skysight-inc/HackerNews huggingface dataset:
No, Spectre breaks (reads) kernel memory too, and the authors are explicit about this in their paper.

It allows you to attack any security domain you can "call out" on the local host, whether it is some other process, another security domain in the same process (e.g., a JIT running JavaScript) or the kernel.

The authors used JavaScript and cross-Hyperthread/process disclosures as their primary examples probably because at leas the former is especially devastating given the ease of running JavaScript remotely when someone visits a malicious website, and because it differentiates it from Meltdown (which is mostly only about reading kernel memory) - but executing either variant is even easier against kernel syscalls (no need to attack across the JIT layer).

The huge amount of work been done on kernels to mitigate Spectre is evidence of this.
The only place I've encountered that word, is from reading the book, and on online tech forums. No one in my 37 years of life, has ever said that, and I've been in the IT/Web side of things for the last 20.
There's a feedback model which claims that under-correction can help reduce myopia, which is especially relevant for extended computer usage:

Antonio Medina, Detecting the effect of under-correcting myopia, 2015:
https://www.academia.edu/29691342/Detecting_the_effect_of_un...

Peter R Greene and Antonio Medina, The Progression of Nearwork Myopia, 2016: https://www.omicsonline.org/open-access/the-progression-of-n...
> the goal is to ensure they always keep product in stock, and the "holes" are a forcing function

This empty shelves thing is enough of a thing that it seems like it's not really working.

And empty shelves sends such a terrible message to everybody who encounters them that I question the wisdom of who picked that as a "forcing function." Whenever I see that in a store, it just reeks of failure and decay.
A simple example is you bucket your data into monthly tables such that when you run a query that has a timestamp constraint, the query analyzer is smart enough to only scan a subset of the tables that are relevant to your query. It's also really nice for expiring old data with table drops.
They are too big to fail. It is us, the users, who have a problem: we have to put up with their mess and shady tactics.
This assumes the mined resources would be brought back to Earth. Why would we bring resources back down the gravity well? The real value is mining and manufacturing in situ. The real race is to become the first person to build a manufacturing facility in orbit.
Sounds suspiciously like a LUT
Apple CEO becomes latest tech bigwig to warn of social media's dangers
Ohio went after out of state companies for example Newegg
and Crutchfield. The Ohio supreme court ruled it was legal and didn't violate the federal supreme court ruling on sales tax in Quill Corp. v North Dakota. They call their gross receipts a "commercial activity tax".

I think they are a bit biased since the state supreme court ruled in the state's favor. I rather the federal supreme court rule instead.

I guess according to them if you sell $500,000 worth of products to residents in Ohio, you now have a nexus. Even without any warehouses, contractors, employees, etc in Ohio.

https://www.pillsburylaw.com/en/news-and-insights/ohio-supre... and http://www.courtnewsohio.gov/cases/2016/SCO/1117/150386.asp
> Switzerland has been searching for a new USP in finance since the end of banking secrecy

Money laundering was a stain on our country. Swiss private wealth managers have a unique heritage of experience in managing multinational fortunes. UBS and Credit Suisse are also, while not traditional Swiss private banks, international economic titans. The continued profitability of Swiss banking contradicts your view regarding secrecy and a loss Swiss banking sector.
Apple did, and I’ve had others do so in the past as well.
$6 a credit with a $60 cap to do almost all my lower-division coursework before I went off to university isn't all that bad if you ask me.

Yep, the '90s were "gangsta" as the kids say...
I suspect that the quality (therefore price) has gone down on most of what they sell. Result: the goods don't last as long and don't retain value as well, and most people looking to buy can probably afford new.
Crello: Create stunning visuals for your projects
Yeah, M-Series aren't made for things like smartphones. They're primarily IoT and Automotive focused, and the M0 and M0+ variants are positioned as 8 and 16-bit microcontroller replacements. Vendors typically don't add DDR SDRAM controllers to their implementations of M-Series cores, so memory is limited to SDR, which would be too small and too slow for a smartphone. Processor speed is also too slow - generally in the 10s to few hundreds of MHz range, with ~300MHz being the fastest for the relatively high-performance Cortex M7.
Back in 1994 when the Pentium had the FDIV bug, they offered to replace the chip. Wikipedia says "Although it turned out that only a small fraction of Pentium owners bothered to get their chips replaced, the financial impact on the company was significant."
Super true.

I wonder if this (more granular) decision making is so unique to circumstances like team, idea, and market... that folks can only give the more generic advice without steering someone down a wrong path.
Thank you for the feedback.

Hyperfine currently tracks real time (= wall-clock time), user time (= time spent in user mode) and system time (= time spent in kernel mode).

Unfortunately, I have never heard of dtrace. What kind of other metrics would you be interested in?

I believe I would like hyperfine to focus on timing-aspects.
Nintendo Unveils Labo, a DIY Cardboard Kit for the Switch
Maybe I don't read the news but I haven't heard of this, being forced to address people in certain terms etc.
Serverless Golang API with AWS Lambda
A command-line client for SQL Server with auto-completion
Nice results at 192 (also three giraffes) and at 256 (four giraffes).
How to create a movie website using an AWS Lambda function written in Go — the latest language for serverless applications
Well they arguably set the road for others to pave. They are a very big player and their (bad) design decisions gradually got adoption among the other players.

Is AMD affected by Meltdown ? Do you know something that we don't ?
You don't think universities are more open than in the 50's? There's a lot more dissent these days. I don't know about oppression on campuses.
Things that make it slow:

1. Compile the code
2. Generate strings for C code (C is much larger than intermediate code). Translating things like integers to strings is slow.
3. Writing the file out, as opposed to just keeping the data in memory.

C compilers are already slow (due to the preprocessor and phases of translation), so add your compiler on top of that, and you're going to have an unfixably slow solution.
Go is a kind of safer C with GC, it won't move much beyond that.

Better appreciate it for that, than wishing for features that will never come.
If you don't like the update, wait till you discover the telemetry. Or the field trials.

IMO, trying to keep standard-edition Chrome from updating itself (or the extensions) is a hopeless endeavor. It was basically part of the core philosophy for chrome from day one was that Google can basically push arbitrary feature and behavior changes at any time (But they promise really hard they'll be careful with that). I think the marketing was something like "The only version for Chome is 'current'".

If you want control, there are better options, e.g. using Chromium, a fork or another browser altogether.

What I find more worrying is that the practice of aggressively auto-updating everything has become almost an industry standard.

At some time we seem to have gone from protecting people against phome-home trojans to turning all our products into them and playing political games with the resulting power. In fact, software is seen as a security risk if it is not a phone-home trojan because apparently all users are children who cannot be trusted to take care of their own computers.

This is very convenient for the industry, because if all software is constantly changing, why bother to keep the underlying standards constant? That's why we now have "Living standards" that constantly change and expect all implementations to follow suit.
Erm I think you're thinking of materialized views. Regular views are essentially stored queries.

https://www.postgresql.org/docs/10/static/rules-materialized...
M-series cores are not affected, but the M4 and M7 cores do implement branch prediction (you're correct that they don't do OOE).

See http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc....

>>Instruction prefetch and branch prediction
>>
>>The Cortex-M4 processor:

>> prefetches instructions ahead of execution

>> speculatively prefetches from branch target addresses.
As far as I'm aware, Intel is the only vendor susceptible to Meltdown.
Exactly my thoughts about the parent.
These graphs are meaningless in a vacuum, you don't know how would behave alternative Go based solution on similar hardware under the similar load.
Are you from the Fraser Valley by any chance?
Another problem I failed to mention is you don't have control over the C compiler the customer is using. It may behave differently, have bugs in it, etc., and the customer will blame you. Being unable to fix the C compiler means you'll be fixing the problem in the wrong place, making things pretty hard on you.

I run into these sorts of problems with D's C++ interface. In particular, how "long long" and "long" are mangled when they are the same size, and when "long long" is used vs when "long" is used. It's an endless whack-a-mole problem.
On the other hand, maybe if Switzerland becomes the "crypto-nation," its citizens and politicians will support anything related to "crypto" and deny any anti-encryption bans, too.

I'm actually starting to believe that the increasing popularity of cryptocurrencies will forever seal the fate of encryption backdoors and any such ideas from politicians/law enforcement. No one will dare to make such comments 10 years from now, if 30% of the U.S. economy will be based on encryption-using cryptocurrencies.
It fits the criterion for being on topic: it gratifies intellectual curiosity.

https://news.ycombinator.com/newsguidelines.html
Yes, e.g. bright, quality (e.g. LED), indoor light (without UV!) therapy can have benefits.

https://www.comsol.com/blogs/calculating-the-emission-spectr...

https://glarminy.com/2016/06/15/reduce-computer-eye-strain-h...
Many are written in shell, terrifyingly, usually running as root.
https://da.m.wikipedia.org/wiki/Lut
The 'bombshell' of meltdown isn't about cache side-channel attacks.
Instead, it is about the use of out-of-order execution (meltdown) and speculative execution (spectre) to get side effects.
It doesn't matter much that these side effects happen to be cache state. For meltdown, it matters that page protection is essentially broken.
For spectre it matters that speculation on indirect branches are essentially attacker controlled.

Both attacks, in their practical form, use cache timing as the side-channel to extract information. But the surprise is the control over (as the paper calls them) 'transient executions'.
> stack allocations (not possible in Java)

JVM does stack allocation whenever it is possible, you can learn about this by googling "escape analysis".
You are very interested in defining things.

This is a case where imagination is needed.
I agree, but counterpoint is the younger will have fresh perspectives and fresh knowledge. It shouldn't be discounted how biases or not staying current (plus all the additional responsibilities/distractions in general acquired in those extra 10 years) can hinder creativity and freedom necessary for this accomplishment.
Jamais vu – a 1.0.0 TrustZone code execution exploit for the Nintendo Switch
California Democrats want businesses to give half their tax-cut savings to state
An evolved smartphone case
Show HN: My darker oceanic theme for VSCode
The title made me think of another kind of crypto - the Swiss company Crypto AG is infamous for selling backdoored-by-the-NSA cipher machines to many governments around the world.
This exploit was developed by myself and @elmirorac -- a lot of hard work went into it, and I'm really happy to be able to talk about it publically :)
Use imagemagick? What. the. fuck.

This could be done in node, which almost everyone already has installed, and whose dependencies aren’t a pain in the ass to get installed and running.
I know, right?

Makes the WWI peeps (who literally lost a generation) problems pale in comparison.
I wonder if you could replace the Arduino with a battery-powered Steam Link without the headset being too heavy.
About 95% of the world (not counting the US) has a lower per capita income than the poorest US cities.

Arguably the poorest US state, West Virginia, has a typical murder rate of around 3 to 4 per year per 100k.

Vietnam has been extraordinarily poor for the last half century, only recently beginning to climb economically. Its murder rate is typically 1 to 1.5 or so.

Per capita income probably only has a correlation in regards to the resources you have available to deal with crime problems if such presently exist, rather than being the defining characteristic of whether eg murder will be prevalent in a nation.
People are free to feel how they like, like not liking gay marriage, but if they actually act on those beliefs, they're infringing on the rights and freedoms of others and that's not ok. I don't care if you're Christian or Muslim.

You don't think Muslims are more oppressed than Christians? They're way more oppressed. It's Christians which get a free pass.
:-) Yes.
Declassified documents show three Mexican presidents worked for the CIA
I just started listening. The production quality is far above what I was expecting from a podcast! Enjoying it so far.
Clearly the mechanics of upvoting/downvoting don't prevent shilling at scale. HN is just small enough to not attract large numbers of dedicated shills.
The missing data point is how many Greeks have switched to vaping.
My understanding is that a state sales tax can't be less than about 3.5% because that is the cost of operating the sales tax collection bureaucracy. The article's suggestion that the federal gov collect a uniform tax and redistribute it makes me wonder what it would cost them to run the program.

And what about the 5 states that currently have no sales tax? A federal sales tax would probably have to be close to 10% to be useful, and now everyone in those 5 states has that much less buying power.

I don't think the solution proposed in the article is a good idea. It may be the least bad idea though.
You still need a cable for the screen per and HDMI.
The impression I got last time I studies about proof of stake is that it is still an open problem. You need to find ways to stop people from gaming the system by computing multiple parallel histories (which would devolve the system into proof-of-work) and the only ways to do this that I am aware of are at least partially reliant on agreeing on a central authority.
> This is a great example how Switzerland is different. Contrary to the rest of Europe, the Swiss choose to be pragmatic about almost all important topics: Taxes, healthcare, education system take somewhat the best parts from socialist Rest-of-Europe and more cut-troat/capitalist America and leave out the bad parts.

Very interested in what is happening in Zug but I don't know how far are you going with the pragmatism. Just thinking about all the money that went there, including Nazi money.
I have no quarrel with what you're saying. Why don't you submit the original article and then post a version of your comments in this thread as a first comment to that one? This may help to seed good discussion. If it turns into a flamewar we can always deal with that later.
I knew about half of these, and the other half was still pretty awesome. I’m not entirely enthused by the pipeline operator, but oh well.
A cable between the screen's board and the Steam Link inside the headset.
Is there an embargo? Is it a silly play on the James Bond reference that Spectre represented? Either way pretty funny since you can't know for sure after this fiasco.

Botched micro code updates, Intel engineers arguing with each other on the linux kernel mailing list, etc. Intel's best and brightest have had 6+ months to work on proper mitigations in secret and this is the result.

https://marc.info/?l=linux-kernel&m=151559244214217&w=2
https://marc.info/?l=linux-kernel&m=151559367514704&w=2
This assumes though that that database can be integrated into the existing software and workflow. That is not trivial to do and can break things easily with proprietary or custom systems.

And not all goods or services (that are in theory taxable) are even 'shipped' to a zipcode.
Yes, absolutely. I know because I do train people in exactly that.

Look up nonviolent communication; there’s a lot of workshop recordings on YouTube.

Some of the things I like about the practice:

- provides a solid scalable framework of understanding behavior (all actions are seen as driven by universal human needs, all feelings are indicators of needs met or not met)

- effortless compassion - looking for the needs behind behavior helps connecting to the underlying driving forces that guide your actions, and recognize that at any time you’re doing your best with what you have (current thoughts, emotions, rest and blood sugar levels etc.)

- empowered commitment to take responsibility for meeting your own needs. Deeply compassionate self-care.

- communicating your disagreement and disappointment in a non-confrontational way, opening possibility for understanding and connection in conflicting situations.

- communicating requests in a clean way, without hooks or manipulation

- communicating appreciation in a way that conveys the person’s contribution and enriches their life, without transfer of power or manipulation.

- while nonviolent, it is very powerful. Being aware of and committed to meeting your needs helps you being a good guardian. For example in a boring conversation, a person who is aware of her needs, and committed to meeting them, would interrupt the second she feels uninterested, communicate her list of interest in a non-offensive way (“while I am enjoying speaking with you, I am noticing my attention drifting. I think I’ve reached the limit to my interest in racing cars. Appreciate your excitement about them, brings me joy to witness your passion.”)

Some of the challenges with the practice is that much of it has to do with language and that sometime leads to an intellectual approach to teaching it. The way I teach is much more embodied so that my students can ground the practice in their emotional response/physical reality.
Good solution. It grounds me even more to start learning Go lang.
Oh, yes. I tend not to gravitate towards views, so got myself mixed up there :).
Those two are contradictory: the answers to your very constrained questions would not have given you my perspective. My answer gave you my perspective.

Anyway, I don't let others dictate "parameters" to me...as that is not a conversation. And as far as I can see, you are part of this problem.
The point here should be about responsibility. When I screw up something that I picked up from "out in the open", eg. my server deployments, it more technically makes it my own fault. I am therefore more inclined to study an open circuit design because if it fails on me, I'm only left with myself to blame.

...and if I in fact identify any shortcomings, I can help others not to get hit by them, which makes the concept of openness "safer" in a way that is the sum of collective knowledge.
Testing boundaries is a natural part of growing up. My 5yo daughter does it all the time. Unfortunately, for some kids, their abilities may place the boundaries well beyond what would be considered criminal. Some go for drugs, some go into exploring other realms.

When I was a teenager, I used to connect to BBSs outside the country by using the unconnected but active phone lines that came into the building.

Only later someone told me that it was a relatively serious offence in my home country, going against national security laws and that it was done in a military dictatorship that, luckily at my time, was no longer keen on disappearing people.

Later I learned many of my colleagues on college used to do the same.
Yeah, I know. My point was that it is very well established that CPUs are full of issues similar enough to meltdown and spectre. Therefore it is foolish for anyone to assume that they can safely run untrusted code on a machine with secrets on it.
+ Intel is badly undercommunicating the cpu bug impacts in their errata.
Bernie Sanders is no socialist, he’s basically a mainstream New Deal Democrat. His positions would not have surprised President Eisenhower, who said, in fact, that anyone who does not accept New Deal programs doesn’t belong in the American political system. That’s now considered very radical.

->https://www.csmonitor.com/USA/Politics/2015/1115/Was-Eisenho...

Trump for me wasn't that different to any of the other Republican candidates, they all don't believe in global warming and have pretty much the same agenda. He just didn't dress things up and speak smoothly, like most politicians, but says it as it is.
Motion-to-photon latency isn't mentioned. It's basically the most important characteristic of a good VR set. That's why all smartphone-based VR solutions suck and make you sick.

Carmack has long lectures about that issue.
Very much this.

> American politeness

What's interesting is that Americans don't notice/understand that their expectations are not universal in the least bit, but very, very culturally specific, not shared by most of the rest of the world and, quite frankly, rather broken.
Goldmont's arch is essentially just Skylake scaled down; in the words of the Wikipedia article "The Goldmont architecture borrows heavily from the Skylake Core processors"
So what if x > MAXNUMBER/2 ?

Also, how can this be faster than
x=0-x;
?
Translation: A bunch of 20-something kids thought they could handle complex international legal business structure. No.
Call for Proposals: Aurora Early Science Program for Deep Learning – InsideHPC
Intel is a huge company and it's hard for huge companies to make abrupt transitions. CPUs have a development cycle that spans years, and employees who were laid off during ACT a couple years ago when Intel decided their headcount was too high aren't going to suddenly come back now.

What Intel could do in the short term is reduce their prices drastically. They have the profit margins to afford it.
Europe’s central banks are starting to replace dollar reserves with the yuan
It seems like the inverse of a merge table. Years ago we used to archive data into tables named by the date range and then we would create a merge table that combined them. So every night we would drop the oldest, create a new one, and create a new merge table of the updated set.

Partitioning looks to be going the other way. Create a big table, partition for convenience, drop partitions easily when you are ready to dispose of them. I can definitely see some cases where this would be super handy.
The early releases of Linux were on floppy disks. More than 20 disks. You could not compile the kernel while X was running unless you had at least 8 Mb. I was the lucky owner of a 486dx33 with 16 Mb.
Italian companies under attack, experts spotted a huge #botnet
Meltdown is an Intel-specific design mistake dating back a decade. It is also the bigger fish. Spectre, while real, has been a gift to Intel to use as a smokescreen in PR and reporting.
Similar things for Sweden, with a couple of different interfaces:

- Maps from today and from about 60 years ago. Slide the barrier left and right. https://kartor.eniro.se/?c=59.314311,18.069699&z=16&l=histor...

- Comparison between 20 different maps from 1625 to today. Click "Byt kartvy" (found at the right edge) to get a side-by-side view. https://stockholmskallan.stockholm.se/sok/?q=&map=true