skysight-inc/HackerNews huggingface dataset:
Could also rate limit 1 PR for a given repo per day. Perhaps even have a queue.
The "Deserts" episode of Planet Earth 2 (currently on Netflix) has a decent segment on the Harris hawk for anyone curious. It shows a group of them hunting ground squirrels.
Ah, figured it out. It's due to a really bad connection. There's a spinner with white background. The underlying page loads (I can see parts of it if quickly scrolling), but the spinner div won't go away. Minor issue that wouldn't affect most of your visitors.

Print: https://imgur.com/UqSUUTA

On a faster connection it worked fine. Not sure what this spinner is (can't debug on mobile). Ordinarily I wouldn't bother much making my service accessible for those with extremely crappy connection, but given your service might be used by people on 3rd world countries, behind proxies and so on, it might be a good idea to simulate slow connections on your landing page :) Maybe adding a "close" button would solve
In certain cases, perhaps. But that's the exception, not the rule. You can't simply apply a neural net to every problem and magically get great results.
But orders of magnitude more bloat? I had full multitasking in the late 80's, on an Amiga 500 with 512K of RAM. There was no memory protection, but there was a GUI.

I remember running Linux (kernel 1.0 and earlier) with X11, in 8 megs of RAM or less, back on an old 486. I could compile kernels. Running emacs was a bit painful, however.

What we have today is more bloated than I could have possibly imagined 20 years ago...
It almost seems like Intel is saying that this is the new normal. That future Intel CPUs will have the same weaknesses, and it's up to software (compilers, OS authors) to deal with it. Or am I speculating incorrectly?
Not really. A default will set any economy far back.

You also risk unrests what with pensions cut and similar effects.

Look at Greece, they went through hell just not to default (again).
I might be reading that link wrong, but it looks like it says that Variant 2 is a possibility, just not demonstrated yet. This may be preemptive on their end.. or maybe they were able to replicate it in-house.
I read an ars technica article that this would be a possible solution but isn’t right now because the hardware to check access rights isn’t fast enough yet
Colon classification
Me too, I don't follow the news on it much but I would like it if some single board computers appeared with RISC-V in the not too distant future.
I finally saw this a few days ago knowing that there was some controversy but not what it was about. When I googled "TLJ Controversy" the first thing I found was not the controversies, but articles criticizing the people who found the film controversial. Very odd.

Anyway, after finding out that the main concern for fans was the amount of women in the film and the attempts at making Luke Skywalker interesting, I was pretty surprised. Those are some of the better decisions in the film.

The film was fine. It's too bad people are tripping over themselves to hate on the film, other viewers, the cast, etc etc. Just so much mean spiritedness being thrown around in all directions over what was a perfectly enjoyable film.

Internet continues to suck.
BloomAPI (YC W17) Is Hiring a Senior Engineer in Seattle to Improve Healthcare
Counting and Enumerating Keys Post Side-Channel Attacks Revisited
Cerita Seks, Mama Aulya Toket Gede Yang Ternyata Binal
They didn't.
Moreover, the British stopped hiring them towards the end of the century in favour of the (as the British classified them) "martial castes".
Please don't extrapolate from just one battle with a few hundred soldiers to the vast history of British colonization.
As is your right. But note that a pretty straightforward reading of this story says that it is political, and, at any rate, it's not entirely clear what it's relevance to HN is, so you might want to flag the entire story as well. That's what I did.
I don't understand the problem to be honest.
I hope that's related to some specific branch prediction type, and not disabling branch prediction completely. I.e. if it is not a mistake in the SUSE comment, it could be painful: branch prediction is fundamental for modern OooE CPUs delivering their potential.
A lot of cameras are sold solely based on the simple metric of "megapixels". Of course, there's a lot of trash out there that has tons of pixels but severely underperforms.

Sometimes we need to simplify reality in order to make decisions. The question is - how simple is too simple? It seems like an exclusive focus on GDP as the sole indicator of the well-being of nations, just like the focus on megapixels as the indicator of performance of cameras, might be too simple indeed.
as a perpetual man-child with a 13 year old's sense of humor....I resent this, but accept its accuracy.
You can add a folder.
The OP asked what if the US borrowed $1trn from china and spent it all on military spending. That's where the $1trn worth of "gadgets" comes from.
Abusing Microsoft Word Features for Phishing: “subDoc”
The regression being the drop in performance you saw? I don't know.. I'd be interested in seeing what the performance looks like on multiple "identical" C4.X8LARGE instances, regardless of KPTI.

If you mean their results.. they actually show an increase in perf in later kernel versions.

Based on

https://github.com/phoronix-test-suite/test-profiles/tree/ma...

it looks like they just use the default configuration and run the benchmark with

-n 1000000 -P 32 -q -c 50 --csv
I wouldn't characterize things as "falling over", except perhaps in cases of operator incompetence.

There's certainly room for improvement — The Fine Article wouldn't exist otherwise — and backpressure might be worth exploring as a means of improving things. If that backpressure causes the system to slow down in a way that adversely affects customer or end-user interactions, however, it will often just be turned off, mooting it — or making things worse.
Can you provide examples of the companies and bugs you're referring to?
I would have to write nothing less than a book to explain exactly what I mean.

Put succintly, a lot of tech culture is a lie meant just to keep you working long hard hours.
polish got expensive
This can´t be true. Disabling branch prediction would completely destroy the CPU performance
How to Open a Drop Shipping Store in 10 Minutes
What. The. Fuck.

I never thought I'd see this headline in my life.
SICP is online for free (legally) from MIT's website, or there are some community version with cleaner layout. See: https://news.ycombinator.com/item?id=13918465

I've only worked through Chapter 1. The text is interesting, but most of my learning has come from the exercises. You should plan to do the exercises. Also, don't worry if you have to skip a few exercises and come back to them later. Don't allow yourself to be bogged down and loose interest over a single difficult exercise.
I've always been quite fascinated by prosthetics and cybernetics.

I would be willing to trade most of my biological body parts that have limited lifespans for self-healing synthetic replacements.
duckduckgo is pretty great too. I use it probably 75% of the time
This is fantastic. I have been doing all my personal open-source work anonymously, and it requires a surprising amount of tooling to get it right. I will give gitmask a try.
Stallman is the hero we don’t deserve.
There's also searx, which is self-hostable.
So, if some company creates a really really expensive medical treatment, are they all of a sudden on the hook to providing it to the whole nation?
Lots of people use cash because it's better for the businesses that receive it to not have to pay a significant processing fee of 2%+. When a restaurant might only run on 5% margins, 2% off the top is 40% of their profits.
Ask HN: Life as software developer vs. product manager
As a rookie in the tech industry, I was wondering what the work-life balance is like for software developer vs product manager in the U.S.? From what I read on Reddit, Quora, and HN is that developers would have a more relaxed life style with the possibility of working remotely. Product manager would have to be in meetings in person with various teams/clients. It seems like product manager has a huge responsibility, and I would be stressed out even if I go on a vacation. Could anyone with more insight/experience give me some realistic perspectives?
>As potentially better examples: contributions to the bitcoin repository tend to

How about a better example: contributors to the bitcoin repository tend to be targets of digital theft.
My understanding is that it only disables indirect branch prediction, and only within the Kernel.

Could be wrong, though.
So this paper appears to have been published on 2017-12-23 (according to https://link.springer.com/chapter/10.1007/978-3-319-70972-7_...), which was ahead of the Specter and Meltdown disclosures. Truly unfortunate timing for the browsers implementing mitigation, huh.

It seems that one of the covert channels described here has been fixed (SharedArrayBuffers) but many of the other ones have not. The passive reading of data from timing-based side effects (like CSS animation as described in the paper) seems particularly hard to avoid in general. HTML5 video will have the same vulnerability, I bet.
I guess along the lines that closed source "security" is an oxymoron.
If I might suggest something, maybe forget about targeting older doctors and researchers set in their ways. Go after the youth, the ones just starting their education in research/medicine, you'll find us far more pliable.
Again, substitute gay marriage in here.
Yes, a "male programmer" is objectively less unique than a "female programmer" all else being equal.
Apart from usual 'open source' and 'who controls the software' dogma, I find his endless gnawing about libreboot and Intel ME very related to general closed-box-that-we-trust problems. Trouble is now I think he wasn't paranoid enough.
Came here to see if anyone had a reason to use it over DDG. DDG is pretty great and you can always add !g to your query to jump to Google if you really need to (and don't mind the data being shared with any government that asks, of course).
I don't really want to go down the rate limit route quite yet, but it could be an option.
this is for meltdown right? how would you explain the difference between this and spectre, going from this explanation?
Now... I am interested in assembly :D
Any recommendations ???

Really awesome explanation
* Only if you use branches in your code.
That's cool. I recently started building a graphical tool as well. Slightly different direction though. Here is a map of uber's public network estate: https://recon.secapps.com/f/EMaO
This is a major generative art nexus right here : http://reddit.com/r/generative
Not only driverless but electric cars as well. House prices near the highways will increase significantly because the air pollution will become non-issue
Pretty sure the concepts of self-hosting and indexing the modern internet are kinda mutually exclusive...
Yea, if true, you can go ahead and stick a fork in AMD.
I've forgotten how to write powershell more times than I can remember.
While not "in Go", Homebrew showed me this tool a while back and I like it bunches:

> Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV, and tabular JSON.

https://github.com/johnkerl/miller#readme
Ford and Cisco are turning to an AI company to find the best programmers
F-Secure Internet Security 2018 Key and Crack Free Download
Although I agree more with the original title, as that would be the exact message I need at this time, I would suggest to then at least also include Sierra, and El Capitan in the title as the fact that the document was updated is most relevant for users of those systems. Maybe reflect that something changed as well. Maybe:

About the security content of macOS High Sierra, Sierra and El Capitan [updated]
They edited the same page to remove those references. Best to assume Sierra and El Capitan are not patched until proven otherwise.

Clear as mud.
> but people in the lower or lowest castes wouldn't be in the US in the first place due to lack of resources

While Indians in the US tend toward the upper castes, it's not true that there aren't any people in the US of lower caste as well. Even in India the disparity between the castes is narrowing as affirmative action and modernization render such differences moot–as such, it isn't really true that people of lower cast have a "lack of resources", so there are people that are able to come over.
A guy living in a cardboard box in an alley rambling on is just as likely to hit upon a semblance of relevance from time to time. Doesn't make them any less of a nutjob or any more worth listening to.
You're conflating things here. Our overall financial system as a whole is as you describe: set up to enrich the powerful and exploit others.

But that is not an issue with the nature of the currency. The way we use "debt" in terms of Federal government "National Debt" is related to the currency and not related to the credit market which is the usurious bulk of our money. Most money flowing around the economy is based in bank-credit and has all the issues you describe. Currency is different. Of course, the particular policies that we enact around the currency (i.e. how we use it) are often about enriching the powerful etc. although some things are at least mixed in that respect.

Do check out https://modernmoneybasics.com/ (I'm guessing you have not because the distinctions that matter here are clarified there in the intro video and in the follow-up links)
All of the Event Supply You Need
Woah!

Summarizing:

...

Goethem et al.
exploited more accurate in-browser timing to obtain information even from within other websites, such as contact lists or previous inputs.

...

Oren et al. recently demonstrated that cache side-channel attacks can also be performed in browsers. Their attack uses the performance.now method to obtain a timestamp whose resolution is in the range of nanoseconds. It allows spying on user activities but also building a covert channel with a process running on the system. Gruss et al. and Bosman et al. demonstrated Rowhammer
attacks in JavaScript, leveraging the same timing interface. In response, the WC and browser vendors have changed the performance.now method to a resolution of 5 µs. The timestamps in the Tor browser are even more coarse-grained, at 100 ms .

In both cases, this successfully stops side-channel attacks by withholding necessary information from an adversary.
In this paper, we demonstrate that reducing the resolution of timing information or even removing these interfaces is completely insucient as an attack mitigation.

...

Our key contributions are:

– We performed a comprehensive evaluation of known and new mechanisms to obtain timestamps. We compared methods on the major browsers on Windows, Linux and Mac OS X, as well as on Tor browser.

– Our new timing methods increase the resolution of ocial methods by 3 to 4 orders of magnitude on all browsers, and by 8 (!!) orders of magnitude on Tor browser. Our evaluation therefore shows that reducing the resolution of timer interfaces does not mitigate any attack.

– We demonstrate the first DRAM-based side channel in JavaScript to exfiltrate data from a highly restricted execution environment inside a VM with no network interfaces.

– Our results underline that quick-fix mitigations are dangerous, as they can establish a false sense of security.
Honestly, your knee-jerk reaction to a dick joke is a fabulous example of why this project is actually rather important.

In any case, this is a tool I've wanted for a while. I have my own absolutely horrid workflow for stripping out the interim changes to github projects I work on and submitting back one atomic commit with no personal info, but it's a trainwreck and it makes me way less enthusiastic to make commits to projects on github.

I do really want something better, and this looks promising.
The Elusive Dream of Vertical Urban Trailer Parks
You might want to visit https://news.ycombinator.com/item?id=16079910 .
Intel is affected by spectre as well though.
Not sure that many OSS projects are going to be interested in merging a patch where a conversation with the patch author for review/feedback can't happen
At-will states still have to abide by wrongful termination laws. They can't just do whatever they would like, even though that is the case some of the time.
I'm pretty sure a timer on a webserver is going to be good enough to determine if an item is cached or not in the client. The time difference between cached and not-cached is huge.
Righto, that makes some more sense. Still going to be awful for performance though!
Me and Harry Potter
Agreed. Hell, I've recovered old hard drive backups from ~10 years ago and have been fascinated by by what I've found. Old e-mails and chat logs and stuff can be very entertaining to dig through.
Do you have any links/pointers to systems that did this?
even with all these itemized points it's still not enough information, if violent crime was already low, and a 10% bump of low is still low.
I don't agree with this. Have you not seen the work by Regina Barzilay and David Sontag at MIT? His paper about embeddings of categorical data across 4.5million medical records?

You can build an entire CDS from the data, which is publicly available.

And if you can't find a problem to solve, then why don't you ask where the pain is? There are a _ton_ of low hanging fruit items that NLP and Deep Learning that can help with _today_ in the clinical environment. How about:

Question-answering for doctors that immediately need to find time-critical facts from a patients medical record? My sister, a hospitalist, begs for help in this area when treating seriously ill patients that come into the ER from different hospitals.

How about helping insurers better model their patient populations from unstructured data?

ICD coding for medical billing, our extremely wasteful 16-20billion dollar a year industry with _terrible_ NLP solutions in the current market?

There are problems to be solved. You just need to ask your customers, and find their pain.
Well, I was feeling nostalgic for the goold ol' days of computing. Looks like we'll be living them again soon.

Perhaps that smurftower PowerMac G3 tucked into the back of the closet that's been gathering dust will be useful again.
A distributed network of cooperating independent crawlers and indexers would be cool though.
You mean the Gross National Product(GNP)?
So will the Intel IBRS patches. >99% branch prediction accuracy -> 77% accuracy from what I've heard.
Hmm, I did not know this. Good to know!
>My argument is that programmers have never cared who you are.

I think the chorus of opinions from female regular programmers all the way to the highest echelons of the tech hierarchy (a la Marissa Mayer) expressing their concern that tech is a 'boy's club' and that the environment is not accepting of diversity is a pretty clear sign that something is up.

Telling people to stop their whining and get to work is easy to say when you have not been on the receiving end of discrimination.
I'm a student looking for an internship in germany. How can i contact you?
> If it can be determined that it would result in a significant QoL increase then it should be covered in most cases.

I don't argue that there shouldn't be a line. It's just a very fine one with lots of edge cases.
It's almost like Intel is taking the position that side-channels are nearly impossible to prevent if you're running adversarial code on the same hardware, which makes sense to me; there are certainly those who don't need to resist such attacks, but need the performance benefits of speculative execution.
Thoughts on AltaCoin
I had to learn some quantum for a graduate class, and even with my engineering background, Intro to Quantum by Griffiths was both extremely helpful and an awesome read. It's the first book that came to mind when I read the question.
I couldn't find where they get their results. I searched for my real name which has a hyphen and it didn't find anything for me when google, bing, and duckduckgo do. Instead if found a bunch for a baseball player whose name is part of mine, and a couple of low quality links for things like "______ arrest records" and other junk. I don't think I will switch.
This course has some serious information about ethical hacking
Just start an ICO, there are not that many medical ones. You already have all the right buzz words to raise a few billion ;)
As an aside, are there many examples of major (say Fortune 500) companies where more than one CEO was famous / respected / acclaimed?

Maybe Sundar Pichhai but he is young in his CEO role so it's too early to decide.
well, we can only speculate...
The Tricky bit is where are we in relation to the time scale of old tech are we in the middle of the internet (whatever that is) or the end?
Why Malta Is the Top Destination of 2018
There's a blockchain for that.
That’s a different issue. An important one, I agree, but kind of orthogonal to the introduction of a hardware bug, which could equally happen in an open architecture.
I think that is version 2 (square?). Here's a 2009 video of circle https://vimeo.com/6614780
FYI: There are several entry-level web dev positions in NYC via Google Jobs > https://www.google.com/search?q=jobs+%2B+entry+level+web+dev...
Out of curiosity, why only v50?
Hmm. On the Pro, all 5G radio options are "VHT" -- default on mine was VHT40, and switching to VHT80 is what helped. Does the LITE version allow you to choose one over the other?

(Or perhaps you meant VHT80 and typo'd?)
Girl Anthem“Pretty”
What technological factors drove the rise of high-speed modems?
If you're not paying attention, git pulls information out of your OS and sticks it into your git commits without asking you. It does at least tell you it's done that, but it doesn't ask you before hand, it just goes ahead and does it, then begs forgiveness. I see a lot of value in having a tool in my workflow that strips all of that without my having to think about it.
This piece is congruent with Megan McArdle's "Consider the consequences of #BelieveAllWomen: It won't turn out well for women." https://www.bloomberg.com/view/articles/2017-12-15/consider-...
Was it because earlier their offering was unmatched by competition? There was no true iPod equivalent or iPhone equivalent when they were launched.
Agree with all this. Lots of demogroups have started releasing open source these days, which is heartening. There's definitely a feeling that the scene is getting older, so possibly passing on knowledge may be a motivator.
Being free (or open) source have nothing to do with security: Linux/BSD still have 0day rootkits, yet all source is available, modern JS software have all tracking in the world, yet all source is available (VSCode telemetry). Even RISC-V, being fully open, most likely will be susceptible to spectre attack.

Instead of false promises we need to develop better engineering: verification, computational math, etc. And also laws - no free/open license in the world will stop companies from tracking, but fine as big as 4% of total revenue (EU GDPR) will make them oblige.
Different ways at different times in my and different jobs:

1. Just work 40-hour weeks.

2. Part-time consulting, while my wife worked full time.

3. Negotiated less than full-time job (e.g. 28 hours/week, 35/hours week).

This is enabled by being very productive, and of course by negotiation.

I wrote a book about how you can do this too, along with other paths like creating a product business or early retirement: https://codewithoutrules.com/saneworkweek/
Pokerqq81 Situs Poker Online Indonesia Terbaik – Situs Qq