skysight-inc/HackerNews huggingface dataset:
>Intel CPU do some speculative execution on priviledged data from unpriviledged code, including from (at least some and at least part of) separate following instructions.

That was known since pentium 3 times, I wonder why nobody thought of this as a wonderful exploit target before

>I'm 90% convinced there is no way Intel managed to close all the side-channels on such a complex architecture

This is why one should not use verilog and run formal validation of all and everything related to hdl code
Telegram updated with a list of features for iOS and Android
I was quite macabre in the preteen years. It's not really anger or pain, just another curiosity that emerges at that age.
Can someone explain why they can't apply the same reconstruction technique to the data that would be captured without a diffuser; i.e. why the diffuser is required?
ASCIIFlow Infinity
Why you should compete with more than just your competition
Besides, a lock seems like the last place I would possibly want to power something by battery...
How Japanese students multiply
If I were to look up salaries for those positions in bay area, they would be equal to those in rural Montana? If that's the argument you are making, I have no data to disprove it, so I would have to believe you, but it doesn't seem very likely.
Mobile App Success Story: Shazam
We can make [oxygen from moon rocks](https://phys.org/news/2009-08-scientists-oxygen-moon.html).

There is [water on the moon](https://www.nasa.gov/mission_pages/Mini-RF/multimedia/featur...).

With oxygen, water, and power, we can make food.

Appropriate radiation shielding is a matter of construction, which could occur on the moon itself using local materials ideally, or building underground enough to be shielded.

Moon habitation is something that makes little sense for its own benefit, but immense sense in an orbital supply chain for... I dunno... harvesting a few trillion dollars worth of minerals.

Space exploration will not be easy. Navigating accurately across thousands of miles of ocean on [a homemade raft](https://en.wikipedia.org/wiki/Polynesian_navigation) with only a coconut named Wilson and your hands isn't easy either :)
For employment yes, consultant or contractor (which you probably will be if you're remote) can make double or more. 100 USD/hour is Prague, Czech Republic-level rate for a skilled consultant.
Everything You Need to Design Voice UIs
100W is quite a bit higher TDP than any previous Mac Mini. The highest-power Minis I'm aware of are:

- The Quad-Core Mac Minis from 2011 & 2012 with 45W TDP. (e.g. i7-3720QM)

- The 2011 Mac Mini with dGPU with 35+26=61W TDP. (i7-2620M + Radeon HD 6630M)

Mind you, we can always dream that Apple will care about those of us who have wanted a Mac without a built-in display that fits between the Mac Mini and the Mac Pro.
Yep, and it doesn't adversely affect some people as much as others. Some people can smoke daily until they are 90.

But the truth is coming out about how it adversely affects most people.
In a computer security class I had at Harvard, the professor made the comment: "Your mother's maiden name is considered a 'secret.' Which is funny, given the building we're in."

We were in the Maxwell Dworkin building, named after the surnames of Bill Gates' and Paul Allens' mothers. Their mothers' maiden names were literally carved in a huge stone sign outside the building.
1) Any gems in here, my experience with Packt it that they can be variable in quality?

2) How well do the ebooks display code? Some of Packt's free ones have been horrible on my Kindle
> Doesn't make sense #3: "outdated API modules" was that likely from an educated guess and what does it mean even.

I hope it doesn't mean they lost the source code. Just as bad: did they properly use VCS back in the day? You'd be surprised, I still hear of companies that don't use VCS to this day.
Looks like a perfect fit for the next MacBook Pro.
@rabboRubble, do your parents have a condition a doctor would prescribe opiates for?
I certainly realise that developers (or other employees) aren't, and likely will never be, paid the same despite where they live. I accept that is the reality, however is it reasonable? I don't believe it is at all reasonable to pay developers in India less, if they're able to perform their duties in the same manner as a developer in a western nation.

Developers in India are generally paid less because employers can, which is clearly why companies look to employ staff in India.

As a developer living in the UK, while I don't work remotely (often), if I was in a position to do so and decided I was going to move to India, I certainly wouldn't expect my employer to cut my salary as a result. If they did, I'd be out of the door and looking for a new employer promptly.
No, you actually pay as little as possible to keep the employee happy and working for you. The living expenses move with this lower bound.

More here: https://news.ycombinator.com/item?id=16051409
Show HN: Mine-With-Docker – Mine with Docker Using CPU and Get Paid in BTC
I believe we have already enough evidence, both by the existing web applications and by the other RIA technologies available over the years (Applets, Flash, Silverlight, ActiveX, etc) that this is a very safe assumption to make. There are exceptions to this, of course (i myself made the source code of my 3D engine for Flash written in Haxe available years ago), but those are extremely rare.

Besides the experience the original GP post was talking about and the message i replied to didn't really leave any room for not making such an assumption since they were all about comparing web apps to native apps: " I have been thinking about why we have ended up here, and why not just native apps."

And finally, i do not see WASM being of giving any more control to the user than existing web tech - after all it relies on the rest of the webpage to work, much like JavaScript (actually, it does require JavaScript to act as a mediator - at least for the time being) and considering how you cannot download Google Docs as a native offline application to use on your desktop, despite being able to save locally the JavaScript it downloads on your browser, i fully expect to be the same situation with WASM too.
I've been thinking about gamification, like at StackOverflow and StackExchange. There, talented people sometimes spend lots of time helping others. (To get more reputation points?)

Maybe there could be some "high score" list, showcasing the people who have contributed the most, and also have given a high ratio of Like-vote-upvoted feedback. Then people might want to contribute, and include the high-score-presence in their resume / online portfolio.

Or maybe some people to via sth like Patreon would want to pay talented people in low-living-cost-countries, to spend some of their time at Usability Testing Exchange, helping others.

Do you have any thoughts about this or additional ideas? :- )
Someone here on HN suggested to watch a popular tv-show with the laughs removed from the soundtrack.

When this is an easy and _legal_ thing to do (perhaps a link from the author of that comment to YouTube). I’ll say we’re starting to see a working copyright law.

I’m not sure a perpetual renewal helps with that.

OTOH another issue a new law should address is how to make sure originals of a work are preserved for the public at all. Original recordings of music albums f.ex.

So perhaps a required registration, bundled with a way to save an original work could be a good thing. It would be like the coyleft licenses that require the work in its “preferred” from to be made available.
Yes. The web itself is harmless; it's the stuff you download and run that harms you.
Absolutely agreed. As I posted elsewhere on the thread these insane custom licenses guarantee that you can't use this code for anything serious. Even if you wanted to work on a project as a hobbyist, you can't redistribute this code. So if this guy gets hit by a bus or decides that he doesn't want to release this code any more, tough.

What's more is that as this HN post conveys, there are plenty of libraries like this, many being developed under much less bizarre licenses.

The thing that I find particularly bizarre is that I have a lot of understanding for people who craft custom licenses to make money to support a project (or do dual-license stuff). But this just seems self-defeating. I honestly just stopped reading at LICENSE.

There's also a ton of frisky legal bullshit:

"(11) Should any provision of this license agreement be or become invalid, this shall not affect the validity of the remaining provisions. Any invalid provision shall be replaced by a valid provision which corresponds to the meaning and purpose of the invalid provision."

Ah yes, the old "if my clause is legal garbage, magically replace it by what I meant and enforce that".
The discussion about the future of journalism is based on the idea of quality journalism and the fact that in order for journalism and medias to survive quality needs to be improved.

That's the same in the UK, the US or Denmark for that matter as all of them are struggling with the same issues.
Not GP: I'd guess if you briefly forget that pointers are memory values you'll run into some Fun when trying to re-create a struct and use it as a key.
This largely ignores the fact that research is 90% reading papers (or doing lab work in less pure fields) and trying to come up with something. Fighting for money, writing papers, producing graphs/charts, etc.

Pure maths research is undeniably simpler, but not that much. Look at HoTT (homotopy type theory), or reverse maths (https://github.com/ericastor/rmzoo/). These are sufficiently close to programming - because they are largely composed of programming tasks.

Furthermore, researchers usually don't do work alone, they are usually enrolled in some kind of a program, with a supervisor, mentor, guide, or at least a program/faculty chair. And even if they are totally on their own, they can start doing work on unsolved problems. Usually people new to research start by doing a survey paper for a certain field, to get an overview of recent and past progress and problems, solutions and techniques.

Oh, and this also applies: https://78.media.tumblr.com/41b40230404ccfd7af8a0146ea6689d3...

Yes, 99.9% of programmers would never become the next Tao, cranking out blog posts, books, polymath papers, lectures and otherwise results every few days/months, but that doesn't mean they couldn't do pure maths research. But luckily they don't have to. Because it's a very different realm than programming. (Or even protocol design, IETF work, low level microcode work, or run of the mill mobile apps.)
Anecdotally, I've never experienced remote code execution through a browser either. However, the most widely used browser for many years did have plenty of remote execution vulnerabilities that did not rely on plugins or toolbars [0].

[0] https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
The very first example implies its own counterexample. In most decks of cards there are 2 jokers.
Parsing HTML with regular expressions for fun and profit
Yes, thankfully no web browser vendor would ever do such a thing.
Interesting thoughts, but I doubt Google and Facebook are considering themselves as original creative content provider, as opposed to the like of Netflix and Amazon, that don't seems to fight against these positions.
So this has TWO GPUs then?

Can both be used at the same time?

Would make a nice use case for Vulkan-based games.
Indeed. The key is to never be that developer who leaves all that money on the table. The company you're negotiating against will be happy to take it.
You want to put a delicate-cable factory on an airplane and figure out how to shape all materials from start to finish in 30-second bursts while also compensating for turbulence, additional Gs on ascend, flight adjustments, and proper stowing for takeoff and landing? ...

Oddly, that's the more practical of those suggestions, because forming a few kilometers of perfect glass by letting it cool while dropping would seem to require a tower impressive in its own right... More relevant, there are QA demands with fiber-optics that don't seem to jive with a "let it hit the ground and throw out the lumpy ones" approach, much less the handling while in full gravity (which is where the issues are).
But would those companies need this service? I can hardly inagine they do.
Unlikely. A 100W TDP would mean that it would not be possible to run the laptop for any more than an hour at full load (on battery) or it would draw from both the wall and battery with their current power designs at full load. Also, That would be insane to cool in a MBP format (that's about 2x the thermal output of the current 15").
I hope it isn't bound for the next iMac. There are rumors of a new chassis for the next model but those are suspect in the face of the recent iMac Pro; namely why would Apple want the Pro version to be on an older chassis and therefor appear obsolete?

However if a new chassis is in the works and space is a premium it could lead to an iMac with chips similar to this but that would be disappointing as many are waiting for six core processors. For an Mini, wouldn't that TDP be too high?

Apple has an odd relationship with its desktop models. With the iMac Pro and "promise" of a new mini and Mac Pro there is a lot of hope for a resurgence however short it might be.
No, I think you're being downvoted because you're being hysterical over a browser bookmarklet.
When is the last time you tried Firefox on mobile? Since quantum landed on the Android version, it's become really smooth - comparable to Chrome on my phone (Pixel) at least.
Inside the Eccentric, Relentless Deal-Making of Masayoshi Son
"[]string(nil)" is more verbose than "nil".
Why would a test build ever ssh to production?

If you absolutely need to test connecting to an external system you should mock it or create an environment for testing against.

Your credentials should also be stored as env variables so the test ones are used only for the test environment.
> (And before you ask, sorry, we’re actually not hiring. That’s part of the restraint bit. We have a team of fifty five of the most kind, wonderful, and capable people I’ve ever had the pleasure of working with. That’s all we need at the moment to do what we want to do.)

Did the author just pull a "Cartmanland"? :-)

http://southpark.cc.com/clips/152804/cartmanland-commercial
How I spent my Christmas enabling SSR (react/redux-saga)
“Skunk Works” by Ben Rich.

It’s showing its age a little bit in places, but seems as pertinent as ever.
Scammers gaming India’s overcrowded job market
This is really an interesting idea.

Since the developers who live in cheaper parts of the country/world are now, effectively, paid more than those who live expensive parts of the world, are they not incentivizing employees to move out of the big cities?

I'm also curious about traveling expenses. I don't know if they do or not, but if they had an "all hands" meeting in Chicago, would they fly their employees in from all over the world? If so, do the people who live 10 blocks away from the office get the same "travel voucher" as those who live 10 hours away?
I think the addition of the diffuser adds the 'depth response' to the camera. Imagine that you had two point light sources located some distance away from the sensor such that one is directly in front of the other. They're magical point light sources so the light from the rear one just passes through the front.

If you didn't have anything in front of the sensor, there would be no way to distinguish that there are two point sources, as opposed to a single point source with a non uniform output.
That is not argument I am making. The difference in salary is in negotiation power, not in need, as shown by people who earn less while living at same location. Need is the same for janitor and programmers, however programmer have other employment opportunities and is more scarce resource.
Hacker News Guidelines

What to Submit
On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity.

Off-Topic: Most stories about politics, or crime, or sports, unless they're evidence of some interesting new phenomenon. Ideological or political battle or talking points. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic.
RA does not have as many active players as CS. They may mean that it's the business calculation of (no_developers * time * salary) > potential loss.

Either way - hard to figure out what's the move and agenda is about from a single paragraph from a forum post.
Thanks for this comment. I wasn't aware of the iron law of prohibition but it makes a ton of sense. The higher the risk, the more you optimize your supply chain to minimize physical contraband in travel, which means optimizing for product value per weight.
AI in drug discovery is overhyped: examples from AstraZeneca, Harvard, Stanford
Time's Up: 300 women across industries launch against sexual harassment
Sounds reasonable. They basically proved that the worse possible lens they can manufacture can still provide the information they need. I have no idea what the size of the relative trade offs involved are - ie, if you loosen the tolerance of your lens manufacturing by X%, what increase in computation is required. Exciting times!
This might be the first time anyone has ever said “Luckily my mother is a psychologist...”
The Disruptive Technology of Visual Claims – Video by Achmea (Dutch)
We use the same kind of traps in some cities in Denmark, and I think it was invented by a Dane as well. They are incredibly effective at preventing the rats in the edges of the network, but sadly they do nothing for the main sewer lines. We need AI and lasers for that, but that is far in the future.

The main benefit is that you know how many rats it have killed. And once there isn't more rats you can move it to a new place. You can get it for sewer lines from 110mm to 250mm I believe, so fine for the sewage lines that go into your property. In fact it's a cheap investment to guarantee that rats cannot enter your property through the sewers.
It's not lobbying, it's the model under which airlines operate. When airbus started to develop the A380 they assumed that hubs would become more important and airport capacity scarcer. Instead, there are more point to point connections now (mostly by low cost carriers) where A380 isn't profitable. That has helped Boeing's Dreamliner but also the A330 and A320 range. Boeing also spent some money developing the B748 and weren't successful, it's not as if their forecasts were very different.
wonder no more
Ask HN: What's cheapest way of storing 100 billion entities daily?
I simply want to store/delete/retrieve an entity by its key only, where value will be UUID+timestamp. Performance is not an issue, sub 5 minute op time will work just fine.
The thing is, willing to live in a bungalow might be a competitive advantage, all other things being equal (and maybe even if they are not, sadly).
To be honest, at most hackathons I get laughed at because I use a "bloated" Visual Studio....and then they show me there vim/emacs editor containing like a thousand plugins - like this isn't bloated. And in the end they look like Visual Studio. The look I get when I tell them that Visual Studio and most other IDEs have a Vim Plugin is also amusing. Finally I say that emacs is better than vim and watch how they flame each other....
And these aren't even obscure, fly-by-night titles. Command an Conquer 3 and Red Alert 3 were AAA titles, no matter how tarnished and moribund the franchise is today.

They aren't particularly old titles, either... maybe this is just me, but most of my gaming time is on DX9 games older and more obscure than that. I'm not in the market for a new GPU now, but this wouldn't encourage me to switch from Nvidia.
Tesla's enormous battery amazes in quick outage response
For a moment I thought they could manage to have something like the ESPER machine in Blade Runner.
I have dev teams in several locations in Europe, one in India, and one in the US. Speaking specifically of the India developers, they are fully qualified and, given equal conditions, I believe they could perform in the same manner as a western developer.

From the company's perspective, the conditions are not equal, try as we might (and do) to make them so. They are working on the other side of the clock from much of their peers and technical leadership. They are 18 hours of flight away when it comes time to visit on-site. They spend more time, on average, commuting to/from work. They face weather conditions that preclude reliable commuting several weeks per year.

They face disadvantages inherent to their location and related to the fact that their location isn't the HQ. It's not their fault, but to make the economics make sense for the company, they are paid well for the local market, but less than the Bay area market. If wages in India were Bay area wages, we wouldn't have started new dev teams in India.

The condition of one experienced dev moving away to a different location (I don't care whether higher or lower cost) is different from trying to build a de novo team in a different location. You take with you the experience and relationships you developed and that makes you different from your hypothetical identical twin who is applying to work remotely from wherever you are contemplating moving.
Weird how they include an HD 630 on the die. This eats up a fair chunk of die area, and eats into the thermal budget. It also means that the displays will probably be wired to the HD 630, so the Radeon can power down to save power. Taking out the HD 630 could have lowered the power usage to a level more palatable to a laptop computer at full blast.

This means that you have to pay a penalty to use the Radeon to render, but send its framebuffer result back to the HD630 for displaying. This is also the case current Nvidia Optimus or AMD Enduro systems. Draw backs from this approach are frame tear / lack of proper V-Sync and added latency.

If this ends up being used by Apple however, it is likely that a hardware demux will be used to connect the display to both graphics chips, and switch it back and forth on demand. Other vendors don't do this, because it is more expensive, and passing the display from one GPU to another requires the pixel clock rate (among other details) to be shared between the different GPUs, which is not something that the vendor driver (Intel/Nvidia/AMD) stacks support.

Note that such a hardware demux is used in previous generations of MacBook Pros, and it is not publicly documented, which means very poor and/or very late support in Open Source operating systems such as Linux.

Some system builders (Lenovo and Asus have done this, probably others) wire the internal display of laptops to the Intel GPU, and the external HDMI/DP to the discrete graphics. In the past, this allowed you to power more displays (when Intel GPUs were restricted to 2 displays max), and it still allows you to avoid the Enduro/Optimus hassle for external displays, when you are likely to be powering the laptop with the A/C adapter anyway. It also meant that vendor/OEM specific drivers needed to be used in some cases, though.
In my experience employers often pay less than it takes to keep the employee happy and working. Most of the full-time jobs I've quit have been for pay and little else.
It does. You must have screwed up somewhere else. Segwit 2x had no replay protection, and hence was contentious.
I've seen your project before, amazing! keep up the good work.
That's how you won't be whining about "talent shortage".
programmers who are intrigued by the recommended pg_hashids extension have a wide variety of alternatives to using a pg extension for the same key obfuscation logic: http://hashids.org/