skysight-inc/HackerNews huggingface dataset:
Hypothetical example pseudocode:

if is_pointer(pt):
// do pointer-based stuff
else:
raise error

If you train the branch predictor to expect a pointer, it will speculatively treat arbitrary values as pointers until it can determine that they are not. So you can pass in any value and get it treated like a pointer for the duration of the window of speculative execution.

Any conditional branch is potentially vulnerable, an attacker just needs some sort of side effect from speculative execution that persists after rollback.
Very interesting approach! I often hear people complain about how all programs in the old days were more efficient, but I never met anybody who actually lived up to the logical conclusion. [1]

> I run Win3.1 inside DOSBox

Out of curiosity: What is the avantage of DOSBox compared to QEMU for your use case?

> The keymap differences do take some getting used to when swapping between everyday things and WP though: F1->Escape, F3->F1, etc.

Can't you just define different mappings in your virtualization tool? (DOSBox)

[1] Except for large institutes like banks, air traffic control, etc. working with huge legacy systems, which is perhaps the other extreme.
RFC 7710 solves this via DHCP. What's missing is support both on operating systems and captive portal devices.
Haxe beginner tutorials
`for-await-of` and synchronous iterables
The situation is apples and oranges.

Dumping Flash and Java took years, and was driven by rapid adoption of mobile devices that either didn't support them at all (Apple) or very well (everyone else). There was an already deployed alternative (Javascript).

Javascript is buried much deeper in modern websites and would be much more difficult to replace than either Flash or Java Applets were for most sites. For most sites Flash was just to play videos or display ads. Many sites only had to replace an object tag with a video tag. Java Applets were fairly niche in the first place, so aren't really comparable.

In addition there isn't currently a viable alternative for Javascript. Maybe WebAssembly someday, but currently it's designed to supplement Javascript not replace it.
Do you know what a Progressive Web App is? (audio)
running untrusted code is a fundamental part of our daily experience.

If you kill the webs ability to do that, people will build something else.

The we have to go through the rigmarole of securing this whole new platform with the same bugs but in different ways.

Instead of neutering the web, let's build secure cpus.
Are Big Brands the Next Market Bubble?
I'm amazed how positive reaction this article gets on HN. This guy is an asshole!

It starts with author calling his users "fools" for not randomizing useragent (while he himself is a fool for not using useragent correct way - to know what hardware/software accesses his service). Then he goes super happy "hah, great, let them crash competitor websites". Then he realize "This is the biggest opportunity ever!". He tries to sell his service for small amount of $1 per day for using free WhatsApp. "I had no idea how much money Indian users spent on online services." Quick google search reveals that daily wage labour gets 2-3 $/day.

What he does next?
He sends his users to promote his website at social media. Follow and tweet about my service and I will allow you to use my service - he promises, except it is not a payment method - it's a lie. But free advertisment is not enough for this guy. It's "his biggest opportunity ever"! He sends his army to "troll my competitors". "That was super hilarious. I was literally rolling on the floor laughing."

"users would tweet, follow, like, and do anything I tell them to get access to Browserling" except he didn't let them access Browserling. They are just numbers for him, a viral mob that will do whatever their god tell them to do. And as a god, he doesn't care about his promises. Well, he could, but it's too much work and there are more interesting things to do for him.

His final solution - more lies and unethical behaviors.
"Increase your chances in lottery by promoting my service" - chance does not change
Depending on your luck, the same amount of money will give you day, week or month of a service.

This guy is an asshole, his behaviour is unethical and wrong. I can't believe it gets positive feedback here.
That's basically a jump table. Still vulnerable to spectre (variant 2) without mitigations, btw.
I live in Massachusetts; there’s been tons of entrepreneurial activity and excitement regarding the legal marijuana business.

It’s been estimated that this could become a $1.1 billion industry is MA, which means employment for many people here: https://www.bostonglobe.com/business/2016/03/27/legal-mariju...
This isn't a case of better or worse at shoveling snow, though. I mean, it could be, but that's not what this implies. It simply states that maybe women shovel in a way that doesn't lead to heart attacks so easily, which wouldn't be that far into fantasy. It isn't the first time we've noticed such things.

For example, "throwing like a girl" is a thing for most girls, caused by the way the body is put together after puberty (before puberty, males and females throw similarly). There are some exercises that are great for men but not women - it makes the pelvic bone get weird for some women (can't remember the specifics. Its been 20 years).

Considering all this, it is quite possible that women naturally use different movements and different muscle groups to do the same job because of their physical differences. And perhaps this causes less strain. Or maybe it is hormones.

You know, or maybe more men shovel than women - they just didn't want to rest on such an assumption when they don't know it to be true.
Ask HN: What do you need an Internet fridge for?
Lazarus 1.9 on HaikuOS
We definitely need some kind of mechanism to authenticate APs, right now we only have the SSID and MAC, both of which are trivial to spoof.

There isn't even any collision detection, nothing stopping you from giving your AP the same SSID as an already present AP, and clients will helpfully connect to whichever one has the strongest signal, which is probably going to be the rogue AP right next to you, rather than the actual Starbucks AP at the other end of the store. According to 802.11, APs with identical names are considered to be part of the same network, no questions asked.

I consider it a fundamental flaw of wifi, alongside the boneheadedness of WEP ("wired equivalent protection"... Yeah right, pull the other one), and the idiotic layout of channels in the 2.4GHz spectrum.

The only way to use wifi as a consumer is with WPA2 (AES only, no TKIP) a randomly generated strong passkey, and all smart features turned way off (security holes such as WPS). For any AP that you haven't personally set up and vetted, and especially open public APs, a VPN connection is absolutely mandatory. And I still wouldn't trust it 100%.
Plus, video footage of the car in space could have been obtained in this launch, then conveniently released after Falcon Heavy launch. Neat conspiracy theory!
cant buy me .love
It's too late.

For many years (decades?) I got downvoted (here and on Reddit) for mentioning that I used NoScript. I even disabled JavaScript completely on Netscape Navigator.

It was in the context of sites that were unusable without JavaScript or security problems that only affected JavaScript in browsers.
Short love story about Adyen and service objects (Ruby on Rails)
(<speculation>)Maybe because offices are calmer, so it's easier to concentrate?(</speculation>) It tends to work for me so I would be curious to know why it is so.
What you are saying seems preposterous and fails Occam's Razor badly. It seems you and many others in this thread can't accept that maybe SpaceX is fallible and can make mistakes and you are formulating fantastic conspiracy theories to support your view.
Some of the newer Intel server CPUs allow statically partitioning the shared L3 cache between cores. It might (or not) work as a way to reduce side channel communications between cores.
A Totally Accurate History of Programming Languages
European governments don't actively evacuate people from warzones at grand scale.
Stop with the propaganda.
The narrative sounds a bit like the story of Chernobyl. Except with less (for now) human suffering.
You mean those eternally scrolling pages whose main purpose is to hide content that belongs to the user in the first place? These sites are a pest.
Agreed, he is an asshole and this is an unethical way to monetize
Scientists uncover why sauna bathing is good for your health
Emphasis "when signed in".
> I do think the idea of "less interested" is shallow and ignores every other explanation. For example, women are a majority in health care but a minority of doctors. Why?

It's not that shallow. Using your example, the interesting things become visible when you dig down into different types of work done in the medical profession. Scott Alexander has a very convincing piece on the whole topic:

http://slatestarcodex.com/2017/08/07/contra-grant-on-exagger...

The issue of interest is tackled in section IV of the post. If you scroll down to the end of the section, there are interesting charts there, showing gender distribution of doctors among medical specialties. The distribution happens to align nicely with the theory of differences in interests, explored in that section.
> Spectre fools the processor into running speculative operations -- ones it wouldn’t normally perform -- and then uses information about how long the hardware takes to retrieve the data to infer the details of that information.

After reading several in-depth analysis of this vulnerability and then trying to explain my non-tech friends what this is all is about (disclaimer: I'm just a developer and don't work with assembly, processors or security), I have to admit that it's a pretty awesome executive summary of the issue for a non-technical reader.
A bit like calling the National Enquirer a “major American newspaper”.
Actually multiple CPUs are not normally hidden in mainstream programming languages [1]: i.e. threads are visible. The fiction that it is maintained by the programming languages and hardware is that of a single, coherent address space, which Cell very much did not have.

[1] outside of parallel iteration/folding constructs.
What's the point of decentralized (vs. centralized) cryptokitties?
Someone asked me this question the other day. Have my own opinions but would love to hear what you have to say.
A complete list of privacy crypto coins
2/3 SFO, 1/3 SEA
The "assemble the right team" part is pretty crucial here I´d say. Without a well fitting team there´s not much to manage. I´ve had some bad experiences with that in the past. If the team members have problems amongst themselves, it is very hard to get stuff done in the first place.
Notes on Blockchain Governance and Voting
No, Unicode text is not broken. It’s either your program that’s broken, for it is interpreting ISO-8859-X/Windows-12XX/whatever as UTF-X; or the program that produced said data.
I have a few of these chips in my desk. I was building a slightly less ambitious 2 SN76489 synth using a Teensy LC as the brains.

Some kind of wiring/soldering snafu has me stymied though. Works fine on the breadboard but fails on the strip board
Toapi – Let any web site provide APIs
So I have a startup in France, and you think my FooBars will make a mint, so you invest. I get $1000 from you, and convert that to Euros to do business. Turns out my FooBars are not good, and I can't get a business license in France... so after a years effort we call it off, and you want your money back.

Assuming the euro gained 10% value in the interim, are you claiming as an investor before the investment vehicle was realized that you are rightfully owed $1100? Or the corollary, had the Euro tanked to 10% of value, would you accept $100 back without complaint?

I think you are conflating investment and ownership.

That grown value in Euros is value grown inside a corporation and either you own some of it, in which case you will get dividends, or you made an investment with some limited risk in which case it's your investment value that is relevant. I believe if someone lost your money without completing the terms of investment you would have legal recourse.

Had the ICO people given worthless ETH back they could have been sued for the difference, investment terms willing, IMO as a non-lawyer.
You don't need to sign in. Everybody knows everything about you. Whether it's through tracking cookies, or through Google Analytics, or through device fingerprinting.

Google quoting privacy concerns is especially disingenuous, as they can track you and your activities across multiple devices.
I had a project a few years back to connect my indoor bike trainer to google streetview -

https://dzone.com/articles/virtually-cycling-the-alps-with-a...

I ended up using the ant+ dongle and connected straight to my laptop. Using the GPL code from GoldenCheetah for the handshakes -

https://code.google.com/archive/p/routeviewer-antplus-bike-c...

It was a nice project but refresh rates were too slow - i should have built trainerroad!

I keep thinking about doing the same with rasp pi and retropi, then use hr, or speed to control a game. but dont have time at the moment
I used to know someone involved in launch insurance. It's a thing. Presumably not one available to super secret squirrel launches like this, though (although one might guess that Northrop could sort something out).
It sounds like it's going to be difficult to monetize.

It's better to build apps for iOS because those users have the most money and spend the most on apps. Android is further behind but still reasonable... If you're targeting users of some cheap $20 phone, then obviously there won't be much money in it. Plus the cost of running a virtual environment for each of these users would be too high I suspect.

This could be used as a tool for mass social manipulation though. Browserling could transform Instagram feeds into whatever it wants... Could potentially be used to spread fake news and spark protests.
And now as the colony is culturally (among other things) the most powerful/dominant actor on the stage of the world, the mindset is infecting the "old world" back.
I was thinking exactly the same thing! He is ripping them off and abusing the users.
It's tacky reading "y'all" in an official google blog post about how they're going to hijack browsers to further centralize the web, and where they're suggesting that giving google all the traffic helps improve privacy, but I guess that's the kind of world we live in.
Tunelizer – A Music Discovery Service where Music and Artists can be rated
I don't think WebAssembly is going to bring back Flash or Java Applets in any meaningful way. Maybe someone will hack something together and use it for niche old Flash game sites, but it's hard to see a reason for widespread adoption of anything new. People have moved on.

Flash and Java Applets may not be "dead" forever, but they also are not likely to ever be more than undead zombies.
I miss the command-line interface of Bazaar, and the fact that you can undo reverting any changes to a file. The equivalent in Git (`git checkout -- filename`) is impossible to undo. I'm still going to use Git, it's a really great tool once you climb the learning curve.
"It starts with author calling his users "fools" for not randomizing useragent"

He thought he was getting DDOS'd at first, and his attackers were using one useragent. In which case, they would have been fools.

"Then he realize "This is the biggest opportunity ever!"."

It __is__ a great opportunity! For the HN audience, a large influx of users is considered a great opportunity.

"They are just numbers for him, a viral mob that will do whatever their god tell them to do."

There seems to be a lot of negativity around this. I thought it was hilarious. Would there still be outrage if the users were American instead of Indian?

"His final solution - more lies and unethical behaviors"

I would hardly call it lies or unethical.
1. he isn't obligated to do anything
2. he ultimately delivered a usable product with a paid option to the service. Sounds like any other freemium app or in-app-purchase
> This will not happen

Note that we do have good Open Source CPU designs, though, such as RISC V.
Involuntary Neil Stephenson reference :-)
This also depends on where you live. I eat local as in at least local to my country because I know the regulations etc. I know there is zero chance an animal had antibiotics while healthy for example, whereas in the country a few hours drive away, it's more the rule than the exception (Guess where I am).

"Local" as in "nearby" I try to buy because it gives me confidence in how the product is produced. I'm too fond of eating animals to become a vegetarian, but I could see myself eating only animals I have that I have reasonable idea of how and where they lived.

Completely agree with things like tomatoes though: it's much better for me to buy tomatoes shipped in a boat from spain than buying them grown in a heated greenhouse next doors. But that brings me to my next pet peeve: don't just eat local, if you want to eat local make sure to also eat seasonal.
> It's the price we pay for [x]

Is this actually inevitable? Why and why should you pay this much?

grecy asks "How the heck are we allowing" and you reply "just pay because the only other choice is [unacceptable alternative]".

This does drive the price up, doesn't it? How does that help?
Depends on the country. In US, it seems that everybody does their taxes and all salaries and income are discussed as "before tax"; in Russia, for example, all taxes and payments for employees are done on employer's side and all salaries and income are usually discussed as "after tax" - people don't even usually know how much are they earning "before tax".
What about his monetization is unethical? Where is the moral conflict?
Probably use the cheap phone to transfer video or pic since data plans on Jio are very cheap. The people who are buying these phones dont have lot of disposable income.
> bigoted academic clique

Ah, everybody's a bigot but the actual bigots
I was also wondering about the option of using a VM. I am running Ubuntu quite happily in a VirtualBox VM on MacBook Pro.

Having used the Lenovo Thinkpad Ultrabook with 24GB RAM it is a very good and fast machine. Unless Apple pull their finger out on the MacBook Pros I'll probably buy the Ultrabook next time and dual boot Windows 10/Ubuntu.
What is he supposed to do?

His initial reaction when he thought he was under attack was fine and the second reaction was immature and lacked empathy but he was likely facing an unexpected problem that he couldn't figure out how to handle but very soon got on the right track.

Those servers and bandwidth aren't free. Bandwidth to tier three countries is actually more expensive.

Advertising revenue is basically non-existent for tier three countries, conversion rates and LTV is super low, ltv for the group of user that are using his service for whatsapp will be in the range of 1-5 Rs, ~(1-8 cents).

He will eventually have to block these countries again if he can't figure out a way to indirectly monetize these users. Or he will run out of money and the servers go down.

The best thing for these users would be if he can figure out a way to make it sustainable, and that means to monetize these users.
You can, like, totally rule it out.
In the author's defence, it sounds like these users were creating an existential threat to his service by using it in unintended ways. It's kind of expensive for the author to run virtual machines for all these people. Though the author tries to add a positive spin to this, I'm sure that the story is more complicated.
You haven't been on the Internet in the past few years, have you? :). The fringe, while a small minority, has also been the loudest part of the feminist movement in this decade, and it's the impact of that fringe that can be seen responsible for such overreaction to Damore's memo.
> Would there still be outrage if the users were American instead of Indian?

This is exactly the point. There would only be outrage if the users were American. There would not be a positive response here.
>Honestly, I think running webgames in a super-sandboxed flash (or similar) runtime is the best thing to do.

Why is one ECMAScript sandbox (flash) so much better than another?
Hadnt planned on a side project - but my son wanted to learn about computers. So we're connecting a rasp pi zero + camera up to the bird feeder to take photo's of birds, with a plan to post to instagram. So far no birds on feeder

Anyone able to advise on the easier way to run it off solar power?
If that’s what people want, then why do we need laws to ban the alternatives almost everywhere?

https://www.strongtowns.org/journal/2013/1/14/its-so-much-mo...
Could you describe some of these practices?
> Or is someone teaching that "X units squared" is a valid way of specifying a square room of X units per side?

I've been taught that this is standard usage, and I've seen it elsewhere. Personally, I've gone out of my way not to write this way because, as you experienced, a good fraction of people will not be familiar with it.
The author's attitude towards his users reminds me of the young Zuckerberg who called his users "Dumb fks" for giving him their emails, pictures, addresses, SNS because they "trust me".

He might also be successful if he plays his cards right.
>It’s possible to put an advance order in place to sell shares on a plan, which clears the issue because that decision is made in advance.

That's what he did, no?
It's a genuine mistake like lead in gas/petrol. The financial people will like this event but I wouldn't be surprised if it ends up near to zero sum (delayed purchases). They won't give time to three letter agencies to add to the new architecture and the public are too aware of it possibly happening.
How fast can you bit-interleave 32-bit integers?
Sounds like he was a bad culture fit.
Oprah Winfrey for President: Have We All Gone Bonkers?
I know this guy. He's not an asshole. But I do think this could of used more research and slightly less trolling. However I think it's pretty funny in a way. Overnight you think your site is being hacked, to be suprised it got popular! So I can see why it would need to be monetized as it was really meant just for web developers. And since web developers are a smaller market than everyone in a entire country trying to use it to use a chat app, it had to scale to cope with the overnight unexpended demand.
How to Avoid Common Event Failures Without Doing Much
O Americans, I would like you to keep it in mind that the only country than shares a land border with USA and is not a NATO member is Mexico.

It is generally a bad idea to have a failed state on your border, but moreover to have one that will be eager to host few Russian tank regiments.

Soviet agents were all around Mexico during cold war years, there is nothing to suggest that they were recalled after the fall of USSR.
How VR Is Transforming the Automotive Industry
If UBI truly is basic income that is livable then labor costs will go up, and thus production costs go up.
> Emic vs Etic: Dangerous form of mental laziness.

Agreed. This model seems akin to prejudice.
> A step in the right direction

AMP is a pest. A textbook example of all things wrong with the web today. I'll spare you my thoughts because it would only be filled with hate, foul language and insults. Good luck with it though.