skysight-inc/HackerNews huggingface dataset:
We recently adopted Librato as a monitoring solution, and while the interface isn't quite as flexible as DataDog, the pricing model is incredible: you pay only for the metrics and frequency you need. https://www.librato.com/pricing

For instance, we only need low-frequency sanity CPU/memory checks on hosts running stable microservices, which we can do for ~$1/host/mo, but for our heavily-utilized core databases and web servers, we have a lot more, including full Mongo and Elasticsearch metrics supported out of the box. Total pricing is transparent and estimated for the month on what seems to be only a 24 hour lag. Combined with https://logdna.com/ (YC W15) for no-nonsense, beautifully presented log aggregation/search/introspection (which itself is pay-as-you-go per GB ingested), we can pretty easily see what's going on, with completely elastic and reasonable pricing.

At the end of the day, there are only so many ways to put charts and logs on a screen. There will be room for value-add services, say, using machine learning to see warning signs even if not explicitly set up by the tenant. But for those doing basic monitoring and alerting, I think the space will increasingly become commoditized the same way IaaS has been... and at that point, people will insist on transparent pricing that corresponds to some predictable premium on the actual burden they're placing on their provider. And charging by host will be only barely correlated with that. But until that time comes, you can't blame DataDog for being aggressive. It costs money (and, occasionally, the blood of smaller users) to be winner-takes-all, after all.
See my comment above - unless I'm mistaken, taking all 2 to 24 word quotes from the most popular 1 million novels gives you about 40 bits of entropy (less than a password of length 7), and can easily be stored on one hard drive. In other words, feasible even for some script kiddie in mom's basement.
I also like that tutorial, but the name is a bit unfortunate. I recommended it to a woman and she quickly accused me of "giving her a dumbed down tutorial for girls". I had to convince her that the site is actually very good.
>What are the benefits of paper wallets over a hardware wallet?

Cost. Use cases: one could transact in a medium trust environment using paper wallets passed around offline.

>What are the benefits of paper wallets over storing it online?

Limited attack surface. https://cryptoconsortium.org/standards/CCSS
I'm a bit sorry for the CoinHive creators. It worked so well on the original platform (German image board), where it was well communicated and transparently implemented.

Of course it would have been very naive to believe things like this wouldn't happen. But I'd like to image the people behind CoinHive didn't bank on it.

Edit, some stats:

> A few sites were actually using our service and collectively mined at 100K hashes/s. We have since peaked at 13.5M hashes/s – a quite respectable 5% of the global hash rate of the Monero blockchain.

> In just one week we scaled from one lonely server to 28 WebSocket proxies, 6 web servers, two database servers and two VPS doing maintenance work. We had countless performance issues to fix and a few sleepless nights, but we are now handling 2.2 million concurrent WebSocket connections quite comfortably.
The number one YouTube channel in size by subscribers, PewDiePie, said the N word live on stream and his fan base essentially attacked people who came out as offended.

I love the part of YouTube that gives you an incredibly personal insight on intelligent people, but I think there is a huge problem with how much leeway the content creators have and are still able to make money. And the fact that this harms the smaller channels like videogamedunkey that doesn't say racist things is extremely disheartening.

I don't have an opinion here other than it sucks that you can't just give people money based on how many people watch their videos.
Hi William, I'm with Netsil. Happy to talk more about us, if you like.
The sharp influx should even help with the velocity of money.

I am not an economist but I've been trying to learn a bit about it and a bit about financial management/investing. I'm currently at the velocity of money stage of my learning.

https://en.m.wikipedia.org/wiki/Velocity_of_money

It's not really the same thing as the trickle down that the parent poster mentioned. From what I can tell, you hit the nail on the head.

An influx of money will mean the money moves. Also, when money moves is when the government taxes it. So, the influx will increase the velocity of money and will have an effect on the economy.

That's not the same as the parent post implied, where there's a reduction in taxes and that is supposed to result in the money trickling down. That's not the same as an influx of money. One is people keeping their money, the second is people getting more money.

If I understand correctly, they are different things. Then again, I may not understand correctly. As I said, I am still learning.
>In part 2 I’ll propose a new app platform that is buildable by a small group in a reasonable amount of time, and which (IMHO) should be much better than what we have today... Next time: how we can do that.

i look forward to that article. This one, on the other hand, seems a little pointless. Does the web have problems? yes, absolutely. But I have a hard time believing the best way to solve them it to tear down everything we've built so far and start over.
A better way to store your coins is to to get a HD hardware wallet like the Ledger Nano S, or KeepKey. These paper wallets are too vulnerable to destruction. With an HD wallet you get a 24 word seed (see BIP39) and if anything ever happens to the wallet you just buy a new one and restore from the see. To protect your seed you can carve the words into a block of brass which has a high enough melting point that it should survive a house fire. You can use something like a Bantam Milling machine if you don't want to do it by hand.

For smaller amounts of money there is also OpenDime. They don't provide a back-up mechanism though so if the hardware goes your money is lost forever.
I can't be the only one that would love to start a business, or join a riskier small business, but due to a combination of health insurance and student loans it is not feasible.
Until I can block ads in web apps, I'll keep my browser thanks.
two good old things that were forgotten
By grooming them?
That's always the first thought that occurs to me. Any standard or tool that wants to render mathematical notation has to seamlessly interact with and accurately render AMS LaTeX. Without that, working mathematicians simply won't use it. And TeX in maths is absolutely not going anywhere. MathJax gets this, so MathJax has been successful.
This appeals to me in a way that's hard to articulate. It's the perfect combination of "this will never happen" and "well now, let's not be too hasty with our assumptions..."
No, but those are red flags.
Thanks.

And I gotta love America, where professorial lectures are accomapnied by the national anthem and a military flag ceremony!
Why do you say this is not a vulnerability? For me, a layman, it seems like a vulnerability.
I find this unconvincing.

Every negative thing said about the web is true of every other platform, so far. It just seems to ignore how bad software has always been (on average).

"Web development is slowly reinventing the 1990's."

The 90s were slowly reinventing UNIX and stuff invented at Bell Labs.

"Web apps are impossible to secure."

Programs in the 90s were written in C and C++. C is impossible to secure. C++ is impossible to secure.

"Buffers that don’t specify their length"

Is this really a common problem in web apps? Most web apps are built in languages that don't have buffer overrun problems. There are many classes of security bug to be found in web apps, some unique to web apps...I just don't think this is one of them. This was a common problem in those C/C++ programs from the 90s the author is seemingly pretty fond of. Not so much web apps built in PHP/JavaScript/Python/Ruby/Perl/whatever.
There is a critical bug in this approach that the attacker may not be aware of the use of multisig keys beforehand and have a good incentive to kill the victim.
> personal value/productivity: flat or below

Except for that there are a thousand times more computer users than there were 30 years ago, now that we have the computer power to render talking paperclips or whatever to make computers usable by the average person.
Not everyone has the desire or ability to do STEM. I'm not sure why you'd not encourage them. You do appreciate having someone cook your food and create the art and media you consume, right?
Would this affect Office 365 hosted exchange servers?
All the more reason to switch to Urbit. Have you accepted Curtis Yarvin into your heart as your personal BDFL yet?
Seriously? I mean you can achieve that with your own regex the old way. Surprised you’re asking the commenters here to investigate such a specific and odd use case of a convenience method.
Lufthansa's hijacked 'Landshut' plane returns to Germany
What about the fact that the Web platform isn't owned by any one company, but is supported (to varying degrees) by every major native platform? A shiny new app platform won't have that. That's important.
Sure itself regulates, because people have a survival instinct. I can tell you from experience however, after the massive wind storm of 2011 in LA, when every signal was dark, it turned my 11 mile commute from downtown into a 90-minute affair, with an exhausting cognitive load because of the constant concentration required. The commute ranges from 20-40 minutes (typically 30-35 at rush hour) when the signals are on.
When you've got things like new multi threaded renderers, all browsers now 64bit, web assembly, service workers, faster processors etc. It seems that in actuality app development with web technologies is finally practical.

But, why are these things framed as an either or? Surely the best thing is always to use the best technology for the job and in many cases the speed and security trade off is worth it in order to utilise existing assets and expertise from a businesses web application.
this is cheaper hosting
I assume this was in response to this part?

>If you only have bitcoin on a single hardware wallet, then if that hardware wallet fails to work one day, then you're boned.

By "only have bitcoin on a single hardware wallet", I meant the case that the user did not back up their seed phrase (such as to a piece of paper). I was trying to hint that the best setup would be multiple paper wallet backups (or the seed phrase written onto multiple papers; I'm not sure it's useful to call that something other than a paper wallet) combined with a hardware wallet for actually making transactions.
"Middle class" in the UK is what you would consider "upper class".
I think it should be made clear that he didn't just say "nigger"; he actually called someone that.
So you can create a disincentive for non-user mining.

What would be the downside?

This is supposed to be a distributed system.
Hmm, I haven't done much with Django in a while, but for a major version this seems a bit... underwhelming.
I'd love to see how many minutes of video-with-1000+-views gets uploaded per minute.
> In terms of new features, it's relatively light

In a way that actually sounds like a good way to release things.

* Release 1.11 LTS with final feature updates for people who want to stay on Python2.7,

* Release 2.0 which is mostly a refactoring & internal cleanup - so for Django users on Python3 it should be a simple upgrade, and you get real life testing on it,

* Start adding features once the refactoring seems stable.
First the problem is startups getting crushed by the cash available to large companies, then the solution is repatriating those same large companies' offshore cash hoards? I'm not exactly convinced.
To be perfectly honest, I haven't profiled and have been fairly cavalier about it. Seemed good, and most importantly, stable enough - it's not bottleneck. Like you've noticed, it definitely has low-hanging fruits to pick up there, yeah.
I think DuckDuckGo is unfairly singled out here. They do more than most companies to protect privacy, and most of their users are specifically trying to deprive Google of more feed for its data silo. Of course they can't protect you from the NSA. Extremely few actors can.

If your threat model includes actors within the US Federal Government (especially the intelligence community), run. Yesterday. That's a statement about our times, not about any particular company.

The solution ought to be browbeating the US Government for unethical practices, not browbeating a company that does privacy better than most, and not as well as would be necessary to stand toe-to-toe with some of the most powerful and far reaching organizations in the world.
Anthropocene fever
Is taxation theft?
> To protect your seed you can carve the words into a block of brass which has a high enough melting point that it should survive a house fire. You can use something like a Bantam Milling machine if you don't want to do it by hand.

And people say that Bitcoin isn't user-friendly for beginners.
Wouldn't this fail if your file names have white space?
No, it's not theft, by definition.
I tried playing that game but it's almost unplayable on my machine. The input lag seems to be around 200-250ms (so there seems to be no client prediction). Is this how was it supposed to be? Also it's not nice that you didn't mention the demo contains a crypto miner...
It's still regex under the hood, the 'int' is just syntactic sugar for "[0-9]+":

https://github.com/django/django/blob/dda37675db0295baefef37...
With DDG's focus on privacy, I wonder why they never had any warrant canaries setup?
The pypi page for pssh links to an old (dead?) Google Code repository. Do you know if the project is still being maintained?

For most uses I find that ansible ad-hoc commands give a nice balance -- just a tiny bit of learning curve, and only a little bit different than typing the single SSH command that you want to run.

http://docs.ansible.com/ansible/latest/intro_adhoc.html
And all this while everyone is paying billions for complex info-sec software that does a lot less then it says on the tin. It's similar to the epidemic problem with non-verified/signed SSH keys where everyone just clicks Ok to any host-key presented. Though a bit more subtle, and something that should have been avoidable with a proper designed protocol.

It's the kind of trivial little thing that gets ignored(along with boring old maintenance tasks like patching infrastructure servers ect.) not despite of but because of all the attention given and budget spend on attending conferences on cyber-warfare and never to be correctly installed(let alone monitored) infosec appliances.

Almost every major hack ever blamed on super advanced state sponsored groups turns out to be someone fumbling a routine update (like what happened with equifax and wannacry) or setting a bad password(guccifer 1+2 etc.) And yet the lesson that gets drawn is never, "lets start following proper procedures for maintenance and training" but "lets reduce the maintenance budget some more by spending on infosec conferences and toys."
Around certain cities in the LA area, the striping crew paints a stencil of a cyclist and an arrow pointing forward over the sensor.
There are a few improvements in UI and interaction. Something akin to the touchscreen already existed 10 years ago - it was the Wacom. On 2006 era laptops like ThinkPads, you had a Wacom behind a screen. Some of these laptops had also a touchscreen on top of the Wacom. So not even the touchscreen is really new.

But there have been a few genuine innovations. Personally, my favorite is the notebook - whether from Rstudio, Mathematica, Jupyer, etc. especially when you add dynamic widgets like D3 or maplets.

It allows not just literate programming, but quick prototyping and verification, by integrating visualizations. Sometimes you can even embed your datasets for replication.

I would love to see scientific publication move to notebook only - as it, I want to download the whole thing and do some tweaks to see if I can poke any obvious hole, or if it is genuinely interesting.

When I say the whole thing", I mean it. I do not want just the authors verbiage and some screenshots of their tables and graphs. I want their data, their formulas, their visualization, already implemented and ready for tweaking without imposing any extra software dependency upon me.
As soon as it does something useful, sure. As a power user I could not be any less interested in whatever I've been able to understand Urbit does.
> they said ‘but we’re still playtesting it! We don’t know if it’s balanced or not. It’s gonna take seven years to play!’ And I said ‘you know what, if someone tells you it’s unbalanced, tell them ‘we think it’s your fault, play it again.’”

I wonder if "have you tried turning it off and back on again" was in popular use for computers at this time.
In theory indeed. In practice there's 3 vendors and the standard defining organisation represents commercial interests in the platform, not you.
Why do you think that?

Being able to fake blocks isn't significantly more useful than being able to double spend. I don't see why that would be the tipping point.

The reason you don't see these attacks is that they are difficult and very expensive and they would ruin the value of the coin so you can't even profit off it.
You probably know that Facebook is not going to the judges. They would pay the peanuts just to forget the issue.

The EU countries are playing this game since the crisis started in 2008. Spanish politicians just want their share. All of the Ireland-Google issue was exactly the same but bigger: even if they abide the law, politicians tweak a new one just to milk big companies. They just take the money from where it is.

I don't know about conspiracies you talk. This is all happening in day light and applauded by the people.
> This is absolutely hilarious if your coworker happens to be using a graphical tool like vim...

Don't get me wrong - I love the CLI. The vast majority of my time is spent there, and about the only reason I start X is for Firefox (if elinks won't fit the bill).

Did make me smile to see vim referred to as "graphical", though. I like it.
I sympathize with the sentiment, but the web app only sucks if you're using the stuff that sucks.

Like any technology with decades of evolution it has a thick sediment of peat. Half of Javascript, half of Windows, even half of *nix is garbage you should never use, but it's all there because old things would stop working without it.

It's just that the web has a very low barrier to entry and very high reach, so the compost doesn't get thrown out as quickly as it should. So people still pack jQuery when they need to select elements, or pull a left pad from npm without realizing it's in the language core. Or pack Reactiflux when they want to do a form.

In an age where you can literally compile existing, GPU-heavy C++ code to WebAssembly and run it in the browser with no fuss, you can't complain the web doesn't let you do things right, or at least the way you want. It's just admittedly easy to hop on the wrong library bandwagon and complain when things go wrong. But it's not a problem with the web.
It's probably not realistic, but I would love to see the web be completely thrown out and replaced with something reasonable.

I write a decent amount of native code. I write Rust, C, and x64 assembly. I think I'm pretty good at this stuff. But the web is too much for me. Any time I think I'd like to do something with the web and sit down to learn, it's completely overwhelming. I've never been able to put together a coherent mental model of the architecture of a web application or figure out what the best practices are for web development. The amount of complexity you have to wade through to get anything done is just silly.

There's the idea floating around that web developers are less competent than programmers on other platforms. I'm only half serious when I say this, but I sometimes wonder if, to the extent that this is true, it's because web developers have so much incidental complexity to deal with that there's just not much brainspace left over for classical CS or software development concepts.
I bought some water proof inkjet paper for my paper wallets. I did a few test runs under the kitchen sink. I don't know how this paper works but it's pretty awesome.
No, there is no vulnerability here there is no real way to force downgrade or redirect traffic, iOS will prompt a message asking you to confirm a self signed certificate.....

What the author claims is a vulnerability isn't one in any real sense.

They basically "complain" that the mailbox on the iOS phone doesn't "validates" that the server is a real exchange server, in all honestly neither does outlook, nor most other client-server protocols I know off if the server isn't correct it will fail that's it.

Even if there was a way to downgrade or redirect traffic if you have the ability to do that it's game over, if you can MitM an SSL connection between an iOS device and it's server faking a layer 7 handshake isn't really hard to do at that point.
So you want a new admin?
There used to be a 4-way stop with 11 lanes that I would frequently drive through. It wasn't the prettiest but it worked better than I would've thought.

https://www.google.com/maps/@37.5600363,-122.2845215,3a,75y,...
Yep, also on speed: it seems to me that the microsoft office suite for instance slows down every generation despite only having minor improvements and not actually being that different now than from 95. The nature of developers is that they will use whatever resources that they have. Faster computers don't necessarily mean faster applications but faster software development cycles from bigger teams with less need for the discipline and rigor that was required before.

In some ways we've traded speed for productivity.
This makes the point that SESTA would disproportionately harm small/new businesses compared to big/existing ones. Which gets me thinking, there are some people (those involved with the big/existing businesses) for whom that is a feature, not a bug. Less competition for them to spend time crushing. Which means there's a chance this isn't actually about sex trafficking at all, but just another big-business power-grab on behalf of Blumenthal's backers. My cynicism knows no bounds.
everything is here, but kinda half finished. it's like tensorboard.

https://github.com/shi-yan/FreeWill/tree/master/Utils/WebUI

will take you some effort to bring it up.

it's made based on my own web framework swiftly:

https://github.com/shi-yan/Swiftly
I'm a relatively junior developer, and I work on a team that I would characterize as agile (though we don't use that word). I have broad latitude to write what I want to (with peer review of code, and peer + stakeholder review of RFCs), at whatever pace my manager and I agree is reasonable, to fulfill broad business goals.

I wouldn't last long under the micromanagement of being handed an architecture and software design by someone else, and being told to just churn it out.
What people often refers to "Bolognese sauce" should be called "ragú" (tomato and minced meat).
I wonder if the cops can view the position of CitiBikes on their phone in real time.
Please, no family play-through of Monopoly lasts for longer than three hours - that's the maximum amount of time before mom locks herself in the bathroom to chainsmoke, and dad begins to angrily saw apart random wood in the garage, leaving the children to form grudges that will last well into their 40s.
Parker vs. Fury Live stream free
Monero JavaScript Miner – First Week Status Report