skysight-inc/HackerNews huggingface dataset:
Yes the way we treat them is definitely a point of contention.

> when this "aliveness" is so far off what they are genetically programmed to enjoy as a normal life.

I assume, just like humans, other animals can adapt and even enjoy a life partly controlled and radically different from natural conditions.

I think the basis should be: are they better off than in the wild? In terms of pain, comfort and stress. And I'd argue that we can give them a better life. But, especially with factory farming, we often don't.

In your specific example of aliens raising humans. If aliens let them live in decent conditions, with some added benefits: say diseases, illnesses and poverty completely eradicated, and wars forbidden. But with the caveat that aliens do decide when you die. (Somewhat similar to Logan's run...). I think many may see it as better than our current life.
Anyone who has actually built software using what the masses think is 'artificial intelligence' knows exactly how artificial and overhyped ML and AI are. Neural networks are a far cry from the magic they've been made out to be, and are nowhere close to as sophisticated as the brains of most animals. Cherry picking results makes for good marketing material, but that's pretty much where the usefulness ends.

We still don't even understand how exactly brains work.
Can anyone provide sample input and output for the example?
I find it difficult to evaluate text processing software quickly against existing solutions when there is no example given, such as: here is some sample input and here is the desired output, as is done at, e.g., unix.com.
Any comments on niagra t1 & t2 related to these methods?
This is a new class of attack. Instead of spear-phishing, it's spear-hacking.

It looks like the target was "bitcoin-ish tipped into /u/someredditor" and the hack/vuln was "intercept mail password resets in order to auth account in order to snatch crypto-currency"

ie: most people's reddit accounts (IMHO) are on the "not that important" on the scale of password protection. (Personal Email/Financial => Work => Medium Security [facebook, amazon, etc] => Low Security [discussion forums])

It's another way of saying that I would expect phpBB or reddit or pinterest to have lower password/server security than my gmail or bank websites.

However, because reddit is relatively high profile, and there was mixing of "cash and reddit", all of a sudden not just reddit was target of a hacking attack, but also reddit's 3rd party service providers.

I can choose to use reddit or not, but I can't choose that reddit uses or doesn't use some other random service provider that may or may not be vulnerable.
Yes, CPU architecture is one of many subjects I don't know enough about, and this was both interesting & has added to my reading list.

It's also quite fun to think that the little Pi I have chugging away in a tiny corner doing a variety of background tasks, which was already the most trouble-free machine I own, may also be the safest (OK I know that's an oversimplification, but I'm feeling affectionate towards it).
Apparently the solution is to check the type before you declare it: https://stackoverflow.com/questions/32321054/using-declare-t...

I assume that most CL compilers are smart enough to optimize calls to such checking functions when they occur in a context where the type has already been declared. And you can probably write a macro to make it more convenient ...
Funny, concerts and recitals is how artists have made their money since the dawn of time. Hard work but it still beat being a farmer in the field all day.

The orgies and coke in studios-age was just an anomaly.
I fail to see how the possibility of further debate in the finer details makes the answer to your original question, what animals are moral to consume, less obvious.

Would you accept a plantation owner claiming slavery's immorality was not obvious because there were arguments to be had about the ethics of "wage slavery" etc?

>but that isn't the case for everybody.

This is a moral failing.
This is a fantastic read. Timing attacks are insidious and tend to crop it in the oddest places. I first learned of them when learning how to securely compare strings (used a lot with passwords). A naive implementation means that you can easily guess if a character is correct depending on how fast the compare function returns.
Are you saying a bug cannot exist unless some functionality is specifically mentioned in the specification, and broken in reality?

That's a philosophical stance known as "positivism."
And yet, my abacus is even more secure ;-)
This was such a cool little game! I agree with the comment that assets should be preloaded. For some reason the only item image that ever showed up in my inventory was the nails. I spent a really long time looking for the bucket only to realize that I had it already and could use it on the plant. None of the other items after that appeared in my inventory, but I just trusted they were there and was able to proceed through the rest of the game. I had to look at the source code for help, but I was super impressed by the clarity of the code there too. Nicely done!
I was wondering when we'd see a paper like this since I saw the post on Firefox reducing timer resolution. My immediate thought was "there have to be other ways to get good enough timers to mount these attacks". Sure enough..
FCC releases final net neutrality repeal order, three weeks after vote
I'm double-replying, which might be bad form, but I think you might be interested to hear that the initial reception to the film had a lot of the same problems. https://www.rogerebert.com/reviews/great-movie-2001-a-space-...

> I attended the Los Angeles premiere of the film, in 1968, at the Pantages Theater. It is impossible to describe the anticipation in the audience adequately. Kubrick had been working on the film in secrecy for some years, in collaboration, the audience knew, with author Arthur C. Clarke, special-effects expert Douglas Trumbull and consultants who advised him on the specific details of his imaginary future -- everything from space station design to corporate logos. Fearing to fly and facing a deadline, Kubrick had sailed from England on the Queen Elizabeth, doing the editing while on board, and had continued to edit the film during a cross-country train journey. Now it finally was ready to be seen.

> To describe that first screening as a disaster would be wrong, for many of those who remained until the end knew they had seen one of the greatest films ever made. But not everyone remained. Rock Hudson stalked down the aisle, complaining, “Will someone tell me what the hell this is about?'' There were many other walkouts, and some restlessness at the film's slow pace (Kubrick immediately cut about 17 minutes, including a pod sequence that essentially repeated another one).

> The film did not provide the clear narrative and easy entertainment cues the audience expected. The closing sequences, with the astronaut inexplicably finding himself in a bedroom somewhere beyond Jupiter, were baffling. The overnight Hollywood judgment was that Kubrick had become derailed, that in his obsession with effects and set pieces, he had failed to make a movie.

To be fair, it is certainly a long way from a movie like The Killing.
Breakdown from post:

~8% pipelined SET performance reduction after patch

~15% pipelined GET performance reduction after patch

~29% non-pipelined SET performance reduction after patch

~25% non-pipelines GET performance reduction after patch
So people can leverage the shitty design of your lock to steal goods? And it's okay because the lock is functioning as it should?

That's how Master Lock stays in business.
A journey through the network saga – Layer 1
This market is crowded like hell.
Check the two posts I'm linking below.

https://www.supermonitoring.com/blog/the-updated-list-of-web...

https://www.supermonitoring.com/blog/website-monitoring-serv...
Most of this work is done by academics who are either not paid or paid a nominal sum. Yes, running a journal is a lot of work, but most of the people who do the actual work do not reap the rewards.
How we recreated Amazon Go in 36 hours
When I get spam email, I usually check the headers and if it's coming from a reputable service (Postmark, Sendgrid, etc.) they usually have a web form or an abuse@ email to send the headers to so that they can shut down the account.

Months ago I received spam from a Mailgun server and tried to use their web form[1] to report it, but it was broken. I reported both that bug and the spam email to their support, which acknowledged it. Weeks later I got another spam email from that same domain, popped open that report form and it was still broken (FWIW as of today it seems to be working again). So I followed up on my initial support request with that info but got no response. Just a few days ago I received another spam message from that domain.

I personally consider all that a very bad sign in an email service provider and wouldn't use Mailgun myself. In contrast, I've been very happy with Postmark.

[1]: https://www.mailgun.com/receiving-spam-from-mailgun
Kudos to Joe Halpern at Cornell for pushing and pushing CS researchers to use arXiv.
Because you picking said mushrooms affects interstate commerce, which after dude's new deal would fall under the control of the commerce clause. Prior to fdr only people and things in interstate commerce could be controlled
Yes, it will have a huge effect on real estate, but probably not the way you think it will. Real estate prices in desirable urban areas will continue to grow at the same, or higher pace. If you look at urban zip codes in desirable economic areas, they were barely affected by the 2008 downturn, and by 2010 the prices were recovered.

Today, those prices are much higher than they were in 2007.

Land supply is an almost straight line with a slight growth, probably something on the order of y = 1.2x, mostly due to innovations in transport speed, cars & metro. So unless we get maglev metro that travels at 200mph, RE prices will continue to reach new highs.
In this case it's arguably tied to 80s home computer nostalgia, but that itself rests on a bedrock of 'computers are boys' toys' sexism that gave us booth babes and all sorts of other nonsense. Magazines of the period had small ads for 'graphics collections' (soft porn) you could order on disk and of course much BBS culture was a way of accessing porn for boys either too young or too shy to buy it in magazine form.
Under gold standard, debt = savings, correct. But with government fiat, I not sure thats the case. Fed bought what, billions of USG debt, without saving this money first, they just printed it. Its not like they earned that money and instead of consumption they invested it into federal debt.
Alright Paul,

What do you think of a monitoring service that has a quick setup (like in a few seconds). Where you can login using github|google|facebook.
The main focus would be ease of use (setup and forget) with a lean, clean and aesthetically pleasing UI.
Would be cool to manage and get notifications from your monitored sites using the following channels:
* Whatsapp|Telegram|Slack Bot
* an API|webhooks
* Email|SMS
* push notifications to a mobile App?
* CLI tool (for managing sites)
Also the service would have email/chat support, where all requests/queries are answered, where your data is not sold and is stored securely. (This are pain points I reviewed from other services)

The initial milestone, should be to monitor websites and backend services cloud based or not. Then would be possible to integrate more tools like status page, reporting, etc

PS: I think there is a new market emerging, which is under–attended, which is IoT, those small devices based on https://freertos.org/ for example chips based in ES8266 or arduino connected to Internet.
Let's look at this from the standpoint of Pascal's Wager.

If reading hackernews gives you brain cancer, you could save your life by not reading it.

If reading hackernews doesn't give you brain cancer, you've given up on a minor pleasure, but in the grand scheme of things, you've lost nothing.

So, why not cut back and avoid hackernews as if it gives your brain cancer?

...

I don't think Pascal's Wager is a good reason to do anything. It can be used to justify anything: there are an infinite amount of potential bad things that can happen.
Er, can we expect more information to follow?

1. How was the employee's account accessed? No 2FA?

2. Do employees ordinarily have access to customer secrets (e.g. API keys) or was there some further exploit?

3. The advice in OP for affected customers is to roll keys and SMTP logins. Couldn't/shouldn't you do that for them? Surely security should trump up-time/deliverability?
Xterm.js 3.0 – Full in-browser terminal, now up to 45 times faster
Postmark costs money, Mailgun does not.
On top of the content-addressed IPFS is an IPNS layer which maps addresses to content hashes. The address of a piece of content is a public key, which is used to sign the content hash. This means only nodes in possession of the private key can change where the IPNS address points to. In addition, IPFS gateways also support a special SRV record in DNS, which can point either directly to a hash or to an address which points to a hash. (This is how you can associate a domain name to content served by IPFS. If you also point the A record of the domain to a public gateway, the gateway will automatically look up the SRV record and return the content when someone retrieves it by HTTP.)

At the moment, go-ipfs (the reference implementation) only supports pinning content hashes, so if you have someone else pinning your content (like a pinning service) you have to notify them of the change. There are plans to add support for mutable pins in the future.

Put in the vocabulary of git: any given commit is referenced by hash[1] and is therefore immutable; IPNS addresses are like references (branches, etc) which can be updated at any time to point to a different commit.

[1]: Since the content is a merkle tree, if they've only changed a few files most of the pinned content will retain the same hash.
Who owes all this money? And to whom do they owe it? I',m thinking this is never getting paid back?
They say the design of the product, not the components are free, if we're going to be pedantic.
It's not the author's job to prevent use of his software by specific individuals as deemed by the US government. It is, however, any citizen's responsibility not to break the law by sending or carrying stuff outside the US.

And indeed, the law is pretty clear: export "munitions" (according to a list - at the time "strong encryption" was on the list) and you'll feel the wrath of Uncle Sam. But they dropped their case against Zimmerman. Never filed charges. Probably because there was no evidence that he was the one to export PGP.
ARM Ltd has a list of vulnerable cores [1], the above are not listed.

[1] https://developer.arm.com/support/security-update
I don't know about "any existing technology" but in any aspect of drug discovery with which i'm aware, i'd agree. My job amounts to using statistics and linear programming to winnow drug candidates out of databases of hundreds of millions of small molecules, (sometimes: "chemoinformatics"). And i've lost count of how many times i've had the marketing department insist on calling what i do "AI". (and let me assure you, as far as pushing back against marketing is concerned "all resistance is futile")
The great thing about government debt is that they can print more to pay it back
Eben delves into some unaffected speculative ARM features in the comments, and why they're not vulnerable. His responses in the comments in general are also worth a read, in case folks skip comments as a rule.
Studying analysis gives you more tools to model changing systems. The more tools you have, the easier it is to abstract things. That's really all applied mathematics is, abstracting stuff to things you can do mathematical operations on. When counting sheep, all you're really do is abstracting the sheep as units and then performing simple arithmetic.

So why should you have all these tools to abstract stuff? Because you want to do something new and innovative. If this really isn't that interesting to you then don't bother but every time I find a new way to model something and try it out (often with unsuccessful result, though) I get giddy with joy. The few times I come up with something new and people actually value what I've contributed with it feels like heaven, however small these contributions end up being.
While this is certainly interesting, I've been looking for a JS tikz port using <canvas>
And this is only going to be for installations that actually care about this level of security, so mostly just shared infrastructure/serverless/cloud. Internal systems aren't going to need the mitigation.

I think people are blowing this way out of proportion.
Comparing Coinbase to ETrade I'd have to disagree. If you want to make small (sub-$1000) transactions, sure Coinbase and Kraken are good enough, but $10k or $100k or $1MM is a totally different story.
Shoes is alive
According to https://developer.arm.com/support/security-update, the Cortex-A57 is affected, but the Cortex-A53 isn't.
Western Digital My Cloud drives have a built-in backdoor
To be fair, look how far we've come in "assistants" in the last 6 years since Siri was released can be read as “look how much Siri has been surpassed in quality by other assistants since it was introduced” rather than “look how far Siri has advanced since it was introduced”.
IIRC there are penalties if you lie about who you're bringing the claim for.
Contemplating how smart city architecture should design data processes
It may say what Kubrick wanted, but he edited the final cut to strip out a lot of exposition which puts the story Clarke wanted to tell in. Clarke was in tears after he saw the premier because of the changes. I found the movie thoroughly disappointing after reading the book. There were pretty pictures, but far fewer interesting ideas.
I can probably add the perspective of a physicist training where analysis is an integral part of the mathematics education (typically taking ~1/3 of the time of a bachelor degree (bachelor~=3yrs)). In addition, I (partially) work (study) in the applied mathematics nowadays (CFD/PDEs, numerical methods) and without doubt, analysis tools are still everyday ingredients to understand what's going on. So definetly: Yes
It has "2012" right in the title, so I don't see what the author's position _today_ has anything to do with it. And that "YC startup" has raised $440M and has 500+ employees... You're intentionally making the author sound less credible.

Besides the ad hominem, what other "smell test" does he fail to pass?
Depends on the journal.

Academics usually do the peer reviewing and sometimes the editing (which is almost certainly a waste of their talents as a good editor is cheaper and more efficient at editing than some Biology PhD guy).

Most of the more prestigious journals (e.g., the ones people are paying for) are supported by publishing house staff doing the sort of stuff I mentioned -- or, more likely, managing the vendors in India who are doing the stuff I mentioned.

Source: I worked in scientific publishing for many years. Happy to be out of it...
Maybe that's my ADHD but I was bored as well when watching it (I think I was ~25yo?), except for the Dave bit.
The problem with HTML
is there a group pinning option for individual files in case $.15 per gig per month is too expensive...
I understood everything up until the "suppose we flush our cache before executing the code" part which is probably the most important part.

There was a comment below the article that explained this part a little further:

> Imagine the value at the kernel address, which gets loaded into _w, was 0xabde3167. Then the value of _x is 0x100, and address user_mem[0x100] will end up in the cache. A subsequent load of user_mem[0x100] will be fast.

> Now imagine the value at the kernel address, which gets loaded into _w, was 0xabde3067. Then the value of _x is 0x000, and address user_mem[0x000] will end up in the cache. A subsequent load of user_mem[0x100] will be slow.

> So we can use the speed of a read from user_mem[0x100] to discriminate between the two options. Information has leaked, via a side channel, from kernel to user.

https://www.raspberrypi.org/blog/why-raspberry-pi-isnt-vulne...
> For online payments instant payments are actually not that important requirements.

When the exchange rate fluctuates as much as it does, instant payment is an important requirement.

Suppose BTC is worth $15,000 today. I want to buy a widget for $150.

I want to see 0.01 BTC deducted from my balance. The merchant wants to get paid $150.

If the transaction happens instantly, everyone is happy.

If the transaction does not happen instantly...

Let's say I transact 0.01 BTC to the payment processor. It will clear tomorrow. The merchant will get paid when it clears. Tomorrow... The payment processor has 0.01 BTC in their possession.

... Except that by then, BTC went down to $13,000. The merchant still expects to be paid $150. The payment processor has 0.01 BTC on their books, which is worth $130... and a debt of $150.

That's the problem with using BTC as a currency. You either need to pay through the nose for fast confirmation, or you expose yourself to volatility risk.

This is, incidentally, why Steam has stopped accepting Bitcoin. You can't use it as a currency. [1]

[1] http://steamcommunity.com/games/593110/announcements/detail/...
> Google the "Do no Evil" company, decided to scumm Sun...

A jury looked at the evidence, heard the arguments, and disagreed with you. The decision held on appeal.

An alternative interpretation of historical events: had Sun (and Oracle) provided Apache Harmony with the JCK from then, Harmony wouldn't have fallen behind.
Everybody & anybody. Governments, businesses, private individuals.

At the same time, though, the ratio of debt-to-gross domestic product fell for the fourth consecutive quarter as economic growth accelerated.

So, not all doom and gloom.
Reading this and the blog post from Mailgun, my first thought was "Why is it possible to access the content of sent emails via their API?". At the very least it should be possible to denote emails sent as sensitive and therefore not to be readable once sent.
oh yeah, totally fine! if i can't stop them, "moral superiority" isn't going to protect me anyway ;)
Lisp in Small Pieces: https://pages.lip6.fr/Christian.Queinnec/WWW/LiSP.html

An excellent and very fun read about compilation, interpretation, and programming semantics.

I don’t think you already have to know LISP, although there isn’t an introduction, but if you know any programming it would be enough to pick up the programs that are used as examples. Source code from the book is available and you will end up programming as you move along and it is a delight to see yourself make a program that can interpret another program.
What is a Bomb Cyclone?
In most cases I believe handoff is a device feature and not reliant on the ap. Ubiquiti does have a service to provide handoff for devices that don't support it but it isn't as good and is off by default.
This reminds me, why aren't we treating Rowhammer with as much urgency as we do Meltdown/Spectre?

What about BadUSB, for that matter? Do we even know if all new USBs are fixed against BadUSB? Or if any of them are?
Surely the downside risk is that you pick the incorrect deity and anger the real one causing you to be punished.
Hey, at least this era gave us the improbably-awesome Mad Max: Fury Road.

In any sane universe that would've made every other action filmmaker go "oh, that's how you write and film engaging modern-feeling action that's meaningful to the film itself and its characters and, therefore, to the audience. If it's possible to keep that up for practically an entire film—and, apparently, it is—I can and must do it in my action scenes".

We don't live in a sane universe, unfortunately. But at least we have MM:FR.