skysight-inc/HackerNews huggingface dataset:
That is quite common. I knew a guy who had army of 10 sock puppets. I think he had automatized the process because those votes came with minutes. He had a mental problem of some sort, because when the discussion come to heated, those sock puppets started to analyze mental health of participants with large variety of issues, from psychosis to pedophilia. Worst part was that he was also a moderator of that subreddit with 100000 subscribers.
I agree. I would say that a better measure than items/s would be customers/hr (closer to throughput rather than speed) averaged across an entire store with and without self-checkouts. As you said, the optimal setup will depend heavily on the mix of customer types ("express" vs. full cart) a particular store gets. There's probably a good ratio for most stores between the two and I think that's what they're all converging on now.
I don't believe you can stop this. I have tried and failed. I steer clear of anything not shipped directly from Amazon. Trying to report shady sellers on Amazon is next to impossible and Amazon will not remove them.
> since browser history is a primary vector for malware

Can you expand on this from a technical perspective?

> distinction between them doing it and you breaking into a system and doing it.

I think a more accurate comparison would be you being given access to a system to perform some work, but then accessing files and performing operations, such as exfiltrating that data, outside the scope of your work.
The credit rating agencies knowingly and fraudulently mislabelled the loans as "AAA" when they were in fact, junk:

https://en.wikipedia.org/wiki/Credit_rating_agencies_and_the...

[Edited to add] also perjury:

https://www.rollingstone.com/politics/politics-news/the-peop...
> As to preventing timing attacks you can add a delay to give a uniform response time.

You have to be very careful with how you implement the delay to prevent the timing signal from still propagating to the attacker.

https://blog.ircmaxell.com/2014/11/its-all-about-time.html#A...
There's a big difference between "be glad you aren't a peasant" and "be glad you have the luxury of not working for 5 months". One of those things is a luxury 99%+ (WAG) of folks in the US cannot afford.
By that logic anyone who gave out a loan should be thrown in jail. After all there was a time when charging interest of any kind was considered usury and was illegal. Once we decided that usury banking is legal, most of the rest can be whitewashed with enough handwaving.
I'm very pro weed, and as such have had a lot of conversations with non-smokers about its benefits. What I've come to realize is that a lot of more conservative people are really against any mind altering drug. Yes it's hypocritical that booze isn't classified as "mind altering" and is fully accepted.

If I'm totally honest with myself I have to appreciate where they are coming from to a degree. I in no way think that marijuana is bad and I think it's actually extremely beneficial in many ways, but it is, for lack of a better word: strong.

Getting drunk can make you act like an idiot and be life threatening but it doesn't really change how you think, it just sort of shuts down pieces of your brain. Weed in some sense changes who you are. I think this effect is what a lot of people are afraid of.

So in the end I don't think "older white men" are actually being racist (intentionally) but they are just conservatives who are really uncomfortable altering their state of consciousness. I don't agree with it, but I think it's often a good faith argument on their part.
Yes. It is pretty much useless for web servers as even the scale out from 1 vm container to 2 will require a cold start. In hindsight, this is kind of obvious as you don't expect them to keep a bunch of containers loaded with your dependencies ready to serve requests. They might offer something like that eventually, but at that point your setup is basically the same as ec2 servers loaded with your service in autoscaling groups so why not just use that?

Pretty sketchy marketing in my opinion.
Two weeks ago I ordered toilet paper. I got fake toilet paper. Not my normal angel soft. The fakes are a huge issue that they really need to deal with, but they can't do that without losing their "marketplace" status.
We shouldn't get any banking advice from anyone from the 1800's.
im not saying its practical, im saying its ideal.

the world standardized around http/smtp. I dont think a standardized restaurant-menu-trust-loyality-payment chain is impossible. Look how long it took email to take off (and then got replaced by facebook.)

Its much more likely for a yelp/foursquare to gobble up the market, but I'd prefer a decentralized protocol for distributing menus...

And to criticize your criticism, standard menu metadata + loyality + reviews is not a complicated process, its just not an angle thats really been attacked before. I dont know of a menu database that is intended to feed third party clients like yelp/foursquare/allmenus. All the menu hosts want to be the end user client. My idea is more about separating the database from the client, and sharing a database between a couple companies. For something like this to happen, all you would need is yelp and foursquare (tripadvisor, opentable, zagat, urbanspoon, zomato) to create a consortium and invite a couple other big players. Its not about the restaurants self organizing.
> avoiding federal taxes makes him smart?

I avoid taxes. I contribute to my IRA, donate to charities and deduct my home office space. What I don’t do is evade taxes by not declaring income.
Being that I dont trust CNN, do you have any other first hand sources, a video or a recording of this interview? Its my understanding that Ehrlichman never actually said this.
the increase in mortgage originations was shared across the whole distribution of borrowers, and that middle- and high-income borrowers made up the majority of originations even at the peak of the boom. Compared to prior years, middle- and high-income borrowers (not the poor), as well as those with medium and high credit scores, made up a much larger share of delinquencies in the crisis relative to earlier years.

http://www.nber.org/papers/w20848
Ray Dalio: Understanding “Big Debt” Crises
Why don't you try linking react with a large Sqlite, and later build a wrapper of your own, and then release it in HN next year as, pinappleDB?
Thanks for the clarification. I've re-read this headline a dozen times and it finally makes sense.

By removing the phrase "that hacked fliers" you're left with "Suspect code 'found'". Which is the core of the statement. But that doesn't give enough context so the reference to the fliers was added.

I also think they wanted to lead with "British Airways" so a bit of contortion was necessary.
It's so weird, supermarket always sold better placement to some product and it was never an issue. Amazon is clear in their doing too, is that the issue? You don't notice it thus it's alright?
Show HN: Leaked Internxt's X Cloud Pre-Beta
The dark patterns on that site are piled pretty high, but that is not my issue with it. My issue with Pinterest is that it has taken the Google image search results by storm, and often does not actually lead me to the source of the image. The effect that it has on Google image search is like if Wikipedia made you sign up to use it but then did not actually have anything in the article.
Does it though?

1) The day Amazon feel threatened they can become the cheapest in the market quickly again.

2) Given purchasing power scale and people like fast delivery there will only be a handful of companies that can complete with Amazon ever, so it seems unlikely there will be a 'started in the garage' business compete with them now the market is maturing.

3) With the extra profit Amazon are making vs a competitors they can develop and buy technologies or business to keep a moat around them for a long time.

I'm not saying they are irreplaceable. I do feel there is an inertia there that will be difficult to overcome combined with Amazons ability to change course given Bezos complete rule makes a fall vastly less likely than continued dominance over the short to medium term.
Not just SV, I've been all around the pacific coast, but also inland (Central Valley, San Bernadino, etc). You won't find a lot more than Denny's, KFC and McDonalds there anyway ;-)
How exactly did invading Iraq and Afghanistan, countries with 58 and 0 kilometers of coastline respectively, help keep international sea shipping safe?
That $1.5 billion goes to saving lives and curing people, the $900 million goes to ending lives illegally. We could funnel that $900 million into Medicare and help a whole lot more people.
Look, this is absurd. Yes, it's illegal but so what? Plenty of people have MMJ cards, have scanned their ID at a dispensary, or have applied for state cultivation licenses.

The idea that academia is somehow prevented from engaging in this field because it's federally illegal is not credible and it tarnishes the integrity of the field.
So is it fair to say its a React specific ORM, that automatically makes the mapped objects observable (an OORM, if you will)? Just trying to understand the level of abstraction that you're going for.
Hacker News is a site where someone corrects a slight error in a parent comment which then leads us down a bottomless rabbit hole that gets further and further away from the general point of the original post. Hacker News is a honeypot for people on the autism/aspergers spectrum. What is the color of chartreuse?
I can imagine it's a really shitty situation for e.g. smaller banks here in the US. Most of them don't have the resources to build their own custom back end services, so many outsource the tech. And then shit like Fiserv getting hacked the other week happens, and not only is Fiserv's reputation hurt but so is all their client's.

I'd love to "bank local", but when shit like that happens, the only way I'd feel safe with my finances is by going with the Bank of Americas/Fidelity's/etc. over Mom & Pop Credit Union.
So we need a service that provides better results for items that you can purchase on the internet?
Yeah the maternity leave situation is more structural than the extended family situation for sure. However I'd argue that the fact that people in the US tend to move farther for work stems from the same societal values that result in the lack of political will to enact mandatory paid parental leave.
This is an interesting form of DDoS. How does it compare to someone wearing thick rubber gloves and cutting the power lines?
That sounds really awesome.
And then at the end of the shelf there’s the actual Heineken, with the caveat that the grocery store doesn’t buy from just one authorized distributor, but rather any distributor can walk in the door and drop off a case of what they claim to be Heineken to sell on consignment.
Thanks, now I'm gonna spend 2 hours reading about geological epochs on Wikipedia.
I tried again from my workplace desktop computer. What I am getting is this →

"This site can’t provide a secure connection
namegine.com sent an invalid response.
Try running Windows Network Diagnostics.
ERR_SSL_PROTOCOL_ERROR"

Do you opine this has something to do with my firewall?
My public IP address is 123.201.232.114.

Thanks.
That is a great idea! Do you reach out to companies after adding them to the public list of shame letting them know, or do they eventually discover then are on it? I may have to implement this..
Parallelism in PostgreSQL 11 (slides)
"Culture fit" is a double-edged sword, and implies you have a strong handle on what your culture is in the first place: both the good and the bad.

A candidate who is conflict-adverse, for instance, would not be a "culture fit" in an organization where decisions are made in screaming matches.

The problems come when your culture is toxic, particularly for certain types of people. If older candidates wouldn't be successful or happy in your work-20-hours-a-day-know-it-all culture, that's a culture problem, not a dog-whistle for ageism.

Some interviewers use "culture fit" to explain a not-like-me discrimination against people with a different gender, background, age, race, etc. Those people are generally toxic—but also indicative of an organizational culture that tolerates those biases by employees who are external-facing representatives of that company.

As a candidate, if you're ever rejected as a "bad culture fit", you probably dodged a bullet. That's a negative reflection on the company, not on you.
You don't have to completely stop using Amazon if you dump Prime though. I still place occasional orders, but I just have to get to $25 for the standard free shipping. In my area, things take about 4 days without Prime - 2 extra "processing" days and 2 days to ship.
I think the main story here is the mismangnent of this funds
No one goes into this business to breakeven.

I'm very doubtful that a majority of these smaller funds survive very long but really no great way of knowing. Macro funds until this year have just been sucking. Let's say you're getting 1/15 on 132mm and returned 10% (10 is generous given how a lot of these funds have performed) for the year. That's 1.32mm management fee and 1.98mm in incentive for 3.3mm total. That's really not a lot of money to go around to get startup hedge fund talent.
I am surprised that $1.5 trillion does not look as big as I expected in the perspective of 1 year US federal budget https://us.wikibudgets.org/w/united-states-budget-2016
It’s also hard at this point to remember the sympathy that poured in from around the world. The US got a free pass to do nearly anything in the days following 9/11. Instead of doing something useful with that leverage, we betrayed that global support by doing something monumentally stupid and irrelevant, invading Iraq — made even more stupid by having no realistic plan for the aftermath.

All of which was probably according to plan (or even better than expected) as far as Bin Laden was concerned.
Calorie restriction has shown anti-aging benefits as well, does metformin mimic this by restricting glucose/calorie absorption? Does this mean you can have your cake and eat it too?
Welcome to capitalism. People are not in business to be nice, but to make money. Their behaviour is expected and the same as most private actors.
I think CBD will be the future. I love high CBD content things because I still get the, "good" feeling without the, "high" feeling.
There needs to better use of a stack of blocks than just moving them up and down.

How about lifting and dropping heavy lithium batteries instead?

Or lifting and dropping cars in a parking garage?

Or lifting and dropping self contained data centers?
Tried from Firefox this time. This is what I got →

"Secure Connection Failed

An error occurred during a connection to namegine.com. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem."

Same public IP address as below.

Thanks.
Here's a 14 story wood-based apartment building in Norway:

https://www.youtube.com/watch?v=e5XsqauBCX4

http://treetsameie.no/

There are many other wood-based buildings higher than that being planned. The key for most of them is the use of various hybrid wood-laminates.
At what level do we call shaming a bad thing?

When I have a bad experience at a business, I post a negative review on Yelp - sometimes with pictures to show how bad it is. What Troy is doing isn't fundamentally different.

>The security treadmill is hard for even the most modern tech companies to stay on. I think the infosec community could go a long way to helping itself by making easier to use tools, and writing canonical guides for common scenarios.

Many of the scenarios he points out are easy to fix and well documented (e.g. not using HTTPS, not storing passwords in plaintext). Although banks are better now, about 7-8 years ago, I often would say that a teenager creating a web site following the Django tutorial would create a more secure site than many financial institutions out there (you know, the kind that limited passwords to 8 characters, or only allowed numbers, and didn't salt their passwords).

If a teenager can find and follow docs to make secure sites, then I don't think it is unreasonable to expect better from people who are paid to do it. And it is reasonable to complain publicly when they don't. Some of these institutions have people's life savings.

If you walked into a bank and saw that they kept all your money behind a glass door with a single pickable lock, and that they don't request your ID when you make a withdrawal, would you complain about someone publicly shaming them?
Yeah, but that's not sensitive information.
Also a good point. Parking accounts for double digit percentages of land use in nearly all American cities. It's such a huge waste of space, and the cities would be denser, more walkable, and way more pleasant without it. More info here: https://usa.streetsblog.org/2018/07/12/american-cities-are-d...
Funnily enough when government funding for sex/sexuality research gets constrained - normally during a Republican tenure - researchers move to Canada
https://www.theglobeandmail.com/life/relationships/the-big-b...
Minimalistic Blog
Given that America has constantly been at some sort of state of war since WW2, the concept of Pax Americana (which apparently started after WW2, while the Americans were in a cold war with the Russians -- and various new conflicts each decade) is simply a rewrite of history based on modern imperialistic pro-American propaganda.

Arguing that "security and liberty" (of Americans I assume, not the rest of the world) is worth "bringing peace" (read: starting wars and overthrowing democratically elected leaders) to other countries is just silly. Many millions of people were killed in the middle east (and many of them were innocent civilians). How would you act if a foreign power (acting as though they were the bringers of civilisation to a group of savages) decide to kill millions of Americans? I doubt you would think that those invaders were particularly deserving of the moral high-ground.
Hopefully etc/password is a bad example? Security issues aside, I feel like reading files that are configuration in nature are best done "at runtime" not compile time. Can you imagine the code that loads a configuration file directly into the code and the ops team unable to reconfigure things? That would be the epitome of "well it worked in MY build".
Freedom of the press foundation does this for HTTPS for news sites: https://securethe.news/sites/

Though, imo, they should be sorted with the worst offenders on top.
>My mother spent two months without a functional credit or debit card because her identity was stolen and it took a marathon of paperwork and disputes.

She was lucky. I know someone for whom the process took over a year. Because of that he had to wait before he could buy a house - his mortgage wouldn't be approved until all the mess was cleared up.
Show HN: Django and VueJS course – Build an uptime and incident status page
Tech advances should make 4-day workweek a reality for the 21st century
Not necessarily; what matters is how peak-y the demand is. For example, my country's teachers portal gets orders of magnitude more requests during a couple of weeks of the year than the average (at the start of the school year). Going serverless for those processes might make sense.
A theory I've heard on this topic is that until recently, evolutionarily speaking, it was realistically possible to be the "best X" that you and your compatriots were aware of, in some field, for some X. The best musician, basket weaver, mechanic, farmer, carpenter, parent, what have you - because the maximum number of people you could realistically compare yourself to was probably in the four figure range, tops, and likely closer to the low hundreds for most of human history.

Now, with global awareness being exposed to the best of billions of people, it is not realistic to aspire to be the "best" of anything. I don't think we're close to understanding the full impact of the removal of this particular incentive.
https://harpers.org/archive/2016/04/legalize-it-all/
Embark on a 6-week Trip to the Silicon Valley of China
> what do we do now? ... We could unilaterally pull out our forces

Well, you don't have any power to actually decide any of those things. So, first you need to get that power. After that I'm sure you'll figure out what to do with all that war machine surveillance police state and how to turn it into something humane. But for now all the "we" talk is just giving in to and spreading government propaganda.
It's actually stating fairly sane. I'm suprise we haven't gotten any rage faces yet.
The cloud scales faster than your budget (an interview with Corey Quinn)
And some implementations in:

- C: https://nakkaya.com/2010/08/24/a-micro-manual-for-lisp-imple...

- Python: https://github.com/mario-goulart/not-the-whole-truth

- Javascript: https://kybernetikos.github.io/Javathcript/

- Swift: https://www.uraimo.com/2017/02/05/building-a-lisp-from-scrat...
It seems there is a whole class of supplements and drugs that are being researched for this very effect: Calorie restriction mimetics [1]

[1] https://en.wikipedia.org/wiki/Caloric_restriction_mimetic
We have from Google cloud functions because they are a joke (see cold start graph on OP link). Even during development it was horribly painful to have 10+ second call times on many many requests while testing (and the same in production). Even requests that are only a few minutes or seconds away from each other would cold start randomly.

I already had a centralised entry point for cloud functions (just a basic abstraction), but generally they are pretty much wrapped Express requests, in GCP at least, and AWS too I think so the experience should be similar between AWS and GCP.

Changing that to be actual pure Express functions and not use the cloud functions API was pretty easy and quick, and while I was there I refactored our entry points a bit to be easier to migrate in the future.

The only thing that took time was making a new deployment process (we moved to App Engine so it's still "kinda serverless"). Since cloud functions have their own deployment system, I had to write our own deployment scripts, management of environments and so on rather than relying on the one provided by firebase cloud functions. Not a lot of work really, and this is something you would need if you have your own seevers anyway.

Once you have this done, it's pretty easy to move your "cloud functions" to any scaling node server host, or even to another cloud FaaS provider.
Does anyone know how the post installation process for those applications looked like (on first start)? Did a window pop up asking to accept the EULA and were you able to decline or was the EULA hidden behind some menu entry and using the application was consider accepting it?

I'm asking because I haven't installed an app myself yet through the Mac AppStore which would explicitly ask me to accept any terms.
That exists but it's a different, not-mutually-exclusive thing. The Tidelift Subscription is not a donation tool or money-transfer mechanism, it's a product - produced in collaboration with interested upstream maintainers.
I've heard people are doing pretty well in Silicon Valley, maybe Silicon Valley should take in a bunch of refugees?
My experience has been the same, unsubscribed after many years. On top of that, I feel good knowing I’m not supporting a company with terrible working conditions.