skysight-inc/HackerNews huggingface dataset:
> All three of these latest vulnerabilities are like Meltdown and L1TF in that they just allow speculative execution to completely ignore hardware-level access protections and read data from a completely different process

Not really. These attacks are completely different from Meltdown and L1TF in that they don't involve reading from memory at all. They involve hidden processor state that contains values that were recently used in another context. The attacker never explicitly specifies an address they are interested in -- they just get whatever's floating around.

A comparable (but much more obvious) bug would be if the OS failed to clear registers when switching contexts. Although the values in those registers may have at one point been read from memory, the attacker recovering those values isn't directly accessing the victim's memory.

Your comments seem to be arguing that AMD isn't affected by these bugs for the same reason they weren't affected by Meltdown. But these bugs operate in a totally different way and exploit totally different components. There doesn't appear to be any reason to believe they are related.

I think the reason AMD isn't affected likely has to do with the fact that these attacks are targeting specific implementation details of Intel processors, which AMD processors probably just happen to implement differently. (Indeed, Fallout appears to be attacking outright unintentional behavior -- it would be surprising if multiple CPUs had the same bug.) It seems likely to me that AMD has different bugs which haven't been found yet, perhaps mostly because researchers haven't focused on them.

(Disclosure: I own some AMD stock. I don't own Intel stock. I have no other affiliation with either company.)
There's a world to be discovered... Only takes the will to do so really...
> cryptocurrency is a powerful and useful invention.

Can you explain? Intellectually interesting? No question. But powerful or useful (I consider them synonyms)? I'd like to see some actual examples.

This is genuine curiosity, not snark. I'm on the board of a blockchain startup who has a legitimate application for a blockchain -- an aspirin. But this application could have been done 20 years ago if there hadn't been patent issues for hash chains. And while the engineers are enthusiastic to do a coin nobody can explain why someone else would want to buy one, except in the hope that someone someday would pay more for it.

I've seen a few vaguely interesting applications cor crypto currencies, but they are all been at best 'vitamins'. I've yet to see an 'aspirin'.
I am British and I share your preferences. But they are not universal. In Japan, shinkansen offers reserved seating at about 25% price premium. Even on services that run more frequently than every 20 minutes more people prefer to pay to reduce the risk of standing. Which risk seems to be predictably low with few exceptions.
> Which explains nicely why tax "loopholes" are much better at achieving the desired result than tax "breaks."

> In the former, the tax burden is reduced in exchange for specific actions by the taxpayer.

Then you would just have people misrepresent the "loopholes" as "breaks", like they did in the Amazon NYC fiasco.
That's exactly right (and what I was trying to say!) :)
I realize the word “shonk” in Australia is used without any ethnic meaning, but in some places it does have and can be offensive.

I point this out not to be a busybody or to take offense, but just mention it for anyone else who might have thought “that’s some interesting slang” and start using it
Refitting our libraries to be more like community centers would help. Having visited a few libraries abroad, I think ghis is whats missing in the US.
I appreciate your response. I don't agree with all of it (I'm in the 'life ain't fair' camp) but certainly there are people whose latent ability is there but can't be utilized due to one reason or the other. The thing is though, that there's no way a company can correct for that. Let's take addiction as an example. A company most definitely should not be hiring addicts. Getting work done is difficult in the best of situations but having drug addicts as co-workers would make it impossible to succeed. Managing even mentally healthy individuals is a great challenge. I think you're expecting too much from organizations and managers as individuals if you can think they can repair drug addicts, people with mental illness...
98se.
Sounds like we would need a new paradigm for how to handle that. But it seems to me that x86 is in now way the panacea of COU design. Wouldn’t you gain some good trade offs by changing up how things are done?
Do these tax breaks not have any regulatory teeth? "If you fail to do X, you must pay us back."
The cheapest iPhone (iPhone7) is selling for $449 new in the US. I'm not sure how cheap you are but this is reasonable compared to Android phones
It's like any other currency. If you wanted to buy GBP, you'd have to go to an exchange and transfer them to your bank, which had to support GBP for your account.

Sure, it would be better UX if they could charge you some USD and give you Lumens, but I don't think it's worse than obtaining any other currency.
I would like to make 2 points

Firstly, In the past there were certain ways of being social - clubs, churches etc. But just because humans engage in a different form of being social doesn't immediately mean all is gone. It depends on whether the individual goes to meaningful meetup groups or whether he/she uses tinder and calls it social. There are way too many options and being distracted between many of these is true

Secondly, Humans have had a social need, yes. That is how we evolved, yes. But evolution never stops, it is like walking on a slow gradient curve, each step is probably 1 or 2 generations. Why is human evolution viewed as static? Why is the declining need to be social today viewed as bad? Are we sure that people being alone are really feeling lonely?

When change happens in the environment, side effects do show until the mind and body adapt to the new environment. We could well see a future (100-200 years from now) where a human isn't necessarily social because of the underlying need, that need could get quite minimized in future generations. That human could be social when he/she needs to and chooses to do so people of similar thinking / mind and could be by themselves for long periods of time. Why is this viewed as bad?

Such humans could be extremely well suited for space travels because they can easily handle being by themselves rather than people who constantly need to be in groups to affirm their existence
Coming from Matlab, it took me a couple of hours with the documentation to learn about the indexing mechanisms in numpy. It's highly unintuitive. Numpy is very awkward to use all around.
Regarding the objects, a triple fox-snout pouch stash bag[0] is quite an item. Why the snout? Implications of sensitivity and a conveniently pre-angled form? Why the fox? According to https://en.wikipedia.org/wiki/Foxes_in_popular_culture#Ameri... at least one South American society believed the fox to be a warrior that would use his mind to fight. The fox would not ever use physical attack, only mental. Potentially a sort of a professional deity of a shamanic class, then.

Lovely iconography on the wooden utensil[1] with a pair of people in comfortable looking robes and differing posture. Could this be suggestive of paired consumption or a guided experience? Could the void-like gap for face indicate ideas associated with possession or channeling, eg. a symbolic "not-self" or implication of self-departure? In the absence of additional finds, I suppose surviving modern shamanistic rites of the region might only provide minimal evidence toward a tenuous interpretation.

[0] https://3c1703fe8d.site.internapcdn.net/newman/gfx/news/hire... [1] https://3c1703fe8d.site.internapcdn.net/newman/gfx/news/hire...
Welcome to the NEW WORLD ORDER, everything that is happening was planned a very long time ago. and enjoy it america. Only in the movies is there a HERO who stands up.

In real life america, Americans are afraid of their own government. And most Americans know 911 was an inside job and what did they do.. they went back to their jobs and paid their taxes.

here is a video of what the firefighters said after the world trade center
https://www.youtube.com/watch?v=WSXUGR2g9HU

and in the words of a famous comedian... go back to sleep america and buy these products.
I just have to say, props to Gitlab for being included in this. For a lot of enterprises that use Github and Bitbucket, this may be their first into to Gitlab.
https://news.ycombinator.com/item?id=19904581
Actually I've found that for my mind at least this works. Do the sort of motivational tricks that your mom/dad/teacher used on you 20 years ago. At this point we go get icecream. At this point we stop for a game. At this point we go for a bike ride. If you get here you get a small lego toy. If you get at X we go to that restaurant ...

I am fully aware of the trick and I could just choose right now to violate the thing entirely. It still works.

I don't suppose that counts as tricking your mind into thinking something is interesting. Still works.
> But then if they communicated to you (during stand-up of whatever) their branch is ready to be used to build on, then they've made that code public and would avoid force-pushing

Every morning everyone mentions what they're working on (and so implicitly what their current branches are about). Most of the time there's no particular reason to pick their branch up, but sometimes there is. The only way that can work is if you never force-push the branches you're working on.

> Conversely if they haven't told you then you wouldn't just randomly pick a commit and start building on it?

Anything that's pushed to the repo is presumed good to pick up, that's what the repo is for. If it's not ready for others to pick up then why push it to the repo at all?

> AH so you're fundamentally against ever e.g. having a pull --rebase workflow on any branch you've ever pushed to any remote... regardless of who's working on what, what communication has occurred, whether that branch will even exist 2 hours from now, or whatever. Merge is the only valid approach in your mind, period. Honestly I have zero hope of trying to convince you merge isn't a size-fits-all dogma, so I won't try anymore except to point out that git supports both workflows for a reason, and its own documentation is clear that neither is strictly superior to the other: https://git-scm.com/book/en/v2/Git-Branching-Rebasing#_rebas....

Did you read your own link? The last paragraph says exactly what I've been saying.
That's great, thanks. Didn't know about Startpage.
Graphene-Info.com is a shill page offering networking and promotion services to the nascent "graphene industry". The Korean team's work, while interesting on the basis of pure science, has no indication of ever being practical or marketable. They haven't even bothered applying for a patent.
Carboplatin is still used very prevalently for many cancers. It is now off patent, and old, but sitll in very common use in developed and developing countries. It is one of the most used cancer drugs.

I've led with patents rather than papers because the latter can prevent the former ("prior art"). And no company will take a drug through clinical trials without a patent(s), and it is typically only companies that fund trials (espcially Phase III). So, publishing without patenting, if you actually have something promising, is near on a crime. It effectively renders it forever lost. This isn't actually as well known as it should be amongst researchers. Although most will never get to any point that this is of concern anyhow.

RE: the crowdfunding page, thank you for your tips/advice on how to make it better, but today is the last day and as you can see....it is a bust. So, that is that.
Juniors tend not to be as good as seniors. Obviously. That’s why you use questions like in the article to kick off a chat during the interview to look for whether someone might be a good junior to understudy a senior. You don’t need to treat it as an exam with an exact answer to find it helpful.
Would the kernel even need RAM access for its internal operations? It seems like today’s CPU caches are so large that a kernel could safely operating without ever leaving the chip, aside from anything that the userland asks it to work on. So in that case you wouldn’t need to ever run userland code against kernel CPU’s caches.
TwelveSmith, a Worthy Successor to 2048
San Francisco bans city use of facial recognition surveillance technology
> Other folks don't do that, and while not 1:1, they are able to correlate the performance of a benchmark with the performance of their own use case.

You can correlate lots of things. Poor countries increase penis size. Ice cream leads to murder. Cheese kills people by tangling them in their bedsheets. These things are strongly correlated. But they have no causative relationship.

To put it another way, a single benchmark test used find a solution is scientifically equivalent to finding one "average" man, making him run a series of athletic tests, and making his performance the benchmark for men's athletics.
And yet climate change is a myth! No such thing! Bad science!

Sun goes up, sun comes down, you can't explain that!
interesting use case of nlp and impressive results!
I think gatherhunter hit it dead on. It’s metrics thing and they wanted to close tickets. I sincerely doubt the FW update they pushed had anything to do with the issue being resolved. It is common practice (according to Tesla forums) to push FW before a service appointment just to be sure the car has the latest version before it goes in.

The sketchy part for me is the inconsistency between the Service Tech and the rep who canceled the appointment. The tech (HW flaw) was very convincing, and the rep (SW flaw) was very vague. The functionality did not return immediately after the FW update, and I think the timing may have been coincidental. It’s even more frustrating that they weren’t/aren’t the least bit apologetic or accommodating. I can’t seem to get a straight answer on why basic cruise can’t be restored via a FW patch while I wait for my appointment. Is the same hardware/software required for Cruise on Model 3s without NoAP and FSD?
Oh, and I'd shy away from marketing yourself as a generic "problem solver". Try to find a more specific problem to solve (i.e. "I boost sales for eLearning websites by improving website speed"), and focus on that instead.
> No, I’ve stated a population trait. The population of professional athletes

Ok... but we've now left the field of genetics. Professional athletes are determined by whether they get hired to play sports professionally, not by genetic birthright.

> Not all tall people can be NBA stars but all NBA stars are tall.

Again, unsure the relation to genetics here, but this also isn't true. Muggsy was a god and is 5'3". Curry is 6'3" which is definitely tall, but among NBA players, not that tall... but his skill level is far, far, far higher than his height would indicate. The statistical variation between height and skill, even in the highly-artificially-selected-for population of NBA players, doesn't correlate perfectly enough to derive a good predictor. You just can't say "the taller the player, the better the player." Not even on average! So, it's not useful information.

AND! This doesn't even get into the sociological aspect of NBA - how many young Muggsys are out there not getting put in (or accepted) to basketball camps/programs because they're "too short?" How many 7 year old future Currys are too hungry to train?

> You’ve been advocating strongly for your position so I’m not sure it makes sense to just discount the opposition as useless.

I certainly don't intend to imply your position is useless, I'm trying to demonstrate that correlative "evidence" (i.e. that a certain population is better at xyz) is unable to overcome sociological noise, and therefore the information is useless.
Apparently I forgot how to use this website and accidentally replied to myself: https://news.ycombinator.com/item?id=19914508
Who needs biometrics when they can track your phone just by asking nicely?
That's cryptography at scale in a nutshell, thus far it seems to be a fair enough countermeasure. Cryptography on an individual item with an unknown cipher/salt/hash can be treated as security via entropy - but with a big enough data set and some idea of the target content, things quickly devolve into security via obscurity since the target content is discoverable with enough time and computational resources. Security via "untamperability" (quantum bits/state) is better, alas we're not quite there yet.

My biggest worry is that all currently known classical "secure" data sets, including encrypted but recorded internet communication, will become an open book a few decades from now. What insights will the powers that be choose draw from it then, and how will that impact our future society? Food for thought.
I’ll be sure when humans sustainability live off Earth.
Read the development log: https://medium.com/@phildo211/small-fast-sharp-cross-platfor...

The original creator wrote about this here: https://www.reddit.com/r/gamedev/comments/bona6z/i_feel_as_t...

"
Doing awesome! Working away on twelvesmith, I just wrote a Development Log about it here! [link]

(LOL jk, but also not really please god someone play my game)

...

The reality is, a huuuge portion of game development at this current moment in time is cutting through the noise of how much is out there. "Shilling your game" is almost more accurately "talking shop" than "disecting some new rendering technique".
"
> ban on the use of facial recognition technology by police and all other municipal agencies

I'm not even sure if the article is what you responded to

Private sector and their partners can all still use it
I mean, it's not that expensive to just take some hi-res X-ray photos of old and new boards of the same make, and compare the trace paths near each component. Maybe you can even take a visual diff of the X-ray negatives, if you can get everything lined up tightly enough.

You can parallelize this search, because the people doing it don't need to know much about what they're looking for—they're just hunting for visual differences. Unless/until one of them actually finds anything different. At that point, you need better resources to figure out what's different; but at that point, all hell also breaks loose, and you'll get all the resources and help you need to do better analyses.
I would probably have been one of those people. Thank for you clarifying.
Inspect the element. It's cute.
Turo, the ‘Airbnb of Cars,’ Gets Heat from the Rental Car Industry
The under lying issue can not be fixed with software. the eMMC is simply running out of write cycles. BUT they can mitigate the issue by not writing the syslog to the eMMC allowing the remaining write cycles to last much longer (This change could be done with a software update).

On the newer versions of the Media Unit instead of disabling writing the syslog to the eMMC they added more storage to the processor boards which isn't going to solve the problem just push it from appearing to further down the road.
So is Mr. Sinnett still working for Boeing? I don't see how the managers can ride this one out.
FTA ... Michael Lee Stallard, president and cofounder of Connection Culture Group, is a thought leader and speaker on how effective leaders boost human connection in team and organizational cultures to improve the health and performance of individuals and organizations. He is the author of "Connection Culture" and "Fired Up or Burned Out." To receive a 28-page "100 Ways to Connect" e-book, sample chapters of "Connection Culture," and Stallard's monthly email newsletter at no cost, sign up here.

After all another marketing campaign to attack loneliness
Yes!

Me, I associate the Internet with "shonk". And people, fundamentally, although AI could do it too.

Also, I hate the term "crypto". Crypto is a general term. As you say, it's "cryptocurrency". Just because most people are ignorant and meme-driven, there's no excuse to post like that here.

But whatever. Cryptocurrencies, as anyone who's been following them for more than a decade or two knows, are about money that's not controlled by governments, which can be used on the Internet, and which can be exchanged anonymously.
There has been one copyright extension that can reasonably blamed on Disney lobbying.

There was one other that also affected Disney's copyright terms, but I can't find any evidence that Disney did any lobbying for that one, and even if they did it wouldn't have made a difference because that one had near universal support anyway because it was part of a major rewrite of US copyright law that did the most of the heavy lifting to make it feasible for the US to join the Berne Convention.
Keep in mind that the purchase of crypto in the US could be a taxable event, and the sell or transfer of it almost certainly is. I would look very closely at the Keybase/Stellar reporting tools and your tax situation to assess the impact before diving into the crypto pool, especially for casual, near-term transactions like this facilitates.
Since literally everybody who has cloned a repo has a full copy of it, and since git is a decentralized revision control system, what on earth can it mean to hold a repo for ransom? The write up even says so: to recover, just push your code back up to our repo.

I really don't understand what they are talking about. It's as if someone showed me a photo of my child and said, "pay me or I'll burn this photograph".

What am I missing?
Or just someone paranoid enough that this would be their standard response if they poll the researchers and one of them says "this could be New York Times big"
Digital Detox Startups?
Hi, I have a few ideas in the "digital detox" space, which basically strives to give back people more quality offline time meanwhile still letting them enjoy the best out there of social media and digital life.

I believe that just as humanity invented tools which let them control nature in many ways, which had unintended effects on the environment, and now governments and people are worried about protecting it. The same will happen for digital life. The connected people are like the coal miners of the past, we're both generating a huge amount of content that eventually gets consumed by another party, as well consuming too much of it. That will obviously will have a negative impact on society and I want to fight against those negative impacts.

Uh oh, soo...

I've been trying to research about this market, but it's quite hard to Google and so on. Does anybody knows Startups on this space or use some product and would like to share? I want to study the market a bit before I start building, so I don't end up with yet another pointless zero-impact side project.

Thanks.
Tokyo underground trains are currently running an interesting campaign to get people onto specific off-peak trains. Such as the 07.31 out of Ikebukuro, and many others.

https://www.japantimes.co.jp/news/2019/01/18/national/tokyo-...

Riders are offered a small reward simply for being on that train. But the size of the reward depends on the size of ridership. More riders, bigger reward to everyone. So there's an appeal to group solidarity.
> Twitter baits developers into their API again

Lol
We were talking about alternative CPU designs and a guy commented on how much of the volume of a CPU is memory these days.

I wondered aloud if it wouldn’t be better for use to embrace NUMA, make the bigger caches directly addressable as working memory instead of using them as cache.
Are 95% of them places you would want to work?

I see stuff like this all the time- 80% of companies don't use React! Fortune 500 runs on Java! It doesn't matter what the majority of companies do. It only matters what the ones you want to work at do.