skysight-inc/HackerNews huggingface dataset:
> 2) there is no such thing as "exposition carefully publicized so the flaw is not exploitable by malicious hackers". Just assume that black hats are as smart as white hats or smarter.

You're missing the point. Not doubting the smartness of black hats, white hats likely took their time to discover the flaw. If you make the details public in a controlled manner and then announce the fixes shortly after, you essentially did not give black hats enough time to fill the missing pieces of the public announcement.

For instance, in the extreme case, the statement "we have discovered a flaw at the hardware/CPU level in such and such chips, and we call it meltdown and spectre", it's pretty obvious the black hats would have no clue what it is. (They may have already discovered it on their own, and may have named the flaws something completely different. Even then they wouldn't know if white-hats discovered what they discovered.)
> My lack of words or explanation for this

I wouldn't feel bad about this at all. I'm comfortable that there are many very important things that can be understood but cannot be conveyed to others using language. You can tell someone the capital of France, but not what it was like when your child was born, maybe because one is a concept and the other is an experience. I've had a lot of indescribable but very valuable experiences too (LSD).
Any way to apply without registering on Dice?
I had Gentoo running on an old PPC (old grey Mac) back around 2010 and it booted in just a minute or two.

If you watch the video, it gets past the kernel boot stage in under a minute. OpenRC seems to be stalling for a bit on calculating/caching dependencies. That really shouldn't take that long. I wonder how many services he has enabled or if there's some regression introduced there.

Then it takes forever to mount certain things like shared memory, cgroups, SELinux, etc.

Granted I didn't have cgroups, SELinux or most of this stuff back when I ran Gentoo on that PPC. I kinda wish my dad hadn't thrown it out. I wonder what it would be like to put modern Gentoo on it. I wonder if I'd get similar slowdown.

If you tweeked this init system, or ran a more embedded distribution, the boot time would only be about a minute.
Having implemented this for a client in the past I have to agree that it is a cheaper option than ElasticSearch, especially for smaller projects with a lower number of records to index.

ElastiSearch easily gets expensive and the search suggestion is pretty bad.
Absolutely.

- Using a `SearchVectorField` is a must after 500K rows.

- Make keeping this field up to date easy for yourself by populating it using `SeachVector` with a Django pre_save signal or PostgreSQL trigger. This reduces CPU utilization significantly as the parsing and tokenization of the field your searching on is done a head of time.

- Adding a GIN Index on your `SearchVectorField` column will improve performance dramatically.

- You should specify your language configuration for postgres FTS parser. The default parser doesn't do much. It just removes spaces and normalize case. Specifying a language lets the parser make heavier optimizations that noticeably improve performance and the quality of results. If you need support for more then one langue, Django already makes it easy for this configuration to be dynamic.
Please don't take HN threads on generic tangents.

Unexpected tangents can be excellent, but generic ones are predictable, and the predictable is the enemy of the curious.

https://news.ycombinator.com/newsguidelines.html
Comments like yours add nothing to the discussion. Please refrain.
Morrison and Boyd, Organic chemistry

Guidurati, Econometrics

Samuelson, Economics
I'd imagine the appeal is the interaction with our gut biome, which is not only turning out to be one of the most important biomes in our body - but also one of the most poorly understood. We evolved on many things that we now consider unhealthy, which would include running freshwater as a drinking source. And while our life expectancy has increased (though in the US, it is now in decline) that's largely been an issue of reductions in childhood mortality. Ancient Greeks had next to no clue about medicine, relative to what we have today, yet oddly enough many lived comparably long as we do today. Socrates died at 71 by execution. Plato 80, Pythagorus 75, Hippocrates 90, Eratosthenes 82, etc. There's not much survivorship bias there. These individuals made their legacies decades earlier. Aristotle, would be the exception on longevity, having died at a 'young' 62, though we are certainly still familiar with him! Imagine we took our medicine (but not our cultural values) to Ancient Greece. What would their life expectancies have become?
We applies it to the bare metal DB servers for my.zerotier.com and there is definitely a detectable increase in IO cost. Reducing syscall overhead is going to become even more important.
Yes. This is why webbrowsers are releasing mitigations such as reducing timer precision and disabling the shared buffer api.
Angular CLI: A command line interface for Angular
Are there any studies on psilocybin mushrooms on schizophrenia-spectrum people?
I'd recommend trying to cross-compile the binaries on another machine to save your sanity.

I built an LFS back around 2002 when I was in University and used it for over a semester and a half. It made me appreciate package management. :-P

I use Gentoo myself these days, which is pretty much LFS + package management.
On the other hand, by most measures, pollution in the US hit a low in the 60's and has greatly improved since then. It's even improved quite a bit since 1990 [1]. Even CO2 emissions are on the decline since 2008. (Not nearly enough, but still.)

In the Eastern US the low point for forest cover was in 1872 [2]. In the western US a major problem is too much ground cover resulting in worse forest fires. (Which is not to say that forests are healthy - the pine beetle epidemic is devastating.)

I'm not going to say things are great, but whether they're better or worse depends on where you look and what you compare against.

[1]
https://gispub.epa.gov/air/trendsreport/2017/#air_pollution

[2] https://en.m.wikipedia.org/wiki/Deforestation_in_the_United_...
I second this. You can't let your queries take unusable amounts of time, but below a certain threshold relevancy is infinitely more important.

I'm putting together a product which has a search feature and that uses Django + MySQL and I'm struggling with relevancy. I'd happily accept 500ms queries if that guaranteed me the relevant hit would be on the first page. That's FAR more usable than 50ms queries and then the relevant hit is on page 5.
I once drank lake water in Iceland during winter. The only reason I could be convinced to do so was because it was Iceland during the winter. It was absolutely fantastic. Easily the best tasting water I've had by an order of magnitude.
Thanks for the report, I'm going to check this issue.

Can I ask which browser are you using ?
Yet with a Docker Swarm setup, you could get away with probably 10 dollars/month. K8s likely taking more resources than your app containers is why k8s may not be the best option for single node deployments.

I've personally tried both orchestration options and much prefer Swarm to smaller deployments. Sure k8s could prepare you better for the future if your app takes off to the moon but that's just premature optimization.
So you use python instead of sh, but you argue that we should use sh instead of bash, perl, or python. I'm not convinced.

IMHO, we should use proper tool for the job instead of making artificial limitations. Bash is proper tool in lot of cases, unless old proprietary OS or very limited embedded OS are targeted.
The author mentions the substitution !:1-$ to insert all the arguments from the last command (like !$ substitutes the last argument and !! the full command). Note that !* does exactly the same thing, which is a bit easier to type/remember.
Are you sure? I would be extremely surprised if it wouldn't use UDP.

For things like getting stats, probably from a HTTP endpoint, sure, but for gameplay? The lag would be very bad, no? Lose a packet and everything is slowed down

I see this, which indicates it uses UDP:
https://imgur.com/al6KTwT

and according to wireshark it's used heavily when in a game, so I assume that's the gameplay protocol. Also when I left my game (but stayed in the lobby), immediately the port 61879 stopped listening.

I'm not sure about UE4, but previous versions of the unreal engine used UDP for replication and RPC.
I confide Evian's bottlers are very assiduous about ensuring their products contain few or no potentially pathogenic microorganisms. Of Silicon Valley randos I'm not so sure.

Perhaps I do them a disservice. It would be very interesting, either way, to see what a pathology lab might find to culture from a bottle of their finest.
> In my opinion, a mathematician does not know what the difference between "being literally" and "being encoded as" is

Wrong. The real numbers are literally a Dedekind-complete ordered field. The real numbers are encoded as Cauchy sequences, or as Dedekind cuts. Cauchy sequences are not Dedekind cuts: The former are equivalence classes of sequences. The latter are downward-closed sets without a greatest element. They are literally different objects.

Regarding your electron comment, the answer is straightforward: the electron is an excitation of the electron spinor field, nothing more. Fields are more fundamental than particles.
Thanks for the report. I'm happy it works well on mobile.
This looks really interesting! What’s the primary use case for this? I read the README and didn’t see any discussion about why this was made.
Yes. Some friends of mine once configured a 486 with 64 megs as a sort of practical joke, or cool thing to do. They temporarily cannibalised the other PCs at the school for memory SIMMs.
I've run 2 Mesos stacks in production and have experience setting up a k8s stack (on prem). First off in my experience k8s ops is way more complex that the DC/OS stack. I recently setup a new DC/OS deployment (80% of the cluster resources was Spark, which works natively with Mesos and I'd rather run the ancillary services on Marathon, then spend another 80% of my time on k8s). If I didn't have the Spark requirement I would have went k8s.

Despite going with mesos I really had to contend with the fact that k8s just has way, way more developer support - there are so many rich applications in the k8s sphere. Meanwhile I can probably name all the well supported Mesos frameworks offhand. Next, marathon "feels" dead. They recently killed their UI interface as I imagine that they are having trouble giving resources to marathon. 3 years ago I wanted a reverse proxy solution that integrated with mesos as well as non-mesos services so I hacked Caddy to make that work [1]. 3 years later, I was looking for a similar solution and found traefik. It claimed to work with mesos/marathon, but the marathon integration was broken and the mesos integration required polling even though mesos had an events API, so I hacked traefik to make that work [2]. On the other side of the fence, you have companies like Buoyant who rewrote a core piece of their tech (Linkerd) just to support K8s (and only K8s). This has a compounding effect, where over the years things will just become more reliant on assuming you are running k8s.

That "cost" you pay to setup Mesos/k8s is usually a one time cost on the order of a month. I feel however, that k8s is going to give you a better ROI (Unless, you are managing 100s of nodes with Spark/YARN/HDFS, then Mesos continues to be the clear winner).

[1] https://github.com/mholt/caddy/pull/40
[1] https://github.com/containous/traefik/pull/2617
From what I can tell, Amazon isn’t giving people deep technical information. They’ll just send you an email telling you which instances are being forced to restart and when.
This is with latest Firefox (59) – it gives me a horizontal scrollbar, so I can also scroll to the left, then part of the content is cut off on the right instead.
I don't know why not?

At the least, rather than Bash, you might consider Perl as a default, lowest common denominator for scripts that need to run anywhere.

- It's nearly as ubiquitous as bash.

- It has approximately the same kinds of file/path operations built in.

- It has reasonably good support for strings/regexes/etc. all built-in, so you don't have to call out to tools like sed/awk/grep all the time and hope that they are available and compatible across your target platforms.

- It provides reasonably good arrays and hashes, which are horribly horrible in bash.[1]

- You can use syscalls very easily if you really need to, but usually you don't.

[1] Of course, no language can save you from the file system disaster (https://www.dwheeler.com/essays/fixing-unix-linux-filenames....), but being able to know that "foo bar" is a string instead of two array elements is a good start.

Mostly this all applies to Ruby or Python too, modulo perhaps the degree of ubiquity.
The language of the post is incredibly incendiary -- they sound no different than some of the extremists / terrorists talking about their enemies.

At the end of the day, we are all humans and the chip designers screwed up in a big way. But this issue is so complex and obscure that it's been unknown for 20+ years.
I really wonder why the author didn't just leave off the first two, and call it "Eight Things I...". Starting off with "backslash escapes can be confusing" and "/* doesn't just match things consisting of 0 or more slashes!" makes no sense if you're later going to skip over !! because it's "obvious".
The microcode updates that people have been mentioning are not updates to your motherboard's firmware, EFI or otherwise. They are updates to the code that runs inside your central processor chip, the so-called microcode, that does the work of understanding and enacting processor instructions (in all programs, from the programs in your firmware to the programs that you download and run from the WWW).

Firmware updates are largely irrelevant to this issue, only being involved in the sense that one way to perform microcode updates is for your machine's firmware to upload the new microcode image file. But that is just one way for that to be done; your operating system can do it, too.

* http://inertiawar.com/microcode/

* https://news.ycombinator.com/item?id=16081366

* https://newsroom.intel.com/wp-content/uploads/sites/11/2018/... (https://news.ycombinator.com/item?id=16079910)
Yes, you would write non-trivial install scripts in ruby.

https://en.m.wikipedia.org/wiki/Chef_(software)
The tls certificate expired in 2015, not a good sign the project is active
Wow! This is batshit. Silicon Valley reminds me of a medieval court with its retarded and pompous fashions.

If you want to waste money on stupid shit I made a Bitcoin address just now:
1Fn4rH1SvshzWDxCjCMkzNoAfgfqRgTVX1

The proceeds will be used to buy alcohol for the homeless locally and if I get enough I will fly to San Francisco to do it there. I'll keep whatever is left after I get bored of the process. It's really cold up north right now so proof will be posted once it gets warmer as a reply to to this comment with a link.
This! I wonder if people say it because it is what they heard or from actual experience? I found K8s far easier but seen people say otherwise and suspect there is a bit of an echochamber happening.
It also consumes lots of CPU to scan memory this way, so just be on the lookout for webpages consuming lots of unexpected CPU.
cognitive behavioral therapy (cbt) is also what is prescribed, isn't it, with regular light cardiovascular exercise and mindfulness meditation
Happy to help if you want to shoot me an email (mine is in my profile)
Relevance? You appeared to be in favor of "synchronicity"? I'm against it, because for me it meant going grocery shopping on my lunch break, which was inconvenient. I expect most humans would also find that inconvenient.
Thanks for your report, which browser are you using to take the screenshot ?

I used the default markdown plugin to generate paragraph markers and I found convenient to link directly to a paragraph.
The topics look like they give a good overview on Biology. I don't know how in depth they all go but the few I looked at seemed kind of shallow. I wouldn't expect to get a deep understanding of any of the topics from what I looked through but it looks like a decent introduction to biology or a good refresher for people who know these topics. I think it would probably be most useful as a study aid for someone currently doing general biology at a college or university.
Thank you that was the issue.
Same here. I still have my Slackware 3.5 CDs. 4 Disc set!

(Edit: mine was just a 486/DX66 though. After that I got a PII-333Mhz).
Year in Review: 2017 Highlights from Uber Open Source
>So you use python instead of sh

That's not what I said

>we should use proper tool for the job

This is the implication of what I said.

I do not think that bash is the proper tool in most cases.
Show HN: The most price manipulated cryptocurrencies live on Binance
And their support it pretty lame in most mobile devices.

It might be supported, but fast is it not.

My Asus, LG, Nokia and Samsung devices don't have any hiccups with OpenGL ES 3.x games, however most WebGL demos are janky on them.
> Actually, there is not any measurable difference.

That doesn't strike you as a little odd?
The tricky part with hydrogen is the containment. You either need cryogenically cooled tanks to get it to a liquid state, or metal hydrides to store it chemically. Both have fairly poor energy density (by volume and mass). What's more, the fuels cells aren't cheap either, and some of the more efficient ones operate at very high temperatures.

For all it's faults hydrocarbon fuels are really good at storing energy that's easily extractable.
Any suggestions for a dynamically grow-able/shrinkable system of mixed drives for linux? When I last looked (and why I went with Storage Spaces) was that ZFS requires pools to be fixed at initialization, and I wasn't sure what other OSS solutions were mature at the time.
Care to elaborate?

As I can't salt the hashes the attacker can precompute all the passwords he wants to try. If that takes 1 minute, it will take 1 minute for a database with 1 billion passwords and 1 minute for a database with 2 passwords.
does he do cbt? does he do regular light cardiovascular exercise? does he do mindfulness mediation? all of this has proven effectiveness. sure, try ketamin, but also try the stuff that's known to work
Would you please stop posting uncivil and/or unsubstantive comments to HN? You've done this a fair bit, and it violates the spirit of this site, as described at https://news.ycombinator.com/newsguidelines.html and https://news.ycombinator.com/newswelcome.html.

Your comment would be fine with just the first sentence.
It seems like battery swapping would be a viable alternative here. The packs are only ~17kWh
At some point weren’t they also trying to argue that an international airport constituted an extended border for these purposes?
I used Elastic in past project as I reported in my article, but I never used relevance, can you add a link to the elastic official documentation about it ?
Dissenting Statement of Commissioner Mignon L. Clyburn RE: Net Neutrality
And I add they will have legal issues in multiple countries, each with their own rules.
> The only trouble is that said laptop only has infrared for I/O (not even floppy)

Doesn't it have a serial or parallel port?
While it is true that most employment is “at-will” (which means that both sides voluntarily choose to employ/be employed) for both sides, in a friendly employee state like California, there are numerous wage claims and employment law suits that come with doing business. It’s not as easy to fire in some states.
I would actually just recommend diving into THREE.js.

It's truly one of the best documented and most "obvious" codebases out there. If all you've got is a solid understanding of JS, you can just start hacking up something nontrivial on THREE.js and you'll come out of it knowing most of WebGL.

And in doing so you'll eventually realize that even WebGL itself is quite "high level" -- there is a _huge_ amount of abstraction that you take for granted in the browser.
For deep learning and ML practitioners who are unfamiliar with this, the big deal about memristors is that they have memory and therefore produce different readout outputs for different input sequences over time -- out-of-the-box, without requiring any training.

These researchers took a network of memristors, called the "reservoir," added a linear layer with a SoftMax on top of the reservoir, trained this hybrid network on a lower-resolution variant of MNIST (feeding pixel values over time, as varying voltages), and achieved classification accuracy superior to a tiny neural net despite having only 1/90th the number of neurons.[1]

Note that they only trained the added layer; they did NOT have to train the reservoir. Figure (a) in this image has a simplified diagram of the reservoir + added layer architecture: https://www.nature.com/articles/s41467-017-02337-y/figures/1 -- only the matrix Θ had to be learned.

The potential here, over time, is for having highly scalable hardware components that can be plugged into neural net architectures as and where needed for learning to recognize and work with sequences out of the box.

PS. For clarity's sake, I'm ignoring a lot of important details and playing fast and loose with language. If you're really curious about this, I highly recommend you read at least the abstract and introduction of the Nature paper, which is well-written and straightforward to follow.

[1] https://news.engin.umich.edu/2017/12/new-quick-learning-neur...
watch nfl live streams here goo.gl/KaDwGa
Are you sure about your statement on turbos reducing efficiency? Some of the most economical consumer engines are turbocharged--in fact auto makers commonly cite mpgs as a reason to use turbos; so I am confused.
Disagree. Do not find using K8s any more complicated and believe it being more complicated is a myth that just gets repeated over and over to be believed it is true and not based on actual experience.

It just sounds accurate to say it is like trying to be like Google. Well if it is but less complicated then there is no down side.
I'd argue that relevancy is more your application application's design then the underlying system retrieving the results. For example, putting the same dataset in Postgres or ES wouldn't make one deliver more relevant results given equal configurations.

You could lean on the relevancy strategies built in to ES, but in my experience you're better off understanding what relevancy means for your dataset and implementing a strategy yourself. Your millage may vary though, I'd never advocate reimplenting something that's already provided by your chosen tool.

The options and tools for configuring and tweaking relevancy between ES and PostgreSQL's FTS are surprisingly similar for many application use cases. If you're interested you can check out Postgres' search rank and query weighting configurations.
The canvas in Figma (https://www.figma.com/) uses WebGL. We wrote about it here: https://blog.figma.com/building-a-professional-design-tool-o...
> If open source folks can write an OS without much funding, then they can design a CPU

Large open source projects tend to have significant amount of funding - think about Chrome, OpenJDK, the Linux Kernel...
have you tried dist-upgrade?
man man
man less

Not a joke. Learn the simple tools that help you daily.
If foo has a Texinfo manual (GNU tools like bash usually do) then you can try `info foo` and search the index with i or I for -p. Texinfo manuals also have hyperlinks you can press enter on.

info is a greatly underused system and I'd recommend any *nix users to spend some time learning how to navigate it.
Keeping JavaScript from constructing high-precision timers is going to be a cat and mouse game.

See the "Fantastic Timers" paper. Link to HN discussion: https://news.ycombinator.com/item?id=16080235