skysight-inc/HackerNews huggingface dataset:
But they're the reason you're blessing amp on mobile.
I agree. It's a matter of balance between the two. Especially when you don't know which "end" of the judicial system you might face, if any.

You might be accused of a crime and then you'll be rooting for the rights of the accused or individual rights in general, or you might be the victim of a crime, in which case you might feel like supporting broader police powers.
They don't just use bing is my understanding. Unless that's changed?
The Business Value of Kubernetes
It’s just a proxy for power... and people have always worshipped power.
That’s like saying bitcoin could be a Money table on my personal database. It’s not the same at all. These coins are unique, wont be tampered, work on exchanges, and don’t depend on you trusting the startup that created it.
the design is a full-frontal reenactment of the cca-2000 web design canon; the newer-looking elements bring memories of early stackoverflow... somehow as if freshmeat back then had a trip. i woudn't write this off right away. let's wait and see.
Python release Python 3.7.0a4
Hi Robert! It’s been a while! :-)

Oooh that’s a good catch. I agree that pointer poisoning and index masking don’t handle this case. Unless the pointer to the data structure being accessed (bigArray or whatever) is poisoned with a function of origin. Maybe that’s the way to do it.

I am still optimistic about this. It’s going to be a lot of work and there will be surprises but then that’s always true when writing software.
> I mean, we have attempted (at least in part) to create a system where acting selfishly in pursuit of money forces you to create value for society. That's literally the intent of the idea of capitalism.

No, it's not; that's an after-the-fact rationalization.

I mean, we were a few centuries into the feudalism-capitalism transition before anyone started even talking about property rights in those terms in general, at least another century before capitalism as a system was even described (and by it's critics, not it's supporters), and I think several decades later till this excuse was cited specifically as a justification for capitalism as such.

Capitalism was created, incrementally over time, because rich merchants decided to use their wealth to force feudal overlords to cede progrrssively more power and influence to the rich merchants. Not as a manner to harness greed for the public good. Just as a matter of greed, pure and simple.
> It was never there to begin with: market cap isn't something you can cash in on. ... If you owned a significant portion of all the coins in the world, and tried to sell them all at once ...

until of course you can take a loan collateralized by the asset. Or get/sell some CDS/future/option based on the asset - that way you can even work with amounts larger than the market cap.
FTFA:

> The U.S. Supreme Court has held that the Constitution gives you no privacy rights over your garbage, but individual state constitutions can offer more stringent privacy rights. Warrantless trash searches by police are not legal in Vermont and New Jersey.
Exactly. Which is why I have sites that load even faster than motherfuckingwebsite.com, yet they don't get any of the search ranking benefits.
>Computers can do amazing thing, but software seems fragile, unreliable and untrustworthy.

Think about how many successful jobs computers have done for you/us compared to how many breaches/failures actually occur.

We get overwhelmingly more stuff done with computers than without.

Even if I had to attempt to send an email 10 times before it worked, that's much more convenient than walking the actual distance and delivering it myself.

A stack of vulnerability whitepapers looks intimidating, but you're not getting the whole picture.
Selected Cases of Death and Abuse at Schools and Treatment Centers
Meltdown, however, is the one that results in nontrivial performance degradation in order to patch.

And Meltdown specifically only affects Intel processors.
This is probably the easiest problem to solve. Hosting a GoogleSpeedTestBot in every city with the sole purpose of speed testing a page would have laughably negligible impact on Google's resources.
Show HN: Machine Box – pre-trained machine learning models in Docker containers
Show HN: Seed – Store and validate your ideas
Ya we’re still waiting on Russian docs he promised few years back.
Does the warranty include labor?
Oh man, Half-Life is a treasure but Hammer was definitely not the most straightforward tool.
> if the board had a fiduciary responsibility to employees first and shareholders second, maybe workers would be better off

Oh look, it’s New York City’s MTA [1] and NYPD.

Our society puts consumers first, shareholders second and workers like fiftieth. Moving workers up seems reasonable. Skipping them ahead of shareholders or consumers has, historically, been a predictable failure.

[1] https://en.m.wikipedia.org/wiki/Metropolitan_Transportation_...
Time to introduce Assange to Muller.
The liberty quote means something quite different, and quite controversial. Contrast against "Freedom of speech does require anyone to listen"
And because google is the police of the internet, they had to do something about criminally slow webpages.
This is clarified later: “Spectre means that branches are no longer sufficient for enforcing the security properties of read operations in WebKit.“

It’s totally true that Spectre allows attackers to control reads, but when they do this, they enter a non-destructive execution mode. They can read but anything they write is thrown away. (To our knowledge, lol.)
The only project that comes somewhat close to that is OpenBazaar, and that is buggy and unwieldy, despite four years of development and millions in funding. The implementation requires a complex mess of software installs (even for potential buyers!), trusted moderators (how exactly do you trust a random unknown username on a pseudo-anonymous market anyway?) and an appalling user experience. The installation page tells me that I shouldn't risk large amounts of money, so even the developers aren't confident in their system.

On top of all that, the 'decentralized' part is a pipedream anyway, there's no other implementation of the marketplace and everyone ends up having to trust thousands of lines of code. Under the hood, there's likely to be some centralized control, since the OpenBazaar investors most likely want to earn some money, which is through commission on sales. If it was actually decentralized, then everyone would be able to run their own version and avoid paying the commission in the first place.
Decades ago distributing certain forms of encryption was (for practical purposes) illegal in the USA. People used to get it from non-US servers.
And how do you know they don’t?
Absolutely right, the tokens are just a stepping stone to getting the [distributed] app off the ground. It's a great model! If you believe in the utility of something you can fund it very early on and reap great rewards, or at least root great endeavors on.
Still waiting on new AMIs. tap tap tap
TIG Welding: Walk the Cup vs. Free Hand
> - if the board had a fiduciary responsibility to employees first and shareholders second, maybe workers would be better off.

If the workers were by definition the shareholders, you wouldn't have to worry about which came first.
Nobody benefits without net neutrality except the telecoms. It shouldn't be allowed.
>WikiLeaks offers award for #LabourLeaks. Wikileaks offers £20,000 reward for #LabourLeaks with information on how the Labour Party’s top officials have attempted to stop Jeremy Corbyn becoming and staying on as leader." Any chance of a reward for information pertaining to Trump or Russia? I didn't think so.

Given that half of the establishment is hell bent on finding evidence of a Trump/Russia conspiracy theory, whether it exists or not, Wikileaks isn't really a necessary part of the process. If there is something, somebody will share it.
Hi! This work sounds really exciting to me - is it possible for me to contact you with some questions?
> MAX = <reasonably fast load time>

If you define 'reasonably fast' as ~10ms after click, the only possible option is AMP. Even a .txt file will be orders of magnitude slower.

Privacy reasons mean that it is basically impossible to load the content from the publisher's server until after the user clicks on the result. If you wait until the user click event to load the content, then there is nothing you can do to avoid a full network round trip.

AMP preloads the minimal content before the click, removing the round-trip. That's the whole magic, and the only way to get the 'instant' load.

There are unavoidable technical requirements to do this:

- Loading from Google's (or link provider X's) servers to preserve privacy.

- Constraining the html so that the load itself can't break privacy or add jank to the search result page.

If you aren't willing to accept these constraints, then you are always going to face a network round-trip in added latency. You can't have all 3 of:

- Zero perceived latency

- Privacy

- Serving from the publisher server

You can only pick 2. AMP forces choosing the first 2 which are what the vast majority of users care about.

Then AMP goes way out of it's way to give publishers back everything they could possibly miss from the 3rd.
Might want to check again tomorrow. My Dell Desktop (Ivy Bridge/3rd Gen era) received a BIOS update today, specifically noting "Update to the latest CPU microcode to address CVE-2017-5715." It updates the ME firmware too for those recent bugs.
How so? Can't you just do the same thing staking Ether instead of yet another ERC20 token?
Can I put a plug in again for how fucking cool the Meltdown and Spectre attacks are? They're much more interesting than just cache timing, which as you note have been well-known for at least a decade (and much earlier in the covert channel literature).

Unlike "vanilla" cache-timing attacks:

* Meltdown and Spectre involve transient instructions, instructions that from the perspective of the ISA never actually run.

* Spectre v1 undermines the entire concept of a bounds check; pre-Spectre, virtually every program that runs on a computer is riddled with buffer overreads. It's about as big a revelation as Lopatic's HPUX stack overflow was in 1995. There might not be a clean fix! Load fences after ever bounds check?

* Spectre v2 goes even further than that, and allows attackers to literally pick the locations target programs will execute from. Try to get your head around that: we pay tens of thousands of dollars for vulnerabilities that allow us to return to arbitrary program locations, and Spectre's branch target injection technique lets us use the hardware to, in some sense, do that to any program. And look at the fix to that: retpolines? Compilers can't directly emit indirect jumps anymore?

It's good that we're all recognizing how big a problem cache timing is. It was for sure not taken as seriously as it should have been outside of a subset of cryptographers. But Meltdown and Spectre are not simply cache timing vulnerabilities; they're a re-imagining of what you can do to a modern ISA by targeting the microarchitecture.
The major difference is that offchain we use contracts verified (and written to be verified) by humans. For a fridge that might mean that you need to send photo evidence and have a mechanic look at the fridge. In case of disagreement a human court will decide the outcome. It's not always going to get it right, but it's a lot harder to scam systematically. For smart contracts to bring the value of machine verified contracts without human intervention we need the data provided to the system to be verified. Without verification that all parties agree on we will always need human intervention in case of a dispute.
Unfortunately, it's both. Wal-Mart is a good comparison--their policies are awful and they blight the communities around them, but they provide real value to individual users. It's how they maintain their hold.
is it regex-DOS proof ?
The internet doesn’t suck
a) Or... wait for it... they could ask for payment in crypto, fiat, whatever, rather than printing their own chuck-e-cheese tokens. Yes, we get it, ICO allows the DAPP to fund itself, and it's a great value prop for the founders, because they can raise capital on the strength of a 15 page paper, as opposed to having real users.

b) "closed" means literally useless outside. Can you use your Cobinhood tokens at any other exchange? No, it's because Cobinhood tokens are only good for consuming the features of Cobinhood.
This article annoyed me the last time I ran into it because when they go into possible effects they point to test scores to try and quantify the effect of dedication oriented children's stories but go to no effort to try and quantify the effect of happiness oriented children's stories despite it would be quite easy to note suicide is almost twice as common in china vs the united states.
Indeed, that's the key difference. Steemit coins inherently require trust in steemit, since without the website's existence, the coins have no use at all. As everyone is implicitly having to trust steemit, there's no benefit in running a blockchain.

As you say, the key point of blockchains, like bitcoin, is that there is no central trusted entity. So, like steemit has done, if you add a trusted person or company, the main feature of the currency is wiped out and there's no point in having a blockchain in the system.
Product Manager
Product Manager
Didn't AIM have that as an option? You had to "direct connect" to send pictures. Of course, you had to connect to their servers first and the parties had to agree to direct connect.

I'm also pretty sure all of us wrote this in CS 101. I sure did.
JPM and GS do business at enough of a difference in scale that I don't really see them as similar. What are some examples of this "bad boy bank" behavior? It should be something beyond the existence of rogue traders, since by definition these traders operate outside the awareness and consent of their management and thus their actions can't be attributed to the intentions of the organization as a whole.
Long Interview with Aubrey de Grey
> Or why Sweden dropped the case once Trump became president

Did you just insinuate the government of Sweden is a front for Russia?
position: sticky; /* Frames are back, baby! */
Well, since Google knew about this bug across the boundaries of a few quarterly reports so far, and hasn't signaled radical departures in their operational expenses, and has specifically said the impact on them was smaller than many expected [1]... I'd say we know the outcome already.

[1] https://www.theverge.com/2018/1/4/16851132/meltdown-spectre-...
Ohh thanks I should look into that. Aren’t the transaction fees huge though?
So the problem is the signal-vs-noise ratio. There exists good stuff out there, you just need to know where to look. But maybe we're underestimating the impact of a low SNR. After all, life 500 years ago was also great, you just needed to know where to look, you just needed to move to the right city.
FreeBSD secteam was only notified — at all — because Netflix (a big FreeBSD user) requested it of Intel. It was a big slap in the face to smaller communities by Intel.
It's amazing how intolerant people on the left have become, while simultaneously holding themselves up to be the most tolerant group.

Tolerance is a two way street, otherwise it's just you cherry-picking the opinions you agree with, and claiming it's tolerance because you're supporting marginalized groups which other people may not be tolerant of. Supporting a group others are intolerant of dose not make you tolerant by default.

I wonder if we will ever achieve a society in which people can live their day to day lives and work professionally without having to conform to some groups set of beliefs. As a libertarian I'm fine with what Google did here from a legal standpoint, they should be allowed to run their company however they wan't, but this needs to be applied consistently at least. Imagine if a republican company started rejecting applicants who expressed opinions on the Patriarchy or Feminism. We would hold a gun to their heads (in the form of the government) and tell them to stop. Nobody is holding a gun to Googles head here, yet.
"Premium" sites (like the ones with engineering resources to build to AMP spec) e.g. NYTimes, WA Post, WSJ, are not really prime concern - they can afford to move to AMP and do whatever kind of ad sales they want (direct/programmatic).

It's the smaller websites (Bob's Blog) who can't afford eng resources to build to AMP, and to build fast ads, who are "suffering" a loss of search results prioritistion. (These smaller sites may turn to shady ad networks, and suffer further with shitty ad payload, further lowering search preferences if based on page load).

Does that mean smaller websites are stifled? Not sure...
What are you trying to test?
Project Fi Sucks, they changed my number by mistake
This person gets paid 1 million dollars per year for twenty days of not-rocking-the-boat. It's not their money and the only way they get fired is by asking questions like that.

Why investors put up with it is a better question. I think the implicit antitrust of index funds has something to do with it, few investors want more competition. https://www.theatlantic.com/magazine/archive/2017/09/are-ind...
Who would have thought, 20 years ago, kids would be live streaming their concert to a working dad with a handheld device?
Nobody I know on Wall Street has changed their tune with cryptos. What has changed is recognition that the wealth transfer of a generation is happening through them. Nobody wants to hold it, but everyone wants to broker it. And you can’t try and sell Bitcoins, or even facilitate order flow, if your CEO is on record calling it a fraud.
There's a lot of confusing information out there as you have found out.

This link helps clarify the steps needed. https://doublepulsar.com/important-information-about-microso...

Pay specific attention to the dataflow. Registry keys have to be set in a certain order in order for a) the patch to download and install and b) actually enable.

If there is not a BIOS fix (I'm in the same boat as you), the other hope is that the OS or virtualization provider includes CPU microcode in their update to address this.

At this time, I do not believe Microsoft has included microcode in their current update. However, they do have the capability so that's something you can ask them about doing so at some point.
I was wondering when Google serves content via AMP because it never happened to me. I mostly use DuckDuckGo but occasionally use Google when I'm not satisfied with the results. Turns out when you use Firefox on Android, Google serves a different (older?) version of the Google search that doesn't link to AMP.

Is AMP opt-in for site owners? Or is it determined by page load speed? It didn't use AMP for my website, but it also loads faster than google.com ¯\_(ツ)_/¯
Before the paywall garbage, it say: Mr. Dimon said “I regret making” an earlier comment in which he said the digital currency was a fraud.

Edit: The paywall version has a different beginning than the full version wtf.
The GFS though is the best public domain model in the world. ECMWF is proprietary, both code and model outputs, and the raw data are only accessible through paid agreements.
What advantages over faker
The utility of bitcoin is that it's a global currency backed by an impartial computer system rather than a government. By being politically neutral it eases tensions and competition between countries. It makes commerce more efficient by taking national politics out of the heart of financial system.
Then you really don't want to ignore any maximum height signs.
Rob Dubbin was on the Track Changes podcast with Paul Ford a couple of months ago and it was a pretty great episode: https://trackchanges.postlight.com/rob-dubbin-goes-off-scrip...
I've been trying to figure out api access to forecasting data from ECMWF

Do you happen to know if wind speed forecasting data requires a commercial license? Seems like the free api key only gives you access to historical data?
When we say things like "I wish people read more widely" this is the kind of thing I imagine people should be reading.

Hopefully I'll never accidentally kill someone, but I like to think that a lifetime of reading about other people's experiences good and bad has made me less quick to judge someone as a 'bad person' and take a charitable view to trying to understand why people do things.
Agreed. MS should cut off shady AV software if they are interfering in the windows update or security of the system. If they don't it tells us they have AV vendors higher on their priority list than end users. And that sucks.
You are talking about making an actual business.

The GP was talking about essentially scamming people.
Hmm, this article took a quick turn into a story about how it takes just one year of coding experience + something from fast.ai to become "world-class deep learning practitioners"; make of that what you will.
No, you come on. You are not giving me the money in my bank account just because you say I don't have to give it to you.
VMware Updates Add Hypervisor-Assisted Guest Remediation for Spectre
That's kinda why I used the phrase 'my perception' - I don't want to make statements of fact about something this vague and political (I'm not in the US before anyone gets upset about my biases, and as for the stooge comment neither do I intend it as an anti-Russia slur). However, I'd be intrigued as to how the current US leadership would feel about an extradition request for Assange.
By the way, I understand the fixes are being rolled out now. Do we have a more precise idea of the performance hit on windows and linux?
> It's the type of announcement that makes me wonder if they had the chip makers incorporate it specifically for them to exploit.

...sorry, what?

It makes you wonder if the NSA had chip makers incorporate speculative execution and caching because... timing attacks?
>can't be stripping our law enforcement officers completely of the right to investigate what a person did or is doing.

Oh they are far from stripped.

https://theintercept.com/series/the-fbis-secret-rules/
Web Dollar – Currency of the Internet
Well, to me Java is still new tech. ;-) But yes, it's certainly a reasonable sampling into non-machine code distribution, and enforcement of security rules when actually running/JITting the code, as were some mainframe developments before then.

Of course, Java certainly does have some higher level weaknesses as in the introspection API kerfuffle a while back, and is too locked into its Object Obsessed design for it to be a truly general purpose object code format.
If you anyway assume a legal system to resolve issues, then just go for traditional contracts and money transactions. Why then bother with blockchain-based contracts in the first place?
Microsoft says security fixes will noticeably slow older PCs
FWIW, microcode is now included the patch that VMware released today.

Gonna go test it out now...

PSA: VMs have to be cold booted after patching and set to HW v11+ for PCID support

EDIT: Just fired up my first Windows VM after patching ESXI and I'm now showing all green using the PowerShell script.

Here's the link that I'm referring to: https://www.vmware.com/us/security/advisories/VMSA-2018-0004...
Something showing Labour undermining Corbyn would be more supportive of Corbyn / hard left.
They'll also spend more time looking at their speedometer and less time actually paying attention to the driving conditions.

[uncited opinion]
This was my understanding too. Their Sources page[1] indicates that they run a crawler called DuckDuckBot (implying some indexing takes place), and have community maintained/crowd-sourced data as well.

[1] https://duck.co/help/results/sources