skysight-inc/HackerNews huggingface dataset:
You only need a NAT associated to the top level VPC. The subnets that use it just need it to refer to it in their route table. It looks like that's what they've setup, but I'm not familiar enough with Terraform to say for sure
Certain FOX episodes have shown up on file sharing networks over the past years with trailers for other FOX shows preceding the actual content. You don't think networks are already promoting their tv shows directly to the file sharing demographic?
From the little I could find on it, it sounds like the rocket actually landed... and then sorta kept landing until RUD. Is that right? There was more slam than hover in this particular maneuver?
- NAT Instances are placed in each Subnet for High Availability. This way, if one Availability Zone goes down and it happens to be where your NAT Instance is located, you don't lose connectivity.

- Terraform vs. Ansible:
/u/mitchellh (I think that's his HN name) started terraform and explained his "Terraform vs. Alternatives" in a Google Groups Post[1].

In addition to that post, Terraform also has nice support of multiple providers, so you can mix AWS, Azure, and others in one set of templates.

In general, Terraform is doing a lot of cutting-edge thinking with orchestration tools and represents IMO a best-of-breed approach.

That being said, there are a lot of bugs, especially around eventual consistency issues in AWS. They're getting better, and most of them are recoverable, though.

[1] https://groups.google.com/d/msg/terraform-tool/6Fxnl_bejX4/0...
I work on Terraform at HashiCorp - Terraform import is on the way, starting with 0.7. We have a multi-phase approach - first importing state with 0.7 and then moving on to generating configuration in subsequent releases. Many AWS resources are already supported for import, and we're intending to get full support over time. If there are specific resource types that you need that aren't currently supported, please open issues on the repository and we will endeavour to support them quickly!
YAaaS
That's what Adam Guerbuez did I believe.
The understanding of 'why' and 'how' changes entirely depending upon the size of the operation that did this. If it'a a lone hacker, the 'why' is pretty much lost, and the 'how' becomes very embarrassing, because individuals don't have the same access to development resources and zero-days as APT types. On the other hand, if it's an APT, we should assume substantial political scheming (because a for-profit outfit wouldn't do this.) In that case, it would be interesting to know, for example, if this is a Chinese or Russian priority to the extent required for a serious operation to be undertaken.

I'm guessing people jumped on that angle because (a) this is a tech-oriented site; and (b) no one commenting has yet taken the considerable time needed to read that huge document.
This is a good example of an enormous chilling effect that legal risk offers. Not just prohibition of drugs, but any large regulatory regimes where it’s hard to say what “legal” is.

Big categories of software go underdeveloped, leaving an industry in the dark ages. It’s one reason why medical software is so bad – being on the wrong side of legal risk is too dangerous.
Per month, not per year. So ~12 per day.
Was your post antagonistic towards the YC company or removed for an otherwise valid and transparent reason? If hacker news is removing posts by competitors, or giving their startup founders free range to remove posts I should probably start using it differently.
You can add disk space or ram independently, if I remember correctly, once you have a VM.
Android, Youtube, DoubleClick, Summize (to Twitter) [1], Instagram, WhatsApp

[1] http://www.businessinsider.com/2008/7/twitter-buys-summize-f...
I think the reason most people put a NAT per AZ is in case there is a whole AZ outage taking your NAT with it. However, these days I would argue that for most cases it is better to use NAT Gateway rather than NAT Instances.
Once Digital Ocean launches their block storage feature, it will probably put some pressure on them. Honestly, it's something I've been looking forward as well.
> I now see that as you start to lose your marbles this can become pretty bad.

Maybe not your intention, but it's a severe mistake to think that people have to be somehow vulnerable or extra gullible to fall for scams.

The meme of "they put spelling mistakes in to filter out the clever folks" is only true for some scams.

Other scams involve people who've made many tens of thousands of contacts, all day every day, refining their scam in an iterative process. They use well-honed social engineering techniques.
Shellshare – live terminal broadcast
Technically, maybe, but if you go to one of those locator sites [1] and zoom out to where you can see Bremerton, Seattle, and Bellevue in one screen, you can see that those neighborhoods are the exception.

[1] http://weedmaps.com
I've had success granting myself comp time when I've been up late or worked on the weekend to fix ops issues. Eg if I'm up at 2 or 3, I come in at noon or 1pm, and if it takes more than 2 hours, I just take a full day. The one boss who complained shut up when I told him he had 3 options: (1) deal, (2) remove ops responsibilities, (3) I quit on the spot. It's incredibly necessary to push the costs of sloppy code to be really apparent to management.
The idea with terraform is you describe your infrastructure as config (data), and terraform keeps track of the state within AWS (or whichever provider).

So, as you change your config, terraform will come up with a plan to move from your present AWS state to the desired AWS state.

Terraform allows you to easily express the dependencies in your infrastructure, and also knows about the various dependencies that naturally come with AWS services, which allows it to make better decisions in its planning compared to tools like ansible, chef, etc.
I'm a fan of SuperGenPass[0], though you need to use the "mobile" version. The bookmarklet is insecure.

[0]: https://chriszarate.github.io/supergenpass/
Using S3 for static web hosting
I found it easier to get started with Flow, but I eventually moved to TypeScript because it just has more mindshare, and isn't worse by any measure I care about.

I found it much easier to find tutorials, typings, and so on, for TypeScript. Editor support also seems to be a bit better (especially with VSCode), although the Flow-centered Nucleus plugin for Atom is pretty nice.
SFO doesn't use TSA, they have a private firm doing security. Not sure about Boston.
If they're on all the poles, the FBI has no reason to take them off.
I don't know of any (no exclusive to tx) but i am more of a Go guy than any other language, simply because it performs incredibly well. I wish more companies used it.
Terraform is not AWS-specific - there are 30-odd providers covering most major cloud services and many SaaS systems also. It can be valuable for multi-cloud orchestration!
No, the edited video had all the critical details.

And, unlike any other journalists, they released the unedited video as well.
I'd limit your case to "highly-concurrent environments where want lots of shared, mutable state". There's always cases for some shared or global thing that you're transacting with, but I think 99% of code in highly-concurrent environments should be written with message-passing and limited scope at any point in the program.
The fact that the ME microcontroller can run arbitrary Java code, uploaded at runtime rather than read from ROM is pernicious. The intel private key can sign any blob, and ME would run it.

It makes me wonder, could an Java program uploaded to ME crash it or put it into an infinite loop? What would the effect be on the host OS if ME suddenly became unresponsive?

Perhaps a "Kill ME" binary could be developed as open source, and perhaps we could get Intel to sign it? If there was a strong enough request to Intel by consumers, why wouldn't they go ahead and sign it for us? No skin of their noses what we do with our consumer-grade boxes, right?
Hey, if you don't love watching hardcore LARPers arguing over cannon vs fanfic, that's your biz, but the rest of us nerds live for this stuff.
That's pretty much correct. One of the engines wasn't producing full thrust during the final landing burn. Since there's almost no fuel margin, the rocket ignites at the last possible moment with the goal of reaching zero speed right as it touches the ship. Reduced thrust means that it would touch the ship before it had fully braked.

The live video from the ship didn't work well (something about satellite dishes makes them work poorly when there's a massive rocket blasting them with fire, apparently) but from the few frames that made it through, the rocket clearly managed to come to rest upright on the ship. There was a great deal of residual fire, everything was clouded in smoke and compression artifacts, and the last frame was from only about four seconds after touchdown. It's hard to tell exactly what was going on, but it looks like it hit hard, broke the legs or the fuel tank, and after a few seconds it exploded or fell over or both.
While this is bad news, even if they only land a quarter or a half of the time, it must still save a huge amount on launch costs.
Ah yes, thank you, finally!

I can't emphasize enough how much I've been waiting for this.

I've even tried pushing it via the dev-tools uservoice as a developer tool instead of a privacy tool, since you often need to test with multiple sessions at the same time. No reaction.

There is still the very real issue of fingerprinting across containers, which they point at towards the end of the article, but this might just be enough for me to drop Chrome completely and get my Firefox set up again the way I like it.
Yes its an academic project. You can find more info on : http://www.computationalhealthcare.com

We are using data provided AHRQ HCUP and some internal datasets. TensorFlow for ML.
I'd like to add to a personal anecdote.

Sitting outside bored on a stump doing nothing productive was more "harmful" for my development than spending hours on the computer playing an MMO. On the MMO I learned social interactions, supply and demand, how bronze is made, puzzle-solving skills, how to touch type, and even got to delve into some basic statistics (drop rates, DPS calculations).

My father saw it as "wasting time playing some video game" instead of "playing outside". Thankfully my mother had watched me play the game and saw that I was actually learning and benefiting from it in a fun environment and would allow me to play more or less as long as I wanted after my homework was finished. Other benefit: this was the only time in my life I ever did my homework.
Ask HN: What are you ways to learn new things?
This question is kept this vague intentionally to not bias your answer in any way.
Apple admits iOS 10 WON'T let you delete its own apps
Years ago I participated in a CTF where one of the challenges was to produce Fractran programs that met certain requirements. They were relatively simple-sounding things like computing the nth power of two, but even that is a bit of a pain in Fractran. I initially tried something similar to this article, manually compiling programs that use only the (Turing-complete) JZDEC instruction on paper. Unfortunately, there was a length limitation which made this approach impossible as it did not produce fraction lists nearly as small as one can write by hand. I ended up finding it easier to write a program to brute force all possible Fractran programs under the length limit until one of them had the correct behavior than to actually write useful Fractran code by hand.
Or, they might take down a few of the wrong ones just to troll people.
How to Deal with Inappropriate Questions While Doing Live Chat
Probably some people find it intellectually interesting or a story unlikely to show up in major media. None of which means it's a going to appeal to everyone before gravity pulls it to oblivion.
How does this compare to the existing audio tunneling in some versions of Android?

(The best writeup of this I've seen is https://github.com/felixpalmer/android-visualizer/issues/5 which details some of the problems that audio tunneling can cause)
in my neck of the woods in CA, dispensaries aren't going to buy cartel brick weed. you can't just walk in off the street and sell to a dispensary anyway, I don't think that will change with a move to recreational legalization.

cartels can't compete with local street prices anyway, never mind recreational dispensaries. when you can get an 1/8th ounce of high quality stuff for 25 dollars off-season, and an a full ounce for 100 or less during harvest season, you can barely give the low quality stuff away. it usually gets used for hash or edible baking.

cartels know where they can and can't compete, that low quality brick weed is much better off being shipped to another state where they can sell it for 100 dollars an ounce.
Wish I had a bulletin proof jacket...
Using Facebook as a Mac terminal
these sites include medical dispensaries (there are still a ton) and delivery services so are somewhat misleading. I live and work in two different large mixed-use (residential/retail) neighborhoods and there isn't a rec shop within 20 blocks of either.
I know this is a low-quality comment, but i just want to congratulate the whole stockfighter team for getting the jailbreak ctf out. it looks like it was a ton of work and looks fantastic. as somebody who was excited about it after trying my hand at microcorruption, i'm super excited to see this finally. hats off!
@trbooks"This belongs on HN why?" Exactly!

It is a bit arduous to comprehend why HN is so eager to distribute such news which are a bit irritating for believer members like me. It is sad that it is always one sided.
Show HN: Trigger – IFTTT for the stock market
I loved Linode and used them till about 2014 or so, but switched to Ramnode and then to Vultr. I needed storage more often than performance, I use them to tar mirrored package repositories mainly, and a Linode or Ramnode with double the space of one of those costs a fortune.

I hated everything about Ramnode, but I can't remember specifics. I stuck with Vultr after just setting up some storage instances because it was nice having everything in one spot. I've been able to host some wargames/CTFs as well because of the custom ISO support.

Seems like there's a lot of tinfoil around eye-level here; FYI not a shill and definitely accepting suggestions for other VPS with root, big storage, and custom os/iso options.
The article said the papyrus is from the 8th century, which is rather recent compared to other apocryphal texts, I think. I thought the various Churches had consolidated around the canonical bible centuries before then?

If this isn't some kind of hoax (very big if), I'd be curious to know who was writing/copying what would have been considered very heretical at the time.
Three Investments with an Instant Guaranteed Return
It looks like sloppy editing. The following have four slightly different meanings:

> interested in noncanonical Gnostic texts

> interested in noncanonical, Gnostic texts

> interested in noncanonical or Gnostic texts

> interested in noncanonical, or Gnostic, texts
An oft-overlooked advantage is the ability to specify a holistic system with a fine-grain of accuracy.

With a monolithic kernel in the way you have to make some black-box concessions.
I'd like to add that this isn't necessarily even about huge scale. It's about scaling deployment patterns too, which is different than scaling services.

Sometimes you need to have the ability to run more services when your "web-scale", but even if you're not at that point, scaling how you deploy new versions, and new services is still important.

Tools like docker, and Kubernetes really help with the application delivery aspect, and really enable you to rapidly iterate on your project.

You might have a site with 100-1000 users, not huge by any means, and 1 server could probably handle all of your needs. But once you start adding other components, perhaps redis, or a runtime like nodejs, those can all be managed, but if you need to rapidly iterate, something like Kubernetes/docker can make updating or deploying these easier in the long run.
“The Road to Orlando: Jihadist-Inspired Violence in the West, 2012-2016″
I hope.

A weird part of me wants to live through some massive sic-fi event like that. Probably the same sick part of me that wants to see Trump win simply to watch the fallout.
No the whole point is the zombies would talk of consciousness was even whilst by experiencing it. They are externally indistinguishable.

Talking about consciousness is a physical action.
Another thing to keep in mind this is another one of the launches where the 1st stage was coming in a lot faster (geosync orbit launch).
Reference: https://twitter.com/elonmusk/status/743097337782763521

"Looks like thrust was low on 1 of 3 landing engines. High g landings v sensitive to all engines operating at max."
The article pretty clearly says they were failing to monetize because Karp didn't want intrusive ads, so he was happy to get bought out and have that become their problem rather than his.
I can't help but think this is just a severe reaction to the tire fire that most Linux distros are, especially RedHat/CentOS and Ubuntu. BSD or Alpine Linux get in the way a lot less, are much more customization and compact, and have a smaller attack surface while still catering to production operations where you can run shells, profiling, logging, etc inside the execution environment.
I'm with you - Docker has done an excellent job of showing application developers the minimum they need for a runtime.

Side-thought: Can Android be dockerized?
Your getting confused, if behavior is unchanged then people would talk about the same things. It's uncomfortable for some people to realize a purely material world can give rise to objective experience, but there is a lot of evidence that suggests this is true.
I really can't stand when objective issues of science and medicine are framed as something to "agree" or "disagree" with.

The scheduling of cannabis is crap, and literally everybody knows it. The DEA has to embarrassingly dodge the question whenever it's brought up.
Oh man, I just wanted to gush and say thanks for such awesome software!
Why not make a certified secured best practice 99% covered snapshot and share it as part of the one-click installs that most VPS providers offer nowadays?
FWIW, there's already a place in Kirkland - pretty close to main MS campus, and even closer to the local Google campus - that gives discounts to employees.
Enroute – React router with a small footprint for modern browsers
The premise of unikernels is that:

1. The job of an OS is to ensure that multiple programs can run on a single box without interfering with each other.

2. The job of a hypervisor is to ensure that multiple OSes can run on a physical box without interfering with each other.

3. In many cloud deployments, a single VM instance only runs a single user-defined program, which is programmed to a higher-level runtime than the OS (eg. Node.js, JVM, Rails/Django, SQL).

4. Why do we need #1 then?

IMHO, the real interesting stuff happens when you start re-implementing the APIs that we actually program to, without the OS. For example, what if:

1. You could take any command-line ELF executable and build an AMI out of it. This AMI would have an HTTP interface that only accepted connections from certain security groups. It would take in the command-line args via query params, and let you construct a virtual filesystem containing only the files you operate on via request body. Imagine say a compile server that runs Clang on user-defined code and serves the executable back, to be run on its own VM. And the crucial part is - there is no persistent storage on the box, nor any code that would be worth attacking. If there's a bug in the executable and an attacker pwns the box, the worst he can do is corrupt the request. There is no shell. There is no filesystem. There is no TCP stack to make outgoing connections with.

2. You could re-implement Node.js for stateless webservers. Again, you'd have no filesystem; once the initial program starts, it's guaranteed to never touch disk, since it has no disk access. Node does its own scheduling, and this way Node's scheduler doesn't need to fight the OS scheduler. You could store preformatted HTTP packets or response fragments in read-only memory pages and send them out directly via RDMA.

3. You could do a database or search engine that bypasses the filesystem entirely, instead writing directly to raw disk blocks. It can choose these disk blocks based on locality, since it knows the particular index structure and access pattern for the data, and doesn't have to fight the OS's attempts to hide the disk blocks under a file abstraction.

The point of unikernels is to take away stuff - it's not about which mode the CPU boots into, it's about removing all the code that is on a typical cloud computing image but has nothing to do with the job the instance is actually doing. All of this - shell, filesystem, DNS resolvers, etc. - is attack surface for a potential hacker, and it's often overhead when processing.
Is it possible to implement this feature via the extension API ? Exposing the low-levels, like choosing the cookie jar or intercepting calls to the local storage, would sprawl some really good privacy-enhancing extensions.

EDIT: Looks like there are already extensions doing that ! nice !
Brave BTW...!
I strongly empathize with you on this. It seems that most of us want to believe that the only value add should happen at layer of the software stack we are working on, everything below and above should be a complete (free) commodity.
Geocities was important too, but I'd argue that it's important socially and not businessly. Users love Tumblr, but there's probably no way to convert that into profits.

Same thing with Twitter IMO. Everyone hates promoted tweets, but many love Twitter. In particular, it's great for political dissent and organizing protests. Good luck monetizing that.

In the case of SnapChat, tons of their most active and loyal users are in elementary / middle / high school. I was in a restaurant a few days ago an saw 4 children whose shoulders came just above the table sitting there for an hour snapchatting each other, and suddenly the massive user base of it made sense. Again here, good luck extracting money from children inside an app that they very likely try to hide from their parents.

In the case of FB Messenger / WhatsApp / Telegram / Line / Kik / Viber / Kakao: this stuff is commodity chat, and the value lies in other people in your network using it. If it's found that any one of them are doing something that users don't like (like showing ads or reading your messages or mining who you're talking to), the users will have no problem finding alternatives. It's like trying to monetize Skype, without the value proposition of being able to call land lines. It's like saying that AOL Instant Messenger was worth $1bn. The value is in the utility of the thing, which crucially, is trivially replaced by a competitor. At least Facebook has the benefit of not requiring returns on messaging and instead pitching it as an integration with their core platform, which is great at getting ads in front of eyeballs. Again here, users love these utilities, but I don't ultimately think that they're economically viable businesses.
imo if you browser accepts any font-smooting setting from a website, this is reason to open a bug report: "does not respect anti-aliasing settings from the operating system"
(Now personally I never noticed, so I never opened a bug report.)
wow, I just found microcorruption, now it looks like there's man-months of fun ahead.

Technical comment: "forgot password"-link is not wired to anything? Not working for me on FF at least.
Let's Upgrade Bill Gates' Climate Reading List