skysight-inc/HackerNews huggingface dataset:
> before it was Verisign (I can't recall the name)

NetworkSolutions.com

> so I physically showed up at Verisign (I wanted to bring a baseball bat)

Did you think to write a simple postal letter to them (say a VP or the CEO) rather than get angry enough to show up with a bat? Or send Fedex? Sure you shouldn't have to do that but from a practical angle it may have paid to do that.
Something that scares me regarding domain names is their variable cost. I purchased a .sexy domain for a joke website and its price got raised by +70% less than one year after that, making the joke a lot less appealing. There’s no guarantee that when you purchase a domain name it reasonably stays around that price for years.

Build a business on a domain -> the name increase by XX% -> you’re screwed and must pay.
Do you get angry at small brick-and-mortar businesses that print their logos on their walls/windows so you can quickly identify them as well? What if they have small signs on the sidewalk listing their specials so you know what they offer? Or if they give you brochures with information about their company and what products they offer? Are you saying you'd rather them not do all that, and tediously go around window shopping for yourself, or force independent 3rd parties to go around cataloging everything just so you know what the options are for whatever it is you're shopping for? Because all of those conveniences businesses currently provide count as marketing.

I'm no fan of invasive tracking or obnoxious sales techniques either, but marketing does serve an objectively useful purpose, as any small business owner will tell you. Demanding to do away with it entirely is just throwing out the baby with the bathwater.
Bitcoin's protocol has no central actor to disproportionately redistribute new investors' money to old investors, a Ponzi scheme would be impossible.
> With Guix you get full introspection of your entire package dependency graph

Yes, I know all that. It's neat. I would like to learn more about it.

> The simplest way would be to package the app for guix

I was asking how to package the app for guix, and your response is the simplest way would be to package the app for guix...

> If you need a vm or soimilar though I'd translate your example above into a system config where: - packages include python-2.7 and whatever is in requirements.txt (this may mean you have to package a few things, but again this is usually super easy) - users and groups are added to the config, as they always are, no extra step necessary. - exposing ports and networking is available as options for qemu script guix produces to launch the vm. - CMD ./notify.py: create a "simple" service that can be autostarted by the system on boot. - filesystem access is also handled by arguments to the qemu script.

Yes, I'm sure it is super easy. How do I do it?

Do you know how to use the dockerfile I posted above? You run

docker build -t myapp .
docker run myapp

that's super easy. 9 lines and 2 commands. You can now add docker expert to your resume.

> Zeromq and libsodium are already packaged on guix, czmq and zyre looks like they would be simple to package,

Well, I was working on a fork of things, so I would have needed to install my forks.

> guix is really quite simple to work with

I'm sure it is!

> And pointless, come on - what does that even mean? Does it mean you don't value them? I was quite happy to read about a neat new thing I can use my favorite tool for.

You are correct, I don't really value posts saying how cool and easy something is and how much better it is than other solutions, when they don't actually present a complete solution someone can actually use.

I get that it is not other peoples job to teach me how to use something like guix, but do people not understand why things like Docker won?
I'm pretty sure if you shoved a heavy enough server rack containing deep blue into the ring, you would have a hard time knocking it out. In fact, you'd likely hurt yourself in the process
I think the money quote in eBay v Newmark is more like:

"Throughout this dispute, I have repeatedly read and listened to what look and sound like breach of contract arguments, which eBay uses not to prove Jim and Craig breached a contract, but rather to prove Jim and Craig breached their fiduciary duties. This has been an odd exercise, and I admit I am puzzled by eBay’s decision not to bring a breach of contract claim or, more promising perhaps, a claim for breach of the implied covenant, considering eBay expended significant effort arguing that the 2008 Board Actions violated both the technical provisions and the spirit of the SPA and the Shareholders’ Agreement. The fact remains, however, that eBay asserted neither a breach of contract claim nor a claim for breach of the implied covenant."

The presiding judge in this very case — whom an article I read on it described as, "one of the most influential corporate jurists in the country" — doesn't think eBay's theory of the case is the right one. It's the only one they brought (to the exclusion of the arguments he thought more apt), though, so he can't rule on them.

That is: eBay structured their minority shareholder agreement with Newmark, et al, and then their case over breach of that agreement, to make it look like a fiduciary duty claim, without offering the court a more accurate alternative.

It's, IMO, a bit specious to take something that was structured specifically so as to be construed in a way that is at odds with the reality of the situation — as specifically cited by the most relevant authority possible, in context — as evidence of the conclusion they (eBay) want you to reach.

EDIT: Though not entirely apt, it's a bit like a prosecutor bringing only a murder charge against a defendant, and not offering the jury the choice to convict instead on a "lesser included offense" like manslaughter, or negligent homicide, or something. Yes, there's clearly a tort in play here, but eBay's insistence that it's this specific tort doesn't make it so.
This complexity could make companies depend on commercial version even for open source software.
The thing is "a little" might be on the order of 10 bucks a month.
I think you've reinforced the point they were making. It's pitched as easier, but clear examples of common usage aren't provided. You've provided a response longer than the 9 line Dockerfile, and we still don't know how to replicate it with guix.
The cows udders are full and they are mooing at you and the longer you leave eggs the more shit that can happen to them.
No, just a 90s era #unix'er.
USD is nice, but we need to diversify the anchors a lot more. I hate to put all my eggs in one basket.
No, but when there are only civil penalties at risk, it becomes a business decision, not a moral one.
Every zero-sum adversarial system would be a lot more efficient if they accepted the judgement of a third party instead. How much energy could we save if we dismantled the court system, elections, and pro sports?

I think DAG coins could be a lot more efficient, but I'm not totally solid intellectually on how they achieve consensus on conflicting spends so I'm not sure it will work as a general solution. The only one I've used, nano, has I believe no mining reward, and I think consensus is achieved based on a voting process weighted by proof-of-stake among online nodes -- the incentive for participating in the system is that the system has value for you in other ways. I'm not closely following ETH PoS research, but it will be interesting to see what they can accomplish, it could create a huge reduction in energy consumption.
At the end of the day it comes down to the fact that businesses just simply don't care (Equifax etc).

They like the idea of security and that's where it ends.

In many places if you try to "do things right" you will get fired in two months for being too slow/strict and they will happily replace you with a clueless easily trusting person who "goes and fetches things from random third parties".

Many times they get lucky enough to survive and they don't appreciate the risks that they took. That pace becomes the expected norm and sets the theme in the industry.

And when shit hits the fan the PR person writes a "we are oh so very sorry .. security is totally our number one priority" blog post. They blame and fire the poor bastard and replace him with another warm body.

When it comes to these "hidden" things like security companies do not reward and also punish "doing things right" so on average and over the long term we end up where we are today.

When the culture sufficiently shifts towards being sloppy you will get hammered down quick if you try to be the voice of reason because it ends up being you vs everyone else (the norm).
You know all those people who say, "Never rewrite a project! It'll always fail and take forever and cost too much and..."? I've spend much of the last decade getting paid reasonably well rewriting their projects. (Anyone remember mod_perl 1.x?)
How is that relevant? Say a law like this comes into effect, then they'll need to change their practices / delete that data etc. So going forward they won't have that advantage over an upstart, they'll need to compete in the same market.
If the waste heat could be harvested and used for another purpose (district heating? cooking?) that would more or less curtail the waste, yes?
EOS: https://eos.io/

Raised $2.7B in its ICO, currently trading at a market cap of $10B.

FileCoin: https://filecoin.io/

Raised $257M in its ICO.

Tezos: https://tezos.com/

Raised $232M in its ICO.

Those are the 3 largest ICOs of all time, so yes, there is definitely a market for renting part of Skynet.

The actual technology may or may not be vaporware or a scam. IMHO the way you build a decentralized P2P system is to give a single really smart programmer enough to live on for a couple years and see what he comes up with, not throw a billion dollars at a Cayman Islands corporation that may or may not use it for anything productive. Sorta like what Ethereum did.
I think it's interesting how there's two phenomena that seem to be related to me that get posted here and seem to get treated with different responses.

One the one hand, we have software originally written in C/C++ being rewritten in Rust (not often, sometimes just conceptualized), and there's often a real push back by some people about how it's a waste and not useful.

On the other, we have software rewritten in Javascript, which people are generally very accepting of, even if they don't plan to use it.

I understand the goals of these are often different, and the benefits are also often different, and they have a different set of use cases, but the reception seems markedly different (at least in tone).

I'm not necessarily trying to imply that means anything, it's just something that struck me while noting we now have Git implemented in JS.
A time source isn't required, a clock is. Further, if the origin server does not have a clock, any proxy (such as HAProxy) is still required to add the Date header if it has a clock, as if it were the origin server. In practice, there are very few functional systems without clocks.
Anyways, did IBM have a big leak recently or something?

Yes, this is almost certainly about leaks to publications such as El Reg. Eg. https://www.theregister.co.uk/2018/02/26/ibm_gives_services_...
> Ad blocking should also be enabled on all pages.

But it's not enabled on all pages in Chrome unless you install an extension. By default, Chrome enables built-in ad blocking on specific set of sites that they consider intrusive.

> The only reason to ever discriminate between pages is when one has actually committed a crime (e.g. the safe browsing lists)

Careful, I don't think you're gonna get to see the criminal complaint for all on the safe browsing list. Or you you mean committed a crime in Google's eyes?
Hm, how much energy DOES it take (how would I compare? not sure) to produce equivalent number of dollars? Is there maintenance cost? Interesting line of thought to me.
I think the cost is small compared to the externalized cost to each person who's data has been leaked, lost or misused.
>I don't know a way out of this trap, sorry.

I don't think there is one, personally. All the goodwill is gone, and that's extremely difficult to get back.

I think what's important at this stage is that we pay attention to what has happened, with users completely losing trust and faith in advertising, marketing, tracking - heck, even _diagnostic analytics_ - and recognise what caused this.

Then, maybe, we can try and avoid it in future.

Alternatively: Move everything to locked down mobile platforms and keep driving straight towards the latest stage capitalism we can see, and just keep finding new ways to keep users locked in to a platform they despise more and more until something _snaps_ - but that'd be tomorrow's problem, right?
Good point, especially that last sentence.
Thus is life in JS, perpetual headache.
Mass surveillance is not really for investigating individuals.

The game being played is not '1984', it is 'Foundation'.

It is for steering entire societies, and this works far better on the boring people who think they have nothing to hide as they are the easiest to model
Perhaps equally important: Who was your registrar?
About the AR$1 pesos coins in Argentina
It's worth having a self-contained option available. For something like a drone, you don't need all that much computation for on-the-fly PID tuning in response to changing weather or different piloting styles, etc.
> Also what's unsexy about GNU?

"Gnu's Not Unix": A recursive acronym used as a pun about an operating system from the 1970s, existing solely as a reflection of an aging neckbearded hippie hacker's personal philosophy about software, that is pronounced "GUH-NEW".
The addon is open source (this HN post even links to the GitHub), and the source code is very short, so it's easy to verify that it's doing only what it says. If you are extra paranoid about the addon in the Chrome store not reflecting what's in the repo, you can always install it from source.
> i think there should be at least a couple additional levels between small claims and full blown court. The lack of those levels is what arbitration mostly trying to fill.

I think at this point, in most cases, arbitration is meant to fill the role of

1. keeping PR problems hidden (such as sexual harassment, etc) by keeping them out of open court, and

2. a way of practically eliminating legal liability by stopping class action lawsuits.

I don't think those entities that deploy arbitration on a mass scale really care about the efficiency of the court system at all.
>Paid gsuite has live 24/7 phone support. I've used 5-6 times over 8 years and gotten 5-star service every single time.

I've been a reseller for most of the decade and I can honestly say in all the times we've called, we have never had a single issue corrected by support. We usually end up having to find workarounds for bugs. The last time was an autosuspension our panel(s - there are two versions now) would not let us un-suspend the client. This left him without email for a week, while support would only respond during the early AM hours, and would repeatedly ask us to prove identity, even though we were registered resellers with admin panel access.

In all the years of working with different vendors, I honestly cannot think of a single one with a 0% success rate in their support.
.io is not a new domain tho, it's the country tld for Indian Ocean.
Wow, wouldn't want valuable corporate secrets such as your particular form of Agile leaking to outside sources. How devastating.
No, the point was "when you routinely use binaries from a bajillion different sources of varying degrees of trustworthiness, bad stuff is bound to happen".
I'm going to draw up some charts about hull displacement on ships from the dawn of time up until about 1950. Then we can have a really informed conversation about the naval power of countries through the ages. I think we need to be ready for the implications of there one day being a battleship the size of the Pacific that will allow its owner to rule the world.

Forgive the sarcasm, but I'm really put off by the aggressive weak-to-strong generalizations that are going on here. I'm also very excited about AI, but I don't understand how lines like,

>> But at least within many current domains, more compute seems to lead predictably to better performance, and is often complementary to algorithmic advances.

can be extrapolated to anything more than a fun conversation to have over drinks, or the plot for a bad sci-fi movie about AI (which, to be fair, are also quite prevalent in the current zeitgeist). We're definitely at a new tier of "kinds of problems computers can solve", but surely experience and history in this space should tell us that we need to expect massive, seemingly insurmountable plateaus before we see the next tier of growth, and that that next tier will be much more a matter of paradigm shift than of growth on a line.

The systems on this graph all do different things in different ways. It's one thing to abstract over compute power via something like Moore's Law, or societal complexity via the Kardashev scale. But I think we need a much more nuanced set of metrics to provide any kind of insight in to the various AI techniques. Or an entirely different way of looking at 'intelligence'
Hmm nice argument for GDPR. They are tracking my visits without my permission or even notifying me...
... or alternately all money is a Ponzi scheme. Take your pick.
english is similarly a terrible language in many ways. Its only benefit is it is fairly easy to learn and start speaking with in a “broken” way but still gets its point across.

Which has led to a meta advantage which is it being used everywhere.

So while Esperanto speakers bemoan this, the rest of the world doesnt care too much.

The rest is disagremeent or agreement on the quote “If it’s stupid and works, it’s not stupid”
They were written by the last generation of the city who could read and write Oscan: after the Social War, Latin-speaking Roman colonists were sent to settle in Pompeii and many of the other towns of Italy to prevent future rebellions.

Along with educational policies favoring the ruling language and other forms of cultural assimilation, the resettlement strategy has been effectively used in modern times, including the United States, China, and the Soviet Union.
For Twitter third party clients are basically competition so it's not surprising that they make API access as limited as possible. Furthermore because of network effects they are not afraid that a significant number of people will leave the platform.
>I use Rake (or Gulp, or whatever) because then I can use Ruby (or JavaScript, or whatever).

This is an anti-feature. When you need this, your build is too complicated.
This is actually a very important point that gets ignored a lot.

What will happen if public container images are no longer available for building your application?

Your in a for a world of hurt if a major dependency of your application doesn't work anymore because someone pulled the image.
That's why a lot of companies will pay outside consulting companies when they hire contractors. The contractor is an employee of the consulting agency.

I once wanted to hire a friend of mine at a company as a contractor (he had all of the required skills and my manager was impressed with him). The company wouldn't hire him directly but were more than willing to give him his asking rate net after he went through the consulting agency - ie if he wanted $85/hour as a W2[1] contractor they were willing to pay the consulting company $110/hour so he would still get his $85 an hour.

[1] W2 Contractor means that the consulting company paid the employees half of social security and Medicare and he would be eligible for unemployment. He was getting health benefits from his wife.
I like simple archives, but can it be not tarballs? For the kinds of application described in this article, tarballs are pretty bad:

Either you extract it from scratch every time you run an app, taking a long time penalty...

... or you extract once to cache, and assume that nothing
changes the cache. This is pretty bad from both operational and security perspective:

- backups have to walk through tens of thousands of files, thus becoming much slower

- a damaged disk or a malicious actor can change one file in the cache, making damage which is very hard to detect.

There are plenty of mountable container formats -- ISO, squashfs, even zip files -- which all provide much faster initial access, and much better security/reliability guarantees, especially with things like dm-verity.
What exactly gets displaced here, other than our hopes and dreams for better future?
I am amused by a lot of the hyperbole used against JS, as if it somehow is hard to use or drastically restricts the problems you can solve.

At this point, I'm not even sure if a single comment in this thread that poses itself as obviously anti-JS has a valid knock on the language, just high-level, hand-wavy reasoning about why it is so poor.
In practice people don't think about or even look at URLs, that's why phishing works. They recognize sites based on logos and stylesheets and often go to places by googling the brand name and clicking on the first link. If you forward every domain to a primary domain at the DNS level, your pagerank probably won't be hurt by this practice.
I don't see java in the list of features on my Raspberry Pi 3

$ cat /proc/cpuinfo
processor : 0
model name : ARMv7 Processor rev 4 (v7l)
BogoMIPS : 38.40
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm crc32
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
A more apt question might be, would you be willing to take a pay cut to achieve an increase in happiness and live wherever you want?
> shackles placed upon them by sysadmins

Well, potentially unpopular opinion here, but an awful lot of sysadmins brought their looming obsolesence on themselves. I'm an app (as in "a program that runs on a computer", not an iOS add-on) developer, always have been. I get requirements from the business types, code it up in vi or Eclipse or whatever, get it working, and then they (the business) want to deploy the working app out to production so people can use it and the business can make money off of it. And, for decades, sysadmins have been a brick wall of pure hostility. They're not all like this, but a lot more are than aren't. Like, I get it - you're overworked and the demands on you are unreasonable. Yeah, me too. But I just work here, man. You're right, I don't know how to do your job, that's why I sent you an e-mail asking you what steps are needed to deploy an app into production since it's not documented anywhere. But rather than just tell me what you need so I can go gather that up, you're going to unload on me because you feel overworked and unappreciated, but you're sure as hell not going to unload on a manager or somebody with actual power, you're going to take it out on the developers who have no pull or voice.
I am working in that area myself, maybe I am just better informed and convinced by what I experimented with. Even Adobe is now doing LEGO-esque photo editing and looking for testers. When we get those things to production, there will be serious shift in basic-level developer demand; those will be likely out of luck soon. Most people would be able to assemble a simple app covering many of their needs just by dictating to their phones what would they expect to see and pre-baked LEGO blocks will be applied. Imagine fun with Minecraft but this time with blocks of properly encapsulated code, real-time using voice, touch and eye tracking.
> As an aside, there exist green threads in JS, namely node-fibers, although it's only a Node.js extension.

Aren't Web Workers real threads, and supported natively in browsers? (Haven't used them myself, maybe there's some limitation that excludes them from the criteria above...)

https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers...