skysight-inc/HackerNews huggingface dataset:
> I believe one solution would be to put permission checks before the memory access, which would add serialized latency to all memory access.

I don't see why that would have to add latency to all (or any) memory access. The addresses generated by programs (except in real mode, when everything has access to everything anyway so we don't care about these issues then) are virtual addresses, so they have to be translated to get the actual memory address.

The permission information for a page is stored in the same place as the physical address translation information for that page. The processor fetches it at the same time it fethes the physical base address of the page.

They should also have the current permission level of the program readily available. That should be enough to let them do something about Meltdown without any performance impact. They could do something as simple as if the page is a supervisor page and the CPU is not in supervisor mode don't actually read the memory. Just substitute fixed data.

Note that AMD is reportedly not affected by Meltdown. From what I've read that is because they in fact do the protection check before trying to access the memory, even during speculation, and they don't suffer any performance loss from that.

Note that since Meltdown is only an issue when the kernel memory read is on the path that does NOT become the real path (because if it becomes the real path, then the program is going to get a fault anyway for an illegal memory access), the replacing of the memory accesses with fixed data cannot harm any legitimate program.

Spectre is going to be the hard one for the CPU people to fix, I think. I think they may have to offer hardware memory protection features that can be used in user mode code to protect parts of that code from other parts of that code, so that things that want to run untrusted code in a sandbox in their own processes can do so in a separate address space that is protected similar to the way kernel space is protected from user space.

It may be more complicated than that, though, because Spectre also does some freaky things that take advantage of branch prediction information not being isolated between processors. I haven't read enough to understand the implications of that. I don't know if that can be defeated just be better memory protection enforcement.
Definitely not a pitch “for” tokens at all. Just my armchair assessment of nascent risk and the psychology of the space.
The story depicts a lovely bohemenie and spirit of agreeableness; it sounds like it's almost enforced:

> You need to have a cohesive thought process to move the company forward.

> if a board member isn’t performing well, we get rid of them

> [I’ve] sat on boards with some amazing people who have done some amazing things in the world.

What a wonderful club. It doesn't sound like one conducive to dissenting opinions and disagreement. With so much at stake - so many jobs, so much money, and such an impact on communities - it seems that harmony would take a back seat to asking difficult, challenging, critical questions. The interviewee doesn't mention any of that happening. Also:

> Each year, all of our names are put up for voting by the shareholders. Shareholders say yes or no and vote [to keep the director]. If the shareholders vote yes, we have automatically put our name in for resignation and the board determines if they are going to accept [the resignation].

Shareholders almost never vote no. Effectively, the system above means that the board determines its own members. Again, the board member who challenges consensus or engages in threatening oversight might not last long (or be invited to join another board).

It confirms other things I've read about boards, but certainly someone knows more than I do ...
Cardano.
Unless you're Intel.
Is time better spent earning money to help pay for a kids financial future, or better spent playing with the kid? It's a fine line and I'm not sure there's a one-size-fits-all answer.
For that to work, you (our hypothetical more-intelligent second-born) would need to:

1. Have seen Scott express the opinion that first-born children are more intelligent.

2. Interpreted that claim in a way incompatible with your own experience of being an intelligent second-born (e.g., taken Scott to be saying first-borns are always more intelligent).

3. Been sufficiently offended (or otherwise unimpressed) by this to stop reading his blog when you would otherwise have been happy to read it.

For this to explain the apparent firstborn bias in Scott's survey respondents, thousands of potential readers would need to have done this. So, how plausible is it?

1. I've been reading Scott's blog for years and don't remember ever seeing him say anything like "first-born children are more intelligent" before this post we're discussing now. That doesn't mean he never did, and I'd be extremely unsurprised to find that he did -- but it does suggest that if he did it was easy to miss.

2. The distinction between "on average firstborns have an IQ one point or so higher than non-firstborns" and "firstborns are always smarter than not-firstborns" is not exactly subtle.

3. Well, anyone can get upset about anything, but this really doesn't seem to me like the sort of thing that would make thousands of people swear off an otherwise interesting blog in disgust.

I'm going to rate it very implausible. No way is anything remotely like this a non-negligible fraction of the explanation for the apparent firstborn bias in Scott's survey respondents.
Surely he is talking about the Win/Mac/Linux kernel patches? Would seem bizarre for all the work to go on the kernels when Intel had some firmware patches up their sleeve? Also I thought Spectre is something that is unlikely to be patched in the near future.
I was referring to GPFS as in IBM's commercial General Parallel FileSystem, not the Global Forecast System.
In general, it's a red flag to see people promoting some technology or idea without concrete, end to end examples, and circular logic. It's okay for the authors to make speculations, but I am disappointed at their excessive handwaiving in answering just two simple questions.

a) Do "dapps" really to use their own tokens instead of USD or even ETH to function?
b) How are closed ecosystems that utilize "utility tokens" benefitting customers? How are closed ecosystems better than open systems, open protocols?
terrible. fire the marketing people. even if the target audience of this is kids (in the hopes that they will have purchasing power when this thing is ready for market) it is still terrible.
(don't get me wrong, i usually live for anything robotic, new tech, mech stuff but this is embarrassing).

excessively deep voice narrator - tick.

15 seconds of content stretched to a 2 minute video - tick.

weak cgi - tick.

overly dramatic music - tick.

people striking heroic poses - tick.

and "XMech Racing League"? really?
Anyone have tips for cashing this out? A good exchange you'd recommend? Binance is closed for new users right now apparently. I'd either want ETH or BTC or USD
Is the premise of Reed's Law relevant to the sorts of social control problems that the author is discussing, though?

I think it's more the ability to do individual targeting that matters, from that perspective. And Reed's Law doesn't say anything about that (other than in the trivial "subnetworks of size of 1" sense)

I think the internet is fundamentally different from the old broadcast media, but not because of Reed's combinatoric observation.

In particular, notice that the radio also allowed these subgroups; e.g., the interference issues in the USA leading up to WWI seem like an apt historical example.
Aside from maybe your first point, what do any of those points have to do with "troubles with Elon Musk"? After the second point I'm not even sure what they could have to do with Solar City in general.

Your third point seems to be more of an issue with a local construction company and the last point seems to be an issue with Cuomo. Could you clarify? Am I missing some connections?
That is the aforementioned switching power supply.

On the other hand what I see as more funky is IC1 and IC02, what exactly is that? Some kind of gated comparator? (Also of note is how IC3A and B has different, but equivalent, logic symbol to IC3C and D)
Beacons enabled rapid messaging in Roman times - message size was clearly limited but messages could cross a country in minutes.
Are you calling my cases edge cases, or the parent commenter's cases?

There are a lot of tools that should work better offline. But a remote collaboration tool is not a good example of that. I've done work on secure private P2P messaging systems, and when you want that feature set, you really want that feature set.

But when I use Slack, it's because I don't want to have to be in the same building as all the people I'm working with. There is no way for this to gracefully degrade with a network partition. My argument is that central coordination and audit (with Slack) is not an edge case, it's the primary case.
Remembering Joan of Arc, the Original Nasty Woman
Keep in mind, they did NOT say patches with no cost. Mostly they are adding ways to disable speculation on indirect branches. This has a cost.
And DDN would still not be enough. DDN would be paired with something such as Lustre or IBM's GPFS to run the storage for big iron such as this.
Seems like a false dichotomy. For instance, Bill Gates' family was very well-off, but they never gave him a million bucks as an inheritance. What they did give him was private schooling, business connections, and computer time that allowed him to build a business and win a monopoly when everyone else was worried about getting a job.
Also without testing them to get the stats to prove/disprove my statement I'm going to say the exact opposite.

Can already guess they'll be at the top. Laravel, Symfony are pretty dang fast as frameworks!
> Yes, only the richest of people, those who can afford to purchase a newspaper, should be able to read the news.

Wait, what am I reading? Only people with money should have the right to access news and information?
Intel's not patching anything. They're relying on Windows, Linux and macOS patches to work around the vulnerability. Presumably that's how the 90% claim can be made. Very disingenuous of Intel tho.

EDIT: There are microcode updates included in the OS updates: https://access.redhat.com/articles/3311301
It was meant to be embargoed til today, but the news came out earlier than expected. Sounds like people have been working round the clock since the discovery to patch this.
> Except you're having to implement them yourself.

This is plainly wrong. All components I mentioned exist in the stdlib.

You have to glue them together yourself, sure, but that's the point of having components with separated concerns, which is usually considered a good thing in software engineering.

> There is zero reason why I should be having string together code from four different modules to accomplish this myself.

You don't. You have to use at most 2. And also, to repeat the question: who cares? Like, what is the actual downside of having to import 2 packages? I also took the liberty of looking for solutions to how to do this in other languages. Here is a Java solution, which is in line with what's requested that has 4 imports and one of them is third-party: https://stackoverflow.com/a/1096859. Here's rust code with 4 imports: https://users.rust-lang.org/t/read-a-file-line-by-line/1585. Python and Haskell get away without imports; because they just make reading files a language-builtin/part of the prelude, which TBQH is pretty cheaty.

Like, even if I'd buy into the notion that modularity and composability are bad things, it's not even as if Go would be in any way an outlier here. And even if it where then at best this is the mild complaint that no one has yet wrapped this in a ~10-line library; the language certainly does allow it, contrary to what's claimed.

I'm sorry, but this complaint is just forcibly trying to make up a problem where none exist to fit your narrative of Go being a bad language. It's not productive.
I have never understood the appeal of Snapchat and it seems destined to fail, but that said, I did think those glasses they developed were a cool, new, surprising idea from what I had considered an app company.
Yeah, well, let's not break out the champagne yet. According to your link:

> The BIOS (or UEFI) updates the CPU microcode during boot, however most of the time either the motherboard vendor won't issue frequent BIOS/UEFI updates, or the user won't install such updates. For these reasons, the system processor is likely to be running with outdated microcode on a vast number of systems.

We still need the various manufacturers to release a BIOS version for a bunch of hardware they manufactured years ago. I'm not sure that's going to happen, at least not quickly.
The article reads like a case study on OCD from Brain Lock.
Isn't the high-precision timer required to detect a cache hit or miss-- as in, the side channel being exploited here is in the timing of a cache hit or miss; there's no data leaked directly into Javascript?

That's not to say that removing SharedArrayBuffer (and high-precision performance timers, which were removed a couple years back to mitigate some other timing-related vulnerabilities) is enough to completely eliminate Spectre; there might be other methods that can time accurately enough to reveal information.

(I might be completely wrong here, but this is my current understanding of the situation, at least.)
The other annoying thing thing that MSFT does is to label everything with its word-du-jour, so we had all sorts of .NET things, LIVE things, SURFACE things, etc. etc.

So we might have 'Aardvark.NET' one day and then it's called 'Aardvark Live' the next. Way to confuse folks unnecessarily, Microsoft!
Something I always wondered... if I train an AI using copyrighted material, say Harry Potter, do I really own anything it generates?
do you have any proof of this claims? and if they were true how and in what you way would this matter if we were to compare one individual to one individual instead of treating people like herds.
How Grab is dealing with AWS performance degradation due to Intel's Meltdown Bug
> means to put food on the table

With a bit of help from the taxpayers: http://www.dispatch.com/news/20180105/amazon-makes-list-of-l...
although technically what mysql calls latin-1 is actually using Windows-1252 :(

...and what mysql calls UTF-8 is a subset that only supports code points of up to three bytes! To get UTF-8 you need to use "utf8mb4". Why anybody uses mysql is beyond me.
SETI@Home doesn't pay out, it's purely voluntary. If it's too hot out and I don't to turn things off that's fine, no big deal.

If I turn off any mining equipment I get nothing. Zero. I'm no longer participating in any meaningful capacity. I have no "vote", I have no upside.

> How about serious gamers or people who watch a really big screen TV all night while on their phone hardly watching it?

Let's not "whatabout" this.
Das Kaptial
I totally agree with this, including your 1 and 2, and the parent.

This very thread - with repeated posts about malware - demonstrates what "SourceForge" means these days to so many people.

It doesn't make sense to me that if the site is back to being one of the good guys, it keeps a name now mostly famous/notorious for bad practices.
It's amazing how much death and disease we're willing to suffer for the sake of convenience, isn't it.

We treat automobiles as a necessity of modern life in all places, but it wasn't always this way. In the 1910s and 20s, many writers excoriated all of the roads bringing dangerous cars into places where people live and play. It turns out they were right, but we just became blind to the danger.
You'll need to be more specific..

Exchanges: Coinbase/Binance/Kucoin

Info: DYOR/Reddit/Bitcointalk/Coindesk

Tax: bitcoin.tax

Portfolio: Cryptocompare/Blockfolio (mobile)

Prices: Coinmarketcap/Livecoinwatch

Analysis: Tradingview
A Soviet New Year, with Mayonnaise
Tracking does not increase content revenue. Advertisers pay as little as they can get away with while demanding as much tracking as they can get away with.

If they can get away with less tracking their ads will be less effective but revenue for the content creators will not be affected because it is ‘as low as they are willing to go’.
Twenty years of nearly ad-free internet prove this sentiment utterly inaccurate.
I don't think that's the case. They're patching the issue in CPU microcode.
What sushisource said. 99.9999(...)% reliability with a fallback around inconsistencies of, “we’ll block this transaction,” as opposed to, “your money? What money?” (Apply to logistics, shipping, etc.)
I think that claim is incorrect. I'd be surprised if Windows Update didn't download and load updated vendor microcode, and most Linux distributions do (or can), too. At least, I know Fedora does it by default.
OS vendors can update the microcode when first booting the OS.
What do you mean by "skewed"?

Obviously the SSC readership is a very long way from being an unbiased sample of (say) the whole world's population. No one would expect it to be, and in fact that's the point here: a survey of people who are obviously unusual in some respects (whatever combination of quirks turns someone into a likely SSC reader) turns out to be unusual in another respect with no obvious connection, namely having substantially more firstborn children than you'd expect.

Whatever it is that makes someone more likely to read SSC, it seems like it's probably a combination of things that surely can't correlate with birth order (e.g., being a native English speaker) and, broadly speaking, personality traits (e.g., being interested in the sort of thing Scott writes).

So the results show evidence of a link between birth order and personality, and (from the survey results) apparently a strong one. Which is interesting if true. And all of this only works because the SSC readership is far from typical of the population of a whole.

So, again, what do you mean by "skewed"? And why is it a problem?
To hell with "free" content if the price to pay is erosion of privacy or outright mass surveillance, concentration in the hands of very few, manipulative click- and flamebait and addictive consumption of digital media to the detriment of quality journalists/authors and other creatives.
Any guesses as to which vulnerabilities they're going to patch? Some of them? All of them?
Ask HN: How do companies like Spotify and atom package their electronjs apps?
I just started learning electron and I'm not sure which packaging tool to use out of:

electron-forge

electron-builder

electron-packager

Does anyone have any idea who is using each of these?
For the record - I did remember the name correctly and it turns out (I should have realised) that these machines are properly remembered on Wikipedia and elsewhere.

https://en.wikipedia.org/wiki/Casio_FX-502P_series

One small highlight: Power consumption 0.0008W.
Mmm, what would stop me from just grabbing the data the other oracles made available, and pretending I did the actual calculation/check/api-call/whatever?
If you read correctly, I was not taking any exception to energy efficiency aspect of using Blockchain, either.
if/when you tire with the latest performance improvement, consider porting to Rust and adapting it to python via cffi
> 700 employees

So, 0.14% of their workforce.
Reminds me of:

"Oh, Father. You're so wrong. Let me explain.

[Puts and empty water glass on his desk]

Life, which you so nobly serve, comes from destruction, disorder and chaos. Now take this empty glass. Here it is: peaceful, serene, boring. But if it is destroyed

[Pushes the glass off the table. It shatters on the floor, and several small machines come out to clean it up]

Look at all these little things! So busy now! Notice how each one is useful. A lovely ballet ensues, so full of form and color. Now, think about all those people that created them. Technicians, engineers, hundreds of people, who will be able to feed their children tonight, so those children can grow up big and strong and have little teeny children of their own, and so on and so forth. Thus, adding to the great chain of life. You see, father, by causing a little destruction, I am in fact encouraging life. In reality, you and I are in the same business.
I would be happy to support welfare payments and free education for those unemployed advertisers and "content creators" to learn to do something productive with their lives. No one is entitled to a permanent career in any particular field.
When you navigate to an AMP site there is a very clear icon at the top to click and go to the site's actual domain. I don't understand what this letter is so upset about - if they have such a problem, they should build their own search engine.
This is so that their clients won't be able to sue them if/when the bubble pops after they help execute BTC trades for them.
Nah, they're really far away, and there's an accumulated round-off error in their distance conversion between bloits (used by the client) and metrons (used by the subcontractor), so they're shooting at a target a quarter of a light-year away, and won't realize it for another 500 years.
Maybe that's why this is the most productive time. In that case I would be forced to agree.
Bitbucket service degradation
> Very disingenuous of Intel tho

This crisis has taken Intel, in my mind, from an American behemoth at the vanguard of technology to a sclerotic overgrown mess. Bugs happen, crises happen. When you're a $200 billion company, those mistakes scale deafeningly. The bugs are unfortunate, but not unreasonable.

Intel's communication, however, from the first press release to crap like this, has been disingenuous to the point that it arouses suspicion. Why are they being dishonest? Is there something more to be discovered? What else have they lied about?

Textbook case of PR and IR incompetence.
A solution tailored to your business needs	https://www.cityfinances.lv/
The point is what reading kernel memory would be useful for.
Despite the "reduced economic activity", people seem fine with rules against lots of things -- e.g. spam and assassination markets. Besides, the money saved on web advertising doesn't get put under a mattress, the company can do something else like ... buy more TV ads or put it in an index fund. Haha, jk it's another raise for the CEO.
It took about an hour for it to find the offset for me.

I think that the page isolation slows it down, even if it doesn't completely eliminate it.

The second test had something like a 0.05% success rate on my PC, and took over an hour to get a few dozen values read.

After trying this with the new kernel, I started up an AWS instance and ran the tests there. The first test (KASLR) succeeded within a few seconds, and the second test had a 100% success rate (read 1575 values in a few seconds).
I believe there are microcode patches that help make spectre harder. I also have a vague recollection of the fix for meltdown on the newest CPUs requiring a microcode patch for complete protection.
So when will chips with a fix in silicon be available?
Here’s How to Tell If You’re a Populist
And those are far less efficient, therefore reducing ad spending, and reducing revenue to content creators and publishers.
http://knoxblogs.com/atomiccity/2016/04/28/noaas-supercomput...

Looks like they shut it down April 2016.
A case of too little and WAY too late. Sourceforge is like the Myspace, long dead. It's not even a good try.
Do you use a software to rename your files by the EXIF date?
Does sponsorship of major OSS make a diff in your desire to work at a company?
No why would they? They're not the author in my scenario.
Serious launderers launder money through cash only businesses.
I thought they already provided a microcode update?
I'm sure they would if that's possible. But if microcode can only be updated by the BIOS, you'd need a BIOS update.
Here's a collage of protein crystals grown in space in 2000.

https://en.wikipedia.org/wiki/File:Protein_crystals_grown_in...