skysight-inc/HackerNews huggingface dataset:
> I don't see a use case for GraalVM in long-lived server applications

GraalVM also includes a better JIT compiler though, which makes long-lived applications much faster. Twitter use it today to run their Scala code.
Oh he's great! Thanks for that
OP was saying that code > UI "for developpers". Something like one of Brett Victor's UI[0] integrated in GIMP would be quite nice for a dev who can draw, or a painter who can code.

[0] https://vimeo.com/36579366 (circa 3 min. mark)
No. At first glance, it seems easy, just make other players appear like monsters and add a chat feature. But if you consider more details, you arrive at their FAQ answer:

> We think you can't do that in a playable way without compromising the basic idea of being able to think as long as you want about what you're doing, but many people have made many different suggestions as to the one obvious way to handle things. If you still like the idea, you can try Crossfire, a multiplayer roguelike for UNIX/X11. Other games to check out are MAngband and Diablo

See http://www.nethack.org/common/info.html
Only available on Chrome and only versions 66 and up.
Telegram's clients are open source.
Hey now, what matters is how many newspapers I've put out of business.
The problem with wood is that it's not in a thermodynamic minimum energy state. React with oxygen, or thermally decompose to lighter hydrocarbons -- and you will get CO2 coming back.

In contrast, the carbonate minerals from the reaction of CO2 with these silicates ARE thermodynamically stable. Even if left exposed on the surface of the Earth they will not release CO2 back into the atmosphere.
Debugging Microservices Applications with Service Mesh, OpenTracing and Squash
Thesis: it is possible that someone may access your laptop without you knowing if you leave it unattended.

Experiment: after having gone through a number of - some meaningless[1] - attempts to be able to proof that this happened, there was no evidence it happened.

Doubt: did it happen nonetheless without leaving any trace
ot it din't actually happened at all?

Bonus: the experimenter learned that NVRAM exists in the stupid UEFI firmware

Conclusion: None worth mentioning, but be very aware of what the terrible evil maids can do, and do use the recommended Android app to defend against them.

[1] Hashing a whole hard disk is only a "positive" proof, if the hashes correspond nothing changed, but it is very possible that the hashes change because of any filesystem or disk issue if the system is used, so the method is pointless in the real world, where people bring with them a laptop in order to use it.
Thank you for that sombering reminder of why I rarely post here anymore.

>If you would find this more exciting, there's no shortage of fiction already available on similar subjects.

Any recommendations?
> When I hear them though I just think, your laptop failed and you had to repair it yourself.

They could have gotten the laptops repaired via Lenovo. There was nothing stopping them from getting that done within the warranty period. Exactly like Apple.

> I _need_ it have a bathtub graph of reliability and not go wrong in the first place

Cool. That's you. But electronics do go bad, including Apple devices. And sometimes people's requirements and abilities change, and they need larger storage. The sensible solution to that is not "buy whole new device".
>, keep email for communication? Again, stop breaking it.

It's a matter of a different perspective and "breaking it" is in the eye of the beholder.

For many end users of email (and Google Inc's point-of-view apparently), it's the other users sending me emails that's "breaking it" beyond SMTP's original design intentions.

>Use CalDAV for tasks sync,

E.g. it's the other users who send "tasks" and "appointments" inside a freeform email instead of strictly using CalDAV. Their abuses of email has broken the SMTP system. If overloaded email usage by other humans who don't categorize what they send into strict protocols such as CalDAV is a fact of life, the Google response is to add some complexity to the UX/UI to let users conveniently copy paste it into the sidebars for Tasks and Calendar. Google may be wrong (as the blog post argues) but I think it's worth entertaining the idea that the multipurpose usage of email has already "broken email".

For many people, your suggestion of putting 17k of emails into a single namespace alongside other important emails is not acceptable. They want a UX/UI to make a first crude pass at filtering it into a hierarchy. This does have a negative side effect if "hiding" it from some users who don't notice it's there.
I can think of at least a couple of startups I've come into contact with that collect data from user profiles on FB and other social sites. Wouldn't surprise me if there are hundreds of them out there.
that's such a romantic view.

art museums are about technique history and money.

very few people goes to see when some such technique or style evolved. most everyone else goes for the same reason people go to disneyland. and nobody goes to see pretty pictures.

the money aspect drives the rare and eventful ones. like monalisa, there's nothing to be seen in those works besides their rarity (as can be proved by how monalisa is shown in the louvre), and their rarity spun a whole world of art deals and tax breaks via meaningless collector/museum donations among themselves. And proving those were fakes all along really upsets that hidden world, and that's why they even care. not because of the marketing fueled romantic view of art, which is only there to validate those fake money deals.

if museums were really to show historic art periods only for education, they would only have reproductions. but even reproductions can become rare, as is every single greek sculpture today (they are all XVIII century italian comercial reproductions done with the same methods and tools from today, but a recent reproduction? oh no! unthinkable)
That may or may not be the case.

My primary concern - I should perhaps have spelled it out more clearly - is that the Windows partition is likely exploitable via Microsoft Windows.

Detecting data at-rest exploits such as described in TFA, and per my mitigation suggestions -- because they don't scale well -- implies that you're already of interest to your adversary.
Crystal meth for sale
"I was self-identifying as a hipster before it was cool."
WordPress crusade against technical responsibility (2016)
There's this kind of thing "Surge in plant growth explains slower CO2 rise over past decade" https://www.carbonbrief.org/surge-in-plant-growth-explains-s...

which has happened without really any planning. It's just that sort of stuff could be actively encouraged.
So every Show HN Post hast to run on open source software or else it isn't hacker news worthy? That doesn't sound right to me.
LongDang's profile
A virtual blockchain artwork recently sold for $1m. We interviewed the artist
If you for example send an expiring email, the recipient will receive an email with a link to some online storage where this expiration will be enforced, the email itself won't contain the content.
Infection Monkey – An Automated Pentest Tool
Sugar, etc
> purported legal contracts != legal contracts

Oh, learned the new word today. Do they have also some analysis that say why TOS should be purported legal contract and not valid legal contract?

> If you grab data hosted on facebook or any other website, without having an account, where is the explicit contractual agreement?

I assumed that we were about platform API abuse. In such case, each developer had to agree with TOS before he is allowed to use the API. So in this case, developer explicitly agreed to terms that subsequently broke. So I think it can be called "abuse". It's not random HTTP request.

For random HTTP requests, that is much less clear. My stance on this is that as long as you are respecting robots.txt, and not trying to circumvent any blocking measures by the site you are using, everything is fair game (in general, maybe there could be exceptions). I don't think it's right/moral to violate those two. And whether it is legal, it depends on jurisdiction, who you are scraping (I am assuming we talk about automated access), if you respect robots.txt, if you try to go around blocks, ...

Two interesting cases in scraping I know about are these ones:
https://en.wikipedia.org/wiki/Facebook,_Inc._v._Power_Ventur....
https://arstechnica.com/tech-policy/2017/08/court-rejects-li...

> MITM/DPI'ing facebook users who connect via your hardware contractual agreements?

I am no expert in law, but MITM/DPI to extract data sounds highly illegal. I don't think that TOS have to handle this case.

> The extent that is abuse, is that facebook (or any other site) service is engineered in such a way that makes such information it collects available to any degree in the first place.

So you are arguing that Facebook should be walled garden, with minimal possibilities for users to share their data with developers (not that I disagree). I don't think this is problem with existence of these platform / capabilities, but that the users are not understanding implications of what they are allowing (but doing that is gargantuan task, they will probably invent new nobel prize for anyone who manages doing that).
Most tickets are priced at $425. The $1200 tickets are for people who can afford them but couldn't get them at $425. Some of the $$ from the $1200 ones goes to support the low-income ticket program fwiw.

I will say, if using a portapotty "ruins" the experience for you, you're going to be better off going to an event where you can stay in a hotel, vs a big camping trip to the desert.
Ask Siri to define “mother” twice
This is awesome. Sounds quite in tune at 440 Hz (A4). Could be the beginning of a DAW for Chrome ;)
Great input. To answer your questions.

- There is no 401k but the idea is to put one in place by end of year per leadership
- There is no private market in place yet but that is also meant to change end of year; I am not entirely familiar with the concept and how this impacts the comp evaluation
- Re: severance - agreed that I am taking all the risk here given my current severance and I would need to see at least a 3 months severance in the first 12 months
- Historically all my employers over-promised on bonus payments; is it legitimate to ask for their track record on target bonus payments on the C-level?
- Great point on the fit; I consider it strong and am closely aligned with the vision of the company so that is a big plus
Nintendo Switch Console Security
I'd like to see Stack Exchange moderator responses using Markov chains. Like "Stop answering this guy as he is posing useless questions", or "This duplicate is considered not relevant".
No it doesn't. The Burning Man Project has virtually nothing to do with the regional burns around the world, which is a sore point for a lot of regional organizers. They ask that the regionals follow their rules, then provide virtually no support for them, while simultaneously bragging about how they've spread the culture worldwide.

Regionals are run by organizations that are completely separate from the Burning Man Org.
50" = 127cm
It's not "secure" and it's not "enforced", at least not in the strict senses of those words. It's a protection against accidents and carelessness, sensitive information being reply-all'd around in long threads that people aren't reading anymore, the accidental forward to an external party.

Many organisations for whom this is an attractive feature, have long had policies around emailing sensitive information, instead links are emailed, and securing access to the information is handled by the application. If the link is forwarded to the wrong person, all they can see is a login screen.
This Indian techie is fighting sexism in AI
This is a lovely idea.

Emergent simulations are my favorite part of compsci, turning it towards an artistic purpose seems like a good pairing, I might steal it and try my luck with CA or something :)

[edit]

After playing for a bit I feel like it might be good to have the boids number and age limit a little higher by default (there is no correct setting of course, but it probably helps people get an intuition for what it's doing).

Also increasing max speed makes it much more expressive.
Joseph Stiglitz Says American Inequality Didn’t Just Happen
If you can save USD 2M in ten years, and buy a house outright then you are in a position to get a mortgage on said house in a much shorter timeframe.
That's only sort of true. There are -plenty- of bars out there that will reward you with a drink once you entertain them in some way (flashing them, for instance).

But beyond that, it also depends when you're talking about. Bartering preceded gifting culturally at BM, and was definitely a thing in the early to mid 90s.
To preface, I am inclined to agree with the anthropogenic climate change hypothesis. But the claims in this article are no better than climate change skeptics pointing to a particularly cold winter or mild summer as evidence for their position.

How can you possibly conclude this is caused by climate change vs. being a 100, 200, or 1000 year storm? Freak weather events have been occurring for billions of years before the industrial revolution.

Climate change is a gradual process that may in fact make such storms more likely, but pinning any single storm on climate change is suspect.
You can also purchase RV pumpouts with cash on the spot, which is not sold by the organizers.
ML Powering Marketing Automation
Stratovision was an airborne television transmission relay system
Did that journalist ever do plane trips? I recall reading that for many people that is the single biggest thing that accounts for their emissions.
Show HN: Automatically Index the Top 20 Cryptocurrencies by Market Cap
There are millions of people making videos about games, but Mark Brown is the only YouTube person I've found who always has something interesting to say about game design. The Zelda series was particularly good.
There is the 80 bit "long double" type that contains excess precision over the 64 bit double type. But if you want to write code that's both, portable, and reliable you have to turn off a lot of optimizations and use 32 or 64 bit types with standardised behavior.
This is an interesting article, but I found I was able to read it, for the most part, by reading the first sentence of every paragraph. That shows how much fat there is in the typical magazine article.
> We have no idea what a disembodied consciousness experiences.

Try sensory deprivation (or isolation) tanks, or just solitary confinement. Both and especially the latter obviously are just a tiny fraction as bad. You don't spend much time in a tank, and the solitary confinement still leaves you with your senses. But already getting too much of either is pretty bad.

As an exercise for yourself: Just sit completely still in a completely quiet and dark room for as long as you can (try the cellar).
I would wager that G Suite users will keep IMAP/SMTP alive via Outlook and other enterprise deployments.
Yes keep track of your health but don't spend more time than you need to obsessing about it. Eat vegetables and walk a mile a day. The science says this is all you need. Second, don't be an absentee father. Now finally, figure out what youre going to do with the rest of your life and go do it without breaking 1 or 2.
There's enough oxygen floating around in various forms that the _lack_ of an oil layer can allow rust to form. There are other ways to treat it, as your uncle alluded to, but they are probably very sensitive to following the appropriate maintenance schedule.
I can't fault gp because I've found myself do the same before. When someone at gitlab accidentally deletes something, we call it (imo correctly) a system problem but when it is politicians taking bribes or enact bad policies, I blame the individual rather than the system. Or when Apple tries to pay the least amount of taxes it can, I blame Apple.
If I want to take my 20GB of email out of Gmail and put it elsewhere for the next 15 years without having to think about it, where do I go?
I had the same problem. Already closed that tab until I read this.
Ever since the World Wide Web became practical, all sorts of businesses have faced a choice: evolve or perish.

Those newspapers made theirs.
Avocados are wreaking havoc in Mexico
TLDR: Got sick of manually managing a cryptocurrency index, made an algo bot that automatically does it for you

Over the Christmas break I realized I was spending close to 5 hours a month manually rebalancing my portfolio of ~20 cryptocurrencies weighted by market cap.

I got sick of that pretty quickly so I decided to make a bot that uses Binance’s API to automatically handle that. For the memes, it’s called HodlBot.

A few months later, I’m releasing the hosted version of the bot. Now anyone can put their trade-only API keys into HodlBot, and it will automatically trade into the top 20 cryptos. It will also handle monthly rebalancing automatically.

What does the algorithm do?

The algorithm take the top 20 coins and assign each coin a % allocation based on their weighted market capitalization.

Then it caps every coin to be at most 10% of the total portfolio value. Anything above 10% gets redistributed to all the coins below by weighted market capitalization until the entire sum of the portfolio adds up to 100%.

What do I need to get started?

1.Binance Account

2.Binance Trade-only API Keys

3.$200 in cryptocurrencies

How much are Binance transaction fees on rebalancing?

I simulated monthly rebalancing on a 3 year period, and found that the average transaction fees were 0.26%.

This can be higher or lower based on how volatile the market is in the future. The theoretical max is 1.2% (if every coin in the top 20 turned over every month).

How much does it cost?

For the first month it’s $1. Afterwards it’s $10 per month. No % fees.

How can I trust HodlBot with my API keys?

We encrypt the keys on our end. Also we don't require withdrawal permissions, just trade-only.

I still don’t trust HodlBot with my API Keys

In the next month we’re releasing a version of the app that never stores API keys server-side and only executes trades in the browser. After that, we’ll be releasing an electron app so you can store your API keys on your local computer.

How is this different than projects like Crypto20?

Users hold their own assets as opposed to a tokenized guarantee of some underlying assets. Tokenized assets like C20 often times trade above and below the net asset value of the assets they claim to hold. In my opinion, this adds a layer of speculation and complexity on top of the index that makes it marginally worse than holding the assets yourself.

How do I report tax on HodlBot trades?

Export your Binance transactions as a csv. Plug it into a tool like cointracking.info and get a tax-friendly report.

More Info:

I dig into the portfolio construction and share the algorithm in this blog I wrote here:

https://medium.com/@AnthonytXie/hodlbot-cryptocurrency-inves...
We would have to wait for a few decades to come to such conclusions with scientific methods. It's a political decision to market the event as such.
Ascended my first tourist yesterday! It's actually a great class to play after the quest. You just have to be very careful (and perhaps lucky) in the early game.
FTA:

> “...the entry for "mother" includes the same verbiage for an alternate definition, for when "mother" is used as a noun as shorthand for the curse, but at the dictionary, that alternate take is clearly listed as "vulgar slang." Siri, for whatever reason, does not include that descriptor.”

Sounds like a parsing problem! Google search results have been affected by similar issues. Maybe a good time for this quote from Jamie Zawinsky:

> “Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems.”
Congrats on your willingness to feel your feelings of failure fully, and to ask for help. True success in life is our ability to be with our entire range of emotions and experience and not the attainment of any outcome.

I had thought I failed this past fall on a project to buy a tropical Island. I went deep into the emotions and confronted them.

From that space I got a strange flash of insight, shot an inspired email to the owner of said island with creative terms and an offer.

Last week we signed the contracts on the property and are moving ahead (http://Majagual.org)

We are turning the place into a sacred space to help visionaries find inspiration and healing and get clarity.

I’d be happy to gift you a “golden ticket” to the island to support your journey (now or in the future).
For text groups, there is AIOE and Eternal September.
Show HN: Riveto – Your ultimate guide helping you make shopping decisions
Tell HN: Sci-Hub's TLS certificate has started failing
Sci-Hub started failing earlier today with a SEC_ERROR_REVOKED_CERTIFICATE error, which affects all alternative Web addresses. Don't know about .onion.

Is this some kind of planned maintenance, or a sign of further trouble?
Unless you have serious simulation or model checking tools, your ad hoc combination of etcd and ceph will almost certainly be buggy. I'm not 100% positive it is even possible in the asynchronous model. And when you decide you want, say, regional or rack aware fault tolerance, you have three more distributed systems (ceph, etcd, and your combination) to make meet that goal. When you restore a backup of the contents of ceph, what do you do with the lock state in etcd? Do you know what happens when (say) etcd runs out of memory? If you wanted to ship an on premise version of your solution, can you teach your customers to admin all these systems? FDB's mission is to get under all of your state storage so that you only need one system to do all this operational stuff correctly. A block device is most useful for people who are trying to eliminate the last bits of state not in FDB from their infrastructure.

Another huge payoff is the new "satellite" replication mode coming (I'm told) with FDB 6.0, which will give you "the best of both worlds" of synchronous and asynchronous replication across regions. A block device will let your legacy systems usually fail over across regions automatically without losing a single write.
Sorry if it came out a bit harsh, I had one of those days and vented it out on you.

I feel like you have a narrow view of college since you seem to be from the US and your system is widely different from ours here. What it offers here is a narrow approach that teaches you bland theory, with professors being mostly people who weren't competent in their fields so remained in academia (before someone goes it isn't true, I said mostly. There are ones that are amazing and I'd love to be a part of their classes any time). You can't explore outside of your curriculum - you can't take an art class, a philosophy class,
a sociology class if you're in CS. You're fixed into a course that rarely changes and they are usually outdated and provide as much info as a week of googling would. No textbooks also, so no material to reference too.

College (in this format we have here) stepped on one-too-many toes for me and I despise it, so I tend to overreact.
> However your response led me to find out he was a Marxist!

You say that as if you just found out he was a member of ISIS and killed women and children by burning them alive. I can't find anything in Karl Marx' teachings that could cause such a response, even when you disagree with him completely.
I still use and recommend Command-T :-)
Why do we feel sympathy for people who invade a natural environment they barely understand, and then suffer the consequences?

How is this a natural disaster when it’s only a disaster for completely unnatural, man made things?