skysight-inc/HackerNews huggingface dataset:
Meltdown is a side-channel over any memory-dereference that is in L1 cache. (by measuring the time it takes to read memory: you can determine what is or isn't in L1 cache). As such, any memory read is vulnerable to a meltdown-like attack unless the appropriate caches are cleared (if the cache is cleared, then the Meltdown gadget takes the same amount of time on all memory and no longer works)

Spectre is a side-channel over any branch-predicted loop (and I assume most kernel code has a for-loop __somewhere__ that can serve as a target. Even a stray memcpy is sufficient), where the Spectre gadget can read memory across the timing-attack side channel. (by measuring the time it takes for the branch-prediction to occur in the target for-loop)

That's why TLB, L1, and branch-predict data needs to be discarded whenever the kernel code starts executing, to prevent these side-channels from leaking information. These caches / branch predict data is worth many hundreds, maybe thousands, of clock cycles. You don't want to just do kernel task-switches willy-nilly.

> Kernel should know better when it's good time to mark and sweep

The optimal time to mark and/or sweep depends on the application and goals of the programmer. There's a reason why Java has over 3 garbage collectors for the user to configure.

Throughput-based code (ex: number crunching) wants a different garbage collection strategy than UI-based code (aka: what we have here, a grossly latency-optimized GC but probably much worse throughput figures).

Throughput-based code is happy with "stop the world", because "stop the world" provably does the fewest garbage collect cycles. "Stop the World" means you __only__ run the GC when you run out of memory, and not a minute sooner!! Because you're out of memory, you have to stop the world, causing large latency spikes randomly. But from a throughput perspective, this is the most efficient: least amount of memory reads/writes or CPU-clock cycles spent doing garbage collect duties.
But those ads are static. They have no animated gifs or videos, having to rely on typography and still images to catch your attention. As a result, they are much less intrusive.

More importantly, they couldn’t track you, nor did their selection rely on any knowlege of you (besides the fact that you were reading byte magazine.)
A bunch of memes? There are 20,000+ words of notes there that are accompanied by comics (made specifically to raise ADHD awareness) and relatable memes. But hey, sure :)

If you find the memes interesting, but more importantly - relatable, my best tip for managing would be to get an ADHD evaluation[1] and see if medication[2] works for you.

You can also use this list to tell your therapist/coach about the issues you are struggling with - it's much easier when there's a list at hand. I simply pointed mine to this page.

If you relate to just a couple of entries, then I don't have much advice. If you find many entries relatable on most days, then joining ADHD groups on social media, learning about it, getting self-help books specifically for people with ADHD, and, yes, medication will be a life-changing experience.

Which case is it for you?

[1]http://romankogan.net/adhd/#Diagnosis

[2]http://romankogan.net/adhd/#Medication
> that skin color may be a correlative indicator that the resources should be invested to test their genetics for known maladies

You're right, but people are still starting to call this racism. I've been in the meetings where HR hammered home the point, and I quote "race is a social construct with no biological meaning". And some our software is supposed to support medical fields :(
As a kid I did a lot of lead-based soldering. Could this be an issue?
Basically https://gist.github.com/Alir3z4/6b26353928633f7db59f40f71c8f...

but don't think it will be useful for everyone, each usage and requirements is different and needs different solutions.
By "tabs", the person to which you replied meant the ability to view multiple chats at the same time, I think.
> the ad blocking results are as good with better performance

I invite you to go through all daily commits made in uBlock Origin's specific filter lists to solve reported real-world issues[1], and find out if every single one of these issues can also be solved in a typical Safari content blocker, just as they are immediately solved in uBlock Origin.

For instance, it would be an interesting exercise to find out how many of the fixes committed between Sep. 21 and Sep. 27 inclusively can or cannot be also be fixed in a typical Safari content blocker.

* * *

[1] https://github.com/uBlockOrigin/uAssets/commits/master
This is correct. To expand: things like installed extensions, window size (as well as monitor size), bandwidth and general user speed, adblockers themselves and their individual block lists, and browser are all adding to your trackability profile.

I believe you can get specific information about user's operating system (either through legitimate, direct checks or by exploiting features and using process of elimination such as X version of Chrome is only available on Mac) and of course hardware IDs.

Your IP is obviously out there as an obvious profile that can build a general picture of you in a very similar way to phone numbers. If you use a VPN, the IPs bought by that can also be profiled to narrow you down. If you’ve seen a denial message telling you to not use a VPN, this can be what’s happening.

There are also just official exploit-tier-like features constantly being added. For example, Chrome is adding the ability to see if you're idling on a page.

I've noticed some major internet sites compiling this type of information for use in, for example, permabans. Trolls have otherwise been able to use a VPN or just create a new account. This is a large driver of finding new tracking methods outside of just personalized ads.

I think a lot of this is in its relatively infant stages. I suspect it'll be 5 to 10 years before people become aware and some newsworthy incident of major abuse occurs.
Does this mean that you would vote for a candidate who promised to impose meaningful regulations on your industry? Even if that meant harming a company you work for / may have equity in? Is there some other solution to this tracking proliferation?

My question assumes you believe the work your industry is doing is unethical but that seems to be implied by your posts.
It would be nice if they had some more data in here. Instead of statements like, “For lead there’s no too low. We want zero.”.

Like what is the sensitivity of the test? If we get more sensitive tests, does that mean out target changes? Where are the limits that we see issues?
The OP mentioned that this was a few years ago. Things are different now. Literally one month ago Illinois became the second state to legally require all lead pipes to be replaced [1]. I do believe that the Chicago city ordinance of last year waives all permitting fees now. I am not sure how it is going to be paid for: public money? homeowner pays?

[1] https://www.ilga.gov/legislation/BillStatus.asp?DocNum=3739&...
Slashdot’s meta-moderation system worked well for a long time. One set of people could make moderation decisions directly on content, and then another unrelated set of people would review the moderation decisions and support or revert them.

It was all tied to karma and permissions in ways I can’t quite remember. But essentially there was no way for a motivated bad-faith group to both moderate and meta-moderate themselves, and the incentives marginalized bad faith actors over time.
Unfortunately, they didn't follow up on the scanning part. How does that work? Ok, the allocator is obviously cooperating, but how do you get from scanning piece of C++ memory to the class of the object?
Genuinely, I find the QR Code menus super annoying.

There's something nice about the tangibility of a physical menu. But if a company can create a super sleek product for a digital menu, and perhaps integrates direct payments into it (so that people don't have to Venmo each other etc), then that could be an awesome opportunity.
It automatically stores your captures to your dropbox account. Would be good to allow you to store locally as well though.
My understanding with Wasabi is that it is only intended for up to 100% egress. It doesn't look like r2 has this limitation. Though I can't imagine egress is actually completely free beyond a certain point.
I haven’t thought about the native version, it was fun trying to implement it for browser. To resolve the performance issue I would try next to switch to the 2D simulation engine, since we don’t use the height during the parking. Getting rid of the 3rd dimension, lights and complex geometry would increase the performance drastically I believe
The code worked differently when the moon was full
Pair this with a snipping tool and all sorts of people in banking would use it for a few hours a day, especially if it could paste to Excel or at least fill the clipboard in a way pastable to Excel.

I used to work for a bank on their innovation team and pitched basically this, but as an intern I had neither the skill nor time to do it. But it was certainly something a bunch of people internally wanted.
Second State,leading the efforts for WasmEdge joins CNCF as a silver member
Congrats to the Unlock team! They’re super sharp and dedicated builders, excited to see where they take this going forward.
Except when the CIA "transforms" the country in a "democracy" and american conpanies syphon all patents from those "democracies'". It happenned in eastern europe for example.
As both a founder and a hobby angel investor, I don't think this is something I'd use. AngelList has terrible UX and it's never clear how things work. Combined with slow customer support, I can't imagine how this would be better than using the best of breed for each part of banking, cap table management, legal, etc.
Very generous offer from Cloudflare. I signed up.

The main question: how can Cloudflare make this into a sustainable business?

* cost/gb is cheaper or same as s3, gcp, azure

* no egress charges to customers, but they still have to pay for transit when they cross an AS!

what is the hidden angle Cloudfare is using here?
It's a difficult problem.

No moderation = porn, gore and nazi discussion. Period.

"Light" moderation often = bad-faith trolls taking advantage of your moderation.

HN does a good job of moderating for civility and effort of the post, rather than ideology.

Here's the thing: Talking about controversial topics, or debating with people who think differently than you, takes a lot of effort online, because there are so many trolls and others baiting you into defending a position without putting any effort to explain their own.

So yeah, heavy moderation is an unfortunate necessity in some forums.
The killer product of robotics could be a low-cost collaborative manipulator
Here's a thought. Have a platform where identity is verified. Users can post publicly or within their circle. Any illegal or fraudulent content can be handled by the legal system due to the lack of anonymity. Beyond that, let users form groups for topics like reddit.

Where does this fall down?
Ultimately our goal is not to enforce that any derivations of Airbyte become public, so AGPL was much heavier than needed. By contrast, the Elastic License toes the line perfectly as it only places the restrictions mentioned above.
Not everyone can just "choose" what field they want to be in. If I got to choose what I did every day, I'd be a writer or a musician. No ethical concerns there.
All mods are opinionated. They're either humans, or bots programmed by humans. I don't see why you're trying to deny humanity to moderators.
Absolutely. I'm not an owner and I don't have any equity.
> While that might have been true in 1981, nowadays a high-speed rail ticket is on average more expensive than a plane ticket,

I'm not sure how true this is when you factor in getting to and from the airport, or if you for some unaccountable reason want to bring anything larger than a laptop bag with you.
The problem with this thinking is that in most cases having the server send all of the data back to the client to do their own search is going to be far more expensive than running the search (even of unindexed data) on the server.

And I am only talking about server-side costs here as moving data between server and client has costs both in serialization and transmission. Yes, I can make up regexes that wind up throwing this cost comparison out the window (e.g.: lookbacks), but the fast majority of cases this is true.

I think the main reason that ElasticSeach does not do this is that they would either have to provide grep-like or regex support, and those two would provided different answers than the lexical search system they provide otherwise. That would be a nightmare to try and explain the differences to clients.

Note: in most places I wind up using ElasticSearch I absolutely hate that it is lexical search rather than grep or regex... especially when I am looking for exact text. This is particularly a problem in Jira where I have to be very careful about word boundaries.
I just have always had a lot of problems in general with GTK programs on Mac (well, admittedly I've used just GIMP and Inkscape) that involve scrolling and zooming with Magic Mouse. The action is just not smooth and jumpy, which makes things imprecise, which is incredible frustrating for graphics programs. Not to mention it isn't a good user experience.

I've seen an open ticket that puts points the finger at refresh rates being out of sync. Don't know if a traditional scroll wheel would fix it, but I really like my Magic Mouse.
“ The current CIE previtamin D3 action spectrum is valid for 25(OH)D3 induced by two diverse solar-simulated sources but not for sources containing nonsolar UVB, which are widely used in laboratory studies. Thus, published risk/benefit solar UVR calculations using the CIE ac- tion spectra for erythema and previtamin D3 are likely to be valid, though this remains to be tested. Nonetheless, an improved action spectrum based on serum 25(OH)D3, rather than cutaneous previtamin D3, will result in more refined assessments of risks and benefits of solar exposure that should result in better public health advice. In contrast, the CIE previtamin D3 action spectrum is not valid when using broad-spectrum sources with nonsolar UVB wavelengths” from the full paper at https://www.pnas.org/content/pnas/118/40/e2015867118.full.pd...
For those who wish to experiment, this method has existed for Photoshop for a long time as a plugin: http://www.descreen.net/eng/soft/descreen/descreen.htm
My concern is that people tend to lean into the "noble savage" trope; I've seen a lot of people who imply or outright state that wars of conquest are a uniquely European concept. But I do agree with the narrative issue you're pointing at. It's wrong to see colonial-era violence and oppression as a side show to the "main plot" of history, especially given that the majority of the global population was on the receiving end of it.
Thanks for bringing this up.

I had a friend once who said that Wells Fargo was the devil, but when looking around at other banks, I don't see any who aren't involved in scandals or user-hostile behavior.

Which companies should we use when nearly all of them seem to be corrupt?
Have you considered that they might be tracking your thoughts and speech through microchips they implanted in your during your Covid vaccination? /s
Really cool. I'm interested to hear your plans for this. Are you planning to offer as a service/open source/etc.?
Yes, I was confused as well because without rewriting SMTP MAIL FROM(or Return Path or Envelop) then SPF will definetely fail.

However, even if SPF failed, and DKIM is passed, it can still be trust worthy. Also, if the mail server support ARC(which gmail, for example, does) we can append our ARC so mail provider can look into it to investigate email forwarding chain.
Upstream has changed the behavior as a result.

https://savannah.gnu.org/bugs/?60937

Kind of surprising as many *nix utilities that can shell out will offer "secure" modes to disable such an ability.
I wonder what percentage have detectable levels of PFTE/PET/etc? At least we know the long-term effects of lead: https://particleandfibretoxicology.biomedcentral.com/article...

"Although these combined studies highlight the possibility of uptake and translocation of micro- and nanoplastics into the human body following oral and inhalation exposure, there is an overall scarcity of studies that conscientiously and systematically investigated the extent of particle translocation to different organs in relation to particle dose and particle size. Moreover, the potential health risks resulting from micro- and nanoplastics exposure, uptake and translocation is poorly investigated and is an important matter of ongoing debate."
No maintenance except the security patches I guess :)
William Gibson considered piracy a "tax on fame", so you should feel pretty good about those Google searches :)
It’s not covered in this post, but IP infringement is another moment in life when content moderation becomes necessary. You have to be above a certain scale for large IP owners to notice or care, but if you’re growing and allow users to upload media, you’ll eventually need to start handling DMCA requests at minimum.

Also worth noting that the infamous Section 230 is what allows companies to take these sort of best-effort, do-the-best-you-can approaches to content moderation without fear of lawsuit if they don’t get it perfect.
Trump associates tried to get the VA to sell vets medical records for profit
Thanks, we were very surprised. We wanted to help others with this issue just in case it already happened to someone else with moderators ;).
Google is full of smart people who get paid to deal with obstacles like that. If your goal is to block ads and tracking, it's extremely unwise to depend on software that is fundamentally controlled by an ad company. If someone threatens their business model, they will throw an overwhelming amount of money at the problem. They are boiling frogs, so most people won't notice. Killing uBlock Origin and disallowing browser extensions on mobile are just small steps in a long-term plan.
Box and Google Drive.
One alternative to moderation is to make people pay to post. If you set the price high enough, you'll disuade most spammers and some other species of asshole. Unfortunately, people who hate moderation also tend to hate paying for online services.
>bring intellectualism to “I stayed up until 1am playing Slay The Spire.”

The point is that it isn't doing something fun like playing a game you enjoy, which we can all understand as being a sort of trade off, its where instead of going to bed you do sort of.. mindless, pointless, unpleasant things like refresh the same feed(reddit, HN, what have you) or browse mindlessly and for much longer than anticipated.

Maybe you just haven't experienced it? I have. It is very different from times where I make decisions that leave me worse off in the future.. when I ask myself "why did I do that?" for drinking or staying out late I usually have an answer. For another set of behaviors, where the term 'revenge bedtime procrastination' feels like a shockingly apt description, I have no answer.

Maybe you can better understand this as people finding words for their feelings.
Working as designed?
I don't know/think there is a hidden angle.

Eg. What could be the hidden angle of providing domains at cost ( which they do).

I think it's a matter of having a more complete cloud suite and expanding their portfolio while gaining market share.

Clarification: I don't think they do this at cost. Just cheaper than the big 3.
Yeah, I hate it when I accidentally pay someone 6 orders of magnitude more than I meant to when I’m using cash. Just like cryptocurrency!
I think that people understand the level of engineering and technology that goes into batteries and their designs these days. There’s a ton of talent, a ton of continuous innovation, it in the end it too often gets relegated to a black box for energy in and energy out. Which is in some ways a testament to the quality of the engineering.
Honestly, very long-range trains (overnight) aren't particularly popular anywhere.
You are right in this particular case. CV may effectively solve this particular problem, but will be useless if yellow cars are replaced with blue trucks, or if starting angle will be slightly different, or if other cars will start moving as well, etc, etc.
Genetic algorithm may be useful if one needs to animate cars in a game and making the algorithm less deterministic will make the game look better.
I did this when I was in high school for fun. I used a poorly designed comment system somebody designed and used it to transfer files around hidden in gibberish comments. Maybe not the most common thing, but more common than you would expect.
Does a single atom have known negative effects?
There should be a 'bad symbols' list you can block like you do expletives. There's surely zero need to support that kind of thing in comments.
Yeah, in the end you wind up with a small set of persistent adversaries who have been tweaking their abuse alongside your fixes, and a hopefully much higher wall for new abusers to scale.

If possible, it can help to hold back new systems and release a bunch of orthogonal anti abuse systems at once. Then the attackers need to find multiple tweaks instead of just evading one new system.
Aw, I have a copy of the 1988 Byte issue on Lisp that I ought to scan and contribute, though probably to the Internet Archive, as I'm not sure how to send it in here.
I always rip them out only to find the stub left over is often worse. One of life's great annoyances.

Interesting comment re: TV. I'm in my 40s and have never regularly watched TV but never thought about why. Your description is good. It's just an overwhelming assault on the senses for very little in return
Thanks for whatever you did. BYTE, for this small town kid, opened up a world of computing!

Great publication. I sure wish we had something similar today...

Heck, I would take it printed.
> A good tree will have something like log(n) depth so normal recursion should be fine.

Yes, this is true for comparison/search/sort/bucketing algorithms. But in other applications (e.g. graph theory, networks, sparse matrices) a depth of n, for n elements, can be perfectly legitimate. Or it can even be an edge case, but one you don't want to handle by just segfaulting.

> Which reminds me: what is a good tool for analyzing / viewing a C++ programs call tree?

Linux perf can collect the necessary data. Then for frontends, I am not sure. KDAB's "hotspot" ( https://www.kdab.com/tag/perf/ ) can do flamegraphs, but this may be more performance-oriented than what you're looking for.

Edit: perf can collect the data statistically. It will miss many calls, the ones that are the least time-consuming.
That is exactly what I do.

There has to be a name for it; the closest I've come across is a canary trap.

https://en.wikipedia.org/wiki/Canary_trap

> A canary trap is a method for exposing an information leak by giving different versions of a sensitive document to each of several suspects and seeing which version gets leaked.
Interesting idea.

This will work with C (for now), but it will fail with language like C++ where you can have lambdas. When a lambda is a function parameter, it will need to be aligned to other parameters, but the lambda body will require indentation.

Of course, there are ways of avoiding the problem, eg. by using a variable for the lambda, yet isn't this sweeping things under the rug?
Hyper-naive question: If something can run in 5 minutes, how can it bother an ISP?