skysight-inc/HackerNews huggingface dataset:
What day/time did you achieve 10,000 concurrent?
> you would be hard pressed to exploit a billion of them at the same time.

Really? A billion automated orders for something, followed by the banking system having a metaphorical heart attack and either cancelling lots of/all cards (breaking normal usage until the card printers can catch up), or few/no cards (and risking further, directly exploitable, fraud)?

Sounds like a potent way to successful fight a nation-state from a coffee shop.
You're a little foolish to believe that some sensitive data within Google/Facebook/XYZ does not get shared outside with FVEY countries and intelligence agencies.
No, it was unnecessarily sexist and demeaning.
Java 9 will not receive long-term support
Yes the refuel experience as well as the total green balance (for the educated) is what is holding world dominance of the electric drivetrain back. I can litterly carry the energy needed for a 500 miles drive. What is the weight of the batteries I would need for a 500 miles ride? Additionally as I ride on gas the weight is consumed instead of transformed (gas is running out), yet a battery at 10% capacity still has its weight. Sure this behavior contributes to the environmental benefits of battery driven engines.
$1.20 a month may be expensive relative to your costs, but relative to the average programmer income and monthly bills in the United States – it's nothing. You'll spend three times that cost on a local cup of coffee every morning.

S3 static hosting is far easier to manage than a virtual server; it's a trade-off of convenience vs savings.
> The problem is that theses models have a predictive power approximatly the same that Aristotle Law of free fall

Having done exercises of rolling carts down inclines and comparing the measured velocity to predicted velocity, and having taken supply schedules and use those to predict price variation, I can say one set of calculations was more accurate than the other. (No doubt this was due to data quality.) Simple regressions of supply and demand curves have uncanny predictive power.

They are not a terrible representation of reality in the same way that rigid bodies are not a terrible representation. They are a limited representation that naturally extends itself. Don't confuse modern macroeconomic models with the terrifically-successful microeconomics early econ tends to focus on.
It starts early at the resume/email communications. I expect to see in communications that a candidate can present themselves in a mature, professional manner. That's something you tend to learn with experience, though it also feels like common sense.
Ask HN: What happened to full screen video backgrounds 2017?
A few years ago it was common to see full screen video backgrounds on web site landing pages. They no longer seem that common in 2017. What happened, and why did they fall out of fashion?
> Evaluation of their joint association showed that participants classified as high for both sedentary characteristics (high sedentary time [≥12.5 h/d] and high bout duration [≥10 min/bout]) had the greatest risk for death.

Is sleep included in the 12.5 hours per day?

Even if it isn't, I and everyone I know sits for at least that long each day. Definitely for more than 10 minutes at a time. If we need to interrupt our sitting bouts every 7.5 minutes in order to be healthy, I don't know how the hell to do this.
Sure, but the only reason you'd pose that question is that you seriously underestimate

A) the force of a hurricane and

B) the consequences of detonating a nuclear bomb.

It's understandable you might underestimate the force of a hurricane relative to that of a nuclear detonation because it's very very large and unless you're familiar with both you might not be aware of the orders of magnitude involved.

I don't understand how you'd underestimate the potential dangers of detonating a nuke though, unless you live in a country that still considers "the nuclear option" a valid one.
Yes, comparing this to throwing up a barebones page at www.somewhere.edu/~username/index.html is apples and oranges.
Wait, did you really just say, “I acknowledge there is no evidence” immediately followed by “there is no evidence for the absence of evidence”?

If I’m not missing something you though was implicit somehow, that is some pretty remarkable logic.
Still, for a very long time the RAW file itself used to be linear in storing the signal. Perhaps not any more though.
Is there a good reason to use these things hosted by a third party source? Libraries are tiny, the fonts can be downloaded from Google Fonts and embedded locally, etc. Even the Google Analytics JS script I presume can be stored and run local.

Shouldn't a goal be to mitigate the number of possible failures which can bring down your site by reducing the number of single points of failure?
no but instead of taking out the money to pay yourself, you just buy things as assets of the company therefore reducing tax exposure.. at least thats the way I have heard of.
I don't disagree with what you're saying, but the issue I have is with the monopolistic aspect of an app store... Basically, it's one or two monolithic companies that control everything and determine the rules because they make the base operating systems. With regards to updates etc, I think similar issues apply to native apps - e.g. devs can change the backend, which can break older front ends. I'm sure you can eventually have the concept of a versioned web app as well, much like versioned APIs, and users can decide if they wish to upgrade.
Works for me. Either quickly down-and-up or isolated to certain users.

I think google is pretty good about engineering no global single points of failure; all updates are rolled out to only a fraction of users/machines at a time, etc.
You might enjoy this as well: https://www.wunderground.com/resources/education/hugo1.asp
Do you want sharknados? Because this is the kind of thinking that leads to sharknados.
Are you dismissing as absurd the notion that a person might want to alter their lifestyle in order to reduce their carbon footprint?
App Engine / US Central + East working fine.
Do you believe an opt-in in necessary with a (properly implemented) differentially private collection mechanism? Just curious about your take on this.
Only a small amount is necessary. There is a protocol called hashcash (used by Bitcoin but generally applicable) that can be easily used with email [1]. You basically get a header like this:

X-Hashcash: 0:030626:adam@cypherspace.org:6470e06d773e05a8

You can choose how much work you want to do and the recepient can specify thresholds for minimum work required. This header is all they have to store, and it's easily stored through existing email infrastructure. Your mail server can do it without your client's help, too. If you spent a second on a proof I'm sure grandma wouldn't notice, but it would be very difficult for spammers to do the same.

[1] http://www.hashcash.org/
One of the things I like about the cyrillic alphabet is that it has symbols for diphtongs. Portuguese (my native toungue) fixes this with diacritics (melancia, and distância - the diacritic wouldn't be necessary if the 'ia' in distância used a symbol to indicate it is a diphtong). French mixes vowels up in lots of different ways and English spelling is a mess.

Had the latin alphabet symbols for diphtongs, things could be simpler. Mind you, I am not a linguist.
Here in our country we have an option to split a land plot into smaller ones. If for some reason you cannot take neighbouring numbers, you get assigned letters. We have some land plots, which have been divided into many smaller ones. So, there are homes (or homes-to-be-built) with address "Street 10, Town" and "Street 1O, Town".

I guess, postal service will make these people to get acquainted :)
How does it compares to hashids (http://hashids.org/)?
Open Source Roots: Christine Spang of Nylas
Working fine in SLC
>As a toll road, however, it is hardly getting used, despite the relatively low charges. Russia's drivers believe it is a government rip-off and prefer sitting in traffic jams on the old road.

One might find it surprising that many Americans would hold a similar view on toll roads. Maybe.
Push Notifications with Firebase Cloud Messaging
Not email-based, but I'm keeping my eye on ActivityPub from W3C: https://activitypub.rocks . Seems to be a step in the right direction
pip isn't great but I've had a much better time with it than rubygems.
I don't think i've ever read a news story about a website/app being down, and it was still offline by the time the news story found me.
Reading this, it seems like one of (at least) two things might be true:

1) The article is written for other members of the author's group, but wasn't really meant for broad consumption.
Yes, it's online, in public, etc, but either the author wasn't thinking about that and/or ignored it. I say this because it feels like something one would say when complaining to friends at a pub after hours. It's got this "we've all been here, don't you just hate it?" sorta vibe to it.

2) The article is written to be click-bait/incendiary on purpose.
A while back (a year or two?) someone else wrote something similar and it blew up big. More than anything it gave people something to shake their fist at. It gave older people an excuse to look down on "the kids today", younger folk could shake their fist at the poor treatment they receive from older people. I wonder if this author is also trying to go viral in a similar sort of way.
I feel like it takes a particular skill to write these sorts of things - it's gotta be believable that a 22 year old would write this, but also push enough of the older generation's buttons that it'll inflame them, too.

3) Obviously, there's other possibilities that I hadn't thought of that might be true :)
Most car manufacturers are 5-10 years behind in terms of deep technology and software. In recent years a few manufacturers have done a passable job papering over their legacy interfaces with modern designs and faster GPUs, but they're still buggy junk behind the scenes. And if that weren't bad enough, most of it is – from the end user's perspective – abandonware.
Every time I use some kind of graphical/web email client, I'm appalled by how hard it is for me to find the "show me all the headers" feature. In mutt when I have doubts about something I just hit "h".

Admittedly this requires a level of knowledge that the average user may be missing. But I find it really helps inform my opinion of any borderline-suspicious emails.
Thanks. That makes sense. Didn't think a loophole that big would not be talked about more. On the other hand, it is interesting to know that you can have a capital gains income of ~75k as a married couple and pay no taxes, if you have no other income. Not a bad income for early retirement.
I take some responsibility for the communications gap (in retrospect, there was no need to specify "west"; we'd have gone and got them) and everything worked out perfectly fine for my son, but even 5 years later, it's incredibly hard to type this without tearing up.

Don't beat yourself up too much. Having been a 911 dispatcher before (coincidentally, in Brunswick County, where Ocean Isle Beach is located), I can say that there is a tremendous onus on the dispatcher to verify, double verify, and even triple verify location / address if there is any possible ambiguity. And any BrunsCo dispatcher should know that the local beaches have a lot of those kinds of confusing addresses (Holden Beach has some similar situations, for example).

It's also the case that in years past, before cellphones were ubiquitous, most 911 calls came in on land lines which were mostly strictly associated with a specific physical address. Now, with the ubiquity of cellphones, things are both better and worse in some regards. Now you can often get to a phone faster, and in places where there would be no landlines, but the trade-off is that geolocating cell phones is still not perfect. [1]

[1]: http://www.foxnews.com/us/2016/12/28/911-centers-struggle-to...
Yes it was clear the poster was being derogatory to girls. It's also clear you are trying to normalize and justify such behavior. Both are unnecessary.
The OP mentioned starting their strategy when they were 25, implying they are/were a "normal" person, which is why I asked, since my vague understanding of the situation in the US matches what you describe, that you have to have gobs of money to begin with before you can really start gaming things.
Is EFS here referring to Qualcom chipset filesystem, and what does that have to do with L2CAP being in the kernel just like IP and other protocols?
Imagine you're a CEO, or VP sales, or anyone with responsibility for moving the company forward. Lets say you have a technical background and actually understand how bad things can get with a codebase.

Its year 2 and you're desperate to ramp sales. the company is in existential crisis, the end of the runway is approaching rapidly. The product ostensibly works, but there are lots of customer problems and new feature requests always seem to get bogged down.

Your technical leaders say that the product has driven into a swamp, and you need 2 months to dig it out, plus 30% overhead ongoing to finish the cleanup and try to keep on the straight and narrow.

Even though its the right thing to do in some world, how likely are you to say 'I understand, take all the time you need, we don't want these problems plaguing us'
IIRC Google Fonts aren't easy to download because they vary by user agent.
Advanced drone controller with HDMI video input and 5.8 GHz data link
Poor bats. They also get their lungs exploded by the pressure differences created near wind turbines: https://www.wind-watch.org/news/2016/09/27/wind-turbines-are...
I've been diagnosed with dyacalculia and I always have to use a similar trick to the alligator mnemonics to figure out which is "greater than" and "less than". But I think it has more to do with telling left from right, which I also have problems with.
Interactive origami
No it doesn't, but what if you can be convinced to use a compromised version of curl that downloads a compromised nginx? This is the threat model that we are looking at here. That's why we should always verify signatures for packages we download, to make sure we get the right bits.
We have the models, but economists have been surprisingly resistant to mainstream mathematical tools and often treat fields as scalars. A single consumer price index makes about as much sense as a single temperature measurement for an entire country.

IIRC prominent economists actively ridiculed the idea of a "Manhattan Project" a few years back. The idea was to pull in experts from mathematics, physics, biology and computer science to invigorate the field via cross-pollination like occurred with mathematics and physics in the 70s and economists did not like it.

Update: apparently it did lead to a conference, at least, and Nassim Taleb was one of the participants.
One reason is that by linking to external libraries your browser most likely has them cached. At least it was the case a few years ago when I was doing web dev.
The level of detail on this is astonishing. Great job!
Despite the later references to ROP, this basically captures the mid-1990s state of the art in memory corruption bugs.
As someone who has worked for a five eyes intelligence agency and at Google I can tell you that Google does not share sensitive data with the Government unless compelled to do so by law.
Detecting 100% of buffer overflows with 0% false alarms, would require solving the Halting Problem.

For applications that demand both maximum speed as well as maximum security, the best solution is probably something like a C compiler that requires the code to be accompanied by formal proofs of defined behavior. Even this will necessarily sacrifice speed in a theoretical sense, because there are certain problems for which the fastest solution is safe but can't be proven safe within (PA/ZF/ZFC/insert any consistent foundation of mathematics you like).

Eventually we'll have people writing fast programs and proving their soundness using large cardinal axioms which might or might not actually be true. Then someday one of those large cardinal axioms will turn out to be inconsistent [1] and suddenly some "proven" code will be proven no more.

[1] https://en.wikipedia.org/wiki/Kunen%27s_inconsistency_theore...
> I am not sure what you mean by that. How is supply-demand model better? What it gives you in those situations?

It yields better predictions with fewer inputs. For simple calculations of optimal pricing or optimal production quantities given input costs, a simple table of volume versus price beats a matrix. IO models become interesting when observing entire industries. (That is why the DoJ uses the HH metric [1], an IO-derived metric, to measure competitiveness.) But they're macroeconomic, not microeconomic, models. Macro has a worse track record than micro, which starts with simple regressions of volume and price that we call supply and demand.

These kinds of matrix models are deeply embedded into the IMF's approach, by the way. Many are critical of the IMF's over reliance on such difficult-to-intuit models.

[1] https://en.m.wikipedia.org/wiki/Herfindahl_index
Ah, I knew the logo looked familiar.

In our case we're covered by regulatory and contractual obligations along with the info-leakage scenarios.
Microsoft announced at BUILD this year that PWAs would be ingested by the Bing crawler directly into the Windows Store, with tools for sites to opt out or further control their listings (including monetizing them).

The Windows Store has supported server-hosted web apps [1] for some time now, and provides a large subsection of the platform-specific libraries to hosted web apps. Hosted Web Apps are based on earlier drafts of PWA standards, but the expectation from BUILD and other Microsoft talks is that they will bring platform-specific libraries along for the ride as the converge to more recent PWA standards.

[1] https://developer.microsoft.com/en-us/windows/bridges/hosted...
How combining user testing with AI can expand your insights
Well these are the same types of people who told us coffee was bad, saturated fat was bad, low-fat/carbs-rich diets were good, etc. and have been found to be wrong across the board.

I don't worry too much about how other busybodies tell me I should live my life.
I only see seven vowels in the graph.

I also only see four digraphs, for consonants only.

It looks like U is replacing У-with-a-line, and W (!) is replacing У
tl;dr: There are no "Great Men" in science (like Eisenstein, Newton and Galileo) because everyone used previous work, and had highly competent rival scholars working on the same problems. If one would have been "thrown under a tram" another would have produced the same results soon after.

I find this a bit superficial: If only one person can do something, s/he is great. If there are only two, both are not great.

We have some redundancy of greatness, but not a lot: If you'd thrown the top 10 physicists in the world under a tram, at any moment in time, progress would suffer greatly.

Bonus fact: There are about 100 recorded runners who have ever ran 100m in under 10s. While that achievement is now considered "mundane", I find all 100 of them Great.
How is that not a recruiter then?

Can you answer the other part of my question?
Had about 30 minutes of downtime (UK) - was completely down on one account, and intermittent on another. So guess it wasn't affecting everyone.
And probably solved the halting problem too ;)
The beauty of just dropping your black boxes everywhere is that once you have a 0-day, you can just run it on your full fleet of machines scattered everywhere. Once you find a new 0-day, you can run that one etc. Less effort with a lot more payoff.
I see a pinched finger and thumb
US eCommerce startups can now optimize conversion without roadblocks
> But you only get to collect social security to the extent you paid into the system.

To clarify: Social Security benefits are calculated based on the 35 highest-earning years you report to the IRS, up to a maximum cap. You will _not_ "run out" of benefits at any point, but if you report under 35 years of earned income to the IRS, those zeros will play into the overall calculation of your benefit rate.
Honestly, I feel like a study of this nature is backing up what we already know to a degree.

But, we need to know more and I feel like a 4 year tracking period isn't enough. For example, how do we know that people who were already the most unhealthy coming into this study are also the most sedentary? How are they handling these types of things.
I'm not sure where you're getting this from the article? It's just going over the callstack.
The literal Elixir code is:

def epoched_random_uid, do: epoched_random_uid(&:erlang.system_time/1, &:crypto.strong_rand_bytes/1)
def epoched_random_uid(system_time, strong_rand_bytes) do
time = system_time.(:second)
randint = strong_rand_bytes.(4) |> :crypto.bytes_to_integer

bor(time <<< 31, randint >>> 1)
end

So it uses – or at least I hope it does; you may file a bug report – a full 32 bits for the time, but it leaves the sign bit to be zero. I didn't want to deal with negative uids in PostgreSQL (bigint), but they actually would be perfectly valid. The sign bit could be used to expand the timestamp another bit.

You could argue that the "2038 problem" (31 effective bits) in the context of a uid scheme of an application that is bootstrapped today, is actually the "2084 problem", because the wraparound to timestamps in 1970 could be construed as being from 2018.
2 reasons:

1. If you're still using HTTP 1.x, sharding assets across origins lets the browser load them in parallel (if set up correctly). You can generally load just 6 assets in parallel per origin, and sharding is a way to get around that limit.

2. A library like jQuery is so popular, and is so often served from googles CDN, that chances are a user already has it in their local cache from when they downloaded it on some other site.

That said, yes - the downside is more surface area that might go down.
reboot helps. May be Google runs Windows. Then they just need to reboot more frequently, ie. proactively.
I think it's a little premature to be calling this a "meltdown". It's like calling one block of houses with power fluctuations a "blackout".
FTP? You kids had it easy.

We routed console direct to disk in PR1MOS, and if you made a mistake, you had to start all over. But you never knew if you made a mistake until it was done because you couldn't see the output as you typed.

Of course, you didn't end up with a web site, but the result was globally networked. As long as you didn't mind that e-mail took several days to get across the country and a week to go from Illinois to Sweden.

/!killer!jolnet...
/Bang paths FTW!
Speaking as an engineer regularly hiring engineers, it depends on the hiring company.

Assuming that one is interviewing for a benevolent and altruistic employer - who values and rewards positive, talented employees - one could afford to be accommodating during the hiring process.

Given those don't exist I would expect tech folk and designers to rinse employers for every penny as that is the treatment they will get when the table turns again.
Growing a Transparent Team
I was noticing higher latency than normal for static assets such as fonts earlier today here in UK, but nothing was down, just responding slower than normal.
I would pay couple bucks per month for any vps just only for not using Cloudflare. Why anyone concerned about security and not just about green lock would use Cloudflare over LetsEncrypt.
> My personal problem is that I'm way too deeply engaged with Google now.

That's exactly the reason I migrated to Fastmail. Ever since Google shutdown Reader, I've been slowly replacing Google services with alternatives as much as I can.

Gmail -> Fastmail

Calendar -> Fastmail

Reader -> Self-hosted Commafeed

Drive -> Self-hosted Nextcloud

etc.