jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
I found this "blog post masquerading as a white paper" quite insightful. I would recommend to start reading at "2. HOW CAN WE MAKE PROGRESS?".

The way the authors breaks security down into a "hierarchy" of 3 different strategies to remove vulnerabilities from large, complex systems was particularly insightful. And also highlighting the different "distractions" that people chase down.

As a developer, I have definitely chased the "distractions" mentioned. As a security engineer, it's helpful to have the frame of reference the author pitches in the article.

This was linked from this[0] post the other day and I felt it deserves it's own post on HN. :)

Bonus Points: If anybody has any additional papers/posts to continue chasing down this style of writing code via dataflows and by partitioning code along "trust boundaries", I would really appreciate it!

[0]: https://tailscale.com/blog/modules-monoliths-and-microservic...
Code I came back to 8 years later felt genuinely alien. Otherwise I can come back to something 3 years old and remember the general architecture, but gritty details start fading after a few months.
> It's almost like reading has been elevated to a kind of rare alchemy, whereby you can unlock secret cheat codes to life

I owe my career and livelihood to my ability to study, learn and retain information, and manipulate words and abstract symbols. In other words, to reading. Reading well, and quickly, is a magic superpower with practical benefits.
Have it specified in a config file, and provide presets for common configurations (e.g. last line and exit code in SMS but full log in email).
I actually built a movie watchlist and todo list for myself using Django and tmdb. It's live, and the code's on github.

http://movies.tshaddox.com/

https://github.com/baddox/watchlist2

edit:

The code's probably not very "pluggable" or "reusable," since that wasn't a design goal :). It's hopefully readable. Feel free to recommend a film (just search for it on the right sidebar).
It depends on the browser. Safari 5 works, but Chrome doesn't, not sure about Firefox, and I suspect IE doesn't.

I use it on my torrent-conversion bookmarklet on http://hid.im.
Exactly, ethereum is "pushing the borders" on a "border" of bitcoin that noone seems to be running into yet, or caring about, anyway.

Once multisig is used more heavily in the bitcoin world then maybe a better case can be made for ethereum becoming a success (though I nonetheless find ethereum tremendously exciting, from a pure technology standpoint)
Okay so we lost:
Banshee (Media Player)
Shotwell (Photo Manager)

the programs were coming out quickly and looking great then FUD.
He did forget to mention Terraform, a tool that suffers from none of the problems he mentioned. And I'm sure there are other DevOps tools that handle state management.

All these tools have to deal with the problem of state. Most of them choose to handle it implicitly...the state of the system is the state and the tool tries to determine it at runtime. This strategy has all the problems listed in the article. Other tools attempt to keep a record of the state. This solves the issues from the article but has it's own set of issues (mostly state management and state corruption). Neither approach is objectively right and both have their tradeoffs.

I honestly agree with the original, down-voted, poster...the article is a bit preachy without much insight. The rise of DevOps has turned system administration into a CS problem. And, like most other CS problems these days, it all boils down to managing state. And just like there are many approaches to state management in application architecture (RDBMS, NoSQL, Paxos/Raft, etc) where no solution is objectively right, there will be many approaches to state management in DevOps where no solution is objectively right. The author obviously has his preferences, but his analysis is biased and incomplete and should be called out as such.
Leaks of personal information are only painful because the CC processors don't bother much with security. If they start paying attention, leaks will only get less painful.

With Bitcoin, you either have to trust a third party to supervise your transactions or have a really solid understanding of the protocol. And you have to be very security conscious to handle more than a few coins.

Anyway, like I said, time will tell.
You can even do it in POSIX C with dlsym.
If you want to build one of these, check out this library:
http://www.secdev.org/projects/scapy
These are usernames and passwords but your sentiment is correct. Something needs to be fixed there too. First thing is for us to develop good password habits and stop using the same one on several sites.
It's as if you've never been told "you should incorporate to limit your liability" before.
And whatever they miss in the third option they’ll shove it in a fourth one then a subsequent version they’ll do some infuriatinng consolidation between the two that will drive users mad even more, the tutorials will be pointing users to all sort of methods that no longer work. That’s the way Windows’s been. Every other 2 iterations they eventually got it working but the disaster inbetween was the most frustrating experience. No wonder people held onto older version of windows until they no were no longer supported. Upgrading wasn’t worth the wased time most of the time
Probably it's because porn is blocked and the average Iranian would search in Persian and not English, so possibly Google trends didn't have the Persian terms.
A couple strikes per month [1] in response to Syrian missile batteries shooting down Israeli planes is not particularly comparable with threatening to wipe a country off the map. Most of these aren't even direct attacks, Iranians are killed in the crossfire because they're supporting proxy fighters in Syria.

1. https://en.wikipedia.org/wiki/Iran%E2%80%93Israel_conflict_d...
Please don't post like that to HN, no matter how obnoxious someone is or you feel they are. It only makes things worse.

https://news.ycombinator.com/newsguidelines.html
Very interesting overall.

> Apple allows booting unsigned/custom kernels on Apple Silicon macs without a jailbreak! This isn’t a hack or an omission, but an actual feature that Apple built into these devices.

Indefinitely? How do we know it's a feature vs a temporarily convenient oversight?

> Our goal is not just to make Linux run on these machines, but to polish it to the point where it can be used as a daily OS. Doing this requires a huge amount of work to be done, as Apple Silicon is a completely undocumented platform. In particular, we will be reverse engineering the Apple GPU architecture and developing an open source driver for it.

This looks like the major bullet point. The wiki is currently empty, but while it's WIP, it would be nice to see some of the major milestones or breakdown of the goal mentioned above.

Best of luck to Hector and the contributors!
I don't understand why everybody is concerned about the settings or the control panel interfaces. Is that really what you're dealing with all day? I spend as little time as possible messing with that stuff.

Does it run your apps? Is the window management bearable? Are things running fast and responsive? Those are my concerns.
Have you missed the multiple recent occasions where the US green-lit Moussad assassinating Iranians?

We live in an Anocratic[1] world. You have to judge Iran in that context.

[1]: https://en.wikipedia.org/wiki/Anocracy
It's out of print, but try to find a copy at a used bookstore if you can.

http://www.amazon.com/Lincoln-Dale-Carnegie/dp/0899683207
OSS isn't a company. If there is a foundation or a person who will do more if you give them money: Then give them money if that will help you.

Lots of OSS is just stuff dumped in github or the like.

Honestly the best contribution is paying your devs to give back patches!
The existing satellites have been in service too long. It is a "replace it or lose it" question.

It took me a while to find out why they are more accurate, I eventually found this quote: Greater accuracy is a product of advanced atomic clocks in the new satellites, Torok said. I think it's safe to safe that tiny atomic clock technology advanced in the decade between the existing satellites and this round.

They added a new military signal, presumably jam resistant. (It has a "spotlight" antenna that can provide a 100 times more power to a fighting theater. I'll see your alibab.com gps jammer and raise you 20dB…)

They also added another civilian signal (L5 - safety of life) which presumably has a purpose, but darned if I can find it. Probably related to different frequency, more power, different coding, something about the ionosphere… my guess is that it won't crap out at the same time the other one does from interference.
We don't have coroutines yet. Maybe in another 5 years javascript make it all the way to 50 years ago.
> This country was founded on checks and balances.

No, it wasn’t. It was founded on an impotent central government. It later adopted checks and balances when it decided it needed a much more powerful central government and what it was founded on was unsuitable.

But just because US Gov 2.x lasted longer than 1.x doesn’t mean everything in the 2.0. release was perfect; its certainly needed many minor and bugfix releases, and there’s no reason to think that it might not at some point need another ground-up rewrite.
Agreed that open by default is bad once you start building APIs, but it’s pretty easy to register a default policy to require authorization and override it with AllowAnonymous or other policies as required.
Can they do both, though?
IMAX 3D uses linear polarized light, whereas RealD uses circularly polarized light.
OK, now cover one eye and try to play tennis. Or throw a small ball in the air and try to catch it. (no really, try it)
http://en.wikipedia.org/wiki/IMAX#IMAX_3D
Wikipedia suggests that IMAX 3D uses either linear polarization or LCD shutter glasses. Obviously 2-D shutter glasses wouldn't be very practical, but the polarization glasses (which I think is the standard?) should be just as feasible as the circularly polarized glasses used by RealD.

Come to think of it, normal polarized sunglasses should work as linear polarization filters assuming they line up the right way.
I run Linux mostly which flash is a bit of a dog on unfortunately.
It says my github username is invalid. It's the same as my HN name. Are numbers a problem?
Nor do they allow people with iPads to view any part of their site, even pages presumably unrelated to playing music. Why? Just, just why?
Does that include private gists?
In my case, none of the links to their site go to the advertised page any more. If I click on one of their search results, the respective home page loads but never the article.. That bug's gotta be decimating their traffic.
According to Gartner:"An important evolution in the market is the as-yet-unsuccessful attempt to create a single business application that joins two sets of capabilities, such as the following:
A customer record, the database and business process rules that enable agents
The communications and context routing (for example, email, chat) that enable customers"

NABD has made a good progress in this direction with its integrated BMP engine, routing rules engine, collaboration framework, and multi-channel unified experience.
The point of React is to mix HTML and JS together. They deliberately mix templates with logic, which is actually the main inspiration for Riot.

But we felt that what React does could be simplified. We didn't need full diffing and batching of HTML and we didn't like the verbosity on how components are created.

minimalism is where Riot starts from.
Fantastic intro doc. I read the entire thing without really thinking. I like the aim, and I think I could learn to accept the weird looking javascript floating in the root node (though I think it might look easier on my eye if wrapped in a <script> tag, even if that tag is redundant)

But, I would _really_ love to see some render time benchmarks with large (2K+) loops adding/removing deeply nested nodes. This is where React really shines in my opinion, and I'm struggling to believe that Riot can compare with the implementation described.
Telegram's protocol is open source.
Likely the same way it's done in every country that uses the 24 hours system (rather than the mostly Anglophile 12 hour system):

If it's used to indicate the end of the day, such as the end of a time range within that day, use 24:00.

Anywhere else, use 0:00.

For example, if you want to say "free parking between 10 pm and midnight": 22:00 - 24:00

If you want to say "free parking from midnight to 3 am": 00:00 - 03:00

I hear in Japan train schedules actually use (or used?) numbers higher than 24 for the edge case of needing to indicate "3 am of the next day", e.g. 22:00 - 27:00, but I've never seen that elsewhere. In Germany that would simply be "22:00 - 03:00" with the date change implied (for timespans equal to or larger than 24 hours you would need to indicate the dates in question anyway, so it's not ambiguous).

In short: "Friday, 24:00" is equivalent to "Saturday, 00:00" but implies you're talking about something that happens on Friday (such as a deadline ending "Friday night").
1/10 or 1/4 doesn’t really matter if they manage to keep up 300% growth for a year or two. And there is still a lot of room for growth.

As for where Coinbase can go - it can take the Wallstreet on in terms of trading securities (security tokens) and derivatives - the whole DeFi market which is what Internet was to publishing companies.
Just speculating here, but what if they might have some solutions for our problems here on Earth? Perhaps they passed our evolutionary stage and have some insights into our possible futures.
The author misunderstands some of the complaints against Apple. In this case: (1) Apple is effectively a monopoly, much more so than shopify. (2) the author can still sell to customers your SAAS service, just not through the shopify store. (3) I could be wrong but I believe the shopify store brings lots of customers. For most developers on the app store, apple does not bring customers (this is why many people argue that apple might take a higher cut for those who find your app on a chart, and a lower cut for just using the link or branded search).

If they don't believe the inbound flow is worth it, then just selling direct to customers should make sense.
Have you read the paper or website? Taler explicitly envisions exchanges as regulated and audited entities.

The central bank should audit exchanges, and it even provides mechanisms to make this simpler. One leg of the exchange runs on traditional finance rails (ACH) as well.

It isn’t anyone can be a bank, it is “regulated audited entities should be able to exchange a ACH transfer for digital tokens”.
It's so weird to me that here, on hacker news people have such a hatred of coinbase.

Coinbase is a YC company, and if some of the predictions are accurate, will be the highest valued YC company so far.
Google Maps has been playing catch up for the past year on features Apple Maps added in 2018.

https://www.justinobeirne.com/new-apple-maps
It's in his personal name not A16Z
I've been using DO for around 6-7 years now. Really happy with the services overall. I hope nothing changes after IPO'ing.

The only complaint I have with them is DO Spaces. This service seems to have issues related to degraded quality pretty often and there's so many horror stories of load times taking hundreds of milliseconds to serve content from their CDN if you Google around for folks using Spaces. I'm looking forward to the day where Spaces is as good as S3 because DO's offering of Spaces includes not only an object store but a free CDN on top. Seems like a good deal for $5 bucks a month if it were dependable.

It's weird because every other service I use by DO has been top notch.
Seriously though. It's proper B2B, not Facebook ads. The fact that the Shopify platform is so customizable that it allows integration of 3p billing says a lot about how they view their customers.

Salesforce uses a similar model
The irony is that this is why foreign aid never works. It's mostly spent on weapons and if there is no foe the government can just use the weapons to suppress its own population and thus ask for even more foreign aid.

Developed nations don't care because their defense contractors get the money.
I recently read William Gibson's "The Peripheral" and I really liked it. I think it's one of his best.
Shoreditch? /sigh
Yea, I know it's a "startup hub", but it's also a bit dodgy.
Many elderly suffer from amyotrophia, I doubt this being usefull device, except for people which are disabled.
I know this sounds negative, but yet another "Easy Project Management"?

More constructively:

- you should have a link to a pricing page up front.

- you should have a tour (with screenshots)

Good luck!
Accept my beta request!!
Unfortunately, this last AWS problem affected multiple AZs in the us-east region. The OP very well may have had an alternate AZ failover plan, but like Quora, Sencha, Reddit, FourSquare and Heroku, they probably kept it region specific.

As for backing up to multiple regions, I can imagine them thinking that sending everything over the public internet as being a bad idea. However, not having a multi-region/multi-provider failover plan was a worse one.
There was a similar thread couple(?) days back, PG replied. Search.
Kai, I think it is a great idea for you to post here. One suggestion that I have is that you improve your portfolio. Looking at it, I just don't get a great feeling with regards to your potential in HCI.

Maybe I'm expecting too much from an intern candidate, but in the arts I would still expect a lot of personal projects that were more thought experiments. Like here is my idea for a redesigned amazon that I did for fun.

One other thing is that in a startup they might not have any UX people to learn from. What is your goal in taking an internship? To prove your worth? To learn from those more experienced? To have fun? etc
Not really that risky. If it was a naked call like in markets, then it would be really risky, but in this case you risk very little since there is no contractual obligation to send the actual book if you can't get it. You can reimburse and call it a day.

The calculations would have to consider the probability of not getting the book under the price of sale, the probability of not getting it over price of sale (investing the difference in avoiding a bad rating), and the chance that you won't receive a bad rating just for reimbursing it under whatever excuse. You can also ponder taking a bad rate eventually.

In other markets you'd have to basically get the book at any cost, which would make it really risky.
Their website for credit cards is my favorite of any I've tried. My least favorite by far was Chase when I had the Amazon-linked card.
XDC 2018 - Lyude Paul & Alyssa Rosenzweig - Introducing Panfrost

https://www.youtube.com/watch?v=qtt2Y7XZS3k
Is Gumroad your only gig?
I am bullish on Bitcoin. In the words of Elon "The best part is no part". Bitcoin gets rid of monetary policy. Think of all the wasted effort to maintain interest rates at a level that some economists come up with. Monetary policy will only result in some sort of inflation. Just delete all of that nonsense .
You vastly underestimate the production gap between those two drive types. There were likely at least a couple of orders of magnitude more 3.5" drives in use in their time than 5.25" drives were in theirs. I remember my last 5.25" drive costing ~2x more than a 3.5" drive in the mid-90's. Also, widespread 5.25" drive usage ended 10-15 years before 3.5" drives were superseded by flash.

3.5" was also the last widely used removable magnetic disc and used by virtually everyone for a time for backups, in all kinds of industrial devices etc the way microSD cards are today. Sure, there were Zip disks etc. but those were typically add-on devices and had a degree of compatibility issues vs 3.5" drives which were standard equipment for well over a decade whether you wanted them or not. So the majority of computer users from that era (as well as any still in service equipment) are most likely to still have, and possibly need replacements for, 3.5" drives since they most likely switched over long ago and have been a rapidly dwindling replacement market vs 5.25" which was pretty much dead by the early 90's.
I've been involved in Bitcoin since 2011. Very few use the LN, most payments are still using the blockchain. There are lower cost options to BTC, but adoption has been slow due to the politics of crypto.
A better engineered solution is always a better solution. What he is describing is over-engineering.

I am failing to remember who said: the perfect racing car falls apart the moment it crosses the finishing line - all others else are over-engineered. The point is that good engineering is appropriate engineering. All the things that PHBs sometimes think off as the geeks going off on their own obsessions - maintainability, clarity of design, low fault tolerance, high scaling ability - these are either good engineering or over-engineering depending on the stage of the lifecycle, the purpose of the project (air traffic control systems anyone?), the future staffing estimates and so on.

For example in my own area of acedemic-(ish) software engineering, maintainability absolutely trumps delivery dates. Clearly, if you are chasing ramen profitability, it may not.

Context matters.
Nice work! Since you mentioned you're looking for RNNs/LSTMs specifically: the implementation at https://github.com/skaae/nntools is an extension of Lasagne (which used to be called nntools) and will be merged into the library at some point. Hopefully in time for the first release, but we don't know yet if that will be feasible.
Blog post from GitHub related to this.

https://github.com/blog/1981-large-scale-ddos-attack-on-gith...
It's the same story everytime a pedestrian zone is introduced in some town in Austria. Shop owners complain loudly that they'll lose customers, but as soon as cars are banned pedestrian traffic explodes, revenue increases, and a lively city center emerges.

Yet it takes years (often decades) of discussion for a single road to become a pedestrian zone, because all those people fail to see how benefitial pedestrian zones have been every time that they were introduced. I don't even think it's only because people love their cars, I think it's just a general fear of change.
I also built a tutorial around the same idea a few weeks ago, with a similar domain name, but aimed more at complete beginners than this site. My target audience would be graphic designers who want to get into web design, but don't have a clue where to start.

I stopped after writing one article because I didn't get much interest, but then I didn't put much work into publicising it either. If people found it useful I'd certainly like to keep adding to it until it explains how to go from never having programmed to building a website which can take payments.

You can find it at http://makethispage.com/chapter-1.html
I'm personally not a fan of rally - I've seen it in some larger environments and it really was a bit of a pig that felt like it was there to serve project managers and not the users. it tried to do too much and the UX was quite poor, buttons everywhere etc... A bit like jira.
Looks to me like it's time for a DDoS X-Prize.

1. SSDP Flood 21%

2. SYN Flood 19%

3. UDP Flood 13%

4. UDP Fragment 12%

5. NTP Flood 8%

6. GET Flood 7%

7. CharGEN Attack 5%

8. DNS Flood 5%

9. ICMP Flood 2%

10. SNMP Flood 2%

Eliminating these 10 attack vectors would account for 94% of DDoS attacks according to this visualization[1], as witnessed by Akamai over the last 30 days. Just the top 3 is more than 50%. Seems like a reasonable start on a way to measure success.

Who'd like to sponsor? Or should I just spin up a GitHub repo for the code and a kickstarter for the prize money?

[1] http://www.stateoftheinternet.com/trends-visualizations-secu...