skysight-inc/HackerNews huggingface dataset:
> They will be mental health money sponges for the rest of their lives (esp. ones that relapse), and the people that made good choices have to pay for it all. It just seems unfair.

Others have tackled the misconception that addicts are addicts for life, so I will point out instead that you are paying anyway, because currently these people tend to end up in the prison system. If the drugs are legal, and the addicts are treated as patients instead of criminals, it removes a lot of the incentives to steal or rob in order to support the habit. Getting treatment makes it more likely for them to start making better decisions, which enriches the society as a whole.

It is entirely plausible, likely in fact, that legalization and treatment will cost less than maintaining the gigantic prison population we have currently. Perhaps instead of thinking of it as charity, you could think of it as a better investment.
Reminds me of this… https://hardware.slashdot.org/story/01/01/25/1343218/directv...
Not to mention not secure.
Watch for iPhone retina and other hi-res devices that have resolution adjustments beyond the standard screen size.

Example query line

@media only screen and (-webkit-min-device-pixel-ratio: 2) { ...
> I suspect, the boomer generation of leadership is probably going to historically enjoy one of the longest sitting times in power as a generation because of their unique spot in the rate of life expectancy growth curve...

The fact that it was a significant baby boom followed by a significant bust in Generation X is also a big factor, since it mean that Gen X never passed the Boomers as the numerically-predominant generation (instead, it either has recently or will soon, I forget which, switch from Boomers to Millenials.)
GPS locators are passive: only receiving signals, not emitting them.
He's honest, but he just shouts down and insults anyone who disagrees with him. That's not okay. You can be "no bullshit" without being an asshole.
Question: we are looking to deploy a flask + redis based application to a single server on AWS using docker. No load balancing, no multiple server

what is the current best practice to do this (with logging, etc.) ? should I even be considering something like marathon/k8s, etc ?

currently I have a fat docker VM with supervisord and all services running in a single VM with highly fragile logging. I dont think this can last.

getting started seems very intimidating in the Docker world.
more like, how nextdoor ignored the needs of its users, shot itself in the foot, and made itself irrelevant.

you're all suspicious. you're all idiots.
I'm not embarrassing myself. There is a lot of research literature that makes me pretty convinced that the way Americans raise their kids has gotten worse. We are, as a society, overprotective. We don't let our children out into the world enough. We don't let them experience independence early enough. We don't let them fail at small things so that they develop resilience. These are big problems.

In order to fix this we've gotta be a little defiant. If one person acts differently they're gonna be the oddball and the system is going to knock them down. Maybe it's CPS. Maybe it's a nosey neighbor. Who knows. This gets better when A LOT of people start acting differently.

Sure. If you're poor or otherwise not in a position to fight the system I don't expect you to be first in line. But I've got a dollar that says that doesn't apply to you or DanBC or some of the others in this thread. The median Hacker News reader is a white engineer with a good salary and is, more that almost anyone, in a position to stand up to the system if it causes them problems. I'm in that group too. It's our responsibility to make things better, not just for ourselves but also for the people that aren't in a position to do so on their own.

That's what I think.
Chomsky's personality reminds me Dijkstra - so full of themselves that they don't entertain anyone challenging their ideas.

Take a look at how Chomsky writes emails, see his correspondance with Sam Harris https://www.samharris.org/blog/item/the-limits-of-discourse - the arrogance in his reply to a genuine offer of conversation is staggering.
> Seeing real estate as a stand-alone sector in an index could also drive more money to REITs.

I'm going to be very interested to see how this reclassification impacts the price of REITs. I'd imagine that capital inflows are going to cause a spike in prices.
>Posting a random link to something isn't "evidence". Not to mention that he didn't say anything, he just wrote "words". Impressive you are impressed.

I didn't say that parent gave evidence. I say he gave an argument -- you know, premises and logical steps that can be followed (or refuted) to determine if something is true or not.

>So if I argue it's no longer subjective?

No, if someone puts forward an argument, it's by definition not subjective. An argument is something that can be evaluated.

Maybe you conflate arguments with opinions?

Of course an argument might be based on a subjective selection of premises, but that's beside the point. One can always refute the argument by pointing to issues in either its logic or its premises.
Previous discussion: https://news.ycombinator.com/item?id=12360736
Not if it's so massively inefficient that the number of false positives mean that you waste time chasing air.
Imagining your last supper
Let's just hope the cables were all connected correctly.

https://en.wikipedia.org/wiki/Faster-than-light_neutrino_ano...
> If by google's age and experience, you mean the requirements of the Google Cloud, then i agree.

Why do you think this is a requirement of Google Cloud?
One thing I don't understand and maybe someone can take the time to explain.

Why does it have to be this "Dark Matter" causing the mass differences we've been seeing? How do we know it isn't undetectable-through-normal-means normal matter, or aliens, or mistakes in our calculations/observations, or anything else?

Since we haven't been able to detect dark matter, it seems from my layman point of view that any of the above "hypotheses" are equally viable.

What am I missing that makes astronomers and physicists so sure that this "dark matter" exists?

Edit: Thanks for all the great responses! I'm not going to respond to each response, but the discussion has been enlightening.
I do accept that pure science is worthy a percentage of the budget, but NASA science is particularly inefficient. That is, at the current amount of money that NASA spends, we would get more science for less money if we did more science on Earth.
Nobody in the IC believes allies aren't constantly spying on each other. Germany and France are notorious for doing it to support their state industries. Like it or not, in the intelligence arena, the US and Germany are rivals.
How the US CPSC Is (Inadvertently) Behind the Internet’s Largest DDoS Attacks
Surely analysts at the companies you mentioned are wise to this and factor in the likelihood of this happening, no?
could you talk about your deployment scripts ? i am trying to deploy a single flask app which uses redis. I'm not sure how to set up logging, etc. and whether redis and flask will go in the same VM.
My use of jemalloc in multithreaded servers shows the opposite to be true. Memory use is a little higher than the single mutex dlmalloc, but you'd expect this with a modern high performance thread aware malloc implementation. You think MariaDB would choose jemalloc if it wasn't efficient in memory use?
False dichotomy. You can do other things besides chasing a very high false positive-rate indicator and sitting still doing nothing.
To be fair, I'm not sure there is a physics engine that can handle KSP in real time.
I just spent a week in the Shenzhen Huaqiang Bei electronic malls and I couldn't agree with you more about the pricing. You can do so much better being there physically and negotiating the hell out of things.
> The change was made a year prior.

Why did I not receive any notification? A change in contract of that magnitude should have led to me being directly notified per email or other communication methods, so that I’d actually have a chance at still using the credit.

This way, you notified me right when the credit ran out, which was extremely shady, and I’ve met hundreds of others with the same issue in IRC when you invalidated it.

I can’t and won’t be able to assist you with an investigation to improve your public image, though, as I’m quite busy at the moment, and my time is better spent contributing to open source projects than discussing the wrongs of a hoster that won’t change anyway on HN.
See also PHK's Blackphone reviews (December 2015):

· https://www.version2.dk/blog/blackphone2-review-1-508188

· https://www.version2.dk/blog/blackphone2-review-2-545078
Probably not, but maybe. This chinese processor is hardly a beast. It is comparable (±20%) in raw GFLOPS to a ~$200 Intel skylake processor: 4-core 3.3GHz i7-6700K is rated 422 single precision GFLOPS.
In one of Greg Egan's short stories there is a religious maniac who engineers a deadly STD so as to permit only one lifetime sexual partner, lest the virus be activated and kill the fornicator. (If I remember the plot correctly. It's in the "Axiomatic" short story collection.)
New dark pattern found in Dropbox security email: Click-repellant communication
I guess I could just read the book, but can you expand on the lesson implied by "the buyer and seller lawyers didn't seem so work so hard to find a way to remove him from the transaction"?
If entrepreneur can keep at least 50% of the company then already today L-1 could be a viable option.

Looks like the proposed parole is quite similar to L1 except instead of foreign company there's foreign private person direct relationship.
I think dark matter is a synonym for "undetectable-through-normal-means matter". It's just a description of something mysterious causing effects that some kind of matter would cause. It could be a mix of different kinds of undetectable matter, or some fundamental flaw in our understanding of matter and gravity, or something else.

The arguments against aliens and mistakes are presumably that the effects appear consistently across the whole visible universe, and through many different measurements.
If there is limited capacity, pricing can be used to discriminate customers. Free cannot. The discrimination provided by charging will provide detailed information on what people are willing to pay for and how much they are willing to pay. Free will not. Charging will surface the relevant market for a product for which the goal is to charge, free will not.

Good luck.
Politics and engineering are, in certain aspects, polar opposites.

Funny - and possibly relevant - tidbit: the Prime Minister who decriminalized drug use in Portugal has a degree in EE.
I don't want picture because I think they are important for NASA's public image, I want pictures because they are awesome. If people took the idea seriously that NASA's primary purpose is science, then it would be hard to avoid the conclusion that space science has very low payoff for the cost compared to other forms of science.

Would anyone give up having sent humans to the moon since it would have been cheaper to just send robots?
I trained it on an AWS instance with grid k520 gpu.
Scala 2.12 nine months behind schedule
That sort of reasoning doesn't apply when you're talking about white people. You are talking about the only group that enjoys and benefits from a unique privilege they cannot opt out of, regardless of how they may feel about other races.
That is entirely irrelevant to people who are still getting hacked because of these hoarded vulnerabilities.
Adrenaline was synthesized over 100 years ago.

Most of Mylan's drug portfolio has come from acquisitions of other companies. They sell branded drugs that have been synthesized years ago by other people.

The only R&D this company is doing is who to bribe in Congress and how to extort more money from the American public. True free markets at work.
Swarmkit was built from scratch, based on lessons learned in the previous non integrated Swarm.
People may be surprised, but drugs, even really good drugs, need to do some marketing. You can argue over what level of marketing is appropriate, but if you had a great drug and didn't do marketing, you'd take a huge hit to revenue.

Also, pharma marketing is very human resource heavy. You need to hire reps to visit offices. That's not cheap.
Does Gen X have more in common with millennials or boomers? Would there be much difference between a society dominated by Gen X rather than millennials?
Bring back the 10,000 line bash scripts, Puppet, configuration drift, inconsistent environments. All is forgiven!
I think that is extremely unfair. When I was in my early twenties, and trying to make a difference via NGOs and the like, one of the things that was always taken as a truism, was if you ever had a question, you could email Noam, and he'd get back to you. The man is famed for responding to almost everyone who writes to him, which considering his fame, is quite substantial, and for working tirelessly. As such, I think we could be forgiving for writing terse email responses, particularly to those who he believes misrepresent his views
> If there's a secret cabal of "certain people" deciding this stuff, who are they? Where are they?

One of Nixon's aides flat out admitted, decades after the fact, that the war on drugs, especially marijuana, was instituted (or rather, ramped up) in order to marginalize blacks and hippies.
This argument would hold more weight if the pharmaceutical sector didn't have 17% profit margins. Only beaten by Banks,
Financial Services, Shipbuilding, and Tobacco.
http://pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/...

Also pharmaceutical spending on R&D is much lower than many other industries.
Hi mtanski,

How did you replace docker with rkt? Do you have an howto that you can share?
Which release is going to be production ready, and which features are production ready in each release? If Docker Inc documented which features are production ready, I'd have more sympathy for that point of view.

What we've had to do at Red Hat is always stay a couple releases behind (we're shipping 1.10+patches right now) and backport all the fixes from upstream releases to make it stable (ie production ready). Docker keeps shipping new versions, with fixes for old issues but then a whole new set of issues added in.
SendGrid experiencing significant delays for past three hours
Who cares what Curtis Yarvin thinks?
Bullshit. Insulin was developed in Canada. Viagra was developed in the UK. Sure, 50% of the worlds pharma is developed in the US (as of 2010, it hovered between 30-40% until then), but most of the stuff people need has already been developed. So no, the majority of drugs that people use have not been developed by the American government.
My understanding is that they have a huge sales force that sells directly to doctors which then also requires a lot of admin.

In any case I hope we can agree that they are highly profitable and could afford to spend more on R&D if they viewed it as worthwhile.
tl;dr: I don't like metaprogramming.

----

Both of those things are very good, even great, but they don't speak to the issue: It's [bad] magic.

In this case, it does at module-load-time what should have been done previously at build-time. (And yes, I know Python normally doesn't have build-time the way e.g. C does.)

I'm working on a large production codebase right now where several of the cowboy-coders here have added all sorts of crazy metaprogramming and it's a PITA.

Let me tell you a story. We had a class decorator that introspected the attributes of the class and added "constants" to the enclosing module providing named string values for each of the class's attributes. It lets us access dict versions of these objects (they're data models) like foo_as_dict[foo_module.SOME_ATTR_NAME_BUT_IN_CAPS] ...

Good luck finding foo_module.SOME_ATTR_NAME_BUT_IN_CAPS in foo_module.py though, because it's not there. (and notice that if the model field name changes ALL of your uses of the "constant" have to be refactored to the new name too, so it's not really as helpful as it might seem in the first place.)

And now every new developer has to ask, "Where are these coming from?" and we get to point out the magic extra-clever decorator. (Try to imagine the horrible wonderful "voodoo" that decorator encompasses... Imagine the innocent newbie encountering it.)

We have a "service builder" thing that takes a bunch of arguments and build a web service object in memory at module-load time. No source for any of that machinery. A bug in the service gives you a traceback running through a bunch of weird generic meta-code.

Did I mention the guy who originally wrote it bailed to a new job a month after he finished it? No one else knows how it works. We can read the code and reverse engineer it, of curse, but that's kind of B.S., no? A junior dev could debug the real service code if it existed, but the meta-code that generates the services is another challenge (that they shouldn't have and the company shouldn't have to pay them to overcome.)

We had unittest that read a JSON file and built a test suite in memory to run a bunch of other tests. They finally let me re-write that to a build-time script that scans the exact same JSON files and emit plain-vanilla unittest modules, that then can be run as normal, and the dev/user can look at the actual code of the test, rather than the meta-code of the test-builder.

The same problem applies to this attr package.

If you're trying to trace into or debug code that uses attr you've got to know attr at least enough to be able to follow what it's doing. It's an in-joke. ;-)

(P.S. I'm a big fan dude. Nice to interact with you. All respect.)
> Why did I not receive any notification? A change in contract of that magnitude should have led to me being directly notified per email or other communication methods, so that I’d actually have a chance at still using the credit.

I agree with you completely. That is precisely why I refer to it as a communication failure. I had a year to ask "Why didn't we email about this?" I didn't ask that question. I failed. I'm sorry.

I understand that you're not interested in helping, but my offer stands, and I appreciate you and your feedback. We're all just people here trying to do what we think is right. I know I fall short, I make mistakes, but all I want is to own them and make them right.
In the US at least there is ARES/RACES, and many cities/areas have some kind of liaison, periodic net checkins or drills, lightweight training, etc., so that hams can work effectively with the local incident response.
Jean-Pierre Petit have been talking about this for many years, but has been considered a sweet lunatic. The fact he is a UFO believer didn't help, but it's too bad they discarded all his ideas because of it.
A market with enough customers to get to $10k/month revenue within a year with few competitors, preferably none of which are multi person companies.
Chat in the Enterprise: Part 2
Support.cloudflare.com down
Trying to resolve an issue regarding CF ECDSA certificate for the last 15+ hours and now can't check the ticket:

This page (https://support.cloudflare.com/hc/en-us) is currently offline. However, because the site uses CloudFlare's Always Online™ technology you can continue to surf a snapshot of the site. We will keep checking in the background and, as soon as the site comes back, you will automatically be served the live version. Always Online™ is powered by CloudFlare | Hide this Alert

I loved CF until 8/24/16 when they issued a new SSL cert for my domain. I know CF loves ECDSA but they did not check if my server supported ECDSA before changing the cipher suite. Just roll back to whatever algo was being used before if sane, but for the love of Pete, before issuing the certificate:
1) check to see if the server supports the proposed algo,
2) notify the user if the user's server does not support the algo
3) allow the user time to investigate and implement options
4) potentially issue a certificate that works on the customer's server (just like it did for over a year).

Normally not a big deal, but this domain is hosted on a shared host (it was more of a test to check out Cloudflare). I don't have anyway to update the server to use ECDSA, though I put in a support ticket with the host and they said, "No. We will not support ECDSA but do support a list of other EC algos". Obviously, I am going to move away from this host...and CF.

In any case, their support response is slow, but this site was using the free plan...and now their support site is down.

Any suggestions for CF alternatives?

[edit: the support site is now up 10:48PST]
JavaScript is missing some fundamental cryptographic primitives that make it impossible to write secure software with JS, most notably it lacks any cryptographically secure random number generator.

Additionally, package installs are insecure, so unless you have time to audit the entire `node_modules/` you can't actually guarantee that the code you want to run is the code you have installed. Additionally, because JS doesn't have any namespace restrictions, a vulnerability in any package allows access to the whole codebase.

For a survey of problems with JS (none of which have been fixed since this was written), take a look here: https://www.grc.com/sn/files/jgc-javascript-security.pdf
> Does Gen X have more in common with millennials or boomers?

AFAICT, Millenials (in fact, lots of the Boomer vs. Millenial comparisons I see now I saw virtually verbatim 20-25 years ago as Boomer vs. Gen X comparisons.) But that could be a misimpression.

> Would there be much difference between a society dominated by Gen X rather than millennials?

Maybe, maybe not. My point was, had Gen X been bigger the transition from Boomer domination to a domination by a successor generation would have happened sooner, whatever that transition would have meant.
> the JVM has a lot of Bugs, Bugs that you won't have in C

There will be different classes of bugs, of course, but I find it hard to believe that it will be more bugs, or more serious bugs, or most costly-to-fix bugs. Otherwise, your own company would have decided to use C instead of Java, right?

> Hell you can start your programs under Linux with user namespaces just without docker

Sure you can, but if Docker (or any other solution, for that matter) makes it easier or faster to do that, more people would do that. There's a more or less fixed number of work units to dedicate on a certain project, if you have to use them all to set up security solutions, your lunch will be eaten by other people.

> most stuff is just possible without docker and the big abstraction

Most stuff is "just possible" without any abstraction at all. However, one has to learn to leverage abstracted-away stuff, otherwise one will spend a lot of time and accomplish very little valuable stuff.

> trust me it's way easier to control a single stack instead of managing a stack on top of another

Easier does not equal safer, faster, or more business-valuable.

> it's cool and easy / shiny if you can have everything in the cloud

Not sure where "the cloud" enters the equation? You can use Docker (or whatever else) to manage even your on-premises stack.

---

I don't know the specifics of your situation at all, but if your only argument against a particular piece of tech is "it abstracts away stuff, therefore it is worse", you might want to consider some self-reflection on whether you're not just suffering of NIH Syndrome (https://en.wikipedia.org/wiki/Not_invented_here)
Custom allocators have the disadvantage of not knowing how the rest of the heap is managed. They are at a disadvantage to a modern well designed memory allocator like hoard or jemalloc.

Feel free to examine the many papers put out by Emery Berger on the subject of memory allocation as well as the design documents of jemalloc.