skysight-inc/HackerNews huggingface dataset:
Here's the line of reasoning I use that keeps me in the game. Sorry if this is way off the deep end! :)

"The impediment to action advances action. The obstacle is the way." - Marcus Aurelius

In the face of overwhelming despair, there's always a choice you can take that is hope. Right action is training yourself to habitually choose that, and continue with it, regardless of the circumstances.

Those deepest moments of self-doubt, those are when you're able to have thoughts from that context that you couldn't when you're all happy and stuff. Those moments themselves are intrinsically valuable to be present in, and pay attention to. And by inducing them in yourself and choosing to behave properly against them, you can train yourself before the big moment comes.

I feel like this might be crazy and overly intense, but I can't really conceive of any other aspirational way of existing, so I hope its somewhat helpful!
No, creating a block of machine code bytes to execute would be a privileged operation. All code would run through a privileged CPU-specific compiler first, and there'd be no way to run raw machine code bytes otherwise.

If there are bugs that can be exposed through various machine code patterns, the compiler can centralize the restrictions of what may be executed, enforce runtime checks, or prevent certain instructions from being used at all. Security or optimization updates would affect all running programs automatically. Granted, these current speculative vulnerabilities would be much more difficult to statically detect.

But it would follow the crazy gentoo dream of having everything optimized for your environment better, allow much better compatibility across systems, and prevent entire classes of privilege escalation issues.
Because they have relevant content. Why should website bloat be the primary criterion for search ranking?
Yes, I do realize that. I also realize that, when you need to be able to easily include people who aren't engineers or ready to deal with what engineers deal with - that is, when you're a business - IRC requires much effort beyond the "apt-get install ircd" baseline to provide even a minimally satisfactory user experience.
Mattermost is a self hosted alternative to Slack. Very happy with it.
Because in many corporate networks, it's easier to talk to a server half-way across the world than to talk to a laptop computer on the desk next to yours.
Who suggested anything about "no ad revenue"?

Currently invasive advertising is better payed. However, there is no reason to believe that prices will stay the same if all advertisers are forced to satisfy some reasonable privacy standards. That is what is being suggested, not abolishing all forms of advertisement.
Speed is the most quantifiable factor in a collision.

It is also very controllable.

That is why it gets the focus that it does.

The trouble is, it's easy to get distracted by speed as a coefficient in collision intensity, and not pay attention to what causes that collision in the first place.

People often think that because speed is such an important factor that they shouldn't drive faster to help traffic flow, or even that they should block faster traffic. Those actions are very likely to cause collisions, which is more important than the factor they are trying to minimize.

The likelihood of a collision causing death is just as proportional to mass. A semi hauling a trailer cannot stop in a short enough distance to prevent some collisions, and can be deadly even at very low speed. Even so, we realize the impracticality of reducing mass, so we focus on speed instead.

The real problem we need to focus on is collision prevention, not collision mitigation. Let's stop ignoring the reality of "bad fate", and do real work to minimize it's occurrence instead.
Why doesn't Microsoft supply every component? Because of Anti-Trust Lawsuits. Microsoft has a monopoly position as a desktop operating system vendor. Any time they bundle software with the OS, it's grounds for a lawsuit in Europe.
Ask HN: Do you play games between programming?
When I'm coding throughout the day I sometimes play games like Agar.io to break up the work. Probably not quite as good as taking a walk, but still enjoyable.

Do you play any small/simple games between coding sessions? If so, which ones?
I wonder what incentive causes Instagram to remove pornography so aggressively, while ignoring gore/animal cruelty?
Anything can be funny given the right person saying it at the appropriate time in the right context

Seeing a suicide joke from a person I don't know in the Hacker News thread about the death an individual I respect an hour after it's been released is not my idea of funny.
I specifically said 'deserve' because I don't think it's the ideal solution.
Vampire tap. You had to place them at marked locations on the coax because of signal reflections.
Publishers had no (and still have no) motivation to make regular pages fast, because Google won't reward them for their effort with higher traffic. Imagine what headlines like "Google to rank popular content primarily by speed" would do to the web.
Now we have two suicides of people working in this facet of human right activism. At what number should we start thinking about foul play? There are ways to push people to such extreme acts.
Just a note: Ecclesiastes is definitely not "a rant by an angry, elderly atheist that through some editorial oversight found its way into the Bible."

Rather, it's a compiled lament by Solomon (Jewish king and son of the Jewish king David) about the futility/emptiness of a life lived apart from devout devotion to his god, and the stuff in the book is described later as "many proverbs" that were "arranged with great care" (Ecclesiastes 12:9), a description that comes after a long paragraph by that supposed-atheist that starts

>Remember also your Creator in the days of your youth, before the evil days come and the years draw near of which you will say, “I have no pleasure in them”;

and just before a paragraph ending in

>The end of the matter; all has been heard. Fear God and keep his commandments, for this is the whole duty of man. For God will bring every deed into judgment, with every secret thing, whether good or evil.

Not exactly "a rant by an...atheist".
Flushing cache lines doesn't work, at least not straightforwardly. The attacker can arrange things so that the cache line is pre-populated with something else that it has access to, with a colliding address that will be evicted by the speculative load. Flushing undoes the load, but can't easily undo the eviction.
It's pretty difficult to parse some parts of your post ("did not hold up on its end for diversity of work-force" "Billion to Buffalo", etc).

But I'm guessing these are not brought to the national level for discussion because none of them are unique to this company or that community?
Many corporations don't like to put a black box anywhere on their network -- they want to see inside it and monitor it to see what it's doing.
Running an ircd doesn't require rare expertise. Running an IRC infrastructure that your sales team can and will use, that's as reliable as Slack is - well.
It’s terrible that he served our country and was thrown away. He is a true American and patriot.
Yes. This is also why Market Cap is a problematic metric in the cryptocurrency space.
Fallacies of distributed computing
Time to replace RJ-45 connectors in the data center? (2015)
First the article notes on the difficulty of replacing line medical workers with automation, but then it mentions this:

"Recently, the growth in health-care employment is stemming more from administrative jobs than physician jobs. The number of non-doctor workers in the health industry has exploded in the last two decades. The majority of these jobs aren’t clinical roles, like registered nurses. They are mostly administrative and management jobs, including receptionists and office clerks."
The former makes your stock price double overnight.
i'm not so sure. memory accesses are so slow (hundreds of cycles) it probably wouldn't be that much slower to issue them a few instructions later. when it was introduced memory access and cycles were much closer together, only a few cycles and it saved a huge amount of time.
What Is Nationalism and What Does It Mean for Liberty?
> The fact that both Aaron Swartz and James Dolan committed suicide does, indeed, smell. In the past, our government has shown itself capable of [grabbing people off the street for mind control experiments](https://en.wikipedia.org/wiki/Project_MKUltra).

Or maybe it's that there's a high incidence of mental illness among particularly intelligent humans, and even more particularly cryptography/privacy engineers?

https://en.wikipedia.org/wiki/Alan_Turing

https://en.wikipedia.org/wiki/Len_Sassaman

The problem isn't some secret nefarious government mind control program. The problem is that we, as a society, are still very bad at caring for our most vulnerable people.

More importantly, the timing here is suspect: Many HN users are just now finding out about his death, and need time to mourn. Bringing up conspiracy theories-- even if they were true-- is poor form.
I try to create a defined line between 'work time' and 'play time', otherwise the latter begins to eclipse the former.

That being said, when that line blurs, I enjoy Crypt of the Necrodancer.
Measuring OS X Meltdown Patches Performance
Linear Haskell: Practical Linearity in a Higher-Order Polymorphic Language [1]

I'm going to see the talk tomorrow at POPL, should be good.

[1] https://hal.archives-ouvertes.fr/hal-01673536/file/Linear%20...
There's more dimensions to that though. Can participants have identities? If yes, then you don't need proof-of-work, for instance but can have a distributed ledgers with conventional algorithms for Byzantine agreement etc.

Might be just my misinterpretation, but when I hear blockchain I usually just think of conventional totally trustless and identity-less protocols that necessarily require proof-of-work - which is a security level which is not needed for most applications.
> by the way, that PoC was intense. Makes you wonder if the NSA knew about it all along :)

Colin Percival found a very similar issue with Intel's implementation of SMT on the Pentium 4 in 2005: http://www.daemonology.net/papers/htt.pdf

So the general idea of using timing attacks against the cache to leak memory has been known for at least that long.

In 2016, two researchers from the University of Graz gave a talk at the 33C3, where they showed that they had managed to use that technique to establish a covert channel between VMs running on the same physical host. They even managed to run ssh over than channel.
https://media.ccc.de/v/33c3-8044-what_could_possibly_go_wron...

In light of that, I would be surprised if the NSA had not known about this.
Copyright should be returned to its original term of 28 years after date of creation.
Right. My back of the envelope math shows about 100 children abducted by strangers per year in the US and about 60 children are struck by lightning per year (hard to tell, but based on % of lightning related deaths that are under 19)-- most of which are probably well over 4 years of age[0].

I mean, either way, it's exceedingly rare, but the odds of a young child being abducted is a good bit higher than the odds that they are struck by lightning.

Both odds are really rare. But my point is that it's just logical to take precautions. Not leaving your kids unattended in public places and not leaving them out in thunderstorms... both strike me as reasonable advice. :)

Edit: throwing in the link that shows ~20% of lightning fatalities are for people between 0-19 years old.

[0] https://www.bls.gov/iif/oshwc/cfoi/jeh5_05_45-50.pdf
I mean, even doge hit $2B market cap. And it's the parody cryptocoin.
https://bitcoin.tax/
It's a storage optimization in the kodak photo technology - replacing one face with another.

It's the next step beyond the Xerox photocopiers: https://www.theregister.co.uk/2013/08/06/xerox_copier_flaw_m...
Not a CPU designer, but my guess is that they will move the cache management logic from the MMU to the µOP scheduler, which will commit to cache on retirement of the speculatively executed instruction. They would then need to introduce some sort of L0 cache, accessible only at the microarchitectural level, bound to a speculative flow, and flushed at retirement.
Having compassion for yourself is so important, and so hard to do. When my therapist first mentioned this concept to me, it felt so foreign. It hit me like a ton of bricks that even though my personal issues are far from my fault, and there's no possible way I could have been at fault (childhood abuse that I've struggled with my entire life), I was blaming myself for every aspect of my problems.

I'm still struggling, a lot, but realizing that I was my own worst critic was a huge step in starting to deal with my issues.
I'll second that. To be honest the Sourceforge brand seems like more of a liability than an asset to me.

I don't know if I'm representative of the majority, but if I need to download some software and find that it's hosted on Sourceforge, my first few thoughts are typically:
1) Wait, SourceForge injected adware. I wonder if they still do?
2) This project is probably dead, because it's still on SourceForge.

I'm sure I can be trained out of that, but I'm surprised you guys reckon it's worth the effort, rather than just using a new name.
Undoubtedly that will happen again, but maybe this time third party validation systems will improve?
You can have advertising without tracking. TV and radio ads work just fine.
Who cares about facebook? This is the web! AMP threatens to force even small blogs to convert from open web to walled garden where Google decides what will be published and what will get blocked.
Minikube on the cloud: Using single node managed clusters for development
I'm really not familiar with SecureDrop or James Dolan's activism. Does anyone familiar with him want to summarize for me/us?
Does anyone know if James had taken a short hiatus between jobs to travel by motorcycle for a while in Southern California? I ran it someone one day at The Rock Store that had worked with Aaron Swartz and a friend and I had a great conversation with him and I’m now wondering whether it was James.
Not to tell you your reaction is wrong, but it's important to remember that cycling is generally more dangerous, and that while you aren't taking action dangerous to those around you, you are likely taking action that makes everyone around you dangerous to you yourself.

Even so, cycling is wonderful. I certainly recommend it.
probably a decent amount of copper in those old thicknet cables
My fiancé said something interesting - that the results mirror Americans appetite for violence, and shyness about pornography
As a publisher, thanks for this blunt answer that cuts through to the crux of the issue. There are supposedly big publishers that have shut down in my country without a single obituary or fond remembrance from users. Sometimes I wonder in this saturated online media world, how many publishers would actually be missed if we all disappeared from the earth. Probably a single digit percentage
Have you ever bought/sold on CB? It is exactly that, a fixed price. It's the convenience you pay for to use CB. That price updates frequently, but whatever price you execute at is the price you pay/sell for.
Here's a chart if anyone wants a graphical version: https://www.dropbox.com/s/cw6vs4v4h4woxpt/richest.png?dl=0

(Not sure what's standard practice for sharing images on HN.. or is that not done?)
Nope, Windows Defender has already set the registry key, and you should be good to go. For the rest of you, there is a good public document[0] that is being regularly updated on the status of each of the AV products out there.

[0]https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLp...
Some general advice to fight the pressure to be a perfect parent to a perfect child -

1. Forget the term "playdate". Don't schedule your kids' time to play with other children. I know it sounds strange, but adults used to have adult lives and people would just go visit each other. Their kids would play together while the adults did their thing.

2. Don't post pictures of your kid all the time on social media. No one really cares. Sorry. Send those pictures to your parents or friends directly. Better yet, go over to visit them and show them pictures in person. If you can, drop social media as much as you can stand, and just enjoy the fact that you love your child as much as every parent without turning parenting into social signalling and narcissistic indulgence.

3. Remember that your kids will leave you. They will go away to preschool, grade school, maybe college. And then one day, they will leave for the last time to set out on their own. Yes, you need to protect them, but if you are fearful and see the world as ugly, your kids will sense that growing up and most likely feel the same way. Do you want to send them out to the wide world with a viewpoint that the world is a scary place? Is the world a scary place? Why did the world turn ugly and scary when you had a child?

These are just my opinions, and there is no wrong way to do it. There's all sorts of ways of living. I just hope you find something that gives you some faith in your ability to raise a child that will turn out just fine. Because he or she will.
A380 sales are also way down. Airlines just don't want giant planes anymore.
Ask Novogratz
Some useful links:

- https://github.com/radareorg/cutter (GUI for Radare2, free alternative to IDA)

- https://github.com/eteran/edb-debugger (debugger, free alternative for OllyDbg)

- http://hte.sourceforge.net/ (hex editor, disassembler, free alternative for Hiew)
(open a binary, then press F6, select image format to get started, e.g: elf/image or pe/image)

- http://ref.x86asm.net/coder64.html List of x86-64 opcodes

- https://godbolt.org/ REPL that shows asm for given C/C++ code.

- https://www.reddit.com/r/ReverseEngineering/
Bitcoin Commercial
It is valid, but it cannot be evidence: https://en.wikipedia.org/wiki/Anecdotal_evidence
Management cannot until the information has been absorbed by the public, which is usually considered to be 2-3 working days.
I will certainly agree that requiring JavaScript unnecessarily should be frowned on and progressive enhancement should be the norm. A least give user the option of taking on additional security risks associated with Javascript (and WebAssembly) or not (edit: where possible).
> The key innovation of the blockchain was the use of proof-of-work in order to associate an amount of computer-time with a given block

Correct. In other words, proof of work is only a tool to make everybody slow
in producing data while keeping everybody fast in verifying it.

> In short, the blockchain solved the Byzantine Generals’ Problem,

No. It's a common misconception, but in fact it does not solve Byzantine
generals problem, with the simplest reason being that the problem requires the
solving protocol to terminate (blockchain does no such thing).

> and happened to use a append-only cryptographic ledger as part of it.

The correct terminology is not "ledger", but "document timestamping". You
don't need to record transactions in blockchain, they can be any statements.
Cryptographers already had such systems, except that each of those required
trusted third party to produce timestamps.
Sorry for being a little off-topic, but...

The article is beautifully formatted and rendered, including the graphs. Anyone know of an easy way to get those results?
I went looking for Mercurial documentation about how to rebase and found this:

> Rewriting of history has ramifications if you’ve previously pushed those commits elsewhere. In Mercurial, you simply cannot push commits that you later intend to rebase, because anyone pulling from the remote will get them. In Git, you may push commits you may want to rebase later (as a backup) but only if it’s to a remote branch that only you use. If anyone else checks out that branch and you later rebase it, it’s going to get very confusing.

Git does not tell me what I cannot do. Can you explain how this documentation is wrong, or how I'm wrong for what I want to do here? I'm talking about "git pull --rebase"

Because in Git, I know that canonical wisdom is you should not rebase a branch once it's published, but Git does not tell me what I cannot do, and it happens all the time ("Committer, master has moved some since your PR was submitted, please pull rebase.") Out of respect for contributors time (and some of whom won't know what to do, and may spend time struggling to figure it out...), I would probably not rewrite a commit that's been published in a master branch, but I will absolutely rewrite commits all the time on branches that are not yet merged.

So, can you explain how this workflow goes in Mercurial? (Or why it's unnecessary?) Because from briefly perusing the first document I could find about my question, it looks like Mercurial cannot be used to solve this problem (the solution of which, I find to be a fundamental and very important part about how Git works.)
I see it as a word of caution for the bright eyed. Fighting for your ideals wears on you, and some are more resilient to its demands than others.
AT&T Drops Huawei’s New Smartphone Amid Security Worries
Everything backend related. Much faster, much less memory, more backend features, huge indices - Google scale. (Gmane was its most prominent public user).
Lot of language bindings like PHP, Perl, python.
Back online //
ETH: https://etherscan.io/chart/pendingtx

XRP: can't find, maybe you can provide it for us?
In this case, I suppose my specific complaint is that I'm unable to make `range` work transparently with an arbitrary type.

I guess you could chalk it up to a difference of aesthetic opinion. I don't want to think about buffers or readables. I want to think about loops and strings. Looping over a collection means `for range`, so I'm gonna assume that Just Works. Maybe `for range` is just syntactic sugar for `bufio.Scanner` under the hood, but I don't want to care while I'm using it.

I want to think of a file as a black box full of strings. What's actually in the box? Don't care. How do I get lines out of the box? `for _, str := range blackBox`, same way I loop over every collection. How does that actually work? Don't care. Whoever implemented the box has to care, of course, but I sure shouldn't. I've got more important things to worry about, like whatever it is I actually want the code to do. Every character that isn't about whatever it is I actually want the code to do is a problem.

Having primitives and builtins that only work sometimes (specifically, with a short list of builtin types and aliases for same) means I can't just use the builtins without thinking about what I'm using them on. Having to crush down to a lowest common denominator means that what's in my brain while I'm reading and writing code isn't strings and what I actually aim to do with them, it's how the Reader API works, and whether I read a full or a partial line, and whether I need to handle errors before or in or after the loop this time. I want to think about my problem domain, but Go keeps dragging me down into the weeds.