skysight-inc/HackerNews huggingface dataset:
> Any time someone can have a financial stake is something like a prison while also holding immense political power, we should all be very scared and concerned. This is why there's so much well-placed concern over the private prison industry.

I still don't get the hysteria-like concern over private prisons, when the extreme majority of all harm and money has related to the government prison system, which almost never gets tagged eg on HN in conversations like these. I've brought it up a dozen times over the years, and I'm usually the only person in the thread bringing it up. Yet the fear about the private side of it, is dramatic. That upside-down concern doesn't make any sense to me. That isn't to play down the negatives of the private prison industry, rather, it's to highlight that the public system is radically larger and just as financially motivated. Some of the strongest and best funded advocate groups against pot legalization have been government prison & police groups / unions / lobbyists; they all have a truly vast, financial stake in the government prison system.

Those people earn relatively decent wages. There are maybe 2.5 million of them total in the system, across all government prisons and law enforcement related jobs. They vote. Their representatives lobby aggressively. They hold immense collective political influence, far beyond anything the private prison industry could muster.

Hiniger makes $1 million? The total cost of 8 or 12 government cops. We've got 300k or 500k too many. Yet, again, the private side gets a hugely lopsided amount of attention.

What's the total prison population scale difference between government & private prisons, between 1980 and 2017? 20 to 1? More than that?

If we're adding up lives destroyed, the number of people harmed by being unjustly put into government or private prison, the economic value of all those destroyed lives, how would that come out? How many millions of people were put into government prisons over 30-40 years that shouldn't have been and how does that compare to the private industry? We must surely be talking about trillions of dollars more in real cost to society from the government side vs the private side.

The real comedy of the fear? The US prison population finally began to stop rising and began to fall, as the private prison system has gotten larger. And pot is getting legalized during that time as well. Peak war on drugs existed during peak government prison complex. Nobody likes to talk about that.
"There was also no form of interprocess communication other than the filesystem..."

Until Doug McIlroy invented pipes. And the modern Unix shell pipeline style of creating complex programs.
I am not sure if those would strictly qualify as inventions or innovations/improvements. We already have a list of designs to build and power once we have significantly better batteries, or significantly better ways of harnessing other energy source (e.g. nanorobots powered by body heat). I do think that those "significantly better" batteries, will need to be completely new ways of thinking about the battery, which would be the disruptive part. But once we have one, the rest is "let's put that to good use, and into every house" kind of thing.
I'm about as fed up of seeing these snarky comments as I am of seeing absurd "our incredible journey" announcements from broke companies.
That would be equivalent to an executive order, I’m not sure if you could call it a law, more like a regulation. But maybe things were a bit different back then.
Oops, looks like I linked to the source stylesheet (in CSSNext) instead of the built, CSS3 version. I just fixed it, thanks for letting me know!
I don't feel we want that to be how it works, but I also have no good ideas of how it could work differently, while retaining the speed of discoveries.
I'm not 100% sure here, but I believe this is the specific kernel level fix that also addresses variant 1 https://lkml.org/lkml/2017/12/27/2
Mostly OT, but is there an explanation for why the "Meltdown" vulnerability was named specifically as such, I mean besides the term's meaning when it comes to "melting" security barriers? Coincidentally, "meltdown" is currently a very popular term to describe reactions/revelations re: a soon-to-be-released politics book titled "Fire and Fury" [0]. I guess yet another example of "Naming things" being one of the hard problems.

[0] https://www.publishersweekly.com/pw/by-topic/industry-news/p...
Very much agree. The other benefit that I see from the branding is that it serves as a bulwark against the (mis)information that will appear from those who might have a vested interest to downplay it (eg: intel).
Beware, fellow plutocrats, the pitchforks are coming (2014)
But that's not possible if you're writing a library.
I switched back to Firefox when Quantum came out and so far I've run into two sites that don't work in Firefox but work fine in Chrome: The Home Assistant web interface (at least the log in page, I can't get past that) and the UniFi cloud management site (it works fine locally).
Recent new grad that joined Google in the past few months.

Total comp (base + bonus + stock + signing bonus amortized over 4 years) is 185k. Higher than expected because of recent stock increases & I negotiated with competing offers.

TC next year will be closer to 200k.

(throwaway account)
I spent two weeks (my Christmas vacation) working on rough drafts for several problems I wanted to solve in 2018. PAST was one of items I listed.

(The list is here: https://github.com/paragonie-scott/public-projects/issues/6)

99.9% of that time was spent trying to come up with a better name/acronym, without success. I decided to just give it a plain/obvious name until a better one surfaced.
Original: https://www.technologyreview.com/s/609642/the-year-climate-c...
> As a general rule of thumb: public key is what you use when you have no other choice.

I think you mean, "private" key is what you use when you have no other choice.
Well, these are workarounds because fixing the problem at the source is hard.

The right fix is to prevent speculatively executed code from leaking information.

Here that perhaps means associating cache lines with a speculative branch somehow so that they aren't accessible until/unless the speculative branch becomes the real branch. (I have no idea exactly how that would be done or what the performance cost might be... I'd really need to know the details of how speculative execution is implemented in a particular CPU to even be able to guess.)
This is a great (read:inexpensive) resource for big data modelling if someone is willing to build for it. By choosing to be the customer of least concern and designing software that is able to handle being bounced, you are getting a terrific deal, assuming your work isn't particularly time sensitive, such as in a bioinformatics research lab.

I wish they put the minimum time you will be granted cycles though, as that information seems like an important design constraint when choosing the size of data chunks you design for.
Clone() came much, much later. In fact, the original thread-creation syscall was vfork() in BSD, IIRC.
Maybe we should make this a thing on twitch
I will add that to the home page. Does this sound good?

I have no intention on using the emails for anything but notifications from HNNotify. Included in that are: new features, account notifications, reply notifications, follower notifications (future).

Your email will never be used to solicit/sell anything 3rd party.
It's also a huge gain to a number of science disciplines that don't have access to a mainframe or supercomputer, but have development resources.
If we drop the requirement that someone who is alive on the ship when it leaves Earth has to be alive when it arrives at the destination, it becomes much more feasible.

The basic idea is to combine two kinds of ship, neither of which we know how to make work individually, to form one that we can make work.

The first is the generation ship. The problems with those are that (1) we don't know for sure how to make a completely self-sustaining ecosystem that can keep a large enough population for viable colonization alive for the hundreds of generations it would take to reach their destination, and (2) such a population would require a freaking large ship, raising all kinds of challenges.

The second is the cryogenic suspension ship. The problem there is that we don't know how to unfreeze them without killing them.

Can we address the generation ship problems? Both problems stem from the need to have a large population. If we didn't need a large population, we could use some of the space that would have otherwise been consumed by colonist families to bring food to supplement the food produced by the ship's ecosystem, and eliminate the rest of the space they would have occupied.

Assume we can develop a food that can be stored indefinitely and that has the caloric density of rice (200 calories/cup). There are ~4 200 cups in a cubic meter, which gives 840 000 calories in a cubic meter. At 2000 calories per day, that's 420 days of food. A storage unit 10 meters on a side gives 1150 years worth of food for one person. And this is assuming that the person is getting all their calories out of storage, not depending on the ship's ecosystem.

If the storage food only needs to be a supplement designed to make up for things that we can't figure out how to get from the ship's ecosystem, then the numbers get even better.

This is where the cryogenic suspension comes in. We can't suspend and revive people--but we can do eggs and sperm indefinitely and revive them. Our cryonic generation ship will carry the colonists as frozen eggs and sperm. The only warm people on board would be the crew to operate the ship, and to raise the next generation crew.

Note that the next generation crew could come from the frozen eggs and sperm rather than from mating among the current generation crew, so we don't have to worry about a small crew becoming severely inbred during the trip.

If we can ever develop robots to the point that a robot can raise and educate a human baby without any human supervision, then we can leave out the crew and the food and the ecosystem, and just send robots plus frozen eggs and sperm.
So I trust you completely here - but I lack the crypto chops to understand why that’s the case, and I’m interested in understanding.

Do you have any good recommended primers that’d help me get it?

Or should I just get off my arse and finally do cryptopals? ;-)
How I Hacked My Schedule to Get 3 Days of Deep Work a Week
Side-effects strike again! Not only does the hardware have observable side-effects that are not cleaned-up, but our browser languages allow pervasive side-effects which are used for exploits (e.g. precision timing).
If you're trying to destroy the country on behalf of Putin forcing millions of middle aged chronic pain patients off cannabis onto opiates and inevitably heroin and fentynal is an efficient way to murder millions of people without firing a single shot.
Being descended from royalty is less about genetics and more about the rules that govern inheritance amongst european houses. What matters to European royals is first son to first son. Drop all the bastard lines (Fitzroys). Then drop all but a few female lines. Those with no sons can stay (ie the current QoE). Don't try to democratize an elitist and unfair system by suggesting we are all participants. Something like half of Asia is genetically related to Genghis Kan. That doesn't mean he would have ever considered them family. But given the genetic car crash that is european monarchy (google "Hapsburg chin" or Haemophilia in the UK royals) I don't want to be related to any of them.

>> You are of Viking descent, because everyone is.

No. The real vikings (not the TV ones) were almost universally blond or red-headed. If you are black, your ancestors were not vikings any more than my ancestors were Zulu warriors. The genetic lines merge further back than the existence of these named groups, making us at best related to them, not descended from.
Isn't that only for Meltdown?
> Just a thought: Why did alcohol prohibition require a constitutional amendment but drug prohibition didn't?

Prohibitionists wanted an amendment because at that point in time, no amendment had ever been overturned.
I was considering writing this on a throwaway but no, this makes me so incensed I have to speak up as myself.

As a long-term, gainfully employed and rather successful engineer, marijuana was the _one_ reason I was able to get my unhealthily low body weight up to par after years of attempting other methods. I would go multiple days without eating/without an appetite, between this and my weight resulting in a multitude of unfortunate ailments. To say that pot "destroyed" my life is about as far from the truth as you can get.

This is such a heartless decision, paramount in my mind to the same corrupt ideologues who enabled prohibition; and while I'm in no means surprised, I feel like there needs to be stronger action at this point to fight back.
I may not have been so clear (English is not my native tongue, etc), but you repeat what I wrote:

* it is the scattering of the light of the sun that obscures them

* On some pictures, stars are visible (I even provided a link)

However having said that you also say "It really _is_ the exposure issue" but it has nothing to do with light scattering?
That's fantastic. I know whom my next CPU will be made by.
Well, given the territorial claims, yes, kind of that one. It just depends which government you believe as to whether the island of Taiwan is occupied territory, or everything else in China is occupied territory.

And these are governments we're talking about, so, needless to say, both sides killed millions to make this happen. Not because those people that got killed worked for the other side or were doing anything at all (not even protesting most of them), but merely because they wanted to frighten the rest enough to not do anything against them.

One of the nicknames for one of the actions of the Taiwanese government was "the White terror" (death toll: at least 10000, there had been a protest march against them, so naturally ...), the mainland Chinese government had a policy that each little town had to have at least one public execution, and millions died.

https://en.wikipedia.org/wiki/History_of_Taiwan#Republic_of_...
Why? They pass it on to customers. More interesting if Google or Facebook will react. They could need up to a data centre each to compensate for that (I assume both have very syscall heavy applications). Maybe not suing Intel but pouring more money into the development of competing chips
As far as I can tell this only measures the impact of the Meltdown bugifx/kernel patch for Intel CPUs.
Would be interesting to see the accumulated impact of the mitigation of Meltdown (KPTI) and Spectre (using Retpolines)
The phrasing in the post says "The SharedArrayBuffer feature is being disabled by default", so depending on your situation, you may be able to instruct your users to manually enable it, or you can at least enable it yourself to continue development in the meantime.

Of course, that will likely be a browser-wide setting, so telling others to enable it will put them more at risk of these attacks.

(As mentioned in another comment, the more robust solution is to use window.postMessage as a fallback, although it depends on exactly what you're doing.)
Thanks for reiterating this point. It’s hard to focus on the silver lining when it’s issues you care about.
The referenced violence in the parent comment is related to the trafficking of rather than the usage of pot, I believe.
There's nothing I can do at this layer that will stop people from using JWT/PAST/etc. as an attempt to build stateless session management systems for some ill-conceived "horizontal scalability" requirements, except maybe continue to tell people this is a bad idea and don't do that.

The rest of the points (i.e. the problems with the JOSE standards) are what PAST seeks to solve. The "do not misuse" problem is more complicated, and if I were to add e.g. "do not use this for stateless sessions" at the top in big red letters, that will only tell developers "this is unsafe, keep using JWT instead".
It may be not fine (your sarcasm was noted) but I still don't see it in this instance.
Jan 9, 2019? 2050? How much longer is long _enough_?
New CPUs could just convert the retpoline back to the original jump in microcode, and enable the now timing-attack safe branch predictor.
Well, yes, fork()/exec() and spawn-like things are capable of doing the same things, more or less.

On the other hand, shell pipelines were used for concurrency before BSD added networking code. And I have doubts that shell pipelines would have developed without the fork()/exec() model---see the author's Windows NT (and earlier) with really, seriously broken shell models.
In the old days this would be no biggie as every non-trivial site would have at least half a dozen different kinds of Unix workstations anyway. SPARC, MIPS, PA-RISC, AXP, m68k, POWER...
Previously discussed here (just found the link):

https://news.ycombinator.com/item?id=16067322
That's not how this works. The court operates under the rule of stare decsis which would already make this a tough hill to climb. Even more, the line of reasoning in the decision agreeing to federal restriction of in-state marijuana sales goes all the way back to the great depression and is really unlikely to be overturned in just over a decade since it was decided last time.
A Job Doesn't Have to Be for Life
That looks like linux, not mac os.

But still.
I can hurt them being sober too.

If I'm willingly taking a mind-altering substance, then I'm 100% aware that I can be prosecuted if I were to hurt bystanders. Yet I don't see why I should be prosecuted merely for taking the substance if I take the necessary precautions to not hurt people.
When you focus on certain groups you're probably missing the point.

There are Christian parents who have banned their child from returning home when they renounced religion.

And there are many Muslims who accept people after they renounce Islam.

Instead, probably better to say: When people harass someone who doesn't agree with them, I feel afraid for that person's safety. That's not racist and still honors your fear.

To just focus on Muslims doing this shows a bias and lumps many innocent people into a stereotype.
You've got 25 submissions to HN. Of those, about 20 are for Hyperapp, and 5 of those are in the last week.

Hyperapp looks neat, but you're pretty much spamming at this point.
Related HN post to your blog post on the benchmarks on CPUs vs. GPUs on Google Compute Engine:
https://news.ycombinator.com/item?id=15940724
There's an indirect jump instruction. It's not very good though, and has a notorious bug with addresses ending in 0xFF.
If you love your job then work sane hours. You'll do better at your job. Really.

There is almost always another way. By starting with assumption there isn't you're dramatically reducing the changes of finding it.
By your logic, Sessions should be directing police officers everywhere to harshly enforce all traffic signs, to harshly enforce jay walking laws, and to go bust every small poker game for illegal gambling. Enforcing all our laws with equal effort is a massive waste of resources. Plus, we still have a lot of fairly crazy old laws on the books that no one cares to enforce. It took until 2003 for the Supreme Court to say laws against sodomy were illegal. We don't want to rely on congress to choose which laws to enforce, we want to rely on smart and empathetic prosecutors. Unfortunately Sessions does not seem very empathetic.
That's Gnome, not MacOS ;)
This was the fix I was going to suggest. Especially with AVX leakage.

Right now many function calls don't safely wipe registers and the new side channel caches found in Spectre. There really needs to be two kinds of function calls. Maybe a C PRAGMA?

The complier has parent function call wiping as a flag; the code has pragmas that over-ride the flag.
IBM offered VM-level sandboxing back then, starting from s/370 hardware in 1972.

https://en.wikipedia.org/wiki/VM_(operating_system)
It's not just "untrusted code" any more.

The "true secure" way is not running any untrusted code, not connecting to any untrusted networks, and not accepting or storing any untrusted data.

At that point you can't run a computer. It's just not an answer to say "don't let bad things in" because bad things are always going to get in.

And with side channel exploits getting more and more common, and with them being worse and worse, running any code on your machine is basically giving that code any and all of your data on the machine...

Telling users (even highly technical users) to "never ever run any untrusted code ever, and if you mess up once and run untrusted code you have completely ruined the trust of the whole machine and need to start over from scratch while assuming all of your data has been compromised" is not only infeasible, it's impossible. If this is the case, we have lost the "security" game.

It's easy to say "throwing oo execution away" is an overreaction, but if it's necessary to allow multiple programs to run on one machine without them all having what amounts to full access to one another's information, then it might be necessary. Already we know that we can't use compression with encryption, we can't use any kind of "exit early" with most kinds of encryption. It might just be that OO execution is fundamentally opposed to secure computing. At it's core, it's letting the processor do different things depending on what it can see is coming, it's almost a definition of an oracle! That's always going to be a very dangerous game to play.

It could even just be that CPUs need a "secure computing" mode, or maybe even a secure co-processor that disables all of these optimizations. But at the very least, I think changes are going to be necessary, and a 15% perf reduction might be the least of our worries.
It was all the "liberals" and the phony "originalist" Scalia who ruled for the government in Gonzales.

https://en.wikipedia.org/wiki/Gonzales_v._Raich

That is all B.S. though. The real issue is federal vs. state power and that has nothing to do with left and right.
While you are at it, have you considered publishing it to the Firefox and Edge extension stores? Supposedly it is pretty easy to convert a Chrome extension to work in Firefox and Edge these days.

(I'd consider using it on Edge, for at least one user.)
BidMotion | BackEnd Engineer | Paris | ONSITE, Full-time | http://www.bidmotion.com/careers#op-102102-backend-engineer-....

We’re a 3 year old growing AdTech company based in Paris and we are looking for a Backend Engineer experienced in real-time distributed systems.

This might be the job for you if:

- You have experience with programming high performance systems in Core Java

- You have worked with ZooKeeper, Kafka, Consul or any of the other usual suspects

- Minimum 3 years of experience

- You’re fluent in English

On the other hand, what do we offer you?

- Rebuilding components from scratch (you know, the way you always wanted to ;))

- Wish list – choose your own equipment

- Latest technology

- Personal space: 1 engineer - 1 desk

- Be part of a team with very ambitious goals

- Balance between your professional and personal life

- Playstation and other perks (Snacks, team events, etc...)

- An English speaking work environment in Paris

- And of course, very competitive packages

tl;dr: We’re small, but shooting for the stars. If you are looking for a place where you can make a huge impact and grow, come join us.

Don’t hesitate to get in touch with us hr@bidmotion.com or check other openings http://www.bidmotion.com/careers
Other domain used to publish the same info: https://meltdownattack.com
Docker for data scientists: Introduction and use cases
and multiple of them had enough points to make all others duplicates:
https://news.ycombinator.com/item?id=15467819

https://news.ycombinator.com/item?id=16029467

https://news.ycombinator.com/item?id=15264053