skysight-inc/HackerNews huggingface dataset:
Amazon was a phase. They bridged the gap of DOTcom and new thinkers not interested in starting a devops team to begin.

Now DO, vultr, and other options exist to fill the gaps more.

Aws was never the solution to content distribution or infrastructure replacement. Just a company smart enough to notice big gaps and not afraid to fill them to get the ball rolling, maintain and progress, then move on.
That's HTTP, not HTML.
Fix your own house first.
I think the ability to actually exploit timing attacks is bit over indexed. Almost all of the time you need direct access on the machine, i.e. not a webserver. So it's more of a concern for native environments as opposed to networked environments.
Google removed this functionality years ago. The article you posted is from 2010. If I remember it wasn't long after that though.
Process A uses repeated calls to the gadget to trick the CPU into thinking "hey, that's a frequently jumped to place, I'd better remember that for speculative execution." Then when Process B runs, when it comes up on a branch instruction, it calls the gadget speculatively, bringing with it information about process B across the call. This may require some interaction with Process B, but it's minimal (opening a socket that Process B is listening on might be enough).

Whatever computation resulted from the speculative call is discarded BUT its effect on the cache is NOT. Process A can thus use timing information to determine what's in the cache and thus, exfiltrate data from process B.

So no, you can't read memory across process boundaries directly. The CPU's virtual memory mechanism provides at least that much. The significance of Meltdown and Spectre is, that isn't enough. Using speculative execution, cache trickery, and timing-based attacks, information CAN be exfiltrated from a process even with virtual memory protection in place.

If this gets you paranoid about your ssh-agent leaking data, good. One (relatively) easy way to mitigate this is to use the retpoline compilation technique, which replaces function calls with a RET to the function location. Because the target of a RET, being on the stack, is unknown up until the moment it happens, current CPUs do not speculate across a RET. (Though were it not for Meltdown and Spectre, maybe future CPUs might have made some guesses?) So Process B could not be induced to speculatively call the gadget if it were compiled with retpoline.
> Flippantly dismissing certain technologies and engaging in “just”isms needs to be called out because it’s not productive or helpful.

I agree that hashkb's comment was flippant and unhelpful, but your reply was not any better and was the one that went off-topic.
I had no doubt that it does. But this article has so little substance that maybe I should reevaluate my opinion.
You never felt the pleasure of giving your life for someone ? for a group ?

I did, very few times, but I did. I bet 10$ that their culture only amplified that feeling.
HTML request bodies are arbitrary bytes. There are nice ways to do useful things with those arbitrary bytes and less nice ways. This library purports to collect some of the nice ones.

"XYZ for Humans" is a trope for the author of this library; for example, requests' tagline is "HTTP for humans".
It’s not like these shops only sell Pi Zeros, the shipping costs are the same for other Raspberry Pis and accessories. But you’re right, limiting saws to one per order raises the effective price to $10.
Armbian sounds like a version of ambian
I'm very surprised they're not already doing this. I guess in the future I will have to use Tor and play around with various exit nodes until I find the best fare.
What do you mean? Are you saying that people that have aided terrorists or whatnot will be held to account? Is that a bad thing?
"Of the 51 Round-1 SHA-3 proposals all of them passed statistical tests and at least one round of review by NIST yet 33/51 were broken."

My central point is that statistical tests are not in anyway sufficient for showing the security of a cryptographic hash function since it is easy to create a hash function that passes them and is broken. My evidence was the SHA-3 competition.
This video does a good job explaining how airline pricing works nowadays:
https://www.youtube.com/watch?v=y3qfeoqErtY
Basically, from the info they get, (destination, departure date, return date, etc.) they try to guess what kind of traveler the customer is and price the ticket accordingly.
E.g. if there is no weekend between departure and return, they think that you must be a business traveler so the ticket is more expensive.
CDC employee Timothy Cunningham went missing more than a week ago
This is so complicated. Especially for a bathroom where there is likely only one entrance, you're no more than 5 steps from the such at any one time and you only need to operate the lights when you enter/leave.
If everyone was doing it, there would be no returns or even negative returns, and thus people wouldn’t invest. The problem fixes itself.
A battery and something that detects the power has been cut off and does a shut down/standby.

Rpi startup takes a little while, so I don't know how nice it would be to wait 1 minute for your android auto system to startup.
This strategy only works for iPhone which has great resale value.
Our take on RethinkDB vs. today's NoSQL (2013)
I would disagree. I track on google flights 3+ months before I want to go and feel that I get a reasonable price every time. 3 months in advanced obviously doesn't work for everyone, but using google flights (or any other tracking site) to track will definitely help you get tickets at the right time.
>Maybe it's the same guy?

Of course not. ;-)
Sockets are a C language API because of their Unix origin. Other languages provide wrappers around the underlying C API. If you want to understand something like select() vs. epoll(), there's no way around C.
Fringe communities on Reddit and 4chan have high influence on Twitter
Would love to read more about that synth project. I'm just embarking on a similar project myself, using a little Cypress PSoC that a friend gave me. I'd like to make something glitchy and lo-fi - halfway between a Monotron Duo and an Atari Punk Console.
The Youtube app is broken because of that reason. Can't even play when screen is off. Absolutely braindead...
The "hivemind" argument seems to predict that as society scales up (either through massive population growth or through faster and better interconnectedness, such as through the internet) that as a result we should be seeing much faster gains in technological progress especially in the last few decades or so. However there are quite a few observations that a lot of this progress has sort of slowed down compared to the early 20th century (see the arguments for "technological stagnation"). At the very least, technological progress hasn't increased linearly with population growth and better communication. In other words, the rate of technological progress looks more discontinuous and not obviously a function of societal coherence.
Title slightly consolidated from original: "Study finds fringe communities on Reddit and 4chan have high influence on flow of alternative news to Twitter".
So I guess the flip side of that is that no Chinese person is able to have an informed opinion about the US? Do you feel comfortable applying the rule both ways?
It may sound odd, but gold coins are not on the gold standard. The gold content represented a value floor, but their value should exceed that, or they would have just used bars not coins. If nothing else they where less likely to be fake.

Gold standard only really refers to paper money which was used as a proxy for actual gold. Arguably it's even preferable to physical coins as historicly people would often clip them.
Thanks for the link. I seem to have cast my net too narrow, as Google turns up this: https://www.webstaurantstore.com/14351/commercial-microwaves... which has quite a few high-powered with dual dial controls (though it's not clear which are inverter-based). Some have instead two columns of buttons, one for power, one for time, which is a design I hadn't considered which does also seem easy to use.
It's specifically the US government that's guaranteeing a right to free speech and protecting freedom of expression. This is also a uniquely American thing, many other countries have significant restrictions on free speech.

Free speech can be interpreted many ways, but one of those is to curate your platform and decide which messages you want to promote, and which you don't want to.

YouTube is not an arm of the government so it's free to do whatever it wants so long as their actions are not discriminatory as defined by law. You're also free to complain about it.
The link you posted goes to a video that explains "how overnight shipping works". Do they explain airline pricing as part of that video?
For me the annoying part is that it's hard to find out when reasonably priced tickets are available. When booking for family I can be very open to suggestions, like "give me good prices to any of these cities for 4-7 night trip with 0-1 stops" whenever in April-May".
> I'm pretty conservative when it comes to the possibility of injuring myself, and I honestly don't think lifting free weights is inherently risky when one pays attention to technique and one's own condition (both in general and during a workout), which is true of any sport or fitness program.

I used to think the same way that you do. But I had a trainer. I was not doing the exercises incorrectly. I was not going too fast. I went well above and beyond the standards most people take for safety. And I still got injured. There are no further precautions I could have taken. Ergo, barbell strength training is inherently risky.

Rip is very clear in his book when he says you have to follow the program. He states in very strong language that the program works and if you deviate from it, you're on your own.

I am sure you have had soft tissue injuries that took weeks to months to heal as a matter of course when strength training. You may have looked at those injuries as part and parcel of building athleticism. I don't. I look at them as a sign that you are going past your body's abilities. The domain of elite athletes and competitors. They should have to worry about injuries.

I should be able to train without worry. But I can't. Because it's inherently risky. There's no course of action that you can take in order to train without risk. And it will stay that way until we can come to a full understanding of how soft tissues act under stresses.
> Too many developers treat too many layers of the stack as "magic", and this is great to show it's not so.

My high-school maths teacher referred to it as "just plumbing".
Oil packed nations making a shift towards cryptocurrency and blockchain
The lock in is even worse than people think.

Now more and more companies are locked in in Amazon.

Hard to find a good old Datacenter Admin.
I'm with you. Using the Things Network https://www.thethingsnetwork.org/ I am currently setting up a gateway and connecting a few remote sensors to it. Right now I am just sending simple sensor data (button_press, temperature, light etc) but I would like to expand on this and send other data. For example I want to be able to deploy my own speed traps, measuring vehicle speeds on any road I want. I don't need to connect the speeds to reg plates, so I'm thinking about just measuring when the car passes through an IR beam or measuring a magnetic pulse or similar...
Also, air quality monitoring. And of course, the robot lawn mower is getting an upgrade for the spring. Water temperature in the lake might be a good addition for summer.
I forgot to say but since it is https://www.thethingsnetwork.org/ everything I do is already connected to Alexa and IFTTT... imagine waking up in the morning and having Alexa tell you that it is a good day for a morning swim, since the water is X degrees. Yum.
The last straw that made me switch to iOS 10 was how much less buggy iOS was than Android at the time. And then I upgraded to iOS 11 and now enjoy the most buggy OS I have ever experienced on any platform, period. Insane UI glitches in the parts of the UI I use the most often (in the Notification Center?really?), frequent random total crashing (which I haven’t seen in any OS—including on the desktop—since the 2000s)...

I actually do not understand how Apple dropped the ball so badly. Someone should not be getting a bonus.
No, free markets theories take into account information asymmetries and principal-agent problem.

I don't believe https://en.wikipedia.org/wiki/Law_of_one_price to be true in the general case

How does anyone look at this and
think it's in the best interest of consumers?

As the article said, discounts for people very sensitive to the price. Some people might not care about spending 2 % more and want to book their flight right now, and some others are ok to spend time to look for price 2% cheaper (+ taking the time to know about the existence of dynamic pricing and techniques to avoid it)
Of course, if your stereotype is correct, this does beg the question about who decided it was a good idea to GIVE 'the kids' all these trophies.
when a manager complains about oral/written communication they are NOT talking about how you spell things. its things like properly alerting them when issues arise, not being to terse yet not overly wordy emails, knowing what topics are appropriate on conference call and when others can be talked about offline, etc.

i myself am not the best at communication, but those problems do not lie in the fact i didnt bother to use caps in a hn post.
You could do worse than start with the FreeBSD Handbook section on sockets as it covers a lot of the how and why things are glued together. It is C based however, as *nix and data structures were built in C.

[0] https://www.freebsd.org/doc/en_US.ISO8859-1/books/developers...
Did features plateau? I don't see things in this marketing that are new or exciting.
Here's the thing about the "expressos," "irregardless," "for all intensive purposes," and "mute points" out there: Even if the meaning is clear and the communication is successful, these convey a carelessness and sloppiness that, as a great engineer, you don't deserve! As someone who knows what you're doing and takes pride in your craft, things like bad spelling and usage needlessly undermine your credibility.
> and contrary to popular belief, one can easily save $50-60k/year by renting a room in a house at $1000/month

What if you have a family?
Students may be interpreting professionalism / work ethic as consistency in studying and turning in assignments on time in the context of coursework. But the scale of problems that they need to solve in the workplace have a much greater scope in terms of time, complexity, and number of people involved. Employees need to integrate with the organization, not just do the equivalent of turning in assignments. Often the initial plan of work isn't complete or the right thing to do. Some fresh graduates have a tendency to latch on to some passing statement from a team meeting, work hard on that without doing any follow-up, and end up surprised when no one has a use for what they did. A professional keeps the big picture in mind and follows up with people so that course corrections are made and genuinely useful work gets done.

Colleges try to teach teamwork, but few team projects in coursework are sufficiently complex that they genuinely require teamwork. Since everyone in a course project is taking the same course, no one has irreplaceable expertise. The consequence is that students never have to learn how to work as an organization instead of individuals. The exceptions are club activities like (inter)national engineering design team competitions in which, as in business, genuine failure is possible and success depends on everyone's contributions.
Prohibition was to promote a so-called societal virtue of temperance. It was also legally protected.

This sword cuts both ways.
As I understand it (disclaimer: not a physicist), that's the open question: does there exist a stable configuration of atoms that will create conditions such that the threshold theory applies in full, errors are adequately corrected, and an N-qubit quantum computer can be built and operated for cost polynomial rather than exponential in N? Or does that line of thinking rely on assumptions that can't actually be met?
Sockets are mostly implemented outside of userspace. It's actually very easy to make a TCP socket in C: https://stackoverflow.com/questions/204169/how-to-create-a-t...

UDP is pretty similar but you have to change the code to be connectionless.
ام بي سي 1
Wake me up when there's a surprise.
A two-digit number (i. e. "13") would be too short for the redaction. A three- or four-digit number is highly unlikely ( because it would be treated as a single conspiracy, not as separate investigations of individuals). Plus, the sentence that follows after the colon seems to be a list of the individuals, and its length points at a single-digit number.
I have the full 20-ish volume print edition, which is fun to peruse sometimes if you have the shelf space for it. I got mine used for somewhere in the neighborhood of $100 on ebay, so you might check there.
Absolutely. Of my friends who did join I can only think of one or two who have really done very well for themselves. However all the rest are still better off than my friends who stayed in their small town.
If everyone could afford to retire early then this would imply both impressively high productivity while working and an impressively low level of inequality. Seems like a good goal to shoot for?
Add that their flat rate pricing is actually a discount for moderately heavy users. If you use half or more of the 1 TB on the pro plan you’re already saving money compared to S3 pricing.[1] This is easy to do if you use something like Arq to back up your machines and take advantage of selective sync to archive rarely used files from old projects.

[1] S3 at 0.023/GB/month * 500 = $11.50
> You are saying that the corruption is established during the rule (before the change of power) but is more likely to be uncovered upon the change of power, correct?

Yes. In the corruption cases the involved party is the exiting one. As it loses power it can't keep the grip on the public officials and justice is free to work again.

City councils are an extreme example, as they can hold power for decades.

> As opposed to the corruption coming about because of the change of power, which is how I'm afraid some people could read your comment if they skim quickly.

You are right. It's just that I found the concept so implausible that I didn't though about that misread.

Thank you for the clarification.
Regarding business debt ---- > It is usually floating rate and has a shorter term. You will have to roll the debt more often as you refinance. Thus, you will pay the higher inflation costs. And if inflation costs are unpredictable, then lenders will require a higher risk premium on the inflation piece.
The airlines see their customers as a) wealthy people who can pay whatever for convenience and service, b) business people who travel a lot for work, schedule-driven and not generally paying out of their own pocket, and c) folks who fly only once in a while, for vacations, and are very price sensitive. These are cattle to be shuttled around as cheaply as possible. Any consumer-oriented change the airlines are going to make are mostly for a, somewhat for b, and cost-cutting for c.
That’s just my preference. Keep the features that are best for your specific use cases. It’s your project after all. I think that’s better than design by committee. Linus didn’t write Linux for other people.
Couldn't someone just create a service that spoofs cookies in order to trick the airlines website into giving the lowest possible price?
Yep, google flights is especially useful because it makes it easy to observe the effects of arriving/departing a few days before or after you planned to. Another commenter in this thread mentioned that certain booking patterns (e.g. booking popular business routes over weekdays) result in higher prices and this is a great way to circumvent that.

Google flights isn't perfect though. You still need to check a more old-school aggregator (I prefer skyscanner) first before pulling the trigger, and of course Southwest as they aren't on any aggregators that I know of.

Checking out skiplagged is a good idea too because it shows you the hypothetical prices of booking legs of a trip a-la-carte rather than as a full ticket. This has the added risk of leaving you SoL if a connecting flight gets delayed/cancelled, causing you to miss a later flight on the same journey but different ticket. If you're careful to not book flights when you know there might be weather or time concerns, though, it can save you some money. For example, I wouldn't be concerned about flying a leg on ORD-LAX during the summer time with a 4 hour layover because that's unlikely to get cancelled/delayed, and if it is, you could get rerouted quickly. Airlines hate that this website exists which is at least adequate evidence that it can save you good money.
@ryandrak "irregardless" is a word
If the system being attacked does not limit attempts, one might repeat their requests until they achieve statistical significance. The first Stripe CTF had a level that dealt with timing attacks, and that is the approach I took.
Also the first trans-continental railroad originated in the area.

A hundred years later the railroad tracks served as ideal right-of-ways to lay fiber-optic cable to create the modern internet.
I bought a pixel 2 (for $650), and I would have bought a pixel xl if it weren't for the inferior screen.

something to consider: if I had had a 32GB og pixel at the launch of the pixel 2, I could have sold it for ~$400. if that trend continues, I would be happy to pay about $250 a year to always have a current flagship phone with monthly security updates. that's only 20% more expensive than just buying a ~$400 phone (nexus 5x launch price) every two years. of course you could also sell the cheaper phone, but the non-google phones seem to lose their value faster.

the real question is, why spend flagship money on anything other than a pixel?
That's all true, but you are not their customer here. Their customer is the person who has never heard half the words you just said - or at least the person who has to support a bunch of people who've never heard half the words you just said. :)
Except for the fact that virtually all modern serverside applications live on shared hardware with anonymous cotenants, and all modern clientside applications are JIT'd from random websites, but sure.
alexashka- pity you were downvoted. I upvoted you. I agree with all that you said. What you stated are uncomfortable truths that not many want to confront.

Bill is not really a smart guy in my standing. May be one could argue that he is smart in a narrow band - that of making money. I certainly can think of a few of my acquaintances who can be more creative than him in ways to "help" others.
> Interesting, tax rates in Switzerland are on a canton by canton basis correct?

Broadly speaking, yes.

> I have also heard that the reason for Zug's favorable tax rates is because it was once one of the poorer cantons comparatively speaking.

I don't know. Sorry!

> I have also heard that Zurich is quite favorable as well which is interesting because its also quite expensive.

I'm not sure - depends on whether you mean taxes for companies or private individuals. Also, certain tax brackets vary in the canton (almost village to village). Finally, it depends on your (or your company's) tax goals. Someone earning $30k/year will probably be better off in a Gemeinde/Canton which wouldn't be optimal at $300k/year.
Airline tickets are nontransferable. You can't buy bulk tickets, and you can't resell them.