skysight-inc/HackerNews huggingface dataset:
Meanwhile with Linux, you can have many people writing and testing bugfixes. Open source OSes don't have this problem where you have to wait for one company.
website looks great on my machine. Firefox v50, Ubuntu 16.04 LTS
Humble: Civilization VI and 2 DLCs and 7 Games – $12
weird. What browser are you using?
https://www.phoronix.com/scan.php?page=article&item=linux-kp... shows that the kernel version has more of an impact.
Elsevier and their lackeys and running dogs of documentary oppression are nothing more than an elevated street gang that uses the assigned mandatory copyright. Copyright has expanded without limit and now acts as the weapon that Elsevier wields against the people. Look at how the Disney Corp lobbied for ever longer copyrights.
This can only be solved by national governments taking back academic authors rights by law. Sadly Elsevier bribes (AKA 'lobbys') with their war chest of money stolen from authors.
With current cloud tech, they could be replaced in days. All the prior archives should also be freed by legislation.
Why isn’t the rate of vacuuming in Postgres determined by the rate of churn instead of things like wall clock time?

These weights and heuristics are either going to punish small databases of sabotage large ones, unless the factor in a predictor or how much there is to vacuum.
I feel the same way. Intellectually it seems like it's been all downhill since leaving grad school :).
Love to see actual benchmark results from this with various applications - databases, network stack, apache, ngnix, etc.
That's because those previous assertions were incorrect.

AMD is not affected by Meltdown, true, but Meltdown is also easier to fix. The other issues do affect AMD, and are MUCH harder to fix (also harder to use it should be pointed out).

Meltdown was disclosed first, so everyone was excited to bash Intel. But that was premature.
As far as I can tell, one bit of news to me at least in this Intel whitepaper from today is that the microcode update to mitigate “variant #2” would be needed for Broadwell+, rather than the Skylake+ that had been stated yesterday on LKML. From Intel's PDF today:

"For Intel® Core™ processors of the Broadwell generation and later, this retpoline mitigation strategy also requires a microcode update to be applied for the mitigation to be fully effective."

vs. at least what I had seen on LKML list yesterday seemed to indicate Skylake+.

Sample snippet from LKML[1]:

"The x86 IBRS feature requires corresponding microcode support.
It mitigates the variant 2 vulnerability..."

and related sample snippet from LKML[2]:

"On Skylake the target for a 'ret' instruction may also come from the
BTB. So if you ever let the RSB (which remembers where the 'call's came
from get empty, you end up vulnerable.

Other than the obvious call stack of more than 16 calls in depth,
there's also a big list of other things which can empty the RSB,
including an SMI.

Which basically makes retpoline on Skylake+ very hard to use
reliably. The plan is to use IBRS there and not retpoline."

I'll confess I'm not 100% following all the ins and outs of this, but can anyone comment on any additional details regarding the Skylake+ vs. Broadwell+, and/or confirm if there was seemingly a change?

[1] https://lkml.org/lkml/2018/1/4/615

[2] https://lkml.org/lkml/2018/1/4/708
When I had a corporate job, one of the managers always said "Bring solutions, not complaints." I have generally found that approach to be a good practice.

Venting about your frustrations amounts to adding burdens to the system. They are probably also frustrated, and now you are making your feelings their problem. Better to deal with your frustrations on your own and not bring it up until you have something constructive to say.
World Leaders on Twitter
I mostly use Ember and have been working with React recently. I'm kinda baffled that it's as popular as it is. Nothing works out of the box, it's an exercise in frustration trying to get an SSR app with asynchronous-data-loaded containers working. This all just works out of the box with Ember.

I can't help but feel like it's only useful as a low-level primitive that is still lacking a "full stack" framework on top. Even Create React App, which is an official project for this purpose, falls way short of what apps need in 2018.
Finally, California Gets a Meaningful Housing Bill
All fiat currencies have significant inflation though. Few also benefit from mercantilists incessantly wanting to sell products for that currency.

Mind you, mercantilism can have significant detrimental effects on the importer -- no doubt. But it's not all roses for the mercantilist exporter either.

Really, a multi-decade trade imbalance is not a good thing for anyone, but it's not that clear who is the worst off.
Cool project! I've thought about this before and ended up making throw away accounts. I really like this approach though.
Are you seeing the main rating (the Tomatometer) or the average? The Tomatometer is just the ratio of ratings over 50%, not an average of the ratings.

If you see Furious 7, for example, it has a Tomatometer rating of 80%, but the average is just 6.6/10.

(Note: you have to open the movie page to see the average rating)
You should also have a solid background in calculus before fully understanding these books. Typically, Physics majors take every undergrad calculus class offered in the math dept. at a college, then a few more in Physics just to be sure.
> At best they can do a crappy job of emulating specific human behaviours

...With better performance than human, that is pretty magical.
What is your use case?

Based on the link you provided, it appears to be a cloud tool that allows someone to generate end reports comparable with uptodate.com. Is this the case?

A domain specific vertically integrated search engine seems like a great idea but probably requires being bought by Bing or Google to incubate while both the world and the technologies develop.
The overwhelming majority of the cloud runs on Intel. Saying AMD is slightly better off doesn't really help if my systems are built on Intel. This is the case for most people.

What hype are you referring to? Are you suggesting the people who bought AMD knew this was a problem for Intel?
Unfolding Arctic Catastrophe
> Just because you think DICSS is amusing, doesn't mean you want your boss to know about it. How about your girlfriend?

It's 2018. Dick jokes and "your girlfriend" examples have no place in software engineering, not that they ever did. That holds doubly true for a project whose target audience potentially includes people who have reasons to protect their identity.

As potentially better examples: contributions to the bitcoin repository tend to result in spam from random people who think that the list of every contributor to bitcoin is the right list to send random cryptocurrency spam to. Or, you might want to contribute to the https-everywhere repository without revealing sensitive sites you're contributing entries for. ("Potentially sensitive" here could mean a wide variety of things, such as sites for sufferers of a particular medical condition, sites for organizations whose members regularly get targeted, etc.)
Why You Should Be Using a Private Search Engine
The doomsday argument implies it will also be steep, but in the other direction, making real estate not so valuable.
This is all getting rather silly, right? I was the first one to mock Richard Stallman for being too radical, dramatic and paranoid but I can now confirm he wasn't. Every word he said in last 15 or so years is true.

This all simply makes all our IT related work just kids playing make-pretend security.

I am literally trying to figure out what other processors exist that can be used in everyday BSD/Linux work. Sparc? Some ARM branch? Any suggestions welcome.
Good post: although maybe missing a bit on testing? If the manufacturers got a just few people to try to heat up some bolognese, they would probably soon have discovered their UI needs a of tweaking.
The government's job is to balance the will of the people with the rights of minorities.

If 51% of people voted to outlaw single family houses would that be acceptable? Of course not. People should be able to build the type of housing that they want to on their own property.
Seems to me Tim Cook's legacy will be similar to Steve Ballmer at Microsoft. Great for shareholders, terrible for the company's long term competitiveness.
This related RHEL article contains some information about the various mitigations they use (PTI, IBRS, IBPB, i.e. Page Table Isolation, Indirect Branch Restricted Speculation, and Indirect Branch Prediction Barriers) and their relation to the Intel and AMD microcode updates: https://access.redhat.com/articles/3311301

It does not really answer all my questions about the microcode updates, but I have not seen any more comprehensive writeups yet.
Automated Zendesk Import
Yesterday's version was wrong: https://twitter.com/lunixbochs/status/949121236428181508

This is the diff: https://twitter.com/lunixbochs/status/949374313978875904

I wouldn't be surprised if they actually do patch soon (someone posted on Reddit about seeing a Security Update 2018-001 beta in their app store).
The exchange lemma and Gaussian elimination
It defaulted to Portuguese for me, and was generally not as intuitive on how to use vs say coinmarketcap
You're exactly correct. This is why the browsers decreased timing resolution in javascript so that you couldn't time memory accesses accurately enough to tell if the address was cached or not.
That's the one I meant. You're right, that one does seem worse. I didn't realize that the previous one had information on so many people.

This one seems especially terrible because it had information on people unrelated to the US government.
2018 is going to be a great year for zero day exploits.
You could probably write a script to add content from a folder, maybe as part of the deploy process?

Either way, that was the most glaring shortcoming I saw in my brief foray into IPFS. There's lots of talk about pinning services and paying, not much talk about hosting your own pinning service, which was shocking to me since the idea of IPFS is to be decentralized, especially when most of the traditional bandwidth concerns of hosting your own content are mitigated by the P2P aspects.
Sounds similar to the mistake of taking your best developing and having them manage the dev team. Code quality will likely drop.

What made Apple exiting was their visionary products. With Johnny designing and Tim getting them launched on time, Steve could be Steve.

We need a new Steve.
It almost sounds like the real solution is teaching the users how to program. Possible with a suitable abstraction to make it easier for them.
Indian who was born and grew up there. Caste was never a thing outside of arranged marriages. The only time I hear about it is from news when there were protests from certain castes recently demanding reservation or from places like reddit and hn where someone would post about casteism in India.
That's super informative, as I wrote my methodology was flawed and indeed... Tests to redo. Btw what's the reason for this terrible regression?
Seems unnecessarily pessimistic.

Life itself is a complex system that radically altered its environment - and here we are now, billions of years later.

I'm not a climate change denier. The problem is very real, it's huge, it's definitely caused by us, and it needs to be addressed by taking a variety of vigorous measures. I just don't see it as a mandatory death sentence. There are some ways to deal with it, and we'll figure out more if needed.
> This is one reason why type theory is superior to set theory. In type theory we can actually capture the abstract concept of real number and work with it, instead of always working with an encoding.

Could you give a small example of how a simple bit of reasoning about a real (or even natural) number would work in both frameworks?
Excuse me, but this story was political from the very beginning. She was shot multiple times by a petty criminal wielding a firearm. As angry as one might get at the insurance company, it's even more infuriating that this is still a passably common occurrence in the US. This shouldn't have happened in the first place, and the reason it did is entirely political.
I have loved tech and been in the industry for a long time. To me, the article was one giant WTF from start to finish.

It described a culture an iota short of entirely alien to my own experiences, in an area bounded roughly by Madison, Wisconsin; Nashua, New Hampshire; Orlando, Florida; and Memphis, Tennessee.

When my employers have served up the corporate Flavor-Ade, my co-workers and I sipped politely, then discreetly took turns purging it in the bathrooms and pouring our cups out into the potted plants. Even when I did my tour in a startup, the culture-forcing was never that cringe-inducing. We all knew that it was the boss's job to sell the bullshit to the investors, and our job was to give him something to sell, rather than buy it all ourselves.

I think this may be more about San Francisco/Silicon Valley culture than it is about tech culture.

To anybody for whom this article resonated a little too strongly, you might be better off doing exactly the same work in an earlier time zone, in places less dominated by the billionaire boys' club. I love tech, but I can't imagine anyone loving technology so much that they can stand to work in a culture that warps it into shapes bizarre, sad, or repulsive.

Is all the extra pay and extra career opportunity worth it? Every time SF/SV culture comes up, someone always does the calculation where someone who can just suck it up for a few years comes out leagues ahead financially. But isn't the goal to be happy?
you need to review the technology if you think ipfs is more fragile and needs data nodes to always be up.

you need one data node up. You can have as many as you want.

if nobody wants to keep the old exes, they'll be lost forever. ipfs was never meant to keep everything forever.
Its meant to guarantee you that the file you're viewing (if it still exists) is the same one that was published under this hash. With no regard as to the source of the file. It could be shared with you by your neighbor or the original uploader. And, if you see value in the content, you can also share it with others by pinning it.

its essentially bittorrent as a filesystem. as long as nodes exists, the files will be available.
DICSS – Directly injected CSS
Why Crypto Is HUGELY Overrated, and Underrated – 11 Bold Predictions
> Don't do this:

> module.exports = IPFSDropzone

> Do this (and change documentation accordingly)

> module.exports = {IPFSDropzone}

Why? Exporting a single class for this kind of lib is preferable. I'd do:

export default IPFSDropzone;

See react-dropzone which does this [1]. (For that matter the author's questions around project setup would probably be answered by looking at react-dropzone's which looks pretty good).

Also with npm scripts, local deps that expose executables are added to your PATH so you can call them directly, e.g.

"prepublish": "babel *.js -d build/"

[1] https://github.com/react-dropzone/react-dropzone/blob/master...
I don't. I spend most of my time at work and let most of the rest of my life go to shit. I wake up at 5:30 am and get home around 7 pm 6 days a week. Eat dinner, chill for a bit then go to bed at 10. On Sunday I usually go buy coffee then hangout programming, playing music or doing shit around the house I've neglected. Start drinking beer when I get sick of coffee. Eat dinner, go to bed. Most Tuesday's my friend hosts a taco night,so Tuesday i'll stay up late eating tacos and drinking beer. That's what I've done almost every week for about a year now. Life's fairly bleak this way.
Those are exactly the systems that are falling over already, aren’t they? They’re already tied together whether that’s inconvenient or not. Right now (or at least, recently) the performance simply falls off a cliff instead of degrading.

A lot of the tools we have for dealing with down services also can deal with degraded ones. If for instance throttling votes per second keeps the system usable for everyone else then that has been done before and can be done again. But you have to do it before the database has a seizure, not after.

[edit: I’m talking about back pressure. This is not a new or crazy concept. Your incredulity and $5 will buy me a cup of coffee]
Menlo, Benchmark, First Round sell Uber stakes worth hundreds of millions
Related, an excerpt:

One of my pet peeves are people who try to reduce a vector to a scalar, with no admission of the information loss. For some reason, this has become accepted practice when it comes to estimating our standard of living.

Suppose the economy grows 5% but violent crime goes up 10%. Has the standard of living increased?

Suppose the price of gasoline declines 30% but people stop going to church. Has the standard of living increased?

Suppose the price of cell phone plans decline 90% but the people who speak your language become a minority, and people who speak a different language become the majority. Has your standard of living increased?

Suppose your wages increase 10% but the amount of air pollution increases 200%. Has your standard of living increased?

Suppose your wages increase 20% but the government changes the law to make it easier for companies to fire workers, so you face a greater risk of losing your job. Has your standard of living increased?

In every case, we are talking about a vector that can not be reduced to a scalar without information loss.

http://www.smashcompany.com/philosophy/if-women-had-invented...
Fair enough, the examples could use some work. I kinda just threw the landing page together without thinking about it much.

I'll take another pass at it.
Can you elaborate on this? This sounds like a Naturalistic Fallacy.
Keep Your Searches Private So Google Doesn't Use It Against You
Didn't know that dalits fought with British to bring India under British rule. Interesting.
Top Ten Python Articles of 2017
From the article:

"It is common to experience swarms of earthquakes at Mount St. Helens."

"...there is no immediate danger of an eruption."
This is surely a misunderstanding - the Zen pipeline is 19 stages deep, and disabling branch prediction would utterly destroy performance.
The primary missions in drug development are efficacy and safety. AI can help answer clear well-formed efficacy questions like, "Does this molecule fit a chosen target molecule"? But it can't help with bigger efficacies like, "Will hitting this target make a sufficient difference in managing this disease"? Or any safety questions like, "Does the molecule also hit any other molecules somewhere in the body (or population) that might screw up something else"? And unfortunately it's safety failures that eat up 90% of drug development costs (esp. in Phase III).

Until Wall St (or Sand Hill Rd) understands that domain-agnostic low-info approaches like AI are incapable of answering complex questions that require teams of PhDs steeped in decades of doing both chemistry and biology, the notion of CADD will continue to miss the mark and waste megabucks.
So, would you be equally comfortable with stating that a hardware random generator doesn't solve any problems related to boot time entropy and the use of insecure RNGs by mistake?
I wouldn't recommend Spivak for self-study and a first exposure to analysis. It's known to be notoriously difficult even for good students.

I learned from this Dover book[1]; I think it's pretty good. From there you might move up to Baby Rudin[2], but it might have a lot of typos, or big gaps in the exposition that are taken to be obvious but require several steps to fill in, since that was certainly the case for Papa Rudin[3].

[1]: https://www.amazon.com/Introduction-Analysis-Dover-Books-Mat...
[2]: https://www.amazon.com/Principles-Mathematical-Analysis-Inte...
[3]: https://www.amazon.com/Real-Complex-Analysis-Higher-Mathemat...
"Random numbers should not be generated with a method chosen at random" -- Donald Knuth
Can you provide those links?
Box breathing box
That's a little unfair, the RISC-V design is intended for both low power and high power applications, in implementation is has the potential to be comparable to the Pi 3's Cortex-A53. Where as the two 86s you mention are very old slow CPUs and the other two you mentioned are 8bit microcontrollers.
t, w_ = a+b, kern_mem[address]
u, x_ = t+c, w_&0x100
v, y_ = u+d, user_mem[x_]

if v:
# fault
w, x, y = w_, x_, y_ # we never get here

Form the author's example, it seems like the processor is able to read the kernel memory privately (`w_`) and crashes if the code attempts to commit `w_` to `w`. It would be interesting to know how the processor does that.
>> Sure, it'd be better to use the money productively, then we get two things: $1trn worth of gadgets + whatever $1trn bought in the U.S.

The OP asked what if the US borrowed $1trn from china and spent it. Where does this $trn worth of gadgets come from in that scenario?
Came here to say the same thing.

Richard Stallman was right and I wish we would learn to listen but I doubt that will happen.
It reminds me of this nice link on how to generate Gaussian from uniform, using Box-Muller transformation:

http://www.design.caltech.edu/erik/Misc/Gaussian.html
Hm... TIL:

> Don't just create one account for each contribution you plan to make through github.com, e.g., so that you don't have to worry about deleting them. Unless you're paying for all those accounts, this is also against the GitHub terms.

I've always created throwaway accounts in the rare cases where a maintainer won't accept an emailed patch. As for hosting/mirroring hobby projects, http://repo.or.cz is nice.
This problem was discoverable for the last 20 years. Of all the confidential tech that goes into a CPU, this wasn't it.
It's not related to Secure Boot, no, so there's no requirement for physical access.
looks like rank sexism in disguise
Show HN: Download GitHub invoices using Puppeteer
https://github.com/TomasHubelbauer/scrape-github-invoices/tr...

Hey HN, I was frustrated with downloading GitHub invoices for my org by hand so I figured I'd use the GitHub API to download them instead.

…not so fast! The GitHub API doesn't allow one to do that. So I decided to stretch my Puppeteer muscle as I've been enjoying it more and more since I first looked into it and scrape the licenses from my own account.

The only thing I have to do now is fire up this script and enter the 2FA code. The rest is taken care of. Please note that this probably won't work headless as headless downloading still seems to be a to-do for Puppeteer: https://github.com/GoogleChrome/puppeteer/issues/299

I may have to rename this repository, because I have a feeling name-dropping GitHub in the title will get me asked to change it, but that said, I hope you find this useful if you also like to keep the GitHub invoices locally!
What specifically has Stallman said that relates to this particular issue?
I'm going to assume that this post is coming from a place of social ineptitude and not malice, but just about everything you've said is insensitive, over-generalizing, frowned-upon, and kind of just untrue.

Honestly, I'm perhaps one of the least "progressive" people in this community, and I think it's pretty uninformed to think your comment is going to be helpful or describes an OK way to behave.
This seems like a press release. What's the difference from something like DuckDuckGo other than branding?
Wait, is it the raptors that are intentionally spreading fires by carrying burning sticks around, or is it the local people intentially spreading fires by giving them by burning sticks to carry?

And if so, why do the raptors do it?
This isn't surprising. Intel has established a pattern of BS'ing when confronted with their mistakes / wrongdoings. Do they think their consumers aren't smart enough to see through it? I was already leaning towards AMD's processors for my next system, and Intel's handling of this recent episode does not help their chances.

I'd say Linus feels the same: https://lkml.org/lkml/2018/1/3/797