skysight-inc/HackerNews huggingface dataset:
Wish we could be happy, and not destroy the planet and the future crawling over each other in an ever increasing red queen race on the slippery side of a cliff of despair.

We have only allowed a very narrow band of 'solutions' to be explored: those that involve 'doing-making-selling-competing. We have had very minor controls on this process, and even the little we have on that side is constantly besieged or selectively weaponized as there is no barrier between 'the game' and 'the meta-game'. For example, any solution to a problem that involves abstinence, for instance for very real problems such as climate change or the obesity crisis, is impossible due to the way we have structured 'reward'.

And I don't know about battery tech or medicine, but most certainly in AI breakthroughs are very much the work of individuals and do not need massive teams or funding. It is again our 'market-economy', with inane 'IP wars' that seem to stifle these works from being brought to fruition
based on AWS findings we should expect the stock to be up, not down: after software mitigation everyone will need more horsepower to run the same load, and guess where they would buy new chips? (given that updating infrastructure to use AMD, let alone ARM, would cost more time and money than just suck it up).
Wouldn't that be racist against stuffed crust pizza?

Why one idea and not the other? Are we allowed to dislike Christianity? Scientology? Libertarianism? Socialism? Capitalism? Cutting off dogs tails? If so, what makes Islam non dislikeable?

Are you aware of the many ex Muslims and the harassment they receive? The people who've criticised Islam and been killed for it? Do you think declaring Islam non dislikeable helps this?

Do you know anyone who is an ex black person or ex white person or ex asian? Why not?
Plan, Progress, and Face to Face
Turned off by default for me in 57.0.3/macOS. Is it usually on by default on other platforms?
Sublime looks pretty good too!
I agree, this is very premature, we don't have all the information yet.
I purchased an i9 in december, because I cared about the performance, not the price, and had I known the little information we have now, I would have switched to AMD (I even hesitated to do so at the time).

I am still able to send back my i9 to amazon, until end of january, and as I am in europe, I also have a 2-year guarantee against faulty or non-conform goods. Not sure if it can apply, but as of today nobody can tell what kind of action we can take against this (I understand the intel claims this is not a bug, but others may beg to differ).

Also, besides any legalities, I am now an angry customer and would probably not buy intel anymore after this.
There's lots of examples of historical slavery in quite decent conditions compared to your worst-case scenario, and likewise many examples of employment that looks OK on the surface but is actually awful. There is a qualitative difference, but also a considerable degree of practical overlap.
This is a general explanation of side channel attacks, as I understand.
How to Promote Event Apps
IT's a trivial counterexample because it's so easy to see the ramifications int aht case. In many cases foresight is quite limited and people wildly overestimate their predictive powers.
Amazon instances can be created with the dedicated flag. The host hardware will be dedicated to you, not shared with any other users. It should mitigate the attack.

The flag has a fixed fee in the thousands of dollars and each instance is 10% more expensive.
Why on Earth is my comment hidden with +9 points? And the others flagged with +4 and +5? Was anything I said untrue or off topic? This is disgusting HN.
> Instead of doing what's democratically decided

Did you mean "instead of doing what's decided by competing lobbyists"? I completely agree that lobbying should not exist, but in a system where it does, trying to get by without doing it yourself might be disastrous if you're going up against those who have no such qualms.
But only a few million cores are doing worthwhile work.

Most of us aren’t contributing to the advancement of knowledge, for example. If we could up our utilization with more people doing R&D, for instance, we’d accumulate knowledge much faster.
Dell launches 2018 XPS 13 laptop (this time it's even thinner)
Before XHR, there was an iframe trick that could be used to the same effect. We were abusing that to do streaming updates (stalling requests until the server had new data) on then likes of IE5 back in 2004. WebSocket eat your heart out! :-)
Typically timing attacks do not need absolute time. So for high precision timer one can just use a counter loop in a separated thread. This is even possible in JavaScript with web workers.
> Does this seem spectacularly unreasonable ?

Like everything I guess it depends on your political views. Personally I think it's fine if medical care and research is a massive black hole of funds that the tax payer foots the bill for...
Spider silk startup Bolt Threads raises $123M Series D funding
1. Why are you're learning a language at the same time you're trying to launch an MVP? And a fairly involved language such as rust.

2. You're complaining about windows32 API being slow, but blaming it on .NET ("I don’t know if it was attributed to Windows or the application programmers, but I attributed Windows’ built-in functions with being slow and having shitty PDF output, which is why I refused to use anything related to Win32 or .NET").

Windows API is C (or internally C++).

3. Is display a bottleneck? I never developed GIS applications, but your display is 2D and doesn't have to be real-time. I would assume that the "back end" of the program is doing most of the calculations, and the display just outputs it (not like, say, a 3D game where the rendering engine does a significant chunk of its own work).
What you are describing is sinply plain associative memory. If I remember correctly, this is complex in its imolementation, but does not grow exponentially. Plesse correct me if I am wrong.
It's never the infrastructure or the algorithm or the data that is political. It's the people using that infrastructure, algorithm or data in their decision-making who are responsible.

When a machine learning model determines that according to the available data, blacks are more likely to default on loans, it's not unfairly biased against blacks. It is merely reflecting that the world is unfairly biased against blacks.

The fault inevitably lies with the decision-makers who look at an algorithmic prediction and decide to maximize their profit. Because they confuse what is with what ought to be.
Shall we now have a new website permission for timers or at least high-precision timers? (It will be quite fun to get end-users to understand the ramifications of such a thing...)
I am wondering why the author didn't opt for a language/platform with a mature PDF and GUI library?

If I read the article correctly, it would have halved his development time...
SCART RGB and component are not compatible, I've tried that.
New Application Performance Management Tool
Also worth looking at section 7 in the supplementary information, and figure S5.
All of those cheap converters only output composite video over SCART, no better than the Pi's composite output. Finding one that actually does RGB is either impossible, or really expensive.
If I'm reading it correctly, the lfence is never reached for real (only speculatively..)

code invoking the thunk pushes the target address on the stack, then branches to or calls the thunk.

The first instruction of the thunk is a "call" to a nearby address, skipping over an infinite loop (2: lfence; jmp 2b)

the lea n(%xsp),%xsp discards the return address pushed by "call", and the subsequent "ret" "returns" to the branch target rather than to label 2.

perhaps the speculative execution engine doesn't take the stack pointer adjustment into account and so gets stuck in the lfence loop, only being snapped back to its senses when the lea completes..
Since no one has yet posted Amazon AWS security bulletin:

https://aws.amazon.com/security/security-bulletins/AWS-2018-...
I agree on the importance of the industrial revolution. An alternative explanation, that argues more from political institutions, can be found in Acemoglu and Robinsons "Why Nations Fail" [0]. They basically argue that for most of our history, individual innovators. In most countries most of the time, a small minority, which is in power, would either profit from the innovation instead or would actively suppress innovation to protect the status quo. Only when institutions were developed that included a lot of people in the decision making process, would we also develop protections for individual innovators, that would allow them to profit from their work in a meaningful way.

I generally find it hard to pin down to what degree culture motivates people to action and think that explanations should be preferred, that show how single individuals or groups might directly profit from certain actions.

0: https://en.wikipedia.org/wiki/Why_Nations_Fail
A list of macOS, tvOS and iOS bugs while helping my family over the holidays
Stephen King on Growing Up, Believing in God and Getting Scared
The parent asked you if disliking Christianity was racist, not if it was religious discrimination. Please answer them.

If, say PEW Research asks a statistically significant portion of people who identify themselves one way, and a large amount of them self declare they have awful views, is reporting this bad because it's 'negative'?
Oof. The Cortex-A75 has a hardware security bug before any silicon with it has been released. On the other hand, this luckily means that software mitigations can be included before release.

Luckily for most unpatched Android phones, they use Cortex A53 and Cortex A7 in-order chips which are not affected because they lack the speculative execution required for this vulnerability.
Academic Journal Devotes an Entire Free Issue to Prince’s Life and Music
C++ Widgets are focused on desktop applications, for mobile and embedded devices, QML is the only way to go.
Based on my limited experience, most of the good engineers I know measure and care about quantifiable things like latency, throughput etc. They generally tend to get frustrated with fuzzy things like accuracy. (Data) Scientists, on the other hand, seem to be much more happier dealing with things like accuracy. "Ethicalness", however, nobody seems to care about measuring.
Chrome will be taking the same steps-

> In line with other browsers, Chrome 64 will disable SharedArrayBuffer and modify the behaviour of other APIs such as performance.now, to help reduce the efficacy of speculative side-channel attacks. This is a temporary measure until other mitigations are in place.

https://sites.google.com/a/chromium.org/dev/Home/chromium-se...
Getting some downvotes.

Honestly, I'm perplexed at your comment as almost every issue you mention is actually examined carefully in the paper. I mean, I see where you're coming from and had some similar opinions to yours, but this paper addresses those issues in a far more rigorous way.
Receive Your Miracle in 2018 with Angel of Gabriel Oil
In the new year, Prophet Shepherd Bushiri prays for everyone through the Angel of Gabriel Oil. This holy anointing oil will be the bringer of peace and good news in your life. Receive it! https://yahweh.io/collections/powerful-anointing-oils/products/angel-of-gabriel-oil
Teach a class for kids in your lab. Teach them electronics and how build cool small stuff.
Show HN: Hire talented community managers on-demand for your project
Making rope is a required activity in boy scouts :-)
You can also use properly designed IDE's written in native code.

I use Vim too by the way.
OMG look, a triggered libtard.
So Google people and the Germans were working on the same thing without knowing of each other until Intel connected them?
Whoa he's not kidding... oh dear god.
The other operations, like posting messages, have much higher latency noise. SAB allows to observe counter changes effectively within few CPU cycles with stable latency.
desertcart | Dubai, UAE | Full-time | $80k-$120k |

Senior software engineer(Ruby/JS/React experience is a plus)

We're looking to build a team of experienced software developers to help us bring new products to market in cross-border e-commerce space. Our stack is based mainly on a Ruby backend and we have a number of different technologies we use at a smaller scale. We deal with directly with the logistics, e-commerce, search.
There's tons of interesting opportunities in this space and we love to move fast.

Email me if you're interested, or want to chat further: rahul [at] [companyname].ae
I confirm, the course on Coursera is excellent!
"Clinical data shows that the drug works at[sic] up to four years in some patients"

"a partial refund if the drug does not work in the first three months"

So is it $850,000 every four years ?
Hacked Vectrex Can Display Color [video]
Disclosure: I work on Google Cloud.

If you had no history, our folks were probably being cautious in granting quota (you may have noticed that cryptocurrency has been going crazy). Feel free to request another increase, but I understand if you're not interested.

I don't understand your managed instance group thing though... Is that perhaps because you tried to create a regional instance group, and we only had GPUs in particular zones? (I saw a bug like that, conveyed an answer, and never heard back).
Frontmacs
Not only this, but banks were in the habit of ordering your account activity on a day-by-day basis so as to maximize your fee liability, a practice which cast Bank of America some $400 million a few years back and which Wells Fargo is trying to escape responsibility for at present through some other litigation strategy: https://consumerist.com/2011/07/14/bank-of-america-paying-ou...
i'm with timc3 on this one. at this point every dude with a beard and a modular suitcase has a standing gig in the park making gurgly noises for people, and every gamer who watched deadmau5's twitch has a bunch of mutable instruments modules. it's folk music for the 2010s. and the music of the 70s wasn't, for the most part (yes we can point to the exceptions but that misses the point), bleeps and bloops, it was keith wakeman in leather pants. by the 80s these were collecting dust (so that we could buy them for cheap in the 90s!)
I started a reading the article expecting a critique of Rust, and I'm halfway through and it feels like I'm reading 2014-esque React philosophies on UI management.
As far as I can see from this article, Sublime text is faster than vim.

That's astonishing considering that Sublime uses GUI and vim is a console editor.

I also like vim, but Sublime + vintage ( vim-mode ) works good and you have the benefits of both worlds.
Coffee - $1

Fees - $20

Waiting time: priceless
>How can you attack ideas if they aren't brought out into the open?

You attack ideas by suffocating them, not by repeating them. Children learn words by hearing them spoken. Nothing more needs to happen; the brain is quite good at drawing the intended implications out. To promote an idea, you need only put it in people's heads over and over again.

The major problem with hate speech laws is trying to separate propaganda from education or intellectual discussion from dogmatic bigotry. It is trivial to mask one as the other and vice versa. And while an honest and critical person can make a good distinction in narrow contexts, nobody has been able to do it effectively on a cultural scale.
I use an IDE written in non-native code (IntelliJ) and I can have dozens of files open, while the IDE does error checking in the background across thousands of files, and it uses around 2GB of memory in that situation. 800MB for one file is insane.

This isn't just a contest between native and non-native code. It's a contest between efficient non-native code and crap non-native code.
Advance Git Push and Pull
The internet is a great organizing tool, and you have no way to know whether any given comment is random or coordinated.
Sure, SSH keys would probably work on a system with SSH enabled; I just wouldn't count that as "directly". (That would include most servers but exclude most Android devices; I have no idea whether there are other escalation methods for Android.)
>Once you’ve created an account and installed it, you can start adding dozens of plug-ins, including various synthesizers, gates, reverbs, compressors, sequencers, keyboards, etc.

Sigh.
Avalonia (which I mistyped as Avalon) works in Linux, so XAML works on Linux.

JavaFX surely works on mobile.

http://gluonhq.com/

HTML is useless without a binary build of a running browser, that doesn't expose platform specific APIs.
What's shady about asking people to pay for content? It seems like it's pretty much out in the open so you can take it or leave it, not secret or covert or shady in any way.
Thanks for the detailed explanation !
Bitcoin protocol is not the MySpace. It is THE prime network.

It exists as Bitcoin Cash (BCH)
Firefox Focus: A Fast Private Mobile Browser from Mozilla
Disclosure: I work on Google Cloud.

Yeah, the underlying system is optimized for throughput (though we're working on small file latency). AWS clearly has a small file optimization and caching that we don't (yet).

I often point people at Zach Bjornson's blogpost [1] since he compared all three providers and is a neutral third party.

[1] http://blog.zachbjornson.com/2015/12/29/cloud-storage-perfor...
> I won't be surprised if even the Linux implementation is tuned to the absolute limit in the coming months.

To me, this sounds like unnecessary work if Intel is coming up with a microcode patch within a few months.
It is an either/or situation. I said people are emotional animals rather than pure rationalists, who would by definition not be subject to irrational impulses. It is not a contrast between pure rationality or irrationality, but pure rationality vs partial rationality.

I'm not sure what point the rest of your comment is seeking to make, other than that you don't like my point of view.
This article implies the differences matter. Nope, sorry, the conveniences of VSCode are worth the "cost" for me. I have 32 gigs of RAM and the time I spend opening files doesn't register compared to the time I spend writing or reading code.

I do wonder whether the measurements take the base overhead of each editor into account. Do the numbers represent the use per file or the total for the file plus the entire app?
Seems like a great argument for... Sublime.
I really wanted to like Atom, but it always felt unfinished and clunky with crashes/freezing/locking becoming more of a regular occurrence with the more plugins or extensions you use.

It's one saving grace is that I thought Sublime was a bit bulky/memory hungry, but Atom gave me a new found appreciation for Sublime which I'm now back in love with!
iOS 11.2.1/ 11.2.5 jailbreak available on-time script 12
A timing attack is one type of side channel attack. These types of timing attacks can also be used against poor/unsuitable crypto functions, or even some processes involving general computation e.g. If it takes longer to reject input A than input B, you can reason that input A is closer to the answer (similar to someone reading a paragraph until they reach the first error).

Other side-channel attacks can come in the form of analysing network data, power-consumption (CPUs use more power when they are "busier")... even noise (listen for when the fans start spinning up).
Not from 2017, but Growing a Language

https://www.youtube.com/watch?v=_ahvzDzKdB0
> The installer nukes user accounts that have been around for years to replace them with new user accounts without warning (in this case, _assetcache replaced the intermapper user).

Surely this can't be counted as bug. A system account changing to a new user account that does system things (that no normal user will ever touch) should have no impact on the system at all.
I wonder if and how Waterfox or Palemoon can keep up with these security issues? (Disclosure: I am a Firefox Nightly user)
This is my biggest gripe with Spotify since I had to reluctantly switch to them due to rdio shutting down: The lack of social features. We had an excellent community over there, seeing what's popular among like minded enthusiasts, discussing albums and playlists, sharing them, familiar faces everywhere. We went to great lengths to re-connect with those old rdio users on Spotify using slack channels, but due to the lack of pretty much any kind of social features or feeling of community, following anyone on Spotify is meaningless and everyone's listening in a silo.

That and the abysmal queue handling make me wish rdio was still around.
I've been using all Apple products for almost 10 years, still do, but I've almost lost faith in Apple's ability to engineer reliable software. It's gotten really bad lately.

It's sad, because I really like their whole infrastructure with iCloud and sync between devices.

I don't know what happened, maybe they just have too many products and operating systems to support.
We can talk about advertisment in general. But in this instance OP literally wrote that his choice is limited to "echo with ads" or "no echo at all", because goverment is refusing to step in.

I was not questioning whether the advertising industry is good or not, but rather OP's notion that he is entitled to ad-free echo service.

I agree that advertisment should be more heavily controlled in instances where people don't have a choice whether to see the advertisment or not. But nobody is forcing anyone to buy a device that is known to serve you ads. If enough people will make this choice, the business incentive for the producer of the device will disappear and so will the device.
> You can do physical loopback by connecting the two ports together.

this ! and this is waay better, because you can run all simulations (perf etc.) whatever on the same machine. for example, you can run client on 1 cpu-core, and server on another, and have packets looped over the physical interface.

simplify man simplify :)
You can block access to rdtsc right now by setting CR4.TSD
For instance, even if you read your compiler's source code and then compile it, there's no way to know that the compilation process didn't insert a back door, as in this classic essay: https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thomp...
To be fair they picked an example that really highlights a weakness in atom (parsing and syntax highlighting XML files), and this article is a bit older (at least in terms of atom and electron releases).

Right now I have Atom open with four different projects. Each project has anywhere between four and twelve files open. The project using the most memory is only 258MB, but the others are all close to 100mb.
Cheap Soccer Jerseys Online – Buy Cheap Ajax Jersey – Edmondsoccershop
>their primary [0] goal is altruistic: ... making the internet and computing as a whole a safer place.

Which is, at the same time, highly rational: to secure their entire market.

It's nice to have big corp's incentives aligned with the public good. Too bad it happens so rarely.
> I would think that any sane implementation would not transmit privileged data to waiting instructions.

The point of VIPT caches is exactly to use data before all the checks are completed.

It's easy to judge the sanity of things ex post, but maybe it's not that easy if it took 20 years to find the issue.
Loading and displaying a collection from bootstrapped data in Backbone.js
But not a Bitcoin