skysight-inc/HackerNews huggingface dataset:
Per the AWS TOS, once Amazon suspends your account for non-payment your data's kept for at least 30 days. No reason they couldn't do the same here.
Also, if you have a Static IP attached to the VPS and you first Stop, and then Destroy your instance, you will need to make sure you "free" the IP as well to avoid _small_ 0.005/hr price.

From FAQ:

> What do Lightsail static IPs cost?

> They're free in Lightsail, as long as you are using them! You don't pay for a static IP if it is attached to an instance. Public IPs are a scarce resource and Lightsail is committed to helping to use them efficiently, so we charge a small $0.005/hour fee for static IPs not attached to an instance for more than 1 hour.
I said suspend, not removal.

They could easily cut off public access to those resources while charging you storage fees. Obviously with any kind of ceiling there are certain details that need to be ironed out (i.e. most people wouldn't want configuration information or data to be lost, but they likely would want VPS to be taken offline and other services to be suspended).

Ultimately for most startups, small businesses, and individual developers being able to say "My AWS bill cannot exceed $1000, period" is a powerful tool. Right now if a billing alert fires at 1am, you may not see it until 9am and by then you're already in huge trouble.
The idea is to use private repos on Github, not public ones, which just tell you that yes, someone can read a public repo and misuse a key. Not that your private repos have potentialyl been compromised.
If you don't click through to read about this: you can write an FPGA image in verilog/VHDL and upload it... and then run it. To me that seems like magic.

HDK here: https://github.com/aws/aws-fpga

(I work for AWS)
That makes sense to me.

Lightsail should be a entry-level product to upsell more AWS stuff.
>Looks like it only works on the older Android 4 Jellybean software (and some Android 5 Lollipop) and below, so mostly concentrated in Asia where there are lower-end phones.

But devices running Android 5 and below "only" comprise the vast majority of devices out there https://developer.android.com/about/dashboards/index.html
If feasibly testable, then yes. If you need the government to help you pay your food/medical/housing/whatever bills, you should not be buying alcohol/cigarettes. Caffeine is debatable, because for many people it's not about recreation, it's more about giving you that extra kick so that you're more productive.
How do you bet on a future like this occurring? It's hard for me to see how to ensure that you get a positive payout if this happens. Owning machines (stocks?) would seem like a sensible bet, but how do you ensure that your part of the capital won't be obsoleted?
One way to do PCA is using SVD to find a transformation matrix of eigenvectors to project your data with, so they're similar.
The more you pay the worse performance (per $) you get. Pretty much a "take 2 pay for 3" kind of deal.
No matter if it's a good price or not I would feel like a schmuck if I went for any other option than the 5$ one.
It's already too expensive compared to DigitalOcean and Linode. An $80/month instance only gives you 2 CPU cores. For the same money you can get 4 @ DigitalOcean and 6 @ Linode.
I'm not using gmail for my email.
I wish I could upvote this a hundred times. I am currently dealing with an Indian dev shop and the code has been atrocious -- as if they didn't even read the requirement. Doing a very basic Stripe integration has taken nearly a week and it was still incorrect. I could provide days of examples.
As opposed to AWS and DO which have never had comparable security issues. In this case, "never" is what I'd expect versus "yeah it's been a few months since last serious incident".

I wouldn't host an ethereum or bitcoin node on Linode. If I were a PCI auditor I would think pretty hard about compliance on the platform.

That said, blog you don't care too much about -- sure!
Another idea is to use a black Sharpie on the offending LED. Blocks most, but not all, of the light.
A Map of Recent Wikipedia Changes
Rooftop solar programs have been launched by electricity providers in a few Indian states[1][2][3]. They offer incentives like subsidy/discounts in electricity bill if a house has solar energy.

[1] https://gpcl.gujarat.gov.in/showpage.aspx?contentid=110

[2] http://bescom.org/en/solar-roof/

[3] https://en.wikipedia.org/wiki/Jawaharlal_Nehru_National_Sola...
Meh. That's all I have to say about that. We already have the distinction between software that can actually affect people's lives in a negative/positive way and software that is merely a nuance or inconvenient. The former is heavily regulated. Mistakes in financial accounting software, healthcare software, or mission critical software such as industrial automation or say launching satellites cause companies to vanish Your task management crud app that crashes every now and then isn't going to cause you to die. Marketing and advertisement software may be a large nuisance, but it isn't killing anyone. I've worked in both environments. The cultures are appropriate for each of the given situations.
Such comparisons are nearly meaningless.

- What kind of SSD?
- What kind of "core"?
- How much are you over-provisioned on the physical hardware?

People are treating cloud resources like they're commodity, but they are not (cloud service providers make it very hard to compare apples to apples). You can have first-class PCIe SSDs on RAID 10 underneath that virtualized storage, or you can have consumer-grade non-RAIDed SATA, but it's all "40GB SSD" to you, the customer.

vCPUs are even worse. Buy a 20-core Xeon box, split it across 60 tenants, each with 2 vCPUs each, or via 40 tenants with 1 vCPU?
Note that you need a very accurate scale (measures down to the milligram) to accurately measure dosage for this substance. Please make sure you don't take too much. It is impossible to measure by eye.
Very similar to Google Big Query. Hosted Presto with lambda alike pricing ($5 / TB scanned).

Great for ad-hoc, crazy expensive if you do it 24/7.
The Git Parable: http://tom.preston-werner.com/2009/05/19/the-git-parable.htm...
are mockery and satire respectful? what does that make Stewart, Colbert, Bee, Meyers, and Oliver? how about SRD and SRS? they are assholes too but they deserve their space to mock people they disagree with. should /r/atheism be banned for its disrespect towards religion? /r/atheism has the same fervent hate towards people of belief.

you dont have to listen to those subreddits. dont subscribe to them. dont hang out in /r/all if you cant handle seeing things you disagree with.

you just called other peoples views a cesspool of garbage, and youre advocating respect.
tl;dr Only available in us-east-1 (N. Virginia)
runelm.io, a place to share and run elm code
I personally don't use AWS for personal projects because of the lack of a cap. I would rather see my system suspended rather than continue to pay beyond my budget.
The whole point is to service customers with massive storage needs who seldom need to retrieve the data. For example, many companies are compelled by regulation to archive records for decades, but only need to access data in response to lawsuits/etc.

no one with frequent high volume retrieval needs would be advised to use glacier.
That's fine, then they need new laws. And they'll have to extend the non-verified ban to any server or VPN service that I can run my own VPN on.
I would call memory in Rust manually managed, but automatically accounted. Vs C which would be both manually managed and accounted.
The data issue is solved by the world turning green little by little: http://results.openaddresses.io

Not to forget OpenStreetMap and https://mapzen.com/blog/who-s-on-first/
"Because the theory made predictions that were then checked."

? What predictions and made and then tested by 'Dark Matter'?

Dark Matter was conceived of the other way around - it helps confirm predictions that don't actually work properly.

If Dark Matter theory made testable predictions, it would be accepted no? Where are these experiments?
How to stop Google from storing your sensitive data?
Exactly, Linode still has _much_ better deal. Been using Linode for 10+ years, no reason to jump based on what Lightsail has.
What's "insane" about explicitly having to opt-in to 3rd party application installs in Android ? That switch existed for years and was praised upon. The media opinion only shifted after Android becoming most widely distributed phone OS. It's just easy clicks.

Android is fine.
This seems like a great option for a utility server for existing AWS customers. With VPC peering you get free and fast transfer between one of these and your existing AWS infrastructure, but in a nice one-price VPS.

I also wouldn't be too surprised to see some people using these as middle-man boxes to reduce transfer costs associated with EC2 - $5 for 1TB is darned cheap for AWS. Using one of these to back up data from some EC2 hosts would be a win.
I'll second this. Fantastic game, and so's Tyranny, which is by the same developers with a similar amount of great writing.
Couldn't Google just revoke all of those access tokens? It'd be a minor inconvenience for some, but it would hardly be a big deal, right? You'd just have to grant access again.
>the malware campaign specifically targets older devices using previously known vulnerabilities.[1] There is no new exploit research here.

That is a false statement where you are implying a certainty that has not yet been established. A Google employee says that as far as they have been able to investigate, several variants use known vulnerabilities.

In any case, there is indeed a giant security flaw when an application executing in a supposed sandbox can get root access. It points to severe design flaws in the application model as well as the underlying OS. The fact that elevation of privilege is almost expected should be unacceptable. Given the terrible state of security updates in Android, I would say it is worth drawing as much publicity as possible to these events.
To people who might experiment with this: Be careful! A teenager me, two decades ago, changed the shell of a system account to a joke program, and I didn't know they could suspend that joke and grab a system subshell. Then again, learning one the hard way every now and then is a great way to boost your working memory.
wow... 8 months? Not being able to get in to your servers for days at a time is not "a little exaggerated".

It was less than a year ago - 11 months. December in to January, Linode data centers, but especially Atlanta, were heavily attacked.

https://blog.linode.com/2016/01/29/christmas-ddos-retrospect...

There was another moderate attack a few months ago.

Caused no end of headache for some clients of mine.

I like Linode, and have used them for some projects in the past, but there are more options now.
I 100% agree but it's only "a problem in open source if you don't recognize the situation". I've been writing about this a bit on Medium. https://medium.com/@ekryski/your-open-source-is-a-product-st...
This looks a more readable and entertaining version of this academic journal: http://www.emeraldinsight.com/toc/jmlc/19/1
;-)
> professional standards bodies grew alongside the maturing industry
> ensure that people working in the industry where adequately trained and adequately protected from external factors
> software and the people who write that software I think at some point we need to start looking at a similar system

Who this gets implemented I'll quit and become a welder or something else that's outdoors and filled with less insane propositions. The BS and stupidity that gets setup by these standards organizations is crazy.

I know many people who are PEs who can testify that all of this is completely useless. It's often said by people who give these certifications that you shouldn't go into industry before getting these. That's acceptable until you hear why: you'll forget a lot of stuff that is unused in industry but used in these exams. This is horrible design at it's best.

"Engineering Standardization" in this form is good for a few things:

1. Driving up the cost by keeping perfectly good engineers out of the field and making the industry talent starved.
2. Creating a corrupt standardization organization that makes it so their "group" can get certificates while others cant.
3. A reduction to the speed of new ideas entering the field. Less people allowed in all of which are brainwashed into "THIS IS THE WAY, YOU WILL OBEY"
4. A lack of care for checking work; "They're a professional engineer, you know better then me"
5. Preserving irrelevant information that isn't at all related to the task at hand (A+, I'm looking at you)

I think the real solution is for universities to actually teach people how to program, about software architecture, about software engineering, about maintenance, and less about things that you won't necessarily be doing. I'm in senior level classes at college and I find that most of my peers have problem "doing programming" and I know people in the EE track who have problems "doing electronics". These aren't stupid people, they are just lacking instruction needed to succeed in the field.

Another solution is to have a simple standard: All life endangering software must either be a) formally proven by the programmers and checked by a mathematician or b) have unit testing for every possible case of every testable portion of the code.

If both of these are done then it will save far more lives then useless standards that will be actively ignored. These two standards are already where our field is naturally going and embracing that will only yield higher quality software for everyone. Using stupid standards documents that specify things like "functions can only be 80 chars wide and 100 lines long" or "no memory allocation after startup"

It also avoids forming unnatural accreditation bodies that are harmful to the industry.

Edit: I'd also be perfectly fine with something like UL for software.
It's funny that you chose the word "blasphemous."

The conspicuous fervor around "empty" in recent years does feel like it shares some traits with religious belief.

When a religion promotes a virtue, they don't invalidate the virtue. It can still be a positive. But they just tie a lot of baggage to the virtue. The ways it can be held, and forms in which it can be practiced are constrained, prescribed, and sometimes even contradictory. It makes people on the outside raise a suspicious eyebrow.

The meme around "empathy" is not religious in nature, but is tied to (broad) social groups. And "having empathy" often means more than simply being empathetic.

It should be treated with cynical suspicion. Articles like this give me hope the meme is about to pop.
To say it's not labor is not entirely true. I'm just claiming that labor isn't a huge part...at best it contributes in the single digit percentages.

The real answer is much more complicated and there is no easy one-size-fits-all answer. Environmental regulation, litigious environment in the construction industry, overuse of contractors and consultants instead of in house expertise, buy america provisions, labor scheduling rules, poor planning, supplier market that has been drastically cut off due to bidding complexity and procurement regulation, bad incentives, poor oversight, corruption, incompetence, etc ad infinitum. If you had to sum it up, you could say that the US is uniquely incompetent in all aspects of government-sponsored infrastructure projects.
Yes can we stop the whitewashing? It's zionist conspiracy theory.
That would essentially be a betting market on whether Modi is going to back down on this or not. I'd assume there is some dude in Dongri who will buy them at a discount in hope of hitting it big, but I haven't heard of an actual "black market" in the normal sense of that word, because most people seem to think the government's going to stick with it.
So know anyone can run their High Frequency Trading business on their side :-P.

So much easier than buying hardware. Also deep learning works sometimes similarly. It's easier to play with on AWS with their hourly billing than buying hardware for many use cases.
I had the experience dealing with some Japaneses companies when they tested the chips we developed. Their level of testing surpassed what most of the companies in the US here do when they qualify a part. They don't take your word on the specs and do their own testing when possible.
Is the transfer from the aws instances to the lightsail instances not billed if in the save data center?
I feel like it's actually pretty easy to avoid any slippery slope. If you are accepting money from the government, there should be nothing you are spending money on that isn't explicitly sanctioned by the government. I as a taxpayer am not paying for your food so that you can spend the paltry sum you earn on cigarettes.

Also, I don't really the see problem with a "nanny state" in the context of people that are accepting money from the government. If you need the government to provide for you, you should be totally happy with whatever stipulations that help includes.
> Today we are launching a developer preview of the new F1 instance. In addition to building applications and services for your own use, you will be able to package them up for sale and reuse in AWS Marketplace.

Wow. An app store for FPGA IPs and the infrastructure to enable anyone to use it. That's really cool.
A Hands-On Look at the Amazon Rekognition API
https://www.nostarch.com/pgp.htm for the command line overview from a sysadmin perspective then look at the PGP/public key crypto section here (or read the whole thing) https://www.crypto101.io/
Kubernetes CI/CD
> 28-38 HP per shank, up to 9 shanks. That's ~350 HP in it's max configuration.

Why does 500 acres necessitate the max configuration? I mean, you could also run a DB120 and have all of your acreage planted in 6 hours, but that seems rather unnecessary at that size. There is a certain time/value calculation at play, but at that size you can justify spreading the work over more time.

Plus, the brochure you link to even shows a Puma 210 running the unit, which has just 210 engine HP. Clearly the implement can work just fine with a sub-250HP tractor.

> Low volume, high complexity electronic hardware design and manufacture?

No. Much of hardware is already going to be designed for the big operators either way. So, just the cost of increasing the manufacturing volume for putting the same equipment on equipment destined for the smaller farmers.
If you don't know if there's a difference between MDMA and LSD, your first source shouldn't be something like bluelight. You should have a lot of information before you even consider being an end-user.
I wear a supervillain outfit. Goatee, white lab coat, menacing laugh.
I disagree with the central thesis of this article that Google is a product company rather than a platform company. I think that's wrong because throughout its history Google has asked itself "what if we had this?" first, and built the products around that later. Essentially the company believes that products will naturally emerge if you hire tens of thousands of engineers and deploy an unholy number of computers. I said this before on this site: Google's core product is dirt-cheap computing. Everything else follows from that.
Checkpoint has been notorious for this kind of exaggerated marketing, especially within the past few years. My theory is that their security appliance line has been suffering due to superior competitors (source: personal experience; could be wrong without global sales numbers), so I think they're trying to get their name back in people's minds.

This research is definitely good and beneficial, but yes, it's threat intelligence research, not vulnerability research or any sort of revelation. Definitely not deserving of a logo.
This is really trippy. GPUs generally need a fast interface like PCI-E and won't work over a network like a disk.

So to elastically provide GPUs over a rack how does that work? How do you not have a ton of GPUs just sitting around due to the physical constraints of PCI-E given that you can attach GPUs to some common instance types at any time? How do you not run out of capacity and just have to say no?
With how versatile the AWS ecosystem is and the quality of the Amazon brand this has the potential to absolutely demolish most of the small time VPS providers. Unless you provide a niche such as DDoS protection or PCI/HIPAA compliant hosting I do not see how you can compete for legitimate customers.
Doesn't the birthday paradox make it much more likely to eventually occur ?
I'd assume the guarantee of the box being up, unlike ec2.
You're overthinking this way more than you need to.

On any given processor, in this context, there is one and only one way to compare an immediate value with one in a register, so you don't have to worry about whether you're comparing 5 to %eax, or eax to 5: you can't subtract the value in %eax from 5, because 5 is an immediate value, not a memory location.

.section	__TEXT,__text,regular,pure_instructions
.globl	_main
.align	4, 0x90
_main:
movl	$17, %eax
cmpl	$5, %eax
jle	Exit
movl	$5, %eax
Exit:	ret

now let's assemble and link that using the C compiler's front end, so we won't have to worry about _init and _fini:

> cc cmp.s -o cmp
> ./cmp; echo $?
5

note the cmpl $5, %eax instruction. Now watch what happens when I attempt to compare %eax with 5:

.section	__TEXT,__text,regular,pure_instructions
.globl	_main
.align	4, 0x90
_main:
movl	$17, %eax
cmpl	%eax, $5
jle	Exit
movl	$5, %eax
Exit:	ret

> cc cmp.s -o cmp
cmp.s:6:13: error: invalid operand for instruction
cmpl %eax, $5
^~

it can't be done, because there is one and only one way to compare an immediate value with one in a register. intel or AT&T syntax -- dst, src or src, dst -- the comparison is the same. Therefore, AT&T syntax is the best thing since sliced bread, because it's left to right instead of right to left, which is how we think in terms of taking something and moving it somewhere -- in the physical world, step 1. will be to take an object and step 2. will be to move that object somewhere.
I think this change isn't really so much to improve security, as to shift the blame from them, to the owner. And I think I'd do the same thing if I were them.

Edit: we should remember IPv6 is becoming a real thing, too. If I scan my web logs, see a pi in there, with v6, I might just try to ssh into it as the pi:raspberry user. Maybe I dont even need to decide it's a pi, just try it anyways.
I am aware. I thought explaining my experience might be helpful.
This. I got excited about this until I came to HN and started reading the comments. I _have_ to have a cap. I don't want to do something stupid that puts me on the hook for $$$.
"People are taxed massively more now than at any time in history and"

This is not even remotely true. The US used to have an income tax that was over 90%. Something like 94%, if memory serves.
Good call. I still prefer old fashioned text logging when possible, so you can catch database/service connectivity issues in the same spot.
> $0.005/hour

That's $3.60/month... seems similar to mail-in rebates—many people forget, and accidentally give Amazon some (mostly) free money.

Also, from later in this thread:

> FWIW, bandwidth overages at Linode and DO are $0.02 per GB, LightSail is $0.09.

It's these seemingly-tiny (but not-so-tiny when I'm running 60-70 VPSes) costs that kill when you get your first bill after a large traffic event.