skysight-inc/HackerNews huggingface dataset:
I tend to agree. I've lived in Indonesia - when the Nike plants paying several cents/day and had hunreds of people line up for those horrible jobs that Americans were boycotting Nike for.

I've seen the jockeying at the line any time one of those factory workers committed suicide.

But does not that make us wonder if we could do better? (I'm not an equality warrier - more of a let's do better down here warrior - and I have to say Nike does pretty good in that regard)
I hate to be the bearer of bad news but Lenovo ThinkPad support absolutely blows, too. I had next biz day support and a battery in my T460s died. It took two weeks of calls and emails and tweeting to find out that the replacement battery was backordered. Weeks later, I got a replacement laptop, a P50 that I had to pay extra for. Fuck Lenovo support.
How to provision an ECS cluster and run a service on it
The UN is so much more and if you spent any time with them like I have you realize how absurdly wasteful it is as a system.
>>Who voted for Kalanick? What gave him the right?
>You could say people voted with their wallets.

Money should never overwhelm the will of the people. I say this even though I hated the way taxis used to work, with the artificial limitation, and I love a chance to take a much more convenient app based ride, I really despise how they got away with violating at least any standard of reasonable behavior, but also they were apparently violating the law literally - one example being paying the hackers not to hack and not telling anyone.
> If you are a Java (or Kotlin, or Scala) developer who used to write back-end code, TeaVM might be your choice. It’s true that a good developer (including Java developer) can learn JavaScript. However, to become an expert you have to spend reasonable amount of your time.

Oh, this is nice. I finally have a reason to give Kotlin a go. I have some time off and want to write something basic. Pretty excited about this, Rust, and all things wasm popping up.

I am, in no way, excited about debugging it, though.
I'm in the same boat. Things are complicated by the fireplace and chimney being in the middle of the house.

I used an TP-Link Archer C-7 as the main router and an Apple Time Capsule as access point and backup connected via Powerline. Getting inconsistent throughput in the house. Tried moving the Time Capsule around but have knob-and-tube wiring in most of the house and GFCI circuits most of the rest.

Broke down and bought a Netgear Orbi because they have a dedicated 5GHz backhaul circuit. Now I have fast internet all over and the Time Capsule just does backup.

I tried Luma but they don't have the dedicated backhaul circuit and it was impossible to get the satellites set up and operating smoothly. I tried a smaller Orbi setup with the satellite that plugs into the wall but had problems with the satellite losing the connection to the router.
Meltdown is mitigated by kernel page table isolation. See patch notes/ the attack paper
Are they really though? Violence, and the threat of it, is literally what keeps society together at all, and what enforces all of our laws.

Kind of sad to read this thread and see everyone sitting on their high horse thinking they are amazing people for being non-violent while this guy gets away with what is probably worse than murder. When did humanity ever reach such a pathetic state where we let people just walk over us like this?

You think Reddit posts and Hackernews posts are going to ever change anything? These people are probably just laughing at us twiddling our thumbs pretending to actually do something.
Making a profit isn’t a fair standard in this case. I left LA recently, but uber made social interactions in that city I’d otherwise pass on totally possible. It honestly opened up moving around LA County in a way that public transit never could. So, no, it’s not too early to judge. We’re already seeing the benefits.
Ha!

You are funny. Please show me the regs via which this is as possible as you suggest.
No, it doesn't.

For example, in a DMCA takedown notice the only thing asserted under penalty of perjury is that you are, or are authorized to act on behalf of, a copyright holder. And YouTube doesn't even use the DMCA system; it uses its own separate terms-of-service-governed system.
I’m agreeing with you, if you can’t tell.
Is it just me or do AE4 and AE11 have the same description (REP MOVS crossing pages of different types) yet completely different classification/impact?

IIRC this behaviour is now documented in the official manuals as "by design" since it was like that since the P3.
Does the Ethereum VM have branch prediction or speculative execution. I'm not sure how you'd construct a side channel of this nature against it if it doesn't.
ugh, I checked some of them, and most of them suggest accessing protected memory.

I believe that Intel didn't believe that these bugs suggest a fundamental issue that can be exploited, until Google Project Zero created a working exploit.
There’s a flaw in this thinking that conceals a subtle but inherent paradox that should serve as a signpost. Him not selling some shares regularly according to the pre-arranged plan would function as a marker that there’s trouble on the horizon and would scare investors into pre-emptying the drop in value with stock sales. That’s the whole point of awarding shares and announcing a sale plan ahead of time and sticking to it come what may: it avoids leaking information into the market (as per the more stringent interpretations of the Efficient Market Hypothesis). It’s also why the market didn’t follow suit after his sale and take a nose-dive on the suspicion of trouble: because since it was pre-announced and known it added no new information. As the article notes: he’s an engineer and can do the math, and quite surprisingly what he did was (also) the least harmful thing he could inflict on his fellow stock-holders.
“Transpile” is a proper subset of “compile”, where both the source and target of compilation are languages designed primarily for direct human editing (source code); it is source-to-source compilation.

Using the term for anything where the source is JVM bytecode is plain wrong, and it's also dubious for anything targeting WebAssembly (though if the target is specifically .wat/.wast, it may perhaps be arguably defensible.)
Not including stock. Just thinking back to last time I solicited job offers I live in a US metro area with a cost of living about 1/3rd less than SF according to Wolfram Alpha's data and got offers that ranged between 120k and 220k. Anecdotally most of the senior level engineers I know in my area are making between 150 and 200k. Adjusted for cost of living an employer in SF would need to pay something like 200 - 300k to just match their current salaries. Maybe the stock portion of a salary would make up for that difference but I don't see how they are competitive in the wider market if they are paying 150k for senior engineers.
If your situation is anything like mine, it goes much more like: "oh, neat; I'll look at that tonight" followed by a browser bounce, or something else becoming a bigger priority, lather, rinse, repeat.

There is so much great content -- both "empty calories" and otherwise -- that it is so easy to get buried under it. I came to HN to retrieve _one specific link_ and ended up with 7 new browser tabs open, counting this one.
I don't see how this was "intentional homicide". Who can say what his intent was? At the high end he was hoping for a homicide, but at the low end where cops don't shoot unarmed people for touching their pants, maybe a bit of inconvenience.

Shooting someone yourself is intentional homicide.

Really it's ridiculous to me that some people are blaming someone else for an incompetent trigger-happy cop.

Throwing out my own analogy, it's like someone prank calling a hospital to tell them they have cancer, then a doctor killing them with chemo without doing any tests to verify they actually have it.

At some point you have to hold trusted professionals responsible for actually doing their jobs properly.
A compiler is a program that turns programs in a source language into equivalent programs in a target language.

It is generally assumed that a compiler goes from high level to low level, a decompiler low-to-high and a transpiler high-to-high. I guess in this case the transpiler is low-to-low, so maybe "transpiler" is just used to mean "samey-to-samey"
It's congress' fault, not Sessions.  He doesn't make the laws. #legalizeIt
Does this article call for (more) market regulation?

Not that it would be a bad thing just figuring out what is the take-away
I wonder if the terminology of blocking specific exploits vs fixing vulnerabilities is intentional.

Even the "facts" page consistently uses "these exploits" and says stuff like: "These exploits, when used for malicious purposes, have the potential to improperly gather sensitive data. Intel believes these exploits do not have the potential to corrupt, modify or delete data."

Is this lawyering so they can say they never claimed to have addressed the vulnerabilities?
5. Find out it doesn't work.

YouTube's enforcement system is not set up to treat every actor in it equally. It's set up to favor big rightsholders like record labels at the expense of everyone else. So your attempt to get all those videos demonetized, or get copyright "strikes" on the big labels' accounts, isn't going to succeed. Notices filed against those accounts probably go into a black hole (and you have no DMCA remedy, because YouTube doesn't use the DMCA system, requires you to use that system as part of its terms of service, and so isn't obligated to act DMCA-style on complaints filed through its separate non-DMCA system).
I assume "javascript crowd" knows how to compile their node binary. Thus, they know the distinction between babeljs and gcc, and therefore they know the distinction between compiler and transpiler.
And can you name a few real world examples?
Please do share if you can, I've been thinking a lot about this topic in context of ops / "janitorial" work in general.
OK, so that sounds like it would work out well in the case of ordinary fraud. You notify the bank in timely fashion, and the bank covers it.

But in the case of the bank being hacked, I could imagine it affecting enough accounts that the bank cannot cover it. Would that count as the bank failing (or perhaps a run on the bank?), and so then be covered by FDIC insurance?

Finally, suppose the hack is a case of financial terrorism. Say, a state sponsored group is trying to undermine confidence in the banking system and so wants to be as disruptive as possible. Instead of just getting in and stealing some money, they have been in for months and have been sabotaging things. They mucked with the backup procedure to make it so the backups are corrupt, and the bank unwisely did not do actual restore tests on samples to check things. Finally, the hackers set everyone's account balance to zero (or more fun, delete everyone's account).

So now my bank has no idea how much money I'm supposed to have (or even if I'm a customer). They fail and FDIC steps in. Do the banks have to periodically give the FDIC or other regulators lists of accounts and balances, so that FDIC would be able to at least figure out things up to the last month, say, or would the FDIC also have no idea who gets what?
I can't imagine listening to the audio, but reading the transcript is nauseating due to the frequent occurrence of the work like.
My point exactly!
> They can a handle a bit of criticism from a bunch of nerds on HN.

It was a tongue-in-cheek response to OPs statement that we should feel bad for Intel and offer it help. I suggested that it needs help drafting a better PR release that's a bit more honest and straightforward.

> Can they handle the loss of faith from big companies?

With a $200B capitalization they certainly can.

> Seems to me that AMD et al have now got the perfect opportunity to erode

Agreed. The next step is to see if any of the large cloud providers or PC manufacturers will announce they are buying AMD CPUs. I hope because I'd like to be able to buy cheaper CPUs and have more competitors in the market. But realistically I kind of doubt it. At the end of the day INTC's stock hasn't moved that much. The performance hit as reported by Google didn't seem to as big.
What's the distinction between Compile and transpile then? and is this distinction agreed upon and meaningful?
Ask HN: What are tips to make my code more straightforward for other developers?
I'm not a professional developer, so I usually code alone. I make tools to help pentester's jobs easier. Are you able to provide tips to make code as easy as possible to add quick features, or things people don't think about?
Sue them in any country that ignores arbitration clauses.
What about the trend of shutting down or outright physically attacking speakers at collage campuses lately? I'd call that using violence to suppress politically opposing opinions, and it's something that you will exclusively see leftist do against speakers they disagree with. Or concepts such as the Progressive Stack, where people are discriminated against based on race and gender, in other words literally racism. Or any of the other crazy ideas coming out of social justice these days.
Convert AC3 Surround to AAC on the Fly with VLC
> soundcloud reached out to me to say that I had illegally-uploaded content. I told them I owned the rights to the song and they confirmed this with the label

That sounds exactly like how the system should work.
Linus Torvalds says Intel needs to admit it has issues with CPUs
“Let me try to save you all a year of therapy sessions:”

Thanks but no thanks random internet commenter.

Go see a licensed therapist for fucks sake.
YC to host talks and office hours in Toronto, Seattle and more
When F00F bug hit 20 years ago, Intel reacted the same way
Maybe in 1945. A nazi poses no threat, imminent or otherwise, if they are just spouting bullshit on a street.
A compiler is a program that translates programs from one language to another.

> At the point where we are calling things that compile to assembly "transpilers" I don't think there is any distinction left

"Transpiler" is grating (apparently).
No sound though :)
I don't know enough about those cameras to know, but not sure if they'd be able to get retinal images of sufficient quality. My guess would be they can't but I dunno
The Ubuntu page that was on HN earlier [] claims that they were notified in early November. I have no idea if kernel people (as opposed to distro people) got notified earlier.

[]: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAn...
Meh, it's not a major indictable: no one's going to gaol for misusing a copyright claim system.

Anyway, as others have noted, I believe you agree to an arbitration clause when you sign up. Lawyers aren't likely to get involved, you'll just get kicked off when a human works out you're abusing the terms and conditions.

(I didn't down vote you)
I made the caveat that it's sufficiently optimized. I'm not talking about full loops on native Python arrays or something silly like that. If two people who know what they're doing try to optimize some scientific algorithm in a language without extra penalties (C, C++, Fortran, Julia, Go, Rust, etc.) the runtimes end up quite similar, at least within a few x. Of course someone can make it worse (there exist many bad coders in science...), but I'm not talking about that. I'm just saying that spending 2 years to play with some assembler code is not likely to give you some amazing speedup, while specializing algorithms to your problem is a clear and tested way to get something that is much more efficient.
LATEST Mtn Data Plans for 2018, Prices and Subscription Codes
Ask HN: Any videos of VCs responding to pitches?
I've recently watched Planet of the Apps. While the series itself is not great (lower entertainment value than Shark Tank, but entrepreneurial value is seriously compromised for the sake of entertainment anyway), the advice and criticisms that the VCs had to offer were super interesting. Does anyone know of any more videos of VCs responding to pitches?
Imho what the author is either missing on voluntarily ignoring is the context in which the original Unix was developed: as an unofficial, simpler version of Multics, after the Multics project had failed.

So my guess is that Thompson and co basically went with a "worse is better" approach and delivered a model that performed worse but was a lot simpler to implement and reason about.

Also... It's easy to criticize designs 40 years after. That time was a time of proposals an research. Despite this, the original Unix design, no matter how flawed, stood the test of time.
Everything is a remix, https://vimeo.com/14912890
That word,"Transpile". Lol. GCC transpiles C to assembly.
I find CPUs fascinating to be honest. While they are complex, they are not impenetrable. Playing with small assembly snippets and simulators helped me a lot to understand them.

Also, other architectures such as MIPS and M68K have simpler to understand ISAs which accelerate the process of understanding these small wonders.
The private sector is absolutely magical at corrupting economic decisions and sucking out all the money that passes through it, so it's not that easy either.

> So do you want the extreme rare condition that some important congresscritter's daughter has consume 80% of the medical budget ? This is the way to go.

People would scream bloody murder if that happened.
That's not helping the case for open source software...
Details and structure matters: lessons from Facebook’s foundation in 2004
Only because you aren't an expert and aren't aware of the state of the art in the field. Spookiness has no correlation with actual threat.
I agree with drdrey's definition here[1], which is echoed in paragraph two here[2] as well, which provides you with the agreement part at least. Whether if it is meaningful to you, is up to you.

[1] - https://news.ycombinator.com/item?id=16076823
[2] - https://hackernoon.com/moving-to-es6-babel-and-transpilers-3...
Yes, it does.

17 U.S. Code § 512(f) states:

(f) Misrepresentations.—Any person who knowingly materially misrepresents under this section—

(1) that material or activity is infringing, or

(2) that material or activity was removed or disabled by mistake or misidentification,

shall be liable for any damages, including costs and attorneys’ fees, incurred by the alleged infringer, by any copyright owner or copyright owner’s authorized licensee, or by a service provider, who is injured by such misrepresentation, as the result of the service provider relying upon such misrepresentation in removing or disabling access to the material or activity claimed to be infringing, or in replacing the removed material or ceasing to disable access to it.

---

This has been tested in Online Policy Group v. Diebold, Inc. - and Diebold lost and had to pay $125,000 to Online Policy Group.

https://en.wikipedia.org/wiki/Online_Policy_Group_v._Diebold....
Google Wifi has been fantastic for me and it's cheaper. Easiest product I've ever setup too.
The use of carbon tet as a fire suppressant was actually the start of a pretty long history of halocarbons as fire suppressants in general:

https://en.wikipedia.org/wiki/Bromotrifluoromethane

The pyrolysis byproducts were still quite toxic, but they were very effective at putting out fires since they chemically inhibit the oxidation reaction.
No removable battery on the x series. Lenovo is really trying really hard to kill the brand.
China sees record tech funding in 2017
While a lyrics or a melody might be public, it doesn't mean the song is.
> A nazi poses no threat, imminent or otherwise, if they are just spouting bullshit on a street.

“No threat” is overstated, but certainly not the kind of imminent threat that justifies a violent response.

Conversely, political violence by non-Nazis, historically, is a major factor in politically enabling Nazis.
Show HN: Introducing Neil, the personal curator AI
DeDevelopers Winter Special Sale Is Now On
Save Up to 30% off at Web Development, Web Templates & on Logo Designing, Banner Designing with DeDevelopers in Best Quality.
Visit for more: http://www.dedevelopers.com/ or Get a Quote: http://www.dedevelopers.com/get-a-quote
This (obviously) could just be a cynical PR ploy, but I'm hopeful that he's being sincere and that his leadership drives major changes. It would be foolish to expect any for-profit corporation to put the social good in the front seat. But that doesn't mean it's not possible.
Godel and the End of Physics (2002)
Evm is a stack based machine with no speculative execution. It has no concept of a process. I find it impossible to think how spectre can be implemented.
Donald Trump administration suspends over $1.15B aid to Pakistan
Great lay analogy to illustrate how speculative execution is exploitable
A nazi posed no threat when they were being accepted in Germany, until suddenly they had enough power to start killing people with no consequence. Anyone who is currently a Nazi, KKK member, etc knows that is the inevitable conclusion to following their ideas down the rabbit hole and will be complacent if they ever think they can get away with it. The murderer in Charlottesville spent the day being hyped up before plowing his car into dozens of people.
2018’s the Hottest Cryptocurrency Is Stellar
Apple joins alliance to shrink your online videos
Youtube copyright claim system and ContentID shows us a glimpse of what happens when unchecked AI in many cases reports and handles the report by just removing it.

It can be cold and inhuman even if it is a needed service, very vogon-like.
> an incorrect branch prediction should have no detectable effect on the system, whereas here it does

Branch prediction is not scoped for that. Branch prediction will always change microarchitecture state, which is always detectable at some level or another. The key takeaway for designers should be that even though microarchitecture state is not exposed in the datapath it is not secured from side channel exposure.
I think Eaze uses http://eazepayment.com/ A Cyprus based company that uses offshore methods. Anyone else have insight on this?
We’ve averaged 2 banking charters a year issued nationwide for the last five years, and none of them were to 420 Money Laundering Services, LLC.
That's relatively non-problematic: setup everything you need, fork(), exec() or _exit().

But there's lots of other issues. Things like PID number reuse, libraries in single-threaded programs that may need to reinitialize on fork() (via pthread_atfork()? no because fork() might have been called directly via syscall() or by trapping from asm code, bypassing the C library altogether), and so on.

Just use posix_spawn().

EDIT: Also, ultimately, the worst thing about fork() is that it can't possibly be high-performance. Either fork() copies the writable parts of the address-space, or sets up COW, or copies the RSS and sets up COW for the rest. Well, on modern CPUs COW is really expensive. And copying a JVM is no fun either.
NeuroVIS is just amazing.
Ubiquiti make a one-click home product, it's called Amplifi:

https://www.amplifi.com
PR is always shocking.

Let's wait to see how much performance is lost and what vulnerabilities get used in the wild.
Nothing special is needed here. execve() does blow away the address space of the process and replaces it. As to fork(), it copies the address space. Of course, you can't putenv() on the child-side of fork() if the parent was multi-threaded, and you may not even be able to getenv() in that case either (check the standards and your C library's fork() man page).
Ask HN: Is something very big on its way for the crypto community?
It could be so many things that in hindsight were gamechangers, which one do you know about that you believe is truly monumental, groundbreaking, next level technology?
It's a feature not a bug ;)
Crisis and Reconstruction in Philosophy (2001)
There's nothing prescient about saying that computer system X or Y can be exploited in ways yet to be discovered.

The entire Internet is wide open, the holes just aren't known yet.