skysight-inc/HackerNews huggingface dataset:
and renaming the folder where extensions are stored—none of them worked.

Then where is it actually installed? Unless it's doing something really rootkit-y (unlikely given that AFAIK Chrome's extensions are just JS), monitoring file accesses would probably be sufficient to determine where it is and how to remove it. Unfortunately, I think this researcher just didn't really try hard enough...

Removing the extension proved so difficult that he ultimately advised users to run the free version of Malwarebytes and let it automatically remove the add-on.

...of course, what better than to sneak in an advert for their product!

As Malwarebytes explained in late 2016, the forced install trick uses JavaScript to provide a dialog box that says visitors must install the extension before they can leave the page. Clicking cancel or closing the tab produces an unending series of variations on that message.

IMHO this is a sign that JS running on a page has been given too much power (and the reason I only let JS run on a whitelist.)

The other thing I find slightly off is that there's been plenty of mention of how Chrome's extension API is nowhere near as powerful as what the old Firefox extensions could do, and it's a more walled garden, yet things like this are still reported.
>I'm not sure what they're thinking internally, but it stands to reason that they're probably a bit upset at least: Their CapEx just went up to maintain the same level of computing power. I'd be surprised if internally Google is buying the "AMD is just as affected" line that Intel's been throwing out.

They don't have to buy it. Whether affected or not, AMD is a non starter at this moment for those things.
Immigration is a tough issue, and so are xenophobia and racism. But spending tens or hundreds of billions of dollars to build a wall that has countless logistical problems (say goodbye to several migratory species that cross the border; hope none of them are important for the food chain), is just so mind-bogglingly shortsighted and cruel. How many immigrants could we help for that much money?

Have Americans so quickly forgotten that, up until rather recently, there was no immigration policy? You could just come to the US to flee whatever terrible life you had before, and nobody asked any questions. I feel incredibly fortunate that my mom’s side came here from Germany well before WWII. I wouldn’t want to prevent anyone else from having a chance to be here.
Rust has tried to not couple its design to LLVM

For awhile LLVM could target C
> Oh, he's autistic? Never mind, free pass then.

> No... it wasn't merely a prank, and being autistic doesn't imply being legally incapable of judgement.

Well actually it raises the very real possibility. Unless he is guilty of strict liability offences the prosecution would have to show criminal intent

In English law, s8 Criminal Justice Act 1967 provides the frame of which the 'mens rea' is assessed. It states:

A court or jury, in determining whether a person has committed an offence,

(a) shall not be bound in law to infer that he intended or foresaw a result of his actions by reasons only of its being a natural and probable consequence of those actions; but
(b) shall decide whether he did intend or foresee that result by reference to all the evidence, drawing such inferences from the evidence as appear proper in the circumstances.

from wiki https://en.wikipedia.org/wiki/Intention_(criminal_law)

If you cannot foresee the results of your actions you cannot be guilty. BTW publishing an opinion that suggests someone is definitely guilty, as you seem to at places in this thread, whilst a trial is ongoing is a crime in the UK.
You can check inetd which does exactly that and comes preinstalled and pre activated with Linux installations. Or at lest it was common once upon a time. Don't know if it still is.

https://en.wikipedia.org/wiki/Inetd
> I haven’t noticed a lack of qualified candidates in tech, just a lack of humility in many of the gatekeepers. Whiteboard pissing contests.

This mirrors my interviewing experience. People read so much into every answer during these stupid whiteboard interviews. I'm guessing that the candidate didn't get the position because they didn't seem to know JS well enough?
The United States isn’t your backyard.
>doesn't have anything like about:config

I use about:config frequently on my phone - is a pain to use on a phone however. Here's an idea. Use software on the phone but allows users (who wish to) to do deep configuration of phone software on their desktop computer.

I have the opposite complaint about most phone apps - they expose complexity on screens where it's not appropriate. Good software on any platform should "make common things easy and hard things possible".
Yet millionaires sit having tea in St Louis right now with zero fear that they are in any danger. City metrics are as useful as state and country. Some places are safer than others. Usually determined by how much mONEY is available in that place to pay for armed force to keep it safe.
It's even more shocking when you realize that most homicides are done by men, so 6.5% of Americans account for 52% of the homicides.
Nope. Software Engineer. The reason it was so low is the youngest was born 18 yrs ago - long before current cost skyrocketing. Things used to be a lot better.
> this one has already been mitigated

Correct me if I'm wrong: It's been mitigated by applying a patch that has fairly severe performance implications, no? How does this not affect the institutional clients' bottom line in that case?
Breathless reporting about impossibilities should be reconsidered.

It’s not impossible to uninstall chrome and re-install it under a different path, and create an alternate OS user account on the same laptop or desktop, and log into that to effectively reset Chrome to its default state in a non-disruptive manner.

The unfortunate fact, however is that most people simply won’t do that because it’s too inconvenient, or users of a particular machine have been subjugated by system administrator overlords, as part of an organizational policy, and lack admin privileges to migrate to a fresh user account in part or in whole.

People also often tend to use the admin account unhygienically. Which is not actually much of a sin, as long as you enter into those activities with the mindset of anticipating a full reinstall at the operating system level.

...which of course won’t even kill the firmware implants that advanced persistent threats have dropped into your peripherals, via intel extensions commissioned by the NSA.
> You missed IoT.

I did? I just read the article again, and I don't see any mention of IOT or small or embedded devices aside from Docker, can you point me to what you saw? The article is assuming Apache is running...
Aside: as if Moore's Law (in the form often casually understood, about processing speed/power, not transistor count) wasn't screwed enough as it is.
>Or, again, maybe Intel just totally has them over a barrel and transitioning isn't feasible at all.

That was my hypothesis for why their stock didn't drop much. The problem is very bad but intel's quasi-monopoly and the very high switching costs involved will let them weather it.
sigint can be carried out illegally but you have no way of telling what evidence came from illegal surveillance because you don't know what evidence came from sigint to begin with, because it's laundered. you can't challenge illegal practices potentially used to lock you up because they're cloaked in national security.
Tracim|Threads, files and pages with status and full history.All in the same place
Some of those can't admit any ships, never mind the biggest ships on the ocean.

For example, the Lake Pontchartrain Causeway impacts quite small boats:

https://en.wikipedia.org/wiki/Lake_Pontchartrain_Causeway#/m...

That's a completely different project than something that won't impact traffic that needs 50 or 70 meters of clearance.
Over 10% of Iceland's population is now foreign-born: http://archive.is/pTe5O
You should reconsider your embrace of eugenics, btw.
Build an NFC tag emulator device for around $10
Drop it into a net in the ocean?
the problem they say is that this would be on one of the world's most active shipping lane and that boats would need to be able to pass under the bridge, requiring it to be much higher than the other bridges of that list
But you can dismiss the idea because you can already take your car across the channel. OK, it goes into a train that goes in a tunnel under the channel, but this scheme has the virtue of being real and usable today.

It I am told that it's running at around 54% percent capacity. It's approximately half-empty. There's competition from ferries too.

And that's before Brexit lowers demand.

There is no economic case for another highly expensive crossing. Funding the channel tunnel more would be easier and produce faster results.

https://twitter.com/Ben_e_lux/status/954467087975673857
Also, it's "deus absconditus" not "abscondidus" in 1.
Semi-related question: Why is that? I've been looking for resources on why AMD is a non-starter, but most searches just turn up comparisons for low-level consumers.
The engineer's statements linked by the parent poster mentions Danyang-Kunshan:

"the longest bridge in the world is the Danyang–Kunshan Grand Bridge in China. It is mostly a conventional bridge made from columns sunk into the seabed, although it has a cable-stayed section. The bridge is 165km long (just over 100 miles) but the short distance between the columns would not do for the busy Channel."
Pundits and editorial staff sensationalize. Investors collectively behave like a "drunken psycho". Neither are of themselves bellwethers of a company's future success.

We might instead point to facts. Major tech companies are getting into chip design. Apple's foray into fabless last year almost destroyed the value of Imagine and Dialog shares. If they and other companies are successful, we can see the same happen to Intel.
That's not pickiness of employers it's a lack of qualified candidates.
Audio manager app
What is a constraint modeling language exactly? I briefly looked at the first example in the documentation, and it looks like you specify a problem and some type of solver solves the problem automatically? What algorithm is it running exactly?
The size of ships and number of ships going through the English channel are much larger than any of the bridges listed above apart from possibly the HK <-> Macau bridge.
There's still plenty of ways to shoot yourself in the foot if you are "not careful" with the modern C++ code you write. See for example http://foonathan.net/blog/2017/03/22/string_view-temporary.h...

Modern C++ has a lot of great stuff to help, but the sense of safety you get when you use Rust is something else entirely.
Then replace the board of the Tezos Foundation and force Johann Gevers (foundation board president) to release the audit report investigating the self-dealing he is accused of.

FYI, Tezos (self-amending ledger, one of the largest commercial application of OCaml) has raised ~250 million dollars in July. The funds were supposed to go toward funding the ecosystem, development, and so on.

Unfortunately, the founders of the project made a terrible call early on and selected a bad apple (JOHANN GEVERS) to become chairman of the foundation holding the fundraiser/ICO proceedings. After some digging, frustrated community members found out that this guy has a long track record of failed ventures and what some would call very sketchy behavior. He's the self-appointed "visionary" kind if you want know what I mean (not kidding that's from his website).

The project is developed by an independent company owned by the founders so it is still under development (https://gitlab.com/tezos/tezos/activity) despite that foundation issue.

The Tezos Foundation hasn't communicated in months. They are sitting on close to a billion dollars of donations and broke their fiduciary duty to spend the money on development.

Research this, it is completely nuts.

Some links to start:

https://www.reddit.com/r/tezos/comments/7kzbm9/the_story_and...

https://www.reddit.com/r/tezos/comments/7qt548/the_true_hist...
There are wall prototypes that allow for small/medium size animal passage, but not humans. Also, the entire southern border won be walled. If there is a natural border, mountainous terrain, etc, the wall won't be built there. While the area may be unsuitable for human crossing animals may not have a problem with it.

Roads have different material and structural requirements than walls. Maintenance will obviously cost money, but it serves a purpose. 450,000 people were caught in 2016 trying to illegally cross the southern border. Now imagine how many made it through. I assume you will not find this argument very convincing if you are the kind of person that believes that illegal immigrants make money for the state they illegally live in.

CBP border agents monitor the wall. And again, it isn't just 2000 miles of wall. It is "smart wall", where it will have the most impact to prevent crossings
All and all a good intro tutorial that gets into some of the common professional use cases. On "constant bitrate" assumptions and some of the subsequent discussion here, ANY transform-and-entropy codec like VP9 or H264 will ALWAYS be variable bitrate internally. In the pro broadcast world, where you can't go over your FCC-allocated radio frequency bandwidth allocation by even one iota (or nastygrams and fines ensue), this is "handled" by actually having the encoder understoot the actual target (say it's 5mbit), and then the stream is padded with null packets to get a nice even 5mbit/s. This also happens with LTE broadcast as well. The encoders that do this reliably are fabulously expensive and of a rackmount flavor.
Make-Personal
I always forget about DIVISION SLASH and that it’s a thing, distinct from FRACTION SLASH (which I use regularly). I wonder if I should add it to my compose key. Nah, I think ÷ and FRACTION SLASH are enough for me.
It is only a bug once you have discovered that branch prediction can be used as a vector of attack. Until then, it was a perfectly valid design implementation.
What's with all the weird spam at the bottom of these comments? Someone seriously loves rust.
The trains are much faster than cars (160km/h or 100mph in the tunnel), and it’s a lot easier to ensure fire safety. It’s a 50km tunnel! That requires a lot of precautions. There haven’t been any fatalities, and one of two fires was caused by vandalism: http://news.bbc.co.uk/2/hi/europe/67950.stm

Oh and the capacity of a rail tunnel is higher, too. The Gotthard Street tunnel has around 17.5k vehicles per day, whereas the Eurotunnel averages “50,000 passengers, 6,000 cars, 180 coaches and 54,000 tonnes of freight” (http://www.telegraph.co.uk/travel/destinations/europe/france...)

Lastly, as other have mentioned, driving 50km in a tunnel would not be pleasant. The passenger train is much nicer, and the car shuttle is very low-stress, too.
> [...] pypy, a tracing jit for python2 and python3, is another project which gets compiled to C.

That's interesting. How does it work? I think most JIT compilers emit assembly directly and then execute it. Does PyPy generate C code while your program is running?
I guess if it was a big meteorite you can afford some of the material to burn off. Just be ready for a nuclear explosion like impact on the ground.
Keep in mind you'll get a lot of false positives. This is one of the biggest mistakes I always did when validating ideas. I would ask people (and myself), would you use or pay for product X? People would say yes, I would develop it, and then no one would use it.

I realized you need to ask a follow-up question. Would you use or pay for product X? If yes, then why are you not using similar services Y and Z that already exist?

If it's truly a good idea, then they already know about Y and Z, because they've been searching for a solution to their problem. They might be paying for one of those existing inferior services too, because they need this problem solved, and they're the only options available. That would be great news. It's bad news when they don't know anything about the existing services.

As a simple example, you could ask pet owners if they would use a social network for pets, where they register their pet, post entertaining photos of their pet, follow other pets, etc. Basically, Facebook where all the profiles and posts are from animals.

You'll get a bunch of yes answers from pet owners, which sounds very promising, and you might start on development. As I said, this is a mistake. If you search on Google, you'll find lots of existing pet social networks. So, ask those same people, if they said yes, why don't they visit Google today, and register on one of those other 10 sites? Why didn't they sign-up on one last month? Usually, once they find out the idea exists (or you develop it), they realize they don't care for, or need the service as much as they originally thought.

As another example, I might want to develop a HN theme with bigger voting icons, larger text and links for improved readability, etc. When I ask myself, I answer yes, it's all positives, and I want and would use this theme. But then I ask, why have I never used any existing HN themes from other users? When did I last search for HN themes, because one probably exists today with some of the features on my list. I then realize that I don't care that much about a theme after all, and I actually prefer running sites as they're originally designed, without third-party themes or add-ons, even if they do add a few beneficial features.
Thanks for sharing those details. Deferring to OEMs is such a copout given how they are most likely going to handle security issues:

https://twitter.com/avtargill/status/951195158229463046?s=17

At this point it’s up to users to scour motherboard manufacturers’ clunky forums to determine if their platforms will ever receive patches. Given the severity of the issue this really should be handled with more accountability and with a greater sense of urgency.
Ihave never programmed earlier. I am new to programming. I just started, and learning Python through trial and error. I want to make web app that will allow people to find the nearby hospital, schools, etc.
Well, it's more my back yard than a non-citizen without a valid visa who illegally crossed the border.
This reminds me of a SaaS product roll outs where customers are complaining, revenue is falling, sales people are complaining but the bosses point out at the great new metric they found which says "Everything is great as long as the day name ends with a 'Y'"
Now that I think about it, most manual arithmetic would also be easier if we described numbers with the least-significant digits first. If you're doing sums in your head, you could just list out the answer's digits as you calculate them, rather than needing to remember the list of digits and reverse them at the end.
That might not be a bad idea right now. CD interest rates go up as the Federal Reserve interest rate goes up, and it's likely that the Fed Reserver rate will be going up soon. However, I'd do some historical research to see if that could actually turn out to be helpful, or if the difference between 6-mo, 1-yr, and 2-yr CDs is too large.
He doesn't have to work there. Why not leave?
Homicide Trends in the United States, 1980-2008 by the Bureau of Justice Statistics. Page 3, Table 1: https://www.bjs.gov/content/pub/pdf/htus8008.pdf
> The performance would be notable.

Can you quantify & explain what you mean by notable? I've written a lot of C++ and also a lot of scripted web services like node.js and flask (python). For most normal websites, I doubt that you could make significant and noticeable performance improvements to a decent scripted backend by switching to c++, from the user's point of view. A latency savings of a millisecond or two across the board I could buy, but making it obviously faster to a user, I'm skeptical, unless the site has non-traditional high performance requirements.
Interested parties desiring production quality security and significanlty better performance than CGI, check out the C++11 library Restbed https://github.com/corvusoft/restbed Restbed replaces Apache, or put another way puts the web server inside your application, so your C++ app is its own server. It is easy to create REST APIs with executable as small as 100K, and that is all you need - no Apache or
Nginx other web server needed. I have created a fairly sophisticated facial recognition REST API that host itself, only occupies 500K and can run circles around pretty much anything - while running on a $99 Intel Compute Stick. I've created web sites and servers and web APIs in a most of the fashionable web best practices, and I gotta say Restbed blows everything away.
I read this article[1] a while ago and it seems he has a lot of time on his hands. It's very hard to come across a piece of tech that isn't proprietary, yet Stallman has a workaround in such cases(like how he accesses web pages from his machine). Is there anyone else who uses methods similar to those mentioned in the article?

[1] https://stallman.org/stallman-computing.html
I think you're overestimating the mobility of someone who's willing to take a job for 18k a year.
Very small fully connected neural networks are incredibly good at approximating functions even after one second of training with RPROP. Of course for complex non linear functions as well.

Btw doing linear regression with pencil and paper just geometrically tracing a line that appears to fit the points and then calculating then coefficients is trivial.
When we celebrate entrepreneurs like Bezos we should also keep in mind that this success comes on the backs of a lot of people who work in bad conditions. These people are invisible to us. Amazon could easily afford to hire more people for the workload but instead they choose to squeeze everything out of existing employees.
> I scan the items the trucks bring in from distributors and place them into the right cart for the robots to take to the correct place in the warehouse.

I'm actually surprised his job has not been replaced by robots yet.
A stunningly ignorant reply.
Also the spinup time is considerably larger problem for various interpreters and virtual machines than for native code binary.

I would even expect that you can write non-trivial CGI application whose startup time is smaller than the additional overhead from parsing of the FastCGI protocol.
FonePaw iPhone Data Recovery 2018 Registration Code Download
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Linux

I wouldn't say that the security of the "modern OS" is a solved problem. The Meltdown/Spectre issues happen to be broad-based and heavily publicized, I don't think you can draw any more general conclusions from them.

In general, as long as human beings are designing and implementing information processing systems, there will be bugs. Once AI systems are building them, there will also be bugs, but no human being will be able to understand them.
I usually have 2 or 3 devices that I need to test a website on, so no - localhost alone doesn't help at all. For example: I run the website on my workstation and I want to test it on my iOS and Android devices.

With this recommendation, I have to generate a certificate and install it everywhere just to test simple functionality.

Since Google recommended the ".test" domain for internal testing that's what I use. In the past I had used ".dev" (now owned by Google) and ".local" (now used by Apple for bonjour networking) to setup test domains on my LAN. So, Google should allow these features through for ".test" at least.

Honestly, they should make it a flag that developers can toggle at the very, very least.