skysight-inc/HackerNews huggingface dataset:
It's really a question of, 'why is a free market better than a restricted one?'. From a purely self-interested American's standpoint:

1. It's dangerous to have the government picking winners and losers; they can use that power arbitrarily to support or punish political allies/enemies, which creates corruption and economic inefficiency. That's happened recently with even popular, successful American businesses such as the NFL, Amazon, and, potentially, AT&T & Time Warner.

2. The U.S. has only a fraction of the world's resources; limiting access to the rest of the world's resources is like arbitrarily limiting potential investors in your startup to only those in your zip code. Now the U.S. company's investors will have to take the second best offer, if there is one, and the employees and customers also may pay a price. Again, imagine it was your startup and you found a foreign buyer, made a deal you loved - and then the government stepped in and stopped you.

3. Limiting access to those foreign resources limits U.S. business productivity, which raises prices and depresses wages. For example, limits on non-U.S. steel increased the cost of products that use steel and reduced productivity of companies that use it (such as the auto industry, the construction industry, etc.). Effectively, we all could be paying lower prices but instead we are subsidizing less competitive businesses (in this case, whoever buys MoneyGram) with a form of corporate welfare.

4. If the U.S. doesn't buy products and accept investment from other countries, they won't do the same for the U.S. The U.S. is only ~5% of the world's population and ~20% of global economic activity; the largest markets for many U.S. products are China and India (including smartphones, IIRC).

5. There's the fundamental issue of liberty: I don't take it to an extreme, but generally MoneyGram's owners should be free to do what they whether or not their neighbors and government officials like it. (Of course, there are many legitimate exceptions to that.)

But the whole premise is debatable. Why wouldn't we want someone from another country to invest, in MoneyGram or in your startup? What's the difference if they were born on one side of an invisible line in the ground or another? Is it better to have these arbitrary political and economic barriers? Why wouldn't we want someone in China to become wealthy?
The very same could be said of Rails. I for one absolutely hated working in Ruby and especially Rails because I'm incredibly spoiled from Clojure. Why would anyone bother using a language without live coding that has tons of syntax issues, a braindead ORM, inconsistent conventions, extremely noisy documentation, where most devs care more about pretty superficial things than actual simplicity and composition. Do people just not do enough due diligence and get blinded by a language/framework's honeymoon period?

(I don't mean to bash Ruby, just trying to put your argument in a different perspective.)
On the contrary: that Brian Jones (along with many other men) possesses a body which is capable of getting strong enough to lift 600+ lbs off the floor is pretty strong evidence that our evolutionary past often required humans to get pretty damned strong.
That's not what it says.

Amazon suggests moving to higher-performance instances to offset offset the performance hit from the fix.

HVM and m3 instances have higher performance for the same price, but they may also have been degraded by the fix.
Link is valid but just brings up a page template for me.
I'm clicking on the article and getting
http://psycnet.apa.org/fulltext/2017-22175-001.html
Music was never intended to be a revenue generator for their competitors.
"It's popular to say things like some government employees are "folks who can't hack it in civilian life," but there's basically no evidence this is true."

I worked at NASA for 6 years and almost fell out of my chair when I read this. Switching from NASA to Google was the most stark contrast of incompetent people late in their careers having political infights to keep "their" funding to people who didn't care about funding and just did the fucking work.

I can think of 10 people I worked with at NASA who absolutely could never hold a professional position in a place that requires revenue or useful contributions.
ARM 64 does have the flaw. The tricksy wording is probably that AMD does manufacture some ARM 64 chips, so perhaps they were involved in that fix.

Which is still intentionally misleading on Intel's part.
Yes it's designed in such a way that in a court of law they could claim they were announcing a bug, but most or many people reading it would come to the opposite conclusion. In other words it's deceptive.
Maybe the scheduler could dedicate a core to interrupts and software that has small quanta and page tables? Can't really think of a code solution that doesn't sound stupid when I type it.
My suspicion is they don't get sued; rather, Werner Vogels calls Intel and tells them the massive haircut / refund they're gonna take. Or Werner buys amd procs.
They're doing this so you (or other shared tenants) can't read your VMs or the host's memory (and vice versa).
"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them."

Curious. All other reports I've read state that AMD CPUs are not vulnerable.
With the obvious class action suit that's coming, I don't know what else better their counsel has to do on a Monday night.
In Bones of a Buried Child, Signs of a Massive Human Migration to the Americas
The work around is you go work for a defense contractor who pays you the market rate and that contractor charges the government 3-5x that.
Oh I have no idea actually; it's just pretty normal to see a speed-memory trade in a lot of problems. I'm definitely not low-level enough either.
I love Rust and use it for my personal projects.

But for the next few years, C++ seems like a clear winner for maximizing career opportunities. The ecosystem is already mature and you'll find plenty of existing job listings in Germany.
This was an interesting read.
Of course, the same is true for any power that any group (or individual) might have. You need something more to distinguish this particular case.
AMD manufactures some ARM 64 chips, which might make this "technically true" albeit intentionally misleading.
For those that may be confused, I was also confused by the author's "negative result" comments at the top, but he elaborates near the end..

> So at this point my experiment is failed and thus the negative result.

> While I did set out to read kernel mode without privileges and that produced a negative result, I do feel like I opened a Pandora’s box. The thing is there was two positive results in my tests. The first is that Intel’s implementation of Tomasulo’s algorithm is not side channel safe. Consequently we have access to results of speculative execution despite the results never being committed. Secondly, my results demonstrate that speculative execution does indeed continue despite violations of the isolation between kernel mode and user mode.
yeah the intel response page is filled with people claiming intel is evil for even mentioning amd

https://news.ycombinator.com/item?id=16064545
Ask HN: Monetize a small R&D lab?
I run a small r&d lab, building prototypes (mostly hardware) of cool experiences for museums and schools. I was wondering if there was a way to monetize that wasn’t ‘work for hire’ as I’m currently doing.
This fails all 3 points on Scott Galloway's checklist of how to respond to a crisis. https://www.youtube.com/watch?v=PB-AyvgE8Ns
That's such a load of bullshit. If it's an oligopoly or monopoly in a market where the consumer has very little market power, you are just as unable to avoid funding this profligacy.

I guess you could give up medical care, internet and having an education, but if you're going to do that why not just 'vote with your wallet' with your taxes too and move abroad.
1491: The “New World” Genocide (2002)
"I guess you are essentially confirming that the instance maintenance was likely to be the reason for the major change to cpu usage, and that the only solution now is to change instance type."

"Of course I am not entirely happy about this. I bought a 3-year reserved instance 2 years ago, and now have to hope I can sell the remaining year for a reasonable amount (which may be a stretch given that I am apparently using legacy instance type), and then purchase new reserved instance after upgrading."
Yeah I agree there is a line there somewhere. If someone sells you a safe and it can be opened with a ballpoint pen, that seems like a flaw. If someone sells you a safe and it can be opened with a military grade laser, that's sort of expected. If someone sells you a safe and it can be opened with a cheap consumer gadget, but that gadget is complex and was unforeseen when the safe was designed, what do you say about that? The last one seems like the closest analogy.

Another example: would you say that MD5 is buggy/flawed?

I guess overall I think this is fair to call a "flaw" but not a "bug."
Show HN: collected undergrad/grad level math/science book recommendations
> the moral dilemma

Why is it so hard to codify “Don’t be a dick to anyone” into a law? (non-rhetorical question)
> I've heard DIs / SOI instructors say things like that on several occasions, but it was all pretty clearly within the context of trying to be "motivating"....they didn't come across as actually psychotic.

If that's their idea of "motivational speaking", there's a whole new set of problems.
And it will take two hours to get to SF. Even Millbrae to Hayward takes 90 minutes.
Most Influential in Blockchain 2017: Bitcoin Sign Guy
>...pointing out what the exploits cannot do (corrupt/modify/delete).

That statement is also untrue if you follow the implicit issue to it's inevitable exploitable end... Here is an equivalent statement of equal absurdity that intentionally neglects causality:

"Our door lock design contains a bug. The bug does not make stuff in your house disappear, does not manifest junkies into the vicinity, nor does it make property spontaneously combust."
Sounds like maybe SOME ARM and SOME AMD are implicated, especially since the Android ARM CPUs appear to be fine...
Exactly. That's what I'm getting at. Being public companies means they have to report results quarterly, which gives incentives to juice the numbers with short term gains so long as the costs, like public goodwill and brand reputation, can't be quantified and can't be put on the balance sheet.
UnikoinGold joins Bittrex in the latest exchange expansion
Same thing happens to me. I've noticed that it works fine if I'm not logged in, but if I am logged in or I try the login page, I get a blank page if my VPN is on.

The Chrome network panel shows a 403 code (Forbidden).

Edit: I can write this up in an email to hn@ycombinator.com if requested.
Wow, what a find for the Project Zero team. This team and idea can only be described as a success, well done.
It sounds like your complaints basically boil down to terms being changed for new accounts. And you don't sound like a paying customer. If I were a betting man, I would bet that you would probably be dissatisfied with literally anything that wasn't just giving you free music on whatever terms you'd like.
I am going to go on a limb and speculate that Intel probably knows more about this problem than most. They are being quite specific that the issue affects multiple devices, and I doubt they are lying. And coincidentally several other reports (from Google, Wired and others) are indicating that this issue crosses CPU makers.

In that context, isn't you reply rather off the mark? If Intel's claim is correct, then being "defensive" seems entirely accurate given how many are foaming at the mouth at the prospect of some mortally wounded Intel.
Peek definition does this, sort of. Definitely exists in VS and VS Code, and probably in the JetBrains things.
We won't know until we have the full details. From the linux patches it looked like that AMD x86-64 processors were not affected.

But the sentence you quote adds AMD back into play. Maybe some of its ARM processors? e.g. AMD Opteron A1100?
Links to descriptions of similar vulnerabilities in AMD and ARM processors would be very welcome.
Both the sibling comments to me are right. Kids are impressionable, and you being smart doesn't mean everyone else is. Also the people making ads are definitely smarter than you and me.

Someone put it this way regarding the recent machine learning researcher craze. It went something like - PhDs are currently being paid millions to study where to place the pixels on your screen to influence you.
See the Twitter thread here: https://twitter.com/nicoleperlroth/status/948678006859591682

(Edit: there are 9 posts total, go to her user page to see them all)

Seems there are two issues. One, called Meltdown, only effects Intel and is REALLY bad, but the kernel page table changes everyone is making fixes it.

The other, dubbed Spectre, is apparently common to the way all processors handle speculative execution and is unfixable without new hardware.

I’d like to know more about that but I haven’t seen anything yet.

Whoever discovered this stuff on Google’s team deserves some sort of computer security Nobel prize.
You can find the details below. They've tried AMD CPUs also.

https://googleprojectzero.blogspot.com/2018/01/reading-privi...
How to view further details of the opening and/or apply for it?
No, and that's not the way the bug works.
You can buy things with Bitcoin.
I bet it's Amazon or Google
And yet it also says that AMD devices running Android are not vulnerable.

I'd be curious how those two statements should be reconciled.
> I don't mean to be rude but if you are having to ask how to disable automatic updates then you probably aren't someone who keeps up to date with all the latest issues. When it becomes problem, you just won't know.

...Wow. First of all, that's not what I asked. I asked how to disable or block this patch. Blocking "automatic updates" is neither equivalent to disabling this patch (post-install) nor to blocking it (pre-install). Second of all, I'm running Windows 8.1, on which I can actually block updates easily. I don't know if I can be picky about which patches I block on 10 because I have barely used it, but I will have to start using it soon and I really don't want to waste time installing the update only to find out I can no longer uninstall it.

And third of all, you're really spewing nonsense. I've done security work in the past which I don't care to post details about here anonymously. I still keep up with security news regularly and I actually look into the update details before installing them (which should be obvious if you read my previous comment on how I said what I do depends on the actual updates). None of which you need to believe (and I really don't care if you don't), except for the minor caveat that if you're trying to be convincing, this holier-than-thou attitude moves you well in the opposite direction.
Does the octogenarian want to live more or less than the 3 month old?
Exactly like you - Germans - had decided circa 37 that letting Jews and Jew-defenders not speak their hurtful lies harms nothing of value, right?
Wow....I had no idea things had gone that far. Maybe I should log into my CS:GO account and see if I've got anything valuable left over.
I think they're talking about the comment formatting, not the website
Will patches for this eventually trickle down to things like LineageOS?
So does communism, or really any other political ideology that implies an upheaval of people's lives, no?
link for details for that from Project Zero:

https://googleprojectzero.blogspot.com/2018/01/reading-privi...
Tesla essentially went from test production in Q3 to matching Model S/X weekly production by the end of Q4.

While they are still ~6 months behind schedule, the way they are able to kick off an entirely new line is still impressive in it's own regard.

Remember, Elon Standard Time.
Would you hold that same opinion if the thing said were, say, violent american black rap lyrics?
> She called out Muslims as having certain behaviors which is clearly racist.

No. Islam is not a race.
An app whose data store is block chain based, as opposed to AWS infrastructure owned by whoever.

Decentralized App.
Part of that is stating the value proposition for the user. Along with what it does, why would I use it?
>Intel believes its products are the most secure in the world

After the Intel ME mess? I'm not so sure.
> The 'pump' side of 'pump and dump' doesn't have to be misinformation, does it?

Usually, it's disinformation, not misinformation, but it is possible or it to be lies of misdirection and omission rather than direct falsehoods, which may or may not literally constitute disinformation.

> The information doesn't have to be false for it to be a hit piece designed to profit the stock-shorting author.

Certainly, if you short based on not-yet-widely known true information, you want to ensure that the market discovers that information between the time that you get into the short position and the time you have to cover the short.

OTOH, trying to get the market to recognize and react to true information isn't really a “hit piece”.
Always nice to hear :). Be sure to report any issues you have on GitHub btw, the setup and usage should be as painless as possible.
Moore’s Law doesn’t describe CPU clock speed increases.
"AMD chips are affected by some but not all of the vulnerabilities. AMD said that there is a "near zero risk to AMD processors at this time." British chipmaker ARM told news site Axios prior to this report that some of its processors, including its Cortex-A chips, are affected."

- http://www.zdnet.com/article/security-flaws-affect-every-int...

* Edit:

From https://meltdownattack.com/

Which systems are affected by Meltdown?

"Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013). We successfully tested Meltdown on Intel processor generations released as early as 2011. Currently, we have only verified Meltdown on Intel processors. At the moment, it is unclear whether ARM and AMD processors are also affected by Meltdown.

Which systems are affected by Spectre?

Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors."
You did not maybe go to the domain you mention in the post about shoes, or google the term to find it? From the outside, something like that seems a lot more likely.
This article caused me to become very bearish on Tesla.

https://dailykanban.com/2017/12/go-production-hell-went-prod...

Not on EVs in general, but just on their ability to actually outpace delivering the market (without killing anyone) before the old guard caught on and gets there first. Not a novel thought, but the factory analysis really put the nail in the coffin for me.
Thank you for the correction. Indeed. iTunes from years ago.
Please re-read my above comment. There is no new API. The DAX userspace API is mmap.

This work is experimental but you can mmap a single file on a filesystem on this device using new DAX capabilities. Most access will not longer require a syscall.

This comes with all the usual semantics and trappings of mmap plus some additional caveats as to how the filesystem / DAX / hardware is implemented. Most reads/writes will not require a trip to the kernel using the normal read()/write() syscalls. Additionally, there is no RAM page cache baking this mmap instead the device is mapped directly at a virtual address (like DMA).

Finally, flush for these kinds of devices is at the block level implemented using normal instructions and not fsync. Flush is going to be done using the CLWB instruction. See: https://software.intel.com/en-us/blogs/2016/09/12/deprecate-...

LWN.net has lots of articles and links in their archives from 2016/2017. It's a really good read. Sadly I do not have time to dig more of them up for you. Do a search for site:lwn.net and search for DAX or MAP_DIRECT.
On podcast analytics issues: why iHeart Media Pods seem to dominate the charts
TIL I work at the same company as the discoverer of the 50th known Mersenne Prime.

I know at least one sysadmin who used GIMPS as a burn-in program for new servers.....
Details of “Meltdown” and “Spectre” Attacks Against Intel and AMD Chips Disclosed
Interesting. I took a look and this is the only hypervisor specific piece of code I can find in the patches.

I have wondered what the impact would be on hypervisors. Xen seems like they patched it in a way that removes the need for guests to mitigate, but would guests of other hypervisors get hit with the penalty twice in some cases?
> but thought that there would be some concrete list of all the primes that we had discovered

It is trivial (in computational power) to find a random prime in order of 2^2048. So such a list would be way to big to store somewhere and always be out of date. It is not hard to find very big primes. It is just hard to find very very big primes.
> Technology is never to blame for anything, because technology is not a moral actor; people may be to blame for the manner in which they use technology.

For a very narrow and incomplete definition of technology, sure. Technology literally means the science of craft. Technology isn't just the product, its something you practice when you're engineering and inventing a means to an end. In practicing technology, you make choices in identifying what problems to solve, how, and whether they are problems in the first place. Such choices are subject to morality. In that sense you can indeed blame technology.

I don't think there's ever been a discussion about the ethics of technology here without someone trying to pull the brakes by pointing out that inanimate things themselves are not moral actors, but let's face it, if someone participates in discussion on this site their IQ is probably higher than 70, and understand that already. Assume for a minute, at least for the sake of discussion, that this isn't the point GP is trying to make.
There's nothing intrinsically wrong with being ageist. This is a good example why.
This blog post could not find an exploit, but proved enough that there could be. The theory is that the KAISER researchers took this idea and found a way to exploit it.
This is a pretty charged topic, and it's difficult to make the case unequivocally. In our family, it got to the point where people were emailing research papers(academics and doctors in the family) back and forth and Christmas was ruined. I don't have time to cite all the papers on both sides of this, but for us(my wife feels even more strongly about this than I do), it came down to the realization that AT BEST all the girl's toys and clothes could do no harm to their psyche. AT WORST, it could possibly instill in them a type of inferiority with respect to boys in terms of technical ability, and a diminished sense of their place in the world with respect to boys. As a scientist, I have to consider all the evidence, and as a parent, I have to make the decisions I think will help make my children stronger. My wife and I basically came to the conclusion that "girl's toys" and "girl's clothes" were bullshit, and an unnecessary risk to their psyche. Unfortunately pink is collateral damage in this war, as it is so ubiquitously used in our culture to demarcate girl from boy. I can in no way say that we are right, not in a scientific sense, I can only say that after spending hours and hours in toy and clothes aisles, I would say as a culture it's time to rethink gender neutrality, and the way we are separating boys and girls with clothes and toys from a very young age.