skysight-inc/HackerNews huggingface dataset:
Native image is experimental, and I believe is a separate download now. Maybe someone from the Graal team can give more precise information about what exactly works in stock OpenJDK, but you should try that demo with Java 12 (or even 13). While you're at it, also give ZGC a try (see https://news.ycombinator.com/item?id=19886856 and http://www.programmersought.com/article/8311115057/).
This is awesome work! I only wish his GitHub (or gitlab or whatever) repository was shared to learn from it.
Dr Brain was very exciting as a kid.
rubygems is actually given some funding by Ruby Together, I'm not sure with what current budget. https://rubytogether.org/
Artificially Intelligent
1. The more I dig into Lisps, the more I find Lisp is not a language. 'Lisp' is more like the term 'C-like'.

Common Lisp, Scheme, and Emacs Lisp are way too different from each other. It's more like a comparison with C++, JavaScript, and Bash. Common Lisp is hardly a functional programming language. Emacs has no lexical scope (This really made me freak out). Clojure is a more qualified functional programming language.

2. Lisps, for example, Scheme was superior to other languages decades ago. But now, as you can see JavaScript is basically a Lisp without macro (Yeah I know HN guys don't like JavaScript, but I choose JavaScript because it's a footgun language like Common Lisp and Emacs Lisp). Or just Elixir, basically a Lisp without paren syntax.

3. Lisp never dies, there will be more. It will march forward as the industry moves. The Lisp syntax means the ease of parsing and macro design, and people will combine this feature with other features. There are already:

a) Functional Lisps like Clojure
b) Carp, a Lisp without GC, there were also Linear Lisp
c) WASM, an assembly with S-expression
d) I have already seen other prototypes with static types/dependent types/monadic macro systems etc.
https://en.wikipedia.org/wiki/Chadian%E2%80%93Libyan_conflic...

Albeit long before being removed from power.
Nitpick:

This includes some attacks that I don't think really ever occur in the real world (bad private exponent size, Franklin-Reiter) and misses one of the great RSA attacks, Bleichenbacher's "rump session" e=3 signature attack, about which there was an excellent NDSS paper (also being presented at Black Hat) just this year.

So I guess I'm saying: RSA is even worse than this blog post suggests.

https://www.ndss-symposium.org/wp-content/uploads/2019/02/nd...
There's a huge amount of open data being made available by the Sentinel program. High-quality imagery is available at 2-3 day periods of nearly every landmass on earth, for free!

No need to take the article's word for it, here's an IR satellite view of the lava in question: https://apps.sentinel-hub.com/eo-browser/?lat=-57.79698&lng=...

You can do all sorts of things with this data. Excited to see what the maker community will figure out with it.
The notion of individuals being responsible for exploiting Africa and them being dead meaning the exploitation no longer exists is like saying USA ceased to exist when founding fathers passed away.

Newer history of Africa is almost exclusively defined by consequences of external manipulation, driven by financial interests.

In general, you can look up the definition of "neocolonialism".
To anybody put off by the clickbaity title, as I initially was — the article is actually informative and well-written.
I disagree that calling out anglocentrism is a "personal swipe," it is relevant to the argument (i.e. that it is hard to see beyond your biases.) Discussion should surely not be stymied for the sake of civility, better we step on each other's toes and get our point across than sit in our respective corners and sulk.

I'm sure there was a better way to say what I said, but it was not mean-spirited as I am sure you can see.
I apologize if this is not a typical submission, but I would really like this community’s thoughts on this question, especially because the answers to the question seem to be non-definitive. It’s a problem that’s been on my mind for a really long time (despite having only a rudimentary understanding of cryptography) and I don’t think enough minds are working on solving it. How will archivists and historians of the future understand our present if we fail to ever break current encryption protocols? So much would be lost. I think more thought should be given to this problem today, as more software moves towards end-to-end encryption, so that platforms can optionally, for instance, archive private content so that it can freely decrypted after a century.
The video should definitely be watched.

A little more revealing about the playfulness this team is addressing the issue, although still filling it in with their strong opinions and data.

The article came across heavy handed which (I feel) distracted from some really good points.
That seems to demonstrate a github vulnerability, rather than anything ruby-specific?
Putting supply chain in a single location reduces cost.

Most of it had little to do with China but decisions made by the US corporate sector.

Essentially the US Govt. cannibalized it's middle class to feed the electronic, military and
finance sector.

It's hard to deal with voters and labour unions, its much easier to deal with authoritarian regimes when you are a multinational.

Yanis V. has documented this dynamic of globalization quite well in his books.

> Vietnam, Thailand, Indonesia and India are becoming satellite hubs of manufacturing in Asia.

Why do you think US multi. nationals avoid India ? Given it's a parliamentary democracy and has a large english speaking population ? Why did they set up shops in China ?

In India you can have labour strike of 31 million people !

A 2 dollar / day earning India voter has more power over its government than a 30 dollar / day earning Chinese citizen.

They will move to Vietnam, Indonesia and Thailand and continue their exploitation there but
will avoid India. This just shows how misinformed you are about Asia.

The key change in Asia has been China, who are setting up technology companies in other parts of Asia, including India ( often US stolen IP being shared ).

The main goal here is to get rid of the importance of dollar / yen swap lines. It has caused a lot of problems for trade between Asian countries.
Very true. I have been working at startups for a while as a hiring manager and one of the skill sets I've had to develop is finding good people who have been passed on by FAANG or who come from a non traditional background and never would make it past there filters. Simply because we can't afford the salaries, but still pay six figures to non bay area employees. It's been interesting watching the "I should work for a startup" to "I should work for FAANG" over the past decade.
parochialism
There are some people trying to build alternative toolchains for Docker builds that remove Dockerfiles altogether, e.g. https://buildpacks.io/ and (in a very different approach) Nix-based builds.

My personal approach for Python applications' Docker packaging (https://pythonspeed.com/products/pythoncontainer/) was similar to yours: wrap the build process in a script. I wrote it in Python rather than bash, so it's more maintainable, but a Ruby shop might want to write theirs in Ruby, etc..
There you go: https://psuter.net/images/z-index-fig-1-alt-preview.png
It’s Never Going to Be Perfect, So Just Get It Done
I want to try GraalVM and use in my side project. But whats holding me back is that its from Oracle. Is that something that I should be worry of?
Pike Place Market is so great and popular, cities should really build more markets like it (including Seattle).
Learn React by Cloning Airbnb
Google and Dish reportedly planning to form new major US mobile carrier
Graal-dev here,

We are working with a very high priority on JDK 11 support. We should be able to ship it in a few months from now.

> So is graal polyglot already compatible with newer JDKs and it's just native image generation that's blocking the upgrade?

Not just. We also need to upgrade the JVMCI version we use in order to support libgraal (Graal compiler as native-image in HotSpot). Also, modules make everything a little bit more complicated as well.
Classic MacOS, it should be noted, not the recent rebranding of OSX.
Anyone else think this is bullshit? It's just an outline of what an automated bot would have to do to work with some technical buzzwords mixed in.

Not saying it's not doable, nor that OP didn't actually do it... but I am tired of all these people posting technical fantasies to improve their social presence.
I'm a developer, not a cryptographer, and like most crypto articles, most of this post is gibberish to me. I really tried to follow it in the beginning, but then I gave up, scrolled to the "what should you use instead", and then realized I didn't understand that either.

If this is article is "easy" crypto, and I shouldn't roll my own crypto, then what should I do? "Just use elliptic curve crypto but make sure you choose the right curve! Here's an abbreviation for you, libsodium has it so you're all set" doesn't comfort me much. I don't have a good intuition of what a curve even is and why my sensitive data can't just go straight ahead like all the other data. I mean, when I call into libsodium with parameters I do not understand, then aren't I, for all intents and purposes, rolling my own crypto anyway? How is any of this of help?

If I want to allow my customers to send me encrypted data via an untrusted channel, then what do I do? I need public key crypto for that, right? Basically, I want the public key cryptography version of Coda Hale's classic blog post about password hashing [0], does that exist?

EDIT: thanks for all the comments folks, great insights! I particularly found [1] by CiPHPerCoder to be a great starting point (akin to Coda's password article) for all kinds of scenarios. I feel much more confident about this stuff now than I did 2 hours ago.

[0] https://codahale.com/how-to-safely-store-a-password/

[1] https://paragonie.com/blog/2017/06/libsodium-quick-reference...
There are more than one platform that are affected by this, as windows uses it's own hosts file too, so it's not just a libc thing. Every sysadmin and homebrew hacker knows of the hosts file that I'm aware of, regardless of the platform.

FFox has no need to be 'mucking' (which I understand to mean to 'write to') with hosts: it needs to read it and parse it.
Failure to do so will always generate an endless stream of "hosts file isn't being honoured" style bug reports. I think you would agree with me that the FFox maintainers & dev's have got better things to do than to answer WONTFIX on the same fault again and again.
The issue with a policy like this is it would limit the size of corporations to a few dozen people.

Someone does something bad at a F100 company? 10,000 employees lose their jobs supporting their family.
I see a free data hack:
Load a version of iMessage that never acknowledges the message, but saves the data (and doesn't brick the phone). Send lots of data, acknowledge via other means (checksum sent over email etc). How much data could be sent this way? GBs?
Semi-Supervised Domain Adaptation via Minimax Entropy
In the UK if you're a Normal Person buying a house with a mortgage and a 20% deposit, they want to be reasonably sure you didn't get a personal loan (or something similar) for that deposit. Because there's more risk (i.e. them charging you more interest) if you're in debt to 95% of the house's value.

Of course, if you're a Billionaire Russian Oligarch, you might don't need a mortgage so this might not apply.
Not really. There's a whole lot of ancient alien conspiracies out there that openly state that.

And of course there's the point that the only artifacts that are "out of place" and "too advanced" are those produced by non-white cultures. The bias is pretty clear, though I suspect a lot of it is not conscious racism.
Show HN: ComposeAdapter – Android tool to compose Adapter for you
The Primality of One: A Selection of Sources (2012) [pdf]
VW’s ID R electric race car keeps breaking records, this time twice at Goodwood
I agree. Geary looks great and mostly works fine—I don't need extensions or calendars.

I did have an issue in early 2019 where parsing of contact names somehow got messed up, causing outgoing messages to not get sent. After a few productive days of sending emails I found twelve in my outbox that hadn't actually sent! I got scared and went back to Thunderbird after that, but I keep Geary installed and launch it from time to time to sync my mail.
Contributor was a micro-payments subscription thing were you could buy a subscription and actively participate in the regular ad-exchanges. The idea was that you could support websites by outbidding crappy advertising on Google’s platform and see pictures of cats (or whitespace) instead. It doesn’t take much money to outbid just about every advertising you’d see in a normal month.
https://www.ctrl.blog/entry/google-contributor.html

They’ve repurposed it as an “ad removal pass” service were you pay way more money per month per website that you want to remove ads on. It’s limited to large publishers only.
https://www.ctrl.blog/entry/google-contributor-twopointoh.ht...
Or you know, just don't use the linux desktop. Nvidia's drivers are the only ones with a good Vulkan / OpenGL implementation, the other ones are underperforming severely. Nvidia also exclusively develops CUDA, so it basically it the only serious alternative for accelerating scientific workloads. Basically no-one cares what Kernel/Window system developers think as long don't cripple the Kernel severely enough that NVIDIA can't around their nonsense.
Chromebook Simulator
But they most they can fine themselves is 4% of their turnover.
Free annual subscription for NexPloit (T&Cs apply)
Hello world!

NeuraLegion has just launched a new program for open-source projects, where we offer a free annual subscription for NexPloit, the world's first AIAST tool (AI-powered Application Security Testing).

You can find more relevant information and a demo of NexPloit here: https://www.youtube.com/watch?v=xNxZJXlDMa8

And more information about our company here: www.neuralegion.com.

If you join this program, you will get free security testing, dynamic reporting of vulnerabilities and remedy suggestions for your open-source project.

Application to the program really simple.

All you need to do is send us an email with your project repository on : opensource@neuralegion.com.

Join us in making the Open-Source community more secure!

Thank you for your time and consideration.

If you have any questions, please do not hesitate to contact us!
Curve25519 and Curve448 should be strongly favored if you decided to start using ECC. Not unlike RSA, elliptic-curve cryptography has a lot of of edge cases, math pitfalls, and side-channel traps.

* Your implementation produces incorrect results for some rare curve points.

* Your implementation leaks secret data when the input isn't a curve point.

* Your implementation leaks secret data through branch timing.

* Your implementation leaks secret data through cache timing.

Curve25519 and Curve448 are designed with secure implementation in mind, naturally, they trends to have more immunity to pitfalls. There is no invalid curve attack in Curve25519, every random integer is a valid public key, secret-dependent branching can be avoided easily, etc.

https://safecurves.cr.yp.to/
Attribuitation is one potential issue/ edge case source that I wonder how they solve. If two people enter/leave the check out area at the same time the "overlap" could get it confused. Machine vision could potentially pair better. Theoretically triangulation could help some but it brings to mind testing it by doing things like having two people walk side by side, pick up a bottle and drape it over th other's shoulders and seeing if it judges them as buying the opposite.
To answer your question about selectively blocking, just put the wifi router inside the cage. To the point though, feature phones didn't have WiFi generally. I'm also not sure how doing so would fix the issue, unless you could block the number perhaps.
What you're describing isn't about stats it's about what's being measured. The P99 of both endpoints taken together really does go up if A is called less frequently. Also not a good example as different endpoints wouldn't share a metric.
I would be cautious about defending those that have, from those that do not. The general public does not have the kinds of money and resources that the copyright lobby does.

For that is the first point to counter your argument: the copyright industry is not mainly looking out for artists, it is looking out for itself and its benefactors. Ask any musician what percentages of royalties they get from their song, it's a joke at this point. Live performances are the sustenance of musical artists today.

That is not to say that I don't defend the rights of artists to their work; I do. But that isn't what this battle is about, this is a battle against the same industry that finds it pertinent to send out mass blackmail letters to families, to single mothers, to depressed people. It is surely going to be one of those things that we look back on in decades to come and go "what the f--- were we thinking?"

Finally, you have to take a wider view in these matters than saying "there is some configuration of content filtering that I find acceptable," because once you have content filtering laws in place, people who you disagree with can co-opt this into a totalitarian state. You do not know who will have the keys to the kingdom come tomorrow.
1. Enjoys "cancer free device"

2. Has Google Assistant and other Google bloatware installed

....

Okay
The poster said that the reason to prefer tabs is because his visually impaired coworkers find spaces difficult. You said “this is one of the stupidest reasons I’ve ever read”. What I asked you is in direct response to your statement as your statement (calling the reason given by people who are actually affected stupid) makes it very much sound like you don’t care about their plight and I am asking if they’re wrong because you aren’t affected. My questions are for sure loaded, but I’m asking you, not putting words in your month.
Time-to-Market Experience
> Ext4 has gained support for case-insensitive name lookups

Well that's neat. I wonder how it'll be exposed to userspace; mount option, maybe?
Have you considered that maybe it is the other way around: The standardised solution is inferior and NVIDIAs superior? Given the fact NVIDIA engineers probably know a lot more about modern graphics stacks than some Redhat employee this seems likely.
I agree, but if you read about him a bit "wider", including periods before and some time after he came into power, it does seem like there were some really good things there that he tried to do, both in Libya and broader region (which were not in the interest of foreign powers, though). Afterwards, you start to see elements of insanity and paranoia and things getting much worse, but it does seem to an extent that those were a result of the hostile environment around him and maybe of failure to do things more "normally".
Yes that's hard to debate. But if you want to get the experience without the physical complexity you can always build an 8-bit computer in a simulator like they do in many college courses. I used Logisim [0] at college for this following the Harris and Harris [1] textbook and it was a straightforward experience.

[0] http://www.cburch.com/logisim/

[1] https://www.goodreads.com/author/show/13816512.David_Money_H...
The article suggests to "use libsodium", with Curve25519.
Doesn't that date back to IRC?
"MCAS is required in order to meet federal airworthiness requirements"

Cite this. Specifically this. The rest of your comment agrees with mine without this being true, and I have not seen any evidence of this being true.
Avoid BetaPage[Dot]Co
I have a bit of an issue with places which get coöpted and eventually dependent on tourism. Some tourism is good, but places which depend and target tourists don’t serve the local community as well. I hate when things become spectacles.
What to Expect When Chandrayaan-2 Launches to and Lands on the Moon
PHP: A Quick Introduction to a Complex Language
It's a scammy Product Hunt knockoff > they waste 30 minutes of your time submitting, THEN say they accept only 10% and it takes a month, unless you pay $98.
Ugh, this is the worst part about this mess IMHO. U.S. law enforcement has time and time again shown that they are more than willing to argue in bad faith about statistics. This is going to turn out no different than fishing expeditions based on partial DNA matches where the prosecution predictably finds some 1/100,000 match after they search a database of 250,000 people and use that as some cornerstone of "obvious guilt" and convince the jury that there's only a 1/100,000 chance that he's innocent.

So much of forensic science is a sham, we claim as a country to uphold a system of justice whereby you're innocent unless proven guilty beyond a reasonable doubt, yet so many prisoners on death row have been exonerated, some posthumously even when there's no real incentive to look for evidence of innocence at that point.

Who wants to bet that prosecutors are going to start using flawed facial recognition results as if they are equivalent to a victim picking out a suspect from a lineup of 10 people? "There was a 99% chance of a match"
I am running this on ubuntu 18.04 :(
Upstream / mainline support for G12A has been added in this release. Odroid-N2 (based on the similar G12B) support will most likely land in 5.3 [1].

[1] http://linux-meson.com/doku.php#kernel_mainlining_progress
Free trade helps to build the roads and infrastructure needed. The cost of building roads needs to be paid for, if it isn't worth transporting things from point A to point B the road is pointless. As the cost of trade goes down it self-reinforces by making people willing to contribute to better infrastructure. Of course when the road doesn't exist at all sometimes the investment to make the road is too high for people to realize that it is worth it.

China contributing is potentially a good thing (or potentially bad for reasons others have debated). This trade zone doesn't need their contribution to be successful, but it helps.
After the first page or so I thought to myself the day when Instagram is a majority of bots posting, liking, following and unfollowing each other is not too far off, technically. I realize that's not the goal of IG, but...

Either way this isn't the first time, or probably the last, we see gaming IG this year. [0]

[0] https://medium.com/@chrisbuetti/how-i-eat-for-free-in-nyc-us...
That basically sums up my experience reading this.
3. Don't run processes are root, most of the times you don't have to, it's an easy easy win and protects against many docker security CVEs.
> NVIDIA is just one GPU manufacturer out of many, and on Linux, a small one.

Is there a list of ranking anywhere?

I vaguely have an idea of probably Intel is first then AMD second.
Add this for fun:

https://sites.google.com/prod/view/wbr/home
I've never experienced those supposed horrors across multiple operating systems (FreeBSD, Linux, macOS and Windows 7/8/10), the only time I owned an AMD graphics card it was a total disaster, among other things I remember are really bad Linux drivers (proprietary or otherwise). I never had any issues with my current GTX 1080, 4xGTX 2080 workstations or the 2xV100 nodes I have access to.