skysight-inc/HackerNews huggingface dataset:
What sorts of issues come up in a on-call alarm? When they come up, do you work to mitigate the problem forever, so that this particular alarm never happens again?

I am having a hard time imagining scenarios that need developers to be oncall. Is it a matter of pushing bad code to production?
Is there any public information available about this?
I’ve dabbled enough with SymPy to recommend it. Jupyter + SymPy (+ the rest of SciPy) gets you a pretty long ways toward one of the M programs. Here’s a book: https://the-eye.eu/public/Books/HumbleBundle/doingmathwithpy...

Opinion: There’d be a lot more people interested in math if it were taught with greater emphasis on visualization, experimentation, and self-verification (i.e. via CAS/programming).

Speaking for myself, it vastly enhances the value of my “pen and paper” and “stare at book” math time (the old fashioned way—also valuable and necessary, but [for me] not sufficient, for deep understanding).
Google pays people, both in cash, and/or in compensatory time off. This is specifically called out in the SRE book [0].

They've noted that it's important to pay compensation, both to be fair to the employees, and as a closed-loop feedback mechanism to ensure the business prioritizes fixing pages. This concept of business feedback is also discussed in a chapter of the terrific Seeking SRE book, chapter "Against On-Call: A Polemic" [1].

> Compensation
Adequate compensation needs to be considered for out-of-hours support. Different organizations handle on-call compensation in different ways;

> Google offers time-off-in-lieu or straight cash compensation, capped at some proportion of overall salary.

> The compensation cap represents, in practice, a limit on the amount of on-call work that will be taken on by any individual.

> This compensation structure ensures incentivization to be involved in on-call duties as required by the team, but also promotes a balanced on-call work distribution and limits potential drawbacks of excessive on-call work, such as burnout or inadequate time for project work.

[0] https://landing.google.com/sre/sre-book/chapters/being-on-ca... (search Compensation)
[1] http://shop.oreilly.com/product/0636920063964.do
Your first link uses a few assumptions that are very good security practice but may confuse the unexperienced reader:

It assumes that the attacker has complete knowledge of the password generation method. This is good security practice and provides you with a worst case boundary. In reality, though, an attacker seldomly has that advantage. Before an attacker spends x hours/days/weeks to crack pure word-based passwords, they will spend time to crack "passw0rd". If you remove the advantage of password generation method knowledge, all numbers in this article are very different. The reader should know about that!

It assumes that whoever is storing the password may do so badly. It even states "assume the site stores our credentials in the weakest possible way". Which is a dangerous assumption since the weakest possible way would be plaintext and then the whole article would be moot. So, obviously we exclude plaintext. The article goes with simple, single md5 hashes instead. While some kind of worst case, it's pretty unrealistic nowadays that someone makes an effort not to store passwords in plaintext and then fails so miserably in googling how to do so. This worst case is probably chosen to have easier and more impressive cracking numbers. The reader should be aware of this.

It assumes that the attacker obtains the password database. Again, good security practice and a worst case scenario. But still not exactly 100% realistic. If you argue with this assumption, the reader should be aware of that.

In essence, this article proves that the "3 word method" is not secure enough when absolutely everyone uses this exact same method (with knowledge of the exact same words) with a service who incompetently stores passwords and got its password database stolen.

While that is true, the advice it gives "Don't use words in passwords. Ever." is just another example of great oversimplification that is harmful in the end.

Instead of bashing methods for being not secure enough (whatever that means), we should provide users with practical methods to come up with usable passwords that are reasonably secure for the service in question.
About VPN
(1) IPSec itself does not specify which algorithm to use, but only provides the framework. Users can choose any algorithm supported, and if the algorithm is cracked, it can be replaced at any time. The parameters used are as follows:

<1> hash function: MD5, SHA1;
<2> encryption algorithm: DES, 3DES, AES;
<3> encapsulation protocol: AH, ESP;
<4> encapsulation mode: transmission mode, tunnel mode;
<5> key validity period: 60s~86400s.

(2) hash function

Hash function, is used to verify data integrity (prevent data from being tampered with). Common algorithms are MD5 and SHA1.

The original file USES the hash function to calculate the hash value A. After the opposite side receives the file, it USES the same function to calculate the hash value B of the file. Compare the hash value A and B. If the hash value is the same, the file is not tampered with.

Features: hashed value length is fixed, MD5 is 128bit, SHA1 is 160bit.

Avalanche effect: if you change any of these characters, the resulting hash value will change dramatically.

Irreversibility: the hash value can only be calculated by the file, and the original file cannot be reversely obtained by the hash value.

Uniqueness: there are no two different files with the same hash value.

The existing problems of hash algorithm: it can only ensure that the data is not tampered with, the data source cannot be authenticated, and it is easy to be attacked by the intermediary.

HMAC (Keyed-hash Message Authentication Code) : Cryptographic hash information authentication code

not finished yet, daily update
From the perspective of now, getting rid of my Amigas turns out to have been one of my more short sighted decisions.

I have no nostalgia for any of the 8 bits I had or any other machines. I have tons for the Amiga and there's still so much they did first or better. I really should have left them in that cupboard, as I was so reluctant to retire them in the first place. It was more to clear the two cupboards full of software, manuals and addons. Oh well. :)

The future never arrived as instead of building on Amiga we built on PCs and Windows.

Edit: Amiga Super Hang On not in the games list? Shocking!

Anyone wanting some Dungeon Master nostalgia can get Legend of Grimrock on most platforms, which is a very nice re-implementation. https://en.wikipedia.org/wiki/Legend_of_Grimrock
The birth of specter. Very interesting article.
At my company, specifically in my team we do on call, and:

1 - it's one week length

2 - it's paid extra

3 - it's optional, but you're a bit of a bad mate if you don't participate

4 - we try to have at least 6 people on rotation to ensure a full month between on call

Because we do several changes to production per day, our coverage is around > 99% for all our services and libraries (my team is responsible for about 30 of them). We have near zero live incidents, and whenever it does happen the phone rings, it ends up being just some unpredictable spike in load that self heals without intervention.

Because on call is not painful (as it shouldn't be!) and we support each other no one has any problem being on call.
There still seem to be a couple of problems with BYD: http://www.thetransitwire.com/2018/05/22/problems-plague-byd... . A story on HN recently mentioned replacing the BYD buses with nonelectrical ones.
I think he means "things tend to either with follow conventions and use native widgets, or they do neither". Users can internalize that dichotomy, and recognize that as soon as they don't see native widgets they probably aren't getting platform conventions either.
I still fire up my trusty old Win2k VM from time to time. Fast, stable, simple, intuitive. Along with Delphi 7 it's incredible how productive we used to be some 15 years ago. Documentation was sooo good back then.
If you can choose whether or not to pay sales tax, why would anyone ever choose to?
I think I have some lasting trauma for the year I was on call.

I still have nightmares that I'm getting woken up into a hellish situation to fix code I've never seen at 3am. Or that I'm out on a date or having a beer or trying to enjoy my life when I get called.

I remember the constant state of anxiety just knowing I could be called. Couldn't even wind down watching a movie much less read a book. I quit when I realized I felt a sense of relief commuting to work the next morning because I wouldn't have to field an emergency by myself.

I also remember fantasizing about being a cafe barista or security guard that year. Waited way too long to get out.
Very cheap.
https://github.com/wfpaisa/plane-theme

It wasn't hard to find.
I would be more confident to share my DNA with NHS than a Silicon Valley startup.
I want to buy such a board, but I'm not sure which one to pick. Any recommendations?
But you have to pay that power bill for the other 12 hours the sun isn't shining.

Plus, drilling to install fiber-optic cables will be a huge expense. And, in order to collect enough sunlight to light the mine the area above the mine will still need to be blanketed with collectors. After all, you can't collect enough sunlight to feed 1m^2 of plants from a 1cm^2 area at the surface. Efficiency losses will actually require >1m^2 area at the surface to capture adequate light, so why not just avoid all the additional expense and put a greenhouse on the land above the mine?
I can not imagine what will happen in the gulf region if global demand for oil starts going down.
It seems like that type of photo is a requirement on some dating apps.
Mine (bothold one and the one I had bought now) has composite output. Maybe there were variants?
What sort of parties happen that frequently?
> The truth is that it's better for children if parents in a low-conflict marriage to stay together.

A low-conflict marriage where the conflict isn't resolved becomes a high-conflict marriage, inevitably.
The conference webpage is here: http://wotug.cs.unlv.edu/

A colleague of mine submitted a paper on Transputers on FPGAs last year: http://wotug.cs.unlv.edu/generate-program.php?id=46#paper381
HEALTH WORKERS HAVE SUCCUMBED TO EBOLA
Author here. The goal of Boden is very much that the applications should look and feel as if they were custom-coded for the specific platform. We also think that custom widgets often fall slightly short of the native feel, as other commenters have pointed out. While it is certainly possible to make them 100% consistent with other native apps on the platform, it is a lot of work to get all the details right. And not all frameworks manage to do that.

We wanted to try a different approach. Why not just use what the platform gives you and always get the right look & feel out of the box? That certainly creates its own challenges, like having to provide a good abstraction layer for the core application code. But you do not have to worry about look, feel, drawing performance, interactions with other OS features and the like. And when the OS changes something then the app is automatically up-to-date.
DevOps: Devs On Phone Support
You can't complain to Facebook about impostor account if you aren't registered already. And deleting you profile won't delete you shadow profile that FB collects on everyone, so it is kinda pointless action anyway.
Indicatif (cli progress bar lib in Rust)
> In his book Antifragile, Nassim Nicholas Taleb mentions how Roman engineers had to spend some time under the bridges they built – to ensure they did a good job.

This is a myth, and AFAICT, there is no proof of this being an occurrence in Roman society, at all.

https://www.reddit.com/r/AskHistorians/comments/13t9kn/did_t...

https://skeptics.stackexchange.com/questions/18558/were-roma...
> I have never seen a modern country that dares to host 9/11 terrorists, supports extremism ideologies, and openly fights countries that try to defeat terrorism.

Then maybe you should get glasses. If you give me a map of the middle east and I point at a random country the chance that they do all of these things (according to some people) would be almost 100%.
This article is about paywalls, which tend to generate income from subscriptions.
Applied science. He doesn't cover things in documentary style, but recreates quite a lot of interesting science that one would assume is beyond the level of garage science, and does an excellent job explaining all the concepts.
right?!?!
I found quora quite interested. But latetly seems like spammers kinda gamed the system. I same same people answering questions. Most of the answers and questions are probably fake / oversexualised. Stopped visting that site
DIY Acoustic Levitator
This is not sustainable, you will burn out in the long run and could take an extended period of time to recover. You are risking your health.

I suggest you look at the on-call chapters in the SRE book, SRE Workbook, and Seeking SRE.

The solution is primarily to include the development team in the on-call rotation (you build it - you run it). This can be very hard to do politically.
awesome, thank you! I'll look into this. I was certainly thinking about modularity as independent, separate training of the modules.
In fact, the video states this for all convex shapes.

I've been trying something similar for 2D, but there it doesn't quite seem to hold.

Consider a very thin rectangle of size 1 by epsilon. Then it has circumference 2 (ignoring the epsilon).
The shadow it casts at angle phi has size |sin phi|. Now, if we average |sin phi| from 0 to 180 degrees, (or 0 to 360 or 0 to 90) we get (2 / pi).

I haven't checked whether this average holds for things other than thin rectangles, but I'd imagine so. I then find it weird we get a trancendental number in 2D but an integer in 3D.
I'm not parent commenter, but other than the occasional misconfigured internal work LAN webpage, I've had zero to little problems with UBO.

Is there an example of a site that is unreadable after a default install of UBO for you? I'd be curious to check it out..
I use macOS as my daily driver. I've been using CentOS and Ubuntu Server to run my webservers for around twelve years now, which includes a top-1000 website in the US.

I used to manually compile things like Node.js and ripgrep from source to get up-to-date versions, but these days I just use Linuxbrew.
Limit the number of subscribers to 50K or so. Only let new ones in when old ones churn. Remove the ability to post images.
I wonder how long will take until they ban/remove this as well using DCMA
How does the design compare to the XMOS cores?
In US perhaps, elsewhere a job signifies significantly greater income stability.
Ask HN: Simple tool to schedule cloud resource scale up/down?
I'm looking for something which can allow setup/automation of cloud resource scaling schedules or rules. Ideally, it'd be cross-provider and allow something like:

- At 6am, if service tier of resource X is less than Y, increase it to Y

- From 8am-1pm, unless usage % of resource X is greater than 25%, decrease service tier to Z

- Override rule 2 if it's the weekend..

I guess, some system for evaluating and executing scaling rules, based on some criteria, scheduling, and priority.

I've done some digging and can't find such a thing. It's obviously possible with scripts and jobs, but I'd like the advantages of some kind of web UI. Anyone using (or built) anything like this?
This.

Enterprise IT processes are filled with these kind of word-docs filled with checkboxes, and for that, AWS's featureset excels.
There's an excess of width if you aren't a pro user, who knows how to take advantage of it. Linux has tiling WMs, Windows has basic tiling functionality + someone out there made a hackish tiling WM in AutoHotkey of all things[0]. But you're unlikely to discover this as a regular user, unless someone shows it to you.

--

[0] - https://github.com/fuhsjr00/bug.n
I agree with your point.

If I may, however, make a suggestion, consider using 'asocial' instead of 'anti-social'.
> Access to the specific document you presently want to edit (say through an OS-provided file select dialog or equivalent cli) is much different than unfettered access to all of your files.

This is one thing I like about Android. You can avoid requesting file permissions for your app by using native intents for file access. I think its the same for other stuff, like email. As much as I loathe Googles control over Android, I think this is a good thing.
On the contrary, I used to cycle often when I was around 10 or so, and then never cycled when I was older. Then, when I was 21, I needed to use a bike to travel around work, but it turned out for some reason I had completely forgotten how to ride and had to pick up the skill anew. It's still a mystery to me how I completely forgot the skill and had to relearn it.
Waking up a developer should be done as escalation.

If resolving an alert requires to "turn it off and on again" you don't need a developer for that.

Stress and lack of sleep reduces cognitive performance (what you pay for when hire a developer) and kills employee morale.

If you have 2 similar job offers for similar companies, one requires you to be on-call, the other one doesn't... which one would you pick?

If you are having a very bad on-call week and a recruiter reaches to you, you will be more likely to talk to them, or will be more likely to ask for a raise or just quit.

The "skin in the game" argument sucks. Developers are not solely responsible for software quality. Deadlines are often not set by developers.
I don’t think you are doing women any favors by introducing them to these people.
You say that like that's a bad thing.

Feature wise Word 2.0 is miles ahead of gdocs. In fact I'd rather use office 95 than the bloatware that came after it.
Tunnels have much better and cheaper climate control, easier access to water, cheaper land costs. It's not necessarily a case of one one single variable determining the viability of the whole idea especially when this is, as I said, _covered_ _in_ _the_ _article_.

No idea if this will ever come to fruition, but these people do seem to have done some homework and have prototypes up and running now.
For the people who replied already, do you listen to different music when not programming?

Asking because I listen to the same kind of music regardless of activity (kpop, if that matters).
I do find the idea of love locks possibly overloading bridges to the point of damage or collapse kind of awesome though.

As for the consequences of stacking rocks into formations, I thought this mystery was solved several thousand years ago with any variety of ancient pyramids?
I have a small card which fits over one of the chips of my A1200 and provides a VGA signal. Can't remember the name of the card offhand - haven't powered the A1200 up for about 3-4 years since the last time.
> Unfortunately, all Safari releases going forward (12 onwards) are removing APIs that allow uBlock Origin to do what it does.

This is extremely disappointing. There are "Apple-approved" blockers on the App Store but none is as efficient as uBlock Origin, they also lack transparency.
Yeah, so much this. I did most of my programming in asm in the mid 70s to early 80s. C wasn’t available back then on most 8-bit systems I used (Z-80, 6502, 6809, 1802, SC/MP). C pointers made complete sense to me once 16-bit microcomputers showed up.
Sueable open source
> If you have a Haskell background, I'm sure you're screaming to yourself "Lenses! Lenses!" I actually didn't know about lenses before I made Specter, but they are certainly very similar. I'm not on expert on Haskell, but what I do know is it explicitly distinguishes between navigators that go to one element (Lens) vs. zero or more (Traversal). I fail to see how that complication adds any sort of expressive or performance benefit, but perhaps a Haskeller out there can educate me.
That kind of sounds like fantasy for complex high throughput systems. As it was also mentioned in the article, the usual on-call response is a rollback to the last working version of the correct deployable. This is pretty easy to identify for someone in the team developing the service.
Deep Learning and the Future of Facial Recognition
>so why not just avoid all the additional expense and put a greenhouse on the land above the mine?

If only the article covered the advantages this approach has to offer over surface green houses..... oh, wait!

It's not even that I'm convinced their approach is viable, but how about at least critiquing their answers to your questions?
Dear 8bitsrule, YouTube has very good quality videos now, welcome to the future. You are more than welcome to not open the YouTube link as you are browsing in low bandwidth mode, but your problems are not ours.

Edit: typo.
How to Install VNC Server on Ubuntu 18.04 LTS
Yeah. I found only one thing Ribbon excels at, and it's not even in Office. It's in Explorer and some other applications, when used in tablet mode. Then, suddenly, Ribbon becomes a brilliant thing, reinforcing my view that Windows is the only sane, non-toy OS for tablets. But Office use is keyboard-heavy, so I don't understand why the Ribbon is there, or why it started there.
Not sure about this. Separating dev work like that is a risk to get architecture astronauts in low stress position with a bunch of peons suffering for their sins in the trenches. Concentration is not a good argument, bug fixing requires no less of that and is often compounded by time pressure.
> "&array" and "&array[0]" both refer to the same memory location, but they're of different types.

Indeed. And isn't this what makes the classic "countof" macro possible? The macro returns the number of elements in an array, calculating this by dividing the size of the array by the size of the first element:

#define countof( array ) ( sizeof(array) / sizeof((array)[0]) )
They live on the surface now
Graph Kit – Android library for plotting and editing graphs
Qatar is a relatively small oil producer. It is unlikely that they could affect the price of oil or create real economic distress for Saudi Arabia.
Google's search bar in search results page is now sticky and rounded
I carefully used the word “modern”. This excludes religious theocracies such as Iran and dictatorships like Syria, or failed states like the Hezbollah controlled Lebanon.

Qatar presents itself as a modern country that respects global order, when it is nothing but a terrorist nation that worked as the PR firm of Osama Bin Ladin.
WhatsApp Chief Writes to RBI for Approval of WhatsApp Pay
I am sure it could be made to work. Some kind of shroud designed to crumble in the right way, maybe start rotating itself partly. Not tons of metal. But of course, it would make the airframe a heavier and you'd pay a cost for all flights.
This is what MVPs are all about, surely? Amazon may have vast resources, but they are not infinite. Amazon strategy seems sound from a business perspective.
FYI: I've put together an Awesome Initial Coin Offerings (ICO) Truths page. Subtitled The Art of the Steal - The Scammers' Big Lies at https://github.com/openblockchains/awesome-ico-truths . Buyer beware! Cheers. Prost.
> This still is the right way to design GUIs for applications to which it is applicable, many people (me included) still follow it and I would warn against thinking of it as of obsolete.

I'm grateful for all those people, yourself included. But the problem is that most software is moving to the Web, and the browser is treated as blank canvas. Everyone reimplements their own UI to their aesthetic taste, with no regard for accessibility and interoperability. It's the other reason (besides security) that Flash was bad; just calling it "DOM" doesn't make it suck any less.
At the time? Of course. With modern hardware speeds and bandwidth, it ought to work just right. Maybe not the last of the lineup (Tezro), but it would get there. Just like it did with (less powerful) Amiga. Problem is that so much of the stuff was custom inside.