skysight-inc/HackerNews huggingface dataset:
Better links from the article (original link before change is only a paragraph linking to the following article and paper):

http://www.tomshardware.com/news/new-variants-meltdown-spect...

https://arxiv.org/pdf/1802.03802.pdf

TL;DR:

MeltdownPrime and SpectrePrime are the two new variant names.

From the Tom's Hardware article:

"Princeton and Nvidia researchers teamed up to produce a testing method that can generate code that represents the essence of an attack. More precisely, their method is CPU architecture-aware, so it emulates exactly what a software attack would translate into on the hardware level. According the the researchers, their tool can be used to quickly generate a set of 'security litmus tests' for a class of security exploits."

"In the process of their testing, they discovered that the speculative execution methods that are exploited by the Meltdown and Spectre vulnerabilities leave a trail that might not be observable in only a CPU's shared cache, but in its cores' individual caches as well."

"What the researchers discovered is that, because certain caches might be partially mirrored across cores, the effects of speculative execution occurring on one core can be detectable on another core. Test cases exploiting this principle created by the researchers were able to recover hidden data at 99.95% accuracy. By comparison, their test cases of a traditional Spectre exploit only reached 97.9% accuracy."

"[...] the researchers said that current software-based Meltdown/Spectre mitigations seem successful in blocking their new exploits. However, these exploits will likely need their own distinct fix, different from those for traditional Spectre, if they are to be mitigated in hardware."
There's a bias toward the negative in writing, which I think comes from the fact that people write as an attempt to solve problems. So you're always going to see more negative reporting on shared offices than positive.

But I'm old enough to remember when private offices were still common, and there was a lot of negative writing about those too. As someone about to enter the software industry, I was very concerned that I'd be lonely and depressed from working alone in front of a screen all day.

I think the truth behind all this is that the people writing this negative writing are all mismatched with the offices they're in. If you put a bunch of introverts in a shared office, they're going to be distracted and stressed. And if you stick a bunch of extroverts in private offices, they're going to be lonely and depressed.

The answer for employers is to create mixed workspaces that are conducive to both forms of work, and make explicit the fact that nobody should be pressured to work in one space or another.

The answer for individuals is to know yourself and where you work best, and work at jobs that will allow you to work in a work environment that works for you.

Complaining about shared workspaces or private workspaces is counterproductive--it's just trying to force the kind of workspace that works for you onto a diverse industry that doesn't necessarily work the same as you.

Personally, I get a lot done in shared offices. I can relate to a lot of what the author complains about, but a lot of the problems he brings up are problems with startup culture, not with shared workspaces. We extroverts aren't idiots, we know that stuff like "the common themes of rap are in tune with the company’s mission" is ridiculous.
> - I don’t like the graphic design

Of the landing page or the product itself? The landing page is an easier fix :)

> - evaluating if this is good will take us more than a month

That's quite possibly true. Wikis take time to populate and only become useful if people commit to doing so. The problem is how to balance:

- Giving users time to evaluate the product

- Revenue

> - I’m worried about lock-in. If, after a few months I discover this isn’t for us, do I need to keep paying not to lose my data?

Valid point. I do plan to add a data export feature at some point. I'm wondering what the most useful format for such a thing might be. CSV? XML? JSON? SQL?

Conversely, I still haven't thought of a sane way to allow for a mass data import... but I'd like to.
Paper review: IPFS – Content addressed, versioned, P2P file system
It is less about individuals and more about the organizations and funding systems that accumulate over time. Any research worth their salt can tell you stories of opportunities missed due to bureaucratic constraints.
People totally would have spent money for it. Lots of people struggle with tools for exactly this (I’m currently using Moom but just yesterday was wishing I had a keystroke to shrink a window but didn’t feel motivated enough to crack open my Hammerspoon configuration.)

You should consider selling it on the Mac App Store in addition to it being open source. I think you’d be pleasantly surprised.
yep, hard to care about making the effort
Because Hollywood and overzealous architectural design firms dont understand acoustics...many of them have only recently come to realize the hubris of their ideas.

I once worked for a $web_company in a cubeless open office with hard flooring and lots of glass. It was so bad you could hear a fart in the bathroom from the kitchen. Developers routinely recommended brands of noise cancelling headphones. In the sysadmin pool we were virtually un-addressable unless you talked to us on IRC. The office was just too damned loud.

and thats not all, things dropped on the floor never survived. they didnt just break, they went off like a bomb. I remember a tech-support coworker dropped her novelty coffee mug and someone thought it was gunfire.

We hired a sound control company to fix most of the problems when an executive was overheard in his office addressing our devops lead by a homophobic slur.
Good for you, but this is no where near normal.
Looks like a good utility. I've been using Spectacle to do this sort of thing. One small suggestion: add a .gif to your Github README showing off AppGrid in action.
> Homework: go see how long it takes you to buy your own SSN on the darknet.

Heck, you don't even need to do that. Plenty of perfectly legal services you can sign up for as a PI, debt collector, whatever. You don't even need an information leak to have hit you. If you've participated in the modern economy, your SSN is trivially available for less than $30 via (arguably) legal means.

Anyone that doesn't treat their SSN as public information these days is living in a fantasy world. It's been this way for quite a long time, and I've never been too worried about my info floating around on the darkweb - the scammers weren't using those sources for the most part anyways.

The only leak I really thought was a big deal in recent times is Equifax - since that leak very likely was the whole burrito. That very likely escalated the "identity theft" war quite a bit.
I am a heavy PyCharm user, will try it as I am gradually shifting to Notebooks. This IDE should help for a smooth transition.
"Programs are meant to be read by humans and only incidentally for computers to execute."

- Donald Knuth
We are certainly prone to prioritizing our own self-interest.

"black hearted" evil is rare enough. Rampant justification of actions that serve self-interest is a little less rare.
Schools are teaching kids empathy and self-control. It helps at home, too
And this supposedly "created" money is not backed by any thing of value, so
it's akin to a number printed on a sheet of paper, unlike a chair that gets
created from planks of wood. You can "create" as much such money as you
like, limited only by artificial rules you set yourself (with "you" being
a government, because government has the monopoly on issuing money). It really
doesn't matter whether it was actually printed on paper or just recorded
electronically, it behaves just the same.
Now if something like this could be built on top of Terraform provider-independent...
if you joined their whatsapp group out of self-invite and they begrudgingly obliged, then you will see all their invites and still be self-inviting yourself to their other events unless they personally asked you
Eh, you are both too inclusive and exclusive with your thinking.

Darwin said "survival of it fittest", but it's closer to "survival of the fit enough", which means not one, but a plethora of options are available for survival. Some of the options that allow survival are considered evil by a portion of society, some of the options that allow survival are considered good by portions of society.

We like to think of evil and good as ideas that can be erased or gotten rid of, but that is just unrealistic idealisms. Evil and good are just the outcome of acts. We, as a society can reduce the potential for some kinds of acts, but we cannot get rid of said acts we consider evil simply because they can be spontaneously discovered.

Humans do have a propensity towards evil.

Humans also have a propensity towards good.

This is because humans are the most able being in our known universe. Our potential is almost unlimited.
I actually started doing this again, for companies that I already know and like. Sometimes I do actually want to subscribe, and having a big reminder in my face helps, well, remind me.
> That's a huge simplification not pertaining to the fundamental nature of the brain.

I disagree. Conscious thinking is a crucial process that's inherently single-threaded, even though it runs on highly parallel hardware (the billions of neurons).

However, I must admit that my point doesn't necessarily contradict pjc's point, and I don't really agree with digi_owl's claim that parallelism is a "wild goose chase".
Toronto also has extensive interconnected underground walking space. Even though the weather isn't terrible it is often bad enough that you don't want to walk outside. You can still go many places downtown on foot without being exposed to the element. Walkable doesn't necessarily require good weather year-round although that makes it easier and certainly more pleasant.
For once there is no consensus how to do parallelism an concurrency in Rust since none of the library are matures.
Your attitude is understandable at first sight. But the consequnce is increased inequality as profits get marginalized at the top.

This might lead to a decreased quality of life even for those harvestingthe net gain.

It's a delicate balance.
What is the problem with there being a race element as well?

Anyway, I don't see how it's avoidable. There'll be kudos, prestige, more grant money, etc for people who make advances, so there's going to be a race element to it as well.
LastPass is down
Thanks, that's advice you're probably giving for a good reason you've experienced, I'm assuming!

Any other insight into your experiences/troubles? How you decided on pricing, whether it had any impact on sales/sales efforts, what you had to do to support such a model?

Thanks very much for your time!
Show HN: FutureList – a list of the most exciting products shaping our future
Replied to the wrong comment?
Good grief!
This shows correlation but not causation. Hypothetically: people with certain background (social class) and traits (IQ) are more likely to go to college, and they would fare as well or better without college. I'd be very interested in stats of lifetime earnings difference that was corrected for selection bias.
It depends on how you frame the issue, if you look at an individual worker it is easy to ask if they are deserving, but if you look at broader society a more natural question should be whether we think the benefits of technology should be spread across the majority of our society or concentrated in the hands of the few.

I don't know about you, but my techno-utopian fantasy involves everyone living off the labor of robots rather than struggling to house and feed themselves and their families because the elites no longer need the labor they can provide.
Hey HN!

FutureList is meant to provide a place for anyone [on the internet...] to put the future. The 'future' can be a subjective idea, but we define it as something that few people know about or have access to, and has the potential to change many lives for the better.

Keeping track of all these futures is an arguably impossible task for any one person or centralized group. By leveraging submissions of the future from anyone, FutureList might be able to keep up with the breakneck pace of creation.

This list spawned out of another project I work on called Worlds Fair Nano (https://www.worldsfairnano.com), which is an attempt to get the future in the same physical space for people to experience. Our long-term goal with the fair is to bring a 6-month Worlds Fair back to the U.S.

I am obsessed with organizing the future and making it accessible to everyone because having knowledge of 'the future' enables a person to think creatively about how to affect it. I hope you enjoy FutureList and add a cool future or two!

We'd love feedback!

- Matt & Michael
Probably depends on the state. Aren't California's as expensive as private schools now? Some other states still have reasonably priced state schools.
Did they get the version with or without the backdoor?

http://www.news.com.au/technology/online/security/spy-f35s-s...
The motivation comes from seeing or experience loved ones you know suffering, up to dying, from cancer - and perhaps from seeing the barbaric feeling treatments that exist for cancer currently.

Edit: I suppose having races is positive hype-marketing machine, hopefully playfully tapping into our dopamine reward systems.
> Try to leave out the part that readers tend to skip. Think of what you skip reading a novel: thick paragraphs of prose you can see have too many words in them.

There are two good pieces of advice here, I think.

One is about thick paragraphs of prose, and I think it really comes down to ergonomics. It's hard to read big walls of text. Word count in this context doesn't matter so much as word spacing.

The second point is that some writers tend to include all the mundane details and in-between stuff that surrounds the story, but isn't actually part of the story itself.

What constitutes "the story" and what constitutes "the other stuff" is, of course, dependent on the story being told, the author, and even the reader. If you're reading Tolkien, the journey is the story. But if you're reading modern fantasy, you might want to skip all the walking between battles.
Not that this is a perfect option, but it's exactly because of this I've been able to justify buying classic/collector vehicles.

They have the added benefit of either appreciating, staying put or only very mildly depreciating.

Plus I get to drive fun cars and claim a moral high ground.
That’s not true, not entirely. There is a variety of approaches here, but one typical approach is for psychiatrist to blunt the symptoms with drugs, just enough so that you can get yourself together and commit to seeing a psychotherapist.

Read the first two chapters from the “Feeling good” book by David Burns to get an idea of what a competent (!) therapist can do.
That's like saying paint isn't necessary for an artist to convey their art. You only want pencil and that's all that should be used.

You're welcome to want text on a website but the website creator is welcome to do as they please. I'd point back to my origin example: a vegetarian is fine excluding beef from their diet but no one should have to listen to them blather about it.
100% agree that there is a lot less of the cross-pollination of companies as they kind of advertise.

At the WeWork I'm at, it's a mix. You can be friendly and talk to other people if you try. If you don't try it's not going to happen.

As far as productivity, I'm a full 50%+ more productive at the coworking space vs being at home. And compared to a coffee shop, it's about the same price and a lot more convenient to have the dedicated desk and guaranteed seat!
God or nothing.

See Arthur Leff's article: http://digitalcommons.law.yale.edu/fss_papers/2814/
Exactly, we’ve all been affected in some way by cancer, no need for a race against anything other than cancer itself.
Solr Multiterm Synonyms: avoiding sow=false surprises
In that case you end up with population control problem.

Besides, if you look at all big society changes, you'll notice the old generation of people that lived before the change have a much harder time to accept / adapt to the new order while it's natural to the new generation.
This is a strawman. This isn't the world that we live in and it won't be the one we live in for the foreseeable future.
I found this wasn't universal. Grew up in relatively unfriendly (especially for a Canadian city) Toronto and then moved to Chicago, found people were much more outgoing and friendly in the midwest, even in the city. In the bay area now and it seems like spending too much time driving with other angry drivers (from themselves spending too much time driving) makes everyone irritable.
What about executive entitlement?

Hasn’t their pay expanded by thousands of percent while workers wages haven’t expanded at all in 40 years? Why is asking for more money now considered such a sin?

It’s argued very frequently that the CPI vastly underestimates inflation by not including things like rent and healthcare, so workers wages are dropping if anything.

What makes companies entitled to think they don’t have to address this? Why can they buy technology that delivers higher results, not raise wages, and then wind up lowering wages?

Eventually there will be a “#metoo” moment in business and many, many people will find themselves blacklisted for years for what is now being called “economic hate crimes”.
I would go even further and say that competition is vital to innovation. Without it, too few are willing to take risks and progress stagnates.

That’s what I responded to. Vital. Few willing to take risks.

To fight cancer!
So the problem is not with AWS but with the devops on client end who manages AWS.
This in not an technical problem. If you didn't protect your cloud resources properly, you will be hacked and data will be held for ransom.
Elixir is amazing! The original author, José Valim, took a brilliant approach: Take a 30 year-old battle-tested highly-parallel VM, and build a modern language on top of it. Syntax is inspired by the good parts of Ruby (very clean), but nothing comes close in terms of the ease of parallelism... it's so natural, and insanely fast.

The unit tests are what convinced me this will be the next big thing. Beautifully clear syntax, succinct tests, and most importantly: Parallel out of the box. Hundreds of unit tests run instantaneously. Ruby TDD setups run tests that changed with maybe 1-2s lag... Elixir runs all the tests so fast that, at the beginning, I wasn't sure the tests were running.
Hi there, I worked on Dear Tech People.

The goal of Dear Tech People is to provide a degree of transparency into diversity data--a topic that frankly a lot of companies feel is taboo and too hard to talk about. Outside the very few companies that have released diversity reports, most companies have poor, incomplete, or no diversity data available internally, and diversity advocates we spoke with found it difficult to make an internal case for inclusion initiatives without data to back up efforts.

Dear Tech People is by no means perfect, but what we've found is that some amount of data, even imperfect data, can give people an idea of where they are and what their goals are. Even some amount of data helps kick off a discussion of leadership or helps people make a case for an internship program that works with HBCUs. Furthermore, the long term vision is to raise the standard of self-reporting, and get companies to fill in incomplete data with complete data that they gather via their own diversity reports. If a company (or even an employee at a company) doesn't think the data looks right, we want to work with them to figure out how to survey their company and get their self-reported data up to standard.

But for now, we work with what we have, and that is public profiles on the internet. You can read more about how we put the methodology together here: http://www.deartechpeople.com/methodology
I have very little doubt the F-35s will excel in combat, largely based on this article:

https://theaviationist.com/2016/12/08/four-of-the-most-exper...

I think this quote from a Marine F-35B pilot regarding an exercise pretty well says it all:

"I was leading a four ship of F-35s on a strike against 4th Gen adversaries, F-16s and F/A-18s. We fought our way in, we mapped the target, found the target, dropped JDAMs on the target and turned around and fought our way out. All the targets got hit, nobody got detected, and all the adversaries died. I thought, yes, this works, very, very, very well. Never detected, nobody had any idea we were out there."

The F-35B in particular is an amazing piece of engineering, and a vast improvement over any other STOVL aircraft.
Woodworking on a CNC is very much a software job. I built a wooden remote and for the most part it’s software with a woodshop component. I explored how I made it in detail in a series of blog posts if you’re interested.

https://medium.com/@samuelclay/everything-you-need-to-build-...
> Molecules don't age

But they do. The article argues that molecule ensembles are damaged by thermal motion but there are other ways in which molecules are damaged over time due to chemical and physical stress. Large molecules in the cells are bombarded by caustic chemicals (oxidative stress) and ionising radiation, both of which break chemical bonds. Even without these, many molecules in the cell are only temporally stable and decay over time (e.g. single-stranded RNAs are unstable even ignoring active degradation).

It is altogether accurate (and common!) to describe these processes as ageing on the cellular level.

As you’ve correctly noted, cells constantly repair and replace damaged molecules.
New Whole Foods Installs Hackable Access Control
Pharma research is not limited to the US. FDA will approve drugs developed in other countries though their will be some hoops involved they are tiny relative to finding something useful.

Anyway, as you say: "Randomly picking 24 early-stage drugs to develop is a losing bet." What I think you are missing is VC's can extract money from failed drugs. VC's are playing with other peoples money and they get a larger chunk of upside while limiting their downsides.

This means investing in VC's has poor returns on average which is why the system looks the way it does.

PS: Trying to fit that decreasing curve when the actual trend line is clearly positive is ridiculous.
Why do people talk about the F35 program like it is in question? the US is committed, many NATO countries are committed...one way or another the F35 is going to play a major role in NATO deterrence models.

It's not just air forces that are committed...both the US and UK navies have new carriers for which the F35 is the only realistic future option

If there are bugs, they will have to be ironed out. The costs are insane, but developing a new competitor at this stage would be even more outrageous

Keep in mind that unlike Russia, NATO can deploy planes in volume, staff the support, keep a parts supply chain, keep training with them regardless of costs. People will compare the F35 to a Russian jet on a 1-1 basis but the reality is a Russian fighter has a lower chance of even being combat ready, and if it did, it would be outnumbered by NATO fighters probably 5-1. I question if the Russian air Force can even realistically secure it's own borders
Analysis of the XRP Ledger Consensus Protocol