skysight-inc/HackerNews huggingface dataset:
Isn't why this problem even exits the exact opposite?
Intel was losing on the mobile market and changed internal testing to iterate faster by cutting corners.

Found a quote:

"We need to move faster. Validation at Intel is taking much longer than it does for our competition. We need to do whatever we can to reduce those times… we can’t live forever in the shadow of the early 90’s FDIV bug, we need to move on. Our competition is moving much faster than we are".
> that also predates this announcement

Apparently, Microsoft has been releasing patches for NT since November, so it isn't exactly predating the bug.
I've never heard it phrased like this specifically but there is absolutely a mindset during interviews that the applicant gets the job unless you can find a specific reason not to give it to them. To @dragonwriter's point the rules surrounding Civil Service are even more extreme. Here is a real world example of CS hiring procedures:

0. CS Commission sets a minimum written score for oral interviews. Score is arbitrary and largely designed to limit number of interviews to an acceptable number (20-30 total per vacancy).

1. Commission asks applicants the same questions, in the same order, asked by the same commissioner. Scores are subjective but on a 1-7 scale.

2. Does the mean score surpass the 60% pass rate? If yes, applicant moves to next step.

3. Does the applicant, in their background investigation or oral interview, admit to any explicitly listed disqualifying acts as listed in the Commission's rules & regulations? If no, applicant moves to next step.

4. The written and oral scores are averaged based on a prescribed weighted formula. This weighted score is 0-100.

5. Is the applicant a veteran? Add a certain number of points.

6. Give the top three names to the hiring body (varies by position).

7. Is a veteran in the top three? Guess what, they get the job no matter what.
Spotify files for its IPO
Their e-readers are great. I have a Paperwhite and leave it in airplane mode and the ads stopped. I push content to it through Calibre.
I'm worried about the performance impact on low end intel chips like Atom/Celeron found in Chromebooks.30% hit will make computing on those platforms miserable.

Talking about chromeOS, is there any speculation about the impact of bug? Does it's hardened sand-boxing techniques put it in a better position even if KASLR is compromised?
Talk is cheap; investing perhaps less so. The asserted "soaring" stock price simply hasn't happened. The 7% rise they name as "soaring" is not a soar for a stock this volatile: https://www.bloomberg.com/quote/AMD:US - just look at the graph over the past year; value changes in excess of 50% happened several times.

To be clear; I'm not saying this increase won't stick, just that bloomberg is pretending they're reading this from the numbers, not merely expecting it to occur. It'd be fine to say you might expect the stock to trend higher. But pretending you can look at that noisy line and say the current 7% increase is statistically significantly higher in a humanly relevant way is just hogwash.

Obviously you might expect the stock to soar. It may well happen. It just isn't visible in the data they present; the article is simply click bait (or worse, market manipulation).
As someone who worked in an Intel Validation group for SOCs until mid-2014 or so I can tell you, yes, you will see more CPU bugs from Intel than you have in the past from the post-FDIV-bug era until recently.

Why?

Let me set the scene: It’s late in 2013. Intel is frantic about losing the mobile CPU wars to ARM. Meetings with all the validation groups. Head honcho in charge of Validation says something to the effect of: “We need to move faster. Validation at Intel is taking much longer than it does for our competition. We need to do whatever we can to reduce those times… we can’t live forever in the shadow of the early 90’s FDIV bug, we need to move on. Our competition is moving much faster than we are” - I’m paraphrasing.

Many of the engineers in the room could remember the FDIV bug and the ensuing problems caused for Intel 20 years prior. Many of us were aghast that someone highly placed would suggest we needed to cut corners in validation - that wasn’t explicitly said, of course, but that was the implicit message. That meeting there in late 2013 signaled a sea change at Intel to many of us who were there. And it didn’t seem like it was going to be a good kind of sea change. Some of us chose to get out while the getting was good. As someone who worked in an Intel Validation group for SOCs until mid-2014 or so I can tell you, yes, you will see more CPU bugs from Intel than you have in the past from the post-FDIV-bug era until recently.

So this is why Krzanich sold his stock. He knows the bug is his fault. Whoops. I think someone may "quit for personal reasons" soon.

https://www.fool.com/investing/2017/12/19/intels-ceo-just-so...
From what I've read, this slowdown only affects syscalls, which, since they aren't usually a huge percentage of processing in the first place, should not have such an effect. You're more likely looking at a few percent at most, which is not going to be enough to make AMD outperform Intel. Let's stop the fear mongering and wait for actual metrics.
Superficially, it seems like the performance hit mostly scales with IOPS or transactions per second, which might have some pretty serious implications for performance/dollar in the kinds of intensive back-end applications where Intel currently dominates and AMD is trying to make inroads with EPYC.
29 Insights I learned while interviewing Global Coworking Leaders – Part 3
How does it show?
It will be interesting to see how the next Roadster is able to do once it actually becomes available. With a 600 mile range and likely the ability to charge significantly faster, it should be able to smash this number. Eventually.
you mean you're a pimp then
> The Post Office? Nope! During busy times, I've seen the line go beyond 15 or 20, and there's this only 1 slow clerk taking his time, chit-chatting, in no hurry at all.

> At my local grocery store (Safeway), they'll add a new cashier if the line becomes long. The Post Office? Nope! During busy times, I've seen the line go beyond 15 or 20, and there's this only 1 slow clerk taking his time, chit-chatting, in no hurry at all.

Because Safeway has enough manpower to do that.

> Or the DMV. Visit the SF DMV if you want to see government at "work".

I've actually been reasonably satisfied with the approach the CA DMV takes, which is to do everything possible to make people not have to visit the DMV in person. I was pleasantly surprised by how easy online driver's license renewal was (they even had a mobile version).

I'd take the USPS over, say, the customer service experience on the US legacy airlines any day.
There are presumably also fewer developers available in Harrogate to hire into that limited number of roles; especially because they also have the option to commute to Leeds as you say, or work for a higher-paying remote employer. Limited tech markets work both ways.

I'm based in Hull, which — like Glasgow — has a fairly low cost of living, and 28k for this still strikes me as incredibly low.
So much this.

I often wonder if I'm the only person on this list that wouldn't work for them simply because I feel its WRONG.
"* We need a powerful spy organization to compete on the world stage." - maybe I'm missing some irony here, but how is this a "self-inflicted wound"?
Product vs. Marketing Illustration
Not Trinitron (Edit: Yes it is), but I had a pair of Sony FW900 Monitors. I got them free off of craigslist in 2010 when my laptop screen broke, I didn't have an external monitor and I was unemployed.

Those things are beasts. A little over 90 lbs each, 16x10 aspect ratio, and supported a resolution of 2304 x 1440 at 80 Hz.

https://www.cnet.com/products/sony-gdm-fw900/specs/
I was born in '71. When I was 11 or 12 my friends and I could ride our bikes basically wherever we wanted to go. Our only rule was be home before the street lights turned on.

The 80's happened which brought a few highly publicized child abductions/murders. Notably the Walsh child. His father scared every parent into becoming a helicopter parent. (Not judging, just saying).

People really haven't loosened up much since. Every stranger is dangerous.
> That seems not to be the case everywhere - they might make money but not profits anyway.

While it's mostly true that athletic programs as a whole are not profitable, it's also true that a majority of football and men's basketball programs are profitable[1]:

> > Between 50 and 60 percent of football and men’s basketball programs have reported net generated revenues (surpluses) for each of the nine years reported, while the dollar amount has increased slightly but steadily each year. (3.6)

> It seems uncertain that they actually use the money to fund education.

They don't. They use the money to fund sports programs that aren't profitable, like women's basketball. Women's basketball, in particular, cost FBS schools (in aggregate) about $1.8 million in FY 2014 (though ice hockey isn't far behind at $1.4 million).

Note that I'm not making a judgement here: I don't think we should eliminate women's basketball. But if we're going to argue about what actually costs the school money, we should at least be honest about it.

> Not to mention the fact that they basically exploit the athletes, who aren't always even given a quality education in return.

No qualms there. The NCAA's treatment of athletes is asinine and I'm quite certain we'll view this as a black mark in the history of sports.

1: http://www.ncaa.org/sites/default/files/2015%20Division%20I%...
Apple's $250B in repatriated cash: Netflix, Disney, Tesla and other options
Thanks for the suggestion!

My email for my custom domain is on FastMail, but I have a couple of gmail addresses that would take a long time to get fully migrated over.

The company I work for also uses GSuite, so I can't really escape it, anyway...
No arguments there.
Wake word logic is not the hard part, you can do it in software relatively cheaply (cmusphinx/pocketsphinx handles wake word type logic in realtime with relatively low cpu requirements) Microphone quality is an issue, but there's stuff out there, it's just a matter of finding a good one. One popular one is the playstation eye camera, as it's really freaking cheap and is designed for speech input at medium distances, but it's not omnidirectional like the echo/google home mini kind of thing is.
> A third example: Before it was paid very well, being a "computer science proramming nerd" had a very low status in general society. On the other hand being a good programmer/hacker could mean high status among nerds/hackers (again some specific community)/

> My counterclaim is

How many people listen to it? If it's any, you probably have some of this fictitious status. Ever listened to a vagrant's claims? Would the average person of lower virtue?

> A third example: Before it was paid very well, being a "computer science proramming nerd" had a very low status in general society. On the other hand being a good programmer/hacker could mean high status among nerds/hackers (again some specific community)/

You tried very hard to make 'computer science programming nerd' not roll off the tongue, just sayin'... I liked programming way more before computer science, and got a lot more girlfriends before I had a mortgage. Not sure I've ever met a CSPN :)

Status is real because programming is real, but humans are infinitely creative and can make their own status by writing their own program.
Your comment strongly reminds me of this comment (and the thread) of 4 years ago:

https://news.ycombinator.com/item?id=7885128

Nothing has changed.

To quote 'natural219 from what I just linked, the words I 100% support:

"Godspeed, Musk. (...) I'm behind you 100%. I just hope you can finish your work before our shitty, myopic, destructive society tears you down. Here's to faith."
Is there anything this bug can give you that you can't get with

sudo cat /dev/mem

?

I'm having a hard time understanding why this is worse than any other local root escalation bug except for the consequences of the necessary patch.

EDIT: I see that /dev/mem is no longer a window on all of physical RAM in a default secure configuration. Is it true that there's no way for root to read kernel memory in a typical Linux instance? If so, the severity of this issue makes more sense to me.
Looks like Krzanich sold $39.4M of stock on 11/28. Hard to say when the top brass knew about this flaw.

https://finance.yahoo.com/quote/INTC/insider-transactions?p=...
The Plum Guide (www.plumguide.com) | Senior Software Engineer | FULL TIME | Old Street, London | ON SITE | £55,000 - £75,000

The Plum Guide is building a marketplace of the world’s best holiday homes. For real!
We are taking a systematic and obsessive approach to testing every single home on the planet, and accepting only the top 1%. We do so by putting every home through The Plum Test: a gruelling hospitality exam, which uses a mix of algorithms and physical visits by hospitality experts. We are funded by an all-star cast investor group including Local Globe. We have just closed our Series A round of funding with the objective to take Plum global. The first city we are opening is Paris.

We are building a business that brings world-leading technical excellence alongside incredible visual creatives and brand builders to be globally successful.

We are currently a team of 5 skilled developers working in a fast-paced environment with lots of knowledge sharing and super interesting problems to solve. We are all constantly learning through project ownership and responsibility.

Examples of cool things the team are doing:

- Working on an array of projects to scale our platform to multiple cities. This includes working on i18n, booking platform, payments and our cloud architecture.
- Working in sprints to improve conversion, performance and support growth.
- Shaping the stack, integration, deployment, testing and agile processes.
- Writing awesome code!

Full spec:https://plumguide-careers.squarespace.com/senior-software-en...
But according to the article, it doesn't. In the example of buying toothpaste, Alexa just says "I can search for a brand, like Colgate". It doesn't indicate whether Colgate paid for that placement.
> Outside of a pub (which is a bar?) none of these places would typically be open on a late Fri/Sat.

How late are you talking about? I'm looking at the weekend hours now in my city.

Board game venues: 2AM.

Escape rooms: Midnight - 1AM.

VR: Midnight

Meetup/Couchsurfing: I've been out to 5AM.

Rooftop/outdoor movies obviously don't start until after dark, and then they usually serve alcohol, so people hang out and have drinks after.

Bowling: 2AM
Not quite -- without his patch, the performance penalty will hit them too. Tom is proposing to be excluded from the proposed solution as it would hit AMD with collateral damage from the `X86_BUG_CPU_INSECURE` fix.

I'm sure there are frantic emails claiming that AMD shouldn't be punished for Intel's mistake.

EDIT: actually the fix will go out with 4.14.12 and 4.15rc7, both `X86_BUG_CPU_INSECURE` and AMD's addendum to be protected from the collateral damage.
If “reading secret data out of kernel memory” translates into “read the page cache from a stranger’s VM that happens to be on the same cloud server” then this could be worse than Heartbleed.
Not yet at least. Once attitudes towards privacy change further towards continual surveillance they'll be the first to flip the switch and turn it on.
> syscalls, which, since they aren't usually a huge percentage of processing in the first place... Let's stop the fear mongering

Agreed!

(We should probably also stop overgeneralizing about the nature of computational workloads.)
You're correct in that you can only test for things you know about (duh, you don't know what you don't know) so as far as screening goes, it's just a matter of how much you're screening FOR. It's also really easy to rule out which diseases are not likely to occur just by checking one person's DNA. You only have to screen where both samples can potentially combine to form something bad.
Bloomberg? Trash? I'm shocked (I'm not).
> From what I've read, this slowdown only affects syscalls

Incorrect. It also affects interrupts and (page) faults.

Any usermode to kernel and back transition.
> AMD shares surged as much as 7.2 percent to $11.77 Wednesday. Intel fell as much as 3.8 percent, the most since April, to $45.05. An Intel spokesman declined to comment.

I have no real context for this, but is 7.2% considered a "soar"? And a 3.8% decrease seems like kind of not a lot, considering what's fucking happening here.
The reason they are paid the same in tennis is that they bring in approximately the same revenue via sponsorship, ticket sales, etc. Women's tennis is basically as popular as men's at this point.

However, this is not the case in professional basketball, soccer or even golf. In all three cases, the men's leagues far outperform the women's in terms of getting revenue from the marketplace...and the commensurate salaries / prize purses reflect this. The US Womens Soccer team made a big deal about this recently, but when you look at the income produced by the men in professional leagues vs. women's leagues, there are stark differences.
Do you pay for computing cycles or for a computing instance?

If your cloud provider lowers its performance/efficiency by 30%, isn't it up to its customers to switch? But where to switch too? There's no choice among the big cloud providers. They all use Intel and AMD in varying amounts. As a cloud user you are stuck with Intel or AMD chips. Demand doesn't change, supply is lowered.

Looking at it like this, it is more likely that demand for cloud resources will rise, and as such revenue of the cloud providers will as well.
Wonderful prior discussion on intercoolerjs, albeit a bit old:

https://news.ycombinator.com/item?id=12885980
Pensions just don't make sense mathematically. If they're solvent based on the state's investments, then the employee is getting a raw deal compared to having just invested the money themselves. If they're not, then I as a taxpayer am getting a raw deal by helping to pay for someone's retirement because they worked for a state agency decades ago.

My state starts doling out pensions at 5 years. A friend of mine worked for a state senator in the 90s for 6 years. He's got something like $1200/mo guaranteed during his retirement for 6 years of borderline political work ~25 years ago.

I know it's a politically charged subject but I don't see why from an economic/mathematical perspective it's any better than moving the same investments to the market. Or at least if you're going to keep the pensions, only give them out for full service (20 years) like the military, and make it easier to fire a government worker for poor performance.

I shouldn't be able to sit on my thumbs for a few years and have my mortgage covered by the taxpayers during my retirement.
8700k is an "end of the line" CPU in terms of motherboard support. Also AMD Ryzen CPUs give you much better bang for buck.
Basically it feels as if parts of American society are becoming desocialized--losing the ability to interact effectively with other members of the society. This article echoes Robert Putnam's "Bowling Alone" thesis [0]. His ideas are at least a quarter century old but now seem prescient.

I find the social changes the Wired article describes far more disturbing than the "Internet is frying our brains" threat that people like Nick Carr fear, let alone Artificial General Intelligence. Unlike the latter we see evidence of the former on a daily basis.

[0] http://xroads.virginia.edu/~HYPER/DETOC/assoc/bowling.html
"...why have our bodies, and those of other animals, evolved so as to make the particular structural materials that they do make, and not to make others, especially metals..."

Because that's what's good enough to get through the crucible of successful genome transmission? Evolution doesn't have an end goal; every "improvement" came about by random changes, either in the genome or in the environment, which yielded a reproductive advantage to some new gene or genes. I'm not sure if the author intended it but this seems to fall into the common fallacy of believing that evolution is an active process guiding organism toward some optimal state. Organisms don't evolve "to do" anything. They end up there. Contemporary genomes are what's left after everything else has died. Not the conquerors of mountains.
Intel hasn't been dominating in CPU benchmarks since AMD's new Zen architecture came out. They still have a ~10% lead for gaming but there are as many usecases where AMD is the best choice as there are where Intel is. So if this bug is slowing down Intel but not AMD servers by 10% then suddenly choosing AMD is a no-brainer.
If you can read kernel (and hypervisor) memory then it seems like a very small step from that to a local root vulnerability - e.g. forge some kind of security token by copying it. There's an embargoed Xen vulnerability that may be related to or combine with this one to mean that anyone running in a VM can break out and access other VMs on the same physical host. That would be a huge issue for cloud providers.
There's too much money in the system, both private and public, thus supply-and-demand equilibrium results in high costs. And the supply is carefully limited by healthcare providers. (The middleman takes the profit, so why would the number of actual doctors increase?)
In the beginning, it was nice.

In the middle, it came with some interesting career changes and challenges. It was a good personal experience, but ultimately it didnt work for the company.

In the end, we changed management and it -might- be good for the company depending on what the new owner wants with it. But people are fired en masse, and people are quitting en masse. Project management sucks, we didnt have things to do for months and around both christmas AND new years, we got 2 supposedly CRITICAL issues that HAVE to be done. Except not really.

Looking forward to 2018. Mostly because I'll be looking at new opportunities.
the problem is that the people telling you what to do (the healthcare providers / docs) are getting paid to provide services to you. additionally, insurers are not smart enough to communicate the costs and benefits to patients appropriately.

we need a decoupling of the guide (maybe insurers that are actually good) that tells patients what to do next for optimal care and the org that provides the care. that way providers (docs) dont have an incentive to say do more if more isnt helpful
Because of a perception that they won't get a job if they go to an unknown university.
That is a very strange and questionable interpretation of Kyllo v US. It seems like you're just out to spread FUD.

In Kyllo, the question was whether the general public used thermal imaging to look at people. Even if every household had an Alexa, that doesn't mean the general public uses Alexa to listen to people (just that Amazon does).

By your logic, the Kyllo decision should have been the opposite since the general public does emit unshielded heat signatures (slash use voice assistants) but doesn't observe those signatures (slash/process receive voice assistant requests).
Steve Jobs used way more hyped up adjectives, almost as if talking to a cult following.
You don't need to be root.

> I'm having a hard time understanding why this is worse than any other local root escalation bug except for the consequences of the necessary patch.

It's not, as far as I'm aware. The fact that the patch has perf consequences is why it's such a big deal.
GPU Hardware Info Database
Yes I can.

https://www.amazon.fr/Economics-Software-Quality-Capers-Jone...

Not all good content is offered for free on the Internet.
Still remember the small Triniton Sony TV I've connected my Amstrad CPC to. It had a glass in from of the tube and was portable with a handle.