This really needs to be done. The journalist's article has nothing to do with the paper (I do not think the journalist read the paper)

They may have read but they clearly did not understand. Looks like they realized it now:

> Update: Our reporting was incorrect, here is a comment from the author of the report: “Author here, I would like to set the record straight.We do not claim to have an attack on SSDs. The journalist seems to have misunderstood and not read the paper. The attack demonstrated is not on an FPGA or SSD. The main point this paper makes and demonstrates is that if you can cause corruption of a full block (i.e., completely garble contents of a chosen block), then you can elevate privileges (with some assumptions, like using ext3). Note that this result does not depend on whether you are using an SSD, a disk, or any other storage for your filesystem.”

To add to your point:

> Google lets you set up simple Firewall rules. Amazon gives you VPC, security groups, network access control lists and a big, fat headache.

AWS also gives you firewall rules, in addition to the other options. If you don't get why you would need them, you don't really have to use them.

That is about an unrelated paper

You're right. Death rate is about 0.8%, to be compared to 0.02% here (40 times less). Of course, this does not account for the difference in the age distribution of workers vs the national population.

At high level chess (which this is), white has a significant advantage over black. Always picking asm.js as white (and not providing a setting to change it) is a bit disingenuous.

I don't know if it's updated but here asm.js is the black (or blue) player.

It looks like very poor chess to me. 1.Nf3 Nf6 2.e4?? Nxe4 at 1000ms...

They seem to be horribly bad to me. Constant obvious miss play sacrificing pieces at random from time to time.

asm.js was black for me.

By looking at the IBM-provided benchmarks, it looks like the new Power8 is better. But are there any independent benchmarks out there already?

It probably doesn't matter, they aren't better enough. Now if IBM sold these maybe 30% cheaper, it could be a different story

Where can I register as a locksmith, and what's my cut?

The website refers to http://lockedout.io/provider.html (says nothing about your cut)

This paper just received the $100,000 Internet Defense Prize from Facebook at USENIX Security ’15

My heart wants to agree with Thomas, but I think we should remember this is a single data point and not generalize too hastily.

Are you sure about that? https://www.google.com/transparencyreport/userdatarequests/c...

It says 0% for Turkey and no data for Bulgaria. Better than the USA.