skysight-inc/HackerNews huggingface dataset:
> Since this flaw is not fundamental, that is, not even every currently existing processor exhibits it, it appears to be reasonable to replace the flawed design of the bricks, and not to re-engineer house construction.

Timing leaks are an absolutely fundamental flaw of computers. It may be the case that this specific instance of speculation-based attacks that leak information via timing channels can be fixed by stopping speculation or by complete rollback of speculated state including caches. "It's the chip's fault" is true for Spectre and Meltdown, yes, and it will take some time for Intel and other manufacturers to design new chips that stop leaking information due to speculation.

However, timing attacks are probably everywhere. They are covert channels that subvert language safety. The question isn't whether information leaks, but what and how fast. How are we going to deal with them comprehensively at the language level? I don't know.
They're tied to propriatary tech glasses to boots. The ability to hire a tech person is so far outside restaurant spend that they outsource to a single company, which handles all their software, their registers, and provides support. Your best bet is to sell it as a code module to the PoS integrator.
What is your skillset?
Great news. More funding for Open Whisper to provide us Signal.
Yes, I noticed that too. I wonder when the charts got removed.
I find this surprising, from the simplistic (and probably naive) view that images are 2D signals while music is 1D.
If anything, that makes it more dangerous. Besides a sense of 'false' security, chutes do take a certain amount of height to catch air and become safe. IIRC it's about 100m and turbulence will affect that in strange ways.

In the end, I still fear tech like this will not be as stringent as needed.
Tesla’s South Australian super battery beats expectations for first month
I'm starting to consider whether this reflects a larger failure in the industry/community: Traditionally, many of us (I'd say almost all) have been focused on security at the OS level and above. We've assumed that the processor and related hardware are safe and reliable.

However, below the OS level much new technology has been introduced that has greatly increased the attack surface, from processor performance enhancements such as branch prediction to subsystems such as Intel ME. I almost feel like Intel broke a social compact that their products would be predictable, safe commodities on which I can build my systems. But did those good old days ever really exist?. And of course, Intel naturally doesn't want their products to be commodities, which likely is why they introduced these new features.

Focusing on OS and application security may be living in a fantasy world, one I hesitate to give up because the reality is much more complex. What good are OpenBSD's or Chrome's security efforts, for example, if the processor on which they run is insecure and if there are insecure out-of-band management subsystems? Why does an attacker need to worry about the OS?

(Part of the answer is that securing the application and OS makes attacks more expensive; at least we can reduce drive-by JavaScript exploits. But now the OS and application are a smaller part of the security puzzle, and not at all sufficient.)
If programming languages were medieval characters
Yes, more people than ever.
While on topic of Skype: My God the latest Skype design update is abysmal, whoever come up with that horrible mess should be fired and never touch any design or management role at all.

And it’s not only design but the ux is horrible too, when you switch between conversation - it does not focus on the chat box field so you can start typing right away, instead you have to click it first. This is a basic stuff for a chatting app and whoever missed that is apparently clueless about ux

Edit: also if any of Skype iOS app developers is reading this - on iPhone X when you accidentally click top left corner of the phone where the clock is - for some inexplicable reason the whole conversation scrolls all the way to the top, which is incredibly annoying!
> polling data shows a +12 point spread on favorability numbers for the ACA

Here's the page where they show all the polls used to collect this "summary"[0]. Interesting that the vast majority of them show "against" strongly winning.

The PPD poll giving +18 for ACA shows that 49% want to impeach Trump, but conspicuously doesn't ask party affiliation. That's a huge red flag of a stacked poll.

[0] https://www.realclearpolitics.com/epolls/other/obama_and_dem...
why not just use git-ssb?
some gateways:

http://git-ssb.celehner.com/%25n92DiQh7ietE%2BR%2BX%2FI403LQ...
http://git.scuttlebot.io/%25n92DiQh7ietE%2BR%2BX%2FI403LQoyf...
http://localhost:7718/%25n92DiQh7ietE%2BR%2BX%2FI403LQoyf2Dt...

edit:fix links
Anecdotally, Skype seems to be the go-to solution for talking to infrequent business contacts. If you don't want to give somebody your personal number or your WhatsApp or similar, and they're not on your slack, but you want something quicker than email then Skype is the usual solution.

If you suggest some app they don't already know, it might feel like you're inconveniencing your contact. but everybody knows skype and it seems like there's an implicit understanding that if you aren't on skype you should be, so it's always the fallback option for chat apps.
I made a request for e2e to Discord a while back. It became one of the most voted suggestions but got denied. Maybe this will push them to take another look.
But... Skype does remember conversation history?
Because not all groups, ideologies, countries, cultures, and other societal divisions act in the same way?

I sell loans, why do I care about my customer's religion asks the banker, right before finding out that the Quran has specific provisions for appropriately lending and borrowing money.
When a lawyer tells someone to not talk to the cops, are they doing anything wrong? Because the lawyer is basically asking 'what can I do to stop a lawful interrogation'.

Does this change if the person is suspected of having pot or of killing children?
You should have a look at the monthly Who Is Hiring thread[0], assuming you already have an idea of what you can do.

[0] This is January 2018's one: https://news.ycombinator.com/item?id=16052538
> FM/UHF broadcasts scale infinitely!

They do for the number of listeners. They don't scale at all for the number of broadcasters.
I was ready to be misinterpreted, but not as wildly as your last sentence.
The code for git itself is also managed the same way (though I don't think there are any subsystems in git, unlike the kernel).
Yes! Just sent you an email. Cheers.
The report has some very misleading assertions about school funding. It asserts:

> On average, school districts spend around $11,000 per student each year, but the highest-poverty districts receive an average of $1,200 less per child than the least-poor districts, while districts serving the largest numbers of minority students get about $2,000 less than those serving the fewest students of color, according the study.

The source of that statistics is this report: https://edtrust.org/wp-content/uploads/2014/09/FundingGaps20... (Figure 1). But that ignores federal funding, which is specifically targeted to the highest poverty districts. For example, Figure 1 shows Maryland, Pennsylvania, New York, and Illinois as states with the biggest (double digit) gaps. But accounting for federal funds, the gap disappears in New York, Maryland, and Illinois: https://www.washingtonpost.com/news/local/wp/2015/03/12/in-2... (change the drop down to state, local, and federal funding).

In Maryland, for example, Baltimore City has much higher spending per student than wealthy (and much more expensive) suburbs like Montgomery County: https://www.google.com/amp/s/conduitstreet.mdcounties.org/20....
"There's good reasons for this, but it's resulted in a sort of blind spot that often comes out as people just preferring languages like python or javascript or whatever, and not wanting to acknowledge that those fuzzy, poorly understood preference processes are driving development as much as the choice of algorithm or hardware constraints."

One language that openly acknowledges it is designed first and foremost with psychological factors and ergonomics in mind is Ruby:

"For me the purpose of life is partly to have joy. Programmers often feel joy when they can concentrate on the creative side of programming, So Ruby is designed to make programmers happy."

https://github.com/alexch/ruby_notes/blob/master/ruby-intro....
I found this article yesterday and I think it answers part of your question:

https://hackernoon.com/4-alarming-reasons-ripple-might-not-b...
Quite true, intelligent behavior has been observed in many species.

Just because they aren't at the same level as us, speaking and writing books, doesn't mean like aren't intelligent in different ways.

After all, we also needed a few million years to get here.
Not the version I use for work. If you close the conversation, the history is gone, unless you fancy digging it up in Outlook, which of course you don't, because the way it is stored there is terrible.
To the CodeOwl developers:
How did this Show HN work out for you?

What kind of traffic did you get to your site? Did people give it a solid test-drive? Did they offer good suggestions, find bugs, etc?

Thanks.
It's funny that there's already a Gitcoin project, however they do NOT have a token:
https://gitcoin.co/

The goal of the project is to incentivize FOSS development, similar to Bountysource, except without requiring participants to trust a central party. It's pretty cool!
>how much morality versus how much immorality

Morality and legality are both very subjective, either to the person or to the legal system.
I for one really like the name and URL and don't mind the name collision.

It's something that is bound to happen. There are a finite number of words, names, and spellings to make use of.
Snark is against the guidelines, and I can tell you that the moderators find it dreadfully boring, whomever the source. We could use your help if you come across highly-ranked snark to please downvote, flag, or email hn@ycombinator.com. We don't see everything on the site, but we do read all of those emails.

https://news.ycombinator.com/newsguidelines.html
Achain unknown blockchain platform in China may create another 1,000 Litecoins
They have a website. https://github.com/RIAEvangelist/node-dominos-pizza-api has a node wrapper for the website.
2/4 of the links in your sources don't work.

I don't see any evidence that the OTF is a front for the NSA, or that you think somebody with the capability to make that in a year would sell their soul for $455,000.
Not loss making, however.
Considering that they can comply with wiretap orders from law enforcement, I'd say there's no e2e encryption. Maybe e2msft2e.

Also, I don't think they ever encrypt their chat. I remember a while ago where somebody showed that when you send a private web address to the person you are chatting to, that URL is visited by a machine with an IP belonging to Microsoft. That was a few years ago though and I think the explanation was that Microsoft was looking for malware.
I understand that, but that’s not necessarily acceptable if it makes debugging a nightmare.

Apparently there is also a bind decorator, which I think is nicer than either of the other methods, because it is explicit but also clear, and without the verbosity.
Learn mobile app development with these 10 online courses
>You can’t keep them around and feed them fake intel on drug deals so they waste their time.

Any relevant case law on this? Lying to the police isn't allowed, but lying to some new guy at the bar is legal, regardless of your suspicions of who the new guy is.
I do not see how they can categorically state the compounds are not from our solar system. We've barely begun to explore our solar system. Seems arrogant to assume such things.
Free Day of Co-Working/Self-Paced Training (Lunch Provided) Novice Women in Tech
FYI: Pluto [1] is an alternative open source feed reader (incl. support for JSON Feed, Microformats, Feed.TXT, and more)

[1]: http://feedreader.github.io
Sure, but pretty much all software qualifies as 'AI'. However most people think about Hollywood interpretations of AI, which is a thing that doesn't exist. It's strictly a matter of interpretation, and figuring out where on this spectrum a particular piece of software exists is basically the equivalent of throwing darts at a board.
Did Skype for Business already have E2E encryption or no? Would seem like a no-brainer.
Going Mobile – Vital Tips for B2B Digital Marketing Success – Buzzlogix
> and even though Telegram users think that group chats are somehow secure

how do you know what do telegram users think in regards? Assumption? — mother of all f*ckups, they say
CoStar Group | Senior Software Developers, Technical Managers | Washington DC | On-site - Full-time | $130k+ benefits

* Are you passionate about building amazing software?

* Are you constantly pushing yourself to develop better, faster and more efficient applications?

* Do you want to make a difference?

Then CoStar is the place for you.

We are looking for candidates with the following qualifications:

* A demonstrable track record of building and launching successful products and/or platforms that leverage terabytes of data and scale to meet the needs of millions of users

* 5+ years of deep (really deep) .NET development (C#) development experience including cross platform communication technologies such as Web API or WCF

* 5+ years of database design, T-SQL programming and performance tuning experience

* Ability to design and develop using Object Oriented design principles and software design patterns to attain high reusability and maintainability

Please send me your resume to: danlamund80@gmail.com - I am the hiring manager, and I am using my personal email to avoid spam to my corporate email
That link is currently returning 404, because amsat.org is down:

> AMSAT web services are degraded due to emergency security maintenance. We apologize for the outage.

(https://www.amsat.org/)
http://lmgtfy.com/?q=conservatives+against+anti+discriminati...
Your first "source" claims that Signal was funded by a part of the US government that is very much not the NSA - which is well-known and well-publicized. Your second "source" is about Skype, not Signal (and the only meaningful mention of the NSA is a rumor that they're willing to fund third parties who can effectively break the encryption, not that they're willing to fund MS to remove it, anyway).

The most effective thing the NSA could do to weaken Signal is fund people to spread FUD about it on message boards and drive people to inferior solutions. I'm not saying they're doing that, but it would be way more effective than providing funding to an open, peer-reviewed protocol and implementation.
There are many remittance companies in UAE, Saudi & Oman where migrant workers send their salary back home to India, Pakistan, Bangladesh, Nepal & Philippines. UAE Exchange being the major player there. Many of these companies might want to signup for Ripple because they can avoid the middlemen (what if Ripple becomes the middlemen ?) , thus more profits while keeping the fees low for customers and have rapid money transfer rather than waiting days for bank clearance.

The problem in implementing this is the origin & destination country should have legal mechanisms in place to operate this. Many low income migrant workers use schemes called "Hawala" , "Hundi" to avoid the fees charged by the remittance companies.

Maybe RippleNet can work in favor for both consumers and providers. Do keep in mind that RippleNet is not the same as XRP. The remittance houses will have to maintain Nostro and Vostro accounts for funding which I believe is currently maintained in USD. They can switch this to XRP to avoid those transaction fees and overhead.
Yeah because actually clicking through is super difficult.
Sidestepping issue of copyright and corporate greed which is the usual HN complaint.

Disney promotes a harmful world view and perpetuates unreasonable expectations. It hooks into the same sort of cognitive dissonance that religions do, but by targeting young people it can propagate views without the need to be consistent with the real world. Now personally I elevate that harm because they are specificity targeting children.

Try reading the original Peter pan / Alice in wonderland etc etc and consider what about these stories are changed and for what reasons.

PS: It's also rather insidious, look at what older generations thought of childhood and compare it to today. If you dig into things like divorce rates it's not really specifically their fault, but myth really does inform people about human nature and prepare them for dealing with other people.
>For instance, he said, simply increasing the salaries of all teachers in a high-need school district won’t have as much of an impact as identifying high-performing teachers and increasing their salaries.

Are there studies about this? What attracts more talent:

a) Pay increase for everyone in an industry.
b) Larger pay increases, but limited to the best performers.
RHEL (Red Hat Enterprise Linux) 7.1 came out on March 5, 2015, not Red Hat Linux 7.1. It came out on April 16, 2001, when Fedora was still 5 years away from release.
"There's actual physics happening, and we need to be aware of it." Yes, maybe abstractly. However, the Spectre flaw is well above the level of physics. There may be physics flaws as well (e.g., Rowhammer), but Spectre is an architectural flaw in the design of some microprocessors, in that it leaks information by e.g. cache timing attacks and non-program-state data (e.g., branch prediction tables). These can be redesigned above the physics layer.
Maybe they have an 'understanding' about the implementation of the cryptography as they do with WhatsApp, meaning the program doesn't notify you when your opposite's keys change, leaving unscrupulous users (most) susceptible to MitM attacks, which could be used by law enforcement or three-letter-agencies.
Plus, Skype probably still makes extensive use of meta-data, Signal allege that they don't, but we can't really assess what's actually running on their servers, despite the use of the AGPL.
What the hell is up with economist.com proofreading. A grammatical or spelling error in the article title is a red flag to me that screams "I'm a piece of garbage, don't read me".

Time to reestablish quality over quantity.
Ask HN: Does LinkedIn have a very strong network effect?
Is barrier to exit really high for users?
Wrong 7.1, buddy. Red Hat (not enterprise) Linux 7.1 came out in 2001. RHEL derives from Red Hat 9, released in 2003.
I agree with the gist of your comment but pedantically want to take issue with this ;) :

> That is, the basic premise of hardware process isolation is that a process cannot have any knowledge of what another process is doing, or whether it even exists,

Side channels such as the cache and timing break that promise.

This has been known forever. Nobody can contemplate a decent CPU without cache!

The thing that spectre and meltdown have demonstrated - obvious in hindsight! - is that CPUs that speculate can use this side channel to exfiltrate secrets in shockingly powerful ways that are really hard to defend against.

We can do things to stop speculated loads leaking via cache hoist/mru/evict/etc and make chips immune to these powerful attacks.

Eliminating the general cache side channel is a damn sight harder and still an open problem.

The cache attacks against crypto systems eg scrypt are fascinating just like spectre.
That's a setting. Your IT team may have chosen it.
Both my parents cheap flip and small android phone have working FM tuners. The headphones work as antennas and it's quite nice actually... I'm sitting there with a >$500 "smart" phone and envious.
I must have toggled it on, then.
Childhood's End
How much slower will your PC feel after patching for Spectre/Meltdown?
Just a guess, but you may be using Skype for Business, which is a completely different product with just a similarity in name.
The idea behind training like this is a reverse turing test. People speak differently to humans than they do to computers. If the users think they're talking to a machine, they'll talk to the human like they talk to a machine - which gives the training data that is needed for when it is a machine.
This is a bit of a nitpick, but when you say Computer Science I think you mean Software Engineering and/or Computer Engineering. These are very different fields, and Computer Science is by-and-large agnostic of any actual physics.

As an anecdote: my Computer Science PhD dissertation contained all of about 12 lines of pseudocode, and these are only to provide a more direct description of an idea than I was able to provide with several paragraphs of prose. Hardware / architecture / physics is entirely irrelevant to it -- while any implementation of the ideas therein should be aware of hardware / physics / etc., we are solidly entering the realm of engineering at that point.
The correct approach to this is to sort the causes of death by number of incidents and then look at those causes with the highest number of incidents that also have an anomalously high incident rate. This article studiously avoided that and was obviously an exercise in narrative construction.

The leading causes of child death in the US are somewhat uniquely American things like automobile accidents (Americans children spend much more time in cars) and drowning (the prevalence of swimming pools in many parts of the US is a well-known major risk factor for younger children). These things are endemic to the American landscape but few people are calling for a dramatic reduction in driving or swimming pools, even though these are among the most effective things you could do. Except for the first year of birth, where medical causes of death dominate, the rest of childhood is dominated by unintentional injury. Even during the peak years for homicide (the 20s), unintentional injuries still dominate the statistics.

The "teenagers 82 times more likely to die from gun homicide" is a meaningless number. The suicide rate in the US is average -- that they sometimes use guns as opposed to whatever they do in countries with higher rates of suicide and fewer guns is largely immaterial. The criminal activity that accounts for most gun homicide is a problem but it is also extremely concentrated in a few areas where the murder rate from all causes is anomalously high. The number of children that die merely from proximity to guns (accidents in the home, stray bullets during gang warfare, etc) is below the noise floor of many other causes. Guns per se, and there are at least as many guns as people in the US, have little to do with it.

The "Congress isn't funding kids health insurance" is disingenuous. Whether or not the funding changes are a good idea, for most analysts this has more to do with which bucket money comes from than whether or not there is access to healthcare. And in terms of child mortality, programs called out like CHIP have almost zero statistical impact generally, so it is unclear why they are relevant to the headline.

And as others have pointed out, infant mortality statistics (first year of birth) are not easy to compare across countries due to widely varying local standards. In a few parts of the US, such as the poor rural areas, the child mortality rates are legitimately quite high and geographically you are a long distance from good medical care. (I grew up in these areas -- there might be one doctor for all the communities spread across a wide geographic area, in large part because there is not a population dense enough to support more than that.) Not sure what to do about that though.

In short, this is uninformative clickbait.
Life Is Better Fishing