skysight-inc/HackerNews huggingface dataset:
> Another interesting fact is that ADS names can contain symbols which are normally forbidden for filenames like ” or *

OK, this is going to completely mess up all of my (and most likely everyone else's) shell scripts. I always assume these characters cannot legally occur on Windows anywhere in the path...

_________________________________________

And wow, this is quite clever and also quite difficult to foresee:

> The best security vulnerability to explain directory junctions is in my opinion AVGater, where the attacker places a file in folder x. Then he marks the file as a virus and the installed AntiVirus solution will move it into the quarantine. After that the attacker removes the folder x and replaces it with a directory junction named “x” which points to C:\windows\System32\. If the attacker now clicks on the “restore” button the AntiVirus solution will copy the file to the x folder which now points to system32 with SYSTEM privileges (which directly leads to EoP).
Don’t Let Facebook, or Any Tracker, Follow You on the Web
I like Stallman but he can be a pedantic prick.
In this specific sense I’m not sure that the insurance itself is considered speculative, but merely a way to minimize/manage the possibility of potential damages in a reasonable way.

If I’m not mistaken, her write up addresses speculation as potential damages as estimated before they could be realized in an uninsured situation, or otherwise taken up by insurers themselves.

The insurance is another thing altogether—a tool to mitigate that real and known risk right now.

(I’m on mobile so I only glanced at her post.)

That said, IANAL or an actuary.
Yea, I can't believe this is the first time that I'm seeing this.
But it does impact your appraisal of their net present value, since you know their future income streams have to exceed at least that obligation plus other operating costs.

I think it’s fair for their rent obligation to contribute to the concern about their business in this sense.

Yes, it’s not like an immediate obligation of $18 billion. But the effect on a net present value calculation of a company already operating on big losses is still very important.
> We can't really get rid of speculative execution

Why not?

> but we will effectively need to get rid of the idea that you can run untrusted code in the same process as data you want to keep secure.

If we accept that, then we also need to get rid of the idea that we can branch differently in trusted code based on details of "untrusted data".
Doesn't look like it's via ADS -- synced items on my desktop have only the single stream.

Except for one item I just created to test that has a stream called "magic".
> Browsers are moving to one process per security domain anyway.

At a significant cost in RAM usage and some CPU overhead too. But browsers have the advantage that they are sitting on desktops and laptops that are massively underutilized, and the number of security domains you might typically have open at once is in the 10's or 100's, not 10,000's.

But that's not what I was talking about with "edge computing". I'm the architect of Cloudflare Workers, an edge compute platform. We have 151 locations today and are pushing towards thousands in the coming years, and every one of our customers wants their code to run in every location. As we push to more and more locations, the available resources in each location decrease, but the number of customers will only increase.

At our scale, unlike browsers, one-process-per-customer just isn't going to scale. Context switching is too expensive, RAM usage per process is too high, etc. So we need other ways to mitigate attacks.

> There's also some vodoo one might be able to do on linux with the clone syscall which lets you spawn a new process which still shares the same memory as the parent.

It's not really voodoo. Linux has no distinction between processes and threads. Everything is a process. But two processes can share the same memory space. Usually, developers call these "threads", and use "process" to mean "the set of threads sharing a memory space".

In any case, if it's the same memory space, then it's susceptible to Spectre attacks.
Scooter Mania Continues as Skip Nabs $25M, Bird Goes to China
Why the AT&T-Time Warner Merger Is a Win for Consumers
The key question will be, what is the admission criteria?

The reason Harvard doesn’t want to disclose it, because a lot of admissions are not performance based.

If family member is Harvard alumni and was donating really well during their life, their kid having the same academic performance vs anyone else will have an advantage.
i think the magic sauce is to create synergy in each WeWork econo-vortex for new economy micro-proprietors who are uniquely positioned to profit from aggregated networking opportunities and beer
The mining cost is actually quite high for bitcoin, there's a friction involved that's being overcome.
Apple to Disable iPhone’s Data Port an Hour After Phone Is Locked
So I'm quite confused by this article's emphasis on boys outperforming girls more in richer school districts. If you look at the scatter plot, girls outperform boys in English by a much larger margin.
R was originally not much more than a bunch of Scheme macros if I understand the history right. Suspect <- may have just been an infix macro for define at one point.

Of course I probably would have preferred just keeping the lispy syntax of scheme without all the infix stuff!
> security fixes land after a few hours/days in master, a few days/weeks for a new stable release

The latest stable release seems to be ~8 months old, though, unless I'm looking in the wrong place: https://downloads.openwrt.org/releases/
Check back in 7 days. If it is fixed then their claim is true.
There is somewhat of a network effect for business travelers. If you are WeWork member, I assume you can grab a desk in any of their buildings around the world. That is much better than needing to sign up for multiple co-working services, and it beats always working out of a hotel business center.

I am not saying WeWork can justify their valuation, but they (and some others) are fundamentally changing portions of the real estate market. They are putting more people per square foot into offices and are getting people to pay a premium for perks and flexible leases. Getting people to pay more for less space is a big deal (if it continues to work...) This is a totally different model than what traditional real estate players have done. Hence why a lot of commercial real estate players are scared and trying to catch up.
These all seem like extremely low-hanging fruit for a building management company to do itself.

What frictions do you think gives WeWork essentially what you describe as a lease arbitrage opportunity?
ggplot2 has plotnine (http://plotnine.readthedocs.io) which has a nearly identical API. I've found though it's not perfect, you can get closer to dplyr with JS-style method chaining on Pandas.
As someone who taught R for students coming from Biology. Most of them just want to learn some_stat_test(), how to interpret it and who to plot().

These who tried to do modeling using vanilla R just dropped midway because of R performance and switched back to fortran

ggplot2 just should be baseline instead of default gfx.
If you are interested in this kind of stuff, I would recommend reading "Doing Good Better."
https://www.amazon.com/dp/B00OYXWL4W/ref=dp-kindle-redirect?...
Economies ran slower in those days so it's hard to compare. But the principle of hype and me-too-ism was present in the Tulip incident even if it didn't spill over to other economic areas. Whether human nature breaks big gizmos or small gizmos, it's still human nature at play. The FED did not make people pay way too much for silly dot-coms.

But bubbles continued. I wonder if one can make a case that pre-FED bubbles were notably smaller than post-FED bubbles, factoring in the fact that the nature of modern economies may magnify bubbles. In other words, if there is a continuous upward slope to the size of bubbles from the 1600's up to now, then it would appear FED made no significant difference. But if there is a spike or jump when FED formed, it could mean they magnify them.
0.3 mm/yr * 26 yr = 7.8 mm

Antarctica's contribution to sea level rise per year is fairly small. The largest portion comes from loss of land-ice like mountain glaciers and snow pack. Mass loss from the Greenland Ice Sheet is also substantial, contributing about 2.7 mm/yr to sea level change. Groundwater withdrawal is a measurable component of modern sea level rise. Aside from these mass-transfer mechanisms, there is also ocean warming (water generally expands as it get warmer) and salinity changes that don't affect the amount of water in the oceans, but do affect its volume. Loss of sea ice (which floats on top of water and is not supported from below by solid earth) does not contribute to sea level change, as the sea ice is already displacing an amount of water equal to the amount of ice doing the displacing.

That 2015 Jay Zwally paper should not be taken as truth, as there are substantial reasons to doubt the impact of the findings. In that paper Zwally uses a set of satellite laser altimeters operating over different epochs and neglects to co-register the different platforms in an intelligent way. There was actually major hubbub around that paper and most glaciologists recognize the claim that "Antarctica is gaining mass" is probably incorrect.[0] Zwally has a pretty big ego and was happy to get the publicity anyways.

[0] https://www.scientificamerican.com/article/what-to-believe-i...
This is a really good one to remember, and it's also implemented in node which can be handy for making little CLI tools.
You could use LEO satellites, add a few km up and down but you have way less hardware to pass through.
Except for Spectre variant 1. That will always stay with us, because there is no sensible fix for it.

Is it not a feasible fix for Spectre-v1 to have loaded cachelines wait in a staging area, and not actually update the cache hierarchy until the load instruction is retired?
The “prick” isn’t necessary: you could just as easily have said that he can be pedantic and left it at that.
What do you make?
There are a bunch of other console logging utils that are worth checking out. time and timeEnd are one of my favorite.
Interestingly, when you create a file name from the WSL shell using reserved Windows characters, those characters will get mapped to unicode codepoints from the private use area when viewed in Windows. So for example a colon (\u003A) will show up in Windows as \uF03A.

This means you can create a filename in Windows using the character \uF03A, and that character will show up in the WSL shell as a colon. You can even do the same thing with "regular" characters, e.g. using \uF061 instead of "a", and produce a filename that appears to be ASCII in the WSL shell, but is not actually accessible.
Traditional property owners don't have the skills to build the technology system needed to manage a large co-working space.
They saved a lot on customer support over the years :)
I'm looking for something to update to. If not Unifi, then what brand would you recommend that would be suitable for home use by a professional, that can be updated and has good support?
Agreed - just haven't seen future cashflow obligations referred to as "owe" in the same way, except for when discussing WeWork, so (to me) comes across disingenuous given the lack of consistency in application.
This book is also available as a boxer set with Weather Flying Robert Buck and Instrument Flying by Taylor.

The first of those is almost as good as Stick and Rudder.
Yes, it's called misrepresentation.
After Decades of Losing Ice, Antarctica Is Now Hemorrhaging It
Look, my basic point is that we're not alone, rather nobody wants to talk to us because we're terrifying ravenous monsters.

> but how do you know it exists if you've never been there? who told you?

I can't tell you that in a public forum. And again, even if I could I wouldn't. Either you don't believe me in which case what's the point? Or, worse, you do believe me and want to go there.

I'm not interested in helping anyone talk to aliens, it's just frustrating to me personally whenever the subject of the Fermi Paradox comes up because it's such a foolish question.

The critical issue people are dealing with whether it's UFOs, reptilians, crop circles, bigfoot, pyramid power, crystals, etc... it's all one thing: where is the edge of consensus reality?

To me, the important thing is this: if we don't learn to live in harmony with Nature, and damn quickly, we're going to crash our world civilization.

We don't need aliens to fix our shit. We have the technology and the understanding, it's really down to our fundamental nature: do we wake up and course-correct fast enough or will the oceans rise and wipe us out, leaving a world-wide desert and tropical regions at the poles?
From what I understand, quantum entanglement is used in "secure communications" as a key exchange (more of a distribution, as a third-party is required to distribute the entangled photons) (QKD - See: BB84 for example). Following this key exchange phase, normal encryption algorithms are used over traditional infrastructure. This is already being done in real environments.

In a real world implementation, you are using this as a key stream, of which interceptions can be detected by certain loss characteristics.
In the chapter on landing, there's a series of illustrations[1] of a giant building with white and gray horizontal stripes. They're used to show how you can tell how high you are when landing.

During a ground lesson, I'd show the student the picture and say "of course, it's not like you'll have a building like that actually next to the runway!." They'd agree, then I'd point out the window at this building[2], right next to the runway.

1. https://i.imgur.com/i4qlsYQ.png
2. https://i.imgur.com/vZXZOIp.jpg
Looks like this time Nim is only receiving good comments and praises! It is very interesting and I've been following the language from some time already, since when it was still named "Nimrod".

In the past I already mentally classified it as a not very well defined language, with a not very well done feature set analysis. A comment in HN described it in a way that seems to fit: (...) a hodgepodge of stuff thrown together, a lack of language design with a surplus of features (from this thread: https://news.ycombinator.com/item?id=11960814)

It's not the only time when the language's (arguably) unnecessary breath has been critiziced: from having a suprisingly huge feature set (https://news.ycombinator.com/item?id=13312205) to implementing everything but the kitchen (sink) and having a lack of engaged contributers, leading to many bugs, little documentation, and a very messy standard library (https://news.ycombinator.com/item?id=13355579).

Have those comments (which admittely only represent the personal opinions of their owners) been rendered outdated by now?

I'd argue that for an absolute zero-knowledge starting point, Rust would be more valuable to start learning, given that both would have a big (or "huge") surface but very different levels of apparent polish and structural design choices behind them. But of course, it's all a matter of taste.
Very interesting. Forgive my ignorance, but you mean it's kind of like mutable torrents that only the uploader can modify?

Does a client just search the DHT for the public key? I thought torrent clients searched for the hash of the files.

If it's searching for the public key then how does one person upload multiple different torrents, or do they create a new public key for each torrent? How does a client know which is the latest version if it has been updated multiple times?

Are there any example projects using this?
Here is one example allegation:

http://www.evodesk.com/wirecutter-standing-desk-review-pay-t...

With most conflicts you won't know the whole truth, but it's a data point.

The Wirecutter also doesn't give the 'best' in everything. They do have implict budgets.

For example, they won't recommend $5000 stereo speaker pairs, even though they would be better than the KEF Q150s they recommend currently. They don't recommend full frame / medium format cameras either, since they are probably too high end and expensive for their target markets.

I don't really fault them although for having some cost limits although. They would probably make the valid argument that if your buying the full frame cameras and $2500 loudspeakers that you probably know what your doing and don't need the wirecutter. I do wish they pointed it out a bit more in some of their guides although.
Yeah this is why you'd use UWB -- the capacity is insane. Also the raw information theory calculation makes sense only if you have zero prior information about the sample you're reconstructing. But 'people in buildings' is a pretty strong prior. And it's not like you have to do any extra work, just put a simulated raw signal through a neural net and regress to groundtruth data.

But let's do the math, I'm curious!
> EVs are now, and for several years into the future, a small part of GMs story. They are Tesla's whole story. So, yes, GM can afford to be less specific—heck, even less certain—of exactly what they are going to do in the EV market.

Not sure I understand your logic. Every business bar none likes to be seen as forward looking, future proof. The fact that GM keeps mum about their sole EV offering means they are behind Tesla, and likely others such as Nissan on this front. If they weren't I don't see why they couldn't say they'd make 500K of it by end of 2020, for example.
> RHEL-7 will automatically default to (safe) “eager” floating point register restore on Sandy Bridge and newer Intel processors. AMD processors are not affected.

https://access.redhat.com/solutions/3485131
"Most of our biome is still matter which is not life, and it's been here for billions of years."

Our planet is called Earth you know, which also means dirt. Because it seems to be covered in organic matter. If your perspective was correct, wouldn't we call the planet "Rock" or something?
Can't you executive the trapping access in a not-taken speculatively-executed branch à la Meltdown?
40% margin on real estate seems so high. Would you mind sharing your source?
There’s a social and economic understanding that Redhat works hard to keep malicious code out of their distributions.

That doesn’t exist with containers pulled from joevandyk/postgresql.
There are limits to Site Isolation. For example, due to document.domain, subdomains of a domain cannot generally be protected from one another.

kentonv is correct that giving up on intra-process security entirely is an ominous sign.
Ha I don't think causality is going to change. That's a lot different from all those other times science changed. It's not only the underpinning of all physics, confirmed by literally every single scientific observation in the history of mankind--it's also just logically inconsistent to break causality. It makes no sense at all. Causes happen before effects, not ever the other way around.

I guess maybe we could someday find an exception to causality, but it would be a way bigger deal than any other discovery we've made. It would be a back to square one situation.

As they say, you can have FTL, relativity, or causality--pick two. We've really nailed down relativity and causality. It's not looking great for FTL. Trust me, it breaks my heart every time I think about it. But that's the way it is sometimes.
> Tidy features (like pipes) are detrimental to performance.

But they are some absolutely amazing features to use. After helping my wife learn R, and learning about all the dypler features, going back to other languages sucked. C#'s LINQ is about as close as I can get to dypler like features in a main stream language.

Of course R's data tables and data frames are what enable dypler to do its magic, but wow what magic it is.
Is this supported in other browsers as well?
It’s very hard to read code formatted blocks on mobile.
Yeah it's almost more a video game than anything. Reminds me of games like Her Story.
Depends on UWB bandwidth+power, how good your processing is + how many antennas you have... You could also get way better with a fleet of trucks spaced over a large area, or a city-sized swarm of drones, or satellites...
Yeah it's concerning. Now if you'll excuse me, I'll get back to driving my gasoline vehicle and not carpooling.
Astronomers Just Discovered Three Planets in an Entirely New Way
Why do we only hear stories like this about Apple and the iPhone? How secure is Android? Is Google taking the same approach to protecting their users?
check out the Ubuntu phone: now maintained by the community (ubports.com) It's a full Ubuntu linux distro with touch and phone extensions. Hence, you can tweak privacy to your heart's content.
Yes, browser support is listed at the bottom of the page.
Hexadecimals to Binarys Converter
"The soul of a new machine" is one of most interesting books I've ever read.
https://www.youtube.com/watch?v=-EKOV71m-PY
(after reading through the comments decided to learn a bit more and found this interview).
>If Apple wanted to buy Google, they'd likely be blocked.

Apple makes almost all of their money from things that Google doesn't make much money from - if you spun off all of Google's distant second fiddles off, along with Apple's software wanderings, you'd end up with a central core of AdWords and the iPhone. They don't compete.
Yes, both Chrome and Edge support it, as well as Safari and Opera.

The Fine Article includes a compatibility chart at the bottom
Yeah, what the hell happened to the no-communication theorem? I'm guessing bad science journalism inserted this quanternet idea in a fit of zeal?

If it does happen and it gets named The Quanternet, I want some credit by the way. Y'all heard it here first.
Hahaha. My dude, it's a damn good thing I'm not applying for your startup! And a great thing that my current and past employers didn't think I should resign. So you know what? I'm going to keep up this charade for a bit longer. Besides, the pay is great! :-D

The conical issue with regards fields and signatures is definitely and without question a valid point and should probably be removed from the spec.

You raise good points. I'll definitely reconsider your feedback in future iterations!

Your point about a logging field is interesting, but the MID field could be used in an out of band error acknowledgment.

Protobuf is great - but what if you don't need or want it?

Thanks for taking the time to comment!
If you're in a situation where 80% of the time is spent in 20% of the code, you only have to use less expressive features in those hot-spots; you don't have to give up your pipes or whatever in places that don't contribute much to the run-time.
Here are some basic things, the predictability of which most people in the developed world enjoy.

1. Clean water
2. Roof over the head and the sense of safety that comes with it.
3. Basic food.

A sense of community and friendship is probably the only basic human necessity that is not certain in the developed world.

Now imagine a world where none of this is can be taken for granted. You live under a constant threat from various sources (disease, wild animals, other humans out there to steal, loot from you etc) , there's not enough food, water and on top of that you're lonely. Religion is one driving force that helps people through these.
Ok. I've lived in Grand Rapids, Chicago, Sydney, London, and San Francisco. I'd trust all of them except maybe Chicago. People have different opinions and different experiences.

Turning toward actual data, in general, the US's water quality is good: https://en.wikipedia.org/wiki/Drinking_water_quality_in_the_...

In the US most water systems are run by local governments, and generally it works out fine.