skysight-inc/HackerNews huggingface dataset:
Unfortunately the human factor is exactly the problem with these types of systems. I don't think humans can ever be considered to be safe stewards of anything where a seemingly remote cascade event can wipe out life on the planet.

Look at the disaster of Long-Term Capital Management from the financial industry as an example, where a presumed ten sigma event almost wiped out the whole western financial system.

http://epicureandealmaker.blogspot.fi/2007/05/11000000000000...

These nuclear reactors are built with the same underlying principles and risk-management profiles. There's always the element of human error; you can't over-engineer something you did not foresee. In addition to that you have the enormous profit incentives from running nuclear power. These incentives can overwhelm the incentives for safety, or lead to disregard of warnings where profit potential would be compromised if warnings were attended to.

It's human, therefore it's hard to ever sleep completely sound knowing that these constructions are running on the planet.

Fukushima didn't just happen because one mistake was made either. It happened because a long string of mistakes and disregard of safety happened. Want to bet it doesn't happen again? It's hard to bet against human nature...

http://carnegieendowment.org/files/fukushima.pdf
A recent discussion about this between Sam Harris and Johnathan Haipt is a good piece about this. Haipt is a professor and he talks about why now. I'm seeing the perfect storm of coddling and often enabling leftist faculty and administration, expensive universities, helicopter parents all comes into play.
both projects fix stuff that's broken when it comes to creating docker images efficiently. With build.yml you can separate all the steps to make it more readable, and then put everything into the Dockerfile. Rocker has a similar sort of feature called the Rockfile. Habitus provides an additional solution for getting secrets in and out of your image and squashing the image afterwards.
Can you get your stuff back from namecheap?
Also let me reiterate this is an isolated event. We handle over 10,000 chat sessions every day without a glitch.

What do you use to tell whether a chat session is a genuine user or someone successfully using a social engineering attack against your chat operatives? If the answer is "nothing" then you can't know if this is an isolated event or how many of your chat sessions go without a glitch.
Windows 8 started this. They decided to copy Apple's useless OS X kernel panic screen, and so only give you one word of useful information, no error code, no exception information, etc.

Unfortunately the QR code might be an improvement over Windows 8 and 8.1 if the QR code contains more detailed information. There are scenarios where you cannot get to the event viewer (or WinDbg) and need to diagnose a pre-boot BSOD. Windows 8 made this almost impossible without attaching a kernel debugger.

Windows 2000 had the best BSODs because they not only told you the details of the crash but also told you which module caused it. This often allowed you to immediately know what the issue was (e.g. if it was in Creative or Nvidia's drives you'd know just from the filename). You can still get the module via WinDbg but it would be useful to have it on the BSOD itself or even in the event log listing.

PS - I strongly suspect the reason Microsoft removed the module name in the Windows XP BSOD was because they were hurting third party hardware vendor's reputation.
> The problem is that lower-status people usually don;t have the knowledge or don't care.

Or, just maybe, don't have the money or the free time.
No one needs prop 13. Lots of people want and benefit from it, but no one needs it. You may need it to stay in your current home, but you don't need to stay in your current home. You can get another home elsewhere if the place where you live has outgrown you. Yes, it's possible for people to outgrow a place and also for a place to outgrow people.

It's not even like they are economic losers. They bought into a place and it appreciated in value and they got to upside from the increased housing value. When they sell the home, they'll be cash rich and be able to easily afford a new home in a place that was just like 1925 Livermore. If you want to live in 2016 Livermore, which is a wholly different place from 1925 Livermore, then you should pay property taxes commensurate with supporting a 2016 Livermore.

Yes, it's true, they may not be able to afford the property taxes there today under prop 13, but under some alternate universe without prop 13, the property taxes would be lower than they are today. The only reason they are as high as they are is because those that bought a home recently are paying way more in property taxes to make up for how little others pay in property taxes. Basically, if you're paying 1925 property taxes, you're freeloading while others that were born later make up the tax difference necessary for a community to function. Prop 13 is nothing more than a form of wealth transfer from the mostly young to the mostly old.

Furthermore, there are good paying jobs in and around Livermore that require people to live near Livermore. If people are subsidized so they can occupy space near those jobs at the expense of the people qualified for those jobs, you're doing economic harm to the city, county, state and country in which Livermore resides, especially when those jobs are of the variety that are valuable for economic prosperity at the national level.
As someone that's done it (a dozen or so times), I always read these threads and feel confused about whether I should recommend it to other people. I usually do recommend it, though, with plenty of caveats.

It can be an incredible experience if only for the shift in perception that it causes. It makes you see that the way your mind operates day-to-day (through highs, lows, and in-betweens) does not even come close to the range of experience that's possible.

It can be euphoric, and it can be scary, and depending on your predispositions it can probably improve your life significantly (given that you integrate insights from your experience into "normal" life), or really mess with your head (esp. if you have latent schizophrenia or similar - I'm admittedly pretty ignorant about this so obviously do your own research).

Anyway, my recommendation to people using it for the first time is to start with a low dose (you often won't even realize it's having any effect until after the trip is over – I didn't believe it my first time), make sure you are in a safe place where you can be left alone to relax if you need to, and ideally make sure to have someone with experience & that you trust to spend time with you and guide the trip.

Also, here's some recommended listening: http://fourhourworkweek.com/2015/03/21/james-fadiman/
STOP. USING. NAMECHEAP.

Its been months since I wanted to write a detailed summary, but the notion that "namecheap is hackers best domain registrar" is not valid anymore!

About year ago I noticed DNS changes on many of my there-parked domains. Upon reaching via Chat (no phone support so that angry customers cannot vent off) I was told that they cannot help me cause Im not the owner of the account! Upon full verification even with CC on file and telling them purchase history going back to 2009, I was still denied the access. As it turned out, all hacker needed to know is my public WHOIS info to take over my account!! That was insane! Only continuance of threats from my side that I will plaster it all over the net made them change their mind, which again is a breach of trust - what if I was actually the hacker??

What really made me start moving domains to NameSilo (Im not affiliated) is that upon doing a thorough research, I found many cases where Namecheap gives up on fighting for peoples domain! I seen names like nanotmz where company was building some sort of magnetic devices and TMZ came in and threat to sue Namecheap if they dont shut the domain down. That's where I found similar cases for NameSilo and learnt that they stand their ground and would not give up on your domains, even if are threatened with legal action.

I'm out of Namecheap completely as of last month with last SSL expiring.
Even better, have the option to disable tech support and get an alert if a reset is requested with the metadata related to the party making the request.
By "off-host" do you mean physical VPS host or hosting company?

I think a better suggestion/wording (depending on your intent) re: backups would be "don't operate without independent backups".
What's with the "Loki" and "Thor" references in the image?
I've visited several countries where that's true - but none of the locals responded anything like this article describes. Don't underestimate the power of culture.
The lack of self-awareness is pretty funny.

Setting aside moral judgements, consider: a state passes a law based on traditional religious morality, and a company that violates traditional religious morality then refuses to do business in it as "punishment".

At some level, I guess it's good. The Big Sort continues apace.
Yet another example of the corruption endemic to America.

America is a police state. Repeat after me, America is a police state. The first step is to admit and state aloud the plain truth of the matter.
Stephen Hawking to Unveil Today New Space Exploration Project Called “Starshot”
Assuming this is a positive development, I wonder where else xHamster is also blocking access - what about large parts of the Middle East and Africa?
If you're a Python user, I gave a talk at PyData called "Beating the GIL with Python" that covers all the tooling for parallel computing in Python, from the simplest (e.g. multiprocessing) to the more complex (Storm/Spark), with many tools in between, and what the trade-offs are. That may help you out.

https://www.youtube.com/watch?v=gVBLF0ohcrE

The rough summary is, if you need to do distributed multi-node computation with very low latency -- that is, end-to-end data processing time measured in millis or seconds -- then Storm will help you out. The "competitive" product in open source right now is pyspark + Spark Streaming.

The benefit of Storm is that it is an older (more mature) project with many production deployments. My team at Parse.ly wrote the open source Python + Storm integration libraries, pystorm and streamparse, which help Python programmers make use of Storm for large-scale stream processing: https://github.com/Parsely/streamparse. We also wrote pykafka, which is a Kafka client for Python: https://github.com/Parsely/pykafka -- these projects are related since Kafka is often the streaming data source used as the input to a Storm topology.
>> There is no terrorism-proof reactor design. We may have new tech but we also have new problems. Besides, we haven't solved the ultimate disposal place issue.

Those problems are closely related. We know what to do about the disposal problem: build a reactor that consumes that material as fuel. The problem is allegedly that such a reactor increases the risk of rogue weapons production. I'm starting to think all that spent fuel sitting around in pools of water (requiring active cooling) is a bigger danger than building a reactor that doesn't produce all that waste.
This was a self-managed server. Managed services at Namecheap have backups.
Example of on HN expecting everyone (newbies and all) to know who you are. This happens with DANG and SAMA comments as well. Back when PG used to comment also happened. Look at their profiles, really no explanation of who they are here:

https://news.ycombinator.com/user?id=pg

https://news.ycombinator.com/user?id=dang

https://news.ycombinator.com/user?id=sama

Why is it so hard to put info in your profile or to put a footnote in your comments for the newbies? Would you have your business act this way? Reply to a person's inquiry and not say who you are and what you do? Of course not.
I love namecheap but 5 sounds like victim blaming. Come on.

EDIT: My use of the term is a bit strong. I feel frustrated that company execs cannot explicitly admit a mistake or apologize. I should have worded it differently.

EDIT2: just for Tamar. By explicit I mean literally using the words "sorry", "apologize", or "mistake". What we have is the standard corporate nonapology.

EDIT3: congrats to Tamar for being promoted to a Namecheap executive!
LPT: trying to read an article, and the website keeps blocking the text
What's wrong with vector<bool> (other than its name)? The interface is exactly what you need to implement a bit-level abstraction in a language where this isn't a first-class primitive.
> when do I need this

Probably never.

Spark, flink and a few proprietary tools can operate in both batch and streaming modes which means you can share your codebase between both tasks if you do them. Before these tools it used to be hadoop for batch and storm for streaming, but I suspect those days are dying now (which goes some way to explaining spark's success) except if you require exceptional throughput in which case do some research & benchmarks.
Maybe they just had a recent big advertising push.
Or the link is inserted after he sends it, before it is delivered to you?
If 3 is possible, how are we to believe 2?
New York City and San Francisco are also some of the most urban and mass transit-oriented areas of the US, which means walking is a default part of one's life instead of a leisure activity— getting through one's daily life means walking at least half an hour, and easily more.
http://www.nytimes.com/2016/04/11/upshot/poor-new-yorkers-te...
The problem is that cartels make money because of this enforcement. US War on Drugs actually fuels the black markets and the cartels.
eBay tried this feature (which they called "Want it now"), but they shut it down. Why will your service fare better?
you're wrong. While there is plenty of powerplaying, many of these students really are outraged and entitled. They aren't after power, they are after breaking down so called structures that they think are unfair. The collective, fairness in their mind trumps freedom of speech. It turns them into useful idiots as well. Which is why you think it's all about power.
Here's the live event starting in an hour: http://livestream.com/breakthroughprize/starshot
Shouldn't we all hold US to higher standards than MENA, etc.?
Namecheap has had two factor authentication and was the first provider to have it. Knowing public whois would not grant someone access to anyone's account at Namecheap. They'd still need to know your Namecheap username, your password, and your PIN, and if you had 2FA, that would need to be provided as well.
Okay, I'll edit it for accuracy because you took the time to point it out. Either sentiment applies in my perspective so the transcription was unintnetional.
I'd like to know more about Awellhealth's partnership with MSF. It sounds exciting.
This isn't your part of the business but there is room for improvement when it comes to kb articles in domain https://www.namecheap.com/support/knowledgebase/article.aspx...

The domain registration process isn't automated from my experience but it works well. However, I think the meta is (I think many people will agree) to not mix domain and hosting with the same provider. For example, if you get your domain from namecheap, you should not do hosting at namecheap. Therefore, the argument is that if you want to buy a domain name from Namecheap (as they're pretty decent), you shouldn't do hosting there.

Sorry if I sound like a prick.
It's how you run a multibillion dollar company with a few thousand employees.
In the "Gentle and Soft: The Story of the Blue Jean Committee" mockumentary, Kenny Loggins and the show and get their digs in at the Rock and Roll Hall of Fame in ‘Documentary Now!’ by Lorne Michaels, Fred Armisen And Bill Hader.

In the show, Loggins complains about the one album wonder Blue Jeans Committee that you can be working in the business for 30 years and have many hits and never even get invited to the ceremony (which describes Loggins.)
What do you mean by "provider"?

I find it hard to believe Microsoft of all companies has outsourced two factor authentication.
The text code they list in the "if you have to call a support person" map one-to-one to the old hex codes, and a search on Microsoft's site will get you the hex codes quickly if you need them.

The MANUALLY_INITIATED_CRASH from the screenshot is an 0xE2, for example.
Nope. Habitus fixes the things that are broken. Docker-compose is a way for composing your services (using images). Think of Habitus as the step before using Docker-compose. It helps create Docker images without leaving traces of secrets, libraries you don’t need, and other components utilized in the creation of a stable image before you start to compose your container services.
but you'll ruin my wordplay
And this is an argument for making sure your email provider has two factor authentication to avoid having an external breach that could give someone access to accounts that do not support 2FA.
WeLive
I thought the same thing! Although he is definitely right to complain about Namecheap, the biggest takeaway is, your email is the most important service you have on the internet:

> I’m pretty careful to use 2FA for any service that I consider important
Ha, I recently thought of X10 as an alternative to the modern IoT cloud crapware, I forgot about their webspam.
I know it's trite to say, but it is probably good to be reminded how often people held up as being successful are, often, deeply unhappy. Michael Jordan is another canonical example.

To live these lives of unparalleled, almost supernatural greatness, and then end up embittered... The stoics did nothing wrong.

EDIT: to clarify, I'm not dismissing Miller's critique at all, I'm noting that someone living, literally, a rock star life, ends up in a deeply inhumane and, potentially, embittering environment.
I don't use their hosting, but I have a lot of domains with them. Anytime I've had an issue with the settings on a domain, they've been quickly resolved.

Just a few weeks ago I was getting a domain set up with Amazon SES, and one Daria P. helped interpret Amazon's docs to get it verified with them, and explained how I was using the dig command incorrectly to inspect the domain's settings. It's rare you see a support person do that at any company.

And, of course, they did ask for a support PIN.
I guess take Matt up on his offer where he said this: "Also let me reiterate this is an isolated event. We handle over 10,000 chat sessions every day without a glitch. I invite people to use our live chat service and see what is and what is not possible, as well as the security precautions we have in place."
... unless their Ukraine-based customer support that sometimes doesn't speak English is intimidated enough.
It will be available in the future where every medium is divided between AR & VR by artists for artists.
The life of a copy editor in the digital age is one rife with peril, so it seems.
We have had this at Amazon AWS. We had 2FA, one phone call was enough to disable 2FA. The only thing they asked were the last four digits of our credit card.
It's tricky because a lot of customers really DO lock themselves out of a service, and forget their password reset code.

Fun story time. I use to play MTGO, the online Magic the Gathering game. Played it from beta for a few years say 2002-2004. Wanted to check it out in 2014 to see how it changed. Failed password reset online, had to call in to support.

The support guy was like chortle what was your security passcode? I had no idea. He tried giving some hints. I said it has literally been 10 years, I am never going to remember. So he went ahead and rest my password. He told me for the record my security code was "I am the nacho king", but I would be prompted to change it at next login.

So could I have social engineered a 10 year old MTGO account? Yes. But without it, I would have been locked out. I was NOT going to remember some stupid passcode kid me set on a game account.

And apparently I am the nacho King.
I don't really understand what it is you're getting at.

It is convoluted because a PC infection is unnecessary in that scenario. You could skip it and accomplish the same thing.
There are identification methods requested via chat. Matt invited you to try it. Go for it.
No. Just no. GNU on Windows has existed for a long time in several forms, for one thing. For another, by bringing a compatibility layer for the Linux kernel they have opened the door to much more than just GNU, and it remains incredibly reductivist to claim that that's all the Linux kernel does. You can use the Linux kernel (or this linux-compatible layer) to use a GNU system or a completely non-GNU system if you so choose.

What they bring by default as a user-land is Ubuntu, which is actually a complete OS that happens to include both GNU and Linux and many many other things, including essential components that are not part of either project. I say actually a complete OS because, in spite of RMS' protestations to the contrary in the famous "It's GNU/Linux, stupid!" editorial, the GNU system was not "almost finished" when the Linux kernel came along and is still not "almost finished" even today.

And the reason it's not almost finished is because the GNU project considers the kernel unimportant, which they prove wrong every year HURD remains a mess that moves forward with the pace of a snail.
The solution quite simple: when the suspect had evidence of wrongdoing (drugs, etc), they pay for the cost of the procedure.

When the suspect does not have evidence of a crime, they should be reimbursed. I am all right with a legitimate search warrant giving law enforcement the right to tear my house inside and out, but after it is established that they found nothing, I can bill them for the clean-up, as well as any lost time from work.

To me the biggest problem with law enforcement today is that there is no punishment for being wrong, even when lives and families can be shredded in the process. We have malpractice insurance for doctors, why not cops?
Choosing Your Future Tech Stack: Clojure vs. Elixir vs. Go
All of women's fashion magazine industry.

Computer Shopper.

Lucky.
Have you considered making this something that can't be done manually?

First of I can social engineer one of your staff. Regardless of how much you train them. I could also bribe your staff or try to get you to hire a plant. Yea that last one is far fetched but just making a point that as long as someone can manually do these things someone will.
Fairly common for enterprise type apps to have a list of preapproved contact points, not on the list they won't even talk to you. Maybe other places could take this up... not foolproof, but at least adds another layer to the challenge.
Oh man, you have no idea what the state of security is, or how persistent attackers are. This is definitely not absurd. In fact, I'll bet that attackers are writing code for this right now.

I've encountered Bad Guys who happily walk users through enabling Debug mode on their Android devices (requires a bunch of gyrations and scary dialogs). Many users are absolutely clueless about security, and will follow instructions in pursuit of !!Free Stuff!!. It's amazing.

Putting a QR code that takes your phone to some unpredictable site on the internet is a really, really bad idea. Even if you think your mobile platform is secure today, there will be zero-day exploits in the future, and malware authors will use this vector.
It seems to be aimed more at pushing constituents into action than law makers.
How will you solve the problem of companies listing far more requirements than are actually needed?
Docker Compose Explained with XLD
There's probably as many Ferraris sold per year as, say, a Chevy Volt. They're not super-high-volume cars by any means, but they're not as rare as a Maybach or even a Rolls.
One of the things I love about HN is that it's such a nerdy community - you gave me quite a smile!