skysight-inc/HackerNews huggingface dataset:
A child goes to the doctor for a checkup. The nurse weights the child and measures their blood pressure. After the doctor checks out the child, the parent picks them up and asks, "So, how much bigger are you than last year?" Smiling, child replies "120 over 80!".

GDP is important, because it is a measure of economic activity. That is like blood pressure for the economy. Unlike humans, where our blood pressure is pretty constant, the economy has periods of with lots of money flowing and times with little. This is the reason why politicians and smart media people focus on it, because it indicates are we in recovery or recession.

That is not the same thing as measuring change in wealth. That is like gaining weight (in the healthy sense of a child growing). When the GDP goes up, it doesn't mean more wealth, it means more money changed hands.

Like managers are taught, what you measure is what you get. We as a society focus too much on moving money around and too little on generating wealth.
If you're doing speculative memory fetches, wouldn't that also leave a measurable impact on the cache?

Simply instead of MOV AX, [something that depends on secret value] as in the original Meltdown paper you'd need to use JMP [something that depends on secret value] to trigger the memory fetch in a branch that's not going to be used.
Are there really people here suggesting that Twitter block the POTUS? Look, he's a madman, but he's also the president. It's not up to Twitter to try and alter the national dialogue.
Wouldn't a write lock on that structure become a hotly contended resource? Globally shared, globally writable structures tend not to scale very well.

Postgres already has the notion of creating and destroying transaction ids for each row version attached to that tuple (row version). That distributes your "structure" across the rows involved in it. Just because you delete a row version (whether by deleting that row, or by updating it — which in MVCC is synchronously deleting the old version and inserting a new one) doesn't mean that row version isn't still visible to other concurrent activity, specifically including read-only activity. You'd therefore have to write to this proposed structure on completing every read or write.
Or, you know, we could actually have freedom of speech for everybody. Crazy talk included, whatever your definition of crazy happens to be.
I really love DuckDuckGo too, while I find my search results can be off sometimes (Ie, searching for React gives YouTube reaction videos before the JS library) their bang search feature rocks.
I could almost understand this if they had a policy of not blocking anyone else who posted similarly hate-filled speech, but they don't. If you're not in the white house you're going to have a bad time.

So the policy is, "We don't allow hate speech unless you are extremely famous and well-known and then hate speech is totally fine".

Which is, IMHO, total bullshit.
For proper anonymization, you need to change code/naming style. Codestylommetry can easily identify most developers. Ideally, an obfuscator generates some "private key" that would guide it how exactly it should change/reverse change upon push/pull so that public repo has anonymized code whereas developer the real one. However, it won't work for multi-developer projects.
Isn't Twitter much more akin to something like a bulletin board or a printing press? Certainly the platform on which speech is disseminated should be viewed independently from the speaker?
Show some initiative. Fork it and put some Tom of Finland wallpapers in.

Problem solved!
Having the source for anything in the cpu here won't help when the architecture design itself is at issue. If you have to respin new silicon, all the software in the world won't help you.

Ever see a wire on pcb boards going from one end of the board to another? Thats the hardware equivalent of a: "we can't fix this properly, but we can hack a fix on until we can fix it right in the next revision" hack.
So let's say A pays B and B pays A for "nothing," i.e. there's no transaction except for the payment of goods, and neither derives any pleasure out of such a transaction.

Such transactions would be meaningless, but they also have very little chance of happening in our economy, don't they? Presumably each would pay some sort of tax on this, and if not, the only way that it would be recorded by GDP is if the Persons are business entities that do not make profit, and don't pay sales tax.

If such transactions do happen, they must be used in order to exploit tax loopholes, I would suppose? I wonder what percentage of GDP could be attributed to such transactions.
I highly recommend http://www.nand2tetris.org/ and the The Elements of Computing Systems book https://www.amazon.com/Elements-Computing-Systems-Building-P...
Yes, I've used jakesgordon's. I really recommend it, both the use of state machines and the library.

Using a state machine really helped making it obvious what needed to be cleaned up. If you have something with many states, which may even transition back and forth, it really organizes everything, making bugs less likely. It also prevents you from going to invalid states from the current state.
Cross-platform, graphics API agnostic, BYO-engine style rendering library
By far my favorite little feature, it speeds up my workflow a ton.
Idyll Language – Author interactive narratives for the web
Because in the Intel design, for memory reads issued by speculative instructions, any "access denied" results are also delayed until the CPU control unit determines the instruction that issued the read should really have been executed.

But the actual read from is allowed to occur, even if the "access denied" signal is given. Which allows the read to effect the state of the data caches. This was likely done this way as a performance booster, because this would allow speculative instructions to also perform cache pre-fetching during their speculation window.

That seems to be why AMD CPU's are immune to Meltdown. AMD's design prevents the read from occurring when the "access denied" signal appears, so the cache state is not effected, so there is no side channel to detect.
Name me a 5000 year old society without these problems.
True, a sad commentary on the way we treat each other
Twitter frequently removes and censors users at the request of governments and due to rule breaking, etc. They aren't a bastion of free speech
new and delete are fast.

What's slow are stuff like java GC Eden management where deletes are an afterthought to what is a time-stamped LRU reference management server, and a lot more.

So, no. I don't think you can compare C++ with systems that run full fledged GCs and threat them in the same bullpark.
Right. I understand that having that option lets you mitigate some problem. Can anyone expand on what this option does and how it mitigates the problem? Did I miss something from the blog post?
What they added is a magic switch that disables indirect prediction across context switch and kernel half of memory space from non privileged cobtext.

It is done somewhat as a hack. Overhead on system calls should be relatively low still.
Ah, the little-known poop-eating income tax loophole...
Mysterious JavaScript results in iOS Safari when eval'ing Object?
Please. They released an iOS update and the calculator wasn't working. How many expensive 10x PhDs do you need to release a working calculator app?
Except, in order to profit, the investors have to eventually sell or rent the homes to actual residents, who would have to worry about salaries and commutes. Otherwise it's just a speculative bubble.
Forecasting the Canadian Housing Price Index in R
According to Dr. Michael Greger, medical care is the third leading cause of death in America:

"Since side effects from prescription drugs kill an estimated 106,000 Americans a year, the sixth leading cause of death may actually be (gulp) doctors. And that’s just from adverse drug reactions. Add in medical mistakes (which the U.S. Institute of Medicine estimates kills at least 44,000) and that brings “healthcare” up to our country’s third leading cause of death. Throw in hospital-acquired infections, and we’re talking maybe 187,000 Americans dead every year (and millions injured) by medical care."

https://nutritionfacts.org/2013/07/16/dr-gregers-new-annual-...
Your initial post made me worry that someone with perhaps an empathy disorder was about to see a small mob gathering outside their home.

I wish you had expanded originally, because I totally agree that GP made a similarly unfair generalization.

In fact, I often wonder why it's constantly reiterated that I could never ever understand the experiences of an "out" group, but those groups regularly purport to understand mine.
> Are there really people here suggesting that Twitter block the POTUS?

There are people seriously suggesting that Donald J. Trump be held to the same standards with regard to content as other Twitter users, rather than Twitter being a biased, pro-Administration propaganda organ.

Twitter has clearly decided against that (that's been clear for some time, but now it's official.)

> Look, he's a madman, but he's also the president.

And that's why reporting about him is valuable and ought to be protected, and it certainly a reason that he has disproportionate power of government tools of communication.

It's not a reason for a private entity to grant him preferential liberties in a discussion forum that are not granted to others, particularly his domestic political opponents.
Gentlemen, may I interest you in a gently-used bridge over a pristine river in New York City?
Or the alternative of raising the minimum wage.

No business is going to fire a worker they need to increase the nation's GDP per hour worked, but as an aim for the nation it would be better if everyone if we worked towards increasing the efficiency of labour.
> - browsers like Chrome & Firefox have to compile with new defensive compilation flags because it runs untrusted Javascript

Not meaning to be that rude, yet this itself summarises (and the issue perhaps will shed more light on) how stupid an idea is to let everybody run untrusted code from other peoples, let alone third party stuff like "privacy-intrusion-as-a-service" startups et aliae.
> The leak is only clear in retrospect. Many, many things are only clear after you see how they were done.

However, even at the time of the design it would have been obvious that deferring security checks is a risky design choice.
Put It on Camera: How to Get into Scientific Film- and Video-Making
Actually, mainframe CPUs are developed using old techniques, which are all of a sudden interesting again. (-:

See for starters this discussion about reinventing the AS/400: https://news.ycombinator.com/item?id=16053518
Your statement is objectively correct, but also objectively sexist.
you must be kidding. You brought up the socialized medicine as a strawman counter in your first comment in this thread.
Ah, I see, I was not aware that they had allowed for CB players. How do they do it?
Only paying cash for privacy reasons is a good metaphor: not only is it kind of a pain to carry cash & not run out, but some stores have stopped taking cash. For example, my favorite coffee shop on University Ave in Palo Alto :-(

BTW the license plate thing has been done by my friends with store loyalty cards, but after a while everyone got bored doing it.
Sorry. Is this crude? Don't really understand down votes.
If that disturbs you, you'll be shocked to find out that there are also some people who believe that he should be held accountable to the laws and constitution of the United States, although that set of people appears to not intersect with the set of Republicans in power.
No one has reported such clever timing attack until now. There's no reason to suppose that such an attack hasn't been used by nationstate actors for, say, a year already.
Twitter is not a governmental organization (at least, not officially...) and so the question of free speech has no bearing on their operations.
That was a huge problem of his that he fixed the second go-around (mostly - the Cube was beautifully expensive and would fracture). But from like 2000 to 2013 or so Apple would put out stuff that was a little more expensive than the competition but usually had enough features and quality to make it easily worth it.

Now they're selling $1,000 phones, gold watches, and machines that are way overpriced for what they offer. It's a noticeable shift.
If everybody else is patched, bad buys don't have much incentive to write attacks. It's herd immunity. You have chosen no to vaccinate.
1. It won't take long for this attack to stop being "theoretical" (assuming it still is).

2. No one has to target you specifically, it's a matter of time until someone uses this attack vector on something everyone has -- a web browser.

3. Once you're owned, you're going to be sharing resources with a couple of bots, so don't be so sure you'll get to keep the performance.
Yeah, the more canonical counterexample/paradox about GDP is different... and you hint at it at the end.

Imagine I stay at home watching my kids and you stay at home to watch your kids. Nothing is added to GDP.

However, what if I pay you $20 to watch my kids for the night, and you pay me $20 to watch your kids for the night? The same amount of work was done, we each up with the same amount of cash as before, but we've somehow added $40 to GDP. (There are no new performance arts events in this case, everything's literally the same as it was before.)

You might think at first this is a quirk of child care... but you can run the hypo with other industries.

Imagine two bakers on the same street in friendly competition. Each of their families goes through a loaf a week, one from their own production.

What if, one day, each baker wants to check out the competition, buys one of the other bakers' loafs? Each family eats the same amount of bread and each baker produces the same amount of loaves. GDP goes up by the full price of the loaves.
thats a funny way of spelling "Linux Gaming"
It's worth noting that in this post, Twitter does not explicitly define what a world leader is.
The latency of DRAM is mostly governed by Dennard scaling ("regardless of transistor size, power density remains the same"), because it means that making cells smaller reduces the available charge currents for bit-lines and the like proportionally, so only a small latency advantage can be gained.
Yet Meltdown nuked exactly that.
Bit of a strawman argument though is it not? And a highly unlikely and simplistic one at that.

Here's a counter-example:

Person A says he'll pay Person B $20K to spread poop on B's farm.

Person A does it.

Person B says he'll pay Person A $210 for a unit of Person B's produce.

Person B buys it. So does another 99 Persons.

Both Person A and Person B are wealthier. Not only that, another 99 Persons are fed for a while (or they sell sub-units of the produce on).

Moral of the story: strawmen arguments /can/ be fun! :)
Trump using Twitter isn't the problem. In fact, it actually gives us a weirdly detailed bit of oversight into his actions and thoughts (such as they are). I actually think this is helpful when dealing with someone so erratic and uninformed. Everyone in their right mind sees his tweets for what they mostly are: Frustrated bloviations and childish temper-tantrums.

The problem is electing someone as President who would use Twitter the way Trump does. We should never have done that in the first place and, thankfully, that's an error We The People can correct.

Addendum:

I do, though, think that Twitter's response is inadequate. They have a community. Their community is being turned toxic by this man and his ilk. His use of Twitter as President isn't the problem, but Twitter needs to address the effect of people like him on their platform and the world in general.

And that way more complicated than just banning a warmonger President. Sadly, I'm not sure Twitter has shown themselves to be up to the challenge.
Facebook says people OK with video ads that interrupt content, if they're short
That's one big reason I'm trying to pivot away from software industry.

I love programming. I just hate the bullshit that usually comes with getting paid for programming in this industry.

Ironically, I program both at work and after it - at work because it's (still) a very cost-effective way of making money, and after to actually do something that I care about.
After many many decades of despicable leaders and policies, surely you have to conclude that the people themselves must be despicable?
because the whole post is PR speak for "we are going to continue letting donald trump deny climate change and threaten to kill millions of civilians on twitter" under the facade of free-speech protection
Sounds cool. I use it in vim as a 'grok this C/C++/Lua/Textfiles' utility, pretty much every day. grep too of course, and there are times when you just wanna ack, but for full grok, cscope is cool however you do it.
It might be that the flying car appears the way it does because you have access to a private plane. I mean the functionality of the flying car is ubiquitous flying vehicles. There are ~250,000 general aviation aircraft in the US. [1] Or about the same number of general aviation aircraft in service as the number of model year 2015 and 2016 Kia Sorrentos sold in the US. [2]

[1]: https://www.aopa.org/about/general-aviation-statistics/activ...

[2]: https://en.wikipedia.org/wiki/Kia_Sorento#Sales
> I highly doubt you (or the state legislature) does either

I do, because I've been following the issue, the Brisbane city council meetings, and the reasons that the Brisbane city council has been citing. It's not a secret.

> the city will lose on tax income [1], which is bad

The city is not entitled to hypothetical future tax income.

> If there are legitimate local concerns over a development, the state shouldn't be allowed to override them

Wishing for more tax revenue and property value appreciation is not a legitimate local concern. The city is not entitled to arbitrarily decide who can lawfully move in or build on privately owned land within its limits.
There are famous public safety exceptions to free speech that we all agree on. We don't allow people to yell "fire" in a theater for example. The current discussion is about if nuclear posturing threatens public safety.
What kind of soft- and hardware (specifically architecture) is being used in past and modern aircraft? Sources/references appreciated.
> reducing the resolution of timer interfaces does not mitigate any attack.

> quick-fix mitigations are dangerous, as they can establish a false sense of security.

This demonstrates - again - the danger of treating security as default-permit. This blacklist-style thinking is very common, but it is guaranteeing eventual failure because you cannot enumerating badness[1].

Limiting the granularity of performance.now assumes that providing any timing information at all is safe. It's the same basic misunderstanding of what it means to design for security I hear way too often whenever a new security issue is being discussed: someone always asks "Is this an actual problem in the wild, or whining about some hypothetical that isn't a 'real threat'?" So what; future threats are nt limited to only the attacks we know about today.

As I sain in a recent comment[2], the thing that nobody really wants to talk about is that it isn't possible to know the behavior of programs a Turing complete language without running the program. Declarative documents in HTML+CSS were safe, but trying to run potentially malicious Turing complete programs safely is provably futile endeavor.

[1] http://www.ranum.com/security/computer_security/editorials/d...

[2] https://news.ycombinator.com/item?id=15708099
Here is how I build architecture optimized TensorFlow 1.4 binaries for specific AWS instance types:

https://gist.github.com/daniel-j-h/b410dd21d4949a54c83d0c386...

The build script needs slight adaptions between major TensorFlow releases; otherwise works great for me so far.

During boot time you can then figure out the instance architecture you are and fetch the appropriate wheel. Hope it helps.
Unless Macs have a secure enclave I don't think there's anything about that encryption that requires Apple devices.
Suppose you are in a spaceship, and you want to pick a random direction to travel. You want to do so with at most one pitch change, one roll change, and one yaw change.

One could of course do this by picking the direction first, and then calculating the necessary pitch/roll/yaw changes to point that way, but I wonder if there is a good way to it without selecting the direction first? In other words, can you do it just by using your random numbers to pick pitch, roll, and yaw changes, assuming you only have the common random number generator distributions available.

First thing that comes to mind would be to do a random pitch change in [-pi, pi) then a random yaw change in [-pi, pi), but I think that is still going to be non-uniform. It doesn't have the same problem as the lat/long approach (because both pitch and yaw move on great circles, so you don't have anything like the variable length latitude line problem), but it still favors some points.

Including a random roll step in there changes it from two favored points to a favored great circle (I think...visualizing this is hurting my brain), but I suspect that no finite sequence of pitch, roll, yaw random steps determined by independent random numbers with distributions that are not changing based on prior selections can erase biases that stem from the fact that this approach is starting with the ship pointing at a particular point and having a particular initial orientation.
My guess is they don't do this because somebody decided it would confuse users to have more than one link.
Quite right. Elected officials should conduct themselves in a manner which could never be construed as anything other than sheer professionalism.
Someone once suggested the risk in opening email attachments was analagous to the risk in running executable code (e.g., Javascript) from websites. Each can expose the user to a multitude of vulnerabilities. The argument against this comparison at the time was that Javascript from websites, unlike email attachments, could be run in a "sandbox". Even if the code could not be trusted, it was "safe" because it was "isolated".

Today, many users do not run Javascript because all too often it exposes them to excessive advertising and resource usage. Now, after researchers defeated KASLR with Javascript, and with Meltdown and Spectre being implemented in Javascript, there are additional benefits of not running third party Javascript.
Yes thanks to HN being so quick to freeze comments I was unable to fix the example.

Point is, a JavaScript program in isolation cannot read anything, it has to interact with the other target code somehow. If that interaction (the data passed over the API call) can't fail after a certain point and can't be used to read data before that point, then the JS can't read anything.
Only caching use a problem. Indirect branch prediction can be "flattened" at a cost by checking TLB in context switch, presuming the kernel sets it up nicely per process. The other techniques are fine. As usual, secure code needs to be written with timing attacks in mind and they don't change much there.
I am still learning about IPFS but I participated as a minor party in the design of one of its intellectual predecessors, Freenet.

IPFS is not just going to act as an ad-hoc CDN, it's also going to work as a regional CDN.

If someone does a report on your funny video on WGN-TV and ten thousand Chicagoans hit your tiny little website in the next ten minutes, your server will get a few hits because nobody else has it yet. After that the network effect kicks in, and eventually everyone is loading it from an IPFS server somewhere in Chicago. When they start 'retweeting' it and everyone is looking for it, it'll end up scattered all over the country.

Until people lose interest, and then the copies will begin to disappear as the next fad automatically pushes it out.