skysight-inc/HackerNews huggingface dataset:
The victim code doesn't need to have some explicit pointer arithmetic, it just has to have some sequence of bytes, somewhere in its address space (the "gadget"), that can be used to read a memory address based on a value stored in a register that can be affected by input supplied from the hostile process. The branch prediction is used to speculatively execute that code. The "Example Implementation on Windows" section in the Spectre paper goes into more detail about this.
I think he has heard of it. He's making a case for how things should be not how things are. And his point is consistent with Socrates, who chose to live in compliance with the law even though it meant his death; and with Lincoln, who famously said "The best way to get a bad law repealed is to enforce it strictly." Not bad company.
And when is it going to be on https://ourincrediblejourney.tumblr.com/
Slavery was not against federal law when that happened. It only happened much later toward the end of the war with the 13th amendement.
Intel is going to release a microcode update for BTB control apparently.
Microsoft’s Cortana isn’t able to identify songs anymore
I found the Obama video at the end very interesting. It would be a neat next step to map non-Obama audio to the generated video. For example, pull audio from an Obama impersonator.
I agree regarding enforcement of every law, but I would also point out that the federal drug laws — like other laws still on the books which are not enforced — are unconstitutional, and thus that he has a responsibility given his oath of office to refrain from enforcing them.
As subscriber you can get a link to share an article, and the posted link is one of those. Also, subscriber-only content is made public after 7 days.
What is a use case for minting tokens and one for not minting?

I've seen this referenced a few times before but I don't understand why minting tokens is bad.

Also, isn't creating a random key as a token the same as minting one? or what is the correct context here for "minting tokens"?

Thanks!
maybe so (they fooled me) but you were already prepped to scrutinize them. To the point others have made, we’ll soon need to be constantly prepared to assume fakery.

the technology of fakery is rising the meet the “everything is fake news” moment
Unfortunately the loudest in this country are definitely not for small government. If it wasn't for the crooked party system, we might have a President right now that wants the government to take everything and make every decision for you. Those Trudeau wrong think laws are making their way into New York, it's just a matter of time.
Sounds like it's time for me to give up on the so-called "modern web" and install noscript.
The fist portion of parent's post is perhaps controversial, but it's not necessarily mistaken. The scope of the executive's power to purposefully under-enforce laws is a bit of a constitutional conundrum. Even among the cases on this topic that have made it to SCOTUS, the opinions were pretty well split and no clear doctrines were handed down. Also, most historical examples of this use of executive power were not tested by the judiciary. So, the issue is murky at best.

The second portion of the parent's post is categorically not mistaken. If you've ever lived in a deep red state, you know that AGs are more than willing to spend millions of taxpayer dollars on a hope and a prayer to try and defend blatantly incorrect legal theories. Just because there's no hope of winning a court case doesn't mean that state AGs won't waste millions trying.
How bad are the visa issues surrounding hiring of internationals who do Phd in the UK?

Do you have any idea if smaller companies and govt research labs sponsor?
Private Search Engines, like DuckDuckGo see huge growth
Pleased to see a growing set of links at the bottom for the relevant information for different OSes, etc...

However, somewhat surprised that Ubuntu isn't present - done a fair bit of searching today and have only found that the patches are in progress, which I'm a bit surprised about given the disclosure timeline that appears to be in place, and that SuSE and Red Hat seem to have patches in place and ready to go?

* EDIT * - since posting this, there is now an Ubuntu link present, and an explanation that they were expecting disclosure on Jan 9th.
This is harder than it seems, because once cache is deleted you can't just un-delete it, you'd have to go back to memory and pull it again.

Only the "extra copy of processor state" thing is really viable. You have to have a speculative cache and buffer in reads that only get flushed to the main cache once they're confirmed to be valid, which is enormously complicated. This facility already exists for writes, but now it needs to exist for reads too.

GP is absolutely correct that this is a fundamental assault on processor design as we know it, the speculative execution concept is going back to the drawing board for a major re-think.
For those boxes, 'digital' is just implementation detail. User interface and interface towards other equipment is still completely analog. I agree that they look very clean and usable.

I don't think there's anything wrong with displays. They offer immediate and quick insight into internal state and operation. The issues appear when you introduce modal workflow, with some features only available in some modes.

Worst offenders in category of hardware equipment are probably guitar multi-effects and synthesizer workstations. They cram so much functionality with so little thought given to flow and usability.
This doesn't solve the criticism against JWT being used for sessions, which is one of the main point against JWT expressed in the very site linked at the top of the README.
Skill up on Microsoft Azure
You were primed to be looking for flaws by the nature of the article. It wouldn't be hard to come up with a context where each and every one of the 3x3 grid of pictures in that article was accepted at face value.
This sounds like a really interesting read.

System 1 and System 2 remind me somewhat of the Buddhist/mindfulness/whatever idea of "the watched" and "the watcher".

Where 1 is instinctual, reactive, emotional (aka "autopilot") and 2 is awareness part of the mind that says "I notice instinct/emotion X" and considers one's current state before acting.
I agree with all of your points, but want to add an observation :

> Basic supply and demand. As long as you manage to hire developers, why pay more?

I know of several companies (Norway) that are almost desperate for more talent - to the extent that they are turning down lucrative projects. Nonetheless, I am also not aware of any of them making significant changes to their compensation. I can only theorize as to why this is, but my sense is that it has to do both with a fairly static billing structure that doesn't scale with experience, and concern for parity within the organization.
Yeah no worries. I sort of agree with you. I don't have any strong opinions on why I chose it apart from that it was easy to implement.
Horizontal scaling though. If every individual processor is slower, more are needed.
There used to be http://hnnotify.com - but that seems to have expired. I'm guessing you already searched for other options before building your own?

For example:

https://news.ycombinator.com/item?id=6499036

https://news.ycombinator.com/item?id=3004254

https://news.ycombinator.com/item?id=837059

Those discussions mention some legitimate concerns about a service like this that you might want to consider.

It has also gone down before:

https://news.ycombinator.com/item?id=10521491

No idea if the current outage is permanent - did you ask them?

Are you offering any long-term guarantees of existence?

Other questions:

Can I sign up to watch other people's usernames?

What happens if two people sign up each to watch username "X" - is that detected?

Can I sign up person X to watch person Y? (This won't happen if a confirmation email is send)

What happens if every second I sign up person X to watch person Y - does person X get a confirmation request every time?

I'm sure there are other questions, and I'm sure you've thought of them all and have answers - you might want to create a FAQ to cover them.

And kudos for producing something and making it available!

Edit: Now registered and gone through the process - am I supposed to get a blank screen when I "verify" my registration?

Edit 2: A forced reload gave me the "success" message, but I see no way to unsubscribe.

Edit 3: <fx: Cue laughter /> - this comment is being downvoted. Thanks HN, I needed the dose of reality.
It is amazing that backyard moonshine stills aren’t a meme in popular culture anymore.
Most existing religions are silent on the subject of life elsewhere. Since they do not say "it doesn't exist" finding life doesn't mean anything (it might even grow as they have a new group of life to convert).

Religion tends to be very careful to stay in the area of not providing a testable hypothesis which means that new alien knowledge won't prove it wrong.
Most people don't know what jury nullification is, and the courts specifically do not instruct juries on it. Hence, it is not a big concern really.
I know what you mean. I started emacs spacemacs, be cause for me it was the better vim. But with time I got fed up with the bloat of spacemacs and so many details which I can't controll for my personal ways. Now I roll my own fork of spacemacs, tweak it the way I want and still have some external help with the occasional merge from spacemacs-repo.

If this frontmacs grown in the proper direction to support a effortless mix of own and external settings, then it could become even more important than spacemacs for the community and growth of emacs.
So much for << states rights >> with slavery
>is WPA2 on a public Wifi with a publicly known key a workaround? Should prevent plain MITM?

AFAIK that wouldn't help because at the very least you can MITM the handshake.
> If a given adoption has an individual utility of +1, and a collective detriment of -0.01,

OK but imagine if everyone in the world did the "bad thing". The world would gain 8 billion utility and lose 800 million, so it's still winning.

I think you mean something like an individual utility of +1 and a collective detriment of -1.01?
> Wait, what? Why should governments step in to back FOSS?

Because we all profit from it and there is little market incentive to back them. The government funds museums, mathematics and a lot of other things for less reasons compared to FOSS.

> The city of Munich tried to switch to Linux.

They did switch to a GNU/Linux system. It is hard to be different when everybody around you isn't. There were interoperability issues with other bodies. This is one more reason why the government needs to step in to not only fund FOSS but to legally require open formats. Also, FOSS needs to be taught in schools.
You have expertly found a flaw in my offhand comment.

But the point, that much lauded tort reform doesn't do much, if anything, to help consumers (and, in fact, could hurt them) in the healthcare space, stands.

If you step back from pedantry and consider ideas rather than pick apart the flaws in the imperfect words used to express ideas, you might find that the world becomes a more interesting place.
No, outside of secession, there is no way for states to nullify federal law. This is why the federal government should be extremely limited in its dealings, the rest remaining with the state and local authorities.
That is a little surprising. Definitely making me re-evaluate my choice of local Linux.
As a U.S. Attorney in Alabama in the 1980s, Sessions said he thought the KKK "were OK until I found out they smoked pot.”

https://www.politico.com/magazine/story/2016/12/jeff-session...
addition is an interesting typo because essentially whats going on is brainwashing for the purpose of eliminating an addiction, and we have massive brainwashing infrastructure around substituting many phrases in the place of "addiction" although addition would not have been the first choice LOL.

We have enormous budgets trying to brainwash us to buy laundry detergents and cars and vote for politicians but as we know from extensive work in those fields that the individual susceptibility to brainwashing varies quite a bit by individual, demographic, culture, etc. It would not be a excessive extension to propose that anti-addiction brainwashing is likewise highly unpredictable.

The good side of alcoholism being uncurable is if we found a brainwashing method to perfectly eliminate it, the technique or pill or meme or whatever would be abused for consumerism and political purposes into an amazing dystopia. Admittedly a sober alcoholism free dystopia, but a horrific dystopia none the less.
Making a Case for Centralized Systems
I think part of why developers are targeting Chrome first these days is not market share per se, but that the Chrome developer tools are so much better than the equivalent in Firefox, Safari, or Edge.
Police officers can choose whether or not to enforce a law.

Someone is driving 50 in a 35 mph zone. Police officer’s radar says it, the gun is calibrated, and it’s illegal to do that.

Police officer pulls that person over, then after a little chat, decided to let them go with a warning.

Presumably the reason for letting someone go is because they feel the penalty imposed by the law is too stiff in this case. Okay, then how about we reduce the penalty?

I guess I’ve always been confused why officers are allowed to do this, and unsure if this is wise.
Tesla falls on Model 3 production delay, but analysts upbeat
This is a good article, but i always feel like i’m being taken for a ride by a potentially biased author when they open with the main crime that they don’t resolve till the end. This is written like muckraking, not journalism.
Have dealt with the folks from CHOP a few years back when I was doing healthcare software development and for anyone looking for interesting projects that will help people, and an easy commute (at least it was from KOP), I'd recommend giving CHOP a look see.
An “explanation” of principal component analysis that somehow manages not to mention the geometric meaning of the covariance matrix and its eigenvectors? Sad.

Also, please learn to use LaTeX correctly. Don't use the same font for English text and formulas.
There is a difference between current days 70yo oncologist with cancer, and a 30yo proud parent.

As futile as it would be, before I had a child, I thought that in the event of a end-of-humanity catastrophe, I would get as close to the source as possible and admire the end. Now with a kid, I am going to hold the fort has long as possible, cook my own hand and serve it, just it case this isn't the end.
Rs 500, 10 minutes, and you have access to billion Aadhaar details
They can always enforce federal law themselves, it’s just more expensive for them. Getting into street-level marijuana dealing isn’t something the FBI or DEA have resources for.
In these cases it also helps further the "fake news" narrative. I wouldn't be surprised if leaks are happening just to make the claim.
Both app size and startup time should improve greatly with Graal (or with Java 9's jlink or jaotc), the idea is to generate an executable with only the part of the JRE and external libraries that the app really uses.

There was some discussion on HN about this VM before (about performance with TruffleRuby, an implementation of Ruby on the JVM): https://news.ycombinator.com/item?id=13652541
fork has two uses. One is to run a bunch of child processes that the parent can control and hand work to. Think web workers in apache2 with the parent accepting connections and the children processing the requests.

The other is to start unrelated programs. Think bash which can start vim.

I think for the first use case, it is stupid to have to reap the child process or else it gets inherited by init. Instead you should be able to mark that process as a worker from the get go. It doesn't make sense for apache2 workers to keep running if the parent process died.

In the latter use case, I agree with the OP. I'd rather set up the structure of what I want to happen, then start that process as a completely independent thing. spawn seems like the way to go for this.

The good news is that we can totally have all those options as long as we keep fork as is at least for the next 50 years :)
Yes, iOS is a better example. I'm not a big fan of closed platforms in general. I like to be able to decide which software I run on my device, so my most recent laptop and phone purchases have been GNU/Linux devices.

I understand and appreciate the security advantage that comes with protecting users from themselves, but at least SELinux and related software still give users the rope needed to hang themselves if they're into that sort of thing.
> If everyone were a doctor that skill would be worthless.

The point you made was 100% correct, but that wasn't my meaning. I said right out of med school because I meant to focus on the problem in terms of cash flow - you can be in heaps of debt but still be well off. If the world were in huge amounts of debt (negative wealth) it seems like it could still be well off.
I think it was basically a joke, and I think his "guests" are friends, not customers, and would therefore be likely to appreciate the joke even if he actually did it.
That's only half the picture. There's also the 10th Amendment, which says that powers not delegated to the feds belong to the states or the people. Federal drug laws rely on the interstate commerce power, even though they also regulate conduct that is sometimes purely intrastate and/or purely non-commercial. The most natural reading of the Constitution is that the feds have no authority here. The Supreme Court disagreed in Wickard and Raich, but Wickard was poorly reasoned rationalization for political purposes and Raich does not stand except by relying on Wickard.

I mean, for all practical purposes, the feds will do what they want. But if you're going to cite the text of the Constitution, the feds are breaking the law here. It takes case law to justify what they're doing, not just the text.

Just a thought: Why did alcohol prohibition require a constitutional amendment but drug prohibition didn't?
The profit motive is a common argument about the private prison complex, which is why I used the $200m. I believe it was very justified as the reference point.

That $200m goes to the shareholders, owners, in theory. That's the profit motive sum in their business.

I don't disagree that also referencing the $1.7b in sales is relevant. It's just as tiny looking when stacked up against the monster that is a million unnecessary government employees costing $80-$100 billion each year, that exist solely due to the war on drugs.

I'd like to see someone tabulate up the total cost of all reasonably unnecessary government employees, related to prisons and law enforcement, dating from 1980 to 2010, the prime years of the prison population boom (during which the private prison complex was an averaged single digit fraction of the whole thing). What do we suppose that would come to? $2 trillion inflation adjusted?
No. The executive branch does not have the power to strike down laws it sees as unconstitutional. That is the power of the courts. The executive should follow the laws as written.
Govt would rush to pass laws on owning and using cryptocurrencies at that point.
We are all everything, more or less. We know that even in fairly ancient times there was trade between Europe and Asia and Africa, which likely means trading genes as well.
I guess it would work if there is some kind of force that leads some timelines to go out of existence or converge back towards heavier nodes, something like a neural network structure.
Word confusion: homey vs. homie
> In fact, why is possession of anything a crime?

Child pornography. Do you want possession to not be a crime?

This is one of the most fascinating cases since it is one of the core limitations of free speech. Richard Stallman actually has some very interesting and very controversial arguments about this in regards to speech.
W2 Contractor Senior Software Engineer, $85/hr, REACT/Rails
Posting as anonymous. Regular HN user here. I work in Denver, Colorado at a TV company. I am a contractor through a local tech firm. I am making $85 an hour on a W2 open ended contract. Through my contracting company, I get access to 401k (no match), medical/dental/vision (company pays atleast 50%) and they send me to conferences/training.

I really dig the gig, they treat me like an employee but pay me like a contractor. I tend to take 5-6 weeks of time off (unpaid) so I tend to make $160,000-165,000 at the end of the year.

My background is about 10 years of tech experience. Working on React currently. CS degree.
Worked with these guys a few years ago, would recommend anyone that's looking for a quality project to be a part of to apply.
I'm not familiar with the A53, maybe it is some kind of hybrid, but certainly there are branch predictors in pipelined in-order superscalar processors that don't speculate past branches, like Pentium or 21064. The advantage is that a correctly predicted branch can be executed quickly and the following instruction can be fetched & decoded. This doesn't yet require register renaming, reservation stations etc.
> Normalising this is a dangerous precedent

Not really, and even if so, we are a few centuries too late to do anything about it.

Having unenforceable laws in a necessity of how the legal system works. If a law is ruled to be unconstitutional it does not magically get removed from the books. That requires legislative action, but why waste time in the legislature on something with no practical effect?
Remember, labor is just another thing we buy and sell.

In other markets, like those for cars, there are specialists that focus on naming fixed, non-negotiable prices. What buffer is doing seems pretty similar.

Like I said, the market has lots of options for devs. I don't know if they're $50k off...when I said not all devs care about salary, I'm talking about the last 10%. I don't know anybody who ignores $50k.
This is great! Wow!
Syscall performance would suffer but otherwise this could work.
This is the logic people use when they encrypt cookies to public keys. I've never tested a system with public key encrypted cookies that wasn't broken. As a general rule of thumb: public key is what you use when you have no other choice.

PAST mitigates the risk somewhat by hardcoding a public key system into its version. But I'm still recoiling from the kind of first-principles mixing of systems security and cryptography that happens when people find new reasons to deploy public key primitives.

Note that one of the first crypto bugs in JWT stemmed from how it used curve public key crypto.
Mobila bucatarie si mobilier de bucatarii
> pull audio from an Obama impersonator

We can impersonate voices with neural nets. We can clone timbre and style, and this tech is being used commercially by Baidu at the very least (keyword: Deep Voice 3).
> Blackmarket alcohol is not uncommon in the US.

But large criminal syndicates funded by blackmarket alcohol are very much a thing of the past. At least in the USA.

I guess I technically know quite a few people who make "black market" whiskey. It's not legal to distill without lots of licensing and these people do sell bottles to friends and friends-of-friends.

But it's Really Hard to understate the difference between poor folks running cottage industries around moonshine and the sprawling violent criminal enterprises that flourished around the alcohol trade during prohibition.

(e: also, illegal alcohol isn't just a poor person thing. Plenty of wealthy folks illegally distill, they just normally aren't motivated to sell.)