skysight-inc/HackerNews huggingface dataset:
I appreciate your comment!

> either your credentials can call the TerminateInstances API or they can't

Note that you can restrict the inputs to this API using IAM Policy in semantically meaningful ways. Three controls I'm familiar with that are useful for restricting inputs are the resource type for instances and the conditions for instance profile and resource tags [1]. The latter two are most flexible.

An instance profile restriction allows you to express a concept like, "This user may only terminate instances that are part of this specific instance profile"; in that way, the instance profile characterizes a collection of instances that can be affected by the policy. The resource tag condition can be used in a similar way. [2] is an example of a policy restricting terminations based on instance profile. The key fragment of it is:

"ArnEquals": {"ec2:InstanceProfile":
"arn:aws:iam::123456789012:instance-profile/example"}

A role with this policy condition can only affect instances that are part of the specified instance profile.

This allows you to create roles or users that have access to instances that are part of a certain instance profile only. If you wanted a group of instances to be able to manage (e.g. terminate) themselves, then the role on those instances could be access-restricted to the instance profile of those same instances. By assigning different fleets of instances different instance profiles, you can control which users or roles can access each fleet by restricting access to the fleet's Instance Profile. Similar restrictions are possible with resource tags on instances.

That said, though, I agree that there's room to improve the access control story. Managing instances through their full lifecycle sometimes involves accessing other resources like EBS volumes too, and it's not easy to construct a policy container that sandboxes access to just the right resources and actions while allowing the creation of new resources. Colin called out some of the gaps in his post. If you do not need to allow the creation of new resources then the problem is a bit easier. For example, you can avoid the need to create new EBS volumes directly by specifying EBS root volumes as part of instance creation using BlockDeviceMapping.

[1] http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-suppo... [2] https://gist.github.com/jcrites/d6826fc57b17c3c0ac50cae1fc9b...
Slack isn't an IRC replacement. It's business trying to embrace, extend, and extinguish the IRC protocol so they can capture the business market that uses IRC and collect rent.
> A real barrier to a decentralised web is the difficulty of installing software on a server … Imagine if installing a server-side chat app, message board, project management app, or CMS were as easy as installing a desktop app.

If you have a desktop, you can install any server software you want. And if you have a desktop, you can leave it running as long as you want. You don't need to purchase a host somewhere; you can just use the computer you own.

Heck, you own a computer which is on 24/7 already: your cell phone. And software written well could run on that phone to serve whatever you want, at a minimal cost in CPU & hence battery.
I literally can't tell if this is satire.
I can say without a doubt YES, because I did exactly that 3 years ago. It ended up being about 10%, and bit drop in quality of insurance. After three years at home I can't imagine going back to working in an office again. I'd take another pay cut to stay working at home until the day I retire, or die (which may come first if I keep taking pay cuts to work from home).

I save so much time and money working from home, but by far the best thing is being able to manage the kids and other assorted family stuff would just be impossible if I wasn't here.
Yet another way to think of it is that a matrix is an encoding of a linear (or affine) function, matrix multiplication is composition of such functions, and since composition is associative, they commute. :)
His lawyer, John Jones, died recently under suspicious circumstances, suicide by train, and a man was climbing the walls of his embassy at 2 am in the morning... I have a little sympathy for him.

"Inquest rules that death of Julian Assange's lawyer, John Jones QC, was not 'suicide'"
I host many sites for clients, and use the same approach. Our VPS host offers Plesk (which we use) and it creates a backup every day (basically ZIPs up non-system directories and runs mysqldump / pg_dumps on the databases)... then I wrote a simple bash script which sends the zipped backup to an S3 bucket using s3cmd.

It took a little time to set up, but it is conceptually simple, very inexpensive (especially if you set up S3 to automatically send older files to Glacier, and/or remove old backups every now and then)... and I like that the backups are off-site and stored by a different company than the web hosts.
The zen of gradient descent
I really wish that I could flag replies to my own comments :[

Sorry to burst your bubble, but openly racist and sexist people are deplorable.
I cannot edit my post any more , but I can still reply to it, and it seems the answer is yes:

https://www.youtube.com/watch?v=QVuU2YCwHjw

- but you need eccentricity to get the speeds right:
https://www.youtube.com/watch?v=qHmjGUxWRAI (10 minutes in.)

Furthermore, the result is not equivalent to the heliocentric model because it has many more parameters.
No system is immune. Everything needs to be patched. https://www.openbsd.org/errata60.html
Maybe you think the web can only be totally decentralized or totally centralized, but I don't think so and that's why I made the comment. Someone can be fine with centralized banks and still favor decentralized social networks and running your own p2p servers, for instance. If you disagree, fine, but don't pretend that my post was condescending.

Take it easy.
A friend of mine had her address publicized and pictures taken in front of her home--no, not Google Street View shots, new pictures--by anonymous Twitter eggs who told her they would behead her and rape her. Should that not be taken seriously?

(She, of course, did take it seriously; she crashed on friends' couches for a few weeks while she found a new place to live. And she is not the only one by a long shot; this is totally a just and equitable punishment for being a woman on the Internet, though, I guess.)
Whenever I see someone on my IRC channels type out 10 long lines of anything, I tell them to use some sort of pastebin instead.
That's why I use Mattermost, which Slack Without the Suck™. It's free, fast, easy to use, visually appealing, supports PostgreSQL — what more could I ask for?

Well, a native Android client. But other than that, what more could I ask for?
The article sites Mozilla as a "precedent in tech for a nonprofit spin out," but that's really not relevant at all. The Mozilla Foundation took over the Navigator codebase that Netscape open-sourced, the Mozilla Foundation having been created for that sole purpose. What happens with Twitter's software is moot because Twitter's value comes from its community.
Me neither. I hope it is, but … I just don't know any more.
If an account threatens to rape Donald Trump, I am 100% in favor of seeing that account shown the door (and, where possible, the person behind it be barred from the service and prosecuted if feasible). Why would I not be?
Check out webfaction https://www.webfaction.com/?aid=9281. It's cheaper/better than shared/heroku/dedicated/vps/ec2 up until a certain point (48GB ram).
Some previous discussion:

* https://news.ycombinator.com/item?id=10646508

* https://news.ycombinator.com/item?id=10627585

Strangely I can't find any posted story for the 0.16 release...
GitHub was blocked in Turkey
> Let us not forget countries have a need to compete just like companies.

Why? You think capital has rights?
There is a few GOOD aspects of offshore zones and financial secrecy laws which almost nobody takes into account.

In authoritarian countries like Russia, corporate raids made by those who are close to law endorsement structures are pretty common thing. In order to do that, they often put high pressure to a company's owners.

For them it's usually harder to put pressure on a company when it's not clear who are the owners.

Another reason is that often authoritarian countries have ridiculous regulations regarding cross-border trading. So offshore company often is used as a shell company to facilitate easier cross-border trading.

Sure, there is a big abuse of offshores but let's not forget that governments across the globe are not ultimate source of truth and goodness.

If you turn down offshore zones, you will turn down many economies across the globe (especially economies of authoritarian countries which are at the bottom economic freedom rating).

P.S. I lived 22 years in UZ, then 9 years in RU, now in NL.
I've had the same thing happen with a few of my submissions. On the one hand: cool, the story I liked is now being seen. But OTOH: not so cool, I like the HN metagame too.
I don't think you intended to direct this comment to me. I am not OP.
Serious question (because I've never worked on a site that large) does the size of the site mean anything as to how many engineers are needed to maintain it? I would think it would be more a function of complexity?
It's always good to have your backup off-site. If something happens to DigitalOcean servers, your backups will be gone too.
"The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards... And even then I have my doubts." [0]

For your application to be secure, hundreds of thousands of individuals must have never made a mistake in millions of LOC within libraries generally written in low-level C. That isn't very plausible.

If at some point, my input hits your code, your memory, and your processor, that fact alone is sufficient to know that the system is vulnerable.

[0] "Computer Recreations: Of Worms, Viruses and Core War" by A. K. Dewdney, Scientific American, March 1989
Well, I come from the UK. We don't have the same political issues you do, but to make up for that, we have special problems. While British water is completely safe, there are still some issues...

- ancient Victorian infrastructure means that there are leaks. They're terrified of contaminated water getting into the system, so they crank the pressure up, to ensure that any leaks happen outwards. This, of course, makes the leaks worse.

- even so, the water has to be chlorinated, and in some areas, quite heavily. You will never forget the first time you turn on a tap and get gassed.

- some really old houses still have lead pipes. I was taught as a child that if I wanted to drink water, I should let the water run until it went cold before filling a glass.

- some not-so-old houses still have a low-pressure water system which runs things like hot water, bathroom taps, etc. Traditionally these run off a tank in the loft, filled from the mains. This tank is frequently unsealed, and so fills up with sludge, moths, dead rats, etc. Even today, do not drink water from the hot tap unless it's obviously at mains pressure (which means it's connected to the mains via a sealed high-pressure water tank or a heat exchanger). (The reason for this is to enforce a vertical drop between the water mains and the house system, so that if the pressure ever falls in the water mains, there's no risk of sucking contaminated water back up the pipe. In such houses, there is a single source of potable water, which is the cold tap in the kitchen.)

- even then the water out of some of the aquifers is so hard as to be nigh undrinkable. Soap works markedly better in Scotland than it does in south-east England, and if you go to Cambridge you might as well not wash.

Of course, a lot of this is now being fixed, although slowly and painfully --- I think lead pipes are now no longer a thing. But it really makes me appreciate how good the water is in Zürich.
> Income tax rates for high earners in the US are near historic lows.

That doesn't prove much. Many people would argue that all this means is that taxes were unfairly high then, and more fair now. Others would argue the opposite.

If we are interested in defining a fair rate of tax, I don't see how historical data will help. What's fair needs to be based on something more objective.
If those are important concerns for you, just ask about their hiring / scheduling policies up front, before you invest too much time into them.

But also, try a few technical interviews. You might find they're not so bad, if you have the right background. I've been on both sides of the table in technical interviews, and on the hiring side I was working with an ex-Googler and our process was heavily influenced by Google practices. All the interviews I've done, on both sides, have been concerned with technical communication and the ability to develop a workable solution with a few hints, not with regurgitation of specific algorithms.
I have been in this industry for 14 years. I know three developers I have worked with who are both still working and not still at the companies where I worked with them. It's kinda hard for me to take advantage of that. This kinda ties in to the point tptacek made elsewhere about the problems of relying on this kind of recruiting.
This paper mentions that vortices in a 2d system of phases end up acting like particles that obey a 1/r force law, which is so cool to me. Instead of thinking 'vortices act like particles' I prefer 'whoa, particles act like vortices'. Electrons and positrons annihilate when they meet in much the same way that a vortex plus an antivortex do (except they give off photons, so maybe they're just 'more complicated' vortices in some way?).
Yep. Here is an example that I use to upload it to dropbox.

I don't delete and/or gzip my oldest uploads though.

#!/bin/sh

DATE=$(date +%d-%m-%Y@%H:%M:%S.%3N)
DB_USER="qux"
DB_PASS="foo"
DB_NAME="bar"
DROPBOX_TOKEN="baz"

/usr/bin/mysqldump -u${DB_USER} -p${DB_PASS} ${DB_NAME} > /tmp/${DATE}.sql
/usr/bin/curl -H "Authorization: Bearer ${DROPBOX_TOKEN}" https://api-content.dropbox.com/1/files_put/backup/ -T /tmp/${DATE}.sql
Taxes on the wealthy are at historic lows and wealth inequality at historic highs at a time when we have many important but underfunded programs that would benefit all of us. What's the argument against it? That it isn't "fair"? That rich people will stop trying to earn more money? I don't find that to be credible.
The current standard is "ICOs" (initial coin offerings).

The strategy there is typically to develop a new protocol/service that's openly shared, and selling off a currency tied to an organization responsible for spearheading it. The currencies being some mixture of credit, stock, and increasingly abstract forms of value.

Decentralized protocols still have plenty of room for centralized organizations that extract value from acting as a focal point for community and services built on top of the protocol.
> Perhaps the elite candidate is a canary in a coal mine, and fixing your interview would help your less privileged interviewees, too?

Yes, exactly. After all, fancy new dev is here to help your company, right? Well, make his first job contributing his insight and expertise to the interview process.
Are you talking about https://tweetdeck.twitter.com/ or a desktop or mobile app? I think tweetdeck.twitter.com is my preferred Twitter UI because it allows me to keep on top of keyword searches as well.

Staying on top of current conversations and trends in a niche area of web design is a big chunk of Twitter's value to me and it's very time consuming to do that in their mobile app or regular Twitter.com
10x code is the code you didn't write because you knew how to solve a problem simply (usually by knowing about the existence of available tools and approaches, instead of building things from scratch),
Angry enough? Really? What was the last action you took to ensure his sanction?

You're probably not past such a tipping point. Perhaps entangling "non-political" resources will up your ante.
I would think this just suggests the community is made up of more people who lean toward those politics.
>While virtually no male elephants are tuskless (they need tusks to fight), about 2 percent of female elephants are naturally tuskless. Among female elephants in Gorongosa who were adults during the civil war, however, half are tuskless — the others were simply killed. But tusklessness is an inheritable trait. That means that, even though poaching levels have fallen, a third of Gorongos’s young female population is tuskless today.

I think the correct term is survivor bias.

Update re downvotes: The title literally says "Elephants without tusks are a response to the selective pressure of poaching".

The body text says "2% of female elephants are naturally tuskless" (emphasis mine).

So "Elephants without tusks" per se are natural.

"(Massive) Increase in % of tuskless offspring as a result of selective killing of tuskfull adults (given that tusklessness is an inheritable trait)" seems like a more accurate, yet obvious (almost tautologically so) observation. It seems to be true when the trait is inheritable and strongly discriminated against - the children of the survivors look more like the survivors than those who were killed because they (the killed) were different. You don't say!
I don't believe this is true. I'd be happy to change my mind with some evidence. See [1].

[1] http://www.pgpf.org/chart-archive/0008_tax-system
Ian Mackinnon, is that you? (http://stackoverflow.com/a/3894235/1163893)
It's not about being afraid of computer science, it's about being pragmatic and efficient about the problems that you choose to solve. By choosing to develop your own closed-source language, you now have two projects that need to be developed, the product itself and the language that it depends on. They retired the language (Wasabi) some years later specifically because it was so demanding to maintain, there was significant on-boarding for any new hires, and it constrained their developers by frequently being behind the current state of C# (which it compiled to). When you write your own language, you don't have an entire open source community updating it, fixing bugs, and maturing it with new features and libraries. That is now work that your team needs to take on, and in the vast majority of cases, the negatives far outweigh the positives.
LOL, most openly corrupt president. Somebody clearly hasn't read much US history.

Andrew Jackson literally handed out political appointments to his supporters and relatives.

Hilary Clinton isn't even close to being the most corrupt. She probably wouldn't even be in the top ten.
Hey, just so I'm not a total hypocrite, it turns out that you can "turn off" PD-1 and PD-L1 response in CAR-T cells (at least in mouse models, https://www.jci.org/articles/view/83092 ). In the end I stand by my contention that it's a tool and it needs to be used for the right jobs, but it's a very versatile tool.

I work on immunosenescence and immune stimulation (the real thing) in oncology, and I happen to believe that we do many patients a disservice by nuking their immune systems with chemo and then relying on things like TKIs or BiTEs to pick up the mess. But it's also important to keep in mind that Gleevec alone didn't get rid of CML, and the way ALL and APL were managed up to 95% cure rates is by adding a little poison (As2O3, methotrexate, etc.) to the brew (asterisk) to finish things off. It's a delicate balance. I think it always will be.

(asterisk: ok more like a metric fuckload of poisons for ALL. But the real trick is "resurrecting" the patient with leukovorin after folate starvation essentially kills them.)

http://blogs.sciencemag.org/pipeline/archives/2016/07/08/car...

Look up the SuperMAB saga for more cautionary tales. Plenty of people have died from chemo and immunosuppression too (nobody benefits from lungs full of aspergillus and a gut full of C. diff). If it were easy, somebody would have figured it out already :-)
Can you give us an idea of what your site is built in? Personally I have a side project I am working on which I am just hosting on the free allocation of AWS. Even if it weren't in the free tier, it would be extremely inexpensive. With that, I have a lot of experience deploying to AWS and I have scripted most of the process (in fact, other than some monitoring, at this point, the deployment process is entirely automated). This would work for just about any architecture. But, the difficulty of setup will cause your mileage to vary a bit.
Cybathlon - Tech Championship for people with disabilities
Not true. I can mail anyone a letter, anonymously to their house. I can even drop it in a public mailbox w/ no return address and it will be delivered to you. Unless I mess this up some how there will be no jail time. This doesn't mean everyone wants the government to go through all of the letters and filter out the bad ones. Same goes on the internet.
Careful! If someone hacks your server, they now get your Dropbox account.

One alternative is to put these backups into S3 using pre-signed requests rather than Dropbox. An S3 pre-signed request gives permission only to upload files, perhaps only to a certain location in a certain bucket.

It's a bit harder to set up, but the shell script will look almost the same.
You know what they say? "Never read the comments". But Twitter is all comments. Ergo, never read Twitter.
> I don't know of many other professions that have 8 hour oral exams that test the sum of all knowledge in the field with such a strong negative bias towards hiring.

Investment banking, management consulting, doctors, lawyers (probably) ... - seems like the traditional 'power jobs'
> It's kinda hard for me to take advantage of that.

Why? That's 3 companies where someone should be willing to give you a strong referral, not to mention that really your network should include second-degree referrals as well.
> Of course it does, because people don't work at the same company forever.

You obviously haven't spent time in the defense industry.
Any interest in doing an interview for https://IndieHackers.com? I'd love to feature your story on the site! I spent many many hours as a kid trying to make my own RPGs, and IH could really use more indie game dev related stuff!
I imagine DO has some contingency plan to prevent both your server and the backup being down at the same time.
"Tech related people generally notice these stuff anyway."

a) I doubt it and
b) "notice" is insufficient.
You don't have to be bad for a networking hire to leave. They just need to find another, better opportunity.
Then what criteria do you use during an interview?
And an example of a Prolog web application would be Swish, the online prolog IDE: http://swish.swi-prolog.org/
The two problems aren't remotely comparable.
I think your correction is mistaken. Survivor bias is a logical error [1]. This sounds like natural selection with human activity acting as a selection factor.

"[Survivor Bias] is the logical error of concentrating on the people or things that "survived" some process and inadvertently overlooking those that did not because of their lack of visibility.

[1] https://en.wikipedia.org/wiki/Survivorship_bias
Browshot (https://browshot.com/), a screenshot service.
The problem is, what qualifies as a “last mile product”? AOL before 1991, and CompuServe before 1989 were complete packages, essentially entire Internets, provided by one company. Neither one of them probably liked the Internet to come into a position to replace a large part of their products. It’s the same everywhere – everybody want to commoditize their complements, but almost every product is a complement to somebody else’s product.
Well, pretty implies delicate and graceful. While the construction might have been gracefully carried out, it is certainly not delicate.
Hey if they have their way, we'll all "continue to study" HPV vaccines so that more girls can die of cervical cancer.

Fuck those cynical monsters. I don't wish people ill lightly, but they're taking chances with the lives of their children and of others, and I just can't stand that.