skysight-inc/HackerNews huggingface dataset:
30 is young dude. Wow. Middle-aged? I'm 35 and I would never let myself think that way.

Maybe it's time to take a break and work a normal job for a year or two just to let your mind relax and build up the energy to go at it again.
Jokes at the expense of a child aren't funny.
That is addressed:

> Although some will attribute this to a tradition of vegetarianism, surely this is mostly due to the limited access to meat for the poor. As I note below, meat consumption is highest across high-income countries, and the demand for meat in India is, therefore, expected to grow faster with stronger & sustainable forecasted economic growth and rising per capita income.
The appeal to authority on this one is pathetically strong.
(It's apparent that my initial reply didn't resonate, so I've made substantial edits to my reply for clarity's sake. If you've read it once, give it another read; it's from the angle of an organization with much in the way of legacy impairment.)

> Yet another security vulnerability caused by...

I mean, yes, but these are also some of the easiest vulnerabilities to miss even with out-of-the-box static analysis (code scanning and data analysis), automated dynamic analysis (pentests [edit to clarify for tptacek: automated pentests]), and a basic code review process. They're usually identified in live environments during manual penetration tests or, in more security-mature environments, with custom static analysis checks and custom linting rules.

As for best-case prevention: accomplished generally architecturally, e.g. language/framework decisions that enforce secure coding practices by design, or implementing certain patterns in development which whisks away some of the more risky coding decisions from engineers who may not be qualified to be making them, such as mandating authn/z and limiting exceptions only to roles and change processes qualified to make them. Checks including linting for specific privacy defects (direct object referencing using sensitive data or iterative identifiers as opposed to hashes/guids/etc) can help with catching them during development, and as you might've guessed, such checks tend to be custom for a given environment rather than out of the box.

I distinctly recall a card issuer whose name starts with a C in the United States having an http endpoint which allowed for enumerating account details by iterating full PANs (16 digit card numbers)... around a decade ago. Here we are today, and you're seeing the same bugs continue to arise.

Mitigation options in organizations with immature security practices typically rule out remediation simply because their existence might not be known, and practices traditionally reserved for defense-in-depth may need to be relied-upon instead (think monitoring web requests for anomalous behaviors and blocking traffic when detected) rather than trusting that one can fix all the defects, and even then you'll still lose a few records... but that might be the only solution available to you as a CTO, CIO, or CISO simply because of resource constraints and bureaucracy in an entrenched org e.g. in the financial or insurance space.

--

tl;dr: these defects are among the harder ones to catch for legacy applications especially in environments with weaker security postures, and they're as old as time. What I'm saying is that as much as we can call companies out for making these mistakes in hindsight, their existence in larger legacy systems is to some extent inevitable and must be managed in other ways.
There are externalities for experimentation which include bankrupting the health system. Imagine if everyone only ate red meat. Bowel cancer would soar.
Your opinion is exactly what the majority of HN feels.

As I read this article I was thinking "I bet the first comment on the article will just be complaining about the effort going into ads", and I wasn't wrong.

Honestly, it's becoming tiresome. Low latency computing is a great area to talk about, and instead it's derailed by this essentially off-topic discussion.
Exodus Orbitals: introducing a first crowd-flyable satellite
Laser interferometry for astronomy. Just spec the lasers out so that they're useful for science, but can double as a weapon in a pinch.
Just remember that you are trading in an upmarket. All your knowledge will be worth nothing in a downturn. It's a totally different game. Learned that in 2000 :-)
Mangle: Orchestrating Chaos Engineering
thanks for the feedback. there's definitely a lot of validity to what you're saying, for what you describe.

grafana has traditionally been used for 'real time dashboarding and analytics' in the IT/devops world. that's the original use case, and its sweet spot, as you allude to.

but, since the beginning, the mission of the open source grafana project has had nothing to do with IT per se. it was about democratizing metrics; helping teams understand their 'systems', by breaking down silos between databases and people.

over the last few years, interesting things are afoot in grafana community. we're seeing grafana used for more and more non-IT use cases. it's being deployed in the industrial and business worlds. about 10-20% of the grafana community now deal with things that have nothing to do with IT/devops.

the 'systems' are no longer limited to things like servers, switches, containers and clusters. these emerging users deal with things like temperature sensors, dollars, robots and ambulances. we are making progress in bringing grafana to these worlds, while also ideally improving it overall.

there's tangential threads in various stages of recent completeness (none of which solve your specific issue admittedly). things like sql support, general focus on ad-hoc analysis with ('explore'), the upcoming abstraction around being able to better use ui components within grafana ('grafana/ui'), improved support for tabular data, new panels, etc.

sorry about the four year old issue; i'd be lying if i said there weren't myriad things we'd like to do, that don't make the cut not due to desire but due to time and resources.

again, thanks for the feedback, please know that we're very interested in continuing to develop and improve grafana for use cases like yours!

-r

[disclosure, very biased and opinionated response. am co-founder/ceo at grafana labs. lucky enough to work with torkel and the team on making grafana better]
I kinda like that the title is basically a call to action button in the form of how to get the product.
Pretty sure all of Microsoft's own stuff is using UTF-16, so all characters take two bytes, regardless.
Robinhood wasn’t legally allowed to open checking or savings accounts, but no one said anything about checking and savings accounts. I mean, until the SEC and SIPC did. They said no.
>I wrote an answer I thought was pretty good, but the question was downvoted and deleted as “not about mathematics”.

Why post on some else's site? Especially quality work that took real effort. I'm guilty of it too (although nothing so cool is this article).

We complain about the web becoming dangerously centralized compared to the past. Much of this is because of free high grade labor that adds value to an already dominant organization.
> If your life is entirely oriented around hoarding as much money & power

Why do people have to always denigrate wanting money and power? It's an intrinsic desire to want power and resources. If somebody finds happiness that way why disparage them?
In the same vein, checkout Draw with Jazza's videos on VR [1].

[1] E.g. https://www.youtube.com/watch?v=-eXwIyZ-H8o
You may like reading Scott Aaronson's P vs NP survey (2017), which may answer some of your questions about complexity theory: https://www.scottaaronson.com/papers/pnp.pdf

In particular, the section relevant to your question is "1.2.2 The Polynomial-Time Objection" on page 7, quoted in full below:

> Objection: But why should we draw the border of efficiency at the polynomial functions, as opposed to any other class of functions—for example, functions upper-bounded by n^2, or functions of the form n^((log n)^c) (called quasipolynomial functions)?

> Response: There’s a good theoretical answer to this: it’s because polynomials are the smallest class of functions that contains the linear functions, and that’s closed under basic operations like addition, multiplication, and composition. For this reason, they’re the smallest class that ensures that we can compose “efficient algorithms” a constant number of times, and still get an algorithm that’s efficient overall. For the same reason, polynomials are also the smallest class that ensures that our “set of efficiently solvable problems” is independent of the low-level details of the machine model.

> Having said that, much of algorithms research is about lowering the order of the polynomial, for problems already known to be in P, and theoretical computer scientists do use looser notions like quasipolynomial time whenever they’re needed.

To add a couple of points of my own:

- We need to consider at least polynomial functions, for the closed-ness reason (though in practice the exponent is usually small), and superpolynomial functions (in the theoretical/asympotic sense, slower than any polynomial, even n^100000 or whatever!) are already slow enough not to be considered efficient. For that matter do you learn any single exponential algorithm in (say) an undergraduate course? If you're in an area where exponential algorithms are of interest though, then it's not actually unusual to study sub-exponential (and superpolynomial) ones, as those are the most efficient we have.

* There are not many "simple" superpolynomial subexponential algorithms, suitable for a typical first course. Factoring could be taught though, if the students are all interested in number theory I guess. When I took a course on "algebra and computation" (problems in group theory etc), we did encounter quite a few such algorithms.
"Most design decisions you make as a developer affect the value users get from your product, and therefore the churn rate."

Yes but probably not in a way that matters.

Churn will be decided by a few small, hopefully well targeted issues (including price and switching cost) and so it's really Product Marketing/Managements job. The Eng. should be to meet the expectations of Product.
I have a Robinhood account. They gave me a free share of some stock to create an account. I just have that one share.

I don't even have the app installed on my phone.
A paid youtube? Not sure they would be worth it without the endless amounts of free content by free users.

Facebook? There are plenty of sites like facebook without users. Charge for an account.. reduce the userbase, the platform loses value without the free users.
This should be part of an update to the Destroy All Software's Wat video: https://www.destroyallsoftware.com/talks/wat
This isn't so strange in a complex world.

When you're struggling to put food on the table you don't have time to philosophise about how a better future would look.

You do have time to do the less coal = fewer jobs for your immediate community math.
Not really, if you look at an accurate model of the human eye about half the inner sphere is photoreceptive. Where a much smaller area collects light. It’s a very different model than how cameras work and how most simplified models are shown.

Look at the optic nerve on this pic: https://associatedretinaconsultants.com/diagram-of-the-eye/

PS: This is why the blind spot is relatively small even though the optic nerve is 1.5 mm in diameter.
> EVC, a Royalty Free Video Codec based on H.264 with a target of 20% improvement.

EVC won't deliver much value. VP9 is already royalty-free, already outperforms x264, and already has broad support and use.

Apple should add VP9 support now (like everyone else has) and work to add AV1 support in the future.
I can only speak from personal experience, but I love Robinhood.

I am an amateur trader for pure hobby because of Robinhood.

Many years ago, I tried to create an etrade account and it was an insanely long process (it may have changed now). I don't even remember what I did after I got an invite from a friend, but I was up and running right away.

I started trading $300 just to see what it was like. The first three months, I learned a bit and lost some money. Fast forward 1 year to now, and I have around 54k in there and am up 16.05% - and that includes the crazyness of December. I have invited some friends and they all trade between $300 to 10k AFAIK. I am in no way rich, but I compare the performance of my retirement portfolio to what I do with a few ETFs, and honestly it has demystified the whole process. Before, I used to login to Clash of Clans when I had a few minutes to spare, now I spend that time browsing Robinhood. To me Robinhood was a game changer for this and many other reasons.
Determining the “fair price” based on costs is not rational. What is the “fair price” for an iPhone? It’s certainly not based on costs. It’s based on what the alternatives cost.

For things like drugs and treatments, which often are covered by patents, you shouldn’t necessarily get to charge whatever the market will bear. But even then, looking to costs is a bad idea. If saying “you should be entitled to a 10% return above your costs” actually worked, why not do it for everything? Why not pass a law that says that smart phones can only be sold for 10% above cost? If that would work for drug development, it would work for smart phones too. From the supply side, the two are very similar: top talent + massive capital investment + high-tech manufacturing = product. We’d have $300 iPhones every bit as good as what we have now, right?

For drugs, a “fair price” is best determined by looking to return on investment. If the investors in Novartis are earning 10x what they could have earned by investing in a web tech start up, maybe that is unreasonable. Such high returns are unnecessary to keep capital from fleeing to alternative industries.

But that’s not what is happening. Novartis’s return on invested capital last quarter was 9.5%. Alphabet’s was 37%. Novartis is not making outsized profits. It’s making healthy profits consistent with investing in a high-risk, high-tech industry.

A contrary moral rule creates perverse incentives. It tells people that if you want to save lives, you need to invest billions of dollars while getting a minimal return. But if you just want to peddle advertising, you’re free to make as much money as you want. If you consider some things “too important” for the profit motive, what you’re doing is incentivizing people to invest money, time, and their careers in things that aren’t important.
Oof. 50% funded? I’d go for 5% and feel I’m closer to the mark.
We're in the area of discussion known to some as "Lego bricks for return to the Moon". Some discussions - with pictures :) - are here - http://novosti-kosmonavtiki.ru/forum/forum9/topic1499/ .

I agree that we don't have some components to take "off the shelf" - lunar module being the primary example. But "to put a payload on a rocket which never flew on this rocket" is not the "not current tech" - and since we have docking components, including robotic docking, existing elsewhere, I would argue that it won't require any significant time (like 5 years) to get ready.

The point is that we don't need to build rockets to go to the Moon - we have them already. We currently don't have lunar module - and we'll need to create that. Also we didn't do some specific integration of existing technologies - space boosters, docking etc. - but making that is way easier than making a new rocket.

> The component that I laid out is larger in both diameter and length than the standard fairing size you list.

It's not necessary to re-create 3rd stage of Saturn-V to fly to the Moon. Today there are better ways - using the existing launchers.
How do those processes communicate?
Yea, you nailed it.
That was a lot later. Michael wrote that story in the early 90's, probably 90 or 91 while I was working there, during the transition from SunOS 4.1.3 to Solaris, when they forced all the engineers to "upgrade".

He and Gumby and John Gilmore founded Cygnus Support ("We make free software affordable") in '89, and Michael was consulting at Sun, working on supporting gcc as an alternative to the shitty AT&T C++ compiler. Remember that Sun unbundled the C compiler from Solaris and started charging for it, and AT&T charged for their shitty C++ compiler too.

Maybe Gumby can provide some more context!

https://en.wikipedia.org/wiki/Cygnus_Solutions

https://news.ycombinator.com/item?id=1641664

http://www.h-online.com/open/features/GCC-We-make-free-softw...

http://www.toad.com/gnu/cygnus/index.html

Free Software Report, Volume 1, Number 1, 1992

http://www.toad.com/gnu/cygnus/fsr/volume1.1.ps

The Free Software Community Puts A Free Compiler Back In Solaris 2

Sun Microsystems, Inc. decided to unbundle the C compiler from their latest operating system, Solaris 2. Sun users were extremely upset to lose what they saw as an essential component of the system software. Faced with dramatic increases in licensing fees, early Solaris 2 users turned to free software for a reasonable alternative.

Spearheading the effort to port the Free Software Foundation’s GNU C compiler was Palo Alto based Cygnus Support, a company that specializes in providing commercial support for free software. To fund the development effort, Cygnus appealed to the early adopters of Solaris 2. They offered a year of technical support for up to 5 users, and a commitment that the compiler would ship with Solaris 2, in return for a prepaid fee of $2,000.

To insure wide distribution of the free compiler and debugger, Cygnus negotiated with SunSoft, Inc. to make the GNU C development tools available on CDware. CDware is a free CD-ROM available from Sun and shipped at no cost to over 90,000 Sun users.
Coming from the field i have to object, that this software seems more like a Vektor based drawing program with some prebuild components and chemDraw is a huge ecosystem with tons of features.
The computer can easily traverse in either direction. I don't know see any technical reason to list identifiers in that order. No linguistic reason either. We don't do that for addresses in the real world. We don't say "United Kingdom, London, Westminster, Downing Street 10."

Imagine if Internet domain names are arranged as file paths. To reach the BBC web site, I'd have to type in "uk.co.bb" before the computer can auto-complete. As it is, all have to do is type the letter B.
Suppliers would be subject to the same rules. They'd have to raise their prices to compensate or take a hit on their own personal income from the top -- just as this first corporation will have to do.
I also find the comments more valuable and often reference a better version of the article so my path is:
title-->comments-->article (often a better link or summary than the original).
I loved the hell out of that game. Probably spent 100+ hours with Double Dragon.
Manifest Destiny, 20xx Edition.
Why must a country possess the capability to shoot down satellites in order to demand that other countries stop doing it? If Burkina Faso pays ESA to put something in space for them, they probably don't want some hot-shot US commander in chief waking up on the wrong side of twitter and deciding to blast it out of orbit. That seems like a perfectly reasonable excuse to demand others not use any capabilities they possess for shooting down satellites, even if Burkina Faso does not possess the ability.
Maybe they would go down to 16M page views per month and somebody would jump in the void they leave.

Wikipedia was successful because it was (and is) free. I remember competitors with a paywall failing one after the other. Remember Microsoft Encarta? CD ROM first then the web. Retired in 2009 when Wikipedia was much smaller than now
https://en.m.wikipedia.org/wiki/Encarta
17-character file name, what madness is that? At best you could do BUDG0912.XSL or BU091282.XSL or something.
There do exist a lot of private roads. If govt did not build them for free, there would obviously be a lot more of them.
https://news.ycombinator.com/item?id=20003391
Professional fund managers are struggling more and more to find alpha, do you think it's going to get easier for the newbie retail investors Robinhood attracts?
Interactive brokers actually publishes its numbers every month. Currently at a mere 630k accounts. But a whopping $150 Billion in Client Equity, and the other metric this industry uses is DARTs or daily average revenue generating trades, which is close to 800k. Robinhood probably sells most of its flow to HFTs at lower than what IB charges on commissions and IB is valued at 3x or $22B

https://investors.interactivebrokers.com/ir/main.php?file=la...
https://web.archive.org/web/20190524202002/http://www.os2mus... works
Yup. My school-acquired view of cells was always of somewhat squishy, mostly empty structures. It wasn't until recently that I learned they're all densely packed bags of molecules, shaking like crazy, and in which a lot of functionality depends on random walk making everything eventually bump into everything else.
> All your knowledge will be worth nothing in a downturn.

If you're lucky.
I miss punch the monkey ads. Life seemed more carefree.

The web doesn't work without free services. For everyone who has extra money they would gladly use to pay for everysite they visit the majority won't and you will end up buying overpriced bundles from your phone company and your privacy will be worse. Free allows users a chance not to be tracked. Once you start involving money you can easily be traced.
>There are plenty of other forums for relevant and current answers, and without dripping poison.

Would you mind listing a few examples?
> The important question would be if Github forks and pull requests are an open protocol or attached to the platform.

Attached to the platform, but open. You could do all the work on your feature branch somewhere else, say, your company's gitlab installation, then when it's done, push the branch into your github "fork" and and create a pull request there. I really don't know on which side of an openness line that would fall, you can easily define the line around it either way.
Wonder how many retailers there are that make 10s of billions
Show HN: Px - A tiny 2D canvas framework for puzzle games
I am somewhat embarrassed to admit that I thought your first sentence was about money; turns out both 'currency' and 'currentness' can refer to 'the state of being current'.
Emacs with some extension that highlights undefined variables and missing semicolons. My laptop is off now, I can't check which one. Probably one of the common modes.
Fair, and kids have made it very difficult to play games. As have other hobbies, reading sometimes takes priority, etc. So maybe I'm similar. I still enjoy a good game every once in a while though and go through phases.

I would say that I don't get addicted like I used to when I was a teen. I've often attributed that to realizing it was a destructive behavior and learning from it though. If I had more time, I would probably play more though.
Is it not safe to assume that VCs wouldn't be investing huge sums of money it they weren't convinced of the metrics?
I remember when it was being designed and first release that it was such a hodge-podge of ideas that in combination resulted in something that we could trivially see were bad using principles from long before.
What open standard? Email? Github doesn't change git, it changes the workflows around it.

Even if everyone used github, they're still using vanilla git underneath.
Best Buy Cancels All Preorders for the Galaxy Fold
The kind that requires you to /actually/ land a man on the moon.

Down vote all you want, its true. Otherwise, the only legit excuse is "politics". Least we forget Kennedy was long deady by the time 1969 rolled around - doesn't get much more political than that.

Or much more fake.
I mean the whole point of that company hiring someone to do a penetration test is to be sure this doesn't end up on Krebs. You pretty much lose your reputation if the company thinks you will go around and leak what you found out through that private investigation.