skysight-inc/HackerNews huggingface dataset:
I was just thinking about this because Sears is in the process of closing something like 100 more stores. They were a behemoth of their time and now are barely staying a lot.

So many years of managerial incompetence and greed and market forces have completely eroded their dominance. I say eroded because they're not completely gone yet, and it's taken so long for them to glide down to this point.

It's just fascinating that company so large because reduced to so little over such a long span of time.
It requires a lot of CPU so there isn't anything silent about it. If some bad advertisement absolutely kills the tab you're looking at, I hope you'd notice. If you're using a multi-process browser (like Chrome) the impact is pretty minimal.

That's not to say it's not bad -- the exploit works remarkably well -- but it's not fast or easy.
The recent decrease in the mortgage deduction will likely have some effect.
I used Qt installer framework.

http://doc.qt.io/qtinstallerframework/
As an alternative, maybe Person A spent $20k convincing Person B to pay $20k to eat poop. I believe the polite name for this is the "service economy"?
Only issue with that aspect is if they still allow configuration (I mean they'd sorta have to) and what if you could exploit a testing configuration to do whatever activity you want to hide? You could get the badge from AWS but still do what you wanted.

Honestly not sure there is a good solution for that.
Please Bloomsbury or JK Rowling, send this person a hardback copy
This is what’s missed in most of these criticisms. Arguably you could use movies, or video games, or TV shows or any entertainment instead of stupid examples like ‘eating poop’. The point is the money is (generally) taxed and the people receiving it spend the money to support their livelihood, it flows onwards into government spending, goods and services.

Even if I paid someone a salary as my personal poop eater they would pay income tax and rates, pay rent, buy food, pay bills, etc. That’s all valuable economic activity that wouldn’t occur if I kept the money in a mattress. Contrived examples where people just hand money back and forth aren’t a significant factor in reality and even if they were, they’d have to happen as a significant part of measured economic activity much more in some countries rather than others to be relevant.
I am the only animal that modded you down.
Exactly this. Apparently, the details of the attack have been published in official paper(s) before the security teams of major OSes could prepare and make publicly available mitigating patches for the users. There is no patch for Debian 8.0 (Jessie), or for Qubes OS, for example.

The chatter is all about how CPU manufacturers screwed up, but there is a much more alarming issue here, I think: the apparent irresponsibility of the people who published the flaws before the security teams and the users could mitigate them. Perhaps there was a reason for accelerated public disclosure, but so far this makes no sense to me.
Over the same 30-day period, the Alexa skills have invoked the related AWS Lambda functions over 1M times.All the Lambda functions share the same AWS account and each function is allocated 512MB of memory and configured with a 7 second timeout.
> Seems kind of a bad design

Many things can seem this way from the armchair, but you can lend some benefit of the doubt. Postgres is worked on by very smart people and it's not the only system that works this way

Everything has tradeoffs.
There's a difference between using a library (hopefully) maintained by those more expert in a field and in using the output it provides.

Using the output of RNG still requires some skill, but that's about designing a "fair" set of rules. Not a better way of obtaining truly random, random enough, or plausibly pseudo-random numbers from a given system.

As the article discussed, there are times when a designer might want to add in bias to make the response of the system fit within desired constraints.

One such example might be a load balancing daemon removing targets from a distribution entirely if they are either unresponsive or under sufficiently greater load (relative to other targets).
Scaling your monorepo for an efficient CI
If we agree to that then I think we can also agree that adjusting the legal system such that we actually see more convictions is also something which practically everyone would want. There is few crimes in any nation that has more than a single digit conviction rate. To give an example, Sweden has dedicated police units for sexual violence crime, dedicated unit of prosecutors for it, and a legal system where if there is evidence proving the accused party is guilty beyond a shadow of a doubt then the accused will get jail time. It still only has 8% clearing rate, which to be fair is higher than in the US, but still where the wast wast majority fails because a lack of any evidence beyond the testimony of the accuser and accused. By a coincident, assault also has the exact same 8% clearing rate (but with a higher occurrence rate).

The question is how to get the clearing rate anything near in which people will start to feel that the guilty will be punished.
A Specification for Dependent Types in Haskell [pdf]
Life is going to be just fine, but complex lifeforms with an endless list of needs and dependencies like us are utterly screwed. As for “figuring it out” what does it tell you that the smartest people with the best education on the topic have been screaming bloody murder for decades? It’s been figured out, people just won’t accept the solutions.
When was Ballmer ever good for shareholders? Windows/Office was already a super profitable juggernaut, he misinvested every dime of their profits. Expedia/Zune/Windows Phone/Nokia/Original Surface, etc, etc, etc. Even the XBox was a money loser for its first decade.

Tim Cook hasn’t incinerated shareholder funds. Most of the profits have been returned to shareholders as dividends, or saved overseas for them. His bad acquisitions have been relatively tiny, like Beats.

And as far as competitiveness goes, the Mac market share is at all time highs, iphone sales are st all time highs, and iPad still dominates the tablet market. Plus their app store and apple music dominate as well. Oh and Apple watch is the biggest selling watch by revenues in history, both now and it’s launch year.

Apple hasnt been wildly creative under Cook, but is still designing innovative new devices, Apple Watch, Airpods, the 5K iMac, HomePods, iMac Pro. Let’s just agree to ignore the touchbar macbooks;)

He’s not Steve Jobs, but has done better than i ever thought possible.
During a background check, they start by investigating the subject and interview friends, family, employers, colleagues, classmates, significant others, roommates, etc.. and may investigate them to some degree. They only have detailed info on the subject but would still have lots of info on the others.

*I had a Secret 10+ years ago.
Well, not necessarily a single packet depending on the amount of data, but one send+receive operation versus one for every command.

https://redis.io/topics/pipelining
You may want to add the citation of that quote for anyone who might not already know it:

― Douglas Adams, The Hitchhiker's Guide to the Galaxy
A Haskell Compiler for Signal Transforms [pdf]
The unfortunate thing is currently prosthetics are much less nimble than real hands. I'd want to see a lot of improvements in that tech before I'd see them as a replacement.

In the article she mentions she's had them for a year and is still learning to use them and struggles to do some things.
Probably pretty bad. Branch prediction is usually right and we branch a lot. Your pipeline wouldn't be filled MOST of the time, I bet.
Like a lot of people, I was barely aware of VACUUMing before several high profile OLTP systems had unplanned outages because Postgres' requests per second dropped off dramatically and suddenly due to this arcane form of resource exhaustion. That's a performance cliff. I didn't mean it is hyperbole but as jargon. System hits a bottleneck, rate-of-change alters drastically/unmanageably.
Does anyone have a higher quality image where you can actually read the tweets?
What would finally bring this all together to me would be an example of a real world attack that would be carried out using these methods on some target, perhaps with an implementation.
Question is how strong the argument is that it isn't.

To pick up on the examples provided above, you could live in a friendly caring community where you occasionally babysit family B's babies and they occasionally babysit yours, for free.

Or you could live in a materialistic community where you won't babysit family B's babies unless they pay you, and they won't either.

Community 2 will have a higher GDP.
But what if it's mostly domestic spending?
The money spent for salaries flows in whatever those individuals need/desire to spend (groceries, barber shop, you name it).

The part of the trillion dollar injected in any economic activity in a closed system stays in that system.

(The part of that sum that is used to buy imports is another thing, although I guess it's far more complicated to properly account for)

Honestly, every time I think about this my mind just melts; I'll be really glad if somebody can clearly explain where is the catch.
You may disagree with the components they chose for the iMac Pro, but they certainly aren’t profiteering off it. You can’t build an ugly box with the same parts for more than 10% less.
Looks very interesting, especially the Vega integration. Thank you for sharing.

Don't see any licensing info at first glance though. Any chance you could release this under MIT?
Sure, a VM running on a patched host might not need extra mitigation, but the host mitigation won’t magically be free, so running tests in a VM to get a rough idea of the impact is still a good idea.
Military spending also creates new technologies and improves economic productivity. Thus, it drives growth in the economy, not just through direct purchasing and salaries, but also by making traditional investments.

I'm not focusing on what is produced (in fact, I made an explicit statement to this effect), but on investments made that drive productivity growth (which is considered the most direct driver of economic growth). And if those investments made earn more than the costs of interest on the debt, then it's a net win for society.
GDP is not measuring wealth. It's measure of market value of all final goods and services produced.

National wealth is completely different measure.
non-paywalled version: https://t.co/gRcNYuXTcg
> I'm happy because it's gonna have to change. Whole stack revisited. Eventually.

I used to believe this kind of thing, but now I think you greatly underestimate human indifference and interest in effort conservation (uncharitably called "laziness").

Look at Intel's response to Spectre/Meltdown. Are they going back and redesigning their microarchitecture with new hardware-enforced safety rings [that actually enforce, lol] and new ways to block timing attacks without sacrificing performance? Seriously doubt it. From LKML it sounds like they're just going to hardware-accelerate IBRS/IBPB to make it faster to shut down branch prediction in risky situations and leave the rest of the shebang as-is.

Even when the forecasted apocalyptic events occur, it's amazing how little anyone cares, or how little gets recognized. Surely there are people who've speculated (ha!) attacks like Spectre/Meltdown, given the knife's edge nature of hardware virtualization on x86, and advised against multi-tenancy. Surely there are people who have paid attention over the last ten years to the dozens of sandbox escape attacks that already exist without exploiting the microarchitecture! Are they getting their due? Is anyone asking why people didn't consider these possibilities or listen to the people who warned them? Nope, because they just don't want to hear that. It's all "Oh gee how could Intel have done this to us?!" when "How could you have acted like this was safe" is an at least equally valid question.

TPMs, again, are another example of exactly the same thing. Major exploits in them are 100% routine by now. Does anyone care? Google is quietly working to remove them from their own machines but it doesn't seem like anyone is going to get any real headway outside of that. Do freedom advocates like RMS get their due? Nope, they just get told "Bugger off with your 'I told you so'."

Have you ever spent months or years warning your bosses about something, only to have that thing happen, and watch them hand-wave it away and get extremely irritable after you mention that they had fair warning? Most semi-aware engineers probably have, because this happens constantly.

Admitting, realizing, and honestly correcting our mistakes is just not a thing that people do, unless they feel substantial direct and personal pain that the brain decides greatly exceeds the forecasted effort expenditure to correct the issue. Such negative force cannot be applied over an industry at large unless there is a very specific and coordinated demand from the handful of people at the tippy-top, as in the case of Spectre/Meltdown, since in the age of cloud computing, those exploits fundamentally jeopardize the profitability of every major tech company.
Their direct customers? Yes, but alternatives are thin on the ground. Their investors? No. This bland corporate blame dispersal is exactly the kind of language that investors are used to reading all the time, and that will placate professional investors enough to avoid a bloodbath. Techies who understand how bad this is don't have the PR skills or reputation to counter, because even most smart business/money people don't have the background or patience to understand the theoretical implications. Partial analogies and shrill responses don't have much effect as people are very used to techies getting passionate and upset about all kinds of things that they never feel the effects of. At the end of the day, short of widespread hacking with economic consequences, there won't be enough visible impact for investors to be bothered. If and when that happens Intel will deal with it, they really have no upside to do anything but spin the current situation in the most positive light.

The more interesting question is what kind of design changes they make in future designs. Because F00F was a trivial fix compared to this, and as far as I know there hasn't been a security revelation of this impact for CPU design in the modern era. You'd have to go back to a time when things were much simpler and easier to change anyway. If Intel engineering doesn't take this seriously and we see half-baked mitigations in new chips that's when I go long on the competition, because that indicates true incompetence whereas the current statements indicate nothing other than savvy PR.
> and Meltdown only affects Intel processors as far as we know.

I made a post stating the same, but this is not true [1]:

ARM has reported that the majority of their processors are not vulnerable, and published a list of the specific processors that are affected. However, the ARM Cortex-A75 core is affected directly by the Meltdown vulnerability, and cores Cortex-A15, Cortex-A57, and Cortex-A72 are affected by variations of the Meltdown vulnerability. This contradicts some early statements made about the Meltdown vulnerability as being Intel only.

A large portion of the current mid-range Android handsets use the Cortex-A53 or Cortex-A55 in an octa-core arrangement and are not affected by either the Meltdown or Specter vulnerability as they don't do out-of-order execution. This includes devices with the Qualcomm Snapdragon 630, Snapdragon 626, Snapdragon 625, and all Snapdragon 4xx processors based on A53 or A55 cores.

[1] https://en.wikipedia.org/wiki/Meltdown_(security_vulnerabili... (contains further references)
I had dk2. The best thing I found was watching 360 videos on youtube.

but I can only wear it for 20 minutes at most. otherwise I will feel sick.
From a user viewpoint, Deepchem would greatly benefit from being a better team player with lower-level (Tensorflow) or other (Pytorch) frameworks. The pace of research (in NLP in particular) is too fast to make it realistic to port everything in Deepchem without an unreasonable delay.

Does it fit the Deepchem agenda? That's another question ;)
The person who wrote that post is me.

> Is that like, showing the commits you make on your profile?

Yes.

> Having a page that shows what you've worked on at all?

Yes.

> This seems like good ways to be difficult to work with in open source projects

First, open source doesn't start and end with GitHub.

Second, I prefer not to publish anything to Facebook or Twitter feeds, either. That's a position that folks seem to find palatable. (In fact, it's one that programmers appear to be disproportionately sympathetic to.) I don't see why it shouldn't remain so if the subject of the conversation is GitHub.

> for zero benefit

Opting out of the same kinds of personal broadcasting on GitHub isn't "zero benefit" to me. And if it is zero-benefit, it means the service linked here is zero-value. I feel differently. We don't have to agree.
> Problems with metrics create problems with incentives, which eventually may lead to skewed or wrong choices.

Goodhart's law: "When a measure becomes a target, it ceases to be a good measure."

https://en.wikipedia.org/wiki/Goodhart's_law
Meltdown and Spectre in 3 minutes
> If your random number generator has fewer than 226 bits of state, it can’t even generate every possible shuffling of a deck of cards!

Anyone know why?
What happened to all the theorem proving software that are supposed to absolutely guarantee correctness of code. I guess they are only as accurate as the assumptions input into them?
You're right. I should have written "halts last among its peers" or similar.
The space colonisation and nanotech focussed Silicon Valley of the 70s and 80s
The suburbs have those as good or better than in the city though.
The project is open source and MIT licensed! The licensing info is a bit hidden since we converted to a monorepo on GitHub, I'll update to make that more clear.
I don't necessarily think his comments should be ignored, just treated like what they are: childish rants that don't have a strong connection to reality.

Foreign governments are going to do what they do either way -- we are past the point of pretending that our POTUS isn't a flaming dickhead. By giving him additional attention, we're validating him as an important part of the American dialogue. He should not be that, whether he is the POTUS or not.

It's true that because of his position, he is now afforded certain powers that make him difficult to ignore. But I think his nighttime Twitter rants are just "acting out" for attention. If he was 5 years old, we would know to pay attention when he's being serious and ignore him when he's not. But we don't.

Honestly, I think at this point we just have to wait it out and try to minimize the damage he does to our society. I can only hope that the experience will be sobering enough to incite actual social change.
A copyrighted work has dozens of different encodings that would map to different files.

A copyrighted file is just a large number.
What Is Actually True and False in Python?
I’d be very interested to learn more from your experience. i see great potential in Greek orgs, a training ground that is systematically undervalued. if you’d be game for an interview, my email is: sirspacey.hn at the Gmail
After families trading loaf pay taxes they certainly contribute to the economy more than if they make the loaf for themselves.
Yeah, they replaced their custom CISC with a POWER + a bunch of extra instructions + a special processor mode + RAM with extra bits.
> You only have to give it up in cases where there are possibly observable side-effects and it's not guaranteed they will always happen.

> Compilers will get called upon to do more safe speculation

Compilers can also emit code that minimizes those situations. Also, extending the ISA with an instruction modifier that signals that otherwise innocent instruction has indeed observable side effects (ideally the processor should know that, but, if the compiler already knows it, a runtime check can be skipped.

> Processors will have to grow the logic to determine when speculation is safe

In many cases, this would be as simple as flagging the micro-op as unsafe and pause the speculation at that point.

For Meltdown, the just-add-silicon approach could be to never share cache between privileged and unprivileged code. To extend that to Spectre, never share cache across different PIDs (but, then, the ISA will have to know what a PID is). Since that would reduce the effective cache effectiveness, caches will have to grow.

Fun times ahead.
Twitter is there to make money for its shareholders

Everyone already knows Twitter isn't a charity. This fact does not mean that the company can't have a worthwhile purpose like "advancing the global, public conversation".

They don't have to choose one, they can have both.

World leaders are a cash cow for Twitter

So what? World leaders can also help defense contractors and kindergarten teachers. How does that affect whether their statements should visible for public conversation?

who could seize any of staff or assets by force

Are you fucking kidding me?
Not sure if the content changed, but the article currently states:
"AIX and i operating system patches will start to become available February 12."
A thousand dollar phone is only a few hundred more than the old phones, and is incredibly affordable. I’m still struck dumb by people bent out of shape about its price, when they are paying far more for their phone service.

I’m going to sell mine for $400 in two years, having cost me $25 a month in total For something i use a hundred times a day and take all my family photos with. I could have saved $10 a month by getting an iphone 8, big deal.
'lending'

Sorry.
From experience: after company grew to more than .. 200-300 people and user management/termination became a big burden we hired a person that would write tools to automate user management, and if something wasn't supporting SAML we did manage users via its API. If API was not available then we reverted to "Termination checklist" aka manual work.

Clarification: it wasn't that persons only responsibility, just one of many assignments to help automate Ops in the company.
You could always have a script which strips down things to only necessary configuration values for production and then generates a tarball that could be verified. It seems like it would be possible to get down to a subset of settings that could take on any value while still allowing you to trust the service. Of course, if the settings don't have to be secret, they could also just be baked in as well.
Bodyfuck
The above example compiled with optimizations and with `indirect_jump` altered so the compiler actually emits a jump table instead of an array lookup:

https://godbolt.org/g/MPs43x
Agreed, but the OP said that giving a trillion dollars of borrowed money to the military would impoverish the nation in the long run.

My counter-argument is that that money will still find its way into places that truly drive economic, technological, and productivity growth. And if the ROI from that is greater than the cost of the debt, the nation will not be impoverished, but will be better off.

I agree that its not the most efficient means of investing in these things, but it is a way that has worked in the past.
not sure why somebody would want to use a fTPM over a dTPM. Especially since most computers now have a dTPM. (well my cheap 80 € mainboard can switch between fTPM and dTPM.)
That lets you trust the image. Trusting software which is actually running somewhere seems harder.
If they thought the Mini was worth the investment, they would be making it. Don’t know why they don’t think it’s worth it.