skysight-inc/HackerNews huggingface dataset:
The attacker needs some way to execute code on your machine. The code doesn't need any special permissions, although attacks are more difficult (but not impossible) if it doesn't have access to high resolution timing information. You can be a target by visiting a webpage with JavaScript enabled.
Yes they do, especially in lower fat milks like 1% or non-fat.
I don't quite like this way of "decentralization". If I understand it correctly, you have to pick up a provider to make an account. And then other providers can somehow link your provider seamlessly. Nice, but if my provider shuts down, all my videos and my account are lost, are they not? Why can't we simply have globe-scale storage with many replicas, with every provider hosting some files of others? That would be true decentralization, similar to how torrent is decentralized. Maybe the whole process of scheduling and routing is hard to design...
as an historical note, the sigaltstack trick was popularized, if not invented, by the Pth library.
This provides a decent and entertaining overview of why the Berlin airport has still not been completed.

https://www.youtube.com/watch?v=ll58ZrIupKA
Genuine Question: How is Apple's review system also not at a fault here?
Israeli Companies in particular are hell bent on acquiring ‘big data’ on the populations of western nations.
How about letting foreigners change airplanes without treating them like they plan to visit or be illegal immigrants? Canada, UK, I'm looking at you guys too.

Last time I changed airplanes in Canada: "How long do you plan to stay in Canada?" "Well my flight leaves in three hours." "Are you bringing any nuts or fruit in to Canada?"
You can see the difference even in primitive stuff like stat(1).
E.g. compare the EXAMPLES section in OpenBSD[1] and Linux[2].

[1] https://man.openbsd.org/stat.1

[2] https://linux.die.net/man/1/stat
New clothes brand lets users unlock garments through video game
How to Build a Multi-Lingual Chatbot with IBM Translation API and Ably
>"EU regulations prohibit the turning angle of the wheel unlike the U.S. You simply can’t navigate on autopilot in the same way."

I've never heard anyone complaining that their car is too safe.

How many people have been killed in autopilot-related accidents in Europe vs the US?

>"Also the EU makes money from the auto companies in their jurisdiction and they don’t want a U.S auto company competing with them."

Carmakers can make cars in the EU and pay taxes.
Or they can import them from the US and pay tariffs.

Exactly as EU carmakers are treated in the US...
> It’s ugly, but it makes it perfectly clear that the operation is creating a new dictionary.

I don't see how " * * " makes it clear that a new dictionary is created. Generally speacking, I tend to find operators for complex data structures unclear and don't understand their appeal. It is pretty much the same thing as having methods using two letters long names which everybody would find unacceptable.

Can you spontaneously guess the difference between "d1 + d2", "d2 + d1" and "d1 += d2" with d1 and d2 being hashtables ? Personally I can't. I'm strongly of the opinion that defining a sum for types where a sum is not obvious is a bad idea especially when said sum is non commutative.

From my point view, this is the kind of abuse that make Haskell so annoying to read (with abuse of point free style). I would be sad to see Python go this way.
As I recall there are (or at least used to be) lots of computationally hard problems in searching for flights. I think it is already somewhat tricky to enumerate all the reasonable routes between two destinations (and back) (and sometimes there are C shaped plans of A->B, then days later B-> C), and then airlines have complex fee structures combining date, time, class (ie fare), loyalty programme memberships, legs, whole route, current demand, etc such that determining the price for a single route is somewhat tricky and searching for the fastest /cheapest route is also not easy (and crucially not reducible: if you have the cheapest flight from A to B, the cheapest return from A to B may not include it)

But maybe the landscape of airline booking/pricing has changed since I got this impression.
> running a country is not the core competency of the people paying the tax

People don't generally pay for things that are in their core competencies. A very common reason to pay someone else to do something is because the person with money doesn't know how to get the result they want.

> the US, which is to all the rest of the world (and more than probably some of it's inhabitants) a policy tire fire.

You might want to pass that on to the migrants of the world. Judging by total migration the United States are possibly most attractive destination available. Its migration intake isn't shabby when looked at as a rate either. That dumpster fire is a powerful attractor.

And even then you've missed the argument. I didn't say taxes were a bad thing. I said that people often have very strong principled objections to what their taxes are used for.
A Random Guy Gets Fired over a Like on Twitter – Losing Jobs Due to Politics
Literally the first thing that comes from google search of this. Plus they claim this number when you are actually there in their museum dedicated specifically to this horrible part of their history. Visited last year, some 'jobs' around smelting had survivability in mere weeks because of all the toxicity.

Plus took a trip quite deep into the mines themselves. Imagine mountain that is almost 4800m high, drilled through like a proper swiss emmental cheese (they claim around 500 different entrances to tunnel system).
Plants lack nerves or a central nervous system or the ability to directly react to their circumstances, at somepoint you have to draw a line somewhere and most draw the line there. Regardless, if you really believe that plants feel pain, you're killing a lot more of them by raising animals for dairy and meat.
Pray, why do you think I would expend the effort of deliberately increasing my 'exposure' if I did not notice the effects of these mitigation on my workloads ? And they are not particularly unique.

Do you understand my risk and load requirements better than I do ?

Have you entertained the possibility that the decision to de-mitigate was the result of considered risk and resource management modeling ?

But thanks for your concern and all.
5) Don't give unsolicited advice ;)
The smoke ventilation system was originally designed to rely on fans to blow the smoke downwards in the ventilation shafts. As far as I know, nobody had tried to build a system like this before. Rumor has it that ventilation pipes even imploded during a test.

That's not all. Signs of poor planning and poor execution seem to be everywhere. Pipes for a central water cooling system for IT and other electronics were supposedly embedded directly into concrete walls instead of into shafts and the system was known to have too little capacity before the building was supposed to open. One escalator turned out to be too short when delivered. Instead of fixing the escalator, they extended it by adding regular stairs to the end. The contents of cable shafts in the building is completely unknown. Nobody knows anymore. New cables are thrown in randomly to suit current needs. Some shafts seem to have already filled up completely because of that.

The management of the construction site has also been a complete disaster. I don't recall how many tech leads had to go because of allegations of corruption, for example.

These are just the worst issues that I remeber. The smoke ventilation was just the straw that broke the camel's back.
>The browser mitigation’s only work with the kernel mitigation’s.

That's just not true. The timer precision doesn't have anything to do with the kernel mitigations.
I use IntelliJ on OpenBSD no problems (had to google some env var to set to make it render properly as I use a tiling window manager, apart from that it "just works").

One thing I do notice is OpenBSD's malloc implementation is much more serious about killing misbehaving apps so occasionally a process which does something it would get away with on linux/other will be taken out the back and lined up against the wall -- that's a feature and not a bug though (and configurable)
- Shoedog by Phil Knight
- Say Nothing by Patrick Radden Keefe
- How to Change Your Mind by Michael Pollan
- Deep Work by Cal Newport
but why is it not simply using a separate asm file instead of embedding the preassembled binary as a constant?
>" Mercosul is South American. Why would it join the EU..."

Nobody's talking about joining the EU, but rather a free trade area. Regarding cars, the free trade area makes sense as many EU carmakers (Fiat, Renault, etc) are active in South America.
Actually, the post was written by someone located outside the U.S. (a place not using any US-specific time-zone), and posted to the status page by someone else located outside the U.S.
That seems to be the new corporate PR move.
Pretty interresting case of a troll faking cop loving black woman in tech weaponizing the abuse function of Twitter to silence someone.
Paying a tax on something you import from the EU which you don't pay if you buy in country is difficult to see as anything other than an import tax, no matter how it is named. See VRT in Ireland for example.
Integrity teams at FB are teams that handle abuse on the platform, and other bad things (fake accounts, spam, malicious developers, malicious ads, ...). Why integrity? Bunch of teams (not all) that did abuse had integrity in their name (like site integrity, platform integrity), so I guess that the name just sticks.

And what does VP of integrity do? Manages organization that handles abuse on the platform.
How would you pipeline data sources that don't have a native connector in Stitch / Segment without using too many engineering resources?
Interesting detail about Square that I learnt on Twitter shortly after SwiftUI was launched...

Square sold iPads with their software on as "appliances", so they can't deprecate them on a schedule like most software. For this reason the Square iOS codebase (which is a single codebase) must support back as far as iOS 9.

Because of this, they're considering an internal implementation of SwiftUI so that they can start using it now, rather than in ~5 years time. I wouldn't be surprised if they open sourced this if they do go ahead with it.
Ok, you have a phone that got slower, but works.
And you got phone which just switches off randomly.

Which one are you more likely to replace sooner?
I meant specific about the content of your dissent.

Dissenting opinions are basically just different from the majority. Anarchist opinions are like this, vegan opinions are like this. Fascist opinions are also like this. Just saying it’s dissent is not too informative.
And manufacturing is hightech? They are stuck in the 80s software wisse (PLC and robotics).
The real development (embeded system software & hardware) happens in calfiornia anyway.
A Linux phone is what you want. We (for whatever that is) for sure do not need it.
I've seen more than one associate at a VC firm become partner. And I don't know that many VCs funds intimately (about 40).
We use kali for pen testing, not as a daily driver. I work in infosec and use OpenBSD as a workstation, bootable kali on a thumb drive for when I need some bigger tools.

Does ZSH still contain a ftp client? If you like minimal you should check out OpenBSD's ksh (oksh on arch maybe?), it behaves exactly the same way bash does (for me) and things like dd if=/dev/mm<tab> actually work, which iirc still doesn't on zsh.. :}
Paste content from link below to your /etc/hosts file:

https://pastebin.com/raw/FAV2f9eA

On Android you could prevent Facebook by blacklisting same hosts via Firefox + NoScript.
Gym Equipment Manufacturers in India
I wonder if it might not come to bite them though. Doing it this way means that the media will constantly keep talking about yet another vulnerability in Intel CPUs for years. There's a chance that Intel might and up picking a reputation like Flash did for being insecure.
(Non-)obvious lessons I learned from my first startup
Watching a SV company suddenly have to deal with German workers' rights (think: unions, significant protection from being fired without cause, rights to paid holiday and enforced maternity leave, even workers' councils which have representation at a management level) is going to be hilarious.
Meanwhile, Google researchers (Plotkin and Abadi) are going to present "A Simple Differentiable Programming Language" at POPL20[1] in January.

I can't find a preprint though :'(

[1]: https://popl20.sigplan.org/track/POPL-2020-Research-Papers#e...
Show me the data.
I would say H & P had a serious edge over the Google guys in the ethics department.
How do you carry a browser in your pocket?
> Parallel construction happens way less frequently than people think it does

This seems like a rather vague claim
Sounds like a habituation result, nothing surprising, but still possibly significant.
> because the worst can happen is I will get more interesting ads

I guess you could also define this whole scandal as millions of users getting "more interesting ads"
https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Ana...
I didn't miss it. It doesn't really mean they will be selling here any time soon as they only published one position for now.
Lived here 10 years, can verify. You feel it even if you're not in the know. It's like NYC in the early 80s, but now mixed with a startup scene.
Brandenburg and Berlin are fundamentally unrelated, they’re two completely distinct, and politically and (largely) economically independent regions. While Berlin is geographically within Brandenburg, they couldn’t be more different, and the geography is mostly of historical relevance when it comes to Berlin’s current economic position.
Video Games in East Germany: The Stasi Played Along (2018)
I wish more people understood this.

Where privatisation does fix things, it's usually simply because the process of privatisation gives somebody the political capital to implement massive organizational change, and that somebody happened to be the right person for it.

Conversely, when privatised infrastructure is a mess, it can be beneficial to have it taken over by the state. Again, the mere fact of doing so will give somebody the political capital to implement massive changes, which can fix things if that somebody happens to be the right person (or group of persons) for the job.

As a corollary, it would be possible to fix many "broken" state-run offices by enabling the right person(s) to implement massive changes. That's probably even preferable to privatisation in many cases: you still have the same risk that you didn't choose the right person for the job, but you eliminate the risk of them just cashing out.
I imagine a big part is just having to talk to the airlines legacy systems. If Skyscanner (et al) had access to all the data, I expect they could compute prices quicker and give better options. I assume this is why Google bought ITA Software.
Is not being surveilled not in the interest of "general workers"? That's hard to answer, because what exactly is the worker? All groups and subgroups are divided to some extent; there will not be a conflict without multiple layers of subdivision.

I agree that censorship of political discourse is a problem. Or religious, or of any subject. The "let's not talk politics amongst friends" (or at work) line of thought is a form of censorship that is in many ways self-imposed. I think that we're so bent on being right that we become blind to others' incentives, interests and other elements of subjectivity and lose the ability to resolve conflicts. Then the obvious option is to evade situations where we might have conflicts. A culture-wide communication problem. I'd like to see people comfortable discussing anything anytime with anyone.
I think that is a fantasy stemming from the idea that everyone who is talented and intelligent must basically agree with you politically. The world does not work like that. Talent comes in many shapes and forms. I know many people, myself included, at FAANG jobs who would love for a less political environment.
Yes. What is your point? Must you either be in favor of James Damore and against these Googlers who are trying to organize the workplace or vice versa? Can't everyone get to share their political views and also keep their jobs?
What a huge conspiracy, the Washington Post even bars my view of the discussion
I enjoy reading Adrian Colyer‘s blog https://blog.acolyer.org/

He is a Venture Partner with Accel in London. Prior to this position he spent 20+ years of the career in technical roles.

I think VCs can only benefit from professional diversity. AFAIK, some of the funds even for associate positions they are looking for CS people
>> The tracking had made the staff in those departments feel unsafe

It's very strange how often this idea of 'feeling unsafe' is coming up in the media now. It seems that either:

- People have become more fragile/sensitive; or

- People have become more aggressive.

I think it may be both. I think corporations create extremely unnatural, oppressive and coercive environments which makes people more outwardly sensitive but inwardly more aggressive.
Why Cryptocurrencies?: A Defective System
Is there a list of the exploits found 'in the wild' that depend on speculative execution?
I just purchased a newer WD Red (WD80EFAX) to replace an older HGST (pre-WD if memory serves) drive. That drive (and another of the same model I purchased elsewhere to test) is not recognized by the UEFI on the motherboard. The OS probes the drive and fails to negotiate DMA transfers.

Turns out there is a publicly available KB article that mentions known bugs with transfer rate negotiation on some of their SATA3 drives. Of course WD won't say which drives. There's even a utility referenced in the article that you can use to disable SATA3 support. But WD won't make it publicly utility.

Meanwhile their support is stuck in a "have you tried power cycling the computer" loop.

If memory serves Western Digital / HGST / SanDisk were among the first to jack up prices after the Thailand disasters. Fuck em.

Meanwhile is the difference in failure rate between Seagate and Western Digital even statistically significant? For most comparisons you're looking at a fraction of a percent.
no one said building Teslas in Israel... They don't sell here at all.
For something as central to Linux as a replacement for init and friends, I'd prefer a GPL license.
Yeah I'm looking into upgrading my 6500 to a Ryzen 3 3600. It's a shame there's no B550 boards yet.
Tesla Uses PyTorch
I own a Sony laptop from 2009 with a 16.4 inch screen (1080p), the difference in readability between that and a more modern 14-inch screen at the same resolution is enormous. 15's are ok but still inferior. Hope that other laptop manufacturers will re-introduce 16's, especially with thin/light designs.
Same. I built a modest core i3 machine in like 2012 for my dad. That computer has had zero problems and runs Windows 7 with uptimes comparable to Linux servers. I never really thought about it until now, but the Intel motherboard might be the reason.
Every platform that has tried that for the last decade has failed - Palm, Firefox, RIM, and Microsoft have all had development platforms “based on web technologies”.
Partners have two jobs at firms: raise money from LPs and convince great founders to take the firm’s money. If you were hiring a partner you would choose to go in this order: poaching a star partner from another firm, hiring a star founder/operator, an all-star associate at a more successful firm, promoting your own associate.

Any of the first three options will help sell LPs and founders on your new fund by bringing along some brand name credibility. It’s a harder sell when you are promoting from within, especially as associates do not have experience raising money from LPs.

Another reason: Venture firm partnerships are inherently political environments and perception matters. It is akin to why grad students are discouraged from becoming professors at the same school they got their PhD from. It’s hard to escape from the shadow of your mentor and find your own footing.

There a few other reasons that promotions are rare, but they do happen. A16Z used to have a rule where no one internally would be promoted to be a GP because they only wanted to have former operators be partners (they have now since changed that policy https://a16z.com/2018/07/17/connie-chan/)
There is a section about pipeline stalls caused by switching stacks, but that is misleading. Switching stacks per se is not a huge penalty, the cpu [1] might need to add synchronization opcodes to synchronize the stack engine view of the stack pointer with the actual stack pointer, but the performance cost is minimal and often free.

A big penalty is due to (failed) branch prediction: a coroutine switch is essentially an indirect branch so the predictor might need help (for example using a different branch instruction address for each coroutine type); also call instruction used to call into the coroutine switch function is not paired with a ret instruction, which messes with the specialized call predictor. Changing the final jmp instruction in the switch function to push add; ret actually makes thing worse; the best solution is to inline the switch function in the caller via inline assembler (this also helps with the previous issue and, if the compiler provides the functionality, it allows only saving the registers that are actually in use)

edit: last time I did a synthetic benchmark of my one of my own coroutine implementations, the switch performance was only constrained by the number of taken branches the CPU could issue (one every other cycle): https://github.com/gpderetta/delimited/blob/master/benchmark...

[1] I'm talking about the typical x86 cpu.
More anecdata: On my workloads, which involves moving large discrete image frames as part of a video inference ML pipeline through a message broker and other processing pipelines, de-mitigating decreased system loads ~25% on average. Some workloads up to 30% depending on inference model. So yes noticeable.
Show HN: GraphQL Relation Explorer in GraphQL Editor
Does anyone else dislike the usage of the word "manifesto" in computing? It always seems to me to indicate a faith-based rather than evidence-based commitment to some train of thought.

Seems strange to see manifestos discussed in the ML space, which is nominally a measure-oriented world. Mind you, when has statistics not been polemical.
Perhaps researchers can use the tested-and-proven "Full Disclosure" tactic to exert public pressure on Intel. It doesn't need to disclose everything, just two or three additional unpatched PoCs with full source code would be enough.

However, unlike buffer overflow exploits, most researches on CPUs are conducted within academic institutions, doing this certainly breaches the code of conduct. Also, CPUs are the most critical components of all computers and their vulnerabilities are difficult to fix, doing this would put a lot of users under immediate risks, unlike a root exploit, which is less risky and can be fixed within a week. Doing Full Disclosure of hardware exploits that users can not fix is much more ethically problematic than software exploits.

But leaving the users in the dark and allowing Intel to delay its fixes by not to exert pressure is obviously irresponsible, which is the original argument for full disclosure.

So I'm not sure. Perhaps Google's Project Zero is a good model and a good compromise between resposible/full disclosure - embargo for 90 days, full disclosure later, all information becomes public after 90 days and no extension is allowed, period. For CPUs, perhaps we can use 180 days.
this monitor with double pixel density (7680x3200) would be my dream monitor
Different how? It's definitely no less "milk" than cow's or sheep's or goat's milk. As a substance it's definitely as much "milk" as it can possibly be.
Or like java applet. Oracle has killed java applet by not handling security issues in a responsible manner.