skysight-inc/HackerNews huggingface dataset:
Just from the IOPS listed in the text, they're about half the speed per drive as ours (3.3M/8 => 400k) but as before they let you stripe together way more than we do. I'll be curious to see what happens with wear and garbage collection... (we're pretty conservative, these things come in powers of two and the resulting output size of bytes means they're more aggressive or optimistic).

Definitely an awesome update!

Disclosure: I work on Google Cloud.
Google accidentally wiped a bunch of Google Wifi and OnHub devices
It's all original Apple hardware.
Happened to me with a Gmail.com account and 2FA enabled. Checked Google's security log and everything seemed normal.
Woke up to this message on both my phone and the wife's. Problem was, the correct password did not work in either case, so had to recover using a text message. This suggests something more serious.
Calling Rust from C is easy.
Details: http://siciarz.net/24-days-of-rust-calling-rust-from-other-l...
Happened to mine last night (CET).
Jesus Second Coming
Git uses its cryptographic hashes. Bazaar uses revision-signing. (2008)
For a company that understands computers are very similar to fashion (their SVP of retail was poached from Burberry), they show a disappointing lack of foresight by not keeping their taste makers happy.

Introducing OS X as the mobile Unix platform of choice on top of the first ever drop dead gorgeous notebook (The Powerbook G4 Titanium) declared Apple as the platform for discerning power users. Those power users could confidently brag about their systems, giving free advertising to non-power users. The halo effect of which can still be seen today, trickling down to Joe Coffee in your local cafe. How much longer that lasts in the wake of mis-steps like the touch bar is questionable though, even in the wake of massive unit sales to the broader public.

This article is about high end video / graphics users, and workstations are a slightly different use case. But not much. Once these users move off Mac, who is going to be left to champion the desktops?
Even China Can't Kill Bitcoin
Faith in the electoral system
If you must write your HTML parser in C/C++, then you should expect buffer overruns.
Why do they need to add google analytics to random people's web pages?
DNA Research Show Modern Humans Benefit from Neanderthal DNA
Well, there's always http://maddox.xmission.com
It happened on mine.
Mind emailing me some details? az@discordapp
> Web browsers have gone insane.

Yep. I bought a second computer for full browsers. One for dev, another for 'full' browsing (Javascript on) and on my i3 dev machine, I only have NoScript browsing on for dev stuff.
As I've replies in the other comment, but will make more explicit here: I think our drives have roughly 2x as many
IOPS/GB (just using their marketing statement in the blog post). There's lots of reasons you might prefer one over the other (and AWS lets you stripe way more together), but just comparing GB isn't a full picture (otherwise PD-HDD or EBS Magnetic or even GCS/S3 is way more awesome...).

Disclosure: I work on Google Cloud.
I would imagine that was because the comments are intended for discussion about that particular issue, not for random users to jump in with wild conjecture on its impacts. Honestly not that strange.
Does anyone know answer to this question someone is asking there at the end? Is it related?

> could you tell us why a lot of people had to re-authenticate their Google accounts on their devices all of the sudden? It may not have been related, but Google definitely did something that had us all re-authenticate.

I too had to reauthenticate and was very worried because it was first time I had to do this, I thought something bad happened with my account and it was very suspicious.
This is an unpopular position of I support, but this is exactly why I support repealing the 17th amendment and returning to indirect elections of Senators via state legislatures to bring power back to the states.
I have hundreds of passwords in my password manager. That's going to take a week, considering I also have to work.
> Git prepends type and length, that makes an attack significantly more difficult, and certainly you cannot just directly translate the pdf attack to Git.

With the attack vectors discussed above, the type would always be blob. I don't think the length field is much help either; see https://news.ycombinator.com/item?id=13720725
A New Kindle Voyage Model Is Just Like a Lamborghini of E-Reader
Not just red states have this rule. New York, hardly a bastion of conservatism, also restricts absentee voting:

>Qualifications to Vote by Absentee Ballot

>Absent from your county or, if a resident of New York City absent from said city, on Election Day.

>Unable to appear at the polls due to temporary or permanent illness or disability; or because you are the primary care giver of one or more individuals who are ill or physically disabled.

>A patient or inmate in a Veterans' Administration Hospital.

>Detained in jail awaiting Grand Jury action or confined in prison after conviction for an offense other than a felony.

https://www.elections.ny.gov/VotingAbsentee.html
> It seems to me the risks associated with not having SSL still remain they're just shifted to between the CDN and the backend

Exactly, it's a really bad idea for anyone who cares about their users' privacy. It's essentially an opt-in MITM attack...one that, apparently, leaks data everywhere.
We noticed this affecting tens of thousands of users on Zapier last night, causing us to wonder if we'd shipped a critical bug. Zaps using Google apps are still paused[0] while we wait it out.

[0] https://status.zapier.com/
I wish they'd thought about this in advance. So many little things (like suffixing every hash with '1', and rejecting commits with hash values which don't end with '1') would have made the switchover much easier to do in a backwards-compatible way.
Exactly. And it seems every king of the mountain makes this mistake. Meanwhile, Microsoft, who many of us shunned for years because of them doing exactly this, is turning around and starting to show promise.

I do predict a visible shift of developers from Apple to MS - not to do Windows development, but to do general development on a Windows device... and possibly in a Linux shell within Windows.
It looks like Wix only tested that Explore page in Chrome and Edge. Clicking any of the "View Site" links opens two new tabs in Firefox and Safari, opens nothing in IE11, but works as expected in Chrome and Edge.
I assume their writeup got filtered through PR and Legal.
Is your password manager 1Password?

https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...
You don't understand something basic. The root of this "diversity" focus is an expression of the believers' own racism and sexism. They believe racism and sexism are true yet also bad, so they have to engage in an endless routine of mental gymnastics to convince themselves that their view of the world is somehow ok.none of this is meant to solve any problem other than the SJWs' ability to deal with reality.
You can, but you have to spend them in bitcoins.

There might even be enough of a legitimate bitcoin economy you could mostly do it, assuming you weren't a really big time criminal. Those guys have ways to launder the profits anyway.
It appears that in the original 1943 memoranda by Wald takes a frequentist approach; see link below.

"A METHOD OF ESTIMATING PLANE VULNERABILITY BASED ON DAMAGE OF SURVIVORS" BY ABRAHAM WALD (1943) : http://www4.ncsu.edu/~swu6/documents/A_Reprint_Plane_Vulnera...
It's always good to scratch your own itch the way you feel inspired to, so good stuff. However, when I had the same problem, I used to (still occasionally do) 'annotate' my commads with comments and grep thru history for recall.

$ watch -n1 free -m # Display and update Ram...
$ history | grep Ram
Or
$ grep Ram .bash_history
$ # Don't want to execute, just remember? Comment the entire line

(obviously with large history filesize set)

Of course history wasn't shared across boxes, so that one advantage of this solution. Good stuff!

Edit: Just thought about this -- to share across boxes, just stick in a rync/scp/..whatever command in .bash_logout or a crontab or if you really want to get fancy set up an inotify ...
One of the most beautiful Polish cities tried to kill me
Jake Wharton: Exploring Java's Hidden Costs [video]
You are mistaken. Please read the rest of the article, and the comment that is a peer to yours.

"Where an employee does not receive sufficient tips to make up the difference between the direct (or cash) wage payment (which must be at least $2.13 per hour) and the minimum wage, the employer must make up the difference."
Huh? The i3.xlarge is clearly two slices of a full 2T device. The performance numbers in the text are for eight of those. While it'd be great if we had 8 of ours available instead of just two, I don't understand how you believe you'd replace even more than one GCE VM with a single i3.xlarge.

Disclosure: I work on Google Cloud.
Protect that service against oom-killer, it's mentioned elsewhere in this thread how to.
I'm not familiar with Ragel, but you might consider adding support for SaferCPlusPlus[1] as an output target. It should be a fairly simple modification of your existing C or C++ output generator. SaferCPlusPlus was, in part, designed for this (I mean, CloudFlare's) sort of situation - using C/C++ in internet facing applications.

[1] https://github.com/duneroadrunner/SaferCPlusPlus
Show me a complete and nontrivial program built by Deepcoder or something similar and then I'll worry.
Are we merely AI fuel?
Have we crested a threshold where technology is beginning to advance faster than us individuals will be able to keep up with? Humans are slow. We go to college for 4+ years. That's more time than the next paradigm shift could take, and college itself is already becoming irrelevant. Eventually no one will be able to keep up. Students will learn whatever there is to learn, contribute years or perhaps months of work, and be discarded. Will we somehow oscillate from employment to 'study time' and back?
Hard in training, easy in battle.
Security is a requirement. They must have been extremely confident indeed to write something like this in C, where a single mistake can make your program fail in catastrophic ways, with no help whatsoever from the compiler.

If some code has bugs, did the author just "use the language wrong"? People make mistakes, and we can prevent some of them by using better tools.
> having some degree of TLS is still better than nothing at all

Apparently not.
And helping support and nurture the companies they invested in does not mean simply enabling whatever the founders do.
>"I've heard some interesting and unusual stories."

Do you care to share or elaborate on this?
I don't follow. If an allocator is optimized for our needs (i.e., allocating everything up front and never freeing), and is easier to set up than the general-purpose allocator in newlib, how is using it "technical debt"?
I can really understand medium.com needs for a decent revenue model.

But a 75$ one time fee for a domain seems really a desperate measure to cash in.

I'd be willing to pay, say 5$/month for premium service, including a custom domain, but a 75$ one time fee only for that is not justified to me.
There are several kinds of voter fraud.

First, there's voter impersonation--where you go to a precinct, and claim to be someone else and vote under their name. This tends to be relatively easy to catch; the general estimate of fradulent votes cast in this manner is less than 1 in a million, although there's certainly been more attempts that were easily caught (quite a few people last November tried to do voter impersonation to prove how easy it was and got busted instead). It can't be decisive, because before you get to a margin of victory in this range, you're going to discover that we can't actually ascertain the voting intentions that well (misread ballots happen about ~1 in 10000)--this is basically what happened in 2000; the margin of victory in Florida pretty much depends on what you consider constitutes an actual vote in the ballot.

A related type of fraud is using the vote of someone who should be ineligible to vote. You'll sometimes hear claims of millions of people on the voter rolls who shouldn't be on them, and the people who are concerned about this worry that they will be used for voter impersonation. Most of these cases basically boil down to the state didn't hear that you died or moved. States generally only bother to cross-reference their databases to purge people from these lists every few years, but it's still pretty easy to tell if someone cast a fraudulent vote in the meantime if you compare dates.

The least common case of voter fraud (at least in the US) is outright ballot-stuffing: where precincts lie about the counted results. Most precincts count their results in the presence of observers from independent election monitoring groups and representatives of candidates and political parties, which reduces the scope to commit this kind of fraud.

More common is mail vote fraud, where someone intercepts the votes of people who are voting by mail-in ballot. Estimates of this kind of fraud is perhaps 1 in 100,000--it's still not going to be decisive, since (as said above) the inherent inaccuracy in vote counting will crop up before then.

It's worth point out that there is no national vote in the US. Voting is entirely decided by the states, and many details about how you conduct the vote and vote counting process may be left up to individual counties or sometimes even precincts.
Or that they view "the company" and "the founders" as separate entities.
> A significant number of companies probably need to compose customer notifications;

As a one-man company who has never done this before (and to the best of my knowledge never needed to): Any guides/examples to writing a customer notification for security ups like this? Or just recommendations? Thanks.
> When we called them on it, they basically threatened to use lawyers to put us out of business if we pursued the issue, so I guess our management decided to drop it. We did make them change the support email and phone number.

This is why we can't have nice things. Darned lawyers. Can't live with them, can't live without them
My jekyll based static site hosted on Github Pages uses cloudflare for https. Saying that my site is compromised by CloudBleed is a bit too much.

http://www.doesitusecloudflare.com/?url=www.stacktoheap.com
you could have put their ip in a firewall or rate limited their access to mess with them.
I would _love_ to write our firmware in Rust, but that's a much bigger sell than moving from C to C++.
TSMC on track to move 5nm to risk production in 1H19
Something that bothers me is, why don't there exist dynamic encryption that scales with the current computing power? Then we might have less of a migration mess. Hope is that encryption breakers have to win by algorithmic strength rather than brute force "add more cores".
Only inherently unsafe languages like C make it possible for an amateur-hour HTML parsing blunder to spew secrets all over the Internet. If you can't be bothered to check your return codes, at least use a language that doesn't multiply the damage from that mistake a million-fold.
Are you saying the amount of value provided to billions of people by the Google search engine, Maps, Gmail, etc. is worthless, because the primary way the company makes money is by ads?
We should probably make our documentation more clear. You should see fairly linear scaling as you go from 1x375 up to 8x375. Is that not the case? (We can only go to 8x375 today, but that's not "regardless" of how many drives you attach, that's "Can only attach so much").

Disclosure: I work on Google Cloud.
How about... stop CLOUD THIS and CLOUD THAT.

Cloud means extreme centralization.

It means giving your data to a third party you don't control.

Why?

Why does our networked software have to assume a centralized topology?

In the days when developed countries had dialup, protocols (IRC, Email, etc.) were all decentralized. Today, all the famous developers live with fancy broadband internet connections and forgot what it's like to have to think about netsplits.

The result... all the software is either "online" or broken.

There shouldn't be an "online" or "offline". There should be "do I have access to server X currently?"

Why do we need Google Docs to collaborate on a document if we are all in the same classroom?

Why do we need centralized facebook server farms whose engineers post on highscalability how they enable us all to post petabytes of photos and comment to our friends?

Why do we need centralized sites to comment at all? Each thread is local to its parent.

Why does India need internet.org from facebook?

If communities could have a network that survives without an uplink to the outside world then DDOS from the global internet would just cut off that network's hosting of documents to outsiders. They'd still be able to do EVERYTHING locally - plan dinners, book a local appointment, send an email etc. and even post things out to the greater internet.

This is a future I want to see.

We already have mesh networks. We need more web based software to run these things.

That's what we are building at qbix.com btw.
Aww man I submitted my list hours ago but I guess it never made it past the New page. https://github.com/pirate/sites-using-cloudflare

Original post: https://news.ycombinator.com/item?id=13720199
A Paid Hour a Week for Sex? Swedish Town Considers It
We will NOT publish a diversity report - ever
I'm not really sure why it's automatically reality distorting when the majority of my use time with my current laptop that has more ports than the newest MacBook is almost exactly in line with apple's idea with the single port.

My needs certainly aren't everyone's, and I've never claimed as such. But really, with the specs on the current MacBooks what else are you going to be doing besides Facebook and some movies? I'm not even confident it can play some high quality YouTube videos much less higher quality rips.

With the price, this is how they've always operated; their initial adopters always pay a premium to be first, and the second or third iteration is accompanied with a price drop and design changes to address initial complaints. The MacBook Air gen1 was filled with issues. The update handled all of these pretty gloriously.
DOS attacks being a bad thing is the whole reason the service exists, so to then group it with "things some people consider offensive" is just double think. If Cloud Flare didn't want to play internet cop in regards to DOS attacks, it would not exist. Since it does, it might as well say the same things with both sides of the mouth.
I think he got it mixed up. Only the database would be leaked, but not the master password. However I understand the the clientside decryption is done when using their addon, but I'm not sure how it works if you go via the webportal.
I would rather ride a cycle rikshaw than use Ola, it's pathetic.
Last time I checked I didn't find any but thanks for the info. I'll look again.
Webseitenoptimierung|SEO Manager|SEO Consulting
Well, for math we're already here: http://www.spiralgen.com

It's optimizes math code, both at the math level and the implementation level, and Intel have used it to optimize their performance libraries.
It was just basic stuff like player positions, velocities, and animation states.
It's as easy as throwing a red banner on your website that explains the situation briefly and recommends that users change their passwords, if you take this more seriously you can force a password reset for all users. Depends on how sensitive the information that your users trust your site to hold is.
I had this hit me today. It happened right after I had disconnected from a VPN connection and connected directly to the internet. I assumed it was caused by a sudden change in "location". I guess not. I use 2FA, so I'm assuming I'll be ok. Maybe I should change my password.
Use xrandr --dpi 192 (or whichever value you’d like to use) before starting i3, i.e. typically in your ~/.Xsession.

i3 ≥ v4.13 will pick up this value from the Xft.dpi resource in ~/.Xresources as well, which is the more common way of configuring DPI.

edit: haven’t tested this within Xwayland, though. Note that i3 is only supported on X11.
So Google does not know the reason but tells us to stay calm? I was and am creeped out majorly by this.
Some people might see an irony in your comment.

Economist Joseph Stiglitz wrote in 2009 "...banks that are too big to fail are too big to exist..."

My theory is that the too big to exist theory is now true for basically all the tech giants. Generally, everyone who knows the kind of tracking these companies do (internal and external) agree this is true, except those who benefit from the companies' continued existence e.g. employees, investors, shareholders.
PICO-8 Lighting by hand (part 3)
You've picked some pretty dangerous subjects in healthcare and privacy. It's no coincidence that these areas are focal points for regulatory legislation - this is serious stuff, but that's why we have laws and other mechanisms in place to deal with these things. The regulatory environment is precisely what addresses the fact that software does not exist in isolation.

It's ludicrous though to suggest that all closed source software become illegal. Talk about throwing out the baby with the bathwater! You'll be hard pressed to find any regulatory justification for such a blanket measure.

This is overreaching, entitled ideological authoritarianism. The danger is that you don't see it because it all sounds so ethical on the surface, especially when framed through the dramatic lens of your grandmother's pacemaker. Maybe I do think there needs to be more transparency in healthcare products, and I think that what Vizio did is despicable - but we can't just knee-jerk all the way to the other extreme of outright banning all closed source.

What you're essentially advocating for is the application of absolute power on everyone in order to prevent some from abusing their power. Do you not see the dangerous escalation of the stakes once you take this approach? I'm almost more afraid of you than I am of Vizio.

I wrote some code yesterday and didn't share it - are you going to justify forcibly prying it from me?
Or, you know, syslog.
I'm finding problems with the escape key, not the hit/miss which is not a problem at all, but while coding I like to rest my finger on Escape key on certain occasions. That's not possible on MacBook Pro Touch. Also have to adjust that my Launchpad button is now where Siri is by default, next to the Touch Id Sensor. Everything else is better, touch pad, for which I thought I won't have use for included. Also, up and down keys are somehow easier to miss which is strange, probably due to keyboard elevation. As for the keyboard, finally, this is keyboard. I started developing on Mac as iOS and Android developer in 2012. Had hard time to get used to gummy MacBook keyboard. Touch Bar is something keyboard manufacturers in the PC world tried to make for years ending up with horrible keyboards no developer would touch. Industrial design is better as well. My 'old' MacBook Pro Retina now seems big and clumsy (both are 15"). This is the feeling I have when I use it.
I Stopped Watching TV for 30 Days.  What I Learned – The Huffington Post
Why pay when you can receive sms online free on a huge number of sites? The best service for me is https://freephonenumber.online
> Presumably other sites are in similar situations.

Not to my understanding. 1password uses client-side encryption, using keys generated from your master password. This means that any data transmitted over the wire is already encrypted, whether over SSL or not.

Most other sites do not do this, at all, in any way. If you use a website that use'd CloudFlare's SSL termination, change your passwords, cancel your credit card (if you sent it to that site in the past few months, eg Uber/Lyft).

> go change all your passwords.

Yes, correct =].