skysight-inc/HackerNews huggingface dataset:
> When i create a new thread, i expect its stack to be allocated before the break

Why? Stacks are just memory like any other. You can put them wherever you want.

> so the jvm could have to request to move the break and grow the heap

The JVM allocates heap space using mmap, not by moving the break.

> you can receive a further OOME while handling an exception and that’s just bad luck

If you're being reasonable you don't - the JVM maintains emergency heap storage (pre-committed!) space so it can keep allocating even when out-of-memory.
AFAICT you can configure TOTP / Security Key based MFA for Twitter and disable text messages, but I don't recall if they force you to give them your phone number first: https://twitter.com/settings/account/login_verification

Regardless that still wouldn't protect you against somebody social engineering their support team. The account security page at https://twitter.com/settings/security has an "Additional password protection" but that seems to inhibit automated password reset requests, not support-related ones.
> "I resign if you don't do X."

> "We're not doing X, we accept your resignation."

This approach from her managers can be criticized because it immediately closes the door on the possibility of her changing her mind and walking things back.

However, it sounds like she was causing a lot of internal problems so perhaps they were already working to get rid of her. Accepting the implied resignation may have just been expedient, and saved the company a bunch of severance money.
Ask HN: How do you approach writing documents?
Writing documents (design documents, one-pagers etc.) is particularly hard for me. Sometimes it's a real struggle, up to the point I cannot squeeze out a sentence for a long time. Often I start procrastinating. This happens even when I have a good background on topic / clear vision. I wonder how others in this community approach technical writing process.
I care because I have about 11K followers there and apparently someone is able to write stuff that looks like I wrote it and that opens me up to all kinds of damage. So this may not be a 'big deal' to you but it is to me.
No issues there for me. Also clear on crt.sh
https://crt.sh/?q=5E+7E+34+26+F0+DB+84+8F+53+5D+3E+A5+63+B2+...

Safari works, but cannot access bitbucket.org in Chrome.
Similarly, mindustry is written in java by a single developer freshly out of college and is incredibly performant for the amount of moving pieces rendered at a time. Granted I'm not in video games, maybe it's not too hard, but I thought it was really cool.

It's also an incredibly cool, interesting game design. If you like Factorio + Tower Defense you should check it out.
Thanks for your thoughts. I have worked with publishers who have added Kontxt to their site that have millions of views per month. To your point of "Pay me," what if every comment opened from a highlight also showed a donation or micro payment option directly to you? Kontxt can also make your site more shareable and increase traffic since people can highlight and share a deep-link to the specific parts that are relevant to others.

Kontxt is more than just a 3rd party comment system. It's also a CMS that lets people save their findings from across the web. And it's a social network so people can share the best parts of the web with others.
Woah this looks cool! I use a chrome extension (elevate for Strava) that gives you lots of additional stats but this seems to have even more.
I was making a reference the next line in the book:

"Very deep," said Arthur, "you should send that in to the
Reader's Digest. They've got a page for people like you."
Ah, good catch! That does agree with the article, so maybe that's where the claim comes from and not directly from the Greenpeace article.

There's still a difference between "quantity dumped per year" and "total amount measured right now". It seems like ghost gear is not a large fraction of the plastic entering the ocean, but it a large fraction of the accumulated large pieces in the garbage patch. I presume that's because fishing gear is designed to survive in the ocean so takes longer to break down than other plastics.
These are good points, I'm not sure why you're being downvoted. That said, I think it still makes sense for western countries to sanction Russia.

Yes, sanctions are wasteful of resources, which could lead to food shortages and people dying, but that's kind of the problem with war: It kills people and wastes resources. Even without sanctions, there would be many Ukrainians (and Russians) killed, and Ukraine would not be keeping up its wheat exports. Ideally, we'd like to prevent this kind of thing from happening very often, which in practice means there needs to be some kind of deterrence against strong countries invading their weaker neighbours. Since western powers can't fight directly against Russia, as it would risk nuclear war, sanctions are one of the few tools available for deterrence. Sanctions aren't about waving a blue and yellow flag or about showing how much you care. They're about preventing similar future conflicts and hopefully giving Ukraine a better negotiating position so the war can end sooner.

Also, it seems like European and North American sanctions shouldn't be a problem for most poor countries unless they're also participating in those sanctions themselves? While sanctions make sense for rich countries, the first priority should definitely be to feed your own people. So if the government of India decides that in order to feed its people, it needs to import potash from Belarus, more power to it.
HSM or disk encryption keys (e.g., the encryption keys in Apple silicon) should be stored in a space that is intended to be impervious from analysis techniques (SEM, X-ray, etc) and any deprocessing technique (acid removal, FIB, etc) will destroy the contents. It's built differently from traditional techniques. I suspect this fancy X-ray would not work either.
No, the M1 Max beats the same processor in the article (i7-1280P) in Cinebench multicore: ~12365 to 11480. That is a 10 core M1 Max vs the 14 core i7. Your "fair fight" is just moving the goal posts to some other random non-specified (probably non-laptop) processor.
It’s perfectly clear given the context.. no one’s family member commits suicide over finding out their relative is gay.
Note: OP is a very active, sophisticated, regular HN poster, recognized by many. On this basis, I give this complaint a lot more credibility than that of some random internet-troll.

Karma-check: 195k (!!)
- TCL/TK

- CWM

- Music On Console

- Sfeed+sfeed_curses+xargs+wget+MOC

- Entr

- Mit-Scheme + Edwin + SICP. It doubles as an IMAP client.
Use Stunnel for TLS.

- UDFClient

- NNCP

- S-Nail. It can be easier than Mutt.
Data-Driven Edge Functions with Netlify and PolyScale
Her parents, sorry. Edited. A very similar thing happened to her friend, so it’s a reasonable concern. Her home country is fucked in that regard.
Almost certainly, a well-done YT can get tremendous reach.
Lets not forget that Modula-2 already had co-routines, Ada tasks, Active Oberon active objects, Concurrent Pascal, and plenty of other examples.

If anything, this is yet another example of the decades how old concepts still take to become widespread across all major mainstream languages.
You could use twitter without a phone number before this point?

They asked me for it a long time ago, I never gave it to them luckily as they proceeded to leak that information to everyone. I've wrote off the platform ever since.
https://twitter.com/settings/account/login_verification

Authentication app
Use a mobile authentication app to get a verification code to enter every time you log in to Twitter.

https://help.twitter.com/managing-your-account/two-factor-au...

Update: they added Authenticator 2FA in 2017 and a security key in 2021.
That makes sense, I wouldn't rely on twitter saving the relevant data either.

It really seems that the real problem is that it's possible to be banned for a single tweet, and so quickly.
Same here. SSL checks out clean. Safari, Firefox, and older Chrome work just fine.

Way to go Google. My customers are livid and evidently getting auto-updated throughout the day.
The things app https://culturedcode.com/things/ , even though it's just an elegant TODO app something drove me to buy the iPhone and Mac versions.

Some time ago I spent a good amount of time looking for a development stack that allowed me to just build stuff. I ended up trying and deciding on Laravel Jetstream with InertiaJS https://jetstream.laravel.com/2.x/stacks/inertia.html. Laravel was easy enough already to just pick and do things, now this solves the backend+frontend projects for me by allowing me to just put vuejs components on top of my laravel app and jetbrains already comes with Auth stuff setup solved.
Especially when it's Intel, the company which traditionally has a lowercase i in its logo.

Also rather OT: The Intel l219 or I219 or i219 must be one of the worst names ever for a NIC. Even Intel doesn't seem to know whether that first letter is an uppercase I or a lowercase l.
Yes, the US is a country that cannot process its own waste so it ships it overseas just to be rid of it. The solution is not to raise money and send it to the Philippines to build landfills. The solution is to actually recycle plastic, build circular supply chains, and use biodegradable materials as much as possible.

If humans are to stay on this planet, in the long term we cannot just keep piling up garbage in landfills and building on top of it. Eventually, in hundreds or thousands of years we will have to remediate that land. Its going to be a lot better if we just make our waste as recyclable as possible in the first place.

The author is recommending a half measure based on the assumption that the US cannot fix its own problems. They are also implying a false equivalency: banning single use plastics is not the same as recycling plastic. A more equivalent comparison might be the tradeoffs between plastic bottles for soda, water, or oils and glass or metal containers. It is also true that plastic straws are a much smaller problem then other usages of plastic such as bottles or event fishing gear and even bags.

Yet there is nothing inherently wrong with reducing plastic usage. Doing so is smart and will be important for the health and well being of future generations -- human and nonhuman -- of life on earth.
Why unforgivable? It's only numbers in an account. No one died.
I think the logo is clever, and if there’s no rights issue it’s great. The fact that it’s a different website, domain, theme etc doesn’t make it ambiguous IMO
I use whatever mail client that can save my emails in Maildir directory structure where each email represent a single file.

and it allows me to create many different folders of which rules can relocate toward its designated folder(s).

Works perfectly with IMAP4 protocol.

Minimal chance of corruption and maximum portability to other mail clients.

https://www.interserver.net/tips/kb/difference-between-maild...
It’s probably a stretch to run GPT-3 inside a db, but most of the “deep learning” models I’ve run in more traditional environments are a few megabytes. That’s millions of params, but Morre’s law has been generous enough to us over the decades that I think there is a good case to spend a few megabytes of DB ram on ML. I would think this idea has really landed though, when we start hearing about Postgres deployments with GPUs on board though :)
Truework | Software Engineer, Data Scientist, Designer | San Francisco, CA | Full time | Onsite or Remote (US) | https://www.truework.com/careers/

Truework is hiring engineers, data scientists, and designers to help overhaul employment and income verification and build a trusted financial identity layer for internet commerce. A full list of roles can be found here: https://www.truework.com/careers

Truework is building a platform to make it easy to leverage verified income and employment information to do business on the internet. Our platform enables faster closing of loans and other transactions, increases access to financial products (that are often limited to W-2 employees with good credit), and gives employees visibility and control into how their employment information is shared with others.

We are growing quickly: we currently handle tens of thousands of verifications every month for top US mortgage lenders and are expanding into other fintech and lending verticals as we speak. That said, our team is still small, which means you’ll play big a part in shaping the future of Truework, and your work will have a significant impact and visibility. We are a Django and React (Typescript) shop, and run our infrastructure on AWS.

I (Steve) am Truework's head of engineering. If you’re interested or want to know more about working at Truework, send me a note at (my HN username)@truework.com.
I don't have a smart phone and don't want to give Twitter my phone number because I see that as a risk rather than a solution.
From the link I posted above: "Fifty-six percent of all land used for corn, soybeans, wheat, and cotton was on farms that used no-till/strip-till on at least part of their cropland in 2010-11."
Branching for NetBSD 10
Crunchbase | Frontend & Platform Engineers | Remote US | Fulltime | Visa sponsorship | crunchbase.com

* Crunchbase is the leading platform for professionals to discover innovative companies, connect with the people behind them, and pursue new opportunities. Our platform has best-in-class live data powered by our unique community of contributors, partners, in-house data experts, and machine learning systems.

* Tech stack includes: Scala, Angular, Typescript, Postgres, Kafka, Kubernetes, AWS

* Benefits include: Paid medical/dental/vision, 14 weeks parental leave, flexible vacation policy, volunteer time off, company-wide mental health days, $1K allowance for home office, wellness reimbursement plan, monthly internet stipend and more.

Key roles we’re looking to fill:

- Staff frontend engineer: https://jobs.lever.co/crunchbase/74355e6e-6247-4cbe-9843-79c...

- Staff platform engineer: https://jobs.lever.co/crunchbase/81dda9fe-d2ad-4545-afc0-c6d...

- Platform engineer: https://jobs.lever.co/crunchbase/a575903f-9901-49e9-8aef-d30...

We’re hiring across all departments: https://about.crunchbase.com/about-us/careers/
A shadowban is IMO worse than an instaban, you still aren't able to post anything, but it will look like you can. It also feels morally wrong to shadowban people and there's no process to appeal, it's not even straightforward to discover you've been shadowbanned, you need a bot or searching for your posts in a private window[0].

Agree on the "simple way" of warning the user and putting the post on a queue though.

[0] https://nerdschalk.com/am-i-shadowbanned-on-reddit/
> When code running in a virtual thread calls a blocking I/O operation in the java.* API, the runtime performs a non-blocking OS call and automatically suspends the virtual thread until it can be resumed later.

How does it know that an operation is blocking on I/O? Is this limited to stuff baked into the language or standard library?

What is the mechanism of suspension and resumption? They mention elsewhere that any platform thread could pick up any virtual thread so I assume they must be storing the stack somewhere. Is there a cost transferring stacks on virtual threads across platform threads? Does this introduce new security implications if there are less OS level restrictions on memory access between platform threads?

What happens in cases where an application has user defined platform threads? How does the system determine what platform threads are available to the virtual threading system?

I think this is probably the right decision for Java and I agree with all of their motivations. I personally like the explicitness of async/await, however I assume Java devs are very familiar with threading in general. I believe this allows an easier path to migrating existing Java code.
Yes, I have never given them my phone number.
It's very cool that we regularly send/receive data throughout our solar system. I think this gets trivialized because communication has become so normalized on our own planet and everyday lives... but it's actually pretty amazing.
This pretty much how I started. Lots of prototypes built on stock Uno and available shields to do different things. At some point, the sandwiching of shields and the form factor alone requires ugly enclosures that scream PROTOTYPE!!! I was then shown how to draw up a custom PCB that puts everything you need onto a board specific to your needs.

Had it not been for the stock shields in the Arduino world, I probably never would have gone down the rabbit hole as far as I did. That's meant as a compliment.
You should review the PostgreSQL trademark policy: https://www.postgresql.org/about/policies/trademarks/
> bad wrap

Nice.

Focusing on plastic bags and straws is such a transparent "something just be done: this is a thing: it must be done" response.

90% of the time, the plastic bag in question is filled with products packed in plastic[1] and half the time, the straw is stuck into a clear plastic cup to show off the frappuccino.

[1]: Fruit and veg aside, why am I expected to buy a new spray bottle for every half litre of kitchen cleaner, say? Why can't I just buy one bottle and spray and then some kind of refill?
Will that also apply to plans? I'd love to see ML models come up with better plans, if possible.
Probably time to shut down the machine in question, clone it and do a forensics run on the clone. Use a new machine temporarily.

Obviously other vectors are possible, but in the absence of knowledge it is likely appropriate to react in a secure by default way.
You are right, my rant about keyboard shortcuts was not really related to your question and did not answer it. So with apologies for my rather tangential analogy, let me explain how I got there.

I recently read a ThinkPad review where the author said something like "Why does Lenovo insist in keeping this stupid red nubbin when nobody uses it?" In other words, "I don't use it, so I can't imagine that anyone else would."

I misinterpreted your question as being in that same vein.

Others have given some more direct answers, but let me add mine. As a touch typist, the TrackPoint is the only pointing device that is directly available with my fingers on the home row.

With a touchpad, and especially with a mouse, you have to be in "typing mode" or "pointing and clicking mode". You can't intermix the two modes seamlessly, as you can with the TrackPoint.

Another advantage is the presence of physical mouse buttons. Some other laptops do have these, but they seem to have fallen out of favor to allow a bigger touchpad. The physical buttons let you position the mouse pointer and then click without any chance of the pointer drifting a few pixels while you click.

I also really appreciate your followup question, "What should I have done differently to make it appear as a true effort to understand?"

My suggestion there would perhaps be along these lines: "I don't use the TrackPoint and in fact I removed the cap because it was leaving marks on my screen. But I'm curious to hear from those who use it. What do you like about it?"

In any case, thank you for stimulating an interesting discussion!

p.s. Regarding the screen, I think some of the older ThinkPads may have been more susceptible to this. I also wonder if the screen marking may be due to putting the ThinkPad in a backpack where other objects put pressure in the middle of the lid. I generally carry two ThinkPads in my backpack, my personal and work machines, and I pack them with the tops facing each other and a cotton dishtowel in between. I need a towel anyway to clean the screens and my eyeglasses, and putting the towel between the two tops prevents them from scratching each other. This way the bases of the machines are facing out, and these are much more robust than the lids.
I don't think the answer is paper straws and I personally dislike them. They turn slimy from your saliva and usually collapse on themselves before you're done with using it. I normally end up taking multiple just to replace them halfway through drinking.

More companies could go in the direction Starbucks has gone, switching their iced drink cups to "sippy cup" lids to eliminate the need for straws while maintaining a lid all together. But that begs the question, is the sippy cup top more plastic than just a straw and the old lid?

Or why not just use the compostable plastic straws that are readily available rather than trying so hard to make your company look "green" by saving the turtles from straws that never end up in the ocean in the first place.

Seriously, fuck paper straws. They're up there with coke freestyle machines. Absolute trash.
Thanks for the feedback! I guess to put it in different words, our team is responsible for "infrastructure automation" (which would include both kernel responsibilities yet higher level abstractions too e.g., k8s). This is in contrast to our application development teams at Cboe which would instead focus on writing the logic of the trading systems themselves (e.g., matching engines, code to interface with orders and other exchanges, etc.). Hope that helps.
> Yes, there are.

We're not talking only about read-before-write and integer arithmetic, we're talking about all causes of undefined behaviour.

If it were possible to define a practical subset of C/C++ which guarantees the absence of undefined behaviour, someone would have done so by now, and cybersecurity would be in a much better place. The subset would have a name, would be widely discussed and studied, and we'd be able to point to a large security-sensitive project making successful use of it. I don't believe any of those are the case.

We have subsets like MISRA C and MISRA C++, but they do not offer solid guarantees against UB. We have ambitious formal verification systems such as [0] which are able to reason about C/C++ programs to help the developer produce a solution guaranteed to be free of undefined behaviour.

All that said it would be an interesting project to see how far you could get with a truly safe C++ subset. Like MISRA C, it would be important that there be an automatic way to check conformity.

> C++ has constructors which ensure that uninitialized objects don't happen.

Yes, Boost offers a library for safe integer arithmetic [1] and it's a pity it's so rare for that kind of approach to be taken. A similar approach could presumably be taken to close the door on unsafe union operations, by insisting on using std::variant instead. C++ is particularly amenable to this kind of thing, on account of its operator overloading.

Unfortunately there are many other areas of the C++ language where it's not so straightforward, such as concurrent programming and memory management. Again please see my linked comments where I give a number of examples.

On the memory management front I imagine the way to go would be to ban pointers outright, but permit smart pointers, and have strict rules regarding references.

Also, here's a neat blog post I stumbled across on how std::string_view is unsafe, among other things. [2] edit I now see you've already seen it. [3]

[0] http://www.eschertech.com/products/

[1] https://www.boost.org/doc/libs/1_79_0/libs/safe_numerics/doc...

[2] https://alexgaynor.net/2019/apr/21/modern-c++-wont-save-us/

[3] https://news.ycombinator.com/item?id=26948129
I agree that ghosting should be defined as actively not responding to someone who is trying to get in touch with you. But I would suggest that if someone is forcing the issue and asking to meet again, it’s better to respond with a polite version of “sorry, I am not romantically interested in you” than it is to say “maybe sometime”.
Also TeXmacs can work with Maxima inside your document.
I took the entire energy storage subplot as a metaphor for labor-powered capitalism vs post-scarcity capitalism.

Although I guess in the years since it's been written it more modernly opines on planet-death-be-damned-hydrocarbon-burning transitioning to renewable energy.
Papillon – a new interceptor library for Clojure(Script) It