skysight-inc/HackerNews huggingface dataset:
The great thing about PDF, even the reason for its existence and adoption, is that a (valid) PDF file will look exactly the same — the same characters in the same fonts at exactly the same positions on every page — on any printer or display across the world, and across time. With HTML (what you propose) it is hard even to get something to look the same at different browser window widths, let alone different devices or different versions of browsers.

Sometimes that's what you want (and when the visual appearance is not important, it may make sense to not use PDF), but I definitely wouldn't want to see PDF “dead”.
An "automatic" update that would potentially cause the router to reboot and bring down the network would go over very poorly with customers, even if it happens at 3 AM.

A better solution would be automatically checking for updates, and then sending an e-mail notification to the address associated with the router's owner/sys admin.

I "registered" my router and email address with Netgear about a year ago and I was shocked a few months ago when they actually sent me an e-mail to let me know that a new firmware update was available for my router.
This is the tpu v2, and it was most certainly not released internally when the K80 was.
those are just off the top of my head, and I'm not an expert on 2FA either. If we're talking about alternative solutions to someone logging in as someone else, you still have to provide a "2FA" solution because "2-factor" is a description of the problem to be solved (the multi-factor authentication problem) - to prove who you are in high-security situations it's insufficient to just provide something you know i.e. a password, because someone else can learn that thing. Thus you must provide "something you have" ie. proving you possess your phone via 2FA apps, or "something you are" via biometrics a la faceID. There are alternative solutions to this like USB 2FA tokens or those little pin-pads that banks provide you that are already required by most banks in order for you to access your account. Other options are proving email ownership via access links like slack does, automated phone calls, probably some other venues. But the fundamental requirement to boost password security is to provide a non-knowledge-based proof of identity.
Is it just me or are they reinventing the plan9 vfs and it’s mount, bind and rfork calls?
There is a bit of sampling bias, given that we are looking for space objects from Earth, and so it easier to detect something that comes closer to Earth. Not sure how significant the bias is for an object of this size and speed, but I'm guessing that it is probably a relevant factor.
The final reveal was mind-numbingly bad.
Silicon Valley’s Saudi Arabia Problem
George Wilson – The Extended Functor Family (2016) [video]
As someone that frequently deals with large scale integration failures I greatly appreciate this site. Thanks syncsyncchalt!
I've uncapped MaxRequestWorkers while I wait for the Cloudflare queue, it should work now (I believe you were seeing an error related to TLS timeout).
If they thought their consumer users would just go out of their way to update their routers .... that's just not understanding how humans work.
Danny Hillis worked on the original Google knowledge graph?

https://underlay.mit.edu
Executing Product Experiments
In support of that point, from the article: "He also reveals that when he left the company, he declined an offere [sic] of $850,000,000 in unvested stock in exchange for signing a nondisclosure agreement that would have kept him from discussing any of this."
> That a bank who can't handle security compromises their customers user experience rather than their customers security is a good thing.

Why do you say that? It's only true if the cost of breach of security is actually taken by the customer. The alternative is that banks are required to rebate customers for fraud caused by poor bank security, which makes sense to me because it provides financial pressure for banks to beef up security while at the same time leaving in the flexibility to define how that security is improved. It's "here's the problem you need to solve" via financial pressure, not "here's the solution you need to implement" via mandate.
I'm going to be cynical again, but everyone is justifying every single action they perform as something morally applaudable nowadays.

example that I see every day: taking the train for convenience, but spinning it as "saving the planet"
> Stakeholders should be able to talk to devs

Not necessarily. The Product Owner should definitely be able to talk to devs, but not necessarily all stakeholders. What I suspect may have happened in this case, is that a dev talked to a stakeholder that was not the Product Owner, and instituted a change that was either not properly communicated to the team, or which was contrary to what other stakeholders or the Product Owner wanted.
less recent than a 1080 or 2080ti
I think I understand what you're saying, but that interpretation seems disconnected too...
Product Management Mental Models for Everyone
What's the beat-down?
Why do incoming spam SMS cost money in the US?
I'm originally from Europe, where strong consumer protection laws make it free to receive SMS.

Here in the US I activated a prepaid plan, which charges $0.20 per SMS, including incoming ones.

The problem is that the phone number I got must have been used in the past, because I receive tons of confirmation SMS and marketing spam, which all are charged against my plan.

How is this legal? I purchase $10.00 of credit and it gets spent on nothing I personally did, with no way for me to block it.

This looks really punitive to the people who cannot afford the $19.00 option for unlimited text!

Are there ways to deal with this situation? If not, how can I help the US society to change this practice?
...he’s the grey-hat they deserve, but not the one they need right now...
Both business and social settings, split pretty well between men and women though, probably 60/40. As I mentioned, they are typically a little older, which could definitely impact what they wear. But then again, I don't see their kids wearing expensive fashion brands either.
https://cloudpricingcalculator.appspot.com

- Iowa

- Regional: 73,728 GB

- Class A operations: 100 million

- Class B operations: 100 million

- Total Estimated Cost: USD 2,014.19 per 1 month

I'm mildly impressed. I was expecting an extra zero or something.

If I switch to "multi-regional" it goes up to $2,456.66/mo.

On "regional" with 250 million ops, it's $2,824.19/mo.

It's difficult (but of course ;P) to compare millions of ops per month to the kind of work you can do on a dedicated VPS.
Great illustration, I am going to share this with the rest of my team. One thing that I would find interesting is how x509 client certificates fit into the negotiation. I know this is optional so I don't know how it would fit into your flow easily though.
I don't think automatic updates would be as disruptive as you think.

And having the ability to disable them and apply updates manually, combined with some forewarning like you are talking about (an email that says your router will restart tomorrow at 3am unless you do it sooner), would go a really long way.
Biscuit Research OS in Go
I don't trust that they won't. Things outside the flow of text definitely can be moved around, and I feel there's value in page references being accurate.

And this lies more on a feel thing: I feel that when you are looking at images of the printed page (effectively), you are looking at something relatively legitimate, I know it's an exact copy of the actual book, and that conveys with it a much more solid sense to me than looking at what might as well be a text file someone sent you.

That being said, features like table of contents links, search, being able to copy/paste from the material are huge. I probably wouldn't mind if they figured out a way to let me look at a page as a PDF and then "zoom in" on reflowable text on my phone or something. But to me, the material being presented as intended for print is pretty key, otherwise you might as well just be on someone's website.
This is hilarious.

At one point I was writing test automation against their JIRA Cloud offering, because they didn't provide an analog to their authentication API in the JIRA on-prem version.

To get the tests to pass, I had to create a jiraRetryFixture and when that didn't work I wrote a preflight check which would just skip those tests if it wasn't available.
It is, and unfortunately it's also incredible how much of it simply doesn't work, or fails in obscure ways, without JavaScript. I use NoScript on my personal laptop, and I often have to add sites to the temporary-allow list several times a day.

(Please don't say "just don't use those sites, then." I'll use something else if there's an alternative, but there often isn't, and I'm not willing to cut myself off from a big chunk of the web on principle alone.)
You can reach out to me (my first name at blazingdb) if you want to talk about this.

In a nutshell users interact with blazing through the python API for the most part. If you have small result sets like those that normally go into a dashboard (very large data sets, small result sets normally), then you could write queries in python that get distributed to a cluster. The result sets are then available to be retrieved either via CUDA IPC locally or via TCP if you want to pull the result sets back to the user in Python. We will be incorporating faster interconnects using UCX in the following months for multi node clusters.
You should be able to block which apps have access to the network.

I know you can do it with Windows. On iOS, you can only block cellular network access with the exception of third party keyboards where by default network access is blocked. I wish I could block apps from having any network access. Can you block network access in a per process basis with Linux or the Mac?
Always strikes me as somewhat amusing - or not really - how someone like mr. Doctorow apparently feels a pressing need to publish under full live Google supervision, here in the guise of amp, fonts, and gstatic.
Work with entirely remote staff.. I'll take the pain of Slack over the pain of 5+ hours of voice conferencing days, anytime.

Where's the "We had Skype/GTM/Hangouts/call-free days" articles?
My personal theory is that Clarke's writing partners sedated and tied him inside a closet until the book was finished.

That's the only way to explain how awful some of his last books were.

Having said that, I liked Richter 10. Too bad the co-author died before they could write another one.
Maybe it was intended to be a booby trap for the Zentraedi?
Also to be clear as of right now the only thing that has to fit in memory are the inputs and the outputs to this system since these are being passed via CUDA IPC.
> And don't get me started about the hassles of obtaining signed certificates that are actually usable for client auth...

What sort of clients were you authenticating? The Web PKI needs to be trusted by random people from the whole world, but most mutually authenticated systems have a relatively small number of clients which are known to the server operator out-of-band. So probably the Web PKI is not the right choice. Instead you (the server operator or some neutral facilitator if it's a group of providers operating services for the same clients) should operate a CA for this purpose, not piggyback on the Web PKI.

One reason not to use the Web PKI if you aren't actually part of the public Internet is that we, to put it bluntly, don't give a shit about people who do that. Running a PKI is expensive (not just in dollar terms, it needs a bunch of smart, motivated people who are morally upright or it's worthless), and this one is ours, so it obeys our rules.

If you have your own PKI (or just one CA) you set the rules. Fifty year certificates for 1024-bit RSA? Why not. A current passport photograph baked into every certificate? Sure. Want the issuer to mint the keys and keep a copy? Do as you please. All those things are prohibited in the Web PKI.
> no upload or download limit.

Impressed. Makes for a nice Debian/Arch/etc mirror
BMCs like DRAC or iLO are invaluable when you have hundreds or thousands of fresh servers with no OS. The BMC lets you mount an OS or hypervisor ISO in a way reminiscent of DaemonTools et al., and update bios and other firmware from a shared network folder. I'm pretty sure there's even an API to develop against.
Devices at vulnerable routerOS version and not already compromised would not be vulnerable if the firewall was enabled. It's that simple. Not great that these boxes used to ship in this default state and I can _understand_ a home user unfamiliar with what they're dealing with but what reason is there for deploying infrastructure this way at an ISP or hospital or whatever org?
I'm not sure if you read the entire article, but two of the tips mentioned are talking to coworkers, and taking breaks like walking around. I think it would've been nice if you gave credit to the article for mentioning tips that have worked for you, instead of making it seem like the article didn't provide these tips. Some people might read your comment and think the article only discusses gamification.
Most two-way implementations are generally privately controlled. You can act as your own certification authority and sign both the client and server certificates for a private communication.

Totally curious, it sounds like you were going for a traditionally signed certificate approach. So you had clients that you didn't "own" -- normal Joe Public -- using your service? If so, that is definitely way outside the norm. If not, why didn't you just sign your own certs?
I'm on the fence about the message here.

PG announces Arc and receives flack for it. Then writes an article noting that he's always received this same flack for everything that he's done.

Sounds to me like the message is less about Arc or even the principles that he states but more about keeping your head down and working through unproductive feedback.
Isn't this essentially the same problem as securing container (ie docker) access to the host file system? Also similar if you just want to give every user their own process. Are docker's tools sufficient for this, for example?

If you aren't executing third party code, don't worry about it? And if you are; provide an api third parties must use that validates paths before r/w files? Disallow '..' './' '~/' etc?
Here's a relevant (IMO) documentary:

https://m.youtube.com/watch?v=DnPmg0R1M04
Cortana rumoured to be heading to Office division
So make banks liable for damages as a result of losses from security breaches. Presumably they already are. That solves the problem.
By paradox, do you mean something like reverting order of events in some inertial frames?
Spoon: Containerization Before It Was Cool, on Windows
Yah we are all solving different parts of this ENORMOUS puzzle. Our focus has always been on making reducing the pains of ETLing data into the GPUs from all of the crazy sources they can come from.
More specifically, he made FreeBase, which Google bought and then extended into the Knowledge Graph, before eventually shutting off the original, open/"free" database.

That being said, as the developer of the system that Google is built upon these days, if he's got a version 2, people really should be interested in that, as obviously his version 1 worked pretty well. And if anyone wants to strip the competitive advantage away from Google, supporting Underlay and it's place in the public domain would be extremely powerful.
Take the money and get criticised on HN for taking the money [1]. Don't take the money and get criticised by different people on HN for not taking the money [2].

It's a tough life being a tech billionaire.

[1] https://news.ycombinator.com/item?id=18173181
[2] https://news.ycombinator.com/item?id=18201177
Interesting, thanks. And I actually quite like the idea of living in a small cottage and using the lighthouse as a studio/workshop.
Compared to Amazon sure. It is tiny, merely 1% of amazon.
I don't see it. Must have been a glitch that is fixed now.
I think you're right, actually. The WhatsApp UI still claims it's end-to-end encrypted and has a key verification feature.
Liquid Cooling at Hyperscale: 40,000 servers immersed in coolant fluid
Stopped reading when I saw the name "Carl Guardino" and so should you. Guardino's lobbying has resulted in a litany of pointless and wasteful taxes and fees that have served to enrich his org while producing nothing of value.

Its time Bay Area residents understand that the YIMBY-Industrial Complex exists and is very effective (and not to be confused with legit and effective YIMBY efforts)...SVLG is at the forefront.

If you have lived in the Bay Area since the 90s you have probably voted for, and seen approved, literally dozens of transit and housing measures, propositions, and bond floats. Yet the area continues to show dismal progress in infrastructure....maybe its time to start asking where the money is going from the last half-dozen measures before voting for a new one. SVLG benefits from the fact that most residents in the area are relative newcomers so they don't realize most of the goodwill measures they are voting for have been floated and funded many times prior to their arrival.

Sure enough in the next election there are even more transit fees on the ballot. Has the money from the recently approved Measure B even been allocated yet?
“There are so many far easier ways to do the same job. It makes no sense—from a capability, cost, complexity, reliability, repudiability perspective—to do it as described in the article.”

Considering the US went to the trouble of wiring the North Atlantic for sound to catch Russian submarines during the cold war, and tapped undersea cables using divers and submarines, this is so implausible for a nation state? Large state actors specialize in activities for national defense that make "no sense—from a capability, cost, complexity, reliability, repudiability[sic] perspective".
I have the same concerns.

I'm especially suspicious of anything with seemingly unanimous support.
You'd still be better off by restructuring all the mass of the asteroid around your spaceship instead of building your ship inside the asteroid.
Neither.

I am more curious why do you dislike the word "toxic" being used to describe people?
> People narrowly voted to bankrupt their economy, that's for sure.

Source Required.
Thanks a lot for your feedback @hardwaresofton, I've just added a section in our README that includes a Paypal link for one-time donations.

https://github.com/PostgREST/postgrest#supporting-developmen...

Thank you for your support!
>Intended to update music copyright law for the digital era, H.R. 1551 (formally the “Orrin G. Hatch-Bob Goodlatte Music Modernization Act”) accomplishes three key things: making sure songwriters and artists receive royalties on songs recorded before 1972; allocating royalties for music producers; and updating licensing and royalty rules for streaming services to pay rights-holders in a more streamlined fashion, via a new, independent entity. Under the act, many music creators will have a more reliable way of collecting the money that they’re due.

https://www.rollingstone.com/music/music-news/trump-signs-mu...
The percentage of all taxes paid by the top 10% hasn’t really changed over the past century.

Despite have marginal rates >70%, very few people ever paid them.
What sorts of things do you typically use OMD for?
Any civilization capable of building an interstellar craft would certainly have mastered the ability to move a camera by then ;-)
Interactive Paper
I can't remember what ZFS' efficiency numbers are right now.

Isn't RAIDZ2 60%? That would mean (approx) 43.2TB usable.

Yes please!

Now, to generate $200/mo...

(Just kidding)
Has there ever been a major professional news service, in any medium, that wasn't at least partially ad-supported? Maintaining a stable of good reporters is expensive, consumers aren't willing to pay much (if anything) for news, and the only alternative is some kind of patronage. At least with ads it's theoretically possible to maintain editorial independence.
Saudi Arabia has invested in Masayoshi Son's (Softbank) Vision Fund and has just been reported to be increasing that investment, as mentioned in the article.

Considering that the fund holds 25% of ARM, among other things, it means that the Saudis are almost impossible to avoid in tech.
There's no money in printers. They haven't improved technologically in any meaningful way since the inception of Wi-Fi, and when buying a new printer, the ink that comes in the box is worth more than the printer itself. No matter how expensive of a printer you buy, it's going to break in just over 13 months anyways, $300 printers aren't more reliable than $30 printers.

My current recommendation is the Canon MG2500 series: They can scan, copy, and print, you can often get them for about $20-25, and they come with ink. And if they stop working, you can just toss them and get new ones. It may or may not be more economical to just buy a new printer every time you run out of ink.
If targeting works then why do I keep seeing ads for products that I've already purchased and have no intention of buying again any time soon?
Exactly.

How much has the US spent on the F-35? How much has China spent on making artificial islands? Yet engineering a chip and bribing/threatening a few factory workers is beyond the pale?
https://news.ycombinator.com/item?id=18201211

it mightve been invalid while he set up his cdn / reverse proxy?
So he wants Twitter to tell him every single link he's ever clicked on.

This seems like someone intent on finding something to complain about. An annoying effect of GDPR.
While you may be right, 14 and 28 years (with extension) are currently unrealistic goals due to international obligations [0]. However, I believe returning to the terms of the 1976 act (75 years or life plus 50 years) would be imminently achievable with good political maneuvering.

Thinking this was a hot-button issue on HN, I submitted a post advocating for a coordinated political effort a few weeks ago [1], but it didn't get any traction. However, seeing comments like this gives me hope.

[0] https://en.wikipedia.org/wiki/Berne_Convention
[1] https://news.ycombinator.com/item?id=18016752
My understanding is that she understands the business side extremely well, i.e. establishing and maintaining relationships with the big advertisers, figuring out what the most lucrative ads platform looks like in the early days, etc.

I agree she probably does not understand the technical side all that well, but that's not her job.
or the one they need but not the one they deserve :)
Where is the video? That's what I'm looking for
Your healthy paranoia reminds me of a classic talk on the matter, Ken Thompson's 1984 Turing Award speech "Reflections on Trusting Trust."

https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...
Cool I miss working in technical computing sigh

I recall when having a cluster of 17 supermini's was a really big thing :-) of course I monitored it using a dial up 110 baud portable print only terminal.

Don't miss the poor pay though
I have this functionality scripted for my mikrotik routers, and it emails me when it's updating.
Not quite true as I stated it. You can drive around all you want with that screen showing without ever pressing any buttons. Source: our '11 Leaf.

(Though I'll admit that that annoying screen was at least a partial inspiration for my original comment.)