skysight-inc/HackerNews huggingface dataset:
Last week ended on a real low note for many of us at DO. We took a perfectly good customer and gave them an experience no one should have to go through (all while he was trying to leave on vacation no less). We can and must do better. To do better we need to learn from our mistakes. To that end, we also think sharing the information about this incident openly is the best way to help all our customers understand what happened and what we are doing to prevent it in the future.

Yesterday we completed our postmortem analysis of the incident involving Nicolas (@w3Nicolas) and his company Raisup (@raisupcom). With their permission we are sharing the full report on our blog here:

https://blog.digitalocean.com/an-update-on-last-weeks-custom...
Presumably the open source package in question would just support the Postgres protocol, with cockroach being one option? What else are you envisioning there?
A Giant Stellar Eruption Detected for the First Time
On a side note, I wish the term, "sophisticated investor" wasn't the official one.

It's a misnomer because it implies there is some kind of knowledge or skill threshold required.

What it really means is "has enough money they can afford to lose some".

In reality, there are plenty of people who have tons of money and not a clue how to invest it well.
I think collectivism in the context of labor is definitely something people should have access to if they want it. This is why national sovereignty is a wonderful thing. That being said, many regulations and rules around labor can hinder hiring and increase barriers to entry for new businesses. Both approaches have their merits. I personally prefer to have greater economic and business freedom, but that may not the preference of everyone.
> Image search site results are the same thing: I just want the raw image URL!

For what it's worth, Google removed direct links to images as part of a settlement.

https://9to5google.com/2018/02/09/google-images-features-get...
Someone has mentioned this, 256 would be ideal for an enviroment where users store thier stuff on network drives.
> What kind of advantage does it give to the general user, who flaunts the fact you can do that on android?

As a member of one segment of the cellphone user population, I'll say none, really.

The ability to root your phone, IMHO, simply makes it yet another device that sucks up admin time.

Life is too short. This is the major reason I'm a participant in Apple's walled garden. I don't want to mess about more than necessary with a device that I regard as a tool. If my hammer required admin time, I'd dump it.
we're a/b testing the button copy... the Starter package is free and the Growth package pops up a plan builder with pricing.

It's complicated because the price is based on your user volume so there's not a single price to show. We've heard this feedback though and are working on an improvement!
An update on last week's customer shutdown incident
that's kind of a "for now" issue. eventually these will become common enough that things will shake out, but it will take years.
Recursion Error While Handling Recursion Error
Cynic in me: it means a similar product is soon going to be offered as Amazon Basics, i.e. grab the original while you still can.
> Perhaps, at that level, the earth's system (if you will) is more unique than we realize?

That would surprise me, given how robust Earth life already has to be. I mean, it wasn't fun, but Earth "sustained life" through several massive volcanic events, giant meteors, and climatic changes, to say nothing of magnetic pole reversals, et al. It seems that once life gets going, it can tolerate a lot of crap.
> it's pretty common for apps to either find ways to escape it

These sound like security bugs, which should obviously be addressed, but "there are bugs" shouldn't be a reason to dismiss the entire goal of isolation-based security. When it comes to the browser, there are obviously occasional issues to do with colouring of visited links, sandbox escapes, information exposure due to speculative CPU execution. Overall though, what's important is that there is a security model and that the implementation issues are addressed.
Broadband speed map reveals Britain’s new digital divide
> Well-written spinlocks are absurdly fast

They're fast if there's low contention. If you have high contention then they burn CPU cycles needlessly and can be significantly slower than something more clever like Windows' CriticalSection.
I think this point has merit and it’s important for us to think of ourselves as part of the environment, but also, there are lots of other animals (like most of them?) that don’t care at all about the environment and the only reason they don’t destroy it in pursuit of their vital resources is that they can’t. There are endless stories of animals eating and breeding until their ecosystems are destroyed and they suffer massive die offs. Of course that tends to happen most often to invasive species, but nature certainly does not keep itself in balance through conscientiousness.
Warning about complexity and gatekeeping are not the same thing.

First-year programmer says "I can't wrap my head around Python, I'll write my own language!"

A response of "You're an idiot, don't bother, people smarter than you have tried and failed" is gatekeeping, and shitty.

A response of "There is a lot about this area you do not understand, be aware that it is a lot harder than you seem to think it is" is cautionary, but not gatekeeping.
That's because NYC and most of America is dysfunctional to the point where people think that a 18 lane road is not just necessary but actually a good idea. Not a single place in the US has good public transport. Maybe good to US standards but thats a low bar.
It doesn't look like a production typeface to me.

Looking at it I feel that I could make something like it, even though I haven't done it before, simply by putting in the required time. (This is not some idle thought; I definitely do not feel that way about any other font I've seen in the last 20 years.)

It has nothing but straight lines and rudimentary curve segments and arcs, using a fixed stroke width with rounded ends.

There seems to be no attention to kerning, so chances are I wouldn't have to learn anything about that topic to make a font like this.

The kind of variation seen here among the multiple styles and weights looks like something that can be cranked out by varying some generic global parameters.
Personal use aside, I've been meaning to try out firefox for development after seeing some of their release announcements here. Any tips for people like me who are accustomed to chrome devtools? Are there some things you can do in firefox that you can't in chrome, and vice versa?

I do look forward to the chrome devtools release videos, always learn something new.
Read again.
She can’t be fired, she owns the company. There’s no VC in Adafruit.
For others that are curious, there's an example of lock XCHG spin lock for amd64 here:

https://en.m.wikibooks.org/wiki/X86_Assembly/Data_Transfer

Ed: well technically x86 I guess - not sure if there's improvements to be made for amd64?
Kik Responds To SEC Complaint

> Eileen Lyon, Kik's General Counsel commented, "For the reasons set forth in our Wells Submission, the SEC's complaint against Kik is based on a flawed legal theory. Among other things, the complaint assumes, incorrectly, that any discussion of a potential increase in value of an asset is the same as offering or promising profits solely from the efforts of another; that having aligned incentives is the same as creating a 'common enterprise'; and that any contributions by a seller or promoter are necessarily the "essential" managerial or entrepreneurial efforts required to create an investment contract. These legal assumptions stretch the Howey test well beyond its definition, and we do not believe they will withstand judicial scrutiny."

https://www.prnewswire.com/news-releases/kik-responds-to-sec...
Congrats to all the students and good luck to all of them.

But this is personally so disappointing to see no work on PackageCompiler.jl. I think PackageCompiler.jl + some sort of core support for interfaces and traits checked at compile time is what Julia sorely needs. Right now there's just SOOO much boiler plate and resorting to a third party package to solve these problems in the language is starting to get to me. Coupled with the fact that if I want someone to use my code I need to get them to install Julia, configure their environment and run things in a very specific way and I'm looking for another language to put my weight behind.

Anyone else want to share insights about writing large applications and deploying it to users in Julia?
Alter the scrapping so it looks like normal activity.
Why do you need to calculate it upfront? Have a simple feedback loop by setting an initial tax level and adjusting it up or down compared to your target emissions curve.
Why not just set a shebang like

$ cat foo.sh
#!/usr/bin/env zsh
echo $SHELL

Which most editors understand.

$ file foo.sh
foo.sh: a /usr/bin/env zsh script text executable, ASCII text
$ vim --clean -c ':set filetype?' foo.sh
...
filetype=zsh

This ALSO ensures that the correct shell is invoked on your script, instead of your current or default shell.

$ ./foo.sh
/usr/local/bin/zsh
either you're kidding... very good... or your ISP is doing that... but wait that's not possible for https content is it? I don't know, nothing's implausible in this world anymore.
Normal use case, yes, this is only stuff I work on. When collaborating you must assume heterogeneous development environments which make this kind of thing useless.
No idea how often they go after it, but if you pay your attorney with ill-gotten gains, those funds can be confiscated from the attorneys for restitution to the victims.
Why, then, do the companies only offering one class (South West, Ryan Air) tend to make a profit, while the ones with multi class (KLM, Air France, American Airlines) tend to lose money?

That video is very wrong compared to real life. For the first: it assumes a full plane. My experience is that economy tends to be full, business has a lot of available seats. For the second: it does not account for the cost of running lounges, fast track security and other complimentary services offered to business and first class passengers.

Look at the companies. Filling the plane with economy passengers and offering low service level is what brings profitability.
I think their point was slightly more detailed in that they were advocating non-software interlovks
>The web is obviously strongly based around a security model where a website ultimately can't do much in terms of information access

Recently posted on HN: http://http.jameshfisher.com/2019/05/26/i-can-see-your-local...
I wonder how many people use the same PIN for their voicemail as for their bank accounts?
Digital Ocean's follow-up to "DigitalOcean Killed Our Company" https://news.ycombinator.com/item?id=20064169
70% chance if your in Centurylink's territory they'll offer you 1 Gig for $65 a month (no contract, free modem, price for life, no BS fees) that you can sign up for here: https://www.centurylink.com/home/

If Frontier is your RBOC, they have 300Mbps for $50 iirc in 90% of the non-rural areas they serve. Check https://frontier.com/order-online/plan/package

Comcast is hot garbage, both the offerings I mention are fiber, and the gaps seem to be caused by poor enforcement of the franchise agreements in the relevant locality, eg: Frontier was supposed to have 100% fiber coverage in Kenmore a decade ago, but the city isn't consistently assessing them fines so there is no reason to meet the contract.

Seattle has no universal coverage mandate, but a complex customer income weighting metric to prevent redlining. IMO we negotiated a worse agreement than Kenmore: https://www.seattle.gov/tech/services/cable-service/cable-fr...
Don't just be the change, mass produce it
Yes but I suppose that’s the risk Kik is taking for the entire industry whether the rest of crypto is ready or not. A bunch of judges who hardly understand what cryptocurrency is, let alone how it works, will very likely come up with a new test to determine whether a digital asset is a security. That test might be very narrowly tailored to the specific facts and circumstances of the kik case or it might be very broadly constructed so as to sweep in far more tokens than even the SEC intended. Rather than simply waiting for the SEC and industry to organically work through the confusion Kik is taking a big legal risk because their back is against the wall. But the risk they’re taking has the potential to negatively impact many others.

I’m hopeful that, whatever the outcome for Kik, Congress will amend the definition to provide everyone with some clarity one way or the other.
It would literally be the same phone with the same software, but rooted.
I see what you're saying, but I think we can do better.

I would really like some simple way to limit what build scripts can do. For example, they shouldn't be able to read and write arbitrary files in my home directory, even though they should be able to read /usr/lib and the like. They shouldn't be able to contact the Internet (or even the LAN) without explicit permission. They shouldn't be able to do anything with my display unless I permit it.

Is there some command available for Linux that lets me set up a quick sandbox so I can detect and stop trojans in build scripts? Virtual machines, chroots, containers, and Docker are all good but they don't solve this problem. SELinux has the potential to solve this but it's extremely complex. Instead of "./configure && make", I want to type something like "sandbox ./configure && sandbox make"; sandboxed build scripts should work the same as if they're outside the sandbox.
* f-string debugging.

* `python -m asyncio` gives a async repl that supports top level await statements.

* unittest.mock now has AsyncMock that can mock async for, async with and other async related code.

* math.comb to compute binomial coefficients. math.perm and math.isqrt were added.

* unittest gained support for async test case.

* importlib.metadata got merged providing API to access package metadata.

* Threading module now has an API to get native thread ID.

* multiprocessing.parent_process got added.

PEPs merged. 4 PEPs were merged in a single day with a week before beta release.

* [Runtime audit hooks got merged PEP 578](https://bugs.python.org/issue36842)

* typing related PEPs were merged : Add final qualifier (PEP 591), Literal types (PEP 586) and TypedDict (PEP 589)

* [Python embedding got better with PEP 587](https://bugs.python.org/issue36763)

* [Vectorcall for functions got merged PEP 590](https://bugs.python.org/issue36922)

* [New pickle protocol with performance improvements PEP 574](https://bugs.python.org/issue36785)
Can you sketch what you mean by there being a good chance some type of cryptocurrency will replace the financial system of today?

Is the idea something along the lines of the double forces of greed and fear causing the perfect bubble? The one that doesn't pop because it eats its own downside on the way?

Why won't governments just shut down the on-ramp exchanges if the space ever looks like more than a way to gamble or make hidden-ish transactions?
If "business sense" causes them to make business decisions which increase my privacy when I use their products, I don't care what the rational is.
Well since I rustled jimmies, I'll add another $2k for the two people who downvoted me. I'm pledging $3k now.
> A special register one CPU could write to, and the rest could read from, for example

Finally, an actual suggestion! OK, how are you going to mediate the thread access so one 'owns' it exculsively for writing while others can rad it? And when will the other threads know when there is something to read? And how wide is this register - 64 bits? And how much overhead will there be for this negotiation between threads? Something like:

x this register is mine for writing, all acknowledge please

x each thread acknowledges (taking various times as each thread lives on different cores/sockets so limited to the speed of the slowest)

x writer thread writes to register

x writer thread releases lock and signals one or more reader threads

x reader threads read and acknowledge lock so another writer can claim the lock

Quite an overhead. Now do that multiple times and it gets slow because it's only 64 bits, which is a lot of overhead for each chunk of data.

Compare that with multiple independent cache lines of 512 bits which can be filled and read independently, then passed around using existing, highly tuned and extremely fast cache coherence protocols that already exist.

> Changing levels of abstraction is very useful, often powerful, and no one is above a reminder to do so.

AFAICS you didn't specify anything until this post. How can we evaluate a claim of 'there has to be something better' until you give it?

> Please review the thread and try to find the understood references to Hennesy & Patterson which precede your linking to it.

Can't see any.

> While you're at it, please substantiate where any mechanism I've suggested violates the rules of physics, C, relativity, or electromagnetism

I was responding to this details-free request: "Shouldn't we have better hardware support for communicating threads?" Better has cost. You just seem unaware of the tradeoffs.

> Also, I've been reviewing your comments. They're somewhat quick to talk down and jump quickly to high handed conclusions about where other commenters are coming from

Yeah, not one of my finer features :( but if someone suggests something solid I'll talk, if someone is willing to learn I'll try to help, and if I'm wrong I'll admit it straight away.
> And in practice, how is that different from a locked queue that simply discards data when pthread_mutex_trylock() fails?

The difference is that it only discards data when the queue is full. If you discard data when a trylock fails, you'll randomly discard data just because the other side happened to be looking at the queue at that moment. In the common situation where the consumer is being fast enough to always drain the queue before it fills, it's the difference between not discarding any data versus discarding an unpredictable subset of the data.
For anyone (like me) that needs a reminder: https://blog.npmjs.org/post/141577284765/kik-left-pad-and-np...
> Making sure someone reads your research.

There are several motivations to write and publish, and being read (by the widest possible audience) is only one of them. Even if we put the most mundane reasons (publish or perish, publish to make money) aside, there is at least writing (and publishing) for the purely selfish reason of recording your ideas and, by doing so, making them more permanent and more real, as it were. I remember, during my academically active years, I never cared in the slightest whether anyone was going to read my papers or my book. If anyone was interested in my subject and were curious enough to discover them, they were most welcome to them; but it was entirely immaterial to me whether anyone actually did. This doesn’t mean I didn’t put any effort into writing those texts; quite the contrary. But writing them was a goal in itself; it was never a means to anything for which it would require wide audience.

I can’t imagine this attitude is unique.
https://news.ycombinator.com/item?id=20078347
I think the average shopper would interpret "Staff Picks" as meaning "wine that the staff recommends" instead of "wine the store is hoping to sell." It's disingenuous at best.

For the record, my friend initially refused, and then compromised by labeling them "[Manager name]'s Picks".
70% of the city proper has gigabit for $65 a month from Centurylink, OP is out in the fringes where they allowed VDSL2 deployment years ago (whereas Seattle was on ADSL), thus they missed out on upgrades in the last few years. Coverage map for the city proper: https://www.seattle.gov/tech/services/cable-service/cable-fr...

ex-Verizon areas that aren't rural generally have fiber coverage, excepting Finn Hill. They committed to a bunch of smaller suburbs to have 100% fiber coverage by 2008, which mostly got done. Sadly, they only go up to 300mbps symmetrical for $50/month iirc.
In my experience, it's very easy to spot when someone uses a cover letter that is based on samples like these.
I like `50ch` myself, but it's still workable up to about 65ch. (Aside) look into the ch unit if you've not used it since it is width based vs em which is height based it is a great choice for something like line lengths.
"Why the assumption that Past = Right/Conservative and Future = Left/Progressive?"

No, that's not really what I am saying ... and you are correct, that would be a very blunt oversimplification (or just plain wrong).

What I am saying is that in an unbroken thread of society (that is, absent disaster or revolution or other "resets") views and mores become viewed as more and more conservative by each successive generation that succeeds them.

As I wrote, "progressive people, and their opinions, turn into reactionary conservatives with nothing but the passage of time." I don't mean that those people become conservatives, I mean that successive generations view them as more and more conservative.

I don't think that implies that conservative views are backwards - unless you start with an assumption that "new is always better". I don't assume that.
The biggest thing that keeps me from even trying CockroachDB is that there's no clear licensing or managed server pricing on the website. It's all a sales funnel.

Of course, I don't mind and understand the license change. I just wish they were more upfront about pricing without being subjected to sales.
A list of every book Paul Graham has mentioned
Please don't post unsubstantive comments here. We're looking for considerably better than this in HN threads, regardless of your views on scams, ICOs, or scam ICOs.
> I mean, you can draw a big circle around all your development activities. Products have been invented that do that. They're called "IDE's", and are sort of the metaphorical opposite of the command line tools we're discussing, and not really a solution to the people choosing to use this environment.

Maybe? I don't really think it's an opposite thing anymore. Most of my projects are written/browsed/debugged in an IDE but not built/configured/etc. in the IDE, and the testing, git, docker, code review, etc. work just happen in a console instance or web browser next to the IDE.
so the idea is to use a native app thin shell around your pwa to get access to local storage and all the user's mobile data? How is this different than the way in which a blackbox like Flash breaks the security sandbox? How is this not ripe for abuse?
Nah, just that they didn't figure out how to utilize it yet! :)
Can't compete with Brave.
It seems to be a century-plus-long trend, to go by this fun interesting book https://www.amazon.com/Where-Did-Out-What-Nothing/dp/0393339... written in the 1950s contrasting the author's childhood with the kids thenadays. My 1970s childhood wasn't too different from the 50s described, but had a little more control-and-safety, especially starting in the 80s.
Docker could do that for you. Windows also got/is getting a lightweight sandbox though I don't recall how to invoke it.
Pirates of the Caribbean was a Disney film from a director with a record of past successes, a team of actors largely pulled from blockbusters, and an executive producer of some of the most memorable and (at the time) highest-grossing crossover blockbusters. It was not a risk to Disney at all.

Dr. Dre, one of the most successful rap producers of all time, signed Eminem after watching him perform. By then, Eminem was already well-known in local circles for his rap skills, and there was no risk of him being seen as Vanilla Ice (a joke, incidentally, which worked its way into 8 Mile, which was loosely based on the life of Marshall Mathers).