skysight-inc/HackerNews huggingface dataset:
There is overhead for space, reliability, networking, and maintenance for bare metal. If you have an existing datacenter the marginal costs are tiny, but if you are only in the cloud or not planning to need these beasts for years on end, the net costs are much lower to just harness the economies of scale provided by GCP, AWS, et al. As for OVH, the amount you’d save in networking between that box and the rest of your infrastructure by having everything on one cloud provider probably pays for the difference.

Add in flexible network storage options and integration with existing security infrastructure. You are thinking too small by comparing a single box to a single box.
You should post to the monthly thread for jobseekers (search for "Ask HN: Who wants to be hired?").
"Don't test the UI" is not equivalent to "No end-to-end testing." The XP people, for example, prefer to make UI a thin shell over a programmable interface that can be easily tested. Then, visually confirming the UI operates the interface is enough.

I admit I don't read much Bob Martin, but does he say you shouldn't use automated functional testing, e.g., Fit or Cucumber?
> All of the telemetry anti-features were backported into those versions

You don't have to install them, installing only security updates was still am option last time I checked it.

On top of it, even if you install them they can be turned off completely, and they are turned off by default, contrary to Windows 10 where you can't turn off telemetry.

> Contrary to popular belief, there is no good reason to be running Windows 7 or 8.1.

Yes there are. Windows 7/8.1 performs better and more snappy.

Windows 7 (and 8.1 with a classical standard menu extension to hide "modern" parts) has a more consistent interface unlike Windows 10 ui which is all over your face with inconsistent menus, colors, sizes etc. stinking out of everywhere. Half baked app choices with some modern and some classical apps and you don't know which one will open from which settings menu.

Forced updates whenever Windows feels like. There is no option out because pesky users can't be trusted.
Corel Roxio Creator NXT Pro 6 v19.0.55.0 Serial Key Free
Very formal sorts of languages are super interesting. They might tend towards striking the wrong balance, though.

Rust is super interesting to me because it prevents the most common vulnerabilities w/regards to memory safety that show up time and again, but it's accessible enough that it's got a big community and a ton of high quality libraries. I think that's a pretty awesomely potent combination.
>Obviously, all those people must be paid extra for work outside "normal" hours

Amazon isn't likely to pay employees anything extra for working outside of "normal" hours, though.
Because developer comfort is all that matters and users be damned?
> I think the open software movement (and Linux in particular) is laudable.
isn't this exactly the sort of line of questioning that the OP is complaining about?

In my experience of managed software 99.9% of performance problems are due to stupids and 0.1% are due to marshalling and GC costs. An average unmanaged developer seems to assume the opposite.
nah.

I think you could quite easily quantify the effect various tools have on a code base; adding unit tests, using a repl, static vs. dynamic etc. on the various aspects of your code:

- How quick/easy is it to add new features?

- How often do you add new bugs?

- How long does it take to fix bugs?

...but I think you could also look at the impact individual bad actors (the 'dont care' programmers) have on the same code base.

Now, because the 'dont care' programmers hack out rubbish at the speed of light, it may superficially appear that the net impact on the code base is balanced; more features, more bugs... but that rubbish slowly spreads out into the code base, and incrementally trigger a cascading bug creation rate for all the programmers.

Now, if you want to suggest that tools can add enough value to overcome the negatives from having rubbish programmers, I'm all ears, because I've never seen a tool that can do that. The bad programmers just abuse the tools or ignore them.

So... in that context, I think its fair to say, more tools really achieves nothing much, when bad programmers and bad programming practice results in such catastrophically bad outcomes for software.

Maybe, if you can make your tools nice enough and add enough processes you can kind of force bad programmers up a notch. I appreciate that; but the question really is, why are there so many programmers who are so rubbish? Why do they never seem to get better? Why don't they care?

Do you really think you engineer a solution to that? ...because I think it's a social problem, not a technical one.

Maybe some tools can help, and maybe not everything Uncle Bob says is gospel... sure; but I think this is just stupid:

> Uncle Bob gives terrible advice. Following it will make your code worse.

I think history has objectively shown this is false; but of course, you're welcome to have your own opinion without any substantive basis other than that opinion itself if you like.
How Computers Turned Gerrymandering into a Science
Elon Musk says he can rebuild Puerto Rico's power grid with solar
Came here thinking Edward Snowden was joining the Tensorflow team.
Level 3 still has some facilities there; I don't think they ever used the space that Dropbox was in. (And since vacated; it's occupied by Stripe and Lyft now)
"An incorrect version has been deployed to http://GitLab.com, we are temporarily taking http://GitLab.com offline"
> idles with almost zero "CPU Wakes" thanks to new C++11 features

Out of curiosity, what features helped here?
I wish the Vue plugin was better though
Probably, yes.

However, the bigger difference is that for me, someone not being polite is not the same as that someone being insulting, and certainly not guilty of harassment, and in fact even someone being insulting is not the same as harassment.

There are quite a number of steps in-between, with "insulting" being one of these steps, but certainly not the only one.
Will AI take healthcare jobs?
Explorations of (Synthetic) Homotopy Theory in Coq
I suppose the idea is to work in SV for a couple years while you're still young and healthy, rack up as much cash as you can while living quite frugally, then move to a cheaper place, buy a house for cash (or at least have a solid downpayment), and have no problem finding a job since you have X years of relevant experience at top-tier companies.

The result of fleeing middle class is that you have a city with a strange mix of very wealthy individuals (who can afford the high COL) and very poor people (who cannot afford to move out).
I gave it a shot. The app is pretty but has some weird things that will keep me on Thunderbird.

* No plaintext support.

* No "Simple HTML View"—my favorite Thunderbird feature.

* No plaintext view.

* Sets a "Sent from Mailspring" signature that isn't straightforward to remove.

* I don't want to track others reading my mail. It's creepy and I'd rather that functionality not exist in my client. It's enabled by default.

* UI is slow enough for me to notice elements pop-in when I open new windows.
Highcharts 6 released
That's usually the case for almost everything on AWS/Google. If you're using them for specific features, or for very bursty work (e.g. if you use the instances less than about 6-8 hours a day), they can be cost effective, but the moment you use instances full time and don't leverage/depend on a ton of extra services, you're paying way above the odds.
I really enjoyed the early slashdot but lost interest when politics ran rampant in nearly every part of the site. the vitriol associated with it and more (stuff you could not see) just reduced the value the site had in my eyes. I honestly cannot remember the last time I have visited the site.

tech sites need to keep their purity to stay accessible, politics, direct story posting or the constant indirect type, need to stomped out with a vengeance
https://learncryptography.com/cryptocurrency/51-attack
You write that the claim is (A) "there exists a compiler X that always produces safe code", but then argue against (B) "C++ always produces unsafe code". To argue against claim A, you have to show that some "compiler X" that always produces safe code cannot exist.
If you had read the article, you’d know that Uber’s iOS app had special privileges to access the device’s framebuffer while being in the background, i.e. it could record whatever was on the screen even if it was another app. Appsee is analytics that only records the app it is integrated in.
Its already happening.

The poor can't afford a more privacy oriented phone like an iPhone, hence end up in the Google ecosphere.

The poor can't afford a new phone every 2 years, not even a budget device of a "mere" 200 USD. Hence, their devices aren't patched.

The poor can barely afford their bills as it is.
I have another, perhaps less silly question.

The way EdDSA works, one needs to hash the message twice, in a way that makes incremental hashing impossible (you need to complete the first pass before you begin the second):

r = Hash(secret_key | message)
R = Base_point × r
H = Hash(R | public_key | message)
// use H to compute the signature

Because of this, we cannot have a streaming interface. Thus, signing and verifying huge messages is a hassle. I think there are ways to avoid this, if we're willing to mess with EdDSA (I'm not).

We could for instance change the second hash to this:

H = Hash(public_key | message | R)

By appending R to the rest, instead of pre-pending it, we can perform the two hashes in parallel, and use the result of the first hash only for the last bit of the second hash.

A more involved tweak would hash the message first:

r = Hash(message | secret_key)
R = Base_point × r
H = Hash(message | R | public_key)

That way you can hash the message once, then duplicate the hash context to complete the two hashes.

---

Now the question: would those modifications work? Are they still immune to collision attacks? How about length extension attacks?

Subsidiary question: if my modifications are secure, how DJB and al didn't think of it? DJB in particular is reputed to be quite performance sensitive.
> s, I lost around 130 pounds in a year: the only change I made was removing foods that are on the list.

That's pretty drastic. Have you been checked for medical causes for the weight loss? When I lost 40 in a year my doctor was alarmed (I was just eating less and walking more ).
Here's a list of other attacks:

https://en.bitcoin.it/wiki/Weaknesses
There is no problem here you dont have to be violent or hurt people to change the world. Let people try to do what they think is the best thing.
Some gems:

> "I've seen [visual] editors like that, but I don't feel a need for them. I don't want to see the state of the file when I'm editing."

-Thompson on the superiority of ed to editors such as today's vi or emacs, as summarized by Peter Salus in A Quarter Century of UNIX (Addison-Wesley, 1994).

> The X server has to be the biggest program I've ever seen that doesn't do anything for you.

and I'm glad linux has come to meet his expectations over the years...

> Microsoft is really unreliable but Linux is worse. In a non-PC environment, it just won't hold up. If you're using it on a single box, that's one thing. But if you want to use Linux in firewalls, gateways, embedded systems, and so on, it has a long way to go.

-1999

>I run Linux. And I occasionally look at code, but rarely, so I can't really tell whether the quality has gotten better or not [since 1999]. But certainly the reliability has gotten better.

-2009
Or it brings out the negative interpretations in some people.
Concerning Rust specifically—Rust’s memory safety comes from its type system; specifically, its strong ownership model, which leads to its lifetime model. Without these, you simply can’t have a fast, memory-safe language: either you surrender speed, by boxing everything, or you surrender safety.

My point is that it’s not possible to just isolate the hazardous chunks into a well-tested core; it needs to be pervasive in the language’s memory model and type system in a way that C and C++ just don’t have.
Some managed languages can have pretty good performance, but at significant memory usage cost. Performance is not a single dimension.

It's a very legitimate question to ask how it was measured.

Obviously they're happy with their performance and we can't comment on that, but the other claims regarding speed vs. C were more general.
I extract the icons and make my own folders and theme stuffs. It unfortunately only magically works in Vim with nerdtree or in SpaceMacs with their tree plugin. However I enjoy making my own folders and icons so I don’t mind. I should really publish this, there may be a hidden demand here I was unaware of
Tricks for Playing DVD Movies on Google Pixel C
I tried to get ligatures to work in gvim for so long because Fira Code looks wonderful with ligatures. Could not make it work :(
What if you don't have sustained usage? What if you are developing software for scientific data processing, and you usually work on small data sets for testing, and once in a while you have huge computing needs?
I don't think the difference is between polite or insulting - the difference is between harassment and non-harassment.

Someone being rude or short may bring down the tone of discussion and may not be condusive to proper discourse, but harassment is another beast entirely. People's lives are ruined by harassment and harassers may have their reputations ruined.

Suggesting that Jonathon Blow harasses people on twitter when in fact you mean that he is rude and insensitive is borderline libel.
Nobel Prize in Physics: Rainer Weiss (MIT) Full Press Conference [video]
Correction! Thank you for that I clearly don’t know my dramas from my soaps
We used a config not quite this big for a Nominatium database rebuild. It takes weeks on an underpowered server, but hours (or a day?) on something with enough resources.

Once rebuilt, using the database is fine on a normal server.
What part of:

> I'm asking because my own gut estimate of the cost of automatic memory management is significantly higher.

Is reasonable and not dripping with bias?
My gut estimate says it doesn't matter in many cases. So where does that leave us?
Can I ask what it is?
Yes, good point, I was speaking in general terms. This article shows they've put a lot of thought into it and argues convincingly that bypassing the page cache makes sense for their system.
> First, do no harm, then use like Light Table, Model Driven Engineering, and TLA+.

Looking at some of Uncle Bob's other posts linked from this article, I don't think that's what he's saying. He (Uncle Bob) goes on and on about discipline, but at the same time dismisses anything that might actually force programmers to be disciplined, like type systems that force you to check references for null before dereferencing them.

For example, in http://blog.cleancoder.com/uncle-bob/2017/01/11/TheDarkPath.... he asks: "It is very risky to have nulls rampaging around the system out of control. The question is: Whose job is it to manage the nulls. The language? Or the programmer?" and goes on to answer: "Defects are the fault of programmers. It is programmers who create defects – not languages." Then he goes ranting about programmers who don't test their code, and if only they tested, such type systems would not be needed.

Again: He dismisses the one thing that actually forces programmers to be disciplined and instead just wishes (against all evidence) that they were disciplined. To me, he seems to be saying "First, do no harm, then use tests, then nothing."
Τα Βήματα Που Κάνουμε Μετά Το Σεξ – Athens Escorts Babes
I used VS Code with ligature support. It was nice looking with a good theme. I also really enjoy Vim and the nerdtree functionality
As others have stated, we tend to overuse superlatives in American English. I try to avoid that, and have picked up a phrase for restaurants from a friend. He will sometimes describe a restaurant that is good, not great, but one he would go back to again, as "exceptionally adequate."
As the other users said if you're using one the drives listed at https://www.kingston.com/en/usb/encrypted_security they seem to be just "encrypted drives", without any support for internal signing operations.
If that's so you're doing all the key operations on the computers at which they're connected, and you've come up with an extremely cumbersome process that gives you very little protection.

Adding to the insult, there actually exist many cheap USB proper cryptographic tokens, that really do all the operations internally and have even FIPS 140 level 3 certifications. They are just slower and have less physical protection, features and storage than "proper" thousands-dollars HSMs.

Note that the FIPS certification of those Kingston drives means just that the key with which the data is encrypted cannot (easily) be extracted.
What are your preferred text editors for each language?
I have the same question. Not, "what makes Martin interesting or worthwhile", which is a totally subjective question, but, "what are the most compelling projects whose success he enabled?".

That seems like a simple question we could actually answer here without having loud debates about unit testing or whatever.
Maybe you need the capacity only for some hours here there?

If all your data and other processing is in cloud A, moving some processing to B might not be feasible (moving lots of data takes time, security requirements may complicate setup)
Adopting TDD and Unit Testing: This talk will probably not make any difference
What Is a Healthcare Marketing Strategy?
Robert is an expert C/C++ programmer, but understands the problems with those languages, which has led to articles like http://robert.ocallahan.org/2017/07/confession-of-cc-program....

Robert is now a Rust proponent because it works.

From today’s article, I think this is the money quote:

> My sincere hope is that people will at least stop choosing C for new projects. At this point, doing so is professional negligence.
Buy Garcinia Cambogia
Ironically, the UI they added for hotspots (which has a similar off-ish setting) actually cost me money, and resulted in several days without internet.

Essentially, i've left tethering on more times accidentally than ever before since upgrading to iOS 11, and used up my entire data allowance without realising it.
Show HN: Dffer – Get notified when a website changes
Apple Fanboy to Thinkpad Diehard
Kakoune. a vim alt
No, Spolsky didn't lead Excel development. He was a PM.

I happen to like Spolsky a lot but most of the career success we've actually seen from him is managerial, which is not unimportant, but it's not the same as being a dev lead on Excel.

On the other hand, Spolsky's programming advice is much more broad-spectrum and rooted in common sense. I'm not sure you've ever seen Spolsky dismiss a whole category of languages or correctness tools, for instance.
Why does one need dithering to go from 16-bit to 8-bit? Can’t I just shift the value to the right by 8 bits?
12 Startup Tools You Should Try Out
Oh I see, I thought you might be referring to how the page cache (obviously) can't cache things like sockets.

Some applications do use the page cache for non-caching purposes though, for instance IPC, or ensuring their working-data will survive an application restart. The memory is still associated with files naturally, but this is often regarded as a feature, not a problem. Some applications use files on tmpfs so that their page cache data is backed by swap (or nothing), the same as anonymous pages.
Apple Update Addresses Password Security for Encrypted APFS Volumes
That first one you quoted is pretty incredible. It's hard for me to even imagine writing many thousands of lines of code in ed today.
I absolutely love the "prove me wrong" game. It reminds me of Nomic for some reason. Perhaps because both games are very language-based and have almost no rules (it's easy to "think outside the box" in both games). I've been searching for language-based games with a lot of room for creativity like that since forever, does anyone have any good suggestions for where to continue my search?
OLCF's 200 Petaflops Summit Machine Still Slated for 2018 Start-Up
http://www.cvedetails.com/vulnerability-list/vendor_id-12001...

... and your point is?

EDIT: more recent bugs:

https://tls.mbed.org/security

These bugs include double-free and use-after-free - which are not covered by the original analysis, right?
A Deeper Look into Bitcoin Internals
Interesting that usually GCP is one upping AWS on some metric but in this case it isn't touching the current largest compute/memory instance on EC2, the X1 family with up to 128 vCPUs and 4TB of memory. Though the blog does allude to them testing such types in a closed beta, it still is a game of catch up still.
The secret lives of children and their phones
How to Burn Fat Fast ? Metabolism
Not directly on topic - but I was a hobbyist silversmith as a teenager. I learnt many of my skills from a stern old German bloke at the silversmithing club.

He liked to say "Gutes Werkzeug ist die halbe Arbeit" (or sometimes: "Gutes Werkzeug, bessere Arbeit"). A good tool is half the work, or: Good tools, better work.

This idea has informed my coding decisions too. Evaluating the worth of a tool is more complex in software than in silversmithing, though.
Why Not All IAM Projects Cross the Finish Line?
One of the biggest data-lockin factors is network I/O costs. These have been kept artificially high by all cloud providers and act both to deter import/export and also to subsidize other functionality.
Isn't it what beowulf clusters are for?

It's never cheaper in the cloud.
You are thinking too big by talking about having an existing datacenter. Many companies colocate anywhere from 1U to a private room with many racks in an shared datacenter.
Announcing the 2017 Atomic Games Apply Today
I just don't think it's likely that the real reason most software is crappy, is because nobody thought of extending unit test coverage yet.
Selling tools here is not "the other way", it's the same problem.

What if the problem is bad management? Or low experience/expertise in general? All of these methods and tools are only optimizing locally, and cannot help the root causes.
Based on conversations with people who have worked with Masayoshi, I don't think he does this for PR. It's a very genuine sentiment.
What kind of computer is this? What motherboard supports this much memory?
Off topic a bit, but anyone here use OpenBSD? I'd be interested in hearing why you use it, and what your experience has been like.
I honestly think the desire to learn something is not something that exists inside us, but rather develops based on how we are appreciated the first few times we try to learn something.

Can't fathom how kids can be interested or not in things they have no experience with.
Hi,

I don't see a privacy policy or other page which makes it clear what information you collect and how that information is stored.

How is session management handled from the point of view of administering the service, how does the service track users and for how long is that information stored?
I think the author completely misses the point of Uncle Bob's article for two reasons.

First, in "Tools are not the Answer", it is clearly stated that tools are valuable.

Second, Uncle Bob's article is not telling programmers to be better. It is telling programmers to be professional. It is not like telling drivers to drive better. It is like telling drivers to stop texting while driving.
He didn't say "proprietary code is evil" or "property is theft", dude's not Richard Stallman. Also, Google does plenty of open source stuff, including Go, which Thompson works on.
I said it's a legitimate question to ask, not that their stated reason for asking is legitimate and I stand by what I said.
I meant that that's how they implemented labels for their IMAP support, but you may be right, they may be folders instead.