skysight-inc/HackerNews huggingface dataset:
How could anybody possibly ‘smuggle’ a smartphone into an exam hall and hope to get away with it? Back when I took my International Baccalaureate (IB) in 1999 we were only admitted into the hall with our standard school-issued tracksuit with pockets reversed and in stocking feet, and if we went to the bathroom during the exam the examiner would inspect the stall and distribute us pre-approved toilet paper rolls that hadn't had notes rolled into them. The blinds were down so that nobody could signal us from nearby buildings. Calculators, if allowed, were distributed from a stock of standard units with no pre-saved programmes or text files stored onboard. We were instructed not to tap our pencils on the desk's top or tap our feet or even crack our knuckles because it could be a method of communication and thus be grounds for disqualification. Our positions were randomised.

Those protocols were bloody rock solid, and rightly so: there's absolutely no doubt that whomever was awarded whatever deserved it. We students understood that these measures were in place to protect all of us from any shadow of a doubt whatsoever. I didn't find it in the slightest disturbing and all but the weakest students accepted it, and we better students were protected from the otherwise incessant badgering of those who would otherwise want to copy.

I found it all quite thrilling really.

P.S. I was no saint: I analysed the non-examination protocols and found multiple vulnerabilities that I harnessed multiple times to postpone inconveniently timed tests. But it would have never occurred to me to cheat.
I enjoyed reading this a lot. I wonder why the developers decided to allow reading kernel-memory in the first place. When a scalar processor reads kernel memory, it crashes. When a speculative processor reads kernel memory, it relies on the assumption that the read is never committed to prevent leakage. It takes no expert to realise this is a potentially dangerous decision (and, as becomes clear now, is only valid in the absence of a cache).

To me it would make a lot more sense to use a special value to indicate the read did not succeed and propagate this value until it is time to crash. I guess this introduces some overhead (e.g. reserve a special value); but are there any other drawbacks?
Ah, this makes a lot of sense. I tooled around a bit plotting some distributions with matplotlib after I posted my comment and indeed found that drawing random angles was clustered around the poles. From your explanation, now it seems almost obvious that it would be that way.
> This would be enormous, especially as other countries would have a blueprint what to ask for. It also shows just how poorly the UK has handled their renegotiation (it was generally seen as the UK caving completely) [2].

Or it will highlight how other governments are corrupt and their regulatory agencies completely captured by their respective industries.
Oxygen Is Disappearing from the World's Oceans at an Alarmingly Rapid Pace
Why Google May Not Always Be King of the Mountain
Yes. And a big part of the problem is people's perception of real estate. This idea, that real estate is doing "well" when prices go up, is completely flawed. When RE prices go up, it should be considered a bad thing, a sign that the market is sick: supply is not allowed to increase sufficiently to meet demand, causing endless negative externalities, needless suffering for everyone.
How can you help in making this 'gift economy on blockchain' a reality?
Are the timing semantics within a virtual environment predictable enough to pull off the attack within the limits of the guest context? I guess at this point we could just test for ourselves.

EDIT: Actually, thinking about this some more ... if the host has retpoline and the microcode update, the indirect jump technique can't be used to deduce the state of the BHB, so the kernel addresses never leak. If KVM's _internal_ kernel space, which isn't actually protected by the CPU's ring 0 (I think, unless this is also provided by VT-x?), is guarded by whichever of IBRS/IBPB is relevant, then would those mitigations prevent guest exploitation as well regardless of timing semantics?
This argument is frequently deployed in numerous political contexts.
>It's not the author's job to prevent use of his software by specific individuals as deemed by the US government.

I think the gub'mint might have a different opinion on that.

I used to have a GRiD Compass laptop computer that came to me via a friend of a friend of someone in the Reagan administration. On the back of it was a list of countries in which it was legal to operate or possess the computer, due to the software inside.
customer satisfaction is what drives their sales, more than advertising/hype: not everyone is satisfied though the fraction which is satisfied tends to compound, evidently. The fraction which is not satisfied tends to complain and take their business elsewhere, which is good for all.
Thanks! csvkit looks awesome!
I don't quite understand what "pipelining" means. Can anyone TL;DR?
Actually, my personal experience includes a ton of examples of:

1. I realize the need for something and envision a novel invention
2. I discover upon research that it has already been invented

So, I did have the thought about the "thing I've never seen" and could pursue inventing it. But it's a big world and far easier than ever before to learn from others.

I have known people who went all the way, finished inventing something and got it patented, and then I (as a patent critic) have doubts that it's truly novel and then discover, to the surprise of my inventor friend, that it actually was invented before but was obscure and they hadn't heard about it.

There's tons of room for invention still, but it's comparably much reduced from the past for all the basic stuff and far easier to discover existing inventions. It's just NOT anything like it used to be.
If we take a closer look at your comment, it also seems to be to be problematically obvious. I mean by that a point so obvious that it partly refutes itself, since if it's correct, too much would follow. You appear to be hand-waving away the entire Great Depression.

For a good HN comment, we need not to stop at the first reflexive response that comes up, but wait until we get past that, at least till the second. If you do that, you'll usually notice an obvious counterpoint to the obvious first point, and then you'll take a bit longer to sort through your thoughts before posting. That's when you're more likely to make a contribution that's useful to others.
I don't really see a problem with this. Less experienced developers should be working on less interesting work/bug fixes, so the experienced developers can concentrate on the rest.

I'm an experienced developer and when I change jobs, I'm always given this type of work in the beginning. Bug fixes are great for learning a new application because you often times get to touch multiple parts of the application and gain experience from it.

On most teams, you need to earn your position as a developer that can handle some of these larger tasks.
Or find things that seemed insignificant at the time but became significant later with hindsight.
Mulholland Drive, Eraserhead, Blue Velvet, and Wild at Heart
What were the "masterpieces" this year (2017)?
I rarely do video calls. The thing I can't live without is SMS from my computer (via the Hangouts/Voice integration). Is there another good way to do SMS from a computer?

Phone calls from my computer (with my own number) were nice until they stopped working. Now I just open Chrome when I need that, but it would be nice to have it working in FF.
Impossible. This attack relies on detecting the timing between a cache hit and miss. If your clock resolution is larger than a cache miss then you can't differentiate the two events and so no information is leaked.
Racket-On-Chez Status
its a specific company that had non bitcoin products too
You're quite right about desirable urban areas. Example:

The first apartment I rented in midtown Manhattan was a 1BR condo in a fairly new building. The owner had bought it in 2006 for about $775k. In 2010, I looked it up on Zillow to see if I could afford to buy the place (I could not), and it was around $850k. Within a couple years of the crash, it had not only recovered, but appreciated a fair bit.

He sold it in 2014 for $1.2M, and according to Zillow it's now worth nearly $1.5M.
This post was attempted to be manipulated (to no success): https://twitter.com/bentossell/status/948830961524989952
This is why the entire health insurance market doesn't make sense. Right now, as a healthy person, how am I supposed to weigh the impact of every potential health issue in my life? I'm sure she could've purchased some cadillac plan to cover it, but without experiencing that and with such a minute chance of an accident like that occurring as a teacher of all things, why should she ever buy it? Or even know to look for that kind of coverage? Who can price the repercussions of going without some medical procedure or medicine without ever having experienced that situation? I can understand car, boat, our house insurance and can easily replace those tangible items, but how should I price the risk to my health?
surely, by enrolling to have ContentID match a work which you claim is yours against others, you are initiating the chain of events which leads to the automated claim of infringement being made? This implies (to me) that you are the one making the claim?
My apologies, I meant Daedalus. I can’t find any references to the Orion project you describe, though there have been several real spacecraft and related systems by that name.
Interesting read. Its true that we need more alternative search engines. I personally like what Bing and DuckDuckGo are doing. They are really good alternatives to Google. Having good alternatives often saves the world from a total monopoly.
By moral being I do not mean they act morally but that they deserve moral consideration.

If this were not true why are we repulsed by the beating of an animal? Why do we invent such paradoxical concepts as the "humane" slaughterhouse?

Our moral intuition leads us to the answer but cultural norms and casuistry let us avoid it.
Can't edit my post anymore but I just tried Texttop out. I ran it according to your Quickstart guide in Docker as you suggested. In Terminal the keybinds didn't work, in iTerm zooming at least works. Whilst I was zooming in, I noticed my CPU fans suddenly went crazy on my MBP compared to Chrome RDP. The only time that happens on RDP is when I play a game remotely, or watch a video remotely. Htop confirmed it was iTerm.App. I didn't see either of these terminals in your known to work list either.
Except it's pretty clear that this bug has been in Intel products for many years. I'd even debate whether this is a comparable situation, because that issue was discovered quickly.

This one has been present, lurking, and possibly exploited for quite a long time.
If it means less-buggy products, let him stumble all he wants. I'm tired of billion dollar companies charging me for betaware.
Agreed. Just because you don't compare your model to another model doesn't mean you're hiding something and it's irresponsible to pretend that's the case. Perhaps the author should have run char-cnn against data instead of making baseless accusations.

On the whole, a lot of the arguments are realistic of ML in general. There is far too much focus on individual problems and the accuracy measure without enough focus on the interpretation of the accuracy, how well it will really generalize, etc.
Finacial liabilities of the Fed (physical currency and bank reserves) are financial assets in the private sector. Therefore, yes, debt = savings.
Is there an advantage to to8 over iconv?

I've used iconv for years and it's never let me down.
Hardly seems like news to anyone remotely sentient. Economic 'growth' at a real physical level is straightforward entropy increase. Complex evolved systems are destructured to fuel & supply crude technological systems.

Expect more of this until most complex living systems collapse.
It's basically just consolidating multiple requests into one larger request.
your second sentence is very far from the facts
I don't see how requiring grant holders to spend money on the Elsevier "open access" fees is a win for the council? You can always pay more, the point of negotiation is to get more for less. Mandating that researchers pay the Elsevier fees seems like a clear-cut win for Elsevier...

You start out with full rights to your paper. Then you hand over a exclusive "do whatever you want license" to Elsevier for free. Then the UK council requires you to further pay Elsevier so the paper is downloadable from their shitty-ass website. That is an unmitigated disaster.
DeepChem developer and MoleculeNet co-author here.

We are NOT trying to get vendor lock in for users of DeepChem. If there are complaints about lock in using our tools please file a github issue and we can work on trying to create an open easy to use API for everyone.
The bug has existed since speculative execution was introduced, 17 years ago. A 3-year gap between world-breaking bugs isn't that exceptional (I hope!).
Debt is the American way, we've been in debt since well before the country was officially founded. And our founding fathers all had issues with personal debt. When George Washington was elected our first President he was flat broke and had to take out a loan to afford the trip from Mount Vernon to his own inauguration in New York City. (Washington DC didn't exist yet.)
I think it's much more complicated. The US government has been printing tons of money in the form of "QE" and "QE2", but with little or no inflation. I believe the reason is that all of this money has not ended up in the hands of the general public in the form of higher wages.

When all of our wages collectively go up, you can bet the cost of goods will also go up, with no change in affordability since the same amount of your work in man-hours is needed to both produce and purchase the goods.

I think we are long overdue for wage inflation, even with the associated cost increase of goods. The positive affect of it is to make fixed rate loans less burdensome. Why enslave ourselves to the past?
Pigeons and Love
Currently finishing up Structure and Interpretation of Computer Programs as per https://teachyourselfcs.com/#programming

Actually really enjoying it as a first introduction.
Fairly certain this is talking about Redis pipelining (https://redis.io/topics/pipelining). It let's you send multiple commands to Redis without waiting for a response between each one.
I've been wondering (and haven't seen it addressed anywhere) if these attacks could be used to get the private key out of game consoles. These days I would assume not - that the key would be in a secure enclave - but the current generation of consoles are a few years old now and maybe that's not the case.
How Many Shares of Authorized Stock Should a Startup Have?
that is a great point.

for those not familiar with where the money really goes in R&D, and where the biggest opportunities for improvement are, check out these charts [1] and [2] from the seminal paper on calculating the cost of getting a drug approved [3].

the biggest areas to improve R&D productivity lie in 1) picking more validated targets to reduce Phase 2 and 3 failure rate and 2) reducing the cost of lead optimization (basically the process of turning a compound
that has the desired impact on the target (target is a molecule implicated in disease that you want to effect with a drug) into a molecule with drug like properties (ie gets where you need it in the body, is safe, can be manufactured and delivered efficiently))

im not an AI person, but could AI play a role here? there are plenty of validated targets that are "undruggable"; could AI help find as-yet-undiscovered molecules that could engage these targets? or could AI somehow make the med chem / lead optimization process easier?

[1] https://media.nature.com/m685/nature-assets/nrd/journal/v9/n...
[2] https://media.nature.com/m685/nature-assets/nrd/journal/v9/n...
[3] https://www.nature.com/articles/nrd3078
You are misrepresenting Theo's message, which looks beyond individual errata, saying that collectively they amount to a significant change in how the MMU operates, and from that predicts a high likelihood of a then-yet undiscovered flaw that would lead to problems much greater than were then being acknowledged by Intel (and he said AMD was heading the same way.)

He was less prescient when he implied that it would take Intel a year or two to get beyond this.
Easy is relative. So is "invention". I invent things most days of my life, but they aren't that novel.

People are crazy inventive and always have been. But today, it is far easier than it ever was before to learn about the best inventions others already figured out instead of reinventing the wheel.
it has been done here: https://arxiv.org/abs/1712.02734
Pipelining is buffering multiple commands into one network packet, otherwise each command is a separate packet.
Hardware random number generators sound like a great idea (I've bought an Entropy Key, long ago), until you realize all the problems they intrinsically have (besides all that "you don't need them stuff"):

* software has /no/ random failures, hardware does

* hardware ages and breaks down, often in subtle ways

* a broken down randomness engine is very hard to detect, since all HWRNGs do some whitening: your randomness source can output 1's all the livelong day, when you only see the output of some stream cipher operation or some chained hashes, no statistic tests are going to save you

* probably many more things

Hm, I really should consolidate my notes into that long-planned HWRNG article someday.
This comments seem only designed to provoke people without providing context for a reasonable discussion.

It's a shame, because the Clojure community takes these comments seriously. See Rich's Hickey's (creator of Clojure) response to the recent blog post "On whose authority" [1].

[1] https://www.reddit.com/r/Clojure/comments/73yznc/on_whose_au...
Exactly, and that uncovers the folly in this: what are you trying to do. Often enough it's very specific, and requires actually going out into the world. Sometimes the literature is already there. But nearly always it requires some form of analytical thought. "I want X because I need to prove Y". There is no AI magic sauce around that. It means that the people interacting with the "user friendly" interface need to know, and need to know how to get there somehow. That's rarely the case. And from a product perspective it makes things very hard: you get bombarded with very specific requests that require time and effort to build UIs and models for, that at the end the of the day only solve that specific question. Instead, it would be better to equip people with the tools needed to solve the meta-question so to speak, but that meta question is much much harder (at least, I've been trying but no success yet). As a funny anecdote: my medical knowledge had exploded. But I see that as a symptom of the broader problem: I know how to do /some/ things because I've gained that domain knowledge, but I can't teach the system yet to solve the "general" problem because a) I don't know what it is b) there is no data to get there c) what even is the UI for that.
What about what about

Given enough time, energy, and computing power, you could just precompute every possible outcome and call it a neural network. You'll be praised as a genius.
One suspects that if the search for "foundations" were made rigorous enough to analyze in any meaningful way, someone like Gödel would come along with some sort of impossibility theorem. In other words, if we were to really examine the idea that any particular foundation could be the best/most natural/simplest/whatever, we'd see that it is folly.
The author CLEARLY stated that this is the reality they have been facing for their entire life. That is a personal experience related to the article. Were you too busy getting offended at their ranting to read that?
IPNS records have a fairly short expiry, so you have to keep republishing them. This also keeps the DHT from getting overly full of records that nobody is using anymore, but does mean that a node with the private key must be kept online. They're working on improving this situation; here's a discussion on the topic: https://discuss.ipfs.io/t/confusion-about-ipns/1414/4
How does reseeding the CSPRNG create forward secrecy? I thought that if someone lifts your CSPRNG internal state (after it's been seeded and the seed tossed), they wouldn't be able to play it backwards to get previous output you've used as session keys or whatever.
Quantum 'spooky action at a distance' becoming practical?
Pipelined operations don't wait for the preceding operation to complete before they start. So this will be multiple gets being issued simultaneously.

This is often used to reduce latency but only works with operations that don't depend on the preceding operation.
Drop in life expectancy an 'indictment of the American health care system'
My Life at a Russian Propaganda Network (2017)
Even so, that's pretty good. Large software companies have disaster scale bugs many times every year.
I love the land, but I have no interest in Australian culture or politics. I think its a real pity that, as guardians of one of the most diverse ecosystems on the planet, Australians have let it fall into serious disrepair. See, for example, what has happened to the Great Barrier Reef.

I learned to travel at a very young age, and don't have any national identity worth defending. I think of Australia as a wonderful country; pity about the people. Its no fun going back there every few years and seeing the landscape covered in copy-paste strip malls from Arizona ...
Jimmy Iovine is leaving Apple
Caste violence erupts in India over 200-year-old faultline
http://archive.is/vXmyX
i assume that they must be treating housing strictly as an investment, ie renting it out. In that case it sounds almost plausible: you get about 4.5% return in rent per year, plus an inflation matched housing value increase of roughly 2.5%, which gives you about 7% which matches the stock market.
Might be worthwhile taking a break and watching "The Straight Story". It's one of Lynch's films that you could uncharacteristically call "charming".

Then saddle up for "Lost Highway" :)
Gotta use Google Sheets or it won't be decentralized /s