skysight-inc/HackerNews huggingface dataset:
If it had a date I would have said "OS on xkcd from a year ago - ah, seen that". If it doesn't have a date it must mean it's new and I _have to_ see it.
It's not just Agile, it's competitive enterprises at work.

Ship a product now (before your competitor), get EMA; or spend many extra months pentesting and laboriously auditing your code OpenBSD-style.

It's much easier to win the market first and then go on PR damage control the next time there's a security incident, pointing the blame on those "evil hackers" while your software has more holes than Swiss cheese.

Meanwhile, as an engineer, it's much easier to appease upper management and meet your deadlines (set artificially close by people who don't understand the development process) by writing unsecure code, shipping, and then if something happens, talking your way out of said responsibility.

Meanwhile, you're stressed out because of how impossibly unrealistic the deadlines are, and so you're making more mistakes; maybe you're also running off solely caffeine and three hours of sleep the night before while on the trajectory towards burn-out because you're putting in so many hours.
Cambodia’s Exiled Leader Has Been Banned from Returning to the Country
Ultimately, a company has to pay up, or liquidate what it has in order to pay its debts. If it can't do that, then those who hold equity get shafted. That's just a function of the capital structure.

A government uses debt to pay for stuff. If it defaults on its own debt, it hurts its ability to generate funds without printing currency. So if a government defaults, it not only incites domestic panic and foreign wariness of its markets, it also loses the ability to affordably borrow to pay for programs that can right the ship.

Even for companies where bonds are pricing in a substantial probability of default, it's a big deal if they fail to service their debts. Sprint can survive a 30% drop in its stock price. It probably can't survive defaulting on 30% of its debt.
Good question. We have a couple of approaches to this:

* Every request that comes into our system is assigned a unique ID, which is propagated on every downstream call and returned in a response header. When logs are emitted during request processing, they are tagged with this ID. A system we've built in-house indexes these log events against their trace ID in Cassandra (on a separate cluster). This lets us take a failing, slow, or otherwise interesting request and look up all the things that happened to it during processing. Events in this system are TTL'd according to their severity – so an event at critical or error severity is kept longer than one at debug severity.
* stdout/stderr from all our containers is forwarded to journald on each host. Logstash then pushes all these logs to Elastic (and also to permanent cold storage). This is useful to look at the "big picture" and means we can analyse all the logs in aggregate and makes it very obvious when something is _very_ wrong and causing a lot of requests to fail, but is less useful than slog for pinpointing a specific issue.

It's worth also noting (since I find often a whole load of things can be mixed into logging) that we do not drive our monitoring off these logs, at least at the moment. We have separate systems for that.
Yes, it sometimes help to see that it's something I've seen before, and many sites don't make the date very visible, so it's easy to miss that something presented as state of the art or news in the article isn't anymore. Having the year in the title helps to avoid that error.
let's not forget the Model X P100D Tesla... 0-60 in 2.9 :) [0]

> The larger battery pack is also available on the Model X, making the world’s quickest SUV even faster. Model X P100D with Ludicrous mode accelerates to 60 mph in 2.9* seconds

[0]: https://www.tesla.com/blog/new-tesla-model-s-now-quickest-pr...
We are all libertarians now
This reminds me of the joke where it's like "how to draw a face" or whatever, where step 1 is draw the outline, and step two is do the rest.

In other words, the devil is in the details of how to accomplish #1. It is pithy though, I'll give you that.
You don't, if you care enough to buy a phone where that's possible. Any Nexus device can be reflashed to a custom Android build for example. Of course you void your warranty that way.

What you're really asking is why is there no root shell by default on all phones, and simply posing the question also answers it - it's a phone, there's zero demand for messing about with terminal emulators on a phone. If you say, but I'd like to install apps as root, the problem is such apps could break the phone in arbitrary ways like by infecting it with malware/adware/spyware that then can't be uninstalled. Modern operating systems are very much designed to limit what apps can do to avoid the nightmare that desktop OS's turned into, where people are afraid of installing apps in case something goes wrong. For better or worse you can install apps on Android/iOS without much fear, which is one reason people do it so much: you can always remove the app again if it's trouble.

Android is pretty customisable and has lots of permissions anyway. There are very few things you can't do if you don't have a carrier-locked phone. So supporting apps with root access would vastly worsen the malware situation in order to satisfy a tiny number of geeks who like editing config files: a very bad tradeoff.

But hey, Android is open source, so if you think I'm wrong go ahead and make money selling phones with root access.
That doesn't explain phones with easily and officially supported unlockable bootloaders (eg Nexus). The transceiver is, in any case, a seperate processor (the baseband) which is much more locked down.

The real reason is that hardware manufacturers like control.
So you're thinking the reason people don't push back much on the 60 hour week is because of a personality type that simply can't stop programming? It's possible...
However there's a big difference between building something for yourself, and building something for your boss, and unfortunately I feel the difference.
I was wondering about this as well. I haven't done much video game dev in the past few years but even in my little indie stuff trying to check files into Git was a bit rough at times. Doable but on a very small scale. I'm surprised Git hasn't been adapted to handle this more natively but I'm curious if there are any trends or directions people are heading in regarding this or if they're still sticking with SVN.
If only there was some company poised to capitalize on this shift we could all invest in...
> In a statement, Google officials wrote: "After researchers reported this issue to our Vulnerability Rewards Program, we worked closely with them to deeply understand it in order to better secure our users. We’ve developed a mitigation which we will include in our upcoming November security bulletin."

Then why am I reading about this in October?
Have a look at Martin Shrekli's finance videos on Youtube - they are quite good in that he shows you how to get the reports from company statements into Excel
Reengineering is also innovation reengineering
The short answer is nothing. They create their own problems of scalability by their own poor engineering. Who still uses rails for an api/iphone app these days?

As far as MySQL being the bottleneck, I'm kind of wondering why that is. I'd imagine 99% of their workload is both cacheable and read only, and thus infinitely scalable.

Anyway, I've used Hotel Tonight a few times and most of my experiences with the actual product have been poor. The price I could have got through the hotel directly in a few cases would have been better, and the other time they promised a King bed only to be rebooked at the hotel to a smaller room and double bed. It seems their business model is largely around selling unused inventory at hotels for as high a price they can get, without really caring about the customer.

You'll notice they have an absolutely no money back policy. In my case I was forced to take the lesser room which was actually cheaper had I paid for it at the hotel. Since that experience I deleted their app.
I always find it strange when people do that. I mean, it's a wiki - if there's an obvious, glaring error - just fix it? Then that particular article will be more correct?

Wikipedia is absolutely useless as a dead book - the level of (professional) work that goes into vetting "real" encyclopedia articles is much higher - and the errors that slip through much more permanent.

The great thing about Wikipedia is the potential steady improvement. When people complain about its accuracy it often just sounds like whining.

Granted, there are a few articles that are "contested", and I understand why people don't have the time or energy to fix all of Wikipedia.
A 64-year-old grandma is truly surprising the Web related to her fitness
We truly belittle what a consistent wellness administration can accomplish for us over the long haul. Yet, this lady, a 64-year-old grandma is truly surprising the Web and indicating what wellness can respect us.
It would be nice if this data was made available as a standard format for consumption in other systems, such as OGC WFS.
(This thread is too old for the SCA to turn up ;) )

The "Viking invasion" that Harold Godwinson defeated just weeks before was by Harald Hardrada, who is often considered by some as the "last true Viking".

But Harald Hadrada was Christian. He served in the Varangian Guard of the Holy Roman Empire, and he built an awful lot of churches when he returned to Norway. (He had a very eastern slant on his Christianity, and this made Norway was slightly unorthodox long before the schism.)

Harald Hadrada pushed Norway quite far on the path towards feudalism by trying to unite his kingdom and enforce hierarchy among the chieftains. So on the one hand he is a Christian Viking who uses Viking-style raiding to wage war, and on the other he is modernizing.

Sweden was at this time basically the area where the Norwegian and Danish kingdoms stopped. It was not nearly so united. But at the time kingdoms were just the areas where kings toured, extracting taxes in promise for protection. In modern terms kings were racketeers! In generally, it wasn't very populous. The harsh weather limited agriculture. This actually meant that plagues didn't really impact Sweden to the same extent that they did other countries as it was too sparse with a pocketed population.

Look at Harold Godwinson's name; its oozing norseness! He was actually a descendent from King Canute who united England and Danmark.

By this time England was ruled by a mingled Anglo-Saxon-Viking elite who were culturally mingled.
Neither (Bill) Clinton nor Trump would have any use for a device predicated upon the need to obtain consent.
I don't know if this was reason it was posted for, but looking at how the code is structured in some of hose projects is extremely insightful for game making.

Too bad that, at least in the games I looked at, all the non-game code (e.g. Google play integration, analytics, etc..) is missing.
There's a lot of hand-waving about how a base on Mars would operate. Remember the Biosphere II debacle, an attempt to build a closed ecosystem in a big dome. That was intended partly as a test for a Mars colony. They had a terrible time trying to stabilize their little ecosystem. They had far more resources at start than a Mars mission could carry, and were only trying to support eight people.
Sex Tape Scandal
>what really limits most financial institutions from embracing a lot more modern tech is their core systems of record AND the acceptance of said systems by their governing agencies.

I just want to say that I think there is a huge amount of FUD about how you can and cannot build your technology as a regulated entity – and in particular as a bank. In reality, close to 100% of requirements from a regulator will tell you _what_ you must build, not _how_ you must build it. Even then, especially in terms of resilience and security, they are almost always a subset of our own requirements.

What can be more of a challenge is convincing an auditor that what you have done is acceptable, since it can be so different from what they may have seen before. Again, I don't think this is a reason to compromise. We see technology as a major competitive advantage, so it is worth the effort to find open-minded auditors, and spend time to explain and demonstrate how (and why) our software meets the requirements.

I don't think there's any way we could build a secure, resilient bank with the kind of product experience we want, AND do it on the budget of a startup if we approach technology through the same lens as existing banks.
A little off-topic, but I found this interesting:

> "Specifically, a lot of the traditional guys price e-books at $20–30, often times more than the paperback/hardcover, which is so stupid."

It catches my eye when people get stuck on an e-book version costing more than a hard copy. It's funny that a Kindle version can be more valuable (instant delivery, easier to carry around, and a more enjoyable reading experience) to somebody, but still seem like it should cost less. Personally, I'll gladly pay an extra dollar to get an e-book version for anything I'm only expecting to read once or twice.
I've done a lot of Gmail extracts/harvests by using Mozilla Thunderbird, which has better save-to-text capabilities, to intake Gmail, label, sift into folders, and extract using its save-as-text capabilities.
Indeed, we haven't got any single positive or altruistic implementation of anything remotely representing AI yet.

And yet, we have bots, spyware, malware, etc. infecting the IoT devices already, think what will happen if a more "Evolved AI" attacks these devices (or even worse, us!)?
It says I'm disconnected after a couple seconds too. Also, like most browser games, it manages to rev up the fan on my fairly modern laptop almost immediately.
> where you dump packet stream from 4x10gbps cards with minimal 84b size (on ethernet), show that you would exhaust the storage in approx. 4.5 minutes

I don't understand your relations here, or the size of the storage you're considering. I did this:

3.5 million packets per second * 84 bytes per packet * 4 interfaces == 101.606 terabytes/day.

Or, at the raw interface rate:

10 Gb/s * 4 interfaces == 432 terabytes/day.
> I wonder what you meant by "mobile devices don't page."

Mobile devices have memory-mapped pages, but they don't have VM or overcommit. Your process just gets killed if it's using too much memory.

Page faults are still important though… actually even more important.
This is great feedback – thank you.

A lot of the feedback from my blog post a month or so ago was that the "why" was not clear enough, so I guess I focussed more on this. Now I've (hopefully!) covered that better, I agree that more depth on these topics would be helpful.
I just finished 'Deep Work'. It's a book from Cal Newport that I think it might be helpful in your situation.

Here's the link:
http://calnewport.com/books/deep-work/
There's one of these at the Houston Museum of Natural Sciences. http://www.hmns.org/exhibits/special-exhibitions/the-chronop...
I'm more worried about corporations run by machine learning systems optimizing for shareholder value. Somebody with access to YC's data should try training a classifier to predict YC success. How far away is the first VC fund run by a machine learning system?
I don't think he was going to add anything more to what was already reported a week or so ago.
The pirate party is actually pretty socialist.
I become productive based on deciding I'm going to do something.

Pause on that word: decision. We all have impulses, wishes, desires, etc. But you're only ever going to progress when you stop, think about what you want, be realistic with if you can actually achieve that with everything else going in your life - then DECIDE that you are going to do it.

Once you've decided, that is when you follow through every time (if you've done the first steps correctly). Then it's basically autopilot and you don't ever feel like procrastinating. I dunno - works for me.
I think we should require automatic updates (configurable to manual); said updates should obviously be signed and probably encrypted.
I'm looking forward to their NPR call-in show.
Of course we shouldn't forget little niceties like YouTube not being able to play background music. Only the paid YouTube Red service can do that which is simply not available in many countries -- but even in those YT won't play in the background. Unless, of course, you have xposed installed... So, as usual, controlling what you can do with your own device results in a) perceived gains for the rightholder b) pain for ordinary users c) nothing at all for the informed. If this resembles the DRM situation, it is.
Oh good god. I loaded the site with the network console open and found that the page loads 15MB of data before the first picture of food loads up on the page. Horrendous.
Very interesting and I haven't read much about the topic (yet) so excuse my pre-morningcoffee naive comment. I know very little about languages like Stan etc. but what's the reasoning of baking these "inference for free" ideas into the language. It sounds like something for a library. Are there distinct advantages to having a new language for these things?
My very naive approach would be using something like the pipelines in Phoenix (pipe_through :hamiltonian)

I suppose the reasoning is the same as for Prolog?
Show HN: Refer Me Please – Market network for job referrals
The Limits of Big Data
> Unless they changed policy, seeding is strictly a manual, opt-in process.

Pinning may be manual, but is not content automatically cached and seeded (until purged from the cache) once any content is retrieved?

> I disagree, IPFS is a pretty reasonable plan for resiliency in the case of static web content, as previously discussed.

How is it a reasonable plan to exploit the naive and the uninformed or to depend only on those that are outside your juridistiction and unassailable by their own?

> If instead of "kindness of strangers" you frame it as a "market with incentives" to maintain information availability it is both less condescending and more accurate to how situations are likely to play out with things like DMCA'd content.

What incentives exactly would those be?

I also find it interesting that you object to kindness from strangers.

>>So, while better than traditional HTTP

> (which is all it needs to be)

That might not be sufficient for IPFS to get enough adoption, tho.

>>IPFS isn't really immune to takedowns nor very resilient.

> That wasn't the goalpost we originally set, nor one of the project's longterm objectives, so I'm not sure the relevance.

Fair enough. It is however relevant in the sense that it both removes a use case and acts as a disincentive for users to participate, as there is no liability shielding.
This is exactly the argument AGAINST Tesla. I saw the luxury tesla model. It is so crude compared to the corresponding Benz. Daimler, BMW, Audi and other manufacturers have been making cars for a hundred years. They know how to do it. I'm afraid Tesla does not still.
So, the proof of concept code is at https://github.com/vusec/drammer . Can we get a reliable rooting tool based on this?
When I came to Go, I hadn't used C or C++ for over a decade, only Java and C# in between. Using explicitly written pointers came flooding back, but the new "C for expressions, Pascal for declarations" syntax still takes getting used to.

Declaring `v * T` means we can write `* v` as an expression, so the use of token * is synchronized for both these uses, but I must vocalize the * in my head differently:

`*T` vocalizes as "pointer to something of type T"
`*v` vocalizes as "that pointed to by variable v"
`&v` vocalizes as "pointer to variable v"

So my thought process when I see * goes: If it's in a type, say "pointer to", otherwise say the opposite of "pointer to", i.e. "that pointed to by". It feels like an inconsistent use of * whenever I'm writing Go code -- even though I know it's a natural result of Go using Pascal-style declaration syntax but C-style tokens.
The necessary divergence you talk about is mainly the UX coming from different input methods for the pointer device, correct?

With the (partly regretable) adoption of UI design patterns that are mainly meant for touch devices, such a merge appears to be closer however. I think the main patterns missing are

* a more powerful touch-capable tiling window manager

* a method to get "mouse hover" events working on touch devices. finger hover?

* a both touch- and precision pointer friendly implementation of the OSX menu system.

Anything I'm missing here?
Pybee/toga: A Python native, OS native GUI toolkit
Living in China’s Expanding Deserts
I've been traveling through Europe recently and have been shocked by the sheer number of surveillance cameras in public spaces. It's not uncommon to see 3 - 5 cameras on a single pole.

There is no indication regarding who owns each camera, when it's recording (presumed always), if it has audio, the purpose of the camera and how long the data is retained. This project is awesome, and could be the first step to answering the above questions (and more) for each camera.
Are you just unable to answer the question or are you just so new to the interwebz that you think that was a troll?
It's clever because you aren't a memory design or test engineer. This type of problem has been known and tested for since shortly after DRAM was invented.

E.g. here's a 1977 databook from Mostek, at the time the premier DRAM manufacturer: https://archive.org/stream/bitsavers_mostekdataryProducts_17...

Look at these tests in particular:

Adjacent Row Disturb Refresh
Column Disturb
Pattern Sensitivity

Look at the details of the column disturb test:

Column is written with an all ones data pattern an "0" is then written into row of the column 100 times followed by reading all other bits of the column and checking each bit for a logic "1" output. Row of the column is then rewritten to a "1" and the procedure is repeated for rows 1,2,3, ... 63 of the column under test. The entire procedure is then repeated for columns 1-63.

That particular test step is only repeated 100 times, because it's a production test and short test time is critical. You can bet that in design verification the chip was characterized a lot more thoroughly.

The downside of increasing memory sizes over the decades (now literally billions of bits in a single chip rather than thousands) is reduced design margins. So we get rowhammer.

You can bet that rowhammer did not come as any surprise to key engineers at the DRAM manufacturers. They just didn't take it very seriously as a possible real world problem, because the access patterns required to cause it are atypical from those of "normal" operation.
Hi Guys!
My team and I just completely redesigned our website and changed the UI/UX. We would love some feedback on it, and see how we could make it better.
The idea behind Refer Me Please is to give the opportunity for job seekers to get a foot in the door in their dream companies through a referral and give the opportunity for referrer to find new talent they wouldn't have had access to before.
Thanks a lot for your help guys!
Oil is also used for plastics, fertilizer, and many other goods. Not just used for fuel.

As the world economy expands, because in 10 years everyone will be on a smartphone, the demand for plastics and fertilizer and rubber and roads etc. that demand should expand more than fast enough to cover the fleet conversion from gas to electric.

200 million vehicles in the USA fleet, and they sell 17 million in a good year. 12 years to replace the fleet; it is currently about 11 years old on average.

I think the article is over stating it. There won't be any problem, it will take decades to adjust anyway.
Why you should be using beacons in the office