skysight-inc/HackerNews huggingface dataset:
No, it just doesn’t. You’re diluting the meaning of that term to irrelevance. There are plenty of other words that adequately describe what happened - sloppy, careless, short-sighted. Cheating isn’t one of them.
Building TPU Chip Saved Google from Building 15 New Data Centers
For me, yes. I just deleted my minikube and mini shift directories.
His Colorado Springs lab notes are a good read. One of the things he struggled with was RF detection (rectification). Don’t think he figured it out, but tried many experiments.
Keras “Illuminati confirmed”
I think running a successful social enterprise is largely similar to running a successful vanilla for-profit.

That said, I found the How I Built This episode with Perry Chen from Kickstarter quite insightful on the social enterprise topic: http://pca.st/episode/dbc5c113-aa4d-4d68-8da0-0befdf6809f8
Except finding terrorists isn't a "political purpose" it's a matter of life and death.
Well, not positively, but there was a time when it didn't block you from zipping up a little snippet of code and sending it to someone or saving it a draft when your in a hurry.
Right - for desktop use though, there are Firefox and Chrome updates with mitigation. JavaScript exploits were the most dangerous desktop scenario.

For servers running Ubuntu, what is the risk, as long as my services don't run arbitrary user uploaded executables? As far as I can tell it is that a different remote code execution exploit can now read the entire memory, possibly leaking secrets. Assuming we have a kernel update in the next few days, I would need to install it immediately and rotate passwords and keys. Should I revoke TLS certs? Is that paranoid?
If no one saw it coming, why is it all over papers which suddenly appeared in the last few days here? It seems that in the world of high assurance security, this was largely assumed, but not provable due to propriety walls.
Sorry if I started the discussion provocatively. I'm thinking that there should be an alternative to throwing a $1000+ device in the garbage or passing the (potential) problem onto someone else. I don't know if there are any other alternatives, but I wanted to have a discussion from that angle.
Having started in the 386 era, and having upgraded my AMD 386 from its original 2MB of RAM to the full 8MB, my first reaction on seeing that "64MB SDRAM SIMM-72" spec in this article was "wow, that's a lot of RAM!"
Electric VR suit shocks gamers
cat /proc/cpuinfo | grep pti
Anti Miner Extension Supposedly Mining Itself, Removed from ChromeStore
Comments here are hilarious. Replace "Peter Thiel" with "Elon Musk" and "conservative" with "liberal" and the circle jerk will fly.
I haven't run into that issue, but another issue that will likely trip up a lot of devs is the extremely slow shared volume support. [1] Mounting a database directory from the host is pretty much a no-go. Mounting source trees (e.g. React app with hot code reloading) less so, but still much slower than native. Many devs have resorted to workarounds such as NFS or rsync.

[1] https://github.com/docker/for-mac/issues/77
Can someone explain what 1, 2 and 3 series in the plot means? What are we looking at? Why did one of them all of a sudden spiked?
They will be available on 2018/01/09:

"Ubuntu users of the 64-bit x86 architecture (aka, amd64) can expect updated kernels by the original January 9, 2018 coordinated release date, and sooner if possible."

https://insights.ubuntu.com/2018/01/04/ubuntu-updates-for-th...
See https://webgl2fundamentals.org/webgl/lessons/webgl2-whats-ne... for an overview of new (well, to WebGL at least) features.

Direct texel lookups and the expanded texture formats has been amazing for using WebGL 2 for GPGPU purposes.
Fair enough Thiez, the difference between the current situation with and without GitMask isn't a whole lot.

The only difference is that GitMask invites more anonymous developers. Whether that is in the interest of other (anonymous and/or non-anonymous) developers and users is a matter of perspective, and case-by-case hindsight 20/20.

As for holding someone who's known accountable for their mistakes. That's the entire point of using your real name when it comes to professional work: it increases accountability.
Very timely, in view of the recent developments :)
Human race has evolved from that sub-atomic particle of star dust since eons and reached this point where we are typing this comment. Obviously this cannot happen without the necessary checks and balances throughout history and it will be this way going into the future. So no need to spell doom, though the cautious gene in us still keeps vigil.
If you bought a car that needed to go 60mph and a subsequent update to the car from the manufacturer for safety meant it could only go 30mph, there would be legal consequences.

Of course you can't predict every contingency, but some of them you pay for.
Fat chance Peter Thiel will be the person giving us that.
Food-safety expert warns Silicon Valley $60 ‘raw water’ trend could turn deadly
It is a political purpose, because "terrorist" is a politically charged definition whose application changes with the political climate.
You don't really even have to pay extra. Just use the biggest instance since and you are guaranteed to be isolated because there is no room for anyone else.

Granted, that only works for workloads that are spread across enough small instances.
The raiblocks White paper does an excellent job explaining why it (and other DAGs) are scalable: https://raiblocks.net/media/RaiBlocks_Whitepaper__English.pd...
Yes, but XEN said 64bit PV aren't affected either because they already run in KPTI like environment. So I assume 64bit HVM like ours aren't impacted for our work load.
Htop is pretty leaky on any system.
> expert users of something like vim or emacs that can do every text edit function quickly with an external keyboard in iOS

Show me where iOS implements incremental search and a persistent mark, then. For that matter, show me where any OS implements them.
I don’t know the game or the engine, but if this is a login service, this is likely traffic from all of the players.
Late December, i.e. a week or so before the cat actually got let out of the bag, and probably around a fortnight's notice until the originally planned coördinated announcement date.

* https://news.ycombinator.com/item?id=16074531

That is hardly enough time, considering that it is likely a holiday period for most of the people concerned, to prepare what needed to be prepared. Google and Intel gave themselves six months, in contrast, and they gave Ubuntu since November 2017.

I still haven't nailed down how much advanced notice Matthew Dillion, author of DragonFly BSD, was given; although his apparent level of preparedness with patches on 2018-01-05 can be attributed to the fact that he actually talked publicly about the problem in April 2017, months before Google Project Zero secretly reported it to processor manufacturers in June 2017 in the first place.

* https://news.ycombinator.com/item?id=16084641
I was using RDP. Had different issues with each terminal but am going to try local, and I'll report the issue(s) on GitHub.
Wait a few months if you can.
Web Numbr – Track Numbers from Anywhere on the Web
I don't doubt that one would not want to take MDMA daily or regularly, and I doubt it will ever be prescribed or used like that - at least not in recreational doses. Their potential in large doses seems to be in therapeutic intervention.

If you know, I'd love to hear more about the mechanisms of psilocybin in the way you described SSRIs - I've done some reading but my understanding is certainly at the layman level.

Hopefully we will see research about related substances that exhibit therapeutic qualities with less toxic drawbacks.
I wonder how well a BSD, such as OpenBSD runs, since they have supported more ancient architectures. I remember having a quite low-end 486 laptop in ~2000. Linux was pretty much unusable, but OpenBSD ran great on the hardware.
I'm guessing AMD now has some of the fastest CPUs on the market.
And then it has to communicate new state to those 64 players 60 times a second for another 3840 reaching 7680 packets per second.
You have a lot of good points. I think it's just as fair to say that if Intel were to foster real conversation and not just fire up the PR monster there'd be less outrage.
I actually didn't get it until I clicked on that link and was, admittedly, laughing... sorry all.
I have a directory of .org files sitting in Dropbox. I occasionally export them to html pages. I’ve been meaning to organized it and turn it into a git repo since GitHub renders org mode.
Just curious, isn't there some sort of "contest" or competition mode that hides scores? Or is that only for a particular post and can't be applied for all posts going forward and hence not applicable here?
You're running on GKE. Of course that's easy, they're handling all the difficult parts for you! It's still not that difficult running it on your own servers, but there are many more pain points.

Please get some experience with that, then re-evaluate whether Docker or Kubernetes is easier for small deployments.
Perhaps it’s multiple instances?
Exactly why. Even if the performance impact is 3%, that means the world has lost maybe 2% of its CPU power overnight. That's an utterly massive amount of hardware, many billions of dollars, maybe a trillian.

It's not just the cost of the processors, but everything that contains them. Truly 'fixing' all the affected products would bankrupt a county but we should get a refund for the CPU's at the least
This is the most helpful bash diagram ever... why didn't I search for this before! https://zwischenzugs.files.wordpress.com/2018/01/shell-start...
Humira’s Drug Formula: Start at a High Price, Go Higher
Brendan Eich?
I'm a backend software developer at Yahoo!, Inc. (lately known as Oath) with the Platforms team where we provide Monitoring as a Service, over a year and a half and I'm actively looking for opportunities outside.

I came across many interesting open positions on the career site of which I found these
http://app.jobvite.com/CompanyJobs/Careers.aspx?c=q0XaVfwM&v... http://app.jobvite.com/CompanyJobs/Careers.aspx?c=q0XaVfwM&v...
http://app.jobvite.com/CompanyJobs/Careers.aspx?c=q0XaVfwM&v... to be good matches. I can be reached at snehasatish@outlook.com to discuss further. Looking forward to getting in touch!
So how will I do all that in seconds on any platform with only a URL that is end-to-end encrypted and gives me multiple runtime options?

What happens when the "authorized code source" doesn't agree with my program?
ASUS brings mesh support to exsiting routers via firmware updates
What is the expected outcome if its patched vs. not?

I am getting:

fpu_exception	: yes
But walking with thousands of other people is nice, except in places where large sidewalks were turned over to cars. Old photos of ranhattan show shockingly large walkways which were later turned in to asphalt.
Another example of the shocking bloat of modern software.

I had a 486 with 16 megs of RAM and was able to browse the web (Netscape 1.0!), compile kernels, and have something like 8 people logged in remotely checking email.
I've recently gotten back into (thanks to cyber1 and Brian Dear's book) PLATO and its TUTOR language, which despite being weird from a modern perspective makes making interactive lessons (its initial purpose) easy. I've always wondered why we don't have a modern equivalent to TUTOR, but Idyll looks (despite obviously having a very different syntax), to be filling a very similar niche.
Considering your nickname, @OP, I assume you’re the author of the website: The site is currently broken on screens with a width of 1024px or less.

This screenshot was taken on my secondary monitor, which is 1280x1024 in portrait mode: https://i.imgur.com/n3LGCKM.png
I don't mind giving this a shot once I have the time for it! :)
Tourism can be weather dependent too. Visiting Ireland in january isn't quite the same as May.
> Personally, I do find it....amusing? that public announcements
were moved up after the issue was deduced from development discussions and
commits to a different open source OS project. Aren't we all glad that
this was under embargo and strongly believe in the future value of
embargoes?

This is a bogus criticism. The issue was successfully embargoed for something like six months(!) before being published a week early.
I am also increasingly desperate for an internet place to read and discuss things in good faith. When HN started to go downhill I shifted to Twitter, but Twitter is like poison.

Perhaps we can create a new place?
Neblio Claims to Be Enterprise Blockchain Solution – iCoin Blog
You can always put the link along with the lines so that you can still access it.
Actually if you are using StatefulSets and PV, then kubernetes is a better fit for you.

However, Swarm is undeniably simpler to work with unless you have very specific requirements that only K8S provides. The yml file is incredibly simpler.

Docker Swarm is the Kotlin to Kubernetes' Java. It's a much pleasanter and much less intimidating way to build production systems that scale pretty well.

Kubernetes needs you to have load balancers setup which can talk K8S ingress. Bare metal setup for k8s is a huge effort (and I have stuck long enough on #sig-metal to know) as compared to Swarm.

You should try out Swarm - you might choose not to use it, but you will enjoy the experience.
I don't disagree. In fact, even the Raspberry Pi is more powerful than this PC.
Yes, with a small difference that this does not happen on a Linux box.
It affects WAY more ARM processors than A75. All the fast ARM cores are vulnerable to one of the two meltdown flaws and half are vulnerable to a subset of the third flaw (with A75 being completely vulnerable).

https://developer.arm.com/support/security-update
You should see "pti" on the "flags" line of /proc/cpuinfo. You apparently don't, so you don't have page table isolation.
That really depends on the jurisdiction. For example in Germany it is illegal to share pictures of persons not being yourself without the other party's agreement. Google Translate does a decent enough job on the German Wikipedia entry:

https://translate.googleusercontent.com/translate_c?depth=1&...
I use it whenever I need to debug a piece of code. For example I like to play with fuzzers, so when one of my fuzzers finds a crash in whatever software I'm fuzzing I'll re-run it in a x64dbg and see what's happening.

I'll also use it to debug my own assembly code if I'm working on a low-level project. Projects include trainers for offline games, low-level system inspection tools and/or security tools (such as monitoring which process opens which files etc).

Sometimes I need to reverse malware for my job, I'll use both IDA (for static analysis/keeping notes) and x96dbg for dynamic analysis.
I'd like to hear a criticism of this.
Personally, I keep a digital commonplace book —

https://en.wikipedia.org/wiki/Commonplace_book

In practice, this ends up being a huge markdown file (so I can store readable code) with entries prefixed by tags to make for easier searching.
I agree but the premise of my comment was to take a deep hard look at reasons to use Twitter and then use it judiciously and with a purpose. Something similar to keep some time aside for just Twitter.
It does something differently funky for me: https://i.imgur.com/gnXgBK5.png

Also I'm not a fan of all the visual noise, such as the orange paragraph markers next to every title.

EDIT: Replaced "fucking" with the intended "funky", I have no idea how that typo happened.
Here's the directly subsequent paragraph:

> However there are lots of systems out there that are not running “normal” Linux distributions for various reasons (rumor has it that it is way more than the “traditional” corporate distros). They rely on the LTS kernel updates, or the normal stable kernel updates, or they are in-house franken-kernels. For those people here’s the status of what is going on regarding all of this mess in the upstream kernels you can use.

Mint is one of those.
$ dmesg | grep isolation

[ 0.000000] Kernel/User page tables isolation: enabled
Selecting a Cloud Provider: A guide from Etsy
>They acted in good faith.

That's new for a company, and it's not indicated by their PR spin right now.

What I think happened : a company produced a product with a problem. Probably not out of malice, but ignorance.

One of two things happened after, which can kill the 'good faith' argument ; the problem was found internally and hushed, or the problem was found externally and minimized to reduce financial burden arising from fixing the problem and the PR related.

We have no way of knowing how well it was known about internally, but we can all see the PR going on from Intel right now, and I hope i'm not the only one who reads into those press releases to establish intent.
The viewpoint that things are getting better is usually reserved for those that were pretty lucky in the birth lottery to begin with.
Great work! I love this. Unfortunately, "Science projects" like this are the first thing you have give up when you're married with children.
I’m not a browser engineer, but I’m pretty sure checking if an element is rendered on the screen is not CPU intensive. Browsers maintain an entire rendering tree (parallel to the DOM) for that exact reason.
I believe those are also the last linux friendly ones so you know that once you either get too sick of the newer OS X whatevercat or the version your are stuck on stops receiving security updates you still have useful hardware.
Maybe add a warning message or something for the sound? It just came blaring out of nowhere when I pressed the demo button.
> How do I install GKE on my servers? ;)

Great question! All major Cloud providers offer managed Kubernetes services:

https://cloud.google.com/kubernetes-engine

https://azure.microsoft.com/en-us/services/container-service

https://aws.amazon.com/eks

https://www.ibm.com/cloud/container-service

The choice is Cloud + Kubernetes vs. roll everything on your own hardware.

Running your own hardware is a major IT effort. Kubernetes is just a part of that effort. Then you have take care about planning, provisioning, logging, monitoring, alerting, auditing, networking, storage, oncall.

You either run Cloud + Kubernetes and get rolling in 15 minutes, or you hire IT headcount.
NetBSD could run much better.
Could you estimate for us when "HN started to go downhill"?
Really Cool Instagram Brute-Forcer (No Limits)
I get what you are saying but right now there are no known exploits and with so much patching happening will there ever? These things are always over blown in the media and the reality is very little damage happens to the average user.

It’s servers perhaps that are most at risk.

Also I don’t do much on my Windows, mostly gaming, I run an iMac and boot into it only for certain tasks, so it’s extremely unlikely I will ever have an issue.

Any performance hit, even if small is just not worth updating for to me.
You're probably right, but I'll be honest: the idea of some of my family and friends watching something other than Fox News all day makes me wishful.
Diversity of thought is a good thing. I hope Thiel succeeds.
I would make a different argument about over-provisioning. Using infrastructure at maximum capacity means there's less of a safety margin and it's often unpleasant due to traffic or crowding. Reducing capacity in the name of efficiency doesn't seem like a good thing.

Instead I'd argue that using infrastructure at maximum capacity isn't something we necessarily need to do ten times a week. It needs to be tested, but maybe not that often?
I think it's naive to think you're completely protected just because code isn't supposed to ever run. It seems as though the simplest and safest piece of mind is to use some extra layers of protection ala SELinux.

This won't stop the memory from being accessed, but it has a better chance of stopping things that can exploit the bug(s) in the first place.

Revoking TLS certs is probably a little bit on the side of paranoia.

I think you're on the right track -- just watch for the kernel update, and rotate passwords plus keys if it's not a hassle.
Yes, it is an interesting case, I hope we get more detail than this paper soon.
Windows Client – PowerShell script to query protection status
In response to your first comment, TWTR has never made a profit. Ever. Stopped reading your post after that because, you know, you’re wrong. Just saying
I made a test to see if your iPhone has been slowed.
Three factors play in:

- where the subject is looking. Make sure they are looking at leat 4 or 5 meters out, not at you taking the picture! Your pupils get slightly closer and further depending where you look

- where the ruler is. Make sure it is at the same level as your eyes, in terms of distance from the back/front of your head. Make sure the ruler is as close to 90 degrees to the nose as possible, as parallel to the eyes as possible

- make sure the camera is as parallel to the ruler as possible

Also I find printing out one of the pic (just b&w on a regular laser printer) can be easier to measure, as opposed to do it on a screen.
Sounds questionable. Many substances with high abuse potential are used by medicine, and alcohol has no medical benefits that I know of but creates loads of problems everywhere I look. I don’t feel like I’m making any non-obvious points.
I agree - I thought you were making a valid point.
I wonder how fast the 486 (its logical design) could run if Intel produced it today, i.e. with modern fab technology.
Some of you here must surely be familiar -- one of the most engaging biographies of Tesla was written by Margaret Cheney: Man Out of Time:

http://www.simonandschuster.com/books/Tesla/Margaret-Cheney/...

(The title might sound a tad clickbait-y, but deservedly so. Also remember that it was written in 2001, about six years before HN was created.)
I agree, but Metafilter is extremely heavily moderated and there is a (small) cost to get privileges to comment/post. It also has a full time staff managing the community. I don't see either of those things changing on HN =/
Huh? Backspace works the same for me in Bash C-r as it does in Emacs C-r.
SpecuCheck
In Praise of Hierarchy
What is the other way round? (I worked on the fixes for Red Hat).
Then you should get yourself a different ISP or a VPN.
YC Backed Request Network Hits $1
>the right has no legitimate news networks.

Unless you specifically mean TV channels, the right has it's fair share of legitimate news outlets, like the WSJ.

I'm not sure that anyone would be better off with any more 24h cable news channels. The problem with all of these, regardless of political orientation, is that there's only so much useful content that can be produced on an ongoing basis that will appeal to the common denominator. As a result, we end up with the same kinds of talk shows and propaganda pieces that plague all cable news channels, and ultimately serve to delegitimate them.
Is this really an iCloud issue? My first thought would be its a HFS+ vs APFS issue.
A number of ways are listed here [1]

1. With dmesg

dmesg -wH | grep 'page tables isolation'

2. With /proc/cpuinfo

grep cpu_insecure /proc/cpuinfo && echo "Patched" || echo "Unpatched!"

[1] https://askubuntu.com/questions/992137/how-to-check-that-kpt...
I wonder if YC got tokens as part of their investment.
Funny remark about it being silent.
In the text they mention that it's silent when it's gliding. Well, duh... in the video they say it's just silent.

If you look up a video on youtube, you'll hear that the propeller still cause a lot of noise. So it's only more silent from the ground.
They do, they break embargoes and that's why they are now paying the price for it.
Canvas-area – A lightweight HTML Controller for one or more canvas children
I would agree that so far there doesn't appear to be any measurable difference for a typical web application. We have some heavy postgres data crunching jobs that might be affected but based on the examination I've done so far I'm inclined to say those weren't affected either.