 2 hardware threads
Mirrored SSDs for data, mirrored magnetic for logs (UFS)

We get around 4M requests a day.
Damn it’s 2000 all over again. Cybermagedon is the most annoying thing. It always appears when I am in low supply of pop corn.
Hopefully Sierra and El Capitan will get patched soon.
There isn't any reason why they would need to accept Bitcoin instead of a token with faster confirmation time.
If we argue against this, we're apparently terrible NIMBYs, opponents of affordable housing and stooges of the wealthy landed elite.

Yes, exactly. You are putting your aesthetic preferences above the property rights of landowners to do what they want with their own property as well as the ability of other people to find affordable housing. You're also (in most cases) using the power of the state to push up the value of your home and put money in your pocket.

This isn't really up for debate. That is literally what you are doing (in this theoretical scenario).

Now, maybe doing that is good. Maybe that is ok. Maybe those values are fine. But you have to confront the reality here.

Why are the aesthetic preferences of suburban dwellers invalid and the aesthetic preferences of city dwellers valid?

The aesthetic preferences of no one are valid. If someone wants to buy a plot of land in the middle of NYC and build a single family home on it they are free to do so as long as they have the cash.
I don’t have any citations but I believe the S1 is actually based on the A4 of all things. It was 32 bit.
Update on Meltdown and Spectre
Jim Sterling adds multiple instances of copyright infringing material to some his videos to take advantage of a similar effect[0].

[0]http://www.thejimquisition.com/copyright-deadlock-the-jimqui...
This is very exciting. Are JavaFx applications supported?
Hmm, so Apple confirms that meltdown happens on ARM as well, interesting. Likely their Axx chips are way faster than competition, allowing the timing window in which to execute the attack, as Google suggested.
Although unsurprising, this can't be a good indicator for the outlook of the company.
I felt the same as you, and the .0 people had a rough time. i went for it in .2 and it’s been fine.
Hmm. I didn't come to the same conclusion. Can you show your calculations?
+1 on the keyboard. Keyboards are so harsh ... so little travel.
Dell is doing a great thing here by leading the charge on Linux laptops but I’m so glad others realize what utter pieces of shit their laptops are quality wise.

Just because dell finally made a laptop that looks decent and wasn’t built to be 15lbs doesn’t mean the quality has improved here. Their desktops are fine.

I’ve also never dealt with a worse company with regards to repairs and service.

Do yourself a favor and buy an X1 Carbon, the 5th gen rocks and the 6th is coming soon.
I’ve always been curious how much work the average person does per day. It would be a very valuable metric to have for setting expectations - of course we’re all different and listen to yourself, but just to have a ballpark...

I burned myself out at my last gig trying to be nearly 100% productive all the time since expectations are opaque. Sure, “nobody cares how much you work as long as your work gets done” but what about when the work is estimated poorly (and everything is always late...). Too nebulous of a statement.

The 12.5 hours number from the article seems pretty rough given that it’s based only on time spent in app, but it’s something.
That's an excellent point. I used to work porting a commercial embedded real-time OS. I just reviewed the description of the recent mitigations in Linux.

It is easily 6 man-months of work if not double, and the level of expertise necessary to implement this right is pretty high. For a small OS shop, that's a pretty high price.
Looks like there were a lot of people looking to cash out, since he was unable to sell 50% like initially offered [1]

[1] https://twitter.com/EricNewcomer/status/949095493052768256

Still, a 1.4B cash out is $437,363 per day return for Kalanick. Wow!
Also, "scratching your own itch" is always the best startup method because you know intimately if your proposed solution really is a viable solution in the first place. It's then just a matter of pricing and cost, rinse and repeat.
Why No One Cares About Feminist Theory
There is a third way: have the CPU JIT the code to a very different architecture according to completely programmable firmware, just like Transmeta did.

I don't know whether the Transmeta CPUs are vulnerable to Spectre and Meltdown, but fixes to both would be one firmware update away - and most probably with little to no performance impact.
AMD/ARM/Intel CPUs are affected.
most likely just wants some cash to do other things with since he’s no longer ceo of uber
That we know of.
"Yeah, I just stare at my desk, but it looks like I'm working. I do that for probably another hour after lunch too, I'd say in a given week I probably only do about fifteen minutes of real, actual, work."

(I watched this again three nights ago. Brilliance never dies.)
The 8th thing? https://www.youtube.com/watch?v=LFhT6H6pRWg I think it is more likely that he didn't want to face criticism. I am going to have to call cite.
Even if he had restrictions, I would expect the current board / management to waive such restrictions to entice him to sell in the tender, particularly since there was a floor to Softbank's tender offer. Travis' stake filled a lot of that floor. Removing some of his voting power to replace it with an active investor is a nice bonus, too.