skysight-inc/HackerNews huggingface dataset:
The 5% to 30% performance hit (dependent on workload) was measured with PCID. The hit may be more on older CPU's that do not support PCID.

So Intel might make out OK on this, since people will have to update their servers, and right now there are many more x86 server hardware choices which use Intel chips. The truly scary thing from Intel's perspective is if people decide to use this as an opportunity to move to AMD, or worse for them, completely outside the x86 ecosystem, to ARM64 or PPC64LE systems. I have heard accusations that Intel has strong-armed motherboard manufacturers so there are't that many choices for those other platforms --- at least so far. But of course, everything can change over time.
Meltdown Attack
This! Annotation and discussion would bring a lot of value to this site! Would be awesome to be able to start a discussion (thread?) from a single note and drill down to the really specifics.
Probably not fraud, if the accusations are true. This sounds similar to what Bill Ackman did when his fund shorted Herbalife - he started a campaign suggesting Herbalife was illegal and demanding an investigation on the company supposedly illegal practices. [1]

1 https://www.institutionalinvestor.com/article/b1505px65dmmnr...
but since the host still has to perform some paging (and possibly for the guest) in paravirt, it should affect guest performance. In this snippet I think that is paravirt guest code so page tables don’t need to be isolated twice.

So I think the host kernels’ perf degredation will still affect it.
They have a great, expensive product. It's worth it if you can afford it.
Recon: browser-based open source intelligence tool
Colorado blazing the trail again for the entire country? I like it.
Here are few great ones http://cherrypick.club/post/QmxvZ1Bvc3QtLS00Ng==
Spectre Attack
It definitely shows how many people are running close to the limits, too. I have a couple of m1.mediums running ancillary workloads (e.g. rabbitmq) and it added something like ~0.5%.

What's more interesting is later on in that thread where a support staffer noted that one of the people reporting problems was running out of memory because they'd apparently been very close to the max and that dropped slightly with the update. I had a problem with two test RDS instances suddenly failing into the invalid parameters state which turned out to be years-old config for the InnoDB pool size being just a little too large after a reboot reduced the available RAM by just enough to matter.
Evolution doesn't "stagnate". Ever.

Humans are still evolving. Probably faster than ever. See http://www.pnas.org/content/104/52/20753.long .

What does "a long long time ago" mean to you?

It's only 65M years since mammals underwent the massive adaptive radiation after the K–T extinction.

It's only 50,000 years since the human population started to greatly increase. (See previous reference.)

You need to be very careful in looking for references which support your thesis. You'll not find good counterarguments that way.

Be very cautious about any reference which emphasizes "dominance hierarchy" in humans, especially when based looking towards chimpanzees (Pan troglodytes) as a model for understanding how early humans interacted.

Only more recently have we been looking at bonobos (Pan paniscus), which are evolutionarily equally distant from us. The thing is, bonobos have rather different behaviors than chimpanzees, including in how they deal with dominance.

Unfortunately, a lot of wide-spread cultural beliefs on this topic are wrong, or at least much more controversial than can be used as the basis for any good understanding. See for example "alpha male" at https://en.wikipedia.org/wiki/Alpha_(ethology)#Controversy and https://www.youtube.com/watch?v=0Ti86veZBjU .

I would advise you to look for books by people who work in, or very closely to, anthropology, archeology, and genetics. And stay away from evolutionary psychologists, most of whom in my experience have a flawed understanding of evolution.

As an example of a warning flag, your last link, a book from 1990 is pre-genome, and talks much more about chimps than bonobos.

You might be interested in "Why are there so many explanations for primate brain evolution?" at http://rstb.royalsocietypublishing.org/content/372/1727/2016... .

They argue that the Social Brain Hypothesis (SBH) has the strongest support:

> SBH is an explicitly two-step process: an ecological problem is solved socially (i.e. as a cooperative process) and a big brain is needed to allow the requisite level of sociality to do this. The group created by big brains is not an end in itself (a mistake made by many attempts to compare between alternative hypotheses: e.g. [18,103]), but rather the means to an ecological end. It is important not to mistake this view for group selection: it does not involve the differential survival or extinction of groups. Rather, it is a group-level or group-augmentation explanation (sensu [104]), such that individuals living in larger social units have higher fitness than those living in smaller ones.

The only mention of "dominance" in that publication is in the title of a citation to a paper from 1980.
It was much more than just speech which caused all that.
Google, Amazon Digital Assistant Patents Reveal Plans for Mass Snooping
> The wealthy hold the wealth not because they deserve it, but because they have used their power to take it.

Who did JK Rowing rob to get her money?
I'm in Berlin, and in my 30s. I'm partying more now than I ever did as a teenager or in my 20s.

This city has a somewhat unique club culture with a bend towards left-wing politics and art (plus electronic music and psychedelics). It's gotten so big that the local government has started to consider the scene economically important, and works to protect the venues from the threats of gentrification.

Festivals (in all of Europe) also seem to be growing every year. Plus there are of course house parties–I don't go as often, but most students I know do every weekend.
I think several designers have become confused as to the rationale behind this trend.

The purpose is detract from the books in the picture and focus on the design of the room. No one in their right mind actually thinks you're supposed to turn books around in practice. Unfortunately, there are many people not in their right mind. These people deserve to be mocked.
cool project! is it a cordova app or facebook react? as you have typescript in there it probably is something like that??

i think this really fills a great whole. i am happy that you did this work ;)

i would definitely be willing to contribute, if you open source it.
Iranian Regime Crowdsourcing ID of Protestors for Arrest
Story at: http://www.mizanonline.ir/fa/news/383202/%D8%A7%D8%BA%D8%AA%D8%B4%D8%A7%D8%B4%DA%AF%D8%B1%D8%A7%D9%86-%D8%B1%D8%A7-%D8%B4%D9%86%D8%A7%D8%B3%D8%A7%DB%8C%DB%8C-%DA%A9%D9%86%DB%8C%D8%AF-%D9%84%DB%8C%D8%B3%D8%AA-%D8%AF%D9%88%D9%85-%D8%AA%D8%B5%D8%A7%D9%88%DB%8C%D8%B1

Reports are going through: http://gerdab.ir/fa/contacts
https://my.gerdab.ir/web/collect/report/public

(Vortex, part of Iran's Operation Spider Social Media Censorship System)
"I have reviewed support case 4743634091 regarding what you're experiencing on your instance. You're correct that what you are seeing is not the same issue as what others are reporting. In the first correspondence from support they correctly pointed out that the kernel in your instance is encountering an out of memory (OOM) condition and made suggestions about how to adjust the configuration within your instance to avoid the OOM processor killer from kicking in.

The update that is being applied to instances that have scheduled reboot maintenance can cause slight changes to system resources available to paravirtualized instances, including a small reduction in usable memory. This can cause smaller instances, like m1.medium, that run workloads that were previously just fitting within the usable memory available to the instance to trigger out of memory conditions. Adding a swap file (as no swap is configured in your instance) or reducing the number of processes may resolve the issue on your existing PV instance."

ie there is less memory on PV after the fix, and this machine was nearly out and is OOMing. This is not a reflection of any significant performance hit with normal cases.
The thing is it does work. Because it forces the rotten core of the ideas to the forefront. It's the difference between having to enumerate all the people the mob think should be dead (which ironically is probably a collection of disjointed sets) vs just waving a flag and gathering all that hate anyone. By criminalizing specific icons of hate, you can rob those who would build a following from using them as a rallying point.
Seconded. Also you might like YNAB.
What do you think is benefit of fighting that pink?

(Full disclosure: I hate pink and was shocked too over how much of it grandparents and such forced on us and in what way. But I am still curious about your reasons. )
Security Vulnerabilities in Star Wars [video]
That's not always true, the best cases for inlining one-use functions is when you don't introduce new local variables.

I've seen 1k LoCs functions that were incredibly easy to understand, and 10 liners that were complete gibberish messes.

I do however agree that declaring new variables every 10 lines over hundreds of lines would be hell to follow.
I wonder if they get to claim a tax deduction for “donating” air time in this manner ...?
Awesome work Peter! This is leaps and bounds ahead of the competition (http://status.im and http://toshi.org)
I consulted last year at a company that bought books in bulk as part of their cool decor http://bulkbookstore.com/ some books were interesting, but most of it was crap and, being the kind of guy I am, I was always irritated walking to my workstation down the long aisles of books with titles repeating every second case.
Kubernetes for Big Data Workloads
نصب تور در مکینتاش – علی مولایی
What limiting beliefs are, how they hurt your career, and how to overcome them
I don’t know enough about Xen to be sure, but I know typically your dom0 is a Linux kernel even (or especially) with HVM. If it’s been patched and is performing any paging on behalf of the guest, this will indeed affect performance of both paravirt and HVM instances.
I don't get it. Opera keeps being first at everything, yet they seem to fail to get any meaningful browser share (worldwide).

So sad.
I think the article is saying Twitter banned the account at least partly as a consequence of the legislation, because they were worried about being fined.
So, here's a newer piece, with opposing results:

https://musicbiz.org/news/music-bizloop-study-millennials-tu...

But it looks like the data from other recent sources are mixed, with different surveys posting widely varying data, consistent in the direction of change from radio to streaming) but not what the current leading discovery sources are or even the relative placement of streaming vs. radio.
Intel's investor call [1] is underway and they are describing the attack vector(s). Rogue data load seems to be most concerning issue according to Intel.

Intel thinks this will need firmware and operating system updates to fully mitigate.

[1] https://www.intc.com/investor-relations/investor-education-a...
> Which is presumably the implied motive for Moxie to trash talk OpenPGP.

I'd rather say that Moxie implies that OpenPGP is broken beyond repair and thus the only alternative is his centralized solution. While he doesn't say this explicitly his other post (The ecosystem is moving) says exactly this.

Your anecdotal evidence while interesting does not show that OpenPGP cannot be improved, only that given enough government funding you can build a nice centralized, encrypted solution but as the top comment by lmm shows [0] it's not clear what audience is Signal aimed at:

> There is no threat model where Signal makes sense.

[0]: https://news.ycombinator.com/item?id=16062193
LLVM 7.0 / Clang 7.0 Is Now Under Development – Phoronix
First of all, the "broke college students" quip is wrong. Generally, Netflix's subscribers are fairly well off (in the US anyway). Second, even if that was the case, I can assure you that said college students would suck it up and pay the extra $5-10/month. This extra cost isn't putting anyone into bankruptcy. Netflix has raised prices several times and subscribers keep increasing. And people are just getting more addicted to it. And the competitive advantages is getting larger. And the (good) alternatives are getting fewer.

"Unreasonably" is the key word there. What is unreasonable? I think that for the vast majority of subscribers, they get FAR more than $10/month in value (or whatever it costs). Cable costs something like $100/month and it's arguably far worse of a product. Is $50/month for Netflix unreasonable? For some I suppose, but for most I'd be willing to bet no. Remember Ballmer saying no one would pay $500 for a phone? :)
> Quite possibly, but it still a bad omen for Intel. This sounds a lot worse than a slightly off division.

It actually doesn't even sound comparable to me, let alone worse. A wrong division is an operation producing incorrect results contrary to the specifications, plain and simple. What we have is a CPU producing correct results, and simply refusing to provide a guarantee about caching or timing. In particular it makes no guarantee that caching or timing behavior is data-independent. So it's not exactly hard to argue that it is not malfunctioning at all, and that people were (rightly or wrongly) simply assuming more about the CPUs than they were guaranteed.

Mind you, I don't like the bug any more than you do, and I would obviously like this to get fixed too. But it seems pretty hard to compare this with the division bug.
If this is "the intel bug" that is about to be announced right now, then I think it's remarkable that it's been sitting around in this blog post from July 2017?
I agree with you on most VMs. But once you schedule mixed workloads, you want each host to be balanced so that all of its capacity is utilized evenly. Which means that if CPU use increases across the fleet, you will want new hardware with more CPU.
I'm sure ARM vendors have their own problems... it is just that they tend to be used in application specific products so the bugs are worked around. Having come from a firmware background I've worked are tons of ugly workarounds for serious bugs in validated hardware.

Furthermore, I just a read an article (can't find the link) that certain ARM Cortex cores have this same issues as Intel.
The problem with hate speech laws are, it means you can't insult everyone equally. If you call someone stupid, they could accuse you of a crime, but you're not calling them stupid because of their race.

And I want people who actually are racist to talk, so I know who I don't want to be friends with. If they're all keeping their racist opinions to themselves, I might waste a bunch of time being their friends. And I can't correct them when they're wrong if they don't expose their opinions.

And what about having an argument? Someone could accuse you of a crime if they misinterpret what you say. That's the real problem here. You can say something with no hateful intent, but people can interpret it with vigorous hate. It's a really stupid law.
The best guess I've seen so far is this one: https://plus.google.com/+KristianK%C3%B6hntopp/posts/Ep26AoA...
The Ballad of Mulan, According to Ask a Historian
Unsure if this is related, but a few weeks back AWS paravirtualized instances were experiencing extreme clock skew and suffering frequent restarts. Our clocks were skewing about 8 seconds per hour, and the instances were getting swapped out at least once per day, sometimes more.

Switching to a HVM instance type resolved the problems.
Ask HN: What is the safest way to purchase Ripple?
I want to invest some money in Ripple but I'm nervous about the process of actually buying some. It seems overly complicated with many click-bait articles explaining how to do so. Can anyone give a recommendation for a reputable place to buy Ripple from? I'm UK based.
Germany generally has more members of the far right than than the UK and France, despite having laws against expressing these ideas.
4,5 and 6 don't need to time the attack.

I am not really sure how/if zero copy may/may not solve this problem.

If this bug only allows reading kernel pages, zero copy may actually help if the unprivileged user can't read your pages, but from the small amount of available description it looks like it can read any page, but kernel pages are more interesting because thats a ring lower and which is why all the focus is on that.

I am fairly certain there is more protection against being able to read memory owned by process on a lower ring level so zero copy may be a bad idea for security critical data.

And based on the disclosure that google published, looks like any memory can be read
That's a different person than the one that created the support thread though.
No, the claim being made is that ME is being added as a feature, with a hyperbolic version of the other argument tacked on. Whether they were forced to include it doesn't matter, the way they included it benefits the intelligence agencies.
Speaking of rails and Vue, how do you manage authentication? Can you point me to an example of a Vue-powered page in a larger rails app consumes json data after authentication?
I can just as easily say "walking in any major US city, you can find young male black thugs. . ." And then use that as a justification to ban many rap lyrics on the basis of "hate speech".
If you were in a restaurant in 1930s Vienna surrounded by great art, music and intellectual

Or 00’s Tripoli with free healthcare and education ...
If you think people could be so easily corrupted by someone's speech on Twitter, then how can you have faith in democracy? I understand keeping young, impressionable minds from bad influence, but what about voting age people?
Asus is turning its old routers into mesh Wi-Fi networks
No, the main skill is planning.

That's the main skill of the Iron Butt Rally (www.ironbutt.com), in which I have previously had a podium placing. Because of the structure of the rally (which is not how fast can you go from point-to-point), logistical considerations are your biggest enemy. Can I get from point A to point B, with optional out-of-the-way stops at points X, Y, and Z, and still get to B on time (with heavy penalties if you're late)? Get a ticket, and the organizers find out (and they will), you're out. The organizers try very hard to keep speed out of the rally. As they say, it's a rally and not a race.

But I'll tell you what, when it's just after sunrise in the Panhandle of Texas, there isn't a car on the road, and I need to be in L. A. in twelve hours, well, let's just say legality isn't at the top of my list. The harsh reality is that if time is a consideration at all, then pragmatism says that the faster you go, the more time you have to sleep, eat, or add Point W to your list of stops. That's largely why I quit participating in such events, because unless they want to do it timed rally style (IOW, you must be at fixed points neither early or late), all the platitudes in world aren't going to keep the speeds down.
Companies aren't "deputised". They are just required to follow laws. It's nothing new, nor limited to Germany, nor nefarious: US companies are routinely required to cooperate with the government. When they submit tax information, have the foodstuffs they sell inspected for contamination, when they ask for your driver's license before selling you alcohol or when they put a "you must be this tall" cardboard cutout at the roller-coster's entrance.
The claim is FUD. No governments wrote $200 billion of checks to have broadband built. Look at the methodology used to derive that number: https://www.ntia.doc.gov/legacy/broadbandgrants/comments/61B... (starting on page 222).

$103 billion is "excess profits." I.e. if you pretend that telcos should receive the same profit margins as water companies, during a period of massive growth in demand for their product, then you can count any profits above that level as "taxpayer money paid to the telco." By that logic, taxpayers are giving Apple hundreds of billions of dollars in subsidies.

$78 billion in "excessive depreciation." If you assume that depreciation schedules during the POTS era should be the same as during a period where everyone was replacing their networks to build broadband, then you can count the "excessive depreciation" as "taxpayer money paid to telcos."

If you actually read the origin of the number, nowhere will you find reference to checks written. The gripe is about deregulation in and of itself--the very idea that the government should not be deciding what prices to charge for what services. That kind of thinking is totally outside the mainstream among telecom regulators in the developed world. Every major European country deregulated their telcos in the 1990s and 2000s. The government in Germany or France doesn't sit there and decide how much broadband service should cost, and call everything above that "excess profits."
Side note, just was delivered a Shield.

They are horrible.
- Constantly hijacking HDMI from other sources
- Remote has a sticky down button
- Voice turns on and off for no reason and starts operating.
Something “operating as designed”, if designed incorrectly, is still broken.

Something that doesn’t “corrupt, modify or delete data” but does “leak” sensitive data to potential attackers, is still a serious exploit.

This is worryingly full of error-by-omission statements.
If you are in a high-tax state, your employees will pay a lot in taxes, and the cost is passed on to you, their employer. You will need to pay them enough to pay 40% in taxes and have some money left for living expenses.

The flip side is of course:

If you are in a low-tax state, your employees (or you) will pay a lot for things like health care and retirement, and the cost is passed on to you, their employer. You will need to pay them enough to pay those costs and have some money left for living expenses.
You can divide the world's wealth into wealth that was created by human hands and wealth which was 'created' by the planet (land, mineral/ore/oil deposits, etc.).

I don't see why it isn't fair to people keep the wealth they create and just divide up the wealth created by the planet equally.
It would be naive to ascribe Nazi propaganda alone the role of the fire starter in WWII. The problem is that the Nazi propaganda fell on ears that eagerly wanted to believe it, so the Nazi leader was democratically elected before he seized the absolute power.

If Nazi propaganda might have any noticeable success in today's Germany (or US, or wherever), it's not because of some crackpots from stormfront; they are a consequence, not the cause. The cause should be addressed instead, first by assuming its existence. (No, I'm not going to discuss any probable causes here; I'm trying to show the logic, not to make a political case.)
How does <h1>Stay tuned</h1> require Javascript?
I'll try and add support for comments soon. Thanks for the input.
Maybe these two are one. It will be ready for the layman when these concepts are easily comprehended, with improved UX.
These people aren't "nazis" or "fascists". They have beliefs that would have been considered completely normal and moderate in 1940's US. The people that defeated the Nazis would be considered Nazis today. It's obscene how far left the overton window has moved. Opposing immigration is a pretty long way from Nazism.
Reading privileged memory with a side-channel
I ended up looking it up after I posted, and you're right! Plans also include going all the way to the Santa Clara Caltrain station, surprisingly. Maybe by 2030.
>When the stock market is up we think it'll keep going up. When we have peace we can't imagine war. History is not a straight line and destructive ideas can still take hold in the wrong conditions.

No... But thats pretty bullish of you.