skysight-inc/HackerNews huggingface dataset:
Not really. For power generation as in a coal or nuclear fusion or fission powerplant, you run a multi-stage steam turbine cycle to get down to as low a temperature as possible after the final LP turbine. Because that maximizes the Carnot efficiency of the (idealised) Rankine cycle, it also maximizes real world efficiency.

In practice, coing down to ~40 C (~100F) is not uncommon. And then the waste heat is basically unusable, even for district heating.

OTOH, if you need lots of heat (maybe you have a chemical plant or something nearby), you can design you powerplant for cogeneration of heat and power, yielding higher total system efficiency. But you don't do that "just" for district heating.
I'm also a little bit pissed with the author of this repo. But seriously, how can you vet everyone contributing to your unmaintained open source project..

Good security scanning and perhaps identity verification on Github could help. So at least you can ignore pull requests from authors that didn't verify their identity.
That's not quite true. For instance, the error value returned from `fmt.Printf`[0] is usually ignored silently.

[0] https://godoc.org/fmt#Printf
With regard to equity, I wouldn’t join a startup unless it’s cheap for me to buy the options. If you get your cliff, and it costs 50k to buy your options, you are sol. You options are to throw away your equity, or be stuck at a shitty job.

Whether it’s worth it “to get rich”, is kind of a bs argument. If the opportunity exists to be a founder go for it, if not take the next best possible option.
The UK is part of five eyes, if Facebook think they gather data..
Thanks to Science, You Can Eat an Apple Every Day
I remember hearing about break-even events for a few years.
E.g. from 2014: https://www.nature.com/news/laser-fusion-experiment-extracts...

A design that produces e.g. 2x the energy it consumes for the startup could be viable, even if pulsed (running minutes, not months).
You read it right
I had this exact same problem from both sides (not working on a project any more and wanting to find someone to maintain it/wanting to maintain a project someone wasn't working on because I found it interesting). It's not always easy to find people who are interested, and, while giving maintainer access to someone you know very little is usually fine and works out great, sometimes you get results like these.

In the end, I built something to "solve" this, a project called Code Shelter[1]. It's a community of vetted maintainers that want to help maintain abandoned FOSS projects, so if you want your project to live on but don't want to do it yourself, you just add it there and you can be reasonably sure that nothing like this will happen to it.

Of course, you have to get a large enough pool of trusted maintainers that someone will be interested in each project, but it's still better than blindly adding people. I can't fault the maintainer of that project, since trusting people is usually fine, but it's too bad this happened to him. The commenters are acting a bit entitled too, but I guess it's the tradeoff of activity vs security.

[1] https://www.codeshelter.co/
Thanks for chiming in! Great work on TenFourFox, too! I was stunned one person or a small team could even do that given how large Firefox is. I know you probably focus on a subset of it but still.

"components capable of running platform-independent code such as Java, Flash and Office macros are probably where the biggest risk is."

I'll add the risk of those components mostly has to do with their complexity, use of unsafe language, and security not being a concern in design. It's true there's gonna be exploits, esp on legacy systems. The crowd I was talking about was mainly concerned with malware forcing reinstalls, etc. That attackers mostly target high-ROI platforms meant they didnt have that problem any more. Although I suggested Ubuntu, they're Mac people with Mac apps they want to keep.

"The good news with Talos and other P9 systems is that they're now running supported and maintained software and most of the applications people want to use "just work," so that problem goes away."

Exactly. On top of it, many techniques for mitigating vulnerabilities have a performance cost. Esp overflow checking and microkernels. The extra speed of POWER9's might turn that from unbearable to acceptable. For me, Im fine with being stuck at Core Duo 2 performance for most tasks cuz my now-deadish, 9-yr-old laptop was working fine. If I get same performance but more security/control, that's a net gain. If it's faster, too, then that's even better. Similar argument might apply to those of you that port risky PPC software to it.
And yet their share of wealth increased.

Percentage of a lowering tax base (Trump's tax cuts) is irrelevant. They need to pay more tax in absolute terms.
Both Osmand (osmand.net) and MAPS.ME (maps.me) are mobile applications with a trip planner. To make maps I recommend uMap (umap.openstreetmap.fr) which is superior to the Google Maps equivalent features in every aspects.
I'm not a branding guy but covered.com seems like it would have been a more intuitive choice (and seems undeveloped).
> Maby we could still

Early computers where huge and broke down all the time. They where built that way because it was the easiest option at the time. Nobody wants to build multi billion dollar devices if you could get away with spending 1/10th as much or even test several designs at the same time they would.

PS: The grid absorbs solar and wind interment nature just fine without much in the way of storage. That might suggest something about large scale energy storage. Building something that can store GW’s worth of heat for minutes at a time is going to be huge and expensive.
It is irresponsible if you believe--and I don't say this pejoratively or to caricature the argument--that somebody takes upon themselves a responsibility when they open-source software. I used to think this was the case, but less and less often I find this to be true. In a practical sense it becomes a free-rider problem and people with money aren't stepping up.

In the absence of accepted responsibility from (monied) consumers, the way responsibility is ultimately taken on has to be either to affirmatively take it on (as public service to the community) or to pay for it. Which is a sticky problem because it's hard to pay for it and it's invariably not presented effectively in terms of building a business case. Existing solutions, not to put too fine a point on it, suck at building that case. OpenCollective, the remnants of Gittip/Gratipay, etc. - incentives don't align to put money where it needs to go, and J. Random Consumer often suffers the most for it.

I have a pretty strong idea about how to solve it for-reals. At the moment, though, it's a time/money problem for me; I'm not in a place to chase the kind of (relatively small) funding that the problem probably requires. If anyone else is interested in this problem space, please feel free to email me directly; I'd be happy to chat with you and I'm very interested in seeing this done well.
One thing to think about is what happens to academic fields that are not well funded? Plan S makes sense for funded research in STM disciplines. If we accept that publishing does cost some amount of money then it seems reasonable to have the funding of the research also cover that cost. Obviously we can argue about what a reasonable cost is ($100? $500? $5,000?), but it's certainly non-zero (even though yes, you can find specific examples of zero-cost publishing, but not on a scale that works for the system as a whole).

But what about the humanities and social sciences, which are typically not funded by government or foundation grants? We currently have a system in which the expectation of the academics is that they can publish for free because the universities pay for that cost via subscriptions. Changing to an author-pays model, which Plan S seems to push the industry toward, doesn't work for a lot of academic fields. There are certainly alternatives, like university libraries converting some of the funding they currently use for subscriptions to cover publication costs, or entire governments covering all publication costs for every academic within their borders. But it's not as easy to see exactly how the non-zero cost of publishing is covered outside well-funded disciplines.
We have food safety laws thanks to 19th century “poison squad”
Reading the original article that The Register is recycling is good advice generally.
No. Transferring a project wholesale to an unknown maintainer is effectively a fork; I'd much rather have my dependencies die than start silently pulling in a fork. If I want to swap in right9ctrl/event-stream, I'll do it myself.
> You need experience and you have no other option to get experience.

I don't know how else to get the kind of experience you get at a startup. A big company will give you depth, but a startup will give you breadth.

Also, if you ever plan to be a founder yourself, working at a big company might not give you any useful experience at all.
Fly on the Mac: Rumors You Can Bet On
> $80k

Oh, wow! Worked three years of 80 hour weeks and here's 80K.
A simulator for the verification and benchmarking of quantum circuits
So you agree that Apple is using its market position to increase prices compared to what they would be if apps were available from other sources?
> For some of the Amazon engineers mentioned in the paper that training took 1 to 2 weeks.

That's obviously a lie.
Seems correct, the payload is encrypted with AES and it seems that a package.json description is the passphrase but the issue author hasn't been able to decrypt it so far (for reasons listed in the issue).
Don't forget getcookies backdoor: https://blog.npmjs.org/post/173526807575/reported-malicious-...
What is the trick to make it clickable? I've thought links were recognized by pattern (https?://...) .
Taiwan is very good too, and very affordable.
Monzo's £20M Crowdfunding Announcement
It's a standard position for Chicago or Austrian school economists.

It's also how every crisis was handled until the Great Depression. Then we resorted to massive intervention to prevent liquidation. This experiment was repeated in the 90s in Japan, leading to two lost decades of economic growth. We don't seem to want to learn.
I partially agree with you here.

The thing is, Bitcoin or Ethereum are technologies and the protections and guarantees the "masses" will look for are not provided at protocol level, this is where entrepreneurs step up and offer services based off these technologies.
> Here's a true statement: People who will in 2018 give birth to a child named Abigail are at least 5X more likely to give birth to a child in 2019 than people chosen at random.

> "Naming your child Abigail can't make you more likely to get pregnant."

> Again, failure to do the math.

> (You get a 2X there, for free, from the observation "If you had a child named Abigail this year you are biologically capable of having children; this is not true of no less than half of humanity. Now apply same insight to childbearing age and you're already at 5X+.)

This is terrible math. Nursing a child severely inhibits getting pregnant; without use of formula (or a substitute like goat's milk or what have you), it is extremely rare for children to be spaced only one year apart. It's rare enough that there's a special term for such children -- "Irish twins".

If you want to swagger your conditional probability, you should know that you've got to account for that in the probability of giving birth one year given that you gave birth the year before. You can't just account for the positive adjustments, ignore the negative ones, and then say "the odds are at least as good as they would be if the existing anticorrelations didn't exist".

> What's a SWAG for how often a purchase immediately goes wrong? Not right color? Fridge DOA? Shoot I mismeasured my kitchen? Wife just hates it? Call that 2%. If I fix it within a week, then 2% / 7 = 2.9e-3 probability of purchasing a new fridge.

> That's a 10X relative risk.

But of those listed options for "immediately goes wrong", zero of them would result in re-buying the same fridge. Wrong color, I mismeasured my kitchen, and wife hates it would cause you to buy a different fridge. Fridge DOA would cause you to refund the fridge and get a replacement.

How many people, faced with the expense of a fridge that hasn't worked out, figure the best course is to just write it off and buy a second copy, hoping that it will work out better?
The author's stance is that because it was a volunteer effort, he bears no responsibility for transferring ownership to an unknown third party who wants to commandeer the code used by millions of people. I believe this is false.

He also feels that there's nothing anyone can do about it except scramble to control the damage. I believe this is currently true.
That's why you lock your dependencies.
WallStreet.com (1998)
Shouldn't this use the real headline? The "awesome" is editorializing.
Thinking about control flow and organizing for clean structure is crucial for developping code bases of non-trivial size, and that should not be discouraged by encouraging superficial efficiencies.
This is entitlement speaking, and it's clearly a solution that doesn't scale. Downstream must be responsible for only depending on software from reputable sources, there simply is no alternative.

I hate to have to do this, but the requirement runs right to the core of how this development model functions whatsoever:

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE.

I'd suggest one problem here is a user interface / packaging model issue: end users / downstreams may override the version choices made by their upstream dependencies. In the case here, the reputability of that upstream varied over time. Permitting version locking allows a chain of reputability to be exist, allowing a limited amount of trustworthiness to be imparted by upstream's selection of dependencies ("I trust this guy's package, so I trust all their dependencies too")
Maybe it should be easier to give monetary rewards so that popular module maintainers get more motivation to care.
America's Concentration Crisis
This is one of the gaping security holes that open source has always had, you don’t know where the code came from and your best indication if it’s safe is how popular it is. Npm and Maven libs being the scariest since there are hundreds for even small apps.
In the UK it is mostly referred to as "cover", which makes me suspect that's the case in most of Europe as well.
I joined a series A startup years ago for none of your "valid" reasons and have never regretted it. It was a company that I already knew of and admired their product, and they had enough traction at that point to offer at least several years' worth of runway/stability ie I didn't have to worry about my job disappearing unexpectedly (at least not more so than any other California job). Work-life balance was always totally fine. I learned a ton right from the start, was able to make a big impact, and worked in the smaller "get stuff done" environment that I prefer over bureaucratic organizations.
Magazin electronice-electrocasnice
Warmteservice have about every part you could need, I've never been disappointed by then, compared to the generic Bouwmarkten. Don't worry about the language, as native Dutchman I often don't know the lingo for these branch of technology, a picture does often help. Otherwise https://www.werkspot.nl/ is your friend in finding a pro.
The people at https://discuss.ocaml.org/ are quite helpful.

> it's cool from a language point of view, but as a developer it can get overwhelming

If you consider OCaml's features overwhelming why don't you consider a much simpler language (Typescript etc.)?

I am learning OCaml myself right now, and I only use the features which I currently need. If I need more I will learn OCaml's suitable features then. Btw. I like OCaml, after having tested Haskell for a while. OCaml feels like a really practical usable "Haskell light". The compilation speed is outstanding (like LuaJiT).
there's a split here.

Linux package managers (by and large) have a maintenance process.

Programming language package managers, by and large, do not

So this could happen on rubygems, PyPi, Nuget, etc
If confinement is easier in a large machine, why are not very large machines being built?

If this is economically infeasible, then again, building piecemeal may be better, in the same way as taking a credit and paying interest on it might be better if you can't secure the upfront sum anyway.
I think that the prestigious college model of only letting in people who they know have a 90+% chance of making it is damaging to socioeconomic mobility; there's a lot of us who have, maybe, closer to a 50% chance, who know this and would be happy to buy the lottery ticket in question, but it's not available for sale.

I understand the need to prevent people from spending money they can't afford on a degree they can't get, but personally think a weeder class would be a much more fair way to go about doing that filtering.. make me pass a few really hard classes before signing up for the degree program.
That is true of many cryptocurrency companies, platforms and libraries.

There are live businesses using them today, and I'm not just talking of UNICEF and Axa...
The proof is in the pudding. Get back to me when you're either profitable or bankrupt, and we can ask whether this was a good decision or not.
9 Simple and Easy Themes for WordPress Beginners
Um, what are you talking about here? In what sense does Minix 3 run on every Intel CPU?

And, plot twist: ARM CPUs may outnumber Intel CPUs...
you have also to do this with plain QUIC or with plain TLS adding HTTP on top of both doesn't add RTT, the point was (DNS over QUIC) vs (DNS over HTTP over QUIC)
> Please realize that other states are taking notes at this situation. They are waiting for US/UK/etc exec to visit and make the same excuse.

Other states aren't waiting for this at all; least of all the US. In the past when UK based executives of online gambling firms have travelled in transit via the US they have been arrested even before going through customs, in effect in international law it is somewhat akin to piracy, USG sanctioned piracy. This sort of creative use of laws to acquire information and/or people by various governments world wide has been happening for a very very long time.
I'm not a crypto guy but this change really makes me scratch my head: https://github.com/right9ctrl/node-scrypt/commit/52a1cb792bc...
> US can do that because FB is US company

The US Congress can and has compelled appearance of non-US parties, and, while it may not have had occasion to resort to this for a non-US person (and hasn't used it's arrest power since 1935, relying instead on executive enforcement bodies and criminal statutes instead of it's recognized contempt and arrest powers), absolutely does have the legal power to send the Sergeants-at-Arms of each House to enforce such compulsory summons with force, to bring either materials or persons before the chamber.
That's a ridiculous argument.

If I refuse to appear in court, I can be arrested and charged with contempt of court. Is that normalising a "violent response to a nonviolent action"?

Justice would be impotent in such a setup.
My apologies, I assumed you meant ones with known vulnerabilities. Given OP's link that was a bad assumption to make.
A lot of butthurt people railing on the guy. Maybe he just doesn't care anymore about a dead package he has no intention of maintaining.

Blame yourselves devs, not the author who donated hours and hours of free work for your benefit.
Can someone explain why this is so much noteworthy?

All I see is random messages pasted onto random backgrounds. I am not from sales or marketing though.
> Perhaps there should be some sort of escrow jail for new maintainers where all changes are reviewed

That wouldn't really solve the problem. Attackers would just have to wait a bit longer before they push malicious code.
It's probably because using microsoft.com would force every cookie from that domain to be put onto every REST call they make for sending telemetry, which would be pointless and would waste every user's outgoing bandwidth. An alternate domain that doesn't have any cookies is a better choice.
More Speed with ElectricAccelerator – Part 1
Can anyone recommend a 2U case that's known to work with this bundle and the 2U heatsink assembly? I'd prefer a short-depth case if possible.
Violence is how the government enforces law, harmful acts don't necessarily have to have a component of physical violence to be extremely bad for society (white collar fraud, misuse of identity documents to get stuff like loans, counterfeiting of currency, etc).
You may not like it but from a license standpoint, I think you may be incorrect

As quoted elsewhere in this thread

" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE."
Providing services to other programs is indeed the key notion.

I learned to program on an SDS Sigma 5. [1] The machine booted by reading the first card in the reader and executing the instructions punched on that card.

The card could be a boot loader to start the BTM (Batch Timesharing Monitor) operating system from disk. Or the card could be a little program all of its own.

A particularly useful one-card program was a card deck printer. You would put it at the front of the deck and boot the machine. This card had a simple loop to read the next card into memory, then print that line on the printer, and repeat until the card reader was empty. (One of my first optimization adventures was modifying the code to be double-buffered: read the next card into memory while the previous card is printing. Twice as fast!)

That card certainly handled resources, but no one called it an OS. It didn't manage and provide services to other programs, it was just a one card program.

Another popular one card program was the bird chirp card. It pulsed the front panel speaker to make it sound like birds were chirping. We didn't think of that as an operating system either. :-)

[1] https://en.wikipedia.org/wiki/SDS_Sigma_series
Yeah it looks mostly like a copy and saw most commits are not by that user, but the user has made some commits and not being familiar with how NPM packages work too well, thought I'd drop a warning here.
Python Pandas Read and Write CSV Tutorial
Millennial men are less likely to work than any other demographic in America
Most users of dependencies will never consider whether to trust those dependencies at all.

If you’ve considered the problem and decided to trust them as a compromise to reduce staffing and costs, that’s a fine outcome in my book.

How many health/medical startups are blindly trusting dependencies today, having never thought through the harm I describe?