skysight-inc/HackerNews huggingface dataset:
It's definitely a tradeoff. Distributed systems are hard. Isolation is good. One of the best tools we have for isolation is processes and MMUs.

I'm not saying we should all switch, it's just that it's possible, given my understanding of how we're dealing with the intel bug, that one of the arguments against microkernels just went way. So they might make sense in places they previously didn't.
So the elite have always had a use for the "unwashed masses" so to speak. Maybe you need a large standing army to fight for your country's interests. Or maybe you need a large untrained labor force to fuel the industrial machine. Robots remove both of these "uses" for a large impoverished class of people. Are we entering the first era of human history where elites have no actual use for an underclass? Or does consumption fill that need now...
This looks pretty, but I've never personally had trouble with `pip freeze > requirements.txt`

What benefits does pipenv have beyond storing the hashes as well? In what way is it more sane? For example, does it get around the issues with, e.g., matplotlib being installed in a virtualenv?
I'm not sure what that has to do with Singularity?

I know that the HPC clusters I've used in the past few years have all supported Singularity, but none have supported Docker (aside from our small lab cluster). Many HPC admins are (understandably) hesitant to allow non-admins access to start Docker containers (requiring root), but Singularity has no such user permission issues -- and it's faster than initializing a full VM to run a job. I don't expect that to change so long as starting a container requires root-effective permissions.

I suspect that many data scientists will be in a similar situation w.r.t HPC clusters (except for those that are using custom clouds like Seven Bridges).
I made a pull request for some obvious ones that come to mind.

I have blanked out painful memories of cross-compiling protobufs using CMake but will add a description when I can face them.
Which strains are you referring to? Your claims are completely unsubstantiated and anecdotal. The same thing could be said for alcohol and nicotine. The death rates for those substances are much higher and will continue be higher.
Science and technological progress is not a zero-sum game.
Presumably people at work don't view NSFW sites, because that would not be safe.
Check out this article about music piracy -- I believe the process for game piracy was pretty much identical around that time: https://www.newyorker.com/magazine/2015/04/27/the-man-who-br...
If you compare it to JWT in JWT claims are basically a string name (like "exp") and a JSON value. It's pretty simple. You need to check of the value for exp is a number and is greater than current millis. In Macaroons the entire caveat (a.k.a. claim) is just a byte array. The majority of libraries use predicates "X op Y" encoded in UTF-8 (e.g. time < xyz, account = 12345). That looks good, in JWT you don't have relation encoded, you just need to know that for exp it's "less than" and for aud it's equals.

Unfortunately that's where the simplicity of Macaroons end because even the official docs on libmacaroons have some weird choices, like encoding date in a ISO-like format (without timezone specifier at all). Also using UTF-8 is not that efficient if one could encode date as a number. Of course Macaroons are flexible and because the caveats are byte arrays you can use CBOR or whatever to conserve space. But then you lose compatibility. And you need compatibility if you want to utilize third party Macaroons (if a third party mints you a Macaroon with unknown caveat that makes the entire thing invalid). Third party Macaroons are the most powerful feature of the entire system but they introduce a lot of complexity: Macaroon references (look out for loops!), symmetric decryption and out of band communication needed to collect everything needed to authorize. That's why existing libraries allow only limited subset (e.g. no third party caveats referencing other third party Macaroons), and if you're writing a library (as I did) there is a lot of reverse engineering (e.g. libsodium is used in most libraries for symmetric encryption).

There are also some small things like de facto implementations using slightly different operations than the paper and a custom binary format. JWT just uses JSON and base64. (For the record I'm not a big fan of JWT).

What I like in Macaroons is the ability to further confine permissions. Sadly PAST doesn't seem to have something like this instead opting for a "safe JWT" way.
>and show them why their ideas are wrong through your actions.

Why are you assuming these people are rational actors?
Several of them seem to be using many features from specific celebrities. It may just be me, but there is a very strong similarity to Paul Walker, Liv Tyler, Michael Douglas and Adam Sandler in some of these. I don't know if it's a result of overfitting?
It will take a LONG time before we have tens of gigabytes of memory running with the same bandwidth and latency as L1 cache. According to a StackOverflow question [1], an L1 cache hit takes just over 2 nanoseconds, while RAM takes upwards of 100 nanoseconds.

[1] https://stackoverflow.com/questions/4087280/approximate-cost...
... uh, I guess I was right? :P (in light of recent events)
> I did spend a bit of time re-pasting [...] unlike a mac this is something you can do

Why couldn't you? [0][1].

[0]: https://www.ifixit.com/Guide/Image/meta/6JoCTCytFZE4gSOU

[1]: https://www.ifixit.com/Teardown/MacBook+Pro+13-Inch+Function...
Meltdown and Spectre Security Update
Implementations of meltdown do not need to trigger a page fault (because the instruction which would fault can be made to execute speculatively - in addition to the instruction which leaks information into the cache executing speculatively). Accordingly, there would be nothing for the kernel to observe or respond to.
Good Tech Lead, Bad Tech Lead
I mean more about the data required for an A/B test.

For example, we want to test showing a set of images on a page. Some users get set A, some get set B, some get none, and images need to be changed weekly.

The list of image URLs might be in a file in git, and get changed by a product manager each week for the duration of the test.

The A/B test would be run by our A/B testing service, which stores historical tests and reports indefinitely.

We’d then come and move the URLs into the database and add an editing tool later on if we decided to ship the A/B test.
Wow, the rings of Saturn huh. Just how self-important can humans get lol
Looks like there are [a few different issues](https://status.heroku.com/) they're experiencing all at once. Has to be a rough day for their support staff.
You mean chincam?
From the evidence they give it is one small white dot that disappears from a Google map picture due to "debris". That's quite different from claiming that a whole "IRBM crashed in a populated area".
On kraken.com you can buy ripple/XRP (I'm not affiliated).
> That argument is only valid if your application doesn't touch disk and doesn't touch the network to go talk to some other service anyway.

Why? Adding another source of “slowness”[1] isn’t free just because other sources of “slowness” already exist, especially if it’s already close to being unacceptably slow as it is.

I mean, sure, if the request takes ten minutes anyway and the validation check takes a few seconds, nobody will notice, but if I’m doing, say, a single non-local database lookup for the request then adding a second one for verification doubles the time it takes to service the request.

[1] I’m not saying that a network round trip and database lookup are slow, just that for the sake of this argument, they are being considered slow.
Google Security Blog ... requires javascript enabled to read ...
Nah, that's equivalent to no work at all.
> a tweet that got viral is really not helping.

I especially liked the AWS forum post being breathlessly circulated which is from someone claiming that their business critical workload no longer fits on a single m1.medium (1 vCPU, <4GB RAM), joined by someone else who was actually swapping and hitting the OOM killer.

There is a real impact but this is going to be the lazy IT worker's new plausible excuse of the day for months…
Python Packaging Lessons Learned. Read This Before You Start
It's kind of amazing in the browser (both Chrome and Edge, not Firefox). For regular apps it doesn't matter as much.
Are they independent from torvalds' kernel? I thought the kernel was patched very quickly (KPTI)?
> Is it a valid legal defence to say, that was just marketing lies so don't take it seriously?

There actually is a recognized defense to fraud claims along those lines. The concept is called "puffery": https://definitions.uslegal.com/p/puffery/
"can't find", huh? well did you even try? https://en.wikipedia.org/wiki/Polygraph#Validity has plenty of actual studies referenced.
The curious case of Binary Search–Famous bug that remained undetected fr 20yrs
And our actual cousins (all the wars). So not sure what's more disturbing.
That may just be the way the article is written, but I find all these people to be a bit too much self-centered and maybe too much on their bodies, in my opinion. There is more to old age than just the body. I personally think that if everyone could live forever (in flesh or not, maybe just in a sort of library/archive), the biggest advantage would be that experiences are retained.

It is just a shame to think about the amount of knowledge that is lost every time someone dies. And the effort needed to train the next generation. On one hand, that means we get to imagine better ways of teaching, on the other hand, we have to spend more time studying, or just accept that we won't know everything perfectly (and be more specialized than our ancestors were).

This specialization is only compatible with technological improvement if we can delegate more of the low-level task/knowledge to computers/AI, or if population keeps increasing (which isn't really sustainable, long-term). The alternative is stagnation, or regression in some fields to progress in others.

Edit: I can get some people not agreeing to this view, but this was meant at the starting point of a discussion, not a general truth. Could the downvoters at least share their view of the topic?
I just thought of a little thought experiment.

Let's say you have the option to be revived after you die. Same body, just... you die and you come back. Pretty convenient, right?

What if you have the same opton to be revived but you loose... one day, one month, one year of your memories. Still, pretty cool, right? You get to yet live.

But what if your body gets completly destroyed and your consciousness gets placed in a completely different body? The end result is the same as the same other 2 cases. Why would you be bothered by the difference in process if the reseult is the same? I see two options - we either place too much emphasis on the continuuity of our body or the continuiti is actually an important aspect of living - maybe because of the power of natural habbit, nature doesn't usually reconstruct what it destroys.
ODTWARZACZ ROZDAŃ
>Your tone is hostile and that makes me disinclined to take your view.

>Don’t let your biases inform your opinions!

These are not complimentary positions, they're pretty exclusive of each other. Methinks you just wanted to take the high ground with some generic platitude and misdirect the conversation.
This is well-intentioned, but I predict will very often result in development of superificially attractive high-density housing with inadequate parking near transit lines with inadequate capacity and existing connected services.

Development limits and parking requirements are often abused, to be sure, but they do have real purposes, and the mere presence of a transit station doesn't eliminate the development externalities they legitimately exist to address.
The native image generator performs a closed-world static analysis over your application, the JDK, and any supplied libraries to determine what's actually in use. In cases of ambiguity, it must be conservative and include all candidate classes. Since the output is a native binary without the JVM (and subsequently, without a Java bytecode interpreter), there's no way to dynamically load classes. Reflection is handled by registering classes during the image generation process, I believe. Static MethodHandles neatly avoid any issues as well, if you can work with that.
I have occasionally pondered as a sci-fi concept a religious cult that dedicates itself to identifying and murdering immortals. In a world where humans have eliminated the natural causes of death, the stability of social systems may demand that unnatural causes of death replace them.

There are other possible structures designed to handle immortals.

These include prohibitions on persons older than N years voting, holding elected office, working in management positions, or controlling property. Which is to say that immortals would be prohibited from directly enforcing their will on younger people, once they get past a certain age. They would then be forced to be sneaky about it, by doing it through art. This substitutes political death for biological death, but also creates an entirely new category of crimes, based on youth fraud.

Then there's the idea that immortals all eventually join the diaspora, and never impact the baseline human culture, because everyone past a statistical age threshold boards a ship bound for distant stars, and is never seen or heard from again, except by those in their ship. Each ship is then expected to evolve its own unique culture, which will likely include some with features that are not destabilized by immortal-versus-mortal tensions. This works out fine until ships start returning, perhaps without reliable knowledge of Earth.

We already have plenty of speculation on this, in the form of vampire novels. In general, the older a vampire character gets, the richer and more callous it becomes. Its life in fiction usually becomes a routine depredation upon mortals, combined with a vicious power struggle among the other immortals. I would imagine a 400-year-old trillionaire to be similar in character.
A Short Guide to Understanding Statistical Claims
I used to think so too about religion.

But now I've met some people who believe their religion is bigger than them as an individual. Renouncing it is simply not something they believe they have the power or right to do. Other times, they're born into a religious community and renouncing a religion means losing their community, which can feel like dying or worse. In Muslim majority countries, I can imagine there is a powerful force of not wanting to feel ostracized.
I wonder how many use ASICs for mining at public power outlets.
2018 a Year of Noticing Unknown Cryptocurrencies
Because developers are already using git, so why have separate tools for similar use cases?
Comments on this thread say that less memory helps battery life.

Are there motherboards that would allow the OS to power-save memory modules at times, and power them back up at others (perhaps user-configured)? If not, I wonder why..
Cryptocurrency Triangular Arbitrage
The No Good, Terrible Processor Flaw and SQL Server Deployments
Given many countries own 1000's of nuclear weapons why can't N.Korea have few?
Ink/stitch: an Inkscape extension for machine embroidery design
Thanks, I'll take a look tomorrow. For more uCode work, there's http://inertiawar.com/microcode/ which contains some interesting bits.
There are tons of different workflows to create electronic music. You can record sounds (and different instruments) linearly in layers. You can play a single keyboard set up in some clever way that allows you to trigger and control multiple virtual instruments at once (often with the help of arpeggiators or something like KARMA). You can use a looper. You can set up a step sequencer that plays notes in a loop while you manipulate both sounds and melody in some way in real-time. You can set up some gear to procedurally trigger sounds, which is what modular racks are often used for (look up "krell patch"). Or you can do several of these things at once, possibly in a group.
Yes, but then you'd just end up with having a vulnerable application running inside of the VM. The mitigations in the compilers are for making programs compiled by those compilers immune(ish?) to Spectre, not to make it impossible for those programs to use Spectre to attack other processes.
He was 'torched', was he? This is a title more becoming of TMZ than Hacker News.
Because elites basically don't care much about unwashed masses, until some enterprising members of hoi polloi decide they want to be elites too, at which point they become a threat in need of active management.
And now I have to wonder about negligible performance implications.

Does it mean Google applied point-and-shoot type of fixes in several areas, e.g. OS kernel and hypervisor?
Most likely.

Or. The speculative execution did not provide meaningful performance benefits in the first place? At least for Google workloads?
If so - why all this extra complexity?
Works fine for me with JS disabled. In fact it loads even faster...

https://imgur.com/a/Hbyj8
Survey for Python programmers about where you get information about Python
Jeff Sessions to crack down on legalized marijuana, ending Obama-era policy
Perhaps the poor have outlived their utility. What’s next then? A culling?
Boot from a CD, mount the drive, change the password or remove it - if it were linux I'd edit /etc/shadow - obviously easier with another IRIX machine to put the drive into.
I think people have tried, and the only meaningful success has come from approaches that build key management into the mail client and make it transparent. At first blush this seems great, but there are drawbacks that make it not worth that much:

1) For a web-based client, the keypair is stored out of the user's control, so it ends up meaning you're outsourcing trust to a third party, not just that they're trustworthy, but that they'll never experience a breach.

2) For a local client, the keypair isn't backed up anywhere, so if the user switches computers or suffers a hardware failure, the key is gone. These days you can mitigate that issue by integrating a cloud backup feature, but then you're risking that the user is protecting the private key with a weak password (which I'd expect to be common). I expect that most people don't use thick clients these days, outside of corporate use that mandates Exchange/Outlook or something similar.

3) You don't get the benefits of the web of trust. These sorts of users will never go to a key-signing party or anything like that, so one of the stated goals of OpenPGP -- that you can examine that web to feel safe that you're actually communicating with whom you think you are -- just falls away.
Ubiq (YC S17) Is Hiring a Full-Stack Developer in Waterloo, Canada
As a Full Stack Developer at Ubiq, you will be focusing on engineering, implementing, and maintaining core software and technical systems to support the products at Ubiq.

You will be working out of our Kitchener, Canada office. You will be actively involved in engineering and designing the features of the core product following agile methodologies as well as test-driven development.The main focus of the role is to ensure the development of a high quality of the product that meets or exceeds the expectations of our stakeholders.

Challenges Involved:

- Scalability

- High availability

- Heavy emphasis on security

Skills desired:

- Be a well-rounded software developer with experience backed opinions

- Believe strongly in writing testable and maintainable code

- Love to learn and extend their skills

Requirements:

- Web Front End UI/UX Development with React.js, HTML5, CSS3

- Strong web development experience is required

- Strong understanding of fundamental web service technologies including oAuth and REST is highly preferred

- Understanding of relational databases and SQL

- Experience with mobile development is a plus

- Knowledge of real-time communication, networking principles and concepts is a plus

Benefits:- Between 0.1-0.5% equity stake

Please email: team@goubiq.com
I see a few people complaining about oom killing. Allow me to make a case for it. I think oom killing is a very pragmatic solution to deal with low memory. Without overcommit you don't need the oom killer. But just simply disabling overcommit will make your system unusable during low memory situation just as much. Imagine that one job ate all your memory. How do you restore your system? You cannot allocate more memory so you can no longer start up a new shell to kill the bad process. So you are just as stuck with an unusable system. I wrote about this here: https://superuser.com/a/984715

What I really want is to have an always responsive system. You cannot get this easily on linux because it doesn't allow to disable all paging (executable pages are still paged out even with swap disabled). This means you can easily lock up your machine if you use a lot of memory (even without swap -- I don't use swap). The above post contains a 20 line C program example that will break your system that you can only cure by applying the oom killer. I mean what other options do you have you have 0 free memory? Could a kernel hacker reading this add such an option to linux to a poor sysadmin like myself?
Dupe: https://news.ycombinator.com/item?id=16036268
I thought that:

mov rax, [Somekerneladdress]

would trigger an interrupt even on speculative execution as described on https://cyber.wtf/2017/07/28/negative-result-reading-kernel-...

ADDED: So in the interrupt handler the kernel could evict all user space pages from cache before returning control to user space so it could not use the timing attack on the cache of the speculative execution of Mov rbx,[rax+Someusermodeaddress] on the address rax+Someusermodeaddress.
See my answer at https://news.ycombinator.com/item?id=16068510 .
Does someone need to have control of the router to do this? Or how could it work otherwise?
One of the best things about the Dell XPS 9350 is that it has both USB C and USB A connectors.

I still need to carry some dongles to get HDMI and LAN ports... but i don't need those all the time.
Unfortunately x86 paging only distinguishes between ring 0 and ring 3.
This article lacks any context whatsoever. XRP is still up from yesterday. Up 100% since last week. Also Coinbase has not said that it will not add XRP, just that they haven't made any decisions yet.
I grow my own in a state where that’s perfectly legal

It’s great, strong (descended from a heavily curated source that regularly tests in the 25-28% range).

And I have a degree in math and work in IT.

How about instead of fear mongering in general, we build a support network of mental healthcare and treat the specific folks with problems?

This sort of high level “engineering a solution at step 1” smacks of premature optimization.

“Let’s fix all problems humans will have with weed on jan 4, 2018!” with no data to back up the extent of the issues that MIGHT occur in such a dramatic scale we MUST get on this (but won’t because you’re also suggesting a slippery slope fallacy)

I have another option: If you look back in time you can see how our lack of mental health services has exacerbated drug problems.

Hmmm how might we best utilize our energy on this problem then? Hand wavy nonsense from admitted anonymous source, go all in on some abstract plan over imagine future fears?

Or the way professionals in addiction treatment have been advocating for for years, backed by sound data?
I agree with highly technical and ongoing. I'm agnostic about "very expensive." Initially very expensive, sure. But how much of the expensive stuff can be eventually automated and routinized? I'd guess "a lot," since that's my general guess about the future, and in that case the cost would fall a lot as well. If I'm wrong -- and I could be wrong; many predictions of widespread automation have been premature -- then I agree that the costs could remain very high.