skysight-inc/HackerNews huggingface dataset:
Submissions of lists, like this home page, lead to lowest-common-denominator discussions. People focus on what the list items have in common and its gravity prevents specific items from gaining liftoff. Specific discussions tend to go deeper than generic ones, so we're going to unmerge these threads and have a separate one for each major disclosure:

Zombieload: https://news.ycombinator.com/item?id=19911341

MDS: https://news.ycombinator.com/item?id=19911277

This will take several minutes, so if you see weird incongruities or disappearances, hold your fire.

Edit: Ok, I've done as much of this as I'm going to do. If you notice anything wrong, can you let us know at hn@ycombinator.com so we can fix it?
They haven't even collected the form from me the last two times I've gone through re-entry.
Wait. Do they have a fix but the fix is replacing the board and not the bad chip?

Is Telsa not fixing things or did they just use something that had a short life span? Not sure why I read this article.
Because all a benchmark tells you is the result of one use case. It's not an estimate of what your use will result in. It's basically a sales pitch. And sadly, upper management falls for it all the time, often without an evaluation period or even spitballing it for a week with the teams that would be using it. Tons of factors will change the result for a particular use case, regardless of how "normalized" the test tries to be (especially considering most are designed for high-load high-performance high-scale scenarios, which isn't the average real-world use case; most people just have unoptimized queries, or a shit legacy stack, or they expect to eventually have a big use case and were told to find either the fastest or cheapest solution, which may not even be in AWS to begin with, and so on...). The AWS cost is just another benchmark, so it's just as much a lie.
Look up Singapore, and how disastrous it is.
Why does this need a blockchain in it? It seems to me that you are adding steps that amount to “keep your data safe and nobody can have it”.
One that does not serve the interests of any one political faction.
So you're saying this a pretty good investment of my time, right? On top of my salary, I can effectively make an additional $120k/yr? You know the opportunity cost argument you're making is false, don't you? You're arguing that I'm risking doing something else while doing this and there's a cost associated with that risk. In reality, I risk nothing because I'm a salaried employee whose time isn't 100% filled with must-do tasks. If that were true, the time you spent replying would be actually be worth even less than the time I spend getting Amazon credits because it has no return on investment. Or are you saying I should make this my full time job?
A solution for the pain of a few should not have negative affects on the rest. If you have your house broken into them I'm sorry, but maybe put up some cameras that upload to the cloud. If something happens this can be handed over to the police and they can run their searches. Stopping privacy from everyone should not be considered a solution. History shows that ther government likely doesn't have the best interest of the people and will try to get away with anything they can so it'd only be a matter of time before this is used to against the population. Before you know it, it'd be discovered that these cameras also "unknowingly" also had mics and "accidentally" were recording everything.
The most jarring statement to me is that "kids 2-5 spend an average of 32 hours per week in front of a television set." That seems quite high for that age group. As a parent, I try to limit my kids to 2-3 hours of media per day on weekends and 0-1 hour on school nights--including TV and video games. Most of their screen time these days is a combination of Netflix and Xbox. I don't count Scratch programming or Khan Academy as screen time.

I try to find a balance, knowing that I grew up watching Saturday morning cartoons and playing games on Apple II, Commodore 64 and NES.
You have no conversations that'd you prefer not be sold on the darknet? With friends, family, therapists, doctors, lawyers, consultants?

No pictures of your kids that they might not want spilled into a searchable database and used for machine learning to sell them things later in life?

No private or symmetric keys which might be used to impersonate you or eavesdrop on you later?

No in-progress documents which you aren't ready to publish?

No conversations with political allies that you might not want the state to peruse?

No intimate conversations with sexual partners?

If that's true, then I think you have a very different attack surface than most people. I think most people are willing to take a small performance hit not to open up access to much of the data that goes across their CPU, which is not an exaggeration for the combination of attacks which have been published against Intel CPUs over the past 3 years.
I'd say if a kids show is not on public television it most likely is a commercial for a toy or a vehicle for a number of other ads for unrelated toys.

And even for me and my five year old, there is plenty of Danial Tiger gear out there to buy! The difference is they make and sell the toys but they don't advertise them during the show. It's not much but that subtle difference is what allows me to sit down and watch 30 - 60 minutes of these shows a few times a week with her.

As others have mentioned, even NetFlix "sells toys", just not overtly like network TV does. But just watching PJ Max, Trolls, etc. makes my five year old grand daughter want everything she sees when we go to any store that has these shows' stuff for sale.

Both of them are still better than numbing their minds with 8-12 minutes of intense, flashy commercials for every 30 minute show they watch though.
Amazon does own a last mile delivery company, Amazon Logistics (AMZL). For deliveries to my house (Seattle area), AMZL was so bad that after many complaints, Amazon offered to block/disable that delivery method for my account.
> - Public television shows (PBS) stuff is so lovingly created and charming. You can really tell they had experts and creatives work side by side to craft positive stories. Even if it's not particularly exciting.

> - Colorful garbage. It's a lights and noise show, with huge focus on licensing. Cartoons of my era are particularly susceptible to this (Dragonball Z, Yu Gi Oh, Transformers, etc).

What PBS shows are you imagining? Clifford? Sesame Street? I never thought they were targeting the same demographics as the 'colorful garbage' like Yu-Gi-Oh (early elementary vs. late elementary/middle school). Also a lot of other popular shows (like Spongebob) seemed more like colorful garbage to me than things like Yu-Gi-Oh that you lumped in there.

And what about classics like Tom & Jerry, Roadrunner, etc.? There wasn't much particularly educational or colorful or really anything about them but man now I'm tempted to go watch them again.
You need a Pihole in your network. It is excellent. It’s also handy for sorting out pet peeves (though does impose them on others in your network).
Even just in my own personal life, I've heard similar stories from more than one person. I've also both heard and personally witnessed with my own kids them trying to manipulate the primary TV of the house like it's a touchscreen, so I'm sure that's a story that's independently happened many hundreds of thousands of times by now, if not millions.

(I don't have a cute story, though. They just tried it once, I told them it didn't work that way, please stop smearing the TV with your hands, and they stopped. No cute questions or comments about the TV being "broken".)
The biggest highlights from Google I/O 2019
I know. But I don't see how watching a "Let's Play" is going to get you much closer to those experiences
What value is in that mathematical papers though? Most of it is correct within itself, but useless for anything real world and always will be.

There is only so much labor we have as society. We need to make choices as to what we do. If everybody was willing we could dedicate society to just math. People can sleep under their desk at work, eat the mass produced cafeteria food, never watch sports, just work eat sleep. A lot of mathematicians could be funded with the leftover money (remember they are living the same life so their cost of living is tiny - more than half our population could produce more theorems).

The above is obviously Reductio ad Absurdum. However it brings out the point: we as a society have already decided math isn't the most valuable thing. We are already drawing limits, the only question is where.
It should read:

> ...said it works “just like” in PCs

The number of mistakes in the Techcrunch article is atrocious.
Can you, really? How do you opt out of the government giving the original data to airlines in the first place?

https://twitter.com/jetblue/status/1118607244290084864
Uber’s poor IPO, a wake-up call for Silicon Valley:‘They just waited too long’
I believe the difference is the concept of "uplifting."

Given two people, one who had money and therefore lots of high-quality STEM education, and another who does not have money and struggling to acquire a STEM education while also dealing with poverty (and the poorer quality education that comes with it), yes, probably the rich kid will do better at their job sooner.

But there's nothing inherently preventing the poorer kid from doing just as good, if not better, a job. Get them on the job, help them deal with the obstacles, and they're just another person, and across populations that means equally likely to "perform" or "succeed." Meanwhile, you also have the advantage of their unique cultural perspectives.

You can have it both ways, the question is whether you take that information and say "fuck it, don't hire poors, they didn't get as good of an education and therefore will preform worse," or you say "if we invest time in this underrepresented culture, we may be exposed to markets we didn't even realize existed."
Germany famously counts biodiesel among renewables (technically correct), which certainly doesn't help in reducing CO2.
Perhaps you did not eat meat, but you almost certainly ate animal products of some form (eggs, butter, milk, cheese, yogurt, human breast milk or formula when you were an infant, etc.) which is all the animal-based foods you need to obtain the animal nutrients your body needs.

All human diets come at the expense of other animals and creatures. This is a natural part of life and shall always be so. It is false to beleive that there is a choice to make between slaughtering animals for food and peaceful coexistence with nature/animals. That's not an objective accounting and not reality-based.

For plant-based agriculture, first you take a plot of land away from the wilderness and native animals. Then you clear the land, purging its native plants (which are inedible and toxic to humans) and ground-cover, insects and any pest animals (e.g., birds, woodchucks, racoon, fox, rabbits, mice, to name just a few). Then you plant monoculture agriculture crop, which over time depletes the natural soil, worms and microbes of natural nutrients and requires increasing amounts of chemical fertilizers and pesticides. Animal pests continue to be killed as the crops mature, and then also by harvesting machinery at the end of the season.

A dramatized question: Would you rather humanely shoot a single steer (or goat/sheep or similar ruminant) which you could then consume over the course of a year, assuming you make use of the entire animal? Or would you choose to avoid meat, but in the process of eating an all-plant-based diet kill dozens or more wild animals and countless smaller pests and insects while disrupting local flora/fauna/ecosystems and depleting the soil?
It isn't. Some people just think "marketing" is the root of all evil, when done right, it's actually just effective communication.
Hyper threading was an intel stop-gap reaction to the athalon64 x2, which was a REAL dual core, to buy them time while the pentium D was created and later laughed off the market. We finally got an "OK" dual core from intel when they decided to hack pentium 3 cores together and call it the Core duo, and with the core 2 duo they finally caught back up to AMD (by hacking amd64 instructions onto the P3 cores) and were able to start taking market share back. Nothing interesting happens between then and threadripper, but now we would be back to eating popcorn and watching the rest of the fight..... but the fight is over and everyone is over in the other arena watching arm and webkit winner-take-all style demolishing the incumbent platforms.
I think the general thrust of your argument has validity but it is weakened a bit by a poor example.

None of the things that have happened, post deregulation, were impossible to do before, but there was no incentive to do them. A copper line, using either ADSL or SDSL signaling can do anything a wireless signal can, text, data, voice, all at the same time.

What deregulation did was two fold, first it forced the legacy phone company (Bell Telephone, and then the broken up "baby" Bells) to provide access on demand to the copper line, and it allowed private companies to then provide services over that line. New companies were created like Copper Mountain which, under the new options of deregulation, converted "POTS"[1] lines into DSL lines with additional features. The "baby" bells, had to upgrade their networks in order to compete. As part of that upgrade, they needed much more network capacity between their central offices (one copper pair could now host 3 or 4 voice calls, be sending video for example) and much of the late 90's saw miles and miles of new fiber optic networks laid in across the country.

Deregulation also gave phone companies the option of raising their rates without the strict controls of the regulatory infrastructure of "pubic" monopolies, and they sought to recoup their investments in creating new infrastructure by raising rates.

[1] "Plain Old Telephone Service" - aka a switched, voice only network with one channel per line.
That's why you can't ignore the "we will invest $1 billion" part, as you are doing. "We will invest $1 billion, which will translate into jobs for 7,000 workers." He's talking about jobs in connection with specified investments--not about total headcount.

Look at it this way. Suppose he had said: "We will build a new HQ building, which will create jobs for 7,000 workers." Would you still assume that precludes the possibility of a merger that results in job losses elsewhere (or, as mentioned above, not replacing union employees that retire)?
Huge exaggeration. Also, free-range parenting is a thing, but even in relatively "helicopter-y" families, the ability to send kids off somewhere w/ a phone to reconnect makes it easy to let kids of a certain age explore and exercise some freedom.
My guess is that the performance loss from removing these features would make such CPUs less economical than strictly enforced separation between security domains on a hardware assignment and scheduling level. That is, just forget about having the same server run stuff from different contexts at the same time.
Except the post explicitly asks to inject politics into science by listing a bunch of political talking points. How would you advocate for diversity in class without politics for instance (choosing the least controversial of the topics)?

The agenda here is very clearly left wing politics.
That's the look, yes, but I'm not sure (as in I don't know) if that's the actual construction method.
"Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say." -E. Snowden
Today's "waste" is tomorrow's fuel for breeder reactors. We don't need to store waste; we need to burn it.
Uh, isn't the ability to export your data what got Facebook into the whole Cambridge Analytica scandal in the first place?
Here's the full Theo de Raadt quote from 2007 [1]:

"""> Virtualization seems to have a lot of security benefits.

You've been smoking something really mind altering, and I think you
should share it.

x86 virtualization is about basically placing another nearly full
kernel, full of new bugs, on top of a nasty x86 architecture which
barely has correct page protection. Then running your operating
system on the other side of this brand new pile of shit.

You are absolutely deluded, if not stupid, if you think that a
worldwide collection of software engineers who can't write operating
systems or applications without security holes, can then turn around
and suddenly write virtualization layers without security holes.

You've seen something on the shelf, and it has all sorts of pretty
colours, and you've bought it.

That's all x86 virtualization is.
"""

[1] https://marc.info/?l=openbsd-misc&m=119318909016582
Didn't it just replace a patchwork mess of systems used by countries beforehand?
Congrats Harry and Tom!
UK Flunks Huawei
Ah, from your other comments I thought you were an American for some reason. That makes sense.

I think the difference is the size of the US. I've traveled a fair bit for work, but never been asked to leave the country. Jobs that do require international travel often explicitly say so in the description and say you must have a passport.

As far as freedom to travel, unless you happen to be on the northern or southern border, you can't just hop on a plane and travel out of country on a whim. It's just flat-out not as easy to travel to other countries here as it is in Europe.
If you use Steam, it’s in the best interests of you and probably Valve not to worry about attacks to steal your library or get you banned.
Even this isn't enough. Sometimes mutually untrusted parties must exchange data (say you're running a trading platform, or a social network). You have to ensure every point of interaction between such parties is immune to timing attacks.
If running Linux you can disable the meltdown/spectre mitigations with the nopti option [1].

1. https://yux.im/posts/technology/security/disable-meltdown-an...
"Jobs" as a political issue to bargain vote is the real problem. Finally the voters ask their representatives "what you have done for jobs?" It is that misplaced attitude of voters that eventually gives us these evil policies and pretty much nonsensical claims like "someone else is taking our jobs".

Every company out there is trying to employ more people. The only problem is in finding people who are a right fit, who have right skills and so on. The problem becomes more acute in a country like USA where economy is always in optimal mode. Everything you get in USA is mostly state of art requiring specialized skill.

Government has zero role to play in "creating jobs" or "attracting jobs". If government gets into that it will end up with corruption with 100% probability. Government however can play a big role in ensuring people have skills. Government is the only entity that can publish macroeconomic data about skills and shortages, Government can help universities and community colleges and private entrepreneurs develop those skills.
Their attacks are based on previous chosen-prefix work from Marc Stevens, who tweeted this about the attack [1]:

"Their $100K figure is based on as-of-yet undisclosed improvements. History shows many claims of low-cost SHA-1 attacks that have not stood up to peer review. I am very sceptical that their attack costs in total less than the $110K building block (SHAttered) that they use."

[1]: https://twitter.com/realhashbreaker/status/11282604227868549...
So now you have your password locked in an ultra secure safe, as well as tattooed on your forehead?
Also for MDS: https://www.intel.com/content/www/us/en/security-center/advi...

I like how Intel prominently thanks their own employees for finding the bugs and later simply acknowledges the existence of any anyone independent reporters with zero thanks.
Bangalore blocked all billboards recently. Different reasons, but similar effect.

It is like the whole city is on Adblock.
yeah, sorry. On our todo: https://github.com/nim-lang/nimforum/issues/141
I believe this is the source: https://marc.info/?l=openbsd-misc&m=119318909016582
In some cases I agree, but these are very interesting attacks, and having a nice, informative landing page about it is very welcome.
If they think you didn't dress your child properly they'll tell you. Or they'll hear you talking about something and give you advice on what to do without any embarrassment on that fact that they overheard you.

You're fighting with your teen, in the US everyone would turn away and pretend not to hear, in Israel they'll just openly talk to you about their own teen and what they did, etc. and then half the bus would chime in. They're all really nice about it mind you, just trying to help.

Israelis think of everyone as part of their personal family, even strangers are really distant relatives, is I guess a good way to put it.
Based on my (limited) understanding, there's no cleaning to be done. The kind of oil they burn in cargo ships is what's left after cleaning|distilling.

>> "It can't be cracked economically?"

This trash oil is produced anyway. There's no way to not make it and still make the less dirty kinds since it's what's left at the end of the process.

I see two possible solutions:

1: Invent commercial fusion reactors and burn it there. I don't know if this would produce less CO2.

2: Find something else to do with the trash oil that's less polluting. Markets are pretty good at finding uses for things, so there may just not be anything else.

Gasoline was a waste product until internal combustion engines came along. Trash oil probably occupied a similar status as waste until someone figured out it worked in ships. If trash oil were no longer economical to burn on ships, they would probably dump it in international waters instead unless some better use was incentivized.

The US and probably other countries pay farmers to destroy some crops to keep it profitable enough to make farming a viable industry. Farmers would sell all their crops without government intervention, driving profits below a sustainable level. They wouldn't just trash it otherwise.

Cargo ship owners are probably the only people who want the leftover oil. The shipping industry burns the oil industry's trash to make their ships go. Make using it uneconomical, and it gets dumped. That's what happens with byproducts no one wants to buy.
The Author of World War Z Is Worried About Germ Warfare
But as a user, I want to be able to use proprietary applications in a safe way, so that they cannot steal my browser cookies or read my MAC address, or patch my kernel. So I would prefer that Linux distributions support proprietary apps like Android Open Source Project does, rather than tell me what I should use and what I shouldn't.
The best part about all this is that I made money on it. That’s the problem with HN comments. There were people telling me “you know that Bloomberg are the guys that make the terminals everyone uses, right?”

Sure, I know. And when I told them that Bloomberg News is low quality news they didn’t believe me because pseudo-security-experts on HN are just cosplaying as a William Gibson character. They like the coolness of the sci-fi story of a Chinese company Ono Sendaing its way into Amazon. Paranoia does not a security professional make. Saying “state actor” doesn’t turn you into an expert.

Information and being able to discern knowledge sources: these are both money. And mindless regurgitation will never work. Just like it didn’t work at Facebook’s IPO. Wishing something is true doesn’t make it so.
Excerpt:

"In research funded by NASA’s Hot Operating Temperature Technology (HOTTech) program, P-N junctions fabricated out of gallium nitride were found to operate very well at temperatures of 500 °C."

...And you thought your Pentium 4 ran hot...<g>