skysight-inc/HackerNews huggingface dataset:
I use this technique extensively in several production systems.

As others have mentioned having an expiration policy is a good idea. Also you can mitigate charges from malicious activity by using rate limits on the signing endpoint. (API gateway supports this.) Using infrequent access or reduced redundancy storage might also be a good idea if you expect a lot of traffic. It's also good to limit the CORS policy on the bucket to the needed domains and headers.

Signed metadata headers are very useful when combined with S3 event handlers (SQS or straight to Lambda.) using a HEAD request on the uploaded objects. This is a great technique for post processing an upload without requiring client trust or an external data store. (With a separate falliable request which could lead to consistency issues.)

Edit: It is also critically important to have some randomness in each key path so it is ungessable. Otherwise user files would be overwriteable by an attacker. (Many file names are easily guessable and an attacker with many tries could eventually stuff malware in for example.) I used guids for this because they are both URL and S3 key safe. If keeping the original file name is needed I put it in a metadata value and rename the file on download using a Content-Disposition header. Making the S3 headers work with symbols in file names can be tricky but encoding it as a JSON string works around most issues.

In order to overcome the 30 second request limit in API gateway for longer post processing while still offering realtime client feedback you can set up an S3 event handler to trigger the post processing lambda which then updates a DynamoDB record with the S3 key as it's id. A status endpoint lambda is then polled by the client with the S3 key for status events.

For more complex post processing and client side workflows I have used key prefixes (folders) each with seaprate event handlers or CORS configurations. IAM polices with conditions including S3 key prefixes are used to restrict access. Using the S3 API copy command can move large objects quickly between workflow steps.

Also enabling server side encryption is a must imo. Be sure to specify AWS signature version 4 in the S3 constructor so that all parts of the request are signed. (Otherwise some older regions may not sign metadata headers.)

Also the S3 API copy command has an interesting append feature which can be used to build objects iteratively. I once toyed with the idea of using it to create large zip files of many S3 objects efficiently but ended up not needing it. Someday I would like to try that because it could be great for a lot of web apps where users can select a random list of files to download.

Also I (re)implemented most of the above this week using CloudFormation and the newer AWS Serverless Template (not the serverless.com project but the actual AWS feature.) which allows for really easy deployment.
They have a online email interface and a virtual workstation solution also targeted at enterprises.
These are different than what the OP was talking about. He's basically asking about stealth products like segway etc...

All your examples were ones where the initial hype around the technology/idea just wasn't ready yet, it wasn't one company playing coy and then coming out with some groundbreaking thing like the iPod/iPhone was.
Are they competing with WebEx, Skype, or Slack? Looks like a compelling B2B offering from Amazon. I bet they'll have an accompanying hardware to go with this in the coming months.
You can always ask for money. If someone asks for a 6 month non-compete, ask for an X month parachute (where X depends on how narrow the field is and how likely it is for you to find a job in a different field). You might have to negotiate something wrt being terminated with cause, or if you terminate the contract.

That can end up being a bit complicated, though. My standard is to only agree to non-competes that trigger when my service ends up being more than 12 months (I have no special skills that would hurt anybody in a specific industry in such a short time). Then I ask for a 3-4% increase in salary, depending on what industry they want me to stay out of. Basically this is my insurance money and reflects my ability to get a job in a different industry.

If the non-compete were for programming in general, it would cost them up to 50% of my salary. A non-compete when I'm on contract will likely cost up to 100% of my normal fee, depending on the duration of the contract. TBH, unless they are already paying through the nose for exclusive access to specialised skills, I've never heard of contract work having a non-compete clause.

Another thing you can/should do is make sure that any exercising/vesting of options/stock carry over into the non-compete period.

Personally, I love non-competes. I use the time for writing free software.
...application available for Android, iOS, Mac, and Windows

Why not Linux?
Amazon acquired Biba[0], this is that product with the backend swapped out. It's currently being beta'd internally and they haven't yet added anything over Biba the product. There are some great features planned, from what I've heard.

[0] http://www.biba.com/
Is anyone actually utilising a recent version of PostgreSQL for full-text searching beyond a hobby project? How do you find the speed and accuracy versus Elasticsearch?
There are many wonderful spiritual texts. This is blather. Most primates experience loneliness because, in the wild, they can't survive long alone, much less breed. The best you can say for this text is that it gives the readers extra heads, a pejorative Zen phrase meaning that it provides readers with an intellectual illusion of understanding that will delay genuine understanding even if they do meditate.

I'm very willing to assent to the idea that spiritual masters experience less loneliness, but it ain't 'cause they read this sort of pap.
How to Keep Your Brain Working Hard Everyday to Become Smarter
> I'm curious how that happened to you

Mostly a combination of needing to travel at particular times to particular airports.

The last two flights from SJC to LAX each evening seemed to be the most often delayed. You can't exactly hop on the next flight if it doesn't leave until the following morning.

Morning flights to SFO are often delayed due to weather, and fighting peninsula traffic to get to work sucks. BUR-SJC on Southwest would have been optimal from a flying perspective, but LAX was a shorter drive.
Caddy is pretty awesome. I use it to run my personal website (love that it can serve statically compiled Brotli assets out of the box). I maintain it's docker image here: https://github.com/ZZROTDesign/alpine-caddy :) Should be incredibly simple to set up!
A better question would be: How long until AWS has a Slack competitor? That natively integrates with the entire AWS stack?
I think you are right.

This is a good if somewhat technical book on this:
Legacy: A Genetic History of the Jewish People https://www.amazon.com/gp/product/B008MWL9HG/

Quote:

The Jewish community of Rome is among the oldest, historically continuous Jewish populations. Jews resided in Rome during the Roman Empire and were brought to Rome by the Emperor Titus, following the suppression of the Bar Kochba rebellion and the destruction of the Jewish Temple in Jerusalem in 70 C.E. Spanish Jews came to Rome during the Inquisition and, paradoxically, were shielded from the hostility of their Roman Jewish neighbors by the Pope. Over time, the Sephardic and Roman Jewish communities co-mingled. Jews from Rome crossed the Alps to populate the Rhine Valley and establish Ashkenazim. So Rome has been a crossroads for Jews from different communities during their histories.

[...] Many members of the Roman Jewish community were fond of telling us that they were neither Sephardic nor Ashkenazi. Our study from that time demonstrated that the Roman Jews had a low frequency of disease mutations that were found in both Ashkenazi and Sephardic populations, supporting the notion that they may have been a progenitor population for Ashkenazi Jews and that they had Sephardic roots.
Basically Python offers many nice interfaces, which encourage relatively efficient use of the underlying implementation. It would be trivial to implement an `appendleft` method for Python's list type (you could compose `list.insert`), but its omission was a good design choice, in my opinion. The language tries to guide you toward using the more appropriate data structure for the task, in this case a dedicated queue type. There're are numerous other similar examples scattered throughout the language. The way Python applies it's data structures is really well though out, and shows a great deal of attention to detail. There's a lot of wisdom wrapped up in Python's design choices, which I believe helps aspiring coders pick up solid techniques.

This isn't to say that Python is somehow, the be-all end-all language, but it's a very nice language, with many nice aspects to learn from.
Tend not to write unit tests as most evidence show they have little or no impact (http://neverworkintheory.org/2016/10/05/test-driven-developm...)
Probably because they crunched the numbers and came to the conclusion that the potential revenue didn't justify the development costs.
Even before smartphone cameras, people who cared about quality weren't using P&S cameras. P&S was always for cheap and convenient, not quality.

When everyone already has a smartphone they take everywhere, there's not a lot of market for cheap and convenient standalone cameras; no matter how cheap they are, they aren't cheaper than "I already have it", and matter how convenient they aren't more convenient than not having to carry another device.
For those looking to geek out on grip training: https://www.reddit.com/r/GripTraining/wiki/faq
Cool info
He said, unafraid.
You say that like advanced packaging tools weren't pioneered by "Linux"...
great approach
Throwing Away a Legal Career for $310,000
I travel a lot and I do technical work (sometimes) - it needs to be powerful (ish) and light with good battery life*

* when I first owned a laptop the batter lasted around 1.5 hours - I can get 5 out of my mac, that's awesome.
A paw-sitive relationship: Istanbul’s love of street cats
Hangouts is so strange to me (like many Google products I guess). They got a ton of traction; first release immediately was super solid and then nothing. Nothing has changed in ages. No obvious features get implemented. I would love so much to have s tile view of all participants. Ideally we would get a codec that's actually supported by hardware instead of this battery draining mess. I'd love to have an option for the video not to be cropped. I can't count the confusion that has caused over the years with people in meeting wondering why someone is only showing their forehead out why everybody but them can see multiple people on camera but they only see someone in the center. All the hard work seems to be done, but Google refuses to polish and properly maintain it. It's bizarre.
> If you do know your compiler and your CPU (singular), you're probably not really programming C.

The point is that C is still cleaner than assembly for long programs.
Scott Adams has some pretty crazy, extremist things to say. Recently someone else quoted a couple of them and was flagged and criticized by a moderator for provoking a flame war (the only inflammatory comments in the post were Adams'). I think the credibility of the speaker is very important to any topic, but I'm not sure how to address it here.
Speed isn't the only reason to use C. I often use C not because it's fast, but because C is by far the simplest mainstream programming language. All these UB warts notwithstanding, no language's interface comes as close as C's to a basic, no-frills register machine.
Looks like a skype/Webex competitor
If it's plugged into a UPS (silly, but possible), it sort of does!
Banks Look to Cellphones to Replace A.T.M. Cards
Hmm, I've seen this phenomenon before. I wonder if it has to do with popularity and tweet load?
Knowledge is about how to do things. I think we both have enough to figure out how to get a task like that done.

Wisdom is knowing how to choose the simplest possible way to get a job done, i.e. knowing what not to do. I have enough to know which solution I'd rather spend my time on. Do you?
Chromebox for Meetings (basically, Hangouts video conferencing in a box) is actually pretty awesome: https://enterprise.google.com/chrome/video-conferencing/

Disclaimer: I work for Google, albeit not on Chrome, and use this every day.
Amazon EBS Update – New Elastic Volumes Change Everything
I don't believe so. If you look under the FAQs and the "Security and Control" heading of the Features page, there is no mention of encryption beyond AES-256. Companies offering E2E typically like to highlight that somewhere, even in a non-technical way.

Furthermore, the security is apparently "fully managed", which to me translates to "keys securely stored on our servers, not client-side."
Not sure if you'll see this or if it's directly related. I also domain map but on an Apache server, this is probably an excuse but while I realize Let's Encrypt is free, and although there is the 90-day thing that you could automate, I just go with the year-long $9.00 certificate for each domain. I was wondering though, since it's domain mapped, the root domain can bridge to other sites by subfolders eg.

/var/www/html/main-domain | https://mainsite.com

/var/www/html/main-domain/domain2 | https://somesite.com

/var/www/html/main-domain/domain3 | https://somesite2.com

My question I could just easily try it, I'm not sure if it's related to what you mentioned where if you switch domains while logged into one if you'll lose session. I don't expect it to work. I just don't know what happens if people figured out "hey this ip is hosting multiple sites" and could figure out how to traverse each subfolder-site.

My question sucks sorry. I'll have to try it out I guess, at least my stuff is for myself not dealing with other people's info/sites.

This quesiton is related to information leak. I handle the domain mapping with virtualhosts. I also realized when you switch from say non-www to www (I saw you should stick with one) but when you do that you'll lose the session value so I imagine I'm safe.

I actually just took down one site as it was a useless domain so I can't test the multiple ssl certificates at the moment. Yeap this question is a waste of time my bad.
I'm at the phase of my musical career where my desk routine is mostly stretching against RSI injuries. But even back in the day, nothing but hours on the instrument ever helped my hand strength. The motor skills are just too fiddly and specialized-- you lift, you row, et cetera, mostly I found I played worse.
Equiem – Melbourne Proptech Leader [ARTICLE]
Interested to read this and the comments here, as I was just poking around with doing just that. I hadn't been planning on using a second IP address for it, and now I'm wondering how well it will work without it.
You're drawing distinction between the 'man made' part of the dam and the 'natural' dam, which exists on paper but not in the static force analysis. If that natural portion of the dam becomes unable to support the weight of the water, there will be a collapse.
Michael Flynn Resigns as National Security Advisor
The opportunity cost of this aircraft being out of service for that long must be astronomical.
Thank you for this:

"I would point out, as I have already done in my nineteenth-century style over long title, that one should call them Hindu-Arabic numerals, as although we appropriated them from the Islamic Empire, they in turn had appropriated them from the Indians, who created them."

"The Hindu-Arabic number system developed sometime in the early centuries CE and our first written account of it is from the Indian mathematician, Brahmagupta, in his Brāhmasphuṭasiddhānta (“Correctly Established Doctrine of Brahma“) written c. 628 CE. It came into Europe via Al-Khwārizmī’s treatise, On the Calculation with Hindu Numerals from 825 CE, which only survives in the 12th-century Latin translation, Algoritmi de numero Indorum."

You wouldn't believe me if I said so but in Indian schools we were taught it to be "Arabic numerals" with no context of the origin of the modern-day numeral system. I'm not sure if this has changed in the recent years but that is what I was taught anyways. As a child I assumed that the origin of the modern-day numeral system was thanks to the Arabs. It was this whitewashing of anything "Hindu" that really surprises me (especially in a country like India with 70% Hindu populace). It's almost as if Hindus never contributed anything to the field of Science. It was quite later in my life that I was able to read up various articles online and realize that most Mathematical concepts originated from India.
The Game Makers Trailer
> Best of all, it makes people like me look like conspiracy nuts. ... I won’t ask you to believe me about Twitter’s backdoor assault on the First Amendment.

You are a conspiracy nut, Mr Adams. Twitter is a private company. Repeat: Twitter is a private company. It's not even nominally working in your name (like a democratic government is). The First Amendment says nothing about private entities. Just because every TV news show uses it as a lazy source of react quotes does not make it a neutral public service.

Again, twitter is not a public service. Twitter owes you nothing; you haven't paid it fees/taxes. It's also a terrible place to discuss nuanced concepts (which is most concepts). Twitter is also not the only place you can express yourself.

The more I read of Scott Adams' recent murmurings, the more respect I lose for him.
C# 7 with Jon Skeet
Nice. I will use this, although I generally find both kids and funny gifs pretty entertaining anyway.

Do you have any suggestions for boring bureaucratic meetings with lots of contrived jargon? That's where I struggle to find entertainment.
Thing is, we are so far away from this reality of 'AI took our jobs' ala South Park's regrettable characterization of Southern indolence against the influx of low cost labor that it begs credulity to stand around the water cooler and say 'Gee, AI sure will suck when we all have nothing to do and no job to give us money to do it.' This is reactionary hedging. Last I heard, they can barely get robots to walk, and they damn sure can't answer a customer service line in under three painstakingly obtuse questions. Let's dial the rhetoric down shall we? Those of us in AI could use an attaboy instead of all the fear mongering. It's getting super old, and is groundless, baseless and frankly, rather disappointing to see on a tech oriented site. The world is not Keanu Reeves in The Matrix, Skynet is nothing but Google's spiders run amuck (sorry Serge et al, but srsly, do you really need ALL the data to run a decent search engine? You guys did very well for a long, long time with much simpler algorithms and everyone could find out where the closest Arby's is), and all this sabre rattling is more about the big AI firms gathering their might and squeezing competitors out of the cool kids club. You want reality? Google hypertorus quantum fluctuations in ground state bosons and see where General Intelligence is in terms of replicating human intelligence. Lot of papers being published on entanglement, but zero on how to even apply that knowledge to GI vis a vis an actual model of what entanglement entails. Ugh, the effing tedium of what people wanna scare us about relative to their working knowledge of the medium is unbelievably trite. Read a textbook, or ten s'il vous plait.
> But the next $1B? Did they never read a business history book during their MBA program?

It’s clear that a bunch of senior Google people believe that we will all own an augmented reality device in the near future, and they don't want to cede that market to Microsoft (having killed Glass).
Another way of building your grip strength is deadlifting raw, although that is anaerobic.
This comes from experience with SQL Server, not postgres and lucene instead of elastic search, but no, I don't think full-text search replaces lucene/elastic for any but the simplest searches. Especially if you want to rank results based on a number of factors, not just a text match. The last time I was using them for instance, we wanted geographic location to be weighted strongly and the database approach did not under performed on result speed, result accuracy and developer time (excluding learning lucene, which isn't that hard anyway).
Motive aside, even if it could have killed ten people by downplaying that risk the terrorists lose.

It's kind of like how sending suicide bombers to Israel is pretty much futile. The populace knows that unless they come by the hundreds of thousands it's not a risk worth being scared of. You can't terrorize people who don't think you're scary.
Walled garden platforms are a joke. If you need to get your messaging out reliably you would host your own infrastructure (Gnu social/mastodon, et cetera).
Global software product certification scheme
Using an RDBMS as a work queue is an anti-pattern, but if you're going to do it, you probably can't do much better than LISTEN/NOTIFY.
"But today, in a period when employment and earnings are vastly better than what they were in 2010, the delinquency rate for student loans is more than 11 percent..."

Might wanna check your crystal ball on that one: https://en.wikipedia.org/wiki/Household_income_in_the_United...
You're thinking about it the wrong way.

You need to "feel" the serverless nature of it. It's an inner feeling - a bit like faith.

If someone says it's serverless then it IS serverless!- that is the nature of all serverless systems.

Unless of course we're talking about Amazons serverless systems - those really are serverless - nothing there at all but strange quantum forces that create responses to HTTP requests.
At one time this was a function of how Google did promotions/pay raises. I'm not sure if Hangouts got caught in that catch 22 or not but it did kill a lot of decent projects.

Had that team remained relevant they could have conceivably done a "Chromebox" Hub like the Surface Hub and given Microsoft some competition in that space.

EDIT: Ok so as is pointed out there is a chromebox for meetings. Pretty nice. Seems to be out of the Enterprise group though, is that still part of Google or is it an 'Other Bet' now?
Amazon chime
Link is actually https://www.microsoft.com/en-us/software-download/windows10I...
That's what I figured this was, before I read what it did. Someone will come up with a decent competitor one day.
Heisenberg is a smaller part of this book; gripping read: https://en.wikipedia.org/wiki/The_Making_of_the_Atomic_Bomb
I find it just a little bit amusing that the game 'Ellipsis' is the 'FREEDOM' edition, however it is one of the few games that aren't DRM free.
Interesting. Main.js looks to be the compiled elm code, 383kb unminimized.
And here's one that matches or beats them.

https://www.lensrentals.com/blog/2016/04/sony-goes-world-cla...
Some day it would be awesome to build swarms of autonomous deep-sea robots. Ahhh... imagine if they ate tiny plastic like plankton for whales haha.

I know just bs, not a novel idea, until you do it just spewing smoke.

So much to learn still, I'm currently oriented to web dev not hardware programming but I have a hardware friend though, math friend, pieces will fit someday perhaps.

The ocean is such a mystery/entrancing.

Just imagine if you had a bunch of robots just out there doing there thing and you could "ssh" into them by satellite haha would be nuts.
> I'm very willing to assent to the idea that spiritual masters experience less loneliness

Chogyam Trunpga, founder of the Shambhala Buddhist tradition, said "Egolessness is a concept, a philosophy, but loneliness is a reality that you experience. A feeling of loneliness is part of the journey. As for me, I feel that way constantly, and I think it's a very healthy feeling, a very real feeling."

https://books.google.com/books?id=9QHEAwAAQBAJ&pg=PT214&lpg=...