skysight-inc/HackerNews huggingface dataset:
In short:

* Core and Xeon CPUs affected, others apparently not.

* HT on or off, any kind of virtualization, and even SGX are penetrable.

* Not OS-specific, apparently.

* Sample code provided.

https://www.cyberus-technology.de/posts/2019-05-14-zombieloa...
The Norton and McAfee site-seal shakedown
Asking HN - I run a successful ecommerce site and have run across what I perceive to be a "scam" involving antivirus/security companies.

First, it was Norton Antivirus flagging our site as "dangerous" and throwing up a warning to customers that accessed our site. When we contacted Norton, they suggested we enroll in their trusted site system and place a seal on our site. I escalated, and through a personal contact got our perfectly-safe, SaaS (Shopify) hosted site whitelisted.

Now it's happened with McAfee and we're going through the same process. Has anyone run into this before? I believe it's a deliberate sales attempt - there's nothing on our site besides normal ad-tracking (Google Analytics, Facebook Pixel, etc).

Would love to hear any thoughts on this topic.
Because that's not what science is. Science is the study of physical objects via empirical experiments. If you're talking about morality or ethics, those aren't physical objects and you can't make empirical experiments about them.
By the way the whole idea of passports is barely a century old and was a temporary measure for WWI.

Beware scope creep.
You can absolutely operate (and even operate well) without understanding the formalisms involved in theory, but understanding them opens up a new level of fluency.

I don't need to know how to name common progressions or modes in order to write a song, but if I have my theory down well enough, it's easier to transpose to a different key, or have ideas for chord voicings or variations on the progression that'll enrich the piece (and as far as I can tell, the theory involved here is a form of mathematics).

I don't need to understand the mathematics of waveforms in order to twist a knob and get a different sound and make an aesthetic judgment, but having a model of how waveforms works in my head to correlate with specific sounds helps.

This is what math does. It helps take ad-hoc implicit models -- which people (and now to some extent ML algorithms) can often get by on pretty well -- and move them into explicit formalisms, often providing new power and insight in the process.

The fact that people can build internal models that make them some degree of effective composers/performers implicitly isn't a particular rebuke of the idea that a significant portion of what we call music can be well understood as mathematics.
> traditional live linear and VOD (video-on-demand), have different audiences with different needs

{{citation needed}}

I found myself enjoying live Tennis on Amazon Prime, and it serves a very similar purpose to me as watching their vod shows
Brand marketing towards children is a real and effective thing. There was a study done on wrapping basic food (carrots/apples) in McDonalds branding and kids said it tasted better [1]. Always seemed scary to me.

Glad my kids don't have the same amount of brainwashing as I did. However, we have our own generational problems to deal with, like YouTube "merch" begging, clickbaiting, etc. Now that I think about it, maybe I'd rather they'd see TV adverts...

[1] https://www.cbc.ca/news/kids-think-food-in-mcdonald-s-wrappe...
> Is each individual catalog not cheaper than some massive catalog subscription?

No, individual streaming service prices are mostly constant or edging up over time as catalogs shrink and more content owners set up their own exclusive siloed services.
I thought so too, so your comment prompted me to look it up. Seems like the enforcement of this requirement will begin on October 1st 2020.[1]

[1] https://www.dhs.gov/news/2019/04/04/tsa-reminds-travelers-re...
I would rather see the first one. I'm no expert on software development, however I've seen that as time progresses new requirements are added. Cross-cutting requirements are specially hard to implement on your second option, imagine a request id has to be sent.
My 2c anyway
It matters for websites, but only after fixing many other problems with performance and usability.

For an individual user, it doesn't matter to me if I use a website a bit less because it's a little slower. That might even be an improvement, since I was probably using the Internet too much anyway.
I think he's talking about Berlin.
Intel Reveals New Spectre-Like Attack, Advises Disabling Hyper-Threading
I suspect that Dave's pay was not proportionate to his skills
I don't think that anybody can know whether this is true, since exploitation leaves little evidence. Even before this is witnessed in the wild for the first time, you can't really know which secrets of yours have already been exfiltrated.
Not exactly a hall of shame, but you might have a good time looking through https://tvtropes.org/pmwiki/pmwiki.php/ProductPlacement/Live...
I got the impression they fly international and didn't see we're talking about domestic.
The link wasn't paywalled when I first visited it but when I try to go back now it is, must have hit a free limit I guess.

Incentive schemes are literally other people's money. The savings are reminiscent of a store putting the price up 50% prior to a 33% off super sale. Everything looks like a good deal when compared to inflated prices caused by market dysfunction.
If the counter party accepts it then it is the contract. You can do this with any contract, to include phone carriers and credit card companies.
> Does it really matter to see all those solar panel farms if the end result is they were not much helpful?

Sure, putting them further into the dry south would certainly have improved yields, e.g. putting them into Spain or even further south like DESERTEC envisioned. And still, they produce a non-trivial chunk of German electricity now. Not sure what you are suggesting, compared to stuff like fusion, we actually know that solar works. Also, there is a political component of having them on own soil: energy independence. A lesson learned in the oil crisis.
I also get a warm fuzzy feeling from solar panels and wind farms. But we are losing our planet to climate change, and warm fuzzy feelings do not help. Lowering CO2 emissions does.

Germany could have had zero CO2 emissions by now, if money were invested into nuclear instead of the current efforts. The declaration to move away from nuclear power was misguided and will be regarded as a huge error in the future.
Same, I encountered that problem maybe a dozen times with the Atlantic Ave post office when I lived around there from 2009-2014. Sad to hear they haven't improved since then, but I guess I shouldn't be surprised!

Ironically, after moving a few miles northwest to the NJ side of the Hudson, my preferred shippers have completely reversed. USPS is by far the best option here, since they have lobby keys to apartment buildings and leave packages with no problems at all. (Even though USPS clearly has lobby keys to deliver non-package mail in Brooklyn too, somehow their package delivery people don't have them?)

Meanwhile, Amazon's contractors have become the worst option for me. Frequently they'll silently leave a package with a neighboring building or business, with no indication whatsoever that they've done so, and with no initial attempt at actually ringing my unit's intercom. Or sometimes they'll call my cell phone, but again without ever trying the intercom first. After a few years of this, I gave up and cancelled Prime.
> I kind of wish GitLab would implement Mercurial support

Hi! GitLab employee here. Mercurial support has been a hot-ish topic internally. If you want to weigh in then please comment on this Issue, since Issue interaction plays a big part of how we prioritize
https://gitlab.com/gitlab-org/gitlab-ce/issues/31600

(edit: I'm an idiot I should've read the full thread first since someone already linked it. gonna leave it up anyway)
I kind of liked how Amazon's Alexa device was used in Mr Robot. It actually got to provide plot driving insight into Dom's psychological state.
In Georgia they’ve been requiring a finger print in some cases for some time. Not all fingers but I remember my index and/or thumb being scanned. I let my license expire and had to go through the joys of trying to prove my address and other stuff like the finger scan.
Yeah, normal ordering and contractions, if we're expanding the fields in terms of such operators when doing canonical quantization using Fock spaces. There's a lot of stuff going on there. The fact that we can draw nice pictures representing the terms of a perturbation theory doesn't mean that you can skip a regular course on QFT to understand what practitioners mean when they use them. Again, not stressing this while showing tree level Feynman diagrams as if they were straight representations of particle interactions may give wrong ideas to the unsuspecting readers.
Pretty nice place for that, yes. Also to store all the nuclear waste. And I mean that in all seriousness.

As a side note, I once saw an emergency plan for the nuclear power nearby where I life (it is still live). Quite a shock to see that in case of a bad enough emergency nobody would have bothered to evacuate me to begin with. I get the logic, but still kind of shocking.
Love the emoji domain :)
Here you go: https://www.talkingpoliticspodcast.com/blog/2019/160-david-k...
>... and -I assume- expensive supply chain.

Gasoline is literally the cheapest liquid sold at many gas stations -- in many places cheaper than bottled water.
A Single Component Can Brick Older Teslas
Yes, they were that bad and were getting worse. By the late 90's, most ads directed at young children were reminiscent of a bad acid trip. Flashing lights and colors, non-stop quick-cuts and people literally screaming over and over for you, a child of 6 or 7 years, to BUY THE THING! YOU GOTTA HAVE IT! COLLECT THEM ALL!

It was absolutely terrifying and we should all be collectively ashamed for allowing it to persist and to happen in the first place.

Here's a random example I just found on YouTube (first 30 seconds): https://www.youtube.com/watch?v=DXzR3-w3vEQ
> I mean, is it bad? This is everyone I know back home. They go to work, come home, eat, and watch TV. It's a life.

If you believe your origin and your destiny are agent-less and meaningless, then it makes the most sense to call everything in the middle meaningless also. Thus - eat, drink, watch TV, have fun till it's over. I can see that making sense.

But if life and its pursuits have any shred of meaning, then I think it's OK to say they could be doing better things with their time.
I had a Software Engineering contract at Verizon around the time Fios was starting up.

Verizon went through/is still going through the same thing.

The companies are a bit sketchy but the whole mismatch in workers is a real thing. They had lots and lots of unionized 55+ blue collar guys who couldn't even login to a computer and had near zero interest in learning. It always felt like the union was trying to fight for the status quo as opposed to trying to facilitate moving forward.

So it gets to look real attractive to try and get them to retire early and hire some young guy since the job requirements have switched to needing lots of computer skills.

The whole tax part.. that's just standard "Be as evil as possible." Given the whole "Be as evil as possible part" the union does become very necessary.
OnePlus 7 Pro Review–The fastest, best-designed, best-value Android phone
Eggo waffles >> https://strangerthings.fandom.com/wiki/Eggos
> We need scientists from diverse backgrounds in all senses of the word—race, ethnicity, gender, class, ability, geography, etc.

I note a diversity of politics isn’t included.
Yeah, I'm going to call bs on this one. Perhaps they are including kids who have to have an ipad in front of them at every meal and every walk in their stroller?
The overview page, https://cpu.fail/ , is on Hacker News as https://news.ycombinator.com/item?id=19911715 .
Nothing can fit a criteria someone makes up on the spot in response to counter-arguments.
"Whenever you’re called on to make up your mind,and you’re hampered by not having any,the best way to solve the dilemma, you’ll find,is simply by spinning a penny.No—not so that chance shall decide the affairwhile you’re passively standing there moping;but the moment the penny is up in the air,you suddenly know what you’re hoping."

A friend introduced me to a related version of this that works pretty well: toss a coin, see what result comes out, and then decide if you are happy or disappointed. If you still don't care, go with the coin. Or don't; it doesn't matter.
Fortnight is a watered-down online-only GTA V Online clone that's bankrupting a generation of kids who aren't smart enough to play better games. There's no way that keeps going for 20 years.
Outside you get to enjoy low-CO2 air of 415ppm.

Inside, in an 'insulated' and sealed apartment, CO2 levels will exceed 1000ppm in a few hours, which has negative consequences for human cognition and sleep quality.

I'd recommend buying a CO2 monitor for your home and keep a window slightly ajar permanently, and at least airing out your house/apartment for a few hours each day.

This is another major problem with fossil fuels - with higher atmospheric CO2 levels, it becomes harder to ventilate buildings. We need to bring more external air in to achieve the same effect, which also means higher heating/cooling costs.
Unless ORMs are 1:1 compatible with SQL features, some developers will inevitably be required to write SQL by hand.

Lots of developers are happy to leverage stored procedures and let the database do heavy lifting to reduce network traffic (or whatever reason). Others prefer the database to simply be persistent storage for data structures and leave the logic to their Java/C++/PHP code. One of those camps will never be able to use ORMs, and the other may live by them.

It stands to reason that more advanced SQL developers will leverage more advanced SQL features, some of which aren't available in ORM implementations.
I've never really understood "Go with your gut", because my gut is still my brain.. I would be curious if individuals have a process for thinking. A kind of structured thinking, instead of all abstract. I've noticed that it's really important giving my abstract thoughts a solid form, either by writing them down or speaking in a conversation (even to myself). Helps a lot in refining them, and figuring out what exactly am I aiming towards.
Sorry for being naive. Are these kind of CPU Securities vulnerabilities new? Why it is in the past 20 years we have had close to zero in the news ( At least I wasn't aware of any ) and ever since Spectre and Meltdown we have something new like every few months.

And as far as I am aware they are mostly Intel CPU only. Why? And Why not AMD? Something in the Intel design process went wrong? And yet all the Cloud Vendor are still buying Intel and giving very little business to AMD.
Amazon Fresh is not full vertical integration, merely seems like Costco's ordering program or similar.

Amazon Fresh used to be quite popular in Seattle a half decade ago, but I barely see their empty containers anymore. I think Amazon saw their volume falling with
Amazon Fresh and was threatened by their vendors and wholesalers with higher prices, thus purchasing Whole Foods to attempt to stabilize their cost on goods.
This might help. Sounds like they are trying to scam you.

Do you have an SSL cert for your domain?
Where are you hosting your website?

edit newer URL:
https://www.goinflow.com/trust-seals-ecommerce-tests/

https://www.howtogeek.com/199240/all-those-seals-of-approval...
https://www.google.com/ has 2.76s load time for me. Gmail 6.33s. Amazon 1.41s. Aliexpress 2.69s. Seems like entire Internet is slow?
I think we should be precise here.

Saying the march is part of the problem does not mean that the lobbyists are not also part of the problem. It also does not mean the march is a _root cause_ of the problem.

It just acknowledges that the march is a part of the politicization of science, which it is.
If the economy is doing so well why haven't non-tech wages been increasing at a faster rate?
My kids have literally zero disposable income. I'm not saying I enjoy ads or that we need more, but HN goes really over the top against advertising.
I for one don't agree about hours in general, be it 30 hours or 40 hours per week. I like to think in goals, do we have to finish X this quarter? Break down the task into segments, and break it down more into weekly sprints. You can then estimate what tasks can be done for the week without taking into account hours worked. The only caveat is you need an experienced engineer/product that knows the complexity of the feature and/or codebase. We've found this has let to happier employees since the work is variable with some weeks being heavy work, and some light so there's a good balance of stress. You are also able to manage your own time so if you work better early morning or late at night, you can do it as long as you're productive. This also opens up more opportunities for you to use your "regular" 9-5 time to workout or go places. For example, you'd be surprised on how nice it is to go shopping in the mall on a wed at 1pm or watch a movie mon at 10am.
https://cpu.fail/
Dollars for Docs
That's over an hour of commercials per day? WTF? That's a LOT of screen time.
They’ll save you from commercials but they’re not afraid of producing shows that are lower quality than some of the “good” commercials.
With 1 in 8 Americans living underneath the federal poverty line, and 10% of employed American adults facing food insecurity (i.e. hunger), it's arguably not the case that the economy is booming.

As for what you can credit the tax cuts with, well, here you go:

https://www.marketwatch.com/story/its-official-the-trump-tax...

The tl;dr: share buybacks and corporate profits are the biggest consequence of the TCJA, not employment.
I encourage you to google it. People get arrested all around the country for letting their kids play in the park across the street, ride their bike around the block, sit in the car alone at the bank, etc.
Lol, as somebody that gave up of research, I can just tell you: try to do any research where the theme goes against the so called left-tolerant politics. You won't be able to do it.
I think you hit the nail on the head - and I suspect you'd find out that most of these 'job losses' are mostly attrition thru retirement, not actual layoffs
Is this true for all drivers? When I moved to California and got my driver's license I don't remember having my thumb print taken. I've even considered it a badge of honor that I've never given my fingerprints to the man.
Keep him away from YouTube then. They have an outbreak of "kids shows" designed to corrupt and traumatize the minds of children.
> I'm always happy to discuss specific cases

If so, then maybe you can explain why you didn't change "Israel’s Beresheet Spacecraft Moon Landing Attempt Appears to End in Crash" and "A private spacecraft from Israel will attempt a moon landing Thursday" to "Private Spacecraft Moon Landing Attempt Appears to End in Crash" and "A private spacecraft will attempt a moon landing Thursday" respectively?

I think your attempt at reducing nationalistic flame wars is very misguided, because I want to read what people think. If HN readers want to flame each other then I would like to have the chance to read the flames even if I'd likely scroll past them. But if you are going to do it, at least be consistent.
It is that way.
See the sibling comments, passing binary refs that refer to Matrex blobs is pretty much what the Matrex library is doing. The refs returned are in a binary format (not sure exactly if it's just the C memory representation or based on Matlab's `.mat` format). It'd be possible to say utilize Elixir macros to build up an AST for common math formulas that could be passed to the native maths library for example which could be pretty fast.
A company that worries about "how to craft a brand" that appeals to engineers automatically falls a few notches in my estimation.

I want to work for a company that does interesting things, provides good support for engineers, behaves in a responsible fashion, and treats their employees well. Branding is irrelevant.
> yet energy hungry industries are exempt from it. And they feel the effect: because of the growing effect of the renewable energies, they now pay one of the lowest electricity prices in the world.

Not sure about the whole world, but Germany definitely has one of highest prices for elctricity in Europe:

https://ec.europa.eu/eurostat/statistics-explained/index.php...
I've been enjoying YouTube Red/Premium for about a year and a half but I'm kind of considering cancelling it to go back to using an adblocker for YouTube's embedded ads and supporting specific creators via Patreon or something. The majority of the channels I watch embed their own ad-reads into their videos now so the ad-free value proposition for Premium is getting much weaker for me.
> once the familiarity wears off you can't help but see how psychologically damaging and hostile they are.

Same thing happens to me with TV news. I used to watch them, but now, everytime someone else is watching, I can't help but see how much they manipulate the content to their convenience, and how much they blatantly lie.
Antitrust theory as properly envisioned handles the case of low/free prices just fine. It’s only the warped and perverted version of antitrust theory advanced by Robert Bork and subsequently adopted by the US Government, where prices are the only measure of consumer harm, that can’t deal with it.

Fortunately the wheels are starting to turn to improve the situation— Lina Khan’s article in the Yale Law Journal about Amazon’s anticompetitive behavior has been an earthquake in the law world and we may be in the early stages of shaking off the Bork madness.
Note that Spectre definitely affected AMD chips and in general these sorts of side channel attacks based on speculative execution are extremely likely to be effective against any chip (including AMD manufactured ones) that employ speculative execution though the precise implementation might have to be jiggered a bit.
MDS vulnerability: What it is, why it works, how to mitigate it
The one!
Uber Movement shares anonymized data aggregated from over ten billion trips
At least you can fill a hard disk with content downloaded from YouTube quite easily, and restrict selection that way.
The article says otherwise.
Reminds me of: climate change, American government, inequality & the flaws in capitalist systems, using free internet services (fb, google), sedentary lifestyle and poor (processed food and excessive refined sugar) diet.
OT, but really: Since when does a public holiday (I believe these are disclosed in advance in documents you can acquire in an office-supply store) disrupt payroll operations so badly that a paycheck is skipped?
>It was strange not having something on the horizon.

But that is where the sky is supposed to be! ;)
The security concern is remote code execution via JS, and sharing processor time with other people you don't trust, right?

It should be up to the VM-as-a-service and browser vendors to flush the cache properly.
One solution is to stand outside the theater and go in after the movie starts. You can have someone message you when it’s starting or listen to when the advertisements finish.
> America once aspired to something other than "papers please".

If you're reading this, I highly recommend the game Papers Please[0]. It's not... fun per se, but it is engaging and very interesting. Definitely worth a try.

[0]: http://www.papersplea.se/