skysight-inc/HackerNews huggingface dataset:
Wow, three whole months?

I wonder how many other consumer companies would've bothered with a patch at all?

Microsoft would have.

For example:

Microsoft is planning to end support for Windows 10 Mobile devices in December. While Microsoft revealed back in 2017 that the company was no longer developing new features or hardware for Windows 10 Mobile, security and software updates have continued. These security updates will now cease on December 10th 2019...

https://www.theverge.com/2019/1/18/18188054/microsoft-window...
At a financial institution I worked for, they had a separate entrance with separate badges and alarms for the really sensitive stuff.

I only entered that area once, as I was a low-level programmer.

It was also the only company where I never ever made a query on the production server :) (I worked for another financial institution on a more senior role and I did have scary access to the production DB).
Yep. Only thing that worked for me to get rid of my acne. My original dermatologist wouldn't prescribe it, so we moved to one who we knew would. Worked really quickly (within a year, it was mostly all gone), and haven't had issues since.
I think it helps large companies track up and coming startups.
If the system is subject to false positives, students will figure out a way to exploit that, e.g. marked as present when absent via 'masks', Mission Impossible-style.
Meddling in an Alabama election isn't exactly sitting on the sidelines.

https://www.nytimes.com/2018/12/26/us/reid-hoffman-alabama-e...
nginx confirms [1]

> Thank you Alisa and ZDI for the report. ZDI-CAN-8296 & ZDI-CAN-8495 are tracked as https://github.com/nginx/njs/issues/131 … and https://github.com/nginx/njs/issues/159 …. ZDI-CAN-8296 was fixed in the nJS 0.3.2 release, and ZDI-CAN-8495 will be fixed in 0.3.3. Neither bug appears to be generally exploitable.

I am just guessing, but probably only people using NJS have this module compiled.

[1] - https://twitter.com/nginx/status/1134522763731800065
I guessed it would use the pub/sub capabilities of postgres. But it seems from the readme that it use polling, although using the same query which allows cache optimizations. The naive implementation can often be surprisingly effective.
Dell’s Most Powerful Linux Laptops for DevOps Are Here
Every image/video/content hosting site seems to go through this process too. Look at the likes of Photobucket or Imageshack or Imgur or YouTube; they all started out with simple, clean interfaces and everyone liked them, then they became mass market, tried to monetise and were so obnoxious with it that everyone turned on them.

Then again, YouTube is basically an example of a company/site/service which does virtually everything wrong, but succeeds on pure network effect/inertia. The monetisation aspect is probably the least of their worries.
Just ban it period. Stop the madness.
Oh, I feel the move; we're actually from rural Appalachia. He came to Seattle because I'm here and I supported him financially for close to a year until he finally got his feet even remotely under himself. The wilds of Western PA are a rough place to get a start for anyone, and not having a college degree makes it even worse. He spent 4 years trying to find a job other than being a cook at a crusty hole-in-the-wall dive bar with no luck. I convinced him the opportunity was at least better out here, and he made the leap. His wage went up 230% from before and he's closer to 30 hours than the 18 he got previously, so it's far more lucrative, but the COL is also at least 400% more (you can rent an apartment where he lived prior for about 350-450$ a month). Without public transportation of any sort, though, you also need a car, insurance, gas, blah blah blah - and the ~550$ he made a month gross just wasn't going to cut it.

He really is better off here, but he'd REALLY be better off in a second tier city - exactly like you said. That's hard to pull off when you don't have a couch to crash on for a while while you get started, though. At this point he's tried literally every option besides hitch hiking and being homeless, and he isn't too keen to try that; at least now he has a roof and rice and beans, you know?
Heh, that reminds me when a director of one unit of a "world's top 10 brand" I was working at on big data architecture told me that they always knew when I ran anything on the cloud as I brought it down within a few seconds of my heavily multi-threaded processing scripts. I guess DigitalOcean decided that instead of fixing their infrastructure they just kill their own smart clients.

I find this enforced mediocrity pretty appalling. With barely functional "anomaly detection" Deep Learning models with dubious decision making (I did some so I am familiar with the "landscape") it's gonna be a lot of fun for anything slightly deviating from whatever vague norm that can't be explained nor tested against.
He was accused of two things. One was removing the condom during sex and that is not seen as rape but a lesser charge but the other one, having sex with a sleeping woman without a condom was rape. He is obviously not convicted yet so we don't know how it would hold up but in Sweden if someone is too drunk, sleeping or in a otherwise vulnerable position it is seen as rape. There is some more nuance to it but that is generally so.

Of course women makes up shit but it seems pretty far fetched that CIA would plan a couple of fan girls to have sex with him and then claim that he removed the condom.
Presumably, they're more irritated by the fact that the social network they invested in is a ghost town populated by bots and spammers† punctuated by virulent white supremacy. As I'm fond of pointing out, even the Gab accounts that post inspirational landscape photography and "hang in there" photos are, when you dig into their post history, white supremacists. I'd have to imagine anyone who gave a material amount of money to Gab is already comfortable enabling the kind of forum that gave rise to the Tree of Life shooting. But I can't imagine any investor being OK with a moribund social network.

The fact that, in 2019, you can't post on Gab without effectively declaring an affinity for white supremacy (whether you agree or not, that's certainly the message you'd broadcast by doing so) can't help user acquisition either.

† It's been a minute since I looked, but all the accounts I had there, none of which have ever interacted with the site, seem to be, err, popular with the ladies in my area just looking for a good time.
> The easiest seems to be to just point it at a S3 bucket, but given most people have infrastructure on AWS (off-premise means off-premise) having other options supported out of the box is pretty handy.

Sure, having other options is good:
https://min.io/
I miss Fractint. I spent hours playing with that thing as a kid, with no idea about the math behind it (and no Numberphile to help explain it). So I just zoomed and plotted and got really familiar with which particular SVGA modes I could use and which I couldn't.

I still remember discovering Render To Disk and realizing I could save stuff out and open it up in Rainbow Paint... which has been lost in the sands of internet.
Which is exactly why I won’t sign contracts with bootstrapped startups in an enterprise context.
Yes, feels kinda overloaded to me...
If I'm trusting an app to literally take my money, them having access to transaction data should hardly be shocking.
> I find nothing interesting to me

> I'm a real generalist with a lot of interests

You say you have a lot of interests and aptitudes, but your entire post is about how disinterested and not good you are.

Maybe you should identify your interests and your aptitudes and try to align yourself toward that more.
I keep reading that the Lorenz can be modeled on an analogue computer, and I want to find an example of how, so I can port it to a synthesizer and listen to it
Quite simply because I am an American living in the US and those are the most accessible to me and the people I communicate with regularly.
Better than comedy gold.

Comedy bitcoin.
The medicines with phenylephrine are usually labeled 'PE,' which stands for Placebo Effect. Nice of them to be honest with the labeling.
I can't believe there is a whole comment thread on this, when it's actually addressed (at moderate length) in the original article.

Are people only responding to headlines, anymore?
> 1. Drug candidates seeking approval must show non-inferiority to gold standard, meaning they are not worse than the top choice for the same treatment. This non-inferiority is quite easy to game, as we all know statistics are fungible and may be manipulated. If all I have to show is no significant difference, and I can use one of 10 different outcomes or surrogates, well my job got a LOT easier than showing superiority on the primary outcome of interest.

Before they to the test they have to declare a primary outcome to avoid this issue. And most diseases just don't have that many outcomes relevant outcomes you can test for.

> 3. Doctors and geneticists should come together and provide genetic testing to ensure that patients and their drugs are appropriately matched. This could be done in cancer, for instance, as you can genotype the cancer and provide a drug cocktail specifically for it. Another instance would be depression, as some drugs do not work for people with certain neurotransmitter genotypes. Physically, this means that each of us may have slightly differently shaped receptors that different drugs bind to differently. This explains a lot of the difference in drug responses, whether it be SSRIs or alcohol or cannabinoids, people simply have different receptors/biochem.

They're trying, and they're failing hard. Precision medicine has been pretty useless outside of cancer.
Side note: I was given my first student loan when I was 17. I was the only signatory.

I'm still not sure how that was allowed; at least it's an amusing anecdote, though.
I still don't understand using average for a metric like networth. Median and percentiles make so much more sense.
I didn't realize that wooden houses that are torn down are burnt.
We rely almost exclusively on DigitalOcean and the stories about Google shutting down accounts really gives me pause. It's not an isolated incident either, and raising support is next to impossible, so I hear.

I'm lucky enough that my spend with DO is high enough to qualify for support, so if this ever happened to me at least I know I'd get a couple chances to make things right

Were this to happen on GCP I'm fairly certain they'd just black hole my account since I'm spare change to them.
Also, documentation skills.
Perhaps so but there’s no legal protection when wearing such clothing for non-religious reasons, as would clearly be the case here.
"2-man teams generally don't prioritize backups" isn't an excuse for not prioritizing backups.
I'm so glad I grew up during a time when you didn't have to worry about every single second of your life potentially being captured on video and used for some nefarious purpose.

I can't imagine being a kid in this type of environment. Then again, many of the kids who will be unwillingly subjected to this probably aren't informed enough to understand the potential long-term consequences of pervasive surveillance, which makes it all the more evil.

It's appalling that they spent $1.4 million (so far) on this rather than putting the money towards more useful things like teacher salaries or after-school programs. Maybe if they improved the overall school experience they wouldn't need to monitor the kids like prisoners?
Yeah there might be some unpleasant internal conversations following that event
Just become a pastafarian. You can make up your own creed as you go.
pg_auto_failover: Postgres extension for HA and automated failover
Parents.

The time has come to teach your chilluns the virtues of laser pointers, spray paint, and civil disobedience.

It won't take long, I guarantee you.
How likely were they to regress to the mean if we did nothing at all?
Before I clicked the comments button and without reading the article I made a mental bet with myself that the first comment would be something negative (a growing trend on HN I’ve observed). You did not disappoint (well kinda...).

@all: Is anyone aware of any sentiment analysis that’s been done on HN posts across time? I am fascinated by what may be digital equivalent of the Marxist proletariat uprising.
I guess my point is who carries the burden is irrelevant if you have to make a decision based on your state of knowledge.

You have a decision to make, and Bob makes a claim which could influence that decision.

Does it matter where the burden lies? You have to make the decision, and Bob has presented new information but doesn't well substantiate it.

My point is this: From a pure reason standpoint, I think it's fair to always assume the negative when there is not evidence for a positive claim. But in the real world where you have to achieve real goals based on partial knowledge, reason would dictate that you sometimes evaluate and consider claims that are not yet well substantiated, and you might have to do the legwork to substantiate the claim yourself (if you decide there is enough merit and value in doing that substantiation).

My point is the burden of proof is, practically, often on the person who needs to make a decision based on information and not on the person who makes a claim with related information.

---

For Alpha, I didn't have something specific in mind but some kind of combination of "light the atmosphere on fire" and more crackpot "your particle accelerator will create a black-hole" were definitely both in the back of my mind.
That's not true, OVH is one of the few ISPs with an actual free DDoS protection.
> You can lie to yourself in writing but not in code.

You can certainly fool yourself in code, and think you have the solution, or part of it, when, in fact, you do not. If this was not the case, prototyping would be meaningless, as you could only write correct solutions.

I would advise abhishekjha to try thinking one or two steps ahead before starting to write the corresponding code, and to pay particular attention to where it does not work out as expected, because without practice, one is unlikely to advance beyond trial-and-error programming.
The power dissipation problem of current chips (performance is almost always power/thermal limited) is correlated with 2D structures.
Communication is one giant problem: 3D structures could allow for far better colocation of connected compute elements, so we might not have to spend most of our power budget feeding data in and out of compute clusters.
Scaling in 2D does make this problem easier (in some ways!), much as adding a 3rd dimension would too.
The US has been an established and time-tested platform for churning out businesses. All the reasons others have mentioned including culture, deregulation, etc may play a part but to me, it is the post-war head-start and momentum of continued success that has kept other countries from reigning supreme. Countries are constantly losing top talent to the U.S. because we have the money/opportunities to attract them and these countries lose out on any potential successes. Who knows, this could all change if it hasn't already.
Sounds like the slogans they put on Police cars.
JavaScript Party 78: Developer strengths and weaknesses ️ ️
Not everyone uses burqas, and trying to argue for religious freedom when you're using headwear in bad faith is not a particularly good idea.
The biggest issue with a lot of autism research is in how they measure the symptoms of autism. Autistics will often "melt down" or engage in other stereotypical behaviors when the environmental stressors are more severe than what they can deal with through behavior that appears "normal". The more severe the stressors, the more severe and frequent the behavioral deviations.

In short, most scientific approaches will often conflate reducing autism with helping people handle their autism better. It's a pretty chronic problem for understanding the disease, but much less impactful for generating practical treatments. Mental healthcare in general doesn't care much whether it reduces the severity of neurodivergence or the distress and socially problematic behavior caused by neurodivergence.
DigitalOcean better respond, expeditiously (lol TI) or I'll never use them for anything ever again. Extremely dangerous behavior.
> Also IDs aren’t required for cache updates, only the typename.

this is very inacurate. The problem happens when an items is cached with an ID and then another GraphQL request tries to cache it without and ID or vice versa. This is where the apollo-cache-inmemory blows up with an error like this: https://api.media.atlassian.com/file/f82c0ee8-2412-4f1b-8027...

There's even a test for this unfortunate behavior: https://github.com/apollographql/apollo-client/blob/master/p...
Netflix Raising Prices in the UK
Okay that's a rejection of API copyright entirely (which I mostly agree with), but I was more interested in the internal logic of it all: that is, if I accepted API copyright, and if it's a fully general concept (not just software), could you have a situation where Wendy's is prohibited from correctly guessing what you "really mean" by asking for your meal to be supersized?
probably would have been a better business decision to eat the cost of 36 shirts, than fly a photographer and makeup artist out. now nobody gets shirts?

id also argue that influencer is the wrong word for a person with 2.6m subscribers but no influence.
Some people on HN hate Linode because of their past security screwups (which is valid), but having used both DO and Linode quite a lot, the support on Linode is way, way, way better than DO's.

DO's tier 1 support is almost useless. I set up a new account with them recently for a droplet that needed to be well separated from the rest of my infrastructure, and ran into a confusing error message that was preventing it from getting set up. I sent out a support request, and a while later, over an hour I think, I got an equally unhelpful support response back.

Things got cleared up by taking it to Twitter, where their social media support folks have got a great ground game going, but I really don't want to have to rely on Twitter support for critical stuff.

DO seems to have gone with the "hire cheap overseas support that almost but doesn't quite understand English" strategy, whereas the tier 1 guys at Linode have on occasion demonstrated more Linux systems administration expertise than I've got.
Sure. Hopefully it results in a change of policy, or at least a public statement of some kind. Everyone can't depend on the cofounder to come in and save them from bad automation.
Seems like CEOs could be replaced with a spread sheet. As far as I can tell most CEOs basically follow a spread sheet provided by the PE that owns the company. So I never knew why PE would ever seek to fire the 30k a year office manager, when they could fire the 7 figure CEO and half his management team -- if meetings need to be had, we can still have meetings rooms and all the spread sheets can show them self on the projectors -- automated and all.
An actual quote from Lamport: "mathematics is nature's way to show you how lousy your writing is".

It's layered on top of a quote of Guindon he uses in a book about TLA+ in order to make a point for using math to formally specify systems
How do you restore DO Spaces files? Real backups are freaking hard.
Right, that's the whole pro-nuclear argument: individual deaths are what matter, not individual incidents. What relevance do the individual incidents have when you only need 1 nuclear plant for every 500000 solar panels?[1] If we are talking about overall utility to the human race, then why shouldn't we be looking at the overall death count? I just don't see how the potential magnitude of individual incidents factors into that when the overall deaths have already been taken into account.

[1]: Based on an extremely generous estimate of 1000W per solar panel, and a fairly conservative estimate of 500MW per nuclear plant
Backups should be at the top of any todo list.
That was the stupidest comment to me. This guy is desperate for help and this fart-sniffer is finger-waving someone he doesn't know online with unnecessary platitudes.
No, I am running Chrome for a long time now. I use an extension there which doesn't exist for Firefox. An equivalent existed in the old Firefox. I made an attempt at porting it but my JS skills are super meagre.
Go and SQLite: when database/SQL chafes
Typo on the front page, how you do one thing is how you do everything.

>powerfull
>Saving $50 here and there isn’t worth it.

I don't think you realize how big is the price difference between AWS/GCP/Azure and old-school VPS providers like DO, Hetzner or OVH.
The stated aims of the system are easily covertly expanded (and there is ample history to indicate that will happen) to turn the school into a panopticon, building a social graph and personality profile of kids as they grow up.

To me this looks like an openly hostile act.
Where are you getting this from? OVH very prominently advertises their DDOS protection that comes with all their products (https://www.ovh.com/ca/en/en/anti-ddos/faq.xml). In fact, they once used it to explain why they increased the prices of their VPSes (https://community.centminmod.com/threads/ovh-increase-prices...).

And they also have a lot of experience with it because they host a lot of game servers which are very prone to DDoS attacks (see e.g. https://securityaffairs.co/wordpress/51640/cyber-crime/tbps-...), so they are definitely “structured to offer it”.
Accutain is some heavy chemistry and you need to be careful. It slows cell growth at a fundamental level. That is why it has pregnancy warnings, and there are concerns about brain growth. It is a reasonably effective anti cancer agent, you can find some of the clinical trial data if you look hard.
https://outline.com/gqa7HG
More realistically they would have done backups inside DO and would still be locked out. Not many people actually do complete offsite backups to a completely different hosting provider, getting locked out of your account is usually just not a consideration. It’s unrealistic to expect this of a tiny startup.
blocking third party scripts seems to help.
Your point is reasonable in many cases. But in this particular case, the charges would not have been substantially bigger than what this company paid before, and an automated system ought to take that into account.

If I’m a $10/month customer, kill my account early, and it’ll save me more often than not. If I’m a big spender, maybe wait a bit longer.
It leaves a bad taste in my mouth that Reid Hoffman, Jeff Weiner, DJ Patil et al get to live their day to day without the reputation hit or scrutiny of FB because LinkedIn is not as “sexy” a media target despite being notorious for using the shadiest dark patterns in the industry and almost certainly historically more cavalier with user data than either FB or Goog with the lawsuits to back it up.

Edit: I added DJ Patil because he’s built a post-LinkedIn image as a champion of data for good but as the chief data person at LinkedIn almost certainly was the mastermind behind all the shady things LinkedIn ever did with user data.
>it's really hard to follow for someone not used to it

So like anything else?

>Not sure how people enjoy FP.

By virtue of actually having tried it?
> In other words, if you go down the API = recipe path then you logically should go down the code = recipe path as well. After all, code is nothing but a complex recipe for a processor to execute.

Recipes that are a list of ingredients are not copyrightable. Recipes that describe putting love into each stroke of mixing the ingredients and how you learned to spread the frosting just so from your gram are copyrightable.

IMHO, the API is the former, code is the latter. The fact that both code and the API are recipes does not imply you have to choose between both being copyrightable or neither being copyrightable.
Commentary from someone working directly within the field is always appreciated. Thanks for taking the time to write this out.