jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Be careful doing this.

Eggs don't need to be refrigerated BUT only if they have never been refrigerated. So, if you take an egg straight from the nest, for example, you don't need to refrigerate it, and it will keep for a long time – definitely weeks, maybe even months, I don't know.

However, once an egg has been refrigerated, their natural protective coating, the cuticle, starts drying out. Also, most commercial egg processors wash eggs, mostly to make them look cleaner but also, in theory, to remove salmonella. So, between the washing and the dry refrigerator environment, that cuticle is mostly gone by the time it gets to the supermarket. When you take a cold egg and leave it out at room temperature, it begins to sweat, which facilitates the growth of bacteria that could contaminate the egg.

In summary, yes, fresh from the farm eggs, can be left out at room temperature. Refrigerated supermarket eggs should be kept in the fridge or used the same day they are taken out of the fridge – ideally within 2 hours.
In DEBUG level it is fine to log decrypted content, it is not a security concern, and is quite welcome.

If you're using DEBUG level logging in production, that is the security concern. The functionality isn't.

The argument "what if the bad guy can change the logging level?!" is pretty weak, if such a person could change such a thing, they could also change a lot of even worse things and likely make that just the tip of the iceberg.

Seems like your mental model of the security is a little off. If the system is compromised your Java XML encryption library isn't going to save you, in particular as you have to be storing the private keys on the same system.
I can't see me paying for the service, but I think it's a great idea, especially for anyone who is trying to learn photography. I think I might make that my New Year's resolution.
I disagree that it has very little appeal, though it certainly has a more narrow focus in terms of to whom it does appeal. The type of post you mention is something we have been concerned about and working towards resolving. At the end of the day, I think Forrst can and does provide real value to professional designers and developers, but perhaps that is not able to shine through as much when such posts exist.
Why not automagically host the files on Flickr, saving you costs of storage & bandwidth?
We'll take those into account, thanks!
There are always risks in business.

Are all the people who have built successful companies that rely on facebook, apple, twitter, google, or other platforms wrong?

The important thing is to understand the risks and account for them. Don't overreact just because having your app suddenly pulled seems more traumatic or less under your control than other failure modes.
> I'm particularly curious about "I'd like to use Bevy but..." stories.

I am a game dev novice, but the concept I am wanting to develop requires mesh loading (fbx/dae), animation/skeleton/bone loading, and custom bone manipulation. Granted Bevy does seem to have the physics I need via the rapier plugin. I have been working with Godot to achieve my PoC, but would love to use Bevy instead. I admit to not keeping up with the current state of these features.
For anyone interested in learning / trying out Bevy, have a look at The Unofficial Bevy Cheatbook (i'm the author): https://bevy-cheatbook.github.io.

I did a major overhaul of the book for the new 0.5 release, and it's better than ever! Many pages were expanded or rewritten, new content added, and community feedback addressed. This is now one of the most detailed learning resources for Bevy.

Enjoy, and have fun making things with Bevy!

(the book is a continuous work in progress, even more content and improvements coming soon!)
How effective is it to report misconduct to the very agency that is committing the misconduct?
> Since there's no known way to prevent TGA, no treatment, and apparently no lasting damage, it has never (AFAIK) been researched, certainly not researched much

I suspect the issue may be the lack of a good biological model. I'd guess it would be a very attractive and obvious research target for anyone aiming to investigate memory formation and recall. However, systematic studies generally require a model system that can be reliably reproduced.
> I think that is a very charitable assumption about the GP claim. The linked article describes a very specific implementation vulnerability around handling of offline messages that would appear to be routed in user experience being ranked higher than operational security by WhatsApp (understandably).

Both points (security vulnerability and user experience prioritization) can be true simultaneously. This is the root of all plausible deniability when it comes to installing vulnerabilities in technologies.

I don't see why we should care at all about WhatsApp's intentions with the change when the effects are so pernicious. Facebook et al. definitely do not deserve the benefit of our doubt anymore.
You might be interested in cakeml and cogent. What Safety Integrity Level can ivory guarantee? level2?
No, but the https://github.com/Nilirad/bevy_prototype_lyon crate does a very nice job here :)
> Can we please stop legitimizing Rails's whimsical aesthetic choices by pretending that they have something to do with an academically-justified architecture, and just accept that they're just another way of ripping your denim and then safety-pinning it closed, by which you demonstrate that you're not a square and you don't write Java.

Please don't do this here. Snark like this is good for starting technical flamewars but it invariably lowers the quality of the discussion.
"Gosling Complete" is such an awesome phrase.
Yeah, I can see how that kind of behavior would result in resentment. You're right that a founder cash-out can have a lot of negative consequences, but one should make it clear that alignment is a big part of investors' concerns as well.
The web page is using frames.

If you try to view the page's frame in its own window, the favicon will show up.
Find country that need (but does not have yet) ICBM capabilities and pitch them that you can build rocket for them. They will provide all funding you will ever need.
What's wrong with having rituals around things like sexuality? Rituals are part of every society, a human universal. They promote humaneness, benevolence and proper conduct. And proper sexual behavior needs these things.
I'm not sure if I've either explained myself too simplistic or that you haven't understood my post.

My points were:

1) DM isn't a fudge factor for GR or Newtonian Mechanics, (Classical) Newtonian Mechanics doesn't have one, PPR does but PPR isn't a theory.
GR has a fudge factor built-in into the theory - the Cosmological Constant that gives you a variable that can adjust the predictions to match observations as it wasn't known at the time if the universe is static or not. It's not a perfect fudge factor since it can't deal with accelerated expansion easily but it's a fudge factor nonetheless.

2) MOND was based on classical mechanics and as such isn't a replacement for GR, I'm not sure if I agree with the assertion that TeVeS is an extension of GR. And yes all theories of gravity need "Dark Matter".

Dark Matter isn't a fudge factor it's a placeholder for missing mass needed to align predictions with observations doesn't matter if those predictions are derived from GR or Classical Mechanics or as you've mentioned even MOND.

And yes MOND still requires "Dark Matter" or to be exact some additional mass however it requires much less of it and it requires it to be concentrated in the center of galaxies which means it can be much more easily explained for through known mechanisms and forms of matter (e.g. the black holes in the center of a galaxy are more massive, higher density of interstellar medium and gas etc.), hence it can be described as a theory that "solves" the problem of Dark Matter, because it doesn't implicitly require new forms of matter or complex explanations for missing mass.

However like you've mentioned MOND is a flawed theory, it doesn't even work on galaxies that well since while it can describe their movement today, it has difficulties aligning with observations of various clusters and more importantly it doesn't work well when you start to wind back the arrow of time, and you don't even have to go as far back as to the formation of galaxies (which aren't possible under vanilla MOND) rather it can fail as quickly as by rewinding the clock half a billion years in some cases.
Swedish ärtsoppa and Finnish hernekeitto are the same thing.
I find anything critisizing SV or YC company gets immediate downvotes, as do most critical of china, israel, and saudi arabia (or any company funded by them, lookin at you softbank). While there are more Indian, UK, and Canadian commenters who will actually argue, they seldom downvote. Oddly, most americans will go above and beyond to disparge their own nation more than any other (free speech is empowering!).

More people lately seem to downvote out of disagreement rather than to keep a thread in check. I thing requiring a comment to downvote would be a huge step forward in the quality of discourse.

This is not to pass judgement on any subset on the HN or general communities. Just apparent trends that have I have noticed. I could very well be victim to my own (american) bias.
This sounds like Tesla. No recurring revenue, pushing debt forwards. Mmmmm.
Who cares what I care about, the real question is what do my users care about.

It all depends on what users will tolerate in the name of convenience.
I would strongly suggest serving this landing page via http/2.0 - your 504 requests over http/1.1 are currently taking 3.5 minutes for me to load 2MB of data.

https://ibb.co/5BWrqbx
That's exactly what bugs me so much about Trip Advisor ratings. Even then, when they still had some utility.

When you have a 5* scale for rating a restaurant my description would be:

* A disaster level lousy place
** Sub par. Probably wouldn't visit again
*** Quite OK. Probably not my fave anytime soon, but
fine
**** Above average. Excellent food, service and
atmosphere
***** An out of this world dining experience. Perfect in
every aspect

I realise that there is a certain amount of relativity and subjectivity and that a 5* Trip Advisor review is not necessarily equal to three stars by Guide Michelin.

But it should mean something and when most restaurants have something between 4 and 5 stars (Let alone that the #1 rated restaurant in London was one, which didn't exist[1]) the value of such ratings become very questionable.

You can see the exact same with Airbnb ratings where 4 -, or 5 star does not mean that you will have a great experience.

[1] https://en.wikipedia.org/wiki/The_Shed_at_Dulwich
Because there are equally effective cleaners that are less hazardous to your health and the things being cleaned than concentrated chlorine. Sure you could use chlorine as a cleaner but the cost/benefit is not there outside some niche industrial applications where there's some specific pro that makes it worth all the extra cost.
I was a passenger in a Model S my friend owns the other day. The biggest thing I noticed was that we were able to have a conversation at very normal volume levels. I had never noticed that I always needed to speak up in a car- until I didn't need to.
Well it's in the best interests of VCs to say that Microsoft is dead. Peter Thiel would also say the same thing. Especially since Microsoft is in a relatively vulnerable position (i.e no clear monopoly/hard to replicate product like Google in Search or Apple in Hardware). They'd rather have investors invest in the shiny new equivalents their start-ups are coming up with.
>the spending on it is only a little larger than at the end of the cold war

I hope you realize that this means the spending on it is quite high, indeed.
Sure looks that way:

http://siteanalytics.compete.com/techcrunch.com/
XServ? Apple TV that has iterated through various terrible iterations? Ping?

The article is yet another Apple love-in. The comparison is "viewing one company with a critical eye, and the other with rose coloured glasses."
People have a right to be compensated for their effort. If you don't like it, no one forced you to tip him, and you got all that valueless writing for free. Had he charged up front, you either 1) wouldn't have paid, or 2) would have been disappointed with what you bought. Instead, he gave it away, and if you liked it he suggested a tip. No different than what I see on endless blogs on the net. If he hadn't "begged" for a tip, chances are he wouldn't have gotten any.

What gets me puzzled here though, is it seems that it's OK for a company to charge for something (that may even be valueless to many, many people) and it's expected, but if an individual person suggests tipping on their "product" everyone gets their panties in a bunch. He's viewed as weak for returning the money, and annoying for asking for a tip. Oh well, being reasonable isn't always popular.

If you don't want to tip, don't. But it doesn't make what he did any less noble.
Does anyone know what the stats app used is? Thanks.
How can someone write so much about this rivalry and say nothing interesting?

My advice if you haven't read the article -- skip it.
It's unemployment insurance, not a personal unemployment fund. If a car gets totaled and the owners insurance provider pays it off, that doesn't mean a rational owner saves up to pay the insurance provider back for living up to their obligation.

This guy sounds like he suffers from a misguided sense of responsibility.

A fool and his money are soon parted.
Ahem... Ukrainians, Belarusians and Tatars?
Hey!

Not sure if anyone already mentioned this but maybe is not about the job but about how you do it.

I would recommend reading the book "The 4 Hour Workweek" from Tim Ferriss. There he gives kind of a framework on how to reduce your work time so that you can focus on what you really care about.

Like I mentioned before maybe instead of looking for a job, you just need to look for ways to make your current one more automated or how to work less on it
No one wants to not be on top, but being on top doesn't maximize everyone's happiness or sense of purpose either.
Freedom intensifies
Thanks for taking the time to reply. I'm still not convinced that pulling atmospheric carbon out of the air makes sense until practically all smokestack emissions are captured at source. Something like putting the heating on while all the windows are open.

I wish you guys luck though, hopefully you can carve out a niche market which will mean carbon capture technologies are ready when the time comes.
I think you and others are missing the point of how language works.

The situation is similar to famous Dutch insults like Kankerlijer (cancer sufferer), Klerelijer (cholera sufferer), or Pleurislijer (tuberculosis suffer). Using these to insult people who indeed suffer from these diseases is questionable and can be rather tasteless. It may even be confusing and fail to work entirely. By the way, it's also wrong to insult sick people just because they are sick, and it's wrong to insult people with mental disabilities just because they have mental disabilities. But using such expressions to insult, swear, or exaggerate at healthy people is a quite normal function of the Dutch language. So Yes, if this e-ink company was indeed lead by people with mental disabilities, using the r-word to make fun of them would be rather tasteless and possibly also ineffective.

Swear words and insults work because they break a taboo. If you regulate language to avoid one taboo, then speakers will simply resort to breaking another taboo.
I don't see the dissolution of the state happening due to cryptocurrency, nor would I welcome it.

(further, adding a new mid-sized country to the energy map is not a great way to go about righting ecological wrongs.)
Parler now looks to be hosted through a company called SkySilk:

parler.com. IN A 216.246.208.249

https://rdap.arin.net/registry/ip/216.246.208.0

SkySilk appears to specialize in VPCs and cloud hosting, not colocation. Their AUP doesn't appear to give Parler much relief either[1]:

> We specifically reserve the right to refuse to provide the Service to customers or End Users engaged in the dissemination of material that may cause us to be subject to attacks on our network, or that while technically legal, run counter to our corporate principles.

I can't imagine this arrangement lasts too long.

[1]: https://www.skysilk.com/aup/
I opened their website and it asked me to install their app but the App Store says it is not available in my region.
The argumentation is not to abandon virtual addressing, but to realize it has downsides.

I read the whole piece as a reminder that there's no free lunch, and no silver bullet, only tradeoffs. (The part about OOP which was all the rage at the time seems to lack that balancing part, though. It ended up a tradeoff, too.)
I was never a fan of SELECT * as it felt lazy, and a bit of a pain when joining multiple tables. Also, if you happen to only need the columns that are covered by indexes (a covered query), then you are actually really slowing yourself down quite a bit. Extra columns mean extra memory and extra bandwidth. They also affect caching.

Plus, despite everything, the optimizer is not perfect and some extra columns might change your query plan (Sybase had so much fun with this stuff).
There is a bit of a logical fallacy here. He says "the data is not extremely accurate", "metadata indicates apple intended to store locations of access points", "therefore the phone is not traking your location".

That's simply false. It is tracking your location, regardless of how accurately it's doing it, and irrespective of Apple's intentions.

That means someone reading the data can know roughly where you where when, the direction you where traviling in, and how fast you going.

Does that mean Apple set out to track you? No! But it does mean that your phone is tracking your position, all the time, everywhere you go, and is storing that data in a way that is not protected from exploration by any third party that happens to acquire access to it.

That's a serious bug, and is worth a little sensationalism.
Very cool, nice to see a game that is both HTML5 and fun to play. :)
Those are just minor implementation details. Off the top of my head, the key can be stored as a password protected file inside the Dropbox account its self, synced like any normal file, but perhaps hidden from the end user. The encrypted folders contents are synced like any others. On any client where you want to access the decrypted folder contents, you'd just enter the password to decrypt the password protected key and the folder contents would become available. If you forget the password then you're screwed.

The only way Dropbox could access those files then would be to backdoor the Dropbox client. But if they were going to do that, it wouldn't even be safe to use TrueCrypt or GnuPG either.
This seems to be a prevalent misunderstanding. Amazon's EC2 SLA of 99.95% applies at the scope of a region. A region may contain more than one availability zone. Hence, deploying on multiple availability zones still only affords the 99.95% availability level.

Yes, multi-region availability on AWS is hideously expensive. However, some organisations value an availability of greater than 99.95% enough to warrant such a multi-region deployment. Clearly reddit, and many, many other AWS users, do not. This isn't a value call on my part; I definitely couldn't afford the inter-region data transfer costs, all I know is that AWS offers you the tools to deploy high availability web services.
Isn't it paid on impressions?
If more privacy-conscious users start using TrueCrypt after the revelations made (Dropbox being able to decrypt your data) in their latest blog post, http://news.ycombinator.com/item?id=2470074 , that conversion rate will need to be higher.
What I really want is family lending. Sooner or later my wife will get a Kindle or something capable of reading Amazon books, and I want to be able to easily lend books to her without handing over my Kindle.
I've used TrueCrypt volumes with Dropbox before, and when I encountered a situation where I wanted to access the volume from two places, I took the sensitive data from Dropbox and just exposed it on my private network where I have more control over access. As far as I can tell, there isn't a great way to keep high security and flexibility when using sensitive data with Dropbox, but keeping sensitive data on the cloud is always a risky affair anyway.
> I thought you could snapshot drives across regions and bring those EBS drives up under new instances in new regions?

In theory, yes. In practice, those snapshots hurt the volume so much that it is impossible to take one in production.
YC is not very successful in my measures of success.

Profitable, yes, but all companies together = less than bitcoin

Spawn companies, yes, but total number of public companies that IPOed = 2
tptacek has 323873 since november 2007 [0] or an average of 2,249 per month so probably quite a bit higher.

[0]: https://news.ycombinator.com/user?id=tptacek
So long as us politicians campaign money depends on them not understanding why crime is as bad as it is then crime will continue to get worse.
Is this a big problem? You managed to escape a repressive regime; creating a new email address and clicking a few buttons on Apple's website seems well within your capabilities at that point.
The Hoa people (Han Chinese ethnic minority in Vietnam) suffered persecution under the socialist government of Vietnam in the 70s. That why many of them escaped as refugees.

https://en.wikipedia.org/wiki/Hoa_people
Sounds like Southpark's "Band in China"[1] isn't too far off the mark regarding "Vorauseilender Gehorchsam"[2] / "Anticipatory Obedience."

[1] https://southpark.cc.com/full-episodes/s23e02-band-in-china
[2] https://de.wikipedia.org/wiki/Vorauseilender_Gehorsam
Can you explain what you mean by "that tech"?
I get your point that yes, you could use ASN.1 in a way that isn't extensible. To pick a nit in your nit though:

OIDs are arranged in a hierarchy, so anybody who already has an arc can just delegate you an arc from their part of the hierarchy, much the same way foo.example could delegate kragen.foo.example to you, and then you could delegate tialaramex.kragen.foo.example from that to me and so on.

The IETF hijacked the 1.3.6.1 arc, by basically arguing that if hypothetically the US Department of Defence were asked to delegate them the 1.3.6.1 arc from its 1.3.6 arc it would doubtless agree, and so no need to actually ask...

For example 1.3.6.1.5.5.7.3.1 is "serverAuth" the OID used to indicate that an X.509 certificate is intended to identify a TLS Server, that was assigned by the IETF's PKIX many years ago.

But the IETF has an arc under 1.3.6.1 for giving out OID arcs to anybody who needs one, 1.3.6.1.4.1, you can just fill out a form for IANA explaining why you need one (e.g. to make some new SNMP features work) and you'll get an arc back typically within a few days. e.g. 1.3.6.1.4.1.44947 is ISRG, the charity which provides the Let's Encrypt service.

Colliding HTML tag names has been a problem, albeit a small one, even inside "standard" HTML itself because of the conflict between WHATWG and W3C for years. The small number of web browsers with significant market share made this less serious than it might be. As to people redefining MIB OIDs, I can't help idiots, I would regard every instance of this happening as a bug in the later definition.