skysight-inc/HackerNews huggingface dataset:
Don't forget to give Vue.js some love. It's simple to use, well documented, requires no setup, and extremely powerful.
I've gotta say, I just read through the OVH DDOS mitigation docs, and for me the upshot is that if my servers were targeted, I'm in for an unspecified increase in latency, which for a rather large cross-section of use cases is one and the same as the service being unavailable due to the direct action of the DDOS (which is kinda still what would be happening).

It's also not something you can disable; it's mandatory, so as to not impact other customers. I (my employer) use AWS pretty heavily, and we've never noticed our ability to access our resources being impaired by a DDOS on other nodes, so... is it not rather obvious that AWS (and in general, the set of "cloud providers without constant outages on their status pages") have basically the same setup - network is rationed, a given resource will only be allowed so much of the pipe, and your service is unavailable until and unless you have the capacity to handle it. It's not as if it could be any other way.

The other danger seems to be in unexpected bills. Does this happen to people? Are there companies going bankrupt because they didn't notice a DDOS for a couple weeks? I've had AWS support reach out to me several times - without ever having had a paid support subscription - when my costs have gone up, just in the course of adding new functionality and expanding capacity. It's not like you set up one instance and can start egressing petabytes.

AWS does monitor their infrastructure. All accounts have limits from the get-go; you can't run up a bankruptcy-inducing bill without your phone ringing. And in all cases, your exposure below that level is rather directly under your control.

If I happen to have a use case that involves a bunch of random hosts sending me a lot of data, I expect to be able to pay the bill for the bandwidth and the capacity I provisioned to handle it. Or, if I didn't, I max out the bandwidth reserved for my resources and I don't end up seeing all the traffic. I don't see why it'd be helpful (or even meaningful) to differentiate between DDOS vs. legitimate traffic. Wouldn't a published policy on any cost or functionality difference when a DDOS is occurring provide a malicious actor with information they would need to avoid triggering that clause, so as to maximize the damage they're able to cause to your business?

I guess I'll likely change my tune if and when I'm targeted and have to deal with a DDOS (and this sentence is why i went to the throwaway, which is a shame; I'd be happy to put my name to the actual content of this post. But fate is not to be tempted.). In the meantime, though, I'm skeptical of the need, and even the desirability, of service-provider policies that have anything to do classifying the "nature" of traffic flows. It just seems completely out-of-scope for them, and in-scope for myself as the person doing the provisioning.
Unless your hardware has to be fed sample-at-a-time, your deadline isn't 700 times worse. A fairer comparison would point out for HD video, you have mere nanoseconds per pixel, vs. microseconds for audio samples.

That is, my laptop has ~43 cycles to get out all channels of each pixel, vs. more than 60,000 cycles to get out all channels of each 44.1kHz audio sample.

But the pixels only have to be delivered by screen refresh, and the samples only have to be delivered before the sound card tries to play them--probably 64-1024 samples (or further) in the future.
Not related to the content of the PDF, but I seriously dislike the width of those margins. While LaTeX look marvelous as always, there's just too much text per page.
Using LNT to Track Performance
Why U2F is betthern than using an Authenticator?
A "homescreened" PWA will still appear as a separate app though ..
As a fellow early textdrive supporter, I'm pretty happy with the value I got out of the deal. I'm still using my free strongspace account 10ish years later. I think there was some email about a free hosting account I could theoretically use with some company, but I never looked into it. Honestly, textdrive's hosting was never really of a quality I could use in a professional context anyway. I understand some bitterness, but any "lifetime" deal has to be taken with a pretty big grain of salt, and I'm pretty happy about what I got for the money.
LinkedIn released data that made the twitter breach possible. Your version is far too innocent. If we want to continue the badly-fitting analogy... how about LinkedIn is a guy dropping crates of bullets all over, in a world where stolen bullets have no non-crime uses.
Who does this give reason to move to ARM? End-users generally don't have a choice (good luck running AutoCAD on ARM) and OEMs either don't seem to care or list ME as one of the selling points of their systems.

You could make the case that this might convince people to use AMD CPUs, but from what I hear AMD has all the same issues with worse performance to boot.
Coolest DIY Wedding Gift Ideas for the Recently Wedded Couples
If you get a microscope and manage to peer into this secret hidey hole in the CPU you will see a bunch of tiny little NSA spooks, Russian and Chinese hackers scuttle away to hide in other dark hidden secret corners of the Intel CPU.
How far are we from creating Gravity Shockwave Generating Division Tool? A.k.a Goldion Crusher.
Unfortunately, AMD follows all bad and destroying trust practices that were developed in Intel.
I'm not sure if I'm interpreting the paper correctly, but I don't think those numbers quite match what the authors found. I find their presentation confusing, though, so possibly I'm the one that's wrong.

I think you understand this but in case it's not clear to others (I wasn't sure until I got to the end of the paper) all of the machines in their study are using ECC memory. This allows them to measure both the number of Correctable Errors (single bit) and Uncorrectable Errors (more than single).

I think you are right that the chances of a single bit flip for a randomly chosen machine are about 25%. In Table 1, they say CE incidence for a randomly chosen machine is 32% per year. But they also show that a machine that has one correctable memory error is much more likely to exhibit many more.

I think that "CE Median Affct" (also in Table 1) says that among the machines that have been affected by at least one correctable error, the mean number of errors is 277. Thus rather than one crash per 10 machines over 3 years, it's likely that you'll get hundreds of crashes, but with one (or zero, or two) of those 10 machines responsible for all of them.

The Uncorrectable Error rate they found was about 1/20 of the correctable rate, a little over 1% per year. Assuming the same "use time" factor applies, this would mean that with ECC none of the 10 machines would be likely to ever crash due to bit flips, reducing the number of crashes by hundreds.

But this doesn't tell the full story either. Maybe it's best to view it as 1000 employees, each of whom is issued a laptop. If you buy them machines without ECC, the initial cost is less but 100 of them will experience frequent crashes during the lifetime of the laptop, leading to frustration, possible lost work, and early machine replacement.

If you pay more up front for ECC, the number of affected employees will be reduced from 100 to 5. How much extra one should be willing to pay for this reduction depends on circumstances, but I think the impact is quite different than merely avoiding 100 equally distributed random crashes over the course of 3 years.
in Panama, a Man, a Plan, a Mini-Canal
nothing stopping them from hiring haskell programmers and putting them to work writing C++ all day.
Show HN: GitHub Hovercard v0.6.4
13 miles off the coast of SF. What can possibly go wrong?

13mi offshore? What can go wrong is you're still in US territorial waters; they end ~4,200 feet further out, because territorial waters are defined in nautical miles.

But even if you amend to "13 nautical miles off the coast", you run into "Hi, you're still in our exclusive economic zone." To get out of that and truly be free of both territorial and economic-exploitation claims of existing states, you need to be more than 200nm from any coast. Which is ~230mi and a bit more of a hassle to commute to, supply, etc., not to mention you'd need to build a stable anchorage for them and all the natural ones are, well, within the territorial waters or exclusive economic zones of existing states.
Probably a fair bit more than 350k.
I don't think it would be possible before since Twitter thought that it will be super-profitable.

Only now they realised that they have no real model for making actual money. It's the perfect time to buy.
You should believe in something with all your heart
It seems that I am. I even read the blog post thinking it was about Discord. Apologies.
Probably because the only accounts that were compromised were those dumb enough to use the same password on multiple sites, and one of those sites to be compromised.
How to Avoid SAP Security Breaches
CSS is only 40 bits, which is ridiculously easy to crack. 56-bit DES keys are pretty unsafe these days, so you want at least 128 bits if you're talking private keys.

If it's using 2048-bit RSA, that's perhaps equivalent to a 256-bit private key.

So entirely different ballpark to CSS.
Linux has a specific amendment to the GPLv2 stating that it must always be distributed under the terms of the GPLv2, not the GPLv3 or any later version.
Knitting and crocheting is a big thing, actually. Huge community, people selling done products as well as patterns for you to use. Both are calming hobbies and a nice break from programming, even for just 10 minutes at a workplace power-break or home.
No other browser has this feature, so I don't see a point of switching elsewhere anyway, unless out of spite to your loss.
That's incredibly stupid of the teacher if that's the case. The stories are well written, delightful, fun, dark and children love them.
How do you build the ui? Just push pixels? Or vertices? Some library maybe?
I suppose that's true, but in the field where I work (social science), servers are mostly spun up to scratch an immediate and idiosyncratic itch, so configuration tends to happen organically.

I agree that's probably not a good idea, and learning Pupchefsible is well worth the effort. In the meantime, though, there's at least some degree of reproducibility with etckeeper.
Robot revolution helps Adidas bring shoemaking back to Germany
Congrats! Very smart move by Samsung.
Professionally I'm a data scientist, but vocationally I'm interested in how the world works, and "real industry" is an important part of that.

Also, I'm British, and the Alliance Boots deal was big news.
What is MSR? Google gave me a bunch of weird results...
Why honor is the most important trait in business
That comment was in regards to ufw as it doesn't support adding IPv6 rules by default in commands in older Ubuntu.

If you don't enable IPv6 and the server supports it (odds are it does) all of the benefits of using ufw at all are totally ignored on IPv6.
No one forces you to use any particular browser, and you're getting some incredibly complicated, useful software for free.

If you find that Chrome updates come with unwanted changes, you might want to try Firefox or Opera.
ME is capable of running signed Java code

How much firmware is in the thing? Is there a whole JVM in there? An OS? That's a lot of attack surface.
Proven Toolkit to Jumpstart Your Social Media Optimization
I'm guessing Microsoft Research.
You should do your due diligence before using a framework/library/technology for production code. Don't just follow the hype.

http://www.sheshbabu.com/posts/guidelines-to-choose-a-javasc...
It's true that people doing PhD's aren't monetarily driven but you can easily imagine that incentives change once they start a family and have to worry about things like a mortgage, college tuition for their kids, etc. If you can get a significant pay raise while maintaining some semblance of research autonomy AND have greater impact, why not go for it?
What damage? These are pretty positive documents, they all look like pretty good things to me.
Good.

The recent apps since Lollipop was so convoluted already, since they allowed up to 50 items in it, which kills the convenience of having a recent app list in the first place. If you open the recent list and the app you want isn't in the first 7+-2 items, it'll take longer then going to the shortcut/app drawer.

That's why they got to their senses in N and limited that list to 7. [1]

Sadly we'll get that sometime next year (my phone just got offered M). But that's another bag of dicks.

[1] http://www.androidpolice.com/2016/05/18/android-n-includes-t...
Good to know. I did some searching and found them here: http://dev-sec.io/
> You can think of it as a lookup table all you want, but you will define your algorithm as some state machine. Maybe looking for the maximum value is too simple, as the use of a combinator is too trivial, but think of a program that sorts a list. You can imagine the program to be a function if you like, but when you design the algorithm, there is no way, no how, that you don't design it as a series of steps.

Again, disagree. I think of it more as defining what a sorted list is to the computer. (An extreme example would be doing it in Prolog or the like, where you just tell the computer what it can do and what you want the result to look like). It's very natural to write mergesort or bubblesort thinking of it a lookup table - "empty list goes to this, one-element list goes to this, more-than-one-element list goes to... hmm, this".

Now that's not an approach that's ever going to yield quicksort, but if we're concerned with correctness and not so much about performance then it's a very usable and natural approach.

> You are -- and I don't blame you, it's hard to shake away -- thinking in terms of a language, which has a given syntax and a given semantics and "implementation". When reasoning about algorithms mathematically, there are no "implementation" details, only the level of the algorithm you care to specify. In TLA+ you can define higher-order recursive operators like "reduce" that does a reduction in one step -- or zero-time if you like -- or you can choose to do so over multiple steps. It is up to you. There is no language, only an algorithm, so no "implementation", only the level of detail that interests you in order to reason about the algorithm.

I think you're begging the question. If you want to reason about an algorithm - a sequence of steps - then of course you want to reason about it as a sequence of steps. What I'm saying is it's reasonable and valuable, under many circumstances, to just reason about a function as a function. If we were doing mathematics - actual pure mathematics - it would be entirely normal to completely elide the distinction between 5 + (2 * 3) and 11, or between the derivative of f(x) = x^2 and g(x) = 2x. There are of course cases where the performance is important and we need to include those details - but there are many cases where it isn't.

> if you wanted to reason about, say, performance of a left-fold or a right-fold, you'll want to reason about how they do it, and how any computation is done is with a state machine.

Sure. (I think/hope we will eventually be able to find a better representation than thinking about it as a state machine directly - but I completely agree that the functional approach simply doesn't have any way of answering this kind of question at the moment).
The rules can be satisfied so long as you're careful. Airlines do this routinely; Qantas, for example, flies New York (JFK) to Sydney, with a stop in Los Angeles. But you can only buy the ticket New York-Sydney or LA-Sydney, not New York-LA, and this is why. So long as anything or anyone you deliver originated at a port outside the US, or you only ever pick up at ports in the US and never drop off, you're on the right side of the cabotage rules.
It would make more sense, if you were familiar with the Unix command line. Pretty much whenever something tells you "Permission denied", you just retype the same command with "sudo" before it and then it does what you want.
And yeah, that definitely happens often enough to be a running joke among Unix users.
Microsoft Research
Sanford “Spam King” Wallace Sentenced to Two and a Half Years in Custody
FWIW I didn't mention/test the -XX:+OptimizeStringConcat, because the place where the changes were being made didn't have that flag enabled and as such wouldn't have been representative of the use case behind the blog post.

In any case, I re-ran the benchmarks with -appendJvmArgs -XX:+OptimizeStringConcat and saw no significant difference in the timing on OSX. You can of course run the gist linked at the bottom and see for yourself whether there is an impact for your OS but there is JEP280 which is looking at generating invoke dynamic for Java 9 which will change the measurements again and make the -XX:+OptimizeStringConcat flag obsolete.
I totally sympathize with what you write, let me just fix the spelling/word usage:

"conciousness" -> "consciousness", but what you mean is actually "conscience".
I did not run any benchmarks and OTP is not directly comparable to GraphHopper as feature set is quite different. So this is just my impression an take it with a grain of salt.

My impression is that GraphHopper is fast and does not take much memory whereas OTP feels quite "heavy" on comparable datasets (city-area level OSM data). So my hope is that if GraphHopper would support timetable routing with the same quality, it will probably beat OTP.

My ultimate goal is to have open-source based multimodal routing on the coutry level (Germany) which would include public transport as well. Frankly, importing country-level datasets in OTP seems unrealistic. GraphHopper on the contrary seems very promising.
I suppose I can't help but admire the chutzpah of cloaking a tax deductible scheme to drive down your labor costs as a noble quest to "advance human potential".

Now where did I put my black and red flags...
> That is not what btilly means. You are talking about using a type system to write an arbitrary program. btilly is talking about using an arbitrary program to specify the typing rules for a set of values. His assertion is correct: if you can use an arbitrary program to determine what the types are in your program, then figuring out the types of your program is undecidable.

Right, but my point is that it's not necessarily impossible to just express the program that figures out the type in the type system.
I dunno. Can it solve your caps lock problems?
Great news and good acquisition as well. Great work Samsung!!!!!
> I know progressive web apps that are added to the homescreen still have that functionality but the main idea of PWAs was that the move from a website becoming an app should be as seamless as possible...
nice video, probably would help us a lot while travelling, making new friends, at random places.
A Twitter client that puts users first
www.whileaway.top is a Twitter client that provides a better version of Twitter 'while you were away' by putting users before tweets. You pick the users whose Tweets you enjoy reading and Whileaway makes sure you never miss a Tweet from them. In a way this is similar to Twitter lists but the way the tweets are consumed here is different.

The whole interface is keyboard navigatable. It's cool. Try it out.
Rest – HTTP request power tool v3 now in Beta
I used to play an MMO primarily populated by Russians and Ukrainians - I've also lived in a few other places. The writing on the blog post definitely sounds Russian.

I really doubt it was Russian intelligence services, though, just a hacker having some fun with account names etc.
I don't think is fair to compare OpenAI to other companies.OpenAI will open the research they are doing right now.
Octopus DNA is Alien
>1) Intel has such technology implemented in allmost all desktops/servers currently running

Ever wondered why Google is working on their own CPU?
New Alienware Product Line Has 6th Gen CPUs and 64 GB RAM
Nice idea. Keep going.
I can't find the numbers, but I'm fairly sure that IBM Research is much bigger than MSR.
RSA vs. DSA for SSH authentication keys
So much investigation, when this line alone tells he's a russian:

>appreciated my skills so highly))) But in fact

The))) smile.
Indeed, but some browsers have the tab switch button at the bottom, which I find much more ergonomic. Another reason for me is that Chrome bookmarks page sucks, so I got used to adding them to a folder on my home screen instead. It worked surprisingly well with the Merge Apps and Tabs feature, but with that gone Chrome just stuffs newly opened links in a new tab instead of opening a new window.
Oh, does nobody want to call me crazy, or talk about how I'm isolating myself, or call me a rape apologist? Ignoring and downvoting questions every single time, from day #1, not addressing the plagiarism claim in earnest once, anywhere. It's all one bundle, and you better "think of the children" or else, right?

All that while you waggle your finger at me? Nope. Use your words, or live with your part in this. Having double standards isn't twice as good as having standards. It's like having none.
So, What do you think about it....
Alienware is a nice one Gaming laptop i have used but still the Problem is there for weired fan sound!!!!
Ah yes. The world really needs more & more developers. This will solve all our problems.

Especially if the problems you have is maintaining your grip over people's digital lives.
Someone should demand patent royaties from Microsoft for this, and give them a taste of their own medicine.
Jacob Appelbaum: “But he does good work.”
I mean that for smaller things, rabbits, prairy dogs etc... I'd probably be inclined to reach for a .22 LR... same regarding elk/deer. 3030 or 308 ...

As to the style, I think that's more about personal preference... I'm not concerned about people that want "scary looking" guns.

Again, I'm not an owner... but with all this talk, wondering if i can find a local butcher that carries rabbit.

... wow, just looked, didn't realize there were that many caliber choices...
Ah this reminds me of one of the very most tricky bugs I ever tracked down: https://github.com/dsully/pykafka/pull/15
>Backups should include everything required to rebuild every server in the company. No server should be 'too critical' to wipe and start again if required.

True. But compare the effort required for, say, solving an accidentally misconfigured /etc/sudoers on a database server. You could argue that would never happen with proper testing, but shit happens and and having a particularly long root password in Keepass is a small price to pay to save that sort of headache.
Interesting, so that means you're using QWERTY?
> Ask HN: What are some good peer-reviewed papers on psychology of programming?

> Ask HN: What are some good peer-reviewed papers on psychology of programming?

> Ask HN: What are some good peer-reviewed papers on psychology of programming?

Xc cv c c cv cv cv cv c cv cv cv ccv cv cv cv
This is incorrect. 99% of code is useless and should never have been written.
Honest question, how is anyone expected to keep up with all of this? Software licenses are not all that interesting to me, I just like making things, but now I have to also read pages and pages of legalize for every single dependency. I thought it would be good enough to know most mainstream licenses, but apparently Linux has a modified version of the GPLv2? I would never notice that, nor would I trust myself to even comprehend it properly.

It's starting to feel like I need to consult a lawyer before I could ever publish an open source project, and that's never going to happen. I'd rather just stop publishing.
Since your account is new and this is your only comment, it seems fishy.
Don’t abandon the Europe that I fought for – and my comrades died for