skysight-inc/HackerNews huggingface dataset:
I'm not sure it's irrelevant. The job is president, not top CS nerd.
Meltdown is aptly named, as that is what's gonna happen to the global corporate services market, "efficiently" hosted in the cloud and scraping for profitability.
I recommend reading `man bash` for the section on Conditional Execution. It's remarkably readable and useful for man pages. It also cleanly explains the difference between the two.
Out of curiosity I recently installed Debian Stretch on my Pentium Pro 200 (dual CPU). The text based installer warned that my 128MB of RAM wouldn't be enough for it to finish, but luckily it still succeeded. The system boots within a minute or so and is fairly usable. Running X on s3fb with i3 as the WM, the selection of usable GUI programs is rather limited then admittedly. Still, I guess we really came a long way from 486 to PPro. :-)
We already have one in the system, why duplicate the effort?

Also, It is important to keep the number of authorized sources of code to a system small.

If you insist on using that horrible language, you can deliver a webapp that runs in a JavaScript runtime through the OS package manager. That ensures proper accounting for the users.
> Or a free app that is just done as a thank you to the community that has supported them over the years? What would be wrong with this?

That would be a very expensive thank you for a tiny business! Given Panic's level of polish and concomitant development timelines, I expect this app took several months of a designer's time and at least six months of an engineer's time—probably more like nine. Then QA, support, etc. I'd guess we're looking at a >$150k price tag here, plus ongoing maintenance.

As to paying for itself via bringing new users into their customer base: given the average sale price of their desktop software, this iOS app would have to generate several thousand net-new sales. That doesn't seem wildly outlandish to me, but I'd guess one order of magnitude fewer is more likely.
This is why embargoes are stupid. Unless you're 'blessed' you get screwed. They only exist to give intangible benefits to large corporations at the expense of everyone else.

It's the technological version of insider trading
What could be the npm package the author of this article is referring to?
I wasn't arguing for making anything for lenient, I just meant that WebGL is not necessarily suddenly a bad thing just because of Meltdown/Spectre.
It’s been discussed for years by people who didn’t need to see the exploit to know that it had to be there. Sane people have been avoiding timesharing for critical work on x86 since Core 2.

Life-safety work has no business in a public cloud.
You could go with AMD which is seemingly immune to Meltdown, but apparently someone already found a security flaw with their PSP (aka their own Intel ME).
So the decision was, go ahead and release it even though we know it's vulnerable because we'll make more money that way than we would if we took the time to fix it and make it secure?

If so, I hope the market punishes that decision mercilessly.
Since they're using default provisioned EC2 instances, it's likely that the developers don't necessarily even fully understand their performance degradation. They just expect the service that they pay for to work properly.
Works just fine for me? Which link?
Intel get drastically more instructions per clock cycle than anyone else, which is a very useful metric. Intel processors still dominate in single-threaded workflows. Meltdown makes that performance advantage look slightly suspect - Intel might be cutting corners to squeeze out extra IPC at the expense of security, reliability or accuracy.
Yeah, I'm certainly on board with that: vast amounts of ad-related assets and tracking code need to become a thing of the past. Still, for that I have uBlock, and I'm increasingly avoiding the worst offenders on that front anyway.

Still, sites I use on a regular basis that benefit from JS: GitHub (most evident with real-time updates to projects, issues, PRs); Office365; GMail, Google Drive, Google Analytics, Google Docs, the Adsense and Webmaster portals, and - of course - YouTube; Clubhouse (project management, heavier than Trello, lighter than JIRA); Azure management portal; pipeline apps such as TeamCity and Octopus Deploy.
Agreed on that! The iOS RDP app is pretty darn good, and VPN connectivity options are really good too. BUT... I discovered that if I RDP into my work machine/network, it totally negates the need for both Coda and Transmit on my local iPad.

Thats the trick... :(
Do you know of any learning resources that are strictly POSIX sh instead of a specific shell?
I'm looking to learn and it will be very helpful.
Cloud Deployment Models: Advantages and Disadvantages
How to Take a Picture of a Stealth Bomber Over the Rose Bowl
Health care is also confounded by climate change and global warming as flu season strikes earlier and more viciously: https://globalbiodefense.com/2013/01/31/global-warming-and-t...

Just like starfish are being laid low by a virus normally kept at bay by lower ocean temperatures (https://www.seattletimes.com/seattle-news/environment/scient...), I expect there to be higher rates of unexpected disease in human populations as well.
It's !:h - not just a plain :h

$ echo foo /bar
foo /bar

$ !:h
echo foo
foo

It's under `man bash` in the History Expansion section.
I suppose these guys just don't apply the patch. They are not running in a public cloud with potentially hostile neighboring VMs; they run their own trusted code. They might choose to tighten perimeter security instead, in the short term.
It might. I want to be at work as the same time as my team mates. My wife wants to be at work as the same time as hers. We both want to be home at the same time. Now my team mates have to be at work as the same time as my wife's...

That's not even taking vendors or customers into account we might be doing business with. Schooling for children currently primarily happening with all children in the same room doing the same thing at the same time also furthers this. Just these few examples already cover huge parts of society.

I have neither kids, nor did my wife actually have fixed working hours somewhere and yet my job is best done if I work the same hours as all the people who have those constraints. So any one of these can have a huge impact.
We need everything but more attack surface.

Do you really think the WebGL runtimes are safe and don't leak data through a side channel, possibly combined with the running JavaScript code? To make matters worse, the hardware is opague, running unknown firmware.
You'd have to do it twice, using a temporary variable:

$ name="polish.ostrich.racing.champion"
$ temp="${name#*.}"
$ echo "${temp#*.}"
racing.champion

That's if you want it generic (i.e., splitting on "." characters). In one shot, you could make the pattern more specific:

$ echo "${name#*ostrich.}"
racing.champion

...or use something like sed or awk:

$ awk 'BEGIN {FS=OFS="."} {print $(NF-1), $NF}' <<< "${name}"
racing.champion
Obviously? They're two different instances.
Finally an inter PC safe from Meltdown and Spectre. About time.
Amen to that. Now if only I could have gotten my Systems Programming professor to feel the same way... :)
I think this is a fantastic insight. There is a particular mindset of security thinking which compartmentalizes breach impacts on the basis of how much of the security infrastructure itself is compromised. 'well, they get remote code execution, but at least they can't recover passwords', or 'this vulnerability is bad because it allows recovery of temporary TLS keys'. And Spectre/Meltdown seems to turn every vulnerability into one of these 'world shattering' security breaches that mean your secret keys are all exposed.

But for servers, the application-level vulnerabilities that are needed in order to get meltdown or spectre attacks to run are already devastating. Take over a game server process and you own the in game currency and the scores and the ability to ban users, and probably user level login as well. And you have your pick of privilege escalation mechanisms already, probably.
Intel's PR dept is in overdrive, but the truth about this vulnerability is that it's essentially worst-case.

It really only affects workloads where high performance is important. The average user might not see an impact but if you need fast IO God help you. The solution is to 'make less syscalls' but the problem is that syscalls have always been slow and the people making a lot of them are only doing so because they absolutely have to
Not tech - but "German - A Structural Approach".

Its the only book i still have from uni. It breaks the language down, and made it easy for a techie like me to learn german. Can still speak a fair bit
Those who have looked at the patches in detail: does it treat older generation CPUs differently than 7th gen? The Paper authors who wrote the KAISER patch expected much worse performance on older CPUs due to implementation issues...

Unfortunately, Epic Games don't provide any details about their CPUs AFAICT.
> saying they make you 'trip' and that's all is a bit reductionist too, wouldn't you say?

That's not all I said. First I compared the pharmacodynamics of the two(reuptake inhibition leading to better utilization of existing serotonin of SSRI vs direct serotonin receptor agonism of psilocybin), then I compared the psychological effects(fewer acute psychiatric effects in SSRI vs the "trip" of psilocybin). I personally don't believe that's reductionist.

> As far as safety of long term effects and neurotoxicity, I'd question that about many current, legal prescription drugs such as SSRIs.

There may be undiscovered negative effects of drugs like SSRIs, but suggesting that the negative effects of such drugs compare to the already recognized dose-dependent neurotoxic effects of MDMA is a stretch. Its combination of monoamine release and reuptake inhibition causes much more severe neurotoxic effects than SSRIs.
Yet, you write this on a Computer, which wouldnt be possible without those fossil fuels that pushed us through the industrial revolution and onto the technical revolution and gave us those plastics.

I think it’s crazy to assume we won’t find answers to the problems you bring up and take a sky is falling attitude when you look at the track record of human progress. Even though your friends are struggling to find jobs, they’re likely living better than John D. Rockefeller did. Doesn’t excuse the problem, but don’t take these things for granted.
Gameservers don't handle that many packets because they're limited in the number of player they host. A game a 60hz with 64 players will only receive 3840 packets/sec.
${name%.*.*} polish.ostrich
${name#*.*.} racing.champion
If your Linux systems are running a normal Linux
distribution, go update your kernel. They should
all have the updates in them already.

I use Linux Mint and have not seen any recent kernel updates.

Which kernel version is considered safe?
Right. In other words, "He may have been right".
It's a 2017 MBP with touchbar (and a Radeon GPU).
The article is fictional - but designed to sound plausible in order to make web developers think about a problem.
Hauling the Internet to an Ex-Soviet Outpost High in the Caucasus Mountains
$ echo foo bar
foo bar

$ echo !$
echo bar
bar

The bang syntax is for history expansion, so it won't work on directories directly. But you could hack that with something like:

$ls /root/my-dir
[...]

$echo !:t
echo my-dir
my-dir
OMG! I stopped into Super Silly when I was in SG a few weeks ago (I was there with Kai) and wondered what you were doing with that ancient kit. What a brilliant idea.
Usually stand up, stretch my legs, talk to some people if I'm at the office. Most of the times I always get a cup of tea as well (or coffee if its before 1pm)
Yes. Stay away.

I downgraded my mac back to Sierra from High Sierra and don't regret it at all.
No, less than a third of eligible voters voted for the racist con-man. The majority of Americans voted against him or not at all.

Not that that actually matters.
Open Ended Group
Supervised learning in spiking neural networks with FORCE training
According to https://access.redhat.com/articles/3311301 PTI should be enabled on Intel even with the new microcode, so the microcode update probably doesn't fix variant 3 (Meltdown).

Also, I don't think the microcode updates just expose some chicken bits. IBRS seems to be exposing one or more chicken bits as a single bit, but IBPB seems to be a command to run a routine in the microcode to immediately clear part of the branch predictor state, not a chicken bit.

Yes, the kernel changes in the Linus tree only fix variant 3, there are several partial and/or mutually incompatible patch sets being posted on the linux kernel mailing list to fix the other variants; the Red Hat kernel seems to have an early version of some of these. See also the just posted http://kroah.com/log/blog/2018/01/06/meltdown-status/ for more detail.
There is not generally a right to confidentiality of information you share with a third party. There are a few exceptions (spouses, doctors, lawyers, among others). If party A shares information with party B outside one of these protected relationships, then I guess A's rights will not be violated if their information is discovered in party B's possession, whether or not party B shares that information voluntarily. (All subject to the search of B's information being constitutional.)
I have a broken MyBook case. I discovered this encryption when I tried to recover the data by connnecting it directly.

If abyobe knows a way to get the data out of it I'm interested to know.
Google translate says:

I am ready to handle any
ministry given; Durga

Flagged.
You sound unhappy, which is confusing to me, because you just listed a bunch of great challenges to work on.

Working on challenges tends to remove feelings of hopelessness.
This is why the less program has the / command — so you can search the man page for the syntax you are curious about.
Haha. I spent several weeks of sleepless nights on this :)
Well the World Cup is really international except US ;)
Trump got 62,979,636 votes. That's 46% of voters, but 24% of the population eligible to vote (and 20% of the total population).
Come on, calling this hate is childish and dismissive.
if people would still use good old owned hardware without any virtualizsation, spectre and meltdown would not be as scary as it really is on server hardware. which means that only clients would be affected.
but since everything runs on the cloud, we basically need to update the whole world.
Have any recommended resources for learning Kubernetes? I've looked at it a few times, but it always seemed rather intimidating.
The text on the main page is difficult to read with random 3D text on its background.
If you know that your product is flawed, do you keep selling it or will you pull it from the shelves?

To this date I can still buy broken Intel CPUs....

They knew about the flaw in June. Yet they still kept selling Coffee Lake CPUs.

If my 8700k wouldn't still be significantly faster than Amd Ryzen (or I wouldn't have to also return the MB), I would have switched to an Amd in a heart beat.
Mozilla Foundation Security Advisory 2018-01
Speculative execution side-channel attack ("Spectre")

https://www.mozilla.org/en-US/security/advisories/mfsa2018-0...
Full-Text Search in Django with PostgreSQL
There's a certain amount of selection bias.

I've had over the years a 2005 PowerBook G4, three 2010ish MacbookPros, a 2014 MacBook Air and a 2016 MacBook Pro. All have occasionally hung on a blank screen after lid open. The latest routinely forgets Dell screens (two identical ones at once) and I have to replug them.

Otherwise, no issues (except random kernel panics). Like brains, I'm astonished that they work at all, let alone work so well. Of course I'd like something bulletproof, but Apple doesn't seem to be able to make one.
Thanks! You have to thank my teammate Hui Jing for that too
In addition to what alex posted, the new package system along with the build system means that you can build a custom OS based on Genode in under under an hour (my fastest build takes 5ish minutes). The core/base kernels are also packages in Genode, which means you just "shop" for everything you want: a base kernel, services, packages, libs, etc.

It's not perfect and it could use slightly better tooling (which will come once everyone is convinced the design is completely correct), but it's the best system for an OS I've seen to date.
Latency is more important than reliability for online gaming because the world state instantly gets stale. Instead of retransmit you want latest snapshot. I'd be curious to find out in what online games that is not the case.
Almost all Linux Mint users "piggy back" on top of the most recent Ubuntu Long Term Support (LTS) release. Currently the most recent Ubuntu LTS is 16.04 and by default it uses the 4.4 Linux kernel. There are patches for the 4.4 kernel from the kernel.org team and the Ubuntu team are testing and integrating these patches. The most recent updates from the Ubuntu team about Meltdown and Spectre is available from this URI: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAn...
Is it the right time to call out the fundamental wrongness of Intel(/Apple/Microsoft/etc) outrage narratives?

I mean I get it: large corporations (1) don't necessarily have my interests at heart; (2) are not able to perfectly execute (on extremely large and complicated) products and systems.

um. This is as radical as taking a stand that the sun sets in the west.

I like HN because of the promise that people think just a little bit before just typing something that strokes their feelz-good neurons. Yet, here we are on the front page with "In tel suxxx!" (and "Apple suxxx! in the htop thread, etc., etc. etc.)

sigh I guess it's inevitable.

People just don't like paying for intangible things, so the only way to pay for the internet is clickz/eyeballz. And OUTRGE! clickz/eyeballz are the cheapest and easiest.

I know, I know. There was a bug from vendor X that really irked/irks you and it feelz good to express your outrage.

I just wish there was just some corner of the internet where this wasn't the dominant trend and I had hoped it was here on HN. Well, at least reddit has extremely cute dog and kitten videos, and some chuckle-memes.
manning book Kubernetes in action was easy( albeit a bit tedious) read.
You can't make a useful wheel out of a single large block of wood. It will dry out and crack. Wooden wheels are made of several pieces to minimize this problem.
If you want all the args to the previous (or earlier) command just use !. (e.g. a common idiom for me is cat `!`). Or you tried a git mv out of habit but the dir isn’t being managed by git: !gi:
And there are enough versions of ‘better’ for both assessments to be right.
So, there is NO kernel update available for Ubuntu 16.04 at this time.
First off, having dedicated hardware doesn't make these a non-issue, it just makes them less of an issue. If you have dedicated hardware they are concerns. Applications still need to be isolated from each other, and it's a path for someone who gets in as a user to potentially leverage it to root access.

Second, saying everyone should have dedicated hardware is just nonsense. It's like saying everyone should run their own datacenter. For most people neither of those makes financial sense.
Damn it this boils down to RTFM, specifically the bash man page.
Would you consider non-trivial install scripts as an exception to this general rule? I mean, you wouldn't write some install script in ruby or python, right?
How about the standard?

http://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3...
>Stuff like that has been huge pain in my ass over the years. Some clever programmer uses some bash-ism and the build breaks on some ancient hardware that doesn't have bash.

Shouldn't the problem be the "ancient hardware that doesn't have bash" itself?
IIRC, XEN said that 32bit HVM VMs are not affected by Meltdown, and so probably don't get impacted by AWS' patches. They still require Linux kernel updates to protect the kernel space, so changes might still be seen there.
In that case, probably no processors are “clean” as 100% elimination of all bugs is highly unlikely. Just like a bit of growth hormones slipped into your food supply without your knowledge.
Is there some trick to searching man pages that I don’t know? Because my usual experience is:

type man foo
type /-p
type n n n n n n n n n

as there are a bunch of matches like “...does bar when combined with -p...”

A presentation of man pages that used hypertext would make me a lot happier.
I see. okay.

I assumed the main idea of Docker were reproducible builds on different machines and wanted to use it for building iOS apps.
If you are looking for something from the microkenel world, there is a statement dealing with Genode OS.

* https://news.ycombinator.com/item?id=16084617
"This post is entirely fictional, but altogether plausible, and I hope at least a little educational.

Although this is all made up, it worries me that none of this is hard."
GPUs are not vulnerable to Meltdown or Spectre, because they don't do speculation, to my knowledge.
I think it’s the other way around.. and the host updates are what have been introducing these performance hits as well.
I would really like to see you say that with a straight face to someone stuck in a minimum wage jobs who can’t afford healthcare. Seriously. This optimism about the long term does nothing for someone who is suffering in the short and medium term.

That comparison to Rockafeller is nonsense. Go ask someone working at McDonald’s if they’d trade places with one of the richest men ever.
Just so people know, MAPS primarily funds MDMA studies. Psilocybin funding is coming largely from the Heffter Institute.
>I just wish there was just some corner of the internet where this wasn't the dominant trend and I had hoped it was here on HN

You're not going to find that, because taking the path of least intellectual and emotional resistance is just human nature. There is a positive feedback loop with outrage narratives that feeds people's ego and sense of in-group superiority, where one either feels empowered by agreement, or feels catharsis through disagreement.

The only thing HN has over Reddit in that regard is a culture that puts up the pretense ... sometimes.
I bet they won't. I think there is a (or maybe a few) soecial and proprietary Panic libraries that they include across their applications. Open sourcing Transmit iOS would also mean open sourcing part of their other conmercial applications.
Also see thegamma.net. Might be closer to what you want.
Two important things missing:

1) This is a huge pet peeve of mine, but it kills me when my coworkers "bash" emacs and sing the praise of vim, then proceed to explain to me that ctrl-R in bash searches for the last command with a given pattern. They also often refuse to believe me that they're basically using emacs controls (because you know emacs' dirty). So, please, if you're in love with vim and use ksh or bash, learn about "set -o vi". Oh, and stop preaching!

2) "help xxx" for any xxx bash functionality, right there from the command line!
Would you say this to someone who told you they had cancer? Or lost their job?

“I‘m surprised your not happy about hardship?”

Do you actually look at something like obesity, or addiction and say “ah, what a great PROBLEM to work on.”
> It took me a minute to understand what interactive narratives were. It's not a term I've really heard before so I imagined something more like a text adventure.

Me too. Here's a quick sketch at alternate messaging that might be helpful:

"Idyll helps you tell data-driven web stories using charts, graphs and other dynamic controls that respond both to direct user interaction, and interaction with the story as a whole."
You are mixing up AMD and ARM.

See https://news.ycombinator.com/item?id=16080002 .