skysight-inc/HackerNews huggingface dataset:
I misread char-CNN as char-RNN in the linked article. I don’t know of results that compare graph convolutions to char-CNN. If a comparison were to be made, what metrics should it focus on?
I'm afraid iOS never "matures", except maybe by important user-facing parts of it being consumed by MacOS when it becomes viable on i-devices.

iOS was designed with entirely different use cases in mind, entirely different workflows, and completely different users, those who prefer to never know words like "vim" or "ssh", and honestly have no need in either.

It's a square peg in a round hole.
> This is why we can’t have nice things--random reports of things not working are pretty meaningless without context

No they are not. A lot of the same reports with same combination of htop + iTerm should prompt the company to investigate. At least when they are selling $2k "premium" machines.

> I’ve installed htop many dozens of times using Homebrew on a variety of Mac hardware

Neither did I except since I upgraded to High Sierra, happened within an hour after.

> it’s usually what’s not being reported that's the problem.

Usually is. So who from Apple is investigating what is not being reported. It seems like after enough people seeing the issue, they'd prioritize it a bit.

> Did htop ever work correctly? If so, when did that change?

Even if htop doesn't work correctly, and is complete garbage it doesn't install kernel extension and doesn't run with admin privileges so it shouldn't freeze the machine or render it unusable which is seems to do.

> it’s only the problems that are part of some narrative that make news;

The corollary there is that to make the news and get the attention, would need to build a narrative. In many cases with large companies with lots of consumers the best way to solve a problem is to make a big stink on the social media. It's unfortunate but because it's effective, that's what people use.

> but lets not make it seem worse than it actually is.

For people who see their expensive machines which used to work, stop working is pretty bad. Had these been some no-name $150 cheapo chromebooks there wouldn't be such a big deal.

And this issue might not be as serious, but you do recall the "root party" vulnerability, just a month or so ago? That was actually pretty bad, wouldn't you say? And at some point the effect is cumulative. One thing after another starts to get to people. So people will let off steam online about it.

> This is pretty underwhelming, especially given the severity of these vulnerabilities.

One is a non-profit foundation and another is a company with almost $800B in capital. There is a slight difference and different expectations there as well.
I mean, while I agree that Twitter is mincing words here, “world leader” is a super standard phrase.
Coinbase code is still horrible. I have found couple of bugs/failure points in their code, but Fred Erhsam was a jerk to me so I don't feel like reporting these issues to CB.
I wish we could come up with a catchier name, but I LOVE the idea of calling this programming, because that is precisely what we do when we compose deep neural nets.

For example, here's how you compose a neural net consisting of two "dense" layers (linear transformations), using Keras's functional API, and then apply these two layers to some tensor x to obtain a tensor y:

f = Dense(n)
g = Dense(n)

y = f(g(x))

This looks, smells, and tastes like programming (in this case with a strong functional flavor), doesn't it?

Imagine how interesting things will get once we have nice facilities for composing large, complex applications made up of lots of components and subcomponents that are differentiable, both independently and end-to-end.

Andrej Karpathy has a great post about this: https://medium.com/@karpathy/software-2-0-a64152b37c35
Don't forget Trump made noises about invading Venezuela of all places, which only helped Maduro.

Captain Bone Spurs just hasn't found the right opportunity to send other people's kids to get shot up.
Larry was the original CEO until 2001. He was then CEO after Eric Schmidt, starting in 2011, until the formation of Alphabet in 2015.
Why would an FTP client support SMB?

I mean yes, its obvious that this is probably a good idea for a phone - I think its one of those things that wouldn't occur to anyone to do.
I found time by picking something I enjoyed doing - turning my hobby into something more, and occupying that time plus some more. And then honestly I prioritize it over getting great grades in my classes, because even if it fails I'll still get a lot more out of the experience (personally) than sitting in a lecture or checking over the answers of a problem set.
I bootstrapped with about $3000 of savings, and run a lab at school that's a bit of extra income. Pick the right market and be smart with your suppliers and revenue can start coming in pretty quick.
But you're right, time is the big thing stopping me from growing faster... I worked full time last summer and that pretty much stopped me from doing new R&D work, this summer I'm going to be working on the business full time, we'll see how it goes!
From DNN to DPP. Differential Programming Patterns?
> WH Cyber Coordinator @RobJoyce45 on Intel chip flaw: "NSA did not know about the flaw, has not exploited it and certainly the U.S. government would never put a major company like Intel in a position of risk like this to try to hold open a vulnerability."

https://twitter.com/nakashimae/status/949451178110279680
You would think that but at least with the 8tb version they are often standard red drives that look the exact same as any other. It could be just that since they are their own drives, they can afford to price the hard drives much closer to their manufacturing costs.
The Netherlands has such a system. There is generous cover for every way you might end your life and for every other treatment there is a general rule that they'll pay $X for every year of expected "quality life" that you'll get out of the treatment.

This means that dialysis (very very basic treatment, but if you need it, you'll die without) ends somewhere in your 70s. For instance if you have a compromised liver. When they stop it, you will die in a matter of months at best, in some cases painfully.

What I don't get is why there isn't more noise about this in the Netherlands. After all, this system is so generic that you can of course make the argument that something like 30% or so of people will be confronted with a "no" that will end their life.
18 Things to Do in South Florida January 2018
All of twitter, simplz gz compressing the firehose stream, is at least 4tb/month. Likely more
We've also seen that the governmental attacks are sophisticated because they don't want it to be detected or used by an enemy. The NSA attacks were things like intercepting specific hardware shipments or network links – which reduces the number of people who could possibly notice the problem – or getting people to use a random number generator which only they have the key to reverse[1].

In contrast, this is a textbook example of a sloppy developer who doesn't understand security but is writing network facing code which is never properly audited, and it's consistent with the number of other bugs mentioned.

Saying that it might be a government is like saying that because the CIA has killed people every pedestrian hit by a drunk driver is probably an assassination.

1. https://blog.cryptographyengineering.com/2013/12/28/a-few-mo...
Late response, but I often times do use the term small business when talking to people about it. But it's also a startup, which is why I responded so strongly to that bit of the blog post.
> For a ~$6k setup, it’s awful. It’d be awful for $1k. About 10 years ago, I had a Dell D830 running Fedora and later, early versions of Gnome shell. The dock powered the laptop and a mouse, keyboard, external drive, and two monitors. It was a single (albeit proprietary) connector, and the dock was fairly expensive (~$200 IIRC). It worked damn great, nearly every time, even with sleep States in Linux on a laptop 10 years ago.

And what did we learn here?
> People plugging keyboards into iPads and using them full-time to write papers at school are.

How many people are doing that? A chromebook I can buy as a school computer. An iPad... The idea of trying to select chunks of text and move them around in a paper, or simply re-positioning the cursor sounds like a nightmare.

If I were a kid I'd beg my parents for a real laptop.
They do do that. It fails because the monitors have identical EDIDs. Peripheral vendors are less competent than you think.
Just not sure that’s really the case. Discovery hasn’t changed much since Pandora or Last.fm.

Vinyl has made a massive comeback. Probably growing at a rate faster than Spotify at this point.

I’m really not sure what amazing “innovation” is being held back. The vast majority of social music applications just create “value” by taking revenue from someone else, not by creating new value of any kind. Not really what I think of when I think innovation.

The CD was innovative. The iPod was innovative. Spotify was just the last man standing in a long line of music streaming applications that came after music piracy hit its peak. I never found it unique or innovative. They all offered the same damn thing. Most of Spotify’s growth came from spam on the Facebook newsfeed when that was still allowed.

The whole social <whatever> app is a bit of a farce. It’s mostly based on quasi-legal theft. If that’s what counts for innovation these days then I don’t want to innovate anymore.
differentiable.js.io
Angry Twin (Official Video)
I hate the name, but LOVE the idea of calling this programming...

What would you call it instead?
About Meltdown, it was well known since even before that speculative execution has to stop at security boundaries.
Not with Spectre exploits on the horizon.

I can almost imagine a future Craig Federighi post to Apple.com, "Thoughts on Javascript"
Assuming that AI tries to mimic the way humans learn and evolve, those methods haven't changed for hundreds of thousands of years and brute-force trial and error is just one of them. It's kind of fundamental...
Im not sure about elsewhere, but in the US, at least in my experience, a "provisional offer" is an offer that's contingent on one or more specific condition, usually something like "pass your background check" or "pass your drug test," or "references check out," or "you prove you are legally entitled to work." These are things you won't usually put a potential hire through unless you've both agreed upon employment and salary.
This is utter nonsense.
Why's it my mum's fault for buying one of these?

Also, ignoring the backdoor and focusing on the other exploits, fairly popular open source software has had similar exploits.
Does this mean programming language nerds get to play too, maybe after boning up on our calculus and topology?
OPM keeps that data even for contractors?
I think it's standard price discrimination— internal drives are often bought alongside other expensive equipment as part of a "build" so that purchaser is a lot less price sensitive overall than someone who walks into Best Buy looking for a USB3 drive to use with Time Machine.
This. Although I didn't redowngrade to the non touch bar, I literally hate it and stare enviously at my colleagues running Dell and Lenovo Linux laptops with 32GB of RAM, etc. I am still hoping for Apple to get its act together but I am done with the crappy non Pro "Pro" consumer junk laptops.
But there is also presumably value lost by the people performing, otherwise they probably wouldn't have had to be paid so much for the performance.

Let's say that the two people absolutely wouldn't have done the performance for less than $15k and absolutely wouldn't have paid more than $25k to see the other performance. Then one person is giving up $15k of value to get $20k of value for a net of +$5k and the other giving up $20k of value to get $25k of value for a net of +$5k, so it is really only a creation of $10k of value per performance while the GDP increase is $20k.
These days it's fashionable to venerate Tesla and denigrate Edison. Tesla's contributions to AC motors and power are great and beyond dispute. The others, not so much.

For those who like to denigrate Edison by comparison, I challenge to read "Edison" by Josephson and maintain that opinion.

I.e. Tesla transformed AC power, Edison transformed multiple foundational industries.
I would say that if people on HN are saying the attack is too stupid to be government supported, then the government has succeeded at their primary goal of having plausible deniability with these issues.

If we take recent history, we now have hard evidence of all sorts of conspiracy theory type stuff being absolutely true. With that in mind, do we just keep defaulting to 'not government' every time there's a deliberate backdoor identified? Sounds like a great way to maintain the status quo and ensure that no action is ever taken to curb this.

> this is a textbook example of a sloppy developer who doesn't understand security

From TFA:

02 - Hard coded backdoor

02.1 - Vulnerable code analysis

02.2 - Remote exploitation
Here’s my simple mental model: People use bullshit reasons to be dicks to each other. Sometimes people are legit trashy, so fuck them, but other times trashy people are nice and it’s the elitists who are assholes. The bullshit reasons originate from religious mythology (read: made up fiction that conveniently excludes scumbags born into shit, fucking them for life, and leaving their children to inherit the same mistreatment), but the crux of the matter is who gets to fuck bitches and why. Arranged marriages and dowry compensation come bundled with what amounts to a regional, cultural and thus religious form of brand recognition. Slutty girls get sold to scummy dudes on the cheap, but sometimes a scummy dude has the money, and still can’t buy his way into the game. Compound this over generations and people get angry and stay angry when they die feeling jilted by the assholes they share daily life with. It gets worse when they watch it happen to their kids who are probably accidents anyway.
Correct me if I'm wrong but if this is on your home network then you're only vulnerable to other people on your network right? Just don't port forward access for a start.
You will get extreme page damage leaving javascript off on every site. If you're willing to deal with the micromanagement that's great, but it isn't the right answer for most people.

Instead, I recommend using uBlock Origin in "medium mode". Medium mode allows first-party scripts to run but blocks all third-party scripts by default.

In medium mode, around 75% of pages work without any additional finagling and the others can be fixed by enabling selective script sources only on that specific host. I find it a reasonable middle-ground.

https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...
Really? I'd have thought the exact opposite, based on the number of backdoors discovered in devices like these.
I have a genuine question about Tesla. I've read some of his speeches/presentations, and he has credited his interest in inductors and electrical fields to, among other things, papers or texts written by William Crookes.

I can't find which texts, though. Does anyone know?

See, the thing about Crookes is, he seems to have veered towards paranormal stuff towards the end of his career and a lot of the literature surrounding him has to do with that. Somewhat ironically, the Crookes Tube was featured in one of H.P. Lovecraft's stories during an attempt to exorcise an eldritch monstrosity of fungal horror.
stop being concerned about imaginary internet points and it won't bother you so much.
Its well designed, supports a good number of protocalls, and the "mount as disk" feature can be really handy both for daily use as well as automation.

I agree 49 is a lot though. I'd wait for a bundle or discount.
> Was this a clean install or was it upgraded from a previous version of macOS?

You do realize, don't you, that if this is a relevant question I already have cause to complain? It's been the future for some time now, give us reliable upgrades already.
Do you know how SES stacks up against services that focus solely on email?

It looks like a great deal if you already use EC2 because of the free 62k outgoing emails/month. But there doesn't seem to be a free tier otherwise.
I still think my favorite development in the Tesla saga was when a cartoonist (The Oatmeal) got the Internet and then Elon Musk to help him save Wardenclyff from the dozers.
Yeah, true. Even though Redshift is based on Postgres, it does not leverage the automatic vacuuming facility of postgres.

So the vacuuming of tables to recover disk space from deleted rows needs to be done manually.

There are 3 types of vacuuming in Redshift (DELETE ONLY, SORT, REINDEX). The vacuum SORT operation is done on tables that have a sort key. To the extent that a vacuum SORT is an expensive (high IO) operation, we recommend when possible, to avoid the need to vacuum by loading the rows in sort order. If you do that, you will not need to vacuum the table, and this is the optimal solution for very long tables.

When dealing with a very long table (>10b rows) that has a sort key, it’s useful to partition the table into multiple tables where the table names are modified to indicate the partition. This is useful when pruning the size of the table, you don’t have to run VACUUM DELETE ONLY.

The key is to vacuum on a regular basis, and keep your stats off below 10%. If you wait too long, you might end up in a place where you have to resize your cluster or do a deep copy.

One more thing: Run your vacuum jobs in the queue with the most memory.
Kids these days just aren’t that into each other
Israel to Ban Cryptocurrency Companies from Stock Exchange – Viral Docks
This is expressly covered in the article ("02.2 - Remote exploitation").

No, in answer to your question, an iFrame on a website you visit can execute commands on your LAN accessible MyCloud.
I'm not really sure why you would expect Transmit for iOS to have SMB, and in their product website and app description, they clearly outline what protocols they support. FTP and SMB are completely separate protocols?
I like Mailgun so much because of its simplicity but last November 2017 the default postmaster account of one of our domain in Mailgun was hacked. (I don't know where it was hacked but i suspect it was on the Mailgun server because I kept the secret key in my server very well). We moved to Sendgrid because my account in Mailgun got a very bad reputation. One of the hacked smtp credentials was used to send spam.
I really love my QNAP device, but the software stack is so amazingly complex it sort of scares me how many vulnerabilities might be lurking. Hopefully the QNAP security team is full of decent folks.

For reference, I have a QNAP j3455 device. Remotely streams up to 4 hardware accelerated plex streams, runs lots of SSL connections, hosts all my files in a myriad of cool ways, never gets about 30% CPU load. It's amazing.
That’s because your idea of a “computer” has a command line, Python interpreter, filesystem, etc.

Kids these days don’t get exposed to that so they don’t really desire it. Their idea of computing comes from apps that are take-it-or-leave-it, interact with other apps only in predefined and constrained ways, and use touch UI. They may want a better text selection interface but I’m not sure they concretely know that a “real laptop” has one.
The evidence for a backdoor by the government vs a programming mistake or backdoor by somebody else is weak, I think. Also, what would change even if?
And always run every program and always pass every option! Do everything well!
We also saw a huge hit on our memcached elasticache nodes. Eyeballing from our CPU graph, seems ~30%.
The bikes appear to be strewn about the city to begin with, even when they are on Google property. If you see a bunch of people riding these bikes between buildings and just leaving them there why wouldn’t you do the same?
Yep, then the system has failed.
What is Zam? And why you should use it
> inherent unsolveable security issues

And UX issues, and performance issues.

Building (and using) native apps over "web apps" for non-trivial tasks is definitely the right way to go. And, no, I'm not talking about apps using Electron or the like.
In Iran’s surprise uprising of the poor, dents to revolution’s legitimacy
Well, if you think of it as an FTP client. But it’s a multi-protocol file transfer client; I mentioned that the list of protocols was short on the iOS version, but it still includes three options that don’t have “FTP” in their name.

I know what you’re saying wrt “wouldn’t occur to anyone to do” - true, desktop file transfer apps don’t traditionally include dedicated SMB support, since the OS can handle it. But the idea did occur to the developers of multiple competing iOS apps, including the one I mentioned, which support SMB in addition to FTP, WebDAV, and various cloud services.

(FWIW, I’m not claiming I was scammed or anything like that. The feature list was right there in the App Store description, and even after buying the app I could have tried to get a refund. I didn’t, because I have use cases for it other than SMB. I’m just surprised that it’s missing.)
Y Combinator's Paul Buchheit:The Surprising Learned from 200+ Startups (2016)
I changed "hate the name" to "wish we could come up with a catchier name," which better reflects what I meant to write.
Stallman's argument is a good one against the Intel ME issues, but I don't think it apples to Meltdown.

This is a specific side-channel attack in a super complicated system. Even if we had OSS x86/64 processors, this more similar to the protocol issues found in openssl.
Increase security with site isolation (Google Chrome)
They already are; e.g. Jeff Dean among many others. The question is will the PL academic community play as well.

Conal Elliott has done a lot of work in this area about 10 years ago. His work is beautiful but maybe before it’s time.
WSJ has changed their paywall policy over time, so I don't expect any policy written in the past to be optimal for the current reality - which is no access without a subscription, period. I know NYT allows a limited number of articles per month, and I'm fine with that. Don't know about the other two but I don't remember having any trouble accessing them.

If you already have a subscription to WSJ I expect that you'd be a heavy enough user that you don't need a HN link to inform you of content to check out.
https://en.wikipedia.org/wiki/Fiat_money

Crypto currencies are not fiat by this definition, since they have nothing to do with governments.
I didn't state how I think it should be, but how reality is.

Now, for your mother, the government has the responsibility to protect the people from harms the people can't solve on their own. This happens in crime investigations, ecological regulations, car regulations and nuclear material regulation, among many other areas. In my eyes, security in IT products is clearly one of those areas. Your mother should ask the politician she voted for why they don't fulfill their responsibility.

In Germany, the highest court has stated legally binding in a decision in 2016 (red point 38 in [0]) that the state is responsible for the confidentiality and integrity of the IT equipment of the population. So far the german government chose to ignore that decision.

[0] https://www.bundesverfassungsgericht.de/SharedDocs/Entscheid...
Alexa, what is your favorite airplane?
LeCun specifically calls out imperative programming, not just typical data flow methods.
See my response to someone else with a similar question:

https://news.ycombinator.com/item?id=16083772