skysight-inc/HackerNews huggingface dataset:
The folks that invented high-assurance security (TCSEC A1-class) were eliminating storage and timing channels best they could. An early reference was in VAX Security Kernel that tried to assess and mitigate timing channels.

http://ix.cs.uoregon.edu/~butler/teaching/10F/cis607/papers/...

http://ieeexplore.ieee.org/document/213271/

Mainstream security professionals have always ignored such work dismissing it as red tape with no value or too costly. The early work preempted most problems, though, back in the 1980's-1990's by focusing on root causes. The same crowd that ignores them keep rediscovering the lessons in new forms while continuing to ignore them. (There are exceptions who pay attention.) Far as covert channels, the first technique I saw to systematically examine was Kemmerer's in 1983. It was one that made it into the first criteria for security certification. As in, it was mandatory to look for covert/side channels the best you could.

http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.462...

https://fas.org/irp/nsa/rainbow/tg030.htm

So, the basic concepts have been known for decades under covert, channel analysis. The analysis technique established long ago was to identify every shared resource between two things in the system. If they could read/write to it, it was a potential, storage channel. It was a timing channel if they can manipulate its activity with a way to time that. Those are basic ones. So, you can just list everything, categorize them, and do the analysis by brute force. They'd have found the caching stuff quickly. Here's an example that should've happened a long time ago:

https://eprint.iacr.org/2016/613.pdf
Oh crazy I was wondering if my system was totally messed up for quite a few weeks now.
Thought it had to do with my homebrewed version of htop but didn’t have time to investigate further :/
i remember people jokingly referring to stuff like word2vec (one layer, millions of dimensions) as "wide learning". this is definitely better branding than that.
Normal comparison is bad even if you are comparing hashes. Letting the attacker figure out the password hash allows them to attempt to crack the password through an offline brute-force attack running on GPUs.
That's a pretty misleading statement indeed.
You're being pretty silly by zeroing in on the word modern and then using an equally silly redefinition of it yourself.

Branch prediction isn't new, you're right. But VLIW instructions are equally unmodern and are entirely orthogonal to speculative execution. Sufficiently smart compilers are also no substitute for runtime analysis.
NEXT Taxi. All the vehicles look like black cubes.
I'd love to see an example of a tweet he actually deserves to get banned for. Note that "expressing support for Donald Trump" doesn't count.
The nuclear car idea reminds me of Edward Teller advocacy of using nuclear bombs to excavate a harbor in Alaska, "in the shape of a polar bear, if required".[1][2]

[1] - http://arcticcircle.uconn.edu/VirtualClassroom/Chariot/vande...

[2] - https://en.wikipedia.org/wiki/Project_Chariot
I don't think self-driving cars change the dynamics of traffic. Anything that makes driving faster attracts traffic until the advantage is lost. Often, it actually turns out to be worse due to second-order effects.
Hangouts, Slack, Zoom.us, Appear.in (even Skype iirc) work fine with Debian.
A Forth-Like Stack Machine Implemented in Google Sheets
Do you get kernel panics too if you don't follow the right sequence of "first wake from sleep then connect external monitor"? I can't believe this is still so broken.

2017 13" TouchBar MBP running 10.12.6
Amazon Redshift is not actually based in Postgres, it just supports a Postgres interface. It is built on top of technology from the massive parallel processing (MPP) data-warehouse company ParAccel which was acquired by Actian, and licenced by Amazon.
Having lived near highways and busy main roads, tire noise, horns and sirens are a lot of the mix.
Canadian wait times are a bit of an aberration according to a recent survey[0]. According to the same survey, which also includes other developed countries, the US isn't doing better at all on other fields, and significantly worse on things like cost barriers.

The existence of socialized healthcare doesn't preclude privatized healthcare. That 92 year old can get their treatment in the private sector in any developed country, and hope their insurance will cover it.

I'm not sure what that anecdotal evidence means. Just today I drove my mother to the ED after a fall that left the bone peeking through the skin, and we were in and out in an hour. The fact that the NHS has problems now doesn't prove anything.

0: https://www.cihi.ca/sites/default/files/document/commonwealt...
Maybe with the new, secure stuff, have it implement a padded cell where can run the old stuff. What's inside the padded cell might become a security disaster, but at least it's kept inside the cell.

We've done more or less that several times in computing: At first the code just ran on the computer and had full access to everything. Soon we got memory protection, privileged instructions, and operating systems. Then we got rings of security, virtual memory, virtual machines, etc.

We can do it again.
Qualcomm joins Intel, Apple, AMD in confirming its CPUs suffer hack bugs, too
I assume a lot of variables come into play, probably what you use, how you use it, and where you use it.

But it's funny you say that, because that dichotomy seems to define High Sierra; it's either a total mess, or totally forgettable.
> In the 1966 science fiction film Fantastic Voyage, a submarine is shrunken down and injected into a scientist's body to repair a blood clot in his brain. While the movie may be still be fiction, researchers at Caltech are making strides in this direction: they have, for the first time, created bacterial cells with the ability to reflect sound waves from inside bodies, reminiscent of how submarines reflect sonar to reveal their locations.

I think this wins the Biggest Reach To Connect Science News With Pop-Cultural Touchstones prize.

I distinctly remember reading about synthetic biology ~10 years ago, when it was just emerging as a concept, and thinking "this sounds like a fun toy, but it's not practical or useful- cells are too complex to engineer with such simple 'modules,' and what can you do with a bunch of switches to control fluorescent protein, anyway?" But the concept still exists, and advances like this one march steadily on...

In a way, this kind of medical-synthetic-microbe could be thought of as a "soft genetic therapy." You could reprogram your own cells to manufacture some missing enzyme, or eat cancer cells, or whatever, but as yet (even with CRISPR and co.) we don't have a really safe way to do that in humans. But if you can find some bacteria which would get along fine in your body anyway, and modify them to fulfil your whims, that's much easier- and if things turn sour, you can just take some antibiotics.
> If you expect to understand identity in 10 seconds, you don’t even know what you don’t know.

I'm not asking to "understand identity in 10 seconds" whatever that means. I literally just want to know what problem they are solving in a simple abstract use case so i can tell if their product relates to the problems that I have. If so, I will gladly spend more time researching your product. Telling me that I have to spend hours just to figure out if my problems even relates to the solutions marketed by your products is your failure in marketing your product.

> You know how we hear about dopey password disclosure breaches every month? Using a service like Okta, Azure AD, etc lets you avoid that type of embarrassment/liability and lets you control the dozens of SaaS and other accounts that your employees use.

Go read Y combinator's "how to apply blog" [0] with the relevant text starting with "The first question I look at is, ". I recommend reading all of it because it is pretty good but that section explains how conveying a product quickly in a concise matter is crucial.

Here is some relevant text:

"We are going to transform the relationship between individuals and information."

That sounds impressive, but it conveys nothing. It could be a description of any technology company. Are you going to build a search engine? Database software? A router? I have no idea.
One test of whether you’re explaining your idea effectively is to ask how close the reader is to reproducing it. After reading that sentence I’m no closer than I was before, so its content is effectively zero. Another mistake is to begin with a sweeping introductory paragraph about how important the problem is:

Information is the lifeblood of the modern organization. The ability to channel information quickly and efficiently to those who need it is critical to a company’s success. A company that achieves an edge in the efficient use of information will, all other things being equal, have a significant edge over competitors.

Again, zero content; after reading this, the reader is no closer to reproducing your project than before. A good answer would be something like:

A database with a wiki-like interface, combined with a graphical UI for controlling who can see and edit what.

[0]: http://www.ycombinator.com/howtoapply/
Store the screen layout using serials from the EDIDs. Why it doesn’t do this and “tries” to guess their position somehow is beyond me. I use the OWC TB3 dock with dual Asus PA328qs with the latest firmware. Because of apparently some lame design decisions, in order to run dual external monitors over a single TB3 port, you need the dock, which has one DisplayPort output, then a TB3-> DisplayPort (via USB-C alt mode IIRC) dongle plugged into the dock. This is idiotic, but I wouldn’t mind so much if it actually worked consistently. This is not the case. Half the time, when I go into work and plug in, I get 30hz sync on the monitor plugged into the dock. This is when it works at all, without having to guess if the laptop is actually on, because it’s the rMBP which has no power indicators despite having a useless oled screen across the top of the keyboard. So, plug in, wait 5-30 seconds, nothing, open laptop, nothing, unplug dock, nothing, hold down fingerprint reader (the idiotic power button on the rMBP) until...nothing happens, then wait a random amount of seconds, stab it again, wait another 5-10 seconds for the Apple logo to appear, macOS boots into recovery (reset credentials screen, because it assumed that since I couldn’t log in during a boot that I need to reset my password I guess), restart, wait for disk decryption screen which doesn’t work with my wireless keyboard plugged into the dock, type in that password on the laptop keyboard, wait another few seconds for it to log in, ensure that WiFi is enabled as my normal network connection is via LAN via the dock which isn’t plugged in at this point, log in, wait for everything to start, close lid and pray that I don’t have to repeat this, wait another 5 seconds for it to actually sleep, plug dock in, mash random keys until it wakes up, log in again, rearrange monitor layout as it’s usually swapped L/R, one monitor doesn’t work, or they both don’t work again, fix that by power cycling monitors / dock, then finally maybe do some work if it’s not yet lunch time.

For a ~$6k setup, it’s awful. It’d be awful for $1k. About 10 years ago, I had a Dell D830 running Fedora and later, early versions of Gnome shell. The dock powered the laptop and a mouse, keyboard, external drive, and two monitors. It was a single (albeit proprietary) connector, and the dock was fairly expensive (~$200 IIRC). It worked damn great, nearly every time, even with sleep States in Linux on a laptop 10 years ago.

Why is this suddenly harder than putting a Tesla on Mars? Why don’t we have good real wireless HD displays by now? The current state of affairs with Apple laptops and docking is just sad to me. I’m almost bothered enough by it to switch jobs to go there and work on fixing it.
I have to say (and of course this just another anecdote) none of the developers I know (including myself!) are happy any more with OSX. In particular, no-one wants the new MB Pros. We put up with the gradual culling of ports for the sake of the things we liked (OSX's great 3rd party GUI software ecosystem, plus enough unixyness underneath, and the great hardware). But removing 1/6 of the keyboard for the sake of a feeble "innovation" has been a cut too far, and now we're gazing with envy at machines with real keyboards and an actual diversity of ports.

The only developers I know who are replacing their pre-touchbar machines right now with new ones are those making much of their living from iOS / OS X. Many (like me) are kind of hanging on, because it's a pain to change OSs, lose much of the software we love etc. I'm still undecided, but I think my current (ageing) MB Pro is going to be my last.

> The Linux users I work with spend more time on sysadmin work than the Mac users by a hefty margin

Yep. I shifted from Linux to OS X years ago because I was sick of tech fiddling and wanted to have a machine that needed no hand-holding and let me get on with my work.

There seem to be no good options.
Umair Haque proposed an option in his HBR essay “Betterness: Economics for Humans.” He uses the analogy that GDP is like the RPM gauge on a car, hard to use without the context of a speedometer. He proposes new measures to supplement GDP and help indicate if real wealth is being created. Not sure how these ideas have developed since 2010.

https://www.amazon.com/Betterness-Economics-Humans-Kindle-Si...
I wonder (my evil devil's advocate) if there are satellites or other hard-to-patch vital facilities that could be compromised with either of these vulnerabilities.

I know they made space-hardened x86 chips too.
>To validly criticize using GDP as the headline measure, you need to show not merely that GDP is flawed, but that there is an alternative measure that can be practically calculated that is on-balance better at capturing the overall picture.

Why? Maybe we should be more humble about what metrics can and can’t do for us.

Maybe we should admit that many of the things that matter to us are subjective rather than avoiding the difficult questions by fixating only on things that appeal to positivists?
No. You're "cherry picking."

Why did you not quote the entire definition you cited? Here it is. It clearly mentions death as the relative level of suffering.

Full definition:

>"a person who is put to death or endures great suffering on behalf of any belief, principle, or cause" [0]

What you quoted:

>"or endures great suffering on behalf of any belief, principle, or cause"

[0] http://www.dictionary.com/browse/martyr
Whatever consensus based decision making body your society uses to engage in collective action.
I got to say... I have a couple MacBooks I use at home, but my work PC is a 2012 era AMD CPU with 32GB RAM and a GTX650 Ti with four random secondhand displays connected to it, running Windows 7, and I never have any issues with it.
Sounds fun! Every day is workstation roulette!
CES kicks off with no lead women speakers or code of conduct
Nomad’s ‘human billboard’ marketing
I actually didn't have any problems with WinodwsME (seriously). It ran about the same as Windows98 ... I mean still buggy and would crash once a week, but that was the entire Win9x era.
Not if it's a known constant trip count, then you can fully unroll it. No more branches!

If the trip count isn't known at compile time? You should find out.
I’m in favor of getting rid of „neural“. That would help dispense with all the unhelpful discussions about how different DNNs work compared to the human brain.
> The things I would do (and pay) for 2010-Apple tier hardware built for CentOS

Isn’t it remarkable this still doesn’t exist? Build quality still does not compare in the PC world.

Yet, I’m on a MBA3,2 (late 2010) and it’s great. Still running Yosemite. It’s got 4gb ram but handles running 10 JVMs with modest heaps for development no problem. Stable and runs for months without issue. I’d love more RAM and more cores but none of these computers seem worth it.

I considered buying a 2015 MPB the other month only to learn that Apple glues the battery to the top case. So to replace the battery you need to replace the whole top case. Insane.
More anecdata - late 2013 15” Haswell + GeForce 750m rMBP, have literally (and I really truly mean this) had 0 issues. Not a single kernel panic or notable userland software glitch. The only thing that glitches occasionally is plugging into an external monitor, but this has happened on every release since Mavericks (what this laptop shipped with IIRC)
The biggest factors in economic productivity are labor and technology (aka efficiency). Labor growth may be slowing, but technology growth is accelerating.
It's not always even bugs though. I remember back in ~2013 OS X updates would regularly break my Postgres setup because Apple like to muck around with it on every release. Postgres.app solved that, but the disregard for developer issues has been somewhat annoying since a longer time. And then you have a IDE like XCode that feels many years behind any JetBrains IDE lacking basic refactoring tools.
For some reason those panics stopped happening to me after a year or so (2014 15" running 10.10.5 here). Now it just panics if I plug a DP cable in cockeyed.
Modern smartphones running Cortex-A53 clusters would like a word.
Hierarchies are Limiting Development
Programming code is repeating a lesson from history. Early databases such as IBM's IMS were hierarchical. But hierarchies proved to not be flexible, and "network" and "navigational" databases supplemented them. But they proved too unwieldy ("pointer-happy") and the relational model eventually superseded them. Our code models are having similar growing pains.

I was in a debate about whether a Java "on-click" GUI button method belonged with a "button" object or a "listener" object. Being with the listener object made implementation easier, but is less "natural" than being associated with a button itself. Why can't it be easily associated with BOTH? Similarly in an MVC application sometimes you want to group or search code by entity and sometimes by the MVC parts, such as the "model" folder. Why can't that also be both?

In relational you have many-to-many tables for such and adjust your query to dynamically associate, filter, and sort how you want. Object (type) hierarchies and folder hierarchies are stifling us. Ditch the trees: R&D time.
Would be curious to see this also done on the Google cloud.
Yikes.

I suspect there are many more of these out there.
Did that end the call? Most conferencing tools I use are happy if you shift away. I have to say I hardly ever use the volume buttons on my Mac and I use it 10-14h a day.
I never understood the needs for the vast majority of apps. With everything clearly moving towards the web over the last twenty years, why did we all of a sudden focus on native applications? Money is the only one I can think of. I sure as shit don't need a native application to view news / tweets / whatever other nonsense there is these days. I've limited myself to the very first "page" of my iPhone. No more.
Are they running on bare metal? I'd say don't patch and only run pg and redis on the machine. They should still be secure, no?
Did you let Richard Feynman into the building...
1. By creating and closing process very rapidly, one could easily reproduce
this problem. I used something like `while true; do sh -c "exit 0"; done`.

The entire OS dying to rapidly spawned/exited processes permits a pretty nasty DoS. Good thing that nobody ever uses macs as servers or shared machines.
I've been lucky that with my past three jobs, I've been able to use Linux naively. One place just had custom desktops, another HP workstations and the last I got a Dell laptop. I ran openSUSE on the HP, and Gentoo on the other two.

One of the shops was an open source shop, so all 150+ of us ran some Linux distro (mostly Ubuntu/Debain, some Arch, some Mint .. I was the only Gentoo) except for the graphics people who got Windows or Macs. But I was surprised at the other two shops, there were very few Linux users. There were some here and there around the company, but I'd usually be the only one on my team who ran Linux naively with Windows in a VM.
Yup, MinHash with LSH. It's quite fast and low compute intensive, because articles shown are limited by recency (e.g. past 24 hours), say order of hundreds and thousands in a few seconds. Someone wrote an open source LSH on github on Golang, so no credits to me :) Probably would not have been able to code LSH myself.
This was really fun to build, and a spreadsheet turned out to be a surprisingly productive environment for building a VM!
Big Data: Why the Facebook Feed Is a Liar According to Google
I admit I prefer windows for home and work use. Might be because I am more used to the UI etc. and I'm not a command line animal. Although happy to use shell and vi when appropriate
It should be “per hour lost to work” (so you account for commute times) and subtract off minimal housing costs.
The B-team concept is tricky to pull off. If certain products get a reputation of being a tar pit where careers go to die, as is commonly reputed to happen at Google, then good people won't want to work on them and good executives won't want to manage them.

I don't know what the right approach is. If your company has a mixture of products that are widely preceived as being divided into "sexy" and "boring" categories, there may simply be no good answer.
If you're a basic research scientist, you can't just rely on PubMed, simply not everything is indexed there.

Google Scholar is pretty much the only place you can go for that sort of thing, and it's distance from things like Microsoft Academic Search are leagues.

I'd kill for a non-Google academic search, and smarter Google Scholar/PubMed alerts would be appreciated.
I had a company like that. I just ran Windows in a VM and connected it to the company domain controller. While at work, I used x11vnc on one display, tightvnc on the Windows VM on another monitor and would use that with WebEx if I needed to share my screen.

At home, I ran the same setup but I used my gaming/windows laptop for my VNC client and WebEx. I could never get the Linux Cisco VPN client to work, so my work laptop just made an openvpn connection to my flat (fibre connections are nice).
I have made the switch to Ubuntu for Windows on my personal projects. If you aren't trying to run daemons, it is a perfect workstation environment.
Woah I didn't know Canonical certifies Ubuntu on certain hardware. That's incredible, I love linux but I'm not a sysadmin and I've been burned before by hardware manufactures publishing windows-only driver binaries.
When you use proprietary solutions you have it coming.
Yea, there's very little indication anyone here has tried to do any serious debugging or realizing this should be a security vulnerability report. The author did eventually post a stack-trace to the actual call that's failing.
There are almost no good modem+router combo devices on the market. There also aren't open-source drivers for the modem half of any modern modem+router combo boxes, so they won't be fully functional with OpenWRT.
"Google uses Bayes nets like Microsoft uses 'if' statements" -+ Joel Spolsky, 15 years ago
Yes, the saved resources can be redirected to other uses. But not necessarily in the same economy.

As for your second point, I should have said "your own contribution to GDP" rather than "your own GDP". And with that, you CAN invest what you don't spend on yourself in other economies, as I said. It may reap benefits in the future. But GDP calculations can credit some other economy's GDP, as I said.
I’m still looking for a thing I _can_ leave running, without High Sierra freezing on me..
"Secret hard-coded backdoor" makes no sense. Please use the orignal title.
Yea, if I had a Mac box, I'd be looking at that call stack the author posted and fuzzing the hell out of those functions. There's a DoS bug bounty in there somewhere.