skysight-inc/HackerNews huggingface dataset:
The browser's html engine will still do conditional jumps based on the HTML. One attack [1]:

"Decompressors, especially in HTTP(S) stacks. Data decompression inherently involves a large number of steps of "look up X in a table to get the length of a symbol, then adjust pointers and perform more memory accesses" — exactly the sort of behaviour which can leak information via cache side channels if a branch mispredict results in X being speculatively looked up in the wrong table. Add attacker-controlled inputs to HTTP stacks and the fact that services speaking HTTP are often required to perform request authentication and/or include TLS stacks, and you have all the conditions needed for sensitive information to be leaked."

[1] http://www.daemonology.net/blog/2018-01-17-some-thoughts-on-...
Could someone explain how Edge is performing so well or any references to what they have done in this regard? Has the Edge team already implemented this streaming and tiering compiler technique?
Agreed. Knobs to turn is a good thing. But only if they are super relevant knobs. Too much configurability leads to bloat. Good defaults are good, but even better is (often) not having a knob to turn at all.
> Although speed has been used in ranking for some time, that signal was focused on desktop searches. Today we’re announcing that starting in July 2018, page speed will be a ranking factor for mobile searches.

> The “Speed Update,” as we’re calling it, will only affect pages that deliver the slowest experience to users and will only affect a small percentage of queries.

The desktop ranking signal had almost no effect; slow pages reliably turned up in search results. Maybe some pages that took 15s to paint were slightly diminished in results, if that.

If the mobile ranking signal is as weak as the desktop ranking signal, (and they seem to be indicating it's going to be a very small effect,) I would expect this change to have no measurable effect at all on the median performance of pages loaded from Google search results.
To wit, as described in their blog post:
https://blogs.windows.com/msedgedev/2017/04/20/improved-
Edge validates and compiles wasm code lazily. Thus, this simplistic benchmark isn't really measuring compile time on Edge. In contrast, Firefox, Chrome and Safari are doing some amount of AOT compilation before WebAssembly.instantiate() resolves.
Twitch basically seems to be the only real competition at this point, but they are rapidly building up to take the fight to YouTube. They are publicly shifting away from the gaming focus and towards general content creation. This whole thing seems to be more in the hands of PR and network effects than anything else. Like if the Jiu jitsu community goes to twitch I have little reason to go on youtube anymore.
I think the commenter is trying to say they have a steel membrane that had a hole punched through it by an air-blast. Said membrane came from the dumpster out in back.
Performance testing is a fickle art and publicizing misleading or non-generalizable results can be extremely damaging to a small business like this, even if the results are not representative nor applicable to most people.
Haha, I guess I'll provide the dissenting voice. I know I get bored of songs and as a result I actually ration my favorite music. As a result I am always hunting for new stuff, so that when I do go back to my favorites playlist it remains fresh.
>This may change in the future, but the current reality is no better than a 1-to-1 transformation of fossil fuel into biofuel.

I was with you until this. a brief thought experiement makes it seem impossible that it would be 1 to 1, but rather that some smaller amount of fossil fuel used would yield a much larger amount of biofuel
Reminds me of the CHDK hackers trying to dump firmware off a Canon camera. They could get the altered firmware to activate and could read memory and control an LED, so... they blinked the firmware out through the LED, and read it with a ball mouse's optical sensor attached to a microphone cord. :-)
That makes no sense. What other "practice" besides "best" would they be using, given that SPA didn't exist 20 years ago? Would they look at the SPA sample and say "I see that you're using history to have the back button work, but I'm removing that code"? Obviously not.
One thing that is getting harder is taking really shitty video that is impossible to interpret. Phone cameras are getting better every year so the kind of grainy shaky stuttery video you normally get with these cases becomes harder and harder to justify.
How Haiti became poor
Announcing KBSecret 1.0: A secret manager backed by KBFS
I don't think linking to a biodiesel lobbying group constitutes as evidence.
How can you speak for every single one of the 800k people living in San Francisco? I doubt all SFers eat out every single day. It is the default choice for you and your circle of friends perhaps, but I don't think you can generalize that to everyone living in the entire city.
> At Google, our IT staff are full time engineers.

If this course is based on this view of the IT Support role (which I heartily approve of, but which is not the baseline norm in the industry) it really should be called the IT Support Engineering Professional Certificate or something similar, because otherwise it won't communicate it's real focus either to applicants or, perhaps more critically, hiring officers.
Yes as a protocol designer, I couldn't care less about the type of data that runs through the protocol. The semantics are much more important. Sequenced delivery with hard requirements on delivery order and reliability? Probably should be TCP based. Something that gives something different would be RTP (specialized for sending media packets which aren't useful after a certain time has elapsed) or SCTP or UDP.
Most treatment see the honey supers removed to avoid contamination. There are a few exception which don’t require this, like oxalic acid.

When the honey flow starts, you need to add boxes fast - I’m up to 7 and 2 of those have been removed, extracted and put back on.
I'll second this. If you live next to a 'nice area' like in West LA, the Richmond, Walnut Creek, etc. then the local Good Will is a Goldmine for good quality women's clothes. It will all be a season out of date, but the clothes have been worn maybe once or twice by some super-rich person and they are easily 99.9% off. For best results, go the week after a Fashion Week in Milan or NYC, when 'last season' is now official.
Farmers today still understand this - better than most non-farmers appreciate. Anybody still farming today is a decent business person, and that means making sure your land stays healthy so your farm has a future.

Industrial fertilizers have definitely changed the rules and allow farmers to shift the traditional cycles, but the same principles of caring for the land still apply. Crop rotation is still common, but some land is so much more productive for some uses than others that it makes sense to "weight" the rotation with fertilizers.
Hacking FaceNet using Adversarial examples
Out of curiosity, what percentage of clothes donated to Goodwill do you think end up on their retail racks? What happens to the clothes that don't?
It's not like he's gonna send you a certified letter stating those things. Especially public defenders that have another 100 cases having to attend to...it's math, x total hours a week and lots clients mean accept that freaking plea. Or lawyers that just found out that they will not get paid properly.
Everyone from doctors to philosophers has been saying this for ages (literally). No healthcare provider, public or private, is likely to pick this up because people who are afraid of death will freak about about 'computer decides when you should die' and will get up a big enough moral panic to prevent any further discussion of the idea. Given that I think it's literally a waste of time and resources to program a computer to tell us what we already know.

Edit: by 'program a computer' I don't mean to put down the work of the Stanford team, which I'm sure is great, but rather to highlight the reductionist way it will play in public debate.
Show HN: Birthhits – Create a Spotify playlist of top songs on your birthday
my mistake. thanks for the link
I agree that correctly written SPAs shouldn't break middle/ctrl click, but browsers make it harder than it should be. A few years ago I was implementing a SPA. I carefully made every clickable element that takes you to a new permalinkable "page" an <a> tag with the correct href for that permalink, and then set up some click handlers to intercept the user clicking the link and do an AJAX call instead of a full page load.

Unfortunately some browsers would still send a click event for a middle or ctrl-click, which meant that if I wanted to avoid breaking that I had to write extra code to check if it was a middle click or ctrl-click and not call preventDefault if so. My recollection is that Chrome got it right but Safari and/or Firefox had the behavior I'm describing.

Browsers should make it easy for apps to do the right thing, not make it harder.
Start here,

http://www.mono-project.com/news/2018/01/16/mono-static-weba...
Love him or hate him, Mr. Money Mustache figured he's make less than minimum wage driving for Uber

https://www.mrmoneymustache.com/2017/11/22/mr-money-mustache...

That being said, it would make sense to drive for Uber in some small subset of the population: if you enjoy driving and would otherwise just be out joyriding, might as well get paid. Or if you are a student with varying classwork loads or bored people who would rather be doing something than watching TV.
> There used to be a parallel port audio device for PCs which was mainly just different resistors. The driver for it just timed pulses to the different pins.

Resistor ladder DA converters are pretty fun.

https://en.wikipedia.org/wiki/Covox_Speech_Thing

https://hackaday.com/2015/11/05/logic-noise-digital-to-analo...

https://www.tek.com/blog/tutorial-digital-analog-conversion-...
Are you a neuroscientist, or do you just have a hat?
Is that $1.80 on top of the average $3.00 for regular? What i would give to buy fuel that cheap...
ABM Fast Track: Part 3 – Build a Roadmap for Closing Deals with Account Plans
Broodless bees don’t need treating for long with most treatments - it’s the brood that’s hard to hit. That said, avoiding resistance is important.
Reading the comments, I think most of you miss actual realistic complaints of the author.

1) UWP apps are absolutely horrible to debug. They use some kind of COM broker layer to deliver the majority of very cryptic framework level exceptions. Almost everything IS an exception. There's also no way to get proper stack traces in compiled applications and worse, only apps delivered through the store will symbolicate the final crash point, so good luck trying to find the root cause if it's not immediately obvious.

The level of absurdity here is, if you drop a file in a UWP app's drop target that doesn't have foreground focus, the data broker will throw an exception that you can't do that. There's no realistic way to manage that exception, so if you're not diligent it'll crash your app.

2) Then there's the whole XAML interface framework. (Though they seem to slowly be moving away from this to a more reasonable flexible framework, sort of like iOS CoreAnimation, called Composition.) Originally it was meant to be freely styled by "designers", but as the original WPF and Silverlight proved, this flexibility resulted in terrible designs and apps looked cheap and crappy. So the UWP XAML team instead built a completely stylized framework and all the controls have hard-coded baked in assumptions about those styles remaining unchanged. So in that aspect, even if you wanted to push UWP XAML to allow for more information density, you would run into all kinds of show-stoppers.
We've banned this account for repeatedly violating the site guidelines. Would you please not create accounts to do that with, and particularly not use HN for ideological battle? It's not what this place is for.

https://news.ycombinator.com/newsguidelines.html
Apple will open a second campus in the US
Wordpress is well optimized from my experience.

It loads the page and the text first so you can start reading. The images and scripts are delayed and cached. Comments are last. Pictures and thumbnails have various resolutions to improve load time.
IIUC, all of Goodwill's donations go to regional warehouses for cleaning and sorting.
Shocking news attracts people and sells newspapers. BITCOIN CRASH will attract more readers than CRYPTO HAS HAD YET ANOTHER CORRECTION (BUT STILL UP 400% SINCE LAST TIME).
Apple is bringing back home nearly all of its $250B in foreign cash
LinkedIn won't show you your own connections without paying?
Yesterday I ran a bunch of searches, looking for specific types of people in my 2nd degree network. After a dozen or so, LinkedIn start limiting my results, saying I needed to activate a premium plan to see all results. Fair.

Today, I went to search my own connections, 1st degree, and they will only show me 3! To see the rest, I need to pay for a premium plan, which start at $29.99 a month. Bull!

Screenshot: https://twitter.com/Jmartens/status/953698471415918593
This is not how professional services works.

That is highly contextual. A coworker of mine called that the "Physician <-> Prostitute Spectrum." Certain service providers will pretty much do whatever you pay them to. Other service providers will filter their request through their expert knowledge. This also depends on the nature of the request, of course. It's not like a Doctor is going to give you a sex change you didn't ask for, if things are working correctly.

Whether to plead guilty should be up to the client, unless they aren't competent.
At this point Rust is the clear winner, as it's providing higher safety for similar run-time speed.
Yeah, empowering users does get developers paid. I get paid to do that myself, and know a lot of other people who also get paid to do that. Of course it's sometimes easier to get paid by treating users like cattle. But if someone doesn't intuitively understand why screwing their users is a bad idea, I'm not sure I can help them.
One idea is to engineer micro robots with similar size and use image recognition to find these mites near nests and they go in and kick ass. Like how a few hornets can take care of thousands of bees. This is a future todo
There's a point of subtlety remaining:

DJB isn't advocating against using seccomp or a pledge-equivalent.

DJB is advocating against stopping there.
Yes. GraphQL combined with Relay Modern. Even better, add a GraphQL proxy/ORM onto your RDBMS.
> which you of course cannot!

Didn't Google's NaCL implement verification of sandboxed machine code?
I guess at this point, I just see a nice VPL; it seems to have the liveness properties of Quartz Composer, at least, which, as you say, displays an interactive results visualization and input data widgets (though you might have to turn the patch around or mouse over an input pin). It seems to fit into Tanimoto's liveness level 4 taxonomy.

If you have some direct manipulation and gradual abstraction going on, I haven't seen it in your examples or explained in your docs.
This comment breaks the HN guidelines. I respect that it is in part about your personal experience, but it's also race bait, which is not allowed here because it reliably creates flamewars. Please don't post like this to Hacker News.

https://news.ycombinator.com/newsguidelines.html
> I don't dislike recruiters at all.

In principle, I agree. Execution is vastly different, though. Recruiters I've
met up to now are mostly bunch of people not understanding the thing they
recruit for in the slightest, so they just move documents from pile A to pile
B, rejecting them at random in the process.

I met a few recruiters that understood the industry they operated on. They
just were outliers, not the norm.

> They're making a living helping place people in jobs - that's a useful thing to do.

Wrong. Helping people land in a job is an unimportant side effect. They mainly
help companies fill the roles with bodies. It's irrelevant if the candidate
likes the role, is a good fit, and would grow professionally. The only part
that is important is that the company finds the candidate competent enough,
not the other way around.
The TLS 1.3 drafts (and given they're in Last Call, presumably the RFC itself once published) use different types of brackets to indicate whether and how things are encrypted in the ASCII art diagrams. The curly braces {} are used for the Certificate structure, meaning it is encrypted using the session keys but it is NOT authenticated application data yet. We'll see why in a moment.

So, firstly I'm going to say, go read the drafts for yourself https://tools.ietf.org/html/draft-ietf-tls-tls13-23 because I am pretty sure that's the most snarky response and also hey, it's right there, if I'm wrong that's a great place to start in proving so.

But then I'll answer your substantive question, because the answer is pretty interesting (and quite unlike earlier versions of TLS).

So, you are correct that we can (and TLS does) do DH without knowing who we're talking to, and that our problem is that although our session is encrypted and can't be eavesdropped, this seems useless because we don't know who the heck we're talking to, surely we can be subject to a Man in the Middle attack.

However, TLS 1.3 has a trick here, after sending Certificate the server sends CertificateVerify. CertificateVerify signs the entire key agreement (which we just did) with the identity from the Certificate. So, a client receiving CertificateVerify either gets a matching signature (the party we did our DH key agreement with _was_ the owner of the Certificate - good) or they don't (we're being MitM'd the phone call is coming from inside the house - get out!)

Once the client has checked CertificateVerify (and presuming they're happy with whatever was inside Certificate) they're truly secure and Application Data can begin to be processed.
Security theatre for trains? Then it's not a train no more, but just an airplane that doesn't fly.
Are you talking about a project that does 1000 AWS API requests a day?
That is implementation specific and not defined as part of the JVM specification.

I don't know all the JVM implementations out there, but it wouldn't surprise me if there was one with it implemented.

By the way, RMI and Jini worked by streaming code across the network.
>Call me weird, but I'd feel ashamed to get a record and never listen to it. All of the 34,000+ songs in my music library has graced my ears at least once.

If that "at least once" was actually "just once" for most of then, then you're not that different from those other people then, as songs as meant for multiple listens. A cursory single listen (and perhaps while doing something else at the time too, or with skipping forward) it's not much different than no listen at all.
They're building it extremely close to the WI/IL border so I wonder how many people working there will actually be from IL. There's an agreement between IL/WI so that the employee taxes in the paycheck will go to IL and not WI.
1964 IBM 029 Keypunch Card Punching Demonstration [video]
I feel like the first two aspects - "generally accepted, issued by a government" are unnecessary. If someone will take it as a medium for exchange, then that's currency to me.

I always thought of it as "otherwise value-less representation of value." All the currency I can think of fits this definition - including gold! Gold is only really valuable recently for circuits and the like.
@gonewest covered why the starter isn't ideal. I have played with the starter but compared to when I worked for a company that did have a license its like a different product.

This makes it hard to select it for small projects because you know you'd have to pay the 5k or switch to something else if you ever wanted to scale.

1$ a day I think is still a bit high for a non-profit driven side project, but definitely an welcome improvement.
Tencent Leads $51M Investment in Canadian Startup Wattpad
Surprised that Jutta Steiner didn't make the cut.
This is fantastic -

In the UK there has been a rise in 'cookery boxes' companies who send boxes of ingredients which you can use to cook a few different recipes.

However there is not many options in the market for a service where you can simply subscribe to the recipes (and generated shopping list) and then cook yourself. This could be based from an index of already available recipes online.
Minimising the necessary ingredients (and therefore potential waste, and shop complexity), whilst maximising recipe variety is hard to do without a lot of planning.
Combining this with the ability to favour and remove certain ingredients for example for preference, or intolerance would be really something indeed!
Who's saying anything about "fixing" a price or diluting shares?

Bitcoin's exchange rate is a function of supply in demand. It could exist and do its job with low demand (e.g. $1.00 / btc) or high demand (today's price). What is the reason for the high demand? The answer is speculation that the price will continue to rise.

The point I was making is that if people were using it only as a only as a currency, then the price very well could be $1.00 / btc. The reason it's so high is because people in large numbers are buying and holding it as an investment, reducing the supply.
Elixir v1.6 released: code formatter, dynamic supervisors, and more
Would be nice if it mentioned WebAssembly in the title - I presumed this was a new feature for JS in Firefox Quantum.
Maybe I was misreading, but I read it as something like : transfer learning is going to be a general solution for not having enough data. That's really not the case.
> ... or resign.

Lawyers may not be free to do so, though they can try.
I see no way that a properly built SPA could perform worse than a properly built server-rendered app form a network bandwidth perspective. JSON is always smaller than HTML.
By "entered the dump stage of a pump-and-dump scheme" you mean "printed off digital, counterfeit currency and tricked the media and gullible people into thinking it's the next internet" (not discounting that the technology will likely value in the future).
tl;dr: Delay happened after cryogenic fuel load and before ignition, suggesting it might be an issue with dynamic loads caused by thermal contraction in the interface between the rocket and the pad. But this is very speculative; SpaceX themselves haven't said anything, some issues are expected when you do a wet dress rehearsal for a new rocket type that's never had one, and there are a bajillion other possibilities.
Having worked in a couple thrift stores I concur. Only give clothes in good condition. If it's faded, stained, or holey just throw it out because that's what Goodwill is going to do and instead of helping them, you're costing them money (in labor).
As a fellow "senior" programmer, I can barely imagine a non-side project that is small enough for me not to demand it running on CI.
Here's a stupid question, but is the result of the Firefox and Chrome "instantiate" the exact same? Is the compilation doing the same job, or one could be performing more optimizations? Aka faster compilation but slower execution.