skysight-inc/HackerNews huggingface dataset:
Direct link to the bugs' central webpage, which is far more informative than this article: https://cpu.fail/

Included are the papers describing each exploit as well as links to PoC repositories.

Edit: here's a link to the blog describing ZombieLoad, which is perhaps the best high-level overview: https://www.cyberus-technology.de/posts/2019-05-14-zombieloa...
Which then they spend watching 400 more hours entertainment with product placements. Infinite jest, this is.
They do, the userland part is in Mesa:

https://gitlab.freedesktop.org/mesa/mesa
I think I know the exact scene you're talking about in Bones, it was a super obvious advertisement. Car starts making beeping noises "Why's the car beeping?", "Oh, it's the new lane assist feature in my Toyota Prius. It lets me know if I'm starting to drift across the lane because I'm distracted." Then they get to the destination and they show off the automatic parallell parking.
My point exactly: the competitor can say "Let's give you a $0 signing bonus, it's a $3.2M bump over the value of your Uber stock!"
The average 2-5 year old is spending over 1,600 hours a year watching television.

This seems nuts to me. That is 4.5 hours a day! For a 2 year old? Who are these parents...
> You would still have to buy a new $600 phone to use that $1 app irrespective of whether Apple had multiple stores or not.

You need a phone to use an app in the same way that you need a piece of real estate to get internet service. That doesn't mean Cox in Omaha is a competitor to Comcast in Pittsburgh, because people aren't reasonably going to make a choice with hundreds of times greater implications just in order to do that.

> iOS is a platform and apps can only work on that platform.

You're only providing reasons that it is a separate market from apps on other platforms.
Complete sidebar here, but that domain made me think that maybe the name needs to be changed to International Geographic ;)
This article is dog shit. "We must defend science against extremist political attacks by being political extremists." Their solution is to scream the loudest. People like this are incredibly tiring to deal with and offer nothing practical.
There doesn't have to be a monopoly--competitiveness isn't binary. Intel doesn't have a monopoly in x86, and yet Intel uses firmware to cripple their chips (e.g. certain instruction sets disabled on low-end SKUs) while AMD doesn't. But does anybody really think that the x86 market is as competitive as, say, shampoo; or that Intel's price and product discrimination is resulting in lower prices at the low-end than would otherwise happen?

Maybe, but it's not immediately clear. And in any event it would be foolish to take Intel at their word that their strategy results in lower prices and/or better products, regardless of their sincerity.

And FWIW I'm not claiming that John Deere should be prohibited from doing what they're doing technologically, not unless it rises to an anti-trust violation. However, I do oppose the abuse and extension of copyright to prevent reverse engineering and prevent owners from modifying their machines. Even if John Deere's strategy is resulting in lower prices at the low-end, I'm not prepared to sacrifice the ability more generally (in this and other markets) for reverse-engineering competitors to sell their own firmware. There are many other reasons beyond the threat of copyright lawsuits why customers wouldn't want to run a machine with adulterated firmware, so even if a robust reverse engineering market resulted in higher prices for these particular tractors, it'll likely only be marginally so. I don't think it's worth cutting-off potential competition at the knees for whatever gain John Deere is claiming. History has shown that such policies, writ large, are extremely detrimental.
Inevitably I am unfamiliar with the vast majority of the historical literature. However, the historiography of late antiquity and the early middle ages features very much debate as to how much people travelled; the possibility of travel is always entertained.

As for Stonehenge, I am unaware of any substantial connexion with the Vikings. I am aware of recent findings concerning the DNA of those who built it, but the raid on Lindisfarne is separated by at least a millennium from the latest posited dates of construction of Stonehenge.

The monographs I have read concerning Byzantium do not refer to the Vikings particularly frequently. This is unsurprising. The Vikings were important, but not sufficiently important to merit repeated and deliberate reference without some other obvious justification.
You’re atypical. People don’t usually have that happen to them (the domestic to international).
"The average 2-5 year old is spending over 1,600 hours a year watching television."

This seems nuts to me. That is 4.5 hours a day! For a 2 year old? Who are these parents...
It's an expected endpoint of purely capitalism and unregulated based mass market entertainment product.

If Hollywood could have turned movies into pretty skinner-boxes they would have done that a decade ago
A variant on that which I will use when no coin is handy is to assign odd and even to whatever options and then look at the time. If you haven't looked at the time recently, the final digit is random to you.
I grew up on a military base in a foreign country, and all the television was from the Armed Forces network. There were no commercials, just random PSA.

Occasionally teachers would get VHS tapes with recorded TV from the US, and we were more enthralled with the commercials than the programs themselves.
Do you seriously believe there is a dearth of left-wing mainstream media outlets? And the problem with the politicization of science is not a right-vs-left issue. The left has its own bag of anti-science positions (e.g., blank slatism, anti-GMO, implicit bias, etc).

EDIT: Do downvoters question that the majority of prominent news outlets are left-wing or that the left has anti-science positions?
Per bug you say? I'm gonna write me a new minivan this afternoon!

http://blog.klocwork.com/wp-content/uploads/2009/10/dilbert-...
On average, we have a serious meltdown event every 20 years with consequences far beyond anything that could happen from renewables.
This won't work at a company that inherently values long hours, yes.

And it's much easier at a job you've been at for a while, yes, because then you're much more valuable in a whole bunch of ways. It is doable at new jobs, but that is much harder the first time around.

So you have the right plan:

1. Get a job at company that isn't obsessed with long hours.

2. Stick around for a year so you're extra-valuable.

3. Negotiate shorter workweek.

You will then have easier time negotiating at later jobs, especially if you don't quit ("thanks for the offer, I'd love to come work for you. however, at current job I work 4 days a week... do you think you could match that?")
I would guesstimate that 90% of international travel done by Americans is to either Mexico or Canada, which didn't require a passport 25 years ago.
Oh I'm well aware they used to make very quality products. Craftsman at one point was re-branding high quality products, like Abus locks. But that was again, 50 years ago. Their recent tools have left me disappointed with issues coming up far too soon. Not that I'm easy on tools but still.
> This process does not apply to the 737Max8. Boeing was wrong to put the plane in that category...

If you, the layperson, can make this statement, then why wouldn't the regulators make this obvious determination? Regulators should have said "No, Boeing, you're not eligble for this process because of XYZ"

So, if they can't make such a high-level determination, what exactly are they doing? Not much, it seems.
> Everyone already has a passport.

Most US citizens do not have a passport. Passports are a real pain to get, so people tend not to bother unless they're planning a specific out-of-country trip.
I'm guessing you don't have kids and haven't actually experienced the difference.

- Netflix has gobs of kids shows (i.e., cartoons) that have zero product placement, at least as far as I can tell. This includes both Netflix originals and the rest.

- TV has 6-minute ad breaks every few minutes that are non-stop pitches for toys and other shows. It's unbearable.

Even shows on premium networks with some product placement and mentions are 1000x better than regular cable. There's simply no comparison.
I would compare it more to RSS vs. more complicated protocols like WebSub. HTTP/1.0, like RSS, isn't going away; and when you're a smaller player, it's really all you need. It's only the larger players that actually have requirements that make optimizations like HTTP/2 necessary for their operating expenses to stay sane, rather than just "nice-to-have but an unnoticeable blip on their margins."
> Hopefully consumers are getting their annual cost of living wage increases at their respective jobs.

There are very few jobs where that is even considered
> it quotes AT&T's CEO as saying that AT&T would invest an additional $1 billion, which is equivalent to 7,000 jobs.

That's a simplification of the quote. Add in the next part, "These are not entry-level jobs. These are 7,000 jobs of people putting fiber in ground, hard-hat jobs that make $70,000 to $80,000 per year."

and try to tell me with a straight face that "AT&T never said or implied that they'd be creating new jobs".
The initial pre-Fukushima plan to exit nuclear was solid. What ruined it was the blind actionism post-Fukushima.

Also, despite all the fear mongering that renewables will collapse the grid it proofed to be pretty stable and robust. Even high energy industries like the chemical and processing industry adapted pretty well. Some even actively participate in the energy market now. And in case processes can be slowed down or stopped they buffer energy generation peaks practically serving as some kind of storage.

So, Germany has the opportunity to learn a lot about smart grids in highly industrialized environments. It's just that Germany's track record in these kind of things is, well, bad.
> Then, we had 18 years of no major terrorist attacks.

Is this directly because of DHS, et al.?
For the last two decades "TV boxes" have been almost as common as TVs in households in my country. They let you record multiple things at the same time, automatically record a TV series, pause and rewind what you're watching etc. So instead of sitting through commercials people might hit record on a bunch of things they are interested in and watch them later (skipping over the commercials) or maybe even pause the TV for a short break in order to streamline the show. Personally I've never has a Smart TV so I might be behind the times using this method.
How do we not have a totalitarian state?

You can't publish evidence of state war crimes without the CIA doing a character assassination job on you (pending a real assassination).

You can't travel anonymously.

You can't publish anonymously.

You can't make bank transfers out of the country for arbitrary purposes.

You can't deposit or withdraw cash above a trivial amount without significant scrutiny which is reported to the government. Financial companies failing to report can be criminally liable; it is illegal for them to protect your privacy.

It's illegal to not let the state know where you habitually sleep (state ID/driver's license requirements).

You can't drive from place to place without being subject to arbitrary "I smelled marijuana" search.

Every single phone call, SMS, and email is logged by the government.

Every single train and airplane ride is logged by the government in realtime, and government ID is required to board planes (and some trains).

Every single payment card swipe is logged by the government in realtime, and has been since 2008.

The government can, at any time, with zero burden of proof, freeze any/all of your payment cards and deposit accounts.

The government can, at any time, with zero burden of proof, freeze your ability to send/receive electronic payments.

You can't make private transactions (e.g. at a casino) over a trivial amount in cash without having to submit identity documents.

Our government runs a global network of extrajudicial torture prisons.

Our government regularly uses illegal and inhumane conditions against children to dissuade people from seeking human rights (specifically to asylum).

Our government runs an extrajudicial network of assassination robots that target citizens and foreigners alike, with basically zero oversight about who they kill or why.

Our government has been known to retaliate with bogus charges against anyone who stands publicly against their illegal activities, e.g. Joseph Nacchio.

I'm really confused as to what would have to happen for you to think that we do live in a totalitarian state.
I agree - google/check out something called the "Results Only Work Environment" or "ROWE" it's a great framework for this.
I probably watched more than that growing up so ymmv. I always wonder how they collect statistics like these. Questionnaires / self reporting by parents?
According to their blog post[1], there is little you can do against this. Running different applications on different cpus help against them reading each other’s data but an rogue process can still read data from the “super ordinated kernel” or hypervisor.
Sometimes having an hour of time to yourself while your kids are watching TV is a huge boon.
Show HN: The best longform business reads from around the web. Hand-picked
Indeed. Lucky for us flint hand-axes weren't enough for our ancestors.
Or, turning off the screens saves kids from 100% of commercials a year. Something about articles like this make me want to vomit.
Might be advisable to note that you don't support foreign keys if you're going to show how much better your performance is versus a database that does.
> I used to be skeptical of this stuff, too. Then, we had 18 years of no major terrorist attacks.

We had 17 years of no major terrorist attacks that involved airplanes prior to 9/11; if you count the foiled plot, you could bump it down to six: https://en.wikipedia.org/wiki/Timeline_of_airliner_bombing_a...

And we've had plenty of terrorist attacks since 9/11, we just don't call them that - we call them "lone wolves":

https://en.wikipedia.org/wiki/2017_Las_Vegas_shooting

https://en.wikipedia.org/wiki/Charleston_church_shooting

https://en.wikipedia.org/wiki/Christopher_Paul_Hasson
> Sadly, the article read more like "teenager discovers the things her parents failed to teach her". Sorry I'm too old for this.

When you were 18, how concrete was your definition of well-being? Remember, this is a class being taught at Yale, whose incoming students are likely already high achievers. On top of that, a 10% admissions rate tells incoming students that they will simply have to keep climbing the ladder of GPAs, internships, varsity sports etc. for the next 4 years, and after that, for the rest of their lives.

I haven't taken this particular class, but I went through 4 years of college feeling like a failure if any one of the above "todos" didn't pan out, because it made me feel like I was closer to the bottom of the pile than the top. At that age, all you can see are the trees, not the forest

Looking back, it would've been nice to have had some perspective on what it's all for. Before you know it, you've graduated, and you can't go back and try to do things differently.
Stupid title. What this article is actually about is there is a chosen prefix attack for SHA1.

This makes attacks much more practical.
One of the benefits sold to shareholders for Disney buying all of Hulu was that it potentially makes it easier for Disney as guiding force to negotiate international rights on all the Hulu content and make Hulu an international brand. Though how much of that is spin and will actually happen is a leftover question.
Right I get why - but it's crazy to think that the vast majority of companies give up measuring the thing that everyone knows matters, especially when gearing your incentives around it should be better for everyone. (except low productivity workers I guess?)
Give them time, They'll add commercials. At one time cable didn't have commercials.
Interesting, but I don't think it is as easily cracked as simply creating a 30hr job board.

Certainly there are people who want to work 30hrs because on balance they will be more productive per hour. Perhaps even enough to offset the overall reduction in work hours. However, there are also people who simply want to do less work. Being the job board that collects applicants who's primary variable is minimizing hours worked is not a super positive signal.

From the employer perspective many of the most important and high value jobs are more likely to be perceived as 50hr/week jobs rather than 30hr/week jobs. Not to mention that 30hrs is a common break point between fulltime and part time, with the associated legal differences in benefits and such.

Sadly a 50hr job board might be vastly more successful.
"maybe nuclear is too expensive" I think this is the key flaw that is nuclear power's undoing. Even the Chinese government, who are apparently pro-nuclear, have not broken ground on a new plant in China since late 2016. They are finding that other forms of generation are cost competitive as the necessary safety features drive the nuclear price up. If the Chinese dictatorship is struggling to justify new plants on a cost basis then it doesn't look good for the rest of the world.

https://www.technologyreview.com/s/612564/chinas-losing-its-...
Wow. I thought the amount of time I spend with The Office reruns in the background on Netflix was bad, but it's nowhere near 4 hours bad.
https://lm.solar/order/

I have the vacuum mirror focusing upgrade pack.

Works really well and I roughly calculate that you get 80% of the growing power from the sun as direct light.

I use it for a part of the garden that never got light due to building and trees and was always soggy and damp. Nothing grew there very long, now I maintain native wildflowers and a butterfly garden there.

It’s really cool. The heliostat follows the sun mechanically and also can tune in the focus with a vacuum system.
I literally cannot watch television anymore. Advertising is such a huge annoyance. What's worse is that it's the same five adverts played every six minutes all damn day! Meanwhile nothing actually can happen in the shows themselves since there's so little time actually devoted to it instead of revenue generating ads
Twitter allows access to rebuilt APIs
I believe I remember from my masters that there are plans (underway? to be? already in place?) to actually connect the countries. Would be great if that worked out.
Average parents?
Arnie Gunderson, the author, is a recognized nuclear expert with a flawless resume who has since become a whistleblower. His credentials on this subject are beyond reproach.
The goal is reducing CO2. Renewables are technology that may help achieve that. Adopting renewables isn't the goal.
Long-lived high-level nuclear waste, colloquially known as nuclear waste, as in "but what do you do with the waste" IS spent nuclear fuel. There's also low-level rad waste that goes in special landfills but no one worries too much about that.

This is fission products, actinides, and uranium-238.

[1] https://en.wikipedia.org/wiki/Radioactive_waste#High-level_w...
None of those meet the “Major” criteria.
lol very typical millenial thinking: we're actually more productive if we work a lot less... no you're just lazy
Science, and especially certain scientific conclusions have very obviously become politicized. Yes, that's unfortunate but it is the state of affairs.

Perhaps the problem is that scientists themselves are increasingly having to fight their own political battles because their elected politicians can not or will not.
>and few people want to take other peoples’ freedoms away

Really? Even on HN there's certain freedoms that the majority wants curtailed. Reddit is a complete cesspool of pro-totalitarianism. Twitter is, well, Twitter.
Types of Macros That Improve C++ Code
"It is a bit unfair to suddenly stop considering Apples laptops just today, again IMO."

Ive and Newson are more interested in making useless aesthetic baubles for the Gulfstream V set than utilitarian devices for work.

https://www.cnn.com/style/article/jony-ive-diamond-ring-soth...

In general I just get the impression that the top executives at Apple treat the Mac as their neglected red-headed stepchild which they'd like to throw down a well at the first opportunity.
The vast majority of the population will never have that situation arise. It seems reasonable that if your job comes with such a risk, you should have a passport -- but you're still talking about a minority of the citizenry.
https://www.weforum.org/agenda/2019/05/australian-homes-are-... (Australian homes are turning to solar power in record numbers)

> A record amount of new solar capacity has been fitted to Australia’s households and businesses in the first three months of this year, an increase of 46% on the same period last year, according to the consultancy Green Energy Markets. And installations in Victoria have surged 90% after the state introduced an incentive scheme.

> It’s calculated that customers will save $600 million on their power bills over the next decade, thanks to the installations. And the scheme is bringing benefits in other areas, generating new jobs in the renewable energy sector.

Your link is paywalled, so I can't read the details, but rooftop solar is an incredibly good financial proposition in the Australian energy markets due to market dysfunctions. It seems like a useful scenario in which to subsidize clean energy instead of very dirty coal generation currently in service throughout most of Australia.
That's product placement and it's everywhere. Netflix might still be saving kids from 400 hours of commercials even if they have some commercials themselves.
Sure, most companies won't tell it like it is because their management is so wrapped up in their own fiction that the cognitive dissonance would be too great. But if a newer company is legitimately thinking about "crafting an employer brand" that appeals to engineers, and you've got lots of engineers who want this, isn't there an opportunity for disruption here? There must be a few shops that haven't contracted the MBA virus yet.
Yes. I think it's an easy trap to use the word "Science" to defend political decisions. It seems an unassailable argument "Who would reject Science?"

Don't you believe. You won't convince people your politics are rational - you'll convince people science is arbitrary.
I think that's true. But the purpose of the 1996 deregulation was not to have companies build fiber specifically. The goal was to increase private investment in telecom generally. In that regard, deregulation was wildly successful. (It should also be noted that telecom deregulation was part of an overall long-term strategy of deregulation that included airline, trucking, freight, energy, etc., deregulation, all of which are widely regarded as successful. So successful that European countries pretty much uniformly followed suit. While there are differences here and there, European telecom, energy, etc., markets look a lot like the American ones, and quite different than what those markets looked like in Europe or the U.S. before.)
Interesting way to get feedback from your newsletter audience tho, I bet you get some really good info that way eh. Also good way to build a relationship with your audience. Cool idea and implementation!
> The smaller sites are linked to more often but Google doesn't want you to see them for political reasons.

Google has never claimed to order search results by the number of links to them. Otherwise the Flash installer (or whatnot) would be at the top of every search results page. :)