skysight-inc/HackerNews huggingface dataset:
Because of javascript's wide surface area, it's nigh-impossible for browser manufactures to be sure that they've disabled indirect access to timing data.

The original proof of concept didn't even use a "precise timing API", it features `while(true){ i++; }` to increment a counter, and pulled timing information out of that side-channel.

It is trivial for the browser vendors to disable access to a specific API, but we're in for a game of whack-a-mole.

Dismiss the exploitability of javascript at your own peril - sure, WebWorkers and SharedArrayBuffer are this week's blocked timing attack, but smart money says there are other ways to get timing information that are unpatched.
Sounds like you must be using Ubuntu :P
Basically the Pebble of AR.

Since Intel doesn’t productize themselves, I wonder who Intel will find to build and sell it. Traditional PC companies don’t seem like a great fit, but I have a feeling the launch partners will be companies like Asus anyway.
I have one X collecting dust here. It is a losing bet. S8+ and note 8 are flat out better devices even on software side.
In reading the article I see that they are using VCSE Laser. Does that answer the question?
Thoughts on trying to sell back to the company?
Snap’s glasses?
> The advantage of Mark over S-expressions is that it is more modern, and can directly run in browser and node.js environments.

… with the right translator to JavaScript, which also happens to be true of S-expressions.

His table is incorrect, incidentally: S-expressions support mixed content (if I understand what he means) and are also fully generic.

He doesn't have a good example of the benefits of his proposal over S-expressions: 'more modern' just means 'undiscovered bugs.'

I respect his enthusiasm and hard work, but I believe what the world needs is hard work on existing things rather than hard work reïnventing the wheel.
The new tax law creates a huge boon for Uber and Lyft drivers
That's meltdown, not spectre. And meltdown relies on native code running with very little interference from other things causing timing to screw up.

If somebody could already run that code, they'd choose anther attack method.
In hindsight, knowing how well Face ID works yes, but going all in on Face ID and ditching Touch ID completely early on in the design process was a real risk. I don't see how anyone can deny that.
>Its the top running exchange.

So was mtGox.
>Drinking or selling alcohol is forbidden.

>Sexual intercourse is only permitted between a husband and wife, and thus premarital, extramarital, or homosexual intercourse are forbidden.

Hmm.
> Democrats: 27% of Millennials and 21% of Gen Xers identified as liberal Democrats or Democratic-leaning independents.

> Nearly a third of Boomers (31%) and 36% of Silents described themselves as conservative Republicans or Republican leaners, which also is higher than in the past.

http://www.pewresearch.org/fact-tank/2017/03/20/a-wider-part...
>>It seems more effective than anything I can do with voting or door to door canvassing.

On the contrary, door to door canvassing can be extremely effective. It is one of the primary reasons why Democrats made huge gains in Virginia state government races, as well as the Alabama special election.

Indeed, a solid ground game is the only way to counter the vast amounts of money Republican donors are pouring into the political system.
> one of the simplest but most powerful equations ever to be written down

I always felt that E=mc² is essentially the Euler's identity of physics: a basic, simple, beautiful equation relating some core components of the entire field.
It turns out that people much smarter than me have thought about this for the ACA (e.g., [this article by a Yale law prof](https://www.vox.com/the-big-idea/2017/10/17/16489526/take-ca...) but the treatment of the CFPB actually seems like a much more obvious fit to this non-lawyer....
Fair enough. I figure I'm not the target market for these :)
HODL!!!!!
IMHO, Soon, smart glasses will be as ubiquitous as cellphones. We as humans keep increasing our communications and multitasking. This item covers both.
React libraries and tools for 2018
If Tether's balance sheet was truly simple ("here's our escrow account with Citibank with $2 billion in it, see?") then you can be assured the auditor would have been happy to see that.

No audit = run away fast.
Too big imo. Fitbit Charge without the fitness stuff, but with an email/sms/notification feature (+vibro) looks like what I'd buy :)
Money plays a big role in these. It's clear from each point, especially start your day with something fun. That is an incredibly hard thing to do for a lot of Americans, especially those who are poor. When you wake up poor for years and years on end, the ability to just "will yourself" into doing something "fun" in the morning to start your day, when all your mind can do is wonder if you'll have enough money for food later, or who will make fun of you on your commute, or any number of stresses, is nearly impossible.

Money plays a huge role in a person's ability to find a peace and calm moment in their day. And it doesn't help when some rich jerk walks in and says "what's the problem, too hard to wake up feeling happy and able to do something fun? ha, never had that problem! good day!". Ick.

Money plays a huge role in all of this. Yes, writing down your goals is basically free. Taking breaks isn't. Taking breaks can often include a risk of someone yelling at you, or you missing an important phone call that would have been really useful to get, etc.

Money is really important. Yeah, you don't need $5B to do this, but the point is that the advice is tone-deaf considering it comes from someone who does not have the common worries or problems of the common person.

Edit: The article is extra tone-deaf because it indeed does suggest you "jet off in your private plane for a quick refreshing week on your private island" like you quipped. The pictures he included in the article make it clear what his idea of a break is.
The Road to a Thick OpenGL Binding for Ada: Part 1
Thanks, you're right. I've edited.
If that happens, I think the reasons would probably be:

1. Choosing to stay self-funded for so long, and not being able to move as fast as competitors due to lack of resources.

2. Founders run out of energy/drive/passion after such a long go (we've already been at this for a while, mind you)

3. Not being able to figure out B2B sales well enough.
Which shows another solution - educate. Go out and talk to people. Not about candidates, parties, platforms, but about the fact that they have no voice.
ARO Cryptocurrency written entirely in php
Building a Tree Navigation Component in React
This reads like a throwaway article from LiveStrong or eHow.
Genuine question, my impression is that Lisp is dynamically typed, but this uses type declarations. Would that make it different than Lisp?
Love it!
BTW: Next year (2019) is Akira year... 31 days after the nuke in neo-tokyo.
Right now I'm playing Divinity: Original Sin 2, and I cannot help feeling that the timing between this book and the game is just unfortunate. It came out just too late (or the book just too early?) for it to have a worthy entry in and a worthy impact on the book, which is a shame. I genuinely consider it a benchmark achievement. Not only does it set the standard for turn-based systems and cooperative (or competitive, if you wish) cRPG gameplay, it oozes good game development which culminates in one of the finest RPGs of the 2010s, only really rivalled by The Witcher 3. I hope its quality and its mastery of its mechanics translates into becoming an influence for RPGs to come.
> That said, the consensus I've heard from my audit colleagues (I work in public accounting) is that no one has the slightest freaking clue how to audit crypto.

Shouldn't the crypto part be trivial for Tether? You'd just need to check how many Tethers were issued on the blockchain. The hard part ensuring that those Tethers are backed by real Dollars - and that should be a regular accounting task that doesn't have anything to do with crypto.
The phrase "direct action" is an Antifa dog whistle advocating violence.
The trick is getting a camera powerful enough to get acceptable quality pictures but small enough, and blended with the surroundings enough that you don't notice it.
Different organizations, different budgets, different concerns.

Maintaining some semblance of Rule of Law by enforcing our nations' laws is fine and should be done.

Please don't use the comments to virtue signal.
Really, that was one of the reasons I left. I might look again.
You actually cannot escape it, no matter how deep you bury your head in the sand.
I think it's absurd for a private citizen to try to change a law by lobbying.
I do not not, but I am not sure my perspective would change though the motives might... Accumulate wealth so my kids lives don't suck. It's going to be even harder for them in the future.
Seems to me that when you boil it down Apple's primary strategy now is to focus on convenience and simplicity in a purposely anti competitive way.
What advantage does Apple music have over a service like Spotify besides being pre-installed? What about iMessage? What about Facetime? What about the MacBook with a single port?

Apple is not worried about competition or more importantly innovation, it instead focuses on creating a walled garden that can keep its users happy. The HomePod is not trying to be innovative it is trying to keep Apple users in their ecosystem.
AI changing the hotel industry
The Fitbits look good, the Charge seems like what I'd want if it wasn't geared for fitness. I'd wear it all day long, unlike glasses... I guess if you already wear glasses, it's much easier.
I would like thank this 'namc' for putting in the journalistic-legwork to get us all closer to the truth. And also letting us draw our own conclusions.

I think what's upsetting to me is not really this case in particular, but that I couldn't imagine any reputable tech journalism organization being able or willing to publish an expose like this. So cheers to all you HN citizen journalist digging into the commits and asset names to give us an idea what's behind the Press Release.
> It's a slippery slope if you allow them to inject personal opinions.

The Nuremberg Trials - where we decided "just following orders" wasn't an excuse for illegal acts - demonstrate the other side of that slippery slope.

For a concrete example of refusing illegal/immoral orders from American politics, see the Saturday Night Massacre.
Show HN: Build reactive pages interactively in the browser (uses Vue)
Which is why the iPhone X uses hardware buttons to do a forced reset. What has that got to do with home buttons?
Then there'd be a negative amount of apples. It's not impossible if you disregard context.

There is nothing new about doing things like this, OT and CRDT have existed for ages. Check out ShareDB (https://github.com/share/sharedb) or Webstrates (https://webstrates.net/) (based on ShareDB). In Webstrates, we don't have merge conflicts that need to be resolved and there are never any practical synchronization issues. The server orders the operation and if you try to delete something that's already been deleted, then we just ignore your operation.

Also quite courageous to say something is impossible when you have the code that does it right in front of you. ;-)
There's a major difference between fractional reserve banking and printing money. The former is a well-understood and well-regulated practice that actually drives economic activity. The latter is likely what Bitfinex is doing with Tether, is 100% counter to their stated practices, and serves only to artificially drive up the price of other assets.
TLS implementations themselves need to get a LOT better about describing error conditions before client certs will ever be a viable option for actual user authentication.
The fats I cook with don't solidify at room temperature though.
Todd Combs Read Books to Get a Job with Warren Buffett
UNICEF Asks Gamers to Mine Cryptocurrency for Syrian Children
That camera is already pointed at me, via security cameras, strangers cell phones, etc. This just makes the situation symmetric.

So yes, I would be fine with that.
Free Download “The Cloverfield Paradox” (2018) Full HD 1080p English
> Well, and more syntax than S-expressions: it's got both objects and arrays as fundamental structures instead of just lists

Well, Common Lisp has both of those as fundamental atoms:

#S(foo :bar 3)

#(1 2 3)

The former creates an instance of a FOO struct with its BAR slot set to 3; the latter is a 3-item array.
I'm getting the vibe this person is a complete fraud. It seems likely that somebody is steering her on what to say, how to manage the project, and market herself as the visionary behind it.

Reading through the comments "However her aptitude was pretty poor... I've mentored many kids in my life.

At some point she was unable to even reason out how to convert a string to upper case.

She said... What does this have to do with programming.... I want to build apps.

After that she didn't talk to me much and I didn't bother either."

These aren't really the people we should be lauding or giving a free ticket to MIT. From what I'm reading, she's probably a future successful corporate bullshit artist, but this is not a role model for anyone or a future visionary.

I think it is good things like this get attention - young people should know they're not going to get ahead by stealing credit from others or falsifying their talents.
And in your analogy, all hypothetical of course, the VC here is located in Moscow?

Update: Am I really being down-voted for suggesting what everyone already knows? Seriously?
If you're not seeing it then I'm not going to argue with you, neither of us has the data to prove any of what might be going on.

However multiple trades of very similar amounts in under a second, after a long, massive slide in much larger amounts in the morning, looks very dodgy to me. Especially when these trades appear at the last possible moment, when all market resistance to freefall has just disappeared.

But sure, whatever. Could be legit.
HTML has the problem of </div></div></div></div></div></div></div>. Lisp has the problem of '))))))))'. JSON has the problem of '}}}}}}'. And YAML has the problem of deep indentation.

When it comes to worse-case scenario, no one wins. :-(
Assuming you’re employed, how do you go to the gym in the middle of the day? By the time you’ve commuted there, changed clothes, worked out, showered, dried off, changed again, and commuted back, you’re well over any lunch break time allotment I’ve ever seen.
I think these attackers just use wordlists for the most part. I had an SSH server log tens of thousands of attempts with the username ‘initech’ before I got fail2ban running and turned off password auth. Not sure there many people out there actually naming user accounts after the company from Office Space.
I want these, and then I want an app on them that will tell me if the person standing directly in front of me is on my LinkedIn/Facebook, and if so, what their name is and what they do.
That's not a well-defined question and moreover seems like a non-sequitur.
Every time I see someone discussing Monads in JavaScript without _mentioning_ Promises, I pause a bit. To my eyes, aside from a bit of type-juggling which makes Haskell programmers break out in cold sweats, Promises and Monads are similar enough.

The main difference is that .bind()/.then() implicitly converts (a -> b) to (a -> M b) - i.e. if the function you pass to .bind()/.then() does not return a Promise/Monad as it should, it's converted. Promise.create() does something similar. This level of type-juggling is not weird for a dynamically-typed language.

So my question is: rather than attempting to define your own Monads that are more type-strict than the language itself, how many of the behaviours in this article can be implemented by extending Promise.prototype instead?

Promise.prototype.binary = function (right, binaryFn) {
return this.then(leftVal =>
Promise.resolve(right).then(rightVal =>
binaryFn(leftVal, rightVal)
)
);
};

onePromise.binary(twoPromise, (a, b) => a + b); // Adds two promises together
Well, in 2016 they spent > $10B on research. So clearly they're trying to catch up, it's just that they're not very good at it.
I felt bad the first time it happened to me, but I have gone through multiple of these downs, and just got more used to it.

Focus on other areas of your life, you have enough BTC to get rich if the experiment succeeds. Selling at this point is statistically bad decision (the price usually doesn't go more than 90% down, and there's no new known problem with the BTC protocol)
Leaked NSA exploits tweaked to work on all versions of Windows since 2000
>Oh no, another interesting news concerning google getting immediately flagged. Googlers, please don't be evil, at least provide your motives.

It may not be Googlers flagging this. Any issues where leftists are consistently losing the argument tend to get flagged and buried on HN.
You don't like the part where compiler authors are free to make efforts to improve the language that are clearly delineated as not part of the standard and easy to not enable if they prove to not be a good idea in practice?

What are the alternatives? Completely discarding the language standard? Never making attempts to improve the language? Requiring all experiments to go through a standardization committee before real-world testing?

None of those strike me as obviously better.
Oh, they mark content as explicit but don't filter it out.

I don't see what the technical issue is, if I apply a filter, I get the clean version or it skips the track - if I don't have it on, I get the explicit version.
How to build and run Concourse CI locally
If it helps, think Intel NUC vs. ChromeBox.
Wow. My Minesweeper clone was called Swine Meeper, and the premise was similarly bonkers (interstellar livestock pig shipment infected with alien parasite, the player "meeps" them to find the infected hosts). Wrote it in Java way back but never got it on Android.
pip takes a --user flag that installs packages to your user's account. It's essentially global unless you have multiple users on your machine.
It's quasi-governmental, in that it is chartered and overseen by the federal government, but largely executes policy without the influence of the executive or legislative branches.
Do you have food? Do you have housing? Seems worthwhile to gauge how much risk you were taking on, relative to how much you missed out on an opportunity to get a huge amount of money additional to what you've already got. Do you have collections coming after you for anything, do you have people in your life that you don't dare tell that you can't keep your commitments to them?

It seems to me the real question here is whether you are in danger or distress, or whether you're treating distress to your profits as distress to yourself. Hence the practical questions.
It's right there in the README:

> The only case Automerge cannot handle automatically, because there is no well-defined resolution, is when users concurrently update the same property in the same object (or, similarly, the same index in the same list). In this case, Automerge arbitrarily picks one of the concurrently written values as the "winner":

https://github.com/automerge/automerge#conflicting-changes
That a full glove, gp seemed to suggest only a bracelet.
Elizabeth Warren's Two Income Trap argues that families in order to afford living in the best neighborhoods with the best schools moved to two income families. The result was that this priced out single income families from good neighborhoods with good schools.

I believe DINK is less about lifestyle as much as it is about obtaining purchasing power that exceeds dual income families with children. IIRC, the USDA put the cost of your first child at $250k over 18 years and that did not include college.

$250,000 is a lot of money towards a home on a 30 year mortgage. I worry that couples who want children will be priced out almost completely by DINKs.
Until ie11 fully dies, I think we will still be stuck to using floats for layout.
> IMO, SPKI SEXPs are much more sensible than this design and many, many other designs

Yes, yes, ten thousand times yes! I really don't understand why, over two decades hence, the world has stuck with XPKI & ASN.1, and has invented XML & JSON, when SPKI solved the PKI problem for good & canonical S-expressions solved the flexible- and human-readable–data-exchange problems for good.
7 inspiring examples of responsive design to get you started
"Insanity: doing the same thing over and over again and expecting different results."
This seems to be only useful for large teams building complex web apps. :P For everyone else, inline-css is a horrible idea.
You can also do a hybrid approach. For instance, you can do option 1 with half your stash and option 3 with the other half.
This is 100% Driven by Americans. See “Freedom Caucus.”
You're never "investing" in crypto. You're gambling.

How badly do you need the money? What percentage of your net worth did you put into crypto? I advise keeping less than 10% in speculative assets.
To literally follow in Branson's footsteps implement the tips thusly:

Kitesurf,
Be confident,
Jot notes on a notepad whilst flying first class
Relax
Cut a cheque to charity
even in "monopoly" pricing theirs a sweet spot. There's always some kind of alternative.
Given the trillions in waste, fraud, and abuse prevalent for decades in DoD projects all with the intent to “protect the American people and soldiers”, surely a few million for protecting consumers is pretty decent value even if it’s nowhere near as effective as our defense / offense department by now?
Financial Secrecy Index 2018
Good Lord, these things are humongous. Not your average hobbyist printer for sure.
I meant more trying to reduce/remove lobbying.
They did. It's called Common Lisp.
// If this happens, I am going to quit and become a barista
I would have rather said it's like QML language (which is used as the basis for Qt QML UI language). Can't find the link to the reference for plain QML. QML is like JSON, but with typed objects, and objects can have children in turn, so you can create tree structures from objects. It's actually very nice, I wish it had parsers for more languages.
s/touch/spot/
Another problem is this. Let's say there is a counter that is at value 100. I increment the counter. Simultaneously another user increments the counter, so the stable value should be 102. However, a operation-agnostic "merging" approach like described here can never catch that, and sets the final value to 101.
Which makes it a horrible investment. This isn't some minor correction; this looks like a bubble popping. It is currently off 61.5% from it's high mark, having given back all of it's gains from the last three months. The people who drove it to it's previous highs are taking a beating right now; they are not going to get back in and re-inflate this bubble.

Note: I am not financial advisor. Speak to a professional before you light massive piles of money on fire.

(edited for spelling)
This sounds like a pile of equivocations designed to try to minimize an unfortunate truth about learned functions: the learning process does not care whether it corresponds to human thinking, so learned functions do not necessarily correspond to human-written functions.

Yes, the black-box nature of machine learning is a state of mind; the alternative is to view all software as black boxes and then throw up our hands and claim to know nothing whatsoever. This is clearly facetious and meant to protect machine-learning developers from the responsibility of grokking their systems.
aliexpress takes 3-4 weeks to get to you and it's subsidized by US-China postal rates.
Merge conflicts are handled transparently and seemingly indeterminately? Yikes.
This is so obvious you don't need tools.
I wish the start of comment can still be made less verbose-y
“{!-- comment --}”