skysight-inc/HackerNews huggingface dataset:
To be fair to Tesla, and to history, this was pretty normal at the time. The Supreme Court even endorsed it: in fact, they didn't even just endorse it, it was appatently so important that they ruled in 1927 in Buck vs Bell that sterilization of the unfit did not violated due process (what!?).[1]

It took generations of education, whatever you want to call it, to change our collective minds.

1 - https://en.m.wikipedia.org/wiki/Buck_v._Bell
Hello? Test?
Why is nothing on this damn site showing up?! Same on Reddit... You just post and then nothing happens? Greyed out text and zero explanation? WTF?
So, who thought it was a great idea again to use a mechanism intended for document transfer to run unsigned, unaudited code on just about every client in the world?
Modern consoles now come with web browsers, and the researchers proved that the attacks could be performed via web browsers, did they not?
...at which point that untrusted code gains full access to the only userspace process that matters on that node. If you gain access to run code on a server process why escalate further, you already have access to everything that matters?...

Assuming bare metal. In shared hosting / cloud / VMs it is different.
A friend of mine got a provisional offer from a highly funded UK startup which was then rescinded explicitly on grounds of age. Before I could convince him that this wasn't acceptable they folded. I think we'd all be surprised at the shit that companies that enjoy the smell of their own farts pull.
The current consoles are using AMD/ARM processors, probably they aren't affected that much.

It could be still a problem though, considering many console games use all kinds of hacks to barely run at the target resolution/framerate.
I see the draw for desktop and mobile developers.

Developer is not a synonim for UNIX programming.
[Open-Source] Migrate all your files from GDrive to OneDrive
So is Twitter going to filter fake news on one end and let world leaders spew their crap on the other?

What happens if Donald tweets a nude photo or a member of the Saudi royal family posts a video of a state beheading? Are those going to get deleted?
Given how good Pythonista is, and how much work the developer puts on it (I’m in the beta program and there are very frequent releases, and he’s very active on the forums for the app) is well worth it if you use or like Python (I don’t even write that much Python anymore, and less on iPad, but when I do it’s on Pythonista). Aside from being on the beta (which would mean I’d have a free copy of the app if I hadn’t purchased it) and some tweet exchanges, I have no relationship with the developer.
In case there is a security hole in their Webserver (Apache, Nginx, HAProxy, etc) or their application (Wordpress, etc), that an attack cannot escalate privileges even further. Image someone manages to execute arbitrary PHP code, now they can gain gain root access, read private keys, etc. Things PHP should not have access to.

For spectre, the consequences of not applying those patches are not as bad but it wouldn’t surprise me if you could still do a lot of harm. PHP is somewhat sandboxes these days (by using chroot and what not) and meltdown/spectre could be used to escape the sandbox.
Create, share, localize and track customer facing videos in minutes
I wouldn't be so sure of that. They at least run Javascript through their web browser.
Yet proving that reliability in a fully automated fashion is hard. And it's even harder/more costly when the core problem is reproducibility...
The recent thinkpads have hi-dpi displays, and they're perfectly fine for anything other than intensive colour work.

The touchpads are fine too. I regularly bounce between a macbook and a T460, and I don't have any problems operating the latter.
We know what happens when labour saving machines, such as washing machines, were invented - married women, who used to spend most of the day on housework entered the workforce.
This isn't a great paper (as you can tell by how often the author cites himself).

It isn't really worth responding too - it's either attacking claims which are never made, or so outrageously wrong it appears to be trolling.
Based on the policy on CBP’s site, this significantly narrows the search scope. As CNN’s article excerpted from the policy, an exception doesn’t just require supervisor approval, it also requires reasonable suspicion of a crime or national security, and the more thorough search must be recorded in CBP’s records.
SD cards are optimized for sequential IO (reading/writing photos, video, music). For an OS root partition, random IO is much more important for general use. If the root partition is mounted from an external USB drive with higher random 4K IOPS benchmarks, IO performance should be greatly improved.
Also noticed this with the version of Kubernetes that comes with DfM. hyperkit consumes around 35% CPU while idle, which amounts to around double the idle battery drain on my MBP.
hey GenodeLabs guy

please make a livedisk or usb image like every one else
That doesn't make any sense.

Edit: Serious question, is that rhetoric, platitude, bromide, something else?
Archived copy, which should be viewable without JS:

https://archive.is/v4bQM
With Meltdown / Spectre you can break out of sandboxes as far as I understand.
Ok, sure, but we have to consider whether that is worth it, and if they can run unpriveleged code, there is a good chance there is a software privelege escalation available anyway.

Of course on shared servers this is going to be a nightmare.
Maybe it's something similar to what they do in the ivory tower where they have to show they are looking for candidates in all sorts of different places beside internally to combat cries of nepotism and favoritism? Maybe that's overthinking things?
Your browser should have a 'no style' option tucked away somewhere. Presentation is - according to the original web spec, not the present monstrosity - mostly the job of the client.
Trends-of-sports
The GDP is not invariant to the “Sound of Music” case: a widower marries his children’s governess. Before the wedding, her work was paid, and it counted towards the GDP. After the wedding she puts in the same work, or more, and her implicit pay is probably higher, but she is completely invisible to the GDP.

Similarly, when a company aqcuires a supplier, the flow of products and cash between them stops counting towards the GDP. Conversely, if Target creates a real estate company and starts paying rent to it (Bill Ackman’s idea when he was Target’s largest shareholder), a few billion dollars would show up in the GDP from nowhere.

The GDP is an accident of the granularity of the economy. All things being equal, a more vertically integrated economy will have a lower GDP than a more granular one.
I am busy growing some in a pot, for that very reason.

/me wonders if it died in the forty-degree heat today
couldn't they just use a myriad of other priveledge escalation bugs?

there have been ~4600 privledge escalation bugs found since 1999. 250 a year. Almost one every day.

https://www.cvedetails.com/vulnerabilities-by-types.php

At this point we still won't have security and now we won't have performance either.

It's putting the cart before the horse.
I don't think you need to out-complete these systems in processing speed. Even if you can only do 10 documents/hour, that probably can be scaled to handle a few million. Where you need to out-complete cTakes & co (on a large margin) is information extraction quality (to have a viable commercial product). And that is very difficult...
Seriously, Lead Pb. [0]

[0] - http://www.motherjones.com/environment/2016/02/lead-exposure...
I’d encourage anyway seeing super huge hits to make sure they are not using paravirt (particularly on Amazon). As that needs mitigation the the virt level the impact seems very large.
I'm not sure about the PS4 and XBone but the Switch uses the Tegra X1, which has 8 ARM cores (4 Cortex-A53 cores, 4 Cortex-A57 cores), 4 of which (the Cortex-A57 cores) are vulnerable.

https://en.wikipedia.org/wiki/Tegra#Tegra_X1

https://developer.arm.com/support/security-update
There is something ironic about stealing a philosophy book!
What console of the current generation comes with an Intel CPU?

And in any case the Meltdown patch is not too bad for games.
Ha! And of course Jeff and Joel eventually worked together to create StackOverflow...
If that is the case the PM and junior Dev should be banished from the industry
Pretty much what I predicted here: https://news.ycombinator.com/item?id=16054674

> Sounds like servers handling lots of small UDP packets would be hit pretty hard.
Heh, that's cool. How do you remember which ones you've modified so you don't do it twice?
Cisco is going to release security patches for #Meltdown and #Spectre attacks
>We wanted to provide a bit more context for the most recent login issues and service instability. All of our cloud services are affected by updates required to mitigate the Meltdown vulnerability. We heavily rely on cloud services to run our back-end and we may experience further service issues due to ongoing updates.

So they are saying "you can't log in because we're too cheap to rent more servers now that this patch has increased CPU usage"
The lost blog post about “World Leaders on Twitter”
I attended a Hypertext conference ~14 years ago, where he was a keynote speaker. Very friendly and soft spoken man. From the his keynote, I got the distinct impression that he was disappointed and a little saddened that we had not progressed further than we have. His vision of augmenting the human intellect through the use of computers was a bold and beautiful one, but instead we are barraged by click-bait, fake news, trolls, and social networking sites carefully engineered to keep us hooked.
I am not a maintainer but do work on LinuxKit which is used. If docker-sync helps, then that suggests that you have an issue specifically related to file sharing. Please file a new issue, do not add to this one, which explains how to reproduce your development setup. Different setups work very differently (eg polling vs notifications), and people use things very differently, there is no one set of tooling and setup that is "web development", but it sounds like in your company you all use similar tools and setup, so it is not surprising you all have the same issue. We have a performance guide here https://docs.docker.com/docker-for-mac/osxfs/ that covers some use cases.
Resolving scalability issues is not as simple as "rent more servers".
The two knowledge base articles linked are also interesting:

Speculative Execution Exploit Performance Impacts - Describing the performance impacts to security patches for CVE-2017-5754 CVE-2017-5753 and CVE-2017-5715

https://access.redhat.com/articles/3307751

Controlling the Performance Impact of Microcode and Security Patches for CVE-2017-5754 CVE-2017-5715 and CVE-2017-5753 using Red Hat Enterprise Linux Tunables

https://access.redhat.com/articles/3311301
yeah sure, i wonder though if interest is a necessary feature of credit.

the interest is charged to cover the demand, the risk, and inflation. with government, the risk is low. inflation is by and large the government's alternative to borrowing. and demand i guess is mostly when the borrower needs the credit more than the lender needs to park the cash.

but in the case of government, I guess the demand is weighted against the lender.
> "couldn't they just use a myriad of other priveledge escalation bugs?"

The idea is to patch all known privilege escalation bugs.

It's rare for an attacker to rely on a single attack vector. They may get to the point where they only have limited access to running code, and want to break out of that sandbox. Spectre/Meltdown may be the route they take to do so.
For a CPU-bound problem it mostly is as simple as that, yes
Yep I've lived around Vietnamese 24/7 for extended periods of time. I know exactly what and how much they eat.
Nice that I see this article just while I'm working on a theme for Hugo.
I like TOML and YAML for their simple approaches.
You'll usually need some kind of structure, though.
You can see all the references listed here with hyperlinks: https://link.springer.com/chapter/10.1007/978-3-642-31485-8_...
And sometimes pointing out a factual error is just that. You are now the one bringing politics into the discussion. You are making it worse.
Tesla had many great ideas, but was lazy and had a bad habit of disappearing off down on a tangent that his investors had not been told about, and had not agreed to invest in.

I recommend this book (https://www.goodreads.com/book/show/494.Wizard) to anyone who wants to know the full story.
Intel's L3 cache is inclusive. Spectre most definitely also applies across different cores.
Genode on seL4 – Building a simple root task from scratch
I understand what you’re trying to say, but what's the alternative? Stop using computers? Once Meltdown and Spectre are out of the picture, there will be another crisis. That’ll happen forever, I think.

Honestly, the older I get, the more sick of IT I become, but what can we do about this?

Im in the market for a NAS right now, so this is perfect timing. I’m more willing to trust FreeNAS than MyCloud but as soon as I write that, I remember lots of Open Source is crap too.
Each "bit" in SRAM is bigger than each "bit" in DRAM. Typical SRAM uses six transistors for each "bit", while typical DRAM uses one transistor and one capacitor. Bigger chips means less chips per wafer, and a larger chance for a chip to have a manufacturing defect.
Err, what? You can't get root access or escape a chroot from being able to read arbitrary memory.
Meanwhile, the Mill CPU is just laughing in the background going, "You ready for me yet?"
To be fair the problem is not related to web browsers. It's more about running code in general.

I start to realize that running someone else's code means trusting the developer. No matter the amount of sandboxing and the layers of abstraction, eventually his code will be able to run as root using exploits that are yet to be discovered.
My Yoga 2 Pro has hidpi display and better touchpad than MBP's.

Yoga 900's touchpad is way worse though, so if you really care, always check if you can try it first.
This is a great point. Probably someone will argue properly configured apache will not have access to data ... etc. I think the practical reality is in many setups it already does, and what these hardware bugs mean is that the lazy imperfect - effectively single layer - security that probably exists on the majority of servers is now essentially equivalent to the security of systems where the security minded have been incredibly diligent (and at considerable cost) ensuring multi layer security ... etc. So in some sense it is an attack on their value system and their worth/usefulness.
Next patch: we enhanced your security by disabling execution of JavaScript from untrusted domains. In unrelated news, we now block ads!
Selecting text on an iPad is a breeze if you use what Apple calls trackpad mode. Resting two fingers on the Keyboard lets you slide around the cursor. A double tap selects the current word. Resting your fingers before moving initiates a selection mode instead of moving the cursor.

Multi-document work is a pain though. Simple school tasks such as reading a paper, taking notes and creating a short essay or presentation from your notes is not a great experience on an iPad.
In fact, born in the territories that are currently inside of the borders of the country now called Croatia which at that time didn’t exist as the independent country, especially not there. As far as I understand, he was born in the “Military Frontier” lands of Austro-Hungarian monarchy (Wikipedia: “Born	10 July 1856
Smiljan, Austrian Empire”), and went to Polytechnic school in Graz, today Austria:

https://teslauniverse.com/nikola-tesla/timeline/1875-tesla-a...

Present Croatia exists for less than 30 years, it’s important not being anachronistic in historical statements. At the time Tesla was born his birthplace was not even administratively “Croatia”:

“By the Basic Law of the Frontier from 1850, the administration of Military Frontier was split and the land started to look like a state. The Main Command had its headquarters in Zagreb, but remained directly subordinate to the Ministry of War in Vienna.”

https://en.m.wikipedia.org/wiki/Military_Frontier
Most academics cite their own work... That’s not a quality marker, it’s the norm.

Care to give more info on your second paragraph?
Cast iron frame!
> "What console of the current generation comes with an Intel CPU?"

The Switch appears to be based on ARM cores that are vulnerable.
A far cry from jekyll
I think that type of answer from him is worse than explaining the possibility of the shielding breaking or leaking from the accident which could harm people who aren't even involved in the accident. That's a scary prospect which probably goes far enough to invalidate nuclear cars all together, I'd imagine.
My son decided to hand his laptop to his brother a few months back and try and run his entire music business using just an iPad Pro. It works, up to a point, but there are just so many niggly issues compared to just using a laptop.

Simply things like a booking agency sending him a PDF contract to sign becomes a saga of jumping between multiple apps, importing and exporting etc. in order to get it done and sent back. Sending sound clips to his customers is also surprisingly difficult, as there is no easy integration between services like SoundCloud and DropBox, and even with the new 'Files' app, it is difficult to manage more than a few files in a complicated folder structure and send them on to others easily.

He also found it a challenge to make simple posters etc. for his upcoming shows and send them to printers or even to Facebook. Supposedly simple acts like adding readable text to a photo background was a challenge, and he ended up going through about 6 different apps before he found one that worked the way he wanted to.

Add to that the fact that his iPad Pro pen started to fail after a couple of months, and I think he has regrets going down this path.
You would find it very hard, if not impossible, to run an ICE car at 40% efficient for normal driving. The same can not be said for a coal plant. So if the coal plant averages 35% and the ICE car averages 25%, that leaves some room for a coal-driven electric car to be more efficient. The conversion from grid power to mechanical power only needs to be over 70% efficient. If anything, that sounds easy to beat. Any counters?
MGTOW https://en.wikipedia.org/wiki/Men_Going_Their_Own_Way
Run shell scripts on your remote servers via HTTP(s) endpoints
> artificial neurons

Differentiable functions
Belt and suspenders.

In principle you don't need to protect against spectre and meltdown if you can ensure that no untrusted code runs on a particular machine. How do you ensure that though? There are many many routes for that to happen, and it only has to happen once for it to completely invalidate your security model if you have no other levels of protection.

On a server you can run untrusted code by exploiting other vulnerabilities in server software such as buffer overruns. It's unrealistic to expect that all servers will have no such vulnerabilities in any of their software at any time. That's why operating systems implement many layers of protections to prevent those exploits from being elevated into even worse breaches that could leak sensitive data, provide local root access, and so on. One of the more significant protections that exists today is address space layout randomization, which makes it much more difficult for a buffer overflow exploit to result in immediate privilege escalation.

Meltdown/spectre make these sorts of issues much, much worse. They mean that absolute any vulnerability in any service could be exploited to read the entire contents of memory and deliver that to an attacker, including encryption keys, including passwords, and so forth. That's bad. You can essentially 100% guarantee that there will be some vulnerability in some service which enables a minor exploit, and you want to avoid having that minor issue become catastrophic through meltdown/spectre based attacks.
How does geopolitical location make hardware and software secure? Hint: it does not. It is clear there is demand at some level for secure computation and patching current hardware and software is not going to get the job done. Certification and labels imply we know how to do something we'll enough to say this is the right way. It is clear that we do not, so certification of hardware is most likely to just ensure every chip has the same exact problems.
How to GET FREE UMLIMITED YOUTUBE SUBSCRIBER FASTLYHACK YOUTUBE
There are a few aspects in which society continues to expect synchronicity. For instance, on average, more people wish to be awake when the sun is up, and asleep in the middle of the night, than vice versa. People expect to be able to reach services on the phone, or occasionally go to a shop in person. And, some services can only be provided in-person with both the service provider and customer present.

But yes, many things can and should be done in a far more staggered fashion.
The fact that they are required to allow owners access is what I hope the lawsuit would address.
Building Languages for Deep Learning
Your smartphone is making you stupid, antisocial and unhealthy
Yes you can? If password login is enabled, you could wait until someone SSHs in and read their decrypted password. You could read all kinds of secrets which will be very useful for gaining privileged information. Sure you can’t just become root but it is one way to get there.

For my server, the attacker could probably read mosh‘s secret key which is used to authenticate mosh clients. Mosh is a “mobile shell” which allows is resistent toward network changes (including IP changes), is low bandwidth and extremely quick on Eadge connection.

An attacker can probably come up with many solutions where reading arbitary memory can be used to gain root access. Granted the low bandwidth aspect of this attack might make it difficult but far from impossible.
If, as you say, AMD is not affected by Meltdown unlike Intel, will this significantly change the server market? Excuse the pun, but would this make e.g. AMD EPYC a lot more attractive for such data centers?
Will this aid homebrew communities in their efforts to run unsigned code on the PS4, xbone, Switch et al?
Half-OT: Is it possible to run Xcode CLI tools from inside Docker for Mac?
You don't need anything special to escape a chroot, it's never been intended as a security feature.
The Merge
So I was reading Sam Altman's blog on merging humans and computers ---http://blog.samaltman.com/the-merge and he seems to really believe that this is going to become a reality within our lifetime. I am highly doubtful ... is there any particular reason to believe that we are this close to merging humans and technology and even be able to dramatically enhance traits like intelligence and other non-tangibles ? Discuss
You can get higher resolution displays on other laptops. As for the trackpad most are pretty good now days, although apple is probably still in first place.
To add to that, California was still force sterilizing people as recently as the 1960s.
Genode – The microkernel approach (2008)
Spectre attack relies on microarchitectural leaks of branch prediction statistics, which (according to my understanding) is not shared between cores in multi-core CPU.

If privileged system code never runs on the same physical core(s) as user code, and so we leave out branch prediction leaks, we are dealing only with cache timing leaks via L3 cache (Meltdown attack). But in the data segment of pure microkernel (which only does IPC and task switching) there's not much to hunt for.
The replies are missing something from the original article.

They are running on the cloud, and Meltdown / spectre means that exploits can escape a VM. This means you don't just need to trust your VM, but also any VMs you are sharing the hardware with.