skysight-inc/HackerNews huggingface dataset:
And unmerged them. See https://news.ycombinator.com/item?id=19912588.

Sorry for the chaos but this was a weird edge case. The marketing maybe went overboard this time?
The point of virtualization isn't to add security. It gives you functionality you just cannot have otherwise, and the cloud enables you to scale in a way that is impossible otherwise. If there are security holes, they get patched and the market moves on. It's not just going to abandon either the cloud or virtualization.
Walmart is not actually using the Stores to deliver, but delivering 1-day from warehouses. Currently cheaper
Tesla screwed up by using eMMC memory (flash memory with an integrated controller) and not disabling system logging. The additional writes cause the flash memory to wear rapidly, which should have been mitigated as this is not a new issue in embedded devices. As the chip is soldered and not socketed, the solution is to swap the entire (expensive) board, and Tesla won't do this for out-of-warranty vehicles and hasn't extended warranty support.

What makes this somewhat egregious is the lack of foresight, as well as the fact that Tesla uses standard socketed SD cards in other modules in the vehicle.
I thought those questions were more to gauge whether you were a victim of human trafficking than anything else. The details they have asked always seemed innocuous enough. Business or pleasure, how long did you stay, stuff like that. Nothing I wouldn’t tell a guy sitting next to me on the flight.
I can't imagine that it would. As long as no one else can execute code on your CPUs, you should be safe
Finding Bayesian Legos
they are explicit ads for fun things, not some ambiguous influencer ad that makes your kid feel bad about themselves.
"the these attacks?" in the FAQ at the bottom
I've heard this story before. Friend of mine runs a small manufacturing business in Canada. Got subsidized by a Canadian government program to import and install a big new modern machine for his shop floor from Germany. Goal of the gov program obviously being to create manufacturing jobs. And sure enough, 3 new and good union jobs required to operate the new thing, and because the new thing is so modern and highly automated, he was able to lay-off 20 other workers it took to run the older machines it replaced...
Did you miss the "for me" part? I highly encourage everyone to install the patch, especially since the more people do the less I'll need it.
> yet in the next breath you boast about how simple it is to steal from the store?

> I see you also didn't forget to belittle the hapless "minimum wage person" who you're purporting to care about.

That's my point. The employees are valuable, even in a pure profit-driven analysis.

> retail stores have to cut staff in order to survive

This is completely false, "surviving" is not the word to describe retailers.
[edit: I finally finished reading everything. It seems like these new leaks can be triggered from JS as they still fundamentally reduce to "read time for memory access"]

For spectre simply having attacker directed control flow was sufficient - so logically almost any scripting language could be exploited.

Same goes for most of the TLB attacks.

Others required native code because they needed to use specific instructions (that aren’t going to be emitted intentionally by any compiler - jit or otherwise).
Haha. Yeah, if you think Intel is bad at security, I’m sure you’ll love Nvidia taking over that role...
Exxon Predicted 2019’s Ominous CO2 Milestone in 1982
Could you not standardise productivity units?
Nvidia AI Enables Low-Data Face Swap for Pets
Probably worth considering the efficiency of converting that stored energy to useful work. Average ICE efficiency is ~20% yielding effective storage of ~2600 Wh/kg.

Roughly an "order of magnitude" more density.

EDIT: Hadn't refreshed the page since lunch. Many have made this point already. Apologies haha
I think the millions of barely paid, two or three jobs at the same time, people would like to have a talk with you.
Anyone ever seen Face Off (1997) with good ole Nick Cage?! Here we go...
I think it would create a sort of a monopoly -- the municipal taxes paying the ad-free tithe. I imagine corruption and backroom deals would result in that cost going up and up over time.

A better solution would be to outlaw ads / billboards, and ticket the offenders to offset the lost income from billboards etc. Municipalities love new revenue streams.
A small company I know of had an issue where an accounting period ended before Jan. 1 for some reason, so people accidentally ate up next year's vacation over Christmas. Every one was pissed, but it got worked out. Accounting is weird because accountants are OCD and there have to be 13 equal periods in the year.
"Biased" still has real statistical meaning. It is unfortunate that people treat these problems with an aim to justifying their virtue rather than creating a product that works (not saying you are doing this, just commenting that often the reaction is about personal virtue rather than actual technical accuracy).

It is not more difficult to make a facial-recognition algorithm work on black people -- or Asian people, to pick another example in the news (iPhone & users in China). Just choose your input data appropriately. All it takes is some work and a model that wasn't trained on Caucasian faces.
New PDF report and export experience for Jira Cloud introduced
> I was just inconveniencing myself.

Oh, you put up the scanners, hired folks to do pat downs, are requiring me to take off my shoes, remove my laptop, etc?

I thought that was the TSA. Would you please stop?

The current approach is making us less safe, and we'd all be better off with the pre-9/11 security framework.

Edit: By "we" I mean Americans. America's enemies would be SOL.
Funny that they say it's saving kids all this time.. as if adults aren't the main consumers of Netflix media.
Obstacle Course
Are you fucking saying that Darwinian evolution is the cause of underrepresented minorities in white collar jobs? What fucking planet are you from?
A lot of reasons - one, we only recently (in academic research time) started using single servers to host services from multiple customers, so the value of these sorts attacks only recently became apparent.

Second, as I understand it, Spectre and Meltdown really started this whole parade because prior to those vulnerabilities, speculative execution attacks were something only academics ever talked about - everyone assumed it would be too difficult to pull off in the real world. When that received wisdom was proved wrong, it probably opened the floodgates for researchers - both in terms of intellectual interest and money.

Also, re: why Intel and not AMD... I think Intel is probably a higher-dollar target due to their dominance in the server market, but also probably because they have been neglecting QC for years... see, e.g., http://danluu.com/cpu-bugs/
These photos are unreal, thanks for sharing.
That's a tough one - considering the blurry definition of "grocery item", they'll end up with a lot of frustrated customers who find they need a premium upgrade for the privilege of buying from Amazon.

For example, you can buy a Philips electric razor through Amazon Prime, but refill cartridges are only available through Amazon Fresh. The result: I made my first online order with Walmart and will probably make many more in the future.
Cool! That's pretty much exactly what I'm imagining, except tablet sized instead of phone sized.
Maybe we should start to seriously question the value of so long embargos. This is coordinated disclosure; if the vendor refuses reasonable coordination (and it seems Intel does, with such delays, and also because it stills silos the security researchers way too much), then fuck them and publish (probably not immediately but certainly not after a year...)

It seems that broadly the same principles have been found independently by tons of teams. Expecting that well-financed actors have not explored that field and/or not yield any similar result at this point is completely insane.

Meaning, given the high level of technicality required, it's even doubtful that the embargo protected anybody; it might be that no attacker exist (and I postulate will ever exist) that will be simply waiting for 3rd party disclosure before writing its own exploits in that class. On the other hand, typical security providers monitoring threats in the field might not be aware for a long time of the existence of such vulnerabilities.

Now here arguably the first counter measures are similar to those for L1TF, so hopefully sensitive operators would already have disabled HT. However, it is not very cool to not make them aware of this additional (and slightly different) risk during such a ridiculously long period.

Also: does Intel has competent people working on their shit anymore??? They know the fundamental principles; which is speculative execution on architecturally out-of-reach data, followed by a fault and a subsequent extraction via covert channels of un-rolled-back modified micro-architectural state. The broad micro arch is widely known, so do they really expect that 3rd party security researchers won't found all the places where they were sloppy enough to speculatively execute some code on completely "garbage" data? Or were they themselves unable to do a proper comprehensive review, despite having access to the full detailed design (and despite a dedicated team having been created for that)? In either case, this is not reassuring.
Most-followed and active publications on Medium
Why not go further and get rid of TV? The problems it creates seem to greatly outweigh any little benefits. And most of the benefits can be gotten with books anyway, which also has more benefits.
Plastic was commercialized 70 years ago. The world ran fine for a very long time without it.
The quip about texting over copper was only in response to a presumption that I was comparing a $75/mo cell phone plan, when I was directly referencing Verizon's landline price in 2019. It was actually $85/mo before I called up to attempt to drop DSL (no savings from that, actually. I'm resisting the urge to plug the DSL modem into the router to play with multihoming, to not further increase the dependencies on this copper).

I'll admit their absolute lowest price isn't $75/mo, but $40/mo for "local only". Which I would actually accept, but for caller ID (a modern necessity) being $20/mo on top of that. The whole setup wreaks of gouging a captive market, which effectively describes why I am in this position.

I do fondly remember DSL from Speakeasy/Covad. My point is most CLECs have effectively gone out of business, seemingly due to unbundling going out of fashion and never being applied to coax networks. Although I will say MegaPath remains a great resource for enumerating all services available at an address, the prices will just be at the business level.
Except this is exacerbated by a very dumb software oversight that is corrected for by virtually everyone in the Tesla software modding community, and in many cases Tesla has not covered the board replacement after the initial warranty expires (which happens just before the estimated failure time).
I will use this when I can hire. BUT there is an interesting angle on this is it means managers need to get enough value out of a 30hr team member.

There are lots of smart optimizations I could use to do that (clear roles, efficient meetings, managing task intensity), but there is this general problem of who is holding the risk in the business.

If you miss a client commitment or the sales people want to blame losing a sale on someone else, the first place they are going to go is the 30hr person "not pulling their weight."

In development, I think most pro developers would be massively more productive if they didn't have to waste away in an office 8h/day. But when you get out into the field where the business is about relationships, which are in turn about perceptions and commitments, in an enterprise environment, I guarantee a customer will say, "nice product, but if you can't demonstrate your ability to get me feature X by next quarter, and this competitor can, I'm going to scuttle this deal."

The salesperson whose commission is riding on this goes back to the product manager and says, "We're going to lose this high profile deal the CEO is watching because your engineers are soft and lazy? wtf?"

The PM goes to the CTO and says, "the survival of the company depends on deals like this, I need your people to burn the midnight oil."

CTO goes to engineering manager, "so this 30hr/week person, get them full time or get them out, we can't have this liability."

Eng manager says, "but they are my best developer! This is how we attract and retain the talent that makes this possible!"

CTO says, "get it done."

Eng manager writes email and starts the manage-out paper trail to 30hr person, "as per my last request to get these items done, we need to improve your performance..."

30hr super-developer receives weirdly formal email from manager, updates linkedin, starts pinging recruiters.

I'd wager 30hr weeks are a great way for startups to get talent they couldn't otherwise afford, but it will be temporary in their growth phase, as the above scenario is inevitable once they have momentum.
I'd venture to say 99.9% of Americans will never find themselves traveling internationally at the drop of a hat, without being able to return home first (!)

It's certainly not happened to me, and I'm in the quite unusual position of being someone who's traveled internationally for business on <24h notice.

In other words, no, I never take my passport with me unless I leave my house intending to leave the country.
And it also sails from one show to the next seamlessly so they have no pauses and have a hard time understanding what we mean when we say, "you can watch 1 episode."
Google Pay Is Hiding Privacy Settings
Wow, a nytimes article bashing Facebook. Now this is a new one!

I for one applaud Facebook for not giving in to these scoundrels. The days of journalism are counted.
Age Gaps and Birth Order Effects
Those Monsanto checks keeping your heat on or something?
Wow, ChromeOS decided to disable hyperthreading entirely? That seems like a pretty drastic mitigation. I wonder if that's just a short term solution or if they're actually planning to leave it that way.
If AR becomes a reality, this will become all the more acute. Public advertising is currently limited by physical boundaries. Hyperreality [0] sets a clear vision for one possible future.

[0] https://vimeo.com/166807261?ref=em-share
Tesla won’t do this for free for out-of-warranty vehicles.

Replacement cost of the entire board is unfortunately high at around $2,700.

[1] - https://teslamotorsclub.com/tmc/threads/2700-to-fix-mcu-migh...
Url changed from https://zombieloadattack.com, which points to this.

There is a home page about today's vulnerability disclosures at https://news.ycombinator.com/item?id=19911715. We're disentangling these threads so discussion can focus on what's specific about the two major discoveries. At least I think there are two.
> Humans don't naturally optimize down to the byte level,

Who said bytes? You did. Other commenters including myself have mentioned megabytes (ie. six orders of magnitude larger). Nobody said bytes AFAICS.

> When and how often should human hours be spent to optimize machine hours

Oooh, perhaps I can help! Being as I'm currently trying to shave 200 to 300 milliseconds at a time off one stage of a simulation, taking 2 to 6 hours for each optimisation. So 4 to 5 orders of magnitude more programmer time than machine time. That way larger models can be used, and all of multiple multiple sites will benefit, and less of their time will be spent waiting (see disclosure below).

It's not actually that difficult an inequality to solve, except when haystacks of JS and advert crud are pushed on us by advertisers etc. whose money is made by wrecking the commons for their profit so don't want to know.

“It is difficult to get a man to understand something, when his salary depends on his not understanding it.” - Upton Sinclair

disclosure, I'm actually doing this unpaid as I'm getting back into work after illness, however if I wasn't there they'd get someone else in, paid, as it needs doing.
Well, The salary difference between FAANG and most companies on this list easily 100K+/year. And that level, they can ask me to jump through multiple hoops and I will be ready. Its a fairly rational decision on my part.
I would disagree.

My wife and I will have different payouts for Social Security, because the younger have been stolen from. Every year that the federal govt adds to Social Security is one year less I get. And that matters to my housing, quality of food I eat, medical help, drugs I need, and basic quality of life.

https://www.ssa.gov/planners/retire/retirechart.html

I pay in the same percentage as older, yet they can retire earlier and get their money. And given my family proclivities of massive heart attacks in late 50s/early 60s, I'll see none of it. And I'm diabetic - this country cares little to none about health care... How many "supplements" will I need for medicare when I'm close to retirement age?

Where I'm sitting, I don't have that much to look forward to, given how much I've (forcefully) paid in. And I have little trust in the chuckleheads in office the last 20 years - since I've been able to vote.
Lack of experience in this case being, "Haven't blamed problems on the same things as I have."

Stances like yours sit in defiance of so many thousands of people who've been able to extract value from an ORM. Maybe the issue you're having is specific to you, not the problem.

Are they perfect? No. Are your incredibly limited set of experiences universal? Also no.
Most decisions aren't A or B, they're I want A, but B is much safer/easier/etc. So the coin flip method (you'll make up your mind while it is in the air) doesn't help since you already know what you want. Pros and cons lists don't help since you already know them. Probability multiplied by reward doesn't help much, since you'll really only make the decision once, not continuously.

The only sure fire thing I've found helps is you imagine the realistic worst possible case scenario if you decide on doing thing A (the thing you really want) and if you can live with that, do thing A.
Bigger is definitely not better for this kind of stuff at least as far as team sizes.
Blocking protein curbs memory loss in old mice
Yes, but this is offset by YouTube. My children are watching full length "unboxing" and (sponsored?) toy videos. -- Along with the worst "Disney" live action; bad music and they might be confused for NSFW.
No, you would not get a real funny look. I've traveled internationally on business, and whenever I hear anyone (including myself) asked to travel, they'll ask if you have a passport or if you have a current passport. Yes, working in tech, in a major metro city.
There's some pretty egregious examples of product placement in that list, but some of them aren't so bad. For example, Bruce Wayne driving a Lamborghini Murciélago in Batman. On top of showing everyone what a rich playboy he is, murciélago is Spanish for "bat".
One unintended consequence for one person is a disaster in the life of that person. And you're right; the genie is out and about.
Just because you didn't need uplifting doesn't mean others don't need it. Your "bootstraps" argument is such BS.
Commentary by Chromium team: https://www.chromium.org/Home/chromium-security/mds
I left out some important details in the above explanation. So here is part 2...

Feynman discovered another very important item, the path integral formulation of physics. This was important for his derivation of Feynman diagrams and also it is a good conceptual tool.

Think of basic quantum mechanics and firing an electron through a double slit at a screen. In quantum mechanics the eletron does not have a single trajectory from the gun to the screen. Rather, it takes all the trajectories in parallel, like a wave. We can add the contribution as if the particle went over each possible trajectory and this is the same as treating the electron as if its position was given by a propogating wave. This sum over possible histories is the interpretation of Feynmans path integrals. And it is a nice way to think about quantum mechanics - multiple things are happening in parallel.

Taking the example in the video of two electrons scattering off each other, each Feynman diagram represents a possible history for the two particles, including their trajectory and any interactions between them. These interactdions are drawn as a connecting line, which is a "virtual particle" being exchanged.

More specifically, the diagram doesn't represent a single history, rather it represents all histories that have a ceratain topology, meaning here for example one photon is exchanged between the electrons. (There is an integral done to add up all the different ways this can happen.) To do the full calculation, there are many diagrams that must be included. As it is a perterbation theory, you can choose to get more accurate by include more diagrams. The expansion parameter is basically a vertex on the diagram. The more vertices you include, the more accurate you will be (assuming you include all diagrams with that number of vertices).

So basically the feynman diagram is a bookkeeping mechanism to account for all possible histories of the particles in the interaction (electon scattering here). We sum up the contribution from all these histories to find out the quantum amplitude for this scattering scenario. This is exactly analogous to adding the contribution from different paths to fine the amplitude (~probability) for our electron in the double slit experiment hitting a particular location on the screen.

To get to this intuitive result mathematically, the perturbation expansion and renormalization mentioned above are both involved.
That link is awesome and could be its own HN submission altogether
Wow, ChromeOS decided to disable hyperthreading entirely? That seems like a pretty drastic mitigation. I wonder if that's just a short term solution or if they're planning to leave it that way indefinitely.
I didn't argue all math is useless. I argued a lot of it is
Fair enough. I (20s white guy, mostly asleep) probably don't fit the 'needs to be questioned' profile all that much. (And I'm not certain I'd have remembered answering a basic question like 'why were you travelling' anyways...)
So the average 2-5 year old spends 1600 hours a year watching tv, the WHO World health recommendation of TV for small children is one hour less TV is better.

Here is the WHO guidelines
https://www.who.int/news-room/detail/24-04-2019-to-grow-up-h...
Hey everybody! Let's all look at pictures of burned children from 1991!
I do have cameras that upload to the cloud; the system for interfacing and finding someone with that data (at SFPD) is abysmal; imagine looking through thousands of faces to find the perpetrator... Now imagine if technology could help solve the problem.
The stat is that something like 90% of the U.S. population lives within a 15 min drive of a Walmart.
again, it depends on your definition of liberty. I take a hardline stance. to confirm: this is absolutely not recommended for everyone. The demeanor of your CBP officer shifts quite unpleasantly when you decide not to answer them. They will begin to lie to you about the events taking place, as its their job.

This information is also valid for CBP stops inside the US while traveling by automobile. Your passport or drivers license should be all that is required. No questions.
YouTube with the "parent firewall" is an awesome resource. "Hey, Dad, what other kinds of carnivorous plants are there?" "Give me a sec here... no... no... no... ah, National Geographic, that'll work." "Hey Dad, what does the Earth look like from the space station?" "Hey Dad, what's a lemur?" Amazing tool.

YouTube with kids wandering around on their own is scary.
Well, I didn't see any bubble wrap in that video :) My recent return and its replacement had zero protection between the book and the cardboard.