skysight-inc/HackerNews huggingface dataset:
> There are never circumstances where a whole-house fan is made less effective with humidification. It may be no more effective, but for those 100% humid nights where it's cool enough to cool down the house, the swamp still runs.

This. Put simply, the wet bulb temperature is always colder than the dry bulb temperature.

https://en.wikipedia.org/wiki/Wet-bulb_temperature
This 18-year-old’s hacking side hustle has earned him $100,000 – and it’s legal
American states are structured as independent nations. They have their borders, flags, histories.

For most of the states, this is not true. California and Texas have brief histories of declaring independence, and the 13 original colonies were more independent before the USA existed, but most states started off as USA-controlled territory before going through the statehood process. The borders were quite often only finalized during the statehood process.
Intrigued by this breaking the year into quarters idea. What's the name of the BitBar plugin you use for this?
Parent's argument is that it mitigates phishing - i.e your normal workflow is you go to a site and your credentials are automatically filled in, so you'd be suspicious if that doesn't happen. In my experience, the autofill breaks so much that I've started copying my password in manually all the time.
Having used webmail for about 7 years (I used Gnus before), the tab clutter problem is easy to avoid. Right click the tab, select "Pin tab", and you're done.
I wonder how common this was? What percentage of overall families had this?
Thank you for the advice.

In my case it feels like it would take quite a bit of effort to pull out features from the software and make a stripped-down version available.

My primary reason for wanting to share the code is that perhaps it will be a useful place for others to learn some things (though I don't think my code is stellar / exemplary and I know it has some serious shortcomings).

I guess it isn't a big problem if someone releases a clone of my app for free as long as I somehow can require (request) they always link back to the original on their website and in the app itself. But I'm not eager to chase people around and pester them if they don't comply.

I'm thinking I might wait for a full year since release (until February 2019) and just put out the whole code on GitHub with a 'free to do anything' license and a personal request that people always include a link to the original in the compiled app and on/through whatever websites they share it on.
That "age of 40" number is years out of date. Routine smallpox vaccination for children in the US stopped after 1971, after the disease was declared eradicated in the Americas. The vaccine was given at age 1, so people born in 1971 generally did not get it. So to get to "everyone" you have to look at people aged 47 or above.
A downturn doesn't always mean lower demand. But if there was lower demand, employees can work harder to bring those up by offering new products or cheaper products.
And uBlock Origin and Privacy Badger.
Free, open source office suite LibreOffice arrives in the Microsoft Store
They Vowed to Fix the NYC Subway a Year Ago. On-Time Rates Are Still Terrible
Cleverness and morality can be orthogonal.
Notice something important: they didn't use SMS.

Also, look at how GitHub uses U2F. Anytime you need to make an account change, you can simply tap your u2f key. It's a great user experience and really locks down your account.
Yes. It’s much earlier.

Anything pre ipo, they’re going to be the first 1% of shareholders if the company does well. And many times you can’t even buy into those rounds without the right connections. Early is subjective vs if he said he was an angel round investor.
You need the login first.

A cheap Security Key has no idea what public key it told you to use when registering.

There's a cute trick here. When you tell a key "Hi, authenticate please" you must send it a "cookie" it gave you during registration. Now this could in theory be some pointer it uses or whatever. But in fact it's actually the private key it will use to authenticate, encrypted with its own baked in secret key. It decrypts that, then authenticates. But if you don't know which user you're authenticating you can't send their cookies, you'd have to try every cookie for every user. Not fast.

If every user uses WebAuthn then just a login (username or email address or something) is enough. But if some just have passwords then doing anything before the password step gives away what's up.
As mentioned briefly in the introduction, I didn't have good heuristics to use for a scoring function. A totally undirected DFS didn't seem like a great option. The readme links to an existing Python-based solver for the same game [0], which had both BFS and DFS modes. The DFS one was considerably slower on large puzzles even when given the optimal target depth.

Totally happy to believe I'm wrong about that, though :)

[0] https://github.com/apocalyptech/snakebirdsolver
> Devices now need state, pushing up the base price. We want these things to be cheap enough to give away.

State is only expensive when it adds a significant amount of die area or forces you to add additional ICs. If you need a ton of flash memory, you can't put it on the same die because the process is different, and adding a second IC bumps up the cost. However, staying with the same process you used for your microcontroller, you can add some flash with much worse performance... which is a viable alternative if you only need a handful of bits. Your flash is slower and needs more die area, but it's good enough.

> The counter make tokens weakly trackable. If Facebook knows your token's counter was 205 when you signed in at work this morning and 217 when you signed in from your iMac this evening, somebody who visited GitHub at midday with counter 213 might be you, someone with counter 487 definitely isn't you, or at least not with the same token.

What kind of ridiculous threat model is this? "Alice logs into Facebook and GitHub, and Bob, who has compromised both Facebook and GitHub's authentication services..." Even then, it's not guaranteed, because the device might be using a different counter for Facebook and GitHub.
It really doesn't matter whether a child learns to stack blocks at ten months or at three years. Childhood comes before the rat race. I was phenomenally uncoordinated at least through the age of ten, and it didn't have anything to do with electronic devices because we didn't have those. I'm now perfectly capable of numerous complex and precise physical tasks.
I hope they work it out because (and this is going to sound racist, but I don't care) importing Somalis into the US is really not solving their problem and it is creating a whole shit-ton of new problems for Americans. I live around a lot of Somali people, so spare the fucking SJW, virtue signaling bullshit. They're people, they have issues and needs like all people. But damn man, they need to integrate and stop thinking that we exist to placate them and pick up after them. I don't see this attitude among other recent arrivals.

I don't feel like Americans owe the people of the world anything. If they want to join our community, they can maintain their cultural heritage without being dicks about it.
Where do password managers fit in here? If a phisher convinces me to try to login to google.com-super-secure-phishing.net using my google account I'm going to notice something is wrong when my password manager refuses to fill in the login form.
Save Hundreds of Lines of Code in Your Next GraphQL App with This One Trick
If other countries recognize your independence you are there. The US gained recognition from the Netherlands and France day one. Nobody gives a shit about Somaliland nor does anyone gain anything for supporting it.
This was a hot-topic 10-15 years ago. Then, over a few years, we went from "there has been little work applying computer algebra methods to program analysis and optimization" to "everything under the sun has already been done."

It's been about 3 years since I looked at this stuff, and I'm having trouble remembering the names of the people in this area (lots of Europeans). Most of the action is in finding ever-larger fragments of programming languages they can solve. The one in this article handles what are called "arithmetic programs;" a bunch of people have worked on handling restricted shades of recursive programs.
Yeah, I keep remarking that I think that a proper AOT C# or Java is a game-changer, but I'm not sure if these languages will ever be able to shed the baggage of the very large frameworks that developed around them. But, I will also be very glad to be wrong.

As for Kylix, I simply think that there was no way that it was going to work on Linux. IOW, trying to do a GUI-based development tool on Linux was a bad idea from the start. They couldn't even nail down a few distributions very well - it was a constant moving target...
Large buildings commonly use chilled water HVAC systems. The scale at which these systems make sense is larger than a single family residence.

http://www.york.com/for-your-workplace/chilled-water-systems
I think it warrants an explanation though. Why not DFS? Too hard to dedupe? What’s the branching factor and the duplication rate? If the algorithm is 50x faster due to lower overhead it might be worth it.
I'm a consultant. My clients often use Outlook/Exchange. My consulting company uses Google Apps. I also tend to create a per-client GMail persona, so that I can work around issues with corporate Exchange servers (aggressive content filtering, misguided attachment quarantines, or just to keep work-related-but-social stuff out of the corporate inbox), and have a convenient OAuth login option. I would welcome anything that allows me to use a single client.

Another reason for wanting a client that works with Exchange and Google is simply wanting to use the same app both at work and at home, even if you never cross the streams and access them both from the same instance.

And as others have mentioned, Linux email clients suck. I'm a huge proponent of open-source software, and prefer free clients wherever possible. No one has made a free email client that I can tolerate. They're so bad that I tend to stick to web clients. Hiri's client reminds me of Polymail on MacOS, which is the only non-game, non-cloud application I've paid for in the past decade.
Poorer Americans buckling as U.S. economy booms
Open Source Development Around the World: A Comparative Study
> Also I suspect that adding together the ascii values of the characters in the key is not necessarily the best hash function.

Still better than using the length of the string as your hash value. Not my proudest moment but sometimes, you want to see the world burn. That and I forgot to do my hw and class was in a few minutes.
Towards a Bitcoin Valuation Framework
"Death threat" is a specific term; it has a legal definition in most states. There are no appropriate or acceptable death threats. It doesn't matter if you think they're not consequential; they had the desired effect on the person receiving the threat.

This whole argument is strongly reminiscent of attempts to discredit female game developers who were being harassed during GamerGate.
It's worth noting that people can know what they are taking (within a statistical certainly) by sending their substances off to somewhere like Energy Control, or another analytical lab for testing. Most people don't do it, but it is possible to know what you've got.

https://energycontrol-international.org/
Fun fact extension: most unrecognized countries recognize each other. One of my favourite moments in Tiraspol (Transnistria, de facto independent of Moldova) was finding the joint embassy of South Ossetia and Abkhazia.
> Basically any image that's not flat and has a shape cut out of it

My question was about lossy alpha specifically. I use alpha a lot, but I've never seen a production workflow that used lossy alpha. The alpha channel is more sensitive to compression artifacts because unlike a 3-channel sRGB image, you have no guarantees about how it gets used or what it's composited over. JPEG is designed with specific channel tolerances loosely based on the differences most humans can see in the red, green & blue channels. Since alpha applies to all channels of the background and foreground, you'd have to make extremely conservative choices with the compression. I'm not certain, but at first glance it appears to me that BPG with alpha has visible artifacts. When I look at the dice images here: https://bellard.org/bpg/gallery2.html the green one on the left has some severe banding in the edges where the one on the right is smoother.
My concert with swamp coolers is the increase of humidity along with warm temperatures. Creates a breeding ground for mold growth. The idea is great but application depends on your structure.
Great question! You only care about this if you care about cost utilization. If you don't care about cost then you will just statically pre-allocate the space on a host, waste the slack, and never overcommit. If you do care about cost then the pessimistic pre-allocation of space will look wasteful and you'll want something like this.

The other aspect of your question is about how "many of us" are working at places with huge datacenters. If you count up all the folks at Amazon, Google, Microsoft, Facebook, and Apple how does that compare to the long tail of people operating smaller datacenters at smaller companies?
I'm guessing I'm a generation older than you and I agree, my generation built a lazy, useless generation.

My parents say the same thing about my generation.
1M robux
Please give me robux
Step 1: excited. An email client I've never heard of?

Step 2: interested: read article, read webpage

Step 3: meh. They call it email client, but it's only for Exchange/Office365

Some additional notes on the website: it's nice that there's a 50% discount, it usually helps to show the before/after prices ;)
> However, if someone were to use a password manager and exclusively rely on autocomplete to fill in their passwords, then that would also alert them to the fact that something was fishy when their browser/password manager refuses to autocomplete their Google password on g00gle.com.

Lots of websites do weird modal overlays, domain changes and redirects, redesigns, or other tricks that break password autocompletion. I've never seen a secure password manager that's robust enough against all of these that it would eliminate the human factors causing the phishing opportunity here.

Apparently Google hasn't either, because that was their motivation behind developing these schemes.
Already a big user of Synergy, but it doesn't do KVM. As in it can't change the view of my center screen from computer A to computer B.
A small amount of hopefully useful feedback from someone who purchases business software:

1/ Your website gives a 'open source hobby app' vibe over 'professional, dependable software business'. Selling support contracts in particular requires some expectation that there's a solid business standing behind it that won't just be gone tomorrow.

2/ The 'redirect to an external store to download / purchase' will probably be making any sales funnel leak like a sieve. There's a complete discontinuity between the design of the two sites, and along with trusting you with their information / card details, they now have to trust a random third party.

3/ For a ~€1000 piece of software, I'd expect at least some period of eg. email support, rather than just supporting through Github issues.

4/ I'd remove the option of having the open source edition available through sign-up and just link clearly to the latest release. If you're struggling to even get any interest on the commercial side, getting it out in front of as many people as possible would be my priority. A clear and unambiguous 'Get started' section that doesn't worry about open vs. Pro is probably a good idea too. Worry about converting those to paid users later.
> Linux maps part of kernel space into userspace memory...

Kind of. Linux, like every x86 kernel, puts some kernel memory in the userspace page tables. But it’s marked with a bit saying “no userspace access”. Meltdown-affected CPUs don’t do a very good job of respecting that bit.

> ...in order to reduce the overhead of context switches.

It’s done because it’s required. When a system call happens, for example, the CPU starts executing kernel code. That code must be mapped in memory.
Airbus welcomes A220 series to the family
The cost of Windows is assumed to be part of buying the laptop (and it's the OEM version anyway).

I never myself cared for the sub-$100 Windows license attached, given that I bought a $1500+ laptop. Since there were always few (and usually subpar) selection of Linux-first machines (especially here), having a Windows license was just the normal across all laptop brands -- so it was not a deciding factor in comparing prices. It was either paying that, or being constrained to pick from 1/50 the machine selection.

This doesn't extend to buying software in general.
My family lived in Phoenix, AZ since i was 6, and he had an Evap Cool and a traditional AC. Early in the summer the Evap works great and is way cheaper. Once it gets too hot or too humid, you switch over to the AC. The fun part was, my Dad would hold off switching as long as he could, and kind of compete with a friend nearby to see who could "stand it with the evap" as long as possible.

The hardest part i couldn't ever keep straight, was with the Evap you need doors open and with the AC you close them. i would get it straight by the time he'd switch over to the other system..
"If you have a smallish house and a centrally located fan, a whole house fan is amazing. The rooms get cooler and the attic gets cooler too. You can shut doors to make a specific room cool in minutes. Seriously one of the best things you can do to a house imo."

I just added a whole house fan to my home in the bay area and it works very well - the temperature drops by as much as 30+ degrees from daytime to night time here.

I really appreciate the simplicity of not having AC infrastructure anywhere in my house.

However, I have lived in other climates, like Minnesota, where the nighttime temperature does not drop much at all and I am not sure it would be worth the effort. If it was a box to tick for new construction, then sure - but I wouldn't go out of my way to add it to a house after the fact ...
Isn't 1P-LSD the ones that metabolizes into LSD-25?
Related to the question, another nice short story posted some time ago on HN about hacked compiler code
https://www.teamten.com/lawrence/writings/coding-machines/
While that's true because you have a single point of failure, I think it's more likely that your passwords get leaked through site security than 1Pass security (depending how you sync/if you use their cloud version) so it's still more (not the most) secure because if they find your password in a database they still don't have your 2FA code.
More information in our handbook! https://about.gitlab.com/handbook/people-operations/global-c...
Slync.io, reshaping global supply chains. Looking for Full Stack Engineers
I'm a bit extreme when it comes to my email. Work insists on outlook so I use it there, but for private email I forgo dedicated software. I use webmail on my phone (husmail.com). It is slower, but when the airport security guy asks me to "unlock my phone" I can do so without revealing my email conversations. I don't trust my Andriod phone in the same way I do my ubuntu/mint/kali linux machines.
> I've added it to everything that allows it, more for convenience than security at this point.

It's convenient only when you physically have the security key; it's a hassle if you forgot or lost it.
Logical-Based Artificial Intelligence and Expert Systems
Does anyone know how to enable U2F support for LastPass as the article claims? I was under the impression that LastPass only supported OTP codes with YubiKeys and not U2F.
Note that the stable Windows builds aren't available yet. Once they are, we'll also make it available for portable use: https://portableapps.com/apps/games/freeciv_portable
Two things, an impressive resume and nice sum of money. As a recent grad it would look awful if I left this "hot startup" a few months after graduating. Secondly, I would be walking away for several hundreds of thousands of dollars in equity.

IDK if this is considered insane, but $100-$250 grand is a really big deal for someone with student debt.
Tillerless Helm 2
If you set THP to madvise without also having some hack that calls madvise on your program's text, you'll be throwing out significant amount of CPU rate ... 5-15% in my experience. That's something to weigh against the cost of the extra space.
I'm surprised they think they can close speculative leaks with more hardware. I'm no expert but I can imagine side channels based on timing (for example, if you can force a speculative path to do X amount of work if some secret bit is 0 and Y amount of work if it is 1, and the amounts of work differ), and I don't see an easy way to close those kinds of side channels by separating the CPU structures.

Of course some of those side channels are issues in sensitive code regardless of speculative execution... but there seems to be an interesting place where the two overlap. How do you fix that?
It appears to use the "GPML" package.
(http://www.gaussianprocess.org/gpml/code/matlab/doc/)
no, that site is a corporate trick
> The full name is super cumbersome and not really intuitive.

... how is X more cumbersome than "X Windows"?

> Most people just call it X

Right. Because that's its name.
But if I managed to compromise a single machine on your subnet, then that means all Intel machines I can touch are also vulnerable, no?
Hotstar: scaling is not an accident
Why is it faulty?
This is important to note : you don't need a hardware key to prevent phishing this way. This all could be accomplished with software.
And that would be different from a standard PR company submitting me...how?
Presumably there is some point to your behavior. If you are doing this to secure some future standard of living, it might be worth noting that more people than work in SV tech work in tech outside of SV and work regular business hours. Many, many, many of us already have the standard of living you might hope to achieve some day. And we do it on salaries that are a fraction of yours.

We must all make our own choices. But for many your choices look reckless. You are sacrificing much in pursuit of something you will probably never capture because by the time you are in a position to capture it you will have turned yourself into a person unable to benefit from the thing you pursue.

For many in your position, your current lifestyle is fun and exciting. It's a ride. If that is true for you, so be it. But if you have outgrown that, don't chain yourself to the hope of some false future. Figure out how to achieve happiness today while securing financial stability for the future.

Consider moving to Alabama and working a 9-5 job. Mowing your lawn every Saturday and playing frisbee with your kids isn't everybody's ideal, but it might be a lot more satisfying than you expect.
> It is the responsibility of a capable software engineer

Nobody is saying that it's a acceptable for an engineer to screw up and then blame it on the tools (compiler, slide rule, calculator, ...).

However, if something goes wrong in your work, it's foolish not to recognize the role of the tools, even though it's not acceptable to blame them as a public position.

As objective observers of a situation gone wrong in engineering, we do have the privilege of assigning blame between people and tools. Tools are the work of people also. The choice of tools is also susceptible to criticism. We have to be able to take an objective look at our own work.
I wish my ability to type at 150 WPM was a more marketable skill. It seems mostly irrelevant as anyone who can type above 50 WPM is good enough for 99% of situations.
thanks, never heard of it.
Renewable, electricity-free cooling and heating (for vaccines, etc)