skysight-inc/HackerNews huggingface dataset:
>For me government is about taking care of the sick, poor and vulnerable as much as taking care of wannabe millionairs.

You're free to donate as much of your income to people in need as you want, but you need to stop thinking you should be able to make other people do the same thing. You may not like it but we have a right to our labor and freedom to spend it how we please.
With two kids, I'd say it depends on the personality. My son (10) is totally absorbed by screens and digital games of any sort. For him, I would have reduced early digital exposure had I known how hooked up he gets. On the other hand, my daughter (7) has as much exposure to screens as he does and she seems to naturally shift her interest between various things, the majority of which do not include smart devices.

Eh, I don't know. The only thing I know we are doing right is having strict limits on screen time.
Don't you have health insurance? How is that different?
> do not have the potential to corrupt, modify or delete data.

I believe the point of this sentence was simply to distinguish malicious read access (possible) from any modifying access (impossible).

> Recent reports that these exploits are caused by a “bug” or a “flaw” and are unique to Intel products are incorrect.

I believe the second half of the sentence is far more important, i. e. the attempt to broaden the news story to include other chip vendors. The scare-quotes around "bug" may suggest that Intel thinks they correctly implemented Tomasulo’s algorithm, and any flaw would not be theirs–which actually goes well with the second half of the sentence.

The part on performance is probably correct: Consumers might not notice any hit in performance. Gaming seems not to be impacted, and CPUs tend to be under-utilised anyway.

Overall, I think this statement is obviously damage control, but there really isn't anything wrong with the content from a consumer user of an Intel CPU. Basically: don't freak out, install patches, stay tuned.

The tone is actually refreshingly to-the-point. At least they are not taking us on a voyage to Qualityland.
Yes, what kind of real world performance will users notice?
Microsoft: Mommy, Why Is There a Server in the House?
At one point I thought they were positioning themselves to be THE premier, one stop shop for all listening, when they added podcast support and were planning on more. But it's been at least a year since they added Podcast support and it's frightfully bad. I tried to use it for a week and it was just so terrible and lacked all of the basic features of any other podcast app.

I'm not convinced they can do anything else successfully to be honest. At least I'm not impressed with some of the newest stuff like podcasts.
After the fix, will device drivers still have the user process mapped into their address space?

If not, then the fix may expose many driver bugs (where driver accessed user space directly instead of through copy_from_user()), making the whole thing even more painful.
I'm sorry for the situation you describe. For what it's worth, the downvotes (I did not downvote you) are due to HN's insistence on comments that are productive/on topic.
Agree with that, whenever others post how Tesla is dead because others caught up, I feel they miss the point. Musk did this not to be a billionaire but to actually switch earth to electric cars and renewable energy.

Same goes for SpaceX, if other's say that some competitor is going to beat SpaceX at its price or booster reuse. Well, again, that's the whole point - to make humans multi-planetry species, not to be a billionaire.
What you describe is just how humans behave. It's frustrating, for sure.

For example, I got the flu a couple of weeks ago. I had a low-level fever and wondered, should I take something to lower the fever, or not? I Googled it and found hardcore research papers on the subject which basically said there is a narrow set of circumstances where reducing a fever is warranted, but most of the time you should not do it. It was clear that for my circumstance, I should not lower the fever artificially. A lot of the Google hits said the opposite, though. It seems the information is out there and has been for many years, but what does every Dr I've ever talked with told me to do? Lower the fever.
Purely curiosity, but surely that can't be how it works? It kind of makes sense at face value, but seems like a monster loophole[1], too -- I'd be curious if anyone could point me towards more reading on the topic.

1 - Bob wants tax deductions. Bob decides to sell pencils for $50k each. Bob discounts them to $0 for non-profits. Can Bob deduct $50k per pencil, for each sold to a non-profit?? Maybe Bob can only deduct his cost, or something?
BuildZoom | San Francisco, CA | Full-Time, Onsite Only | https://www.buildzoom.com

BuildZoom simplifies the process of selecting a general contractor and improving the outcomes of remodeling and construction projects. By gathering and analyzing information on 3.5 million licensed contractors and 100 million improvement projects, we bring new levels of transparency and accountability to a notoriously difficult industry.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/buildzoom

Here are our open roles:

- Artificial Intelligence, Software Engineer - Construction Industry: https://jobs.lever.co/buildzoom/75ed4149-a813-4183-9699-ccc7...

- Data Engineering Lead or Manager: https://jobs.lever.co/buildzoom/5d98e8d6-b8be-4871-a1de-109a...

- Full-stack Engineer: https://jobs.lever.co/buildzoom/de320f7b-65b9-492a-b1fe-bb51...

- Software Engineering Intern (Winter 2018): https://jobs.lever.co/buildzoom/4b6958f3-b039-40df-ba45-395f...
Technology, progress are moral.

Postman argues that omitting (excluding) technology from discussion of the human condition is exactly the problem. All changes lead to winners and losers. It's both denial and hubris to not even update the ledger.

Technopoly: The Surrender of Culture to Technology http://a.co/3WNmkU3

https://en.wikipedia.org/wiki/Technopoly

Further, Donald Norman argues every thing (technology, tool) has its own affordances, for better or worse. Which is opposite to the myopia captured in the cliche "Guns don't kill people, people kill people."
You're doing pretty well saving more than half your take-home. How much more do you want to save? Maybe set a target and then look at specific areas to pare away expenses or look at ways to make a bit more income?
What a strange response.

>many types of computing devices — with many different vendors’ processors

Really? Like who?
Which is something that has existed for a long time and long before 1969 and the advent of modern news media or social media. News has always been about entertainment as well as information. Otherwise there wouldn't have been any newspapers and we'd all be reading Reuters or AFP.

Instead of superficially blaming technology for our failings we had better find out what the actual causes of these failings are and remedy those.
Crispr gene-edited cacao plants could save the chocolate industry
> The mitigation (KAISER) is being enabled for ARM as well as Intel x86 in the Linux kernel.

Is there a commit you can point to? Or a LKML discussion about this?
It's true nobody knows what the actual bug is, but I was working with what Ars Technica described: "If the problem were just that it enabled the derandomization of ASLR, this probably wouldn't be a huge disaster... The industry reaction... suggests that it's not just ASLR that's defeated and that a more general ability to leak information from the kernel has been developed." https://arstechnica.com/gadgets/2018/01/whats-behind-the-int...
I was about to say the same. Whenever I buy a used car I check and Mazda is never near the high end.
We know that people think that AMD is not affected by this permutation of the attack. Intel may know differently; I'd withhold sweeping claims.
Mining requires lots of Math.something() functions. Maybe they can set a max for that.
On windows you could install msys and then use pacman -S whatever to install packages. Calling it from any editor could be as simple as changing the PATH.

On the other hand, even without cygwin you could use a windows command line package manager such as chocolatey.

Everything unix-y is not always good, Windows has some novel ideas too. The main difference is that Windows is more GUI oriented and Unix is text oriented. Windows has APIs and Objects, whereas in a perfect Unix unix world everything needs to be a text stream.

I lived in the Unix world for a long time and I still use various BSDs and/or Linux. Yet after years preaching the Unix way, now I think one needs to choose the right tool for the job, there really is no silver bullet.

In reality, app development with a real IDE such as Visual Studio or Jetbrains products is much more comfortable for me. It's true that these tools limit your expression, but they also alleviate a lot of mental burden. If I don't have to waste brain cycles on typing commands, flexing my fingers through various M-x C-x positions etc. I seem to be able to write faster and with greater ease. On the other hand the code I write in my text editor is usually very dense and more beautiful to look at.

I sometimes compare the situation between living in the Unix world and Windows world with the two fractions in Game of Thrones. Unix people represent the Wildlings, they're brave, free, do not recognize authority, do everything by themselves, live in harsh conditions, yet they are happy because they live a straight-forward and free life.
Microsoft people represent the other side of the wall, they're not free, but they have technology, civilization, more population. And there seems to be a great wall between these users.
You argument works in favor of Spotify too.

If they sign on 100 top artistes, it will devalue the portfolio of music held by the top 3 - for reasons you explained. Thus, the top 3 are incentivized to collaborate with Spotify.
Sadly your comment has been auto-hidden for some reason, perhaps that of expressing an unpopular opinion.
Agreed it's too good
Conan Doyle wrote in this group of kids exactly because, at the time, it was a realistic and familiar sight to urban readers. There are lots of newspaper articles from back then (and if i remember correctly, even lots of Parliamentary tirades) about them. Over a certain size, they had become a matter of public order.

More recently, I remember Dublin city centre in 1988, when Ireland was still pretty poor, being full of kids; and Marrakech or Fes in Morocco just 10 years ago.
Thanks, sounds worth a closer look.
From the Twitter thread:

> The performance drop on a system with PCID is minimal. Most Macs have PCID.

https://twitter.com/aionescu/status/948613035861553152
That sounds like the most efficient way to handle such a thing. Please explain...
Bigger than KASLR it seems.

https://twitter.com/brainsmoke/status/948561799875502080

Not good.
My very non-qualified thoughts about this, I'm definitely out of my depth here, but it's kind of fun to think about these things :)

Not releasing it as planned could very well be worse. It could easily be seen as an implicit acknowledgment that the plaintiff has legal standing, and that their claims have merit. This could then lead to a situation where an IPO would have to be delayed, potentially for years until it all has been played out in court.

I'm quite sure most potential investors will assume that this particular suit is likely to be timed based on rumors of the IPO to interfere maximally with it. Maybe in the hope of either a quick settlement or to effectively create an out-of-court punishment via lowered IPO valuation to deterr others from trying to manuever the legal terrain in a similar way as Spotify is claimed to do. Whether the plaintiff has standing or not.

Going forward without deviating from schedule, or even quicker than schedule, sends what is probably the strongest possible message that could be sent to bolster the IPO and minimise value loss. It says: "We're not afraid of this suit"

Risk estimates in preparation for an IPO regarding a company like Spotify almost certainly includes assesment of risks by various actors that might want a piece of the cake through legal action.
>Presumably the statement was hastily put together

I don't think so. Given that both *nix and MS seems to have been working on this for at least a month already it can't have come as a surprise.
7/10 One job sucked and found a new one. New gig is okay. I think my expectations for work has decreased.
Few of us seem to know that "pub" is short for "public house".

(What a great idea!)

"Public house."
I know that's probably not what you mean but there is money prizes: https://www.eff.org/awards/coop
It's a nice surprise to read some good news about Apple's software engineering, for once.
Money being spent on advertising is a bit of a dubious figure coming from an advertising company. If Comcast is putting local ads on their cable channels saying "vote no", then quoting the retail price of those ad spots is going to inflate the figure. Sure they may be giving up some potential revenue, but the actual cost to the company is not what is quoted.
Well that's interesting, it seems we've got the next few centuries to start colonizing the solar system, or we're going to go extinct at this rate of usage... Who was it that made the theory, a next civilization may never happen because we used up all the easily available resources...
If I could have a team of millions of developers spending centuries building applications then I too could work out the leanest possible implementation.

Nature makes a lot of pull requests, but has a great peer review system that prevents bad design entering the core of the system.
Look into vitamin K2 for calcium regulation as well.
But the biggest reason that the largest known primes have this form is that they are subject to a much faster special-form primality test.

https://en.wikipedia.org/wiki/Lucas%E2%80%93Lehmer_primality...

There's no known general-form primality test that is nearly as fast for numbers of corresponding sizes.
Dear Elon Musk: You Need Me for the Self-Driving Tesla Cannonball Run
My point is that to run untrusted code it should be delivered in some form of bytecode, not the native code for CPU. This way one can always workaround CPU issues by changing the compiler or the interpreter even for catastrophic bugs in any part of CPU. Moreover, as hardware VM can execute much more instructions than unprivileged user processes, the probability that something unfixable will happen to them is higher then for ordinary processes.

As for statistics, there are strong indications that modern efforts for CPU verification do not keep up with increasing CPU complexity. So number and severity of bugs will grow.
... spot clean low mileage cars ...

Because the rotary engine has serious wear issues above 100K miles, even with proper maintenance. Which is a shame, really, because piston engines can double or triple that before running into the same sorts of problems (if well maintained).
For my fiancée and me, we need cargo space for two primary use cases: 1. short-distance hauling of large objects and/or numerous objects, and 2. road trips. It's the frequency of both that encourages the purchase of a large vehicle rather than the rental of one.
Sure, it was a great way to message a friend specifics songs or playlists(?) and you could hit play from the message itself in spotify and have a quick dialogue on it. Super enjoyable to scroll back in time and hit play in the messages and hear the songs we've been sending. Now when I get a text of the song being shared I have to wait until I get to a computer and then copy the link and send myself an email or something? Makes it way harder and often I just won't listen to the song that my friend or colleague sent me because it's too much friction. If I do, I end up searching for it manually and then what's the point even.
> In short, if you call 911, the operator will call for an ambulance. You can't choose.

That is merely a procedural issue. There is certainly no reason why the 911 operator can't honor your request for an ambulance from a specific hospital, provided that it's within their range. In the absence of a specific request, the operator has a duty to look out for your interests, which should include not sending you to a hospital known for over-charging when there are other reasonable options available. (This is the same logic that says they shouldn't just send you to the hospital that pays them the most kickbacks.) Their default balance between cost and care might reasonably differ from yours, but if you have expressed a preference then they have a responsibility to honor it.

Of course, not every emergency is quite as time-sensitive as a stroke or heart attack, and depending on your location, and the locations of the hospitals, the difference in travel time may not be significant. Even if price is not the determining factor in the majority of cases, competition over the patients for whom where it is a factor can help keep costs in check for everyone.
If your point was that children should not wander along highways and race tracks I agree.
Also speaking as an European immigrant who's been living in the US for nearly two decades.

Both of you are right. Americans are not more selfish than other nations, individually. Culturally they do tend to hoist self-reliance up on a high pedestal. In theory these traits should be unrelated, more or less.

However, it is a very unfortunate "feature" of the American political system that there are many, many demagogues who take things that are inherently good, virtues one could say, such as self-reliance, and weaponize them to serve the interests of some extremely selfish rich power brokers. Not every time, but in many cases when you hear the word "freedom" in the American political discourse, you might be close to an example of this pernicious distortion of basic notions.

TLDR: Americans, stop obsessing over by now empty slogans such as "freedom", start thinking more about building a society that works well for all its participants.
I don't think you can reliably phrase this in terms of Moore's law. Moore's law mostly concerns raw FLOPs. It's less useful for predicting hardware performance for operations that are governed by limitations like I/O and memory latency. And this slowdown, if I understand it correctly, is largely driven by memory latency.
I hope so. As far as I know, the three latest OS X versions get Security Updates. So it should be 10.11+
Malicious JS is fairly common on laptops... just see all the cryptominers.
Devils advocate.

Workload dependence... average user... not significant:

A lot of users probably see "30%" and will assume the worst. There really isn't a lot of evidence of how much an average
consumer will be affected. Pretty sure your average consumer isn't running pgbench all day. Hell, I'm willing to bargain 90% of servers (I really want to say more) are over-provisioned by 30% or more.

Mitigated over time:

Kernels are getting out safe patches ASAP, performance be damned. With more time to be careful, performance can be clawed back. And/or CPUs are upgrade and features such as PCID mitigate perf losses.
So I'm going to respond to one thing that stuck out to me, this is my anecdotal response to:

> because raises are performed in lock-step with annual performance reviews. Asking for a raise outside of the annual performance review time window really puts stress on the boss

so I used to think this was how things were done at my last job (mid-size ~150-200 employee company), this was the impression they liked to put out, but the reality was they would go out of their way to retain/raise people if they deserved it or were going to lose the employee (some people took advantage of this situation).

Personally, I'm not a fan of these (as you put it) "prima-donna" games unless I really think something is deserved/owed[1], luckily for everybody I was happy with my annual boosts so never did try them.

[1] I was once promoted outside of the annual cycle without asking

edit: shuffle things around
> What isn’t my at all clear (to me) is what they mean by ”will be mitigated over time”. Are they implying that when we buy new professors (from them) there’ll be a hardware fix that won’t require the performance-sapping patch?

Another possible interpretation: the early patches will create performance issues, but we'll issue subsequent patches that will make the performance issues less noticeable.

Not saying this is the right interpretation, just another possibility.
To be fair, this bug looks like it mostly affects systems that run lots of untrusted code -- e.g. cloud services. If you are only running code you wrote, that does not require many syscalls (compute heavy), in your own data center (or whatever), discounted Xeon chips that suffer from the flaw could be a good deal.
I've had one doctor prescribe me 10K a week. Another one recommended no more than 400/day.

Doctors do not agree. Some have jumped on the bandwagon, and others believe it is just a bandwagon.
Or, you know, charge ONCE instead of yearly. The "membership" should be an entry barrier, not a revenue source.
My main method of keeping track of this is creating a symlink to all my actual projects in my regular ~/work directory. Appart from this most people use vendoring, but I use (and maintain) virtualgo instead: https://github.com/GetStream/vg

It supports working on a dependency of a project locally with ease, by using "vg localInstall" which is a extreme pain with vendoring. And also it supports version pinning of executables.
Is the source to this published anywhere?
... and it is wonderful in Longmont, CO: $50/month for a gigabit Internet.
FYI, Finland's relationship with Russia inspired an entire word to describe a country that is not formally occupied, but behaves as if it were:

https://en.wikipedia.org/wiki/Finlandization
This is probably one of the poorest and most defensive PR pieces I've read from a company in a long time, and it does not really make me sympathetic to them at all.

> Intel and other technology companies have been made aware of new security research describing software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from computing devices that are operating as designed. Intel believes these exploits do not have the potential to corrupt, modify or delete data.

This is deceptive. It very quickly acknowledge the confidentiality aspect, but then claims that is "operating as designed" and then immediacy try to damage control by pointing out what the exploits cannot do (corrupt/modify/delete).

> Recent reports that these exploits are caused by a “bug” or a “flaw” and are unique to Intel products are incorrect. Based on the analysis to date, many types of computing devices — with many different vendors’ processors and operating systems — are susceptible to these exploits.

This is deceptive. In the first sentence it combines two statements: 1) bug/flaw in Intel products and 2) that it is unique to Intel. In the rest of the paragraph it then claims that the previous statements are incorrect, but only addressing the second point.

> Intel is committed to product and customer security and is working closely with many other technology companies, including AMD, ARM Holdings and several operating system vendors, to develop an industry-wide approach to resolve this issue promptly and constructively. Intel has begun providing software and firmware updates to mitigate these exploits. Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time.

This is deceptive. It immediately mentions AMD to give the impression that AMD also suffer from the problem.

It then goes on with a straw man about performance impacts ("contrary to some reports").

And then mentions "average computer user" whereas the real problem is obviously not average computer users. Again, deceptive.