skysight-inc/HackerNews huggingface dataset:
> The latter is effective even with the recommended Foreshadow mitigations

That's different than saying it's effective even with mitigations required for other Spectre-related exploits. When larger problems arise and more general mitigations applied that also happen to be better mitigations for previous, narrower exploits, people don't usually make much effort to review and revise old papers.

AFAIU, discovery of Meltdown slightly predates Spectre, or at least the point at which the implications began to blow up. The Meltdown and Spectre papers were published the same month Foreshadow was discovered and privately reported. It seems two researchers were involved with both Foreshadow and the earlier Spectre work, but that doesn't mean they would have or should have fully grasped the deeper relationships. And all of this happened over 2 1/2 years ago. Since then researchers' understanding of the underlying issues has improved greatly.

The tone of the paper is, I think, problematic. Just read footnote #1, which self-defensively says: "Various authors of papers exploiting the prefetching effect confirmed that the explanation put forward in this paper indeed explains the observed phenomena more accurately than their original explanations. We believe it is in the nature of empirical science that theories explaining empirical observations improve over time and root-cause attributions become more accurate."

So their presentation is "more accurate". And the writers of the 2+ year-old papers readily admit it. All of which is another way of saying these were already accepted, if not yet concretely expressed, beliefs in the research community. There's much value in putting pen to paper and running confirmatory experiments. But that doesn't make it groundbreaking.

EDIT: Regarding "We demonstrate that these dereferencing effects exist even on the most recent Intel CPUs with the latest hardware mitigations, and on CPUs previously believed to be unaffected, i.e., ARM, IBM, and AMD CPUs". If you read closely it's clear that the context is Foreshadow, mechanism and mitigations. They're saying that when Foreshadow was published those architectures were believed immune. But applying the principles of their "more accurate" understanding you can in fact achieve Foreshadow (or Foreshadow-like) side channels on those architectures even with Foreshadow-specific mitigations. But, again, only subsequent to the initial discovery of both Foreshadow and Spectre did it became known that those architectures were more susceptible to speculative execution attacks than originally understood. Thus elsewhere in the paper it's admitted that more general and modern Spectre mitigations also prevent these "new" Foreshadow exploits.
The thing is, history is written by the winners. Depending on which side wins ultimately wins the cultural and political battle, I could see future school children learning in history class how Mark Zuckerberg was a hero for standing virtually alone for the principles of free speech when all the other big media and big tech companies sought to censor conservative voices. If the other side wins, then Mark Zuckerberg will be vilified as an ally of the horrible, racist alt-right.

History, and how history views stuff is not a passive thing, but an active thing based on winners and losers.
Yes, over the time of decades during which he became the richest man on the planet, he probably should have paid more taxes. I fully agree that there might be more taxes, that should be collected. However this one-time grasp for a high amount of the actual possession in the form of stocks is just wrong on some many accounts. Stocks are only money (and consequentally taxable) when sold - forcing people to sell of large amount of stocks wouldn't only be detrimental to their companies, but would have the potential to crash the stock market.
Heidegger.
You reject it as semantically implausible.
i see low grade populism is still rife in the US...
BuzzFeed news are fine, surely?

Are you mistaking daring to assert the existence of truth with partisanship - in "fact"-checking it doesn't matter if a democrat, republican, or banana declares something to be true as long as they are truthful. Vox, for example, do not aim to be a news site in the sense of equal reporting - they take positions and will say things are right or wrong. Sometimes I agree, sometimes I don't but I have never seen anything deliberately misleading or in bad faith from them.
Working different hours from all your friends and family gets old fast. It gets old fast even if your family is on another continent and all your friends are on the same schedule. Most English teachers who come to China start in training centres where they work three evenings and two full weekend days a week. Everyone either leaves China or gets a job with more normal hours eventually.

I’m sure there are people who’d work 13-22 but I’d bet a substantial sum employee churn would be consistently higher.
>They can do those things on other apps, perhaps apps not published by Chinese companies that offshore user data to circumvent privacy rights.

If there's a rule that Chinese apps can't be used in the US, that rule should be put into law, not enforced via arbitrary executive orders. If there's a rule that companies must store their user data onshore, that rule should be put into law, not enforced via arbitrary executive orders.

>"Shouldn't the right to pursue happiness prevail?" should appear unfit to ask in its context.

It's about precedent. Just like the FBI tried to set precedent on phone decryption on an "obviously good" case against terrorists. Once the legal overreach happens once, it will keep happening. Rights need to be protected from the very beginning.

>I'd like to ask what rights and rule of law were upheld by even permitting Chinese products in the US economy, given allowing Chinese products is in effect financing the violation of rights on the other side of the planet?

It's the rule of law of what happens in the US. If the US creates a law imposing harsh tariffs on countries that abuse human rights, then enforces that law, that's rule of law (in the US). As-is we have somewhat free trade. We can only enforce rule of law in our own borders. If we want to really enforce rule of law on other countries we'd have to invade them. We've done it before, but I'm not a fan.
what are you using to do the full text search?
I hope old people do internet puzzle on tablets outside after a nice walk and not stuck indoor. Prolonged computer use is really not great.
I'm going to sound like a very grumpy old man—because that's what I am—but if you actually need a tool like poetry, you've really fucked up.

I have a ton of respect for the author. It's really good code and solves a hard problem in elegant ways. But it's a problem that we shouldn't let ourselves have.

It's like a patient talking to a therapist:

patient: I'm really depressed.

therapist: Why do you think that is?

p: Well, I've been having an affair with this woman, and my wife found out about it.

t: How does she feel about that?

p: She's pretty angry at me. It's affecting our relationship.

t: How is it affecting your relationship?

p: Well, she doesn't want to have sex with me anymore, and things have gotten a little weird with the kids.

t: How do you feel about not having sex with your wife?

p: It's depressing.

t: And the kids? How do you feel about them?

p: They'll grow up and understand eventually.

t: Here's a pill you can take every day that will make you feel better.

There are two ways to address this kind of situation. The first way is to give the patient a pill to fix the symptom of depression. The second way is to fix the behavior that's causing the depression.

Poetry (and Cargo and other package/dependency managers) are a little pill you can take to make you feel better about stuff.

But there's another school of therapy. I'm maybe going to sound a little like Zed Shaw here, but there's the "Don't fucking do that" school of therapy.

It's possible to fix the underlying behavior that's causing the pain instead of taking a pill. It's harder and requires more work, sure. But in the long term it is a better, more stable solution.

Since I'm already on a bit of a rant, I'll go ahead and say it out loud: agile is the source of many of these types of problems. You start out with good intentions and then one day you end up married to a thing that was only supposed to be a proof-of-concept, but it got shipped because product team and velocity, and now your life is hell, and that POC now has kids, and you're legally responsible for them, and fuck it, just give me a pill, doctor.

Poetry is a brilliant solution to a problem we shouldn't create for ourselves.
Yes, I know why you posted this, I stated as much.

You may note that I added "(I assume)", and then asked "Why else". If people flagging your post as off topic, when it isn't, want to respond? Well, they can.

In terms of poisoning? Please. Have you looked at the rest of this discussion?

From my side of things, I prefer to keep things non-political. To simply state technical fact, and info. Yet when I see a significant divergence from that behaviour, a response is required.
Changing the Way You Upgrade Your iPhone
Hi I am Naj Mahamed and I am the founder of EstimateKick.com We’re a website that tells you the best time to upgrade to a new iPhone.

How Does It Work?

Search the iPhone you want to upgrade to.

Select what percent off you would upgrade at.

See your estimated optimal upgrade time based on price history data

How Do You Come Up With Estimate Upgrade Times?
We analyze iPhone price history and depreciation trends.

Are Your Estimates Always Right?
No, although we try our best to estimate the best upgrade time.

How Many iPhones Can I Search?

iPhone SE 2020

iPhone 11 Pro

iPhone 11 Pro Max

iPhone XS Max

iPhone XR

iPhone XS

iPhone 11

How Much Does It Cost?
It’s Completely Free!

Ending Notes
If you’ve read till the end I will like to thank you and if you're interested at all please check out my site.
From TFA, from 2019 BC (Before Covid):

> [Q] ”What do you think the greatest threat to humanity is at this moment?”

> Gates: “There are some things that aren’t likely but we should worry about — nuclear bombs and bioterrorism (from nation states or terrorism), or a big pandemic. This is the 100th anniversary of the Spanish flu [which killed 50 million people] and if it came back the amount of travel would make it spread faster than it did last time.
> [3]

From 2011, is that the best you have?
‘Impartial’ fact-checkers are revealing their partisanship against Trump
https://nypost.com/2019/02/09/impartial-fact-checkers-are-re...
May I suggest you add time as well to the search results? It's super relevant in the context of news and technical articles.
They still rely on friction brakes. Especially at low speeds and/or heavy braking, which is what most braking in cities is. Also because of the extra torque a more jerky driving style is possible. I'm really sceptical that current EVs make any real difference to brake and tyre particulates.

Drivers of manual petrol cars can already reduce their brake dust by using engine braking. If one drives very carefully it is possible to not use brakes at all. Indeed it should never be necessary. Any time you hit the brakes means you were going too fast. But how many people drive like this? Barely any. Instead people speed right until the last minute then slam on the brakes. Then as soon as the opportunity arises it's heavy acceleration until the next slam of brakes. Driving EVs like this will produce just as much brake dust.
> The OP believes in a secret sauce in Google's infrastructure and that it should justify its breaking up, which enables products like Google Reader not to be shut down.

That's not at all what they said. Their actual point was that because Google uses highly custom infra, it is not easy for them to open source or spin off a singular thing. This is valid even if Google's internal infra is strictly worse than what is available openly. Their point has nothing to do with magic infra. It is cost prohibitive to spin off anything because it has to be ported to a completely foreign platform.

> I claim cross-platform porting is not necessarily cost prohibitive, let alone porting from interal APIs to external APIs, and thus their argument is moot.

Yes, you claim this, and you were and continue to be incorrect.

> whenever there is an acquisition, unless it is a pure acquihire, external products get ported into corporate platforms without the world ending

There is a difference between a situation where you are acquiring a thing for $LOTS, and are therefore willing to invest $EXTRA to make it work with your stuff, and the situation where you are divesting from a thing and therefore don't have the same budget.

But even if you reject that: the internal systems are usually more flexible than the external ones (they have to be, they're what the external systems run on top of). And, even when they aren't, "you decided to purchase them" is a really good justification to management, to use your words, to make additional exceptions.

> They are entitled to their own opinion.

But these aren't opinions. You're just factually, demonstrably wrong. Your (now deleted) statement that there may be efforts underway to better align the internal and external infrastructures may be true, but if it is, it just proves the point that the infra isn't the same today, and that as of this moment such a migration would reasonably be cost prohibitive.

To address your other comment:

> You can run an RSS aggregator service without depending on Google's particular monitoring or cluster management infrastructure etc.

Yes, but you can't run an RSS aggregator built to run on Google's infrastructure without either rewriting it or using Google's internal cluster management infra. The useful about having ecosystems like those is that you can couple couple very tightly between infra and application.
Susan Fowler is legit terrifyingly brilliant. In only a year and a half she went from pre-algebra to grad QM while being a writer at NYT. Some people are just set to a higher gear.
Not necessarily, in this case I didn't reject the phrase "I dropped the pencil on the table and it smashed." as semantically implausible because of its context (it was used close to similar-looking phrases). Of course that it doesn't inform us anything about any "pencil" nor "table", but it does inform us about the limits (or non-limits) of AI.
Has anyone tried CoBudget in their organization?

https://github.com/cobudget/cobudget
Dare I say, that's a little unfair to America.

About a quarter of the population of the USA is either first-generation or second-generation American.

Very few other countries have as much of a connection with the rest of the world.
"In total covid has killed under 6,000 people in a country of ten million. A country with an annual death rate of around 100,000 people."

This is basically deliberate disinformation. In April and early May Sweden had 30-50% excess mortality. And this was despite actually stopping the virus through soft lockdown. What the full count would have been had they let the virus rage unchecked is hard to say, but he's comparing the numbers from a virus that was stopped relatively early with the normal numbers of deaths for a whole year. Do the same exercise for April and it doesn't look good at all.

The reality is that more than 5000 people died unnecessarily in Sweden through failed government policy. And that's before we start counting the adverse health effects on the people who survived.
Who Needs GitHub?
Both Amazon and Walton were not inventors of the technology you're thanking them for, they were just the biggest behemoths that were able to destroy most competition in those respective areas (in the US, at least) and take over the market.

If they had been broken up due to anti-competitive behaviour years ago, you'd be much better off as can be easily verified historically in similar markets where this happened.
Like, at all? Literally, 1/4 of all men don't drink any alcohol, ever?

I'm in a bubble.
Yes, that's how it works. Strong voice & solid platform equals instant assistance. Basically an influncer first support system. I don't go near them anymore.
i really love to watch tech companies being forced to dance the censorship dance. Yeah, that s how it works, when you join the dance, you dance
There is a list of remote companies on Wikipedia: https://en.wikipedia.org/wiki/List_of_remote_companies
"Google is an amazing company, and there's some really great technologists working there," he said. "But fundamentally, their business model is different and they're not known for shipping consumer experiences that are used by hundreds of millions of people."

What does he mean by this? Google search and Android are both used by more than a billion people. YouTube over 2 billion. These are all bigger than any Apple product. If anything, Google is known for shipping consumer experiences that reach a large number of people. Apple by contrast is known for its high-quality, high-price consumer experiences that reach fewer people.
My one and only windows pc was a toshiba laptop, the thing overheated so much that the exhaust grill plastic cracked and broke off leaving a side of the laptop exposed.
No, they are not "lottery winners". First of all, they didn't "win" anything. Yes, the Tesla stocks that Musk owns are suddenly valued more on the stock market. This isn't money that Musk has at his free disposal, as he cannot just sell large parts of his Tesla stock (both because the question of company control and also because it would greatly harm the company)

And also, it isn't a "lottery". This isn't money invested into random stocks for gains, this is the share of the company owned by the founders which still run the respective companies. This is wealth built by creating those companies not wealth that can be spent.
All of them, to some degree. But here's a few off the top of my head that are maybe a little less well known that have really stuck with me over the years. I'll try not to say too much about them, and encourage you to go into them without spoilers, as I did:

* Leviathan (Russia, 2014) - It's a minor miracle this film was made and saw the light of day, depicting as it does the banality of corruption and impunity in provincial Russia. Not especially obscure, it won a slew of awards including a Golden Globe but it's not nearly as well-known as it should be. This film isn't didactic and there really are no "good guys" - it's at least as much a tale of love and loss. I certainly understood local corruption at an intellectual level - I saw plenty of it growing up in the American "Deep South," but as a middle-class white boy it was never really aimed at me. This film helped me feel the weight of it at a visceral level in a way I hadn't before.

* Nobody Knows (Japan, 2004) - Sometimes what shapes us is only visible in retrospect. Most parents, in my experience, will acknowledge the profound shift in mindset and empathy that occurs when you have a kid. Half a decade before my first, I can trace the first experience of those feels to this film. Surely this has something to do with my (20s) age when I saw it, but it's a rare film that triggers such a re-programming of the psyche. I feel duty-bound to warn this isn't a comedy.

* Leningrad Cowboys Go America (1989, Finland and America) - This IS a comedy. A band from (fictional) northern Russia unable to hit it big in the terminal-stage USSR (this film was released 8 months before the fall of the Berlin Wall) comes to America to seek fame. By Finland's (arguably) greatest director Aki Kaurismäki, the heart of the film is a journey through the forgotten routes and dives of the American South. The places are real. The extras are local. As a cinematographic document, it's the best road movie since Easy Rider. The band (by virtue of being visible outsiders) obliviously crosses all kinds of social boundaries, playing in redneck bars and juke joints alike. This film gave me an outsiders frame of reference to a part of the country where I grew up, and was an inspiration to me to get out and see the world. Inconsistently available, I've bought it on multiple physical formats over the years. For folks in the US, I guess HBO Max has a lot of Criterion-distributed films now so they might have it? But I can't tell because that service isn't available in the country where I now live.
The pressures you describe induce diminishing returns, but they are still returns (up to the point that some threshold kicks in and the marginal gain goes straight to zero).
I think I still might have my old Toshiba laptop somewhere. Installed Debian on it via ZMODEM. Good times.
How do such fools find HN? This is a pretty safe spot for intelligence. It's a bit spooky that happened.
You need to email dang. He won't see your message unless you email him.
> It kind of sucks because so much socialising in today's world is based on alcohol.

No, that was the pre-COVID world. You’re on a level playing field now (at least for a few more months anyway).
Absolutely. HN user 'EvanMiller had a lot to say about this, 11 years ago. His tl;dr is that the ranking score should be "the Lower bound of Wilson score confidence interval for a Bernoulli parameter."

I believe HN's ranking system is extremely creative and works great for the main page and day-to-day use (my understanding is that it additionally makes use of time-decay terms for comments and stories). Like you said, it's really just historical search (i.e. algolia) that seems broken.

https://www.evanmiller.org/how-not-to-sort-by-average-rating...

https://news.ycombinator.com/item?id=15709405

https://www.evanmiller.org/bayesian-average-ratings.html

https://www.evanmiller.org/ranking-items-with-star-ratings.h...

https://redditblog.com/2009/10/15/reddits-new-comment-sortin...
very interesting.

From the article:

> Dares, in other words, are a psychopath test. They allow the opportunity to scrutinize people’s displays of social emotions on demand, rather than having to wait for an aversive event to happen.

Perhaps raising the stakes is a great social indicator at seeing how people handle intense situations.
When it comes to making software, Facebook and Google are the best.

Apple is slightly ahead of Samsung :'-D

They couldn't even get the launch of Notes app right last year.
Exactly. Every time I see someone jogging/running in the downtown part of the city, surrounded by idling cars, I shake my head.
you're right.
The price will be so low and I don't think it'll be an issue. Even for the small companies, it'll be almost free.
They'll sure have privacy concerns. Do you think the value being delivered could overcome these kind of concerns?
> Shutting down completely in order to decrease the total number of deaths only makes sense if you are willing to stay shut down until a vaccine is available.

We forgot about the whole "flatten the curve" thing awfully quick. Overwhelmed medical system of Italy was the main cause for their grim consequences. Good for Sweden their healthcare has so much backup capacity.
Thanks man.
Do you think the value is meaningful enough for the companies to use the tool?
No it wouldn’t. Why would I prefer you controlling that company versus someone who grew it to its present size?
The ousting of Ghosn is emblematic of the culture.