skysight-inc/HackerNews huggingface dataset:
You'd just need to put the script on any webpage the user might access and leave open, such as Google, or Facebook, or whatever. The attack isn't specific to JavaScript, so really you could put this in a desktop app too, think Slack, Spotify, etc. Any app or website that you know the target user is likely to open. CDNs are also a great target.

We evaluated on 100 websites as a proof of concept, but we also included experiments in an "open world" setup where the classifier has to predict whether the activity is from one of 100 sensitive websites, or whether it's none of them, and found that it's still very accurate in that more realistic setup. You would need to retrain to identify more websites outside of your set of 100.

The websites would need to be public, which is basically the same limitation as hertzbleed, since they need to know what they're looking for in order to identify an activity. Some use cases with this limitation aren't too hard to imagine: maybe you're in a country that bans access to major Western news sites but you're evading censorship with a VPN.
A better/more technical article on the same tech, from Mozilla's collaborators on this project: https://jake-shadle.github.io/crash-reporting/
Goal post moved again. The problem statement from OP didn't have any such clause.
Article 5: https://www.nato.int/cps/en/natohq/topics_110496.htm
MLB.tv is way way too expensive for any blackouts to even be legal. Kind of an outrage.
Warping ourselves to fit our society. Modern footbinding.
I'm near-sighted but when I wear glasses my brain doesn't attempt to achieve homeostasis by altering the way I see with glasses on in order to make my sight closer to how it was before I wore glasses.

I'm not saying you shouldn't be on drugs or that you'll find the drugs stop working. I'm just saying the effects on the brain are pretty complex and shouldn't be compared to wearing glasses.
There are a dozen names for it. In the intelligence world, if you know that the enemy is listening on an unencrypted communications pipe, but you cannot afford to stop using that pipe, you throw random junk down the pipe until they cannot tell real from fake.
Lucky you.. in my experience the answer to your 2 questions is: yes. Having no or outdated experience doesn't stop them from questioning even accurate estimates and attempting to filibuster their way into us lowing them.
Turbo Boost is not something you can reliably kick in any load spike due to its operation being constrained by the thread and thermal load of the CPU. Also, it's affected by the CPU instructions you're already running. AVX family is esp. power-heavy and thermal-heavy.
Russia could stop the bloodshed today by simply withdrawing their forces from the region. The LNR/DNR forces would surrender (they are reliant on Russia's support) and peace and stability could be achieved rapidly. The power is in their hands.

It's important to remember that this war has really been going on since 2014. Eastern rebel forces were starting to crumble until Russia began offering direct military assistance (Not just material but also boots-on-the-ground. Ukraine captured VDV and Spetsnaz POWs and would regularly exchange Russian troops with the DNR/LPR for POW swaps).

Edit: One of the big lessons Europe learned during the first half of the 20th century is that nationalist/ethnic conquests over land and border disputes makes everyone worse-off (World War I), and such acts should be powerfully deterred - through force, because capitulation doesn't work (World War II).

It seems people are forgetting these lessons.
Yep. Moved into a house. Gas line wasn't installed correctly. Nearly killed me and family. Left a couple of us with permanent injuries.

We broke lease and moved out. Made it impossible to get into anyplace decent since we had abandoned the lease and refused to pay them to get it off our record.

Surprisingly lawyers were completely useless. Unless a doctor certifies that gas caused medical issues they won't touch the issue.

Screw mega rental companies.
Hell no, I want stuff like OnCall packaged into Linux distribution. I need something stable and reliable and that receive security fixes.

Maintaining tenths of binaries pulled from random github projects over the years is a nightmare.

(Not to mention all the issues around supply chain management, licensing issues, homecalling and so on)
You, as a European, must know that this problem has been brewing for years, since the Germans decided to turn off their nuclear plants and use Russian natural gas instead,right? Right!?

Oh and, the US didn’t mandate Germany to do this, its voters did.
Bugcrowd is woefully unprepared for accepting reports of cryptographic issues
> Sure, and Louis Pasteur was a crank for claiming that invisible micro-organisms were causing infection and disease. Your absence of perception does not mean the evidence is absent.

I don't understand your example. Louis Pasteur determined germ theory by observations of natural phenomena - he observed evidence, experimented, and found an explanation for said evidence. In this case I'd need to see direct evidence of a purpose and a means by which I could observe or experiment with said purpose.

> The default option is faith/belief.

You need to provide some reasoning behind that. And which faith? Some belief? Some god? Do you believe in UFOs, astral projections, mental telepathy, ESP, clairvoyance, spirit photography, telekinetic movement, full trance mediums, the Loch Ness monster, and the theory of Atlantis?

> You don't have "strong evidence" each day that the sky will be the same color, the sun will come up, your dining room chair will still hold your weight, your best friend still loves and cares for you, and that your car will likely start at the crank of the key.

You're not understanding - I'd need to have some form of reason to believe that the sky would change, or that the dining room chair's properties would change. I'm saying that my understanding of the world is based upon observations. I observed the sun comes up every day so I assume that it will tomorrow. Unless something acts on it it will continue to do so I have no reason to not assume that. For it to not come up the next day without any reason to would in fact be a supernatural phenomena.
Apple Pages, too.
> It doesn't though. Taxing the rich, limiting the existence of billionaires is not going to do anything for equalizing opportunities.

> If you think so, then please tell me the name of one efficiently-run government organization?

How are these two passages connected? If there's one efficiently-run government organization (there are, even in the US—benefits programs tend to be quite efficient, contrary to "common knowledge") then that proves... what? That taxing the rich would equalize opportunities? The two things have practically nothing to do with one another.
Can Bionic Reading make you a speed reader? Not so fast – Big Think
Is there any way to compel law enforcement to make public the audio/video they get from Ring? I can see the legitimacy of being captured on video when on someone's property approaching their door, but if I'm taking a walk on a public street I don't see why Ring should be allowed to record and store my likeness. What they are doing is mass surveillance by a private company, not street photography by an artist. I don't suppose there is a law which draws such a distinction but there needs to be.
It's a huge country in terms of land area. 1/5 is only a bit above the odds if you predict potash and phosphate deposits are evenly distributed across the world.
Hmmm, from <https://www.man7.org/linux/man-pages/man3/posix_spawn.3.html>:

The posix_spawn() and posix_spawnp() functions provide the
functionality of a combined fork(2) and exec(3), with some
optional housekeeping steps in the child process before the
exec(3). These functions are not meant to replace the fork(2)
and execve(2) system calls. In fact, they provide only a subset
of the functionality that can be achieved by using the system
calls.

Also, there's no way to set resource limits in the child process, nor switch user or group ID, using posix_spawn().
Absolutely agree. Moreover, it's the diplomatic incompetence on both sides that led to this war, which in my opinion could be easily avoided.
Ben and Jerry’s Is Putting Their Cows on a Low Methane Emissions Diet
Funnily enough, virtually all health insurance systems world wide have a higher government component than the US one, and better outcomes at a lower cost.

(Spot the outlier on the first graph: https://ourworldindata.org/the-link-between-life-expectancy-... )
but will you be able to sell fuel and fertilizer?
I agree with this. I don't care when someone has 1000 cars or 100 houses and owns a jet plane or whatever. I do care about how it enables them to unfairly direct other peoples lives to their personal agenda. I also care when people have too little that they can barely feed themselves and have nowhere to live.

I feel like there must be some way these two problems can help solve eachother.
So basically a massive worst case financial crisis led to something almost, but not actually, failing.

Sounds like the system worked extremely well.
Or we could consider eating slightly less meat instead of supporting megalomaniac dictators like Putin.
I have said this many times already: the downside of medicating children is that they never have a chance of learning how dysfunctional ADHD is. Then they blame the medication because they find they can't function without it. No shit, that's why you were taking it.

I have been diagnosed in my 30s and when I stop medication, my life returns to the same exact shit it's been for 30 years. It feels like falling apart, because that's how it was for three decades for me.

That said, I'm happy you found a path without needing the medication. One of the positive aspects of ADHD medication is that you actually learn to function without them, because it gives you the mental energy and fortitude to build healthy habits that can help keeping you ticking along even without the boost of increased dopamine.
Accelerating GitHub theme creation with color tooling
I don't see how a fixed-frequency crypto core would be susceptible to the same attack, assuming proper constant-time cryto code.

This attack exploits the fact that cycles are not constant time, so although crypto primitives are constant in terms of cycle, due to DVFS they're not really constant in terms of time.

If the crypto core doesn't have DVFS and runs constant-cycle crypto, it doesn't matter that the core is contended and that you can measure the contention. You'll be measuring how many people are using the resource, but that won't tell you anything about the secret data, just about how much data there is.
I'm surprised that Amazon doesn't own apartment complexes. Build a multi-level basement as a fulfillment warehouse, then stack housing on top. The housing would have 10 minute delivery and be a great way to further accustom people to Amazon being the place to get everything.
We need an industry-wide effort for coordination between cryptography library owners & device/chip vendors to ensure the use of constant CPU frequencies during cryptographic operations.

It's odd that the authors haven't chosen to initiate this themselves, as it seems like the proper solution to this vulnerability.
Ok fine, so not an in-depth definition, but someone might think you mean an in-depth definition if you don't specify the level you expect is being used (perhaps because they have encountered that situation). I mean if you ask me define a hashmap and how it works for example I might think: "aw damn, this guy wants the low level details, I bet this place sucks to work at!"

Although I would probably ask them to specify the level of detail they want before trying to comply, and then not get the job because I ask a lot of unnecessary questions or something.
Uh, what about the time that Parliament decapitated the king and established a Puritan dictatorship for a minute
> This means that, on modern processors, the same program can run at a different CPU frequency (and therefore take a different wall time) when computing, for example, 2022 + 23823 compared to 2022 + 24436.

I'm a layman when it comes to things this low level however, I always assumed that different addition inputs would take different amounts of wall time, but looking it up it turns out that in theory I was wrong, but I guess I'm actually correct. ¯\_(ツ)_/¯
Like 4/5th of the country is fairly brutal in summer and / or winter.
> First, not everyone, Ukrainians knew.

Sounds like you were not following the events because invasion was effectively "announced" by US Intelligence weeks before the actual declaration of war. Besides, this was not the only sign and if you know the way Putin talks and you listened to him days before the invasion (talking about Russian Empire's old glory) you'd see that he already made his mind up way before the actual day of invasion. Of course, it's easy to see things in hindsight (and I did truly predict the invasion before it happened) but sounds like you're not even aware of all the available data.
>Never really happened in my country.

>Other than that top families basically unchanged 1000 years.

So we've shifted the goalposts from "all of human history" to "in my country" and only for the past "1000 years".
Renderless Function Components
Or maybe get off your carbon dependency?
> Why is the rock yours? How did your family attain ownership of it?

The rock is mine because my family bought land a few hundred years ago, and the previous owner thought the rock was ugly and let it for us.

> If the rock means little to you, why should you have it rather than the cult that actually values it?

The rock means a lot to me, because it reminds me of my ancestors. I value it, but I just don't have a billion dollars to attach to it as its value.

> What if the cult wants to preserve the rock but you want to destroy it even though that will cause great pain to those who care about it?

I dunno. I think it is my rock and I can do with it what I want. But I don't want to destroy it, I just want to keep it where it has been for the past 200 years, near my family home's fireplace.

> Why should you have permanent ownership of a rock just because your parents had it?

Because that's how ownership works. If anyone can come take anything from you at any point, then I don't think you can ever be considered to own something.
Ok, sure, avoid the other questions, but to be clear, paying for something with bitcoin is the same as selling it, you're just pretending that there isn't a conversion to fiat somewhere in the chain.
Taiwan is going to become part of China, so we should just stop wasting money patrolling those seas. North Korean nukes are going to level Seoul someday, so we should divest our electronics manufacturing from there and send it all elsewhere to secure low prices tomorrow. Also, Poland is bound to fall once Russia invades after being handed Ukraine on a silver platter, so may as well have the EU cut their losses while they can. More money in our pockets.
I just started a great new job yesterday. In my case, a recruiter found my resume on one of the boards (Dice?) and reached out to me with an opportunity that had not been posted anywhere.

At the time I was actively looking. I applied for multiple jobs I found in several different places. Sometimes I got some interviews, sometimes I didn't. But no offers (well, one a few months ago that I turned down).
Thanks for your question!

Development is in early stage. We're currently inviting some handpicked testers to try our MVP.
Firebase would probably give you everything you want in one ecosystem.
Easily avoided!

OK, now let's hear how it could be "easily avoided".
10 points in 14 minutes is an impressive upvote velocity. This must be a popular topic for HNers.
Why can you only vote/have sex/drink/gamble when you're 18 yrs? Why not at 12, why not at 30?

The fact that there is a gray zone does not mean that no border must be drawn.
How many ft3 of gas are you selling daily?
Particularly as it's actually 1 employee per 20_000 customers.
They clearly are regressions because they confuse many people and make a worse use of the same screen area.

Also what are the problems being solved by these redesigns and rearrangements? What was solved by going flat in 10.9 -> 10.10? What was solved by going even flatter, and using the dreaded SF Symbols icons everywhere, in 10.15 -> 11.0?

It's a done product — it's been one for quite a while. Could they just stop meddling with the UX already and maybe rewrite their PDF parser in a memory-safe language instead?
People spend money on Amazon because it is convenient? However, I don't consider it to be net positive in current society. In many countries like India, many mom & pop stores are closed due to Amazon. They are destroyed thousands of business. Amazon is funneling money into its company which would have been distributed to multiple people. Seeing this drastic implications even CCP tried to clamp services like Amazon, Alibaba in China so they won't be too powerful.

So, I think you need to prove how Amazon is net positive in society?
No, it's really not that simple. Inflation causes are many fold and it was an issue prior to Russia's invasion. Might help, but inflation isn't going to vanish with a "simple" policy change.
Here's some copypasta from a recent comment I'd made on another forum, but there are half a dozen other studies that I could cite if I had the time:

> For nearly a year, Richard Rosenfeld’s research on crime trends has been used to debunk the existence of a “Ferguson effect”, a suggested link between protests over police killings of black Americans and an increase in crime and murder. ... “The only explanation that gets the timing right is a version of the Ferguson effect,” Rosenfeld said. Now, he said, that’s his “leading hypothesis”.

https://www.theguardian.com/us-news/2016/may/13/ferguson-eff...

> From 2014 to 2019, Campbell tracked more than 1,600 BLM protests across the country, largely in bigger cities, with nearly 350,000 protesters. ... Campbell’s research also indicates that these protests correlate with a 10 percent increase in murders in the areas that saw BLM protests. That means from 2014 to 2019, there were somewhere between 1,000 and 6,000 more homicides than would have been expected if places with protests were on the same trend as places that did not have protests.

https://www.vox.com/22360290/black-lives-matter-protest-crim...

Famed Harvard economist Roland Fryer looked at cities that had a major BLM shooting and found a sharp increase in homicides and other felonies (900 additional homicides and 34k additional felonies over the course of a few months) compared with the same cities prior to their BLM shootings and compared with other cities which didn't have a BLM shooting. "The leading hypothesis for why these investigations increase homicides and total crime is an abrupt change in the quantity of policing activity. In Chicago, the number of police-civilian interactions decreased by almost 90% in the month after the [police shooting] investigation was announced. In Riverside CA, interactions decreased 54%. In St. Louis, self-initiated police activities declined by 46%."

https://www.nber.org/system/files/working\_papers/w27324/w27...
It’s been a long time since I touched c++, so pardon my naïveté. I’d have assumed that optimized thread pools were a done thing. What’s new here and why was there a gap ?
You forget there are two red lines and vague space between them.

For NATO the borders of its members are red line.

For Putin the red line is borders of Russia, that include Crimea and L/DPR for now.

There is no way Putin leaves Crimea and nukes are not send to the Washington.
Assume you’re a tenant on a cloud service provider and you don’t care about power consumption… can you mitigate this by running a process with a busy loop that forces the CPU into max frequency at all times, with `nice` set to run it at lower priority than your actual workload?
I’m concerned the following might play out:

-Russia wins in Ukraine

-The sanctions were ultimately ineffective, for the reasons you explain above

-China takes Taiwan during major US political unrest, at BEST destroying the fabs and at worst gaining full control of the leading 3nm/2nm etc process

-A deeper China-Russia alliance, which was expedited by our ineffective sanctions now, puts the screws to US/western companies by blocking access to the latest semiconductor tech
>non-information-leaking-boundaries

Every one of the recent leaking boundaries were assumed to be non-leaking. You cannot just inject "non-leaking" into a statement and assume that solves anything.
Nobody has argued Russia isn't making a killing off its energy portfolio. But a quarter of a billion dollars of revenue, not profit, in a booming global economy no less, doesn't make up for a similar quantity of frozen reserves.

Russia is weaker and poorer than it was at the end of last year. The Russian state is doing far better than was expected, domestically. Credit due where owed. But it's a growing share of a shrinking pie situation.
12-month CPI excluding food and energy was 6.0% last month [1]. It's not that simple.

[1] https://www.bls.gov/news.release/pdf/cpi.pdf
Of course, when that customer service agent has to deal with 1% of 20_000 - 200 issues/day/agent - things start to add up.
I live in France, I have been able to write c++ for ten years now, and it's not like employers want me.

I might not be the best developer, and France might be a bad job market that always requires a degree, but that's my reality.
Double-layered catalyst generates more hydrogen
The opposition to "trans athletes in female sports" is all you should need to know that this is wrong.

Nobody opposes trans athletes in male sports for obvious reasons.
> Because all an attacker needs is accurate measurement of how long code ran.

So would it thwart the attack if the kernel added a random delay to the execution time?
Putin definitely thought the incursion would be minor. He didn’t think the Ukrainians would be (backed with advanced western weapons and intelligence) fighting back with such vigor.
An awesome attack vector and kudos to the authors. I do wish it had never been discovered for environmental reasons though :(
I'd think the Keystone pipeline would have been the lesser of the two evils.
A straightforward answer would be air ticketing. It's well known they identify sessions and manipulate your options to give you a bad deal and them a good deal. If there's an asymmetry of info that is being exploited then this is useful.
Show HN: RecipeRadar – a free and open source recipe search engine
Which both sides? There are no sides in this conflict whose goals align in any way
Yeah, totally. And in my experience (on both sides of things), a good junior developer is going to probably realize what sucks well before having a strong understanding of how to make it not suck. The first attempts are probably not going to be perfect (maybe not even good) - but that's the sort of thing folks don't really learn by being told. You have to walk into that screen door a couple times. Which is why hiring junior folks is such an investment.
Layoffs is never about underperforming employees. Whole teams or departments are usually laid off, including top talent.
What do you expect him to say, "Putin bring it on?". In some random interviews he said Ukraine is prepared [1].

And yes, no one was sure that this Feb military build up results in war cause there was already a build up in April before that. But this invasion was inevitable with the current Russian leadership, UAF underwent a series of reforms since 2014 to prepare for it.

[1] https://www.npr.org/2022/01/29/1076699748/ukraine-russian-at...
I wonder if solving the problem housing people who are in the "are homeless for six weeks or fewer; 40 percent have a job" category will result in few people becoming "chronically homeless".