skysight-inc/HackerNews huggingface dataset:
This is one of the all-time great LPE writeups.

A summary:

1. io_uring includes a feature that asks the kernel to manage groups of buffers for SQEs (the objects userland submits to tell uring what to do). If you enable this feature, the kernel overloads a field normally used to track a userland pointer with a kernel pointer.

2. The special-case code that handles I/O operations for files-that-are-not-files, like in procfs, missed the check for this "overloaded pointer" hack, and so can be tricked into advancing a kernel pointer arbitrarily, because it thinks it's working with a userland pointer.

3. The pointer you manipulate thusly is eventually freed, which lets you free kernel objects within a range of possible pointers.

4. io_uring allows you to control the CPU affinity of the kernel threads it generates on your behalf, because of course it does, so you can get your userland process and all your related io_uring kthreads onto the same CPU, and thus into the same SLUB cache area, which gives you enough control to target specific kernel objects (of a size bounded I think by the SQE?) reliably.

5. There's a well-known LPE trick for exploiting UAFs: the setxattr(2) syscall copies arbitrary extended attributes for files from userland to kernel buffers (that's its job), and the userfaultfd(2) syscall lets you defer page faults to userland; you can chain setxattr and userfaultfd to allocate and populate a kernel buffer of arbitrary size and contents and then block, keeping the object in memory.

6. Since that's a popular exploit technique, there's a default-yes setting in most distros to require root to use userfaultfd(2) --- but you can do the same thing with FUSE, where deferring I/O operations to userland is kind of the whole premise of the interface.

7. setxattr/userfaultfd can be transformed from a UAF primitive to an arbitrary kernel leak: if you have an arbitrary-free vulnerability (see step 3), you can do the setxattr-then-block thing, then trigger the free from another thread and target the xattr buffer, so setxattr's buffer is reclaimed out from under it, then trigger the allocation of a kernel structure you want to leak that is of the same size, which setxattr will copy into (another UAF); now you have a kernel structure that the kernel is treating like a file's extended attributes, which you can read back with getxattr. Neat!

8. At this point you can go hunting for kernel structures to whack, because you can use the arbitrary leak primitive to leak structs that in turn embed the (secret) addresses of other kernel structures.

9. Find a pointer to a socket's BPF filter and use the UAF to inject a BPF filter directly, bypassing the verifier, then trigger the BPF filter and do whatever you want, I guess.

I'm sure I got a bunch of this wrong; corrections welcome. Again: really spectacular writeup: a good bug, some neat tricks, and a decent survey of Linux kernel LPE techniques.
like this? https://twitter.com/thijsvlierop/status/1501295909275111425?...
Space Station to Host ‘Self-Healing’ Quantum Communications Tech Demo
Freeing up 60% of storage for apps
The bottling company will almost certainly just make something else, according to available materials.
EVs make up about 1% of car sales. Hardly "destroying demand for gasoline".

We'd run out of lithium way before they even dented gas demand.

If you factor in electricity generation from fossil fuels, in addition the lithium mining, your EV is hardly going to save the planet.
Year added above. Thanks!

Related past threads:

Mathematicians Discover the Perfect Way to Multiply - https://news.ycombinator.com/item?id=28579007 - Sept 2021 (2 comments)

Mathematicians discover a perfect way to multiply (2019) - https://news.ycombinator.com/item?id=23919869 - July 2020 (94 comments)

Mathematicians Discover the Perfect Way to Multiply - https://news.ycombinator.com/item?id=19672835 - April 2019 (68 comments)

Mathematicians Discover the Perfect Way to Multiply - https://news.ycombinator.com/item?id=19644374 - April 2019 (12 comments)

Integer multiplication in time O(n log n) [pdf] - https://news.ycombinator.com/item?id=19474280 - March 2019 (67 comments)
Apple has now too much money and is running out of core business areas. Expect more investing in non-Apple areas like gaming, cars, etc.

Though every video game company on the planet hates them because of App Store terms.
Yeah, you're right, I guess I meant in this form factor. The first to use the SE name was definitely back in 2016 with that other 5S design. Thanks for recalling that!
"Another example is Belarus. My understanding is for years the played Europe against Russia, but their autocratic government retained some independence as a result. Then the West slapped sanctions on them, which pushed them into the suffocating arms of Putin, and it became a staging area and accomplice to Putin's invasion of Ukraine."

Contrast that with Finland and Sweden seriously considering joining NATO, NATO putting more weapons and soldiers in to the Baltic and Eastern European states, Germany and other NATO states increasing military spending, and moving much faster towards energy independence.

These consequences are evidence of a major miscalculation on Putin's part, who certainly would never want to see any of that happen.

Not to mention the world edging ever closer to WW3, in which everyone would be the loser.
It's not as if corner stores are banned, but zoning restrictions have that effect in many places.
This can also backfire on consumers if the competitors decide to keep up with their user-hostile practices as well: locked-down walled gardens, zero customisability/upgradability for hardware, low repairability, low interoperability with set standards to "distinguish" their products, planned obsolescence, etc.
Maybe the tougher sentences worked?

https://en.m.wikipedia.org/wiki/Crime_in_the_United_States#/...
On the topic of geriatric twittering, the one time I did not respond with the navy seal copypasta was when some older high school sports coach tagged me instead of his student athlete with the same name (whose twitter handle was completely different). I felt like that would have been too confusing an experience for him.
Many (not all though), of their best engineers and designers have left after the IPO, that's why. So, a lot of people that made it a success initially have moved on. They don't pay super well, so the new people that came later on are not necessary the best.

That's why Spotify has been slow on introducing new features or fixing existing ones.
So what word would you use to describe people who have the biology to bare children? Because we need to have the language to differentiate the two.

In the past we used the word "women", but that has been commandeered... Hence my comment about "person" and IWD.
I would get 5K display if it is 35-40", 27" - no way
I dont think it will be deep in the google index, if one knows where to look

https://www.judyrecords.com/
Yep.
This very well could be the future for sites with static content that does not change often.
It appears the new one does not so that is very good news.
For now do not attempt to run Win11 on it though. It kinda sorta works a little after doing tons of workarounds including some really crazy ones (network through a kernel debugger stuff or something; manually installing x64 store packages if you want the store, etc...), the graphics is crap, rdesktoping is not very good. Seems fine for Linux VMs though (then use them with ssh).

If you want Win11 use Parallels, it works very very very well.

You can even run Fusion tech preview and Parallels at the same time :)
on MacOS -> View -> Friends Activity... come on man
Yeah I know its just anecdata but I've been using mine daily for over 4 years now, all day every day, and never had an issue. I love the single cable + built in peripherals and am puzzled at the lack of competition around it. I had really questioned whether I was reaching when I purchased it for ~$1200 but 4+ years later, there's still very little to compare it to. (Tons of great options if you don't want built-in peripherals / single cable of course)
That conversation puts you into the position of having to prove you're not a *ist/*phobe. At least I suspect that would be the reaction of most people.

I'm not against working with people who are pro-social justice, even if I don't always agree with them. I am against it being forced on me on pain of losing my job.
I can see where you are coming from. At my work for instance, we will take on those with good people skills and the intelligence to learn the technical skills they are missing. We are reluctant to do it the other way round. We avoid those who have the technical skills but not the people skills because common wisdom and experience indicates it is much harder to teach the people skills… I would add that we are not equipped to help them get up the curve. The thought process is that once you teach someone able a technical skill, it generally sticks. Soft skills tend to be harder to teach and problems recurring in nature…this results in time sinks. This might be perceived as unfair but it is a reflection of the world we live in…and generally they are practical observation. People and businesses need better tools/methods/education to help people but right now there is little incentive to do so…we, as a society, are more focused on gender and racial equality than mental health equality.

On a personal level, if I have to invest too much of my time or energy managing someone else’s emotional state on an ongoing basis…then I’m not interested in maintaining that relationship. Maybe because I was once in a toxic, draining relationship which almost destroyed me..I am maybe more alert or sensitive to these issues.
Of course the details are more involved, but the refiners will modify their plants to optimize profits on their own. The time-frame involved could be an issue for sure. What kind of oil is in the Strategic Petroleum Reserve? It could possibly help with the time issue.

The tweet-sized post is useful as a counter to the oil company talking points. They like banning Russian imports (eliminating a competitor), but want to link it to expanded drilling and the reinstatement of Keystone XL. Both of these also take time. Yet they say that they can immediately increase production, so I'm not sure the rush for their other requests.
The reasoning I've head before is to prevent accidental zooming and make it feel more like a native app. Personally I just enable the option in Firefox to allow me to zoom in anyway.
My first thought was "does it include an LSD subscription?".
For the speech clips I thought the disjointedness of the words made it obvious. That being said, Trump has a very recognizable way of talking so his clips were really easy to sort.
For disk IO it’s faster, there are many benchmarks on the internet.

For network IO, it depends. Only two things make it theoretically faster than epoll; io_uring supports batching of requests, and you can save one sys call compared to epoll in an event loop. There some other things that could make it faster like SQPOLL, but this could also hurt performance.

Network IO discussion: https://github.com/axboe/liburing/issues/536
Yeah I mean realistically, if I did challenge the ban and get them to unban me, I'd just immediately do the same thing again the next time I mistakenly got tagged lol
I'd disagree, I have a 16" 2021 MacBook that has the XDR Display with 1000avg/1600peak brightness and I constantly have it maxed.

It's very annoying have it next to my BenQ 4K monitor that feels so much flatter in comparison. It just makes any other monitor so boring in comparison.
The best deepfake I've seen is the Tom Cruise one https://www.youtube.com/watch?v=iyiOVUbsPcM
Heh, I've done this in strict JSON config files:

{
"//": "lets us consume uncompiled protobufs (see issue #123)",
"extern": "protobuf.js"
}
People going to places is no the problem. The problem is the peak demand. (Eg. usual commute. Rush hour.)

It'd be much much better if people were spending all that fuel on traveling with friends to anywhere else. (Or just going to events/festivals.)

...

That said remote work without any IRL interaction is definitely psychologically unhealthy. But! Doing a twice monthly sprint rollover or whatever means a qualitatively different kind of transit than the daily commute.
I allocated the majority of my portfolio to the JEPI etf, which has some unique characteristics, prior to the recent correction. It hasn't gone down as much as the benchmarks and has a solid dividend based of call premiums which are higher in volatility. I'm using the dividend proceeds to dollar cost average into growth again as we cascade down.
The license isn't realistically enforceable and isn't compatible with GPL.
Tinder for Bananas
The problem is that there was no notification to the user that the CPU was slowed down on purpose because the battery can no longer keep up, misleading them into thinking their device suddenly developed a mysterious fault and/or passive-aggressively annoying them into upgrading.
> So if my coworkers are going to shun me for expressing the wrong opinion on some topic (or just refusing to engage in discussion) that would be a big problem for me

I never enjoyed talking about politics or current events with coworkers. I'd typically steer the conversation back to my job (which is what I'm supposed to be doing anyway).

Any socializing after work, I'd stick to safe subjects like family, clients, sports, etc.

Is that what you're looking for as well? Or are you interested in talking about politics with like minded coworkers? Or do you want coworkers with different views as long as they respect yours?

> I don't want to feel compelled to express an opinion I don't actually have

I've never been privy to this, so I'm curious what this situation was like for you and how you felt pressured. Any example you can share? Or is this more about trying to prevent a possible situation?

The closest I guess for me was staying silent while someone rambled on, kind of like I might do at a family holiday if I want to keep the peace instead of throwing gas on the fire. Or, I've used conversation ending techniques like short one-word responses, or acting distracted, changing the subject, etc. Still annoying, but I don't mind it as much as I'm not really looking for deep relationships at work and after the first few times they would stop bringing up stuff to me because I wasn't giving them reactions (positive or negative).
I found the grammar of the fake text just off enough to pick them out consistently.
There's USB-C MADI/DANTE stuff already and it handles a lot of bandwidth with similar latency to those PCIe cards. That guys setup is a niche in the niche.
I guess this is as good a time as any to remind readers of the time Pepsi managed to make its cola the most popular soda in the Soviet Union, trading it for Stolichnaya vodka and later their own military fleet:

https://www.atlasobscura.com/articles/soviet-union-pepsi-shi...
> Creating conditions to force people into highly dense urban area also = miserable people.

Do you have a source for this? Denser European cities seem to have much higher happiness than people living in single family residential suburbs.
So how do you feel about people who want to change the status quo in the exact opposite direction you want it changed?

Do you want to hear from them a lot? Do you wish there were more of them in your twitter feed?
US Destroyer can’t deploy because CO won’t get Covid vaccine, Navy says
Quite slow and not multicore for x64-64 though. It eventually works, but you better take a spare PC for any non trivial task.
I've expanded out the Karatsuba method to prove it to myself that it works for any (10a+b)(10c+d). I can highly recommend.
I held out as well until the 13 Mini. I still use my OG SE as a media device, since it has a headphone jack.
I'd like to see some credible evidence that it's any better than beer, which is also made through fermentation.
It wont be even close to RTX 3090 looking at m1 max and using same scaling maximum it can be close to 3070 performance.

We all need to take Apple claims with grain of salt as they are always cherrypicked so i wont be surprise if it wont be even 3070 performance in real usage.
Note the label on the y-axis. "relative performance" from "0-200" seems like marketing bullshit to me.

"M1 Ultra has a 64-core GPU, delivering faster performance than the highest-end PC GPU available, while using 200 fewer watts of power."

Note that they say "faster performance" not "more performance". What does "faster" mean? Who knows!
> The internet doesn't radicalize people. People radicalize people.

I tend to agree but it's an oversimplification of the problem. There is a fantastic book about the psychology of radicalization by Robert B Caldini "Influence"[1] that has apart from the more common scenarios like exploiting reciprocity etc the idea about saying things out loud. There are 3 stages, you get people to read it, then you get them to say it then you get them to sign it. Once they say it it will be hard for them not to sign it since it means walking back on their argument and society likes consistency and hates flip-flopping. After you get them to sign, it's now recorded in history like something that can compromise you in future. Even you delete it you have said it before. This is relevant on especially for things that go viral or have a large audience. How does that relate to social media?

Especially on platforms that enforce a real name policy you get shallow thoughts because people are careful (LinkedIn is a good example). But even on things like twitter / reddit people will have followers and a karma that they attach themselves (their ego) to.

We do not communicate by saying things but we immediately jump to the stage of writing it down. Now these are usually not well thought out opinions since they haven't been argued in a group and tested against our peers. We blurt out not opinions but brain-farts that we test against an audience but at this stage they are already written down.

If the message shared is popular you get the likes flooding in where every person is likely not to read this message more than once before liking / sharing. But the effect on the author is different because they end up reading what they wrote several times as a way of congratulating themselves and reliving the moment of gratification. So it's actually a form of self-radicalization on half baked thoughts (than radicalization by others). An important step is missing where the author of a message can verbalize the idea with real people f2f before jumping to "the writing it down" stage. That makes it harder not to double down once critic is expressed by an audience. Add to this tribal culture of in/out groups those who will oppose the message can be drowned out with a click of a button (I'm not arguing for letting trolls take over and abolishing mute/block button, but these don't exit IRL. Anyway I'm only trying to deconstruct the process)

There are very few people on social media humble enough not to drink their own kool-aid. The majority of users are absolutely eaten by the system and spat out again without realizing what happened. the concept of writing it down is so powerful that we have even built a legal / trust system around it where we require people to scribble their name under something they have read to make it binding.

[1] https://en.wikipedia.org/wiki/Influence:_Science_and_Practic...
Plus they are running out of M1 superlatives. They’ll have to go to M2 to avoid launching M1 Plaid.
I remember the UK in the 90s/00s had unleaded written on the pump too, but there was no leaded option.

Actually, I think I have a vague memory pre-millennium of there being leaded pumps (typically red handle vs the green unleaded)
Are you referring to the front panel which is about 3.5" high x 7.7" wide and about 90% an empty blank face?
We're just seeing a real live demonstration that the real cost of oil produced by the typical non-US oil producer has its own externalities and they're not pretty. With the money saved by preventing these issues one should be able to solve the water problem (waste recycling? desalinization? other liquids?).
What we're seeing right now with Apple's M1 chips for desktop computing is on the same level of revolutionary as what the original iPhone did for mobile phones.

The advancements in such a short period of time in the amount of computing power, low power usage, size, and heat usage of these chips is unbelievable and game-changing.
I don't know if this is true and this gets to the reductive nature of how people interpret political arguments. We've become so divided, the 'status quo' crowd and the 'not status quo' crowd don't even talk to each other. If you're conservative, you're mostly seeing people argue about what the status quo was, and if you're progressive, you're probably seeing people argue about what the status quo should be.

Everyone says politics is about values, but it's more than that. Politics is values plus an implementation. Sometimes I see the worst takes or disdain from people who's values I fundamentally agree with, but we disagree on the implementation.
Yes. Carbon taxes (and probably some land value tax) are the preferred solution.
> Functional brings the math back to programming. Math is useful but also hard.

So is working with an edifice of unprincipled ad-hoc abstractions, but many seem to prefer pushing that debt on tomorrow them or others.
I didn’t expect such a constructive reply, thanks!
for those of us outside the US and without VPN, archive.org also captured it from the US: https://web.archive.org/web/20220308222503/https://www.mozil...

EDIT: vs screenshot what EU sees: https://i.imgur.com/S1ueBQn.png
Why? Parler was gaining steam until a consortium of megacorporations aligned to erase it from the internet.
I have the 2016 SE, and I love it. Hate FaceID, hate the idea of FaceID. I don't use the fingerprint ID either. I don't even lock the phone.

I really like the home button, and I was scared they were going to drop it. Glad it made the cut at least one more time.

If I can't have my Blackberry Bold back, I'll take this. I tried the bigger iPhone 7 Plus to see if the larger screen helped with the crappy screen keyboard, but it didn't, so I'd rather have the smaller device.
Can tech help revive India's 'crumbling' health system?
> Might an impolite question to ask

> controlled for [...] protected classes

I hope not. This fear of not fitting in with contemporary politics is toxic to science. Social science is already badly broken and is filled with it. If somebody can't be objective because of fear of being labelled a heretic for not deferring to the law to decide which factors must be controlled for, they have no business doing science on that topic. Are you aware that genetic information is a protected class in America, despite the fact that it influences IQ? Why would you arbitrarily control for that, but not for other factors that influence IQ such as maternal care? It's complicated to decide what to control for, but the law is absolutely not the place go to make that decision.
It's Sue's decision whether to share the full range of her ideas and personality or not.

It's the algorithm's decision to serve up the choicest bits with the highest polarization scores bc that seems to have the highest correlation with overall engagement.

And feeding the compulsive need for argument seems to be the more profitable strategy over providing a framework for truly polite conversation.
My workstation build with Epyc is ~$5,000 and has more cores (24 core), more memory (256 GB), faster GPU (3090), a 2TB pcie 4 SSD and I suspect will perform better on standard benchmarks. Definitely not as compact as the Studio though but lot more extendable.
Commenting a comment is still a comment.

// => ////

//////////////////////////////////////////////////////////////

// just like those devs that like to decorate their code with

//////////////////////////////////////////////////////////////

/*

* type of stuff

*/

Edit: almost forgot my shell friends

########################

## works too

########################
It also uses FaceID.