skysight-inc/HackerNews huggingface dataset:
Lots of things can influence the placebo effect, branding is one of them:

> and we know that two placebo sugar pills have a bigger effect than one, and that an intramuscular placebo injection is more effective than a placebo sugar tablet[...]

> And a four-way comparison, with either sugar pills or aspirin, in either unbranded aspirin boxes or mock-up packaging of the Dispirin brand, showed that brand-name packaging, and the wealth of advertising and cultural background material that packaging plays on, had almost as big an impact on pain as whether the pills had any drug in them. So in some ways, it's not irrational to believe that costly Nurofen is more effective than cheap unbranded ibuprofen, even if they've both got the same active ingredient.

https://www.theguardian.com/science/2004/apr/15/badscience.s...
There is a loop in the spanning tree.....
I prefer these methods as well, but password simplification is a user choice, not a causal effect. Any secure password generator and vault, keyfobs and various other methods are great ways to compensate for a password that expires every so often. While I'm not entirely in line with the idea of "forced" password expiration, it's often the only way to ensure that the end user actually updates their password regularly. There are definitely better ways than raw expiration. Why not present the user with a screen that basically says "hey, your password hasn't been changed in __ time, you'll need to fix that now to access the system" when they log in after the set time period?
You can't force entropy out of people when there is only so much, regardless of how often you believe you're make them "change" passwords.
You give people more money for less work by making it policy. UBI, in other words. Captalism isn't going to do this one on its own.
Yes, same here in UK (for some hours now).
Moving away from Oracle DB is a herculean effort given the heart of Salesforce is still a lot of PL/SQL code :)
To be truly scalable in the modern sense, they should move to a reactive architecture - which means they would have to completely rearchitect the platform with a non-blocking backend. Unfortunately, there aren't many options for them as JDBC can't do non-blocking IO.
I remember when S3 was down and the status was green because the updates for the status page with pushed via S3.
I'm not opposed to the idea, but I think there are more politically feasible solutions:

1. Expand the CCRB[1], both in number of civilian investigators and their authority to pursue investigations without interference from the mayor/city council/police commissioner. A line has to be drawn somewhere in terms of power granted to an independent review board, but I don't think we've even approached that line yet.

2. Change city/state law to prevent police misconduct settlements from coming out of city coffers. The public shouldn't have to pay twice (or three times, depending on how you look at it) for crimes perpetrated by the police. Settlements should come out of NYC PBA funds, insurance, or some other source that disincentivizes the force as a whole from covering for "bad apples."

[1]: https://en.wikipedia.org/wiki/Civilian_Complaint_Review_Boar...
Working here but slow (I'm based in Central Canada).
> west Germany

Unless you mean western Germany I recommend you pay more attention to the news.
the ferocity of human battles before modern weapons are explicitly re-enacted with a fullness of pain, rage and despair. Solution "no one should do any violence" and "all animals become peaceful" has yet to emerge signed -psuedo-Hemmingway
I still expire passwords on a yearly basis for the sole reason that users have complained to me that it stops them from using the password they use for everything else.
Guess they don't eat their own dog food; no racks of proprietary Apple servers anywhere (unless they somehow run Darwin images in Google Cloud)
Let's test it: is this blocked? https://outline.com/99a78v

What about this (expires in 7 days, but does require an actual download. It is a FF screenshot of the BBC page): https://send.firefox.com/download/0fc126b73012ee50/#o_bILCxP...

I'm curious, because if they analyze these links (or even this message) I figure it would be easy to identify.
I think it’s actually quite simple. The Chinese fear the American government more than the Chinese government. Therefore they care more about the legitimacy of the Chinese government and are willing to elide whatever mistakes their own government may have made. That their government may or may not have told the truth about Tiananmen is immaterial.
Mostly, if implemented properly, sure. I would agree with this.
Hmm depends on the country I guess.

But believe me there are bad doctors out there (your specific case) so you'll have to switch.
G suite was broken for me 20 minutes ago (in Europe) but is working now. Perhaps things are starting to come back?
In python you could use just a regular function with a for loop. You can do that in javascript too. But the versions using smaller components can be faster to write and more composable. Really depends what kind of style you like and what you are trying to do..

const min_max = function min_max(iterable) {
const it = iterable[Symbol.iterator]();
const {value, done} = it.next(); if (done) return;
let min = value, max = value;
for (let x of it) {
min = Math.min(min, x);
min = Math.max(max, x);
}
return [min, max];
}
min_max(readings);

Anywhere that would be appropriate for a generator in python can also be a generator in Javascript though.
My whole house is covered by a Nest Secure alarm system. At the moment my Nest Guard is telling me "it's offline". But if someone breaks in the house, the alarm will still ring in the house, however I believe I won't be notified on my phone (can't even log into the Nest app), and the alarm monitoring center (operated by Brinks under a partnership with Google) probably won't be notified as well, which sucks. I'd love to test it right now, but my daughter is sleeping and I don't want the alarm to wake her up...

I wonder how often outages occur with other alarm monitoring companies. They certainly do occur, but customers don't have a lot of visibility into them.
Just curious, is this on a specific region(s)?
Outside of a autocratic, centralized economy I would wager that it's natural for an economy to "find new work" for labor. The fact that we have increased automation does not mean that the labor force should shrink along with it, it should mean that over generations people do new things. An office supply company in the 70s would bet big on fax machines, with the ubiquity of email a comparable company today might focus on ergonomic office supplies.
>I wonder who asked the Tiananmen question to the minister from the audience in Singapore. That guy has some backbone, I like it. They should be challenged on the topic of their political repression more. And not just the typical American channels which Beijing finds easy to dismiss as western propaganda.

In contrast to the man in the audience Singapore was one of the first countries to normalise relationships with China, and in his biography From third world to First, Lee Kuan Yew actually seems somewhat supportive of it because he contrasts China's handling of the situation with the collapse of the Soviet Union.

And realistically a country like Singapore is always going to be best positioned by keeping its relationships to opposing forces like the USA and China ambiguous. Committing to one side will draw a reaction from the other, and for smaller countries that's devastating. The space for most freedom and autonomy for a country like Singapore is right in the middle, in a competition between two large nations, choosing sides is a bad move.
You can just go visit China and see for yourself. Beijing / Shanghai at least, but better yet outside the top tier cities (if you can get a proper Visa for that).

I found it almost funny that you just cannot say anything negative about anything Han-related. Few months ago I was having lunch with somebody considered educated & globalized (went to school in the UK, works in a Canadian VC firm in Beijing). The minute I said that my air quality monitor[1] is reading PM10 100+[2] in Beijing so I need to wear a mask, she said I was exaggerating and that the monitor firmware was modified by American propaganda machine.

Then this other guy went on a rant of Aquaman (movie) being a great Chinese achievement because it's directed by James Wan (Wan is a common Han last name). The guy is Malaysian-born Australian who made a career in LA.

I don't particularly care if that's how people prefer to live their life (if it works for them that's fine). I just find it funny and weird every time I go there.

[1] https://www.amazon.com/dp/B07DJ1WCVP

[2] https://www.who.int/airpollution/data/en/
In the US I use Hivelocity. If you want cheapest possible, Hetzner/OVH have deals you can get for _cheap._
> Right now, right here in the real world, the cognitive function of brain tissue can be boosted— without engineering, without augmentation— by literal orders of magnitude. All it takes, apparently, is the right kind of stress.

The implied benefits assume the effect would be cumulative... but perhaps sheer brain mass is not the limiting factor in a body, which is why these cases aren't as detrimental as expected. i.e smaller mass of brain tissue tries the best it can to fill the potential available to it.

As a crude and purely fictitious example: what if something in the brain stem defines how much useful contentedness can be exploited? similar to how a north bridge defines to some degree how useful a "capacity" of CPU is - More is still better, but for many tasks there are diminishing returns past a certain point due to the basic bandwidth limitations.

In this analogy these people would still have a fast bus, but a rather small CPU - but you can still do a lot with that CPU and fast bus if you use them in the right way and were forced to.
You can you build competing Cloudflare business if you are a tier one ISP. Other AntiDDos services exist like for example Akamai and Arbor networks.

https://www.esecurityplanet.com/products/top-ddos-vendors.ht...
I sent in the NIST announcement to enterprise sysadmins last year as an opportunity for improvement. They closed as wontfix. I dont blame them for moving slow. This hopefully will move them a little.

They have a guy whose job is basically to deal with unlocks after password changes.
If you can compile your C++ to wasm, it will work. The tooling doesn’t support it natively at the moment, so it’s not as simple, but it should work!
HN software has no such flagging mechanism.
That doesn't even make sense. Not charging isn't part of the definition of a monopoly.
It's an insane amount. I've worked on writing helpdesk software for almost a decade now, and from time to time we are asked by our customers to run some analysis on their data; password resets are usually from 25% to 50% of the total requests to the system.
We’re required to have password expiration by law in the public sector of Denmark. So I’m sure we’ll continue to have it for at least some years to come.

I must admit I never really understood the function of it. Obviously lifetime access is more damaging than 3 months access, but the truly devastating thing is the unauthorised access itself not the length of it. Also the policy results in really bad practices like people using summer2019 as their password or writing their current password down on post it’s. We tried blocking stuff like summer2019, but people get really creative. People also forget to renew their passwords, costing hundred of hours in the process.

We have 2FA now, which will soon be required by our adoption of the GDPR, but you have to wonder why we didn’t get that decades ago instead of the password expiration.
They didn't find DNA from any of the five. They found the DNA from a sixth person the couldn't identify. This person confessed to the crime years later (after the statute of limitations passed), and also claimed he acted alone in that particular attack (the five were part of a larger group participating in multiple random assaults on bystanders that night).
There are many others for example Imperva, Akamai and Verisign.
> You probably know this, but you can burn CD-Roms of most games and play them in the Dreamcast, super easily

Guards! Guards! /s

I will be sure to agree to play ONLY the games I own as back-up...in my imaginary jury panel.
Quick update from Germany, both youtube and gmail appear to work fine
Very different from a housing crash in important ways, that's for sure.

Vehicles are much more "liquid" -- they're portable and fungible to some extent. A bank repossessing many vehicles will get much more of its money back than a bank trying to sell foreclosed houses.
Are you thinking of the protests in 1968 at the Democratic National Convention? It was the police, there, not the army. I don't believe there were any deaths there, though. Maybe you're thinking of Kent State? That wasn't affiliated with any party's convention.
To balance all the negative comments about readability, I do think .reduce is often more readable than its traditional alternatives.

Simply because its use cases are always the same so you can guess the code without reading it:

* Reducing an array of numbers, with a number as initial value? => We are going to do some operations on those numbers.

* Reducing an array of objects, with a number as initial value? => We are going to do some operations on one or several props of those objects.

* Reducing an array of objects, with an empty object as initial value? => We are going to create a key/value object with computed key names.

Then just by reading the name of the variable on the left of the assignment, you know exactly what's going on.

And if you don't need to know about the details, you can just jump to the next statement.

const products = [product1, product2, product3]
const sumPrices = products.reduce(/* I don't need to read this */, 0)

const users = [users1, users2, users3]
const usersByFirstname = users.reduce(/* I don't need to read this */, {})
const usersByLastname = users.reduce(/* I don't need to read this */, {})
> How would you go about injuring yourself with borax? It's poisonous, so a small child might eat it.

That's a significant issue when you're using it to make toys for children.
https://www.reddit.com/r/sysadmin/comments/bw1gye/most_googl...

https://www.zdnet.com/article/some-internet-outages-predicte... 768k Day
Years ago, when I was playing with AWS in a course on building cloud-hosted services, it was well-known that all the AWS management was hosted out of a single zone, and there were several days we had to cancel class because us-east-1 had an outage, so while technically all our VMs hosted out of other AZs were extant, all our attempts to manage our VMs via the web UI or API were timing or erroring out.

I understand this is long-since resolved (I haven't tried building a service on Amazon in a couple years, so this isn't personal experience), but centralized failure modes in decentralized systems can persist longer than you might expect.

(Work for Google, not on Cloud or anything related to this outage that I'm aware of, I have no knowledge other than reading the linked outage page.)
They update the page manually.
There goes 3 nines for June and for Q2. I guess everyone gets a 10% discount for the month? https://cloud.google.com/compute/sla
I came here to say this. I can't think of another way to guarantee that they aren't using the same password that they use on every website they've visited since 1997. If anyone has suggestions on this I'd love to hear it.
That’s not what Mongo said. They called out specific issues with AGPLv3’s terms.

http://lists.opensource.org/pipermail/license-review_lists.o...
"Small time attackers" are doing __distributed__ denial of service? I guess if they do not have enough bandwidth but has enough req/s, you can protect yourself something like the article suggests. In my dictionary DDOS is when they are jamming the pipes.
That's amusing but... those same users are likely to be using just altering their passwords a little like "passwd1" "passwd2", etc. You aren't gaining anything.
Playing "is google on this website or not?" just became so much easier, simply see if website works or not.

Scary stuff. What happens when Murphy's law decides to crash things even more?
How to Have a Slow and Boring Successful Career
Smart phone rubbish again. Kids today don’t need to pay for a landline. Or cable. Or cigarettes
This article goes off the rails when it conflates fuzzy set theory with connectionism, and then goes over the cliff when it starts talking about ethics without reference to any of the underlying philosophical theories of ethical reasoning under risk and uncertainty — at least a nod to Nozick would have been appreciated. (The idea that probabilistic set theory somehow destroys ethical certainty is nonsense that doesn’t need to be addressed.) The author, I think, may be a bit out of his field; his PhD is coming out of UCLA’s college of library science, so he’s opining on technology and philosophy without coming out of either discipline.
Please don't break the site guidelines yourself, regardless of how bad another comment was. Racial and ideological rants are not ok here, let alone "I look down on pathetic white trash".

Would you please review the site guidelines and use this site as intended? https://news.ycombinator.com/newsguidelines.html
I'm all over that idea too.
No wonder I was trying Webcodesk right now and it's not working it's all firebase, yay!
I feel like China has learned from Perestroika and made a conscious choice not to go down that path, but instead focus on economic freedoms rather than political. To offer some perspective: the 90's were a dark time in Russia. The Soviet Union disintegrated, taking large chunks of deliberately decentralized economy with it, there was hunger, hyperinflation, deficit of basic goods (same shit you're seeing in Venezuela right now), and the poorer, older, less economically nimble part of society was disproportionately impacted.

This was, in large part, because people were given near total freedom (far more of it than you see in the US today) in one fell swoop, and _way_ before they knew what to do with it. Naturally, some people were much better than others at turning this to their advantage, opportunistically injecting themselves into the corridors of power, buying up previously state-owned factories for fractions of a penny on the dollar, swindling the common people out of whatever breadcrumbs the government threw to them during privatization.

This shit was allowed to run unabated for a decade or so, and ended up with Yeltsin hanging up his hat and apologizing on TV, before de-facto installing Putin as his successor. The people behind this were Siloviki: the powerful folks who run or otherwise control Russia's several security services.

In retrospect, given the amount of pain, death, and suffering inflicted on the general public, it could be that shooting a few hotheads early on would be an objectively better option. The country could then proceed to a much more controlled and measured liberalization, with law and order carefully enforced throughout, rather than a decade-long free-for-all (or rather "a few") that ensued in practice.

That's not to say that Tiananmen suppression was justified. I grew up in Russia, so I was a direct observer and participant of the events I describe above, so in the case of Russia I can tell you with a good degree of confidence that if the wild 90's weren't allowed to happen there to the extent that they did, Russia would be far better off.

Stuff like this also can't be judged by reading propaganda, foreign or domestic, so those who haven't been there at that time should refrain from commenting one way or the other. That'd be just regurgitating someone else's talking points: an entirely pointless exercise.

I'd love to hear from someone who lived in China at that time and for whom this is not something they've read about on the Internet.
Most modern Unixes have syn cookies. You do not necessarily need anything else.
pocket's reader mode does though. (and the rest of the text looks pretty much identical to firefox's reader mode)
https://paritylicense.com/
Almost anything you can think of has a fetish community somewhere. That doesn't make it relevant to general discussion of the thing.
It seems that it`s focused on the database stuff like firebase and firestore.
I don't think they are losing any kind of customer trust.

Unless something is really fucked (like both GCP and AWS being down for us-east) incidents like these are not going to impact them at all.

The cost of either migrating to the other provider or, even worse, migrating to more traditional hosting companies is enormous and will require much more than "service was down for 2 hours in 2019". The contracts also cover cases like this and even if they don't, Google and Amazon can and will throw in some free treat as an apology.

On one hand I find this quite sad, but from a pragmatic point of view it makes sense.
That's generally done to get more medicine, not to find one to help you quit using it.
Radar Contact + FLIR Contact+ Human Eyeball confirmation by two types aircraft != a technical anomaly.

Watch the recreation and the eyewitness testimony videos from multiple vantage points.

https://youtu.be/PRgoisHRmUE (recreation of ONE of the west coast incident, starts at around 9:00 in)

https://www.thedrive.com/the-war-zone/27666/what-the-hell-is.... (note the embedded videos of testimonies)

https://www.thedrive.com/the-war-zone/28231/multiple-f-a-18-.... (new tech, east coast incident years later)
Less than 1% of users are affected

Is there any reason to presume these statuses are correlated?

Apple's issue is

> Users may be experiencing slower than normal performance with this service.
In my experience public status pages are "political" and no matter how they start tend to trend towards higher management control in some way... that leads to people who don't know, aren't in the thick of it, don't understand it, and / or are cautious to the point that it stops being useful.
I'm not an expert, but you could integrate DBs like https://haveibeenpwned.com/Passwords to make sure users don't use exposed passwords?
You can also use `:^F` to navigate your history in a horizontal split using regular motion/search keys.
Importance of Donald Trump S Speech to the Military (Transcript)
I briefly worked at a place that enforced quarterly password changes and I literally used <Season><Year> as my password. I am not good at remembering passwords and I don't think I'm that unusual. Writing them down seemed worse than using a poor password that I can at least remember.

Probably these days if forced I would use <Prefix><Season><Year>. I don't know how much better that is. But luckily now I work for myself.
Nope. I was more thinking of everyone else.
Any key commands they have already set up will still work. Nest is pretty good at having network failures fail to a working state.
They might not be able to actively open the lock over the network is the only change.
Mostly because those sites were never architected to work across multiple availability zones.
Oh all of a sudden we should just accept some pathetically weak argument of "we just don't know". Billions at stake here and yes we can and will severely penalize anyone on the side of nonscience and profiteering where humans are harmed. We can do better. Sorry if it means consequences for certain people.