skysight-inc/HackerNews huggingface dataset:
It's pretty minimal, at the moment only connect.facebook.net, connect.facebook.com, pixel.facebook.com, and apparently facebookinc.122.2o7.net. If I had to rely solely on it I'd add a lot of hosts and in particular known ones under fbcdn.{net,com}. In contrast, DNS and IP blocking is extensive.
It's horrible to work with, but it pays the bills, so people work with it.

It's a testament to how being non-technical friendly leads to market success.
To a reasonable extent, yes, they're the same. The biggest issue is that goroutines are (more or less) fully preemptive (for all intents and purpose) with their thread pooling and go blocks in core.async are not. Basically, in Go, you can have as many blocking IO thing taking millions of seconds to run, but it won't block the thread pool, and your other goroutines will run fine.

Since core.async go blocks aren't fully preemptive, long-running things can eat up the whole thread pool. core.async allocates "number of cores + 2" number of "real" threads to do its work.

For example, say I have a program that downloads hundreds of giant files running on an 8-core server. The naive implementation would have a goroutine/go block for each concurrent download. In Go, this would work more or less ok (assuming you have plenty of memory), but in Clojure it would block all the other go blocks after 10 until the download is done.

Normally, it's not an issue, but it's a small gotcha if you're not paying enough attention.
twitter is being evil with the back button now? click on the link, then click on one of the tweet replies.. then try going back to HN, twitter won't have that!
> which is wild but true.

Not really. I would take SO survey results with a grain of salt. The respondents always skew towards the younger, less experienced crowd (68% had less than 10 years experience in this last round). It's not representative of the industry.
Unary gRPC calls would cover all of my uses cases that would benefit from this product. Is that any closer on the roadmap?
I do not understand this idea of replacing social media sites with open software but then exposing/forcing users to choose an instance. Unless you're strictly trying to make your social media site for devs this makes no sense. Any common user will see this 'instance' choosing option and exit really fast.

I guess instances are required for federation? What is federation? Why do I care? Why do I need to "Get Started" rather than just a search function like youtube? Why can't these instances exist on the backend and you just provide a front-end ui that combines them for users?

I do not understand federation and neither do your non-dev users (98% of the market).
> but whose recommendations do you think they listen to when delivering that? Often it is in-house tech' people.

Have you ever worked at a large enterprise? That's almost never how it goes.

An executive has a meal with a sales person, who says their technology will solve all of the executive's problems, then the executive signs up for a paid trial, and then tells the people that report to them that they are going to implement the thing.

Some better enterprises will cut it off at that point after the technologists come back and say the trial didn't work out, but many enterprises will simply plow forward, either falling to the sunk cost fallacy, or because the executive's friend at another company told them it worked well at the other company.
App for Metal Detecting
This. Older people have families and long-term obligations. They usually can't afford to lose their job over politics or ethics.
Privacy and Data and Other Thoughts?
As civilisations move forward more people will indulge in artistic work rather than mechanical production jobs, that will allow us more time doing more creative and artistic work as is already evident in YouTube creators and hacker community (may be towards philosophy or in search of most fundamental physical laws in a later stages of our civilisation).
In this process a lot of data will be generated. This data is also created as more and more of the infrastructure gets decentralised. Like in supply chain technology every inefficient node can be optimized using data.
This data can either be used for a very capitalist society where data is owned by private corporations who sells it to the advertisers for money. Or to a more decentralised and discrete control of data, encryption et. all, which will lead us to using more of our resources in finding the beauty in both classic and romantic world view and trying to find the fundamental nature of reality. Which I think a good goal for humanity to achieve if our existence is really very unlikely in our universe. Even if we are not alone still a good goal.

PS. Can this end goal of explorative and artistic civilisation be acheived by capitalist societies as well?
I've wondered about this myself. There are times when I debug with console.log/.error during the dev cycle with potentially sensitive data that I would definitely remove before deploying. There are other times when I have output that just kind of lets me know where things are during execution where I've had the internal discussion of leaving them in or not. I usually lean on removing them all. However, I've had the console open on several large sites, and they are constantly filing up the console with output. It seems like it is mainly the 3rd-party libraries that sites include. Even Amazon's home page outputs content to the console.

<sidebar>
However, it is oddly satisfying for me to see the console full of warnings from Firefox of 'Request to access cookie was blocked' or 'Loading failed for the <script> with source googleadservices or doubleclick' type of messages.
Helvetica Now – A redrawn type family in three sizes
Extensions are the primary source of malware I find on PCs, and they're fantastically cross-platform. I just degunked a MacBook Pro the other day that looked like the worst of Windows XP, all done via Chrome extensions shipped from the Chrome Web Store directly.

Firefox does a better job at vetting extensions, but the reality is extensions have incredibly deep access to sensitive data, and they bypass every other security measure on your PC. HTTPS? Pointless if you've got a list of extensions installed on your browser.

The EFF's Privacy Badger has been my sole extension for a while, but as Firefox Tracking Protection has expanded, I've found Privacy Badger catching less and less, since Tracking Protection blocks them first. I will probably retire my use of Privacy Badger pretty soon, because it's just becoming superfluous.
> It's hard enough finding Postgres SAs these days as it is!

That only seems to be true for places unwilling to pay reasonable amounts of money.

And by "reasonable" I'm not meaning Oracle Consultant $US3k+/day either. ;)
It's really cool to see things like this from the libre point of view.

However, the decentralized bit was confusing to me when I tried out Mastodon. It was like I was trying to figure out whether I should join the North American Combine or the Paneuropean Federation _with the catch_ that geography was not really a factor. So did the decentralization make things easier for everybody or harder? I know I never really got into Mastodon after trying it twice, though I'm open to trying it again.

I'd honestly rather just swim with the whatever the tide is in such cases unless I'm applying for a literal passport. Point me to a popular way of accessing the thing and using it, and I'll give it a shot. Any given community with a good amount of traffic ought to self-sort to allow me to find what I like.
Which is a quite peculiar and reccurrent pattern in closure.

After a while libraries and tools stabilize and the community just maintains it.
Thanks Google cloud team this looks really great. Quick question: Is Cloud Run a zonal or regional resource and is there any way to put this behind the global load balancer? Thanks.
Basically - once you have the toolchain for generating sites on your local environment, Netlify automates all of the toolchain in the cloud by just hitting 'git push'. It then has ancillary services for more "functional" components that often static sites lack (functions, forms, etc).

It's one of my favorite platforms because of its simplicity.
Some US states including California consider political affiliation a protected class too.
That focus 'thing' is a good advantage all on its own,Netlify is also way easier for non developers to quickly set up their page on than other services, i mean check out just how easy it is ;https://www.netlify.com/blog/2016/09/29/a-step-by-step-guide...
That's a fair point; I admittedly haven't touched Java concurrency in quite awhile, and I actually haven't touched Vert.x since they had direct Clojure bindings :).
"Traditional serverless offerings come with challenges such as constrained runtime support and vendor lock-in. [...]"

I'm quite aware that there's a technology hype cycle in web development, quickly replacing last year's fad. But whoever came up with the idea of putting the words `traditional` ("following or belonging to the customs or ways of behaving that have continued in a group of people or society for a long time without changing") and `serverless` together is taking this to a new level of ridiculousness.
not really. This fits. Germany has much less power than it did during the Greek Crisis. It is in no position of throwing EU countries on its knees and destroying them economically anymore. It is in no position of forcing UK to stay in the EU. It is paralyzed by migrants, nice job CIA.

No worries in 20-30 years you will see it at the movies. Just remember where you read it first.
This kind of goes in direct contrast of another comment I made, but they seemed to like to have people self serve instead of come in to the bank. I don't know if this was based on expense or survey reviews or some combination of the two or maybe even something else entirely.

Same can be said with call centers now. The direction is to have callers stay in the IVR and not go to a rep. The rep's aren't exactly going away any time soon, but that's the dream.
Maybe as a broad category of all employees, but if anything there aren't enough software developers in the US.

> Employment of software developers is projected to grow 24 percent from 2016 to 2026, much faster than the average for all occupations. Employment of applications developers is projected to grow 31 percent, and employment of systems developers is projected to grow 11 percent. The main reason for the growth in both applications developers and systems developers is a large increase in the demand for computer software.

https://www.bls.gov/ooh/computer-and-information-technology/...
It seems you're now experiencing the HN hug of death.

Is it a quota issue or Netlify not able to handle the load?
Time is reckoned in quarters in many parts of the world, especially rural areas. At my computer job, I can always see the time in minutes, so I leave for meetings with the least amount of wasted time. Precision is both indicative and generative of action.
The Dreamcast is by far and large my favourite console to actually play games on.

The level of innovation and quality of software was astounding.

And, while they suffered from awful battery life, the little VMU visual memory cards were adorable.
It's regional (and currently only in `us-central1`, though more regions are on the way). We're working on GCLB integration.
Inflation is an average across all products, weighted by how much the average person spends on them.

A single price increase is not inflation, any more than a single stock going up means that the market went up. It might be a sign of inflation, or it might be offset by decreases in other prices.
I'm surprised no one has mentioned blockchain here. :)

All jokes aside, isn't this an interesting application of blockchain technologies?

The title omits the fact that this article is really about taxation.

I had a knee jerk reaction to Bingbing's situation that was "she's right to hide her earnings from corrupt Chinese politicians!" At the same moment, I hold in my head the belief that Americans using resources (like roads, infrastructure, etc.) should pay their "fair" share of taxes, while simultaneously feel outraged that the lion's share of my tax dollars go to a military industrial complex which acts contrary to the way I feel my country should act as a global citizen (that's understating my real feelings...).

Wouldn't a public ledger resolve some of these problems? As the article notes, people in China were outraged (or is this a manufactured sentiment to bolster the punishment?) at the amount she earns compared to the average citizen. If there were a public accounting of her wages and public accounting of her taxes, wouldn't this transparency make EVERYONE HAPPY. </another-bad-joke>

So glad to have changed the opinion of blockchain for everyone here. You are welcome!
The issue with emails is worse because spam is unsolicited and can be sent from anywhere. That means that basically anything can be used to send spam, from botnets to miss-configured SMTP servers.

On the other hand your fingerprinting/mining JS has to be served by a website that people willingly browse. That's a much higher barrier of entry and means that you can't just change your server's domain every hour lest you manage to convince your partner websites to update their code as frequently (which in turn might end up blacklisting them instead).
> This is great but the average user doesn't even know about fingerprinting.

So? They don't understand password hashing, either. Doesn't mean it shouldn't be implemented.
In my experience you get arrogant developers who are horrible to work with at all ages and experience levels.
When will it be discontinued?
Hello, I had a question about how Cloud Run handles security between containers being run on the cloud.

I assume my container runs alongside other containers on the same host, how do you prevent privilege escalation exploits?
Use the native back button (if on Android) instead of Twitter's back button. It's been like that since a long time.
Yeah I would be curious to see if women who grow up playing ball sports also grow up to have good spatial skills.
IME GCP sales sucks but account manager (“executive”) / customer success people are chill. They know all the bad parts that everyone wants fixed and share in your plight.
I don't have much to add, but very cool! I love new perspectives like this and what they add. They can be useful when considering what new patterns can add for the official maps (or at least one can wish).
You make it sound like lock-in is some unique strategy. That is the goal of every tech company. Enterprise, social or direct to consumer.
Not even remotely as docker-compose is not Kubernetes, or anything resembling a container scheduler or Kubernetes Management Platform.
Better control and domain ownership. Especially since setting up a static site is super easy with Netlify. Set up a repo in either GitHub and Gitlab and Netlify will take care of the rest. The biggest downside is that it's hard to get exposure. However, it works for me since my site is just a portfolio site.
As I’ve grown older and started focusing more on politics and the state of the nation, I started realizing that reconciliation is not abundant in the US politics and minds of people. Your comment is one of example.

There are comments about increasing automation and policies of that effect but no policy or recognition how job losses will be coped with. Apparently it’s ok to permanently remove jobs but universal basic income is non-negotiable.

Another example is cutting of taxes, but then increasing expenditures. Or not increasing taxes as expenditures go up. Somehow things just don’t reconcile. Maybe that’s just how politics is. But if there was reconciliation of things, we would be in a better place (or an even better place?)

Edit: spelling loses to losses.
Great question. It's more of a workplace concern, as I'm sure that nonbinary folks experience these issues in other workplaces. However, software development is definitely a male dominated environment and there's a lot of discussion in the industry about how we make that environment more inviting to women.

So there's a shared experience there of being a gender minority within software, but also the difference that some of our concerns are very different than women's concerns.

And software rules our world. My company lets me declare my pronouns on the internal org chart tool (yay!) but required me to select man or woman to receive health benefits (boo!). As an engineer, I can help inform system design and provide feedback on the software that gets written to handle cases like these, which makes our software better.
My understanding is that the major issue we have is with streaming (sticky sessions to backends that are autoscaling is tricky), so I assume that unary would be easier. I admit that I haven't dived too deeply in to this though.

EDIT: looks like we could do unary gRPC if gRPC wasn't only supported on HTTP/2. So the current implementation basically requires we solve sticky sessions/streaming.
Interesting. Sounds a lot like my OSS project Talos: https://github.com/talos-systems/talos. Very similar goals too.
You can do that via drive-through or walk-up ATM. The only time I need a teller is when I need a bank check drawn up for me.
It's basically Github.io but if you need a more serious operation on top of it. Such as a company marketing website, rather than a personal blog.
i agree. with fuel prices so high and airlines being so conscious of them, i would imagine they're making every last bit of effort to conserve fuel. The incentives all seem to be correct.

The leading "What airlines don't want you to know" tone of this post is probably to manipulate the reader into reading the whole article, so you can find out what "they don't want you to know", which never really comes.
Is knative build api supported as well?
How Much Money Should I Raise for My Seed Round?
I've worked those kind of jobs. You rotate from station to station for each shift/time slot. It's really no worse than working in an institutional kitchen for the same length of time (and the pay is typically better).

I get that people in ivory towers will decry it all as horrible but the fact of the matter is that none of those jobs are any better or worse than the other once you account for people's variable preferences. I'd personally rather do outdoor labor of some sort but some people prefer the air conditioned factory floor.
Yeah, I wish it were just a docker image up on the hub
AppScanOnline
I made the decision this year to be more open about my journey bootstrapping Keygen. This interview is a bit long, but I hope it contains some valuable no-BS insight into how I've approached building and growing Keygen. Would be happy to answer any questions that I didn't cover in the interview!
Reaction Engines makes space travel breakthrough
How is this a ngrok competitor?
Worst, however, may be the unknown knowns.
That's a universal problem not just programming. Imagine if sleezy fast food restaurants raised the wages abit so they could keep employees longer before they go for a 'real' job.

But no, instead you set the wage so that anyone with a choice leaves.

I think the main reason for these places that are mainly hiring young programmers are that they are way less expensive if you count in unpaid overtime you can force them into. Older programmers that agree to that are desperate and not sought after anyway. Young programmers need experience so that they can become older programmers and agree to it.
Second spoiler alert: https://cloud.withgoogle.com/next/sf/sessions?session=SVR209
You might enjoy http://eryq.org/content/page/Underhill/Underhill.png
The reaction to Damore's memo.
https://outline.com/gPkCJd
Cloud Run engineer here.

Containers are run in gVisor https://github.com/google/gvisor
as the container sandbox.
I'm so excited about the App Engine updates. I'll be signing up for the Ruby 2.5 run time to replace Heroku in our stack.

> Today, we are announcing support for new second generation runtimes: Node.js 10, Go 1.11, and PHP 7.2 in general availability and Ruby 2.5 and Java 11 in alpha. These runtimes provide an idiomatic developer experience, faster deployments, remove previous API restrictions and come with support for native modules. The above-mentioned Serverless VPC access also lets you connect to your existing GCP resources from your App Engine apps in a more secure manner without exposing them to the internet.
seems like the antithesis of small government to have it explicitly bar itself from providing free services helping its citizens pay for said government. the latter should be as seamless as possible given that failure to comply results in adverse government intervention.
I wouldn't have guessed that those circles were clickable annotations on mobile had I not looked at desktop view and wondered where they'd. I like it as a principle but it's badly signposted as it doesn't feed into any existing experiences.
> Best practices is a moving target. What made sense in 1999 doesn't make sense in 2019.

Sure, but it still makes sense to use JS sparingly. Running untrusted remote code in your browser is a huge nest of attack vectors. I don't think that, in 2019, running JS from the open internet willy-nilly can be described as "best practices", despite the prevalence of it. We're not there yet. If three hundred million people jump off a bridge I'm still not going to do it too.

> The web simply requires JS, CSS, and HTML today. If you disable any one you aren't compatible.

That's, like, your opinion, man.

You're trying to insist that your concept of the Internet is the concept of the Internet. It's a self-fulfilling prophecy. But it's not quite true yet, eh?

> There's no actual argument for why websites should spend significantly to support [non-JS users]

Right, they shouldn't spend more because the tech they use should provide for non-JS users out-of-the box without additional overhead. If devs have chosen NOT to use tech like that then they are at fault, not the user, eh?

> for ideological reasons.

What about for security reasons?

> It is unfair to our other >99% of users who we'd have more time for.

But the reason you have to "spend significantly" to do the right thing is that you chose to use and deploy crappy JS frameworks, not that some people refuse to run your crappy frameworks. This is classic "blame the user".

Now, this is your prerogative if you're doing your own site/app, but the government doesn't get to exclude some people from service just because they don't run JS. Speaking as a techno-elitist, that's techno-elitist BS.

> If you really insist on a JavaScript free world you are of course welcome to visit a government office in person, pick up, and mail back a paper form.

AH-whaaaa? Rather than fallback to plain HTML+CSS you're content to let the user fallback to hard copies and physically transporting their meat-puppet? To save costs? On web development? Where's the sense in that?

> The website is merely a convenience we offer to you.

Well, no. It's an INconvenience you offer me. If you're offering convenience to most people but deliberately excluding some that seems to me to go against the egalitarian spirit of our American government, no? "Unfair"?

> Otherwise you'll need an IE 10 or newer browser, on an Operating System that supports TLS 1.1 (Windows Vista or newer), JavaScript, CSS, and HTML.

I run Dillo. A government website that doesn't look decent and work right when accessed with the Dillo browser is just broken and sad in 2019.
It was in the survey results.. the actual topic of this post.
No, we don't currently support the Knative Build API.