skysight-inc/HackerNews huggingface dataset:
Yes, it's what the CVEs are about, but the whole comment thread has been riddled with people talking past one another creating confusion:

- The CVEs are about AMT portion only not the base IME

- Not all affected hardware will be patched (based on age)

- AMT can be disabled (and is by default)

- IME/AMT run on a croprocessor on the motherboard - not the CPU itself

- AMT runs an HTTP server for IPMI abilities
When Pokemon Go was first released, I was really interested in the reverse engineering efforts that were happening - and while I could capture most of the protocol from my house, I was out of range from a stop or a tower. With the help of two phones, a raspberry pi, and a battery pack I was able to make some walks over to the areas, and get additional captures of the protobuf data when interacting in those locations.

The interesting part was more the amount of people that were out and about playing in those areas -- and as you said, they were all interacting and seemingly having a good time. I spoke to a few people (I generally don't venture out much in my own neighborhood), and got to know some of my neighbors in the area. It was pretty interesting to see the bond that playing the game was really producing.
Ben's blog series culminated in a nice article[1] touring reinforcement learning. He also held a tutorial on the topic at ICML[2]. They might address some of your concerns.

[1]: https://arxiv.org/abs/1806.09460

[2]: https://www.facebook.com/icml.imls/videos/428757614305426
for more on that subject - check out this recent RL and OCT survey by Ben Recht, also from UC Berkeley:
https://arxiv.org/abs/1806.09460
Fun fact, entirely unrelated to this article.

The Niantic was a ship from the California Gold Rush. Sailors were so eager to secure their fortune that they would often abandon ship as soon as they anchored in San Francisco. At one point there were hundreds of abandoned ships floating in the bay. You can see them in this [1] photo from 1851. The Niantic was one of the comparatively lucky ships that got converted into a warehouse and hotel [2]. You can still visit it to this day, at the Maritime Museum in San Francisco [3].

[1] http://www.foundsf.org/images/b/b4/Downtwn1%24yerba-buena-co...

[2] https://2.bp.blogspot.com/-I0VV5z4rats/Ws-ns4ikAOI/AAAAAAAAG...

[3] https://commons.m.wikimedia.org/wiki/File:Niantic_stern_and_...
It's not hard to edit & reorganised with larger screen smartphone at all.
The hashids website has been updated since the cryptanalysis was published. For example, the old website used the words encrypt/decrypt instead of encode/decode, which was confusing.
There's always me_cleaner. It's a bit of a pain and requires hardware access to run but better than being exposed to an unpatchable vuln. I encourage every hackspace to set up an ME removal station (I'm building one for EMF Camp this year, and will document it so others can easily replicate)
The problem is the phrase "the current standard". Is Haskell going to become the new C++? C++11, C++14, C++17, etc? Is it going to live up to the phrase "I love standards. There are so many to choose from."? Is it going to become a python 2.7 vs python 3 vs python 4 game?

I understand the benefit of using the same name as you can trade on the prior mindset. But if old code won't compile then it isn't the same language.

If you're going to change a language with a standard (e.g. Haskell98), change the name. Call it Peyton or something. Otherwise there will be a Haskell20 that is refactored for dependent types that won't compile under Haskell10. Then when people claim to "know haskell" the question becomes ... which language?

The "current standard" game leads into "library hell".
I use a journal.

I strive to layout daily goals in the morning and then reflect on the day in the evening. Lately it has been difficult to consistently layout goals in the morning, so the evening portion has morphed into reflection on the day and planning what to do the next day. I will also occasionally update monthly and yearly goals if necessary. It has been a great benefit for me to be able to go back and see what I was occupied with at a given time and be able to put my current situation into perspective.
Uber's e-bikes are cannibalizing rides from Uber's cars
Winston-Salem, NC has a great downtown scene with affordable living close by. I've started to commute the 10 miles to my co-working space (I don't live near downtown) some of the time by bicycle and drivers are surprisingly respectful. Downtown links to a great 15-mile bike ride around Salem Lake (7 miles around the lake itself). The arts are great here with many artists training and living here, quite a few breweries, restaurants. I work remote for a California company and have never had a local job, so in truth I don't know what employment / pay is like here ... but if you can swing remote-mostly the quality-of-life and affordability are definitely good. Education choices are quite good as well for kids.
AMD has the PSP which basically is the same thing. But we don't know for sure what either one does.
You just described the Dunning-Kruger effect [1] in practice.

[1] https://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
It's much worse than that. This "Intel patches" thing is a lie - or at least it doesn't mean that your systems are patched, which is what 99.9% of people reading such headlines believe happened.

Intel only patches its own firmware, but it's normally up to manufacturers to update that firmware for devices. So most PC/laptops users really won't even see these patches.

And I agree with your main point. For one of the more recent Spectre-class flaws, Intel basically said "it's third-party developers' problem to fix."
How to block ads like a pro
I love strategy games, and unfortunately my startup life doesn't really allow me to play much anymore.

However, 1-2 weeks a year, I take a game and play. Sometimes it's an old game like Master of Orion 2.

It might be just me, but most games have a terrible "AI" (it's called AI, even though it just means the computer's ability to play against you), where the only way to get a real challenge is to give the computer unfair advantages.

A while ago a team a Google (open.ai) showed a very promising AI able to quickly learn DotA 2 and beat world-class players [0].

I wish they could do the same for many other strategy games. I would really enjoy playing then.

Perhaps gaming companies could charge a small extra for a "strong" AI, e.g. few cents per hour, and justify the investment.

Or, it could be an open source system, and you could use some extra computing power to let it calculate great strategies.

[0]: https://www.theverge.com/2018/6/25/17492918/openai-dota-2-bo...
Do you have any citations that companies are replacing their intel processors every 2 years? That is not inline with what I have seen.
This is especially poignant in NYC, given the density and diversity of life here. Sometimes I think the NYC subway only seems fast because life changes so rapidly from city block to block that it seems like you've arrived in an entirely new place.
idea: a Meta language where all the keywords are read from a file (text, json etc)

So you could sub out the words and make your own style of language.

The obvious one is Ninja but you could knock out other ones as people come up with them. You could have a Halloween language etc.

Btw, instead of “continue”, rockstar should use “and on and on”
I think he is mostly correct though. "If you have a good resume and live 30 minutes outside even a small town, but you also have to drive everywhere" isn't really comparable to the "standard deal" in a city.
> Think about managing tens of thousands of server in a datacenter.

The proper solution is an optional management chip on the motherboard, not the CPU. PCI bus mastering NICs with wake-on-lan and other management features have existed for decades; it wouldn't be particularly difficult add the rest of the ME features.
You might have some advantage

Keep in mind that the first 10 odd years of your career out of school should be all about building that advantage. You want to hit your 30s in a state of Embarrassing Employability, where another amazing contract gig is just an email or two, or a Twitter status update away.

Spend your entire 20s amassing a collections of artifacts you can point to to demonstrate how good you are at all this stuff, and a horde of ex-bosses and ex-co-workers to whom your name springs first to mind when asked by somebody who needs a guy to do that stuff if they know The Guy.

So yes, absolutely. Get an advantage. But know that the short list of "built in" ones you gave above is not comprehensive. The best advantages are the ones you construct yourself.
C# does (via ref parameters) but Java does not - any values you mutate must logically live in the heap (or a static).

Some JIT optimization may allocate an instance in the stack, I'm not counting that.
Yep. I was there last summer; loved it. Vilnius was my favourite, but there were lots of little places all throughout that I just adored. The only city I didn't really like was Kiev. The city was very car centric, the wealth gap was too huge, and the Russian they speak / write is hard for me to understand given how basic my understanding is. People were very kind though.

But why can't Ontario have a town like this? Why can't we get 5000 people to kickstarter a town? Have really strict building codes and really pro-human policies.

Edit: What town are you, if you don't mind my asking. I'm planning on going back to Europe at some point.
You can disable the first generation ME

https://libreboot.org/docs/hardware/gm45_remove_me.html

after that it's impossible though.
We're not buying those either. I've seen only one prefab in my area.

We're not even building Tiny Houses. That movement has faded away as the land permission issue dominated over their advantages.

Meanwhile: https://youtu.be/M73r32vK7C4

That's not a joke - there is a steep decline in being 'handy' - I'm doing everything I can to learn how to be but it still feels a bit unnatural. That lack of adaptability is like an extra tax.

I don't think my parents are more handy either, but that's a generation that bought their houses at 5x-15x lower prices so millennials like me could really do with being more hands on.

To put this in perspective, my father bought his house for 40k 20 years ago and now it is valued at least 250k. I earn about the same as he did 20 years ago and I suspect I earn more per hour than my university peers. Bluntly - they're poor - the most sensitive subject you could talk about is how much you earn. That's private.

It's not the cost of equipment that's the problem. The cost of good power tools is lower than before and they're more effective. Materials prices are higher but not that much. The big constraint is psychological, possibly followed up by permissions for building.

There's a weird psychology with this subject - weird to hear it described but it's there.

Somehow not having a house is believed to be less impoverished than going and building one. Count me out! I don't think forking over half your earnings to a landlord is sophisticated. I remember talking to people about the Tiny House concept and I got the strong impression that living in a modest self built dwelling was an admission of poverty.
I care. I removed ME from mine. I'd prefer to use a competitor but the only viable one is AMD and their equivalent tech is less documented and no known way to disable it exists. Disabling/removing ME is possible for intel stuff so intel is actually the better choice if this is important to you.
> People at risk of developing psychosis

Psychosis is an episodic condition caused by metabolic failure. Contributing factors include malnourishment, alcohol withdrawal, chronic stress, certain prescription and OTC drugs, street drugs, etc. People would recover from psychosis if given supportive treatment - good nutrition, B-vitamins (liver, yeast, etc), appropriate pro-metabolic prescriptions, naltrexone to keep them off alcohol, etc.

My observations of the standard treatments forced on "psychotic" patients is that they are only useful for preventing the patient's recovery. My aunt's friend was always sort of 'off', now she's dying of liver failure. Didn't know until now that she's been on maintenance antipsychotics for decades, even though the trigger for her episode concluded decades ago.
Could Intel ME be disabled in UEFI firmware setup (if the firmware were to offer a UI for it?) Or it is something that's physically enabled/disabled on the CPU and totally orthogonal to UEFI firmware?

Ergo, could the computer manufacturer release a firmware update providing such an interface option in firmware setup if they really wanted to? Or are they stuck once the product is released?
While not definitive github does an annual "state of" report. Other sites do this as well and they often show trends in languages; although none of the other reports are top of mind for me right now.

https://octoverse.github.com
I have such a strong desire to learn this now...
me_cleaner removes most of the ME code (including the HTTP parser listed here) and then causes it to crash after bringing up the system, so it's impossible to communicate with the processor running ME. That's about as good as it gets.
My wife is Japanese. We were expecting our first and made a conscious decision to move. Most of my clients now are still from US, although I have and occasionally still work with agencies in other English speaking countries.
Semi-Related: How do you come up with long-term-goals? Owning a car in the Bay is worthless, real estate is too expensive. Traveling the world is nice, but it might get boring after some years.

I kinda like my work and my life, but I feel like I should have a big future goal.
That's not a logical argument. I did not say you never have the right, you don't necessarily have it, so news publishing video doesn't mean anything about other cases. In most jurisdictions, news explicitly have "high-priority" rights (freedom of press etc) to publish things related to current issues even if they can't be published for other purposes.

There's a reason things like model releases for photography and film exist: Having the copyright for something does not mean you have full freedom to use it. Again, in the US these rights tend to be limited, but even there they exist. E.g. while you can freely photograph in public (which is not the case everywhere in the world), you can't use people's image for advertising without permission, you can't freely use photos of artwork in public places or of some buildings, ..., all despite having the copyright on your images.
Thank you for your feedback. What operating system and browser do you use that the video autoplays? It’s not supposed to. And the globe - if you click it - is a visualization of 5 million people actually using our product.

Where is Mastodon today? What are its stats?
How to Fix 100% Disk Usage in Windows 10
I always remember my dreams when I did sports that day, shouldn't remembering the dreams not be a good sign?
Thanks. That's pretty good. Every README needs to start with something like this:

"If you monitor applications, Veneur can save you money and increase reliability"
You can disable ME by giving it a firmware image to run that does nothing. The me_cleaner approach is to keep the module that brings up the hardware and then give it a command causing it to crash, which is as good as that. A firmware update can definitely do this too.
There are many studies confirming no link between high LDL and heart disease.

It’s a myth.
Short Hair Styles
> More people have been moving into cities

Not so much in Canada. Small towns (1,000 to 29,999 people) are the fastest growing community type. Large cities (100,000+ people) have lost share of the population. The definition of urban is "a population of at least 1,000 and a density of 400 or more people per square kilometre", so you might hear that urbanization continues (which is true, the rural population shrunk by about the same rate as cities), but that doesn't mean the people are moving into cities.
You rely on hashids to be secure, so that your jerk end-users can't increment the id. You would like to know how secure it actually is, don't you?
Regarding being worthwhile to pay for the protection, I would quote Hoare, regarding his experience with Algol compilers in production presented at the Turing Awards speech.

"Many years later we asked our customers whether they wished us to provide an option to switch off these checks in the interests of efficiency on production runs. Unanimously, they urged us not to--they already knew how frequently subscript errors occur on production runs where failure to detect them could be disastrous. I note with fear and horror that even in 1980, language designers and users have not learned this lesson. In any respectable branch of engineering, failure to observe such elementary precautions would have long been against the law."
> What’s up with this internet argument style where people think that pointing out an obvious exception is a valid retort?

Because it's not so obvious exception as you think it is, in fact it's the exact opposite, it's a very common type of allergy (Mediterranean, middle east, asia) and usually overlooked by many, that's why.

> Are you seriously suggesting that they needed to provide a disclaimer about allergies to their general statement about lentils being healthy?

Anti-nutrients (beside the allergies) in lentils/legumes is a real issue, so the "lentils being healthy" statement is highly debatable.
I think it's also a governance problem. The relative inability to program within itself reduces the number of bricked devices. A bricked device either becomes a cost to the manufacturer, a cost to the consumer, or can be quickly reflashed by the consumer. Not only does reflashing likely require a second device to do so, but it also works against the locked secure bootloader concept which is such a popular (albeit controversial) feature to keep these ecosystems healthy.

The days when you could compile an exe without any kind of signing and distribute it with nobody getting a warning about an unknown developer were the days when everyone was bluescreening monthly; hardly a coincidence.
Let me introduce you to this Indianapolis home:

https://www.curbed.com/2013/12/12/10164870/indiana-house-492...
It sounds like even just the google flick keyboard on a tablet as an input device to a computer would be useful.

Have a Qwerty keyboard center, a flick keyboard left and mouse right? (Or personal preference of course)
How is this Intel ME CPU patch deployed and where does it actually go? Is there some tiny flash in the CPU itself where the Intel ME code resides? Or does the patch get deployed as part of a UEFI firmware update, but isn't actually part of UEFI firmware, and somehow the CPU can reach out and grab its own updates from UEFI?
There are many ways to to planned obsolescence. I'm sure there is a way to just manufacture the chips such that they degrade in a few years.

Planned obsolescence through major security bugs doesn't sound very smart to me.

I don't get a vibe that Intel is enjoying this publicity or the presumed replace of those chips. My understanding is that AMD is quite competitive today in the data center.
More like 5 years, or even longer, where I work.

We have some 7 year old Dell servers that are still chugging along, performing their duties as well as ever.
This might help.

https://www.youtube.com/watch?v=TQMbvJNRpLE
As inequality grows, so does the political influence of the rich
Well my only examples were networking-related, but something like D-Bus could easily have a filesystem-based API instead. I'm willing to accept that files are a bad abstraction for graphics. I don't really know anything about that domain, but UNIX didn't get graphics right either.
Even in web testing there isn't an equality between false positives and false negatives.

Suppose you're Facebook and you decide to test a new landing page on 1 million users. You roll out the test and notice that after 10,000 users, the new page is killing engagement. Whoops, turns out it had a bug and isn't even loading. Even though no medical patients are dying, this is still a very negative outcome for Facebook. Obviously they shouldn't test on 990,000 more users before fixing the bug, but that's what slavish adherence to pre-registered trial lengths would tell you to do, because it's 'cheating' to notice that there's a problem after the first 10,000 tests.

Some of you might say, sure, for extenuating circumstances like a bug you can break procedure. But in that case I think the logic slides down a slippery slope. What if in the example above instead of a bug we just had a feature performing terribly? In either case, the right move is to end the test early, since you don't need all the data points to measure a strong signal.
Coq proof assistant – A tutorial by Mike Nahas
I can vouch for this. I live in the upstate of SC (in an equally walkable town near the eminently walkable Greenville). But I've spent some time in Winston-Salem. It's a great town. The US does have walkable towns, if you look for them.
There seems to be a few descriptions of tech lead:

A. An engineer guiding the team, similar to a sports captain or a military team lead.

B. An engineering manager expected to write code during slow hours.

C. A superstar expected to give input in meetings and handle some of the project management and task distribution.

A is acceptable. B and C are not. I'd say the first thing you do is check whether it's B or C and turn down the role if it is, or convince them to use A.

Engineering often involves two types of work - managing and making. Managing means you need to always be available, sometimes all waking hours. Making means you are in a state of deep work, blocking off all distractions. These two do not go well together. If you take both jobs, you will do a terrible job at both, because they conflict with one another.

If I could hire one programmer, the first would be a full time programmer. If I could get two programmers, the second would be a full time manager, handling things from bug reports, clients, customer modeling, fundraising, technical meetings, project estimates, cutting down features, business logic, architecture, database design, and so on.

If you want to do type A, nearly everything should be under the role of a separate manager - documentation, SDK usage, architecture, designs. A tech lead is simply responsible to keep the manager up to date, and maybe handle things like deciding on arguments between someone and the manager.
I used to keep my goals in a journal and review it yearly but it didn't help me stay on track. After a few months I mostly forgot the goals I set until the next year. Now, I'm trying to review my big goals quarterly. I have Kanban boards for each goal (e.g. home improvement, skills development, side projects) in Trello that track task state really well.

But, Kanban boards by themselves still leave a gap for me. They're great at tasks but not necessarily how those tasks fit in with my goals. For that, I'm trying to be more proactive about what I choose to work on each day (staying in quadrant 2 for those that have read 7 Habits[1]). I'm building Natrium[1] to help me with that. Every day it reminds you what your long-term goals are and prompts you to enter what you plan to do for the day.

On the backside, every week it prompts you to review your progress, a bit like an iteration retrospective in scrum. This helps me stay mindful about what I achieved the past week and where I need to change focus. Because it organizes the retro per-goal, it's easy to see when I'm avoiding working on a goal or putting too much focus on one at the expense of others. For example, this summer I've spent way too much time on lawn care instead of my other goals.

It's very new and doesn't have all the features yet, but if you have any feedback I'd love to hear it!

[1] https://en.wikipedia.org/wiki/The_7_Habits_of_Highly_Effecti...
[1] https://natriumapp.com