skysight-inc/HackerNews huggingface dataset:
Context switching for processes is done in software (i.e. the OS) via traps because TSS does not store all the registers and it doesn't offer a way to be selective to what the process actually needs to load (=slower). This limits its visibility to what's in the actively mapped registers as well as not guaranteeing the procedure even tries to reload all the registers. In this case, even if the OS does restore certain registers it has no way to know the processor left specific bits of one speculatively set in the register file.

On the other hand, "context switching" for VMs is done via hardware commands like VMSAVE/VMLOAD or VMWRITE/VMREAD which do save/load the entire guest register context, including the hidden context not accessible by software which this CVE is relying on. Not that it isn't impossible for this to be broken as well, but it's a completely different procedure and one the hardware is actually responsible for completely clearing instead of "supposed to be reset by software".

So while the CVE still affects processes inside of VMs the loading/unloading behavior inter VM should actually behave as a working sandbox and protect against cross-VM leaks, barring the note by lieg on SMT still possibly being a problem (I don't know enough about how the hardware maintains the register table between SMT threads of different VMs to say for sure but I'm willing to guess it's still vulnerable on register remappings).

There may well be other reasons I'm completely mistaken here but they'd have to explain why the inter-VM context restore is broken not why it works for inter-process restore. The article already explains why the latter happens, but it doesn't make a claim about the former.
I agree that he used the term error somewhat incorrectly. But he seems mainly to just be making the point that sumac introduces a large outlier which in turn is only now an issue that the community is now aggressively trying to quantize models
They aren't magically "objective" because they used the passive voice. It's a performance.
I love how some people think we wouldn't rather have war to thin out numbers than to all agree to eat vegan.

Like obviously people would choose war.

It's the same with "climate refugees": if we get to that stage there won't be razor wire and a fully deployed military who will shoot on sight. Same with "let's all get rid of our cars": the public would complain but we'd easily engage in all our warfare to maintain a standard of living. Its cool if individuals want to opt out, but most won't.
What a weird dystopian world we find ourselves in. And, sadly, the despair in the comments reflecting utter defeat is very troubling. Times like this make me really miss the 90s, when the tech culture embraced open source and always found a way to outsmart the "googles" of that day. It is certainly a different time these days, however the game being played has always been the same. I wish people would completely re-envision the internet. Because, in reality, google has only captured one protocol. The web is much bigger than you all think. If you build it they will come sounds like a good philosophical statement to end this with.
Stack Overflow banned my character with 100,000 reputation:

https://stackoverflow.com/users/1002260

for FIVE YEARS, because of a rollback war on some of my own answers. some idiot was gaming the system and adding minor punctuation here and there, just to get review points. so yeah, good riddance.
Many linters are also configured to ignore '_' for many tests (such as any 'unused variable' warnings)
Who benefits from browsers not supporting EME?

The choices were EME, Flash, or no premium VOD on the web.
Can you share a VSCode profile across a team somehow?

We have a frontend with typescript + vue (volar) and it'd be great to have a 'standard' web VSCode interface we can share across the team as the baseline working version. So we don't have to worry about dependencies or someone seeing different error messages than others. ESlint is another one.

Our devs use 3 different IDEs so it'd be good for them to have one to compare to with having to screenshare.
tracing Erlang in prod is literally a fun game, and very easy. Like...one of the best things about the ecosystem. The dbg module (part of the stdlib) is your friend. Trace messages, function calls, with as wide or as specific a net as you need. I've found bugs quickly that would have taken a lot of trial and error on other platforms.
We really need to stop driving cars.

We are killing our home.

I'm not being overly dramatic.

If we don't stop now...

And for what? Some comfort? Some more profits for the few?

We will not solve this by continuing the way we lived for the last 100 years
pretty much everybody who had >10k twitter followers probably could address demonstrators.

Protests are managed and organized by people who are listed on this page https://en.wikipedia.org/wiki/2023_Israeli_judicial_reform_p.... kiYou can say that they are the voices of protests.

Opposition parties (with their structures) stay aside, in order to avoid accusations that that protests are simply a way to bring coalition down, etc.

During protests there is a bunch of people who make speeches, including current opposition leaders, ex supreme court judges, ex president, ex leaders/ministers from right parties, etc. Pretty much everybody fairly known in Israel.
I remember reading this in an Uncle John's Bathroom Reader. Anyone remember those?
https://archive.ph/FbSrC
why does the eu need to do that? a country with 1 billion people (majority of which is poor) is a recipe for disaster.
Hire a lawyer and get it sorted out pretty easily, I would think.
> Our current population size is the direct result of post-industrial farming and food production making calories easily available to the masses, and all kinds of foods accessible year-round.

Absolutely.
Post WW2 food production with NPK intrants and machineries changed how we grow food. ( thanks Bayers ! )

But it’s hardly the sole factor and I would not be surprise if it was not the main driver of multiplication.

Medecine & Basic hygiene also went a long way. As well as the great convenience of bottled energy to move things arounds for cheap.

But I think we talk about a bunch of stuff at once here.

For instance I did not mention biologic produce.

Just … cooking food in a large communal kitchens with large kitchen equipment. The kind where you can cook for 50 people at once.

As opposed to : complex industrial process to build a hot pocket or a frozen breakfast burrito.

One is something most people can be trained to do, and the other needs a team of engineers to design, and another team to build the factory and another to run it.

( watching your vox link )

Oh. Ok. Yeah. I find that part relevant

> But the US government also doesn’t subsidize leafy vegetable crops in the same way it supports wheat, soy, and corn, vital ingredients in a lot of junk food.

I think it says it all. Why is the US government meddling with the market?
I live in the Us as well: We don’t pay the real price of food.
Yeah produce are labors intensive. But a lot of crap food has hidden cost that should be factored in. ( but that’s yet another topic :) )

To summarize, I find it hard to smallow that buying a frozen product that flew to you and is the result of a complex industrial process is cheaper than whatever grow with sunlight, a hour of care a day and some water.
Here is an article that explains more about the outliers that emerge in large transformer models, which is what this modified softmax is being proposed to fix:

https://timdettmers.com/2022/08/17/llm-int8-and-emergent-fea...

The fact that these only emerge in larger models is likely one reason the author hasn't actually tried it.
The movement to limit face recognition tech might finally get a win
This isn't a criminal trial.
I care, and I've basically stopped using my iphone for anything because the web is an abysmal experience full of ads even with the maximum amount of ad blocking possible on iOS. I hate the iPhone and the only reason I haven't switched back to android is that it seems to manage to, somehow, still be even worse. We are well and truly on the other side of the enshitification event horizon on mobile, and it looks like Google is doing it's best to make sure the web keeps up on the desktop too.
It trademarked a very different 'X' logo, but they'll file suit anyway as a matter of form.
> "I had a question where I had finished with a one word sentence "Thanks." . A mod had removed that part of the question, when I looked at their record they had an awful lot of edits which consisted of similar, tiny, non-substantive changes. It did make me wonder about their motivation."

https://stackoverflow.com/help/behavior

"Do not use signature, taglines, greetings, thanks, or other chitchat.

"Every post you make is already “signed” with your standard user card, which links directly back to your user page. Your user page belongs to you, so fill it with information about your interests, links to stuff you’ve worked on, or whatever else you like!"

"Thanks and other statements of appreciation are unnecessary, and, like other chitchat, should not be included."

"If you use signatures, taglines, greetings, thanks, or other chitchat, they will be removed to reduce noise in the questions and answers."

----

Removing it doesn't get the editor any points, they are spending their time cleaning up your question to site standards for no reward at all.

https://meta.stackoverflow.com/questions/260776/should-i-rem...
My counterargument would be about why you need to lift weights in the first place ?

Some people like lifting weight, sure. But if your goal is to carry injured big dogs in your medical center, you won't be lifting random weights, nor doing generic workout. And you might not even do that in a gym, you could as well train with healthy dogs and get an actual feel of their weight distribution.

For books it goes the same. Reading stuff that will actually help you and bring you closer to your goals will help a lot more than reading for reading. On the other side you'll be able to go through thousands of page if the subject matters to you, where reading dumb prose will kill your attention in matters of minutes.

Learning to plow through uninteresting books for the sake of it doesn't sound like a worthwhile use of someone's time. But yes, just like workout, some people enjoy the effort in itself and like to feel the pain.
The ABS system your car’s brakes could crash — literally — and that would be safe?
It’s pretty clear this is just a map of where the oil comes from and thus likely not very useful.
Safe means that every operation has well specified semantics. Some languages, notably C and C++, lack this property.
I think he got done once or twice for plagiarism, what's the "extensive history as a liar"?
I did something like this for a while. I was in Hong Kong in the late 80s and on the recommendation of a much more seasoned colleague I went to 'his' tailor who measured me in great detail and for what I'd pay for one off-the-rack suit in the US I got 2 really excellent well fitted suits and a week worth of dress shirts. For the next decade or so I would order things a couple of times a year (by sending a letter + money order; no web site then) and it would show up 6-8 of weeks later just as I needed. Even when I included "I gained 10 lbs since my last order", they adjusted perfectly.

Then I spent a good while where suits weren't the 'style', didn't order and lost those contacts. Not that I need one now, but it'd be nice to have 1 suit that really fit and looked good for less than US$1k.
Ex parte just means it’s an emergency and you need the court to move fast
Then the semantics are not well specified.
I found this randomly in my high school library and I "borrowed" it for the summer. It was honestly the best intro to computer engineering courses I've ever read. It was incredibly easy to understand even for a high school age me with basically no knowledge of electricity or physics.

It starts from the basics of people who used switches and electromagnets in the past, and more or less follows the history of how computers were made, which personally helps me understand the logic behind some of the weirder design decisions. (sidenote: I feel like history is great for understanding most strange decisions)

It also helped me breeze through the circuits and digital logic section of my intro ECE course, and was accurate enough to inspire me to build an 8-bit adder in Minecraft upon finishing the book. I really miss the days of having that much free time, if you have someone who is an avid reader and loves electronics, this book is amazing.
Unfortunately personal cars are a drop in the ocean (ignore any pun please) compared to other systems like the military, commercial shipping, air travel etc etc. There needs to be a coordinated effort to de-carbonize and focusing on impacting peoples personal comfort as the first step isn't going to work particularly well when folks know they aren't the primary contributors to the issue.
That's the thing I don't understand about people who live in the USA and their absolute hatred towards a National ID system. It would be a political nightmare for them to even suggest anything like that. Even their "new" FedNow service is being as governmental overreach for "reasons".
No mention of criticism for requiring use of phone numbers as identifiers. Falsely claims phone numbers are not linked to usernames.
Can you expand on the security improvements of v3? This is the first I've heard this.

As for performance... That sounds dubious. Declarative blocking surely will be faster than v2, but what is being blocked by v2, I would imagine, is generally way slower than the difference between v2 and v3. At the end of the day, I don't see the performance of my browser negatively impacted by uBlock Origin, I see it saving CPU, bandwidth, memory, privacy, etc.

I'd be willing to bet that whatever isn't blocked by v3 is sifnificantly slower than whatever supposed slowness there is with v2 (in general).
> the web is Chrome

And lot of people here squeal like stuck pigs if you suggest anything other than the Chrome monopoly. HM is a constant barrage of demanding that legislators force the Chrome monopoly to be extended to iOS devices!
The people involved in this concept/idea/proposal should be shamed into retirement. They should never work in the tech sector again. They should be afraid to use their names before first knowing their audience (an agricultural audience would likely be OK).
> flight crews kept track of fuel quantity based on kilograms rather than the fuel company’s liter-based measurements.

This was only 8 years after Canada's 1975 switch to metric.
A whole lot more people don't eat meat than you realize. Some of us don't go around advertising that fact because we're tired of being ridiculed, but we still show up in surveys. I don't think some 5-10% of people on the street are "running up to people they don't know to announce shit like this".
Mozilla Standards Positions Opposes Web Integrity API
I wasn’t making a point, I was asking a question…
Yes, if you demonstrate that entire class of bugs are ommited simply by the language inherently having some feature (like types) then it's a decent argument that this language is safer, or even completely safe [from the specific type of bugs]
I am a right wing secular israeli and the writing is on the wall. I was always with Bibi, but recently voted Lapid, I really don't know what to think or who to trust. Israel has changed so much in the last 20 years, whenever I go back all I can do is reminisce. I can't help but feeling that the Israel I loved is dying. It also feels like a big Americanization of the politics into two parties.
"There Is More Than One Way To Do It"?
Anyone who trusts Elmo with any of their money is a damn fool (to phrase it very mildly)

. . . especially after seeing the last 8 months of baldfaced stupidity
Where did you get this definition of safety from? I’ve never heard someone define safety to exclude security issues; that doesn’t seem very useful.
I was looking into implementing syntax highlighting for my hobby language and man, it’s surprisingly hard. Either you use tree-sitter which has limited support, or TextMate grammars which seem to be quite terrible. And to get JetBrains support it seems like you need to add a whole other lexer integration.

Can’t we all standardize around tree-sitter?
> Twitter's autoresponder replied "We'll get back to you soon."

This is impressive. No more poop emoji?
> uBlock Origin doesn't work on mobile Chrome.

That's true, I was talking about desktop, I probably should have not mentioned the phone extension thing.

In Android I use Bromite (a Chromium fork) which I should probably replace since it's fairly outdated at this point.

But you're wrong about me not using Firefox out of spite, the real reason I don't use it is because it is (or apparently was according to the other replies) slower to the point it is noticeable, at least on my desktop (and even more so on my old phone). The rest is just why I don't support them despite being worse.
You are making up traits about liberals. Isn't this the same group Republicans call "tree huggers"? You're so overly aggressive--you'll never convince your opposition that you're actually correct when you're being a giant asshole.
Most VS Code settings can optionally be saved into the local working directory under a .vscode/ directory, which can be committed to a repo. When you open a workspace in VS Code, go to Settings. You'll see two tabs at the top: "User" and "Workspace". If you click on "Workspace", any settings you change will be saved into .vscode/ in the current directory.

You could also use a `devcontainer.json` to personalize the GitHub Workspace even further, so when people open up a Workspace, things are fully configured: https://docs.github.com/en/codespaces/setting-up-your-projec...

In VS Code, once you have an extension installed, you can go to the Extensions tab, click the more options button on a particular extension, and click "add to devcontainer.json", which seems like it would ensure that it is part of the Workspace by default.
>2. The "arrival time" concept is a slightly odd.

There's nothing odd about it. Your arrival time entirely depends on the train schedule, and you can only arrive at your destination at certain discrete times because of this.

>I don't think anyone's going to use this to plan a specific route at a specific time;

I use Google Maps to do this exact thing all the time. I need to be at a certain place at a certain time, so I set the place and arrival time and have it plot a route and show me all the available options.
Too long; didn't read.
vk_mini_path_tracer is a beginner-friendly introduction to writing your own fast, photorealistic path tracer in less than 300 lines of C++ code and 250 lines of GLSL shader code using Vulkan

https://nvpro-samples.github.io/vk_mini_path_tracer/index.ht...
That's nice to know, I'll give it a try soon then!
Show HN: One-line output parser for LLMs
no code bloat, three parsers, get responses in native TypeScript
100 years later and with supercomputers in our pockets, we can't do any better - because these devices are so locked down.
Nice writeup, very easy to read. This guy is a bonafide legend, the whole time, based on his writing style I thought it was someone new to the field explaining in detail because it was hard for him to get it as well, but I see his name at the end and recalled all the epic findings of his. Very humble/nice guy, even in person I hear (rare for well accomplished people in tech).

One thing I don't get though, if amd64 is affected, shouldn't the complementary instructions in X64/intel also be affected? Does intel move around RAT referenced values instead of just setting/unsetting the z-bit?
Does VSCode.dev work well on iPad?

I tried it a year or two ago and I had issues with the keyboard shortcuts (had to disable keyboard shortcuts on ipados) and scrolling behaviour. I seem to recall having other issues with safari and the local files but it’s been a while.

I’m not in a place I can try it out, but if it works then that would open up remote web development.
It's got to be very close to per capita spending.
This has been happening already. The market is trying really hard to price out web scraping through scraper detection technologies and it's kinda working - scraping is becoming non-existent in user-space apps. It's also extremely discriminatory. Try running a single scrape with a developing country's IP and Linux, you'll be blocked at TLS step lol
She’s an Australian and the US and Australia do not have reciprocal agreements to enforce civil cases. She’s probably best off contesting that the US court has no jurisdiction over Australian citizens.
No, I’m using Google rhetorically. Sure you could be more specific and say the Google Chrome team, or whoever is actually discretionary responsible for this, and the chain of command that authorizes them with that power within the org… but I think, bothering with such specifics would make the message less effective so I didn’t.

Also, I don’t think it’s necessary. Google is responsible for whatever its parts are doing; a corporate entity. And people are right to expect that if they get something from Google then it’s caused by Google.

Also, I think it’s wrong and too early to be diluting or shielding Google behind the pedantic hairsplitting that, “oh you see it’s not actually google at fault here, um, it was probably some guy that works in a basement somewhere, you know, his views not reflected by ours and so on…” it’s not necessary to provide them that shield or confusion at this stage.

He may work at google, you may work at Google, I may work at google; we don’t know. And it’s not important. What’s important is that Google is at fault here. (I don’t btw)

Magnitude of the malfeasance is so great they deserve to be held to account for it, and a simple label of Google is sufficient.

Also, Occam’s razor? I think it’s unnecessary to invoke the preposterously exaggerated strawman of some ghastly and convoluted conspiracy here, when their actions directly align with, and can be efficiently implemented by, their business. It’s a simple thesis: Google is at fault and they meant to do it. They know it’s bad and therefore are selling it deceptively.

It’s neither convoluted nor complex in any way. In fact, if they’d tried to engage with this technically in a way that accounted for acknowledged and respected the fears and concerns people raised in response, then I think they would’ve ended up with a solution that is more convoluted, and complex. In this we have the curse of simple evil.

I think it’s drinking the gaslit Kool-Aid to pretend “oh no, it’s an accident, it’s incompetence, they didn’t mean to.” This is directly (if harmfully and unethically) supporting their business interests. They meant to do it. That’s the simplest explanation. That’s Occam’s razor.
It would be tasty with the 2000 year old honey they have found.
> Israeli here

"Left wing" israeli here..
Even though games is what got them started initially with Atari.
I've been following the situation in Israel, and I don't understand why the reasonability clause is something good to have in the first place. If a law is being passed, the SC could overrule it by simply saying that it is unreasonable. That sounds like an awful reason. Now the SC has to actually show which of the basic laws the proposed law contradicts. This is how it works in the US, and that makes sense to me.
What am I missing?
It would be really useful if there were some way to take that into account. If an electric car is charged with a typical mix of electricity sources, how much gasoline would you have to burn to put out the same amount of CO2?

Perhaps the EPA should put out some sort of miles per gallon gasoline equivalent, or MPGe for short.
Hopefully such statements are sufficiently rare that they don't get reinforced, I guess. I don't know. A very real problem occurs with people too when fictional things are repeated often enough without direct mention of their fictional nature.