skysight-inc/HackerNews huggingface dataset:
The basic idea was that FP instruction generated interrupt and set external bus to a specific state. If there was no HW FPU interrupt handler could emulate FPU in software. If there was FPU it would use CPU's dedicated signal to get activated and then read CPU bus to get details about opcode and parameters and execute it.
Because there's nothing wrong with it.
I think what you're referring to is pentesting. Agreed, for pentesting I highly doubt the course will be of much benefit.

However, for developing compliance and architectural plans for a large enterprise, it's quite a bit more complex problem.
Ask HN: How would you recommend learning C++ in 2018?
And they have the same unsustainable business model.
Yes it worked with `pip3 install leo` but not with `pip install leo`.
visited link enabler – Add-ons for Firefox – https://addons.mozilla.org/en-US/firefox/addon/visited-link-...
You can find the same bias in the pro-Nuclear crowd. It seems like the reasoning is that there is science in nuclear so it must be the best thing to use.

The biggest reason that nuclear didn't take over is of financial nature. Nuclear is simply too expensive in developed countries. This only gets worse as construction costs rise with the living standard of people.

Just look at the financial disasters Flamanville 3, Olkiluoto 3 and Hinkley Point C.
Meanwhile renewables are getting cheaper and cheaper.
Bingo. Larger budgets get poured into more people not better people.
> OK, that calls out X.org as the reason why the drivers aren't being supported rather than Linux.

Ah, the Linux evangelist blame-game. It's a big advantage of a system being so haphazardly thrown together from separately developed components. Start by blaming the choice of distro, end up at "Linux is just a kernel".
You almost certainly interact with fully functioning addicts every day and don't realize it. If not you must be an agoraphobe. Anyways, I hope you realize the arrogance and cruelty of your beliefs before you lose someone to this epidemic.
Why the Dominance of Bitcoin Is Shrinking with Each Passing Day
I don't see the point. I have 4 U2F tokens, 1 I keep on my person, 1 I keep at home, and 2 in other safe places. The only downside is if I lose I token I then have to log into all my online accounts which support U2F to update my list of tokens.
The problem is that in this case it's not understanding Microsoft's own prior software that condemns one to reinvent it. Microsoft's second POSIX subsystem for Windows NT, a.k.a. Interix, had all of this.
Is it just because of back pain?

I think there is some evidence side-sleeping is best, eg https://americanpostureinstitute.com/proper-sleeping-posture... So maybe it's your bed.
President Trump relaxes US cyber-attacks rules
It would show that someone is a good fit. I think the certifications might be a lot harder to get, but I could be wrong.
> Linux on the desktop would have succeeded with a stable driver API.

I doubt it. Linux desktop's problems run far, far deeper than that one questionable choice.
Just embarrassing;
First learn spanish!

as dangerous as a missionary
It’s funny how the HN crowd’s infatuation with nuclear persists, long after economics alone, ignoring outright any safety arguments, have rendered the technology obsolete.

It was the environmental crowd you hate, by the way, plus the often maligned political class, who long ago had the foresight to push for the policies that are now enabling renewables to be competitive with fossil fuels.

It’s quite embarrassing for tec people, at least the slice of the community I observe.

Just let it go.
I kind of want to know why you browse via vnc.
related: https://gizmodo.com/how-this-equation-draws-itself-169816920...
It's worth keeping in mind that PRC seems to have large astro-turf farms. You can see it here on HN: comments about PRC and Taiwan on HN get modded up or down in the usual first 1 or 2 hours of a post, then PRC gets involved and suddenly anything pro democracy, supporting Hong Kong, or even mentioning the official name of Taiwan is suddenly moderated to death.

I wouldn't be surprised if a lot of people initially angry about 85 degrees serving the Taiwanese PM are paid to be so, before a lot of real people get in on the outrage machine.
The Status Signals Paradox: High Status-Signaling Deters New Friendships
If something "errors", you usually don't want to handle it either. Other that at the http handler level.
"The only reason to shell out the $10K is if you are looking for a job."

That's a pretty big "if". If you're considering a cyber security Masters degree, you're probably interested in doing it for a career.
I present to you as a counter-argument the British private healthcare system - BUPA, Spire and friends. Prices are sane, administration is not excessive, and quality is much higher than NHS care.

My suspicion about the US healthcare system is that the governments interventions in hyper-regulating the various players and introducing partial single-payer systems like medicaid/medicare, complicating the whole system and driving a need for administrators to sort out the whole incompatible mess. The free market averts this outcome because there are no mandatory systems - players can negotiate to reduce their own burdens, where regulation is not something that can be negotiated to a point of sanity. Or in other words, it's the integrated team running a 3 amigos session versus the ivory tower architect handing down mandates.
Twitter's Secret “Guest Mode”
All those are blocked in China, no?
I'm not sure you and I are referring to the same thing by "capability". There is no chain of capabilities that needs to be checked, the reference you hold is necessary and sufficient for the operations it authorizes. In existing capability operating systems, this is a purely local operation, requiring only two memory load operations. Hardly expensive.

Every OS is vulnerable to the hardware upon which it runs, but capability security at least makes side channel attacks somewhat more difficult because of least privilege and limiting access to non-deterministic operations, like the clock.

Identity-based security built on an authorization-based model like capabilities also ensures it's difficult to make promises you can't keep. Access list models let you easily claim unenforceable properties and then people are surprised when they are easily violated.

> ease of use asks for maximum resources given to the interactive application, and scheduling based on lowest interactive latency.

That's unnecessary. You need a low latency upper bound, not a "lowest latency". This does not necessarily conflict with throughput, and furthermore, and install requiring high throughput and interactivity rarely overlap.

I'm not even sure what the rest of the properties are supposed to be about. I don't think most of those are mutually exclusive either.
Hah, it's like someone wrote this for me (Also had 2000+ hours of Dota).

Now after having too much stress, I have been experimenting with these thoughts:
-Hey, I have x amount of time and I can't master all this y. I should plan what I want to master.
-Well, how do I plan what to master. How about I try to set my next goal.
-What kind of goal? Must start from the most important stuff first. Maybe something like what is the minimum needed to make me more fulfilled in life.
-What are these things that make more fulfilled in life? For me they were mostly goals for attitude and social skills. There was only one goal that had to do with becoming better with technology and that was trying to find my thing in technology. Which was a bit of surprise for me ,considering what I have done with my time trying to master everything.

I am still experimenting with this, but I found that there isn't this constant damaging stress where I feel like I am on a timer.
Moreover, "firearms used in self defense" practically mean more dead people even if the defense was "successful". The mindset of dehumanizing perpetrators is disgusting, they are still people and we should strive to minimize their injuries, too, if possible (there are plenty of nonlethal means like tazers and pepperspray).
You should ask someone who bemoans his removal as censorship against conservatives.

> People around the country still think that those parents lied about the death of their children in order to score financial or political gain.

Who made money originally selling them this lie and then perpetuating it?
My sister actually works for the CDC and she's had cancer multiple times. She was patient zero in a study in another state from the one she lived in. One of the times she had cancer, she flew regularly to a state of the art facility for about 18 months to not die from her very aggressive form of cancer.

At that time, we were still close. When we talked on the phone, we would quote some Star Trek line about "Good God Jim, you can't leave him in the hands of 20th Century medicine!"

(Not the quote, but the rescue scene where the good doctor describes chemo as "sounds like the Spanish Inquisition": https://www.youtube.com/watch?v=MMaGnpVaSGQ)

I was in a really nice facility. I was not crazy. I was just a teenager who had been molested and raped by a relative who was not old enough to legally advocate for myself. (it's a long story)

You would need to do better than merely throwing money at the problem and upgrading our current cages to cushy gilded cages for me to feel that it had some hope of being better than sleeping in a tent in the woods on my own recognizance.

"Bars do not a prison make". And gilded bars do not a civilized climate make by any stretch of the imagination.
Does this not imply that its usefulness degrades depending on how much random data you need / the frequency at which you need it? For example if you ask for 8 bits of randomness within the same time-slice (either as a chunk of 8 bits or 8 separate invocations) - then you're only ever going to get 00000000 or 11111111 as your "pseudorandom" values (and this feels like it would be an easily re-producible outcome)
Why are airlines so concerned with checked baggage weight?
SoK: Make JIT-Spray Great Again [pdf]
Relevant https://www.youtube.com/watch?v=_Re6pZri8Gw
> Wouldn’t there be more CO2 involved in producing the car compared to a few bikes?

Crazily enough there's generally less CO2 involved in producing the car than having each of a few people ride bicycles a distance equal to a typical car's life-cycle mileage.

Here's my math:
For lack of a better source I'm using Renault's own environmental assessment for the Fluence Z.E[0], which puts its production-related emissions at ~8 metric tonnes of CO2. Over 150k km (which is not a lot for a car, but we want a number achievable by a cyclist over their lifetime) that results in ~53.3g/km of CO2.

As for driving let's assume that a fully loaded EV requires 200Wh/km to move around - In France that amounts to 10.6g/km[1].

So overall we have a well-to-wheels footprint of 63.9g/km.

Now here's the fun part:

A typical Vegan will be responsible for 1.5 metric tonnes of CO2 annualy @ 2600kcal daily, so 1kcal = ~1.57g of CO2 - This is the most environmentally friendly diet. Cycling can vary greatly in intensity[3], but let's say 250kcal/h at 10km/h is a reasonable estimate.

Given these figures a single vegan on a bicycle going 10km/h is responsible for 39.25g/km of CO2. According to some sources[4] my numbers aren't that far off.

CONCLUSION (caps for visibility):
Two vegans on bicycles having a 17km commute are responsible for 78.5g/km, while the same two vegans in an EV in France produce only 63.9g/km. Bump that to four vegans and we're getting awkwardly close to a typical combustion engine car's emissions.

Meanwhile environmentally conscious(heh) meat-eaters should probably stay off bicycles, eat less and carpool in a compact car.

[0] Page 91 of: https://group.renault.com/wp-content/uploads/2014/09/fluence...

[1] http://environmentalprogress.org/big-news/2017/2/11/german-e...

[2] http://www.greeneatz.com/foods-carbon-footprint.html

[3] https://keisan.casio.com/exec/system/1350958587

[4] https://www.theguardian.com/environment/2010/jun/08/carbon-f...

EDIT: formatting.
You seem to be getting some unnecessary hate in the comments here. I think this is a good idea, although the market is a bit crowded. But as a Pakistani, I would try this out once in a while when I'm abroad. Its also nice that your meals are vegan. Good luck!
For a long time, the story of pro-GMO advocates was "RoundUp is safer than other weed-killers because it's applied when the plant is still young and not growing edible parts yet, so there won't be any of it in your food".

Looks like they were wrong.

(Note that I'm not saying that RoundUp is worse than other stuff, or that there's more of it in our food that of other stuff.)
Because, unlike Fox, the Guardian hires proper journalists, and the Guardian's profits are reinvested in journalism rather than to benefit its shareholders.

BTW: "drivel" my arse, as they say there.
Why are Nordic companies falling in love with IT outsourcing?
I think there is a value to this not because I want to replicate your product but because I want to know more about what’s in the food. For examples, what are the ingredients for “spices” and “natural flavors”?

I have a couple of reasons:

1. I want to know what crap i put into my body. If I’m going to eat crap, I want it to be my choice and I want to k ow what’s in my food.

2. I have a kid with severe peanut and tree but allergy. 1st such in our family. Now I have to read every package. I can’t tell you how frustrating that is.

On a related topic, you may wish to consider including open sourcing your cross contamination prevention policies (if any) so that those with food allergies can have a clear picture of if they can eat your food safely. If my wife and I are not confident in the (lack of) cross contamination, we don’t let our child eat the food even if there are no tree nuts or peanuts listed.

Before having a kid with such allergies, I thought so many parents were over reacting. I mean, few people my age have them, so it wasn’t a thing when I was a kid. It worries me why the rates of food allergies are so drastically higher. I suspect it has to do with eating more processed foods. I’m not opposed to processed foods, but I’d like to know if/when I’m eating them and what they are.
Clearing a confusion: It's always stdin/stdout, but you can change what stdin/stdout are. E.g. when you do 'cat < foo.txt > bar.txt' you don't change the fd numbers that cat reads from, (they still read from stdin/stdout a.k.a fds 0 and 1), but you change what they represent (in this case, they represent opened text files). That opening of files happens before cat's process image is even loaded.

Same goes for bash, it's just a program reading from stdin/stdout. There's a slight difference though, in case of interactive applications like bash: stdin/stdout would better be a terminal (e.g. /dev/tty* or /dev/pty* ). That's because a shell emits, besides textual output, control codes for interpretation by the terminal. These control codes are not displayed as readable text by the terminal. Instead, they do things like "clear the screen", "position the cursor at x/y", or "set the foreground color to green".

Now, you could have a netcat between a local terminal and a shell running on a remote server. But the problem there is that the shell is not blindly reading/writing from/to an input/output stream pair. A terminal is also an entity that's deeply connected to the Operating system and job control. That's why the terminal really has to "run" on the same machine as the shell.

So this is what ssh does: It connects to the remote server, and sets up a pseudo terminal there, so that the remote shell can interact with it and the operating system. On the local side, interpretation of control codes and job control by the local terminal are disabled while the remote system is running (the local terminal is put into so-called raw mode). For example, when you press Ctrl+z (ASCII 26), this does not result in a process suspend on the local side anymore. Instead the byte (26 aka 0x1a) is sent to the remote server, and only there it is interpreted by the terminal subsystem in the operating system, to suspend the current remote operation.

It's probably not super clear from my description, so you should just play with it a little. For example, do "printf 'sleep 10\n\x1a\necho hello\nexit\n' | ssh -t -t jstimpfle.de". What's happening here?
Approved by who? Senior spies who aren't developers?

And who do you think developed this communications system they use? Given government pay scales probably relatively junior web developers trained and used to a consumer-oriented software culture in which "oh let's just drop in this convenient re-usable library" is a no-brainer.
As OP says, many became addicted because of normal painkillers prescriptions from their doctors, not because they wanted to act cool in front of their friends.

You don't generaly second-guess your doctor's prescription.
Ask HN: How did the Turkey crisis affect your startup?
Apple Wants to Discontinue Its App Store Affiliate Program – IQVIS Inc
Sleeping on your back with the pillow in a position to put pressure on your upper neck apparently contributes to sleep paralysis. Shifting the pillow lower on your neck can help.
I don't see AWS saving money over a well run self hosted data center as far as computer resource costs.

The issue is, there are relatively few people that can run a data center well compared to the number of people who need servers to run thier business. The cost of hiring people to manage local servers is higher. For a small company, you can get away with one or two devs who also have AWS training and outsourcing your heavy lifting to an APN that charges around 10% of your monthly AWS cost. They usually outsource the grunt work overseas or do "rural sourcing" if regulations don't allow overseas access to the data.

Also, you don't spend as much up front. If you are running a well run business. Your expenses on AWS should scale a lot slower than your revenue.
This article is unfortunately inaccurate. TLS1.3 does not include encrypted SNI. Encrypted SNI is still being worked on by the TLS working group, and isn't in a deployable state.
Their path to profit is the Chicago airport loop, which is proposed to cost a fair bit more and have much more consistent ridership. This is a pilot project, a technology tester.
I guess those floated to the top... I had read a bunch of the comments (e.g. [3-6]), but now yours and the parent's [1, 2] are now near the top:

[1] https://news.ycombinator.com/item?id=17772970

[2] https://news.ycombinator.com/item?id=17773218

[3] https://news.ycombinator.com/item?id=17770602

[4] https://news.ycombinator.com/item?id=17770724

[5] https://news.ycombinator.com/item?id=17770883

[6] https://news.ycombinator.com/item?id=17770722

etc.
What I'm referring to is the core of cybersecurity:

Reverse engineering & vulnerability research.
I am, and I disagree with a lot of what the OP put forward.

Security academics, self-taught pentesters, and people who simply gained hard security experience in their day to day jobs each bring something unique to the table. I'm far more likely to pick up the principal engineer with a security MS for a security architect role than I am someone who can prove to me they passed an OSCE.

That said, for the person who can prove to me they passed an OSCE, I'll knock two years off the pentest experience requirement for any such role.
Seeing how search results are being censored in “free countries” due to things like the DMCA and The Right To Be Forgotten, maybe we shouldn’t look to private companies to fix this issue.
You don't understand this because you have no understanding of the science behind food safety. If you were more educated about this sort of thing your understanding would improve.
This is exactly what I imagined a great LED pattern management system would be, except executed 10 times better than anything I could have built.
Or the joke:

How do we know the CIA didn't kill Kennedy?

He's dead isn't he?
Ok cool, so whenever you register on a new service, you have to add all 4 of them, which means going to "other safe places", picking tokens, adding them, and placing them back. Also I doubt your safe places are as safe as bricking them into the wall. Apparently it's okay for you, so, keep it up then. I personally hate this.

Also having 4 tokens does feel kinda too much to me. Each additional device does open a new attack vector, and if your token at home or in other places suddenly disappears, you're unlikely to even notice that quickly, while an attacker could use that time having a token.

Also, if the service doesn't support having multiple tokens (as mentioned in comments, Twitter is such an example), then having 4 tokens doesn't help much.
"From the estimated six million yearly visitors, [...]around 20 Japanese tourists a year are affected by the syndrome"

With 0.0003% of people being affected, I'd argue that this so called "symptom" is hardly a noteworthy phenomenon.
Customizable native image carousel
Terragrunt
+1 to vortex. I participate often in CTF competitions and it's my go to recommendation for serious people looking to get more involved. Most of the early stages are great because they are no nonsense - they give you the papers explaining the solution, and just ask you to do the work of understanding and implementing them.

Stage 16 is one of my favorite challenges all time. It took me weeks to solve and the solution is very impressive.

I've been stuck for the last few years on stage 23. Unlike the rest of the challenges it is a stenography level, and I'm not convinced that it is still solvable today.
Encrypted SNI isn't a feature of TLS 1.3. The article never outright says that it is, but it manages to give that impression.

It was a desirable feature, but it wasn't delivered even for the final drafts at the top of this year, let alone back in 2016 when TLS 1.3 was originally thought to be finished.

The TLS Working Group is going to adopt it (consensus at IETF 102 and on the mailing list was to adopt) but there's a LOT of work needed before Rescorla's rough sketch turns into something you'd want to actually deploy to millions of users.

Here's the email about adopting (Joe is one of the WG chairs) Rescorla's draft.

https://www.ietf.org/mail-archive/web/tls/current/msg26842.h...

Note that this is nowhere close to a finished feature. They're not sure whether to do DNS TXT records, whether this should live in a SRV record, some new DNS record (DNS Ops doesn't like TXT, but real world DNS services often don't have fancy new records for years because they're crap). They're not even sure if this should be two documents (one about DNS, one about how you use the keys which you presumably got from DNS) or just one.

Because TLS 1.3 doesn't always (today never) encrypt SNI, a middleman could just insist on refusing connections with encrypted SNI. This becomes a staring contest - do the browsers deploy this anyway, and risk losing customers in places where governments have deployed a technology to prohibit it, or do they blink and hide it in some "Privacy" feature no ordinary users will ever enable.
While induced demand is definitely a thing, they're not going to start selling more tickets to baseball games because the road to the park isnt quite as congested. Induced demand is because of the effects it has (encourages more spread out development and 1PV usage).
old article, but true Bitcoin dominance recovers and will continue to do so.
> Please don't use Hacker News primarily for political or ideological battle. This destroys intellectual curiosity, so we ban accounts that do it.

https://news.ycombinator.com/newsguidelines.html
The two are different. It's not double standards, its standards.
Coinbase may allow people to store, transact personal data as a digital asset
The Error Which Statistics Can’t Save You From: Researcher Bias
Note that just because we are reading about it eight years later does not mean it took that long for the CIA to figure out what happened.
What does "non-giver of Ether" mean ? This is Vitalik's twitter handle.