skysight-inc/HackerNews huggingface dataset:
I don't know if their will be a recall/class-action lawsuit/whatever. But clearly there is a difference between making a mistake in what must be one of the most complicated consumer products on the one hand, and intentionally violating the terms of an agreed-upon contract?

Tl/DR: Intent matters.
New Year's Rust: A Call for Community Blogposts
Innocent Until Proven Guilty
God damn hipsters...
It's HN, it's like a mandatory one liner to toss out -- the equivalent to "that's what she said" on here. A healthy diet of HN reinforces the reality from a couple of years ago when things actually seem to look more and more barren with actual opportunities scarcer than ever. But the answer is the idea that these words represent in the heads of the people who spout them doesn't actually reflect what it means in practice.
From my experience, these people always tend to be the one talking about raises or becoming management the most. Can barely do their job, 6 years in, still barely can do their job, but think they deserve the world.
I’m planning to set up a separate heavily filtered kids vlan/wireless network. I’ll leave some vulnerabilities in it so if they want unfiltered internet access they have to get it themselves.
They would have to screw up really bad for people to go to AMD. I think that may never happen.
Apart from the cited sources above I guess.
Playing with Lasp in a 3 node cluster
Interesting use of language:

'Recent reports that these exploits... are unique to Intel products are incorrect... Intel is committed to product and customer security and is working closely with many other technology companies, including AMD...'

Someone new to the issue might think AMD also has this problem.

Similarly (replacing the first elision in the above quote):

'Recent reports that these exploits are caused by a “bug” or a “flaw”... are incorrect.'

So, working just the way you want it to, eh, Intel? But then, why would you describe them as exploits?
Alexa: "Your car does not seem to want to start this morning. Would you like me to order you an Uber [instead of a Lyft] and e-mail you brochures for the newest Plymouths?"

The fact that you interact with it each morning is more powerful than any print, broadcast, or web ad Amazon can buy. They're gotten into your brain. Even if you never see the device (which is now a visual billboard in your home), when you think about it, you're thinking about Amazon. You've already been commoditized and you don't even realize it.
That is not supported by the data. The lions share of new music discovery is still done via terrestrial radio, and the brand identification people have with their favorite stations is crazy high
Eh, you won't be able to give your children the independence they need to develop as a mature adult (society will prevent you from doing that), so might as well let them sink into a screen. The alternative is forbidding literally the only outlet in the entire world that gives them even the barest illusion of autonomy and surveilling and manipulating them continuously while watching them break down into learned helplessness.
Those were generally about culture and morals though, right? Rock and roll, drugs, etc scared parents because it was viewed as depraved & debaucherous, nobody was worried it was a substitute for good parenting and that it would impair your development of social skills.

Concerns about "screens" today seems more analogous to the old "TV-as-parent" issue.
Because let's be honest: when I bought my XEON and i5 processors, performance wasn't the issue that made me pick Intel over AMD. PUH-LEASE. This is the worst kind of customer service malarky I have read in a while.

We are not average computer users.
You did, and it breaks immediately, because everything else (the things that actually don't work) remain the same, and you for some reason expect them to work in your blockchain.

If something doesn't already work, adding something that's completely orthogonal doesn't help it, or solve it. All other perceived benefits are just not good enough, and blockchain brings enough problems of its own.
Judging by the comments here, most people are so outraged that they only read the first and last paragraph before wielding pitchforks. Please at least read it whole.
> Society is sick, let's face it, and technology is largely to blame.

Maybe birthrate is more reasonable. Anecdotally, my nephew is an only child and he doesn't get to run around a lot (nor does he have a lot of desire to). When I was growing up in the 80's, it seemed like families were bigger, so it was less of a big deal if one kid drowns while swimming in the river or blows up playing with gasoline. If you only have one kid, you're probably less likely to attribute cliff jumping or playing with gasoline to "just kids being kids".
America is convulsed by an addiction crisis — painkillers, heroin, alcoholism, meth — and its victims die with tragic regularity. But Mr. Benefield’s case is extraordinary.

This made me think of all the jokes people made about USSR Russians drinking themselves silly because of bad times.

Is the USA like that too these days for many people?
I do agree that there are passages in this press release that are totally justified e.g. their calling attention to the fact that other processor vendors have probably been incorporating this flaw into their designs for a while. However, their seemingly innocent mentioning of AMD as being a vendor with which they are coordinating to resolve this issue appears to unfairly (and probably deliberately) implicate AMD in all of this. I feel this was an attempt to divert attention to their competitor even though their competitor's products don't suffer from this problem. I'm guessing their marketing department gave this a once over.
7/10.. Changed end of 2016 and got a good raise. Got to learn a lot of new things and adapt to the new culture. Its nice to shake up things once in a while I guess.
I’m with you that this is corporate-speak panicked PR damage containment at its finest, but reading from kernel memory is only a flaw if you aren’t the kernel. ;)
There are other issues Intel does not fix (backdoorable hardware outside of the control of the owner). This is part of Intel's image. So, there's that.
The accompanying blog post https://sfconservancy.org/blog/2018/jan/03/cisco-v-arista-am... is much more interesting.
This is also due to Obama era scholarships/money provided to refugee students aren't done by the Trump administration anymore. The universities were indirectly subsidized by the US government and aren't done so anymore.
Umm, 25 here. All my friends are in the same age-group (21-29) and every other weekend we party like crazy. Sure, it's no longer the drink-until-you-puke type of party that we had when we were 18 (yes, in Europe you don't need be 21 to buy alcohol, 18 will suffice). It might be due to the fact that I also live in Barcelona, which is known for its parties.

As far as how I was raised - umm, mom gave me a beer to try when I was 16, I spit it out because it tasted awfully (I to this day don't drink beer, do not understand the appeal), but when I got 18 I bought some cuba libre and realized that not all alcohol tastes bad. I've never had exactly strict parenting, more-so "learn through your own mistakes" with guidance provided by my parents. I think I turned out alright.
Shortages, as with any price ceiling—when someone is willing and able to pay more but there is none available at the fixed price.
It's also manipulative, mentioning AMD and ARM for no other reason to make people think those also have the flaw.
Text Alerts Will Tell Net Neutrality Supporters Who to Vote Out of Congress
How alcohol damages stem cell DNA and increases cancer risk
Interesting. So are these minimizing some constrained energy based on the physical properties and current state of whatever you're trying to simulate? If so, I don't quite understand how you avoid solving (or approximating) a PDE/ODE. My research is mostly in meshing and I'm not familiar with real-time simulation stuff. Do you have a link to a good paper on the topic?
> But there is more to PGP than just messaging.

Exactly, OpenPGP is more like a framework for many things and the underlying structures support cryptographic agility (switching algorithms). OpenPGP can also be used to authenticate to servers (like SSH keys) and for broadly defined trust management.
Why not just use the opposite gender of your child? Or imply this child is one of several, given that you only have one?
I find this data unconvincing, since it talks about "delays" and compares to the "schedule". Since the schedule can change, it's hard to figure out whether this is a problem with overly aggressive schedules or with actual train slowdowns.

As a counterpoint to the "delays", the article for this thread says

> As ridership grew from 2012 to 2016, the end-to-end running time during peak hours on the numbered lines increased by more than six minutes

Six minutes seems like ... well, like nothing, really. If that's the extent of the problem, then I don't see a crisis brewing, I just see things getting a little worse.

That's not to say that we don't need to make things better, but let's frame the discussion around the actual problems.
This is describing normal life before, say, seventy years ago.
Not entirely. You get a CD, and a licence to reproduce it under certain conditions. If you purchase a music CD, your rights to reproduce it can legally be revoked (though I can't think of any cases where this has actually happened).

Perhaps, more importantly, it's easier for Spotify to enforce this, than a CD-making company.
Very cool! Would be fun to have some implicit integrators to play with, too. And visualizations of the symplectic form.
> It's possible to use OpenPGP in instant messaging [0] and it works fine (transparent encryption and decryption in a client)

For some definitions of "possible" and "works fine", sure. But OpenPGP is not natively designed for instant messaging. You can use OpenPGP as the public-key component of a cryptosystem that is suited for instant messaging, but at that point you're better off just going with an OTR protocol that already has the key-exchange and secret-key encryption functionality baked into it.

Beyond that, the page you're citing mentions this:

> The method defined herein has the following security issues:

> Key exchange relies on the web of trust model used on the OpenPGP keys network.

> There is no mechanism for checking a fingerprint or ownership of a key other than checking the user IDs on a key.

> When the recipient is not mentioned in the encrypted body, replay attacks are possible on messages.

> Replay of the signed <presence/> status is possible.

> It relies on signing or encryption of XML character data; therefore, it does not support signing or encryption of <iq/> stanzas, and it allows signing of the presence <status/> element and encryption of the message <body/> element only.

> Thus the method is not acceptable when signing or encryption of full stanzas is required.
It does not enable both signing and encryption of a stanza, only signing of the presence status and encryption of the message body.

In particular, the warts of using an asynchronous protocol for a synchronous communication system are exposed here: you can replay the signed presence status, which sort of defeats the purpose of having an open connection. In a secure, synchronous communication channel, the "freshness" checks incorporate non-repudiation. This is before we even address the problem of not being able to verify key ownership aside from the user IDs.
"Unfortunately, due to mismanagement and some shady borrowing from the city"

That alone spelled its doom, not the premise of it being established as a public internet utility.

With financial institutions having a stranglehold on the government, they could effectively choose (negotiate?) which sort of payment would be beneficial to them long term. A public internet utility sold to them makes the most sense as this means an actual steady flow of income and customer base.
I don’t agree with you but your point is both defensible and well-argued, and I applaud that. That’s what civilised debate should be all about, right?
> There are doctors that are prescribing 5000IU+ daily

What doctors prescribe based on the actual conditions particular patients exhibit (and, at doses that high, often with serum level monitoring) is only distantly related, even in theory, to population-wide recommendations like the RDA.

> I've read lately about multiple papers that propose multiple k of IU per day.

Yeah, so have I, and I personally think (though I’m not an expert in this field) it's likely that the RDA is way too low. But there's a difference between the belief that RDA should be higher and the claim that the RDA has, in fact, been raised. It has not, it's still 600 IU/day.
> Reading from kernel memory is something of a flaw, no? Fair point about not being Intel specific though.

Well the concept is not, but the company who's processors run most of the worlds' databases was PoC'ed, so ....
Haha good point! That's what I meant of course :) edited for clarity.
Comodo does [0].

S/MIME and X.509 generally are used in enterprise scenarios where people want one corporate Certification Authority and thus keeping things simple (the underlying encoding is far from simple but that's another topic).

[0]: https://www.comodo.com/home/email-security/free-email-certif...
Except that nationalization is part of the plan, under the guise of "affordable municipal broadband". A government owned near-monopoly replacing a private one.
It automatically results in the discovery of a new perfect number. :-)

https://en.wikipedia.org/wiki/Euclid%E2%80%93Euler_theorem

(combining two of history's greatest mathematicians with names that have confused generations of students by being pronounced very differently)
I think what the parent comment means is that they're explicitly named, but not explicitly called out as being affected, just heavily implied.
Standard Package Layout [Go]
Intel believes these exploits do not have the potential to corrupt,
modify or delete data.

Followed by...

Check with your operating system vendor or system manufacturer
and apply any available updates as soon as they are available.

This press release is a minefield. There are whole paragraphs devoted to say nothing.
This is a common misconception. Advertising does not need to be hidden to "work". Advertising is not just facebook ads (which you admit to clicking, although not as regularly as your dad), but also involves creating positive sentiment for a brand or product over time through techniques like mere exposure.

I Wwnt to preface that I do understand where you are coming from, and spent many years agreeing with the sentiment that you pose, but over time came to realize that I was mistaken and had an oversimplified view of what makes the advertising industry tick.

In the interest of discussion: do you think that most people are too lazy/ignorant to ignore ads like you and your friends do?
We won't know until we know what the actual bug is. All we know is that people are writing patches for Intel chips, and what those patches do.

It's very possible that other processors are affected by the same issue in some different way that doesn't require this set of patches to mitigate.
There might be a trademark issue with using that phrase.
Discovery Digital Media | Client Engineering | Fulltime | New York, NY | ONSITE | https://www.discovery.com

ABOUT US:

We are a small, but mighty team, working at the cross roads of technology and entertainment to bring content from iconic television brands to our audiences over the Internet in the most entertaining ways we can imagine and build. As television changes, our mission remains true to the principles that founded Discovery – every day we seek to ignite people’s curiosity to engage, entertain and enlighten the world around them through amazing viewing experiences.

We deploy applications for each of our network brands: Discovery, TLC, Velocity, Science Chanel, Investigation Discovery, Animal Planet, American Heroes Channel, Destination America, Discovery Life, Discovery Familia and Discovery en Español.

This is a fantastic opportunity to help solve complex but interesting scalability, performance and availability problems for products consumed by millions of users each day! You will have the opportunity to work with a suite of great technologies and in a highly collaborative environment where the engineers get together on a quarterly basis in NY to problem solve major business challenges.

CLIENT PLATFORMS:

- Responsive Web
- Android Phone / Tablet
- iOS Phone / Tablet
- Xbox One
- Fire TV
- Apple TV
- Roku
- New platforms road mapped for 2018

OPEN POSITIONS:

> Software Engineer, Web Clients

https://careers-discovery.icims.com/jobs/18956/software-engi...

Discovery Digital Media is looking for a Web Client Engineer to build React JS applications with best-of-breed UX across Web, Xbox and Smart TVs.

> Client Engineering Manager

https://careers-discovery.icims.com/jobs/19074/manager-clien...

This role will be responsible for growing, mentoring and leading a team of client engineers to build TV Everywhere applications with best-of-breed UX across current and future platforms.
I love it! which is actually bad for me, because otherwise I would retire early and travel the world... maybe next year :-)

12 years and counting at this position...
Thank you for the response. At the risk of digressing from the topic at hand -- steel bones -- I'd reply to your points as follows:

You wrote: But that eyebrows exist at all is probably tied to some survival/reproductive benefit.

I disagree. Not every trait has something to do with conferring a benefit. Many traits are simply random artifacts of an exceedingly complex dynamic system. Your assertion hypothesizes otherwise. That's fine. But, it would be reasonable to expect data to back it up. In my experience, I've seen no correlation between eyebrows and the number of offspring.

As far as your second point, 3% is enormous. But, in any case, the problem is a failure to appreciate that there is a 'noise' threshold below which a probabilistic benefit will have no effect. That is, the length of my pinky may have some miniscule effect on the number of my offspring. But, if the effect is too low, it simply will not have an effect no matter how many millions of generations go by; the randomness of life will swamp it out. To put it in information theory terms, the signal would be indistinguishable from the noise.
I got it to 496 bytes, through a lot of optimization for the deflate algorithm. I also lumped together a few more rules.

SUB 500 BYTES WOOO

(I would have edited my previous comment, but HN closes comment editing after a while
Limiting exposure to ads is mainly advice for young children as they lack the cognitive ability to understand the intent of advertising until, IIRC, around the age of 7 or 8.
Teach them about the monumental complexity and difficulty (but ultimately rewarding nature) of human relationships. Also, why didn't they have enough direct experience with the home lives of their friends to be familiar with marriages that didn't work out? Why had they never spoken with an adult whose marriage failed and been able to ask what happened and why?

We do not seek to teach our children how to form or maintain human relationships, much less intimate relationships. As a result, they do not spontaneously learn these things, especially in a society that isolates young people to an increasingly radical degree from their community, their peers, and society in general.
Voro | Full Stack Engineer | New York City | Onsite | Full time

We're making it easy to find doctors. Anonymous reviews on zocdoc, yelp and google suck. That's why 70% of people ask their friends for doctor recommendations. We're making it so when you're looking for a doctor it's easily to discover the doctors your friends recommend.

we launched in October and people are people love us. It's not obvious that healthcare is social, but it is. The last time you went to a doctor, how'd you find them? It probably wasn't easy and you probably asked friends. This is one of those obvious ideas that we couldn't believe didn't exist in the world.

We're growing and looking for someone to help us out at engineer #2. You'll have a huge impact on the codebase and product and work directly with the founders to bring our mission of making healthcare easier to life. Join us :)

https://angel.co/voro/jobs/299593-software-engineer
Design for Disposability
Insanely toxic? Are you joking? This is the cleanest message board I've ever seen.
This isn't going to work I suspect. Ad blockers work because ad companies are too lazy to make appliances/software to embed their ad packages as first party entities. This is exacerbated by the need for third party cookie access. Utilizing client CPU for mining doesn't need that. They can simply embed the JS script (which presumably would have the WASM binary embedded) and go. At least that's how I would do it if I were nefarious. And I'd add significant randomness to prevent pattern matching, but ad blockers are stupid primitive css selector or URL matchers anyways.
https://en.wikipedia.org/wiki/List_of_countries_with_univers... looks like a pretty reasonable list. The US definitely stands out on the No lists.
Ask HN: Where do you store your Ledger Wallet seed words?
I was referring to the one paper cited in the thread, which was being misrepresented as an actual rather than recommended increases to the official RDA. Yes, there have certainly been more than one paper suggesting that higher Vitamin D intake than the current RDA is desirable, but they have not resulted in the RDA being raised as suggested upthread.
> and certainly Intel didn't name-drop AMD and ARM carelessly in the press release.

I'm sure it wasn't careless, but they are (from all accounts I have read) blatantly lying. Intel isn't known for above board practices. They will do what it takes to win - period.

Name dropping their competitors (to me), honestly shows me how dire of a situation this is. If it wasn't, they wouldn't feel the need to defend themselves and say, "well look at everyone else".
It's for your own good, citizen. Don't you feel safer now?

Think of the children!
> europe needs more appreciation of self-reliance and entrepreneurship to enable a richer startup culture

A part of this is cultural (appreciation of self-reliance) but the other half of it (the state-/support-structure-influenced side, let's say) is surely the precise opposite of your suggestion? Countless studies have shown that support structures encourage risk-taking behaviour and entrepeneurship. Even in the US, entrepeneurship will be much more common amongst those with well-educated, supportive family backgrounds - the rags-to-riches stories are certainly highlighted as inspirational examples of the American dream but are minority cases in reality.
You don't even let your kids read a Kindle!?

Also: not every child is going to end up a programmer.
> their calling attention to the fact that many other processor vendors have been incorporating this flaw into their designs for while.

You have a source for this claim? Because besides for Intel's press release I can't find any evidence that other manurfacture's processors are vulnerable to this bug.
> A simple standard doesn't automatically give you an end-user product that is simple and that anyone wants to use.

I never said it does. What Moxie claims is that decentralized standard (like OpenPGP) will always be worse than centralized, curated solution (like Signal).

As for making OpenPGP easier to use check out OpenKeychain [0]. The developers have clear design guidelines to keep things simple.

[0]: https://www.openkeychain.org/

Another example of decentralized solution more in line of the current messanging topic: Conversations.im [1] - supports end-to-end encryption and you can set it up on your own server (uses XMPP).

[1]: https://conversations.im/
Seriously? Their response is "It's not fair! ARM made the same mistake so you can't blame us!"?
https://www.youtube.com/watch?v=pdFl__NlOpA