skysight-inc/HackerNews huggingface dataset:
> like the noisy (Perl-like) syntax

I agree that Rust can be pretty noisy in some cases, but I've never really thought of it as Perl-like. Perl's syntax has so much noise so that the language can be enormous whereas Rust is at its core a pretty simple language. Rust code tends to be noisy because it includes a lot of information that you might not care about at the moment
$50K Blockstack Bounty to Build Messaging Dapp
I use rustup and works perfectly. Why do you want a Homebrew-compatible manner and why rustup is not?
This is the first time I've seen this suggestion; it is something that could be done relatively easily for systems that otherwise have no updates/mitigations.

If performance is better some variant of this (auto-scaling dedicated cores) may even become the default solution rather than all the other workarounds! Bare metal hypervisors should get their own core(s) too.

Is anyone already doing this? (Qubes, etc.)
More housing near the Expo Line and other California transit stations
Addressing some weird off topic bits:

- Not believing in the bible is different from saying Christianity is harmful.

- I agree it sounds harsh to say one dislikes Scientologists or Muslims or Stuffed crust pizza lovers. However that doesn't address the fact that you implied doing one of these was racist, when none of these are races and all are beliefs.

And responding to the point you made:

> When we judge others we're probably bias in some way because none of us have enough accurate information to uniformly judge the millions of unique people that identify with a race or religion.

Many seperate, independent groups have surveyed significant portions of Muslims across the world and found consistent and disturbing results.

Do we mean every individual person? No, to measure things we need to paint broad brush strokes.

- No sensible adult would think that a group has a hive mind.

- Nearly all would (and should) be concerned if most members of a group wanted to make being gay illegal (amongst other issues).
Illegal refers to the immigration status, not the person.
Prediction: This will be just like any vulnerability disclosure. The infosec people and media will scream hysterically about how game changingly bad it is. The OS vendors will patch, and business will go on as usual.
"(at least for the spectre attack)"
Apple took a huge hit business-wise by rolling their own (adequate but inferior to Google's) maps. One of the reasons they made the split was that Google wanted user and usage data that Apple was unwilling to share. Google was offering vector map data (as opposed to tile-based) in exchange for that user data, and Apple refused. So, Apple bought user information protection (or, at least soloing) in exchange for loss of map quality. I believe that's the "deposit of trust"
Amazon Alexa can help you control your microwave
Huh, so did Intel know about this vulnerability when they designed SGX?
Everyone building a UI uses state machines. It's just that some of them are implicit, badly structured, and have broken edge cases.
You misunderstand. It runs "bridgeOS" which can be updated with Apple-signed firmware updates, and most certainly will be for security updates.
Which model? We are looking into buying quite a few, and Thinkpads are the first choice here. We never had problems in the past, but I've been hearing about problems in their mid-range models. I'd like to avoid those, at the very least.
I'm not denying that the technology was sort of there (especially/only if you were writing a corporate app that targeted one and only one browser, probably as a replacement for an in-house VB/WinForms app). My point, which you mostly reinforced, was that it was not at all common for a user opting not to enable javascript to see a completely broken public-facing site until relatively recently.
Oh I'm sure I'm sure there's some generalized "So you can be tracked down if you do something bad."

But this was just stupid.

My reservation was in the computer.

I had a wallet full of cards including the one I used to make the reservation.

I had a photo ID, just not a government-issued one.

They could trivially have looked me up on the web if they had wanted to.

Trust me. If I'm going to scam a hotel for a couple nights stay, it's not going to be a fleabag Travelodge at SFO. It's managing risk by inflexible rules, not sensible and flexible policy. Of course, IT organizations often do pretty much the same thing.
Awesome, I guess. I really don't see a problem with this.
Neither was anyone else aware of these class of security issues with CPUs until recently.
I am not comfortable giving a assessment of the second example with both sentences. Rulings might turn out either way depending on context and I'd advise not to publish anything close to that. It starts going into Volksverhetzung territory.

She tweeted something like the second example, first sentence only. There should be no legal problem with that (it was just a pretty extreme wording of "the police shouldn't tweet in Arabic"). Sorry if I didn't make that clear enough.
Yak shaving :)

I want to write a source code spell checker with performance better than scspell.

I didn't want to take that on as my learning project, so I instead started with a lint tool that is driven by user-defined regexes.

But I wanted to blog about my experience learning Rust. I wanted a blog that was good with code (so I'm moving off of blogspot finally) and easy to deploy (so no Jekyll) and decided on Cobalt which is written in Rust. There are some features lacking, so I've been contributing back (and have become the primary maintainer).

One year later and I've still not gotten around to my regex-based linter or source code spell checker.

What gets me excited about Rust:

- Cargo
- Level of confidence that compiled code will work because of both the type system and the borrow checker
- Zero cost abstraction (I'm weird)
- Error handling that has similar ergonomics to exceptions, easier to reason about, but can work in any environment. Exceptions can't run in places like the Windows kernel, so you end up using what feels like a fork of the language + standard library.

Misc notes on my experience:
- Borrow checker has rarely been a problem for me. Yes, sometimes it complains but is usually right and easy to fix
- I've never used the `unsafe` escape hatch

The things that frustrate me are nitpicky and I recognize they will go away as the language matures:

- Lack of specialization. e.g. I have a type that I want convertable from/to iterators but the trait for this has a no-op implementation for "convert from self to self", causing ambiguity that fails to compile.
- Can't have a struct implement the function-trait
- You can't specify that a variable should implement multiple traits (like the primary one and Debug). Instead you need to make a treat that inherits all of the traits you care about.
- CI conventions have too much maintenance overhead for an ecosystem that encourages a lot of small packages.

The last one is probably my next step in Yak Shaving once I get cobalt into a "good enough" state for myself.
How about a ruby script to run instead of a bash script? With perhaps a shared repository of them that you could use? Hmm...
Yes, it's a tradeoff.

Interesting, your comment reminded me of inline functions in C++ and C99; not the same thing (or at least goal) as what we were discussing, but closely related:

https://en.wikipedia.org/wiki/Inline_function
Hi, I am 61, learned Cobol at college then forgot it. But I still think it is an interesting language. Here is my take:

* First try to learn a bit about different flavors of Cobol and incompatibilities to be able to discuss with potential employers.

* Then the obvious thing is work as a freelancer, but I am not optimistic for a Cobol coder.

* Try to mine Linkedin for head of IT in large companies. I am sure there are lot of people that have worries about code bases that nobody understand anymore.

* Charge a lot more than a Java coder. It will impress people, they may even expect it.

Good luck!
That is from June, this is the latest from December:

http://en.community.dell.com/techcenter/os-applications/f/46...

A motherboard change and a BIOS update (2.4.2) are supposed to lower the noise as much as they can, while still deeming it "working within specification". Users report the 2.4.2 update didn't help much or even made it worse.
If I can read arbitrary data, what’s stopping me from reading the credentials I need to write data?
I'd think that the people who are buying a 32GB variant are probably the people who have their laptop plugged in when utilizing an excess amount of memory.
Here’s the announcement from October, with examples and links to more documentation. It feels like a response to PyTorch.

https://research.googleblog.com/2017/10/eager-execution-impe...
the XPS 15 is available with 32gb
I use my laptop almost always with a power supply (either home or office) so I would happily trade some battery life for more RAM.
I've been using Dell's Linux computers for 10+ years, and I'm very happy with them. It's great to get a system that ships with Linux out of the box.

I don't like having the camera in the lower left corner, but I don't use it much so it's not that big a deal.
This is stupidly ridiculous, and probably not only illegal, but unprofitable for a company to do.

As others have suggested - take more courses, try to do some contracting, and volunteer for a non-profit.
https://www.amazon.com/Revising-Prose-5th-Richard-Lanham/dp/...
The actual quote is:

> Intel has already issued updates for the majority of processor products introduced within the past five years. By the end of next week, Intel expects to have issued updates for more than 90 percent of processor products introduced within the past five years.

The post is silent on what will be done with older chips, it didn't say that they are not going to be updated. It makes sense that Intel prioritizes the newer chips.
IMO, it does not make sense to buy any of those new models: whether it's Dell, HP, or else--before we see models with 32Gb of RAM. It's been told here over and over since 2016 when first Touchbar MacBook got released.

It's 2018 and all of us, including manufacturers, are locked with 16GB of RAM and those upgrades look like a joke. Within last month I noticed myötähäpeä when someone asks me for laptop advice.

Hopefully this situation will make enough professionals pissed off so both them and manufacturers would look into RISC. It's going to get worse before it gets better.
I've only stayed at a motel once, and they asked for my license plate (paid with a credit card). I've been to hundreds of hotels and they have never asked.
Germany Had So Much Green Energy Over Christmas It Had to Pay People to Use It
On an "how impractical is this CPU bug as a backdoor"-scale this one is so far off the charts it already left the building.
How a researcher hacked his own computer and found 'worst' chip flaw
Why can't I get 16gb ram and have a 1080p screen? Is the touchpad still terrible? Does it still have coil whine?
Coinbase – “Our process for adding new assets”
This is really just a corollary of the fact that it's easy to spend other people's money. Which itself is a corollary that people are selfish. No admonishment, it's just part of being human. A survey of people who stand to benefit from society paying for an expensive treatment isn't exactly the most objective.
SiliconSqueak: Adapting processor grain via reconfiguration (2014)
A lot of people don't have charging at work, so they have to charge at home. Or they might want to visit a friend that is 40 miles away who also doesn't have a charger.
Personally, I don't think sealing dependencies to certain versions is the best idea, while Docker can be a very valuable addition to a data scientist's toolbox. Reproducibility, just like integration, deployment, and delivery, should be a continuous process.

For data scientists who write workflows as R Markdown documents and want to containerize them, you might want to check out our R package liftr: https://liftr.me/.
And that only with the QHD option. Why??
> I'm sure the T2 doesn't verify the OS against the network at boot time, but rather when you're installing the OS update. Once it's been installed, it's trusted.

This is correct. Network is only needed for re-install on the high security setting. When already installed, the only verification is to ensure signatures are valid, similar to how iOS devices function (You cannot re-flash/downgrade to an older OS, but if you have an older OS installed, the device will not prevent you from booting).
And debuging. Usually with tensorflow project I found my self at debuging hell where I really dont have any clue where the buggy line is.
Why is it said to be for developpers and have a 16/9 screen?! Is Apple the only one to understand dev needs (screen needs at least)?
Intel needs to ship Cannon Lake before they'll have support for LPDDR4. That was expected to ship in 2016 but is now sometime in the first half of 2018.
Before SGI, there was the Aquari-rand, but I can't find a link for it. Basically an Aquarium with a digital camera pointed at it..
It'll be interesting to see how well Linux ends up supporting these machines. Linux usually works pretty well on older Apple hardware, assuming you wait for a few patches to make everything 100% functional. This will probably mean a whole lot more code will be needed to get to that stage though.
I have a kaby lake xps 13 and have never seen it fail to resume (and I suspend/resume very frequently). There is a really annoying bug between the dell bios and the intel pstate driver where it often gets stuck at a super low cpu frequency after resume though :(

The Killer wifi has been reliable for me, IMO atheros or intel is always a good choice for wifi on linux
And remember, cross-continental trade is old.

What is your source for claims of trade?

There is no evidence for trade between Europe and Africa going back thousands of years.

Sub-Saharan Africans never developed a written language, this would seem to be a not quite vital, but certainly helpful thing when engaging in trade.

Thousands of years ago there was very little, if any, industry to speak of in sub-Saharan Africa. What was being traded?

Edit:

The poster above referenced black Africans, a distinct population from north Africans, and "cross-continental" trade implying a great distance and regular contact between the African and European races.

While some could argue that it is technically cross-continental as we understand geography today, I don't believe a good faith interpretation(in this discussion) of 'cross-continental trade' includes trade conducted in ancient Mediterranean world.
The fake time can be synced to real time at the beginning of the time slice of a process. So the process never sees the real time, but the fake time is fairly close to it.
>Science says fluoridated water is okay //

Hmm, Wikipedia tells me the studies have been low quality as to whether it's harmful in any way. EC don't recommend using fluoridation of drinking water as they see no benefit when topical application is available ...

With such an important aspect of public health it strikes me as curious in the extreme that there aren't many high-quality studies?? That alone gets me concerned that something is being hidden ... is it any surprise that this would be a widespread concern?

>a small group of non-scientists making unfounded allegations //

The Autism-Vaccination issue was initially scientists raising a concern; in what appeared to be reasonable research. Until the USAmerican removal of mercury containing compounds from the vaccine and the subsequent lack of effect on autism levels I'd say it was still an open question [happy to be corrected on that, I've only looked back on the issue]. It turned out to be an [apparent] correlation without a causative link, but we had to wait a couple of years for that to come back - then there was large scale data.
I've been using an HP zBook for a while now with 32GB of RAM and it could be configured up to 64 GB of RAM. ECC is an option too on it.
I have an aggressively atheist friend who tried AA but was unable to deal with the religious stuff.

Thankfully, he's a really persistent guy and worked out a pattern/habit that keeps him sober, but it makes me feel bad for others who feel alienated by the religion thing but also lack the willpower to go it alone.
Note that 32GB is available if you move up to 15": https://bartongeorge.io/2017/01/09/welcome-the-new-ubuntu-ba...
It is a SuperIO chip with on board co-processors that can inspect and modify data transferring to/from peripherals. It is most certainly used for management and capable of being compromised like the ME.
The XPS 15 doesn't appear to use low-power DDR4 memory - it's valid to trade battery life for performance but most users buy the former.
Hey,

Love the website and "Meet the Product and Engineering Team" video. Looks like a fun and interesting place to work!

Are you strictly hiring full-time developers or would you be interested in freelancers too?

Anyway I can contact you directly with my CV?
It used to not be compatible until a few weeks after the release of Firefox Quantum.

It's also been completely rewritten, so it's not the same NoScript that you know. The new UI definitely takes some getting used to and the dev is still in the process of polishing the new UI. And it's also still missing some features compared to the old version, which the NoScript dev wants to have ready for the next LTS release of Firefox (which is going to be Firefox 60), as that's what Tor Browser will be based on, which needs NoScript. On the other hand, the new version has significantly better performance and also works on Android.
Even those don’t expose more than delay slots do they? We have trouble even using those effectively.
A year would be a fairly aggressive timeline. Ultimately SPECTRE et al are just exemplars of a class of exploit that I'm not sure anybody has seriously thought about how to deal with systematically. I've done the "daydream off for five minutes and try to solve the problem" a couple of times and I generally get to "let's design a new CPU from the ground up, using an entirely new set of formalisms"[1] pretty quickly, which is, ah, let's say, not a one-year effort to get it into customer hands. Timing attacks suck.

[1]: By this I mean that in general, our formal systems dump time as a consideration as quickly as they can. The systems designing the CPUs themselves don't, of course, because time is a big deal in making a modern CPU work at all, but otherwise, we dump it as a consideration as quickly as we can, for lots of reasons, like not overspecifying a system and overconstraining it, and because it's really, really hard to keep track of time, and generally doesn't bring value commensurate with that complexity. Having built our stack of software and formalisms without very much thought about tracking time precisely, we generally only once at the very end recapture some time information, when we care, via O() analysis, and generally via the use of a whole crapton of explicitly-approximated values, which for what we care about is almost always good enough.... until timing attacks. Timing attacks suck. I think we're just barely beginning to come to grips with how much they suck.
Still has a nosecam
Which lenovo product would you recommend for a linux laptop?
Then a 13" ultrabook is probably not the right thing for you; search for "mobile workstation" on any of the major manufacturers sites and you'll find ones that can be configured up to 64GB of ram.
This is brutal for all interpreted/JITed languages and all statically compiled languages with dynamic dispatch. I can hardly imagine worse news for performance oriented engineers. And what's worse is that dynamic libraries will probably need to be rebuilt with these mitigations in mind, so nearly everyone will pay the cost even if they don't need it.

I feel bad for all of the engineers currently working on performance sensitive applications in these languages. There's a whole lot of Java, .NET, and JavaScript that's about to get slower[1]. Enterprise-y, abstract class heavy (i.e.: vtable using) C++ will get slower. Rust trait objects get slower. Haskell type classes that don't optimize out get slower.

What a mess.

[1] These mitigations will need to be implemented for interpreters, and JITs will want to switch to emitting "retpoline" code for dynamic dispatch. There's no world in which I don't expect the JVM, V8, and others to switch to these by default soon.
I love the level of integration with this chip. How big is their IC design team?
Well, there's something positive about it - DRM is dead, and backdoors easier to find

Once there is an Expoit in the wild, the DRM solutions will fall like foliage in the fall. And since even basic functions of the OS are now naked and no code snippet can detect a kernel debugger, clever people will find out what, for example, Microsoft is doing.
This update (without motherboard change) did help by making the fans run less often, which doesn't seem to be causing overheating issues or me
My problem is I consider vim to be the best text editor ever created. That is, when it comes to manipulating text, there is no equal. But it's a lousy (even terrible) "IDE". Between editing text and other dev related tasks (searching, diffing, autocomplete, etc), text editing is slightly more important to me, so I use vim. Using another editor/IDE with a vim emulator doesn't cut it. I've never found one that matches real vim. Neovim could eventually allow me to have my cake and eat it too though.
Followup legitimate question: the only way to read data is to control the results of a speculative execution or fetch right?

For JavaScript won't it be sufficient to check all the calls out of it so that they can't pass data that controls an exploitable speculative execution, and also generate JIT code so the JS itself can't create exploitable instructions. The API will have to be heavily scrutinized and the JS will run somewhat slower.

If the rest of the browser code is vulnerable, but the JS code can't control the speculative execution then it should be safe to run any JS.
There is a spectrum between letting everyone in on the embargo and keeping things under wraps. Given it took months for the key players to produce fixes (which Scaleway and everyone else can use), and things were already leaking before the embargo ended, it's hard to say they made the wrong tradeoff.
The $40 Internationally Standard Cup of Tea
Intel ME? Hold my beer. -- Apple.
Another point: I know by first hand that large companies would prefer dealing with a small business than with a freelancer.
SmugMug | Senior Ops Engineer | Mountain View, CA | Onsite | https://www.smugmug.com/

Are you a system administrator interested in helping our operations team solve difficult puzzles that arise when running a fast-moving, constantly evolving large-scale infrastructure? SmugMug is searching for an Ops Engineer to join our close-knit team responsible for operating a SaaS infrastructure serving millions of customers, and managing billions of their photos.

Click here for more info: https://jobs.smugmug.com/Job-Openings?gh_jid=586100
Why you can’t cash out pt 3: Bitcoin is not a Ponzi! It just works like one
My experience is similar to your parent comment - I've never been able to check into a hotel without showing photo ID (I never paid cash btw, always credit card, always in advance and in many cases had the print out of the booking). Same for hip boutique hotels and motels.

There was a free street concert - even for that the road was blocked on both sides and only those with valid IDs could get in.

So yeah, maybe not universal but it happens enough to be a hassle.
If that is the case there are a lot of options that are not ultra portable
look at their foreheads, there's still like blurry half-generated wavey hair texture on their skin.