skysight-inc/HackerNews huggingface dataset:
I think these "amdflaws" vulnerabilities very much deserve to be discussed, and as somebody who doesn't like these blackbox enclaves in modern architectures I'm pretty happy to be proved right once again.

That being said with their shady behaviour CTS-labs have managed the tour de force of overshadowing these vulnerabilities with their botched hit piece "reveal". Paradoxically AMD might end up receiving less backlash than they deserve for their shoddy work because the researchers tried to pull a quick scam out of it. Great job CTS-labs.
I wonder why the post doesn't mention a pretty recent potential deviation from Standard Model [1][2]. It seems that LHC may deliver some new physics after all, it just needs more data to rule out statistical anomaly

[1]: https://youtu.be/edvdzh9Pggg?t=3124

[2]: https://home.cern/scientists/updates/2017/06/lhcb-flavour-an...
Is torturing someone who has committed a hundred murders and someone who has committed no murders ethically equal? I can see both sides of the argument making good points.
No but they put an upper bound on it which is likely what people would care about anyway
A friend of mine made https://github.com/catenoid/Shadow-Map

Uses UK LIDAR data to show shadow maps. This can be used to show urban areas which are permanently in shadow. Or just as a cool way to map the country.
If I had a choice between an entry-level candidate with a MOOC certificate and an entry-level candidate with a Github repo with some interesting projects, I think the latter candidate would be in with a better chance.

Not all candidates are created equal however but the ones that I have hired (and ones I wish I could have hired) all had at least some sort of online coding portfolio which demonstrated a good working knowledge of data structures and algorithms.

As an engineer and an employer, I am more interested in what experience you have than your educational pedigree. I would see a MOOC certificate as neutral.
8 DevOps tools that smoothed our migration from AWS to GCP: Tamr
An other solution would be to create an org, give access to people you want as collaborators and forbid forking. They can work in branches in the main repository, and you can use protected branches to alleviate the risk of incorrect pushes.
Growth isn't just about consumerism it's about human flourishing. We grow not just because we produce things we grow because we get better and better at using the resources around us which provide more flourishing for more and more humans. Without growth we can't do that as we won't have the surplus to invent and invest in new technologies.

Improve medicine, explore space, optimize production methods, invent new energy method etc. for more and more people. Those require growth.
Not an accountant, but I think you should recognize gains with every trade just like Intel and Google trades that liquidate or forex trades.

Key point here is that you also recognize every loss. Which means in effect you are only paying tax on the amount your wealth increased over the tax period.

It could still be huge, but only proportional to huge overall gains.

Not sure about the trading fees for frequent traders. That's definitely a CPA question.
Diana Moon? Is that you? I haven't seen you since the dance.

--Harrison
I know its tempting to chest-beat for the EPA as the protector of citizens but they have a track record of staying silent or even covering up.
https://www.detroitnews.com/story/news/politics/2016/01/12/e...

And most of the money for cleanup comes from taxes. Its a nice roundabout/inefficient way to make citizens pay for the pollution of large interests.

In my opinion its more plausible that pollution has decreased due to citizen awareness and organization rather than the EPA.
Network Security Essentials: Keep Software Updated, Upgraded
> You're relying on people not making their forks out of github.

That makes perfect sense to me; the fork ON github is what lends the fork legitimacy versus "some dude found code."
Surely you must think some ends justify some means. For example I highly doubt you've cut all white lies from your life. What makes the use of embellishment here different?
That's naive wishful thinking at best. The cons far outweighs the pros on this feature.

They're one button away from cloning the entire repo out of Github and bypassing all these fancy access control mechanisms without you even knowing about it.

This is one feature that causes a lot more pain than actual utility.
It might be more accurate to say that SpaceX has to frame their ventures in terms of fantastical Mars colonies for PR purposes, while the reality is less sexy, but more necessary LEO work.
My grandma didn’t know what to wear anymore
the intresting stuff is on the side ;)
(looking at the map it seems to be a 90-ish version of the internet made by wiredo)
DNS over VPN is encrypted (at least until the VPN server)
For that matter, what's stopping them from pushing a clone to Github instead of forking through Github's web interface?
Securing Ansible SSH Keys
Have you used fieldbook. It’s pretty amazing too. Like spreadsheets, but more involved.
As usual, cloud services are other people's computers, but it seems devs now keep forgetting about it.
Hmm, I don’t get it. But then I’ve never been much of one for literature.
If you can't count all of the votes either phisycal or digital, you can't be sure that voting isn't compromised. So, you can never be sure.
I disagree. IMHO "area the size of Wales" is more commonly used. For everyday magnitudes the nanoWales [1] may be more convenient.

[1] https://www.theregister.co.uk/Design/page/reg-standards-conv...
I love the fact that something so grass root and community based naming of the phenomenon gets the name Steve, but as a programmer it is like naming your language Go or R. Good luck researching Steve (Strong Thermal Emission Velocity Enhancement)

STEVE = ribbon of purple light with green accents. Happens further south than the Aurora normally happens.
Surely the obvious problem with trade weighting as a measurement of the average tariff is that it's biased against sectors where very few imports happen because the tariffs on those goods render them uneconomical?
"The original designer said that "video games are machines that fill memory". The majority of the time, game programmers are thinking about how to fill memory with huge reams of data in ways that allow the data to be efficiently accessed and processed. Hundreds of megabytes of memory must be moved from the hard disk into main memory, and from there into the video card or the processor cache to be processed and returned back to main memory. Because video game players don’t like to wait, all this must be done as fast as is allowable by laws of our universe. The primary purpose of a programming language is to allow the specification of algorithms to manage data. Language features like garbage collection and templated data streams and dynamic string classes may help the programmer write code faster, but they don’t help the programmer write faster code."

- https://github.com/BSVino/JaiPrimer/
Every mature project I have ever joined, ever, is such a mess that it needs a map. Typically when I start a new job, I have to make that map myself, because even the senior engineers can't explain it without stammering or omitting the half of the code they don't understand anymore. Would that I'd had something just like this map every time I started a new job!
While I also would like to learn how to trade stocks and believe in value investing, I think this comment severely understates the difficulty of beating the market. Let's not forget that the vast majority of professionals who do this day in and out can not beat the market on consistently.
Lawnchair Larry
Depending on your insurance, ambulance and emergency charges can be either rather high copay or only % covered, and are NEVER cheap on their face.

My wife drove me to the emergency room on a 3am Sunday morning when I felt like someone was pushing a golf ball out through my ribs and I had my gall bladder out that week. $750 copay for ambulance service.
I don't have any particular issue with the way that Github do this, but you're exaggerating the effect of the github hosted fork. Somebody using a private fork to misrepresent their relationship to you seems like a stretch, as all it shows is that you gave them access to your repo, which you in fact did do. Also, not only "could" they clone a local copy, they almost certainly have done so as that's how 99% of work flows go.

Also, git does inherently allow for private repos, otherwise it would have been licenced differently, and it inherently allows for access control (ie repos don't have to be readable without authentication).

Like I said though, github's stance of disabling a private fork of a private repo when the permission is revoked doesn't seem unreasonable to me. I think the key thought missed by the OP was that they were both private repos. Also, they could deal with it differently when it's non-payment that caused the shutdown rather than a deletion/revoked permission
We don't need to destroy the Sunset to save San Francisco
How chess came to Twitch, YouTube, Reddit, and the rest of the web
> But that is different from logging into Github and having a fork of my repo.

How is it really different? When you push it back up to github it is exactly as if you'd have forked it. The only difference is that it isn't marked as a fork and in this respect not shown when you look at the original repo graph.

It's nice that it works for your usecase, but since it's not a real protection against anything and only looks like a safety measure against abondend accounts that still have a copy of your code, it shouldn't be a feature that's on by default. (Imho)
Not exactly an object 'inside' the kernel, but I was recently caught out by the fact that /proc/net/snmp doesn't have much to do with the SNMP protocol. Rather it tracks socket statistics for IP, ICMP, TCP, and UDP, and is one of the sources of information for the netstat utility.
>GitHub has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately. GitHub reserves the right to refuse service to anyone for any reason at any time.

Companies write these "We are can do whatever" clauses to license agreements so that they can point to them and make people go away.

IANAL, but EULA terms like are typically in breach with Consumer Law protections against unfair
contract terms. If you are private person (consumer) paying for a service, this kind of term may be
null and void.
Well that makes me feel better, at least
(points gun) Say Visual Studio Code again. SAY VSC again! And I dare you, I double dare you motherfucker! Say Visual Studio Code one more time.
It's also possible for a plea to involve conditions beyond punishment, such as a requirement to testify against another defendant.
I watched all 629 episodes of the Simpsons in a month.  what I learned
“Anonymized votes/ballots are being recorded on Agora’s blockchain, which will be publicly available for any interested party to review, count and validate,” said Gammar.

The details on this vote have been extremely scarce. The use of the future tense to describe access is worrying.

"Blockchain Technology" has attracted scoundrels of every stripe. If Agora really cares about this as a test case, it needs to make the voting records public, and articles like this one need to make it clear how the reader can examine the results.

That said, I'm very skeptical about the utility of "Blockchain Technology" in voting. For one thing, what secures this block chain and makes fraud detectable?

In Bitcoin, the answer is crystal clear: Proof-of-Work coupled to an economic incentive. This system has well-known scope and limitations. We can reason, mathematically, about a multitude of attacks and outcomes.

Not so with the Agora system. And I'm afraid that journalists consistently refuse (or are not equipped) to ask the right questions - as in this article.
Alright, glad to hear it, although I maintain that I’m still a noodlebrain. I’m guessing that you have, but you might enjoy Ghost In The Shell, which runs along a similar premise to what you’re talking about.
The problem with it is twofold: one, it ignores indirect harms to consumers from monopoly power (for instance, maybe they're not engaging in all-out price gouging but they are keeping competitors or new services out of the market). Two, it ignores other externalities, like regulatory capture or systemic risk, that result from having huge business interests.
Very nice concept, but if you get more than 5 visitors per day one of those will be a spammer.
I wouldn't call it a trust issue, but a due diligence one: making sure you do enough to ensure anything you care about is safe.

In this instance making sure that you understand the service you are using (including intricacies like this), or keeping an extra backup of your own (a locally cloned copy of the repo), or for proper paranoia, both of the above.

No matter how much you trust github and those in positions of responsibility for the projects you interact with, if you don't know the exact details of the feature-set you can come unstuck due to operating under false impressions. Github has done nothing wrong, as that is how the service is intended to work and it is documented as such (though it would appear some of the documentation is incorrect or at least inconsistent?), but you still get an inconvenient surprise because of a misunderstanding.

A little paranoia can be very useful!
Prisons in Texas, right now, move to 2 meals a day on weekends. As far as I know, the money saved isn't pocketed by anyone personally, but it is happening.

Inmates that have some support system supplement with commissary purchases.

So it's a transfer of what should be government spending to spending by inmate families. The benefit seems to flow to the companies that run the commissary programs.
This has nothing to do with security. Would you upload secrets into a private Github repo? I wouldn't. Private repos are not more secure than public repos.

Github is a tool for collaboration. The point of a private repo is to manage who you are collaborating with. Once I don't want to collaborate with someone anymore, there is no reason for them to have a Github fork of my code anymore. As I said, it's cleaner.

I'm fully aware that they can save a local copy (did you read my 3rd paragraph above?), and of the importance of contracts.
It depends on your definition of “care”. As other comments have noted, you might get a letter. History suggests they would not be likely to attempt to prosecute you for tax evasion.

https://www.hrblock.com/tax-center/irs/tax-responsibilities/...

They do have a limited budget for enforcement and they prioritize accordingly.
Hunting Twitter Bots
Legal Industry still playing catch up in Cybersecurity
>"I disagree that's it's an entirely bad process to bankroll experiments based on unproven promises. This is exactly how the Manhattan Project happened. The physicists promised that it was very likely they could create a very large explosion, but they did not know if it would bang or fizzle."

The difference is that they predicted a large explosion before, now they predict a bump on a graph representing an event (actually events) that nobody otherwise notices ever happened...
“Glory be to Work and Scorn upon Idleness—Work and Honour, this is our wealth.”

What a quote!
With 26 million users, five nines is not very reassuring.
Right. The service is certainly expected to do more. Was mostly addressing the issue of mirroring the data to dropbox. But even then my "solution" only saves whatever you do locally. So if you merge PRs through github, it wouldn't get mirrored.
Yes, documentation and class names are not SaferCPlusPlus' strong points at the moment. Perhaps the easy way to get started is just to use the elements in the "mse::mstd" namespace, like vector, array, string, string_view, etc. which are just safe, compatible implementations of their namesakes in the "std" namespace.

As for the pointers, there's a slightly out-of-date article[1] that tries to explain them with examples. But a simple option is to just replace all your raw pointers with "registered" pointers. It's not performance optimal, but it's safe and simple.

But yes, better introductory documentation and examples are needed. There is not yet a forum for those picking up SaferCPlusPlus, but for now you can post any questions or suggestions in the issues section[2].

[1] https://www.codeproject.com/Articles/1093894/How-To-Safely-P...

[2] https://github.com/duneroadrunner/SaferCPlusPlus/issues
That's correct. You need the Meldebescheinigung (given during the Anmeldung) to open a bank account, and you need a bank account to find an apartment, and you need an apartment to do the Anmeldung (it requires a fixed address).

It's pure madness. I actually run a blog documenting the (sometimes insane) German bureaucracy. It's not nearly as bad as people think, but things like getting an Ausländerbehörde (immigration office) appointment can be a real pain.

Fortunately, it has improved a lot in the last 3 years. The Settle in Berlin article is completely outdated.

http://allaboutberlin.com/guides/berlin-auslanderbehorde-sam...
Reads kind of like a name-drop.
Some of the strain here is around two very different meanings of the word "fork", but only a single feature with that name on GitHub:

1) When I want to contribute to a project, make some local changes and offer them back to the mainline, I fork. My fork is a pseudo-throwaway thing; it contains code that is hopefully destined either to make it back to mainline, or likely to be abandoned if mainline moves on in active development.

2) When I want to go my own way with a project, using it as a starting point for a new direction of development that may wander in a direction quite far from the original (it might get renamed, it might continue development of the original becomes abandoned, etc.), I also fork.

Numerically meaning 1 is surely far more common, so it makes sense for the GitHub features and permissions etc., to optimize for that case.

Meaning 2 is closer to the original idea of a fork, from open source vernacular long predating GitHub.

Naming is hard, and I don't blame them for picking a single name for these two technologically similar (but socially different) scenarios.
The one rule that annoys me the most in local tax spenders is how you cannot give money back to the state that you don't need that year, because then you will get less next year as well since obviously you didn't need it. At the end of the year you can see employees spend money on the most ridiculous things since they have to spend it all. At this point I think it's because the money is not meant for their task at all but rather to stimulate the (local?) economy, and that is not done by saving.

I'm not sure how the rules would have to be changed to allow for giving money back (and use it to pay for state debt, but that is probably not politically wished for either), since there most probably would be side effects. Still, this rule.. (Germany, but I've heard about others as well)

Does somebody know why this rule exists?
At some point I complained to a state minister at some election thing, but I think he was too drunk to understand since he kept saying he didn't know what I was talking about and wanted to know who is doing this thing.
Ask HN: How to make sure developers do not change public API?
How do you make sure developers in your team or in the company do not change the public API of the application when it is not planned? Yes you can write unit-tests, but they can also change/fix the unit-tests to have a green build.
yeah, but they're the Queen's subjects, they're not 'free free' like one would be in the USA /s
Writing Excuses
CSU: Laser-heated nanowires produce micro-scale nuclear fusion with record effic
Thanks, we've updated the headline from “Sheriff Legally Profits $750,000 from Starving Inmates” to that of the article. The guidelines ask submitters to please not editorialize like this.
How can they hold your local clone of the code hostage?
When they clone to the machine on which they're going to work, they get a copy of the repo. That's part of the point of git.

Git, by design, is a platform for the sharing of managed text.
Its very close to port of New Orleans which is the only place in South the British attacked in 1812 war and its capture by Union forces in early half of civil war was pivotal for the outcome of that war. For strategic reasons its absolutely necessary for US to have complete control of Mississippi river system including the mouth of the river.

It would be a strategic blunder to let Alabama secede, also as much as HN loves to hate the south, Alabama has over 33% African American population, that has to be kept in mind.

The world is not static, before jerking off and spewing words like secession a deep breath and a mindful analysis helps.
The disclaimer didn't make it clear (I thought it would just be showing hostnames), but this map shows screenshots of hidden service home pages.

So it's probably wise not to look closely at too many.
You can use a combination of sensors. Many use a camera + LiDAR + radar, some use just camera + radar. So... object detection + computer vision. I personally don't think the LiDAR is necessary or feasible.
I'm no biologist, but a good demonstration of the extent to which the same genes can have differing expression is found by considering the variety across all the specialised cells in your body. Your brain cells and muscles carry the same DNA, but it is expressed very differently. If this is possible, then clearly more subtle changes are possible without altering the DNA also.
There's been some work to use it to add metadata to OpenStreetMap:

http://chris-osm.blogspot.com/2015/09/extracting-building-he...
I have looked upon code that struck me down with Lovecraftian dread. Here, let me paint you a picture of a ubiquitous Microsoft product, written in C++. Entry point calls Initialize. Initialize calls Initialize2, which calls Initialize_internal, which recurses to Initialize with a flag that makes it branch another way, which calls Initialize_subsystem, which calls Initialize_subsystem2, etc, which finally recurses again to Initialize_internal with another flag ...

Honestly I never even made it out of the init code. I asked to be taken off the project immediately.
http://tryruby.org/ is a fun way to start. It doesn't lead to anything, the next step would probably to buy a book, but it addresses some core concepts like variables, lists, conditions, loops.
For what it's worth, there are accelerators, colliders, and synchrotrons here in the US that were dwarfed by the LHC (and practically unheard of in popular culture) that are in use today.

They're still running experiments on the Relativistic Heavy Ion Collider at Brookhaven National Lab in New York, for example, even though it started operation 8 years before the LHC and runs at a fraction of the energy.
No, that doesn’t make sense.
Even apple can't tell the difference between twins
Jeff Bezos is a star trek fan. May be this explains his desire to create a society free of labour which means eradicating the middle men as the first process.
Yeah, I nearly said “anything you do on github.com,” but then remembered there are things you can do both ways.
You realize that implementing forks as branches creates a LOT more work for Github to make it work? It makes absolutely no sense for them to do so.

A copy-on-write fork is most likely what is being implemented.
>> Should I be concerned that they'll try to get their $10 from me and then pile on a bunch of penalties?

No, despite their reputation, the IRS is pretty reasonable about stuff like this, at least in my experience. They're relentless if they think you owe a ton or were malicious, but they don't intentionally trump up penalties on the every day person.
Then all of experimental physics is based on analogies.
The biggest differences there are due to lack of SIMD. We expect it to be stable quite soon, and that should close the gap quite a bit.