BlackMonday

Yes, which is why I posted this story to raise awareness. It's shocking to me how even many software developers don't know about this.

https://www.agner.org/optimize/blog/read.php?i=49

Maybe also of interest in that regard is the movie "Concussion" with Will Smith about the story of Dr. Bennet Omalu.

https://en.wikipedia.org/wiki/Concussion_(2015_film)

This would interest me as well, especially since someone here on HN wrote that Intel has more software developers then AMD has employeess (10.000), which wouldn't surprise me considering that Intel has 10 times as much employees in total. So AMD has to be more selective about what they can explore/support/etc.

If you can live with compiling a declarative yaml description and only need to read the data then there is also kaitai-struct. [0] One of the compilation targets is javascript. Their web ide (feels kind of like a simple sweetscapes 010 editor) which is quite nice uses the js target. [1] Other targets are c++, java, php, python, ruby and more.

I used it in the past to read a proprietary file format and it worked well, but they also have quite a few predefined formats in their gallery. [2]

[0] http://kaitai.io/

[1] https://ide.kaitai.io/

[2] http://formats.kaitai.io/

It seems the article was saved to archive.is a few months ago [0] but you can also read it by using NoScript or uBlock.

[0] http://archive.is/VuXE7

With "no XSS" I meant a XSS exploit doesn't allow access to the data stored in the cookie. I didn't mean it would protect against XSS. Poor/lazy wording on my part, sorry.

It's true that a attacker simply can generate requests from the XSS'ed browser, my understanding was that the session/token is more valuable to an attacker then only an XSS exploit.

However it seems that someone in the past had the same understanding as me and tptacek disagreed [0]. Oh well. Also reading the linked article [1] (are you the author since you use the same wording?) and it's linked articles it seems both cookies and webstorage are not ideal solutions, but local storage might be preferable since CSRF is not a problem, so one thing less to worry about.

[0] https://news.ycombinator.com/item?id=11898525

[1] https://portswigger.net/blog/web-storage-the-lesser-evil-for...

> It's probably better than cookies.

Why do you think so? I would guess it's a tradeoff about what you think is more likely to happen. XSS or CSRF.

Local storage (and session storage) is vulnerable to XSS. Use a strict content security policy and escape (htmlspecialchars in php and similar functions in other languages) output to combat that.

Cookies are vulnerable to CSRF but can't be read from JS if they are http only (no XSS). To combat CSRF most frameworks already have built-in csrf token support. In case of a API use a double submit cookie. Frameworks like AngularJs/Angular support that out of the box. Also use the secure flag SameSite and __Host prefix [0][1]

[0] https://www.youtube.com/watch?v=2uvrGQEy8i4

[1] the slides from the video: https://www.owasp.org/images/3/32/David_Johansson-Double_Def...

If possible you could alternatively have send her (every browser which doesn't support full grid) a mobile layout like described in the video: https://www.youtube.com/watch?v=txZq7Laz7_4&app=desktop

> From this follows a simple but surprising truth: The lack of support for CSS grid in an old browser should not affect the experience of the visitor, but rather just make the experience different.

> If you agree with this (and you should), there is no reason you can’t use CSS grid today!

> Here’s how that approach could work in practice. Rather than using fallbacks and shims to ensure a design and layout look the same across all browsers, we’d provide the mobile vertical single-column layout to all browsers and then serve up advanced functionality to those browsers and viewport widths that can take advantage of them. It might sound like progressive enhancement, but it’s actually more of an accessibility-centric approach enabled by a mental shift.

https://www.smashingmagazine.com/2017/06/building-production...

Assuming this rumor is true are there related papers about how machine learning can improve or hide latency?

I know about Microsoft DeLorean/Outatime [0] but that doesn't use machine learning if I remember correctly, otherwise I found this [1] but that is about TCP and games usually use UDP for better latency.

[0] https://www.microsoft.com/en-us/research/wp-content/uploads/...

[1] https://1989chenguo.github.io/Publications/SmarIW-IWQoS18.pd...

I don't use scala professionally, that said I have never seen semicolons actually being used. For examples apache/spark, lightbend/play-framework, typelevel/cats, the scala compiler itself etc.

But maybe there are edge cases where they are required. I don't know.

Since I'm too lazy to write a mail: Scala has optional semicolons (they are infered).

> What I really liked about it is how it forces publishing companies to truly make knowledge available for everyone.

I haven't read the article yet, but wow will that interact with: https://www.eff.org/deeplinks/2018/06/eus-copyright-proposal... [0]

[0] https://act1.openmedia.org/savethelink

They maxed out the number of cores they can ship in a single CPU for now but that doesn't seem like a problem.

AMD will already launch their 7nm EPYC processor based on Zen 2 in 2019 (skipping Zen+ used by the new Threadripper and Ryzen 2xxx) which is expected to have 48 cores (some rumors even suggest 64 cores but that seems more likely for 7nm EUV instead of the first 7nm processes). So they will have no problem releasing more cores with Threadripper 3 next year (if they keep the yearly releases).

On top of that, in my layman eyes AMDs aproach of using infinity fabric to connect dies seems better suited to react to changes compared to Intels monolithic design.

I'm not sure about that. Compared to Django, RoR and Laravel it's not opinionated enough. No resources like RoR and Laravel, no buil-in database mapping, no built-in authorization etc.

btw: what do you use for the database access? Slick, Quill, Doobie, ScalikeJDBC, Anorm, Squeryl, jOOQ, Relate, Activate or something else? There seem to be gazillions of sql libraries for scala (although the big three and most relevant are probably Slick, Quill and Doobie).

And what do you use for Authorization? Something custom build? If I look at Laravel there are quite a few maintained authorization libs with ~1000 stars on youtube (even more if we count unmaintained), for play there is not really much (deadbolt, play4j and t2v/play2-auth, I don't count Silhouette since the lib is mainly about authentication).

> That must be a really high end air cooler.

Good that Noctua will release their Threadripper coolers like the NH-14S next week. I wonder why they didn't release their NH-D15 (which beats many AIOs) for Threadripper as well, since it's even better than the NH-14S.

They sold most (all?) of their studios (for example Black Sea was sold to Sega) and I've read about investors. Rumor has it that the Lumberyard deal was already used up earlier this year which seems to be the reason for the alleged salary problems (that also happened before the Lumberyard deal in 2015). But who knows.

I wonder how their business plan is working out for them, as the engine is completly free (if you want, as the engine is pay what you want) and unlike UE4 has also no royalties.

Unlike anandtech servethehome has measured the power consumption of Epyc themselves.

Personally I don't find it as childish as EPYC, but it seems like a unnecessary change. The previous naming scheme seemed to have worked just fine for Intel.

AMD on the other hand probably needed a clean break since they were behind for a decade.

What do you think about the name EPYC? Will that name harm the adoption in the datacenter? Is maybe the WoW generation now in charge which has no problems with more fancy names, which I can see happen with more conservative older people?

---

head shake at the downvotes. HN get's sillier by the day.

More like society is broken.

The name sounds childish, I wonder what people in charge of buying processors for datacenters think about it.

I should have worded it better, but it's not wrong. It's predicted that cards wil overtake cash by 2022, at the moment cash is ahead: https://www.atkearney.com/documents/10192/9746746/Cashing+In...

probably because netherlands and sweden make up only 4% of europes population and the other countries are slower at adopting it.

The article you linked was on HN's or reddit's frontpage recently, that's why I wrote "most". ;o) (plus I don't know enough about every european country obviously).

EDIT - looking at the date of the article it might have been not the same, but a similar one.

In europe most of the population seems to prefer to pay in cash (for clothes, groceries, electronics etc. pp.).