skysight-inc/HackerNews huggingface dataset:
I don't see enough signaling that I'll get anything of value for clicking on your "pill button" and giving my contact info. I more than half-expect to get spammed frequently about talks in places where I don't live (London) or about topics I don't care about (JavaScript).
If anything can of course it'll be the bumbling incompetence of a nitwit that appears to do so.
Spoken like an A-player.

It is unfortunately not uncommon to find people who see the world as a fixed bag of A- vs. C-ers (and many of course whom think of themselves in the A category.)

But this is a fixed mindset and I think it correlates (when you get down to it) to one's own private/personal sense of their ability to grow.

You really want to become a rockstar/master/A-player? Don't define yourself by your skill set. Always keep a clear focus on that wide gap between you and what you could be. In other words, always think of yourself as a B-player trying to get to A. Know you'll never get there, but keep trying. Do this, and you'll reach excellence.

You'll also see how little difference there is between you and the "C-"...and then you can collaborate on helping each other toward mastery.
Who really is a populist?
Thanks, please do. :)
I didn't realize people were so sensitive in the field. Compared to Linus, Theo de Raadt, Richard Stallman, etc, Jon seemed to be cruising at a comfortable level of Germanic straight-forward truth-telling, no real aholishness I could detect. Guess I should reset my etiquette and politeness filters.
https://web.archive.org/web/20170924180858/https://twitter.c...
Not to mention chroots.
They did. "Undefined" doesn't mean "unconsidered by the committee", it means "do what you must for optimization".
A Coloring Book about Group Theory
> Reference NTP server is less complicated than [systemd-timesyncd].

Reference ntpd source: ~130 kloc

systemd timesyncd source: ~2 kloc

Reference ntpd binary: ~700 KB

systemd timesyncd binary: ~38 KB

I get that you don't like systemd, or trust that team. But it's hard to say that ntpd is less complicated than timesyncd with a straight face. Maybe it is better engineered, more correct, more secure, or something; but not less complicated.
From what I've heard, they require you to accept a certain amount of shifts of certain types (like weekday afternoon shifts, or weekend night shifts which are the busiest) and they have a very excessive mandatory "equipment deposit charge".

It also looks like they're implementing a new scheduling system in a week, which will prevent there being too many riders active in an area, but that means they'll decide which riders get the first pick of the time slots they want.

As with any "sharing economy" company, expect to be "employed" on capricious and arbitrary terms. Go to some Deliveroo rider-specific web forums and you can understand a bit better.
With a description like that, he's got one confirmed pre-sale of that book. I'd pay up to $50 for it. Especially if he tells us what are the dozen core API calls that could replace X.
Summary here: https://eclecticlight.co/2017/09/24/high-sierra-automaticall...
It's also really fast:

https://mobile.twitter.com/GoHugoIO/status/91158254224715366...
This post touched on an interesting part of human nature. So much of our personality and behavior is based on the identity that we create for ourselves. Most of that gets set in early childhood, but we keep adding to it with our latest experiences at work, with friends, dating, etc.

"Girl didn't like me? Maybe I'm not attractive." Have that experience enough times and it becomes a part of how you view yourself (i.e. your Identity) and you'll behave accordingly. A lot us struggle with identity issues that cause us to act out in unproductive ways, particularly when we're treated badly (like as if we're a c-player the author points out).

I think treating people with respect and giving them the benefit of the doubt as the author advocates is spot on, which is what I suspect is what he meant by treating c-players as a-players.

What I don't think the author meant was that we should treat ALL c-players like a-players as that sounds like an oversimplification. It would only help if someone is actually high potential and their ego and self-esteem issues get in their way. That's far from the only reason people perform poorly. Quite often, someone is simply less capable than the top performers (that flows from the definition of "top" performance). And yes, with experience and practice, people can improve. And it's good to assume they will and give them the guidance they need to get there.

But if you treat someone as if they're better than they really are, they might feel better about themselves but they could also loose the motivation to improve because they're getting the signal that "they're already there" and they'll start to develop a distorted self-image that could lead to other kinds of problems.
How is this different from OO?

How is it implemented? What sort of frameworks would support it?
What a lovely thing to play with.

[spoiler warning]

It's nice that you're not allowed to walk the cat over the cliff at the end and ting the bell.
I am using org mode daily. The biggest problem is onboarding other people on the team - google docs are still easier for collaboration. Many times I wrote an initial version of the doc in org-mode and exported it to google docs for feedback and collaboration.

For example, https://tensorflight.com/tutorial is written in org and exported to HTML via theme https://github.com/fniessen/org-html-themes . People in the team were suggesting moving it to google docs.
I was living in Edinburgh when Deliveroo launched there. It’s a city full of superb restaurants, many of which are on Deliveroo.
Why regular JVM Kotlin is not good for this?
Do you have a citation for that claim?
Michelin reinvents the wheel for the driverless age
Prometheus does collection, though.

The Prometheus pattern with central things like a database (e.g. monitoring Postgres) is to let the exporter (the thing that acts as an intermediary to expose metrics for Prometheus to fetch) run anywhere it wants. It absolutely does not need to be a "local agent".

(In fact, if you're using something like Kubernetes, the only thing that needs local access to a node is the exporter that exposes node-specific metrics. Everything else can chat over the network.)

The benefit here is that if you have 10 Postgres databases, you can still run just a single exporter and have it extract data from all of them. Or you can run one exporter per database; there's conceptually little difference.

On Kubernetes, we usually run an exporter as a sidecar container, which means it can talk to Postgres or whatever on localhost and just live alongside the process that it's exporting metrics for, and we rely on Prometheus' automatic discovery to make Prometheus pull from it. Start a new Postgres instance and its metrics are almost immediately fed into Prometheus.

You don't need collectd etc. with Prometheus. There are exporters around for just about anything.
> Haskell is another language that compiles to native executables with minimal dependencies (binaries do link against libc, libz, and libgmp by default) which I think deserves more attention.

OCaml hits most of the boxes and would be more convenient/familiar to most users since it's strict and impure.
Already said in this thread, but to make sure you see it:

> The American Red Cross and the International Committee of the Red Cross are independent organizations, with very different reputations.
Having taken the bait of model driven OO architecture hook line and sinker circa 2000, and having followed the practice religiously to it's natural painful conclusion, it's nice to see someone find a truly novel and useful application for the UML sequence diagram.

It's nice to have an accurate picture of how the system works but it is folly to trust one before the fact.
They used to work on an hourly rate plus per delivery rate, which was most likely simply funded by VC capital and never sustainable, and they always intended to move to a per delivery rate. Legally in the UK, they have always claimed their riders are "self employed" meaning minimum wage laws don't apply.

They are now moving to a shift scheduling system which prevents too many riders being online competing for a low demand ("too many" being Deliveroo's definition, of course) and shifts that uncertainty to the riders, who have to log in at a specific time each week and try to book their desired shifts.
Charities around the world are run unethically. It's far from an American-exclusive thing.
From my experience most people who talk like that are D players themselves. They are just pricks who blame their own failures on the people that work for them.

Most real A players I know are very much into coaching other people and giving them opportunities to grow.
Apps that are anchored in the real world is a space that still has plenty of room. But they also require lots of extra work, since physical goods or actual people are involved.
Because:

1. It's not a Show HN, the author didn't post this here

2. It's some random person's experiment and they likely didn't expect the HN hug of death.
Using array of solar chimneys along the coast to weaken hurricanes
https://doc.rust-lang.org/nightly/book/second-edition/ch04-0...

try this
Working with Prometheus for a while. Only sticking point has been the 15 day storage of metrics. Anyone know why this is the limit on storage, or any strategies for long term storage of metrics?
You could probably cut that down even more by "building" your pen jvm with a restricted set of modules.
So, this whole thread started because people were freaking out over a college professor calling whiteness a racist concept, yes? I think we've been over how it has been exactly that historically. So what's the issue? Are we just in violent agreement here?
A director of a well-known 501c3 said to me: "Non-profit doesn't mean no profit." It truly is a buyer-beware situation from a legal standpoint.
Don't. Been there, done that, it's counterproductive. You have to realize that the OP has probably put hundreds to thousands of hours into reverse engineering (it's a skill just like any other) and therefore he can do something like this quickly. But note that what he's doing isn't like next level stuff. It's like someone being impressed with someone playing "Fur Elise" (i.e. a task that anyone who's spent even a couple months doing it will be able to accomplish).

Check out https://godbolt.org/, you'll learn some assembly.
Does anyone know how to map caps lock (or any other key [combination]) to a key _sequence_ under Linux/Xorg?

Or within emacs?
Hack your productivity by going with an ad-free and free music player
Hey everyone!

My app is called Equator Music Player. It's is completely free and aims to use YouTube's large library and wrap it all into a music experience, not a video experience. It's super easy to find that one song with the card design, and the app just looks good. It's a premium experience at no cost. I personally made it after getting annoyed at Spotify ads and after realizing how inconvenient and disjointed YouTube's music experience was.

Here's the website: greatarcstudios.github.io/Equator-site/

Go ahead and check it out. I'd love some feed back. It's Windows only as of right now. Porting to Mac is a bit hard because it's tied into a lot of Windows binaries, which would require a large rewrite. I'm looking into making a Wine port though.
I think it's easy to blame developers for the failings of their tools and just say, well, they should be more educated or more serious. That'd be great, but there are too many problems with the web to educate users on how to avoid them. Even skilled developers can't reliably avoid every minefield. Look at the attacks by Homokov that I linked to, or read up on HEIST, or cross site tracing, or SSRF attacks.

How many developers do you think might have written a web server in their time, or will do in the next 10 years? And how many know will pass URL components straight through to glibc for resolution, as is the obvious way to do it, and create an exploitable SSRF vuln on their network? How many developers will have even heard of this type of problem?

New ways to exploit weird edge cases and obscure frameworks crop up constantly - it is a full time job even to keep up with it all. At some point you can't blame people walking through a minefield because they keep getting blown up. The problem is the mines.

this issue could happen with any other non-web system, turning into any other kind of vulnerability. This isn't a web problem, it's a system security problem.

That's just not the case, sorry. Have you ever actually written desktop apps that use binary protocols? It's a web problem:

• It relies on the over-complex and loose parsing rules for URLs

• It relies on unexpected behaviour in one of the most popular web libraries

• It relies on bizarre and unexpected behaviour in XmlHttpRequests

• It relies on the fact that web apps routinely import code from third party servers to run in their own security context.

I have been programming for 25 years and I have never seen an exploit like that before in managed desktop apps using binary protocols to a backend.

Seriously, try to accidentally have a XSS vulnerability in an isorendered React app with Apollo.

An isorendered React app with Apollo? I think that may be the most web thing I've heard all week ;)

I think I'll take the bet:

https://medium.com/node-security/the-most-common-xss-vulnera...

That article shows the patterns I cover in my article:

• Buffers can get terminated early, even in a theoretically "XSS-proof" framework.

• JSON can get interpreted as code

• Even experienced web developers can't get it right

If you've never written a desktop app before, I'd suggest grabbing IntelliJ or NetBeans and trying it out. TornadoFX is a good framework to try.
Wall Street’s Best-Kept Secret Is Russian Chess Master Lev Alburt
Very very true. Concisely said the reality of life. Thank you for adding some saneness to the bizarre paragraphs of advises given by everyone else.
Add "-storage.local.retention" (e.g. "-storage.local.retention=1440h" for 60 days) when running Prometheus.
One thing that gets overlooked commonly with the the Red Cross is that it is a congressional charter. [1]

According to the charter the purposes of the corporation are:

(1) to provide volunteer aid in time of war to the sick and wounded of the armed forces, in accordance with the spirit and conditions of:
(A) the conference of Geneva of October, 1863;
(B) the treaties of the Red Cross, or the treaties of Geneva, of August 22, 1864, July 27, 1929, and August 12, 1949, to which the United States of America has given its adhesion; and
(C) any other treaty, convention, or protocol similar in purpose to which the United States of America has given or may give its adhesion;

(2) in carrying out the purposes described in clause (1) of this section, to perform all the duties devolved on a national society by each nation that has acceded to any of those treaties, conventions, or protocols;
(3) to act in matters of voluntary relief and in accordance with the military authorities as a medium of communication between the people of the United States and the armed forces of the United States and to act in those matters between similar national societies of governments of other countries through the International Committee of the Red Cross and the Government, the people, and the armed forces of the United States

The problem is that sure we can donate to other organizations but the Red Cross still is in a way a representive of America. And if they are so bad at delivering aid to Haiti; I wonder how effective they are at their other duties. I wonder if congress can revoke their charter? Or force reform? But that seems like an almost impossible task.

[1] http://www.redcross.org/images/MEDIA_CustomProductCatalog/m4...
Well the logic certainly isn't supported by data. Most homeowners have no problems allowing cars to drive around their neighborhoods, despite the fact that cars have dangerous emissions that kill thousands yearly, not to mention inattentive drivers who cause thousands of wrecks annually.
Are you conflating The American Red Cross and The International Commiteee of the Red Cross? I have in the past, and they are very different.
Kubernetes Deployer HTTP API (k8s-deployer)
The Atlantic is not a newspaper but propaganda for their selected political elite.
I have heard unflattering things about it from a few different ex-Google SREs, specifically about the macro system and it being cumbersome to use.
what is tracing?
Apple should charge a fee to list an app in the App Store. Something like $10/month for any app that is monetized in any way. After all the junk apps go away it’ll be easier for users to find quality apps.
With this simple HTTP API you can easily deploy services on Kubernetes and register them in the Consul service catalog, eventually all the services will dynamically end up on Traefik load balancer if proper configuration is provided.
Show HN: No more '..extends React.Component' or import React in every component
> 15s

Still sounds ridiculous. Assuming this is how much time it takes to initialize the VM, I wonder if it would be possible to have a pool of VM processes that are already running and ready to accept an application code.
Ah yes, the need for contraception for a free-loving culture is admitted in the Green Sky books as well.

Technology also conveninetly obviates the need for violence to get food, even meat.
I'm running OpenNTPD on all my devices (laptops, servers, VMs) and as far as I can tell they are in sync. Both amongsts themselves, as well as with other devices that are running other NTP implementations.

I've heard other people claiming that OpenNTPD is not accurate enough and what not, but my anecdata says it performs well enough. Do you happen to have any specific gripes with it ? Is it the timekeeping algorithm that is lacking ?

Sibling comment mentioned leap seconds, and that's unlikely to change. AFAIK, for 'proper' leap second support, the daemon must support it (to parse the announcement from the upstream NTP) as well as the OS. Gathering from I've read on OpenBSD's mailing lists, leap second support in the kernel is not a priority -- to say the least. Seeing the fallout on other OSes, I'd say it's a sound decision. On a similar note, Google introduced leap smearing to not deal with introducing leap seconds across all of its' servers[1]. Several other actors, such as Amazon[2] and Akamai followed suite.

[1] https://googleblog.blogspot.fr/2011/09/time-technology-and-l...
[2] https://aws.amazon.com/blogs/aws/look-before-you-leap-the-co...
[3] https://blogs.akamai.com/2016/11/planning-for-the-end-of-201...
Hurricane Maria wreaks havoc on Arecibo radio telescope
Ask HN: What business problem would you pay for to have solved?
A 400-year story of progress – How America became the world’s biggest economy
Sure, but the extent of it seems to be American exclusive. Are there not a bunch of cancer charities that simply do nothing but enrich the owners?
Amusingly, something quite similarly along those lines launched fairly recently - http://etefy.com

Given they promise free delivery within an hour, 24/7, with no minimum order value, I reckon they’ll be gone within 6 months or so.
Your second link is clear, but the first one doesn’t make it clear that it’s the American Red Cross that’s the problem.
There is absolutely no need to even involve chroots or anything that needs special privilege just to run a compiler. Typically, a compiler will just read and write files. This is how it ought to work.

1. Download gcc-8.x.y.tar.xz
2. Untar anywhere. I like to do this within my home directory.
3. Run ~/stuff/gcc-8.x.y/bin/gcc

If this simplest possible thing does not work and drives you to Docker or chroots or similar things, then something fundamental is broken.
I'm not quite sure I follow. What does the verifier learn after NIZK? Isn't it the point that the verifier learns nothing other than the prover has some secret knowledge? Seems to me like it's just the same information rescheduled with the help of a PRF.
I think you mean parameterised queries. Stored procedures are a slightly different thing.
That's just bucket A and bucket B right?

Like, the money going towards operations is still donated. The page about the operations money even puts it in terms of having 2 bank accounts: https://newstorycharity.org/the-builders/

So fine, they are able to advertise that they are spending 100% of certain funds on programs. But it is just a marketing gimmick, they still have some overall efficiency, just like any other charity.
Show HN: AmzSear – The Unofficial Amazon Search CLI and Python API
C has been pretty fast for basically ever at this point. All these optimizations are just masturbation. Bonus RISC processors are mostly dead at this point having been replaced with pipelined superscalar machines. Which means most of these optimizations are totally pointless.

Best comments I've read is one what notes that when you profile modern programs most of the code paths are dead. Yet you have intense hotpots which often turn out to be hand rolled assembly. The second is that you get real speed up carefully choosing your algorithms and memory layout.
Try Debian on it, half the reason I switched away from Ubuntu years back was that it always seemed to have show stopping bugs like what you've experienced. I've yet to have PulseAudio crash on my T420, though sometimes it buffers audio when I walk too far from my bluetooth speaker.
Almost lost hope before getting to it, but thankfully a sane reply finally appeared. Seems the answer is about 150mph.

18,000 rpm / 9.73:1 gear ratio = 1850 wheel rpm.

19” wheels have 27.7” diameter, so...

1850rpm * 27.7in diameter * 3.14159 * 60min in hour / 12in in foot / 5280ft in mile = 152.45mph
They could just close the app store then. (sarcasm) The market is saturated. But it's also huge, and things move faster then before.
So pick better charities: http://www.givewell.org/
This analogy is taken straight out of “the 7 habits”?
$ uname -sr
FreeBSD 11.1-RELEASE

$ rm -rf /
rm: "/" may not be removed

No idea about other BSDs.

Busybox's rm is indeed happy to nuke /.