skysight-inc/HackerNews huggingface dataset:
> If you’re doing innovative new things, a roadmap is almost the worst possible way to try and co-operate on them.

Very few organisations are or should be exclusively doing "innovative new things". Upgrades of old tech, compliance with new regulations, automating out dated processes. Those are all needed and rarely need innovative new things.

> it’s top of our list, we estimate starting on it after x”. Neither of these need a roadmap.

Because you've decided that "roadmap" is term that doesn't apply to "starting on it after x".

"We haven't started on this, but we will plan to do it next" is a roadmap!

"We like the idea, but the team are all busy on things that we expect to take up all their time for the next 6 months" is also a roadmap

As I said in my parent comment:

> You need _some_ form of roadmap to make this stuff work. The argument is about size (volume and duration) and flexibility.

It is unlikely that any organisation can/should do a 3 year roadmap. But a lot of teams already have a 6 month roadmap because they're already committed to that work.
Now we are doing both bounds check branches and index masking. The index masking is purely additive. We didn't replace branches.

Similarly, where we use pointer poisoning, it is in addition to some other security check, which is almost always a branch.
> Instead of trying to block that from happening, since it's Republicans who are trying to do that.

We call this a lie.
I disagree that chefs from hot climates are more aware of the value of fresh herbs and spices.

European cooking has a long tradition of using fresh herbs and spices that are geographically available. Fresh herbs are an essential part of French cooking, and fresh paprika is essential to Spanish cooking.

It's the spices that don't grow in Europe that get neglected for cooking. I have a suspicion that gin distillers are a bit more discerning in the freshness of their spices though.
Articles like these reinforce that almost all software is held together by prayers and pretends rare events never happen. We are a long distance away from verifiably correct systems.
Naproxen (and Ibuprofen) can both cause kidney damage, particularly when you are physically active and/or not hydrating well (where hydrating well means getting enough sodium and glucose in addition to water). After experiencing kidney pain after taking naproxen on a hike and learning about this possible side-effect I am now very careful about naproxen use.

http://www.gssiweb.org/en/sports-science-exchange/article/ss...

http://www.mdpi.com/1424-8247/3/4/1279/pdf
Is renovation that affordable in SF? I had a friend do relatively major renovations (add another floor) and I was shocked when he told me it cost him $800k.

Is he adding more than $800k to the value of his home? Probably, but it's not as much as one would expect.
Be the 1,000,001th result?
>Stating "members from group X are better than members from group y" (which is how Damore's opponents describe his claim) is a not the same as stating that “more people from group X than from group Y might be suitable for this job”. The first is qualitative, the latter quantitative.

But the problem is that it isn't any more quantitative because it still depends on the highly subjective notion of what it means to be "suitable for this job" and assumes that there is only one way to be "suitable."
The worst part is that both damore's statements and actions are being dissected with a scalpel, by people who rear their legs at the mere implication they might not be 100% morally right.

Replace "white men" with "black woman" and they'd have a field day clutching pearls and fanning themselves silly.

Damore may be an insensitive autist... Or maybe he's one of the few sensitive to see through all the posturing.
their competitors are not
Prosecutors willfully obstruct justice all the time, because they never get fired or punished for anything.
And yet presumably you didn't get pwned in the process of writing that comment. It's true that securing the execution of untrusted code is hard. But it's not impossible.
To me, it has always meant "performed the task that was named." For example, nominal performance for lift-off means that the rocket lifter off the launch pad. If it exploded two feet after lift-off, it's still a nominal lift-off. The sudden and unexpected vehicle disassembly following lift-off is a separate issue that would be dealt with as such. That has always been my understanding of "nominal performance" anyway.
Many bad things happen in Russia as an outcome of Putin's corrupted regime. Enjoy your government.
Travel photos in folders like 'YYYY-MM-DD Location', non-travel family photos by people, professionally-significant photos in a different hierarchy, incidental photos -- where the topic isn't common to many other photos -- in a catch-all folder.

All files renamed by EXIF date.

No multiple copies; in fact, aggressive deduplication.

Mirrored on a different drive, and an additional copy in the cloud.
That's a good read, thanks.
They were very careful in hiding information that was damaging to their case. It's not fishy, its a standard US Federal Prosecutor playbook. It's not like they get arrested or fired for doing this.
It is really true. The money does come from somewhere, but instead of being the people he's selling to it's the people who would have reacted to the news of the vulnerability months later. These people are not being deceived or defrauded by the CEO in any way so they are only victims in the sense that they are not going to have this opportunity to make a profit months later because the price will already have been corrected. Realistically, the people who were hurt by this trade (assuming for the sake of argument that it was insider trading) are investment bankers, hedge fund and portfolio managers, and analysts.
Don’t you also have to figure in GDP, etc? It’s a relative number.

https://en.m.wikipedia.org/wiki/List_of_wealthiest_historica...
Kudos for such a well balanced piece. At the end of the day, it should be who can get the job done, that is all. And that is how companies will stay robust.
Commenting here works just fine without JavaScript.
The users didn't make the decision, the platforms did, and the decision was made after an alternative was available in Javascript.

If anyone killed Flash and Java, it was Apple by refusing to support either on the iPhone. All the users did was make popular a platform that didn't support them. If Apple had supported Flash and Java we probably would still have them.

Signed code that users had to install was tried before with ActiveX. It didn't work either because you can't rely on random developers to write secure code either. It's also how IE ended up with Flash. Click here to download Flash (signed by Macromedia).

So basically everything sucks because we're human and make mistakes. Maybe one day we'll have machines that reason more thoroughly than us and they can come up with a secure platform. Until then... Javascript and sandboxes.
That's pretty damning. It looks like they set up a pre-arranged schedule to sell but the amount to sell is determined at a convenient time.
He sold all but the bare minimum he is required to hold as CEO.

Whatever else, the optics are terrible. But he must have known they would be, so it's a little hard to see what his thinking was here.

And it's early days on the stock price - let's see where it is in 3-6 months.
The topic matter was above the IQ of the vast majority of the protesters so we got a mob rule, peasant like response.
If BTC is treated as property (as the IRS says), then no. You'll only owe capital gains tax on it at the point where you sell or exchange it. Your capital gain will be the amount you sold it for minus the amount you bought it for, minus any expenses incurred buying/selling it. (If you sell it for less than you bought it for, you'll have a capital loss.) It's essentially treated like shares of stock.

More details can be found in the IRS guidelines that were linked in the article: https://www.irs.gov/pub/irs-drop/n-14-21.pdf (see questions 1, 6 and 7).
Best Top 25  Universities to Study Law in Nigeria
FWIW, what your coworkers are doing is one of the ways that language slowly changes. By them misunderstanding the true meaning of the word and applying it in a slightly different, but distinct sense, the word is undergoing semantic drift [1] in their circles.

[1] https://en.wikipedia.org/wiki/Semantic_change
I would think so, but I don't speak for everyone on the spectrum. I can't imagine someone in 2017 thinking "hey, lemme write an anti-diversity memo at Google, that'll go over well".

From the impression I've gleaned, Googlers seem to strongly believe what is said in Google stays in Google and people there believe their coworkers are generally open-minded, extremely intelligent individuals. He may have believed he was in an environment where this was not as much of a mistake as it very obviously, in hindsight, was.
Interesting. I've actually completely rewritten the app (see the webext-rewrite branch), so now the main code lives in a webextension (ie inside a tab). Researching, I can't unfortunately see any way to get the audio for a tab :( So we'd have to use your approach of connecting to the outside of Firefox somehow.

So then the other thing is how to make it as convenient as possible to open up the audio connection. It's gonna have to be something like `ssh texttop -p1234` for the imagery and `texttop_audio_client.sh -p1235` for the audio? There's no way to combine them I don't think?
Strive to build a startup. This includes coming up with ideas, design, business skills, marketing, etc. This is the best way to optimize for learning everything "around" coding that will make you a much more valuable programmer.

Write or speak(blogging or youtube channel). Get awesome at communicating your ideas, while also building your authority, and a platform with an audience that you may find valuable for many reasons - selling your products, finding a job, etc.

Develop social and networking skills. It's hard but it pays off.

Take care of your health. Eat well, exercise. If you do well, you'll stay sharp, capable, productive. If you fail, it will set you back many years.

Read or listen to audiobooks to acquire general wisdom. Get an audible account and a good podcasting app, download a bunch of things you're curious about, and enjoy them during the commute/exercise/chores time.

Keep learning - watch Udemy courses, read books on CS and engineering, etc.
> All type checks are also vulnerable. For example, if some type contains an integer at offset 8 while another type contains a pointer at offset 8, then an attacker could use Spectre to bypass the type check that is supposed to ensure that you can’t use the integer to craft an arbitrary pointer.

So, even if WebKit were entirely written in Rust, we'd still be fucked. I'm really starting to think it's about time for me to get out of this business.
AIUI disclosure wasn't supposed to happen until tomorrow. Google broke the embargo because, as you said, people were starting to figure it out.
Though it is true that Krzanich has consistently sold stock every 4th quarter, for this recent transaction, he massively increased the amount he sold. Krzanich sold so much in fact that if he had sold any more stock, he according to Intel corporate mandate bylaws would no longer be allowed to continue as CEO.

If you don't believe me, look for yourself:

https://www.fool.com/investing/2017/12/19/intels-ceo-just-so...

https://www.sec.gov/Archives/edgar/data/50863/00011276021703...

And 'coincidentally', this massive increase in selling just seemed to somehow perfectly fit right in the middle of Intel being privately informed of Meltdown in June but before any public disclosure kept locked away all the way until now in January.

This is blatantly illegal insider trading. Don't let anyone tell you otherwise.
Ah, but you did not precisely define the area in cm^2 of hair which constitutes a full head of hair vs bald!???!?

Clearly this is a sham and you needed at least 31^47 participants in this study you charlatan!
4 engine plans lose an engine almost twice as often as twin engine planes do.
To be clear, your analogy is that this fellow lashing out at certain groups of his coworkers can be attributed to their mental disorder you've diagnosed and you've then decided that this is the same as a person in a wheelchair being unable to access certain areas? I'm understanding this correctly? You're sure this is an analogy you think is passably decent let alone one that can be be followed up with you mocking other people afterward...? What are we hoping to accomplish here?
How many security mistakes have translated into anything more than a minor one time cost to the company involved? I can't think of any.
As usual, Democrats are the only party that gives a damn. Really baffling why anyone younger than me votes for anyone else.
That comment could've been written without executing any Javascript.

// Edit: heh, someone already said the same.
Open Source Analytics Piwik Is Now Matomo
You should use the long commute as leverage, i.e. you need to either work one more day a week from home or start looking for something closer to SJ. You won't come off as looking disloyal to the company because everyone understands how brutal that commute is.
This is incorrectly classifying your women coworkers as being, among other things, more neurotic than their male counterparts.

Just because there is correlational evidence for the general population, it doesn't automatically follow that any given explictly selected population (such as Google's employee population) follows the stated correlation. Does he say so explicitly, and can you honestly rule out a speculative reading of his memo? I asked you for James Damore citing any particular coworker as having any particular quality. Still, the best you can do is to nitpick words and impute motives.

Also, what's particularly wrong with sensitive, agreeable, and warm people? I'm quite sensitive, though I'm only agreeable and warm in certain contexts. I could see how all of those traits could be of great benefit to developing many of Google's apps. Your implication that those traits are somehow bad also smacks of bias.

Given all the above, it sure seems like I could purport to read between the lines and say that you have some kind of vested interest in a particular reading of his memo, but my doing so would be falling into the very kind of irrational projection I'm self-referentially citing. So am I wrong in making this kind of projection? If I'm wrong for doing that, then it would seem you're wrong for your projections as well. If you say I'm correct about the projection, well, I'll take that just as well.
AMD’s 2018 Roadmap: Desktop APUs in February, Second-Generation Ryzen in April
Or even after boot time, I think -- you shut down one CPU at a time to load it.
Why starve yourself by calorie restriction for 30 years when some bozo will shoot you dead in the end .
thanks for the insight
SpaceX-Launched Satellite for the U.S. Military May Be Lost
Any HR system - only thing that has been broken every single job I've had.
Unless the token / currency is purchased with cash, or using something like Monero, then you don't have the benefit of anonymity with cryptocurrencies. All payers can be traced back to some fiat account.
One of the most brilliant features in the latest versions of Safari are per-website settings for ad blockers, notifications, location, etc. Between those two vulnerabilities and the general obnoxious useage of JS on websites, I’d love to see the addition of a per-website setting for JS. I would personally turn it off by default and only whitelist a handful of websites.
Well hell, the Newtonian laws of motion had no hypothetical mechanism for gravity for a rather long time. We're still in the early days of figuring out Homo sapiens. Don't get your knickers in a bunch, yet. It looks like you're uptight about something.
DrSidMukherjee in perhaps his most personal piece
Allowing any company access to the last mile would be a start. They just pay rent to the line owner, just like it was back in the mid 90s.
I've whitelisted JS from this site, because I "trust" it enough. If HN sold their comment code through some opaque web of third parties, I would be more cautious.

You're clearly an insider, and I'm clearly an outsider, so you understand the nuances here better than I do. What's your concept of securely executing untrusted code? Should users give up control over what runs on their machines? Should they know whose code may run before and/or after it does? Or what data it can or has already exfiltrated?
So your team members all work remotely in different countries?
> "Why do we have two payment solutions? Let us merge them."

Reminds me of XKCD's "How standards proliferate" https://xkcd.com/927/
Ask HN: Hey guys Anybody to use my application?
That is like a newspaper to post a news.
You can post an article with explanation or opinion, summarizing, or just a news.

https://play.google.com/store/apps/details?id=com.newsppool
Infant+Incubator+Market+Size+to+Grow+in+Coming+Years
Since quite early in the computing era, multiple and mutually untrusted users were sharing the same hardware by having login accounts on it.
Or perhaps maybe you ignore that that unfettered capital and a flattened banking systems so beloved of economists is the actual root cause of these problems?

Fundamentally modern economics despises the use of any other type of social control and signaling other then capital. Solution's to all problems must be in the context of markets.

One can see the effect that has had on middle and lower income families. And on our political systems. Where families are starved of resources and politicians are fearful of exercising independent political power on behalf of the voters.

That's the system that economists insisted was going to work much better than the system we had before.
The really sad part is you have to preface your comments with this "Before you downvote/call me a Nazi, I'm a mixed race woman in tech." Somehow this gives you legitimacy in the eyes of others, not the power and logic of your argument. It speaks to the left's misguided philosophy of "free speech so long as we approve what you say."
>> Unfortunately the genie is out of the bottle already. The web by and large requires javascript, and it's not likely to change.

>This fatalist stance is childish, and dangerous. As long as there are people working to make things better, things do improve.

How is it any more of a fatalist stance than the idea that javascript or running untrusted code in a sandbox is fundamentally broken?

Personally I think it's easier and more likely that we attempt to fix a few web browsers than expect millions of websites to change. You might call it fatalism, but I think of it as realism.

>> It's not like users can be relied on to do the right thing all the time anyway.

> So, if you aren't sure you locked the front door of your house, then it also doesn't matter if you left the door to the garden open? Clearly not!

My point was not that security is useless because users are unreliable. My point was that it's better to keep the kids in the sandbox, than to have them play in a busy street. Security should be preserved in spite of users actions, not rely on them.
Yet they haven't, despite the fact that this phenomenon has persisted for over a year. Either 1) regulators see some practical difficulties in enforcing regulation, or 2) there is some counter-incentive / counter-pressures / lobbyists forces out there deterring regulatory action. I wouldn't be surprised if these scams are allowed to go on for another year.
>So I think they should credit some of their Mac earnings to iOS, and factor that into their figure for the iOS app. Doing separate accounting for paired apps on different platforms makes less sense when those apps have synergy with each other.

I think they disagree with you here, bud.
Turmeric is not a pain killer.
Has that ever been true?
This is what I already get with FF + NoScript.

And yes, I am bored by sites that I visit for the first time that will not show me any meaningful content until I enable layer upon layer of JS. Just not necessary, nor is it safe.
That’s actually very interesting. Thanks.

Do they do this via a partnership with MasterCard or something? Basically similar to prepaid cards?
I think the issue here was that original investors got a cold feet and tried to get a refund, then the ICO sponsor balked.
> If anyone killed Flash and Java, it was Apple by refusing to support either on the iPhone.

Apple may have put the nail in the coffin, but long before that quite a few developers and users were avoiding Java programs when there were alternatives, and ClickToFlash was a popular browser plug-in. As they often do, Apple saw which way the wind was blowing.
I don't think its for simplicity, Cgo has real overhead.
TIL that my pain is weak and mild, even when I think I'm in a lot of pain. I'm well over 200 lbs (still), but 200mg of ibuprofen usually eradicates whatever pain I have. If it's really bad pain, then I take 400mg.
Oh man have I got some spreadsheets I’d love to throw this tool at.
Google can fire people for no reason, but that can't fire people for an illegal reason.

And google definitely didn't fire him for no reason.

It is illegal to engage in "Forbidding or preventing employees from engaging or participating in politics or from becoming candidates for public office."

Here is the california law in question:

http://leginfo.legislature.ca.gov/faces/codes_displaySection...

If there are smoking gun emails that say "We are going to fire him for his politics", then Google broke the law.

All this information will come out during the lawsuit, and during discovery, if it exists.
As an AMP "hater", I couldn't care less about the AMP user experience. My problem with AMP is that to be on Google's Carousel, which shows up at the top of mobile search results, you need to serve your content from Google's servers.

If Google allowed people to host AMP pages on their own servers and still show up on the Carousel, I would have no problem with AMP. As it is, though, AMP is a blatant power-grab from a corporation that's already got way too much control over the web.
This is the same scam that the companies building BTC miners were pulling on people.

They would announce their miner, get massive presales in BTC, then 6 months later when customers are getting anxious they would start refunds. And, of course your refund is in the USD amount from your BTC at the price 6 months ago, not at current USD price. The miner company just stole your profits!
It would make a lot of sense for a spy satellite to 'go missing' it would be so secret everyone would think it burned up. Good thinking Spies.
Government of the Worst and the Dumbest
Because Google unjustly firing somebody is obviously impossible.
As we now know, insiders have been selling Intel shares long before the vulnerabilities became public. The impact is already baked into the price, whatever it was. So we'll never know whether Krzanich made money at the expense of his shareholders, but I can't imagine he thought no one will ask themselves that question.
Or intentional misdirection away from a secret satellite
There are still some pieces that need to come together on this https://semiengineering.com/issues-and-tradeoffs-for-euv/ and https://semiengineering.com/unsolved-litho-issues-at-7nm/
Right, programming-language-based security mechanisms that rely on emitting runtime checks are broken and you need something like index masking or pointer poisoning to fix them. Rust could use those fixes as well.