skysight-inc/HackerNews huggingface dataset:
I read the title of the article as Joan Baez at least half a dozen times today. I really thought this was about her.
It seems to me that they clearly had some serious problems with their overall network architecture if a single bad card could bring everything down. If they'd invested more money into IT over the past years then they could've taken care of a lot of their technical debt proactively rather than reactively. Odds are decent they would've implemented bad packet filtering before the major outage instead of afterwards, as that seems like a plausible thing an IT/networking department would've gotten around to with more funding, and more and higher-skilled, higher-paid veteran staff who could pre-emptively identify and fix this issue through experience and testing.

Any time something really bad happens that could have been prevented, it's reasonable to ask why it wasn't prevented. This wasn't some black swan event, just a routine hardware failure that they didn't have defenses against.
I'm all for population control, however history and science are not on your side. Victory goes to those who procreate the most.

I don't like it either, but seems true nevertheless.

For all of our advances, in the grand scheme of things, we're still ruled the same way we were a thousand years ago: by numbers.
I've used this review last year to prep for 2018. Ended up being extremely useful for prepping and orienting the year ahead. Looking forward to using it this year again.
That Conficker spread widely and remained active for a long time could be attributed to the fact that it was relatively benign --- in contrast to ransomware, both that article and my memories of it agree that it did not destroy user data, which would've lead to a far more intense "immune response".
> There is a way to weed out the liars - you hire them and then when it does not work out you fire them.

In my experience, firing someone takes multiple months. Months in which they are mutating the codebase (with review, but it's a time sink that shouldn't exist for a decent senior), influencing other engineers, etc.

Passing on a good candidate is cheaper in the long run than hiring a bad candidate. Or said another way, false negatives are preferred over false positives.

> You would be astonished how little people lie on their CV.

This has not been my experience. From something as white-lieish as "I designed and implemented" vs. "I was a peer on the team that did it" to flat out fabrications. You learn alot by simply asking "what was your role on the project" and asking follow-ups to dig into their contributions.
> Maybe this should be fixed at the k8s level.

FWIW, it has been: RBAC allows you to strip -- or I guess pragmatically speaking, not assign -- rights at whatever level of granularity you have the patience to maintain. It is also bright enough to do that per Namespace, so going light on the ClusterRoleBindings and keeping things out of the "production-db" Namespace would likely go a long way toward addressing the risk you are describing
I wish more people on this site would refrain from chucking crap arguments against a wall hoping they’ll stick. It’s exhausting to have to constantly point out invalid arguments to people who can’t be bothered to take responsibility for their intellectual pollution.

> the doctrine that all people are equal and deserve equal rights and opportunities.

If we accept this definition, and the United States scores poorly, then it means that either:

* not all people are treated as equal
* or not all people have equal rights
* or not all people have equal opportunities

Could you please clarify how your comment is relevant as a response to a comment about egalitarianism?

Stated differently: if your comment is true, what is the implication?
The basic point of this article seems valid to me.

The point the author is trying to make is that the structure of the payoff function matters a lot. Specifically, you need it to be convex for a try-and-error (or random walk) process to become very rewarding.

For example, think about fuzzing C programs, which has been proven to be very productive in terms of software security. But why is it so productive? This is essentially because a bug in a C program can have a quite significant implication (e.g. remote code execution), thus its payoff function is extremely convex. If there was no such property, fuzzing just wouldn't be so much rewarding (This explains why fuzz tests are less used for programs written in memory-safe languages).

The author believes this idea of "convexity" can explain a broad range of phenomena in the human world. I'm not so sure about its applicability, though.
I am curious why this wasn't just an app. What's the point of having a physical button other than for aesthetic gratification? If you had an app, it'd be more than just one click, but it'd only be like three "clicks" or steps. You'd have to unlock your phone, open the app, and click a button. Three steps instead of one. Not sure if that warrants a physical button.

Edit: I get why pressing a physical button is therapeutic, but even an app could play some audio when you pressed the button. These people are pretty pissed off when they click these buttons, because nobody is happy when they're complaining about noise pollution. An app could even play a voice-acted "fuck you, <name of airport>" when you click the button in the app. There are about 15,000 airports in the US. You could pay 150 people $10 each to say "fuck you <airport_i>" in an angry, cathartic voice. Each person would only have to say 100 lines.
But... the existence proof is also Windows and Android and the massive market share and staggering amount of innovation that's happened on those platforms.

The massive market share is because of cheap phones. The average selling price of an Android phone is a 3rd of an iPhone.

And where is this “massive innovation” that is leading to profit either by app makers making apps that can only be made on Android or by device makers? As the old saying goes - “if they are so smart, why aren’t they rich?” The whole Android ecosystem is a race to the unprofitable bottom.

The same can be said about Windows PC makers - thin margins and low profits. Not exactly what I would consider a “success”.

There was a period of time where you couldn't have custom keyboards on iOS. There was a period of time where 3rd party apps on iOS couldn't even multitask.

And when Apple did it, it did it more securely. You can’t just press a confirmation button, the user has to be purposeful and go into settings, the keyboard runs out of process, and even then by default the keyboard doesn’t have network access. The user has to go out of their way to go back into settings to give the keyboard network access and they get a huge warning. Also, when you enter a password, it changes back to the system keyboard.

As far as multitasking, again Apple was more thoughtful and limited multitasking in iOS 4 to not allow a third party app to drain the battery. Even now that they have opened it up more, the user can still granularly control what apps are allowed to run in the background.

There is huge difference between the thoughtfulness of how Apple implements features and how Google implements features.
I like your second map. People in north Texas tend to be really damn conservative, but value independence enough that to make them more liberal you only have to suggest group think and that they ought be more conservative.
burning sulfur on a chunk of copper will also make you a memristor. interesting effect...
Colleges have amped up their marketing budget to increase the top of the funnel as well.
Is there any way to get real-time voice connections over the modern internet?

Is it just a matter of setting up VOIP and then mercilessly debugging latency issues on both ends?

Is FaceTime or any other commercial solution close to zero latency?
See RHEL and Debian sections: https://thehftguy.com/2017/02/23/docker-in-production-an-upd...

The filesystem drivers are buggy as fuck. You would experience kernel panics on Debian Jessie (overlayFS), or containers + docker daemon hanging on CentOS 6 (devicemapper). The fix in both cases is a reboot.

You might not notice it if you barely used docker, but it can be very outstanding at scale. I've been consulting briefly at a major web company that was deploying their web services to 5-20 nodes, daily. On every service deployment there would be up to 3 nodes dying.
I use mastodon and like it. Other than HN (which I also count as a "social platform"), it's the only social platform I use. It is also decentralized. However, I have not found that it works particularly well as a decentralized social platform. 100% of the people I follow and the people who follow me are on the mastodon instance I'm on. I've actually made efforts to branch out, but I find it impossible. The network effect means that the whole of the external feed is full of stuff I'm completely uninterested in and there are no tools (that I know of) to whittle it down. For me this is a significant hurdle that stands in the way of them realizing their goals.
Also from the authors: Jerry and David's Guide to the World Wide Web[1]

[1] https://en.wikipedia.org/wiki/Yahoo!_Directory
Wikibook-Bot – Automatic Generation of a Wikipedia Book
> There's a whole lot of conspiracy speculation in there, especially the idea of "SPLC's anti-conservative purge".

https://www.nationalreview.com/news/maajid-nawaz-splc-apolog...

SPLC Apologizes, Pays Settlement to Islamic Reformer It Wrongly Labeled ‘Anti-Muslim Extremist’

The Southern Poverty Law Center has reached a settlement with liberal Islamic reformer Maajid Nawaz and his organization, the Quilliam Foundation, for wrongly including them on its now-defunct list of “anti-Muslim extremists.”

The SPLC announced Monday that it has agreed to pay Nawaz and Quilliam $3.375 million “to fund their work to fight anti-Muslim bigotry and extremism.” The settlement was the result of a lawsuit Nawaz filed in April over his inclusion on the SPLC’s “Field Guide to Anti-Muslim Extremists.”

https://m.huffpost.com/us/entry/us_6646994?ec_carp=612494826...

Republican presidential hopeful Ben Carson has been added to the Southern Poverty Law Center‘s (SPLC) list of anti-lesbian, gay, bisexual and transgender extremists.

https://m.washingtontimes.com/news/2017/jun/29/guidestar-rem...

Gunmen have twice targeted conservatives specifically cited by the SPLC for hate: Republican Rep. Steve Scalise, who was shot June 14 by a fan of the SPLC Facebook page, and the Family Research Council, whose security guard was wounded in 2012 by a man who said he found the FRC on the SPLC’s list of “anti-gay groups.”

As far as conservative organizations are concerned, being labeled a “hate group” by the Southern Poverty Law Center isn’t just annoying — it’s dangerous.
Most of all the stuff in the fractal of bad design is still there, which is mostly caused by PHP 7.2 still being more or less compatible with PHP 4, which is basically the strength of PHP.

There’s better solutions to almost all of those issues now though.
Although I’m a product person (CPO) I’ve hired (alongside a CTO) maybe 100+ engineers in my time and I’m hoping my perspective is useful/helpful.

The process that my CTO and I have found works best is as follows;

A 20min phone interview (to screen for BS’ers).

A technical test that’s based on the sort of problems they will be solving in their job. How would you do X in language Y, no boiler plate code, and it doesn’t have to be perfect. (So no fizz buzz, conways game of life etc.)
We also stipulate to spend no more than 2 hours on it, and if their successful they get that time back. We even offer a discount (on the thing we sell) to unsuccessful people who don’t make it.
The test serves as not only a good high level demonstration of ones skils but, more importantly, gives us all something to talk around. It also shows us how they approach key things like testing, deployment, maintainability etc etc.

Then there is a 2 hours face to face interview. Ahead of this the test is peer reviewed by the engineering team (or part of it)
The interview is made up of one one hour technical section with the CTO/Senior, and one with a designer/product manager. A joint decision is made.

Then, if they are successful, we have a probation period where we (the candidate and us) work out if it’s all going as we’d hoped. If not, we part ways.
You most likely wouldn’t marry someone before a first date. A job is the same. You both need time to see if you like each other and your profile pics match real life.

It’s not perfect, but no system is. Sure we’ve hired a few people we’ve had to let go, but for the most part it’s a great system. We’ve managed to hire not just great engineers but also build a team and culture that fits and works.

Hiring is time consuming, hard and at times emotional. There is no shortcut.

I’ve interviewed and worked at big tech companies and they all think there is some secret sauce, a magic code to hiring.
That is, if you ask super hard questions only the “best” make it through - utter tosh.
Some of the most amazing engineers I’ve worked with would fail these type of stupid questions (for a while load of reasons) but quietly write amazing code.

Also, and more importantly imo, to be an amazing engineer you need to be great (equally) at teamwork and communication, not just be super book smart.

I read a while back (or imagined it?) that MSFT only hired people with Msc’s/PHd’s and that it created a probelem where there wasn’t any intellectual diversity.
These tests cause this too. You get cookie cutter people who are smart but often can’t work in teams and can’t communicate well.
I wonder if it's possible to create an app that creates a local VPN that routes through the other VPNs.
In practice, I’ve never seen filtered content change to ip addresses or rotating dns names. Do you know of an example?
A lot of people will write whatever makes them sound good on their resumes, so we have to ask questions about minutiae to make sure candidates aren’t lying.

It sucks, but this is what happens when the job you’re interviewing for has no license or certification requirements (but pays six figures).
Remote Web Development and UI/UX Design Services. At Affordable Rates
And let's not forget that Apple premium leaving you with little more left to spend.
To me serverless is inverting the traditional client-server model of the web. Provided the right application code the user doesn't need the server. Conversely the server needs the user primarily for business justifications. If there is ever an opportunity for disruption this is certainly it (if done correctly).
Oh man, those still hold up too. “In principle yes, but unfortunately nobody here has the education to be sure.”
From shifty security practices to binaries in the git repo, nothing about this looks serious.
I'm also running a 5+ year old Time Capsule, extended by an Airport Extreme that was given to me. It covers our house just fine, and even though there are newer technologies, I don't think it would make much of a difference since we only have 18 Mbps service. The TC has started conking out a couple times a week, but I don't know when I'll actually replace it. Having a wireless backup is handy, but unfortunately my Airport Extreme isn't new enough to support this functionality (only the 2013 model does). For now, I'll put up with moderately frequent rebootings to make sure that my machine is always backed up.
Houstonite here that works in the energy industry. Im not sure you are talking to the right people. Im not anti fossil fuels, but Im not really "pro" fossil fuels either. If you look at the oil and gas business, there really just isn't any viable alternatives available on a large scale at this moment. I would echo some other comments in that Texas has a lot of solar and wind farms. My father in law has a ranch out in west Texas and every surrounding property has wind or solar generation on it. I am encouraged by this, and while I don't really like looking out at the landscape to see a bunch of windmills, I think it is important to try and reduce our fossil fuel use. The fact of the matter though is that until we give up plastic, and figure out how to store electricity, we need nat gas or nuclear for electricity. Ive read conflicting data about the worlds lithium supply, but it may or may not be able to replace crude for transportation. Electric planes still seem a decade off or more. If crude went away tomorrow, I would still work in the energy industry so I don't care if that were to happen. I can say that I have been encouraged by some of the internal projects some "big oil" companies are taking on. I wish it could be a case of just stop using oil. Life as we know it would cease if we did that.
Who's to say that it's technical debt? Maybe they liked the way that their management network is designed? It's only debt if you realize it's bad and ignore it.

To be perfectly honest, I don't know what's the best choice for running a management out-of-band network for a network provider of this size. Do you?
No, I was writing the regex parsing code. The regex was one of the inputs.
> It's only fraud if they misrepresented the fact that it didn't yet exist, which seems very unlikely.

I don't know the details of the situation but fraud happens all the time as well and without having more information, I wouldn't discount it as a possibility.
For sure, you’re totally right that non-profits don’t generally need to give away their money.

I tried to touch on this idea in the “Case for Charity: A Charity Case” section, but my approach is to view it idealistically / as things should or might be.

And in a hypothetical world where Colleges charge double-digit fractions of a family’s net worth, while generating as much investment profit as our best companies and hedge funds, but where 0% of students received any “aid”......

.....and the institution was still allowed to remain a non-profit and have returns tax-sheltered....

....I can’t imagine that such a state of affairs would be allowed to continue.

Which organizations are allowed to be considered 501(c)(3) and on what basis and what privileges that affords them is a matter that is hypothetically at the prerogative of Congress.

I know trust in Congress/the political process is pretty damn low these days.

But my point with the “best play it safe” comment was basically...if I were colleges, I wouldn’t roll the dice.
See also the textfiles.com virus archive: http://textfiles.com/virus/

If your browser uses the Google Safe Browsing blacklist, you may not be able to access that site, ironically because of the very viruses intentionally hosted there, despite the fact that they are decades old.
I've been attempting to do this by weening myself off onto Linux dual booting so I can get more things done. Unfortunately I find so many issues with UI/UX that I just get tired of looking at it and fiddling with countless distributions. I never considered a Mac for the same purpose.

The most productive I've ever been was when I had a junk HP laptop with only Arch and no internet at home.
On the contrary, CRA's docs specifically recommend it for production use:

> No Configuration Required: You don't need to configure anything. A reasonably good configuration of both development and production builds is handled for you so you can focus on writing code.

Nowhere in the docs do I see phrases like "don't use this in production".

As for the math analogy: I'd say the difference is that many calc concepts do require understanding of algebra to grasp and use, whereas the only thing about React that _sorta_ implies knowledge of Babel is the JSX transform, which isn't a hard requirement to use React but is certainly the common preferred approach.

Again, I'm not at all saying that people _shouldn't_ learn how to set up build tool configs. I agree that's valuable knowledge to have. I'm just saying it shouldn't be a hard blocker for using React, and that React tutorials shouldn't have to spend half their time teaching unrelated build tools instead of React itself.
Maybe the plan was to use fiber strictly for voice, but that feels odd to me.

If you've seen the eye-watering cost of 1600 pair copper bearers, not to mention the sheer time taken to joint it, you'd see why the telcos were keen on fibre for voice.
Ask HN: Features you would like to be added to your fav programming language?
That's exactly how it works for all new (from C99 onward) keywords.

The actual keywords are defined with a leading underscore and a capital letter. The standard reserves all such identifiers for implementation, and so no valid conforming program should contain any such.

Thus, you get keywords like _Bool and _Complex. And then, to make them look nice, there are headers like <stdbool.h> which basically just do #define bool _Bool etc.
https://en.wikipedia.org/wiki/AP1000#Chinese_CAP1400_design_...
I don't know where you are, but people come to America by the millions traveling thousands of miles on foot. Then they spread all over the country.
The Worst Art About to Enter the Public Domain, According to Critics from 1923
How did that work out for HeartBleed bug that was in open source code for over two years?

Even worse, this 11 year old bug in the Linux kernel?

https://www.theregister.co.uk/2017/02/23/linux_kernel_gets_p...
Resource Optimization of PDF Documents and Enhanced Working with PDF Form Fields
Can you share your diet and exercise routine please? I do have the same problem.
One could also argue that it's not just a problem of act, but also method. If you do not fit in the "mainstream" way to act, even if you reach the goal, you're gonna provoke the ire of the "righteous" ones. Health wise, if you lose weight going, say, on a full carnivore diet, you're still gonna have specist and environmentalist on your back.
Authoritarianism is a wolf deciding what is good for a group of lambs.

As flawed as it is, give me democracy.
Foreigner here ... can confirm this. The application process to US universities has gotten much better compared to 20 years ago. Back in the day, we needed to pay application fees+international postage. Now, the second part has gone away. The first part, surprisingly, has not gone up by much.
Of course it’s still rare. There’s only one Harvard, and only so many students they accept.

But if everyone graduates and gets a honors degree, the only thing that degree means is that you were able to get in (either through skill or money).

I’m sure it still has value. But it places all the value at the entrance and selection process instead of the teaching.
I am yet another, visibly old (57), former paper (one) millionaire. I like sailing, climbing, biking, skiing, snowboarding, etc., but I have zero interest in retiring and pursuing any of these activities full time. It would become too boring. I'm self employed and work on cutting edge R&D projects I'm passionate about. I really don't care what someone's definition of success and its timetable is, neither should you.
> You DID look at the CV before bringing the candidate in, didn’t you?

I would like to speak to this after interviewing at a few places recently, including Google. I don’t think a single interviewer looked at my resume. I’ve developed a sizable open source project that is used by real people for over a decade. If the company really wanted to know if I could write code they could just go and look at it. Instead they ask puzzle questions that I have no interest in and end up failing. These companies expect the candidate to spend weeks preparing for their hoop jumping, but can’t be bothered to actually read the CV. Multiple people didn’t seem to realize where I lived even when my address was at the top of the paper.
Quebec issue is really a NIMBY syndrome, they have no problem using gas/oil, but they have no problem 1) using Alberta's oil, and 2) getting boatload of (dirty) money from the equalization policy.