skysight-inc/HackerNews huggingface dataset:
Read the article. The issue here is -a massive number of, thousands- corrupt officials and politicians, not a programming error.

The corruption comes with full service. Not just information leak, but information falsification, introducing fake people into the system, false aadhaar cards (and therefore passports), the works. And if you buy 5x access (ie. $50) it comes even more full service: install software on official computers (presumably for remote control), so that unlimited access is available.

And of course, we know that the reverse exists as well : refusal of service for legitimate purposes unless bribes are provided.

Meanwhile banks give anyone with your passport access to your bank account. Which sounds reasonable until you read ... A new epidemic is spreading across India. Find a "rich" person, figure out where they bank, get an ID card in their name (from the real government, I might add), and phone in a bank transfer or just get a new bank card issued from the bank. Of course, the government will be taking full responsibility I'm sure.

But surprisingly, none of this is a serious concern to the government, which insists on simply lying about the problems. They promise to investigate though, they promise.
You tell them that at startups, titles are total fiction not used to describe job responsibilities but to participate in a branding effect for the company.

And then you describe your actual duties and experience.

I don't think titles matter at all because they're always different everywhere you go. The only exception is if you're a committed ladder climber and you're going from one place with a rigid hierarchy to another similar place. In this case jockeying for title position can be important.
>To sum up, let’s just say there are two groups: those who are not interested in changing their job, and those who, for whatever reason, are.

There's existing terminology for this. Passive and active candidates.

The whole concept sounds promising. It also sounds very similar to the now defunct hiremyfriend.io -

https://web.archive.org/web/20150313052317/https://hiremyfri...

https://techcrunch.com/2013/07/17/new-london-startup-lab-mak...

https://news.ycombinator.com/item?id=6057050
Crackme0x01 Dissected with Radare2
> What about the amount of time necessary to open that same XML file, then move your cursor to the end of it? […] Vim takes around 4 seconds.

This will be a matter of syntax highlighting configuration. I’m presuming this means “open the file and press G”, in which case it’ll come down to the :syn-sync value; this defaults to 100 lines, which should be basically instantaneous, but my guess is that he’s got it going fromstart, or else possibly enabled g:xml_syntax_folding, because that’s really the only reason I can imagine why it would not be blazingly fast.
Yeah, I think digital assistants have not been built to pass a turing test, i.e. to have full human communication skills. They've just been marketed that way.
Inventing rope isn't obvious, but it's something a single individual can do. You don't need a team of people that each has studied some field for twenty years and a brilliant idea, you just need a brilliant idea. Inventing a device to cheaply store energy at grid scale is not something a single person can do, ever.
The memory and start time complaints are a bit of a red herring. It's not like anybody is firing up a copy of VS.NET from scratch every time they want to edit a file.

In an IDE world, you fire up your environment once when you power on. For the next week or so until you reboot, opening a file is instant.

Granted, it uses memory in the background. But you have 32gb of it on your laptop. Keeping a couple of those in reserve to never have to edit code as though it were text seems like a fine trade off for those who choose to make it.
Indeed, the virtue of the Turing test is that it's a very general framework – the freedom of the framework allows us to test the AI using any communicational method at hand. One of such is Winograd Schemas [1] – a test of commonsensical reasoning, in which the current conversational AIs spectacularly fail at.

[1] https://cs.nyu.edu/faculty/davise/papers/WinogradSchemas/WS....
Any browser. The article has no detail but I suspect that doing it all with a web stack, or even just PDF output with wkhtmltopdf (or a similar solution) would be much quicker than writing a PDF generator from scratch.
> (defadvice ...

For your information, defadvice is deprecated[0]. Alternatives like advice-add can be used instead.

[0] https://www.gnu.org/software/emacs/manual/html_node/elisp/Po...
The performance differential is a concern with classical microkernel designs but not really with modern ones. The process isolation is useful when dealing with Meltdown but not with Spectre.
This is true, but you can view it as effectively stopped if you get only a very small reward.

This is especially interesting because the number of generated coins is not totally depended on the value (in USD) of bitcoin. This means that you could get a converted reward of just a few dollars in a few decades.

Either fees have to rise or Bitcoin will be much unsafer by then.
I don't think this is likely anywhere.

The only sorts of companies where server costs could increase hugely due to a sudden need for hardware isolation are those where they're running tiny or incredibly bursty workloads. Big companies like Netflix that use tons of cores can just binpack their work all together on the same hardware so their jobs only share hardware with other jobs controlled by the same company. Effectively, cloud providers will start offering sub-clouds into which only your own jobs will be scheduled.

This is actually how cloud tech has worked for many years internally. I worked at Google for a long time and their cluster control system (Borg) had a concept called "allocs" which were basically scheduling sub-domains. You could schedule an alloc to reserve some resources, and then schedule jobs into the alloc which would share those resources. Allocs were often used to avoid performance-related interference from shared jobs, e.g. when a batch job kept hogging the CPU caches and slowing down latency sensitive servers. I suppose these days VMs and containers do a similar job, though I think the Borg approach was nicer and more efficient.

I guess this sort of per-firm isolation will become common and most companies costs won't change a huge amount. The people it'll hit will be small mom-and-pop personal servers, but they're unlikely to care about side channel attacks anyway. So I wouldn't sell stock in cloud providers just yet.
The brain is complex. Addiction is complicated. It's just not reasonable - based on our current knowledge of both - to expect every treatment to work everytime for every person.

Perhaps some day we'll figure out how to get the brain to completely unlearn addition. We're not there yet. That doesn't mean we shouldn't try.

p.s. despise is not a good word for this context.
As I recall, none of Basecamp’s staff actually live in SF so everyone wins!

The main goal here appears to be securing their talent, as it’s becoming increasingly difficult to hold onto staff and create a stable enterprise. I imagine that only becomes more difficult when you’re a distributed team.

From the employee perspective: Will you really switch jobs now that your salary is top of market for your location? Any job nearby won’t pay you anywhere near that salary! You will have to move to the valley.

So it obviates job choice based on salary being a deciding factor in your life, your location and your connections. (Just because SF and other places have opportunity doesn’t make it attractive to all - opportunity cost like being away from family or friends can outweigh it.)

It’s then entirely up to you where you live and how beneficial you make that salary to you and your family.

The community where the staff live benefits too. Their surplus income will most likely be spent locally and depending on how they’re taxed, the local authority will benefit too.

Basecamp also has a sideline benefit: the massive PR that comes from awareness of this. And I bet they get droves of great talent jumping all over their new positions this year, from everywhere, _especially_ the valley!

Great tactic. Putting people first.
Market capitalism is a tool that lets you pay the person living in the countryside less.

But we are the ones who decide whether paying the countryside person less is "fair". The moral weight of our actions are mostly independent of what a free market gives.

The market is a tool, not the objective.
Not allow user processes to recover from a SEGV. The attack depends on a signal hander that traps the signal and resumes execution. If this is disabled then the attack will not work. This would affect two types of systems:

1. Badly written code where bugs are being masked by the handler.
2. Any kind of virtualization?

So, for cloud providers it looks like a 30% performance hit, but for the rest of us I would rather have a patch that stops applications handling the SEGV trap.
They’d already built a web based editor for cloud dev and ported it to electron as a desktop app afaik. They didn’t set out to make an electron editor.
Egypt's top Islamic Cleric issues a fatwa against Bitcoin
I used to love atom, but I started using it for Go recently and it crashes all the time. Every hour or so it crashes at least once, oftentimes more than once.
Even a low-power core like a Cortex-M7 can do some speculative execution through its branch predictor.

Though of course a M7 isn't running VMs, and probably isn't running any kind of attacker-controlled code (scripting included - its there, but rare), so many of the vectors aren't present.
I find it highly ironic that this link has appeared on Hacker News literally hours after Meltdown and Spectre vulnerabilities have been officially announced and described.
But this is a problem (the high fees) that should be solved by the Lightning Network [0].

From what I understand this will bundle many smaller transactions into 1 big transaction or something like that. This should happen off-chain therefore small transactions will be quicker and cheaper.

---

[0]: https://en.wikipedia.org/wiki/Lightning_Network
Negotiating your market rate isn't caring about money 'first'. It's caring about money 'at all.' They're different.

Leaving $50k/year on the table at age 30 will move your retirement date back ten years. It takes a lot of culture to make up for that.
I think you'll find that people consider organisations responsible for the actions of their employees, and failure to police their actions is very much the government's fault.

If a Microsoft employee gave people access to your mailbox, and they used it to get $5000 from your bank account, would you consider them responsible ? Because I sure would.

This is a similar situation, except of course, that no Indian citizen has any choice in the matter: they cannot change their ID card provider, nor can they demand banks not give access that way : both have been legislated.

So when banks gave access to criminals with the (official, government-issued, through bribed officials) ID cards of the owners of those bank accounts, I feel like it is very much the case that the government is responsible, in at least 3 ways.

1) it was government officials who gave people access to that bank account

2) the banks tried to stop it, but are legally forced to give access to bank accounts to people holding those ID cards

3) the government is refusing to fix these issues, or secure their side

4) and the least way, the government is supposed to stop criminals. Which they did in a few cases, and did not do in thousands of other cases ...
That's my point: Getting paid less on top of not having those advantages isn't appealing to me.

However, your argument is not valid: Large size doesn't imply high cost. Neither Shanghai (most populous city) nor Manila (most dense city) have higher costs of living than SF.
Intro to blockchain development
So the content blockers can also submit my traffic details to some server? I was under the impression that they can only add to the rule list in Safari. I am suddenly very afraid of adguard. Can someone clarify on this?
Here's another

https://www.salon.com/2014/03/23/the_pseudo_science_of_alcoh...
Hmm, none of these sound right. I think the issue was mostly that as a hunter gatherer, if you make something, you have to carry it. So you couldn't accumulate a lot of tools, not to mention stuff like forges and so forth.
This would only be true if bitcoin were infinitely divisible.

In actuality the block reward will eventually be one 'satoshi' (one hundred-millionth of a bitcoin); then, when it's next due to be halved, dividing by 2 with a fixed precision of 8 decimal places will take the reward down to a value of zero.
"Cost of living" factor is the most idiotic thing ever.
1. I knew that I had a lots of time. From a business perspective, this doesn't make perfect sense, I know. I knew C++ (sort of) and was looking for a similar language. Learning Rust took me roughly three weeks (coming from C++), it is not as complex as you think. I think the time saved hunting down null pointers has amortized that investment greatly.

2. Again, I didn't know at that time if that was the fault of Windows. All that I saw was an application that was extremely slow, written in either C++ (with Win32) or .NET (both of which are possible). Second, the application had very shitty PDF output (ex. a shape with CMYK was "emulated" by four shapes drawn on top of each other, one for black, one for magenta, etc. - lead to a completely bloated PDF). I suspected that it was the fault of the framework they were using and I didn't want to end up in a similar situation.

3. Display is actually the #1 bottleneck. You have to understand that in a real map needs to draw roughly 10000 lines, fonts, and symbols. The old program (which I had to work with), did this using Win32 drawing routines. Every time you zoom in / out, it could take 1 - 5 seconds (if lots of things were on the screen). In OpenGL, I can do it in a sub-millisecond time (using this technique -
https://blog.mapbox.com/drawing-antialiased-lines-with-openg... paired with primitive restarting in OpenGL (https://www.khronos.org/opengl/wiki/Vertex_Rendering#Primiti...). ArcGIS, for example, has DirectX acceleration, QGIS uses OpenGL. This is simply a huge annoyance when trying to work with the program.
5 Facts to Know About Node.Js Development
Intel's crap attempt to spin its way out of CPU security bug PR nightmare
Good idea to make a related product to sell in the museum shop.
It effectively means wiping the caches, TLBs, BTBs and any other caches and optimisations on any form of context switch, as far as I can see? Which yes will likely require new silicon.
Thanks!

Sure. While create-react-app is undoubtedly better, this starter kit just let's us create apps using React, Redux and Sass right out of the bat. Though create-react-app can be used to do the same, it doesn't come with Sass pre-installed and to do that, you may have to "eject" the project. More on that here
- https://medium.com/@Connorelsea/using-sass-with-create-react...

Neutrino looks great. Comes with an array of packages. I couldn't find Sass again. So that might require additional configuration.

It sure is not better than those two you are referring to, but is different for sure. Because, if all that someone's looking for is React + Redux + Sass to start writing their application without any initial configuration, then this could be their solution.
Repost. Original had good comments

https://news.ycombinator.com/item?id=15861043
45/hour/track? Literally impossible even with world class signalling, which the NY Subway definitely does not have. 38 tph seems to be the physical limit.

AFIAK only the L train reaches anywhere near "world class" capacity (as it has CBTC), but is still only 26tph.

Other lines on the NY subway must be far less than that. From my experience 3-4 min headways per track are pretty common, which equates to 15-20tph. Obviously if you have both express and local then you're up to 30-40, but it could be ~double that with modern CBTC.
You tell them it was the title for a customer support role at the startup you worked at.

Most of those people will likely end up at other startups anyway.
Location matters for PR purposes, a great team located in the Bay Area will have the same output if located in rural USA, Europe, or Asia. Companies are made by people, not places (unless you're a farmer, but that's a different story entirely).
You forgot to add mining difficulty in the mix. If you'll get just a few dollars, you also spent just a few dollars on mining the block.
If you like minimalism, try trojita (http://trojita.flaska.net/). It's basically an IMAP explorer with lots of rfcs implemented and gpg support. Takes 1 minute to configure. It might have some rough edges, but I always find its lightness welcome when I'm using other bloated apps.
> The lack of a
similar statement for a skipped XSA number normally means that the
issue is being investigated within the Xen Project Security Team.
As an isolated example of this kind of thing, consider the shape of the Earth as discussed in Asimov's "Relativity of Wrong" [http://chem.tufts.edu/answersinscience/relativityofwrong.htm]
I wouldn't call a man who cheats close friends/partners and treats others badly a great man.
That's ok, except that you really have a one-player game now.

If the first player is locked into playing randomly forever, irrespective of what the second player does, then for the remaining player any strategy is an "equilibrium" and can't be improved (or worsened). We're just talking about roulette or something.

But I'm a little disappointed that someone would downvote the comment above. The "something is wrong with the theory" claim is very premature (ok, it's wrong), but the important thing is now we are fighting with the text instead of just citing it. That's a step forward, not a step back.
We’ll Never Colonize Space
Thanks. I wasn't aware of that. I just remember the first time I ever saw that footage, couldn't believe what I was hearing, and haven't forgotten it.

My own objection isn't even about government/state promotion of religion - though I'm not particularly a fan of that - it's that a scientific body like NASA comes out with "God created Earth".

And I wouldn't even mind that if NASA stated it was their official position. Then anyone is free to decide on their scientific credibility.

Instead we had an organization making itself look ridiculous by unnecessarily pandering to beliefs it couldn't possibly officially hold.
Your analogy is more apt for side-channel attacks in general. Here is a more specific version for Meltdown:

A library has two rooms, one for general books and one for restricted books. The restricted books are not allowed out of the library, and no notes or recordings are allowed to be taken out of the restricted room.

An attacker wants to sneak information out of the restricted room. To do this the pick up a pile of non-restricted books and go into the restricted room. Depending on what they read in there they rearrange the pile of non-restricted books into a particular order. A guard comes along and sees them, they are thrown out of the restricted room and their pile of non-restricted books is put on the issue desk ready to be put back into circulation.

Their conspirator looks at the order of the books on the issue desk and decodes a piece of information about the book in the restricted room. They repeat this process about 500000 times a second until they have transcribed the secret book.
If looking at a few images gives you that sensation, then you should try out the Space Engine (traveling through space in 3D):

http://spaceengine.org/

A demo:

https://www.youtube.com/watch?v=ve0Bpmx8Fk0
Not a coincidence. Articles with the words CPU or Microprocessor in the title are getting a lot of attention on HN (including a 2016 article on CPU bugs).
I think the issue is that we don't really know how well it works. No one is denying that many people are helped by it, but studies as to how effective it is are lacking rigor, and AA itself is secretive about success/failure numbers, so it's hard to judge. There's enough evidence that it doesn't help a lot of people for it to make sense to want to quantify its effects and see if we can do better. And that's a problem when AA and 12-step programs are the only option for many people in many areas, and when courts can order people into these programs when they may not be the best path for the individual's particular case.
Word of warning: Binance’s withdraw fees are bordering on insane. https://reddit.com/r/CryptoCurrency/comments/7nyqr1/a_brief_...

Disclaimer: I have no affiliation with any exchange.
Any axiom accepted as a starting point or any conclusion reached by intellection alone in the Schuonic sense. Abstract notions such as existence of numbers or Platonic forms.

At any rate the bot is heavily biased towards atheism and offers several ineffective counterarguments against what I perceive are author's misconceptions about certain concepts found in major religions.
The Information Sieve
3 is easy, the sum of the digits is divisible by 3. So 6 is easy too, divisible by 3 and 2.
As a general rule of thumb, if everyone already has a PoC, you should assume someone has been doing targeted practical attacks for a while.
Bear in mind, that I would answer this differently about Bitcoin efficiency and energy usage if the question would be asked in a different manner, BUT:

While some claim that it's a "yes", it's actually a NO.

Bitcoin doesn't care (or people mining it) about environmental impact. Heck, most of the people in general do not care about environment.

Currently, the entire community is riding a speculative hype train to earn money, not to save the planet. Also, most miners (one of the most influential groups in Bitcoin) are based in China - does that strike you as an environment-savvy place?

This question reeks of the Californian idealogical bubble. What's next? Is Bitcoin diverse enough?
Undisclosed material information.

If you know a risk factor that hasn't been disclosed to investors you shouldn't be able to just point to your pattern of behavior.

(And if he doesn't want equity risk, he should arrange for other compensation...)
I wrote an article on this topic:

https://hackernoon.com/dummies-guide-to-bitcoin-energy-use-5...
Disabling indirect branch prediction (and thus speculation after indirect branches) while in kernel mode, or flushing the indirect branch predictor on kernel mode entry. Both need OS support in addition to the microcode, but the change is less invasive than PTI.
A visual explanation of SHA-256
> A rogue planet drifting through certain nebulas might have more surrounding material for the processes of life to work with.

Keep in mind that nebulae are in reality less dense than industrial-grade vacuum. From the point of view of a rouge planet passing through one, it's pretty much still empty space.
> For variant 1, a kernel JIT is definitely helpful, which is why the Project Zero PoC used it, but it's not required.

If I'm understanding the post correctly it says that JIT's not required for Intel CPUs, but is required for AMD.
Thanks for the comment.

My logic is that to overcome your addiction you need to take control. Having a higher power is unnecessary, you have to want to do it for yourself and only you can actually achieve it. Others can help, but mentally, physically and emotionally it needs to be all your own work or it won't work.

That said, if it works for people then great! I think such an organisation is very important, it's just a shame for me I can't participate as the I disagree with the fundamental element. Ancillary stuff is great.

If there was need for it, I'd be up for helping with any online, atheist/secular AA style program. I feel some sort of duty to help others as unless you have been there, through all the shite that goes with it, it's hard to understand.
Weekly Machine Learning Opensource Roundup – Jan. 4, 2018