skysight-inc/HackerNews huggingface dataset:
it's not nasty in the same way as Spectre/Meltdown, but it's still nasty.

Spectre/Meltdown is bad because of the trust model. As a tenant of a cloud platform, you somewhat implicitly trust your cloud provider, but you distrust your neighbor, and Spectre/Meltdown can be used to breach that trust guarantee. With the Spectre JS attacks, it's a similar situation where a user can't necessarily trust tenant code, and that security layer is breached.

SGX is "secure" in the other direction. The executing code presumes to not be able to trust the hosting hardware. For example, you are a copyright-happy media company and you want to deliver DRM'd content to a customer who might be trying to crack your keys, you might want to run code inside of an enclave that is "protected", from even ring 0 or ring -1, -2, etc. from ever getting at your code.

I was wondering why a BIOS patch would work, but I guess your SGX-using software could pretest if the patch exists.
BTW, a website with similar nasty UI aspects: https://grumpy.website/ (I'm not affiliated with this)
Thank you for letting us know.

If you want to do a person's background check? Like name: Charles Jones search result: https://www.checkpeople.com/search/name/charles-jones
It still depends on the military. CA is certainly an economic powerhouse, but if the bulk of the military doesn't side with CA, I doubt groups like the National Guard (assuming they don't also support the federal gov't) or private militias (which, let's face it, are children with toys compared to the US military) will be enough to repel the US military, mountains and deserts be damned.
Not this. This is merely a configuration issue. Intel left an interface open that should not have been left open. A processor is a large distributed system and undervolting does not go well with secure computation.
> Who wants bills that ... are not likely to survive a wash?

Americans are already used to this.
This is a thing.

Maybe this isn’t the real world, but a few months ago in the Apple parking lots in Cupertino targeted breakins were happening on a daily basis.

Once they stepped up security patrols thieves moved on to downtown Palo Alto and Mountain View.
Welfare for the rich destroying the planet and transferring tax dollars including income taxes, tariffs and taking away benefits from the poor (like food and healthcare, killing people) to said rich. Austerity, hate on poor people who manage to get some crumbs and "worker harder, it's a meritocracy" for everyone not rich. And if you talk about it, you're a "BHL." (a pejorative misnomer that actually conflates an "excessive" sense of social justice with a particular form of even more contradictory libertarianism.)
Anatomy of a Decacorn: Tech vs. Biotech
I have washed $20 bills in my washing machine (by accident) a number of times with no ill effect
I'm curious what you're doing in chrome? I've got a 2018 model with 32gb of RAM and I've never seen the beach ball in chrome... I've got 11 chrome windows each with dozens of tabs.
Broke Billionaires
Nothing says “the 1970s” quite like wood paneling :-D
A peek inside the cutthroat world of politics, only brought to you by an accidental recording of a private conversation.

I feel this information really shouldn't be hidden from the public as it's the public that is supposed to a part of a democratic system. How can we elect our officials and voice our opinions, if we are not informed of hostilities from foreign governments?

Do you think China would have even said that if they knew that each conversation is public record.
I gave a similar talk “Inside Git Guts with Ruby” at RubyConf India 2013 - https://m.youtube.com/watch?v=lPlwkxrG2NM

I had to learn a lot of git internals and it was super fun
Ubuntu is turning more and more Windows-like it seems. I was on PCLinuxOS for a while, and updates were user-initiated, iirc. Most wouldn't require a reboot, unless there was a kernel update. You could do those updates and happily not reboot for days, only getting the new kernel when you did. Now I'll get icons and messages indicating that I have security updates available, and after a while I'll be told that I need to reboot (since it apparently did them for me instead of waiting on me to do it myself). Then it would bug me more and more often to reboot until it just left the message on the screen. I'm running simulations, I'll do it when they finish. At least it hasn't progressed to the stage of just rebooting at an inconvenient time, which seems to be the norm in windows.

Still, it's inoffensive enough that I haven't bothered tracking down how to make it act sane again.
In the traditional crime triangle of motive, method, and opportunity, baiting and trapping artificially supplies the opportunity, and in some cases also the method, such that crimes that would not normally occur take place in such a way that it is easier to prosecute them than the naturally occurring crimes.

It replaces the pursuit and prosecution of people who have committed crimes in the community with jamming up all the usual suspects.

It's lazy, and it takes resources away from victims waiting for satisfaction. "Sorry, we aren't going to look for the person who robbed you, but we arrested 30 folks who are criminally predisposed to do exactly the same crime against cars similar to yours, if they're parked nearby, with unlocked doors, and pawnable valuables easily detectable inside. One of them might even be the person who robbed you! We're not going to check, of course, but you can maybe pretend that we caught them, to make yourself feel better."

Instead of setting a bait car, and watching just that one while it's out, watch over as many cars as possible to detect and prevent break-ins, all the time--as the community expects its police to do, to earn their pay.

It may be effective in the short term, but it also undermines community trust in the justice system, which is critical for policing to be effective in the long term. If you round up and persecute all the usual suspects at regular intervals, their friends and family will stop helping you, and start shunning you whenever you come 'round to "help".
Best Practices for Identifying or Requesting User Locations
Using existing laws:

In general, fraud against the company.

In this specific case, you might be able to throw in conspiracy to violate the CFAA.

Using new laws:

I would be perfectly happy to have a "corporate espionage/bribery" law that made it criminal to accept money personally to change your behavior as an agent of a company. I would prefer it if that law only applied when you and the company opted into it via a contract to minimize disruption to any existing schemes where that is considered acceptable behavior.
Someone did; that someone is Adobe. Adobe Animate (previously known as Flash) can export JS code that uses a canvas to draw the animation. It has been this way for years.
No, there is nothing backing the Kong token. See section 4 in the paper for more of a discussion on the token issuance.

We considered various stablecoin constructions, but most of them effectively pin to fiat which (1) seems to defeat the original intent of cryptocurrencies (i.e. think back to 2009) as not subject to the whims of central banks and (2) seems to just duplicate fiat currencies in a more expensive format.

Likewise we are doubtful that most folks holding BTC/ETH/etc. would actually be willing to spend it on something, vs. just continue to hodl in a cooler format.
Apple, Facebook Clash with Senators over Encryption, Backdoors
I'm impatient. Take my money now!
Chevron, Facing Fossil Fuels Glut, Takes $10B Charge
I'm honestly not surprised.

Judging solely by the UI, I actually kinda like Atlassian's tools, but they're a huge pain in the ass to get working with privacy extensions installed (uMatrix, uBlock, etc.). They make cross-site requests all over the place (to weird servers like "some-huge-name-that-obscures-the-host-name.atl-pass.net", and even some third party servers!), tons of Javascript and css for basic features, etc. Using dubious features like referer headers seems right up their alley.

It's one of the main reasons I only use them at work, and won't use them for my personal projects. I'd rather pay for GitHub and Sourcehut so I don't feel like I'm opening my browser up to a bunch of security problems.

In the past they've also made some really brain dead (IMO) decisions like going out of the way to break middle-click paste on Linux.
Ask HN: Good way to showcase your sideproject?
I know ProductHunt's ship as well as BetaList but I was wondering if there are any other websites were you could showcase an upcoming project you are currently building. thanks
GCHQ Stroom: highly scalable data storage, processing and analysis platform
SROs abound in downtown Los Angeles, many converted old hotels. Some are run by non-profits.

https://www.kcrw.com/news/shows/greater-la/no-kitchen-shared...
+1 on point 2, no matter how terrible this sounds. Unfortunately this means decoding what your manager, and your organization, understand a manager to look like/talk like/act like.
> Every company started by someone uses experience they've generated at a previous job.

No-one (at least I don't think anyone) is suggesting that knowledge, experience and skills belong to your employer.

But if I'm a video game developer, and I invent a new shading technique for video game graphics while I'm employed at BigGameCo (whether at home or at work), and I have signed a contract that assigns ownership of my inventions to BigGameCo, then that contract is generally enforceable (again, according to my non-lawyer understanding) and that invention belongs to BigGameCo.

I'm not trying to say the line is always going to be clear but skills/experience/knowledge is fine; work-product is not. Bring your sales know-how; not your Rolodex. Bring your software architecture chops; not design documentation; etc.
Having no other resources, as a kid I sent Zilog a letter asking for a copy of their Z80 docs. Probably wrote it in crayon.

Bless them, they sent it, and that's how I got started learning microprocessor architecture.
They're literally printing money, if people actually buy it I don't think funding will be the problem!

(I could be wrong but from skimming their technical spec it doesn't seem to be redeemable for anything other than digital Kong tokens)
I despise large laptops. Anything thicker than my 2015 mbp blows
Of course opinions about programming languages are allowed. You just have to do a lot better than "fuck google and fuck golang" and the rest of your comment above.

If you read the site guidelines, you'll see that we're looking for curious conversation here. Also this: "Comments should get more thoughtful and substantive, not less, as a topic gets more divisive." Since programming language opinions are pretty divisive, comments about them should be thoughtful and substantive.

https://news.ycombinator.com/newsguidelines.html
Visual Subnet Calculator
I was kinda shocked to see Worcester mentioned here in the top comment. I and some other students are currently paying $4350/mo for one of these triple deckers that you mentioned.

I really prefer the zoning laws and building style present in Hanoi. Our house is five stories tall, and some of our neighbors have houses with six stories. Although they are not very big per floor (they may only have 2.5 rooms per floor), they are very space efficient which allows for tons of amenities to be within walking distance.
As a Linux and freedom lover, I think this is both good and bad.

Good because if you're going to use software as commercial as this, at least now you can use it on a privacy-focused OS environment (Linux). I appreciate that from MS.

Bad because this app appears to be closed-source - please correct me if I'm wrong - and people can get a false sense of security with offerings like Microsoft's, or other 'Linux' situations like China's spyware OS 'DeepIn', or indeed Android which is 'Linux' and yet spies on you too.
Why limit the bill faces to Western philosophers? Seems like a more international approach is appropriate for both end-user adoption and the crypto space in general.
Edit: or are they all Greek gods?
The update might happen but any running programs won't pick up the updated libs and will still be vulnerable until you actually reboot (or restart the programs).
How do they hold up in a saltwater environment? My feitan/yubikey U2F physical tokens are developing rust/corrosion just being on my keychain and being thrown in a drawer on my boat for a couple hours at a time. I2C leads + saltwater environment seems like it may cause some problems.
Have you ever been in a courtroom? Not a lot of neutral statements of unvarnished truth pass back and forth there. Some do, but not many. I am extraordinarily worried about the precedent of paying witnesses for their testimony, which is what this amounts to. However good we think that our reasons may be.
Does it go there in term of size?

scratch < distroless ~= alpine < debian-slim
Seems like repealing section 203 in connection to paid advertisement would be sufficient, if Facebook publishes a advertisement that defrauds users and profits from it they can also share a portion of the blame.
Just a bit more expensive than the higher end notes produced by Switzerland/Australia and less expensive than limited edition postage stamps.

We looked at existing hardware wallets like trezor and ledger and realized we could create something like this for 1/20th the price. Once we realized the numbers we were playing with we ran with it. Conceptually, I prefer validating something with a cryptographic signing operations rather than looking at some watermarks.

Kong is a proof of concept but we could always print these for other governments.
https://www.youtube.com/watch?v=pKoK9znaPSw
I understand many people here, and in the world, don't like cash anymore. But there are many others, like me, that still think that physical money gives them a better feeling of their spending. So in my eyes Kong is a really nice take on the cash technology, not to mention it's beautifully executed.
Hi Guys, let me share this with you..
I was going through terrible times with my partner. I suspected he was cheating and I needed proof of this to back my claims. I couldn't continue with this. All I wanted was to be sure of what was going on before I make any decision. I don't make blind conclusions; I always want to see the proof for myself.
I took the pain of searching for a professional hacker who can help me hack all communication applications on his phone ( WhatsApp,Text messages, Facebook, Viber, Instagram and email). I was able to meet an amazing hacker his hack services was professionally executed. All the hack was done remotely. He didn't need physical access to the phone before it was hacked. Under 6 hours, the hack was done. Between these 6 hours, I was given updates about the progress of the hack. This gave me rest of mind; it was very easy to trust his work. Contact him Via the following bellow…..EMAIL:Jamesethicalhacker@gmail. com TEXT,CALL and WHATSAPP ON :+1(775)374-4344
If you are interested in any of his services which ranges from phone hacking to social media account hacking, you can get through to him via his email address OR phone number and he will deliver a perfect job for you.
Well, anyway it doesn't seem worse than how we test our biological neural networks before letting them drive huge chunks of metal around
Also FrontendMasters[0][3] has some great courses here's a few repos from an Instructor Scott Moss[1][2]. Though Frontend Masters is quite a bit expensive I find the training super great.

[0]: https://frontendmasters.com/

[1]: Fullstack GraphQL course: https://github.com/FrontendMasters/fullstack-graphql

[2]: API Design Node.js and Mongo: https://github.com/FrontendMasters/api-design-node-v3

[3]: https://github.com/FrontendMasters
Diplomacy wouldn't really work if you couldn't be candid. And if you knew everything you said in diplomatic conversations would be public, you'd be less candid. Or you'd only work with those, who would provide you with secrecy.

For the record, we don't know whether the Faroese government let itself submit to the pressure, or whether they are now actively pursuing other avenues. But I would imagine with the leak, that it's not the former any more. The question is whether it would have been had it not been for the leak.
What are the disadvantages of kernel bypass?
Canadian parental leave policy is now granting an amount of parental leave for the mother who carried the pregnancy, an amount of parental leave to be shared between the two parents, and an amount of parental leave for the second parent. So basically the second parent is strongly encouraged to take time off to spend time with the child, so that they too, not just the carrying mother, partake in early parenting...
Complaints about regulations always ring hollow to me, because they always seem to imagine that regulations spring into being ex nihilo. Regulations are practically always written in response to something going wrong -- frequently, involving somebody ending up dead.

So often it just seems callous: this regulation is inconveniencing me, so let's remove it. If that harms other people, that's their problem.

That doesn't mean that the regulations were well designed, or even if they were, that the reasons remain the same. But that's the point: regulations are removed by the same processes that create them, and they don't get into place lightly, either. So if you want a regulation removed, you need to figure out what caused it to be created in the first place. Only then can you create a better regulation that solves the problems that need to be solved.
It's true that by "this place shouldn't exist" I thought you were referring to more than just the restaurant.

The thing is, though, that the burden is on you to disambiguate, otherwise we end up with the same kind of flamewar. I don't think that's overexplaining at all. You didn't do it, so some explanation is necessary, and this is standard HN moderation. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
Most by what metric? A great many cities in the US permit most (all?) of these things.

None of them are popular to build now, however, where they are allowed.
This comforted me tremendously “Don’t be chilled by what you don’t know. You ain’t cybersecurity.”
Just to give you another popular app to try out: Magnet

https://magnet.crowdcafe.com/
The 4th Amendment obviously doesn't comment on public-key encryption but it clearly wasn't designed to make it more difficult to investigate crimes (wouldn't investigating crimes be easier with unreasonable search and seizure?) and make it plainly illegal to wander around through people's personal effects looking for evidence of crimes.
Uh, did you ever ride one of those Fung Wah type buses? They were terrifying even before the spontaneous combustion trend started.
Even the guy that invented the Pokedex was too busy to complete it.
No, that isn’t what GP is taking about.
Man, Amazon is is one asshole of a company. I wonder what people like Bezos actually thinks about these workers. Whether they are even considered human or not. I guess not.
> The $10k number you are citing is a joke compromise defeating most of the point of UBI.

$10k is about what I've seen for most UBI proposals. For example, Yang is proposing $1000/month: https://www.yang2020.com/what-is-freedom-dividend-faq/

When you think of a reasonable UBI amount, what are you thinking? Do you have examples of proposals that use figures in that range?
Governments do not like this. See: Liberty Dollar
So physical Kong notes collateralized by ... digital Kong tokens? Don’t see how that could possibly go wrong. It’s Kong tokens all the way down.
It is my understanding that boarding houses were not cheap. But I've mostly only read about them in fiction form the time period. If there's any truth to them, it seemed like to afford to live in a boarding house in the city proper you needed to be a single working professional.

I think people liked to live like that, just like they'd like to have fresh made meals and live in walking distance to everything now. But once you get married have kids, it gets too expensive. You're housing and feeding multiple people that aren't working. Also, people forget boarding houses usually came with a shared bathroom.
I wonder why this sort of thing seems to be thought radical. Infiniband RDMA well estabilshed, with low latency and high bandwidth. (There was DMA between the micro-kernel-ish systems we used in the 1980s which got basically Ethernet line speed on <1 MIPS systems, as I recall; I assume it wasn't a new idea then.)
I was curious to see how exclusively and wow was I shocked. Nearly 100% of the 600+ posts are spouting the official CPC line on a range of topics. It's effectively a sockpuppet account.
Volta (YC W19) Is Hiring an EE Intern – Programmable Chips for Biology
Would be awesome if there was more of a story behind this. Clicking the link just leaves me scratching my head.

Even with the comments it isn't clear what the story is (at least at time of 15 comments)
I was giddy with excitement when I first turned the lights on.

I know that feeling. I once worked in a place where we occasionally had to drive on airport property, and the company trucks all had giant yellow light bars on top. It was awesome.
Submit grievances via this form. Get them published on Festivus
So maybe the other guy is the one who is NSA pwned...
I’ll tell you what, it looks really awesome. Kudos to the designers.
So in theoretical use, is everyone expected to validate authenticity of each note exchanged?

That seems painful for small transactions, but without it you lose absolutely all the security benefits of crypto, right? (e.g. vulnerable to good old fashioned counterfeiting)
I just looked up how much it would cost me to buy a block of aluminum big enough to mill one of these stands... $1400. Of course they can buy cheaper aluminum than I, but to make a profit they must also be using slightly larger blocks so they can mill two (one inverted).
Reddit | Senior Backend Engineer | San Francisco, CA | REMOTE | Fulltime | www.reddit.com

The front page of the internet," Reddit brings over 430 million people together each month through their common interests, inviting them to share, vote, comment, and create across thousands of communities. Come for the cats, stay for the empathy.

The Special Projects team at Reddit is exploring a different vision of how the Internet can work. The Internet is the most important public square in history. Billions of people use it every day to connect with each other, share ideas, and do business online. It shapes economies and elections, relationships and futures.

Our goal is to tear down the walled gardens and restore the balance of power online. We believe there are new models for the Internet that put power back in the hands of people, and we believe they will be found. Among large social networks, Reddit has a distinctive product and user base that is uniquely suited to realizing this vision.

We are hiring backend engineers who can move incredibly fast while delivering a quality product. You'll work on the highest impact project in a team of brilliant engineers like yourself. In addition to building technology, you’ll contribute to the product and business strategy.

https://boards.greenhouse.io/reddit/jobs/1977439
One of the early voting centers for Orleans Parish is there
The standard benefits of using something mainstream vs. something niche - x100 more scenarii tested in the wild.

In my limited experience, some things don't compile targetting musl. If everything works alpine is sup. Else, it may be fairly difficult (and mostly unjustified) to fix.