skysight-inc/HackerNews huggingface dataset:
My Notes about a Production-Grade Rails Deployment on Google Cloud Kubernetes
Maybe Safari users, in aggregate, are more valuable than the average browser user is to advertisers, on account of Apple device owners leaning wealthier.
I have no relation to AmirSani; HN mods please feel free to verify my other main account.

I’m also not really interested in angel funds or syndicates.
In another comment he says he isn't.
Well.. are they profitable?
And yet so many people seem to prefer Slack! Why is that, do you think?
I presume you would need to do both, since there are multiple attack vectors. Some problems like meltdown can be mitigated via how the kernel handles page table's when switching to kernel mode, while some problems like spectre's branch manipulation need microcode updates.
And then of course there's this great anecdote about VGA video card optimisations from Ramblings in Realtime: https://www.gamedev.net/articles/programming/graphics/rambli...
Strategic Air Command's cold war propaganda is pretty campy but the porn shots of the B-36 and B-47 are an aviation buff's wet dream. That youtube video is just a small taste.

Also that movie taught me the proper pronunciation of "Thule" (it's too-lee).
> It's more like you're defending the idea of roadmaps by saying any list of stuff to do — or even saying "we're busy!" counts as a roadmap. That's not what's generally understood by the term, nor is it what the article is getting at.

I'm defending roadmaps because I believe that any plan with future dates counts as a roadmap, and because such things are essential to any sort of cross unit coordination.

If the DB team says "I've prioritised Geo, but I've not committed to it, so I therefore cannot give you any idea of dates", then that's not helpful to me. I still need to deliver my Geo capabilities, but all I know is that the team I'm dependent on may or may not do it, at some point in the future, and even though they have the best information about when that might be - because they know their priorities, workload and team size, better than I do - they're not willing to tell me what it is.

So, I need to work around them to get something done, and build it myself, even though there's a possibility that they'll deliver it in the timeframe I need. I have no other choice because they won't help me put a plan together. Sure, I've now avoided being affected by those "things that popup" but only because I've avoided having any dependency on the team that ought to be doing the work.

Other teams are making plans. Launching a product takes time. Meeting compliance deadlines takes time. Reskilling a workforce takes time. Getting contracts signed takes time. They are incorporating your roadmap into their plans, and if the roadmap you give is "I'm not willing to give you any predictions past the end of this month" then that's the roadap that they're basing their plans off. It absolves you of any responsibility because you never committed to anything, but the organisation as a whole suffers because everyone else is having to spend more time and money to work around you.
You are talking to a libertarian and you assumed a right granted by state is a private property. Why ?

The private property I referred is land right, which IS as old as civilisation and have been acceptable by most humans ever.

Since most democracies are less than 200yrs old, the taxation cannot have been as old as civilisation.

When 100 people form a camp, they implement property rights before taxation. Historically taxations have been imposed by distant rulers not socially decided at local level.
No offense, but this is 4500 lines of php (./lib) alone -- when I think minimalist, I think of like 200 lines of your favorite scripting language.
Get a REAL Custom Multi-Income Website for $5.00 per Month
And slow down my computer? No thanks.
Part Two: Detecting Meltdown and Spectre by Detecting Cache Side Channels
I feel like the expectation after getting VC money is "do it fast" to the detriment of "do it right". We may have had the wrong VCs or CEOs where I have been, or maybe I brought my own bias, but that definitely felt like the push.
Skylake-X?
Really exciting to see the success of projects like nuxt that are helping Vue.js to be a real competitor to React. My team switched from React to Vue about 6 months ago and have been extremely happy with our decision. Better collaboration between design/developers, better application performance, and - due to the more opinionated ecosystem- less concern that we aren’t using the latest and greatest libraries.
EFF Supports Stricter Requirements for DNA Collection from Minors
True, I can't edit my comment, but yes it happens both sides. The nature of markets forced to be black. It's not mutually exclusive in any black market, both sides have to have self defensive tactics outside of the state.
I've always hated the video screens on planes, so for me it is good riddence.

But I'm a book / laptop guy who grew up w/o a TV happily. (Yes, I grew up in the US)
On the other hand: https://en.wikipedia.org/wiki/The_Fable_of_the_Bees
Very good point.

This is an awesome library. My real question is... how on earth does it figure out the text is "okay", that the demangling process is done?
I actually used Photoshop to make those graphs, it allows me to give a more consistent feel. As far as the formatting is concerned, I used Ghost as a CMS and I have modified the default Casper theme to meet my needs.
I can only speak for the iOS side. (I understand Android has fewer limitations on what can be done.)

Have a look at Pythonista for a full Python environment, or Coda for a web dev environment. There's also all the web-based tools, hopefully some are optimised for smaller screens. On iPad you have Playgrounds to run all sorts of Swift code. For kids, there's other simple environments in apps like Scratch.

So as you might imagine, I disagree with your statement that "'smartphones' nowadays makes it difficult for you to create on them", and think that's just a case of nostalgia on your behalf.
Life is a miracle, I've accepted that a long time ago.
Actually, no. Moore's law is really a general trend that is apples to pretty much everything, just with different constants. As our knowledge and tech advances, everything gets cheaper and easier. This is also known as "Economies of Scale".
I think VC-funded hypergrowth raise your company's chance of failure. However, it also raises the chance of a big exit. Hence, high risk, high return.
VCs are in the business of investing in high risk, high return companies.
So it's natural they want their portfolio companies to optimize for high return than survival.
If any one of the VC's 50 portfolio company makes a big exit, the VC profits.

For founders and employees, you can't work for 50 different high risk, high return companies at the same time, so that might not be what they want.
> I wonder which country don't censor movies?

The USA, for one.

The MPAA does rate movies, and most theater chains choose not to run movies rated to contain extreme violence or sexuality, but anyone can privately film and distribute a political (for example) film that might embarrass the US government.

Many such movies also run in theaters- see Fahrenheit 9/11, Citizenfour, All the President’s Men, etc.
Top Best CD DVD Burners
One of the oldest forms of writing that we know of, Babylonian tablets, are mostly about goods exchanges and paying taxes. I think that you assessment that taxation is a new thing is blatantly wrong.
> he couldn't then be re-extradited to the US without the permission of both Sweden and the UK (as per Article 28 of the 2002 EU Council Framework Decision (2002/584/JHA).

That's a very good point that I hadn't seen made before.

> neither the UK nor Sweden can legally extradite him to the US without a binding assurance that the death penalty will not be sought

I'm not sure that "life in jail" (particularly an american jail) is much preferable... The US has been known to give those assurances.
Are you talking about PISA? Alright, that test has sample problems due to Hukou system[0] and limited city participation, it may expand to more cities. In fact the U.S. didn't participate as a whole but 3 states.

I will put my argument more widely, East-Asian countries tend to train their children at a very young age, and their pronunciation of numbers helped them to learn arithmetic(stated in the book <Outliers>).

China has a basically working K-12 program, and there were a series of documentaries shoot in UK, not long later, UK imported elementary math books from Shanghai. But China still need to improve it's higher-ed system. Preferably learn from Russia, France and Germany.

[0]https://en.wikipedia.org/wiki/Programme_for_International_St...
That's a pretty bad blow... A lot of Go software relies on the TLS-SNI-01 challenge, I believe. Will TLS-SNI-02 be a viable replacement? What should be done about servers currently using TLS-SNI-01?
Nope, I'm just using a normal phone that isn't underprovisioned. They are easy to find if you look. If you cant find one, let me know
And in fact, kids are busy too!
I have seen it too often, while parents are busy working, their kid even at nursery school are busy having various kinds of classes.
Top 3 Free FLV Media Players
Just wanted to jump on this for Caddy users [1]:

> Until further notice, when starting Caddy, we recommend using the '-disable-tls-sni-challenge' flag. This will require either HTTP or DNS challenges to be functional in order to renew your certificates.

By default, Caddy randomly chooses either the HTTP or TLS-SNI challenge to obtain and renew certificates. Your sites will likely not go offline even if you do not use this flag because Caddy tries up to 2 times per day, 30 days out, to renew an expiring certificate, as long as you keep it running. The chances that it would choose TLS-SNI sixty times in a row is extremely low. (We -- meaning myself and many people who contributed their feedback and code -- thought about these kinds of scenarios and Caddy is prepared to handle them.) However, since the TLS-SNI challenge will fail 100% of the time while it is disabled on the server end, might as well have the client not even try it.

Also note that all certificate maintenance routines are logged to the process log, so be sure you always run Caddy with the '-log' flag in production so you can see what's going on.

Since this outage may be temporary, check back later about re-enabling it. I recommend having more than one way to perform verifications when possible. (For Go programmers, the xenolf/lego library [2] supports all verification methods -- and is being upgraded for ACMEv2 currently; Sebastian is doing an awesome job! It also supports numerous DNS providers for easy setup of the DNS challenge.)

One more thing: wait for a full report from Let's Encrypt rather than speculating. Most questions can't be answered until there's more information. I don't think there's anything you need to do, no alarms to raise... just use another verification method until we get more info.

[1]: https://twitter.com/caddyserver/status/950926718004428800

[2]: https://github.com/xenolf/lego
Only if you don't take inflation into account.
The vast majority of PhD thesis based products fail, and they fail because the thesis solves a deep and narrow technical problem, and not a broad market problem.

The examples of successes is both anecdotal and survivor bias, you have to look at all attempts and weigh all the successes against all the failures.

There will be future successful businesses based on theses, among the many more failures. The advice here is really aimed at people who think that a great technical solution to something automatically makes it marketable, which includes many thesis authors.

Someone who's done their real market due diligence, and knows which thesis to productize or which problem to solve, they have a good business idea. But for most PhDs, the advice is good advice -- don't sink all your time & money into a business based on your idea if you haven't done as much study of the market as you have on your thesis topic.
Who is attacking Russia’s bases in Syria with drones?
If I'm remembering right, he leaked in exact timely order to help a political cause. It was almost if he was a puppet where someone was ordering him "ok, I want you to leak information X now". However I'm not sure if he did all these in anticipation for political pardon or because if he suspected that Clinton will seek to extradite him more aggressively.
Debian removes binary blobs from the kernel, putting them into separate microcode and firmware packages in non-free instead.

Intel places restrictions against reverse engineering the microcode, as well as it not being in the prefered original source. Both of these violate the Debian Free Software Guidelines, and thus it can only be in non-free at best.
Formal verification: From spaceships to the corporate network
The star is Intel's weird house style for trademarks. They add a star to any third-party trademark, and in the footer there's "* Trademarks", which links to https://www.intel.com/content/www/us/en/legal/trademarks.htm...
I get your point, but if soldering is the only problem, just get a spring loaded solderless connector for JTAG pads? then it is about the same as USB for many more people?
Unless I already have that future locked down.
In other news, their inability to read minds also limits their ability to solve crimes.

Lack of time travel as well.

Torturing suspects leads to more confessions, and thus convictions, so that's a problem too.

Hell, the fact that they need a warrant to ransack your house is also an impediment.
In particular, autocert (https://godoc.org/golang.org/x/crypto/acme/autocert) relies on tls-sni and does not support the other DV methods.

Hopefully it is not fatal flaw in the design of the method, otherwise a lot of software will need to be re-built.
Did we see the same PR announcement?

It was misleading in multiple ways.
Discovering Roman Technology (2011)
>And when you say board meeting, most people probably think of you taking a corporate jet somewhere, eating a fancy dinner, and showing up to a few CEO meetings before taking the jet back. How accurate is that?

>See Jay, it used to be that way but its changed in the last ten years because the activists [investors] have gotten more involved. It’s a real job. You really have to stay in touch with the company and understand what its doing.

said the guy on 4 boards
Context: https://www.theguardian.com/world/2018/jan/02/outcry-as-yout...

Apparently a YouTube 'celebrity' released a video showing the body of a man in Japan who had committed suicide. YouTube is apologising for not having dealt better with the issue.
The story upsets me too. There's nothing fun or happy about it. At the end they pity the cat, big whoop.
Yeah, I'm using autocert for a non-HTTP TLS server. It seems like the best option, but now I may have to move over to an HTTP or DNS challenge. Not ideal.
I’m surprised how it can’t even stop advertising a you-only-need-one product like an ironing board to me a week after I definitely purchased one. This isnt even machine learning level problem space.
That’s a spectacular man of straw you’ve made there.

50 people aren’t going to get together to dream up a two person shop.
Telegram Open Network [pdf]
This recent talk shows that AMD ucode wasn't signed or encrypted up until 2013, and they reverse engineered large portions of the structure.

https://www.youtube.com/watch?v=lY5kucyhKFc
I think the problem for mobile web would never be solved by "import" something.Every website should really find their own way, since websites varies in many aspect.

But to be honest, I really think developers these days are doing things wrong.they are adding more and more stuff for simplicity, which turn out to be bigger troubles
Not since 100Mbit... Gigabit is full duplex only and has no need for collision detection/avoidance.
It was a mid ranked state university, and the professors were not that great.

I had a professor who made me regrade an entire batch of homework because, in her words, my comments explaining the mistakes were unnecessary - the students just care about their grade. Eye roll.
If you appreciate roads, education, police, fire, private property, military, food safety, breathable air, safe drugs, etc, then you shouldn't be trying to cut taxes whenever and however you can as a base principle.
Let's not forget that criminals can also exploit a backdoor, so creating them jeopardizes public safety.
Furthermore, if IT vendors agreed to create those backdoors, criminals are not forced to use those products and can still rely on homebrew or foreign tools.
Later, the situation might escalate where these tools utilization is prohibited (e.g. VPN, Tor), as we see in some countries, but that shouldn't stop criminals from using them while making the public vulnerable.
HN really needs a sticky feature for comments concerning security patches and other updates that can bork your machine.

In this case, someone who dreams in hardware, breathes ASM and talks in bytes, needs to clearly inform the community here concerning these questions:

- SHOULD THIS MICROCODE UPDATE BE PERFORMED SEPARATELY FROM RUNNING: apt-get update && apt-get upgrade ?

- WHAT IS THE IDEAL/BEST WAY TO PERFORM THIS MICROCODE UPDATE?
Google preferches the amp content.
Taxation is old. Democratically-decided taxation is new.
It's also the name of one of the most popular revolvers in American history. [1]

I don't know what it's called but I love when something is nicknamed for the antithesis of what it's meant to do: guns/nukes -- killing people. Peacemaker? You be the judge... [2]

[1] https://en.wikipedia.org/wiki/Colt_Single_Action_Army

[2] https://en.wikipedia.org/wiki/Mutual_assured_destruction
I'm actually glad they openly admit there's an issue when there's an issue. Waiting for the full report.
Your site will never be faster than AMP because google can’t prefetch content from your site.
Damn...reading this was difficult. Her shame - rather than her guilt, which was absolved the minute she confessed to her being a cause for the boy's death - went on for too long. Glad she didn't take her own life. Heaven's forbid, if this ever happened to me, I'm not sure I could live with myself. It is such a punishing, harrowing ordeal for anyone to go through.... whew.
The American military outsourced their feature films: they happily lent equipment for filming to movies they approve of.

(Not saying it's the same as China. It's just an interesting system to subtly get sympathetic portrayals.)
> my brother was bullied in HS and was never the same.

> the largest changes in our lives are beyond our control.

My brother and I started a very small humanist school in Hungary to give my nephew a better education and yes, to shelter my nephew from being bullied. Yes, quite a lot of things in our lives is beyond our control but with a lot of perseverance you can wrestle back control. Although the necessity to do this is exactly beyond our control...
To loganabbott--

The new design looks pretty good, or at least more modern.
Also I just wanted to emphasize with you that you had to field the same "do you still bundle malware" question...eight times by my count.
Its not really a secret that startups can burn billions for years ...
A layer above the actual geometry of the level.

It was too slow to calculate lighting in real-time, so a process executed at design-time in Unreal (at build-time in iD engines) that calculated how lights lit the level geometry and then baked those changes on to the textures that were applied to the geometry.

It's like painting the glow of a torch on to the wall once before playtime rather than actually doing it every frame. Lighting doesn't typically change every frame, so it works.
nice one caddymeister
They even tried to name the macro in Linux something like "INSECURE_KERNEL" instead of accurately describing that the insecurity lies in the CPU, not kernel.
Part of the m.o. for many VCs is to push for really high burn rates. Which has two reasons, one is to accelerate growth as you mentioned. Another is to cause you to spend the funds you raised and require more investment sooner. This giving the VC the option to own a larger and larger share of your company by the time that liquidity event hits.
You can beat google preloading an amp page before the user clicks?
I've been thinking about this lately.

Even though our government doesn't censor us, our society does censor a lot of unpopular opinions. For example, the neo-Nazis who were publicly shamed and then subsequently lost their jobs. And the Google employee who was fired after writing that email about sexual harassment. I've seen other cases, too, but can't think of them off hand. And I should point out that I'm not defending those views (I think they're shameful), I'm pointing out that they were publicly humiliated and punished for sharing them.

Practically speaking, is there much difference between government backed censorship and online mob justice censorship? Each one will ruin your life, just in a different way.
Super agreed on the gist - speed limits and policy matter, if we want to reduce fatalities. But, just to clarify and double down on speed reduction -- likelihood of death is proportional to the square of velocity. Every doubling of speed is 4x more damage in a collision!
Oh so he just means using lightmaps. Gotcha
That's a better example to follow, China lacks of a sensible rating system for long time.
> randomly

What? How does that make any sense? Why wouldnt you just try all undetstood (and not manually disabled) challenges until you get a successful result?

This isnt like picking an ephemeral port number.
Interesting enough, media that has to work around censorship is often more interesting. Restrictions breed creativity: East German (political) jokes were far more spicy than West German (political) jokes.

There was a French group, Oulipo, that imposed weird restrictions on themselves in order to reproduce this effect. See eg 'A Void', a novel without the letter 'e'.

https://en.wikipedia.org/wiki/Oulipo

https://en.wikipedia.org/wiki/A_Void
So are you saying there are no best practices or patterns that are discovered over time that allows newcomers to progress in the field faster than the early pioneers?
Aren't there modern sensors that have electronic shutters? Why isn't this capability found on newer cameras?
What's this "normal" phone that comes with batteries immune to the effects of low temperature and lots of discharge cycles?
I posted this 2 days ago, but for some reason it didn't make it to the front page like yours.

https://news.ycombinator.com/item?id=16094431
Seems like Intel has released updated microcode:
https://news.ycombinator.com/item?id=16111433

but sadly no mention of what Windows users are supposed to do.
It's purely coincidence that that account just happened to be created right after the submission and just before the comment, then.
> Jimmie Stuart

'Jimmy' or, preferably, James Stewart. With a more than decent real-life airforce career alongside all the movie stuff. And when war came, used his Hollywood connections to get into, not out of, active duty.
If you do a decent job at that problem once, you’re easily in the top 25% of people who claim domain knowledge.

Many businesses have problems that an off the rack solution substantially solves it.
Thanks. I am aware.
I think the easier explanation is that Apple's actions cut into Google's bottom line. Strategically Apple gets to be the good guy while making Google look like the bad guy.
Vincent, could I translate this great article into Chinese?
Really disappointed at the solution.
Google is caching pages specifically designed to be cached, including supporting ads and analytics for the publisher. You isp caching solution can’t do that.
Justices Seem Ready to Back Driver of Rental Car in Privacy Case
Rebuttal: https://www.youtube.com/watch?v=t1AGdaZpMcE
So an attack against one challenge doesn't deterministically succeed.
Pop-Up Mobile Ads Surge as Sites Scramble to Stop Them