skysight-inc/HackerNews huggingface dataset:
Drip + Leadpages (www.Drip.com) - Minneapolis, MN | Full Time | ON-SITE | Now Hiring Senior Ruby on Rails Developers, Senior DevOps Engineer, Support Engineer, BI Analyst, Account Executives, Customer Success Director and Technical Support Manager! We are also hiring for Python Developers for our Leadpages product team.

As a fast-growing startup in Minneapolis, Drip is backed by two of the tech industry’s most prominent venture capital firms and has quickly become one of the most cutting-edge and beloved products in our space. We are a small product team within Leadpages, an early-stage tech company, which has made #297 on the 2017 Inc. 5000 list (we were #3 in Minnesota) and named a Star Tribune Top Workplace for the past three years in a row! To learn more about us, we invite you to visit our Instagram, Facebook and About pages.

Now that the introductions have been made… here’s what we’re using:

Drip is a beautiful Ruby app that’s built on Rails 5, AWS, JSON, Sidekiq, Redis for caching, ElasticSearch, Ansible, Flight, PostgreSQL, Vanilla JS and Elm.

Leadpages is working built on a gorgeous Python REST API stack using Kubernetes on the backend and React on the front-end.

If anything caught your eye, we’d love to hear from you! We currently have opportunities available for:

- Support Engineer => http://bit.ly/2BHoy97

- Senior Ruby on Rails Developer => http://bit.ly/2E4dgMB

- Technical Support Manager => http://bit.ly/2npl0oV

- Business Intelligence Analyst => http://bit.ly/2CxZq7T

- Account Executives => http://bit.ly/2CDDdWM

- Sales Development Reps => http://bit.ly/2CAZ1lm

- SVP of Engineering => http://bit.ly/2CPbBv1

These are all full-time positions with exceptional benefits! We also offer generous relocation packages to help you relocate to beautiful Minneapolis, MN, if you are open to relocating.

Interested in emailing us directly? You can reach me at Tiffany@Ave81.com (no agencies or 3rd parties, please!)

Let’s build something awesome!
It is not fair because the octogenarian really wants it, perhaps more than the 3-month old?
Really suspicious timing in light of today's announcement.
Tavour | Seattle, WA | Full-Time, Onsite Only | www.tavour.com

Tavour is looking for a VP of Engineering to lead all product development and engineering functions. This is a rare opportunity to join at an early stage of an already profitable company. As a member of the executive team reporting to the CEO, you will help Tavour scale its products into a world class e-commerce experience. Growing our business is now almost exclusively dependent on architecting and delivering highly scalable products. You will recruit and develop the best e-commerce in a data-driven culture where we test everything and don’t take anything for granted.
Preferred Qualifications:

- 7-10 years of software development experience, preferably at a tech startup
- 4+ years of engineering management experience
- Shows a bias for action to drive self and team to achieve results that delight customers
- Fancies doing projects at half the time that most others would project and looks for creative solutions to achieve results
- Understands cloud technologies and services and how to leverage them to build a exceptional software development organization
- Knows how to implement A/B testing and data driven approaches into product development
- Can empower and enable engineers to demonstrate full ownership of customer problems
- B.S. in Computer Science

Compensation range $110-$130K plus equity.

About working at Tavour: Tavour is a already profitable 8 figure business that is looking to grow to a $100M business in the next 3 years. Tavour has achieved profitability with a minimal venture raise and is thus still a great opportunity for anyone looking to join an early stage opportunity. Tavour prides on providing exceptional benefits including:
-Equity Participation
-Health Insurance
-Paid Vacation
-401K
-Commuter and/or Parking
-Fitness Membership
-Paid Maternity and Paternity leave

We are an equal opportunity employer and value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Interested in applying directly? Send your resume and an introduction to andrea@tavour.com.

Cheers!
Yes, AMD is affected. There are multiple vulnerabilities (Project Zero refers to 3 separate "variants", variant 1 and 2 being called "Spectre" and variant 3 being called "Meltdown"). The most serious variant only affects Intel, but can be patched. The other 2 variants affect AMD, ARM, and Intel, and cannot be patched.

See this excerpt from spectreattack.com:

>Which systems are affected by Meltdown?

>Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013). We successfully tested Meltdown on Intel processor generations released as early as 2011. Currently, we have only verified Meltdown on Intel processors. At the moment, it is unclear whether ARM and AMD processors are also affected by Meltdown.

>Which systems are affected by Spectre?

>Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors.
Why Can’t I Represent Incarcerated Arizonians If I Boycott Israel?
AFAIK, this only allows read access of a host machine. How would it allow a VM to write to its host?
Does this vulnerability affect Linux only, or any operating system?
Sounds like Google forums.
But you still have to get your code onto the device...
Yeah that's a good one, hope they keep it updated / link to new info / posts as they come out.
One problem is getting right of way to run cable on poles and underground conduits
Yes, if you're touring.

The new way doesn't require this. And is purely gravy on top.

I was just giving numbers, not condoning their payout scheme as something to move forward with.
No wonder they were rushing this.
http://spectreattack.com
the cycle continues as follow: politicians ignore the masses pleads, populist start selling untenable dreams, the politician still refuse to aknowledge the existence of the problem of that partcular generation, a reaction shifts the power to populist, populist cannot really realize whatever they sold because the masses have a fractured interpretation of their message, populistvsearch for internal or external enemies to redirect blame and direct the mounting hate, the society fractures, strife follows until the society can reunite under a single ideal or gets repressed, at which point it's either a new longer or shorter cycle

of course we somehow manage to always blame the masses or the populists, but they rarely are the ones initiating the cycle
That's what I'm thinking, effected by Spectre, but not by Meltdown. But more clarity would be appreciated on Google and AMD's front. I mean from a pure PR angle, AMD has a lot to gain if they can clear the air more.
So, to summarize, we don't have a steel skeleton because

1. We evilved from the sea, where Calcium is far more abundant than metals
2. Having a skeleton 100x harder than out current one, would require 100x stronger muscles and tendons, if you don't want them to snap
3. You couldn't swim with metal bones, which would again be a problem with 1., and make it hard to survive as a species if you drown very easily.

Other arguments, which however, were debunked

1. It takes too much energy to create steel. It doesn't, maybe twice as much.
2. You also have other bone functions. However, you could also have those with a semi-steel, semi-organic bone structure.
3. Bones need to decompose, so that you don't steal too much resources from the environment. Possible argument?
Very interesting reporting on Geely, but childish and pointless uneducated snarks at Tesla.

It seems quite obvious that Geely represents the latest iteration of a continuously, incrementally, optimized production machine. That's great. That says nothing about Tesla. They aren't there yet, but they could (should) get there and hopefully exceed it.
This is probably the most enlightening thing I've ever read about modern CPU microarchitecture. Reading this, it becomes apparent how hard it is to prevent side-channel information leaks in general. Anyone who read this back in July could have concluded that Intel CPUs are possibly vulnerable to some side-channel attack, but the author just didn't figure out how to exploit the leak he found.
Has Google the best security team in the world? It seems like Google security is in a complete different league. I cannot imagine how this impacts companies handling fiat money or cryptocurrencies in the cloud like Coinbase in AWS.
Speculative execution isn't supposed to leak information; if the speculative instructions aren't supposed to execute, all traces of them should be rolled back. I'd be curious to see what the details of this bug really are. I'm not sure how much will be disclosed in the interests of keeping exploits from popping up.
“Tesla said it now plans to reach its goal of 5,000 vehicles per week by the end of the second quarter”

And it’ll be another 6 months before they get to 5k/week. They have 500,000 pre-orders. it’s going to take between 2-3 years to deliver.

Personally, I’ll take 1,000 Model 3’a a week. It’s a great improvement.
AWS Statement: Processor Speculative Execution Research Disclosure
https://spectreattack.com/ :).
Oh god, it's got a logo: https://meltdownattack.com

"Which systems are affected by Meltdown?

Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013). We successfully tested Meltdown on Intel processor generations released as early as 2011. Currently, we have only verified Meltdown on Intel processors. At the moment, it is unclear whether ARM and AMD processors are also affected by Meltdown.

Which systems are affected by Spectre?

Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors."
For his sake, I hope longer than 6 months!
I believe most crypto exchanges are running in the cloud. What could possibly go wrong ?
the MEMTHIEF bug
Right. I think HPC will be the first to take on POWER9 since it has some huge advantages with CAPI and PCIe v4. Outside of that, it will take some run time to convince the larger cloud providers it's useful.

I believe POWER9 has the ability to be either big or little endian as well, so that helps for compatibility issues, and it's just a matter of whether your application can compile.
A typewriter is likely even more susceptible than a computer keyboard to a listening attack:

https://freedom-to-tinker.com/2005/09/09/acoustic-snooping-t...

Has anyone applied similar methods to pen on paper?
Main/Big impacts are on the cloud computer.

For home computer, standard office use, there is no impact at this point, right?
> We are posting before an originally coordinated disclosure date of January 9, 2018 because of existing public reports and growing speculation in the press and security research community about the issue, which raises the risk of exploitation.
> However, I'm bullish, because these are solved problems that many other people have expertise in.

All of Teslas woes make me bullish on companies like Toyota and GM that understand how to build cars.

I'm increasingly questioning whether the electric drive train and the batteries are actual difficult and novel part about building an electric car.

I think it's going to be easier for GM to find people that can build good electric engines than it is for Tesla to get upto speed on how to build their cars at GM scales.
That's unclear, to the point of being factually wrong. Variant 2 and Variant 3 POCs only affect Intel, and those are the ones people are most talking about, and at least to me, the most concerning.

Treating them as a group, ignores the very real differences in effect.

https://googleprojectzero.blogspot.com/2018/01/reading-privi...
"We wrote a JavaScript program that successfully reads data from the address space of the browser process running it."

Yeah, it's pretty bad.
bummer. I prefer to mine crypto than to see ads
Arm also claims it is working as intended:

> Arm recognises that the speculation functionality of many modern high-performance processors, despite working as intended, can be used in conjunction with the timing of cache operations to leak some information as described in this blog.

I personally don't agree, but I guess they're trying to avoid needing to issue a recall for over ten years worth of CPUs?
Google's post is newer and has more insights, the registry article is now outdated.
someone should honestly do a press release like "Intel Bug not actually Intel only" or give this thing a neutral name to search for.
Silicon Valley's Hypocritical Spirituality
nazism is not a well defined concept, nor is hate, you'll figure it out soon enough
Most auto final assembly lines build about a car a minute. Running two shifts, 5,000 cars a week is about normal. If the line is running much below a car a minute, or is stopping much, something is very wrong.

It's not a fundamental problem. It's Musk trying to put an assembly line into service too fast. An assembly line is a custom-built machine about a thousand feet long. They take time to debug, and people who've done it before. Usually, most of the debugging takes place off-line in supplier factories before the final line is assembled in place. Tesla skipped that step to save time.

Doing it that way is insanely expensive. The operating costs are roughly constant regardless of the number of cars that come out, so debugging while producing means a huge cost per car.
Best practices with React and Redux web application development
> They also stated it does not have the potential to cause deletion, modification or corruption which directly contradicts the "malicious purposes" statement.

You are mixing two different notions.

In security CIA = Confidentiality, Integrity, Availability.

Intel said that Confidentiality is broken by a security analysis applied maliciously (i.e. exploit), but Integrity is not. The general belief is that Availability is affected, due to a slowdown that depends on the workload.
I don't understand your meaning, sorry.

Do you mean would I want to see 'violent american black rap lyrics' banned? Depends on what is said I guess? If theres a song about 'kill all the jews' we've had enough of that shit here 70 years ago.

Generally german courts are very narrow about what is Volksverhetzung. If you run afoul of it you are very far away from any sensible discussion. The law is basically "don't (1)incite violence (2)against Minorities in a way that is (3)able to disturb the public peace". These three things are impossible to do without generally being a dangerous ass. We don't want people like that.
Security bulletin now available: https://aws.amazon.com/security/security-bulletins/AWS-2018-...
> The only benefit of bytecode is to save compiling time. Nowadays, CPU becomes much faster than the time Java was invented, 20 years ago. So the benefit is weak now.

In terms of throughput I agree with you. But start-up latency is already Java's weakest point, and having to compile on startup would make it worse.

> Another promoted benefit of bytecode is compile-once-run-anywhere. However, I think this is a hoax. It is not special, for script languages code runs anywhere without compiling.

True as far as it goes, but certain types of code simply aren't practical in scripting languages. You'll never see people implementing e.g. an image format decoder in a scripting language; they'll use bindings to a native-compiled (C) library instead, with all the problems distributing that entails. This is why things like docker are so popular with Python users: in theory Python is write-once-run-anywhere, but in practice most Python codebases end up depending on one or more native modules and need to have the correct version compiled. Whereas Java bytecode is adequate for things like image codecs, and in the real world you really do see large Java codebases that don't use any bindings to (non-JVM) native libraries.
I don't know how you would evaluate such a thing as "best security team," but Project Zero certainly attracts a high calibre of security expert. If you're into breaking things, why wouldn't you want to break things with other bright people and the support of a massive corporation?
We ran into this and finally made the switch this morning to an HVM ami. The performance has been much better.

We started seeing issues on Dec 23rd, with HDD reads and it magically went away the night of Jan 1st. The cpu loads remained high though.
Right. And looking at SpaceX also shows the futility of looking at initial production rate as indicative of long-term production rate. SpaceX got 2 launches off in 2010, zero in 2011. ULA and Ariane and Russia were laughing at them and mocking the idea of reuse and recovery.

SpaceX launched 18 last year, all successfully, more than any other rocket. All recovery attempts succeeded, and several rockets were reflown. Their competitors have had to cut their workforce and are now feverishly trying to catch up with new designs (most of which are inadequate for even the current Falcon 9, let alone future rockets). The line between laughing stock and huge success is pretty small if you're in the exponential ramp-up phase.
Not buying it -- these headlines make me even more bullish on Tesla, and I've been following them since before they had their first investors.

Production is coming along better than anyone realistic could have ever expected, and continues to do so at an impressive and steady rate.
How do you figure that? Elon invested in BTC and ETH? :)
I assume, but here's the thing: it's ten bucks a month and I don't watch YouTube on devices without ad-blockers very often. It's not worth my time to think about it.
> I’m pissed off at HN for enabling this
> behavior ... HN @dang shame on you.

This might be a good time to reflect on how you apportion blame for something that you don't currently understand, and which might have an innocent reason behind it. I get that you were angry, but lashing out at people when in that frame of mind is rarely helpful, and sometimes you get it wrong.
> The infrastructure that runs Compute Engine and isolates customer workloads from each other is protected against known attacks. This also means that customer VMs are protected against known, infrastructure-based attacks from other malicious VMs.

Doesn't Google say that they are protected...?
The problem here is that "hate speech" is an anglosphere term and doesn't have an exact correspondence in German law.

What is commonly called "hate speech" in the English-language media is §130 (1) of the penal code (part of the set of "Volksverhetzung" offenses). It's a poor fit because:

* The law can in principle apply to any identifiable subgroup of the population or any individual as a member of such a subgroup. Subgroups defined by their ethnic characteristics or religious beliefs are listed as examples, but the list is not exhaustive (though of course the group of Bavarian vintage car collectors is unlikely to be a target).

* It's not related to the motives of the speakers. It's about the effects the speech creates, specifically threats against the public peace, such as incitement to and encouragement of violence (unlike in America, incitement of lawless action need not be imminent) or creating an atmosphere through slander where members of a subgroup have reason to not feel safe anymore. If you want an example or why, look up what Julius Streicher was convicted of in Nuremberg and how it contributed to the Holocaust.
Our site is at: http://www.futureclaw.com

Our magazine is print, but you can view it online as well at: http://www.issuu.com/futureclawmag/docs/issue_6
What makes law enforcement a need, or a right, something that you're willing to stand up for, in your previous comments, but not health care?
In Susan Cain's book about introversion "The Quiet Revolution", she speculated that introversion could become a cultural norm, pointing towards Asian nations as an example.
> There are any number of rankings/scoring regarding freedom of the press and of expression, resilience to corruption, democracy, economic opportunity etc in which Germany scores better than the US.

One of the reasons people regard these rankings as a total joke is exactly because of incidents like this - Twitter being forced to delete satirical tweets.

More broadly, I think most people would agree that beyond the extremes (say, US vs North Korea), the precise rankings of countries on these metrics are based on questionable methodologies with vague priors and are generated largely by politically motivated organizations.
> The guitar player you linked to is making less than a tenth of what someone should hope to make to even think about calling their music income a success.

I'd surely hope $7000/month is considered a success. A passive $700/month from streams would be considered a success around here.

This is the assumption the stream counts continue, of course.
You mean without getting whomped for insider trading? I don't think they're allowed to do it in advance at all.
2018 Will Not Be Easy on You, but That’s the Best Part
Also these have been shown that they have a solid power block of around 40 % in society, the illusion of some outliers, that can be put back into the box wont take hold once more.

The outrage powering the likes of the AFD is partially due to hundreds robbed of their ability to articulate their opinions while being declared non existent or terrorists by media campaigns.
The dschinn is out of the lamp and all of polishing and rubbing wont house him again.

All that remains is housing this political opinions in a party that slowly civilizes them - by taking them serious where they have a base and taking them apart, where science can come to the rescue. Until recently the left had for uncomfortable questions no decent answer except loud screams.

A recent article here on HN, which explained why cultures with entrenched polygamy are prone to more instability. Instead of taking this and running with it, trying to stabilize North africa and taking a teeth from the racists- the usual subjects where found and rallied against.

This sort of laws do not protect civilization, they hide a problem, and prevent its resolution in debate.
Not accepting cultures who obviously are erroding democratic societys (like runaway exponential captialism or islam/ extremist christianity) has nothing to do with racism or foreignfear.
Its valid critique- and a society should be allowed to demand the removal of commendments/indoctrinations of cultures who have such a history.
The stomach can not be allowed to dissolve itself. To clarify, the member of the culture is still part of the society and citizen, in my eyes -unless he explicitly chooses his believe over his citizenship - and a "paradise" on earth exists. Then he/she/it is free to migrate to whatever statefull-dystopia or tax-free-heaven promises ascension.
I am bracing for impact...
To be honest I still have no idea. I know the plate(or actually film) was made of some insulating material, because it accumulated a charge on its surface the same way the screen did.

Unfortunately I never got an ELI5, even though I was literally five back then.
Chrome is listed as impacted. People use chrome password managers.