skysight-inc/HackerNews huggingface dataset:
> Why would the size of the array make any difference as to whether or not the extra drives needed by RAID6 can be characterized as waste?

RAID risk is about your rebuild failure rate, in this case URE (Unrecoverable Read Error). If one such is likely to occur during your rebuild, that can lead to a lot of problems.

In RAID5 until you hit about 2 TB disks and up to about 4 or 5 disks total the risk of a URE during the full read of the array is fairly low. Once you go above that you risk loosing data to URE errors.

In RAID6 you essentially multiply the URE rate together, which means you have a much much lower error floor and you can repair bigger arrays.

In a cost-benefit analysis this means that if your array is small enough, a RAID5 gives you more effective disk space with little additional risk.

>If you have node-level redundancy, why bother with the intra-node redundancy?

A failover is still a failover and can reduce performance and it reduces your remaining failover margin. You want to keep your failover rate low, though if you doN't particularly care you can use RAID 0 too.

>It's not clear to me what limit you're referring to, but, considering how long RAID6 has been implemented, especially in hardware, and how far computing power has increased since then, such a claim is dubious, if not extraordinary.

This is not a CPU power limit, rather RAID6 will in the next few years hit the spot where the risk of loosing 2 drives during a rebuild, due to the large drive sizes, becomes large (URE is still low IIRC), so at that point you want more redundancy to keep the rebuild risk low.
Yes, but there's still a depressingly large amount of code in the wild that just casts interface{} back and forth.
So are they real? No numbers, no talking about it, just people in HR saying "No no, I promise you, they are real!"

If everyone is so cautious about hiring for fear of litigation, do they still happen? Since everyone is so cautious.
Santa Monica Is Offering Cash to Seniors Struggling to Pay Their Rent
IT Visionaries – Stories and insights of IT leaders on tech trends that matter
>It is striking, but unfortunately not surprising, that law enforcement has been allowed to use these technologies ...

The last I heard that the FCC authorization was only for use in emergency situations. If that is still the case then law enforcement has not been allowed to use these technologies in the way they actually do.

Law enforcement has been doing off the books surveillance pretty much forever. It isn't likely they are going to suddenly stop. The article has it right, this is entirely a technical problem at heart...
The trades e.g. electrician/plumber advertise apprenticeships all the time in the USA. They get paid + education which starts around $16/hr. If only some of the large tech companies would start adopting the same model.
Show HN: WikiPedia WhatsApp bot
This is untrue. If you need to update one dependency; npm/yarn will update the lockfile with the minimal changes needed to update that one dependency. You do not need to regenerate the entire lockfile.
> Joel Sposky wrote that blog post to say that you should do an absolutely minimal check that someone can write code, then move on to more important things.

Interesting, and I won't look up the article again before writing this comment.

I remember it as saying he was having a hard time finding people that can code at all, that a FizzBuzz is weeding out a large percentage of applicants. I don't recall it as a gateway to move on after.
> So as long as you are doing Joe's textile website, it is the right tool.

I don't think Rails is the best tool for that. A static site or Wordpress are probably a better fit.

> Cloud scaling rails can be expensive, as apparent from horror stories [0] but a few manually managed instances with a load balancer and good web servers can go a long way.

It definitely can be, but I think most apps people are working on don't have a scaling issue (at least of the technology sort). When there is a scaling issue, it's often something related to the database (bad indexes, poor instance type, or N+1 queries)
I can see why this is an attractive idea to fund, but in my opinion it's the wrong way to resolve the problems highlighted in the article.

This is not a technical problem, it's a usability problem. We have had the cryptography necessary to technically fix this for a long time. Replace the single human-memorable token (SSN) with a unique public/private key pair. Then you provide safe authentication by signing verification messages with your private key without placing that private key into the hands of a centralized vendor (like Very Good Security).

The obstacle to this solution is 1) buy-in, to either get the government to do this or to bypass it with this solution in private industry, and 2) usability, to abstract as much of the technical signing process away from the user as possible. But this is a better solution. From what I can understand of Very Good Security's website, it's just more of the same. It wants to become the secure gatekeeper of sensitive data instead of developing a novel means of obviating that problem entirely.

The real company to fund is one which takes inspiration from an existing cryptographic protocol - like ApplePay's or AndroidPay's - and expands it to handle identity verification and one-time payment authorization without requiring an SSN or canonical credit card.
This is an incredible series. The guy's breadth of knowledge is amazing! Super interesting stuff.
> I am thinking of doing anything.

Great. https://en.wikipedia.org/wiki/Entropy
(disclaimer: I work for VGS)

Hi robert204,

Your question has two specific parts that I want to address:

1) Single Point of Failure

2) Larger target for malicious actors

Regarding point #1:

- We have invested significant amount of resources in making our product as stateless as possible and our core product can live on different cloud providers' edge networks.

- We conduct failover tests every 2 weeks to ensure we have the capability to respond to any blips in downtime. Our SOC2 Type2 report is available to discuss the availability and disaster recovery items in detail.

- As a side note: We solve the issue of the "vendor is down" problem -- for example, we have customers who seamlessly switch between providers, say credit score checks, when one of them is down without the liability of storing that data themselves.

Regarding point #2:

- This is our core focus. We take on the liability. The idea here is if this is the core focus, we can do this better than a lot of folks out there.

- We also broker access to different Fortune 500 institutions that visit our offices and constantly pen-test us, audit us, etc.

I think it's important to acknowledge that as developers security is always important, but never prioritized until its urgent. We are trying to change that @ VGS.

Please, email me directly and I'm happy to have a further chat: mahmoud @ ${COMPANY_NAME}.com
Concrete structures are cool, but there are lots of issues. Insulation, water vapor / condensation, potential chemical reaction with other materials, difficulty of future modification ...

Get a copy of A Pattern Language by Christopher Alexander
"we accept it" is nowhere near the same thing as "the insurance company will pay for it". Of course they'll "accept" it, it just may not make a difference as to what you owe. they'll put it in their system.

the words used here have vastly different meanings to each party.
I think thats why google has been pushing so hard for https, isps were able to do tracking just as well under http, so google wants to shut that door.
whats amazing to me is how little money it takes to sway a politicians vote. yes there are big numbers in the list but most of them are 10s of thousands. its just amazing that they are willing to put their conscience aside and condemn people to bankruptcy or worse for that little. for the worshipers of free market they sure are selling themselves off cheap.
I am disappointed that go seems to follow Java and C++ with generics support instead of taking a more LISP-like turn like e.g. Julia.

I would much rather have powerful hygienic compile-time macros to generate code. Then I would have the power to do all thay generics does but also a lot more.

Just having those powers at compile time evaluation would be rather good, don't need to go all the way to Julia/Lisp.

We know what mess C++ became, with people abusing the template system to do compile-time metaprogramming. Much better to simply provide a good macro system.
Awesome tool! God my handwriting is awful. Can it learn and convert it to text?
The insurance industry is the enabler. Is there any other industry where you the individual do not know the cost until some third party that has agreed to pay the cost, negotiates said cost, and then even after negotiation may just give up and say, nevermind, pay it yourself?
Where are all the jobs where you don't have to be good at it to get hired? :-)
That's because the government allowed tax exempt employer funded health insurance to stick around. If everyone was forced onto healthcare.gov then it could be possible. Employers would have one less thing to deal with that has nothing to do with their product and taxpayers wouldn't have to worry about being tied to their employers, and can more accurately compare differences in pay and whatnot.
Agreed, I built a data entry program in VB.NET for an insurance company.

The WYSIWIG aspect of .NET WinForms and events meant I could build a very efficient data entry program (I miss that part a lot when developing for the web).
I'm not just talking about "sample scripts". The system ships with a few DTrace scripts in /usr/bin as tools and they're rather broken. For example, running /usr/bin/iosnoop just prints an "invalid probe specifier" error. I haven't done an exhaustive catalog of all the /usr/bin DTrace scripts but last I checked there's at least one other broken one as well.

Trying to use DTrace with SIP also warns that "some features will not be available", though I don't know offhand what DTrace features don't work with SIP.
I've also seen airlines do this with their in-flight wifi. Looking at you, Icelandair.
Good question - In theory the frequency depends on the factor of how frequently other teams are introducing breaking changes in terms of API. If the dependency is too early in development phase and API is changing a lot, then probably that api should not be consumed (internally we don't allow such api to hit prod). But still its a good practice to update snapshots (like you said for stale/seed data) and I have been part of teams that have daily or weekly schedule jobs to run these updates (Both approaches work fine).
A good place to start is learning how to poke at some API, and fizzers are a good way to do that. Pick some API that you think is complex (often places with previous bugs still have bugs), find a way to bang on it with all sorts of malformed data until something happens (crash, fault, or such). When you find that, you now have a set of inputs that the API is not sanitized against. Then you can try to disassemble, using tools like IdaPRO (best, but expensive), free reversing tools, kernel debuggers, etc. to get a handle on what is going wrong. At some point you might find the precise error at the assembly level. Then you may try to craft your inputs to bypass checks and affect the underlying system in a way you control. Here there are an astounding number of tricks and ways to bypass various security features, and you will have to read extensively to get a large bag of tricks for this step.

Now you have a decent exploit.

Each of these steps takes learning through just doing it and reading. You'll learn tools for various pieces of the game. But it's doable with decent effort.
5 reasons your site is not a PWA
> HTTPS doesn't protect the content of your site from being stolen, it protects your users from hostile third-party content masquerading as yours.

Hostile third party content is only hostile because the client used to access the content does not take client security seriously.

Food for thought: As an end user consumer visiting random, benign websites, I want my browser to be protecting me against hostiles, rather than relying on website operators to do that for me. Just like I run antivirus on my machines instead of relying on everyone else to run it.
Looking at the bill, here is some ridiculous: NaCl (basically salted water) costing around $300/liter.

That's outrageous. These guys are protected by your politicians and make use of mercenary tactics. Villains in doctors clothing.

I'm for free markets but we are kinda going over the limit here. Maybe have fixed rates for emergency where you can't get the approval of the patient. Maybe give the patient the possibility to pay for these ridiculously priced items after.

I mean if I get you 1l of NaCl we'd be cool. And fix the rates for emergency.
Because half the population is women. Your arithmetic quip falls a little flat when you lose the ability to partition data along more than one axis. What was that about ideological blindness again?
VMworld 2018: la opinión de los expertos
The UN also states access to the internet is a human right but Zuckerberg only gives Africa free internet, why do I still have to pay for it?
It must be difficult to keep track of exactly which "critiques" arise from these third-party-opposers and which are just ideas from virtuous people.
Draft: https://gist.github.com/simonmichael/5b0d3aafb4b71ccdadaa4fd...
Excellent. The sky I guess.
HashiCorp Vault 0.11
Easy recipe:

1 6oz can tomato paste

1 small can chipotle peppers in adobo sauce

1 onion

a few cloves garlic

salt, black pepper, some cayenne

1/3 cup of each:

white vinegar

apple cider vinegar

molasses

brown sugar

Throw it all in a blender or food processor. Taste and balance salt/sugar/sour (note it will get sweeter on cooking). Bring to a simmer on the range for 10 minutes. Done.
No, the package just has no Debian maintainer so it was dropped. Latest release is 1.99.7 which was released July 5:

https://github.com/texmacs/GNUTeXmacs/releases
Typo:

> allowing to anyone to find trustworthy

should be allowing for anyone to find..

Also, I understand why you indicate your alma mater as 'one of the best' because most people outside Colombia likely won't know it, but you should still list what institution it is, simply because the vague-ness is a little discomforting.

Overall I think a simple Reddit-style moderation with votes can certainly do a lot to improve an experience like this, but reputation systems are very difficult. There are many ways to game/manipulate systems like this, starting with basic sybil attacks, but also coercion (e.g. show me your privates or I downvote you), and other imaginative abuses. It might be worth discussing moderation strategies beyond the voting system.

Finally, $1 a year payments sound like a lot of user friction for little benefit, and also payment processors are likely going to take a large fraction of that. It's a difficult choice, but some kind of 'freemium' model seems attractive here: a few dollars for high-quality emotes, etc. People that really use and enjoy a service tend to be quite open to payments like this, and it's a proven model for games, Twitch.tv, etc.
Then why does Print return an error code at all?
Many store fronts have large sliding glass walls that open up the entire structure to open air - and they blast AC at 16 degrees inside, while the entire store is open to 30+ degree air outside.

The idea is so that the AC would leak out the doors and entice people to want to walk into the store. But that means that all the AC is wasted.

This kind of irresponsible use of AC is everywhere in hot climates in large shoppping streets, pretty much everywhere - North America, Asia (in asia it's insane how much AC is wasted), and I don't see it as much in Europe but probably some stores do it.

That's just a waste and is really sad.
What I wrote isn't hard to understand, I'm sure you understand what I'm getting at.

If you want to be obtuse, be my guest.

P.S - I should've just used "efficiency", that is the correct word, not "energy efficiency"
DuckDuckGo Receives $10M Financing to Expand Global Impact
I bought a bunch of Bitcoin in 2012, 2013 (you can still buy them today) then waited for 5 years, boom, free money, now I'm a millionaire and no longer have to work.

The downside is I am severely depressed and as my therapist says, I'm in the midst of an existential crisis about why any of us should do anything.
No, that's for a commuter student. Room and board would add much more to the debt total.
> You haven't lived until you've smelled baking cat shit wafting through every room of your house.

Oh my. Noooooo thank you.
Creating a Chrome extension in 2018: The good, the bad and the meh
This was a study that caught my attention recently:

https://jamanetwork.com/journals/jamasurgery/article-abstrac...

Cipro greatly increased the rate of aortic aneurysm/dissection in mice when they were challenged with high blood pressure. The examination goes into detail about the reasons. Essentially the drug both inhibits connective tissue repair and starts degrading it. So the black box warning is about tendons, but there's connective tissue all over the body (like in the aorta). There's probably a subset of individuals more genetically susceptible to the disruption, but it looks like this could worsen lots of latent issues in just about anyone.
The rate of heat transfer through walls and windows also depends on the temperature differential.
In Defense of Feeling Bad
Anonymous account, because of reasons.

I interviewed and was offered a job at this company. I turned it down because they had some of the most morally bankrupt leadership I have ever seen in a startup. Frankly, it made me less likely to interview with YC companies at all.

Just a quick list of giant red flags-

1. They are violating visa laws by having their employees in the Ukraine lie on their applications and say they are coming into the US for tourism instead of business.

2. The Ukrainian developers they get out here are kept on their Ukrainian salary, with a small stipend for housing. So they get to live in the bay area on a eastern european salary.

3. Their CEO actually bragged to me about how little they were paying the only female developer they had in the office. He thought it was hilarious.

4. When they made an offer they refused to tell me how many shares had been issued for the company or what percentage the offer included, making their offer completely impossible to decipher. It was also about 15% lower than the numbers they had discussed with me beforehand.

If I was an investor in this company I would demand the removal of the CEO and put their CTO in charge.
Minecraft AI Genetic Learning Neural Networks – v0.13 – Gen 513 – 4K+ Neurons
The Other Side of Fentanyl – The Walrus
I haven't used LyX in years, but I still probably would if I was doing the same math-heavy work I used to. WYSWIG is really helpful when doing equation editing and learning the shortcuts enabled me to mostly keep up with note taking on my laptop during math lectures.
It exists, it's called tokenization

https://en.wikipedia.org/wiki/Tokenization_(data_security)
Common with ORMs. The gorm API is horrible - it's all interfaces.

The only reasonable ORM library I've seen is sqlboiler, which uses code generation.

https://github.com/volatiletech/sqlboiler
And yet we are being tracked like wild animals because "what if somebody kidnapped you and stuck you in a trunk?"

Really? (And yes, I'm aware of many cases of trunk-kidnapping victims saved by phones. The point that everybody had to have something, so carriers and others deployed all this tracking crap, and everybody sure is making a lot of money off of it, but as it turns out, just kidding.) yay?
I've never heard of this before. Do you know which technologies specifically address the article posted?
My Year Without a Nose – MEL Magazine
You're talking about the language. He's talking about the standard library.
A year ago we said it was time to move toward Go 2: https://blog.golang.org/toward-go2 . This is another step in that direction.
Uber loses market share to Lyft after year of scandal
Not to short-change his effort, but actually trying to understand the thing on which you are working, doesn't make you a national treasure.

He's a cromulent fellow, everyone else around him is just a national disgrace.
I haven't seen anything that differentiates it from Hololens at this point. Their 'waveguide' tech apparently allows it to create graphics in focus at 0.5m and also at 5m, but having items become out of focus with the rest of the world, never seemed like a hindrance to me since if I wasn't focused on it, well, I wasn't paying attention.

They have eye-tracking tech but aren't using it yet.

The Palmer piece (Magic Leap is a Tragic Heap) breaks down that this is a Tegra X2 running an Android OS.

The console level graphics were most assuredly vaporware.
I NEED generics to do any quantitative code. I evaluated Go for a project, and completely ruled it out because of this. You're unable to write an algorithm for float 32s and 64s, scalars vs vectors vs matrices, etc.

There might be a bias in the commentary because the membership of the Go community has self selected to just be those for whom the current constraints are feasible.
...oh man i just had a déjà vu xD

http://www.crynwr.com/qcpc/
Firefox Nightly Secure DNS Experimental Results
I would download the file and open the doc file with notepad++ other software that too old to excecute macro.
A few quick searches, maybe something along these lines? https://jupyter-notebook.readthedocs.io/en/stable/examples/N...

My JavaScript version I just put a simple wrapper around my print-results call to check if it is in module mode or notebook mode.
Warren Buffett is investing in Paytm, his first Indian company
This made my day. I'm so happy. Going to spend the week going over the draft proposals!
I was having trouble sleeping for a while; at one point my doctor recommending I go on oxygen for a while until she could figure it out. I called the company that provided the oxygen, and asked how much it would cost. Nobody knew. I called back 3 times, and still nobody could tell me. I called my insurance company; they couldn't tell me either. I ended up electing not to use it (which turned out to be perfectly fine), but it does seem like this was a fairly standard procedure, for outpatient stuff, and nobody involved knew what the prices were.
(disclaimer: I work at VGS)

We offer a variety of various format preserving aliasing algorithms. Only legacy systems tend to choose the SSNs if they have fixed-width columns in their RDBMS that are difficult to change (imagine petabytes of data).

The idea behind format preserving aliases is actually based on the NIST SP 800-3G standard[1]. We use FF1 and are actively engaging with the world's leading cryptographers such as: https://cryptoonline.com/publications/.

Happy to share more in detail if there's interest. Please email me: mahmoud @ ${COMPANY_NAME}.com

[1] https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S...
Ask HN: What do you want your list app to do?
Would you use pre-curated list of things you need for popular activities like hiking, travel, office supplies, moving supplies, etc?

What other websites do you currently use to prepare?
The Lost Civilization of California Wine
Wanna get back to me with the % of white women who still voted for Trump despite all his comments and history?

It seems like your position is that "everyone gang up on white men" is a winning strategy because we've now sliced off a minority that doesn't get to 51%.

Ethics of that aside, it hasn't been working. Obama and Bill Clinton won on thinking and inclusiveness. Not on division and resentment.
Does the timing even make sense for attributing the delay to trade tensions? If theyve delayed for more than a year, those tensions were not at their present level a year ago.
Why software quality is so confusing (and how to fix it)
It's because you're not paying for their services.