skysight-inc/HackerNews huggingface dataset:
> I'm not happy that Intel, Google, Red Hat and a few others have known about the bug for months and the upstream kernel devs are scrambling to build mitigations and still don't support the microcode mitigations. Google apparently patched their stuff in September, while everyone else is left out in the cold. This is a real mess. Surely there must be a better way than telling a few select companies?

I think Colin's take[0] was interesting and insightful there, especially in the light of him having handled a very similar issue a decade earlier:

> The way these issues were handled was a mess; frankly, I expected better of Google, I expected better of Intel, and I expected better of the Linux community. When I found that Hyper-Threading was easily exploitable, I spent five months notifying the security community and preparing everyone for my announcement of the vulnerability; but when the embargo ended at midnight UTC and FreeBSD published its advisory a few minutes later, the broader world was taken entirely by surprise.

> Contrast that with what happened this time around. Google discovered a problem and reported it to Intel, AMD, and ARM on June 1st. Did they then go around contacting all of the operating systems which would need to work on fixes for this? Not even close. FreeBSD was notified the week before Christmas, over six months after the vulnerabilities were discovered.

> […]

> To make things worse, the Linux community was notified and couldn't keep their mouths shut. Standard practice for multi-vendor advisories like this is that an embargo date is set, and nobody does anything publicly prior to that date. People don't publish advisories; they don't commit patches into their public source code repositories; and they definitely don't engage in arguments on public mailing lists about whether the patches are needed for different CPUs.

(emphasis his)

[0] http://www.daemonology.net/blog/2018-01-17-some-thoughts-on-... final section on vulnerability disclosures
I'm testing out tiddlywiki (https://tiddlywiki.com/) as of right now. I really like it so far. Used to use org-mode, then plain old google docs. Right now for me it's between onenote and tiddlywiki.
I agree with you that as automation takes all the jobs, child and elder care will be the work everyone shifts to. I think we should be doing more of this now. Better elder care would help keep people on their right meds and could greatly reduce healthcare costs. Better child "care" could be lots of things but will lead to healthier, smarter, more inquisitive children that will become self supporting and out of bad paths saving society more there as well.

I think one thing that people miss slightly is that some of this is our own fault. Everyone is heavy on the chase (me incl.) of things. We want full meals in a box at our door without the annoyance of doing any work for it. Some of our need for extra work and both adults working comes from our demand that we have a huge house and two new cars and two huge vacations and everyone has an iPhone X and on and on. You have to either work more or spend less and we've generally chosen work more. There is nothing intrinsically wrong with that but we need to accept the consequences.
How to tame the tech titans – Competition in the digital age
Xilinx has a pretty clear disincentive to optimizing Vivado for minimum area. If it does a bad job optimizing, the user is forced to switch to a larger FPGA -> more $ for Xilinx.
All hail the word of unaccountable economists!

I’m sure they’re pure of motivation when approving of a system they know how to game inside and out!
Competent Elites - The World is Stratified by Genuine Competence

https://news.ycombinator.com/item?id=16186279
One of the many propaganda topics during the civil war was that the Russian Empire was oppressing many minor ethnicities and cultures. They called the Russian culture velikoderzhavny (a kind of “imperial”) chauvinism. And the USSR was made to unite all ethnicities and make everyone equal. Everyone except Russians. Bolsheviks worked hard to build a new culture without that ”imperial culture”. So they killed or imprisoned many scientists or educated people born in the Empire, tried to build new culture, etc. The main personal trait of those activists was the absolute moral superiority over “imperial oppressors”, which was especially useful during tortures and mass executions — they were exterminating a class, not individuals, so there were nothing personal in murders (this is a citation of Martin Latsis [1]).

Of the post civil war USSR I can recall one thing that was common. One could only have a successful career provided that they was “clean”: non educated parents, no bourgeois relatives in the past, relatives helping build the communism (e.g. in charge of mass executions).

So, the “clear” understanding of what’s good and what’s evil together with the moral superiority make justice trivial.

P.S. Throwaway for obvious reasons.

1. https://en.wikipedia.org/wiki/Martin_Latsis
This command does not show anything on my ubuntu 16.04 lts machine.

grep . /sys/devices/system/cpu/vulnerabilities/*

is there an alternate command for ubuntu?
But, when those extremely rich are siphoning money away from others (via paying for laws that favor them, exploiting workers, etc.), it absolutely makes sense to say, 'Hey, you don't need all that. You need to share more than you are.'
Abstracting the Lego Brick (2017)
>If you want to know where the tech industry can be attacked, it's in that massive inefficiency.

How is this different from any large, ambitious project? It's also essentially an art project where you have to make content people enjoy, so engineering resources won't save the day like they can in tech. And you can end up in a place where your lead visionary ended up in a place where they just couldn't deliver on it or it just wasn't the necessary vision, so you have to replace them.

Seems weird to ascribe all this to "tech". Turns out, things are hard. To me, Destiny 2's failure has more in parallel with the fact that most people never finish developing a game nor writing a book.
In the wild malware preys on computers dedicated to mining cryptocurrency
8 Industries Being Disrupted by Elon Musk and His Companies
In fact the fission[1] part in such small scale is hard. Curiosity and other probes using thermonuclear batteries harness alpha decay[2], which is relatively easy as it happens whether or not you want it to happen, but creates also much less power. In that case the hard part is to obtain material with appropriate half-life and other properties. Perhaps best material for this is Pu-238, which is far more expensive to create than weapons grade plutonium.

1. https://en.m.wikipedia.org/wiki/Nuclear_fission

2. https://en.m.wikipedia.org/wiki/Alpha_decay
This certificate is geared towards CS, Mathematics, or Engineering students or enthusiasts or self taught programmers and engineers.
The job: Application Support Analyst, IT Analyst, Tech Support Analyst... You'll find the job descriptions on Indeed.com..... If you are currently an "IT major" you may learn some of this material as part of your major coursework. Otherwise, calling it "IT Support" would be very misleading for someone like me who has done Help Desk/Desktop/ Networking/System Administration/ Networking security for the past 13 years with MCSE, COMPTIA, and Cisco certifications and I'm giving someone advice as for as which path to follow.

Now with that said, a "job" consisting of these skillsets is more of a TIER III/IV in IT Support, but can serve as entry level experience for DevOps for CS or engineering functionaries (CS grads and self taught).Especially someone like me who already has technical IT experience and it is a requirement that I am versed in at least one scripting language and some automation scripts and tools.

My advice....this certificate was formulated as a gateway to DevOps, technical support, not "IT Support," in the traditional sense. You won't receive calls about not being able to retrieve emails, paystubs, lost files, identity management and access. However, if an internal company app or the companies software product is buggy, that's where you start. "Back-end IT Support" would be more accurate.
> I'm afraid this is the kind of problem where there is no easy solution.

Issues on a similar scale have been properly handled in the past: http://www.daemonology.net/blog/2018-01-17-some-thoughts-on-...

> The way these issues were handled was a mess; frankly, I expected better of Google, I expected better of Intel, and I expected better of the Linux community. When I found that Hyper-Threading was easily exploitable, I spent five months notifying the security community and preparing everyone for my announcement of the vulnerability; but when the embargo ended at midnight UTC and FreeBSD published its advisory a few minutes later, the broader world was taken entirely by surprise. Nobody knew what was coming aside from the people who needed to know; and the people who needed to know had months of warning.

> Contrast that with what happened this time around. Google discovered a problem and reported it to Intel, AMD, and ARM on June 1st. Did they then go around contacting all of the operating systems which would need to work on fixes for this? Not even close. FreeBSD was notified the week before Christmas, over six months after the vulnerabilities were discovered.
Put feature flags around new features, add a “show beta features” setting. Allow people to opt-in.
Confronting Your Fears and Taking a Leap with Pieter Levels of Nomad List
On contrary, if there's no anxiety over unused accounts, clients might more easily buy larger plans.
My personal favourite is "I bought this three years ago and don't have it anymore. I don't remember."
NorfSyde Goon (Problem)
> What people want, say they want, and how they act are separate things.

Yes, that's exactly what needs to change.
That's not at all clear to me, I'll never work for an arms manufacturer or casino because those activities don't align with my values.
Thanks for all the hard work.
The Kubernetes Journey from Research to Production at Presslabs
Like this: https://en.m.wikipedia.org/wiki/Transputer
for ubuntu command check here: https://askubuntu.com/questions/992137/how-to-check-that-kpt...

Here is one of the commands recommended in that thread:

grep -q "cpu_insecure\|cpu_meltdown\|kaiser" /proc/cpuinfo && echo "patched :)" \
|| echo "unpatched :("
I don't have much to say about most of this (in either direction) but I will point out that academic cryptography is not the same as academic (Usenix-style) security; cryptography is a junction between mathematics (as in, "the math department") and CS, where security is entirely a subtopic of CS.

I don't know what was going on at EuroCrypt in 1997, but I've been to workshops within the last 5 years, and the number of women involved was startling. Which, of course, squares with the statistics for gender parity in CS (bad) vs. mathematics (better).
Of course it is ambiguous. You and the corn farmers both can make a case. I wasn't making a point about how lovable politics is, but why it's needed to the misguided character above who has reached a conclusion that "smashing" the system helps. The system is all that keeps you and the corn farmers from picking up a gun and removing ambiguity.
Abo-abo/lispy: Short and sweet Lisp editing
Start your own open-source project on GitHub
I moved to Chicago last July and am in the process of getting rid of my car. I hate driving here.
> What's your view on the prevalence of unsupported prejudice

I don't like the careless negativity about non-european people that you see on the alt-right, but I see much more casual negativity towards europeans on the left that goes uncommented on. Broadly I'm coming to agree with Greg Johnson: the best way for peoples to get along is for each people to have their own sovereign country, and I don't think that has to come from a place of viciousness. I view european people the same as I view the japanese, israelis or nigerians: they deserve their own countries and spaces to live the way they see fit.
Such databases exist, and they have helped a little, but they barely justify the investment, so far.

cancer mutations are a complex thing. It's not as simple as: linear function(vector_of_mutations) -> perfect diagnosis of cancer type.
Used to use Quiver (http://happenapps.com/) but now switched to Bear Notes (http://www.bear-writer.com/).

Both support Markdown and Syntax Highlighting. Quiver is lot more full featured programmer's notebook but I like Bear because its light and I prefer tag system.
Not really. He had a very successful ecommerce business[0], so he had some money to spend on his new hobby, which is a non trivial point I suppose, but as far as I can tell he picked up photography for the first time in his 40's.

[0] https://www.balkowitsch.com
U.S. CFTC sues three virtual currency operators for fraud
What a mess this has been so far... I appreciate all the effort kernel folks had put in it until now but the whole tier 1 companies cabal thing is just disgusting and it made the problem worse with the early disclosure (not to say "leak" if you count LKML diffs flying around). If at least all the cabal parties were equally covered and protected by now, but nope nope nope. If I were a kernel developer not working for any cabal party I would be very pissed off.
Wish Amazon did this.
Since the publishing industry as a whole is on the edge of bankruptcy, this is just a response to ad blockers not being able to block these kinds of ads. You didn't want ads, you get them anyway as part of fake reporting.

People running ad blockers shouldn't have an opinion on how publishers run their operations. It's just tit for tat.
I have great success getting second hand books through amazon. My wish list is up on camelcamelcamel and then every so often someone comes along and puts up a book I want for dirt cheap. I get a notification and if I am quick enough get the book ordered straight away. I've managed to get some books that normally go for £40 for £5 + postage before.
I re-read the article. It's unclear to me that CBP explicitly told him that he was being denied renewal because he had tried to import a counterfeit good. It may be the case but he doesn't come right out and say "they told me..." As opposed to him just assuming that this must have been the issue.
That is an interesting use of gmail drafts. I'm sure you stretched the usability to the limit and found pros and cons going to a wiki.

I use orgmode, starting with a buffer with a few headings, URLs, and paragraphs on a topic. The buffer may be killed the same day or turn into 100k words spread over a few files a few years later, still easily searchable with org-agenda or grep and automatically exported to HTML for viewing on mobile. I don't bother with images or mobile editing due to complications--those are the main drawbacks.
I've spoken to Jon Corbet, publisher of LWN, about sharing subscriber links on HN. He's fine with it. Here's the link Greg KH references:

https://lwn.net/SubscriberLink/744287/ec63c9aa1fe236c7/

Please get your company to subscribe to LWN. It's an amazing resource and needs your support.
Level up your Messaging Marketing game with retargeting
It will be interesting to see which side Amazon takes. In theory, it would seem to be these hospitals. However, Big Pharma has the (financial and political) muscle (and will) to add friction to any Amazon.
AMP was for mobile. That prior change was for desktop. This new change is for mobile. Ergo why didn't they start with an SERP boost for fast mobile pages period rather than the AMP system.
I’m shocked there’s 59 comments on this and almost nobody is saying the obvious, “what proof of any kind exists that this is the reason he was denied?”. This is pure speculation and I’m predicting it’s totally wrong.
As Bitcoin Sinks, Crypto Bros Party Hard on a Blockchain Cruise
Why not? The operating system is the device driver/HAL. The Browser is the operating system. The webpage is the application.
Nobody is checking. They're in private cars and small vans, so they aren't on a tachograph. They're technically self-employed subcontractors, so Amazon has no statutory duty to monitor driving hours. IIRC they're paid per drop rather than per hour. I have no doubt that a significant proportion of couriers are habitually working unsafe hours. In my neck of the woods at least, couriers working for Amazon or Hermes are overwhelmingly a) Eastern Europeans who look chronically sleep deprived or b) semi-retired Brits doing it for a bit of extra cash.
7 Guidelines for Funding New Research and Development
React/Redux and Bootstrap webapp starter
Some Thoughts on Journal Impact Factor
The problem with Amazon listings is that any seller (official reseller or not) can put a product up for sale. Amazon defaults to the cheapest seller listed as new (if you have Prime, sellers that offer Prime shipping will chosen over a cheaper seller that charges separately for shipping).

The problem here is that when you buy from Amazon, you expect that you're buying it from Amazon. But with they way they have it set up, it's also very likely that you'll buy from another seller that's a few pennies cheaper than Amazon, with Amazon facilitating the sale.
> GPS is also the biggest battery hog on the device

How do you measure this? At least on the android devices I've used I've never seen a line item in any metrics that shows GPS as a thing, at all, nor have I noticed any location based app being generally in the top 5.

For me the battery consumer is screen time.

As to why I leave it on, I like it - I like the hot notices about things in my area, and I use navigation quite a lot as Waze's traffic re-routing ability is useful to me.

It's amazing - people like different things!
Why you should take a look at Kotlin's standard library
If you purchase counterfeit goods via mail-order from an overseas seller then you're technically an importer, which is very much illegal.
For someone just getting into web development, would you point me to some resources that describe how to find and pull this data?
WhatsApp builds a customer service app for businesses
Wind with batteries? Build it quickly and it could cost $21/MWh in Colorado
I'm guessing that's because Amazon sends out emails explicitly asking people to answer questions on their past purchases. And for some reason, this makes some subset of people feel obligated to reply even though it makes no sense.
In fun, a contrary perspective: at least with woodworking tools, they don't become obsolete in 2-5 years just from laying dormant on the shelf!

Seriously, though, couldn't agree more, I've said some variation on everything you mentioned for many years. Especially the mess part. I would add the risk of personal injury, too.
all that natural light talk and then studio lights at the seatings.
It’s easier than you might think, I used to blackhole anything non-Cloudflare and they offer a list of their IP’s:

https://www.cloudflare.com/ips/
Using a Wordpress theme for it with all post formats supported (link, quote, aside, etc)

https://mothemes.baby

If you want to try (in test mode now) send me an email to the address from my profile
I’m confused… The article led me to recheck whether I’m loading the newest Intel ucode update during early boot, and it turns out I am, but the latest ucode revision for my Ivybridge machine is from 2015. Didn’t Intel push microcode updates for all affected systems yet, in preparation for more spectre-related mitigations?
> The important details you haven’t noticed are invisible to you, and the details you have noticed seem completely obvious and you see right through them. This all makes makes it difficult to imagine how you could be missing something important

This. And how you could be pointing out something so self evident and it falls on deaf ears.
If you're getting paid to do this you are not a journalist. Can we please stop using the word journalist / journalism when we mean: reporter, hack, whore, propagandist, marketer, etc.?
However, you would probably avoid what happened to this guy in the story since it would be coming from their fulfillment centers. You more than likely wouldn't be tagged as importing counterfeit goods.
Markdown to Evernote, but I'm also keen on embedding little screencasts in my notes. It's sometimes a great memory jog to have an old terminal session reanimated and popping up in response to your keyword search results.

It's also been useful for a 'show rather than tell' approach to technical Confluence documentation.

I've previously used LICEcap and Screenflow, but SnagIt also has some nice video capture options, with an option to convert to animated GIF. Also becoming a bit of a fan of Camtasia, but the output is regular video.
http://programming-motherfucker.com/
I still keep a paper atlas in the car of the entire US. Batteries, entire phones die. Cell signal is not ubiquitous.
Remember what a coworker did that made your job better. Try to do those things.

Remember what a coworker did that made your job worse. Try not to do those things.

Remember that everyone is subject to the Fundamental Attribution Error ( https://en.wikipedia.org/wiki/Fundamental_attribution_error ) including you.

Be kind.

Teach. Explain. Whenever possible, provide guidance and policy rather than orders.

Find an organization method that works for you, and use it consistently. Don't worry about it being the best method, as long as it is good enough. When it stops being good enough, keep your experiments in finding a new method away from your coworkers.
It's probably not much different, but tech is a force multiplier, and we are discussing the tech industry. There are many companies that are oversized. It doesn't take 800 people to make a mediocre game. You can make a great one with 8, but many big orgs aren't structured in a way to take advantage of that.

If your goal is to put out the equivalent of a Hollywood blockbuster every few years, then that model "works" (or it works for the publisher), but if you want to make a great game, there must be better ways of doing it.

You don't reboot a project of that size a little over a year before release without major management issues (this is not even counting the issues that saw Joe Staten and a lot of the old Bungie team leave in the middle of Destiny 1). By all accounts, Destiny 2 is a step backwards from the original. If you've got a working engine and a lot of artists and virtually unlimited resources (as Bungie did), all you've got to do is not fuck things up. But they did.

There's an inefficiency there that's preventing good games from being made, and it's not just because things are hard, because they did most of the hard stuff 4 years ago.
Aren't all these problems that exist for all unauthenticated traffic, wifi or not?
The brew postgresql-upgrade-database command is a fantastic idea. It's not a huge deal to upgrade by hand, but enough of a hassle that I tend to fall behind.
I think you're right. That sounds exactly like something amazon would do and how people would respond. I must have turned those emails off, which makes seeing the answers utterly stupefying.
I hope this also means the end of shitty, wasteful blister/clamshell packaging. It's about time we use materials that decompose, occupy less volume, and don't damage my hands when opening them.
Lebanese Intelligence Turned Targets’ Android Phones into Spy Devices
Homebrew is great, only thing that bugs me is auto update executed before each command, kind of slows down user experience.

upd: to disable auto update

export HOMEBREW_NO_AUTO_UPDATE=1