skysight-inc/HackerNews huggingface dataset:
Yeah, renaming things is always painful. We're renaming the project because "GraphQL" is owned by Facebook and we don't want any trademark disputes down the line. We've mentioned the rename in a number of places but I suppose we could always add it to more places - where would you suggest?

It's worth noting that the entire GraphQL schema generation in v4 is a ground-up re-write (that's where the "graphile" comes from - it was originally a separate project), we've kept the top level APIs from v3 though (e.g. the web layer). This has enabled the performance improvements, plugin system, and greater customisability.
The title is clickbait, but renaming MVC to ADR is a change that shouldn't be underplayed: ADR seems orders of magnitude more intuitive conceptually
> but also we haven’t been inundated with support calls over the last few months

Sorry, I didn't mean to imply that it was Google's customers specifically who should measure and be suspicious. I meant in general, say someone running a service on bare metal outside of any public cloud for example drawing this conclusion - "Google measured the impact of these bugs and mitigations and they didn't see any a significant performance regressions so I probably don't have to worry either".

Also (since you disclosed you work on GCP), I like how Google sponsored Project Zero. Fantastic work and I am sure it will be a great return on that investment. I can certainly see someone thinking about that when deciding to go with GCP vs other solution.
What if there was a rapidly spreading ransomware that would not decrypt the user's files after ransom is paid? Ransomwares paradoxically require a certain level of trust in the attacker, that's why they often have their own tech support people and actively answer victims' questions. If there was a deceitful ransomware in the wild, it could help reduce trust in future attackers, reducing the chance of future victims paying up, and helping to make ransomware a thing of the past.
As long as you’re default live you should be proud.
For those interested, there are also commercial alternatives to help with ransomware decryption: https://products.drweb.com/decryption_from_ransomware/

But I have no idea about the cost.
There's blacklisting which can be used in uBlock, and you can limit the processorusage of threads within a browser with whitelisting. E.g. "Hacker News is requesting excessive usage of your GPU. Would you like to allow this usage?"
Yes, but 'per minute' not so much. It really is rather odd to express perf figures like this
I know of two options if you are willing to work your way up slowly:

1. Become a domain expert and work in the domain and then move into product management. Kind of a round-about way to go about it, but if you like the domain then why not.

2. There are also a lot of low level project coordination jobs out there. It's not really management and it's really stressful work as you get a lot of responsibility, but not a lot of power. But if you don't burn out then you'll slowly get more and more clout and move up the hierarchy.
I appreciate thoughtful posts like this. Instead of the typical "Go is just better" style of article with specious data, this one talks about pitfalls around Go. All developers need to realize that there are tradeoffs with any implementation and this blog does a great job illustrating that.
I don't know, but the infrastructure for fiat currencies can achieve efficiency gains through scale.

Bitcoin cannot, on a very fundamental level: energy expenditure for mining must at all times be so high that an attack is financially unattractive. So energy usage has to increase linearly with the market cap - and completely independant of how many transactions there are.
We need more posts about how every side project during which you learn new ways to work, new technologies, etc., no matter if you launch them or not, are valuable to you as an engineer.

I get where you are coming from, but that road without at least some reflection just leads to burnout and depression.
Learning Angular 5 as a React and Vue Developer
"sensible cryptocurrencies" is the oxymoron for this generation
i haven't listened to this but will at lunch for sure. I'm in the process of making the switch to management after accepting a new role around last Nov. It's painful, one of the hardest parts for me is knowing when I've had a good day or bad day, there's not a good measure, things are very subjective. The mentoring and leadership aspect of management I've really taken to and didn't expect to enjoy so much. Pairing up a Sr. and Jr. dev and watching the Jr. dev bloom and the Sr. dev become a better communicator, to the point i've put them in front of a client, has been the highlight so far.
You can hypothecate the tax to provide energy efficient modifications to houses (insulation, LED lighting, double glazing), and to provide a small amount of free energy to poor people (subsistance levels of heating and cooking).
In a very simplified way, proof of work is a way to roughly uniformily distribute the block generation "queue". In a network without identities how do you prevent someone creating hundreds of accounts to have a hundred times more chance to be next in line? You give them a hard problem, and now the odds of you being next in line is proportional to your computing power, which you can't multiply effortlessly.

Proof of Stake says that instead of distributing the work queue proportionally to the computing power you demonstrated to have, it does it proportionally to the amount of currency you have saved. It similarly prevents the attack where one could create infinite personalities to get in line, with different trade offs. In particular, beside the energy savings, it can be a much more scalable model, where you don't have to wait 10min in average for someone to solve the hard problem and instead you can know right away who are the next people eligible to generate the next blocks.
The problem is in the details: how do you use this to reach consensus? How do you agree on a randomness source to picks the "winners"? How do you prevent people from mining multiple parallel histories, devolving the system into proof of work?
Well done to the author for planting the word "hegemony" in there.
A repo of decryption keys is very useful because it obsoletes specific attacks without relying on the user to patch his computer ahead of time.

Additionally, ransomware encryption can be stopped at the file-system level:

https://www.cryptodrop.org
> Since PoS removes billions of dollars of the mining that secures the ledger, it must follow that a PoS blockchain is billions of dollars less secure.

No, that doesn't follow. This person doesn't know much about DPoS because they don't grant it any points for the things it does right.

One thing that mining-free PoS coins give up is equitable distribution of the coin. Arguably there are other approaches to this but none of them are trustless.
You don't have to match the energy burn, just the hash rate (so efficiency matters).

You also don't have to do it all at once, you just have to be faster than the network (If the private blocks are calculated 10% faster it only takes ~10 days to go back in time 1 day). But of course this attack isn't practical, actually executing it would demonstrate that the public network was a farce.
Very similar! The project was originally inspired by PostgREST - the main difference being that it uses GraphQL as the API layer rather than REST.
Good talk, thanks for sharing.

"... difference between having minus $10k vs $1M in your bank account is much larger than having a million vs a billion..." :D
A better name for this very short article would be: How to use MVC for "modern server-side web development".
Presumably there was a reason why you were searching for the package in the first place? A challenge that you were trying to overcome?

If there's no perfect solution that exists (which there never is)--and if bringing in someone else's partial implementation "as is" doesn't work--then the only other options available are to write 100% of the solution yourself or to write (100-x)% of the solution yourself.

Also, presumably, that you're not in the business to write library tools.

So unless the broken OSS package is written in complete greek, why wouldn't it be more efficient to use it as a template for your solution?
Someone you report to on a day-to-day basis (i.e. team lead) is fine as are managers at previous companies.
graphql on postgres is literally orm. objects are graphs. and graphql inherits all the same problems as the last 1000 attempts to do this. unless you're facebook who uses an eventually consistent graph datastore!
I have the exactly same problem with my nice product www.reviewshift.com

Guess I will take the path without VC but therefore I need some sale guy....
Incentives matter, as the saying goes. Why would you refuse to decrypt and risk the news spreading that XYZ-Ransomeware doesn't follow through on its promise to decrypt? What is there to be gained?
Heh.. weird coincedence. I'm currently busy restoring customer backup files, because a funny little program decided to transform everything in to ...johntrudl.com].java files.
Even if you don't believe in emulation due to piracy, having an emulator around for the sake of archiving is good for the future, I think.
The Manager's Path is a book i found on Amazon, I really like it. Basically, each chapter is one rung up the management ladder. You can read the whole thing or just up to the chapter where you're currently at.
Elinor Ostrom would agree. She received the Nobel prize in Economics in 2009 (after OP's article) for her work on "Common Pool Resources" and the institutions that successfully manage common resources.

Noticing that commons are not always managed to tragedy, as noticed by OP's article, her motto was "A resource arrangement that works in practice can work in theory".
16k r/s is not trivial to get for a non-hello-world app on NodeJS even on a big server, but if you read the article you'd see it's actually about a quarter of that.

... Yeah basically it is an article about using concurrency.
NotPetya/Petya/Netya are also known as 'wipers' because after reverse engineering it turned out the boot sector gets deleted rather than encrypted, so nobody can write a recovery routine.

"Affected users are advised to refrain from paying the ransom as that would by no means help them decrypt their data. This advice is particularly true for the NotPetya incident, as the attackers have no means to restore victims’ data." http://www.securityweek.com/notpetya-destructive-wiper-disgu...
It depends on the workload.

CPU bound? For sure.

Fake CPU bound (as this one is, spending tons of time in go's concurrency machinery), clearly not.

I/O bound? I would have said no before Spectre and Meltdown ruined all our intuitions about performance. It's just a mess right now.
This Incredible Backpack PC Immerse You into VR Like You've Never Done Before
Utility Jobs Lost as New Power Plants Need Fewer Workers
“Aish, after much discussion, we realised we really want you in the team. But the HR who was handling your papers had to quit and therefore we will no longer be pursuing your application. I am very sorry that we have taken so long to respond”.

This is the freaking CEO talking. Here's my translation:

"Aish, we want you, but we can't have you because someone quit, and we're too incompetent to follow up."
Right, sure, but we're talking in a thread about a machine which folds your clothes for you, or a house with two dishwashers so you can use them straight from one and put them into the other afterwards. I'm not advocating lying in a La-Z-Boy wearing a VR headset, eating nothing but Cheetos and Mountain Dew for 6 days straight. I'm talking about dimming all the lights in the room when you put on a film, or having them slowly brighten as you wake up in the morning.

And as for diminishing returns, I would argue that it is not. With proper configuration you can automate the entire morning routine; Lights up with your alarm, off when you leave the house, on when you arrive home, off when you go to bed. Just minor conveniences that make life more pleasurable.
When energy becomes cheaper, miners can do more mining, leading to an increase in blocks. Given that people are only willing to pay so much for a transaction to complete, there is only so much demand at a certain price point. Once the supply of blocks increases, you eventually have price points where the demand no longer matches the supply. At this point a miner would lower their fee until the demand increases back to supply.

Supply and demand drives prices, but it does so through individual actors setting prices they are willing to pay/accept (or by algorithms that have been setup by some human who set up the rules by which it will set prices).
Just visibility & accessibility.

Checked baggage is packed in tightly along with other combustibles. If you start a fire in the hold, it'll spread too quickly to detect, let alone extinguish.

https://aviation.stackexchange.com/questions/9626/is-it-poss...
There is hidden centralization of dev teams and clients in both projects.

Bitcoin core could probably be sunk by covert US government or mafia-esque intervention with the dev team.

Both bitcoin core and ethereum are monocultures, which makes them much more vulnerable to black swan bugs.
Yes. WannaCry is one such.

Randsomware is pretty common to home users in the past, at least. Back then it was quite easy to convince someone to click on “Warning! Your computer maybe infected! Try our software” pop-up. Then if your computer gets locked up, the screen will say “call tech support!”

There was a claim against Kaspersky [1]. I don’t know if it is really true, but I personally believe that the AV industry does shady things out there, pay some blackhat to spread virus/malware, so consumers can rely on AV.

[1]: https://www.reuters.com/article/us-kaspersky-rivals/exclusiv...
Counterparty.io is a PoB meta-token on the Bitcoin blockchain
Stop submitting duplicates. You have been warned before https://news.ycombinator.com/item?id=16143427
That's true. Emacs is a platform, a virtual Lisp machine. The Web is another platform. Plus our OS plumbing, usually Unix.

Understanding my computer this way has brought me a lot of sanity. I only use a tiling window manager (xmonad), Emacs, a browser (firefox) and a Unix terminal (urxvt).

Previously I was trying to move most of my computing into pure Unix CLI. While it was fast and simple, I found most ncurses applications (e.g. mutt, remind, irssi) do not really compose as well as simple Unix programs do (e.g. wc, grep, xargs). Moving everything to elisp packages instead (e.g. org, notmuch, magit), where all elisp nicely blends together has been a great improvement. Plus dealing with configuration in a functional way, by switching to NixOS.
> it does it proportionally to the amount of currency you have saved.

Doesn't this have an inherent disincentive to new people joining and using the network? Sorta like the poor stay poor, the rich get rich?
Monitor your stocks with A.I
SpaceX Will Test the Engines of the World's Most Powerful Rocket
> I wonder, if you count agents in a market economy as having not just money to spend making rational purchases, but also political power as a sort of alternate currency (represented by a vote each), is NIMBY really a rational market reaction.

The problem comes when you realize what you have to do to get a vote, which is to buy a house. If you can't afford to live there then you can't vote for policies that will reduce housing costs there because you aren't a resident. And once you have a vote because you own a house, now you want housing prices to go up rather than down.

There is no way for the people who need less expensive housing to vote for it, and the opposite incentive for the people who could vote for it to actually do that.
I would recommend www.daily-leads.com. As a freelancer, I do not have to spend a hour per day finding new clients.

For small businesses (barber, coffee shop,..) I would recommend www.reviewshift.com to manage their online reviews proactively.
“...if a laptop [battery] catches fire in the cabin, it will be noticed immediately and steps can be taken to put it out. And though there are fire safety systems in the hold of an airplane, they aren't well-equipped to deal with the type of fire that lithium-ion batteries generate.”

https://www.consumerreports.org/electronics/problem-with-sto...
Not sure about Pathfinder but WebRender for sure, it's already usable outside of servo. People are attempting GUI toolkits and other things.
Added to the cart - thanks!
This is a very simplistic view.

The expected value is very low at an early stage company, but with a very high upside. It is closer to a lottery ticket although with far better odds - betting on horse racing maybe.

At a later stage unicorn (Uber, AirBNB, etc) that has switched to RSUs, the expected value isn’t likely to go to 0 unless common gets entirely wiped out. There’s still upside but it is more modest (Uber isn’t going to 10x).

And at a public company, there’s still a range given the typical 4 year vesting window.
Interesting read. There are instances when you need unlimited capacity, and there is a proposal for it: https://github.com/golang/go/issues/20352
It doesn’t look like it will make it as the maintainers are opposed to it.
Assuming this construction has also not resulted in reduction of quality-of-life for the community, then this is a good for homeowners as well; it is introducing more potential buyers.

My big concern with the Bay Area is the market for my house getting asphyxiated by a complete lack of liquidity in entry-level accommodation.

There are a bunch of new rental/lease projects happening in the Bay Area, I see them in some phase of construction everywhere.
Since Node is single threaded how do you make that scale on multi core without something that spawn multiple Node app and thus using 2x 3x 4x the memory ...?
Canadian man charged with selling 3B pieces of stolen digital info
Shipped is not necessarily good or bad... it just doesn't mean much by itself.
Such a currency would destroy PoW coins, putting an end to the environment impact of mining.
"First, Break All the Rules." The title sounds dumb, but trust me, it's full of good advice. It's based completely on research and interviews with successful managers.
Where can I get the book for free?
> "I’ve been coached through changing my name, which is a gendered professional experience that none of my male peers had dealt with."

How about ending that convention in countries that have it? In Belgium most people do not change their name upon marrying, and I do not see the point of doing so. Person X and Y marry, there's a contract already, no name change is needed for that.
That's the argument Solzhenitsin used in his Archipelag Goulag to explain the strand between the Tchetchens and Russians in the labor camps. Vendetta among Thecthens gave them super powers when confronted with Russians knowing they would go unpunished for inflicting fear
The Bureau of Printing and Engraving budgeted $14.35 million in FY2017 for "Communication, utilities, and misc. charges." If we assume that 100% of that is electricity costs, and that electricity costs 12¢/kWh, then we get somewhere in the region of 120 million kWh in FY2017 to produce USD. That is 0.1% the annual electricity consumption of Argentina.
Beware the Tales of Techlash – Shelly Palmer
I was not expecting such "backlash" against this post. I am not a psychologist but it feels like there are a lot of people who would like to ship more side projects and/or work on things they are interested in (seems like the very essence of a site called HackerNews) but can't either because of real life responsibilities or excuses they are telling themselves.
Regularization in Machine Learning – Towards Data Science
Ask HN: What data visualization about Hacker News would you like to see?
I have been working for a while on a tool called HN EPLORER, which uses the HN API to acquire data from the website and then process it to do visualization and interactive searches.

Today I acquired all the data from 2017 and I will be soon blogging about it.

I was wondering what kind of charts/stats people would like to see.

Some examples are:
- heatmaps showing what times most posts are posted
- bars showing which days of the month are more active
- word clouds showing most used terms in titles

I am looking for suggestions to expand the visualizations, so let me know if you have any ideas.

For anyone interested in using the tool, check out http://hnexplorer.com
You should consider talking to Johannes Schickling of graph.cool; they seem to be very interested in that sort of thing and they've got some really cool open source going on right now. Johannes is a really nice person - I'd definitely recommend you have a chat.
LOL! I'd say it's a fairly minor assumption to say he probably doesn't have small children. The sheer amount of time and effort that children can consume is mindblowing. A six month old gets bored in ways I didn't think possible for something with so little experience in the world. And god forbid you walk away to do some chore, the cry of abandonment makes it impossible to focus on anything else. And then you think, oh by 6 they should be able to help with things, but the mental effort to get any sort of chore out the child dwarfs the effort to do the chore yourself. And when all the children are finally asleep, that's when the PTSD shows itself. Will a child decide bedtime wasn't executed to their liking and come knocking on your door in 30 minutes? And when will the youngest cry for their first night time feeding? Can I start this activity that will likely take an hour? Do I dare stay up? or will tonight be a 4 cries in 4 hours kind of night?
In most companies I have seen the technical track is incredibly hard to advance on. You have to be incredibly good to make the same money mediocre managers make.
>This person doesn't know much about DPoS because they don't grant it any points for the things it does right.

They definitely acknowledge PoS, it's problem is inherent in that you can always dispute with consensus and create an alternate ledger WITHOUT any upfront costs.
It's a proposal for ransomware that deliberately sabotages the credibility of other ransomware.
Sorry if this came across as hyperbolic.

I was referencing one of the original comments made by a German far-right politician on Facebook that started the debate about the responsibility of platforms like Facebook in moderating hate speech which in turn resulted in the law the article describes:

https://translate.google.com/translate?sl=auto&tl=en&js=y&pr...

It's not a slippery slope in this case. I admit it's a bit unfair to reduce psyc's argument to this but the language the law covers is entirely in the category of "people openly demanding that certain other people be killed or subjected to violence". Facebook dragged their feet to moderate comments like these and the law is a response to create a legal tool to force companies like Facebook to moderate hate speech or face serious fines.
Ask HN: Found security flaws but vendor seems not to care. What should I do?
I've found some web app vulnerabilities to some high profile services in my country, but the vendor doesn't seem interested in fixing them as 6 months have passed and they claim to have other things to do, which, judging by the announcements on the main page, is finishing missing features.

The fixes to the flaws that allow for iterative exfiltriation of PII are trivial to implement as well. The others are simple reflected XSS's.

What is the most appropriate course of action here?
> a.k.a. "professionals"

Exactly. A salesman I used to work with said "Everyone is coin operated." You might be able to go 5-10% either way for intangibles like the stack being used or interest in the product, but at the end of the day everyone has to make the mortgage.