skysight-inc/HackerNews huggingface dataset:
Synology is arguably the best you can buy. Their long-term support is great, and the bundled apps are great by first-party standards. Their Knowledge Base covers every detail you would need to harden your NAS setup, including HTTPS w/ Lets Encrypt.
They can't be that important if they were blocked from Twitter.
Absolutely love this debugger. Feels like an improved ollydbg.
Presumably of isolation features. I'm sure everyone knew what side channel attacks were and knew that formal verification could've helped find bugs in isolation. They just chose not to do it, because it's only important for high-assurance, not for your regular insecure linux/bsd/windows. And I'm sure they are not going to bother with verification even after everything.
The company isn't really hiring for software devs right now, so unless you already know Ada/vxWorks or current architecture, it might be hard to get into.
Also:

http://www.nybooks.com/ (Source of TFA)

http://www.lrb.co.uk/

https://www.kirkusreviews.com/
You hit the nail on the head. Cognitive neuroscience -- especially WRT functional imagery -- reminds of the fable of the blind men and the Elephant.

(Very) roughly speaking, you have the choice between:

- Excellent temporal resolution & crappy spatial resolution (EEG / MEG)

- Pretty good spatial resolution & crappy temporal resolution (fMRI)

Other techniques (NIRS, TMS, etc) fall somewhere along the spectrum and have their own quirks. We're peering into brain function with a super-low-res "camera" and attempting to draw only the roughest contours of the thing we're exploring.
Sorry to ask, but does anyone have a third mirror? Neither are working for me and I really am interested in seeing this image.
18 Blockchain Predictions for 2018
I think you're overstating the current situation and also leaving out the fourth dimension. If the grid gets cleaner over the useful life of the EV then it benefits from that. I believe basically all grids are projected to get vleaner over the next decade.
It does happen. For example, Game of Thrones.
Subscribed. Thanks for sharing this thread as Docker for Mac has always had performance issues for me too. Even when no containers are running I find it using significant resources all the time.
The trolley problem is a classical ethical dilemma, where a loose trolley is torrenting down a track and heading for five people bound to the track.

You have the possibility to divert the trolley onto another track in time, but this would lead to the death of another person bound to the second track.

Regardless of why people are bound to those tracks in the first place, the question raised would be if it can ethically be justified to kill one person by action, instead of letting five die by inaction.

I guess I would interpret the analogy drawn in the comic strip to be describing speculation as "an accident waiting to happen that just normally gets averted at the last minute by design".
https://i.imgur.com/pA7w4Tf.png
For portability. bash is not available everywhere, but POSIX sh is a requirement of POSIX so you can expect it to be there.
Not all systems have bash.
Something I Like (Not That Anyone Asked): My Fucking Humidifier
Is brain hypermasulinity still a theoretical cause of autism?
If there were no set hours how would you be able to depend on the weekday being when you could go to the bank or the doctor? What you're talking about is being the beneficiary of the very thing you're decrying.
http://anonymouse.org/cgi-bin/anon-www.cgi/https://lh6.googl...
I think the GP means that the purpose of Docker is to provide containers, which are a substitute for VMs. If you are going to be running a VM anyway, why run a container?
They have R&D centers in Israel, China, Japan. Bringing the money back to the US is not necessary for this.

Most of this money is invested abroad already.
We bring the money back, but systems need to be put in place to keep the money here.
No, but de-oxygenated hemoglobin is paramagnetic, and therefore detectable using what's called T2*-weignted scan sequences.

http://casemed.case.edu/clerkships/neurology/Web%20Neurorad/...
Four Wise Tips, Full of Common Sense, to Help Avoid Stress
A large part of this is the mass culture problem generally.

Dwight MacDonald wrote of this in the 1950s:

https://is.muni.cz/el/1421/jaro2008/ESB032/um/5136660/MacDon...
Reminder that Sperm whales have 18 lb brains (humans: 3 lbs) and Ravens and crows outperform chimps on certain cognitive tasks with much smaller brains.
MAGA?
j/k
Or am I?
That doesn’t epitomize the guy who’d come up with “do no evil” to you?
> Kubernetes on the other hand is trivial with GKE

How do I install GKE on my servers? ;)

> By hand it’s not trivial to get a secure install.

The default install (basically, adding a repo and apt-get install docker-ce on Debian and derivatives - trivial to automate with Ansible) is reasonably secure if you view Docker as a tool for packaging and task scheduling with some nice extras and don't buy the marketed isolation properties. It only listens for commands on a local socket, and permissions are sane. I haven't looked into Swarm mode protocol traffic, though but I don't think it's tweakable anyway.

> The myth that kubernetes is complicated is largely perpetuated by the same kind of people who say React is complicated: the people who’ve not tried it.

I've tried K8s. I've set up a test cluster, it worked, I wrote some YAML, it worked, all good. So I've worsened the conditions (explicitly going into "I want things to break" territory) and made it fail. I've researched how hard it is to diagnose the problem and fix it - it happened to be complicated. At least, for me. Just felt that "if something goes wrong here, I'll have bad time trying to fix it". Surely, this is not the case on GKE where you don't run and don't manage the cluster.

I had somewhat similar experience with Docker and Docker Swarm mode, and it was significantly easier to dive into the code, find out the relevant parts and see what's going on.

> difficult with Swarm, like TLS termination

YMMV, but I just add some labels to the service and Traefik does the rest. ;)

(But, yeah, Traefik with Swarm requires some reasonable but not exactly obvious networking logic. May take one deployment of "why I'm getting 504s?!" to figure it out. And Traefik needs access to manager nodes to work with built-in Swarm service discovery.)
Do you want to get burned at the stake?

'Cause that's how you get burned at the stake.
CPU design is in a large part an exercise in formal verification. On the other hand it does not help you much when the bug in question is in the specification that you verify against in the first place or, as is almost certainly this case, is based on some behavior that is not specified by the specification at all.
Implementing a cool optimization that happens to break your processor's security features is cheating, yes, even if you did it unintentionally, like accidentally taking a performance-enhancing drug.
The statement ‘keep the money here’ assumes that the money was the US’ to begin with. But it wasn’t, it was foreign earnings through sale of products. And US companies should spend it how they see fit, ideally to drive further growth. That will likely involve sending some away again. But in an economically half-rational world that will drive a multiplier effect that will drive further growth
Lack of cash is not one of Apple's problems. If they wanted to invest more in the US they could.

Most of the money will probably just sit still in a wide variety of investments (bonds and other stuff; Apple is one of the biggest players in these markets); the rest will go into dividends and share buybacks. A symbolic percentage might go into R&D and Trump will tweet about it.

(I might be wrong, but that is what I expect.)
Making one copyright claims on youtube will basically just move the revenue of the ads to the copyright holder.

If you are able to trigger this to three separate claim holders you can actually jam the system into not paying out or any monetization.

I might be explaining this badly so if I am mixexplaining this but Jim Sterling does this.
Your comment doesn't contain an argument, and it is even attacking a strawman as the GP did explicitly call out non-compulsory as an aspect of it. But I will bite anyway.

Taken GP's reasoning to the extreme, what do you think if the state prohibit someone from having children if (hypothetically) it is known at 100% certainty that their offsprings will inherit a horrible genetic diseases that causes pain and suffering their whole lives, and their life expectancy is 15 years?
I would expect that one of the hundred thousand of local bank branches (I have no idea why banks keep opening on every other street these days) would have opening hours that would align with my time off. As it is now, they all are perfectly synchronized to be open during regular working ours, i.e. when most people are at work.
less magic (which you start to care for if you have to use other people's magic), easier to port stuff to zsh, etc.
I wonder if this means Google's QUIC protocol is dead in the water, since it works over UDP.
How to Become Your True Self – Sergei VanBellinghen
It absolutely would.
kpatch was a Technology Preview in 7.1 and only became officially supported in 7.2

https://access.redhat.com/documentation/en-us/red_hat_enterp...
IBM 8516 Touchscreen CRT Monitor
Are you alluding to "gender is a social construct"? In which case I want to point out that this paper is about sexual dimorphism and the study subjects are likely too young to have a gender yet (or any other kind of social role, really). IIRC, children tend to start to care intensively about gender-appropriateness around age 3.
This surprised me a lot. I thought 30-50% would be worst case and then with additive effects from both Spectre and Meltdown fixes. Not sure how it can be this bad. I imagine it could get even worse if you are running in a virtualized environment on top where the server is affected in turn, but I figure thst wouldn’t show in a CPU graph like this..
Or maybe QA, of which they seem to be lacking recently.
Do rational self maximizing actors always produce globally rational maximized results? This is a type of efficient market hypothesis. If your in CS, its equivalent to saying that localized greedy elementwise optimizers are globally optimum. There exist games like the prisoners dilemma that produce the worst outcome given rational maximizes. If the original problem in question is that type of game then your comment is actually the overly simplistic analysis.
What if deep learning algorithms could predict death better than doctors?
DNSCrypt discontinued?
https://www.dnscrypt.org = Gone

https://github.com/jedisct1/dnscrypt-proxy/ = Gone
Why do we run un-trusted code, and how do we stop?
I think this is related to kpatch only being available as of RHEL 7.2 [1] in general. In other words, this must not necessarily be caused by any specifics of the current kernel patches.

[1] https://access.redhat.com/articles/2475321#scope
Spectre is somewhat reasonable; at least some variants are forgivable. Meltdown isn't. The risks due specifically to speculation and cache timing attacks (and lots of related stuff) were well known and documented for over a decade. They shouldn't have been speculating across memory protection boundaries, and they should have known that - even if it was unclear exactly how one might exploit such information leakage.
https://xkcd.com/1455/
You can basically have bigger UDP packets, that will get fragmented and may not make it to their end.

As far as I know, in Linux there is no support for multi-packet UDP vectored I/O. I wonder if it would be possible to "simulate" that with a raw socket....
And it continues:

> As a compromise, I allowed them to silently patch the vulnerability. In hindsight this was a bad decision, since others might rediscover the vulnerability by inspecting their silent patch. To avoid this problem in the future, OpenBSD will now receive vulnerability notifications closer to the end of an embargo.
>Honestly, this story/link should be considered maybe a both a blow to the "post-pc" narrative (we're going on 8 years of "post-pc") AND to Apple itself.

Post PC can mean two things, neither of which is invalidated by the story:

1) Tablets, smartphones and so on, being increasingly used by regular people (in lieu of PCs) to do work (writing documents, using work apps on the move -- e.g. airport personnel, factory staff, graphic designers doing digital painting on tablets, etc).

This hasn't particularly caught on, but it doesn't really concern the developer crowd and its more specialist needs. Everyone could very well use a mobile phone to write a work paper today, but nobody expected or predicted phones to have a full terminal/file transfer/scripting/programming etc workflow to satisfy the average developer/admin. That's not a real part people though as the "post-PC world". This is usually conveyed in the "Car vs Truck" dichotomy (I think invented by Jobs), where in the Post-PC world mobile phones are like cars (for regular use) and PCs like trucks (specialized use cases).

2) The other sense of which people speak of a post-pc world is tablets, smartphones and so on, being increasingly used over PC (in total hours/day) in general. Which is true and getting truer everyday -- be it for web, mail, social media access, video, etc.
11 creative ways to generate great business ideas
https://fishshell.com/docs/current/commands.html#psub
We found the same thing after the package management stuff caused issues in prod.

We rolled our own go program that just does go tpl substitution in yaml with overrides like helm. Works on charts out of the box, but instead of talking to a service, it outputs a yaml manifest ready to kubectl apply.

We've thought about open sourcing it. It took us literally a day to put together and had worked without flaw for 8 months in production.
> sad outcome if you're not pure in the Stallman-sense.

What do you mean?
I disagree. Aside from the sarcastic "buffer overflow" comment, his comment was far more snide than any of the replies he seemed to be complaining about.

Since you take a different view though, as I asked in my post, if it's not "snarky" then what was it?
Can somebody shed some light in what exactly the released Intel Microcode update does aside from exposing some chicken bits? This is only marginally addressed in the "Controlling the Performance Impact" page linked above.

For example, does the update fix Meltdown in any meaningful way? If so, does it mean that "pti" should be manually disabled on a patched intel cpu to avoid _additional_ overhead?

It seems that the kernel changes being pushed do not account for the current published microcode updates.
Why do you like it? What do you use it for?
YaCy: The Distributed Search Engine Based on a Decentralized Web
Intent matters, at least to me. This does not seem to be a case like VW's diesel-emissions shenanigans.
QNX does map it's kernel onto high end of user VM space.

Due to how i386 TLB works (ie. no ASID) doing that is essentially required to get reasonable performance, micro kernel or not.
For the web, HTML + CSS + Javascript is the basic language. Any other language and framework relies on them. There's no avoiding HTML and CSS for creating web artifacts. A person can avoid Javascript for a while, but reasonably easy tasks will turn out to be harder.

These days, my recommendation for starting with HTML + CSS + Javascript would be https://freecodecamp.org It is not perfect and is not for everyone. But it is a reasonable starting point and exposes people to the inherent complexity of web development in a measured and structured way.

Good luck.
If one really took the time to "learn to use normal computers", then they would be perfectly capable to use a table+keyboard-only interface (and keyboard shortcuts) to do all kinds of editing tasks without even taking their hands from the home row. No need to "mash the delete key once per character to delete a line of text", at all.

So your argument is more true for middling users than for expert users of something like vim or emacs that can do every text edit function quickly with an external keyboard in iOS.
Avoiding the Builder Design Pattern in Kotlin
Ukrainian Accounting Software Dev's Site Abused to Push Out Malware
I think the main issue is that currently clinical treatment requires years of suffering, while a mushroom may solve the problem in a few weeks.
Dupe: https://news.ycombinator.com/item?id=16082839
You forgot:

(x) assigning infants to the female vs male groups

(y) distinguishing brain matter by color

More seriously, I've always subscribed to the idea that nurture had a somewhat greater hand than nature in gender differences, e.g. when an adult keeps talking over my 3y-old daughter saying "you're so cute" and not listening to what she is trying to say; or complimenting her on her hair or clothing, never on the quality of her speech or actions.
How does the landlord intend to pay tax?
Commenting on the upstream bug tracker would do so much more than lazily clicking upvote.
There are way more inefficiencies in our society. For example, we require an academic degree which requires a huge amount of effort (time/money) for many non-academic jobs. Exactly those things that are scarse are seen as a status symbol, which makes it very hard to live sustainably (this applies to diet, transport, housing, travel, ...).

It would be way more efficient to let people bring a container to the supermarket and fill it with the exact amount of stuff that they need. Instead, producers use disposable containers because they can add advertisements on it.

I could go on for way longer (but a HN post is probably not a good format).
I thought this exploit was imagined a decade ago? I could swear I have seen links posted here where concerns were raised as speculative execution entered the picture. But I agree that it’s hard to blame them when it took a decade for something to actually materialize.
hi pjmlp! love reading your comments :)

> So AS/400 applications are not native, given that they use an intermediate representation with a kernel level JIT?

Thanks for making me read up on AS/400 (or System i as IBM now calls[0] it.) I found this article: [TIMI – Protecting Investments and Integrity in IBM i](http://ibmsystemsmag.com/blogs/you-and-i/archive/timi-protec...) – it says,

“Each program that is compiled on IBM i gets turned into a set of TIMI instructions. Essentially, it gets compiled down to a set of intermediate code. For decades, that’s been a pretty common step for a compiler to take – get to an intermediate representation of the program before creating the machine-level instructions. One big difference, though, is that the compiler on IBM i does not go any further. It leaves the intermediate code connected to the program object, and then the lower levels of IBM i act on the intermediate code to translate it into the instructions used by the Power hypervisor and Power processor beneath the OS. IBM i does this only when necessary, not every time the program executes. Typically, the translation takes place once when the program is moved from one release of the operating system to a later one, and never again while it runs on that later release.”

> Java is AOT compiled to native code on installation on Android 5 and 6.

Then by your reasoning and terminology I think you'd also call IBM's tech AOT compiled, not JIT'd given that it happens once per OS release or app move, not each time the app is executed.

And I would say that the applications that get delivered this way on AS/400 and Android 5 and 6 are delivered as non-native (intermediate code as the article says). And then get translated AOT to native which is stored somewhere else and the non-native code is kept around.

Neat, I didn't know that about Android 7 and Dalvik. Is it the same for Art?

> There are AOT compilers available for Java and C#, just as there are interpreters for C and C++.

This I did know. :)

Always welcome your insights, thanks!

[0] https://en.wikipedia.org/wiki/IBM_System_i
>Kids these days don’t get exposed to that so they don’t really desire it.

These days? Kids don't get exposed to those things ever since Windows 3.1, with the exception of the filesystem.
Anecdotally, one-time use of LSD(which acts similarly to psilocybin, primarily through 5-ht2a agonism) set me on a path to self improvement. I had depression for years during my puberty, teens, and early adulthood. I contemplated suicide regularly and had a pessimistic outlook on life. I dropped out of college in my first semester despite taking and passing multiple AP classes in high school because I didn't see the point of college.

Then I took a large dose of LSD once. It was a very unpleasant experience. The changes weren't immediate, but in the following months, my outlook started to change. I started caring about life again, quit smoking and started exercising, and went back to college. Now, I'm completely drug free, have a wife and a degree, and am optimistic for the future. I wouldn't recommend other people try it, because my experience made me understand why some people go insane from it. I believe, though, that it put me on a path of self-improvement, and should absolutely continue to be studied.
> We also tried to reproduce the Meltdown bug on several
ARM and AMD CPUs. However, we did not manage
to successfully leak kernel memory with the attack de-
scribed in Section 5, neither on ARM nor on AMD. The
reasons for this can be manifold. First of all, our im-
plementation might simply be too slow and a more opti-
mized version might succeed. For instance, a more shal-
low out-of-order execution pipeline could tip the race
condition towards against the data leakage. Similarly,
if the processor lacks certain features, e.g., no re-order
buffer, our current implementation might not be able to
leak data. However, for both ARM and AMD, the toy
example as described in Section 3 works reliably, indi-
cating that out-of-order execution generally occurs and
instructions past illegal memory accesses are also per-
formed.

From the Meltdown paper[0] section 6.4 it would seem that out of order execution referencing illegal memory locations still occurs unless of course I'm misunderstanding something.

0: https://meltdownattack.com/meltdown.pdf
Ashley Williams Joins the Core Team and Taking Lead of the Community Team
Well they did release their Coffee Lake generation chip after they already new about the exploit.

Now i know it would take a lot for a major company to delay/cancel a release like that, but i think it could be argued that they were dishonest if they knew it would have a performance impact.
Can someone explain :h as the article's description was not clear at all to me what was going on there.
"fall in line" is exactly what HN is about. Someone once quoted an old article that used the word "oriental" to describe Asian people, and someone on HN said that was highly offensive. I replied and said based on multiple conversations I've had with Asian friends I don't think it's an offensive term.

Well it turns out Scott the HN mod ultraliberal from San Fransisco thought that was reason enough to shadowban me forever on HN. That's the game here -- agree with Silicon Valley/San Francisco liberal politics or be banned.
I think there is another important reason to extend embargoes aside preparing patches. Vulnerabilities like Meltdown and Spectre are in fact a whole new family of attack methods. It would take time to fully evaluate the extent of the problem. I would not be surprised that we learn new variants of Spectre in the coming future.
Would you be able to post some ballpark figures, please?
AMD CPUs are not affected by Meltdown, but they are affected still by Spectre.
hey what d'you know, snarky
Well this might not answer your question directly, but it shows how VACCUM solves problem such as transaction etc. Its a great video to watch, covers topic in depth : https://www.youtube.com/watch?v=ZxhBkBNxvR0