skysight-inc/HackerNews huggingface dataset:
True, but 1000/day is still high. I doubt the foreman makes that much (I'd consider $40/hour high for a foreman, but NYC probably pays higher wages than you would get here).

The $1000/hr is probably a bureaucrat who sat at a desk pushing papers. There is some value in that job, but it is easy to find useless make-work to appear busy withing getting anything important done.
Your sense of humour must be very unique.
Huh, that's surprising. I would have thought that working at a big enterprise shop, you'd have enough dev ops engineers to help you deploy your model, and it's the small startups that can't afford to do that.

I set up Kubernetes to deploy Docker containers, and it took a little while to wrap my head around it. What's the painful part of doing the deploy with Docker like you've been doing?
I'm confused in the color options. I went with the top spec one, Silver is only option. I go back to New XPS 13 (non-developer) and go top spec again. Silver and Rose Gold available. What happened to black/carbon fiber? Is it just for lower configurations? I'm glad they added Silver (options and all), but I like black better. Especially with the camera (I'm guessing) below the logo.
I'm pretty sure he's running an unprivileged binary on his local machine, that shouldn't be able to see Firefox's memory, but can with this attack. I don't know of any js exploit - this attack relies on specific machine code instructions that would be very difficult to get a js engine to generate.
Real-World Examples of GridDB's Spatial/Geometry Functionality
Environmental Heresies (2006)
I did once at a hotel. Someone on the LAN kept what appeared to be his entire MP3 collection in his Shared folder. So I downloaded the whole thing.

Turned out he had crap taste in music and I ended up deleting my copy.
I think what dismays me about this article is that it contains exactly the kind of profound vacuity that passes, inexplicably, for wisdom about the possibility and impact of life extension and the character of those who are interested in it. It's difficult to know where to begin.

First, and most glaringly, death is not a solution to overpopulation, in any sense. It hasn't worked so far, for example. Additionally, there was a great video by Numberphile, https://www.youtube.com/watch?v=lpj0E0a0mlU, where he shows that the current 1.1% global growth rate results in us overpopulating the Universe in something like 9000 years. Sooner, rather than later, we will face a real population crisis, even in the face of 80-year lifespans. Growth rates absolutely will come down, one way or the other, in a way that will be functionally indistinguishable from outlawing procreation.

Second, transhumanists, and the subset of truly whacko pseudoscientific transhumanists (however large a fraction you think that is), represents not nearly everybody who is interested in longevity, nor do they characterize, at all, the entirety of those populations. I wouldn't characterize Aubrey de Grey as a transhumanist, for example. The smear doesn't stick, even if we were to allow smear tactics as legitimate.

Third, and finally, there is absolutely no guarantee that life extension technology will be expensive. None. Further, there is no reason to think that its cost would not decline over time, indefinitely. How much could an Alzheimer's vaccine actually cost, once every 50 years, lets say? How expensive could a CRISPR therapy be? If it were routine and assembly-lined? What about the decline in lifestyle cost after one has paid off one's mortgage and taken care of all the other mostly one-time expenses?

As thinkers, we truly need to do much, much better than this article.
I have previous generation XPS 13 Developer Edition with hi-res touch screen. I chose the touch screen mainly because of the high resolution it provides however while using it I realized that touch screen can be quite useful sometimes. My best use case is reading long documents while commuting by train with the laptop in my lap. I find swiping with my thumb much more convenient than scrolling or pressing up/down keys. Not that it is a killer feature but still nice to have.
Github needs a way to limit control to a directory or file in a repo. Its fine if a non-engineer changes text in a static html file, but they wouldn't know which files could possibly break tests.

It would also solve a lot of problems with mono-repos.
Security Through Distrusting
It's hard to evaluate this without context. What was wrong? What were independent repair shops offering?
I looked at the i7/16GB/512GB/UHD version, it's over $2K.

Why not get a Surface Book instead for $1600?

https://www.amazon.com/dp/B0163GNS5S/

Or Gigabyte Aero?

https://www.amazon.com/dp/B01MY2YYKB/
AMD isn't vulnerable to Meltdown not because they foresaw this issue, but probably because they simply weren't as aggressive as Intel in allowing speculative execution

What do you mean by 'aggressive' here? Cause frankly, I think aggression isn't a good trait to be exploiting in business - it's not the same as competitiveness.

Is it 'they would have done this if they could but they didn't try hard enough', or is it 'they could have done this but didn't have the nerve to take the risk'?

In the latter case, I'd argue that a lack of willingness to trade off security against performance is a Good Thing in line with engineering ethics. In the former case, it seems like you're assuming business comeptition is always construed as a zero-sum game - is this correct?
Maybe it's a XeroDay?
That's certainly depressing. I'm going to have to go w/ McCloskey and push some pencil on some of that.

I would have put it on the plague, the protestant revolution, the magna carta and the printing press. All pre-dated the industrial revolution - but that itself had to be enabled by something (otherwise - the Romans would have done it, right?)
You missed the Linus post where he said Intel should stop selling shit processors I see.
I’d also like to comment on the “ha, fooled you!” tactic used in this article, where the authors asks the reader to choose the photo of the real person from two given photos and then reveals that, gasp, both are computer generated.

Whenever I run into this often-used tactic in papers and talks, I can’t help but feel – no, the author didn’t just convince me of their point. Instead they convinced me that they don’t value being trustworthy. Often I will just stop reading the article right then. Or if I do continue I will become unforgivingly skeptical of any claim that doesn’t provide a citation that is independently verifiable.

Use of the tactic feels particularly peculiar in an article which itself grasps towards the implications of a future in which photos and videos are no longer trustworthy, a future in which personal reputation will be more meaningful.
Okay, one thing I don't get: Fundamentally, the Meltdown problem comes from a process getting to inspect the wreckage after the the CPU tried to clean up access of protected memory, but failed to properly account for a fun trick of caching.

That is, the process tried to read some data from protected memory A and did some fancy stuff with it such that left enough breadcrumbs that after the CPU responds to the illegal read, the process still has enough info to piece together what was in A, at least from timing of reads, right?

Why not kill the process instantly on a prohibited read, then? Do these prohibited reads happen too often to switch from "oh, that's okay, you can try again and do other stuff" to "the punishment is death"?
The graphic you linked shows the different aspect ratios available to cameras from Panasonic's LX series. If there's "not a major a difference" then why is the LX series so highly regarded for this feature?
>It's not exactly wrong, but it's way too anthropomorphic and attributes way too much intent.

This made me start wondering something... at what point can something be attributed to intent? When did the first intent arise? If humans are blobs of matter following the laws of physics, why can we possess intent when nature cannot? What is the simplest process which can have intent?

This is probably just a restatement of an existing problem like where does intelligence come from. Just a random though I had reading your post.
Seems like it. And not just the smaller companies:

DigitalOCean appear out of the loop and they're fairly sizeable[

OVH appear to have received no advanced notice (if you read between the lines of their post)

Cloudflare has been silent and they usually love being at the front of this stuff. They'll also probably take a nasty hit from these mitigation's too with their incredibly heavy network load, so they might all be out buying hardware.

That said, you've got to draw the line somewhere, AWS is truly huge and a key Intel customer, Google is one of Intel's biggest buyers and their researcher independently discovered it, Microsoft equally a massive Intel customer.

Overall I'd say Intel tried to keep it to an absolute minimum which is fair enough really. Had the news not broken early it's probable that patch notifications would have gone out once fully developed to all of these 'smaller' companies.
Ah, you are correct, I got confused watching some video of someone hacking away at the built in ROM on a de-caped chip... suffice to say, overwriting the permanent internal copy of the microcode does not normally happen. The advantage of updating the ROM this crazy way is purely to defeat the verification of the signature.
well, as a developer they're giving you additional hardware to develop against so there's that case. But I think from the business standpoint, it probably doesn't make sense to have specific configurations for DE when being at or close to 1:1 with their Windows counterparts is probably easier in production.
Reading the brain from the outside
For an architecture that has been around for so long, if the attack was only discovered recently, then is it fair to call it 'simple'? In retrospect, anything can be obvious.
You mean change it to a less offensive word? That would actually be interesting.
I wouldn't call someone who trains models 24/7 a hobbyist.
I would love an ELI5.
> Feel free to do so.

I don't. That is entirely my point.

Spotify started as a convenient P2P streaming service, then got the capital to pay rightsholders. If I were to do the exact same thing, I would almost definitely be stopped on the outset by litigation.

> Again, you can

Sometimes. A few specific services offer DRM-free tracks, but there isn't much competition in that space. Again, it is practically impossible to legally compete with incumbents.

> from the shop of your choice

CD's are still the gold standard for lossless DRM-free music distribution. That is not a good thing. That is not a reasonable thing. That is the status quo that we are all constrained to by a select few corporations. It's not as drastic a problem as in Movies/TV, but it is still a problem.

> I still don't understand what you're missing.

Maybe you can read my comments over again, and ask about specific points. I care an awful lot about the subject, and would be happy to clear things up.
I think you need to disable branch prediction on any core that has access to sensitive memory, not just during the execution of sensitive code. It's 'untrusted' code running on the same machine that you need to worry about.
ReedCrack?

Silent Whimper?
If they were aware, why didn't anyone raise this issue till now?
Ignore parent, patch all systems as quickly and orderly as you can.
"The Universe is a pretty big place. If it's just us, seems like an awful waste of space."
>I don't know of any js exploit - this attack relies on specific machine code instructions that would be very difficult to get a js engine to generate.

The Spectre paper outlines that this is not only possible to do in javascript, but they included a Proof-of-concept of it working in javascript to read anything from that process's memory.
Is he also going to stand up to his local sheriff and police departments? Because there isn't a hotel in America that doesn't hand over its guest register to the local LEOs on request.
Because other than the flaw that leaks information, speculative execution of instructions that never retire leave absolutely no trace at all. There's nothing to detect.
I like msla's XeroDay
Actually not an urban legend. Veternarians in NYC have enough cats fall out of skyscrapers that they have actual data.

http://www.nytimes.com/1989/08/22/science/on-landing-like-a-...
The graphic minimizes the apparent difference by splitting it between top and bottom and maintaining the same diagonal size. 3:2 gives 18% more vertical space in the same width https://www.popsci.com/gadgets/article/2013-02/lets-get-rid-...

If you're doing primarily vertical tasks (coding, web pages, etc.), the taller aspect ratio can be really helpful.

That said, I've mostly made my peace with 16:9. Write shorter functions (that's good anyway) and throw bars over to the side instead of top and bottom.
The future where only wealthy get to live forever is indeed very bleak, but there is a future worse than that: the one where everyones life is short (like now).
Yup, that mirrors my experience working with binary wire formats and the like.

There's also the added bonus that doing cross-platform code with Rust is a breeze. If you aren't depending on any C libraries you basically get it for free. I had a UI framework that was running on 5 different targets that was a joy to work with. I've done that in C/C++ before and it's a massive pain.
That's Max Howell. He's got his own set of issues, but he's not the lead maintainer of Homebrew anymore. The person I'm talking about is Mike McQuaid.
Most people who are willing to pay full price at the beginning of sales (usually $60, often over $100) are people who want to support the creators and distributors of the game.

Adding DRM is not likely to change a significant amount of that groups behavior. It does, however, significantly devalue the product.
Reminds me of a year or two ago when I had to boot my old SGI. Forgot the user password on IRIX and thought that this is where I'll be clever (hacking terminals, matrix music in the background, etc.). Turns out, IRIX had 8 character limit for user passwords. Thanks to the modern GPUs and a passwd file restored from the system (on a recovery console), a few hours later I had the password brute-forced. I'll get to be clever hax0r next time, I guess.
The poster you responded to never said that Intel engineers are idiots. Intel made a huge hole for themselves in the way they implemented ME.

The reason for the strong reaction over these flaws is not because of the severity of this issue, nor does anyone believe Intel engineers are idiots. They are getting blowback because they implemented a closed solution for a powerful feature - Management Extensions.

They lost a lot of trust, which makes it far harder to recover when new issues occur.
NoScript: JavaScript Blocking/Whitelist Add-In for Firefox
More Google bullying (Mobile First SEO) and how to deal with it
So Intel is still liable then.
Overall, this seems like a good policy to me.

However, I'm not sure I like the means used to achieve it. Do we really want to set a precedent where the state government comes in and overrides local regulations about things like zoning which are usually purely the responsibility of the local governments?

I'm not necessarily saying I don't like this either... just thinking through the implications of living in a federal system. You want people to have maximum voice in the things that affect the places where they live, but you also don't want those people to abuse the privilege with NIMBY policies.
An interesting feature of this bill, and SB35 before, is that it makes operations of local bus agencies far more relevant. As written, I could build a 55-foot-tall building without parking on my land in Oakland. But if AC Transit moves the bus stop a little bit, cancels my local bus line, or increases the headway above 15 minutes, then I’m right back to 25 feet with two car parking minimum.

Edit: actually 85 feet under this proposed bill.
Does this mean it was deliberately designed to be insecure to gain some performance?

With each day passing this looks more and more like the Diesel scandal. Is it OK if all big players do it?
Should application users be database users?
Gah, you're right. Guess my memory is fading. There is indirect JMP, but no indirect JSR or indirect branches. And the indirect JMP as you say is not very useful.
Added as this might be a very useful add-on with the current rage of possibly remotely exploitable CPU bugs.
It also calls to mind the idea of the "blipvert" from Max Headroom.
The thing that makes me bearish about Ripple's price is that so little of the currency is in the hands of the public. From what I've read, total amount of XRP is fixed at 100B, but it seems like only about 1.3B units are in actual circulation, with the other 98.7B units held by Ripple Labs, the founders, or institutional partners. ~37B is 'held' by these entities (mostly the founders I think), and another ~60B is locked up in smart contracts to slowly release these remaining funds to these actors at a rate of up to 1B per month.

I find it concerning that so many people are valuing Ripple off the 'market cap' because the 'true' circulating supply is much less than the commonly used figure of 38B. If the 'true' circulating supply is only 1.3B, what will happen when founders and partners start to cash out their ~30x greater stake then what is currently on the market? Can the market absorb 30x more supply?

Does anyone have a good source on what amount of Ripple is held by the 'public' (vs those with direct business relationships with Ripple Labs)?

Disclaimer: I'm long Bitcoin, and not a Ripple expert. Have been a detractor for several years: don't like the technical design, reliance on network effects, and amount of centralization.
That is a very interesting read
For what it's worth I had the code in there when I clicked verify and received the error. Glad to help with some error handling though :)
> In our own testing, we have found that microbenchmarks can show an exaggerated impact.

This. The talks about 30% (or even 300%!) impact based on a graph without any details or methodology, often itself based on a microbenchmark or a tweet that got viral is really not helping.
First couple of generations of Atoms, before they went out-of-order.
Speculative execution executes code that might not actually run. The following example could access protected memory even if `has_privileges` is false (i.e. the processor predicts it might be true):

if (has_privileges) {
// Access protected memory
} else {
// Do something else
}
StackOverflow Developer Survey Results 2017
Turns out I need to do that with my old SGI. Got any tips?
The researchers were surprised that it worked because it shouldn't have worked.

I don't think Intel's engineers are incompetent, but be careful about the reasoning you're using.
Whatever you say.

Here's a better image though, rather than a really weird bunch of lines for camera sensors: https://wolfcrow.com/wp-content/uploads/2013/01/43169aspectc...

It's about 20% more vertical space, as you can see (and you have to put together the top and bottom, which is a lot more impressive).
Speculative execution is as old as branch prediction, which is very, very old.
Even before Softbank bought them, ARM weren't even a fabless operation: their whole business model is IP cores. There's very little strategic value in that; you'd be as well off founding a semiconductor manufacturer to build RISC V processors.
>There is no evidence for trade between Europe and Africa going back thousands of years.

Are you serious? As one example, thousands of years ago (2,350 years ago to be exact) Alexander the Great (a European) conquered Egypt (which is in Africa by the way).

Of course there was tons of trade going on between Egypt/North Africa and Europe for long before Alexander the Great. And, of course, there was tons of trade going on between Egypt and sub-Sahara Africa at the same time (what were they trading? Incense, myrrh, oils, gold, resins, ebony, ivory, animals, etc.)

As for your nonsense about sub-saharan languages:

http://atlantablackstar.com/2014/08/08/11-ancient-african-wr...
The state and cities do not share the same relationship that the states and the nation enjoy. The federal system is a creation of the states, and has enumerated powers. The states also create cities. So all the power lies with the state.
They made the wood fire retardand but it still burns - just not as easily as untreated wood - while selling it as fireproof wood.
I think its more about the flexibility of having access to more resources than you can ever need. If you buy a 1080 then you are limited by its performance and say you wanted to train to models at the same time, you are even more limited. Whereas with something like this you could train 10 models right when you need them trained, and you aren't stuck with 10 gpus that you bought so you could do that.
Why would you need a Turing-complete language to describe advertisements? Why can't they be static images? Or static HTMLs?
"Advanced artificial intelligence, they hope, will allow us to make exact copies of our minds that will live indefinitely in networked computer systems."

I've never understood this mindset. If I asked you: "hey, here's proof that all the data that comprise your personality, memories, etc. have been copied to a computer, may I now give you a lethal injection?", why on earth would you say "yes"?

It's not the particulars of what I'm experiencing (my memories, my personality, the sensations I call "my body" etc.) that are interesting to me; it's the sheer fact that I experience.

I fear this will degenerate into an unproductive debate about what consciousness is or is not, so maybe it's better to just nod politely.
[macOS]Create customer-facing videos without effort and production costs
Apple have been making logic boards since the beginning.

The inclusion of custom silicon isn't new either.

Nor are in-house drivers for commodity equipmemt, as the move from NeXT Computer, Inc. to NeXT Software required it.

As you point out, by ceasing to rely on third party IP in that custom silicon they reduce the complexity further still.

100% in-house widgets have been on the whiteboard at Apple for a long time.
There are also GreenArrays chips, like the GA144.[1] 144 cores on a chip.

The downside (or upside) is that they're desgined for running Forth, and are not x86 compatible.

http://www.greenarraychips.com/home/documents/greg/PB001-100...
They might work as thumbnails, but these are terrible when blown up to full size. When given both images I was trying to find one that might be real thinking it could be some freaky filter or something. And I still had a 'these are terrible fakes feeling.'

Even the 'best' headline image fails as the eyes are not the same size and the rest of the face just looks off.
Our plan is to talk about this when we have full data. Right now looks like we aren't taking much of a hit at all.
Training your own Web-based voice command recognizer
A Guide to Python Datetimes: conversion chart between Python time formats
It has happened to a couple of people so far, seems like the API might have a little bit of a lag when updating a profile.

I haven't seen it first hand but what you and a couple others are see sounds like it might be the case. I'll keep an eye out.

Thanks!
The utility Spotify provides is discoverability. Spotify is a large and diverse collection.

> you get buying the CD on iTunes or something

As far as iTunes goes, it does not provide lossless DRM-free content at a competitive price, and is especially worthless to me, since it does not even run in Linux, and is painful to use in Windows.

There aren't many competitors either, because media corporations are holding back innovation and competition by demanding fees and DRM.
I can say developers are the new type of whores, except we rent our brains, not our holes.
But the guys behind intel rented there butt hole tho..