skysight-inc/HackerNews huggingface dataset:
The ring roads are the most impressive part, IMO.

Between material-gathering, going to the work site, clearing the path ahead (largely avoided here by elevation, but still) and actually laying down the road one... block... at... a... time... roads are very slow to build in Minecraft. They take a large amount of investment before they start to pay off, unlike most buildings, and they can't really be fully appreciated except from map views like this site, so they're kind of low-reward for the people doing the work, too.

I only run a vanilla server, so I don't know how mods might affect that. Were these tool-assisted in some way? I just can't wrap my head around that time involved if not.
Wow this is pretty awesome!
They were built using Worldedit. The precision of WE is pretty bad, though, so they had holes from where WE rounded the numbers. I've been traveling along the roads over the past few years, filling them in by hand. It's quite meditative, to be honest :)
Gmail? Hotmail came out in '96, Yahoo mail not long after.

The opportunity regarding the family appliance, if there is one, is to make it self-managing.
I wrote something a little like this once, if not as sophisticated (a lack of sophistication was sort of the point): https://github.com/jarcane/HateStack

Not sure I see why an anonymous, SSL-encrypted service still needs account registration? An abuse prevention measure?
Show HN: Split Optimizer – Affordable visual A/B testing tool
This could be an extreme version of "Where's Wally".
f func(func(int,int) int, int) func(int, int) int

It makes sense, but at the same time it reminds me of something from the esoteric top list at 99-bottle-of-beer.net.
They were initially built by WE, then manually filled in over time. It's taken quite a while and you can still find some with holes.

Relevant comment: https://news.ycombinator.com/item?id=8649733
You are right. The largest Xeon Phi's have 16GB of GDDR5 memory on the card, and the 31S1P on sale has 8GB. The quoted speeds are for 16-channel transfer between the card's on board memory and the cores on the same card. Transfer from main memory back and forth to the card is over PCIe v2 x16 which has a theoretical max of 8 GB/s --- about 3% of the maximum transfer rate on data within the card.

So if your working data set fits on the card (less than 8/16 GB), or can be partitioned so that it fits on multiple cards, you can potentially get great performance from Phi. But if it's larger than this, especially if it is less than 1TB and would thus fit in the host's RAM, transfer from the host to the card will likely destroy any performance advantage.
Mykolab is a good alternative.
Works for me in Firefox. (33.0 on amd64 Linux)
Try http://minecraft.xandorus.com:8123/?worldname=playground
I can't see myself recommending this guide to anyone. A few things stand out:

- the invitation to "go away" if you confuse ESR's definition of hacking with the definition the general public uses.

- the suggestion that hacking is something for those with above-average talent for programming. Perhaps you should keep reading if you count yourself as above average?

- the proposal of a system for learning how to hack that is apparently so robust that it is self-evident. No examples need be brought in to support this proposal, nor does it need to defend itself from alternative systems.

- it is suggested that hacking is the only way for software architects to train their design sense. Ok, sure.

The biggest problem I have is that the vast majority of ESR's suggestions are really good ones. I agree with plenty of things he's saying. I just wish, like many open source products, it was packaged in a more digestible fashion, so I could recommend it to less experienced friends.
[Edit: I missed the PDF whitepaper before writing this comment. It doesn't answer all my questions bit I'll give them credit for a really nice detailed whitepaper.]

This article makes me very suspicious of Symantec. How long have they known about this, really? Are they just releasing this information now as a marketing reaction to recent discoveries by competing firms?

The vaguely written timeline says in passive voice that Regin has been observed since 2008. By who? Why are we just hearing about it now? I wouldn't blame them for keeping some discoveries quiet for a while so they can do some stealth research, but the timing here really smells like they are being PR driven instead of being driven by doing what's best for the overall security community.

What would inspire much more confidence would be a story of how this was discovered, and how the discovery and research played out, as we have seen for some other malware. Instead this looks like they have know about this for a long time, and now for reasons they aren't going to disclose, they have decided, or have been given permission, to reveal some of what they know.
The meeting with Paulson at the Treasury happened after TARP was signed into law (October 3). The book Too Big To Fail does a good job of summarizing the events.
Haven't been able or were persuaded not to.
Studying for the Test by Taking It
Here's a recent 8 1/2 minute talk by Dr. George Guthrie (MD) on dietary salt.

https://www.drmcdougall.com/health/education/videos/advanced...

He mentions the importance of the potassium-sodium ratio.

Also, a 2008 article from Dr. John McDougall on salt and blood pressure:

"Salt: The Scapegoat for the Western Diet" https://www.drmcdougall.com/misc/2008nl/aug/salt.htm

In the context of most dietary factors on health, salt is probably one of the smaller influences.
> As far as I'm aware the security record of that platform isn't exactly stellar as well and especially older versions are widely reported to be vulnerable to exploits (admittedly usually using applets as a vector here).

Yes, historically, there have been major concerns about security of the JVM platform. Applets (which we don't support) have been a big vector. Also, as per my understanding, there was a transition period when Oracle took over the reigns from Sun, during which security patches were not released as frequently as vulnerabilities were discovered. However, the frequency of patches has increased in recent times.

Moreover, OpenJDK has emerge as a complete open-source implementation of Java. So, atleast in theory, it should be possible for the community to fix the holes and not rely on a single company.
>So here we are in the data silo era, where running your own mailserver is seen as something as archaic as soldering your own CPU board.

That might have happened even if gmail and hotmail had never been created. The deluge of spam is the main force behind the difficulty of running a mail server, particularly an outgoing-mail server.
I suspect that, at the very least, some of the building was done in creative mode (given the diamond block railways, and some other stuff I see.)
This year's growing season was absolutely hideous for me. Everything was either ripe too early or didn't have enough time to produce. I even had a late frost that killed off a lot my more vulnerable crops.

I decided to try out indoor growing down in the basement. I purchased some LED 300W lights and 2 90W LED's. They're working better than I expected but the challenge now is temperature control, water and nutrient levels.

I'm going to be testing out a grape vine, actually. I'm not sure how well it'll hold up. It will be a soil based solution though, I think.

Hard times.

P.S
Mushrooms are pretty easy to grow and sell quite well.
It depends on your perspective. Vagrant is billed as a manager of development environments. It has a well known and easy to use workflow for creating/modifying/destroying those environments (vagrant up/provision/destroy). With its Docker integration, it provides you with a nice management layer for managing those Docker development environments. You could achieve the same thing with Docker directly, but there would be some non-zero amount of work required to create your workflow commands and share that development environment with others (whereas with Vagrant you just need to share a Vagrantfile).

Here's an interesting Stack Overflow question related to this topic, http://stackoverflow.com/questions/16647069/should-i-use-vag.... Also, it looks like Docker is working to build out its own development environment tools using Fig, but that seems a bit nascent right now.
Published 2.5 years ago, removed in the past couple of days, after recent events. It's not like they've grown up over the years, it's that they got called on it.
Well people are sending suspicious files to the AV vendors all the time, so Symantec may have found the backdoor a lot later and then found it existing in their DBs.
Price controls caused many of the shortages. The US went off the gold standard and inflation was the result.

The government instituted price controls and shortages were the result. We even had shortages of natural gas, which, at the time, came entirely from with the US.

In this environment, such a rumor was not hard to believe.
Coliving in the Bay: The Commune, LLC
Where on earth did you get so much iron?! That's what the spaceship is made of, right?

EDIT: Silver -> Iron
> I vastly prefer offline media players to browser-based tools

Why don't browsers provide some way to play local video files, for example by typing "file:///c:/my_video.flv" into the address bar. After all, the browser certainly includes the ability to play the video being downloaded off the web.

If you try "file:///c:/my_video.flv" with Firefox, it opens a dialog box offering to pass the video file to whatever external media players you have installed.

In what seems inconsistent to me, "file:///c:/my_notes.txt" and "file:///c:/my_pic.jpg" will be rendered correctly by Firefox -- it won't offer to open an external text editor or photo viewer. Why is video different?
Lol I just get to work 120 hours a week for 40 hours pay, although there are more jobs out there than 2012, its still thin enough out there that employers can hold a gun to your head, work you hundreds of unpaid hours without bonus or overtime and on top of that give "haircuts" so the harder you work the deeper they cut your pay, but because of the scarcity of work they get away with this.
> What have they ever done to you?!

I don't dislike Google, but I think it's a problem that the vast majority of its users couldn't precisely articulate exactly how Google uses all the personal data they collect, from documents, searches, e-mails, phone usage, etc.

And I think it's improper to rely on the "people use Google voluntarily" canard. It's a classic case of information asymmetry: Google has all the information about how it uses personal data, and consumers don't. While I imagine most consumers understand that if they search for "laundry detergent" Google might show them ads for "Tide," what Google does goes far beyond that and I think very few people really understand what they are bargaining away in return for using their services.
The spaceship is made of iron and is the only thing on the map that wasn't player-built. The spaceship was pre-made by the server staff to serve as the spawn point. However, iron is extremely abundant because we figured out how to exploit villager spawning mechanics to construct enormous machines that generate free iron by slaying and regenerating iron golems. A bunch of these machines can be seen all over the map; here's a notable example: http://nerd.nu/maps/pve11/#/-1188/64/148/-2/0/0
Another bit of trivia: I set the map to do a full render a day or so ago and it's still going. The map is at 1657200 tiles and counting.
Ah, yes, very good point. I didn't mean to insinuate that Gmail was the first. Hotmail rocked when it came out and made me a happy customer when I could have a personal email address that wouldn't change.

Gmail entered later in the game and "bought" new users with massive free storage and a more modern web interface.
Server worlds can get impressive pretty quickly. One of my wallpapers is this render from one of the old reddit server worlds: http://i5.minus.com/im5gOe.jpg

On the other hand, my single player world which is about 4 years old isn't nearly as impressive.
In that case the savings would probably be substantially larger. Of course then he'd have to deal with import tariffs.
Hey guys!

I decided to create Split Optimizer to fill a gap (I think) in A/B testing services with low, affordable costs for small businesses and bootstrappers (like me).

It is very simple to integrate into your website and start testing straight away. If you want to see how simple it is, just check out this video I made https://www.youtube.com/watch?v=k_eUmBK-Oak

Pricing is simple: first 10,000 page views are on me, after that each 5,000 views are just for 1$. No scammy fees for over usage, one simple formula.

Please email me at juraj@splitoptimizer.com, or comment here. Any suggestions are appreciated!
Meta comment: the website is mostly unreadable with JS disabled because the fixed-position head is covering most of the page, but fine when removing the "position: fixed" from the "navigation" class. (And your target audience will generally be one that prefers to have JS off, I'd think.)
You could centralize the anti-spam measure but keep the mail servers decentralized. Spamhaus is such a service.
>And if your IP address changes, surely it is more of a pain to edit the hosts file again

You wouldn't need to edit the hosts file, since your made up domain would just point to 127.0.0.1
Yup. I started trying to use it and found I couldn't do something as simple as change the font. I recall the help system referred me to the web page which referred me to a video about editing a config file. Which was when I decided that if doing something so simple was so convoluted then this wasn't the editor for me.
The list of infected countries might tell us a thing about the attacker:

Russia and Saudi Arabia at the top: classical US intelligence targets.
Pakistan and Afghanistan: Likely anti-islamists effort.
Austria, Belgium, Iran: Opec, IEAE, tons of EU-institutions - someone who wants better intel about the nuclear talks with Iran?

Ireland, Mexico, India: Hard to find political reasons for those countries, but if you look at it economically: Ireland is the main hub for US companies into the EU, Mexico is a neighbouring country to the US, India: rival to China

My totally far-fetched guess would be that this trojan comes from the NSA or the GCHQ, I don't see China caring that much about Saudi Arabia and AfPak.
This is from 2009. Apparently the pilot program is over:

"From January 2008 to December 2009 the BIG Coalition implemented the world-wide first Basic Income Grant pilot project in Otjivero - Omitara, Namibia. After the conclusion of the Pilot Project a monthly bridging-allowance (N$ 80) to all who participated in the pilot was paid regularly until March 2012."

From: http://www.bignam.org/BIG_pilot.html

Edit: another comment says it it resumed: http://allafrica.com/stories/201407170971.html
> Heck, pick a more easily optimizable language than javascript as the default scripting language, have built in GPG so we can throw away passwords, force HTTPS everywhere, use a non-centralized dns like namecoin - why not just go all the way here?

We actually do want to implement some of those ideas (and other similar ones)! But we don't believe it is necessary to ditch the existing standards for that. There can be a transitionary period and this (or any other browser) could be a test-bed for new ideas.
So, where to buy? Mendocino? Sierra hills?
> Javascript is superflous for 99.9% of websites.

For web sites, yes. For web applications though (of which there are more every day), it's definitely not.
Interesting, because one of the things that attracts me to Linux over Windows is the use of well-defined interoperable wire protocols rather than RPC systems. This makes it much easier for the different ends of the communication to be written by unrelated teams without quite such coordination costs. Meanwhile RPC-style is much easier if the same team is writing both ends.

This is why there are a zillion IMAP clients and several servers but only one reliable Exchange client and server, the Microsoft one. The wire protocol is basically MAPI over DCOM, and this requires a server architecture identical to the MS one (and at much greater risk of copyright/patent problems).

GNOME have been able to produce such a bad wire protocol for dbus because they're writing both ends and happy to break compatibility regularly. It doesn't have to be this way and is a function of the project management style.

(There are some Linux clients for Exchange but no server, which is the wrong way round as it's much easier to get people to switch on the server rather than the desktop)
the high percentage of telecoms and private individuals targetted is reminiscent of this:

http://arstechnica.com/tech-policy/2013/11/uk-spies-continue...
Do you really think the world would be better place right now if email had been distributed as a library and not as a protocol anyone could implement? How could that possibly have worked? And how could it possibly have solved compatibility problems? It's not as if you can get everyone to upgrade libraries simultaneously.
However it would depend on who is doing the voting. If you, for example, used Twitter to gauge political sentiment, you'd be representing x% of the majority position, which would introduce a selection bias that would imply that x% represent the views of everyone. The problems with Wikipedia for controversial topics Ali's that typically both sides are highly motivated to "win" whereas those that aren't so motivated probably have the correct answer.
And a very fat finger points at the US/UK because if they were simply present in statistically normal quantities in the samples they would be amongst the largest of the groups encountered. The fact that they are not suggests a conscious decision not to target those countries, likely emanating from a law rather than from a desire.

If this were done by China then the US would be represented strongly.
Pretty big world, but it doesn't even compare to 2b2t in scale.

For those who havent heard of it, 2b2t is an anarchy survival server that's been around for about the same period of time, 3-4 years, with no resets. Virtually the entire map from the spawn point to 5km from spawn is a desolate wasteland littered with ruins griefed bases, castles, and megastructures.

With the introduction of the hunger system everything got a lot more interesting, requiring new players to make a mad scramble from spawn and try to find some source of sustenance. It's not uncommon for new players searching for food to duck into a 2-3 year old base that's been long abandoned but has a few precious pieces of bread left in a chest.

Typically players will build their bases anywhere between 10-500km away from spawn, and when they do, they build some of the most impressive bases I've seen in the game. One favored hobby of many regulars is to go hunting for these gems that have usually been abandoned years past.

Google it and you can get a good idea of exactly how old the map is, but the pictures really don't do justice to the absolute carnage of spawn.
I also run my own email server, but it's not something I would easily recommend.

In 1996, the anti-spam measures were totally different. Notice I'm saying anti-spam, not spam (even though of course there's no one without the other).

Getting a "clean" IP today on providers like DigitalOcean, is far from trivial. Several big players (from my personal experience, yahoo) will likely blacklist the entire net range with little or no options to get it unlisted. So sending out emails is a gamble. Setting up DKIM / SPF is also a minor hurdle and won't necessarily help that much. And that's just outbound emails, not to mention fighting incoming spam...

If we're talking about family (which is what my own mail server is used for) - they too are used to things like Google, so it's hard to compete in terms of integration and ease of use there. Explaining to my sister how to set her iPhone, or to my brother and his wife who want to access the same email account on two computers... things get tricky very fast...
Kind of like spider? Or Emacs? Or PyDev?
Lamentably, we also have to worry about spam black/whitelist.
the link they have created to "Backdoor.Regin" points to this: http://www.symantec.com/security_response/writeup.jsp?docid=...

which looks unrelated to the point of being incorrect.

also quite strange that they say in the PDF it's a kernel mode driver, as my understanding is that windows 7 & co do not allow those to be installed if they are unsigned. EDIT: The pdf covers this later on:

> The 64-bit version of Regin’s Stage 1 (wshnetc.dll) is no longer a kernel mode driver, as drivers under 64-bit Windows
must be signed. Instead, Stage 1 is a user mode DLL loaded as a Winsock helper when the computer is starting
up.
Oh my mistake, I meant iron! Very cool technique, thanks for sharing.
The mechanic's disclaimer is going to be inherent in the text: "I once poured metal filings into an engine, and then everything went to hell". This isn't like that at all, it's a tale of how hacking somebody's systems without consent was a fun and rewarding idea.
1. Java apps are inherently portable, and there is atleast one mobile platform that supports it. We don't have it immediately on the roadmap since our current focus is on the desktop version.

2. Needs more thought from my side, but my immediate response is: this could be solved with better UIs for managing a website's permissions. Perhaps websites could ship metadata about the kind of permissions they require (similar to a mobile app) and the user could "approve" them with a single click (like an app).
You can probably find a Thunderbolt-connected PCIe enclosure, but the bandwidth from host memory to card memory will be lower than a direct connection. Drivers would be another issue.
More like DrRacket.
So moaning about a comment is okay, but moaning about a submission is not okay ever. Got it.
Silicon Valley's high-tech firms battle for low-tech ad space – billboards
Small wineries are popping up everywhere in Belgium, the beer country. A positive effect of the climate change disaster. Too bad producing nice red wine is still problematic.

I can 100% recommend Chardonnay Meerdael sparkling white wine though!.
Good OCR is complex. "Here's a jpeg with 80 lines of 80 characters (from a set of 64 ascii characters chosen for maximum descernability); do your best and I'll run that through a ECC that cuts down to a 32KB chunk." is rather less so. Also, there's no reason your OCR program needs any permissions other than reading a single jpeg and writing a single text file.
Chromium browser let's you do this. It is how I stream my videos over chromecast. It also let's you browse your filesystem.
I've always kind of wondered what IDLE is good for, seeing as how I've already got a perfectly good command line to run python from.
Ask HN: How do you go about open sourcing a project?
I have a bunch of projects I've worked on over the years and a few of them I'm thinking about open sourcing since they're just sitting in a folder now and other people may be able to make use of them. I've never gone about it before though and have no clue about licenses and version control with community contributors. Any advice?
Interesting... Didn't think that avahi would work across subnets. I hope it works with the OSX firewall turned on and set to secure settings. Will need to test, but there are workarounds I've had to use in similar situations.
Comments moved to https://news.ycombinator.com/item?id=8649518.