skysight-inc/HackerNews huggingface dataset:
I've been too focused on the tech that I forgot about the legal part of this. Is this why they've all given wishy-washy responses that take no responsibility and seemingly don't even admit there's a problem? Sounds like they expect massive legal recourse and have no real choice but to listen to their lawyers who are telling them to admit no guilt.
This is ultimately politics, and it is easy to scare with images of people who behave in entirely unpredictable ways.

One underutilized method to fight this, IMHO, is illustrating how terrible that line of thought is when you can compare it favorably to getting drunk in almost every way—but most of all judgement. Drunk people are already ethical black holes.
Docker has added ingress routing in 17.06 that works at a lower level than HTTP Routing Mesh. You should try that now.

Other than that, how have you found EE ? We have considered paying for it, but after seeing Docker Cloud at 15$ per node per month, we are considering switching to it.
If the kernel has no sensitive state (believable for a microkernel), what matters is whether it maps the physical memory in its kernel space.
if you do not apply spectre/meltdown migtation on non virtualized hardware which only you control you are safe. of course a malicious process could do harm without them, but a malicious process probably can be as harmful, even if you have the patches applied.
basically we need these patches since on the internet a ton of stuff lives on virtualized hardware and there you can actually be harmful to other vms or even the host itself.
basically spectre/meltdown needs to be applied in hosted environments and on clients.
on everything else it's way less scary than on those two environments.
SymbiFlow(will Be): FOSS Verilog-To-Bitstream FGPA Synthesis
shellcheck (https://www.shellcheck.net) is an absolute godsend when writing Bash/POSIX sh scripts.

It catches so many errors that I think it's a must have in every programmer's toolbox. It even catches bash-isms when you are targeting POSIX sh. It saved me many many hours of grief trying to debug shell scripts I wrote and changed the way I write them for the better.
Status-Overview of Meltdown/Spectre Patches/Updates
That is not true. Guessing encoding is really, really difficult, and you can easily end up reading a file with an uncommon Japanese encoding as an Chinese encoding and end up with subtitle errors.

Plain text is anything but plain.
You don't even need to do that for meltdown.
Depending on your job you can hack the holiday mechanism to your advantage.

We were immigrants and little reason to care about the US holidays Thanksgiving and Independence Day. My mum, a physician always offered to cover those days and every other doctor in the (small) hospital took her up on it. Which meant whenever she wanted someone to be on call for her, she always had a huge number of people who owed her a favor.

This hack worked for Christmas too even though we did celebrate it (though just pressies and a meal — no family on the continent): people don’t like to get sick at Xmas so she never got called before the end of the day (and as a bonus she left us with all the washing up)
http://linuxfr.org/news/symbiflow-vers-la-synthese-libre-pou...
Not all systems have POSIX, perl, python, javascript, C++, rust, go, etc., so should we write all our programs and scripts in sh?
What about on ARM?
They earn plenty of money on Transmit for Mac.

The following may be a bit hard to argue but let me try. The availability of Transmit for iOS should increase sales for Mac, since the apps can have synergies that make the Mac app better. So I think they should credit some of their Mac earnings to iOS, and factor that into their figure for the iOS app. Doing separate accounting for paired apps on different platforms makes less sense when those apps have synergy with each other.
Using readline is a great thing to know about too.

My favourite little-known readline command is operate-and-get-next:

https://www.gnu.org/software/bash/manual/html_node/Miscellan...

You can use it to search back in history with C-r and then execute that command with C-o and keep pressing C-o to execute the commands that followed that one in history. Very helpful for executing a whole block of history.

For some reason, this documentation is hard to find! It's not here, for example:

http://readline.kablamo.org/emacs.html

I'm a bit saddened when readline replacements don't implement C-o. For example, the Python REPLs don't have it.
You're doing it, do you think it's ethical? If so, why?

(I actually don't care, but your response was ridiculous and I noticed you avoided answering.)
Are you writing your scripts in sh instead of bash, perl, python, JavaScript?
Why is there no mention of other CPU vendors besides ARM? You'd think it's pretty important that the Meltdown patches are only needed on Intel CPUs.
First, at least the driver of Nvidia is affected in an unspecified manner. [0]

Second, the hardware is opague and runs unknown firmware. What lies sill in there? What will in future lie in there?

Third, how do these hardware components interact? Do they create vulnerabilities in connection with each other? Maybe side leaks that wouldn't be there otherwise?

Fourth, there are arguments for rejecting these Web technologies that are orthogonal to their security. These Web technologies lead to an ecosystem of unreviewed code that is outside of the direct and indirect control of the user, shifting power to the developers, ultimately leading to centralization.

[0] http://nvidia.custhelp.com/app/answers/detail/a_id/4611
Maybe not on 1 billion devices, but ZFS was running on mission-critical Sun/Oracle hardware with expensive support contracts for many years. ZFS is currently probably the most reliable modern filesystem.

Still, rolling out APFS on such a large number of iDevices/Macs is a very impressive feat (although APFS is, of course, a simpler filesystem). The problems are with many of the 'edge cases' (RAID, etc.). This is not really surprising, btrfs has been in development since 2007 and still has problems with more complex setups.
Yes. They’re facing potentially ruinous class actions from individuals, and the legal fury of uncounted corporations which are going to suffer. It’s hard to imagine Intel dying, but if the impact on performance is so enormous, it could happen. So yes, they are in ass-covering-survival-mode. Having said that, I wouldn’t expect Intel to go down in legal flames, but the endless PR dripping is going to have to become a flood for a long time to recover.
Judging from our MongoDB instance, I'm optimistic that your SQL server wouldn't face much impact either. Even Redhat tests put the risk at modest.

But for something like Redis, the case could be different.

If you are on a cloud provider, do check that automatic update is not scheduled; if so it's better to update manually to follow up with mitigation if necessary.
Well, setting aside outrage, this looks like a primary source documenting a real problem for a marginal but sizable open source community (probably several--the *BSDs.)

It didn't really trigger my outrage button, and did inform me of something that had not actually crossed my mind--who got embargo information or not.

So, with a lot on HNers interested in open source, and using open source software, I see value in raising awareness that we should let these vendors know we value this. Some of us are making purchasing decisions at our companies and can steer our dollars toward good corporate citizens.

I find the outrage rather incidental to the post, regardless of even the email list author's intent in that regard.
You might want to search with

/ -p
Various Traffic Intersection Throughput
And even if it were a better place in some aggregate measure than 2 years ago doesn't mean that it's better for most people than it was 2 years ago, and even if it is better for most people, it doesn't mean it's better for most people in some particular country, say THE USA, and even if it's better for most people in your country, it doesn't mean it's better for you.
Health insurance, minimum wages, fast food even... This is but a sampling of the human progress I mentioned parsed out of a single misguided post you made. There are people in the world far worse off than your friend making minimum wage.

You take these things for granted because you live in a rich enough society that enables you to do so.
>I have used DC/OS, Mesos, and Marathon extensively

Would you use DC/OS-marathon (vs k8s) now if you were to make that decision now.

I've heard that mesos stack is good for machine learning/big data stacks but how does marathon compare for deploying webapps.
So Watchmen was just one big trolley problem?
Isn't that like saying that it turns out this car we sold can only do 150, not 200. But it's okay because most of you never drive above 80 anyways.

You're right. Most people who just surf the Netflix and download the YouTubes will not notice. But it's still a form of fraud, even to those who never max out CPU. I think fraud is a strong word knowing that this wasn't intentional. But they sold a lesser product than they advertised and need to make customers whole. Otherwise it pretty much is fraud.
Looking at the code, it was the cheapest bidder from Upwork.
And you probably know much better than the second most important guy on linux what security means on the Internet: securing some javascript script on a random blog.
Where’s the €65,000 number coming from? I found http://www.flypipistrel.com/price-lists/PIPISTREL-ALPHA-ELEC... which suggests €159,000.

That datasheet also says 700 cycles to 75% battery capacity, rather than the “about 1,000” of this article.

The $3/hour figure doesn’t seem to me to match the other numbers, either: 60kW for takeoff and 20kW for cruising; let’s ignore takeoff (it’s rounding error) and just call it 20kW. 20kWh for $3? At residential rates, 20kWh will cost more like $5. But I don’t know what commercial rates are for electricity; maybe they do get power that much cheaper than residential persons.
I was actually working on this project before those attacks were announced. When I heard that pre-1995 CPUs were unaffected, I couldn't help but LOL and included a reference in my blog post as well.
It's time to move to userspace network drivers like https://github.com/snabbco/snabb/
Predicting Cryptocurrency Price with Tensorflow and Keras
The main advantage is the self-driving car could be an extension to your office. For instance if I have an 8 hour day with 4 hours of face-to-face meetings, then it doesn't particularly matter if the other 4 hours are spent commuting because I can work the whole time.
I've been working on a similar project in my spare time to create tools for interactive technical blogs [1]. It's funny, in the past day I've seen two projects that I would say have the same goals as me, idyll being one of them.

What are the possibilities around contributing to idyll? Building on top of it? Is it as simple as writing my own components?

I'm specifically interested in uis to define data structures. One of the more annoying things I found working with d3 to create graphs (as in graph theory) was defining the graphs procedurally, so I built a ui to define graphs graphically.

[1] https://akud.github.io/visualization-blogs/index.html
I may be wrong, but the timing attack only reveals the cache line, but being able to read the cache line is something itself I would expect to fail even without the timing attack. How does that not cause an exception?
There's never been a better time to be single
I wonder how much of the slowness is due to disk swapping since the RAM capacity is so low.
> I use Linux Mint and have not seen any recent kernel updates.

If you're not aware Linux Mint turns off kernel security updates _off_, you need to check by hand.
While I think the story's title could be more mature, I think that the outrage in the article is justified. Intel didn't notify any of the BSD teams of the vulnerability during and after the embargo period, leaving anyone running a BSD vulnerable for a longer period after the disclosure.

IMO, it's a good thing that this issue gets publicity... if only so that the 'lesser' open source projects don't get ignored in the future.
yea it cpu usage goes down if i disable kubernetes.
Anecdotal, but my kids have school-issued iPads and personal chromebooks. They prefer the iPads for pretty much everything (except perhaps typing long papers). Watching them edit a document on the iPad drives me nuts, because the select-copy-paste process is so inefficient... but it's how they prefer to work.
Well, Intel sales are going to drop off a cliff, and might not entirely be made up once a "fixed" version comes out.
I think this is a valid opinion, but it its a bit circular.

'We don't respect embargoes' -> 'Company only releases to individuals who respect embargoes' -> repeat
I agree that something is up with the stars. It was <10k some weeks ago, which was the last time I was on the GitHub page. Also, it seem that new issues on the tracker are being flooded with spam (https://github.com/x64dbg/x64dbg/issues/1864).

With that being said, the x64dbg project itself is definitely not just some spam project. I've been using it in place of OllyDbg for about 2 years now and I like it alot. IMO, it's basically a modern open-source successor to OllyDbg. Also, the project blog has some really neat posts like weekly digests of what has changed in the project (Though, I think these might have stopped sadly), unpacking windows kernel drivers, and a lot of design problems & solutions.
> they're basically using emacs controls

But not well implemented! You're supposed to be able to edit your search string, and I've never found a way.
i use treepad to store them.
This is awesome!

I, too, have a soft spot for old hardware, so this makes me smile!
> but just claiming it's "amazing" is being reductionist.

This seems a bit parochial. The results that MDMA is showing for PTSD can certainly be called "amazing," even when the dangers are taken into consideration. That's why it has been given Breakthrough Therapy designation by FDA. So it seems reasonable to summarize this as "it's an amazing substance psychologically."
Hopefully not. Lawsuits are a fine way to stifle innovation. Imagine how hard it would be to push through any idea at Intel.

No one saw this coming. Things happen. It's impossible to predict every contingency.

They acted in good faith.

Also, heh, users are funny: "all other games i have work fin by the way so there must be a problem whit fortnite."
I don’t get it either. minikube is trivially installed in my experience with homebrew.

Given that running docker on a Mac has been a long and bumpy journey, I’m not sure I’d want to bundle the two together.

What am I missing?
If you need security and it doesn't need to be fast, use a raspberry pi.

No ME, no PSP, no meltdown, and no spectre.
x32 is not the correct name for 32 bit Windows. It is confusing, because it crashes with the new Linux kernel x32 ABI.
Meltdown and Spectre Vulnerabilities Explained
भाइरलका बिरामीलाई धामीझाँक्री, नौजनाको ज्यान जाँदासम्म पुगेनन् स्वास्थ्यकर्मी
On a related note, accessing the site over Chrome will full site isolation can help protect against both bugs: https://support.google.com/faqs/answer/7622138#chrome
> "...taking the path of least intellectual and emotional resistance is fundamental to human nature. There is a positive feedback loop..."

I agree that both of those appear to be fundamental elements of human psychology. Fortunately, we're also have the ability to counteract this, either individually via self-reflection, or more easily, through feedback from others. We can be aware of these tendencies and work to counteract them. If the community has a common goal to do so, to encourage the "better angels of our nature" as it were, we can do better together than we may find it easy to do on our own. And that doesn't have to be a pretense. It can be an explicit, earnest value.
what's an example of an anti-social entrepreneurs?
My opinion is that it doesn't matter which processor you buy because you will have the same important dependencies irregardless. Intel or AMD, you will depend on the expertise of the operating system designers, the chip manufacturer, and the trustworthiness of the code you run. The presence of disclosed vulnerabilities in Intel chips does not reduce the probability of undisclosed or undiscovered vulnerabilities in AMD chips. The number of possible vulnerabilities in AMD chips is a very large number. The number of possible vulnerabilities in Intel chips is a similarly large number.

Basically the choice between Intel and AMD in the context of in-chip vulnerabilities comes down to whether one feels better choosing a chip with known vulnerabilities + significant effort to mitigate or a chip without known vulnerabilities and without significant efforts at mitigation. In both cases, unknown vulnerabilities are probably equal.

To put it another way, building a computer is largely a consumer process not a technical one. The biggest security risk is software you download and run, not hardware flaws (e.g. rowhammer)
Web Scraping with Rust
The license doesn't have anything to do with the behavior of `raco`.
I prefer sh over bash for most of my scripts, but I will sometimes use Python instead.
Customer data sharing comes out of the shadows
Has QNX been ported to ARM? Interesting!

edit: apparently it has been:

http://www.qnx.com/developers/docs/6.5.0/index.jsp?topic=%2F...
High DPI displays are common on PC laptops now, they generally work well in Linux (not so much for legacy apps but you're unlikely to use those).

Surprisingly, some Tk applications that I use irregularly actually work with HiDPI with Tk 8.6 (as in, they are scaled up with an integer scaling factor, and are sharp).

Multiple displays with different DPIs also work with Wayland (I have one 4k screen and a LoDPI display 90 degrees rotated). Though, there are some bugs with GNOME 2.26 on Wayland with HiDPI displays that are switched off and on again (e.g. some applications such as GNOME Terminal become blurry, they seem to be rendered at lower DPI and scaled up). I have reported some bugs and the gnome-shell/mutter developers are quite responsive.
I use a public GitHub repo
Metafilter seems to be better about this stuff than we are here. At least, whenever I read it, the responses seem more thoughtful.
It's a cultural thing. GNU is intended to replace Unix, so interoperability is (at best) not a priority. Same as Microsoft's “embrace, extend, extinguish”, which shows how important a good slogan is if you want your ambitions recognized.

A POSIX (or older Bourne-descended) shell can be distinguished from ‘bash --posix’ in a script with a fragment like “date&>F”, because Bash authors either didn't realize or didn't care that the sequence ‘&>’ already had meaning.
Yes to the bounds check violation version, so far no to the BTB poisoning version. The bounds check version only works inside a single process, so is only relevant when you run untrusted code within the same process as some private data (such as JS in a web browser).

AMD claims that they believe that the way their branch predictor works effectively makes the BTB poisoning unusable, but there is no actual proof, and their statement regarding it was much more wishy-washy than they were with meltdown. (Which they specifically state they are completely immune to.)
I concur. I can't determine that during the bootup sequence though. Then again, 64MB RAM is considered plentiful for a 486 PC.
>That would be a very expensive thank you for a tiny business!

I wonder why they don't just scale back the maintenance to bare bones and make it free. The past cost is already behind them... removing it from the store won't fix that. They even did the iPhone X compatibility updates already. For the new protocols and cloud services they'd like to add, I could see an intern tackling that, for a relatively lower cost (not free) compared to a developer. So I'm not so sure the numbers couldn't work out.
This again? Either I’m entering my dotage, or this was on the front page recently. Either way, if Thiel wants to burn his money for ideological purposes, I’m sure that the line to sell him matches is around the block.

Edit: naeem, I’d encourage you to move past assumptions and actually look at comment histories; in my case at least you’re dead wrong.
60% at idle is a big no no for laptops.
Note that the Chez startup time isn't that good, and even the current Racket startup time is not great (node is still maybe 5x faster to start up). We'd really like to improve this as well, but it's hard if you don't want to have your whole standard library linked into the binary.
That hasn't been true for years.
Mine too, largely because it was the first computer I ever owned - the ZX Spectrum (48k), circa 1982.

One of the most popular home computers in the UK at the time, and with good reason.
I think CPU designers are getting too much flak for this. The side effects of speculative execution has been around ever since their introduction. A compounding problem is how abstract software has become, it has made assumptions on the underlying execution model without a deeper understanding of its sublteties (sandboxing, containers, etc trying to guarantee process isolation). It’s the Law of Leaky Abstractions [0] at work. What is alarming is how long it has taken for us to collectively realize this is a problem. Hats off to the folks for uncovering this blind spot to us.

[0] https://www.joelonsoftware.com/2002/11/11/the-law-of-leaky-a...
Really interested in this as well. Details matter here
HTTPS should be expected by now - ISPs keep messing with my unencrypted traffic.
The three big BSDs aren't exactly obscure, they might not have the highest server market share compared to windows and linux but they are the next on the list and often a primary choice for a variety of companies critical infrastructure, the most commonly sighted example these days is netflix.

I think the outrage is justified.
Is probably more expensive to procure 486s than mordern low end chips now a days
I've not had any problem with it, and the high high productivity win of being able to tell people just to turn Kubernetes in Docker on is amazing so far.

Right now, I am running 10 containers on my Mac, and my highest CPU in Intellej. Docker is running consistently with about 5-10% of the CPU.
Peter Thiel should take his money and fuck off to New Zealand where he paid to become a resident.

https://www.theguardian.com/world/2017/jun/29/new-zealand-ga...

He's done enough damage to politics as it is and I would very much want him and other billionaires to stick to one-man-one-vote rather than to use their money to multiply their voting power.
Data debt calculator
With so much going on - is there a way in linux to know whether my system is patched or not?

Similar to the powershell script for Windows?
Summing up the top 10 Best Cryptocurrencies of 2017
Good, and I hope it takes off. While there are numerous respected conservative magazines, the right has no legitimate news networks. I think we'd all be better off if conservatives had, say, a TV channel that actually reported real news.
This is a recurring pattern that just blows my mind: typically some small, often academic, group knows about some problem or potential problem that everybody else is ignoring until it becomes un-ignorable.

Anthopogenic climate change falls into this category.

I have to wonder, first, what sort of obvious stupid self-destructive things am I doing right now but ignoring. And second, how can we build systems that systematically take this into account? Is there some way to short-cut the process and find and fix problems in the early stages? Or better yet, design our systems so that they don't have the problems from the start?
I'm sorry but "the user has to opt-in during installation" doesn't count.
In fairness, that's just for sh; if for some reason you actually need bash you can just use `#!/usr/bin/env bash`
> Gmail is far from developer friendly anymore.

Was it ever?
does his blood boy have residency?