skysight-inc/HackerNews huggingface dataset:
There is no solid guide on how to use Monero operationally in a safe manner. Everyone will yell to churn, but there is no official information on how much and how to churn. Ringsize 5 is dangerously low. Lack of proxy support in the wallet makes using Tor much harder. Bad decisions with offline signing mean it is difficult to use a separate transaction pusher.

Ringsize dominates all because the blockchain is totally persistent but not all IPs will be recorded by every attacker.
1 point by GlobalSignGreg 62 days ago | parent [-] | on: Ask HN: Who is hiring? (November 2017)

GlobalSign | Software Engineer, Project Manager, Customer Support | Portsmouth, NH/Boston/Maidstone/London/Manila/Singapore | ONSITE (Some REMOTE) | Full-Time
GlobalSign is a Certificate Authority and identity services company providing cloud-based, highly scalable PKI solutions for enterprises needing to conduct safe commerce, communications, content delivery and community interactions.

Multiple positions open globally, most on-site and some remote: https://www.globalsign.com/en/company/careers/
I think you are right with this too. I several friends and coworkers which are afraid to let the kid ride their bike through a neighborhood, play ball in the field, or roam the mall with a parent present. I'm starting to see this starting to flip though as more and more kids are having cellphones, which seem to give the parents more insight on where their kids are, and give them an avenue of getting hold of them when they need to.
This is essentially the mindset of iOS, which I think most folks would agree is more secure than macOS. It's much easier to secure a device when you can take this for granted.

Unfortunately, a lot of people still use computers instead of iOS devices explicitly because they want more control and power over what the machine is doing. Security is a lot harder to do in this case.

Ultimately, you can't protect a machine from an empowered user. The best you can hope for is to provide guide rails that make it easier to do the right thing, and harder to do the wrong thing.
> corporate

When the technology (NOT any particular product) eventually reaches "general public use"[1], the test established in Kyllo v United States[2] means that the government does not need a warrant to use their own devices that use the same technology to see "details of a private home that would previously have been unknowable without physical intrusion"[1].

Corporations pushing their surveillance devices will change where privacy is expected. The market cannot fix this because Amazon et al can still damage my future 4th Amendment protections simply by selling their surveillance devices to other people.

[1] http://caselaw.findlaw.com/us-supreme-court/533/27.html

[2] https://news.ycombinator.com/item?id=15853560
Kids are missing out on developmental milestones, I know I did. It doesn't have to be parties. The just hanging out thing is down too according to the article. Many people are leaving their teen years far too sheltered and socially underdeveloped, because indulging in endless digital distraction takes up more and more of our time as a society.
I used to think that. My only argument of skepticism is sort of weird. Animal health care costs. Apparently the cost of vets is going up just as fast as that of humans. And in that case it's mainly first party payment. It could be that the two have no connection but for me, it raises doubts.

Honestly my current theory about health care costs is that they're high - and are inflating - because people like health care. There's a basket of potential goods and people really like that particular item. To get it they spend what they have and then pressure politicians to get them ways to spend money they don't have. They complain more and so the politicians find ways to hide the costs from them.
Unless the advance scheduling is completely binding, I don't see why that should sidestep insider trading. What's to stop these guys from always having a cascading series of sells and buys 6 mo. in advance, and just cancelling them?
can you create another level or something to sell?
Here are some numbers quantifying the problem. Big caveats apply as they are very preliminary, but the hit due to the software patches looks extremely significant:

https://www.phoronix.com/scan.php?page=article&item=linux-41...
Agreed.

I do the best I reasonably can, in regards to privacy and trust. When I identify an issue, such as a privacy hole I wasn't aware of, or a company that proves itself undeserving of trust, I update my approach. Maybe I'll have to migrate some services or buy a more privacy-focused alternative, maybe revise which information I provide in user profiles, but I think that's worth it.

You gotta start somewhere.
I feel you. My present behaviour is similarly full of contradictions - I avoid new solutions that are not self-hosted and despise most SaaS services, vastly preferring off-line alternatives, and yet all my mail goes through GMail, and most IM conversations go through Facebook Messenger.

I guess part of the reason is I started using GMail, Google Maps and Facebook long before I developed my cynicism towards our market reality[0]. It's way too much effort to drop GMail now, Google Maps are way too convenient, and most of my real-life acquaintances are on Facebook.

But I strongly avoid introducing any new SaaS and other spyware software in my life now.

--

[0] - I should say "cynicism towards tech industry", but it's not really about technology per se - it's about regular market incentives that fuck up everything, regardless of the technology involved.
The current chip bug does look like a doozy...

See https://www.theregister.co.uk/2018/01/02/intel_cpu_design_fl... if you've not already picked up on the news.
Any idea how I can get an ePub or MoBi version of this?
Sure, send me an email or share yours.
So someone could make a script simplifying them :)
Ten Reasons to Read “The Elephant in the Brain”
Manufacturing in the U.S. Just Accelerated to Its Best Year Since 2004
Syscall-heavy workloads are affected to a much greater degree than CPU-heavy workloads. (This is a direct consequence of the fact that the workaround involves a per-syscall overhead.)
Elephas Anthropogenus
Every draw call will need to transition to kernel space to send data over the PCIe bus to the GPU. Modern games execute something on the order of 1000+ draws per frame, so assuming 60fps that's going to be at least 60,000*2 context switches into the kernel and back per second, more if you're doing high refresh rates.

How big the impact I will be, I don't know - but I wouldn't be surprised if it was a couple percent (effectively ruining the single-threaded performance boost Intel has in gaming over AMD before accounting for overclocking).
My current position's aggregate cost basis is around 2.35/share, so that's why I'm holding.
Can someone help me understand why this is such a big deal? This doesn’t seem to be a flaw in the sense of the Pentium FDIV bug where the processor returned incorrect data. It doesn’t even seem to be a bug at all, but a side channel attack that would be almost expected in a processor with speculative execution unless special measures were taken to prevent it. And it doesn’t seem like it can be used for privilege escalation, only reading secret data out of kernel memory. It seems pretty drastic to impose a double-digit percentage performance hit on every Intel processor to mitigate this.
I took it to mean a covariance of 0.5.
Just built a new Linux workstation the day after Christmas with a 4.2 Ghz i7. In hindsight I should have bought a AMD Ryzen! Glad the computer I built my dad was an AMD.
> The NHS has been failing for at least the last 25 years.

You sound like the Daily Mail.

If it's been "failing" for a quarter of a century why is it always ranked as one of the best health services in the world?

Yes it has it's problems but it far from failing.

https://www.kingsfund.org.uk/projects/health-and-social-care...

http://www.commonwealthfund.org/~/media/files/publications/f... [PDF warning]

http://www.independent.co.uk/news/uk/uks-healthcare-ranked-t...

http://www.bmj.com/bmj/section-pdf/187348?path=/bmj/343/7826... [PDF warning]
The gig economy may strengthen the ‘invisible advantage’ men have at work
Yes. Which is why I'm saying "up to 30%"
But shouldn’t the fix affect the kernel performance regardless of whether the OS system is a guest or not?
https://twitter.com/brainsmoke/status/948561799875502080
Maybe even stronger.
> Classify Group X say Murders, Outlaws, Nazi's, white people, or even humans outside the tribe in the killing allowed category and everything can stay consistent

Except it's not consistent with basic facts, like the fact that the differences between any group of humans is non-existent. There's also a Kantian argument to be made that killing period, is inherently logically inconsistent.
> I feel okay trusting Microsoft, but there's no way in hell I'd trust Google or Amazon.

I feel curious as to why that is.

Is it because you know Microsoft is blatantly in it for the money, meaning you are the direct customer. As opposed to Google/Amazon/Facebook, where you're the product?
> Plenty of places have no problem hiring (almost) only women, e.g. kindergarden, waitresses, art galleries, medical sociologists, stewardesses.

Yes, there's plenty of kinds of jobs men don't apply for at nearly the rate women do. That's certainly not the case for programming jobs.

> In any case I doubnt this would be illegal in every legislation. In the US men are not a "protected group"

This is simply factually incorrect; in employment, sex—not just one sex—is a protected class, federally [0] and separately under most state laws, as well. About the only assymetric protected class in employment is age, where discrimination is only protected against when it is against those over 40.

[0] https://www.eeoc.gov/laws/types/sex.cfm
i'm pretty sure you're being humble about your skills as a developer.

$450k is a lot and rare, even for the bay area
Apple in general has always been a bit further in this direction, but it seems companies are increasingly leaning towards security over freedom, which is perhaps even more scary than insecurity itself. It's a hard position for a company to be in, but I suppose it comes from the fact that it seems receiving negative PR about being insecure is worse than PR about being unfree.

As a memorable saying goes: "The security people won't be satisified until everyone is living in prison."
> And, the majority of the interesting use cases for smart contracts require extrinsic (non-blockchain) state to operate. The price per barrel of Brent. Whether it rained over a piece of farmland. Randomness. Notice of the publication of a death certificate. All of these applications rely on a trusted server (or a federated system of them) for input. And they can be corrupted or shut down by a powerful adversary. Ethereum might be able to free itself from oracles to a small degree, but the difference will be negligible for many practical purposes.

Interesting point, but can't randomness be read from hash of the next block? I'm not familiar with Ethereum's VM - does it not have access to that?
I have noticed this (as have many others).

Women are far more off in self-reporting their levels of attraction, arousal and the reasons for it.

Everything from studies done on bisexuality (women reported not being turned on by certain combinations but their genitals disagreed) to the OKCupid study cited above.

Men seem to be much better predictors and analyzers of what they are attracted to.

"What do women want" is a popular question ever since women were liberated.

I wish there were more studies done into this.
> Applications like this where the syscall overhead (and latency) starts to be a significant factor in processing time and latency have moved to userland drivers anyway:

I would personally think that is worse, though please correct me if I'm wrong. The userland driver will run with an isolated PT like any other userland process won't it? If so, it will suffer the same slowdown that every other process now has every-time it has to communicate with the kernel, which I would think would be a lot for a driver.
This reddit thread has more information on the bug https://www.reddit.com/r/sysadmin/comments/7nl8r0/intel_bug_...
That sounds very cool, thanks for the answer. Enjoy your adventures in 2018!
Very little by way of details has been made public yet. Not even the technical press. Even relevant comments in the Linux source are redacted at the moment. Hopefully, further details will be released in good time (in the next month?) when people have had time to install the patches that are going out RealSoonNow (i.e. the huge plan of updates on Azure's VM hosts).
> if scientific evidence can tell you that your marriage to your first or second cousin is highly unlikely to cause genetic defects in offspring

The science is not there. It probably will never be there. We can only screen for certain conditions. Close marriage will turn up all sorts of new conditions no one knows about (ahead of time).

Until the day we can make our DNA "perfect" close marriage will always be a problem.

And on that day I suppose even sibling marriage (or incest) would not be a genetic problem.
Or you know, put up an ad on craigslist.
Simply because it is acceptable to maximize profit from people fears and misery, coupled with shameless politicians that support/bend to the will of the health care mafia with a regulation environment that diffuse any incentive to lower cost
I don't know much about CPUs, so what prevents a fix via microcode update?
Honest question, does the performance hit from this patch actually hit Intel's best processors enough to make them perform worse than AMD's best?

I don't keep up on these kinds of metrics, but I'm under the impression that Intel still dominated CPU benchmarks berfore this issue, so if this question is answered in the negative then I doubt it will affect Intel very much.
> This isn't true; there are better solutions already existing. E.g. Ruby with the Gemfile.lock approach. I'd like to be able to do a two-step: do a global analysis of dependencies and pin the common versions for diamond situations, but not need to maintain or calculate those pinned versions manually. And I still get to use the pinned versions from the global resolution for executing tests etc. on submodules.

I dislike this for the same reason as before: I find it really valuable that building a single module on its own behaves the exact same way as building that module as part of a multi-module project. If you want to ensure that the tests run against the same version as in the final product, I do that by making eviction an error.

> Another issue with Maven is rebranding: when the groupId of an artifact changes, but the package and class names don't; see e.g. asm / asm vs org.ow2.asm / asm, or the whole codehaus debacle.

Maven has better handling of this than most; it can at least warn/error when this has happened, and if you're using the shade plugin or similar it will warn or error when two jars contain the same classes. Yes it's a problem, but it's much more of a problem in other ecosystems.

> As it is, I've had to write a bunch of tools to rewrite the dependencyManagement as and when required. The main app I work on is linked into the Hadoop ecosystem, and that dependency set ends up being quite large.

There are standardized plugins for the common use cases e.g. "mvn versions:use-latest-releases". Most things that can be automated are. But since most of the library ecosystem predates version ranges and semVer, there simply isn't an automated way to know when using a newer version of a transitive dependency is safe or not.
Outside of a pub (which is a bar?) none of these places would typically be open on a late Fri/Sat.

I think there's plenty of opportunity to reinvent the nightlife experience in a way that hasn't been done yet. Hopefully in a few years you can decide between a bar, club, or ____ at 12am on a Friday night.

The idea of being sandwiched in the middle of loud drunk sweaty people in a place where I can barely hear what someone else is saying and waiting 20m to get the attention of a bartender to pay $15 for a well drink makes me cringe.
Blood cells contain iron. This is the reason to blood being red instead the cyan or transparent blood found in hundred of extant animals.

Having a transparent blood could have pros and cons, like hiding the level of injuries to the other antagonist in a fight, but you need copper for that.

On the other hand, if you could replace a bone by a hollowed tube of metal, you could bassically smuggle anything that you want at plain sight. Even radioactive substances. Such procedure would be quickly forbidden.
What are you talking about? That's the complete opposite of what happens.

Nordic startups that focus too much on their local market die. The whole point of startups is to SCALE. This cannot be when the country you live in has less population than greater LA.

What actually happens is that the startups here are "Global-first". They immedietly start talking about branching overseas and meeting with investors that can help them do so.

It's actually the SV startups that can huddle in their bubble for years of time, before doing an easy US wide launch, that already is a huge market.
>> "always listen"

This is somewhat correct but misleading. It's always listening for the "wake word" -- alexa or echo -- and then it processes your request. But it's not sending all conversations up to amazon. Just your alexa requests.
That's because they combine the welfare state with free market capitalism, known as the "Nordic Model".
I think Model S solved electric driving. Car reviewers seem to think so, the industry seem to think so (most manufacturers announced electrical models). Range, comfort, charging locations, safety, all solved problems.

How is Tesla's supposed claim they solved electrical driving misleading?
I just bought a Huawei matebook x, and I'm blown away by it. I'm running Debian with gnome on Wayland. I get about 10 hours of battery life, and suspend/resume seems to work flawlessly. USB-c is awesome to have, and it comes with a dock dongle for legacy ports.

The bad:

* Fingerprint reader doesn't seem to work.

* Audio chipset is weird and only one speaker outputs sound (headphones work as expected).

* Function layer keys don't work (volume/brightness adjustment)
You fail to distinguish equality of opportunity from equality of outcome.
I don't think there needs to be much "reporting".

Intel has a rule where c-suite and up execs who have been at the company 5+ years must hold a minimum amount of stock. For the CEO, that number is 250,000. The CEO recently exercised options and immediately sold them, holding onto the absolute minimum required (250k).

This is all available on the SEC's website, trades like this are reported to the SEC and are considered public information.
How on earth is Norway entrepreneurial by volume OR success?
You may want to use the workflow yourself to see how it differs and re-evaluate. It surprised me.
OK, what was the previous EV Cannonball Record?
>"Luckily humans have developed a great coordination mechanism called 'democracy' and we can use it when coordination in the market place has failed."

I find that sort of thinking pretty scary. I'm incredibly hesitant to expand the purview of the government into whether products should succeed or fail. It sounds like what you're saying is that people are too stupid to make decisions for themselves, so we should enact government regulations to think for them. This is something markets are very good at, as others have stated. Expanding the government's role in things should be an absolute last resort, to me.

If people are willing to trade their personal information for cheap, cool gadgets, then who is the government to step in to say "no, you're not allowed to do that"? By the same token, you could flip it around: could the government step in and say "you don't want this gadget that's always listening to you, but you have to have it because some group you don't agree with tells you to"?

I want to be careful not to go too slippery slope, but should the government step in and shut down Google, because they exist to serve ads? What about Facebook? It's the same thing there: people trade their personal information for perceived value in other places (Facebook: keeping in touch with people, Google as access to information). Should the government be the ones to decide who should be allowed to make decisions about their information?

It's scary because once the government gets to decide what people should and shouldn't be allowed to use, or what products should or shouldn't succeed, it can be used as an incredibly powerful tool. To me, a useful way to think of government is as a very sharp knife: it can be extremely useful in the right situations, but you can really hurt yourself if you're not careful.
At least part of the ballast normally carried by divers is to compensate for the buoyancy of either a wet- or dry-suit, and for the buoyancy of SCUBA tanks (some are buoyant when empty, at least in seawater [1].) Treading water while carrying an extra kilogram would be quite a struggle for many people.

On the other hand, the article compares bone to metals on an equal-weight basis.

[1] http://www.huronscuba.com/equipment/scubaCylinderSpecificati...
At that point you begin down the slippery slope. Most people would be repulsed by the very idea, but down the road who knows. "Culture" does indeed change. That said, I don't see being able to overcome the gut reaction.
Newspeak for illegal.
Or he's buying a new yacht.
Money is a measurement of value that one group or individual assigns to something else. In employment, you're paying for the value an individual provides to a company - not how hard they try. If somebody's giving it all they have and are putting out less value than people who are half assing, then you would be be obligated to relieve the person giving it their all. They've reached their potential and there's just not much there, whereas your less incentivized employees are putting out just as much with a fraction of their potential.

This is also the reason I think things like participation trophies are likely doing more harm than good. Life is and likely always will be competitive. And in competition it doesn't matter how hard you try - in the end the victory is decided by achievement alone. Stephen Hawking is not highly regarded because he's a scientist working against all odds, but simply because he's a phenomenal physicist. If he had been perfectly healthy, he would have still achieved great regard - though perhaps excepting the living Hollywood biopic. Ultimately his merit does not come with the subtext 'for somebody with such a condition' but unconditionally.
It's a bug, even if it's a side-channel attack only. Notice that AMD chips aren't vulnerable to this attack.
IMDB usually keeps a pretty good "Parents' Guide" page for most movies and shows, which answers questions like that.

http://www.imdb.com/title/tt0445114/parentalguide?ref_=tt_ql...
You could add some sample output for some sample video, to give an idea what to expect.

Now I have to think and find some video link myself, only for testing. Which I am too lazy for, so I just skip that and might then forget about your great idea ;-)
Norway isn't a great example because Norway is also far, far more culturally and economically homogeneous than the US, though that is changing.

Bangladesh has an even lower incarceration rate, but its prisons are apparently horrifying places of routine human right abuse. Should that be the guide? Perhaps that can scale - half of the bottom 15 countries in terms of incarceration rate have histories of extreme human rights abuse but according to the crime information, their criminal justice system is doing something right - few citizens go to prison and most only go once.
The Battle for Iran
An Ode to the Man Who Fed Me McNuggets in Bed