skysight-inc/HackerNews huggingface dataset:
> I should just go hide in my bunker and build linux from scratch on a fully GNU open laptop -- alas that's not practical.

I'm hopeful that this is at least becoming slowly more practical for some (more technical) people. Open hardware is the big blocker, but there at the very least seems to be much more mainstream popular interest in projects like System76's un-ME'd machines and similar initiatives then there was, say, 10 years ago. Baby steps.

As for building Linux from scratch, while I have quite happily used Gentoo for a while in the past, I think I'd echo some other commenters here on personally auditing every line of open source code: if you're not doing that, distrusting checksummed precompiled binaries is a somewhat odd distinction. The main differentiator is that the code is "auditable", not necessarily that it's actually been audited (see OpenSSH). If it's auditable, I consider that to be a not-absolute-but-still-significant improvement over closed systems.
Well, that's true (at least for the spectre attack). It's not a bug in Intel products. It's a bug in any CPU that uses branch prediction (please correct me if I'm wrong, this is my current understanding)
> ...I (tin-foil hats on) don't like the system on a system stuff going on.

These inner systems all already exist in modern devices. Here Apple is consolidating them into their T2, but you're going to be trusting all kinds of firmware regardless.
Because they were made in the last week of the year, and it takes a couple of days to ship them to the destination service center which has to make an appointment with the new owners to do the delivery and finish the paper work. Tesla counts a car as deliverd only when the new owner has taken posession of the car. So Tesla always has quite a few cars in transit - about 2000 S/X and the end of Q4 and over 800 M3. Deliveries to the east coast and of course Europe take accordingly longer.
Considering how long it is taking them to develop it, and considering the direction they have taken with their Emoji-keyboard MacBookPros with custom chips and now the architecture of the iMac Pro, the Mac Pro is going to be anything but standard.
Uhh, in what way do you figure that a business operating in Washington trumps State Law by "including it in their privacy policy"?
I can’t remember the last time I was required to give a license plate number at a hotel. I have on some occasions years ago, but not any time recently. I assumed it was just a matter of parking enforcement. Surely it can’t be a legal requirement if it’s so inconsistent.
The 2018 API Landscape: Predictions from the Front Line
1) These proposals are good and certainly better than nothing. They'll probably be impossible to pass because they're so radical. Tinkering around the edges is the best you can hope for. In effective politics your goals need to be modest, realistic and incremental.

2) Taxation, tax breaks and subsidies are seriously the wrong way to go. The problem is too much heavy handed manipulation of the market. There are always unintended consequences. These proposals try to chip away the ability of zoning boards to regulate who can build what where. That's the ultimate solution.
Lenovo released a BIOS update[1] more than two weeks ago that mentioned CVE-2017-5715 (Spectre-related CVE).

[1] https://support.lenovo.com/us/en/downloads/ds035965 for example
Aren't they using GitHub for what traditionally would have been done with a CMS?
This is exactly how the AWS spot market works. If you don't mind getting bumped off, you can cut GPU costs to 30% of the usual.
Hear! In them olden days of yore, writing x86 assembly, I had a decent mental model of what my code was doing when.

I no longer do.
All your passwords, are belong to the Internet
I am really sorry to hear that.
I can't say I have been there, but I was going down that line and so I took a career break. I didn't even feel I need it, but once I was on the break and stepped back from everything, I realised how bad the situation was before.

Since career break didn't work out for you, I really strongly suggest talking to a professional. I would start with company's HR and counsellor (they often have them in "big 5") and ask for some time off for medical reasons. Personal well-being is the most important thing. Being on autopilot and feeling miserable might lead to even worse things, so please step back and talk to someone in person.
I'm curious how this would turn out. Devil's advocate for a moment...

1) So freaking vague it could mean anything.

2) I can understand the discrimination claim but the easy counter is that latino-sounding names doesn't necessarily imply race, creed, or color.

3) I'm not really sure on this one but I would argue that the persons affected were not prevented from getting a room. Plus one could argue that if an illegal is discovered at the hotel then there could be damages from law enforcement conducting a raid. I need someone to explain the context on this one.

Might be an interesting lawsuit.
Thanks again to the geniuses who arranged things so that almost anyone can write code that I must run just so I can use the internet to find and to read public documents

(unless I undergo the tedious process of becoming a noscript user or something similar).
If the answer is "nothing", then what does Apple shipping 10x the devices have to do with their ability to produce the world's only Secure Enclave implementation that isn't simply a warm cosy environment for malware?
Competing with the Giants in Race to Build Self-Driving Cars
Thanks buddy. I was actually writing you an email this morning, but then decided I had tested it enough :).
To me this feels like saying, "My program doesn't have a bug, it's executing the code that I wrote correctly." The actual bug is that the code isn't correct.

In Intel's case, even though the operation is correct, it's the actual design that's flawed.
IF the bug is present in all processors that use speculative execution AND Intel products use speculative execution THEN it is a bug in Intel products.

It would only be correct to say "This is not a bug or a flaw exclusive to Intel products"
The New Reality: Microsoft HoloLens and the Rise of AR
Suse Enterprise and Red Hat Enterprise had no problems to release updates for their Kernels.
Yes, sort of. After the end of the war, it was ruled unconstitutional (by SCOTUS), but only applied to 1869 onward. (perhaps meaning it was legal in 1861). The actual ruling is still being debated.

https://history.stackexchange.com/questions/2056/was-the-sec...
Yes it does because javascript execution has had to become very fast. Fast means you can run a very tight loop that updates a counter to create a fairly high-resolution clock.
" even though a system is operating exactly as it is designed to."

So people can leverage the poopy design of your chip to steal compromising information? And it's okay because the chip is functioning as it should?

It shows how deeply embedded the idea of maintaining proper design and processes is over, going back to the drawing board and designing a secure chip.
So, all their favorites.
I think you're misinterpreting the article you link to. Among other things, note that Morocco is in Africa.
Now available: New training to help you learn about AWS database services
I wonder if there would be a way to DoS them by sending phony lists with tens of thousands of machine generated latino sounding names.
Even with distinct processors, there would still be something in charge of who gets to use what hardware resource. I suspect that would be where the attack vector would shift.
I spent a lot of time learning docker and k8s, thinking it would be really useful. Interest from the rest of the team - is nearly zero. Actual VMs work great, I'm thinking its not really necessary except for if you need scalable/serverless applications.
The states that have legalized it should do everything in their power to not provide any assistance to the federal government in this or any other investigations till the policy is improved, just like sanctuary cities are doing. The states have a lot of legal options on how to handle this. We'll see if they do the right thing or if they bend over backwards for a piece of shit racist AG who has already allegedly (my ass) perjured himself.
If you're using HFS+ then you can put the system in target disk mode and access it from any machine with an HFS+ driver. Not sure if there's APFS support in linux yet.
The effect on Intel is far more severe than on other architectures. There were three vulnerabilities, two grouped together as "spectre" and one called "meltdown." Intel products are uniquely vulnerable to the meltdown attack, while many CPUs are vulnerable to spectre. The summary AFAIUI is that for most CPUs you can attack userspace processes with these techniques (think Javascript running in a browser), while for Intel CPUs you can also attack the kernel. Intel CPUs also seem to be somewhat easier to attack than others because of a higher-bandwidth side channel.
You wrote:
IMO, a more thorough argument is to point out that the only way species-wide, complex morphological features like eyebrows can possibly exist is if they serve an important purpose, even if that purpose has a miniscule impact on the outcomes of any given organism. This argument is resistant to any given explanation for the purpose of eyebrows turning out to be wrong.
Plus it gets to a deeper understanding of evolution.

That's not an argument. It's a tautology. In any field other than evolution, such a statement would be ridiculed.

There are infinite reasons that could explain eyebrows. Design. Alien intervention. Lamarckisn processes. The Will of the Flying Spayhetti Monster. Out of this myriad of possibilities, if you suggest they arose because and persisted due to conferring a survival/reproductive benefit, the burden is on you to demonstrate such. This can be done in two ways. The first is by storytelling... creating a Kipling-esque 'just so' story involving, perhaps, sweat or sexual attraction or whatever.
The second method is by using science. Namely, measuring the degree (if any) that eyebrows effect survival/reproduction. From that number, one can backtrack and determine mathemstically how many generations it would have likely taken for the phenotype to become ubiquitous, and see if it lines up with other assumptions.
To summarize, before conjuring up 'just-so' stories, find 1,000 people with no eyebrows, a 1,000 with bushy eyebrows, and show me a measurable difference in their fecundity rates. Or, use chimps. Or, dogs. Doesn't matter. As mentioned, I personally don't think eyebrows have squat to do with survival/reproduction... you can't counter my null-hypothesis by assuming a priori that every phenotype must confer some sort of advantage.
People are never illegal. People perform acts which may or may not be illegal. “Illegal immigrant” is a dumb term. We don’t describe speeders as “illegal drivers.”
I actually want Apple to control the network stack, because I trust them more than Intel, or the other chip vendors. If I understand it correctly, they can now stop the Intel ME from sending stuff out? That would be very reassuring. Apple has a very strong stance against selling my data, and others don’t.
That's technically what vfork() was intended for.
Peer-To-Peer Affine Commitment Using Bitcoin [pdf]
I apologize for my tone in my initial comment as well.

> I don't see how this is the case. Where should public money be better spent than in healthcare?

R&D to make healthcare cheaper? It's an exploration/exploitation problem.

Also, policing, education, administration, infrastructure, defense.

Healthcare is a practically infinite money sink, so there have to be limits somewhere. Especially that beyond some point, it becomes cheaper to save an additional life through spending on e.g. policing than healthcare.

Don't get me wrong - I'm not saying everything is perfect in the way our society allocates resources - just that it's a bit too much to condemn it entirely for not providing a quality-of-life improvements (blindness is tough, but not life-threatening) for free, to everyone, just as they come out of the lab.
Were you paying by cash or by card?

When you pay by cash, you need to do that, as well as supply photo ID.
Any CPU that uses branch prediction that doesn't invalidate the cache after failure I think.
My interpretation is that they not calling this a bug or a flaw, but a logical consequence of the design, and does not represent a flaw because the original specification didn't specify the implementation be resistant to this kind of attack.
https://en.m.wikipedia.org/wiki/Great_Filter

https://www.haystack.mit.edu/hay/staff/jball/etiy.pdf

Dark Forest

The tyranny of ‘c’
"potentially compromising security even though a system is operating exactly as it is designed to"

Sounds like a bug to me. The PR team must have had fun trying to find a way to downplay this one...
I mean at the end of the day, something has to manage those devices.
That's like if Takata claimed it wasn't a production issue in Takata airbags, it was an issue that affected any airbag that was designed like Takata airbags.

It's a bunch of bullshit trying to dance around the fact that Intel shipped faulty products for years. The fact that other similar products may also be faulty isn't a valid excuse.
I'm going to guess they'll handle it the same way as they handled definitive proof that the Earth is more than a few thousand years old, that the Earth revolves around the Sun, evolution by natural selection etc etc.

Unconditional belief in the unknowable gives you an awful lot of wiggle room when it comes to evidence.
That's already required in many places whether people realize it or not.
I did extensive research on various token types including Macaroons. While Macaroons look simple on the surface there are numerous edge cases that the verifier should take care of (Macaroons form a DAG because you can have multiple ones referencing each other). Plus there is symmetric decryption going on in case of third-party caveats. The caveat system can be very powerful (as caveats are just byte arrays you can use any system to encode claims). But there is no standard to encode them and that causes tight coupling between systems using Macaroons. I can go into more detail if that's interesting for someone.
Haha! Fair enough. Would have been cool. Fingers crossed!
Or stateless verification when "other people" are allowed to create claims. There are certainly federation scenarios where PKI alone could be sufficient (as opposed to complex handshakes such as OpenID Connect or SAML). Obviously in accepting those claims you get to treat every claim with a giant grain of salt, but there are auth models where that makes sense (the only claim I need to trust is the certificate itself scenarios, for example).

That said, very few people want such a security scheme and as theoretically simple as it is on paper, it quickly ramps up to the real world complexity of PKI key management.

(I could see a small use for web APIs for developers and power users that allowed, for instance, Keybase-verified claims like HN account name/FB name/email, for very simple and easy to curl/iwr/httpie from the command line using Keybase-managed keys.)

I'm not sure if that small window of opportunity is worth the support complexity in PAST here, but given the model of support only specific versions, having them as separate verbs (sign/seal) makes it easy to block claims you don't expect. The one flipside from an API design standpoint that I see is that leaves a need for some sort of header like X-Accept-PAST: v2.auth
As someone dabbling in ML for the first time, setting up the correct Python env has been a nightmare just to run some sample code. I am familiar with Docker and would love if this got more mainstream adoption.

Fighting with dependencies sucks when you aren’t intimately familiar with the ecosystem: python, node and other js, and even go.
The list is missing what IMHO is the most important reason: it took a really, really long time to transform wild plants and animals into useful domesticated varieties.

Bringing home some grains of that wild wheat that grows just a tiny bit larger. Befriending a wolf that is a little less distrustful of you. Picking that apple with the slightly smaller seeds. And so on.

Without those, you really are better off remaining a hunter-gatherer. People became significantly shorter when they first adopted a sedentary lifestyle.
Are any of those categories illegally in the US?

No, they are not.
Creating a great annual plan
Please don't post inflammatory rants here. Any point worth making can be made civilly and substantively.

https://news.ycombinator.com/newsguidelines.html
For those who has problem understanding relation between Graal and Substrate VM :

http://www.oracle.com/technetwork/java/jvmls2015-wimmer-2637...

Page 4.
An Easy Fix Mark Zuckerberg Can Make to Facebook Right Now
We are immune. Give us a day or two to do a proper assessment and write it up.
Does anyone know what kind of isolation still can work after all the patches? Let's say we want to host users' processes or containers and some of them could be pwned. I see Google claiming that their VMs are isolated between the kernel and each other.
https://tradinghall.com
I believe they made their own "good enough" clock out of a loop in a webworker.
Oh, it’s only if you pay cash? What do they do if you say you don’t have a car?
>The space of inventions increases exponentially with every new piece of knowledge, insight, or tool we produce. Are you asserting that this space becomes so sparse that we will no longer have any useful inventions?

I'm saying that the previous assertion is more religious speaking than valid reasoning.

We can find new knowledge, insight, and/or tool without increasing the "space of inventions", much less exponentially increasing it.

Some fundamental types of new knowledge do increase the space of inventions (e.g. the discovery of fire, or the discovery of electricity, or the discovery of dna, etc), but not all.

>The space of inventions increases exponentially with every new piece of knowledge, insight, or tool we produce. Are you asserting that this space becomes so sparse that we will no longer have any useful inventions?

If we are just living because there's stuff to invent, we might as well, as this means inventions are inherently useless (else what we have already invented would be enough to make life worth). Life should be celebrated (or not) for itself, not because we can create new gizmos and find new natural laws.
I'm sure there would be if you're willing to be on the hook for a series of potential felonies.
All the Ways Your Smartphone and Its Apps Can Track You
It appears the retpoline fixes don't work in Skylake or later (it's smart enough to speculate out of it?) and will require new support for IBRS/IBPB in the microcode to mitigate.

From: https://lkml.org/lkml/2018/1/4/615
Presumably, the number of 'possible' states of the universe is the exact same as the number 'possible' alternate universes. (Edit: unless you are using two different meanings of 'possible')

The question of convergence then simply boils down to:
Are there any possible states of the universe that can arise from more than one prior state. Based on my limited quantum mechanics knowledge, it seems the only place this might be able to happen is in black holes: https://en.wikipedia.org/wiki/Black_hole_information_paradox
If your bank or govt system uses AWS or any other cloud shared hosting provider it's probably quite possible to get code on the same physical machine.
If the microcode update requires motherboard vendors to issue BIOS updates we are all doomed.
So people can leverage the shitty design of your lock to steal goods? And it's okay because the lock is functioning as it should?
It shows how deeply embedded the idea of maintaining proper design and processes is over, going back to the drawing board and designing a secure lock.
Refer to it with a version number: PAST2, PAST3, etc..

You could also drop the use mapping: change 'sign' to 'public-auth' and explain that it's a 'sign' operation (a.k.a. digital signatures)
But it is a bug in Intel products. Whether similarly designed products are also affected is orthogonal.
How to put a machine that does not boot (any combo of fried CPU/motherboard/RAM/PSU) into target disk mode? Or, when the machine boots but you don't have a Thunderbolt link cable?
That's the core question. Apple needlessly deviates from any standard.
We can keep going here...

https://en.wikipedia.org/wiki/List_of_California_locations_b...
http://www.statcan.gc.ca/tables-tableaux/sum-som/l01/cst01/f...

Median family income in California: $70,187 USD
Median family income in Saskatchewan: $86,970 CAD ($69,516.86 USD)

The currency conversion seems pretty reasonable. And yes, I'm ignoring the various tax breaks available on both sides, as well as a number of other perks (e.g. 55% paid maternity/paternity leave for 35 weeks). We're in the same ballpark here though.
Personal attacks are not allowed on Hacker News.

Considering how many times we've warned you before about posting comments that break the HN guidelines, I should probably ban your account for this. But we'll give you another chance. Please don't break the guidelines again, if you want to keep commenting here.

https://news.ycombinator.com/newsguidelines.html
There's also an INTEL-SA-00088 which implies that it's only addressing the meltdown vulnerabilities: https://security-center.intel.com/advisory.aspx?intelid=INTE...

> Other variants of this side-channel analysis are being addressed by Operating System and Software Vendors. For more details see:

> - CVE-2017-5753 https://01.org/security/advisories/intel-oss-10002

> - CVE-2017-5754 https://01.org/security/advisories/intel-oss-10003

Although I think the CVEs on those two are off... based on the titles, INTEL-OSS-10003 should really be CVE-2017-5715?

Both of those "other variants being addressed by Operating System and Software Vendors" issues are Spectre, not Meltdown...
Does anybody have some good patterns for bundling dependencies for analytics in Docker Containers, but then handling the execution of the analytics on Spark clusters? There seems to be various permutations of this notion, but I've heard that most of them have various issues or don't work quite as expected.
An inescapable while loop in Python
Yes, first link is to a 4 day old post on HN, which links out to another SFW writeup. The title of the article (AI-assisted fake porn are being used by people on Reddit for self-completion) is worth keeping off the monitor if you don't want someone to quickly scan the word 'porn' on your monitor, but there are no NSFW photos or content.
That depends on what you are chatting with. My chatlog would be very interesting to our competitors. The key that encrypts my home directory isn't useful because the firewall blocks your access to my home directory (that a different layer of security).
The executive branch can't repeal laws, they can choose to selectively enforce them. Also, the previous administration via the state department, was working on unwinding the many agreements we have with other countries on marijuana legalization, it's hardly tenable to legalize it at a federal level while we're still giving (let's call it slush) money to governments who make it illegal, and punishing those who don't.

This administration has castrated the state department, so near as I can tell, none of that effort is happening anymore. And in fact any government paying attention would refuse to take such moves seriously now that the AG is reversing the prior administration's efforts thus far.