skysight-inc/HackerNews huggingface dataset:
Well, if it was having an effect I'd be buying AMD right now against the market but it doesn't seem to.

https://finance.yahoo.com/quote/AMD/
Or the outlook of the rest of your life.
Perhaps, but if that's the case, isn't it better for a democratic nation to be a risk to a dictatorship's national security rather than the other way around? Better America be dominant than China or Russia.
>And this is a private equity play - buy the company. Strip it of its assets, ignore any future R&D opportunities and move on as soon as all revenues are exhausted.

How have you established that this is the most likely outcome?
If you're from a country that is not allied with the United States, I'm certain they would agree with that. There's a reason the Russians and Iranians aren't clamoring to buy our products.
this is an analogy that is worthy of discussion, but i dont think this discussion really touches on some key things. the first is that in bluegrass, like gypsy jazz, the idea of jams are central. jams are informal gatherings where people come and go and play tunes together. they are often damn fun, which is really the reason they exist. some jams are more novice, others are more advanced, but in general you are expected to be welcoming, or at the very least not mean. and this is how people are able to start to learn the style. they are able to sit right next to people who are much better than them and learn. this is the best way to learn this kind of music, to be right next to someone who is doing the things you want to do.

the jams also serve a second purpose which is that they are a pretty good way of communicating everyone's musical skills to each other. it doesn't tell you everything about a musician, but its a good gauge of overall maturity, interests, and sound. this means that likeminded musicians find each other quickly. festivals are interesting to watch, because you see that by the end of 4 days or so, people have often created informal jam groups that are quasi bands at that point.

tech meetups seem to be a really shitty quasi jam. open source projects seem to be a better format, and though i havent really been part of it, demoscene, defcon, chiptunes, infosec... strike me as communities that are a little more mature about the whole thing. i dont know them well enough, but i get the vibe anyway. they seem to have stronger sense of community.

i think that really good software teams are almost certainly the product of something resembling a jamming environment. the key is that all the members of the team have independently decided that they respect all the other members and want to be on the team with them. i think this is not fully understood and institutionalized in software management practices. i think that now the focus is too much on "here is the problem we want to solve, lets find the people that are skilled in this area". i guess im saying that good teams will create themselves and management is kind of a crutch. i get that there are real world constraints etc blah blah. but sometimes i wonder about this: money does not help creating good music, and i kind of think that might be more true of software than we think too.
>Pilots are important because of liability and federal law

Pilots are important because if the autopilot gets even one little thing wrong it cannot recover and people die.
Autopilot is more like "Auto-level and navigate"
It is not designed for emergency situations. What kind of license will this vehicle require?
Lots of Bluegrass players, even the some of the best ones, favor speed over clean execution.

I don't know if it's still a thing, but I've met lots of Bay Area 20-somethings who seem to try and impress you with how many keystrokes a minute they can pull off in front of you, regardless of how it helps or hurts communication about what they are doing. It's as if they're enacting a TV drama image of what a hacker is supposed to be like.
Does anything stop me from building my page, copying the HTML and hosting it myself?
Ouch, that's a nasty bug in firefox.. Will try to solve it asap.

Right now I need to serve slightly different markup depending on mobile or desktop, so I can't rely solely on media queries. I will however try to move it that direction once I figured a few things out.

Thanks for your feedback!
how else would you combine PDFs?
Independent researchers don't owe AMD a chance to address anything. They bought the chips on the open market where AMD makes them available, and then used their own time and materials to conduct their own research. Their work product is their own, and AMD has no claim to it.

There are, as I see it, two rational, coherent ways to be outraged about this story:

1. The vulnerabilities are fabricated and the report is fraudulent, in which case, by all means, slag the researchers.

2. The vulnerabilities are real, in which case. AMD is an 11 billion dollar company that got outmaneuvered by what appears to be 4 dudes in a basement.
I'm personally not offended. All my stuff is on a private, on-prem OpenStack. So, I'm not very hip to the public offerings and what trust they entail.
> Having to stuff all my logic in one big script sounds a bit annoying.

Keep in mind that you can write your code as a bunch of modules and then use a tool like webpack to bundle it into one script, before you upload it to Cloudflare.

> for testing/development purposes

I agree with this, we definitely plan to add better ways to test script changes. Currently there is the online preview that shows next to the code editor, but it's true that there are some limits to what you can test with it.
Then why any notice? 24 hours is useless; it almost sounds like they want to claim they disclosed in advance without usefully doing so.
> Firefox was and remains slower

Did you try out the Firefox Nightly with WebRender enabled?
Apple growth story has not ended: Here is why
The prospect of a torture technician being appointed to one of the top positions in the intelligence community is "political drivel"?

Jesus christ...
ya this is a very good one.
That’s... sort of ok? It’s not perfect, but it opens up another avenue to finance security audits besides selling exploits to intelligence services, attacking end-users (both worse), and collecting rewards from the companies (better).
Or selectively telling your buddies in teh know and helping them to fix their shit, while keeping uncool kids out of the loop. Now that's irresponsible.
That's absolutely true. Just not something I think of regularly, because I'm on all private infrastructure.
I think (but don't take my word for it) it's because it has nothing with tech/startups/whatever AND is related to politics/trump.

Back during the US election, HN became mostly news like this, and if I remember correctly it was decided it wasn't the purpose of HN to link to such news. It does not mean that these news are considered false, or not important, it does not mean censorship, it just means that HN is for a rather specific kind of stories.
AMD's stock was negative multiple times today ($11.38 on March 13, 2018 10AM,and at 12Noon on NASDAQ). Shorting the stock would be an obvious play. I have heard of people thinking about trading on security flaws in products but never seen it done in real life.
If we would think in terms of regular, non tech-savvy consumers, it is true, they are pretty much synonyms of the internet. Google is especially ubiquitous in this regard and reminds me a Microsoft in pre-firefox age.

If we think of it, the amount of lockdown to google is scary - it's browser, search, mail, navigation, advertisement, all photos and documents and now with AMP to a certain degree the web content itself.
You have to understand that HN is an artificial environment, specifically curated to dictate the behavior and thought processes of its users. It is a safe space for nerds who don't want to think about scary things like politics. If it causes heated "uncivil" conversation, it's off-limits here. Especially if the conversation is about civics.
DUI tests are only mandatory for people driving a car, not for people who are simply traveling in one.
Just don't play over other people, be cool, listen a bit.

As a mandolin/guitar player who plays bluegrass music with other people at least once a week, I'll ignore the many misunderstandings in TFA (for instance, a "breakdown" is entirely different from a solo known as a "break" in BG parlance). But if we're going to make an analogy between bluegrass music and software development, your comment that I quoted is probably a good one. When it's an instrumentalist's turn to step up (their "break"), everyone else is there to support them to make the soloist sound as good as possible. It is not everyone else's time to show what they know; calm down, your turn will come, and then it's everyone else's turn to make you sound good. And I think that's where the author was trying to go with this: in software, we all play different roles at different times in the process.

I will differ with you on imperfection. Sure, imperfection is tolerated, but an expert player who can improvise a solo with just about any song that's thrown at them, whether they've ever heard it before or not, can be a joy to have at a jam. Not just because of their expert solos, but because when they're not soloing they can really help to make the other players sound good when it's someone else's turn. Likewise, the expert developer is handy because they have good chops, but they're even more handy when it's time to help test figure out how to properly cover that gnarly piece of code, or give PM some options on how to handle the corner cases on that feature.

Mainly, though, bluegrass is a "team sport". I can pick at home alone and have fun doing it. But bluegrass is a style that's really meant to be played as an ensemble, with everyone doing their part at the right time. With that, I shouldn't even have to draw a parallel to software development. :-)
i always find the importance of these disclaimers blown way out of proportion to their probable economic impact. AMD shares are -up- 2% right now, for a presumably negative piece of news. the stock market is a big and sometimes inscrutable place. but ethics likes to treat things as morally black and white.
Perhaps this is my ignorance, but I was under the impression that security disclosures are usually tightly coordinated to minimize exposure of innocent users.

> "Unheard of"? People have dropped serious vulnerabilities with _zero_ warning before.

Could you point me to an example of a zero warning disclosure that exposed a large amount of users without first attempting to coordinate with the responsible party?
24 hours means they don't deserve to be called security researchers. They're exploit creators. Given the material effect this would have on AMD's stock, one might also reasonably speculate about their financial interests.
The original press release from the team has much more detail on the technology itself, and is here: http://www.prweb.com/releases/prweb15276833.htm
So what do you think your result variable contains in the event that the promise is rejected? Is this semantically equivalent to try/catch?
The premise under Capitalism would be that the state-sponsored / state-owned corporations were acting as conquering agents and should be treated as a form of invasion in terms of national defense. The theory is that it'd be defending the rights of the people to not be brought under the heel of a conquering foreign government. Such trade would be regarded as a military action on behalf of the foreign country, since under Capitalism the government has no role to play in the economy in terms of owning & operating economic assets.
It says a lot about what America has become that torturing people illegally and then destroying the evidence to cover your ass can be written off as just political issues.
I guess that's one way of managing customer expectation.
Is this kind of language common in other security disclosures?
I think The Netherlands and Singapore are an Apples to Orange comparison. Given that The Netherlands has been one of our closest allies for decades and was an original founding member of NATO, them deciding to halt a US takeover on "national security reasons" would be shocking. I'd also argue that this deal would probably have gone through if Broadcom was a dutch entity.
After I gave up on Classic Theme Restorer, 4 most useful addons remain: EdgeWise, Session Manager, DownThemAll, Status-4-Evar.
yes and its $11.77 now (up 2%)

this is not in the same league but i recall AMD/INTC also traded up on the spectre/meltdown debate. a lot of insecure chips ironically leads to a lot of demand for new secure-er chips.
This. Especially with the disclaimer that others have noted:

> "we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports"
"One hit wonder" security firm is trying to make a name for itself.
> where is the best way to ask about issues like this regarding Firefox?

The #firefox channel on irc.mozilla.org is a good place to start:

https://wiki.mozilla.org/IRC#Project_Channels

And the Firefox subreddit is pretty active:

https://www.reddit.com/r/firefox/
This is correct except for the cases where a company can show "legitimate interest" in which case it is in fact an opt-out rather than an opt-in [1].

And yeah, I agree - they mean business

[1] https://www.gdpreu.org/the-regulation/key-concepts/legitimat...
A dataset containing actual search queries on bestBuy.com manually labeled by human experts.

Key Features

~1700 labeled named entity pairs

7 Categories

Human labeled dataset
I'm opposed to all political advertising period, and would have also considered a Clinton presidency non-optimal, though likely more stable than what we have now.

I'm fine with the down votes, but it should be pretty obvious that it would have been Marco Rubio, or some other sanitary GOP member who got elected if it wasn't for the Russian troll brigade on the internet whipping up a frenzy for Trump.

That's my only point
Fixed. Thanks :D
Great news, but interesting to see that they still recommend securing individual domain names. I imagine this is for security purposes?
The Desire to Write
You have a lot of faith in our current system
I don't want this to be intended as harsh criticism of your idea, but let me share my experience with website builders:

- The market is extremely tough. Maybe you noticed how much advertisment squarespace and Wix do. The reason being that these pages typically have small businesses as customers. The issue with these type of businesses is that they go away quickly. Most don't survive 6 months. So you need new customers all the time to keep up with the high churn.

- You do not have price dominance. The price is very competitive and companies with huge backing (like Squarespace / Wix) will dominate you.

- The intended target audience is actually not that keen on doing everything themselves. They don't know about online marketing, SEO, or other "special skills". Actually, they just need someone they can call when they have an issue.

- Developers and agencies prefer open systems like Wordpress, Gatsby, or others. They also value a vivid ecosystem of plugins and themes. They typically don't commit to proprietary software, because you never know how long it will be around.

In any case, I wish you the best of luck with the product. It looks nice! I hope you can use my experiences to advance your business.
This is too well organized and presented. My guess is that this has to be financed in some part by a group of short-sellers.

They made a rookie mistake though - AMD is plagued by day-traders and algorithms who couldn't give a damn about the fundamentals.

Boy the future of capital markets is looking grim.
Mentioned in another comment, but from their management page: http://www.cts-labs.com/management-team

> He [Yaron, CFO] is also the founder and Managing Director of NineWells Capital, a hedge fund that invests in public equities internationally.

I wonder how linked the companies are - is this basically a vulnerability research company as a research arm of a hedge fund?
The amount of money I've paid for this... I recon some of these providers are going under soon?
You're allowed to say plenty of wrongheaded things here and elsewhere on the Internet.
Fedora's guide to Systemd (2015)
Scammy site, see: https://news.ycombinator.com/item?id=16576516
You should certainly report it to the appropriate managers. But, ultimately, ethics is highly subjective: and it's not your choice. You've sold your time to the company and have to produce the products it makes: even if you don't like their ads or product. You can say no, they can fire you and hire someone just like you and the product would still get made.

Being a doctor or developer is entirely different. The doctor has much more freedom in deciding a course of action. As a developer you have very little power to decide what get's produced, because it's not your job function: that's what product managers are for.
Something seems off here - they mention using 100 workers (a worker for every request). I would expect that to perform way more than 40% faster unless there's a ton of overhead in creating those workers.
No. Doing independent research is not “inside information”. This is actually pretty close to how a market is supposed to work.

It’s also not market manipulation to publish factual information or opinions. Only knowingly publishing false information would qualify.
Agreed: Qualcomm is not a "patent troll", they're a normal company with a very sizable IP portfolio they rightfully innovated and use in their own products, as well as licensing to other companies. Whether they abuse their market position is its own question, but they have nothing to do with companies that were founded solely to buy vague "shopping cart" patents and make money only via lawsuit settlements.
Colossal family tree reveals environment’s influence on lifespan
So, in order to prevent fraud, companies like Best Buy contract out to companies like Retail Equation to evaluate (and deny) returns. While I can appreciate why they feel it's necessary, this seems like the kind of thing that credit card chargebacks were made to combat.
Getting to non-fatal is just a future implementation detail
Looks like the time has come to seriously examine how to handle this kind of behavior by Rusia. They are operating without any fear of repercussions.
Reconstructing a human in silico from a dead brain is likely to be a very expensive process. Why would anyone in the future be interested in going through with it for any more than a few select old brains when there will be plenty of dead brains to go around at that time?
I'm building an API right now that I plan on monetizing so I'm looking at different simple CMS programs. This one (LonelyPage) immediately intrigued me because I don't need a lot of features. Basically people can pick a pricing plan and pay through Stripe. No portal is needed for now really other than to see their API key.

I'm not a frontend web guy at all so I'm trying to avoid doing as much of that work as possible. Wordpress seems like it would be pretty much perfect, but for the life of me I can't get it working with docker and HTTPS. All of the solutions involve editing some php files that are easy enough to edit without docker, but I would probably have to make a custom docker image to make it work in a container. Bleh.

Ghost is OK but it has like 0 customization and the themes are all 4 years old and no longer work properly.

In any case what I'm getting at is I'd happy pay like $50 or $60 for a simple CMS thing that has some themes and whatnot, but I want to host it myself. And I don't want to pay monthly for it.

Thanks for the Hugo suggestion, I'm checking it out now. I had never heard of it before.
If it was up to me, even right now.

This is great news!
You are correct to the degree that science begins from observations. However, dismissing one person's contribution to the body of knowledge in isolation ignores the vast amount of work in many different times, locations, amounts of detail, techniques used.

These interlock to lend incredibly strong support to one main interpretation, that the Earth is billions of years old and has had many different processes work on different parts over all that time.

To contradict all of that evidence at once is rather a bit more of a hurdle, and not so easily dismissed.
There is also some questionable research group involved in all of this: https://viceroyresearch.org/2018/03/13/amd-the-obituary/

It's not uncommon for short sellers to take a position first before releasing a report like this to drive the stock lower. Of course, there are legitimate groups that, in the past, have unearthed real issues and corporate misconduct, but there are also questionable groups that will release reports with little to no substance. This case certainly does looks dubious, but I'd like to see an assessment by reputable security expert.
90 days is good amount of time to research a vuln and prepare fixes.

We could always have the government regulate this instead though, instead of being professionals and self-regulating.
Beijing's new 24-hour human-free robot bookstore
Ah I realised he meant the product of the two PDF's but it sounded like he meant the PDF of a the product of two normally distributed random variables. Which would make no sense.
If the vulnerabilities were real, I'd have no problem with a company using it to promote themselves, trade and talk their book, etc. The issue here is the vulnerabilities are very overhyped (some are fundamental things like "if you reflash your BIOS with evil, you're screwed", some just make local root access more persistent, etc.

The problem with something like TRO LLC is that markets don't move on security info.
Top 7 Quip alternatives for collaboration 2018
> Spectre/Meltdown showed up on the news.

well it didn't at the beginning.
hn readers at least had one or two days in advance.
Why does it matter if they're on GitHub?

I'm not OP, but usually the conversation goes like this:

Person 1: <describes problem with open source software>

Person 2: It's open source. Have you submitted a patch yet?
Used to prefer the status bar but am sort of used to not having it now. But I think the new way is broken also. Don't see why I have to look down to see the link target. Why can't it be a tooltip at the mouse pointer, perhaps below any alt text?
He did say “should” disqualify someone from employment, which I read as “ought to.” Idealism maybe. But with black or gray hat research, you’re right.
Sales Coordinator
Much appreciated! :)
Storing chess games 275% more efficiently with heuristics and Huffman coding
That should be called a locust merger
i think that really good software teams are almost certainly the product of something resembling a jamming environment. the key is that all the members of the team have independently decided that they respect all the other members and want to be on the team with them. i think this is not fully understood and institutionalized in software management practices.

I remember this being covered in software engineering books from the 80's and 90's like Peopleware. Really, it's the most important factor. It's the factor that really can be like a secret sauce. It's not the easiest "secret sauce" to sell books about, however. It's not a clickbaity "One Weird Trick."
Yeah, there are some edge cases where a wildcard is less secure. https://security.stackexchange.com/questions/8210/what-vulne...
In the case when you die, but your brain still exists, and it starts processing it again in a new host (computer or organic), isn't that not you anymore? Why would my former self want that? Is this a solved philosophical problem for which literature exists?
Some researchers coordinate, some researchers don't. For a project originally organized around the principle of getting not just research results but functioning exploit code deployed regardless of vendor preparedness, look no further than Metasploit.
From the infographic: "returning an item just when a store closes"

Can anyone explain why that specific behavior is a red flag?