skysight-inc/HackerNews huggingface dataset:
We've got an old OpenVMS cluster at work that management has been trying to get rid of for years.

The team assigned to do this, along with the many consultants and contractors hired and fired over the years have tried just about every "modern" workflow orchestration tool you can imagine. When you put them side by side it makes you want to cry how badly everything compares to a 40+ year old system (the batch queues are built into the operating system and automagically distribute jobs to nodes in the cluster based on utilization and other metrics).

At the rate that the replacement project is going, I'm probably going to retire before they get rid of it.
VCs don't have a 30 year time horizon. The way compounding interest works means assets are heavily skewed toward older workers.
Death of Brazilian Tourists Adds to Airbnb Problems in Chile
Well there is this, "The map of the sea floor, made by the ship’s multibeam sonar, indicates that as much as 5 cubic kilometers of magma erupted onto the sea floor."

I think 5 km^3 is a large eruption by any standards. Looking at lists of modern ones it's a index 6 event which happen every few decades on land. From the article it sounds like if it weren't close to Mayotte it wouldn't have been picked up seismically.
It's 64 kilobytes, more or less. Some characters are 2 bytes and some are 4. Also you can use invalid unicode.

And when first implemented it was UCS-2.
I'm currently fighting against management dragging their feet on using 2FA.

On HIPAA PHI.

(I know HIPAA doesn't actually mandate 2FA, but it's recommended by many best practices and guides.)

Apparently some tech folks don't like the inconvenience of 2FA.
My organisation has a requirement that we build to work without JS. If we need to use JS for something then we also need a non-JS alternative, the result may be less pretty/fast/require an extra call but it works regardless of your JS choices
They are involved in far more programs than they were during the Apollo era. I'd much rather see NASA stay involved in these other areas (e.g. planetary sciences/exploration) than throw everything into a manned mission to the moon to 'make merica great again' a la 1960s style.
Why do we need to mine for gold in 2019?
The market shouldn’t be the only entity responsible for punishing this kind of massive damage.
Keep in mind that some MMs have contracts with exchanges that require them to always be in the market, and pay them for each share bought/sold.

So that MM will in fact buy orders that may on the face of it be a loss.
my calculus answer is that usually you see 0/0 when looking for limits

1/0 definitely has no real value
0/0 might have one, but you've framed the question poorly -- if you rewrite the problem in a different way, you might find the value of 0/0 for your case eg, by applying L'Hôpital's rule
Heh, in the Finnish layout ':' is actually the easiest of the three to type. Still requires shift but at least you don't have to reach or use both hands. The layout (like most European ones I guess) is pretty horrible for technical work of any sort, there's so much reaching to the number row while holding shift or AltGr...
Did you buy graphene or graphite? If the former, maybe what you got wasn't actually graphene? Apperently, the progress in this field is held back by most suppliers selling something they claim that's graphene but really isn't (or is of garbage quality) - https://blogs.sciencemag.org/pipeline/archives/2018/10/11/gr....
Is $40 a month for 100 Mbps the bar to beat in most cities? What is typical cost for 1Gbps?
But it probably used : to separate the volume name from the file name.
Holy shit I never even realized that.
if you have the ML that parses the plates, you could make adversarial plates that it couldn't find
UX Designer Portfolio Sites
Doubt it. There's no evidence yet that FA's leak was used by malicious hackers. The breach was discovered by some random other person who typed in a different parameter to a URL. Very likely that no one else would've known about it.

Whereas the Equifax situation was intentionally breached by attackers and it can be assumed that the breach was used to capture information for later sale.

I suspect that First American knew about this earlier this week and intentionally did a garbage dump on a Friday evening on Memorial Day Weekend. Maybe trade down a few tenths of a percent on Tuesday and their CISO will probably get axed. Nothing to see here, move along.
Thanks for pointing these out, very interesting! I amended the parent so others aren't misinformed (with credit to you). I discovered this because the Rust standard library's `canonicalize` function actually returns paths in extended-length path syntax. With credit to Rust, their docs actually point out that you must append paths that are backslash-delimited: https://doc.rust-lang.org/std/fs/fn.canonicalize.html
Someone needs to copy this poster's simplistic style, and use it to explain to me why Laplaces equation of electrostatic potential is solved with Bessel functions times an exponential times a sine/cosine wave (edit: in cylindrical coordinates).
Another issue is moderators close questions as dupes without reading them. I used to hang out in the private slack for the cabal that runs one of the sites; I imagine other stack exchange sites have similar cabals that auto close/auto vote on things
Ask HN: How can I build a cloud service that manages node modules?
I am frustrated as many other developers about how sometimes the fact that when you want to run a simple website that needs a few kB you need to download atleast 4 GB of node modules on your local machine. This is the problem I want to solve.

I want to built a cloud API that allows you to run your node modules without downloading them locally. That is, you will call git install cloud-npm then be able to use all modules that you request in your project.

From my observation, it seems Zeist is doing pretty good in this domain. https://zeit.co/docs

Please Note: I have almost no background in programming but notice this is a huge problem atleast for me and few people I know.
I once made an app not using sequential integers as object ids, as you suggest.

It was an absolute nightmare. Maintenance was a nightmare, you're constantly having to generate or replicate these things that add an extra layer of complexity to everything, and almost always unnecessarily.

It's also extremely bad for db performance, causes massive page fragmentation, indexes become useless almost straight after rebuilding them, etc.

For almost everything, sequential int IDs are fine. It's the things you expose to the users that you need to be careful with, and then don't use the primary key to access them, add another unique key to them, but keep the id in there for the db to use and for your own use.

My lesson was to go back to always using int ids, and on a few objects have a separate unique key column to expose to users for sensitive stuff.
I never actually said I had a problem with this drug or the price. (I do, but I never said that)

Imagine we live in a world where all drug research must be given away freely. Chances are private companies would no longer do the research, since any of their competitors could pick up the research and make it. In which case almost all funding for drug research would revert to universities and drug companies would simply be manufacturers, and would have to compete on manufacturing efficiency.

Now, we know that the 8 billion came from somewhere in our economy, so at this point it would be an academic exercise to figure out how to extract that from the economy and transfer it to universities to do the research.

What I'm saying is that we need to remove the profit motive in health care, because there is no elasticity in the market. People will pay infinity to keep living. There is no price point where someone says, "that's too much" when it comes to health care, so the market doesn't operate like any other.
>It is getting that money back as those assets mature.

The Fed printed trillions in new money and pumped it into asset classes, mainly the housing market, through a middleman--Wall St.

Even if you ignore everything wrong there and just say "they eventually got some of their money back" like you did, it still matters that they printed (ie effectively stole in real terms) 4 trillion dollars that they didn't own.

If you or I went out and printed US currency and bought securities with them--we'd go to jail. They wouldn't care that we made money on our investments.

Most of the profits from QE appear to have gone to Wall St (1), whom made 650M from it.

If the Fed is going to print trillions, at least buy healthcare or space exploration with it. Stop this circle jerk nonsense with Wall St.

1-http://fortune.com/2014/07/23/big-banks-made-650-million-off...
Equifax should have been fined billions not just had a credit downgrade.
Yes. It's amazing how many people don't know how to use limit orders, though entirely unsurprising since RH is a very beginner friendly platform.
Hey, another site that was built on a Mac and not tested on anything else.

So, Avenir Next is not a system font on Windows or Linux. On Windows, this means you get the browser's default stylesheet fallback, which means Times New Roman. So your site essentially looks like a Word 97 document to all your Windows visitors, and who-knows-what on the various Linux distros.

Take a look at https://css-tricks.com/snippets/css/system-font-stack/ https://www.smashingmagazine.com/2015/11/using-system-ui-fon... and get yourself looking correct for those non-macOS users!

What did you use to build that stylesheet? A framework of some sort?
This reminds me that scarcity is the central problem of economice, but in modern politics people seem to pretend it doesn't exist.
There is plenty of anti-science thinking in certain camps of the left as well.

Phone radiation, GMOs, nuclear power, dietary trends, mushrooms are conscious, the list of foo is pretty long if you look. Along with the anti-math, anti-logic, anti-historical evidence view of economics.

But I don't disagree there is a fair amount of right wing kookage spread about. Perhaps more than it's left wing counterpart.

For a long time I didn't really believe the "right wing" fake news thing was real. I'd never actually seen it. Then I visited my father in law who breathlessly informed us at dinner Obama was going to jail as they had proved his birth certificate was fake! Curious I looked at his facebook feed and almost fell over, it was almost all fake news right wing straight out of a parallel universe and really obviously nonsense for the most part. I don't know where he even found that stuff. So ya, it does happen. And I say that as a person who is very much not a leftist (nor a facebook user).

For whatever it's worth, I like to think of myself as a member of the "do what makes sense party". But we have few members and no groundswell and no formal organization it appears. Sadly.
The lower latency is not an illusion, it is indeed lower latency for servers with high load. If you don't have high load then I agree the need for threads is eliminated - but people using Redis for real work have traffic where this becomes an issue. Multiple processes require clustering or sharding each with its own set of overheads (both in CPU and human terms).

You and I disagree vehemently on this (hence the fork), but I really think your optimizing for your own simplicity not that of the user's. It should be the opposite since the developer has the most insight into the software.
> a lot of the value of HN is in the comments

I'd say this is rarely the case, the exception being technical posts where alternatives, etc are discussed. Most of the content on 'hacker' 'news' are product announcement spam and tesla/bitcoin/737/facebook drama posts that continue beating the respective dead horses. The comments sections for these are filled folks having 'discussions' inspired by the article title by throwing anecdotes at each other, and armchair investigators throwing anecdotes at each other in vain attempts to argue for/against whatever they interpret the article title to mean.

Very often I find myself just visiting 'hacker' 'news' while signed out to find interesting articles to read in all the drama noise and obvious spam.

n-gate.com, while meant to be a very sarcastic take on HN, is surprisingly accurate in their descriptions.
Am building Guile 2.9.2 right now, to try it out.

When Racket (nee PLT Scheme) added JIT on x86, via GNU Lightning, there was a very noticeable practical performance bump for some of my work (dynamic Web serving).
It might push back the date of multicellularity for fungi, but that's evolved many times and I'm pretty sure some filamentous prokaryotes got there first, but I don't have a reference handy.
My wife and I have been married 7 years and we just got a joint account last year so we could deposit a check endorses to us jointly. We have two kids together, but sharing finances seems terrifying.
Robinhood also makes it harder to use limit orders than other brokers. I suspect it's because they receive more payment for order flow when it's a market order.
Maybe nothing. The next recession might be over 5 years away. Who knows if RH will even exist then.
It shouldn’t, but currently is and I have seen 0 signs of any change in direction.
Because some people want to buy it, and it’s cheaper to mine than to transmute or sift through sea water.
A market maker sets a bid (the price at which they buy) and an offer (the price at which they sell).

The offer will always be higher than the bid, and they make the spread between the bid and offer price.

If buy and sell orders are roughly balanced, they will not lose money. The idea behind purchasing flow such as Robinhood's is that the traders are random noise traders, with a balance of buys and sells as such.
Eh, as long as you take a bit of care to make the question come across as genuine and not as snark or feigning lack of knowledge to draw out a comment to be hostile to (which people here are often primed to interpret things as), I think you'll generally either get a useful response and upvotes or no response.

Working around other people's hangups is a real pain, but that's basically what a large portion of participating in a pseudo-anonymous internet forum is about, unfortunately.
That’s me as well.
I look at the individual trading industry like online poker. There are lots of people who lose money playing poker online, yet it is still a huge industry with new suckers joining everyday. People are addicted to gambling even if they have no edge and lose money. It is the same with trading. Just look at the subreddit /r/wallstreetbets.
There are no effective static source code security analyzers. Static analyzers aren't a bad thing to add to a CI pipeline, because why not, but anyone depending on static analysis is playing to lose.

This is absolutely not the kind of vulnerability that pentests tend to miss; rather, they're the first thing pentesters check for. You can miss bugs like this when they're in obscure backend features and your client or team didn't document the project adequately --- though you still shouldn't, and that's part of the point of getting an assessment, to find stuff like that --- but you generally don't miss them in an assessment where the bug is literally "edit a number in a URL".

Web scanning tools will miss findings like this. But, regarding web scanners: see static source code security analyzers.

As for code review: a competently constructed application shouldn't be relying on developers to catch every possible instance where numeric ids are used individually. In modern web frameworks, it should be obvious when you're looking an ID up without doing an authorization check; for instance, in a Rails or Django app, you can simply regex for lookups coming off the ORM class rather than the appropriate association instance.

In sum: I dispute much of this analysis.

People do miss things, even when they're things they shouldn't miss. Put 3 different test teams on the same application and you will get 3 overlapping but distinctive sets of vulnerabilities back. But this is not an instance of the kind of vulnerability that is hard to catch.

see below
Yeah, and of those accounts that are funded I'd guess that many don't have more than $100. Personally I know my Robinhood account only has a couple of bucks in it and I just haven't bothered to close it. I use TD Ameritrade and M1 Finance for the bulk of my actual shares.
Done to avoid errors, then we proceed to put the "\" key directly above Return/Enter and incur errors for decades to come. :)

Early in my career I did this from the command prompt while typing a recursive remove command and basically auto-torched a much higher directory tree thanks to my backslash-equals-return typo.
They make me extremely nervous. Most people I know that use Robinhood seems to use it as they would play dices in Vegas. They have no ideas on the stock fundamentals or why and how the prices change. Most of them are playing a big amount of their savings too which is extra concerning.

What makes me even more nervous is that Robinhood seems to deliberately cater to those crowds of uneducated emotional day traders.

I said this before but they seem to become the "facebook of finance" with the same "break things and go fast" mission. I would never use them for any significant amount of money. That being said, I use them occasionally for options because the fees of traditional brokers are such a joke (20$ typically to sell and buy).
Private companies are building an exoskeleton around Earth
That is very interesting, could you link it?

I wonder if they controlled for store-bought food vs meat-fed. First thing that comes to mind is that most dogs are fed processed, mostly vegetable-based food these days.
> Scott Aaronson's P vs NP survey

Thanks for the link, but again, it only explains why polynomials are interesting, not why we don't care about things bete

> For that matter do you learn any single exponential algorithm in (say) an undergraduate course?

Fibonacci? And basically brute-force solution to pretty much any problem they give you in a first course?

> There are not many "simple" superpolynomial subexponential algorithms, suitable for a typical first course.

Yeah I'm getting to the conclusion this is the crux of it. It'd be nice if they at least mentioned this is why?
What do the base stations look like? Do they also need a phased array antenna or is this something that could fit on a cell phone?
For accountability: Knowing who to sue doesn't really get my $50 back from some jerk. The effort put into small claims makes it a net loss. My best option is a chargeback, and the cert doesn't do anything.

For reputation: I have no idea if that's the company name of Wal-Mart. It's barely better than verifying the domain name.
I don't think anyone was doubting either of those points.
But the government didn’t build them for free. We collectively paid to build them, and now they more than pay for themselves. Roads are arguably the greatest investment the American taxpayer has ever made.

Building pubic-use roads without government planning, permitting, and eminent domain is frankly not going to scale, aside from the nightmare of how all the different owners of these roads would go about rent-seeking.
50% is not super conservative. My guess is 10% is closer to the actual number than 50%.
Indeed. Although technically it's UCS-2 as the low level stuff doesn't understand modern unicode; it just treats it all as a stream of wide chars. It's up to applications to interpret it.

According to this[0] the path limit is nearer 32739*2 bytes as a drive like "C:" gets expanded to "\Device\HarddiskVolume1".

[0] https://stackoverflow.com/questions/15262110/what-happens-in...
You can generate uuids that play nicer with database storage / indexing. NEWSEQUENTIALID() in MSSQL, for example.

The keys will be easier to guess again, but if all you have to do is guess a primary key to get access to the underlying data, something else isn't right anyways.
Peter Thiel's view of going Zero to One (which is commensurate with Paul Graham's view to do things that don't scale) is highly influential. Implicit in this view is that you're doing something without a lot of competition.

Could you speak to the notion of how your view might be different from theirs, including where their view might be inappropriate and when your view to look for existing competition would be more satisfying?
I don't understand why you believe paying fees "usually" results in smaller spreads. Most of the brokerages you pay trading fees to are doing what Robinhood does, because retail order flow is made to be internalized, and firms like Citadel do a better job of it --- for customers --- than the firms that run the brokerages do; the job of a typical brokerage is to make a pretty web UI, keep some servers running, staff a bunch of brick-and-mortar locations, and answer the phones, and the job of actually executing trades is specialized in a different direction. More likely, the firm you're paying trading fees to is handing your order off to an internalizer, getting rebated for it, and pocketing both the rebate and the trade fee.
The idea of beimg able to trade stocks quickly is appealing, however this is a slower version of say trading,which is as difficult as it can possibly get. Ability to buy and sell stock often is a death kiss for 99% of amateur traders.
There is nothing wrong with using sequential ids in and of themselves.

The typical web app has the concept of a validated user session per request. How hard is it really to

Select ... From Documents where documentid = ? and userid = ?

So even if the user does a

GET /Document/{id+1}

No documents would be returned.

Every web framework that I am aware of let’s you add one piece of middleware that validates a user session and won’t even route to the request if the user isn’t validated.
It's even more fun when mixed with sulfuric acid.
No. Even if it were pure platinum that required no refinement it would still be more expensive to return it to earth than to mine and refine earth platinum.
They're not, but when the boomers start to die (we'll they've already started but as the pace picks up), they'll be leaving a lot of wealth to the millennials.
Could have also been Lelylaan (both Lelylaan and Sloterdijk are within Amsterdam proper, by the way)
> This is absolutely not the kind of vulnerability that pentests tend to miss

You're right; they don't. Which is why I called out automated dynamic analysis. I.e. the web scanning tools which you subsequently mentioned:

> Web scanning tools will miss findings like this.

---

> As for code review: a competently constructed application shouldn't be relying on developers to catch every possible instance where numeric ids are used individually. In modern web frameworks, it should be obvious when you're looking an ID up without doing an authorization check; for instance, in a Rails or Django app, you can simply regex for lookups coming off the ORM class rather than the appropriate association instance.

Right, which I also stated:

> As for best-case prevention: accomplished generally architecturally, e.g. language/framework decisions that enforce secure coding practices by design, or implementing certain patterns in development which whisks away some of the more risky coding decisions from engineers who may not be qualified to be making them, such as mandating authn/z and limiting exceptions only to roles and change processes qualified to make them. Checks including linting for specific privacy defects (direct object referencing using sensitive data or iterative identifiers as opposed to hashes/guids/etc) can help with catching them during development, and as you might've guessed, such checks tend to be custom for a given environment rather than out of the box.
You’ve given up a lot of future income - a lot. Do a FV calculation on 150-200k a year in your 20s (working 10 years and compounding 30) over 40 years. Work the next 10 years and then go back to being an entrepreneur.
Every other brokerage that sells services to normal people also does this.