skysight-inc/HackerNews huggingface dataset:
Russia and Venezuela’s Plan to Sidestep Sanctions: Virtual Currencies
The Attraction of Complexity
You’re not sure how relevant it is that men are still in control even in a field where they are vastly outnumbered in the rank and file?
Either way... I personally don't care much whether it's run by the government or not, but rather that the government does what's necessary to have free/super low cost health care for everyone (On the order of $20 for a doctor's visit). Maybe the government runs it itself; maybe it provides the funding for private organizations to provide the health care.

Know what's awesome? Knowing that I can break my arm and have it taken care of with virtually no out-of-pocket cost.

Tax-wise, I'm totally speculating here because I don't know the ins-and-outs of the American tax system, but here we go.

https://simpletax.ca/calculator
https://www.irscalculators.com/tax-brackets-calculator.php

I'm going off of $85,000USD/$106571CAD (equivalent today according to Google), and using California.

California: total tax paid $25,252.56USD, you keep $59,747USD

Saskatchewan: total tax paid $30,465CAD ($24,308.33USD), you keep $76,106CAD ($60,702.91USD)

So on the same amount of income, we pay about the same as California residents, but all of our health care costs come out of the taxes we've paid. Seems like a pretty good deal, not having to pay any health insurance premiums on top of that.
Because this actually changes how every indirect call is compiled.
You started this thread to warn about the risks of running untrusted JavaScript before the appropriate mitigations are in place, yet you expect people to open a PDF from misc0110.net with no additional context?
> I'm increasingly questioning whether the electric drive train and the batteries are actual difficult and novel part about building an electric car.

Batteries are made by Panasonic, who can also sell to other car makers. And both GE and Siemens have centuries of expertise in electric engines.

The biggest hurdle for the traditional car makers isn't technical, it's actually changing their mindset from a product they've been making for a century to a new one.
> > Having emotional conversations with people I can't look in the eye and you are obviously quite passionate about this.

> So what. Yes I try to make a difference. My passion is not the point here.

You gotta take some deep breaths before you reply because you and every other vegan I end up engaged with lay it on so thick with the defensive self-righteousness that you are more apt to have people dig their heels in. This doesn't end up making any difference except to how you feel about yourself and the social cred you get amongst your bubble-buddies when you share how much you "destroyed" some rando on the internet.

My point was that you can't see me and I can't see you, so you don't truly see me as another person, just some adversary or potential convert to get a notch in the belt. I took the time to calm myself, do some more research and then reply respectfully (imo) to most of your points.

> Because it is still a question mark. It has all the potential to be much more sustainable. That's why Gates/Branson/etc are investing in this: they know we need to live more sustainable or die as a species. It is not a choice at this point.

See, you obviously didn't even click the last two links I sent in your rush to shove more of your own information down my throat, because the first link is for an article about a study that specifically asks the main question in my original post... and their findings support your position, I mean wow...

> Says who? At the same price/experience it has the potential to make a huge difference! I know loads of peeps who'd switch (or pretty much have switch since the alternative are good enough for them). They do not need to re-learn cooking, just pick the other "meat" and do as you always do.

> "Srsly. Where do you get this from?"

From the second link you didn't look at, I was literally paraphrasing the article for you, but it makes the points much better than me, cause, ya know, professional writer at scientific publication.

So yeah, if you want to make a difference in online debate then you should probably leave your ego in whatever room your computer isn't and actually try listening to whoever you're engaged with. Good night and good luck in your crusade.
Disable JavaScript? I might as well just stop using my computer.
So you've created your account 1 hour ago and want me to open some pdf from unknown source on unknown domain?
The company gives the reason of membership fee as a way to deter low quality apps.
>RMS remains a rambling nutjob and none of this is really applicable to the issue at hand.

Ramblings that this industry has repeatedly proven to be correct, and continue to do so. I'd take his ramblings over a cheap ad hominem any day.

I encourage you to try being more civil the next time you comment on this site.
The description of a Turing machine that can do arbitrarily large computations can be finite.
See: Kolmogorov complexity.
I'm suspicious of SA's support of LGBTQ people actually, given they are in a case in which NYC is pursuing them for anti-trans practices.[1]

1. PDF: http://www1.nyc.gov/assets/cchr/downloads/pdf/press-releases...
You mean the US where overly racist behavior by the police does not raise eyebrows?
Just today I had four other people standing around my machine, mostly saying nothing as I tried different things. Over the course of about 45 minutes (and coming and going back to their own machines) they each contributed invaluable assistance in resolving the issue. But there were easily gaps of 10 minutes at a time where nothing was said.

Were we guilty of the same thing as the construction workers in your example?
Denying access to timers is kind of practical for browser JavaScript, and should and will happen. But it's not practical for native processes, because shared memory multithreading provides as high precision a timer as anyone could ask for: just increment a counter in a loop in a different thread.

In fact, the practical JavaScript attacks use this method (using SharedArrayBuffer) and the browsers are disabling this (new, little used) feature as a mitigation. But I'm afraid hell will freeze over before mainstream operating systems deny userspace access to clocks, threads, and memory mapped files, which is a lower bound on what it would take to make the attack much harder.
> Logic and reason have value, of course, but most people are emotional animals rather than pure rationalists.

there isn't an either/or situation... people are both. and people must obviously be sufficiently rational, a sufficient amount of the time, because civilization exists and society progresses.

you don't get to the moon and back if your species is nothing but bloody barbarians.

> incitement

this discussion seems to veer all over the place. fascism, hate speech, incitement, etc. are all different things, but also have a variety of definitions; often so fuzzily defined that two identical acts could be read differently by two different judges.

'hate speech' (whatever that really means) is largely legal in the US, but incitement that demonstrates imminent harm is not.

even with legal hate speech, the US isn't a genocidal warzone. because that's not how genocide works.
I started with a code sample of ten or so lines of Visual Basic .NET code that could allegedly turn on my Insteon light switch. Then I made it control my other Insteon devices. Then I started adding email notifications. Then I figured out a command line interface made it easy for me to add new commands/features quickly and that I could also then pipe things like input from an app or voice to that interface.

It kind of grew organically. I don't think when I started if I planned to build what I've put together so far, I would have ever started, because it sounds daunting, especially given my level of experience when I started.

Do one thing. Then do something else. :)

As a sidebar, if you want the general knowledge type queries, Wolfram Alpha's API is incredible for this. They have a "spoken" API which presents the result of your query as a single text-string, ready to be output to a text-to-speech client. I think adding the ability to use Wolfram Alpha was all of a couple lines of code tops to my existing project. And of course, it's free for way more queries a month than you'd ever run on a personal use project.
Hardware wallet or bust right now, right? Use a private key that has never touched the internet?
Maybe I wasn't totally clear on my point about the UGB. I believe it to be the primary reason houses are as expensive here as they are. Sure, there are still some places to build within the UGB, but if you want your little slice of suburbia (single family home, a bit of grass around it) then space is tight enough to drive up the price quite a bit.
Huh...for some reason I thought it was not compatible. Ugh, now the only thing holding me back from upgrading is some of my other addons. I hate having to wait forever to upgrade because I use some less popular addons with long update cycles.
I can't stand comment systems with anonymous downvotes. It's like being in a group discussion, then someone else, hidden behind the curtain, calls out "You're an idiot!" Most people wouldn't stand for that. They'd say, "Come out and express your opinions, or stfu!"
I think it's true that the mainstream media may give too much play to stories about fairly innocuous things that Trump has done. I'm not sure that's much different than with previous presidents though. I recall Obama and Bush being criticized for some fairly silly things too.

I honestly believe the difference now is Trump itself. He's uniquely unqualified to be president on every intellectual or moral metric I would consider relevant. Therefore, an objective press would be expected to be far more negative than positive.

The other problem (or clever strategy on the right) is to paint mainstream outlets like NY Times or Washington Post as the 'other side', while basically ignoring truly left-leaning media, like Huffington Post or Vox. In doing so, they portray a spectrum where Fox and Breitbart lean to one side, and NY Times / WaPo lean to the other, with the unbiased position somewhere in the center - when in reality, the average of those publications is pretty far on the conservative side of the spectrum. (Even more so for those who actually believe Fox is 'balanced' and other mainstream outlets are in fact far left.)

I don't think it's necessarily impossible to do good journalism while being biased; I think Vox does a fair amount of good reporting for instance. It is necessary though to clearly distinguish between fact and opinion.
> to discern to some extent the layout or contents of protected kernel memory areas.

For the end user, what possible negative consequences are there from this? It seems pretty far fetched that there could be any serious security implications from JavaScript on a desktop/mobile computer.
This has nothing to do with the recent CPU issue.
Aspose.Newsletter January 2018: Holidays Offer on Aspose.Total Ends 31st January
That's interesting because I strictly copied the title over from Reuters website. You can see the same link still goes to the article... yet the title on Reuters has been changed.

Putting my tin foil hat on, someone at Reuters stockpiled their stock or truly loves the company :)
> One of the reasons people regard these rankings as a total joke is exactly because of incidents like this - Twitter being forced to delete satirical tweets.

I'm sorry but in the extensive travels of tons of people who've been around the world, those rankings are usually right on the money. It is obvious to most people who've been around that Germany or Norway have much greater levels of freedom of expression than Venezuela, as a rather trivial example.
From the Spectre whitepaper:

> In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

The whitepaper doesn't contain example JS code however
I grew up in Fort Collins, and live here now after an itinerant period, and I'll say that overall the city government has always been far-sighted, a good steward of the tax money they get, and provided good public services.

I'm pretty confident that they'll do this well.
This is my struggle living in Sweden as an American. I go to type on my coworkers keyboard and the result is a mixuture of frustration and hilarity as my muscle memory produces bad results. Some things make absolutely no sense like switching - and _ on Swedish keyboards. Other random frustration is the lack of tilde on Swedish keyboards. How can you work on Unix based systems without easy access to tilde?!

Interestingly all the Swedes I work with have their own solutions to the tilde problem. Some type the alt code while others use alternative keyboard configurations.
Oh . Let me look into the issue .
We all know these ideas existed. Nobody's pretending that they don't exist. We can be aware of ideas existing without being advocates of them.
Well one might think that it would be beneficial for Americans if there is less immigration but you never know if US corporations might outsource more for to save costs.
How I made $1934.66 in two days of tech consulting (from people I didn't know..)
I don't know enough biology to be sure, but I'm pretty sure that some of our ribs are fairly flexible in this way. I would guess, if we had to come up with a reason why those bones are flexible and our arms and legs, say, aren't, it's that the tradeoff in ability to exert large forces in a predictable way and taking bigger impacts before breaking isn't worth it.

Not that evolution is able to actively design things in that way, of course. More like it was an evolutionary advantage for those ribs to be flexible, but any flexibility in arm and leg bones and other major bones was not an advantage.
Unrelated to the exploit, am pretty sure he's referring to the questionable anti-competitive practices Intel has engaged in the past decade.

Notably, the exclusivity-kickback agreements they arranged with several PC manufacturers. https://www.nytimes.com/2017/09/06/business/intel-eu-antitru...

As well as making their compiler choose the slowest execution path possible once it identifies it's running on an AMD/non-Intel CPU.
http://www.agner.org/optimize/blog/read.php?i=49#49
Pardon my ignorance, but what's racist?
Access to India's Aadhaar citizen database selling for under USD $10
There is plenty of often strong discussion regarding the police and race in the United States and by US residents on HN. While they may not be raised high enough to satisfy you, to claim that this "does not raise eyebrows" is naive or disingenuous and needlessly inflammatory.
I think it seems pretty reasonable to disable the ability for new accounts to post links until they are no longer new. This could totally avoid scenarios like this one, regardless of whether or not this PDF is actually harmless or not.
Florida solar power industry gaining momentum but under threat
So what are the odds the NSA was aware of this?
With a PPO I can go to whatever specialist I want. With Kaiser you are stuck with the specialists Kaiser directly employes.

So if the Kaiser clinic by you is good then sure Kaiser is great. However if you ever want a second opinion or want to use a non Kaiser doctor your out of luck.

A PPO plan offers you freedom to choose what doctors you see. It will also enable you to go straight to a specialist without your general practitioners consent.

Obviously Kaiser is cheaper than the PPO plans.
You know what I found to be the greatest source of knowledge for me?

https://github.com/sindresorhus/awesome

They also have lists for all languages and almost anything you can think of
New software is written with newer kernels in mind. To continue running newer software, you will need to update your kernels.

Additionally: you might update infrequently when it comes to feature releases, but you'll definitely need security patches.
Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism
Hey. Thanks for your feedback. Instead of an app would a fully functional website help ?
Fences in the code significantly slows down execution. While you can not avoid them altogether (modern processors are not sequentially consistent), the less you can use, faster your concurrent code is.

This update makes the kernel insert fences into places where it wouldn't have been necessary before, leading to potentially severe slowdowns.
The "square root by subtraction" seems like the same algorithm that can be "implemented" by hand relatively easily on early mechanical calculators:

https://www.youtube.com/watch?v=K_c9-Y1ouww
Recent Intel CPUs have PCID (TLB tagged by process ID), which makes KPTI not much slower than what we had last week.
The style seems to be clearly inspired by the said awesome presentation (e.g. the inclusion of the "Motivation: N/A" slide).
Kingdom of the Wicked, a novel set in a world in which the ancient Romans experience an Industrial Revolution and have approximately contemporary levels of technology when Jesus shows up: https://jakeseliger.com/2017/12/28/kingdom-of-the-wicked-boo... . It sounded gimmicky to me but is shockingly well done.
I read the Spectre paper front to back. Where did the paper mention that they have a working PoC for AMD x86 CPUs?
We're getting high prices and dogshit slow internet anyways due to laws that keep competition out. Even Google gave up on trying to deal with the telecoms. Your argument would be fine if our high prices actually resulted in innovation but we haven't had that in a decade. For a while my family was paying about fifty bucks a month for three megabits down.
Hitler lost the direct presidential election, but Hindenburg (his competitor in that election) didn't appoint him as chancellor for no reason; Hitler's NSDAP was the largest party in the Reichstag, and was therefore a natural choice for forming a government. That's roughly the same level of democratic legitimacy as that of any other German chancellor since.

The Nazis also lied and cheated and murdered, but it wasn't necessary for their rise to power; until they went about abolishing democratic institutions altogether, they could have worked entirely with above-the-board means.
The first bit about communes reminded me of The Tyranny of Structurelessness [0]. It has far reaching corollaries.

[0] http://www.jofreeman.com/joreen/tyranny.htm
I don't have any issues with that.

But if you do want to learn more, https://userstyles.org is the place to go.
> Inequality is a must, this idea that its bad is based solely on a philosophy of evil.

Inequality might be bad for a variety of reasons, and not solely based on some notion of evil. A common reason cited is the lack of efficiency it can create in a market. A dominant player might suck the money velocity out of the system (i.e. take everyone's money) without some sort of redistribution mechanism. The market could lose it's vibrancy as players go into a simple sustenance mode or be destroyed.

I think dvt points to the injustice side too, you can have inequality due to unjust actions. For example, if you use your dominant position to tilt the playing field in your favor with to the detriment of the system as a whole. An example might be to pay lawmakers to make a tax loophole for yourself, or worse, be given some sort of grant for being dominant, just because you can.
Open source modular synth software lets you create 70s & 80s electronic music
Wait, which is the greater good? Keeping government secrets or holding the government to account? To me, the latter is obviously better.
Is the JS PoC for Spectre not applicable to AMD then?
There are 3 attacks, two of which AMD claims to be immune/virtually immune to, and one which they do admit to being applicable.
There are possible mitigations for cloud providers:
1) pay $x / hour and run on shared machine with possibility of an attack;
2) pay $y / hour (where x < y) and run all your processeses on dedicated machines without anybody else.

Moreover the option 2) already exists for large customers and security sensitive applications (e.g. CIA dedicated cloud built by Amazon).
> why would anyone bother using a language in production if it lacks fundamental things taken for granted like dependency management and stable testing frameworks/practices?

That one's easy. Go is a brilliant low-level language. You hack on servers, tooling, IPC, batch pipelines, etc. Nothing that people endlessly keep pondering about, from "deps" to generics to gopath to "practices", really hinders the enthusiastic hacker much from just getting busy with it, and producing. A Go coder doesn't envy the "spoiled Rails developer" because he feels blessed by a low-level systems language that actually has prim types other than int, sane pointers, concurrency primitives, utf8, heck simply strings to begin with, fast compilation times, no header-includes mess, etc.. =)
Using spectre you can read memory from the process on which javascript is executed, for firefox this is probably whole browser memory, chrome runs sites in different processes (but not always ex iframes).
well, the proof-of-concept coda is available here:
https://gist.github.com/ErikAugust/724d4a969fb2c6ae1bbd7b2a9...

a minor #define fix is all it takes (don't compile with a -O2)

the following lwn article: https://lwn.net/SubscriberLink/742702/83606d2d267c0193/ is also quite good introduction to this 'Intelpocalypse' as they call it. which is kind of strange, as it seems to affect all amd's and arm's as well.

here is an introductory paper from arm's p.o.v https://armkeil.blob.core.windows.net/developer/Files/pdf/Ca...
Possibly - but that's an entirely new processor design. That would take years to get released an adopted.

The scary thing is that you can't fix this in software.
Show HN: Quine in 0b100M Languages
Use all three.

I lean more towards vue for personal reasons, but in the technology world you will always run across all flavors. So always be knowledgeable in as many areas as possible.

Think of it as traveling Europe. Would you want to only speak one language?
This is a toughie. These bugs are basically very difficult to mitigate completely without fixes at the hardware level. One might imagine the NSA being coy and patching their own OS's et al to the degree they can while working to exploit the bug in the wild. However, the reality is that this bug is almost worse for the NSA than for most other folks, because they have the most to lose if their security is breached. And they have a lot of machines out there. The idea of a bug of this severity that leaves no traces is probably leaving a lot of people at the NSA in cold sweats right now. Meaning that if they did discover it before other researchers it's questionable whether they would have tried to exploit it vs. driving towards the most rapid possible mitigation and fix.
> Intel believes its products are the most secure in the world

Well, lol. It's a bit rich to say this in a vulnerability disclosure statement.
> ‘Crude hacks’ get you most of the way there, reducing the value of great inventions.
Curious: can bitcoin mining rigs be modified for BOINC projects (GIMPS, Seti@Home, etc.)? If yes, than I might invest in some rigs and modify them to run BOINC.

Yes, I'm weird: I prefer to do computation for BOINC than for bitcoin. :-)
Sperm-Hybrid Micromotor for Targeted Drug Delivery
Clover Health got $425M to disrupt health insurance
The best things and stuff of 2017
Microprocessor Design (2017)
DeepJ: Style-Specific Music Generation
paper: https://arxiv.org/abs/1801.00887
Coincidence? Or this link gets posted by a brand new account and your first post in a year is how it's for sale? Doesn't sound coincidental to me.