skysight-inc/HackerNews huggingface dataset:
In a mostly-synchronous society, “standard” working hours become somewhat desirable. Working 9-5ish typically maximises opportunities to see friends and family, and for parents it means they get to take advantage of free government-provided childcare (aka schools).

Plenty of places are open outside those hours, but they tend to be shops and services provided by relatively low status workers. Higher-status service workers (dentists, bankers, ...) generally seem to do better at resisting “unsociable” hours.

It’s an annoying situation, but can’t see it drastically improving without a widespread move away from synchrony.
So.... ballast :p
Assuming blah is in a var named name, you can use:

dirname => "${name%/*}"
basename => "${name##*/}"

Sadly you can't use it with !$ since it's not a variable. The closest you can do is:

$ ls foo/bar/baz
ls: foo/bar/baz: No such file or directory
$ last=!$; echo "${last##*/}"
baz
$ echo "${last%/*}"
foo/bar
Sad outcome: realizing that 99% of the people in our field don't care about freedom or privacy, and are willing to actively work against these ideas as long as it is beneficial for their yearly bonus or their next valuation round.
Also anecdotally, I took a fairly large amount of magic mushrooms once, and it was an awful episode that left me with anxiety attacks for many months afterwards.

I saw no life improvement from this experience, and regret having ever dabbled recreationally.
More context here: https://news.ycombinator.com/item?id=16083325
All of them irrelevant in the world of Java programming, hence why I wasn't even aware they were using Bazel.
Kinda sounds like an htop bug that shouldn't be able to freeze the system because, y'know, not letting any process freeze the system is part of the OS's job. Of course, it might also be an htop bug that's triggered by Darwin handing it bad data, so there could be blame to share;)
This cuts both ways, usually the agreements are bi-directional so they may not disparage you either. And honestly this has been super common at the executive ranks for decades, like many of the other agreements that have filtered down to the average employees.

Outside of this though, there are always companies who abuse employees and try to hide it, this is not new nor is it going to magically disappear anytime soon. There are good companies that use these techniques to protect themselves and their employees rightfully. This is because there are a large group of people that are quick to lash out and embellish stories about a company which can be highly damaging, affecting dozens or even hundreds of lives. I am sure you have worked with at least a few of those types of people. It of course cuts the other way, where the company is a total loser and abuses their employees and tries to use this and other techniques to hide their bad behavior. And that is just as horrid and immoral.

In the end, just as your friend did, most times the news gets out about the abusers and people will get the message not to go there which will affect the company and in the end it can be terminal over time. Usually these companies get caught up in litigation eventually that either does them in or winds up with the effect of cleaning out their executive ranks.

As for should you take a job at a place that uses them, that is a personal choice and you should review the company and ask around in non public ways (e.g. not the internet). People are people, and information will always get out. In my opinion, it is not rare for senior positions to have these agreements so I am totally comfortable with them, assuming they are bi-directional. Uni-directional is out of the question and would be a massive red flag.

Also remember, that none of these agreements covers illegal behavior, so if you saw them doing something illegal like dumping toxic waste and reported it or quit then reported it, they'd have little recourse against you. It doesn't mean they couldn't sue you, but they wouldn't get anywhere as long as you were accurate. Same goes for if you were stealing from the company and they found out after you quit, they could turn you over to the authorities and the agreement wouldn't protect you. Again you could sue them, but the outcome would be you'd lose.
Yes, I am aware of them and agree with you. In fact, cache-miss side channel attacks are known by academics for years as well. However, this is the first time someone combining various of previous techniques (timing, cache-miss, speculative loading etc.) together to make this attack work.

Quote from the meltdown paper:

> We expect that Meltdown and Spectre open a new field of research to investigate in what extent performance optimizations change the microarchitectural state, how this state can be translated into an architectural state, and how such attacks can be prevented.

So we won't see the last of Spectre.
Uh, indexes in postgres point to the tuple, not the page.

Except for BRIN.
I don't know for sure but i'm guessing it's because this is all proprietary stuff, security researchers working on closed source hardware have to to a lot of inference... turn an already difficult theory into practice on an obscured implementation that is substantially harder to reverse engineer than compiled code.
Watch out, there are some limitations to fish's psub preventing it to work as bash's >()

https://github.com/fish-shell/fish-shell/issues/1786
you dont always control your html due to XSS and CSRF.
> kpatch was a Technology Preview in 7.1 and only became officially supported in 7.2

> https://access.redhat.com/documentation/en-us/red_hat_enterp....

Ah, I completely missed that it was a technology preview in 7.1

Presumably what that snippet is actually saying is "there will be no way to avoid a reboot due to the nature of this change" rather than "rhel 7.2+ will require a reboot but 7.0 and 7.1 won't"

Thanks for the clarification.
For me, Cyberduck was unreliable. It would constantly disconnect from my servers (VPS, shared hosting, Windows file server at work, even my local network servers), it would crash occasionally, and very rarely it would lock up for a few seconds then run fine (relatively) for a while. This was the case both on my Mac Pro running Sierra and my Mac mini running El Cap (I have neither machine now; sold the Pro and the mini's logic board died).

Command line ftp worked fine, Filezilla worked fine, and Transmit worked wonderfully on both machines. Anecdotal I know, but Cyberduck is not what it used to be, at least for me.
Because like most inventions, its obvious after the fact. But getting there was time-intensive and wrought with many ways of failure.
I read that book as well... one of the tangents was (paraphrasing from memory) when he secured financing from J. P. Morgan for a proof-of-concept wireless transmission tower (the Wardenclyffe tower). He then dramatically scaled up his plans without consulting with Morgan and tried to motivate this by picturing the project as a reflection of Morgans position in society -- surely you can see that only the best will do! After running out of money, he kept asking J. P. Morgan for more money for the rest of Morgan's life... and a large part of Morgan's sons life!
This is fascinating as this is the plague of our generation. depression is such a debilitating condition, and in the UK mental health care has fallen to the level where it doesn't really exist outside of prescription medication.

There was an earlier study in the UK [0] which showed similar effects, again on a small sample. The following interested me

> A clinical trial, which took years and significant money to complete due to the stringent regulatory restrictions imposed around the class 1 drug

This seems insane. Lots of other prescription drugs would be illegal for me to buy, why is this reserved for mushrooms that grow in our lawn? It makes me wonder if the real resistance to this research is that an unmodified mushroom medicine would not be patentable, and it would be financially catastrophic to big pharma if people stopped taking their medication and grew their own more effective ones.

I note that many people are concerned about the side effects of magic-mushrooms. Perhaps you could consider that weighed against the side effects of the Seroxat[1] which amongst other things can stop a man reaching orgasm, or stop you dreaming(!) for years after taking it, is addictive and clouds your judgment. It can turn you suicidal or homicidal.

I wont bother to list any of the others and their side effects, but I know I would try the mushrooms first, and I would urge my family to do the same if they needed help.

[0]https://www.theguardian.com/science/2016/may/17/magic-mushro...
[1]https://www.theguardian.com/uk/2001/jun/11/highereducation.m...
How I built a self-driving robot race car
Yeah, but why are you trying to use a search engine that cares less and less about exact matches, when there's a manual?

>man bash
/\$\( # search pattern needs escaping
...
value is evaluated as an arithmetic expression even if the $((...)) expansion is not used (see Arithmetic Expansion below). Word split‐
...
n # go to next match
Command Substitution
Command substitution allows the output of a command to replace the command name. There are two forms:

$(command)
or
`command`
(detailed description follows)

I'm still in favor of using more verbose and especially more clear constructs, but not because they are easier for Google, but because they ideally hold enough information on their own that you don't even need to look it up to know what it does.
I don't know if you're joking, but that may not even be an impossible task if say OpenBSD were to create a cryptocurrency for their OS, as long as they tried to make it as legal as possible and try to see it more like a crypto-asset/stock kind of thing than a "digital ponzi scheme."

Seems to have worked for the IPFS guys (I'm talking about existing projects that only launched a cryptocurrency later on, rather than from the start). Brave's BAT qualifies for that, too.
Learn how a Robocar Rally racing team built an autonomous model car in 12 hours from start to finish
Didn't know that. The chipmaking business is insular and pretty incestuous, I wonder if the same engineers built both speculative execution units.

I've got a friend in CPU design and he's only got about 50 companies he can work for in the world where he could do the same job he does now
> more consistent experience than Linux (especially on laptops)

One one line of laptops, maybe. Run Linux on a single line of laptops that officially support it (I suggest XPS), making this an apples-apples comparison, and Darwin doesn't look as competitive anymore. Or cut the other way and look at Hackintoshes:)

> proprietary software

Yeah, this I agree with; WINE helps but sometimes you're stuck needing Darwin/NT.
My 2015 13 inch MBP is still on Sierra. Should I indefinitely hold off upgrading to High Sierra?
I was talking about Transmit for iOS specifically.
Meltdown and Spectre Linux Kernel Status
http://webcache.googleusercontent.com/search?q=cache:yeokhen...
Spivak's "Calculus".
Actually, there is not any measurable difference. Our architecture is completely state-less and when compared with equivalent load there's no difference at all. I guess, default network throughput bottle-neck itself is higher than the random memory cache bottle-neck in my case. There was no impact on the latency either.

Fearing automatic update by AWS resulting in performance issue, we rushed to update all our serves and gladly there weren't any performance impact.

I don't think not every one has been fortunate, there's still lot of variables reg performance impact of KPTI. This user here using PHP server mentioning 50% performance - https://twitter.com/timgostony/status/948682862844248065 and of-course OP issue is being covered here.
That would be cool!
Have you ever tried docker-compose?

While the two solutions are obviously with different goals in mind, one being to fully run the kubernetes setup locally, and the other one to run a few docker containers who talk to one another, if it's for the purpose of running a simple-ish dev environment, in my experience, docker-compose is much faster and simpler than minikube.
Non-developer friends certainly, non-technical ones not so much.

If that's all you use uMatrix for, you can remove it and get all that functionality with uBlock Origin alone.
Ask HN: why did Apple say Meltdown affects iPhone?
CrowdSwitch scalable mesh hardware design files open sourced
One suspects you've never lived in a place where all the grocery stores have bankers' hours. This arrangement makes it difficult for a working single person to obtain groceries.
Meltdown and Spectre Linux kernel status
Perhaps they don't, but eventually the patches become part of the mainline kernels, and then they will run with the patch applied.

Regardless of what some of my customers believe patches are rarely hand picked and then applied. All security patches are applied, always, kernel patches even more so. They are rolled out with the tools provided by the operating system, be it Windows, Redhat, Ubuntu, OpenBSD, Solaris or whatever, and they don't make assumptions about your use case, they just apply all security patches.
> CSP look like an ugly hack rather than a good solution ... I don’t understand why the author praises it.

Because it appears to be the ONLY solution to the problem described, unless you never use any third party code that you didn’t build from source and audit.
Replying here, since the other post I replied to disappeared:

Despite the avalanche of downvotes burying my posts, not even one person can actually answer the question I asked:

The poster could have simply stopped typing after "Thank you for the explanation". He chose to unnecessarily add something more.

So, for everyone who disagrees with me: if what he said wasn't itself "snarky", what was it?
I rebooted my server but it seems like crash again. Let me adjust adjust my Digital Ocean droplet.
It’s fairly different for iOS, where base OS requires at least yearly updates to keep up with the times (and at least with iOS 10 such update was very late).
https://imgur.com/a/nbT2G
Hi! I'm the dev behind IsoGrid and CrowdSwitch. Let me know if you have any questions or suggestions!
I think I mostly meant to hint at the [financial] difficulties of producing (and distributing) computer cpus at scale. And that a product which exists only on paper doesn't really exists.
An overwhelming majority of the deleted posts are actually very reasonable. When I checked the thread yesterday it was already locked and only the offensive posts were deleted.

Looks like now someone decided to also delete everything that wasn't praise.

https://archive.fo/tmKkN
Man pages are specifically reference documents, not tutorials or guidebooks. To say one should use a man page is to say that one must completely digest the entirety of the tool prior to ever actually using it. That’s just simply not feasible, nor should it be expected of anyone beyond trivial tools. Man pages simply don’t provide the context for solving a problem like a guidebook or tutorial would, which is why there are so many sites that start with a problem and then explain the tools.
It looks as a feature of culture. When there is a demand, no legal obstructions and cultural acceptance, then barbers, banks, shops work late into evening.
> I'm just saying we need a clear distinction between the WWW and any applications platform, just like we need a clear distinction between sidewalks and freeways.

One problem is, no one seems to be able to define "web application" in a way that makes the distinction clear. Most sites that use javascript still use it in the context of displaying documents, so if you define any site that uses javascript at all as an "application," then most sites, including Hacker News, count as applications. But that doesn't actually fix any problems.
Security is about risk mitigation. You cannot derisk entirely, so you make tradeoffs. Without knowing all of the parameters, it’s disingenuous to say it’s a horrible approach to security.

The most secure computer is powered off, enclosed in concrete 6 feet below the surface of the earth. It is not very useful though.
- RaiBlocks

- IOTA

- Hashgraph
The size of a brain usually doesn't mean much, it sets a baseline, somewhat, but the overall structure is much more important compared to volume/size/weight. A difference in brain volume of humans doesn't necessarily imply a huge difference in performance, just that the structure is different. Of course a difference in performance can still occur depending on the differences in the structure.
Seriously, we are having immense trouble with securing CPU virtualization and now we are talking about GPU virtualization for unreviewed, unaccounted, automatically downloaded and executed code? Stop this madness.

Use native code and native APIs like OpenGL or Vulkan.
And to make things interesting Ubuntu uses dash as sh

https://wiki.ubuntu.com/DashAsBinSh
On a practical basis (civil liberties, economic freedom, power to affect change), I agree with you.

But it's hard to ignore the deification of certain individuals through celebrity. If some of society's foundational institutions are failing, it's fair to suggest the deification of power brokers as a root cause.
Swipes Workspace: One place for your team's goals, notes, files and communication
Clock speed has been an awful metric for 2 decades now (except for within a single CPU model series).

All processors (including AMD/ARM) since the early 90's have been using instruction pipelining. It's a universal performance improvement, not Intel cheating.
Learning to reembrace more traditional website building with Laravel
iCloud Drive can strip (meta)data from your documents
How do I run that in my web page?
I'd guess that more now than ever are jobs strictly time or shift scheduled.
Drawing simple generative organics with L-systems
> This exploit is very hard to imagine before now

theo de raadt of openbsd called this out, 10 years ago: https://marc.info/?l=openbsd-misc&m=118296441702631
Supercharging Visualization with Apache Arrow
Apple rebranded "Mac OS X" to "OS X" and later rebranded that to "macOS". It's not like they're different lines of operating systems; it was a rename of the whole line, so my impression is it's fine to use the term "macOS" to refer to any of the versions since 2001, or it's also fine to use the name that was given at release when referring to a specific version. In other words, probably best to not worry about any particular phrasing, and not try to put exact technical meaning on any of these terms. :-)

For example, Wikipedia[1] has a page called "OS X Yosemite" which describes it as "A version of the macOS operating system", and the Wikipedia article on macOS[2] says it was first released in 2001.

[1]: https://en.wikipedia.org/wiki/OS_X_Yosemite

[2]: https://en.wikipedia.org/wiki/MacOS
> ...if the architecture (not just the ISA) are open, the safety can be verified...

That's just the old "many eyes make all bugs shallow" fallacy, which has long been discredited. Given that architects at nearly all of the processor makers on the planet missed Spectre and the article itself notes that only "chip weenies" (their phrasing, not mine) could've figured it out, there's no real basis for such claims.

> BTW, it seems SPARC (also open) is not vulnerable.

OpenSPARC happened to be open and happened to be not vulnerable, therefore the former caused the latter? Unless there's some persuasive evidence otherwise, that's clearly faulty reasoning.
How do I run it on my computer?
I don't believe they said Meltdown, only Spectre because iPhones use the A series of arm designs which are vulnerable to Spectre.
Edison invented the first corporate R&D lab that spun inventions out into companies:

Light bulb and wiring - GE

phonograph - National Phonograph Company
I was going to say the following:

Except that being responsible for your dependencies (and the dependencies of your dependencies...) is impossibly hard. You would need to build everything yourself after auditing the code.

But then I thought about it some more and its likely that you don’t need to audit the code, since the malware probably isn’t in the public git repo. Yes, its still a risk, but the probability of malware is much lower (and at least you CAN audit the code if you wanted to).

You still need to get the source for all your dependencies and all of their dependencies and so on and build it yourself, but you should probably do that anyway and host the artifacts in your own private repo. That’s good practice and avoids issues like the left-pad thing.
Is it just me, or is the page hijacking normal page navigation keys like "PgDn" and "Space". Really, really annoying that I don't seem to be able to navigate the way I usually would.

Major UX failure.
I’ve always been hesitant about trusting iCloud. I remember losing metadata with early cloud storage and networked backup solutions across platforms. This shows me I was entirely justified in doubting the reliability.

Anybody else able to confirm this?
I remember seeing the advert when the Bank of England was looking for a new governor:

https://www.theguardian.com/business/2012/sep/11/bank-englan...
Lots of people still watch regular TV. I can't imagine it either, but apparently it's true.

For super popular stuff like GoT our big sporting events like Superbowl or even bigger like World Cup finale you'll always have it. So maybe we will always need that max toilet fishing capacity of we don't want to not be able to flush once every year or so?
I stuck with the hardware (albeit quite old) and went linux for similar reasons.

The older hardware can be quite nice with linux, but my next notebook wont be a mac, not due to value for money (spec and built quality balance is actually quite good for price these days), but because all attempts to run linux or any OSS on the more recent models are a disaster.
> It makes me wonder if the real resistance to this research is that an unmodified mushroom medicine would not be patentable, and it would be financially catastrophic to big pharma if people stopped taking their medication and grew their own more effective ones.

Many of the antidepressant and psychoactive/psychedelic effects are caused by 5-ht2a receptor agonism, and many novel 5-ht2a agonists have been made[1], most of which could be patented. The issue is abuse potential. Most of these drugs can be used to "trip," or have a psychedelic experience, meaning it would likely be made illegal very quickly.

[1] https://en.wikipedia.org/wiki/5-HT2A_receptor#Agonists
Mark Zuckerberg Makes 'Fixing' Facebook A Personal Goal
NHS cancel all routine operations in Jan. due to flu spike, bed shortages
Best case is you get the source or binary package from your trusted package manager and run/compile that.

If that is not available, and you still really need the result of that piece of code, fetch the code, compile it and run it.

Code distribution has inherent dangers and cannot be safely made extremely effortless and comfortable. Accounting can be bothersome, but is necessary for code.
(4) How to get more views on YouTube – How to get free YouTube views
Why? This wasn't gross incompetence in processor design, this kind of attack is completely new.

I don't see how a class action could apply here, by IANAL
You may want to read the following from the Meltdown paper.

> We also tried to reproduce the Meltdown bug on several ARM and AMD CPUs. However, we did not manage to successfully leak kernel memory with the attack described in Section 5, neither on ARM nor on AMD. The reasons for this can be manifold. First of all, our implementation might simply be too slow and a more optimized version might succeed. For instance, a more shallow out-of-order execution pipeline could tip the race condition towards against the data leakage. Similarly, if the processor lacks certain features, e.g., no re-order buffer, our current implementation might not be able to leak data. However, for both ARM and AMD, the toy example as described in Section 3 works reliably, indicating that out-of-order execution generally occurs and instructions past illegal memory accesses are also performed.