skysight-inc/HackerNews huggingface dataset:
Most large orgs I'm looking at pretty much just have guys logging into tin, on a "secure" network, configuring things based on written instructions.

Is that better than k8s? Is is VMware? Is it Ansible, Puppet or Chef?

How are we dealing with node failures, are you paging and waking people up or just running everything in super HA? How are you making good useage of your compute, VMs?

What is your better system?
> If you’re not selling anything, it doesn’t apply.

That's not even remotely true.
The problem is that their indifference to how their data is used is starting to affect all of us. As evidenced by the Cambridge Analytica scandal, it’s not just advertisers tailoring ads to you. You now have shady organizations trying alter elections and pushing propaganda into users.

If this leads to voters developing bizarre views of the world that influence who they vote for, then their carelessness becomes our problem.
Seems like a good use of taxpayer money.
The sender already is pre-registered. We're talking about users who have successfully Signed In With Apple ID.
> We must go further and outlaw this business model

Laws work best when they outlaw the harm, not the method. Strengthening privacy rights and pursuing antitrust action around that [1] will deter similar business models in the future. If Zuckerberg willfully violated the FTC consent decree, there are ways to make him pay that discincentivise similar behavior in future.

[1] https://www.nytimes.com/2019/05/28/opinion/privacy-antitrust...
Ask HN: Help naming a product targeted at developers and testers
We (zebrium.com) would love some help in coming up with a term that describes what we do.

We are building a product that helps developers and testers find, triage and fix issues across the CI/CD pipeline. Our technology works by using ML to perfectly structure log data. From there we can perform effective anomaly detection of log data (a good proxy for finding problems), and have a signature builder that allows you to “fingerprint” the sequence of events (including values of parameters in the events) that will identify the issue if it happens again. Since the underlying data is structured, we also make it very easy to navigate and build queries of arbitrary complexity.

We have been experimenting with the terms “CI/CD Forensics”, “Dev/Test Forensics”, “CI/CD Verification”, etc. Do any of these terms resonate (i.e. would you as a developer or tester be intrigued by the name and does the name capture what is described above)?

Any suggestions would be greatly appreciated!
The existence of shadow profiles are pure speculation born out of the idea that just because FB can it will keep every bit of data.

When in reality FB just like any other well company has only stores what it needs as long as it needs to provide the services they do.

On that note I might add that most data (if it wasn’t to begin with) becomes meaningless after a few days
Analyzing Your Email with Mathematica
You don't think that death row conditions are tantamount to extreme torture?
I agree with this. If you really don't collect data, then state it as such. That should certainly bolster confidence by the end users of the system.
Ask HN: Do you trust review sites/blog posts with affiliate links? Could you?
Do you generally (trust|distrust|avoid) online reviews if they contain affiliate links to the products being reviewed?

Let's imagine a site dedicated to reviewing all the offerings in a specific niche. We'll assume the site has no ads, a pleasing no-nonsense design and is entirely transparent about its monetization strategy. Is it even possible for site like this to exist and still be considered trustworthy in your eyes?

When I visit sites that monetize in this manner, the conflict I see is that some products have lucrative affiliate programs while others have none. Obviously, this creates an incentive for the site to favour certain products over others.
They've addressed a number of complaints about limitations of the new API:

>Since the original announcement of the Declarative Net Request API, we have added significant functionality to the API as a result of these discussions. The Declarative Net Request API now allows for the registration and removal of dynamic rules - specified at runtime rather than statically in the manifest. We’ve also added the capability to remove common tracking headers, such as Referer, Cookie, and Set-Cookie.

>We are actively exploring other ways to expand this API, including adding methods to get feedback about matched rules, and support for richer redirects leveraging URL manipulation and regular expressions. Additionally, we are currently planning to change the rule limit from maximum of 30k rules per extension to a global maximum of 150k rules.

They posted a simpler post to the Security blog also addressing these issues.

https://security.googleblog.com/2019/06/improving-security-a...

They lead with the point that most-seemed to get lost in translation, even on technical sites like HN.

>No, Chrome isn’t killing ad blockers
"Competitive" does not ever mean "uncontested". It means the trade-offs are reasonable. Choosing Intel after Zen was released meant making trade-offs -- giving up advantages, such as losing a large amount of multithreaded performance and paying a much higher price, as well as having to disperse more heat at maximum load for the chance at that lesser performance.

Just the same as choosing AMD would involve trade-offs in terms of a very slight loss of single threaded performance, or a higher idle power consumption, particularly in laptops.

In either case, you have good options. Neither product is completely devastatingly useless for any task, as was the case with Bulldozer, which had single threaded performance that was nearly half that of Intel's.

With the release of Zen, there was no longer a clear market leader dominating in performance of all classes, or pricing, or whatever other metric you want. That's called "competitive."

Zen 2 looks like it will be "uncontested." It will have the advantage in essentially everything, including single and multithreaded performance, gaming performance, power consumption, and price... if AMD's benchmarks are to be believed. The general sentiment is that AMD's benchmarks were actually conservative.

The benchmark leaked above in this thread is not running at the production boost clock, which would be 9% higher than the benchmark given, making it theoretically uncontested.

Obviously, we will have to wait for extensive third party benchmarking, but Zen has always been competitive, immediately and unequivocally reducing Intel to merely being competitive as well. Zen 2 has the opportunity be more.
https://en.wikipedia.org/wiki/National_Redoubt_(Switzerland)
Self-replicator caught on video (Conway's Game of Life emulating itself)
So you are saying, in essence, that there is no such thing as real free will and there never can be due to the laws of physics?
This is simply not true, sadly. Copyright applies regardless of intentions or outcomes; it’s only in certain limited fields that some activities are somewhat exempted (i.e. backups). This is clearly not one of them.
Hey, yours isn't complete either! :)

Just by visiting your site, you are collecting my personal information (after all, GDPR says IP address is PII). So what are you doing with it, and how long are you keeping it?
Reminds me of the recent Google Maps price increase. My nearly million-people town's public transport route planning software has had frequent outages since...
Uh - Intel is releasing Foveros this year. Assume its going to be in a surface type of device. Little big core for x86. AMD will not be on 5nm. You seem confused about the status of the industry..

Point being you were wrong in the statements you have been making. 5nm will not be out by the time Foveros is introduced. I did not state Foveros is a competitor to a 128 thread epyc processor..
Even if he didn't: He's the boss so he's responsible.
Of course it does. You may not work with them, but the companies you apply to do. They will pick up your resume and share it. Anything on your resume should be considered public information.
The destruction of brain tissue during the experience of death, while bringing about a swift end to detectable life, may not be a pleasant way to experience death.
If you've ever put your resume up on a site like indeed, monster, etc. Then it's definitely been scooped up and put in a billion different job search engines.

But maybe you're fortunate enough to have avoided that mess.
By supporting Saudi Arabia the West really shoots itself in the foot. You can't lecture other countries about freedom while supporting this regime.
Earliest known signs of cannabis smoking unearthed in China
The replies to [2] however, show that nobody believed what she claimed.
Lots of explosives on critical infrastructure like bridges and tunnels. I just looked it up and it looks like they removed the last of them a few years ago so it's no longer a thing.

Anyways, besides nuclear deterrence, a suicide pact is about the only thing I could think would work as defense against a major global military power.
> Personally what I value is just basic cloud storage with a decent automatic sync.

That reminds me of a pretty famous Quora answer (here https://www.quora.com/Dropbox-product/Why-is-Dropbox-more-po...) that described why Dropbox succeeded:

> Well, let's take a step back and think about the sync problem and what the ideal solution for it would do:

There would be a folder.
You'd put your stuff in it.
It would sync.

They built that.

Why didn't anyone else build that? I have no idea.

"But," you may ask, "so much more you could do! What about task management, calendaring, customized dashboards, virtual white boarding. More than just folders and files!"

No, shut up. People don't use that crap. They just want a folder. A folder that syncs.

"But," you may say, "this is valuable data... certainly users will feel more comfortable tying their data to Windows Live, Apple's MobileMe, or a name they already know."

No, shut up. Not a single person on Earth wakes up in the morning worried about deriving more value from their Windows Live login. People already trust folders. And Dropbox looks just like a folder. One that syncs.

"But," you may say, "folders are so 1995. Why not leverage the full power of the web? With HTML5 you can drag and drop files, you can build intergalactic dashboards of statistics showing how much storage you are using, you can publish your files as RSS feeds and tweets, and you can add your company logo!"

No, shut up. Most of the world doesn't sit in front of their browser all day. If they do, it is Internet Explorer 6 at work that they are not allowed to upgrade. Browsers suck for these kinds of things. Their stuff is already in folders. They just want a folder. That syncs.

That is what it does.
The features are added to your account at no additional cost for your current term. However the renewal of your yearly contract will be at the new price.
As a side note, when was the last time yall saw a zdnet link? I remember Ziff Davis back in the day. But this was a blast from the past!
I work on an infrastructure that's 4+ years old, with a full featured analytics DB in place (Snowflake). I still use JSON + S3 + Athena for some BI queries. It's not what you want for an online query source, but for doing occasional offline BI work on medium-large data (let's say under a petabyte), it doesn't get simpler.
> That's extremely unlikely to happen, especially on the internet

True, and perhaps "common sense", but I think questioning common sense now and then isn't a bad idea.

My theory was, when you find yourself in a situation like this, if you remain cordial and repetitively bring the conversation back to the same question over and over, eventually it will be ~impossible for them to not realize what is happening. I now realize I executed poorly on this until the very end, where it may have suddenly become easily distinguishable that I wasn't just arguing and what was actually going on, but by then it was too late.

As always, I will work on improving my behavior, but my sense is that this general problem continues to grow, here and elsewhere. Censorship has an upper bound of effectiveness, something lower average quality communities are grappling with now. I worry that kicking the can down the road might ultimately not be a good idea.
FB is planetary scale psychoactive technology. Just make it a public health issue.
Best Practices for Confluent Kafka and Spring Boot Streaming Apps on Kubernetes
> If PLA will really launch an operation, it only has to turn off water pumps, and wait.

Can you elaborate?
Fairly small; it's only about 5 GB, so I can't say for certain how well it would work with something that large. At least at the size that I have, changes propagate across my devices pretty much instantaneously .
This is pretty confusing.

What I'm doing at the moment is I use foldersync on all my devices, basically mine and my wife's mobile phones.

But I sync the photos onto gdrive. It's only later that I discovered photos automatically looks through your gdrive and shows you your timeline and does fancy, spooky face recognition.

Which is working at the moment, but will this flow be affected? Sounds like maybe not as they are talking about some sort of separate photos storage that goes to gdrive, not the other way.
I've been using http://newsblur.com for years (since Google News died) and have been very happy with it. They'll give you 64 RSS subscriptions for free, and unlimited subscriptions for $36/year (I pay for the unlimited version).

I use their web interface, but I think they also have phone apps available.
They suck on Windows, too. I've tried using junction points more than once to share a common library directory among several different projects, and have always ended up in makefile hell when some projects 'see' changes to files in the library directory while others don't.

I can understand why Dropbox doesn't want any part of the dumpster fire that is symbolic linking. Maybe they work great on Linux, where they are a core aspect of how the filesystem works under the hood. But Dropbox has to present unified behavior across all supported platforms, and the last thing they want is to be put in the position of providing tech support for filesystem bugs and quirks and race conditions.
just read through that, it's quite unfortunate really. Seems like another case of aaron schwartz where the justice system wanted to send a message.
Another confusion is when deleting photos from the phone, will it delete them on Google Photos/Drive? There are two use cases. First is junk you want to delete everywhere. The other is reducing the space on the phone but retaining it on Google Photos/Drive.
> The packages flowing from China are blamed for compounding the opioid crisis in the United States.

I doubt they meant it, but it's a pretty good pharmacy related pun [1].

And more sincerely, this is a very superficial take on the opioid crisis and misplaced blame. The problem with opioids in the US starts in the US with overprescription of opioids, lack of other pain management options, etc.

[1] https://en.wikipedia.org/wiki/Compounding
https://github.com/MiniKeePass/MiniKeePass
it's very basic but it works. if you keep the kdbx file in cloud storage, you can use iOS "open with" to open in MiniKeePass.
I've never heard of this, thanks for sharing. So true.
This is a really good article on this topic: this is the first mainstream news article I've seen on this topic that wasn't fearmongering and instead showed how benign the services are and merely acknowledged their existence and the accurate complacency of the expanding user base. On the other side, the only other literature are the official releases from governments grandstanding about their takedown efforts, where they aren't even acknowledging that the markets have only grown and gotten more resilient because of their efforts.

This article balances that all in reality very well.

It doesn't mix up the terms Deep and Dark web. It doesn't feel the need to explain how bitcoin works, it acknowledges the prevalence of Monero. It mentions the current marketplaces and TOR news sites, it shows the perspective of the software engineers running the websites who realize that prior takedowns are largely a result of error and laziness.

Lets do more journalism like that
I spent the last few days writing this piece as I was reflecting and frustrated with my short-term progress (or lack there of). This led me to consider what I think greatness even is, which was almost therapeutic to think through.

Curious to know what people think about this. Can "greatness" really be achieved quickly?
SyncThing also gets this right.
I've been using NextCloud hosted on my personal NAS, and recently even switched over to using a todo manager that uses CalDAV so I can use my NextCloud server for personal task management. Backups are done through restic to a couple cloud providers, and honestly this is the hardest part to get user friendly because there's no UI (yes, I know Relica exists but I don't want to pay monthly for it and use my own storage).

At this point everything (files & photos, calendar, contacts) but my email (which is with FastMail) is self hosted or backed up on my NAS (and consequently, the cloud storage backup). Home automation is also all done through Home Assistant and local Z-Wave devices (I used SmartThings way back when, but switched to HA).

Though it's not easy enough for non-tech-literate people to do, I think it's close. Maybe a hosted NextCloud instance + auto backups would be good enough for most people.
What about Mana Musa?
Excluding tests/patches to third party libs, around 65K LOC
Some really interesting issues that hopefully, as a new Kubernetes Cluster maintainer, I'll now be able to avoid!
Because sometimes we have good reasons to believe something works even without an RCT, and it would be unethical to withhold such treatment. (Not to mention that there is a continuum of RCT quality, so it's unclear what would even count and "proven".)

The classic tongue-in-cheek example is parachutes:

> Objectives: To determine whether parachutes are effective in preventing major trauma related to gravitational challenge.

> Design: Systematic review of randomised controlled trials.

> Main outcome measure: Death or major trauma, defined as an injury severity score > 15.

> Results: We were unable to identify any randomised controlled trials of parachute intervention.

> Conclusions: As with many interventions intended to prevent ill health, the effectiveness of parachutes has not been subjected to rigorous evaluation by using randomised controlled trials. Advocates of evidence based medicine have criticised the adoption of interventions evaluated by using only observational data. We think that everyone might benefit if the most radical protagonists of evidence based medicine organised and participated in a double blind, randomised, placebo controlled, crossover trial of the parachute.

https://www.bmj.com/content/327/7429/1459
I think he's implying a whitelisted set of self signed certs, not "trust any cert".
Gamer and programmer here! From the perspective of a gamer with a "large but not infinite budget" in the past say ~8 years. I play counterstrike where any fps stutter is unexceptable. I also enjoy prettier games like BF5, etc. My current system is an i7 8700k, 32GB ram (just because), and a 1080ti.

Intel has always been the go-to. The #1 Priority is thread performance, first and foremost. Second is at least 4 cores. Most modern games can utilize at least 4, but it's also important to give the OS and other programs like discord plenty of cores.

While the Ryzen Gen 1 and Gen 2 have been amazing values, for gaming performance Intel has still ben king. When you compare AMD to Intel FPS to FPS Intel nearly ALWAYS wins.

CSGO is especially thread performance reliant, but this goes for most games. It's worth noting too that while games can use multiple cores, I don't believe most engines scale to 8+ cores very well.
i thought the harsh sentencing was because he tried to pay a hitman to kill 5 people?

edit: apparently the murder charges were dropped[0] but the evidence that he hired a hitman was deemed "unambiguous" and factored into his sentencing[1]

these facts should probably be acknowledged, even if disputed, on the freeross page, otherwise it reads like propaganda.

a related and interesting twist: it was an fbi informant he paid to be his hitman, who staged the murders. so nobody actually died, even though he believed they did. crazy.

[0] http://www.dailydot.com/crime/silk-road-murder-charges-ross-...

[1] https://freeross.org/wp-content/uploads/2015/05/Sentencing_2...
At least in terms of tooling, you see things like create-react-app, vue-cli, etc. These toolkits, and their accompanying CLIs, abstract away configuration of babel, webpack, etc.

These are good, but if you need to customize further, you interface with the toolkit (which only allows you to go so far), or you eject entirely.

Many people think it's time wasted to really understand how to setup and use (individually) webpack and babel and friends. I disagree because if you ever do need to dig in to these tools, since you've used them individually, you understand what you need to change.

If you eject from a toolkit but don't understand the underlying tools, you could be up a creek without a paddle. So you can certainly make things simpler, but you can't replace having the experience and understanding of what each individual tool does, and how to interface with it.

I would say the ecosystem changes, in aggregate, are probably a loss for new programmers. You have a much wider API surface to be aware of when using all the tools and how to integrate them. But for a senior front end engineer, it's unlocked the ability to have very fine grained control over the bundles you're creating.
The Neanderthal Throat – Did Neanderthals Speak?
And indeed, why not pit the EU versus California? I could write an alarming headline along the lines of "The EU continues to use over 5000 chemicals declared proven by the state of California to cause cancer!" and get my clicks while completely glossing over the fact that the vast majority of California's notices are pretty much nonsensical.
As if that's not a complete privacy nightmare. I'm sure either the NSA, or an ad-tech agency would love to get a firehose feed of this sort of data, while providing you with a YES-SPAM/NO-SPAM service.

Also, anyone who mentions <something the service wants to censor> can be, of course, blackholed as spam. ;)
TB is a part of USB 4 spec.
I don't trust most of them and this is because when I've contacted some of those that are top ranked by Google they tell me how much I have to pay to get a top ranking on their site.

And they're not shy or even evasive about it. They are very matter of fact about it.
Turns out that proper anesthetization is more difficult than most people realize, especially since the competent medical professionals won't help for ethical and moral reasons. Also, drug companies won't sell the drugs if they are going to be used in an execution.
The Boring Web
>They lead with the point that most-seemed to get lost in translation, even on technical sites like HN.

>>No, Chrome isn’t killing ad blockers

They’re just neutering them with a ridiculously low limit of rules.

One of the benefits of doing this declaratively is that they can optimize the shit out of these blocking declarations. There is no need for such a low limit. Or even a limit at all.
This reminds me the saying "Sufficiently advanced incompetence is indistinguishable from malice"
New Focus on Founders Who Need to Be Better at Being a Founder
So the difference is that they weren't wearing government uniforms? That "flash of violence" doesn't sound out of line for any moderately authoritarian state.