skysight-inc/HackerNews huggingface dataset:
So is backing up most of your Mac.
Kingdom of the Wicked: An Alternate History with a Roman Industrial Revolution
Found a new 23M long Prime Number
DeviceJS – JavaScript for the physical world
The value of the long tail has been oversold I feel.

My estimate based on my own usage for the past year and a half or so, of curating my own local indexes is about 30-40 million docs. This is the equivalent of having your own personal Library of Alexandria (text and images no video). I don't have numbers but I work offline a lot and my guess is 70-80% of my queries are probably getting satisfied by my local dumps.
After updating to High Sierra, OmniGraffle, an app that I use fairly regularly, stopped working. The only available solution was to buy a $50 update to the latest version. At least Omni Group should be happy about macOS 10.13.

In Omni's view, my software was hopelessly outdated... But in reality it worked just fine for my needs even though it wasn't the latest version. I had bought the license in November 2009, so exactly eight years before Apple broke it for good.

Microsoft would never break compatibility with a major Windows app from only eight years ago. I've accepted Apple's hostility towards older 3rd party software in exchange for a sense of forward momentum in the OS, but that pact seems to be history now with High Sierra largely feeling like a step back.
Thank you. But here are my concerns:

* If I go ES6 I'll require all people importing it to also use an ES6 module bundler -- which means Babel only, or Rollup, which never works.

* If I precompile and expect non-Babel people to use the precompiled then these people will have duplicated dependencies everywhere.

Not complaining, but all this compatibility mess seems hard to me. I use Browserify!
I switched to Linux running on ThinkPads (between work and my personal laptop I have a Carbon, T470s and a T450). I have generally found ThinkPad hardware is very compatible with Linux.
I had an option to click "not now" to dismiss.
I recently bought a ThinkPad X1 Carbon. I'm pretty happy with it.
You need to up your crap-blocking game. This bookmarklet can help:

javascript:(function() {
(function () {
var i, elements = document.querySelectorAll('body *');
for (i = 0; i < elements.length; i++) {
if (getComputedStyle(elements[i]).position === 'fixed') {
elements[i].parentNode.removeChild(elements[i]);}}})()})()
Darn! Just when I invested a lot of money and mastered Deep Learning!
It's not that hard. I don't browse the web from my computer. To look at pages, I send mail to a demon which runs wget and mails the page back to me. It is a very efficient use of my time, but it is slow in real time.
Ask HN: How Is Google Analytics So Damn Fast?
It updates in real-time, it certainly can't be using bigquery as I see every query in bigquery takes atleast 2 seconds. So, how is it so realtime?
The Extraordinary Life of Nikola Tesla
So it's still just neural nets? Cool -- we've seen that before.
The cryptocurrency with a $250M war chest
The only way to exploit these vulnerabilities is to run code on target machines. If that's not possible then the vulnerability is irrelevant. Using firewalls to keep attackers away from your vulnerable machines is a viable strategy in this case.
Are there any GDP alternatives or variations that attempt to give more weight to socially-positive output and less weight to anti-social output?
Thinkpads.

I moved from Windows 7 to Debian 8 a year or so ago and have never looked back (except for the Adobe Suite...)

I use an OSX Macbook Pro for my 9-5 and have been avoiding High Sierra forever - it's just a slap in the face.

At least I know my Debian 8 box will almost always operate as expected - even through a distribution release. I need stability from my system, and there's just no other option anymore.
Well this is purely anecdotal, but at least 70% of the developers, IT workers, and researchers that I know are using prior generation MacBook Pro hardware (the ones without the touch bar or terrible keyboard, and with ports) and are intentionally using the older OSX versions.

I know several people who traded in 2016/2017 models for 2015 models because it's literally an upgrade; get an older machine and you suddenly have usable ports, a keyboard that works, and an escape key, what a luxury. I also know a fair amount of people getting Thinkpad and even Surfaces.
True. It just becomes a new number to game.
How Ubiquiti Networks Is Creatively Violating the GPL (2015)
Case law seems to confirm that: http://www.e-lawresources.co.uk/R-v-Lloyd,-Bhuee--and--Ali.p...
Cache timing goes back to at least 2005 with Osvik and Tromer. This isn't a simple cache timing bug, though.
CRISPR Might Not Work in People Due to Natural Immunity
Remember back in 2017 when Deep Learning wasn't legacy? Those were good times
Those updates cover Meltdown and Spectre 2, not Spectre 1.
When sort is used on really large files, it will automatically attempt to use disk, putting temp files in TMPDIR. This can be really slow.

To overcome the slowdown of disk I/O, perhaps a workaround could be to use mfs or tmpfs, maybe something like:

mkdir /dir
mount -t tmpfs tmpfs /dir
TMPDIR=/dir sort -k2 -k1 -k3 contacts.tsv
TMPDIR=/dir sort -k1 -k2 -k3 contacts.tsv

Personally, I gave up on sort for large files and use k/kdb+. I suspect it is faster for sorting than sort or the Go libraries, but I could be wrong.
While we're at it, can we stop talking about the Dow Jones Industrial Average?
You're attempting to put words in my mouth that I did not say. If you want to show compassion volunteer or donate to those shelters or organizations.
Despite the flaws it still provides a more consistent experience than Linux (especially on laptops). I just wish Apple put as much love into MacOS as they do into iOS. Also there is a lot of proprietary software like the Adobe suite + Music production software that is only available on MacOS or Windows.
For some, it's just a matter of social anxiety and basic privacy. If you don't want people to see youporn suggestion in you address bar, you don't have to bother with Tor – incognito window is good enough.
I think the guy was just priced out.

Companies ought to be more upfront about their salary bands. It's pretty unreasonable to have candidates jump through a phone screen, complete a homework assignment, then travel to come meet in person for the whiteboard pain session before they know if a company can even afford them. I see more companies getting this right lately but we have a way to go.

Otherwise, it can be a huge waste of everyone's time. In this case it sounds like whoever negotiated didn't even have authority to make a deal, which is a pretty big flub on Canonical's part.

The other possibility is that one of the interviewers didn't get feedback in before the negotiation. That would still be a process fail.

A good developer/SRE should basically be able to justify her expense and essentially write her own check, splitting the value capture with the host company. Things are way off and asymmetric in the current hiring practice.

Thanks for posting. It's understandable to be upset here. More companies with bad interview processes should be outed so that they can improve and the rest of us don't have to discover them on our own.
Interesting idea but this part made me cringe

"Just because you think DICSS is amusing, doesn't mean you want your boss to know about it. How about your SO?"

If you are writing code you need to hide from your SO you have some serious relationship problems.
4.proffit
Yup. I hit the same bug, just a few hours ago. Was compiling something and had htop running, then everything froze. I assumed it was the build and after a hard reboot started compiling again but this time without the htop and it finished fine.
I don't think it really is hopeless. But what makes Spectre 1 "scary" is that it's situational: you want to serialize instructions predicating some loads --- unbounded offsets based on attacker-controlled data --- but all of them. You presumably don't want your compiler to lfence every basic block containing a load.
I don't understand it.

If you are a project maintainer on GitHub, how could you accept a PR from an anonymous user? Let's say you accepted it, and later some company said that the code from that PR is "stolen" from their code base, and that's true, how do you deal with that?
FreeBSD 12(current) on a 2017 XPS 13 has been great for me. Funny thing is I never imagined buying a dell laptop. I was going to purchase a new mac, but the touch bar killed that for me. So far so good with the XPS 13.
Yeah, high precision timers aren't a fix-all. Imagine a loop where you test a single bit of some protected memory. If it takes microseconds to determine the value of that bit that's really bad, but even if it takes milliseconds, seconds, or even hours that's still really bad. This is equivalent to how fast an attacker can download your system's memory during an attack. If that rate is mb/s that's catastrophic, if it's kb/s that's still super bad, if it's bits per day that might be enough to mean that only the highest value systems will be targeted, but that's a far cry from actual security.
Hey! Thanks for posting. I'm Jeremy, one of the founders. We've been purposely quiet as we build out the core of the product. You can imagine the effort it takes to build out a secure and scalable infrastructure for a bank account. We've got a handful of customers testing the product now and plan to open it up to a wider beta in the Spring.
I’m not sure about that. A lot of people purchase run down homes and renovate them, often selling these homes for good profit. That’s not due to the increasing value of land?
This seems to require user input

"In our solution, developers annotate the functions perform-
ing sensitive computation(s) that they would like to protect."

and assumes that the cache timing is used to gather info on a secret function, so it does not consider the usecase of dumping everything a process can see?
I understand the frustration but it seemed like you're overreacting: it's not hard to install Ubuntu, in fact it's preferable (if you ask me) so you can choose packages.

I also don't think it would void support - then no one could re-install. And how would they know you re-installed anyway?

Honestly Linux might be a pain for you to use day-to-day if installing from scratch seems like a big chore; either that OR you're misreading how Dell support would react. The third possibility is that Dell support is disastrously bad, and fragile, and no one should buy Dells. I'm slightly skeptical of option 3.
I’ve been disappointed with Apple’s response to kernel bugs for quite a while. Closing a large number of ptys at once caused a panic for years. In high Sierra, there’s this, statfs hangs, and proc_pidinfo hangs.
An especially unfortunate truth is that many developers have grown so afraid of workflow-breaking bugs that they're willing to risk security flaws just so they can get work done.

The things I would do (and pay) for 2010-Apple tier hardware built for CentOS in both laptop and phone form factors...
A Short Introduction to Implicit Computational Complexity [pdf]
Can you point out where I dismissed anything?

PostgreSQL has a write-amplification issue — especially when you index every column on a table. My point is: if you don't do that, it doesn't hurt.
Off topic. Yann LeCun really looks like Michael Moore who looks like Peter Griffin.
I don't see that the underlying concepts have changed very much from your examples, or that there are even many (any) new (as less than 25 years) old ideas are in there.

The tool isn't the skill, and honestly I don't want to work somewhere that values "x years using y" over "thoroughly understands concepts behind/around y".

I've been in IT since the late 90s, only development the last 5 years, but knowing how protocols work and what makes systems/architectures reliable gets way more play in my day to day job than knowing whatever the current tech is.
This reads as if a poisoned CPU cache can indeed leak secrets and has been known for many years now? Am I reading that right?
Smallpox also doesn't know the difference between Joe Blow and Mark Zuckerberg. Humans have the ability to pick the most valuable targets and concentrate resources on exploiting them.
> Microsoft would never break compatibility with a major Windows app from only eight years ago.

Microsoft is nearly pathalogic in this. I still run some programs I bought for DOS today on Windows 10, because they're COM files. Still works the same.

Apple has always broken things on the other hand, but with the promise of a stable system. Which, having upgraded to High Sierra, is long gone. This feels almost like the early days of Linux. I've got WiFi breakage, graphics driver breakage, occasional filesystem breakage, and several really concerning CVEs that have come over the last few months.

Never thought I'd see the day when I call Windows more stable than a *nix.
Of course, "these days" (scine ~2014 by my reckoning) AI is synonymous with Deep Learning (in the lay press anyway) but there are actually other techniques still being researched, specifically theory- and knowledge-driven techniques, from the field of symbolic machine learning.

Such techniques have long been used in medicine and biology with great success, very notably in the example of the Robot Scientist, a system that automates the scientific process end-to-end, in a biology context.

This is from the abstract of the Nature paper, from January 2004 [1]:

The question of whether it is possible to automate the scientific process is of both great theoretical
interest1,2 and increasing practical importance because, in many scientific areas, data are being generated much
faster than they can be effectively analysed. We describe a physically implemented robotic system that applies
techniques from artificial intelligence3,4,5,6,7,8 to carry out cycles of scientific experimentation. The system
automatically originates hypotheses to explain observations, devises experiments to test these hypotheses,
physically runs the experiments using a laboratory robot, interprets the results to falsify hypotheses
inconsistent with the data, and then repeats the cycle. Here we apply the system to the determination of gene
function using deletion mutants of yeast (Saccharomyces cerevisiae) and auxotrophic growth experiments9. We built
and tested a detailed logical model (involving genes, proteins and metabolites) of the aromatic amino acid
synthesis pathway. In biological experiments that automatically reconstruct parts of this model, we show that an
intelligent experiment selection strategy is competitive with human performance and significantly outperforms,
with a cost decrease of 3-fold and 100-fold (respectively), both cheapest and random-experiment selection.

There's more info and especially links in the Wikipedia article [2].

_____________

[1] Functional genomic hypothesis generation and experimentation by a robot scientist, https://www.nature.com/articles/nature02236

[2] https://en.wikipedia.org/wiki/Robot_Scientist
“This Is a Story About Nerds and Cops”: PredPol and Algorithmic Policing
They should have mentioned this earlier though. It seems pretty unprofessionally handled, and return he's being about as professional.

It's better to rise above things, but sometimes it's more evening to give what you get.
For fun, I took a "happy medium" approach in KnightOS. Programs are written with RSTs (basically the z80 version of traps) next to each instruction with a relative address, then the kernel looks up the return address on the stack, partially decodes the next instruction, and then modifies the code in RAM to update the address to the correct one. It's basically just-in-time PIC.

https://github.com/KnightOS/kernel/blob/master/src/00/restar...
The principles of Forth sit at the bottom of most languages, though most like to keep that power to themselves. And I've always felt that the Forth language suffered from being so damn dogmatic and protective about the obvious lack of convenience. As an added bonus, it makes a nice contrast to the current trend of crippling languages ever more to protect people from themselves.
But she gets her job done and probably very well. The point is that you gave _everyone in the company_ the ability to contribute to the product.

If you do that, you are communicating to your employees that everyone is welcome to make contributions to the product. If not, why the f* would you do it?
What value does a cryptocurrency bring that cash does not?
You'd be surprised.

I've done a mix of contracts and perm jobs. Had one interview say that, and the next interview it was seen as a plus and was hired.
Nope. Just use a VPN/Tor/whatever to create a GitHub account and push commits with nobody@example.com
Very cool thank you! Also prewitt and Travis above and below..

Mortality rates..
Got it ,:-$ so, marketing for 7th floor Homes with kitty life policy in the service charge bill technically not the Blatant fraud I assumed, and if the building manager had run into trouble the lives of many injured kitties luckily lookalike to the residents could be the hardest sentencing hearing for any animal lover judge. English cities badly need dog license reintroduction. Asked to help a former neighbor become tramp beg court to return his dog. Second I met the man, who certainly was denied due process and on paper atrociously mistreated, he introduced the dog, unknown potential dominant bulldog mongrel, getting it to l so and lock it's jaw on his agitated arm. I passed him again, alone in rain, dog coat sodden, he was high and drunk careless no train still disgorge the fool he requires. Dogs need sorting out in London before brexit chaos
> Why can't I collapse comments

Features like this could easily be a declarative feature in HTML. e.g. something like:

<div class="comment_wrapper">
<action type="show,hide" for="foo">
<img ...> <!-- or whatever -->
</action>
<div id="foo" class="comment"> ... </div>
</div>

Unfortunately, development of new HTML features like this mostly stopped when a major browser developer decided to try to fight with Microsoft for the desktop/mobile markets by changing webpages into software.
I have always wondered why people bother with non-htop apps, when htop is so nice already :)

But more seriously, one of the big advantages of htop is that it is extremely lightweight, which helps a lot when you have other processes that are eating up all your CPU and RAM.
Bummer. Coincidentally, I just (about an hour ago) purchased a bunch of license for Transmit 5 Mac -- fantastic product. I've also been a Prompt and Transmit iOS user since release -- also great products.
I know someone who works for amazon and he said that they didn't need to do anything or buy any more servers.
>if it's not possible to run code

We are doomed
There should always be transparency in this kind of situation, so that - at the very least, the person can address the issue going into the next interview.
Paper Scraps Recovered from Blackbeard's Cannon
Wow. You just merged my professional life and my personal philosophy!
A large amount of countries already exist that do that. Cancer treatments can easily cost that amount depending on the cancer, never mind some of the more esoteric diseases. You argue that it's easy to 'fraud' the government in this case, ignoring the amount of regulation and steps that have to be taken in order for a treatment to actually be put into practice.

And you conveniently ignored my point on how what you suggested is essentially advocating for people to die if a treatment is too expensive.
Conventional thinking is that if a malicious user can run code on your system, you've lost. In that sense, this is just another local exploit, of which there are many.
Steel bikes don't have to be heavy but cheap bikes usually are. A good steel bike might weigh 19-20lb (compare with a medium- to high-end carbon fiber bike that is 15-17lb) while the frame is only 3.5-4 lb of that total. The rest of the components make up a lot of the weight and to save weight there you have to spend more.
This is all already true for Javascript, wasm doesn't change that much here.
That sounds like operator error to me. If you (the general "you") use a database in production without knowing what sorts of maintenance it requires, that's neither the database's nor its authors' fault.

I guess you could argue the tool is somehow "flawed" for needing maintenance. I'd counter with the invitation to show me tools that don't.
Transatlantic flights average 75 mpg per passenger, but can be up to almost 100 mpg per passenger:

https://en.wikipedia.org/wiki/Fuel_economy_in_aircraft

Jet fuel is 37.4 MJ/L; compare to gasoline at 34.2:

https://en.wikipedia.org/wiki/Energy_density#Energy_densitie...

An electric car will have up to 150 miles-per-gallon equivalent (aka 150 miles per the same amount of energy that's in one gallon of gasoline):

https://en.wikipedia.org/wiki/Miles_per_gallon_gasoline_equi...

So therefore, an electric car with just the driver is more efficient energy-wise than an airplane, while an average airplane is better than a gas car with even three people in it.
Never heard of DICSS, very disappointed there isn’t a CODE_OF_CONDUCT.md.
But how will you mine bitcoin or whatever for your favourite website then?

/grumble
Couldn't agree more. A technique should be judged by its usefulness. Not by its catchiness.
The third edition is still fairly current. So to speak.
Amazon's email service is extremely cheap [1].
I don't think you can go cheaper than them?

https://aws.amazon.com/ses/
If you expect to understand identity in 10 seconds, you don’t even know what you don’t know.

You know how we hear about dopey password disclosure breaches every month? Using a service like Okta, Azure AD, etc lets you avoid that type of embarrassment/liability and lets you control the dozens of SaaS and other accounts that your employees use.
> TPMs ... Google is quietly working to remove them from their own machines

Are you referring to Chromebooks or Google's cloud server hardware? Are the TPMs being replaced with a proprietary hardware enclave?
There were GPU issues with 2011 MBP machines. There was a class action lawsuit. I had to bake mine (well, the logic board) in the oven for 7 minutes. Plus i forgot to remove the speaker which melted so that cost another $15 to replace and was an overall unpleasant experience.
Do they not need a warrant? Please correct me if I am wrong.
Also anecdotal, but this is also what we're doing at our company too. Most of us have the 2015 era Macbook pros, and run a split between 10.9 and 10.10. Others that aren't using that gen are using Thinkpads with full keyboards on them with Ubuntu.

It's not ideal, but our environment is rock solid for what we need, and newer software that we need still supports us just fine.
Leveraging Bots for Success on Hacker News
While it's true you can't have 0% unemployment in a free market, going from, say, 8% to 5% is a big deal that helps in a lot of ways.

30% unemployment, the way it's normally defined, means 30% of your population are looking for jobs and unable to find them. Which is an unmitigated disaster.
Besides the "hiding" strategy (bots hide themselves under the windows clock. It's a wonderful world out there), I'm afraid it's unlikely you'll notice. Reliability of modern consumer software ain't all that great.
Really love how Panic handles things as a company. Always fairly transparent and top-notch.
http://archive.is/BKrvv works for me
Titcoin
https://en.wikipedia.org/wiki/Titcoin
The free tier of Mailgun has significant delivery problems because those servers have a poor spam reputation.
You are wrong. Airports are not in the USA, so USA laws don't apply there. They can do whatever they wish, but they obviously generally act along the lines of acceptability. Please correct me if I am wrong.
This includes fully sandboxed code, however, which is an important distinction. The fact that a driveby javascript exploit could potentially result in leaking every important secret from your system (logins, encryption keys, what-have-you) is why people are taking this so seriously.