skysight-inc/HackerNews huggingface dataset:
> One manifestation of the Spectre vulnerability is that code running in a process can now read the entirety of its address space, bypassing invariants of the language in which it is written, even if it is written in a "safe" language. This is currently being used by JavaScript programs to exfiltrate passwords from a browser's password manager, or bitcoin wallets.

Isn't this incorrect? I thought it was Meltdown, not Spectre, that was being used to read the browser's password manager from JavaScript, and that Spectre-via-Javascript was limited to reading data within the same JS VM process (so e.g. you could prevent Spectre from reading cookies by making them http-only). This matters because meltdown is much easier to patch than Spectre.
The parent is also suggesting cobbling together multiple different products (google docs, photos etc) in order to replace dropbox...
ha, i came here to say this. I'd rather see web traffic results.
Then there's no minority either, so the word "minority" is not applicable. No matter how you look at it, the statement is absolutely ridiculous.
People don't value confidence over competence, they just use confidence as a proxy for competence where they don't have the competence to judge your competence.
Two flicks ?!?

Try 4-5 (or more) flicks and you also have to wait for the scrolling to happen (at the speed of your flick) .... contrast that with one "press" on iOS - it's not even close - I use the feature daily.
Space Repetition Game for Elementary Level Math
> The only disadvantage is that many users do not know about this feature (because there is no indication that the status bar tab is supposed to do something like that) which is the reason many use think an app is buggy after they have tabbed on it accidentally.

Precisely why this behavior should be considered unfriendly. It's not intuitive and is prone to accidents by the vast majority of the target market.

Even just making it a double-tap would make it drastically better, and double-taps are closer to convention as well. Double-click the left or right arrows in an overloaded tab bar in Firefox on desktop, for instance, for it to scroll a full row over.
I wonder if the "centrists" and "classical liberals" realize that the inevitable result of abandoning policies that help people in order to make an abstract point about reason is that the weak will continue to be abused by the powerful.
Sometimes being "young and naive" is a good thing.

After all if you start projects with a YES attitude you are more likely to complete the projects, than if you don't start any projects because of your NO attitude.

Sometimes == not always; being competent is generally good thing :)
>Disney promotes a harmful world view

What worldview is that?
> After all they seem to be quite conservative on the product development side and have always had courage to charge actual money for their service.

Have we really come to the point where its "couragous" to charge money for your product?
Or Richard Cheese. Or Nouvelle Vague.

All lots of fun.
Maybe each of the two kids were drawing what they thought they saw...the sun.
Slack and Hipchat are pretty expensive, and I’m actually less annoyed by horrible UX and ads in Skype, than by the resource usage of Slack. But again - so long as slack and HipChat are $5k+ per year they need to be a lot better than the free options.
> For instance, he said, simply increasing the salaries of all teachers in a high-need school district won’t have as much of an impact as identifying high-performing teachers and increasing their salaries.

Teachers in high-needs schools are dealing much more frequently with students who have severe issues stemming from poverty, trauma, and lack of support in their families and communities. Those factors are equal to or greater than variation in teacher quality, which no doubt exists.

Arguments about the mechanism of teacher pay distribution distracts from the reality that many teachers in poor districts are functioning as social workers for the effects of poverty, neglect, and violence borne by the children before they arrive in the classroom.

Teaching in such environments will always be a lot harder than it is in stable middle class and higher income communities.

If poor schools are expected to bear the costs of the social dysfunction created by the larger society, then either the teachers should be paid for providing those services, or we should invest in other capacities, inside and outside the school, to mitigate the needs for these services in the classroom, freeing up teachers for actual teaching.

But until those things are addressed, it's just a convenient distraction to frame the fundamental issue as a problem of how to use teacher pay as a carrot.
Stories from 300 developers who got their first job in their 30s, 40s, and 50s
What sort of opportunities? I'm curious what I can eventually do with my options.
My understanding is that it's entirely at the mercy of whatever contract you signed.
There's also option#4: just get on-board. Accept it's a fraud, milk it for everything you can, then leave after (hopefully) cashing in and leave the whole mess to everyone else and hope there won't be any (too bad) implications for yourself.
I'd be very interested in your experience as that goes against what I understand about human neurocognitive maturation as echoed by insurance rates, suicide rates, violence, teen pregnancy, etc...
> Segregation isn't addressing the root problem, it's just hoping that spreading out the problem (households that don't value education) will mask issues.

It reads like you are saying that the root problem is households that don't value education, to which I would say that perhaps students that don't value education is the root problem. And then, perhaps spreading those students out into classes and schools among students who do value education won't mask that problem, but actually change the attitudes and eventually behaviors of those you are trying to help.
This analogy has some strength, but one of the most obvious complaints is as follows. Having everything go through one central bus (e.g. `bus.setItem` and `bus.getItem`) requires only two colors, one for the bus and one for everything else. But of course, that just hides all of the complexity.

Nonetheless, focusing on reducing complexity and simplifying dependency graphs is good, mmkay.
I have been in similar situations, where I could see that the direction was willing to go was against my personal values and would also put the startup into even more risk.

What I asked myself in these cases: what if I am right? Do I want to stick around for voting rights / equity later of a corporation that is worth nothing in a year? Why waste more time in a team and on a product I no longer believe in.
Stream Data into an Aurora PostgreSQL Database Using AWS DMS and Amazon Kinesis
Seems like they're only allowing name reuse in the case of spam packages. Not allowing name reuse in that case might result in lots of names being rendered permanently unusable by automated spambots.

Assuming no actual users are depending on packages which are literally just spam, I don't really see an issue with reusing the names of those packages.
So none of the asian countries (for example SK or Japan) retest the drugs on their own population before approval for use?
They even offer it as just a daemon for linux if you want to install it in a server.

And for me, even on windows, the Dropbox client just seems so much more stable than Drive. It's very common for me to see Drive with a little "dead" icon, saying that it couldn't connect, and stopped trying, and I have no idea why.
55 House Democrats, including Pelosi, voted against the USA Rights Act amendment that would have substantially limited the surveillance against US citizens. 65 House Democrats ultimately voted in favor of this bill and giving the Trump admin more unchecked surveillance powers.

https://twitter.com/gzornick/status/951501089047764992
http://clerk.house.gov/evs/2018/roll016.xml
It's more than just the waiting though, it's the uncertainty and the fact that you've got this capital tied up in an investment that you could have in another investment (i.e., go work somewhere where you simply get paid instead of get stock).

Using a 10% time-value-of-money discount, your stock options are only worth ~35% of their final monetary value when you first start out in the 10-year payoff case. That's not a 35% chance that you'll make something, that's the discount on what you do make. You still need to factor in the risk that you'll get nothing or a pittance, especially if we're talking early startup where the risk that you get nothing is probably somewhere in the 90% range. You don't have to come up with very unrealistic numbers in the current environment before you're looking at applying a ~95% discount to your hopes on what your stock options might be worth in 10 years.

(IMHO, working at a startup when you're young for some hard & fast experience, if you can afford it, is possibly still worth it, but at this point in 2017, early engineers should be demanding either cash or founder-level equity grants. An in-between grant that may pay out $100,000 in ten years may sound grand from the perspective of someone about to receive that payout, but from the front-end you should value it somewhere around $5K or so, and I wouldn't fight anyone who wants to pick numbers to push that lower. On an annualized basis, $5K is more like "a minimal raise" than a reason to work at a company.)
Is there a PoC for Spectre/Meltdown? Did I miss a link?
The third page of the study explains how they tested for humour. It's kind of fun to propose how they might have tested for each fo the 4 attributes they mention, then check to see how they actually did it.
Is that bad? I'm very attracted to that. Dropbox does the thing it always did, but better and more reliably.
The actual phrase is "Majority minority" https://en.wikipedia.org/wiki/Majority_minority
Maybe scroll speeds need some work on iOS. On Android, two full swipes of a long source file or pdf have gotten me to the top. Haha
Firefox repaints too often.
Incorrect, the actual definition is "Majority minority" https://en.wikipedia.org/wiki/Majority_minority
Something that conservatives know is obvious, that the HN community loves to deny. Not surprising this story is getting 0 traction here.
This is a very odd response. Whether or not OP is "that important", they're opening themselves up to civil liability or even criminal prosecution is pretty important to them. Committing securities fraud isn't some fun game you can just quit if you like, it can have very serious consequences.

>If it's a "fraud" by your definition, then many, many other coins (and companies, for that matter) are also fraudulent

The SEC and many other regulators around the world are, in fact, coming to this conclusion. We're already seeing a crackdown starting.
Show HN: TensorFlow-Resources – Organized and Useful Resources about TensorFlow
More generally, here's one of the best discussions of distributed issue tracking I've found (dated 2013):
http://travisbrown.ca/blog.html#TooMuchAboutDistributedBugTr...
How does the UK deny a sovereign nation’s determination?
[cynic] The public camera catching a random criminal doens't really matter to me unless that criminal actually stole from me.[/cynic]

Fortunately we don't have to look to that. More than once the public road surveillance cameras have aided my decision to work from home. They have also helped me decided to take/not take an alternate route around bad traffic.

Those are real benefits to surveillance that help me. I understand your worries, and they are real. However there are also benefits that you cannot discard.
That is an option, yes, but it's the immoral (and perhaps criminal) option.
Most startups in SV though have a standard ROFR clause. So as long as you can find a buyer, you would get paid.

That being said, read the options agreement carefully and ensure your interests are well protected.
My skype broke (empty everything) on ubuntu,android,web and only works on windows old installation with upgrade.
Also MoneyGram had revenue of $1.6B for 2016, so I'm not sure how far even a full roll-out would go to justifying the valuation.
Ok so what if in that entire scenario above you replace "beanie baby" with "printed slip for a wallet containing 1 BTC".
The value stored in cryptocurrencies do actually have a physical manifestation (whether it's the neurons in your brain, or a printed physical wallet that stores your password). It's just that it's physical existence is puny by comparison and very easy to copy/transfer.
It reflects the industries priorities: performance and productivity. That's all. You can make the argument that these priorities are wrong, but we've known such attacks were theoretically possible since the vulnerability was introduced.

Even now I'm certain there are many companies not even bothering to patch against Spectre and Meltdown because they've deemed the performance degradation to be worse than the risk, and that's a perfectly rational decision to make.
> What do you believe is true even though you cannot prove it.

I suspect, but cannot prove, that the brain is necessary for consciousness but not sufficient.

Sort of like a handheld radio is necessary for hearing radio broadcasts, but not sufficient, it needs to tune into a signal originating elsewhere.
"Everyone is doing it" doesn't make something moral or legal.
I would consider how many people use them for transactions, if they are supposed to be currencies.

Most people look at the price and the market cap because they can tell that the primary use of crypto-currencies is for speculation.
Juicero Founder Now Promoting $40 Jugs of ‘Raw Water’ in Silicon Valley
Do you find the opening statement "With more than 50 percent of the population estimated to be a minority by 2044" ridiculous? When did we start ignoring what words mean? That's not what the word "minority" means.

There's many ways you can rephrase it and still be correct, mind you.
That's only about 12x the market cap now. I am sure the people investing don't think it's anywhere near preposterous to have a $1T market cap.
Data-driven lingerie shopping
Except Pelosi and many Democrats voted for this as well...
FBI Hacker Says Apple Are 'Jerks' and 'Evil Geniuses' for Encrypting iPhones
I was trying to think of a way to say this. Underperforming schools are in underperforming areas with underperforming households with underperforming parents.

It's obvious to everyone what the problem is, yet we're not able to discuss it.
In general use, I can't recall the Effect being cited outside attacks on a political adversary or disfavored social group or group member. Basically gives a scientific basis to insulting one's ignorant opponents.

Taking the point further, can anyone think of a mechanism by which the paper has a positive effect? The ignorant person who is overly self-confident presumably would be immune from its lessons, while the informed person is not better informed about their domain.

How does the knowledge of the paper's findings benefit society? (I ask this because the paper's findings seem to be widely celebrated.)

To the extent it makes readers more hesitant to boast or claim superior knowledge, it's a good thing, but I have to think that those predisposed to such boasting will continue rather unfazed. Maybe I'm just too much a pessimist.
They have added a 24hour re-publishing cooldown for all package removals regardless of reason. Exceptions are made for the original publisher and npm staff.

Explained somewhere near the bottom of the post, basic rational is that it gives them time to notice fuckups and fix them.
Yep. I had one against me mid last year.
Cloud Security Design Principles to Follow in 2018
Incorrect, the actual definition is "Majority minority" https://en.wikipedia.org/wiki/Majority_minority and yes those of us that are currently Minorities, would still be considered minorities in such a case.
> FM/UHF broadcasts scale infinitely! There's something quite beautiful about them, technologically.

We could also try to fix/enable multicasting, if we wanted internet broadcasts to scale a hundred times as well, but nobody seems to think it's worth the trouble.
They absolutely will. If their company is going to be offering tokens in the US, or anywhere, they open themselves up to prosecution in those jurisdictions.
Are you implying that brown and black people don't value education? I think it's more about the allocation and proper use of resources. Anecdotal but a friend of mine was stationed in rural Arkansas by Teach For America and argued that the conditions/performance at the all white schools were some of the worst she'd ever seen.
From the response steps:

> Our first action, which began immediately after the incident concluded, was to implement a 24-hour cooldown on republication of any deleted package name.
>It really is frustarting to see the US fall further behind.

Freedom of association is not evil.
> I'm in my late 20s. It's been almost 4 years since we founded our startup company. ... If I quit now, I'll lose everything except the lessons learned during these 4 years.

I'm in my late 20s. I have never been a CTO. I spent three years of my life working for a perfectly normal and boring startup that eventually ran out of money and shut down. All the threading bugs I tracked down, all the packages I backported, everything was for "nothing" in the end, except what I learned. My equity vested, and was worth zero.

A few months before they shut down, I got the sense that this company wasn't what I wanted to do with my life, and it wasn't really going anywhere / the technical goals were shifting into something much less ambitious and much less meaningful, and moved across the country to work on another project with a friend (and stay part-time at the old place). I'm very glad I trusted my instincts there.

You'll find something else to do, and you're already better off than most people your age by having the experience you have. Don't hold on to sunk costs.
Does anyone else think TED talks are all flash and no substance?
Less nice technically or socially? Speaking as someone who has played countless hours of competitive video games in my downtime after work, I assure you that, socially, 'less nice' is a charitable way to describe gaming chat, devolving into a constant torrent of abuse and harassment depending on your skill level, the sound of your voice, and the Dunning Kruger level of yourself and your other team members.
I'm genuinely curious to know why you're surprised or what would they have to gain from it.
I've programmed in the early heyday when Make was my ONLY option and I'm primarily a C++ developer. These days? No thanks. I don't want to return to that hell. Any technology is "slim" if you cherry-pick just one feature. By any reasonable definition, make is filled with warts and all sorts of tricks that are REQUIRED for any non-trivial project that supports multiple platforms to work. It is old crufty technology and I'll take my chances with other options thanks.

You're free to love make all you want, but I've been there, was effectively held hostage by it for lack of better options, and hate it. Automake and asociated tools was the first attempt at getting us out of that hell, and it didn't succeed but cmake/premake/bazel are doing a whole lot better.
Energy costs are only part of the equation. The point where people buy new equipment is significantly different from the point where they turn off equipment they already own.
No single group that is currently a "minority" would overtake the white population, therefore every other population in the US would still be considered a Minority until there is an equal or more number of a single minority than there are white Americans.
From Hangouts commiseration, of course.
Does this mean Skype will stop cooperating with governments demanding chat history disclosure?
If you're older and wiser and your advice is to learn to ignore your conscience, I am really sorry for you.

(Also, this seems like legally risky advice.)
Counterpoint: https://www.talyarkoni.org/blog/2010/07/07/what-the-dunning-...
> All that pontification didn't actually work!

This is a bit silly. Security is a chain that is only as strong as its weakest link. For decades we believed that C was the weakest link, and now, with Spectre, we have discovered (drumroll, please!): nah, C is still the weakest link. For all the amazingly scary things that Spectre brings to the table, it's still less scary than Heartbleed and Cloudbleed were.

Don't get me wrong, hardware still sucks (and with Intel and AMD's growing body of management engine incompetence they may yet overtake C as the weakest link in the chain) but we will learn from this and get better. In the meantime, we need to be pushing forward on all fronts: hardware security, language security, kernel security, application security, network security... nobody gets to stand still.
If this is fraudulent or not is of course very, very important. But from reading your comment I feel there are some weird trust dynamics at play here. My view is that for a company to work you need to have people working in the same direction with a large amount of trust. That means that if you are a specialist in your are I will trust your judgement. I need not understand how you came to that decision. If I do not trust you to make decisions in your area or if you are not aligned with the goals of the company I would find someone else for your role. That's how I think trust should work.

That also means that if my judgement in my area of expertise is not trusted I will quickly start looking for something else to do. "If you don't trust me to do what I'm good at I'll go somewhere else or do something else".

If I were in your shoes I would not feel trusted anymore and look for something else. You also mentioned that all your shares are vested. I'm more used to schemes where you shares vest over time e.g. you receive 33% of your shares per year worked so you will own all your shares after three years. If this is how your vesting works consequences for leaving should not be that bad.

However if none of the shares have vested you should thread carefully. Having been part of a similar situation with vested shares and leaving I know there are compromises to be made. All parts have a lot to earn from an amicable deal that let's you and the company part ways without any bad blood.
I thought it was the Knights Templar. You'd deposit your money (with them in Europe) before your pilgrimage, then redeem it later (from them in the Holyland). Kept you from getting robbed along the way. They became pretty savy with banking, and the aristocrats and church did not like that, so killed them all.
Design? UX? I'd wish those are the only issues with Skype. If really necessary, can tolerate ugliest of the designs, if it works. Problem is, it doesn't.

It loses messages at random. Sometimes it fails to send (I was really angry when I had an important call, and my "Hey, I'm here, let's start" got stuck in "Sending..." forever - thankfully, web.skype.com worked. That message made it through only the next day.) Sometimes it fails to receive - someone asks me why I'm not responding and I check the messages and don't see anything.

And those "sometimes" are not once in a blue moon, but every other month (if not worse).

Unfortunately, suggestions to use something else are not really working so I've stopped trying. Everyone seems to hate Skype, everyone I've asked had recognized it barely works and is frequently unreliable, but almost everyone I know still sticks to it. :(
"spergs"?
How long does it have to pass until whatever Kodak does is not its last ditch attempt at...?
You can even get it down to one color by writing a big ball of mud (https://en.m.wikipedia.org/wiki/Big_ball_of_mud)
Thinking Beyond the ‘Chemical Imbalance’ Theory of Depression
The major chip manufacturers need to have two kinds of cores/caches. One that has full security guarantees, the other that is optimized for energy efficiency/performance and has zero interprocess security. This isn't a one size fits all problem.