skysight-inc/HackerNews huggingface dataset:
Maybe it's a sign that the current CPU architectures are too complex for their own good. Branch prediction is a really, really weird concept. It could be avoided if we switched from Von Neumann architecture.
At least with Linux I can do a code review. Or hire someone I trust to do it for me. With a closed system that is not an option.
Can you put it on vimeo?
IBM Insights on the CPU Vulnerability
Whats unreasonable are the research costs. I would look into that.
New CA legislation proposes much more housing near transit
"I don't like closed systems that I have no oversight into"

Whoa there, so you have insight into all those chipsets on your current motherboard? You know, the ones that are outside the CPU, made by third parties and control your audio, communications, video, networking, etc?
Think larger scale. Mass extinctions should do the trick.
Don't they give out tokens for days sober? That volume could be informative.
Lead sheets are only suitable for songs though. This work focuses on more complex/polyphonic music.
The point being: monocultures are fragile.
Yes, but as you note, "in the size of the program" and the size of {the program that solves 3-SAT in polynomial time if there is one} is a constant, so it's all constant.

Of course, that constant is astronomically unpractical.
Did anyone count if it worth for mining anything?
You think it'd be less work having to coordinate with even more vendors than listed in the advisory?
>Social conditioning works far better //

Por que no los dos?
I understand the security benefits but I can't help but just look at this as yet another piece of disposability on an already very "disposable" piece of 5K+ (starting) hardware.

How many iPhones are now in landfills because you couldn't downgrade the OS to an old version that would be usable.
Devils advocate: I’m the other kind of Mac user who hates homebrew and refuses to use it. Give me a package or bash script to run!
did you pay with a credit card?
>Federal law based on what the majority wanted was one of the things that the framers were afraid of.

Some framers were afraid of like Jefferson. Hamilton and Washington were federalists and favored a strong central government.

I personally like state power over federal. If your state sucks, you always have the option to move to another state. That's a pretty fantastic option. Of course it has it's problems too. The South struggled to get states to put money in to fight the Civil War because the central government couldn't require it, it had to beg for it.

>9 states should not be able to dictate what occurs in the other 41 states and vice versa. Full state rights. Again I am for the legalization marijuana, but this needs to be a state by state decision, not federal govt.

Not sure of the logic there. It seems like rthe 41 states are dictating to the 9 states since 41 states pot is illegal.
Mike Lee – Growth the Destroyer
It sounds to me like fork() is unable to handle threads, unlike clone(). I would therefore say that fork() is to blame. Of course, it is a bit of nitpicking, as the problem is that they do not work well when combined.
Dup, original here: https://news.ycombinator.com/item?id=16067322
I’ve Sent Out 1,018 Open Records Requests, and This Is What I’ve Learned
> Very often opioids are the only adequate treatment for pain;

The Royal College of Anaesthetists have useful info here: https://www.rcoa.ac.uk/faculty-of-pain-medicine/opioids-awar...
This is true for engineers in general. Intel couldn't even make a secure web server running on the ME.
I've recently gotten into amateur astronomy. The modern high-end telescope eyepieces, usually low-power with a really wide FOV, often now have 7 or more lenses and can weigh 2 pounds.

This research looks amazing. It could change the game once again, enabling even higher quality and wider FOVs in a broad range of focal lengths (from what I've read, there has been a lot of improvement in the past few decades already). Probably won't be cheap though.
I can’t speak for everywhere in the company, but my job is fairly relaxed. Good work-life balance, most collaborative work environment I’ve been in, and lots of autonomy.

I did have a period of 2 months where I was working 80 hour weeks, but it was due to a very unique confluence of events including a reorg, and highly abnormal from my understanding, but I was rewarded for it by getting a couple of extra days off.
How to interpret Postgres “explain analyze” output
I would hate to take credit for work I didn't do, so I would just like to quickly set the record straight:

We had nothing to do with that feature! We legit joined just now. But it certainly demonstrated a certain synergy between our skillset and GitHub's feature roadmap ;).
It's PCIE/NVMe and removable [1]. But I don't know if it's a standard M2 slot. I doubt it.

I didn't mind these proprietary connectors until I dropped tea on my laptop. I took it to the apple store to get them to retrieve my data, but they said even THEY don't have the means to read data from their proprietary SSD connector, and instead told me to go to a data recovery company.

I understand they use proprietary connectors, if they empower their support techs to have means to also recover from catastrophe, it would help the customer a lot more.

[1] https://www.ifixit.com/Teardown/iMac+Pro+Teardown/101807#s19...
No. That number was drawn from an internal report on triennial membership surveys[1] made for a meeting briefing for the board of trustees, and is based entirely on the inability to read a chart (specifically, figure C-1 on page 12). I'll admit, it's a bad chart, and of a poor type for the data it represents. The misreading sparked a "back to basics" movement in AA because it didn't jive with Bill Wilson's off-the-cuff estimate that about half of the people who gave it a really good go (and who weren't psychotic) would recover on their first go, and half of the initial failures would make it on a subsequent attempt. That, of course, raises significant questions around just what, exactly, would constitute giving it a really good go, and how, exactly, was the "psychotic" diagnosis of failures arrived at.

The actual number was closer to 21%... but that only refers to the number of people in their first year of membership who were still members at the completion of 12 months. The problem is that the chart lists membership percentages per month (as a percentage of all members with less than 12 months) using a sort of fever graph with a distinct line for each of the years being compared. That led some people to believe that it was a continuous line following a cohort through their first year. That's impossible, since by that interpretation there are a large number of people in 1986 (for instance) who failed to remain sober for six months but somehow made it to seven. The lines don't start at 100% and work down; there is no indication at all of how many people dropped in and never came back, etc. And do keep in mind that nobody was actually compelled to complete the survey. All it can tell you is that about five percent of the people who have 12 months or less of sobriety in AA during the survey period(s) and who were included in the survey have twelve months.

[1]https://hams.cc/triennial/triennial.pdf
Raspberry Pi Thermometer Using Raspbian DotNetCore and DHT22 Sensor
The biggest complaint about DeepVariant is that it isn't even a CV problem. I mean you start with a bunch of images, but those get processed and turned into basecalls, which get aligned to the genome, and then turned into an image again (why though?) for DeepVariant. Interesting approach to say the least.
Yes, clearly and unambiguously the Conservatives have destroyed the NHS.

I said this in my first post.

Here, for example, is a chart of A&E 4 hour breeches: https://twitter.com/FactCheck/status/948953869509423108
From what I saw from the teardowns both RAM and SSD chips are replaceable. It’s not super easy because you need to take the screen off first, but it is doable.
Would cable modems or wireless routers be vulnerable? My router's specification page does not list what CPU it uses. Haven't checked on my modem yet.
Coding a specific solution to questions in exactly that format is not inherently difficult.

If you keep writing specific solutions to this class of questions it's eventually had to come up with a simple question that's still unknown.

Further you can't get around that by making ever more complex questions because humans will eventually start messing them up.
I think something people forget about is the need to access the web on crippled connections. The amount of information that lacks ability to connect 3G or less is awful. React and friends aren’t really helping this movement, as the internet bloats. Does HN think that 2018 will be another boilerplate removal year or one that adds more precious mMB MB to every page load?
Ahh, that solves the mystery (but thanks for Whirlpool!) I had you confused with the Sydney-based simon-wright.com.

Thanks for the tip and the LMGTFY! That did the trick :)
There's also wavetable and granular synthesis. Both tend to have a more "experimental" vibe to them.
Alas, it’s in the future tense.

We can’t take credit for the current security offerings - it was the work of our soon-to-be coworkers at GitHub.
What broke about keyboard handling? I use the build-in vnc client often (every other vnc client seems to suck). I have trouble with copy/paste...but that's very common with remote login tools.

I have a newer Mac. I didn't like the keyboard at first and still hear about reliability/repair issues, but going back to the mushy keyboards on an older Mac is weird. What's wrong with Apple's trackpads and screens? Trackpads got larger (and get a lot of rogue input when using Linux/Windows), but work great as ever in macOS.
Is the Mill architecture solving problems orthogonal to this?
As someone who commutes to work on a bike, you definitely have a sympathetic ear with me.
Technically Obama was saying "I get to choose what laws the feds follow" with the stroke of my pen. To me that sounds more authoritative than what Sessions did here by revoking such an act.

I'm all for state rights, but I personally see overreach in executive power as the far bigger problem of the modern era. Executive power exploded under Obama (a trend which Bush started before him, which Obama took much farther).

Ultimately the real problem is that congress needs to end prohibition via law.

Obama basically took a 'sanctuary city' approach, a "workaround" and not a solution to this problem. Which ultimately still left the law very much up in the air for many people in states running weed businesses. I hate the fact people are going to jail for marijuana but I do see an argument here that Session's change:

a) incentivizes congress to put a proper policy together, where before it was left in legal/political limbo

b) ended a bad law which typified executive power overreach

c) is not yet clear how it will affect states in practice, as it's still up to the state attorneys to act on it

In practice this sucks, but I don't think this sucks because it's an extension of government overrearch.
It's interesting that you mention that. On one hand, the war department said the Japanese were dumb and easy to beat, while on the other hand they said they were too dangerous and needed to be confined.
> bias: I am a Mill CPU dev

This has been in the back of my mind during all of this.

Can you [0] outline to what extent Mill would or would not be affected by both Spectre and Meltdown?

[0] or is anyone from Mill planning to
If you're using Rust -- tell me, what are you building in it? And what do you love about Rust in your experience while building it? (Get me excited)

I think that it is wrong to think of Rust in terms of internet popularity contests. Its mostly a frustrating and difficult language.

That said, I think that Rust lives up to its hype and is one of the most important languages to come out in recent times. I am writing an SMTP server and can say without doubt, that Rust enabled a much better result than I would be capable of in any other language. I have used Ada and modern C++ in the past and I consider Rust to be an improvement.

I have seen demonstrations of the language Idris that were like looking into the future. However, the larger community and good tooling make Rust a more practical option.

Bearing in mind that I find Rust to be an annoying language there are things that stand out as better than average:

1. Cargo. The only build and dependency tool that has never annoyed me.

2. A very open and welcoming community.

3. Nom, a very weird parser combinator that is a joy to use when you get used to it.

4. Multithreaded programming. For old school C++ multithreading its incredible to write something and have it work first time and not find any weird threading bugs.

5. Coming back to old code is not the painful experience that it is in other languages.

If you are interested in learning a C++ like language, I would recommend Rust. If you are a C++ programmer, I highly recommend learning Rust.
That was always the problem with the Itanium compilers. They were crap because they couldn't benefit from the years of tuning traditional architectures enjoyed.
Let's replace your ERP by a slack bot implemented with Dialogflow and Symfony
May I know what is your approach. Are you periodically checking https://news.ycombinator.com/newcomments or what you do to find user and its reply. Just asking out of curiosity.
It's inspired by GraphQL. What do you like about this approach? We are kicking ideas around at the office so it's good to have feedback from outsiders.
If the equity ends up being worth > $0, I would say "yes."

Way better than just shutting the company down and being left with nothing.
I can't follow the article's conclusion at all.

The data is very clear that there is less change/expression on complex code. Aggregating it by function seems like a bad move - if those functions were broken down into pieces, you would end up with more simple code, that from the simple model from the article would require much more change than the complex function.
My speculative interpretation (which Thomas may disavow completely) is that not that eadmund was doing something technically broken, as much as adding complexity, and risk of mistakes somewhere along the chain, without benefits to justify doing so.

If you listen closely, some security wisdom could applies to a lot of specialties. For ex this quote is about authenticated encryption, but it's not really bad advice if you change the subject from encryption, to rolling your own web server:

"Authenticated encryption is something you should use as a complete package, implemented as a single unit by a well-reputed open source cryptographic library and not assembled piecemeal by people who do not specialize in cryptography."

So what's the difference then? The stakes are higher. Serve the wrong web page, you'll be working on a bug. Be careless with security primitives, you could make a fortune 500 stock price go down, or make your CEO have to issue a press release, which tends to not to reflect well on your performance review.

In this light, "finding new reasons" I would infer to mean deviating from established best practices in any way without a damn good reason, even then without that reason being challenged and vetted.

All of the creativity in security should be in the research. For production implementations I don't want any creativity. Ideally, I'd want prod to be the opposite of research: Conservative and uncreative, struggling to stay awake because it's so boring and uneventful.
“SmartEco” or “Extreme Eco” projector lamp power saving modes are a trap (2016)
In what way is this similar to the IME story? Apple's history with the Secure Enclave on iOS devices leads me to believe that this will be much more secure and that a white paper will be forthcoming unlike Intel's complete opacity surrounding IME.
You can reverse engineer the firmware files though. I do this very often when new versions of iOS are released.
Key moments in corporate computing: first biz website, first CIO title, etc.
It's nice that Rust has a macro facility to make this possible. It reminds me of the delightful way that Google Web Toolkit lightly abused the "native" keyword (which marks FFI methods in Java) to do inline javascript.
I like the term "Galactic Algorithm" for these algorithms with unpractical constants.

https://rjlipton.wordpress.com/2010/10/23/galactic-algorithm...
Well, the rule appears to be:

- Don't thread before you fork.

- Don't lock before you fork.

- Don't open before you fork.

- Don't do anything that is not meant to be a shared resource before you fork.

Locks and threads is the worst. Locks can end up in weird states.
I mean yea, but this is about a processor and related microcode. It sucks, but there literally is no real mainstream opensource audit-able option for the consumer market right now.
Is there a way to unsubscribe? I can't see an unsubscribe link in the emails, and there doesn't seem to be one on the website.
ISO 9000 is really about having documentation about what your processes are as opposed to mandating some specific process.

Before ISO 9000 the quality movement was about companies using quality as a weapon against their competitors. After ISO 9000 it became something you did because clients insisted on it.

In my area there are many light manufacturing firms that have an ISO 9000 sign out front and I always ask people who work there what they think about and they almost always say they think it is a net negative.
Humans have 23 chromosome pairs. That is 46 halves. Therefore you can maximally have a common chromosome half with 46 people at any ancestry level.
Well, quite. Didn’t the US block the sale of MIPS to a Chinese buyer?
I believe this is just a bad translation from a popular Chinese propaganda (自主研发).
Well, not much from a security standpoint. But I rather don't enjoy dealing with statefulness on the server, so I try to minimize it wherever possible.
So why are the OSes bothering to patch anything?
What are your problems with homebrew? I have my share of them, but I wonder if your problems are more community oriented, MacOS oriented, or brew itself.
Yup, I don't get the GP's comment. You have two systems: A) T2 SOC B) Multiple chipsets working on its own. In both cases, it is a closed system.
1. You can opt to not utilize the security features offered.

2. This is not used for device management.
Threatcare has secured $1.4M in seed funding, led by Moonshots Capital
This was supposed to release on January 9th, but Google pulled the trigger earlier due to community members putting the pieces together and starting to draw press attention. It isn't very fair to blame Ubuntu for being behind.
Unless, of course, the site you trust is hosted in a shared hosting VM which is also vulnerable to spectre or meltdown. In which case, you can’t trust the scripts.
Our app is in the top 10 grossing apps in the Apple App Store and we market it aggressively. Android users are just not as lucrative or numerous as Apple ones.

During that two year delay we made the iOS version a quality product instead of having our attention divided by another platform that delivers less than 10% of the userbase. It was the right move.
https://github.com/thejh

https://thejh.net/

https://twitter.com/tehjh
The test of believability they give in the article is also bullshit. Both of the options are fakes, they both even look like fakes. Her hair and forehead doesn't make sense, his mouth and ears don't make sense. They don't match it up against a real picture because people's performance on that task would contradict the headline.
Essential Programmer's Guide to Cryptocurrencies
It's those nasty hackers and awful security researchers who are to blame...
If one hostile application running on my machine isn't sandboxed then SSH local keys are pwned anyway. Might as well install a keylogger or just hijack ssh-agent directly. Full disk encryption keys might not be but the app will have access to any mounted and unlocked safe. Ditto for cryptocurrency wallets without a hardware token (and even with a hardware token if the app can get it to sign a bogus transaction).

I don't think this particular vulnerability significantly increases the surface of attack for any non-sandboxed application running on my computer. There are much easier and straightforward ways to get access to anything an attacker with shell access may want that don't involve dumping the kernel VM. So in my situation the only vector of attack I'm worried about is JS running in the browser since I gave up on javascript whitelisting long ago when I realized that most of the web is unusable when you don't allow heaps of untrusted scripts to run all over the place. I don't have time to audit the source code of every random website I visit.
Are the chips used by Intel Management Engines subject to these attacks as well?
>javascript-enabled ads

Good opportunity to get rid of them.
I'm tired of hearing these types of extremely confident lay-assertions about life beyond earth. It's true that the number of planets is incomprehensibly large, but it could also be true that the probability of a particular planet developing life is incomprehensibly small. In physics and chemistry, there are some odds that remain so extremely small even when you roll the dice many many times. Stop using "incomprehensibility" as an argument since it can go both ways.
The thing is that it's not PCIe/NVMe.
Ask HN: How do you share your data?
If you've done any work in ML / AI, you probably spend a large amount of your time, cleaning data, inspecting it, improving it, etc. What do you use to manage your data? How do you share your data?
You've got it backwards.

A hackintosh would mean running macOS on non-Apple hardware, so any security checks could just be patched out. In fact, I'm pretty sure that is how hackintoshes work now.
> Every bit of data stored on an iMac Pro’s SSD is encrypted on the fly by the T2, so that if a nefarious person tried to pull out the storage chips and read them later, they’d be out of luck.

What. The. Fuck. How am I supposed to recover my data e.g. if the mainboard gets fried or the machine has to go to service?! With a SATA or NVMe SSD I can plug them into another computer and either keep going (for Linux and macOS, only Windows is a different beast...) or dump the data to somehere safe. With this, Apple forces me to rely on TimeMachine working - which is not a bad idea in itself, but not cool that this is not widely announced on the product page: "BACK UP THE DATA YOURSELF OR IT WILL GET LOST IF ANYTHING GETS SCREWED UP".

There's already FileVault for encryption (or LUKS, VeraCrypt and Bitlocker), and in addition some SSDs (and iirc also some expensive HDDs) implement native on disk encryption via standardized SATA commands so one has encrypted storage but still portability (and for native disk encryption, no loss due to CPU-level encryption!).

Another reason to not buy anything modern from Apple. If one single problem happens to your modern work machine you're straight out f...ed.
Makes me wonder if that's Intel's PR plan (hence their spin on the story). Assuage the general consumer and mainstream media, point the finger at the OS vendors if necessary, and fix the bug in their next-gen chips.

When this all shakes out, the general story is going to be "upgrade sooner, current-gen Intel chips are x% faster", where x is going to be a larger number than it was a week ago.

It's more-or-less the Apple battery story all over again. Current devices are going to be slower, newer ones are going to be faster. Even if you know the why and the how, you're still in the same place as everybody else (at best, you could upgrade just the chip if your MB is new enough, but you're still buying Intel). Unless there's some clear way of imposing the external cost of this bug on Intel, it's a win-win for them.
Multi-platform Spectre exploit PoC