skysight-inc/HackerNews huggingface dataset:
The Atlantic did a long-form article about this, if anyone is interested in further reading (with survey results!): https://www.theatlantic.com/magazine/archive/2017/09/has-the...
https://lwn.net/Articles/740393/
You Could Mine 1 Bitcoin a Month If You Harvested Body Heat from 44,000 People
My recipe is trivial: look for people who are clearly brighter than me, and follow them; continue recursively with their friends as you get introduced.

This gave me a few brilliant real-life friends who I first had met back in the day e.g. on LiveJournal when it was still alive.

Heck, I met my wife online, and proposed online, back in 20th century. We're still happily together.
That's a tweet of someone using the bug to defeat KASLR.
I think there's definitely some of this, and it's more pronounced in smaller cities. I used to live in a big city and it was easy to meet people in bars. Now I live in much smaller city and I have a much harder time meeting people in bars, so I use dating apps more.
https://news.ycombinator.com/item?id=16058454 mentioned in one of the other threads on this topic
According to that tweet 10.13.2, the latest public release, fixes it and 10.13.3 will have some improvements.
Ask HN: Why Is My VPN's IPs Blocked from Hacker News?
A few of my VPN's IPs seem to be blocked. I just get greeted with an empty page (I checked inspect element). Is there any way to submit an unban request to these IPs? It's really annoying.
10.13.2 actually.

>Say hello to the "Double Map" since 10.13.2 -- and with some surprises in 10.13.3

> Question: Is that right that there is need for 10.13.3 for full bug mitigation?

> No, sorry, did not mean to imply that. There are some changes in 10.13.3 but they shouldn't affect the quality of the mitigation _as far as I can see_
That was very clearly a joke. Good one too.
You think Intel considers AMD vulnerable while AMD considers itself not vulnerable? That's quite an assumption to ask of us.
People test these because it's the easiest pattern we know of for constructing large primes. So if you want to maximize your chances of finding a large prime, you'll check for the mersenne form.
Sesame Shortcuts (Nova Launcher partnership) | Android Development | Part or Full Time | REMOTE or Bay Area

Hi,

If you're looking to not have a boss and work on a cool project that makes money, this might be it.

In July 2017 we launched Sesame Shortcuts in partnership with Nova Launcher. Since then we've become a top grossing Play Store app, with 500k+ installs in 5 months and >20% long term daily actives.

Announcement: https://help.teslacoilapps.com/sesame
Press: http://bit.ly/SesamePress
App: http://bit.ly/getSesame

You’d be joining an experienced 2 person team. We have a cool roadmap for 2018 and the opportunity to grow outside of Nova. We’re looking to hire a long term fit who can accelerate development. Salary, revenue & equity compensation available depending on experience level and fit.

Relevant skills:
- Deep Android knowledge
- Nice to have: server, API, and performance experience

Mostly we're looking for a good cultural fit who communicates openly and delivers on time. If you are less experienced but highly motivated... we've all been there, feel free to reach out :)

Email me (Phil) at phil@sesame.ninja. Please include relevant experience, links to work samples, availability, and why you want to work with us. Cheers!
In 2017, the US led the world in launches for the first time since 2003
USA with a safety net like that of EU would be unstoppable. It's already sort of there business-side, now it needs the social side to work, so any individual who falls on hard times can get back on their feet fast. The EU is too risk averse.
Let me know when Canada fails. Or Germany. Or Sweden. Or Norway. Or... Or... Or...
Even active children frequently break bones. But of course dead children are relatively cheap for how many you actually need to survive, it's easy to make extra and lose a few,
"The Split Banana" in this context sounds painful
This is the real question, too many people seem to be blindly throwing around "Regression of X%". Phoronix have put out some benchmarks for Linux [1][2]. As one may expect I/O seems to be hit noticeably given it's handled by the kernel.

[1] https://www.phoronix.com/scan.php?page=article&item=linux-41...

[2] https://www.phoronix.com/scan.php?page=article&item=linux-mo...
I don't know if he's really worth responding to, but it really depends on your definition of 'homogeneous'. Historically, the US was certainly much more homogeneous in the past.

https://en.wikipedia.org/wiki/Historical_racial_and_ethnic_d...

You mention Chinese labor, for example, but the Asian presence in the US was below 1% until 1980. There were only three demographics that really existed in any numbers in US history up until the past few decades: Native Americans (mostly genocided or blended with other categories, and not counted as part of the population until this happened), whites (80-90% until 1980s), and the black people who were mostly either slaves or descended from slaves (fluctuated between 10 and 20%). Since the 1980s, the Hispanic population has seen a massive upsurge, with Asians also increased as a proportion of the population by almost 5x, and "Other" going from basically 0% to 6%.

This is not exactly a diverse picture, even if it isn't 100% homogeneous.
It's odd that they named AMD and ARM, but did not name Apple and Microsoft, isn't it?
It looks like he's reading actual data from kernel space.
http://cryptopanic.com
Private Key
it will be possible, some program can break the private key of a wallet
There is now !
Hope you go for it!
I'm fairly sure he's actually reading from the syscall table. He already defeated KASLR when he typed /proc/kallsyms.

That aside, I don't think KASLR would be important enough to rush KPTI like it has happened now and to even enable it by default, given its drawbacks.
So have the registration fee only when you submit an app to the store.

Oh wait I'm sorry that would be good design. Apple doesn't do that.
In case you don’t know, I believe Apple lets you do this for free now.
The only people left would be the 'reliable' people. Never mind the people of who can actually do the job. Oh, and the managers. This sounds exactly like the real hpe.
Unfortunately, American "pubs" are little different from our clubs or sports bars with unbearably loud music or twenty televisions playing every flavor of ESPN. Nearly every alcohol-serving establishment I've been to in my region (Washington DC) is pricey, deafening, and not conducive to any sort of socialization beyond drunkenly grinding against strangers. I hate it.
By reading from the actual memory address, yes. Defeating kASLR with side channels is meh. Reading from actual addresses is a different matter entirely.
I hate the one step thinking here.

Have the fee when people submit an app for review, not before.

Best of both worlds. Lots of developers, rich ecosystem, high hurdle for spam.
This report on Burlington Telecom is interesting:

https://muninetworks.org/sites/www.muninetworks.org/files/bt...
Somebody please correct me if I'm wrong, but I believe they're basically saying "These exploits do have the potential to read data."
Intel is certainly entitled to make and promulgate an objective assessment of the impact of the problem, but a problem is still a problem even if it doesn't affect everyone.
Check out 'Position Based Dynamics' by Matthias Mueller, it was the first paper on the topic.
I know he's a volunteer but only $3000? Does that seem low to anyone else?
Aptible | Remote | Multiple technical and non-technical roles for those interested in Internet security

https://www.aptible.com/company/

Aptible makes people-centered security products that help SaaS developer teams build security into their architecture and their organization's culture.

* Enclave is a container orchestration platform built for developers that automates security best practices and controls needed for deploying and scaling Dockerized apps in regulated industries.

* Gridiron is like the missing QuickBooks for security management. It helps developers design and run security management programs that meet and exceed requirements like HIPAA, SOC 2, and ISO 27001. Customers use it to build trust with their own customers and partners, and prepare for certifications.

Important skills we are looking for include: EmberJS, DevOps/Site Reliability, Security & Compliance (HIPAA, HITRUST, ISO 27001, SOC 2, PCI-DSS, GDPR, etc.) expertise, SaaS Operations/Generalists, and more.

We would love to talk with anyone who is interested in Internet security and has one or more of the competencies listed above. Specific roles that we are looking for today:

1. Senior Site Reliability Engineer

2. Senior Software Engineer

3. Support Engineer

4. Growth Ops (Sales Ops / Marketing Ops)

Reasons to work at Aptible:

* Small team, (relatively) large customer base filled with innovators in challenging industries (namely healthtech and fintech)

* Fully remote

* Our products have dramatic impact on important aspects of our customer's business (specifically: the safety and security of their customers' data)
It's more than just growth curve as they could have simply limited signups to handle growth issues.

Remember they where .edu only for 2 years even thought they had significant funding. Their core problem was if nobody in Australia signs up then it's boring for the first users in Australia. However, by starting with an EDU focus they could leverage word of mouth to grow a network by location.

The path was starting a Harvard, then other ivy's, then other US collages, then US high-schools. That's clearly designed to leverage exclusivity.
I recommend the Princeton course on Bitcoin and Cryptocurrency Technologies, available free on Coursera:

https://www.coursera.org/learn/cryptocurrency

I took this last year and found it very informative
Again, its hard to separate that phenomenon from potentially confounding effects. Is the fact that children are typically hurt by people they know the result of parents being reluctant to let their kids out on the street by themselves, thereby limiting the opportunities for potential strangers to harm them?
Computing things serially, obviously!
Interesting. Did you end up maintaining 10,000 IUs/day after your levels normalized, and if so, how long have you been doing so?
That's funny, I live in Fort Collins too, and they already take a large chunk of my money and despite my votes and my dissatisfaction with how they spend it now, they seem to be changing about as fast as Comcast's customer service is known to be.
> Hearing echos of Intel's early FDIV response along the lines of "the average computer user doesn't need perfectly accurate division"...

Has to be pointed out that they were correct. Public outrage forced them to change their tune, but their original summary was still on point. That said, it of course could majorly impact a select few.
How to stay updated with the Front-End craziness in just 3 repetitive steps
Maybe wait until next week to decide if it needs replacing?
> [Chris Drose] wrote an article about his findings on a website called Seeking Alpha, which short sellers frequent for investment tips. The company’s stock promptly dropped 10 percent.

Drose is a professional short-seller. Assuming he was already shorting AAC, it looks like he turned a substantial profit not on the company's weakness but on his ability to publicize it among traders.

"Short and distort" is securities fraud, the mirror practice of "pump and dump". There's no particular sign that Drose distorted the situation, but I'm curious where the lines are.

Does anyone know whether misinformation is required for this practice to rise to fraud? I assume totally-factual statements about a company would be safe, but I can imagine a lot of grey areas around opinion or hypothetical statements. If a political writer shorts a company, then starts loudly calling for it to be regulated or investigated, is that fraud? How about if a politician does so, without introducing a law?
Don't Give Your Kids IoT Devices –  Why
You're making the huge assumption that the majority of people strongly want an ad-free Echo. My guess is that most people don't care either way.
Yeah that's one of those things that I learn, and then forget, and then relearn, and forget...

Would probably retain it better if I used Go as my primary language for a year or two.
Builds expire after 7 days though. If you forget to build it again you'll be stuck with a non-working app that crashes back to home screen as soon as you open it.
No, but it does mean more secure than anything else, which is pretty doubtful. Competitors to x86 have always had an advantage as far as security goes; then there is the ME mess; and now we have this latest bug. Nobody expects perfection, but Intel is not "most secure in the world" by any stretch.
Being locked in a room for your entire life sure is safer then driving a car so that can't be bad for you right? I think ops point is it's dangerous to your mind and lively hood as well as society as a whole - not to your physical body like your car example.
If my Echo ever replies with an ad, it goes directly into the trash.
The reports are trickling in that Mossad has already exploited this security flaw to their advantage. Seems like the "flaw" may have been a backdoor designed by someone from their Haifa operations.
Brian Jones is an extreme person. Prehistoric man couldn't replicate his level of executive
The other comment is correct. Another way to view it is at "Senior" you are able to keep yourself productive indefinitely. It is similar to journeyman in the trades but sounds fancier.
They had every oppertunity to get on this. They have government friendly for green cars, they have the scale to build charging infrastructure, they have the programming knowlage and so on.

They could also have jumped in with the Supercharger network and profited from the global network that Tesla is building.

Well, lets see how they recover, by now Tesla is way ahead.
Do you control what you run on a game console?
Please don't take HN threads on ideological tangents. The point you're making has by now become well-known ideological flamebait. We ban users who derail HN threads in such directions, so please don't.

https://news.ycombinator.com/newsguidelines.html

Edit: since https://news.ycombinator.com/item?id=16063749 makes it clear that you're using HN for that purpose, which is not allowed here, I've banned this account. Would you please not create accounts to break the site guidelines with?
But the story seems to only have broken to "mainstream" yesterday and has gained a lot of attention in the last 24 hours.
https://lwn.net/Articles/740393/

...which was linked-to from this article: https://arstechnica.com/gadgets/2018/01/whats-behind-the-int...
> Intel believes these exploits do not have the potential to corrupt, modify or delete data.

No, but they do have the potential for privilege escalation or credential exfiltration, which in turn do grant the potential to corrupt, modify and delete data.
Correct, in Swedish you have both, though they differ a bit how you would use them. I think your English example covers it good.

First we have "från A till Ö", or the older form "från A till O", meaning the same as in the other languages, like all of it, from beginning to end, like a register or a list.

The other one, "A och O" is used as you wrote, the example form the Wikipedia
article is good, "Balans är A och O, när man går på lina" roughly "Balance is key when tightrope walking".

I never heard anyone saying "A och Ö". For me it sounds really silly saying "Balans är A och Ö, när man går på lina", but apparently some do

https://encrypted.google.com/search?hl=en&q=%22a%20och%20%C3...

However you rarely hear anyone using the older form "från A till O" today.

Norwegian, oh in my first post I spelled it wrong, it should be "fra A til Å" in bokmål. Sorry for that.

https://encrypted.google.com/search?hl=en&q=fra%20a%20til%20...

Spelling is a bit confusing when dealing with svenska, nynorsk, bokmål & danska at the same time.

Danish and Norweigan seems to use "A og O"

https://encrypted.google.com/search?hl=en&q=%22a%20og%20o%22

and "A og Å"

https://encrypted.google.com/search?hl=en&q=%22a%20og%20%C3%...

Edit: sorry for using Google links instead of DuckDuckGo.
Got problems with DDG when searching for "A og Å", got too many false hits, in Norwegian (and Danish?) you can write "å" instead of "og" for "and". In Swedish you would write "o" instead of "och".

Edit 2:

Some search results from runeberg.org (Similar as Google Books)

"från A till Ö"
https://www.google.se/search?q=%22fr%C3%A5n+a+till+%C3%B6%22...

"från A till O"
https://www.google.se/search?q=%22fr%C3%A5n+a+till+o%22+%2Bs...

"A och O"
https://www.google.se/search?q=%22a+och+o%22+%2Bsite:runeber...

"A och Ö" only false hits
https://www.google.se/search?q=%22a+och+%C3%B6%22+%2Bsite:ru...

Edit 3:
Maybe "Balance is everything when tightrope walking" is a better translation.
Comcast has done more when I've threatened to cancel than any politician has ever done when I've threatened not to vote for them, I'll tell you that. The difference is if I stopped paying for Comcast I would be without Internet. If I stopped paying for my local government I'd go to jail.
I have a power dependent workload that scales horizontally and is currently already dominated by the cost of system calls. This will effectively, directly cause me to buy 30% more compute on a huge infrastructure. (2,000~physical machines. Quite beefy dual socket machines with a lot of memory)

I know I’m not alone.

Then again. Think of microservices, Kubernetes for instance; Network requests are system calls.
You are vastly overestimating the efficiency of turning life into oil, and vastly overestimating how much has gone into steel. The article even addresses the energy needed to reduce iron, and it's not that much. The high number of 60kJ/mole/reduction comes out at about 500 food calories per kg to reduce twice. Industrial molten iron production is only around 5000 food calories per kg. So it's really no big deal to produce a few kilograms per lifetime. (Mixing in other elements to get steel is a minor cost per kg.)
"SPARC user: not affected!"

--Oracle's marketing tomorrow, probably

(to their credit, SPARC does fully isolate kernel and user memory pages, so they were ahead of the curve here... for all 10 of their users who run anything other than Oracle DB on their systems.)
I lived near the 51st and Lexington stop until about 2010, and took the 6 every day downtown. Even then, I would often have to wait for two or three trains before I could shove my way on to a train.

My point is not that things aren't bad or that we shouldn't improve them, just that it doesn't seem like a brewing crisis.

Not to mention that I have no idea how to fix this (other than get the Second Avenue line finished after a hundred years of trying, or the new articulated cars that they're talking about) -- most of the time when I was trying to get on a train, you could literally see the next train at the uptown stop -- they might be able to space them closer with improved signaling (since they wouldn't have to hold in the previous station) but that benefit seems pretty dubious.
I remember being 10 or so and my dad giving me money to ride my bike to the hardware store to buy him propane. Of course, I didn't even know what propane was so he said "just ask the clerk," who of course, had no problem helping me.
This is a bad bad idea. We have plenty of Latin American examples showing how this ends. A very inefficient company with many employees, a powerful trade union and many customers without service. I know, it feels good to have these services as public, but at the end of the day it is not a better service, and it gets more expensive with time. Good luck though.
duplicate: https://news.ycombinator.com/item?id=16036268
IRS lets you claim "fair market value" on donations.

https://www.irs.gov/publications/p561#idm140501112136960
Revolutions in user interfaces rarely occur overnight. The current Mac is the culmination of over 25 years of continuous development, and it's still imperfect.
2017: The Year in Robocars
Andy Grove, sadly, has retired from Intel in 2005, and died in 2016.

I'm afraid the level of paranoia at Intel has decreased since then.
I don't understand what you think is wrong with the kid awaiting instruction. Sounds like a kid who has some sense of self-control, which is a positive and not a negative.
Would not be the first time vendor X knows vendor Y is vulnerable even as vendor Y denies it.
We know that "AMD processors are not subject to the types of attacks that the kernel
page table isolation feature protects against." E.g. that AMD does not need the patch that Intel does. That is not the same as saying AMD is not affected at all.

We do not know what the actual bug that prompted this activity is. Nobody has revealed that information. It is possible that the bug affects AMD also but does not require this patch.
The "put a big moat around it" approach to security should be put to rest. We isolate system processes and user accounts for good reason.
Alternatively, as less people stop listening to the radio, songs from the 70's, 80's, 90's, and eventually the early 2000's will need a venue to be played on.

If less people listen to the radio, AND less people buy music directly through itunes or whatever, the only option the big 3 will have is to work with streaming services.
The Man Who Built Silicon Valley: A Tribute to Andy Grove (Intel)
We've banned this account for reasons explained here: https://news.ycombinator.com/item?id=16065249.
You may find those technical inefficiencies are what enabled the business to mature and sustain itself...I know several people whose “business” has extremely “efficient” tech but zero revenue. I.e. customers don’t care how efficient the tech is so long as they can pay you money to solve their problem...and putting too much energy into the tech prevents you from other revenue-generating activities such as lead generation, sales, etc.
It is probably fair to suggest that the spines hidden don't belong to SICP or Hume's or Macaulay's histories, but to whatever the designer got from The Strand's books by the yards shelf. Why tip off the guests or the readers of the magazines that the books are Readers Digest condensed, or maybe in some language it is implausible for them to believe you know?

If I read these magazines, I might be grateful that I wasn't tempted to squint and try to read the spines.
I was told to take 20,000IU/day, just to be sure. It might be just correlation, but it helped with the issue I had.
"illiteracy-promoting interior design abomination" may be a bit of hyperbole... I won't be shelving my books backwards, but if some designers enjoy the look of backwards books, so be it. Seems like an expensive way to decorate though.
The claim at hand, however, was that the NSA made Intel include it.
Another one is trying to use leverage. Like, "this such and such would be screwed without me.". Fast track to pissing people off.
This study's abstract seems to suggest that there may be a a geographic correlation in addition to a general correlation to sun exposure and heart disease: https://www.ncbi.nlm.nih.gov/pubmed/8935479
Because of the Vitamin D deficiency issue, if I am ever able to do the real estate development I dream of, I am planning to include solar collectors with fiber optics to distribute natural light indoors. I know the trend is just lots of large windows which might be an option, but I believe that the fiber optic distribution could be more effective and allow for a more energy efficient home.
The question is, “can Tesla build a production pipeline before its ability to raise money ends?”

In other words “whether” and “when” aren’t different questions in this case.
How is it Creationist? Creationism is just a metaphor for evolution plus a fictional goal of evolving toward specific human form.
Why? It's not an OS bug. It's a hardware bug.
Sounds awesome, I'm a BBQ fiend. Why Portugal?