skysight-inc/HackerNews huggingface dataset:
Devils advocate, wouldn't you rather have illegitimate charges waived after the fact that legitimate charges declined because their algorithm threw up a red flag? Something like being posted to HN could cause a huge spike in charges for your account in a similar way as leaking your keys and it would be beyond frustrating to see that opportunity disappear because Amazon saw your bill spike.
That SAP experience is a big asset in my opinion, and I am envious of you :-)

You know all the problems, the good, bad and ugly with SAP. You could create a product to do something better than SAP in an area where it under-serves customers.

Or create a product to improve the experience of using SAP for certain customers. Or better interfacing to other systems. There are many things you can build a business around with a massive potential global market, of companies with plenty of cash to spend (they purchased SAP after all!)

Definitely continue learning stuff you love as a 'maker'. I think if you can bridge the gap between the enterprise and cool 'modern' ways of doing things, you could be on to something.
The quick bitcoin mining spin-ups, and the initial email from Amazon about the key going public, are (probably) thanks to the github events firehose.

https://github.com/hootware/github-firehose-node

http://blog.scalyr.com/2013/10/exploring-the-github-firehose...
? Which project?

I'd be interested in whatever else you can talk about. I find this topic interesting and can see the usefulness of it (though I'm imagining something more comprehensive than this demo). The kind of nightmare that I imagined when going into this article though, was some kind of genetic/optimization algorithm that will just iterate on some text until it has achieved the optimal, "most emotionally/etc correct", communication. Obviously, this assumes some highly accurate model of people's emotional perceptions [not to mention, what the words actually mean :)], but I think it's still a somewhat scary thought.

Anyway, would love to hear more about what you're working on.
Pretty neat idea, but I'm beginning to think that Greenspun's Eleventh Law should be 'All powerful Unix environments will expand to include an ad-hoc, informally-specified, bug-ridden subset of Plan 9.'
> You really, really have to know what you're doing with EC2 because it is a loaded gun.

That's a fair point, but keep in mind the article author was given several warnings that something was wrong, but failed to correct the problem each time (which resulted in the huge bill he ultimately received).

At what point is the responsibility on the author here?
> I've seen std::ptr::null more than I ever have Foreign.Ptr.nullPtr.

Probably because we need to work with the C API a great deal right now, but that should change as more and more things are written in Rust. Still, the unsafe boundary helps by removing the ability to dereference a raw pointer in safe code - something that Haskell doesn't have.
One kid, lives with my ex-wife.

Edit: She's at my house more than her mother's because her mother works full time.

I'm guessing that the implication is that a kid makes things too difficult in terms of money or perhaps time.

On money: I just don't buy a lot of stuff.

On time: I'm awake by 4am and asleep by 9 or 10pm every night. I don't watch much TV / play many games (Netflix and bf4 / gta5 binges do happen though). I try to read myself to sleep each night. The vast majority of my free time is spent working on my games (of which I have yet to finish one, though I've only been going hard at the game development as of late... the last couple of years were spent more on learning and less on producing).
Someone should write an article on the sorry state of file system in general. ZFS and BTRFS are improvements, though still not quite there yet. But distance between user and storage still seems vast and primitive. Perhaps Seagates Kinetic drives are the future we need? (http://www.seagate.com/tech-insights/kinetic-vision-how-seag...)
I think he's sincere.
My theory is that people are dissatisfied with what the "debt to society" is. How can you blame them. If you have loved ones who were attacked, how would you feel if the criminal only got 180 hours of community service for sexual assault?

http://www.stoppa-pedofilerna.se/wp-content/uploads/2015/06/...
> Encrypt access keys in config files instead of just leaving them exposed in the config file.

How do decrypt them when you app re-launches? How do you decrypt them automatically on every instance?
> They've cooperated on frequent occasions with warrant-less surveillance requests.

If you're not talking about NSLs, please provide a reliable citation for this claim. :)

Every company that receives an NSL that passes the laugh test is more-or-less obligated to comply with it. It's my understanding that Google fights as hard as they legally can to protect the private information of their users.

Fun fact: Did you know that from 1986 until very, very recently the law of the land in the US was that emails stored on third-party servers for longer than 180 days were considered abandoned and could be retrieved -in their entirety- by law enforcement with nothing more than what is effectively a note that declared that the information was relevant to a law enforcement investigation? It's true! [0]

[0] https://en.wikipedia.org/wiki/Electronic_Communications_Priv... but also http://www.cnet.com/news/doj-we-dont-need-warrants-for-e-mai...
IANAL

Hold them accountable under the Hobbs Act for obstructing interstate commerce via extortion of business licenses? http://extortion.uslegal.com/anti-racketeering-act-hobbs-act...

Not to mention a local "business license" is shady. It seems like a major restraint on first amendment freedom of association.
My demonstration Scala automatic differentiation library: http://www.win-vector.com/blog/2010/06/automatic-differentia...
I don't think enumeration is the problem with handling error states, I think handling error states is the problem with error states.

That is to say, there's nothing wrong with null: There's something wrong with null-as-error, but it's not the blankness of the null that's the problem.

The user is frustrated by this: Errors are fixable, so more important than more types and more maybes is that the errors communicate how to resolve them and what happens next:

connection new_connection(address) {
if(!address_valid(address)) return new_connection(prompt("The given address was not correct...", address));
...

Look: The user is prompted to correct the address in an interactive implementation, but a non-interactive (command-line) instance can implement prompt() as a combination of perror() and exit().

Then consider the following:

* Start writing a large file
* Run out of disk space
* Delete the whole file and return an error

The user has been frustrated by this for decades! It should be:

again: ret=write(...);
if(ret == -1) switch(errno) {
case ENOSPC: wait(ENOSPC); goto again;
...

and yet very few languages or environments have useful implementations of prompt() and wait() despite how trivial it is (even in C)! Even fewer libraries make shoehorning correct error handling in. Error handling just isn't part of our (collective) programming culture and if we're going to change something, we should fix it right.
Natural selection at work, do not disturb.
100% agree.

OSX is not an OS one should be running if one cares about security (but then neither is unhardened Linux). Guides such as these are meaningless at best and can give people the illusion of security or worse, you can't build a fortress on top of shifting foundations.
That's a good question to ask, but AFAIK the answer is 'we tried that and so far have been unable to exploit it.'

If OBE's involved some unsuspected extension of physical reality, then when someone is outside their own body, it should be possible to learn things that would not be knowable otherwise, eg to report an item placed under a bed, out of view of the experimental subject lying in the bed. I don't know if that's been tried, but there was extensive research into psychic phenomena in the 1970s that failed to yield any useful results. If you could gather hidden information during an induced out-of-body-experience that would be massive scientific breakthrough, and such an experiment would be trivially easy to design, so why hasn't it happened?

I am sympathetic to the idea because I've had chemically-induced experiences, including during surgery, that seemed extremely real, as well as certain experiences with precognition that I am unable to explain (ie trying to apply the most rigorous observational standards to an unfalsifiable situation; I am honestly unable to explain the phenomenon but I can't exclude the possibility of an episodic delusion, so scientifically it's almost worthless).
It is vastly more destructive than IP v4. This affects end users directly, every single day. The number of times applications have crashed due to NULL related errors is probably in the tens or maybe hundreds of billions. Each time is an interruption of people's work and in some cases it destroys hours of work.
As an ex-con, these kind of attitudes really concern me! Hoping when I graduate university I can find a job somewhere that will be willing to overlook my teenage years.
Will this help detect Near Earth Objects that could possibly impact the Earth?

http://neo.jpl.nasa.gov/faq/
What features? I've never used RISC OS.
> NIL is better than NULL, but not by much.

NIL is probably the best you can get once you realize that the empty state is unavoidable. My personal problem with this kind of rant is that is full of hate but lacking in general in alternatives to represent an empty state.

The author mention optional types as an alternative. That's fine for parameters but that doesn't cover when you need to have an empty reference.
Even that's a terrible solution. AWS specifically changed their tooling to look for access keys in ~/.aws and make it more difficult to load them from inside a project directory. It's really not that hard to setup MFA and require it when using STS to assume whatever role you need to make changes. For automated changes, you can give instances the necessary an IAM role and only run those from inside EC2.

He didn't get a $6.5k bill because of a bug in VisualStudio, he got one because he didn't finish setting up his AWS account. Regardless of the public/private mixup, checking in AWS credentials to any repository is just bad practice and creates a huge risk of the exact situation that happened in this story.
Yes, you do need a license. However, you shouldn't have to have a license in Amherst county to sell your services there unless that's your primary place of business. Much like any business owner on here shouldn't need a business license from Amherst county to sell to customers in Amherst county.

If you incorporate as a single member LLC, then the IRS doesn't usually consider you to be an employee either.
You can use it where you'd use leveldb nowadays.
1. He stored credentials in source control rather than using configuration profiles as specified in the AWS SDK documentation.

2. He pushed code to a new repository without verifying the security configuration of the created repository (granted the tool made it easy to do this but you should create a repo, verify it, then push code).

3. He used his master AWS account key/secret in the code which gave global access to everything.

4. He didn't use IAM credentials with a restrictive policy set to just access the resources required.

No, clearly not security concious.

I'm a solution architect in the financial services industry and have been for 16 years. Never do I assume I know what the hell I'm doing.
> The one benefit I see is type safety but it is certainly not easier

Type safety is one benefit, but composability is an important benefit (as, you know, is extensively discussed in the source article.)
Wonder if anyone has ever thought about building a SQL server directly in a hard drive?
> Slicing Pascal-style strings is also easy and constant-time: just track the buffer, offset, and length of the slice of characters you want. Java used to do it implicitly whenever you called `substring`.

That's just coercing into a "modern C buffer" and slicing it. It has the disadvantage that coercion is not equality or subtyping - i.e. you will have to do lots of wrappings and unwrappings in mixed code.

> Every C method that takes a character buffer either a) has a corresponding length parameter or b) is avoided because of the security risks. In practice this means that C also stores the length information, just on the side instead of combined into a struct with the buffer.

You are surely talking about the buffer's capacity, not the string's length. These are distinct concepts. Anyway, functions that only read strings, and structs that only store them read-only, aren't interested in the capacity of any buffer.

Anyway, C strings aren't responsible for the fixed-size buffers of Cold War-era code - that code uses fixed-size buffers for everything. Their main claim to fame is their popularity in parsing code, which is edge-case- and bug-prone.
Typo: the second requirement for pseudo-inverses should be Adagger A Adagger = Adagger, not A.
The article contains a charming contradiction which really shows how in the end "scientific management" gets its dues: it tries to show that scientific management is so much worse than so-called "enligtened management" using... methods of scientific management! (e.g. hard metrics like sales growth).
Wow. I've been hosting with them for almost 2 years and this is the first time I've experienced an outage with them. Hopefully they're back up and running soon!
The Sleep Deaths That Inspired Freddy Krueger
I'm sorry. I didn't mean to imply employee 500. Employee #10, for example or even employee #50 could still do substantially well (similar to what you allude to in saying "the number in which employee 3 gets rich is higher")
So go run EROS. Why aren't you already?
Semi Evaluation Count-Min Sketch, Count-Min-Log and PMC (based on Go Code)
My understanding is that OOB experiences where the person gets access to information that could not conceivably be related by their physical bodily senses are quite common. There seems to be a sort of "barrier" for many people who will absolutely refuse to believe evidence of this sort.

It is really hard to "do science" to a phenomenon which seems to be willing to accommodate the faith of the tester. People who won't see it don't but if you are at all open to it it's easy to reproduce. YMMV

(BTW, if you see your body in bed don't jump out the window, jump into your body.)
voila. my first benchmarks based on my use case
https://news.ycombinator.com/item?id=10149522
It could well be. I don't have the technical understanding or time to invest in order to make a technical criticism. But I've been fighting it for a year or two, and it hasn't started making more sense yet!
Please be civil.
Discussion from 6 months ago:

https://news.ycombinator.com/item?id=9128404
I have an open source version, but it's intentionally about 800 commits behind my current work (which I haven't touched in a while tbh). If you are really interested, let's take this offline. kristopolous (at) gmail.com
well C++11 strings are just "reallocate when you look at them funny". Or you use shared_ptr and are back to square 1.
> you could be stripped of your business license, so you can’t go into business for yourself

The article of course means you can't obtain government protection for your business. You can still privately transact as much as you'd like. If you've been convicted criminally, the possibility of some direct civil liability shouldn't scare you. For instance, put your savings in bitcoin or an offshore trust and have a plan to get the fuck out of dodge to avoid debtors' prison. Obviously this isn't an ideal way to live your life, but these are our times.

Of course if the government were functioning properly, keeping a business license would be contingent upon not firing "ex-cons", since having served their time their punishment is complete. But we already know it's irreperably broken.
Perhaps. My complaint is that systemd has not started making any more sense in the year(s) I've been wrestling with it. And it hasn't given me any benefit yet.

To most of us, it's change for change's sake, which makes life worse due to the learning curve. If it made life easier for the average end user or the average sysadmin, it would have more defenders.
"I don't see why GitHub or Amazon need to hold my hand through a serious process. It would diminish the importance of what you're doing."

No it wouldn't, not at all. Not unless you're one of those, "REAL MEN us {$editor}" people, in which case no one cares about your opinion.
He could also separate code and configuration as per the docs but I suspect the hubris excludes bothering to read them...:

http://docs.aws.amazon.com/AWSSdkDocsNET/latest/V3/Developer...
Hm. So the load generator with an integrated userspace TCP stack I use at work does about 7Gbps with 100k concurrent connections on a single Xeon E5506 core (released in 2009). It's not quite the same thing as your project since it's a simpler application level protocol than HTTP. But that's still a big difference, and your architecture didn't look insane.

There are some reasons why performance doesn't scale nicely when you add in more connections, even if you've got no shared state between the streams. For example the socket table lookups tend to get more and more expensive, and you start hitting issues like frequent cache misses on the socket records themselves especially. Especially if the representation is at all bloated. So getting a number on the scalability in terms of connections would be a good idea if you intend to continue developing it.
I think your failure to use Option correctly cannot be blamed on Option alone, given that many people use it successfully.
What about the potential customers they lose?
Mind if I ask where you get your contracts? Mine have almost all been recommendations from past clients / colleagues. I also joined gun.io a while back but haven't been able to drum up work from it.
Yay! Yet another Microsoft framework that nobody cares about.
> which ignores the stomach's efficiency in absorbing calories from ingested food (calories in), as well as individual metabolism (burn rate at rest, efficiency of caloric usage). Some people can absorb calories from food more efficiently than others, one theory with some scientific support is it is due to different enzymes in the digestive system.

But that changes nothing.

If you're a person that is bad at absorbing calories from food, then reducing the amount of calories you eat below what you burn will make you lose weight.

If you're a person that is very efficient at absorbing calories from food, then reducing the amount of calories you eat below what you burn will make you lose weight.

There is no difference. We're talking about a car that gets 30mpg and one that gets 50mpg. It makes no difference to each car, the only thing that matters is if you put in more or less gas than you use per day.
> NULL isn't even visible to end-users

In the same way HIV isn't visible; sure, the cause isn't visible to most people, but the adverse effects are.
I know Postfix supports lmdb instead, format from OpenLDAP http://symas.com/mdb/
This March 2015 post lists some known work items, http://www.joelroberts.org/openbsd/

- Kernel hangs when bringing online additional cpus--no working SMP
- PV drivers for net and disk needed. Probably easy to take from NetBSD
- System needs testing for stability

An old (2012?) comparison of 4 BSDs on Xen and KVM: https://gmplib.org/~tege/virt.html
Isn't COW a fundamentally hard problem? How does one expect a complete, comprehensive solution?
Is it common for jurisdictions in the U.S. to require licenses to do any kind of business? Seems pretty crazy. In the UK there are very few businesses that require licenses. Mainly ones involving alcohol or gambling.
Not incompatible, but less compatible. When you don't have dependents you can afford quite a bit more risk which goes hand in hand with a less structured work life.
How Early Academic Training Retards Intellectual Development
> It is not that some sort of error is made to be small by making the grid more fine, rather the coarseness of the grid is simply to aid visualization.

Indeed, if one were trying to understand, say, the locus of e^(x + y) = x^2 + y^2, which is an unfamiliar shape then I would say by all means to discretise it; that's what visualisation software would do, after all.

However, conic-section analogues defined via linear constraints on distances will, in the taxicab metric, always consist of unions of line segments, and it seems to me that discretisation is likely to hurt, not help, visualisability of such shapes.
Albeit not on AWS, I typically just set environment vars to reflect configs I would have set in a .env (or .local.env, or .testing.env), or have some sort of config manager daemon type thing running that keeps that sort of stuff locked away.

> He didn't get a $6.5k bill because of a bug in VisualStudio, he got one because he didn't finish setting up his AWS account. Regardless of the public/private mixup, checking in AWS credentials to any repository is just bad practice and creates a huge risk of the exact situation that happened in this story.

I agree
This is just batty.

Bread doesn't taste at all like sugar does, it doesn't metabolize at the same rate, and to the best of my knowledge we aren't using it as an additive to flavor nearly every other food we eat.
Actually we are talking about a plateau despite maintaining an apparent deficit from an orally consumed calories perspective. Why does this plateau happen? Please don't be disingenuous and claim I am implying magic and that you can live without food, you know that isn't true.
A similar problem is God's Coin Toss as described in Scott Aaronson's excellent lecture series (and book) "Quantum Computing Since Democritus":

http://www.scottaaronson.com/democritus/lec17.html
No mention of SQL, where NULL's behavior in the standard can lead to some quirky behavior that I've seen bite back in poorly designed systems. I've included a brief illustrative example. The expectation is that the UNION of two WHERE clauses, one using IN and the other using NOT IN should be equivalent to the same SELECT without any WHERE:

WITH NullCTE AS
(SELECT a.*
FROM
(VALUES (NULL), (1), (2)) a (Number)
)
,One AS
(SELECT Number = 1)

SELECT *
FROM NullCTE nc
WHERE nc.Number NOT IN
(SELECT Number
FROM One)
UNION
SELECT *
FROM NullCTE nc
WHERE nc.Number IN
(SELECT Number
FROM One)

Running this will give you back a two-row table, containing 1 and 2, but the NULL is excluded from both WHERE conditions.

The naive expectation is that the combination of a condition and the NOT of that condition cover all possible circumstances.
Well in the US, "sex offenders" (including public urination and some people not actually convicted of doing what is alleged) are marked for life and need to inform their neighbors of their shunned status whenever they move. (On the down side, some people like me don't take "sexual offender" status seriously because it's so often mis-applied.)
A more in-depth look at BerkeleyDB is available at AOSA (http://www.aosabook.org/en/bdb.html)
You can, but the existence (and use in libraries!) of Maybe is still bad for the same reason having 'null' is bad. It's an anti-feature that would enrich the language by not existing.
Maybe it's really an argument about this:

Upon awakening:

Halfer:

P(monday,heads)=0,5
P(monday,tails)=0,25
P(tuesday,tails)=0,25

Thirder:

P(monday,heads)=0,33
P(monday,tails)=0,33
P(tuesday,tails)=0,33