skysight-inc/HackerNews huggingface dataset:
Politics is already at work. The larger the corporation, the more likely it is to be involved in politics in a very direct way.

As a minion, you're discouraged from holding an opinion on company time, and even more strongly discouraged from doing anything that might affect the natural corporate power balance.

Active political engagement is a privilege reserved for upper management, who certainly won't be leaving their opinions at home.
My understanding from listening to conferences and podcasts is that it is a combination of a lack of mass production (every new reactor is rare and apart, France had economies of scale by building the same design all over the country), unnecessarily tight and ever changing regulations (having to change a design in the middle of construction is always going to derail a project) and lack of private financing (given the upfront nature of the investment with no positive cash flow for 10 years).
When you bind the pages this doesn't work anymore, since you can't reorder the read page to the back.

Did I miss the author addressing this, or is it one of the disadvantages not listed?
Sorry but there is no such thing as ethical consumption of cow milk.
Please do tell again if it sticks after a few months. Honeymoon is a thing with a major lifestyle change.
Are there many uses of signing with a TPM on consumer hardware? I can see the issue with servers, but not much else.
I've been following these since maybe 2016? I don't remember when they started. It's striking to note that for as long as I recall, HGST still holds the crown of lowest annualised failure rate across the board.
Showing a static message is not recommended since you can't tell if the application has frozen/crashed. Source: https://www.nngroup.com/articles/progress-indicators/
Alas for this task, Google seems best. Just take a look at the photos of the place in Google Maps. The menu is usually there.
I'm glad I started off not overclocking my 6700k with the intent of cranking up the clock over time in order to maintain the same performance with regard to software bloat and mitigations like these. I got lucky and can hit 5Ghz safely, with a base of 4Ghz.

Definitely jumping to AMD next time around though. My next upgrade was originally going to be dual Xeons but those Ryzen Pro 3000s are looking nice.
>So Intel failed to mitigate the vulnerability when it was first reported. Then they extended the embargo from May until November. And they still didn't fix it.

The assumption being that they could in the time given, but are sitting on their hands?
How do we access these other modes? I've never noticed it on either the Windows app, nor my Android device -- despite spending several minutes looking for it right now, after reading your comment that they exist.

When I go to Hamburger -> Anime, or Hamburger -> TV shows, it has the same style of semi-logical groupings of categories as I see normally: Crime shows, action shows, classic shows, suggestions for me, etc -- but there seems to be no affordances to affect ordering, nor menu items that would reflect that. The settings menu is useless, as it consists only of links to the account details, privacy statement, and terms of use.

I really hope that the answer isn't "Log into our website instead of using our native app!", though perhaps the feature warrants such an experiment.

In the Android mobile app, which has recently seen some excellent improvements, I'm unable to find an alphabetical listing as well. One can select genres, and TV shows vs movies, but there are no affordances for sorting, only a wall of categories to scroll through.
Tell that to someone stuck in a lift because of a power cut 1000km from where it blows.
Welcome to the free market!
Humans will adapt because we have no choice.

Argumentum ad consequentiam.

https://www.logicallyfallacious.com/tools/lp/Bo/LogicalFalla...
didn't know they get so hot. i assumed 1170K (900C) exhaust temperature and -50C cold reservoir. this is even darker magic than i suspected :)
It baffles me why anyone with any expectations of privacy would even work at Google in the first place. “Privacy for me, but not for thee”?
> How does that happen‽

Berlin is a massive clusterfuck of corruption.
"Plant-based milk" is actually more deceptive to me as a phrase, given the huge efforts the modern "plant-based meats" go to imitate meat.

"Oat milk", "almond milk" etc aren't really making any effort to imitate anything as far as I know, they are what they are.
>It's not for beginners.

I don't consider myself a beginner to Unix or computers (I even have a PhD in the damn things), but I do consider myself a fairly inept and inexperienced systems administrator, with no great desire to spend the time to become better, and my needs are fairly basic - just the usual web/shell/IRC/mail server stuff, and other random infrastructure needs that come along for my work. Incidentally, this is exactly why I prefer OpenBSD. Everything is so minimalist, the defaults so sensible, and the documentation so good, that I trust the machines I set up. I have great confidence that I did not overlook something crucial. The OpenBSD http daemon is beautifully simple - too simple for many uses, but perfect for mine. The OpenBSD mail daemon is the only mail daemon I have ever been able to set up from scratch, just from reading the man pages.

I run Linux (NixOS and RHEL) on my desktop and some servers respectively, because of needs that OpenBSD simply does not support (mostly GPU computing). Linux is fine and certainly runs very fast, but OpenBSD is the only operating system I honestly like.
> if you’re experienced, like to “look under the hood”, and prefer software that does the minimum necessary, OpenBSD is for you.

I've been using Linux as my primary system for 10 years now.
Isn't it a bit exaggerated to group all Linux distributions together with ubuntu?

I think of myself as minimalist (arch linux / i3 / tmux / zsh / vim), thus fitting the description, but I'm not convinced by the argument to make the switch. On the contrary, the article feels like I better be ready to donate a lot of money if I want the system to run as I want it to.

> It’s uncompromising. It’s not a people-pleaser or vendor-pleaser. Linux is in everything from Android phones to massive supercomputers, so has to include features for all of them. The OpenBSD developers say no to most things.

I'm not sure if that's a good thing or not. Doesn't sound very community driven.

The security focus is probably the most interesting part here. I probably had the wrong assumption that most security-focused guys were on Kali linux.

I'll need a bit more nudging to make the jump over.
Linus says "don't do it" [0]:

> Signing each commit is totally stupid. It just means that you automate it, and you make the signature worth less. It also doesn't add any real value, since the way the git DAG-chain of SHA1's work, you only ever need _one_ signature to make all the commits reachable from that one be effectively covered by that one. So signing each commit is simply missing the point.

[0]: http://git.661346.n2.nabble.com/GPG-signing-for-git-commit-t...
>No I don't give a fuck about the 'risk' this introduces

Well, let's hope you're not powned because of this and get dragged into giving some fucks, for a 5-10% of performance hit you wouldn't notice anyway...
World War 3: Russia submarines launch underwater warfare in Scottish waters
See also https://puri.sm/posts/apple-is-right-about-privacy-but-wrong...
No. This timeline shows incompetence, not sitting on their hands: https://mdsattacks.com/#ng-full-story
A third of those subscribers are in the US, the rest is worldwide, and it took Netflix years to get the content rights for other countries.
> They would order me food so I wouldnt have to leave my desk. Many times I slept under it.

Is this work culture the norm in the US? I audibly said "wtf" just now, sitting at my work desk.
It's like if I go to the restaurant and order a steak and you bring it out right away. I'm going to be suspicious.
That article speaks of a 10% change for a 9 month period on a number that sometimes changed by more than 60% (2013 vs 2014) on a yearly basis in recent years.

In any case a 10% fluctuation can hardly be called "basically cut in half", as you put it. I am reading "10%" as "basically unchanged".

As it stands your argument is not even supported by the sources you are citing yourself.

Edit:

Ahah! When just comparing the single month of September we can find a decrease of about 50% though, according to the article (couldn't find a source for the number though, see below). So at least we have a number like that if we make the window so small that the data we have is beyond useful.

A 50% fluctuation on a monthly basis is perfectly normal though. For instance there was a +120% change in April 2018 / April 2019 (1517 vs 3345)[1] in total permits on a per-apartment basis. You can find plenty of such fluctuations though when just looking at months.

The data is pretty much completely useless on a month-by-month basis and can easily be skewed by a few large projects.

Also I can't figure out where that article is pulling its numbers from, because it quotes "more than 1700 permits for apartments last year in September", while the official statistics[1] just have 1301 when counting any kind of permit. For completeness, here is the press release referred to by the article, which also doesn't contain any number like that: https://www.statistik-berlin-brandenburg.de/pms/2019/19-11-0...

[1]: https://www.statistik-berlin-brandenburg.de/publikationen/St...
Bets based on advanced technology not presently in at least the practical demonstration phase are ... highly unlikely.

Fortunately in the case of solar, we're already in the active commercial use phase, and there is a long-term declining cost trend. Whether that's sufficient remains to be seen, but it's promising.

Nuclear has tended to become more expensive over time, as consequences of utilisation become more apparent.
Not surprising at all, what is surprising to me is that companies still insist on doing the "Big Reveal" style launches. Why not open it up gradually in phases via a beta program or something?
> and with brake pads that last forever.

Not true if you live in an area where the roads are salted in the winter. Then they don't last any longer than on an ICE car unless you reduce or turn off regenerative braking. I had to have two replaced at the last service because of rust for just that reason and the car is only four years old (Model S).

Tesla's advice was to reduce regen in the winter so that the brakes get used a bit more. A colleague also suggests doing an emergency stop once a year in the summer on a dry road to scour the brakes, not tried it, no idea if it would really be effective.
It will offer no help;

for context, imagine that the attacker has access to all memory on the system. It's not -exactly- like that for a bunch of reasons but realistically it's very similar.
Politicians take turns taking lucrative positions within the project companies, "to help".
How machines are configured is very interesting, as adversaries make mistakes, and cam trigger detection for suspicious behavior. There is an entire security field that is concerned about what happens after a breach.

Coinbase recently had a very interesting article/blog post about something similar, how adversaries gained access to engineering hosts and how they detected it.

Of course how much you lock something down depends on the critically of an asset and so forth. E.g. in certain high security facilities slight variations of your monitor example are applicable.
I don't think GraalVM polyglot interop is O(n). It uses multi-dimensional polymorphic inline caching (dispatch chains) which specialises for the number of languages using it, and so the interface between two languages is O(1).
If it really is the case that the law is written in the form of an idiom then maybe we shouldn't be taking it as gospel and let it grant people right to individually own a weapon capable of murdering numerous people. I mean, if we really are going to say that the second amendment grants such rights then it's not too much to ask that it be explicit. The fact that it's not explicit is a good basis to interpret the phrase loosely and assume that the founding fathers did not envision the gun madness of today.
Us poor UK based people wouldn't know... it's not launching here until March 2020 (As Sky still have a licence for Disney content until then). Elsewhere I've read that Disney+ has some pretty agressive anti-VPN detection, so you can't bypass the location lock-in either.

As an aside, Disney+'s main draw 'The Mandalorian' is already freely available to download if you know where to look. So, well done Disney, you've totally played into the pirates hands.
> But this is not a book, it is a stack of loose paper!
Not very likely: the attacker is outside the emulated vulnerability-free sandbox, and the state of the emulator is exposed like the state of any other program.

Accessing the emulator's memory means accessing the emulated program's memory, it's just slightly obfuscated.
Thankfully AMD is making serious headway and will continue to take market share from Intel. It will take time but Intel should begin to feel the sting soon.
Yes, Librem 5 is our hope. Also, Pinephone.
What are we down to now? 70%? 80%? of original performance with all the mitigations added up by now?

If a car was advertised as emitting 20% less pollution than it actually did, people would be pissed[1]!

[1]: https://en.wikipedia.org/wiki/Volkswagen_emissions_scandal
Waves in St Mark's Square as Venice flooded by highest tide in 50 years
In the case of network it's also presupposing that the user's has a low-latency, fast connection--which should basically never be assumed.
Bullets carry significant externalities.

How many of today's regional conflicts can be traced back to mass atrocities?

Birth control doesn't create survivors perpetuating rage based on past martyrs. Even if the immediate efficacy approaches your suggested value. In truth, it's almost certainly closer to 100s.
It's curious to be sure, but I think they will react positively to Tesla.

1) Berlin is suffering from pollution, especially the diesel. For city dwellers the switch to electric car can't happen fast enough, and German auto makers have been absolutely dragging their heels. Tesla has become a symbol, a fuck-you to BMW, Mercedes, VW and their gas guzzling, diesel pushing ways. It's unbelievable how out of touch the german automakers have been.

2) The factory means some working-class jobs. The left won't see anything wrong with that. It's the coming gentrification that caused the upset against Google.

3) Factory is just outside Berlin, technically in Brandenburg. Near the (forever in construction) BER airport means less concerns about noise, etc.
I’d rather have 1/8 2/7 3/6 4/5 that way you read a page, flip it and put it on top of another stack. You end up with a well ordered stack with the second half correctly ordered.
It can be combined with Wired Elements [0] for the whole hand-drawn experience!

[0] https://wiredjs.com
Yes but be very careful with those. You don't want to spam the user.

I remember some years ago when Ubuntu file sync would pop a notification every time a file was synced. That's a good example of what not to do.
> And there's no reason why someone going to Snopes for an article at theonion.com or babylonbee.com can't be redirected or otherwise sent to an article covering the satire of the site

There's a very good reason that people going to Snopes for claims originating in such sites aren't redirected that way, and that's because the claims often get separated from the originating site as soon as someone believes them and decided repeating them as original(or in the form of an unsourced meme) is the best way of sharing them.

Of course, the Snopes article on the claim should mention the satirical original source, but that's no reason not to do everything else Snopes would normally do to address a claim about which they have received questions.
"If a whole other continent joins, it will be the biggest?"

Yes. The biggest free trade zone. Read the news from time to time. The EU-Mercosul FTA is supposed to be signed but may not due to Austria and partly also to France.

It may be the biggest already: https://www.scmp.com/news/asia/east-asia/article/2177749/eu-...
I think we can all agree that a teenager with an AR-15 is not a "well regulated militia".
In the 1700s, the word "regulated" meant "in good working order." It did not have the association with law that we have now. You can look into the history, but if you don't care to, consider that "regulations" (as we've described them over the past few centuries) are a form of law found in modern bureaucracies.
I wonder whether writing whole system in verilog, synthesizing cycle accurate simulator with verilator would yield better results...
They generally want some way to make sure the same person isn't filling out the survey multiple times.
Nor does the article state what the intended target even is.

Typically, UNIX systems was for servers. And that is probably where security matters the most, too. Along with a conservative view on what hardware to support, it sounds an awful lot like a server operating system.

So does the article claim that it is good to run an operating system that targets servers on your desktop or laptop?
The PoC mentioned in the ZDNet article (https://www.zdnet.com/article/tpm-fail-vulnerabilities-impac...) seems to be out...

https://github.com/VernamGroup/TPM-Fail/
Dutch FinTech Startup Flow Your Money Raises €600K Investment
> If a user is confused about the interaction because of how fast it is, then that's a UX problem to fix

In some cases the confusion comes from a "did this do any work at all" question. like git branching compared to svn for big projects. As other have brought up, instantaneous reply in airline comparison sites can cause concern of how deep the search was.

A similar paradox is with psychiatrist hourly rates or the placebo effect. The high price (delay) is part of the therapy (interface).
So is the possible catastrophic collapse of civilization.
The difference is the sense of touch vs vision. Touch is the most sensitive sense and the mismatch between it and vision is more noticeable in a video game than clicking buttons on a website. 300ms is actually the instantaneous threshold for non-dynamic interaction (typical website), but it is 1-10 ms for haptic devices.
Some people like having public Twitter accounts. Or public Hacker News accounts.
Yeah I remember seeing that one a few years ago - it's also super cool :)

Especially crazy that these work as well and quickly on mobile!
Google already have expanded to plenty of countries, and presumably in some of them this kind of monitoring would be illegal.
Parts of Venice flooded by highest tide in 50 years
Manically laughing at the wonderful logic of the universe. Much laryngeal nerve.
I believe they store some data in your iCloud account. Uber used to do this too. The only way to get rid of it is to sign out and then again explicitly ask to delete account data on this device, then uninstall and reinstall to use the service without signing in.
Could you open an issue detailing your concerns to give some visibility to the non-HN user?

I would certainly appreciate it when stumbling over the repo.
The use of "milk" for these plant juices has been driven by the marketing arms of huge corporations, not historical use.
What are you even talking about? the introduction to this problem came with a proof-of-concept _IN JAVASCRIPT_.[0]

Session keys, private keys, passwords and all other kinds of access tokens that your system is using, it's the next worst thing from remote code execution.

Your browser runs so much untrusted code that it's really unreasonable, and yes, we should definitely be pushing back hard on this. But it's probably the most stupid thing you can do to disable these mitigations because they're not just theoretical, they're real, they're here and everyone knows about them.

This is like anti-vaxx philosophy. "the risk is low"; well, maybe the risk is low because of herd immunity, it's not feasible to run these attacks as they'll be obvious to those who have the mitigations in place (100% CPU), but if there's a 0.00000001% return then it becomes profitable to exploit, just like mail spam.

Do not fucking turn off these mitigations on desktop computers, they are too complex and run untrusted code all the time. Unless you can work without javascript and I doubt you can because the web today is basically unusable without it.

If you have a database which is only accessible internally, you can disable the mitigations, because those things are hit hardest by the mitigations and do not run untrusted code.

But really, your desktop is running untrusted code _a lot_. Please do not do this, not only for your own sake but for everyones sake. Don't make it profitable for malicious agents to run these attacks.

[0]: https://www.reddit.com/r/javascript/comments/7ob6a2/spectre_...
The use IDFV(id for vendor) for this. It's an identifier that is shared between all apps of the same vendor.
It was cited in the LWN article; the original source is Marco d’Itri:

https://lists.debian.org/debian-devel/2019/10/msg00380.html

See also the popcon statistics for the systemd-sysv and sysvinit packages:

https://qa.debian.org/popcon-graph.php?packages=systemd-sysv...
We're in the era of disruptionish. Give something a new, i-friendly, name and off you go.
> No one has a feeling of their privacy being violated, because there's no expectation of privacy when using someone else's (the company's) property.

Excellent. Now you only have to remove the expectation of privacy in any situation from the social norms, and another big problem will be solved. You will be able to live under total surveillance without anyone feeling that their privacy is being violated, because there was no expectation of privacy to begin with.

An alternative hypothesis (crazy, I know...), is that the power imbalance in favor of the rich went very far in the US, which means that the poor have no safety net or ability to organize, so they are completely at the mercy of the whims of corporations for survival. And so, they will accept many indignities without bating an eye.
I agree with you. I'm totally fine with services charging subscriptions but not if the subscription is a way to turn advertising off. Push advertising is basically evil in my opinion and you don't get absolved from the evil you are doing by allowing people an out by paying to turn the ads off.
> because a false rating leads to being buried by Google and Facebook

If Facebook and/or Google punish a satire site for having articles marked false by a fact-checker, that's a problem with Facebook and/or Google for responding improperly to fact-check of satire, not a problem with the fact-checker, which is doing exactly their job.

> Asking for someone or something to be investigated isn't necessarily a de-facto innocence excuse.

It is for a fact checker if what is produced is a honest and accurate fact check of the claims presented. It may not be for the questioner if they are trying to game a system where third parties do dumb things based on what fact checkers do, but that's a problem with the questioner and the third parties, not the fact checker.
Fish, chips and Brexit: Restaurant diversity and voting in 2016 EU referendum
What about allocating one kernel thread to act as a watchdog to detect if a user-space thread has not performed the preemption check in time, and only send an interrupt if that's the case.

The preemption check would simply write some data to memory (the actual data wouldn't matter), and the watchdog would use the MMU modification flag to check if the memory page was updated. That way you'd avoid synchronisation problems.