skysight-inc/HackerNews huggingface dataset:
Ask HN: Use individual VPS for each client or one dedicated server
hi HN, just interested in some opinion on running a multi tenant saas. The platform is provided to a client with their own server/database due to the nature of the business. However, for situations like these, do you recommend setting up every client on a single dedicated server (very powerful) OR perhaps using smaller but individual VPS ? Lets say for 100 clients, would you setup each client on their own VPS or will you set all 100 on your single dedicated server ?

Of course, both ways are fine and possible. Just wondering if any of you has dealt with this kind of setup/decision ?

For example, if all clients are setup on a single dedicated server, all of them could go down at the same time if for some reason, the server is down. Of course., with individual VPS, this may not happen but then managing each VPS could add to more work ?
I think this is a little reductive. Andy Rubin left Google to form a startup incubator that's focused on hardware and robotics (playground.global). He definitely has interest in it.
Introducing Backblaze  B2 Cloud Storage
You choose the flat paddock for economic reasons, and then fortify it as best you can.
Apple Music for Android Now Available in the Google Play Store
But protocols and mulitmethods are different from OO in the sense that the functions are decoupled from the state. You don't store state in a protocol, you just define an interface. That's pretty different from the way most people think about OO in c++, java, swift, objective-c, etc. In Clojure, you have Records and maps, which hold your "state" or your values, and you have protocols which define your functions, and the two are isolated from each other and not attached in any way. That's quite different from OO in general, don't you think?
Yes, but the original poster indicated that a masters from an American institution is typically required for STEM workers from developing countries. Only the wealthiest, not necessarily the best, can afford those masters degrees.
What ? Of all the languages Java is the most likeliest to be around in 2100.

It is the lingua de franca of enterprise software development. In every sense it is the modern day Fortran/Cobol.
I'd say "promise of future status and material rewards" rather than "threat of poverty". The threat of poverty strongly induces very risk adverse behavior. One of the necessary conditions for a country to produce a silicon valley is that they have sufficient material wealth that poverty isn't a risk.

But yes, once you have the money and the fame, you probably won't be as driven.
Why not just increase the fees for companies that are filing a lot of H1B applications? For example, they could charge 4000$ per application for the first 100 applications and then increase it to say $8000 or $10000. Companies that are taking advantage of this, would be discouraged due to the higher fees. At the very least, it would bring down the number of applications from these companies and would increase the chances of other smaller companies.
Ok so I'm searching trying to work out how to get the cert for my blog pinned in Chrome or Firefox so that readers of my blog can detect the NSA MITMing them even on the first visit, but I'm not finding anything.

Maybe I'm just using the wrong terms, but as far as I can see the number of sites pinned in Firefox is tiny: https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinn... and there is no process for getting sites added to that list.

Could you give the address for the form where I can get my site pinned in Chrome?
Hah, I completely misread 'ownership'!
>Unlike human names, which aren’t usually unique, parrotlet and dolphin signature calls typically are. “Every call is different, which suggests there is no additional meaning except to signal, ‘This is my identity,’” says Janik. On the other hand, there are almost 45,000 humans named John Smith in the US alone—so we need additional information, like social context or that person’s voice, to figure out who they are.

But hearing a person say "I am John Smith from Anytown, State, USA" would readily identify them and be a more similar comparison to the dolphin calls. If we take their assumption that there's no information content other than the sound, then sure, the comparison would be every John Smith singing a particular song.

Either way, that's just saying dolphins are better at hearing than us, which is less interesting.
Security fixes is the key part of support, to be fair. As long as a platform is getting security fixes, it's supported. But I imagine the user share on Vista is very low, it had nowhere near the level of adoption of XP or 7.
Put up or shut up. ;)
>hire someone with a PhD and years of experience to be a "web designer" (a very highly paid one, making 70k!) on paper but who actually does complex distributed systems that happen to serve web pages.

I worked at a law firm that specialized in immigration and that's exactly what happens. They deflate the title and experience and claim much less than they could/should. The employee doesn't protest because they are still coming out ahead from where they were. All the biggest tech companies are doing this too.
Conspiring among themselves would be sufficient for this usage.
I don't see how any of it would apply to one time licenses. It's a good rule about subscriptions, but that's all.

Personally, I think it's fair to change your business model in any way that won't deceive your clients. Asking for a subscription and not maintaining the product will deceive them.
I am not sure if Clouflare would advocate this use case, but quick DNS is actually a crucial part of a quick loading site, and it is surprisingly hard to get reasonably priced high performance DNS. I have been using Cloudflare just for DNS for my hobby site and it has been working great.
$50k would be the retail cost. The guy got his for < $4k.

> Our technological advancements also tend to raise the amount of "the sky is falling" paranoia.

I've noticed that too. I don't want to sound paranoid about technology in general, and I'm not worried about terrorists doing their terrorist things. I'm worried what an average random individual could do, whether by accident or on purpose. Most of the popular dangers don't multiply the power of an individual enough. But biotech does.
An infinitely long website where any part can be edited by anyone
For those in the know: how is Tumblr been performing under Yahoo? I've read that the CEO of Tumblr was distanced from Meyer, by placing him under another Exec, but I know little of what their grand plans are.
> The ironic thing is that attorneys make mistakes too - happened to me and a handful of people I know.

I commented on this above, but it nearly happened to me, too. We picked an immigration attorney to look over our paperwork, just to make sure we didn't make any glaring mistakes. While we did get some good suggestions, they missed something pretty big that we found on both the official government documentation and a number of forums, and had decided not to go with their services anymore. Luckily we caught it prior to submission.
The Discovery of Statistical Regression
I also use several libraries that don't have a decent (or any) doc, just docstrings in source code and I kind of got used to it now, or, as Emacs puts it:

Code never lies, comments sometimes do (Charles de Gaulle)
Check out Freebird – the social utility for IDEAS
Rumblr: Casualty-free casual fighting for free
"Collisions are when two different inputs hash to the same value, which breaks the security of the hash function"
This is so wrong. Cryptographically secure hash functions merely claim that the probability of a collision is low. By your definition, it is impossible to find a secure hash function that works on an arbitrary input size.

"If a hash function is cryptographically secure, it has the property where finding collisions is infeasable, which makes it suitable for evaluating equality." This is so wrong.

It has a high probability of evaluating equality but in no way is it suitable. The primary benefit that cryptographic hash functions offer is that it is impractical to conduct a chosen plaintext attack.

"This is why cryptographic hash functions are used as a proxy for passwords in order to avoid storing the plaintext."

This is true, and is due to preimage resistance and the infeasibility of a chosen plaintext attack.
Wait, do people typically use slugs with uppercase letters in "the real world?"

In the example given, using an uppercase P doesn't even make sense from an aesthetic standpoint.
The best part about the auction model is that you could have it monthly, and then the winning bid would be fairly well known in advance. Say it's 80k for a software developer, you know that you need to pay the guy 81k or don't bother. This also massively reduces the power of the wipros of the world that employ thousands of people and apply for all of them every year, filling up the quota for people that don't already work for an outsourcing company.
The biggest American value is its diversity, which create the liberal values and progressive society that you guys have (otherwise American will just fight to the death if they don't accept each other values). Claiming something to be "American value" and then use it as a mean to cultivate a homogeneous culture seems to be a good way to turn conservatives.
Using Prediction Markets to Enhance US Intelligence Capabilities
Technical Debt – Bad metaphor or worst metaphor?
Just to be clear, there are 3 different things:
* Backblaze Online Backup - $5/month unlimited backup for Mac/Win; automatically does client-side-encryption
* Backblaze B2 Cloud Storage - $0.005/GB/mo for object storage (lower cost than Glacier, but we don't yet offer a client, though others are building)
* Backblaze Storage Pod - the hardware that underlies both of these, which we also open source for anyone to use

Gleb from Backblaze
It's a list of commodity parts and some drawings. If you use this information to build your own pod, who would know and who would care?

If you start selling them as your own product, maybe that would be an issue.
Maybe Americans could stand to think critically about where they work.

I work for a nonprofit here in the states. I make roughly half of what my friends who work for large companies make.

On the other hand, I recently spent 2 weeks of vacation in Europe, followed by a professional conference at a large European university. (20 days total). I was not expected to work or check email while on vacation, and my supervisors viewed my job at the conference itself to be to present my research and network with professionals who can assist with our mission, not sit around in a hotel room catching up on email.

As a bonus, I know my work helps people instead of lining the pockets of the upper classes.

Frankly, it astounds me that so many people fixate so much on salary. (Hourly rate is a better heuristic. Talk informally to your friends about their salary and hours, and do the math yourself.)
Yeah. They say Microsoft won't provide "active support," so maybe that's why Vista is not included?

It's probably mainly because Vista has a relatively low market share: probably lower than XP. It's thus not worth supporting as the earliest version of Windows they support.

Edit: Just checked. Windows XP lost non-extended support in 2009, whereas Vista lost it in 2012.
Oh nice, I hadn't seen that! Need to look more at it's data sheet.
> Just been hacked through this method and cannot believe

> ... that they don't even MENTION the security

> concerns from the quickstart guide>

> http://redis.io/topics/quickstart

??

Like the 'Securing Redis' section from that link?

Securing Redis

==============

By default Redis binds to all the interfaces and has no authentication at all. ...

1) Make sure the port Redis uses to listen for connections is firewalled...

2) Use a configuration file where the bind directive is set ... [to] as little network interfaces you are using...

3) Use the requirepass option ...

4) Use spiped or another SSL tunnelling software...
On the other had, Google could kill Go tomorrow...
No, not at all. You seem unclear on the concept.
Text of the Abstract:

"Retailers regularly target users with online ads based on their web browsing activity,
benefiting both the retailers, who can better reach potential customers, and
content providers, who can increase ad revenue by displaying more effective ads. The
effectiveness of such ads relies on third-party brokers that maintain detailed user information,
prompting privacy legislation such as “do-not-track” that would limit or
ban the practice. We gauge the economic costs of such privacy policies by analyzing
the anonymized web browsing histories of 14 million individuals. We find that 3% of
retail sessions are currently initiated by ads capable of incorporating third-party information.
Turning to content providers, we find that one-third of traffic is supported by
third-party capable advertising, and the rate is particularly high (91%) for online news
sites. Finally, we show that for many of the most popular content providers, modest
subscription fees of $1-3 per month charged to loyal site users would be sufficient to
replace ad revenue. We conclude that do-not-track legislation would impact, but not
fundamentally fracture, the Internet economy."
Any good chatterbot has a script or set of scripts to answer questions about its nature, relationship to its creator, etc.

The presence of a delay does not mean there is no A.I. there. Not everything is as fast as Google search, for instance IBM Watson would think about a problem for a few seconds, which is fine because it only needs to be about as fast as a human.
Tokenization could be the Trojan Horse that will break the credit card rails
The thin font and lack of contrast gave me a headache.
You may love your side projects. But we don't love the contrast of the text on your blog. Come on now, no light gray text on white background!
When Members of Congress Miss Votes, and Why
But they don't try to convince you M is a human. Indeed the opposite. So it would be rather stupid to add typos to an AI, when you want people to see it as an AI
SVG Girl (2011)
Supply of developers that meet the high (whether justified or not) bar of those companies is low.
Yes.

One of my projects on GitHub is "UIImageColors", so if I were to create a gh-pages for it, the link would be jathu.me/UIImageColors.
This is a poster child for the value of raising money vs solely bootstrapping (I hope DHH doesn't downvote me!) It appears this added $60,000 ARR. I'm not sure how big the market is (TAM would be all Stripe subscription users?) but assuming it's 10x of what they found in just 60 days and growing (as Stripe is growing) Therefore are you looking at $500,000 to $1 mil more per year if properly resourced to go after this opportunity? Raise $1 million to staff up for it; the good news is you have real data now.
Local private cloud storage is going to be huge. Any new startups in this space hiring?
We've had to deal with an onslaught of of free users at our startup https://glyphs.co/ quite a bit over the past few weeks: last week we took in something like 4k new user accounts.

I'm definitely a big fan of freemium, and specifically I really like limiting accounts by features (less by usage), but I think it's 100% imperative to control the rate at which new users are given access to your system. We're currently in beta which makes it easy (by only allowing users at our pace) but I think in your case (given the amount of processing required) it would have been very advantageous to build a line for the free account and let people wait for a bit. That builds demand, lets you control user-flow, and people who are very interested can pay to skip the line. Anyhow, just my thoughts, obviously every scenario is different and you guys know this area best.
> Eh? If I go on eBay/Aliexpress and order some consumer good, the only worthwhile thing I'm going to receive is the amazement at seeing exactly how far they skimped. I doubt choosing a more expensive listing would yield a better result.

I agree about Aliexpress (but note that general wisdom is, you don't buy consumer electronics there - on the other hand, electronics components like sensors, ICs, etc. are of perfect quality there). But most people in the West don't buy on Aliexpress, nor do they even know it exists. The general population's experience with Chinese manufacturing is all the crappy products they buy locally, that have the iconic "made in China" phrase written somewhere. Here you can blame the actual western companies that ordered production of this stuff.
It does, OTOH, mean that it is irrational to draft business contracts on the assumption that your counterparty is going to conduct themselves as one, absent some extraordinary evidence that the particular circumstances are unusual in that way.
The number mentioned is not "for me", but for the sake of (the surprising amount of) peers who commented offline that 120~150k/year is "asking too much" for a practically unique set of expert hands.

But you are right: I am not making the situation that I am "about to walk" clear enough, despite the longish writeup in the campaign body. I'll look into remedying this soon.

Thanks!
But Backblaze is for backup. Dropbox.. isn't.
Real Numbers: Asian Women in STEM Careers an Invisible Minority in a Double Bind
Great point -- if a system has a good probability estimator it can send questionable answers for review to raise accuracy up to the commercially useful level.
What I find astonishing is how someone who is astronomically wealthy wanted to marry a woman who is relatively unattractive. Although I guess that's just a matter of opinion.
Oh then I misunderstood. And I disagree!
I know that in the past, when you fought to upgrade a machine past Apple's recommendations, you could end up with a machine that was technically working, but so slow it was practically unusable.

It's possibly the case that Apple's lack of upgrade support is a feature, not a bug (though it introduces the complexity of eventual lack of security support).
FAA rules and EASA rules are largely the same. The crux of the article is not EASA vs FAA it's more about places outside of both FAA and EASA jurisdiction.
Trump seems to be the only candidate who is addressing this.

Gotta make America great again, stop exploiting India.
In addition to what has already been said, the H1B visa system drives wages down.

All of the foreign nationals I worked with could not negotiate a higher salary by changing jobs. Their employer owns their visa, so they can't just get a better job.

Big companies game the system. We should change the law. The individual should be able to take their H1B elsewhere like a green card.
OpenDNS provides recursive DNS, CloudFlare provides authoritative. They're complimentary, not competitive.

We don't provide split horizon DNS, that's correct. That is easily resolved for more orgs by running our own internal DNS if you need that.

http://www.datanyze.com/market-share/DNS/ claims we have 42% of the top 1M domains using our DNS. I'm not sure I actually believe that number, but a lot of people use us for their DNS.
How? Its an open source project: https://github.com/golang/go
Web Summit 2015: A developer’s perspective
With monoliths from West Wales.
Yep! There's a lot of research going on in that area. For example, http://dl.acm.org/citation.cfm?id=2702416

Some recent work on fusing machine learning with Mechanical Turk workers to create "sensors".
That is a statement of fact.
How to Take Advantage of the 80/20 Rule (for productivity)
I agree. Seemed funny and clever at the time.
This article doesn't even scratch the surface of how "job consultancies" game H1B. I know for a fact that these "job consultancies" apply for H1B for a person using their services, as an employee of more than one company. Employees needing sponsorship typically apply for H1B through the company they are actually working for and as employees of couple other companies that they don't actually work for (the "job consultancies"). So effectively, the person's probability of getting picked up in the lottery in a year is tripled.

Once they secure the H1B, the person is more than willing to resign from the current employer and work for these "job consultancies" temporarily. And since H1B transfer is not that complicated, they jump ship to any other company later.
I researched playground before writing my comment and stand by it.

their current investments are in wifi hardware, social connectivity, and brain-based neural networks. (1)

Going from buying 6 very specific hardware robotics companies to a diverse base hardware incubator raising money with LPs is a different flavor than being "the" robotics guy which was clearly Larrys vision for him

(1) https://www.crunchbase.com/organization/playground-global/in...
Even though the G+ requirement is a real bummer, there's no denying that YouTube comments have become slightly less of a cesspool since they implemented it.
Except that these small missions sprawl when they fail, and never end because they're too small. The goals are still nebulous.

We still have soldiers in Okinawa.
I did not say that. I'm sure best maintenance facilities for TUs and ILs are in Russia.

I am going to say though flying is safer in the developed world. US based passenger airlines did not have one fatality since February 2009.
Could you describe precisely the category that you are talking about and explain why it doesn't have sums and products?
Heh, any place where I have to request a quote before they show me a price makes me nervous :D
You don't ask Chrome anymore, since Google spearheaded HPKP. Now you just use HPKP to do this.
In particular, Mac OS X don't even run well with only 4GB of RAM anymore, and older machines use DDR2 where 4GB SO-DIMMs (and any other sticks based on 2Gbit DDR2) are rare and expensive. I wonder what is the current status of this bug BTW: http://apple.stackexchange.com/questions/42426/can-i-upgrade...
Good learning and write up. Running a bootstrapped product myself, I learned that the best thing to do is to offer a Free Trial but never unlimited free account for B2B businesses like these. Also, trying to restrict with features never really works out at the end as people will always find a way to put stress on your system along with tons of support issues. Just offer a free limited trial with ALL features and when the trial ends, ask them to upgrade.
I have witnesses several companies scale customer acquisition too quickly, scramble to get their ducks in a row, become addicted to the growth due to their bloated operations and eventually collapse under the weight.

This doesn't just go to being prepared to handle growth, but realizing that most customer acquisition strategies either decay over time or reach a point of diminishing returns, and putting yourself in a position where you need growth and volume to survive and betting on your existing customer acquisition is a formula for failure.

Like all thing, Growth is neither good nor bad on it's own, and should never be more than a means to an end.
No because its easy bypass. List exotic skills no one has, say you can't find anyone then list abroad. That's what happens.

Second you are inhibiting wage growth reducing the incentive for people to train into those professions
Show HN: Balise, a portable, lightweight IPv4 and IPv6 geolocation API/server
Fidelity Just Downgraded Snapchat's Valuation by 25 Percent
Just a slight addendum: Clojure multimethods can resolve to a concrete method implementation based on any function of their parameters.

So, in addition to single dispatch based on class (a la Java), you could also dispatch based on the classes of multiple parameters or on the value of the field 3 objects deep.
Frontend application development fairytale (with backend analogy)
Prediction markets are great tools in general. Unfortunately, incentives are usually against implementing them. Experts are easier to control.
What language has ever died after having been used by more than a handful of programmers?