skysight-inc/HackerNews huggingface dataset:
That's the Xeon Phi concept... which is apparently being taken out back and shot.

Our current programming paradigms don't adapt well to massive parallelism, except for some small classes of "embarassingly parallel" problems (e.g., make -jN).
> it doesn't matter if our instructions are broken, regardless of how widespread in use they already are --- they'll just fix it in the software.

What are any other options? It's hardware, that cannot be patched. Of course they will change chip designs going forward, but what else do you suggest folks do with the billions of chips that exhibit this problem?
> For security reasons, the T2 is the iMac Pro hardware’s “root of trust,” and it validates the entire boot process when the power comes on. The T2 starts up, checks things out, loads its bootloader, verifies that it’s legitimate and cryptographically signed by Apple, and then moves on to the next part of the boot process.

If they start putting this in every machine going forward I wonder if this will be the end of the hackintosh
BTW: Your account discovered several issues in my naive logic of crawling the entire history of a user.
This is awesome! Substrate VM not being open source was a major reason I wasn't more excited about Truffle/Graal. Without Substrate VM, startup times for Truffle-based interpreters are terrible (see http://nirvdrum.com/2017/02/15/truffleruby-on-the-substrate-...).

Now anyone outside of Oracle can write cool JIT compilers using Truffle, and have them start quickly! I think it can also be used to compile normal Java programs to native executables.

So great. I was worried that Oracle would keep Substrate VM as a proprietary secret sauce, but that would have really torpedoed the potential of Graal.
I wonder if this has some impact in our (mis)understarding of dark-matter/dark-energy, and how the universe expands.
Any branch on attacker-controlled data can be speculatively bypassed. You would have to at the very least recompile all applications to attempt to mitigate the two Spectre variants discussed so far.

Unless there is some way to turn off speculation entirely, but that would hurt performance badly.
People in power learn very quickly the extents of their power. They will surround themselves with henchmen intelligent enough to explain to them their power.

When it comes to power, there is no developed and developing.
The 'threshold where JIRA becomes painfully slow' for our team of 5 was on day one, when we had to wait multiple seconds for an issue to load in the browser.
Does anyone know the amount of dollars involved in the bounty paid by Intel?
Intel was aware of the chip vulnerability when its CEO sold off $24M
There’s no singular definition within that document for cognitive complexity, just a bunch of metrics.
> He misses the main problem with fork which is poor interaction with threads.

That's a problem with threads, not fork(). It generalizes to all sorts of things needing to know about internals of threads and locks.
In case of Meltdown and Linux you simply set the boot parameter pti=off and reboot the machine.
It's ok. The 9th generation of Intel will be 50% faster and the most secure CPU ever made! /s
I generally like MSDN's documentation, despite Google always sending me to an old version every single time (get on top of your SEO, Microsoft). That said...

Fairly recently, I was looking in to controlling a service using C# and while the docs claimed that System.Management was deprecated, I could not find code samples anywhere that did what I needed without using System.Management.

It doesn't seem like it's actually deprecated, and I couldn't find any corroborating claims that System.Management was deprecated, the mention only seems to exist on a single MSDN page. This one, in fact: https://msdn.microsoft.com/en-us/library/windows/desktop/aa3...

> Classes in the Microsoft.Management.Infrastructure namespace. (The System.Management namespace is no longer supported). For more information, see WMI .NET Overview.

What exactly does "no longer supported" mean if not deprecated? Why is it still in use if it's not supported? Why don't the System.Management docs mention this at all?

Full disclosure, I'm saying this as a very non-C# guy, so my relative inexperience with that ecosystem is absolutely a factor. But my thinking is that, if you're already a decently skilled programmer, you should at least be able to interpret documentation so long as it's not astoundingly terrible. In this case, there isn't a clear answer to my question, so I'm just left feeling like I'm writing doomed code.

Sorry for the rant. It's a relatively minor gripe, to be sure, but it needs fixing.
I would really appreciate if you would mention visa types instead of an article about integration.

Also please elaborate on the "ways than aren't possible in Europe" if you don't mind.
You touch on a very real social dystopia. What's worse is that it's happening quietly, under the scenes.

Silicon Valley undervalues the aimless tinkerers and overvalues the incremental bootcamp coders.
> They will start looking for a new gig immediately

The response to this should be: "Good for them! They should look for somewhere that will pay them what they think they are worth."

I believe that is the whole point behind sharing salaries, to help level the playing field and help people who got low-balled on their offer to realize this.
I couldn't agree with you more if I wanted to. The internment camps were an abomination and against everything I personally believe the US was originally founded upon. May we remember our folly to never repeat it.
I've been going through Syntorial[1] which is an interactive synth tutorial. I'm about half-way through and I've found it very useful for understanding not just what each part of a synthesizer does to the sound, but how it changes the sound. Later on, as you learn multiple functions of the synth, you practice combining them to recreate sounds.

The software itself is a bit pricey and only runs on Mac or Windows but I've found it very helpful for getting an intuitive sense of what the different synth options actually change.

1. https://www.syntorial.com/
It's not so much out of order as it is the speculative execution. Predicting a branch and then trying to run the code after the jump while you wait on the branch itself to finish calculating. At least that's my understanding from the papers. This means that otherwise normal out of order techniques like memory load/store reordering and such aren't subject to these particular attacks. I hope that attacks on them aren't found either because those are some of the biggest gains because it can allow better cache coherence and avoid misses, or make the impact of one almost non-existent since it can do other instructions while waiting on a load from system memory.
Well then, lets hear it.. where do the hoipoilloi boil their fish?
Is "I earn between $61k and $63k" disclosing your salary?
> if we're forced to discard speculative execution as a concept

Do you have any reason to believe this will be the case?

> Further back than the Pentium 4

This is a bad example.

The Pentium 4's pitfall was a high clock speed with little concurrency, and thusly a big heat problem that limited peak computation power.

Yes, we lose some concurrency without branch prediction, but post-P4 multi-core processors would have to take some very major hits to be comparable to the P4 in a modern multi-threaded computing environment.

The P4 is just not a good reference point for old processors because of its architectural differences.
Technically, if P=NP then we already have a working algorithm to solve NP problems in polynomial time.

It involves iterating through and running all possible programs ordered by length, giving them an increasing amount of time to run and checking (in polynomial time) if they produce the correct answer.

If there exists a program that finds the answer in polynomial time, this algorithm will eventually find it after wasting (at most polynomial) time iterating through other programs and tentative bounds.

If P != NP, it's still at least asymptotically optimal.
Marijuana may treat some forms of light pain, but it is in no way comparable to opioids as an adequate treatment for pain. It may be similar to Tylenol 3 (small amount of codeine plus APAP) on an opioid scale that goes much, much higher to medications such as hydromorphone, oxymorphone and fentanyl. Even heroin would only be classified as a 'medium strength' opioid compared to these examples.
"What do people more knowledgeable in the field think about this?"

https://marc.info/?l=openbsd-misc&m=118296441702631&w=2

(from 2007)
Sort-of, but not necessarily. It's a lot easier to get the format right if you know there's an authenticator and you know what length it is and it's totally separate from whatever is coming next -- so you still want clear, out-of-band signaling for the real data. Once you have that format, you're right that the exact serialization doesn't matter.

The extreme example of this is XML DSIG and XML canonicalization in general.
> The usual way is to ensure that after forking you only execute async-signal-safe code.

Reading your comment I realised I misunderstood what the parent said. This misunderstanding is what made it a suprise for me.

Critically, I missed "... between the fork and the exec ..." and only considered the statement "the lock is still held by the new child process which deadlocks in malloc", assuming this was somehow the case even after the exec(), which would be a huge problem if even the exec()ed child wouldn't be allowed to malloc.

Of course on second thought this wrong assumption is nonsensical: When you exec(), you get a new process space, so any lock potentially thought up by libc or anything else, will be gone.

So all is fine:

For the purpose of starting another executable / implementing a popen(), one just must assure to not malloc (and as you say, in general write signal-handler-safe code) between fork and exec. This is feasible, and I suppose most programming languages do ensure that.
This is why Mozilla also removed support for shared variables (i.e. SharedArrayBuffer).
I don't know enough about low level C, operating systems, or CPUs to know if what Theo was saying is directly related to the flaws recently published but if so, holy crap.
The only speculation done on the mill currently is on whether it will ever be released, so I think they'll be safe.
Mark Zuckerberg's personal challenge for 2018 – Fix Facebook
Short notes on Linux command-line Usage
Let me know if you build the mobile app!
The involvement of law-enforcement and legal cannabis businesses is a different approach than government involvement in social programs. I think it’s unfortunate that they treat this as a criminal issue rather than as a public health concern.
Scala has a nice type system, runs on the JVM so we get all of that sweet sweet Java interop, is functional with a mutable escape hatch, and is a "boring" language that is used extensively.

I did a bit of Scala in a previous job. I'm not sure i'd call it boring. Not because it's exciting - because it's infuriating. Way too many features, way too much overthinking, way too many clever-dicks in the community. If you want to learn an excellently-typed, functionally-inflected, productive, portable language on the JVM, i'd look at Kotlin. It's like the 20% of Scala that gives you 80% of the power.

Rust is pretty great. I came to Rust from a 95% Java background, and picked it up fairly quickly. I wouldn't say i've mastered it, but i can get things done. I have no idea what it's like for writing GUI apps, though.
The CPU hardware already has that feature. It is the VM paging system and the permissions assigned thereto.

The bug here is that the CPU is not aborting the speculation when fetches occur to addresses marked as "access denied". Instead the fetch happens and a line of normally inaccessible memory is put into cache by code that should not be able to get it read into the cache normally.

One hardware fix would be to plug that hole. Speculative reads get blocked when they encounter permission denied errors from the paging system and do not change the cache state. That blocks the Meltdown attack, but not the Spectre attack.
Well, yes, you should be able to if all the tests are done. But, If I report 6/10 tests, then what?
Side-channel attacks are notoriously difficult to prevent:

https://en.wikipedia.org/wiki/Tempest_(codename)

I suspect these sorts of attacks will exist as long as people try to share running untrusted code on the same hardware.
You still require an audience which understands you, believes you... otherwise you do what you just said for vaccines, and you still get anti-vaxxers. Besides. 90%+ of your audience just flipped to the channels which tell them what they want to hear.
I'd say it remains pretty ambiguous. I often have trouble with people saying "next Monday" and I have to ask for clarification every time. My default for "next Monday" is "the next Monday we get to." Sometimes people mean the "NEXT" Monday, not "this coming Monday." Awful.

And I never have considered or heard of the "this week's Monday" "next week's Monday" interpretation, although I guess I've heard people speak this way occasionally.
I haven't used macOS as a primary machine in years, so I'm slightly out of the loop on it, honestly.

My opinions are basically the same as https://users.rust-lang.org/t/best-way-to-install-rust-on-os...

One other note, I heard at least one Homebrew user saying that rustc was compiled from source, and so it takes a really, really long time. I don't know if they've added binary packages, but that'd help.
This just sound like the Intel Management Engine story waiting to happen again. A controller that handles camera, networking and is the "root of trust"? No thank you.
Christian Homeschool Sex Education Curriculum-Teaching Sex
Motel 6 routinely gave guests' information to immigration officials
Fentanyl is legal and safe when used appropriately, just like heroin is in some countries like the UK, which uses diamorphine where US hospitals might use morphine or hydromorphone.
Losing Costco was a big problem for Amex.
In my opinion, though, subtractive synthesis is the easiest to "get".

Starting with a relatively simple subtractive software synth that uses primitive "analog" waveforms -- like, say, Tal-Uno-62 (https://tal-software.com/products/tal-u-no-62) -- is probably the best way to play around with learning synthesis. It's a lot harder to create a "bad" sound in a simple subtractive synth, and in something like Tal-Uno-62, there aren't a whole lot of possibly confusing menu options and buttons.

Samples and wavetable synthesis are also relatively easy to get a "good" sound of quickly. Most are structured, architecture wise like a subtractive synthesizer, you just replace the primitive waveform with either a sample, or a bank of digital waveforms.

FM and additive (and spectral and granular) are neat techniques, but IMHO way more finicky to program. (They are also techniques where the software interface is quite welcome! Programming a DX sound in the (free and open source) Dexed VST is quite a bit easier to do than it is on a Yamaha DX7's two-line LCD screen and buttons.)

For the parent poster: I understand that quite a few professionals, particularly in loop / beat oriented music genres (such as hip hop / trap, EDM, and reggaeton) use FL Studio quite a bit! The nice thing about FL Studio is that it has a nice intuitive layout for beat-making. It's what I'd personally recommend for someone just wanting to mess with synthesizer beats. (My personal favorite is Reaper but I don't tend to write beat oriented stuff. :) )
> If you're confident in the software you're running on a non-shared hardware...

and that you won't be hit by a remote execution vulnerability.
By that scheme you can not infer it is a surface either. But that was the example given in the book.
I didn't understand the article, can someone explain what it means for java development, please??

Will we be able to create runtime-less executables that are fully dependency free? That would be awesome to write a bootloader in Kotlin or any other Java Synthax Substitute.
VCV Rack directly conforms to the visual patterns and usage patterns of Eurorack hardware, so I'd guess that is the main reason that it's so popular relative to those other options. PD is also a bit harder to get going with out of the box, even with packages like Automatonism, impressive though they are.

Reaktor 6 had a similar thing happen, lots of people who hadn't used it before were brought into that ecosystem by their "blocks", which also kinda emulate Eurorack.
Pick courses of your choice for $10.99
I don't understand the images associated with that article. They purport to show the progressive refinement of the output over a series of days. But the figure changes dramatically from image to image, all the way to the end of the run.

At the very least it seems the output is not stable: a human has to decide when to stop the Wheel of Fortune. It looks more like a series of images taken from different training sets or parameters, for the NNs I'm used to.

Caveat: I've done a lot of ML, but not GANs specifically. Is this common? How do you solve the 'where to stop' problem if the output is so unstable?
Exactly the right amount of cynicism for the situation. Thank you!
>YC seems to prefer a development model where the community fills in the gaps of missing functionality, but this also means you can't expect much from the resulting services. I would much rather have this built into HN.

I would prefer the best of both worlds - let users write plugins that consume a more robust version of the API and add that functionality themselves. They could even be posted publicly and integrated by other users with some arbitrary amount of karma, and plugins would necessarily be restricted in their capabilities and maybe even rate limited.

Heck, add an endpoint for a WASM compiler and an option to use multiple languages.

It will never happen, though.
He has to be let go and charged criminally no?
Not a link for me either. Even with uBlock and Ghostery turned off.

Chrome - Mac OS X Sierra
There is no chance JavaScript/WebAssembly will get disabled in browsers. However, it is possible things like Zero-rating, Certification Authorities, Google AMP and Facebook Instant Articles
could eventually help to lockdown the web to only trusted domains.

However this wouldn't completely solve the issue (see Google Play Store).
Versioned Protocol Security Tokens: VPST

Novice-Proof Security Tokens: NPST

Just Verify Valid Tokens: JVVT

Safer Security Tokens: SST

Note: the first one is my only real suggestion, the rest are just for fun. And you are right, it is surprisingly difficult to come up with a good name.
The "fear" with ME is more that governments or someone like that could spy on us... (not really a "threat" to most people in Western Countries). But still better to get rid of it. Not an imminent threat per se.

This bug is a true security bug that has been lurking around for 10 years... and it could have been already abused. This is double scary because this attack does not leave any traces behind and it allows any application to pretty much enter God Mode (this is the worst case scenario of a security situation (hence the name meltdown (like nuklear meltdown is the worst case situation in a nuclear power plant)).

This bug is also bad because in certain situations the fix of this bug causes severe peformance penatlty.

You are only fucked if you don't update your OS.
You can debate the likelihood of alcohol or marijuana's influence on people to commit crimes all you like - but at the end of the day it's not a useful argument:

a) people were still getting both alcohol and marijuana under prohibition, prohibition does not work, so whether or not it makes people more violent doesn't really matter. Especially for the demographics who typically commit crimes are usually the people who have the greatest access to black market products.

b) the vast majority of the violence directly related to the drug comes from trafficking, which is ultimately a product of prohibition, not drug use

There's not much of a debate here if both a) and b) can't be meaningfully influence by federal policy.
Are acquihires successful exits?
>It seems that tech companies also prefer the deregulatory approach when it comes to what content to allow on their platforms. Their default is laissez-faire—to not interfere with what people can post.

This is quickly changing for the worse. Twitter verification has become a badge of approval. Facebook and Twitter try to enforce rules beyond what is legal and illegal and do so wildly inconsistently. I see a lot of it happening with "right-leaning" people, but I have also seen complaints with "left-leaning" people as well.

They need to get back to this instead of trying so hard to police what is allowed to be said.
I'd wonder if there weren't some sort of agitprop with Linux virtualisation, in published articles in the future...

(Long-time subscriber, gonna renew my subscription and tune in and find out just what the PIA to the LWN is gonna mean to .. what I consider .. a Mighty Fine Publication.)
How many firefighters do you know? I guarantee you every one of them gets excited at the prospect of a "good" structure fire.
Also usually comes with an entire childhood of learning in computers, whereas learning to be a doctor really doesn't start in earnest until med school.
Yes after a full source code review. :-P

Like it or not, you have to place trust somewhere. Maybe it’s not Apple, but pretending one has full visibility over every system is just going to create cognitive dissonance.
Tried with and without uBlock Origin in Chrome, and with no adblocker in Edge, and it's black & white with the "learn more" text but no link. IE renders it correctly as a link.

Edit: Sorry for being off-topic, but here's a comparison - https://postimg.org/image/fhb9vlmt1/
Sure, 1000 people working on a difficult problem, and only one person solves it. Good analogy.

What problem are we trying to solve? Curing cancer? AI? Compiler research?

Most humans are not working on the important stuff. If we could increase that by even a few percentage points, humanity would benefit.
That's not helping for invention, that's just compensating for the hardening of innovation.
> The most famous problem of GANs is instability during training and mode collapse - which is like a student learning especially for an exam (and not in general) thus optimising for the test instead of the real thing.

I must confess I haven't worker with GANs yet, but isn't that the whole point of GANs? Student is optimising for the test while the teacher is learning how to make tests as similar to reality as possible?

If I understand correctly, the main challenge is finding a way to allow teacher and student (well, generator and adversary) to learn at a similar rate, so that one doesn't stop learning because its competitor is too advanced. Is that correct?
I've been to Selma and Montgomery, AL (google: Edmund Pettus Bridge) and the surrounding museums around it. Sadly, I'm all too familar with this side of the country as I was raised in the south, but not of it (my parents were strongly against racism in all forms).
>If you are black, your ancestors were not vikings any more than my ancestors were Zulu warriors.

This seems to be disproving a statement the author didn't make. He was specifically talking about people of European descent.
I immediately picked the right image, because I saw whisker stubble on the left, and I already knew that image-generation AIs seem to have a thing for painting whisker stubble all over anything even remotely resembling a male face.

Surprise! Guess I should have considered the possibility of a trick question.
But! We have things like PoC||GTFO to keep us perfectly well entertained!

/ddj waaa! :(