skysight-inc/HackerNews huggingface dataset:
The idea behind spectre is that speculative execution bypasses software protections.

Given if f(A) B else C, one cannot safely assume that B only gets executed when A resolves to true. It is not reasonable to expect programmers to produce safe code in an environment where they have to doubt if statements.

This could be solved without any major overhauls in hardware, by just updating it to make speculative execution actually speculative and not commit any side effects until it knows it went down the correct branch.
"We have today 32+ cores CPUs ... They are called GPUs."

There are also chips like the GA144, which has 144 cores:

https://www.rs-online.com/designspark/hands-on-with-a-144-co...
LMAO! Wagecucking is absolutely pathetic.
That's good style. The important thing you will get out of the map is at the front of the variable name, and there's a less important little qualifier "byId" to help you understand how the data is structured.
Could someone please sue Intel (possibly together with Lenovo, HP, Dell and god knows who else) for gimping the PCI Express over Thunderbolt 3 transfer speed to 22 gbit/s and yet having everyone and their dog advertise it as 40 gbit/s?? To begin with, they are feeding only four PCI Express 3.0 lanes into the controller so even without these strange limitation it would never be more than 32 gbit/s -- but it's 22. (Yes, the connector, the full bus can carry 40 gbit/s but it will only do so if you are using monitor(s) requiring more video bandwidth than a single 4K @ 60 Hz.)

https://www8.hp.com/us/en/workstations/zbook-x360/index.html

> Experience faster file upload and transfer speeds with Thunderbolt™ 3 - faster than USB 3.0 at 40 Gbps.

https://www.lenovo.com/ca/en/laptops/thinkpad/thinkpad-p/Thi...

> With dual Thunderbolt™ 3 ports, you can simultaneously use a 4K display and high-performance storage device—and tap blazingly-fast speeds at up to 40 Gbps.

These are factually false, many on the egpu.io measured it and it's 22gbps and Figure 7 in the Technology Brief clearly shows it as well. https://thunderbolttechnology.net/sites/default/files/Thunde...

Targus admits so:

https://us.targus.com/blogs/discover-targus/thunderbolt-3-us...

> at full Thunderbolt 3 data bandwidth of 22 Gbps.

Dell admits too but you need to look very hard:

https://www.dell.com/support/article/us/en/19/sln307875/thun...

>
Thunderbolt 3 may only reach a maximum data transfer rate of around 7 to 22Gbps even though it is advertised with 40Gbps

> Although Thunderbolt 3 is advertised with a bidirectional total data transfer rate of 40Gbps, simple data transfer like networking data or storage data are limited to a total of 22Gbps as per the official Thunderbolt 3 specifications.

Why do you need to look hard? Because everywhere else, even in the single article linked from the above confession:

https://www.dell.com/support/article/us/en/19/qna44089/thund...

> Systems with the 2 lane design will only support up to 20gbps data transfers over PCIe devices such as external hard drives or video cards that use PCIe. Systems with 4 lane design will support up to 40gbps of data transfer over PCIe depending on the device in use.
One of the reasons why Linux is not suitable for real-time use is virtual memory. It's not even about swapping. The Translation Lookaside Buffer introduces too much variance into timing. Same thing with instruction and data caches and even instruction pipelining. It's not just Linux, but most general-purpose CPUs that are not suited for real-time control applications.
Made me think of SAIL - Stanford AI Language. The wiki doesn't mention another huge body of SAIL code, which was used by VLSI Technology for IC routing and placement. They got bought by Phillips, and maybe that stuff is still running, who knows.

https://en.wikipedia.org/wiki/SAIL_(programming_language)
“Perhaps” is a doing a lot of dirty work in that sentence. I’d prefer a more definite assertion, backed up with commensurate evidence.
I agree that the sports industry is trying to sell tons of unnecessary stuff. But only because there is not (yet) any scientific evidence doesn't mean that something doesn't work.

Sports academia has a long history of false findings and changing its mind. Just look at how the opinion about stretching changed, which in my humble opinion should be rather easy to assess.

Given this uncertainty I'd look both at academia and at what top athletes do. Keeping in mind that the top athletes have very different circumstances and needs compared to amateurs.
The graphics would have been a lot more fun if there was some sort of gauge or running totals of the cumulative amount of fraud versus the cumulative fines and prison time.
“Do We Want to Be in Business?” The Strange, Never-Ending Saga of MoviePass
Even if you don’t like classical music their “new sounds” station is also extremely cool
I had seen that kind of firewall before when a sale presented what his firewall is capable of at company I worked with. I'm not sure how I felt back then.

I mean that firewall was used to track every website you browse and other evil stuff.
Islamia-college-peshwar
Did someone say United Fruit Company?
Building my own company has been one of the most rewarding professional experiences ever. Both Mobile Jazz (7 years old now) and Bugfender (3 years old now) have accomplished to build a team of great engineers, but most importantly great _people_. Together we build challenging products, be it our own or for our customers. We care about what we do, we're able to learn from each other, we have flexible schedule and location independence... what else can I ask for?
Blaming "culture" is a huge cop-out and often just a facade for racism. If you say "the financial incentives offered by the Chinese government for research publications encourage rampant fraud" you are getting much closer to the real issue.
BOFH apparently stands for “Bastard Operator From Hell”.
It's worth noting, that wine/beer/liquor also have sin taxes, which as far as I know are also a result of coming out of prohibition.

I mention this because you said we should tax it like we do wine, but also appear to be fundamentally opposed to such taxes. It wasn't clear to me whether you realize alcohol has them tucked into the price, or you're just okay with the level they're at. California's are fairly low, but they are quite a bit higher in some states.

https://www.salestaxhandbook.com/california/alcohol
The article does explicitly call out "exercising for more than an hour" as something different.
Not nessaserilly no signs. It involves rep3atadly triggering the error path with specifically constructed values. This could easily leave behind traces in the log from which it can be infered that there was a spectre attack (of course, determining what attack was being conducted, or its succeslevel and information exfiltrated is still difficult)
I think you're right.

Agile has a dirty name now, but it's well-deserved, because most folks have had legitimately terrible experiences with stuff sailing under that banner.

I've had a legitimately awesome experience and I can't really use a different word, because it either creates confusion or sounds like sneaky wordplay and/or self-marketing hoopla.

I had a job where, due to the technology, I could not TDD. There was no sane way to version control. No CI/CD, changes had to be made in dev and then copied & pasted into prod. Before that I was in a job with pairing, TDD, CI/CD and an avowed commitment to agile.

Of the two, the ostensibly-not-agile was more agile, because it hewed closer to the values of talking to people and focusing on doing the most valuable thing first. I would work on projects by myself. When I wanted to learn more about my customers, I walked across the campus and talked to them. If I had something I wanted them to give their opinion on, I would ring them and tell them to take a look.

At the ostensibly-agile job we had a manager who talked to a middleman who talked to a board of directors who heard from a line manager who talked to his employees. It didn't matter how well we did the inner loop, because a lot of the time we just produced beautifully-engineered diversions.
Whatever answer you get, make sure you can use your losses to cover some of your tax burden from your wins, otherwise even in the scenario you describe you lose a third or half to the government (depending on how the income is declared and what else you did in those 5 years) and barely come out ahead.
you need closure on scalar mult. if (2,3,4) is a valid int triple & 1/3 is your scalar then (2/3,1,4/3) throws you out of the group so there goes your closure.
unlike op, you don’t really need to know about fields to solve this.
Serta+iComfort+Review
Why do endocrine profiles in elite athletes differ between sports?
If something is open source and protected under copyright does that make it “clopen source”?
Sucht without the Eifer just means greed or desire so I don’t think it works.

I think generally English words are pretty quirky in their etymology and pronunciation which makes them easier to abbreviate. In a more regular, organized language when you remove part of a word you just get another word.
We have something similar: https://github.com/SheetJS/js-xlsx/blob/master/CONTRIBUTING....

In our case, the root problem is twofold: developers in other related projects have been less-than-circumspect in code contributions, and thanks to the Microsoft Shared Source Agreements (https://www.microsoft.com/en-us/sharedsource/default.aspx) there are many people who have looked at protected code and signed agreements.

It is probably even more relevant for Scala.js since they are dealing with the JDK and Oracle has not been afraid to pursue potential violations.
Who does this affect?
The attacker can always modify the page however they want anyways and the https for the js source would mean the js itself cannot be tampered with

Does it help much? No. Should you use it? Yes.
Did regulators come knocking? If so, I wasn’t aware of that and it isn’t mention in the write ups I’ve seen.
Our favorite two-player board games, 2019 edition
YouTube wants ‘dislike mobs’ to stop weaponizing the dislike button
Show HN: Like Chain Reaction? Checkout this open source Android game with bots!
A simpler rule: Read what nobel prize winners read:

https://www.theguardian.com/books/2015/apr/03/steven-weinber...
It really would depend on what they did and how they did it.

If the "privileged data" they read was, say, the root password which they used to gain root access and then started snooping around the system as root or modifying parts of the filesystem, that could be easily detected.

If the exploit itself was performed over the network or if the privileged data they read was transferred over the network, that might also be detected, depending on how it was sent and where it was sent to.

If they tried to launch attacks or probes from the exploited system they could be detected at well.

Network intrusion detection systems and host detection intrusion systems could both help here.
criticizing Serina Williams got a subreddit banned recently

Sincere question: Was it actually criticism of Serena Williams ("she exhibited poor behavior", "she's lost a step", "her fashion sense sucks", etc) or was it abuse ("she's a man", "she's an ugly pig", etc)?

Banning because of the former is unacceptable, but I see no reason why we would expect her husband to permit the latter on his platform.
“Dirty” money is such an expansive term that encapsulates huge sums and many distinctly different schemes. The Guardian actually stated that the influx of cash from crime syndicates propped up the banks and significantly contributed to some banks financial health—- thus helping during the economic crisis. This money is part of the economy and it is hard to entirely crack doen on it less risking unforeseen issues.

https://www.theguardian.com/global/2009/dec/13/drug-money-ba...
Username checks out.

Personally I think Bitcoin is going to go huge soon, perhaps not as big as it originally was, but it's definitely going to go up a bit - bear in mind I'm no crypto expert, merely a CS student.
Solid list overall.

"Consider using the "304-Not Modified" response code on large websites with lots of pages that don't change very often."

This is the only thing that, from an SEO perspective, I'd challenge. I can't even begin to see where the supposed benefit of this would be.
I think so too. Focus is on the child but maybe the mom wants it that way.
I've seen this kind of features several times on libs. And sometimes I can't un-think about it while my mouse is hovering on links in normal life. It's .. prefetching or not?
Microsoft begs you to stop using Internet Explorer
>but the injustice

Let's chill out with the over-the-top rhetoric because few of us are paying customers of reddit and it's their database at the end of the day.

Stop manufacturing outrage please
> To get any reasonable performance benefit out of 32+ cores the code running on those cores would have to be >75% parallelized.

Exactly this, yes. But for that we need a language that enforces and guarantees pure functions and disallows global state mutation. For now C is king in systems programming but I wonder if certain chips are made with a very different idea from the get go, then can we have a systems functional language?

I also am not very informed on this front, never had enough time to dig deeper. (I did like the idea of the LISP machines several decades ago though.)
Sure.

Operations in applied linear algebra - such as matrix multiplication and solving systems of linear equations - are formalized by the theory of vector spaces, much like calculus is formalized through the theory of analysis. Vector spaces are algebraic structures which axiomatize the linearity you need to carry out these operations. If you can establish your equations exist in a vector space, you can prove that they admit linear relations and are thus solvable as linear systems.

More precisely, a vector space V is any set S defined over a field F which is closed under both vector addition and scalar multiplication, where the elements of S are called vectors and the elements of the underlying field F are called scalars. The term "closed" means that for every pair of vectors x, y in V there exists a vector x + y in V, and for every scalar c in F and vector x in V there exists a vector cx in V. There are eight axioms in total, for things like associativity and commutativity, but those aren't germane to this particular example. What's important is that vector spaces are what allow you to form linear combinations of things, which is the scaffolding you need to prove things like linear dependence and independence; whether or not a system of linear equations has no solutions, one solution or infinitely many solutions, etc.

Fields are the algebraic structures which formalize the elementary arithmetic you're already familiar with over sets like the the complex numbers, the real numbers, the rationals, etc. They are sets which are closed under "regular" addition and multiplication. Notably, integers do not comprise a field because integers do not have multiplicative inverses. Multiplicative inverses are the axiomatic way of establishing that in any field, division must be possible. So concretely, there is no multiplicative inverse 1/n for any integer n. There is in the set of rationals, but not the set of integers. Therefore integers are not closed under multiplication, and they cannot comprise a field.

Since the integers do not comprise a field, you cannot define a vector space over the integers, because the scalars used to define scalar multiplication in vector spaces are just elements of the underlying field. If you try to define a vector space over a set without multiplicative closure, the vector space cannot be closed under scalar multiplication. Among other things, linear combinations stop being invertible (or even possible in general), and linear relations don't exist.

So circling back to the specific question: it's asking which of the given sets comprises a vector space. You can make all kinds of abstract vector spaces (e.g. the set of all polynomials over a field, the set of all polynomials with degree at most n over a field, the set of all continuous functions, etc). But if you stick with the definition of a vector space, you don't need to tediously test each of the given sets for the eight axioms. You just have to remember the integers don't comprise a field, so the set of all triples of integers can't be a vector space either.

Hopefully that's clear, let me know if you'd like me to clarify anything.
Here I am. Give me the freedom of remote and a good salary and I'm yours. I do product management, currently for a big german company.
Typically you'd make a succinct verbal statement in the narrative like "customers tell us ____" or "___% of ______ do ______", and show the survey or other relevant data that supports the statement in the appendix.
He was making Star Citizen but with $187,000 instead of $400 million and 1 guy instead of 500.
what definition are you using for mandatory?
Politics: a short story
> What needs to die is the belief that you can rely on just software (i.e. memory safety) for isolation between trusted and untrusted code[1].

That is definitely true. We need a bit more security in the hardware. I am not saying we should go back to 300MHz CPUs just for the sake of security but surely there's a spectrum where Spectre / Meltdown / Rowhammer attacks are impossible and we still have very fast processors and RAM.
A note here that "front end" and "back end" are meant in the CPU microarchitecture sense, not the web development sense.

I think Brendan Gregg's Systems Performance: Enterprise and the Cloud is still the single best volume on this topic; I'd recommend Gunther's Guerilla Capacity Planning as a useful followup to get a foothold on theory.
> But nearly all actual markets have some kind of regulation, and thus the potential for dirty money.

It is possible to have a wide variety of regulations without having monetary ones. Money is fungible. If you dump mercury in the river, you get fined or put in jail. It doesn't matter if the money you have to pay the fine with is the profit from the dumping or not, it only matters that it would bite enough to prevent anyone from doing it to begin with.

In particular, you don't need banks to investigate customers or know anything about them, and asking them to causes all kinds of otherwise avoidable problems. The people who should be investigating criminals are law enforcement, not corporations. And if the criminals use banks, well, then you can go to the banks and seize their money etc., after you've proven their crimes to the satisfaction of a judge. Instead of having Paypal do it preemptively because it's easier to screw over many innocent small businesses than deal with regulators when 2% of them cause problems.
It probably switched a few orders from Intel to AMD, where the performance hit of the Intel patches vs the AMD ones changed the performance/$ enough.

But probably nothing of enough volume to be notable.

Risc-V would be unlikely, since there's not yet real server class silicon.
And... now you understand how China feels about American tariffs?
You Call That Meat? Not So Fast, Cattle Ranchers Say
Why bother investing it at the point? What’s the advantage over holding cash?
I think it varies by team. On my team, we don't use hard copies, comments are written electronically, and we have the usual post-reading-time discussion.
I looked (quickly) through most of the comments below and couldn't answer these questions:

1) What, if anything, is the downside here?

2) Is (Google) analytics effected by the prefetch? That is, does that get counted as a page visit if the link that triggers this prefetch is not actually clicked?

Tia
The latter. The first half of the meeting is "quiet time" where the reading is done and reviewers take notes. The second half is where discussion occurs.
Invest in 500 things by purchasing a low cost S&P 500 index like the ETF VTI and call it a day. 5k is too low of an amount to purchase 5 separate investments after you consider fees.
DNA is very valuable for bioweapons...
"Although China slapped retaliatory tariffs up to 70 percent on U.S. ethanol shipments, the fuel can still legally enter China tariff-free if it arrives blended with at least 40 percent Asian-produced fuel"

Right, so the American producers can still sell tariff-free to China provided that they sell 40% less volume with increased costs. Nice loophole...
The part about viewing family.html seems kind of understandable. If you assume no bad actors, then it's crazy... But we're all developers here, we know that you have to assume the existence of bad actors, and assume that they are going to target you (which is why we you always validate data client data server-side). I could see how viewing family.html could turn into a real headache for HR/Legal, especially if the law says that you can't discriminate based on family information.

The other part about log analysis seems crazy, though, I agree with you on that.
> Using redux v4 with react-redux v5 for a large and complicated project. Was looking into react-redux v6 but...

This statement reminds me of my enterprise Java days. It consisted entirely of just gluing together an endless conglomeration of shit with Spring sitting at the center.

There was never actually any software development, just configuring an ever evolving mess of frameworks to talk to each other. When you offload all your engineering to frameworks, most of the bugs end up being due to some poorly understood interaction between components.

Kinda feels like the JavaScript world is starting to invent J2EE...
Only a few of these may need polish. The majority are well polished, mature products. It is true that UI/UX can suffer on libre or open source software.
Ask HN: What is that one thing that will make online reviews trustable?
Most browsers pass a "purpose:prefetch" or similar HTTP header in the prefetch request that you can use to differentiate
The downside is that your pages’s HTML are loaded twice as much, this makes for additional load on your server.

Client-side analytics like GA aren’t affected.
This is another way of saying that the power to edit other people's posts is pretty darn scary. Which it is. But other than one vivid demonstration, it seems it's potential, not actual? A violation of trust, but not repeated?

What could anyone do about it, other than promising not to do it again? I guess there could be some kind of certificate transparency thing? Other people could make copies of messages and verify that they haven't changed?
Spend it for something nice which makes you happy and you’ll remember forever.
Even crazier: the local courthouse in my home town (in West Virginia) charges $1/page even when you make the copies yourself with your cell phone.

Governments are sometimes just like people -- they get addicted to revenue streams and have a hard time adapting when those revenues change or go away.
The standardized tests were god-awful and the curriculums were hit-or-miss, but I meant that I liked math itself. I think it began when my parents got me a book called “I Hate Mathematics”.
Unless the profit margin is huge
Any more info on your thinking? Not looking for a fight, just wondering what makes you say this against a backdrop of near universal negativity. (I say this as someone who has 10 BTC and has pretty much give up on it (I bought it in 2013, IIRC, so I'm still up)).
China isn’t the United States. If you think they’re the same...
I'm hesitant to take an anonymous and unsourced internet comment at face value, but assuming it's true, that is quite damning for American academia! It occurs to me that the claimed effect, if it exists, might also be due in part to simple expertise. Or rather a lack of expertise among grad students and to a lesser extent post docs.

Is anyone here able to corroborate the claim made in OP's linked comment? And does anyone know what kind of experience and oversight the researchers doing discovery in big pharma will have?