skysight-inc/HackerNews huggingface dataset:
Node suffers similar problems, although I would describe them differently to the author.

Essentially:

1. All Node's async IO is lumped together into the same threadpool.

2. There is no distinction between the nature of each async IO task.

3. Async CPU tasks (fs.stat hitting the fs cache, async multi-core crypto, async native addons) complete orders of magnitude faster than async disk tasks (SSD or HDD), and these can be orders of magnitude faster than async network tasks (dns requests to a broken dns server).

4. There are three basic async performance profiles, fast (CPU), slow (disk), very slow (dns), but Node has no concept of this.

5. This leads to the Convoy effect. Imagine what happens when you race trucks, cars, and F1... all on the same race track.

6. The threadpool has a default size of only 4 threads, on the assumption that this reflects the typical number of CPU cores (and reduces context switches).

7. 4 threads is a bad default because it leads to surprising behavior (4 slow dns requests to untrusted servers are enough to DoS the process).

8. 4 threads is a bad default because libuv's memory cost of 128 threads is cheap.

9. 4 threads is a bad default because it prevents the CPU scheduler from running async CPU tasks while slow disk and slower DNS tasks are running. Concurrent CPU tasks should rather be limited to the number of cores available, while concurrent disk and DNS tasks should be given more than the number of cores available (context switches are better amortized for these).

10. Because everything is conflated, hard concurrency limits can't be enforced on fast, slow or slower tasks. It's all or nothing.

There are efforts underway to support multiple threadpools in Node (a threadpool for fast tasks sized to the number of cores, a threadpool for slow tasks sized larger, and a threadpool for slower tasks also sized larger). The goal is to get to the point where we can have separate race tracks in Node, with F1, cars and trucks on separate race tracks, controlled and raced to their full potential:

https://github.com/libuv/libuv/pull/1726
I have a Kindle. I read mostly hard science fiction and popular science. However, Amazon’s recommendation thing always shows me women’s romance novels, Danish crime and period dramas.
We wrote about this a while a ago on the Prisma blog: https://www.prisma.io/blog/top-5-reasons-to-use-graphql-b60c...
> the media totally failed (...)

This is the one part that doesn't surprise me in the least!
You can easily see this effect on Highways (in Europe where trees are planted just at the edge of the road). The trees there are the first ones that turn green (and get greener much faster) while the trees in the farmland are still without leaves.
I wouldn’t normally just post a link to an HN search, but I happen to have just searched HN for HyperCard... and well it’s definitely a favorite of HN:

https://hn.algolia.com/?query=hypercard&sort=byPopularity&pr...

(I had missed these previous discussions and I’m a fairly regular HN reader.)
All metaphors and analogies break down. No need to get pedantic about it.
The more technical term for this is "fatigue damage". I read years ago that the fatigue damage inflicted by a truck loaded to the legal weight limit (and it's often exceeded) is 9,000 times that of a car.

The damage done by cars is usually from snow tires.
This can exist, for example the Islington Academy in North London.

The exit is into the shopping centre, so noise and chatter from people leaving isn't a big problem.

https://en.wikipedia.org/wiki/O2_Academy_Islington
And having it clog your supply lines, unrequested and unwanted, at the expense of needed materiel.
Back then, my definition was „Java collections with an API“, and to me it still fits the bill nicely. You basically have some solid computer science primitives to build whatever you want on top, only limited by memory size (which is enough for 90% of use cases)
For companies that need to meet regulations compliance goals do indeed trump fixing real security issues. Companies can go out of business or lose big clients if they don't get PCI certification or whatever. The executive in charge of meeting compliance goals has a very clear pass/fail - the company is certified or it isn't. The policies are bizarre because they are driven by auditing firms who are incentivized to make compliance a lot of work, but attainable. A lot of work so they can bill a lot of hours. Attainable because nobody will hire them if they don't provide certification in the end. Effectiveness of the policies is not a factor. It is an entire universe of perverse incentives. The engineers toiling away to meet the goals know it, but there's nothing they can do.
If you need to distribute containers on a handful of nodes, kubernetes is great (and far better than Docker swarm imho). However, most small businesses probably don't need to have a microservice setup and can simply deploy a simple monolith while they focus on getting their business off the ground.
Let’s be accurate: left-wing Americans call him a fascist. But to be fair to Bolsonaro, the other guy was worse.
A user linked in this thread the shop https://pi-hole.net/shop/
This is something I have pondered for the Bitbake build system. It compiles a Linux "distribution" for embedded systems and uses a lot of CPU, RAM, and I/O. Often one is starving the other. I use a spinning disk for build dirs currently because they use a lot of space. Even with an SSD there is room for better scheduling.
I think the main problem comes when you already bought them...

I mean, I understand Amazon shows me a washing machine while I'm searching for one and I clicked on several without buying, but not when I already bought one! It's not something I would buy every other week...
It's good to hear another perspective...

Just out of technical curiosity, does your dataset contain PII or just UUIDs and location data?

If no PII, how to buyers of the data join it to their own datasets?
Thanks! I like your work on it. I have several ideas on how to generally improve the CSP development that I want to implement, and needed a good infrastructure for doing it:
- CSP optimizations, like removing redundant fields (like a minifier)
- CSP parsing
- CSP security warnings or rating (like for unsafe eval)
- CSP Presets, might be general presets, or extendable presets for various tools, like Google Analytics for example
- CSP deprecations and level supports

So far, I've created this tool to help me with it's usage (See https://github.com/pgilad/www.giladpeleg.com/blob/master/scr...), but the best feature is by far using Typescript (I considered using Java) for typed directives and sources.
Ironically, use of Uber and Lyft decrease the need for parking.
Thank you that was a great example. So from what I understand, Redis shouldn't be used unless there's a scaling issue?

Also, where does Redis sit (my guess is between request & database)?
Not trying to be snarky, just a sincere question - why would you use kubernetes for something like IoT?
It might not be as bad as you think:

https://www.i-programmer.info/news/99-professional/6263-code...
Having no threads is exactly what makes Redis so convenient in deploying it to clusters: you have a node, and the node is a single process. It's like a building block.

Also, Redis source code is so much cleaner than memcached!
Do you feel side effects from over-stimulus of the brain? From my experience with VR, it seems like an hour is about all I can handle before my eyes start hurting. Whereas with AR/MR, I feel like the lack of visual input is better for nausea and strain.
I think maybe eventually with cheaper ARM CPUs.
> it sounds like a large chunk of this may be driven by unsustainable use of farm land

With what basis are you qualifying this assumption?
But SuperSpeed was 5Gbps. Then it was SuperSpeed+.

This was the nice aspect of Firewire - once 1394B was out - everyone referred to them as Firewire 400 and Firewire 800. No ambiguity.

Heck even Thunderbolt does this better - 1 and 2 are interchangeable device/cable-wise, and just support higher speeds, but it's just a new 'version' and it just doubles the bandwidth.

With USB you have to read all the fine print to make sure you get what you want/need.
How cool that would have been. Would love to hear about any of the class gems, insight or otherwise. What year did you attend?
Oooh Musk promised something. That will surely happen, then.
Like all logic chips today, with a standalone programmer. You make program on your desk computer then send it to chip. Electronic-mechanical converter would setup your device.

Without computer you could do it old-way with a panel of switchable bits and clock signal. You enter required bits with user-switchable levers, then switch clock lever up and down, then enter another machine-word. Or make your program on punch cards.
The money has never indicated it cares about global warming or sea level rise. No rich people are looking to liquidate their beachfront New York, Florida, or California property, and they're certainly not buying up Alaskan beaches speculating on the next Greenland farming bonanza. Startup idea: global warming REIT.
Oh, good. I was actually looking for that right now. Got derailed looking up something on Wikipedia.
those improvements are leaving a lot of population behind, low memory machines and slow internet connections are still there and old technologies are helping keeping people connected
Version 1 would break even after a very light drop; the second version I dropped many times and on much worse surfaces and it held together. It still is fine years later. Not sure about this monster ofcourse; I'm talking about 'only' a 10.000 mah phone.
> For example: Exxon mobil profits in 2017 were 19.7 billion. Fukushima cleanup costs exceed 180 billion.

So you could cleanup one of the worst "spills" in history with a mere 10 years of a single company's profits?

That sounds perfectly OK.
This seems relevant for online retailers, although using a competing giants technology doesn't sound like it would be in their interest?
Six not so obvious things about Elasticsearch
Necessary, no. But with the hardware almost free, a 3 x Raspberry Pi cluster, switch, access pointer, and a small UPS would be a few $100 which allows for some interesting possibilities.

Pretty much any business will want inventory tracking, tracking staff hours, monitoring cameras, sensors for detecting flooding/doors left open/freezers dying, running point of sales terminals, keeping the supply chain running smoothly, handling customer loyalty cards, handling returns, etc.

An on site cluster can help with much of that, even if there's a hardware failure or the network is out.

Question is how will these business find the apps they need that run turn key on some small k8s cluster?
Would it work on Android? That would be interesting.
Came here to say this. I've been an Amazon customer for a very long time (2003). I don't think I have ever bought anything from one of their recommendations, that are, as you say, only based on your most recent purchases and that assume, for some reason, that you need another version of what you just bought.

If I just bought a big pack of batteries I won't be needing batteries for a long time; and they should know this because they know that I buy batteries every 18 months or so.

Also, I don't have a dog, I have never bought anything pet related on Amazon (or any other website for that matter) and yet they keep suggesting pet food.

Amazon recommendation engine is abysmally bad. Picking a random item from my orders history would be just as good and so much simpler to implement.
If the US is worried about China and Russia it could:

* stop making China rich. All the stuff they're building is built with US money.

* vote for a president that isn't more friendly towars the US's traditional adversary Russia than towards European allies.

Military hardware is useless if the politicians continue to make strategic blunders.
Partially because people don't want it to be, too. Irish people have an obsession with land, and see any dwelling that isn't at least a semidetached house with a back garden as a "temporary space" for students and unmarried young couples.
We just don't like apartments.
ACME clients should write the private key and certificate to a temporary file, then move it to the final destination so that the change is atomic.
> Having PFS increases security for your end users.

The context of ETS/eTLS is that you yourself are the end user.

> The performance of TLS on today's hardware is negligible; CPUs have instructions to accelerate it in hardware.

Uh-huh. I like that you believe that, but with a lot of HFT systems, even the latency of going from the NIC to the CPU is too much. Adding a hop in between that decodes and then reencodes, the the inherent buffering involved, is way, way too much latency.

> No: In the prior TLS 1.2 design, the decryption key was on both the node MitM'ing the traffic, and the actual end nodes dealing with the traffic. The proposed TLS 1.3 alternative does not change that. (Nor does it improve it.)
>
> If your TLS 1.2 was that you terminated at the node doing the MitM'ing, then do the same thing in TLS 1.3.

Yeah... see, that's the part you aren't getting. The old model was also not terminating through a proxy with TLS 1.2. That actually doesn't address the needs of the trusted system.
The Musk/Jobs companions is a bit of a stretch. Jobs had a profitable product and company from the start. Musk never founded such a company, and was booted as PayPal CEO after a short stint.
Yes, but a failure to do so would be considered a compromise, as opposed to a simple network failure.
It can do things memcache can do and way more. Like storing other data types. Persisting storage to disk. Geospatial queries. Pub/sub. Lua scripting.

So, no, they are not interchangeable! Only if you just store keys and strings and do not care about persistence.
Monzo has business accounts in preview? This is very relevant information for me... any idea how you can get in?
It seems you have a producer-consumer problem, where feeding in work to do faster than it can be processed only leads to lengthy queues, and running more tasks in parallel than you have cores only increases memory usage and task switching overhead.

Such processes rarely are memory-bound, and from what you write (it would use CoreFilters that support GPU acceleration "when available"), yours aren’t either. So why would you want to limit the number of consumers by looking at memory usage?

ioquatix’ comment to measure latency is better, but more work, so my first go would be to manage queue length, as that is simpler to do and often effective enough.

Determine how many consumer processes your system can really handle in parallel and limit the number of queued GCD tasks to, say, twice that number. That factor of two depends on how bursty the producer produces work items and on how CPU-bound the consumers are.

If memory of I/O aren’t your bottleneck, you want to minimize the number of items ‘in flight’ needed to keep your CPU or GPU at 100% usage.
> People like to paint enemies of the east while essentially letting the west get away with much more heinous stuff.

> It is clearly a double standard. But the answer is to hold the US to account. Not bring more of this hostile crap in.

I mean, I think it's the nature of things like this that they are justifiable but not pleasant to suffer from. This is weaponry, not poetry; if theirs is better we suffer, that's it.
Now archaic British billion means American million.
Good luck finding a cable that supports what you want. It might only be a matter of time before we have to have chips in the cable to indicate what it can and cannot do!
> Getting rid of forward secrecy doesn't fix the problem of server trust. A compromised server could always use a different private key.

Yes, but what it solves is that when it does so, you know it has been compromised.

> The only way to truly not trust the server is to verify that you can decrypt in real time.

No. That is the way to know that you can not trust the server in real time. That isn't the objective. The objective is to be able to, after the fact, prove that you could trust it at that point in time.
USB 4.0 will actually be USB 1.0 with a new name, same speed.

4.1 will be what was USB 1.1

4.2 will be what was USB 2.0

4.3.0 will be what was 3.0.

4.3.1GXY1 will be what was 3.2 1x1 (which was 3.1 Gen 1 (which was 3.0)

4.3.1GXY2 will be what was 3.2 2x1 (which was 3.1)

4.3.2GXY1 will be what was 3.2 2x2

4.4.0 will be double the speed of 4.3.2GXY1 (what was called 3.2 2x2) but will max out at 25mm (~1") cables and provide no power at all.

4.4.1 will be like 4.4.0 but will expand the length to 30cm (~1')

4.4.1ZORB22 will be like 4.4.1 but also carry up to 5W power for bus powered devices.

Go ahead and laugh, and then realise this isn't really that different than what we have now from USB-IF.
For now I am refusing to buy anything that need a USB-C cable
> It's true that it is very difficult to build a fully general dev tool that's 1000x faster and lets you control everything entirely down the pixel level.

The thing is, 90%+ of the time spent developing software is spent figuring out precisely what you want everything to do. Once you actually know what you want, producing the code is pretty straightforward. Rapid application development systems are always a tradeoff between development time and "control at the pixel level". I'm absolutely not saying that a better RAD tool or a better AppWizard isn't worth having, mind you! Just that the two goals are diametrically opposed.
This is about the worst kind of end justifying the means mentality. This type of thinking should be avoided as much as possible.
Here's the recording of the webinar announcement: https://www.youtube.com/watch?v=5-5t672vFi4
I cannot find any any information on how this data is sanitized.

/safe/path/$hostname.key
$hostname = ../../etc/some/secret
/safe/path/../../etc/some/secret.key
I'm a strong advocate of no icon without a label. (unless it's an app people use at least once a day, than I might give you a pass for the main menu)
> Here is an anecdote going against this idea.

I'm not sure this goes against his thoughts (and possible experiences) on the matter. In your example, you've established a figure that is in charge for maintaining 'Law and Order'. This person is responsible for creating the rules in which others live by in this (subset of) society.

I have found, over the years, that people respect rules when applied to everyone evenly. They even respect the person charged with dispensing those rules (evenly and fairly).

OP's sentiment, I think, applies to a 'Lord of the Rings' mentality. There are no set rules for behavior that are overseen. Groupthink, group pressure, dominating (if not vulgar) voices may tend to lead. Not unlike the film 'Idiocracy'.
Editorconfig-Checker 2.0.1
> That’s not the goal though. You’re not trying to monitor the systems themselves, you’re trying to monitor the people using the system.

From a systems perspective, they aren't logically different.

> A financial regulator doesn’t give a crap what your system does, or how it does it. They only care that they can blame (and potentially prosecute) an actual person if it goes wrong.

Yeah, you tell that to the regulator when it becomes clear that trades were being published to a competitor a millisecond before they were being listed.

> Using middleware boxes makes this easy. Not need to actually modify the software your using to create proper audit logs, just log everything and figure it out later.

The log everything part, you are totally right about. The "middleware" box that actually is part of the operational path... that's a different story. You want something that watches the system without actually being part of the system.
Oh, I thought you mean that there's some fundamental reason why it can't be done. Ofc it's pointless today, but I wouldn't be surprised if JS in browsers eventually becomes a layer on top of wasm.
Democratic, war-mongering governments and peoples indeed...
CA DMV autonomous vehicle disengagement reports for 2018
I attended KubeCon China last year and there was a very good example of a K8s setup for IoT that scales pretty well. Check these links if you’re curious:

- https://schd.ws/hosted_files/kccncchina2018english/18/ShengL...

- https://thenewstack.io/rancher-takes-kubernetes-management-t...

Disclaimer: not affiliated with any of the companies above. Edit: formatting.
If/when the missiles start flying, I’d like to feel that the US systems are built by America’s best technology companies, which yes, very much includes Microsoft.

Other large, economically successful countries are spending huge on military tech and have their best people on it.

You’ll care when it matters.

If you’ve got a fundamental point of principle disagreement with the idea of there being a military, and the need for countries to project power, then you should perhaps consider working in a different corner of the it industry.

If anything, the world is heading to a much more militarized future. Rising economic powers are spending vast amount of money on building modern naval capability. Only a fool would think that now is the time to turn away from the countries need for increased military capability.
You're taking one of the two definitions of respect, the other definition is:

>due regard for the feelings, wishes, or rights of others.

Which seems like a perfectly reasonable proposition.
If you’re learning a language, reimplementing something that’s already been solved is a fairly standard learning exercise.
I have always thought that the real potential in Tesla is a fully-realised gigafactory. When you can near totally automate complex manufacturing at scale, you can basically whitelabel the factory as a product in and of itself (or put it in orbit and build Mars habitats :)
Sure, they may provide that justification, but that doesn't change the fact that the counter-party to an immoral fighter is always a moral one.

After all, even Hitler hated his enemies, so no one can be free of being hated by at least someone unless they are a passive rock.
That would work for one file but there's no way to atomically rename two.
They all support the same voltage, and there are only two meaningful power delivery levels.

So they only have to put the speed class and PD or not PD. It would make things so much better.
Road gets you everywhere, rail only gets you to the nearest terminal. Depending on the signalling system used rail can have a higher capacity from terminal to terminal, leaving the 'last mile' (which in reality is more likely to be the last 100 miles) to be travelled by road. Road needs more maintenance and the work itself is more labour-intensive.

Imagine a package-switching network comprising an (electrified) rail backbone with roads spreading from terminal nodes to the destination points, fully automated package store-and-forward, electric self-driving trucks.

This would cost loads of money and loads of jobs. It might also solve parts of the problem. Maybe Amazon's successor is already thinking of something like this?
Yet another subscription, yet another proprietary app with dubious permission requirements to be installed on (supported) devices

Oh the joy
I like how America didn't spend billions of dollars for them to do this. Kudos.
> You're missing the point entirely. Maps have no defined order. You cannot "change" the order of a map, because it has no order.

Clearly, I am not the one missing the point...

The order maps iterate is not the point. The point is that e.g. a 'print' function should print, not sort and change the order.

> just because the printing function is choosing alphabetical order to print things out in, it's not "manipulating" anything

Again, the printing function does not 'choose', it manipulates the date returned by sorting them.

My point is that, to follow good design principle, this sorted iteration should be a public API of maps.