skysight-inc/HackerNews huggingface dataset:
Something important that I don't think many people bring up is the cost of these drives in a RAID, taking reliability into account.

When you're using this as the sole drive in a desktop machine or something like that, paying the extra for a HGST is pretty straightforward, but I see too many people passing over Seagate or WD when they intend to put them in a RAID, for "reliability"'s sake, without (it seems to me) much thought into whether it's really worth it.

Sorting by $/GB for Hitachi, Seagate and WD on drives >= 4TB (http://pcpartpicker.com/products/internal-hard-drive/#m=19,3...), you get:

- 4TB WD: $129

- 4TB Seagate: $114

- 4TB Hitachi (HGST): $158

So in order to get the reliability of a HGST, you're paying a 38% premium, is the extra reliability helpful in a RAID?

If you look at say a RAID6 array, aiming for usable storage of say 16TB, HGST's longest running drive (at 0.11% failure rate) would have a roughly 0.000016% chance of failing in a given year (0.0011^3 * 6 * 5 * 4) (chance of first drive failing = 6x(single), second=5x(single) etc.), assuming nobody replaced a failed disk, since you need 3 drives to fail.

Now an array of Seagate's longest running drive (2.66% failure rate) of the same size would have a chance of failure of ~0.225853% in a given year.

But, the cost of the disks in the Hitachi array would be 6x158 = $948 while the price of the disks in the Seagate array would be 6x114 = $684. For the price of the Hitachi disks you can get 8 Seagate disks.

So what happens if you just add the extra Seagate disks to the array as extra parity? Now you need 5 drive failures, giving an equation that looks like ((8 * 7 * 6 * 5 * 4 * (0.0266^5)) * 100), and a chance of failure of 0.008949%, still way higher than the Hitachi.

In the end buying Hitachi/HGST seems like the right choice anyway but I thought it interesting since I hadn't seen anyone else look at things this way.

If anyone has any problems with my math, please feel free to point it out, my stats background is pretty limited.
I haven't read "Thinking in Systems," but I'm wondering if it's similar in spirit to Mindstorms, which advocated teaching in terms of thinking in microworlds, or systems.
To start with, store most funds offline. A bank run (or hack) should be subject to intervention by a human. Contact customer if there is any doubt. Implement checks and limits for the remaining balance. Regularly audit and publish cryptographic proof you are in control of funds.
Cursive with a ballpoint pen feels really different from cursive with a fountain pen. If these schools want to talk about cursive as a form of artistry or individuality, they should get the kids using fountain pens.

You might be interested in this article: http://www.theatlantic.com/technology/archive/2015/08/ballpo...

HN discussion: How the Ballpoint Pen Killed Cursive https://news.ycombinator.com/item?id=10141874

Edit: formatting
>I would say the easiest way to check is if actions match the talk.

If you look over his actions for his whole career with tesla and solarcity, he seems to be either an idealist or just a legitimate businessman. I can't see any way he is setting himself up to steal an immense amount of money from investors or customers, and run off to some place without an extradition treaty (Mars?).
What do you use for session management / syncing? I've found that the Chrome Session Buddy extension is highly preferable to the Firefox Session Manager. Why something so crucial is a hobbyist project on both ends and not internalized by the respective companies - I still wonder myself.
How much do judges charge for this sort of thing? Anybody know?
Microsoft removing support for DRM protected media formats from Windows 10
I disagree, the pool of candidates basically only changes via immigration and as people retrain or teenagers choose different college majors (very slow).

> For example there are plenty of people qualified to do engineering work who aren't working in that field right now for whatever reason, but could be enticed to take an engineering job for enough money.

Like whom? How can you be qualified to do software engineering if a) you've invested so much in a different career that you already make more than SV salaries and b) you presumably haven't done software engineering in years?
yahoo did this to me. Verifying employment is one thing (I guess...), but their background check thing wanted exact salaries too, and permission to ask HR at all my previous employers.

Is this common? I've worked for small companies so haven't run into anything like this elsewhere. Except for one asshole that wanted to do a reference check two weeks after I started work (!!!) (he offered me a job at the end of the interview with a 24 hour time limit and had me start 3 days later; I had already left the previous employer so it suited me well enough at the time), and was unhappy when I told him what he could do with himself.
But a video would have the characteristics of a photograph rather than a physical eyeball, so the other techniques used to try and detect photographs from eyeballs would catch the video.
According to google, that's $62,129,412.80 US Dollar
Why is he so unhappy? Reading this thread it would seem that opiates are innocuous, a glass of wine is more dangerous apparently.
Seriously, I can't understand how people can say such things actively encouraging people to take opioids because they have "less side effects than alcohol".
Time for a hard fork ;)
Surely, but that requires more knowledge and care than securing cash.
https://i.imgur.com/KOWCRnZ.jpg is the popup that comes up.

What happens if you click "okay I understand", because "okay, I understand" isn't a positive nor is it a negative confirmation to do the update, its acknowledgement of the statement being issued.

Terrible UI design.
"Hey, did you spin up an SSHD on that new box?"

"Can you bounce the SSHD?"
It is. We have a large codebase we would like to migrate to Hack, but we also have a lot of developers who use Windows and the current experience with needing to boot a virtual machine just to check types doesn't really cut it.
Font rendering makes some optimizations that aren't general purpose. Rendered glyphs are (may be) cached. Assumption of a single color. No self intersecting outlines. These allow font renderers to take shortcuts for performance.
>What's the internal temperature of an efficient Dyson sphere? Or conversely, what's the minimum size of such a sphere around various star classes to maintain a goldilocks-zone internal temperature? What are the mass requirements of such a sphere? How do the nonrotating elements of that maintain themselves against stellar gravity?

I think the confusion might be you are thinking about a classical Dyson sphere and not what would be built by a civilisation trying to most efficiently use the resources available. An efficient system would be composed of a set of independent (but co-ordinated) energy collectors arranged in a series of shells (for lack of a better name lets call this structure a Tillett Onion). The inner shells will be quite hot, but the outer shells will be very cold. The emission spectra of the Onion will be determined by the outermost layer, which if it is out near the orbit of Pluto, will be close to the background temperature of interstellar space.

If these collectors are coordinated they can use some of the energy they capture to maintain their orbit. These energy collectors don’t need to use much matter (they can be one atom layer thick) since all they are doing is capturing the energy released by the inner shells.

This really needs a more detailed write up than a post buried on HN :)
> Which are ...?

seccomp.

Local code execution doesn't mean a thing (except for wasted CPU cycles and/or memory) if number of syscalls the process can do is limited to the bare minimum.
if those were the only screens in the world, I would agree wholeheartedly, but there are millions, if not more, non-mobile screens in use today. This problem is unlike to go away with high-dpi technology in the next 20 maybe even 50 years.
Wait a minute, it is straight up crazy to suggest that most engineers get paid less than 0.01% of the value they create. If you make $100,000/year, in order for that to be 0.01% of the value you create, you'd need to create $1 billion in value.

You're off by like dead minimum two orders of magnitude, and probably more than three.
> I live in a big east coast city and let me assure millennials are having a lot of sex.

People of the socioeconomic strata that you tend to interact with and have direct knowledge of may not be represesentative of the entire age band, even in your region.
>Who is to blame for this hack, finex, bitgo, users?
>>>We're still investigating the hack to figure out exactly how we were compromised, but it does look like it's on us.

Source: https://www.reddit.com/r/Bitcoin/comments/4vtuxo/bitfinex_se...
> - Full vacuum does not touch XIDs - use freeze or just normal vacuum,

Don't think that's right.

copy_heap_data(Oid OIDNewHeap, Oid OIDOldHeap, Oid OIDOldIndex, bool verbose,
bool *pSwapToastByContent, TransactionId *pFreezeXid,
MultiXactId *pCutoffMulti)
...

/*
* Compute xids used to freeze and weed out dead tuples and multixacts.
* Since we're going to rewrite the whole table anyway, there's no reason
* not to be aggressive about this.
*/
vacuum_set_xid_limits(OldHeap, 0, 0, 0, 0,
&OldestXmin, &FreezeXid, NULL, &MultiXactCutoff,
NULL);

/*
* FreezeXid will become the table's new relfrozenxid, and that mustn't go
* backwards, so take the max.
*/
if (TransactionIdPrecedes(FreezeXid, OldHeap->rd_rel->relfrozenxid))
FreezeXid = OldHeap->rd_rel->relfrozenxid;

i.e. the cutoff is computed in copy_heap_data(). And then in

void
rewrite_heap_tuple(RewriteState state,
HeapTuple old_tuple, HeapTuple new_tuple)
{
...
/*
* While we have our hands on the tuple, we may as well freeze any
* eligible xmin or xmax, so that future VACUUM effort can be saved.
*/
heap_freeze_tuple(new_tuple->t_data, state->rs_freeze_xid,
state->rs_cutoff_multi);
Building a business in San Francisco is a masochistic behavior. You face not only extremely high cost of living(rent, goods) and high salaries, but you also have a bunch of pinko losers that want to regulate and tax everything they can. Why would any rational person become a lemming and rush to where everyone else is going?

Move to other states and try remote work.
Whoa. A core BitCoin dev (maaku7) just suggested blacklisting those transactions in miners[0]. More to come, I'm sure.

[0] https://www.reddit.com/r/Bitcoin/comments/4vupa6/p2shinfo_sh...

Yes, that's a scary precedent.
Sorry, wasn't clear. I assumed it was obvious that bitfinex's online key was also compromised, no matter what happened with BitGo, whether their key(s) were stolen or if their api was abused.
Your original post said "Because I've been hearing the "Pi0 is $5" trope for ages, yet I still haven't been able to find one, let alone at quantity..."

So I was pointing out that you can find one for that price, even if not at quantity.
Part of the beauty of start-ups is that anyone can start one. You don't have to have a 20 year vetted resume, a college degree, or extreme wealth. However this is a boom-a-rang that comes around full force when people expect financial and medical services being offered by start-ups to have the same quality as those created by people with 20 year vetted resumes, college degrees, and extreme wealth.
To me, there are two separate concerns: intent preservation and coherence.

Operations cause a change of state. The sequence of operations that are performed given a user action need to ensure that they will cause a modification of the state of the database in the way intended by the user.

Coherence is about maintaining a design. A set of rules are conceived. For each state, it is possible to determine whether the state is valid according to them, and if so, the database is coherent.

To maintain coherence, it is possible to deny an operation, therefore breaking user intent. To maintain user intent, it is possible to accept an operation that leads to an invalid state. From what I understand, noms is heavily tilted towards coherence, like git, but unlike git, it doesn't have the social "pull request" aspect, nor a support for running tests.

You mention diffing as a plus, but realistically the only use of diffing is to guess intent. Real intent can only be provided by a maximally rich set of operations. Logs of SQL queries, for instance, are more likely to provide insight than a cold diff. For a database that is tilted so far towards maintaining coherence at the expense of user intent, it may be a good idea to compensate by staying close to the operations.

Finally, if you decide to tilt towards intent preservation, there are definitely approaches to automate merges, avoiding nagging the user to fix conflicts. The most successful trivial solution remains latest-write-wins, which gives surprisingly good results assuming a high data granularity and a rich set of operations. But unless there is a way to automate coherence validation (which the equivalent in git projects is, I suppose, running the tests), we can only rely on user attention… in which case, relying on the user to fix coherence after the fact on a database that heavily preserves user intent would be pretty much the same.

So… do you plan on supporting custom coherence rules? Alternatively, which conflict resolutions are you leaning towards?
> If I tell you not to ssh into a computer I own, and take no further steps to prevent you from doing so, it's still illegal.

What if you tell me to stop doing it, but my friend is allowed and he types all of the commands that i tell him to type and then he sends me the data? That's why it doesn't quite make sense.

It doesn't make as much sense for a publicly accessible website and user tokens. It makes sense from a tort point of view, but not from a criminal point of view. The next step away would be for users to install an app that logs into facebook and forwards the data to the centralized server.
I think all the major ecosystems require a log-in: Apple, Amazon, Google, Microsoft.

In Windows 10's case, it's only for apps. If you're happy with Win32 programs, you still don't need to use a Microsoft Account.
There is one US candidate who is against TPP, but unfortunately, I highly doubt anyone nearby understands the devastation that software patent trolls cause on the tech industry.
> Regularly audit and publish cryptographic proof you are in control of funds.

What good is that proof of control? Literally the next second it could be drained and no one would know until the next scheduled proof of control. I've never been sure what publishing proof of control is meant to protect against exactly.
That doesn't sound right:

static void
do_autovacuum(void)
{

...

if (classForm->relpersistence == RELPERSISTENCE_TEMP)
{
int	backendID;

backendID = GetTempNamespaceBackendId(classForm->relnamespace);

/* We just ignore it if the owning backend is still active */
if (backendID == MyBackendId || BackendIdGetProc(backendID) == NULL)
{
/*
* We found an orphan temp table (which was probably left
* behind by a crashed backend). If it's so old as to need
* vacuum for wraparound, forcibly drop it. Otherwise just
* log a complaint.
*/
if (wraparound)
{
ObjectAddress object;

ereport(LOG,
(errmsg("autovacuum: dropping orphan temp table \"%s\".\"%s\" in database \"%s\"",
get_namespace_name(classForm->relnamespace),
NameStr(classForm->relname),
get_database_name(MyDatabaseId))));
object.classId = RelationRelationId;
object.objectId = relid;
object.objectSubId = 0;
performDeletion(&object, DROP_CASCADE, PERFORM_DELETION_INTERNAL);
}
else
{
ereport(LOG,
(errmsg("autovacuum: found orphan temp table \"%s\".\"%s\" in database \"%s\"",
get_namespace_name(classForm->relnamespace),
NameStr(classForm->relname),
get_database_name(MyDatabaseId))));
}
}
I was pleased to see "smartbools" as my first result. I believe they're part of C++ 17's effort to extend move semantics to value types.
I think non competes could be done if they were required to be paid at say 150% of comp in the past year, and the employee would continue to be considered an employee for the duration for the purposes of bonuses and equity vesting.

This way, if there was an employee for whom it was worth it for you business to bench, you could do it, but it would be expensive enough to only apply to truly key employees.
Time to join the modern age and get a Selectric.
Fonts are not "collections of pictures", though, and haven't been since the mid 1980. Details in http://pomax.github.io/1449777175633/opentype-let-s-learn-ho... but the gist is that a font is a full, complex, 700-page-specced typesetting program that has to be run on a render engine, similar to how a game ROM is run on an emulator or hardware setup. Sure, you need the engine, but there is nothing to generalize: that engine needs to implement a really large spec, most of which is not "drawing a vector image".
What exactly is that "gif art" category? Do they mean...

• actual art in the medium of gif, like this? http://hexeosis.com/gif01/

• really just short videos with sound, i.e. "people sharing Vines on Tumblr"?

• subtitled clips from TV shows?

Those would all suggest very different business strategies Tumblr could pursue.

• The first means Tumblr's userbase is really just trying to use it "as if it were" Pinterest (i.e. "aesthetic blogging.") Tumblr could embrace and monetize that, but it would require a pivot that would probably remove (what many would see as) vital features from the site.

• The second means Tumblr's content spread is really just a reflection of the relative popularity of video-sharing services like Vine and Snapchat and Instagram among Tumblr's age-bracket[1]. Hard to monetize; it basically means Tumblr is just used for sharing things created elsewhere.

• The third means a set of Tumblr subscriptions essentially satisfies the same need that watching Entertainment Tonight does: seeing little highlights of everything that's come out recently, maybe with responses. Tumblr—or really, Yahoo—could certainly monetize the heck out of that, but they'd have to have some humility to do it: Tumblr, in this use, isn't an audience to advertise to, but rather a huge set of content creators you can advertise and cross-promote.

[1] http://www.statista.com/statistics/199242/social-media-and-n...
Feel like everyone was hoodwinked by this presentation. Nonetheless, is Theranos onto any plausible innovation here with the "new" invention or is this just smokes and mirrors again?
Yes, you can. Just make sure you never use two different log ins from the same account on your PC ;-)
"We don't use cold storage for bitcoin, since our implementation with bitgo we've used segregated customer wallets so that each user has their own bitcoin wallet." [0] This was hubris / stupidity.

[0] https://www.reddit.com/r/Bitcoin/comments/4vtuxo/bitfinex_se...
> it's done as an afterthought, more by contribution of UE community, not so much as a big focus by Epic.

I think that's wrong. Linux support was on the road map, but since the engine was open source, the community(done by one person if I remember correctly) beat them to it. And today Linux is a fully supported platform.

> Using Windows and complaining that MS can mess things up at any time is somewhat incoherent.

Very true. Our only hope is to talk about it, and hoping that MS would listen.
Less foreigners try to buy up houses, bringing down demand and eventually price.
>"we ask for this information... not to draw a box around you, or anything like that, but so that we can give you an offer that matches everyone's needs".

Yuck. I'm always amazed at how willing they are to waste your time by playing "gotcha" over things they should have worked out before you ever came in. Very unprofessional to spring all that on you.
I haven't been using it very long but I'll go. My main complaints:

- Very steep learning curve. It uses its own configuration language (HCL) which means you have new syntax to learn on top of its overwhelming API.

- It's stateful, so you have a state file that you have to store and keep synchronized in your team. There's capabilities for storing the state remotely but it's very much not ideal. You seemingly can't generate that state file from scratch based on your current provider's state.

- The templates are atrociously ugly and the string interpolation is limited, has extremely rough edges.

- It's very much an 0.x product. I keep hitting bugs. EC2 machines don't destroy properly if they have mounted drives. S3 buckets can't be force-destroyed if they have versioning enabled. Some normalization issues here and there which cause constant changes to show up.

- The custom format means the files aren't easily parsed and/or generated unless you're using hashicorp's own hcl go library. This sucks, to say the least. TOML with some conventions and jinja2 templating would have done the job just fine and would have been a ton more readable imho.

It's still good software and design. I would definitely pick it up for new project, but I wouldn't bother migrating existing ones just yet unless you know you'll need it. I use it alongside Ansible and the two pair quite nicely.
Hey, Sam here, CTO of BitMEX - we're a crypto derivatives exchange that's been open since 2014. When we founded BitMEX, we went through a long period of discussion among the partners on this topic. We were just coming off the low of watching the MTGox heist and it it was obvious that wallets were becoming the #1 point of failure on any exchange.

Ikeboy(sibling comment)'s explanation is as good as you'll get, in my opinion. And you can even skip steps 2 and 3, as we have done for two years on BitMEX.

It's our opinion that customer funds are simply too important to expose to this kind of risk, so we process withdrawals only once a day from airgapped multisig wallets. It's a bear, and it's slow - we developed a few internal tools to make the review process easier and separate signal from noise - but aside from some manual work we've never had a problem.

The #1 surprise, to me, was that customers don't mind the inconvenience. Sure, a few wonder why they can't simply get their funds immediately. But it's explained to them, they seem to appreciate the sensibility of managing this risk seriously. Compared to alternatives like ACH, at least it only takes one day and runs on weekends.

I can't imagine a nightmare worse than losing millions of dollars of other people's money. I hope for Bitfinex's sake that they are able to recover a portion and continue operating. We've spoken personally with much of the team and enjoy the relationship. They - and their customers - don't deserve this loss.
We're using microwave-based internet in SJ, with Ridge Wireless. Our experience has been that speeds are slow and whenever a cloud passes between our transceiver and the remote transceiver, or if it's a rainy day, etc, speeds suffer really badly.

I don't know much about WebPass, but I'm not sure that the future is in the air. I'm not convinced that companies have yet built up the infrastructure to e.g. monitor customer link quality, and deal with issues like weather, antenna orientation, etc proactively. The beauty of a cable in the ground is that it pretty much stays the same over time, at least relative to antennas.

I would really love to hear more about how WebPass manages these things.