skysight-inc/HackerNews huggingface dataset:
I agree that there is a lot of regulatory capture in lawmaking. However, this is a case of exactly the opposite. The cuts are happening to a relatively wealthy minority in Alaska (academics, college attendees, the engineering community, and oil corporations that depend on engineering schools) while more popular welfare and training programs go untouched.
> Without swap, your server could potentially become suddenly unresponsive

The server never be unresponsive 'cause lack of swap. Don't like the logic "we just add a swap and maybe it will be slower a bit, but still working".
It seems to already have that (the "gradient" arrow)
Property, income, and sales taxes are all part of the cost of living and doing business. Raising property taxes won't hurt the general public any more than raising the other two. Taxes aren't a menu where you need a little of column A and a little of column B, just because. It's all money coming from the economy in some form and the important part is what you're incentivizing or disincentivizing.

In fact, there's a minor but respectable economic school of thought that property taxes should be greater than 100% of all taxes, and the excess should be redistributed to the disadvantaged. Property taxes disincentivize hoarding and wasteful use of valuable property, which is A Good Thing.
Well sure but my point is there are people, like me, with no sexual or romantic interest in people so even if they have nothing else to do, they by default do not want to have a partner. Saying "I wish my children won't be a cat lady" sounds to me like "I wish my children won't be gay". I hope someone will write a constructive comment so that I can understand why I'm being downvoted.
So true. Slick presentation, indifferent or bad design and implementation. And then patching and billing client all the long day. Sad!
Often what the municipalities are doing for public records is harder and more expensive than just publishing an API. So The funding excuse doesn't really cut muster with me.
You can write backups to an NFS share, and create regular snapshots on the file system server that are not writable from the outside (you have to log into the file system server, which hopefully is extra secured / limited access, and has a different OS than what you use elsewhere). It's not perfect, but at least a single vulnerable client can't encrypt or delete your backups (in the snapshots) that way.

As usually with security, the principles of least privs and segregating as much as possible are important.
A solid list.

It's nice to have a restore step in there too, so one has both a validation that the backup is usable, and gives a "playground" where one can have a safe day old environment for testing/training/whatnot against production data.
First, sell it to local users you can talk to. The closer you are to your customers and the more you talk to them, the better your product will become as you iterate.
The added efficiencies in composting could also help solve the massive problems with monoculture farming. Imagine this approach for replenishing the nutrients in an acre of overused farmland:

1. Container full of food scraps, bio waste, and carbon scraps arrive from city, get spread over fallow land

2. Maggots are released, reproduce, ingest meat scraps

3. Chickens are introduced into environment, eat maggots and larger scraps, release compost as manure and scratched bedding

4. Remaining maggots and waste is collected, maybe dumped to tilapia or pigs

5. Replenished field is plowed for cash crop, nitrogen releasers, or untouched for a season to allow grasses to grow as grazing land

EDIT: Admission time - I wrote this article before reading the article about the maggot cultivating process. I'm just a little passionate about armchair-ecology. Maybe this process could be completed in a mobile facility that moves from acre to acre on a monthly basis?
And most of these urban dwellers did not vote for Trump or this vindictive Governor.
You are absolutely correct about first world companies. What about non first world? Truly open systems do not seem to pop up anywhere though. I personally think that a critical mass could be achieved beyond which governments would be hard presses to flex its muscles.
Doesn't take much imagination to find a use.

Assume I find Anna's email address as part of a breach somewhere.

Hello Anna,

We value transparency and honesty highly at $p0wn3d_company. To that end, we're sorry to have to tell you that our systems were compromised by an unknown hacker recently. Although we believe that no personal data has been stolen, we are working with Government agencies and expert security consultants to determine the full extent of the breach.

As a precaution we are asking our customers to change their passwords, which you can do by clicking on >this link here to a website that looks like ours but is actually owned by a hacker<.

Etc.
By "all accounts and signals", I mean it's basically rumored that Youtube was only barely able to break even with a billion users, which was the target set to make it profitable: https://www.wsj.com/articles/viewers-dont-add-up-to-profit-f...
Even if there are drivers, a lot of them are really buggy.

I'd expect official Linux support to guarantee better quality level (less buggy)
See also elsethread about "not a token" — but, also:

> There's a couple of these and they're largely due to me trying to make sure I get this feature out as early as possible and continue to run things on a shoestring cost wise

Using the Authorization header can cause significant problems with both clients and servers, and also might unintentionally permit browsers to directly query the server if they can be convinced to provide a bearer token.

Using a custom HTTP header sidesteps both client and server issues altogether and closes the door on browsers direct-querying the API, which could be considered a positive by the site operator.
Given enough time and resources someone could do equivalent work in assembly. The point of Rust is that it should take you less time and resources to do so.
I grew up with an "Eiderdown" on my bed, and until now, mistakenly thought of it as a synonym for a quilt filled with feathers!

https://www.thesaurus.com/browse/eiderdown
On the Origins, Use, and Meaning of “Ass in the Jackpot”
Usually WaPo articles can be read in browser without enabling javascript, but not this one. This sort of presentation is really obnoxious and not at all accessible (which frankly shouldn't even be legal in a world where every business is required to have ramps or elevators.)

Thankfully I did get it to work in emacs, which is less than ideal for most.
The idea that McKesson does this, along with their completely tone deaf idea of adding open offices to increase retention, points to a bigger issue: a complete lack of understanding of people. These people running these companies are utterly detached from the reality that their work force lives day to day, such that they think implementing one of the most universally hated office schemes and mass surveillance are ways to keep people.
You've made an unfounded assumption -- that is, that the person you're responding to is scraping irresponsibly. If they are, as they say, simply replacing human researchers with the equivalent bots, then the net load change from automation is zero, or possibly even negative.
aporpoor@gmail.com
Is this news to nerds? No. The effectiveness of virus software has been measured over and over and holes are always found, cause that’s software.

It’s a useful talking point nonetheless. Naive managers can feel pressured to make purchase decisions around these things.

Pointing to data and these stories has been helpful to me in getting time to truly vet our choices.

Nothing hurts credibility like saddling the company with a service contract that provides fuck all nothing.
Though neuromorphic architectures are interesting, the Loihi is essentially an ASIC for Spiking Neural Networks [1]. The lower power consumption than GPUs is due to the limited nature of computation that can be performed on these chips (which is generally true for ASICs).

[1] https://en.wikichip.org/wiki/intel/loihi
I might be the only one pedantically annoyed here, but... the very first image on this page contains a mix of hexagons and pentagons.

Which is it - an inaccurate image, and the system is really hexagon-based, or does the system also use pentagons? My guess is that it is actually all hexagon-based since the overlap between granularity is already only approximate.
Roach farms have been a thing for a decade or so now: https://www.latimes.com/world/la-fg-c1-china-cockroach-20131...
We host a smallish (12 large node) cluster ourselves on AWS, and it's been nothing but SUPER SOLID for us. Literally 0 issues in the year. We use it for analytics, aggregations and the like, as well as domain-specific search, for which it's a great fit.
Inevitably some crypto primatives must be written in assembly languages in order to ensure timing attacks and alike are not possible. As far as I know, there's no support in Rust or C for requiring such constraints from the code generation.

Still, ensuring the code around the primitives is safe in various ways is still valuable.
I was in meet-up where one of attendee asked a question to speaker on how to say no to customer when they have crazy requirements?

Speaker - There some times when you can't say no and in that situation you have to choose different path. One of my customer asked me to create the existing CRM like Google search page. It should show only one search box in front and all search should work like Google. I said sure and here is the budget for this change. After hearing the $$$ she just stop asking for!
S3 now allows permanent object locking, too, which makes this even harder to screw up.
All Google has to do is guarantee that they will pay gamers 2 to 3 times their purchase price if they close Stadia or drastically change the payment model in the next 5 years. Google can afford to make such a guarantee very easily.
The answer is some sort of sequestration tbh, I've long felt that the idea (even in say, 2005) that we could reduce our carbon output by 50% was unworkable - the only thing that is easy to move to zero carbon is electricity generation, everything else is an order of magnitude harder.
> really surprised Intuit doesn't have this as a cloud service at this point.

They do have a cloud offering, QuickBooks Online:

https://quickbooks.intuit.com/online/

But it does not have all the same features as the Desktop version, giving rise to a number of third party offerings, like Right Networks' "QuickBooks Desktop Cloud": https://www.rightnetworks.com/cloud-solutions/accounting-sol...
One reason could be constructed by example, as:

<Location /v3>

vs.

<LocationMatch ?[.*&]v=3(&|$)>

Which is to say that, depending on the application's coincidental design and structural choices over time, managing versions at /v1 /v2 /v3 might well be vastly easier for the "shoestring budget" operator than at /?v=1 /?v=2 /?v=3.
Hey, I've just started a Discord group for people who are interested in this kind of project. Please send me an email if you would like to join! (In my profile.)
I agree. You should definitely create a solid network close to you that can both help you improve your product with feedback and have word-of-mouth marketing.
There is no guarantee that canvas is hardware accelerated, or how whatever they are optimized, so a low level software rendering library might turn out to execute faster, regardless of the browser.
brookhaven_dude isn't agreeing with what he's saying. He's just trying to explain why people are acting the way they are. He even calls their sabotage stupid.
https://www.visualcapitalist.com/how-tech-giants-make-billio...

Bing and gaming alone makes almost as much as Windows. Devices and LinkedIn makes half as much as Windows and a 1/3 the revenue of Office. These aren't peanuts.
100% agreed. This is what my company uses ES for, and it's exceptional at it.
Hello, I've just started a Discord group for people who might be interested in this kind of project. Please send me an email if you would like to join! (In my profile.)
Anyone who's net worth is more than, say 30M, isn't really a good, ethical, person in my opinion.
Why download anything when you can simply query a public endpoint for free?
Voting won't help in China, and most democratic countries have scrubbers on coal plants and tend to be phasing out coal.
Why privilege traffic based on its source (whether it's from a human or Selenium)? If some resources are expensive to serve, you can rate limit them.
As part of this it appears that they were written by multiple people and it really kept jarring me out of the flow of the article. One writer was talking about the technical specifications of the suits while the other was giving weird personal observations.

Contrast:

> If you pay a bazillion dollars to go into space and you get this — I’m assuming you get to keep it — you will wear those boots again! It seems you can pull it apart and continue to wear it and keep the bragging rights going.

with

> The suit’s outer layer is made with fire-retardant materials. The gray parts are Nomex, a flame-resistant material. The whites are a Teflon-like material.

EDIT: Found a more direct comparison:

> The suit was silver for a number of reasons, according to Cathleen Lewis, a curator in the Space History Department of the National Air and Space Museum. First, it would make the astronauts stand out in case they needed to be rescued. It helped reflect sunlight and keep them from heating up, especially in the outer edges of the atmosphere, where the sunlight is unfiltered. Finally, NASA really wanted to set these guys apart from the other pilots with a very space-agey silvery suit.

vs

> This silver sets the ground rules for how we imagine spacesuits to be — everything that we think is futuristic is always silver and reflective. Whenever there would be anything related to the future in fashion shows and people imagining what the next century would look like, they always started with metallic fabrics.
Yes, according to https://mobile.twitter.com/methode/status/910435076613328896

(@methode works for Google)
The article does not say the attack was due to IT staff choosing to not patch their Windows servers, am I missing something?
For sure. I was just being cheeky.
Why not both? Central command except when specific thresholds exceeded
Sure, but the issue isn't the fact that property tax is the sole source of tax, it's that oil absolutely dwarfs everything else in the state budget. They have property taxes but they don't really cover anything.
This is an incredible user interface at the first glance! Really creative!
Acrosync – Native Rsync Client for Windows
Your assumption is that the IRS's right to override appraisers comes with a fine print that says "applicable only in an awkward corner case" (in this case "items that cannot be legally sold"). I'm pretty sure if they're indeed allowed to do this and the conditions are defined as narrowly as possible (still to be decided in court I guess) then it can be easily abused. And the article doesn't suggest that such an exception exists.

And that's not even discussing yet the process through which an appraisal gets bumped up by over 300% between 2 steps that were both considered to be solid enough to actually be sent out.
Not sure if this is what segment is doing, but if it’s a worker based on the Kafka Streams library, the k/v state store can be backed by a changelog topic, and if you have a transaction between that topic and the topic that commits offsets, the scenario you described won’t occur. The worker will reprocess the event again, and it rocks won’t have it because it’ll only have the state that was persisted before the crash.
They consider those requests to be "bad actors". It's not necessarily about the volume of traffic, it's that they are compromised VPSes configured to perform unknown malicious activity that takes advantage of a free endpoint in support of unknown malicious intent. See also "Why do bad actors abuse this endpoint?" discussion elsethread: https://news.ycombinator.com/item?id=20480230
except it does carry actual health risks?
Azure's Java support is not up to par and doesn't seem to get much love, so I'd use AWS or GCP given the choice.
I'd guess that. Gmail has maybe 10% of the features Outlook does. I really dislike it as an email service, especially since they've killed Inbox which at least made it a bit more tolerable.
Can someone familiar with the Android ecosystem elaborate on what exactly this means? Does it mean you get rustc automatically when you download the Android SDK? Does it imply any particular level of support? How many other languages have this status?
In the past I had the backup server ssh via public key into the production server and pull the data via file system snapshots. It’d be a matter of restoring the most recent snapshot prior to the attack.
51.4% voted for this governor in 2018, so I have to conclude that this is the outcome that most voters wanted. When you vote for a party that wants smaller government, it should be no surprise when you get fewer government services.
Java real time deployments used by military prove otherwise.

I guess we always have to wait for them to develop top technology before the masses accept it.
I agree, hibernate isn't the most stable thing in world. My work machine is a Windows laptop with a regular ssd so I usually hibernate it and about 1 in 20 times it forgets either BT, network card or wifi. I have a NUC8 running ubuntu for one of my personal machines and have a NVMe and I shut that down because, as you mentioned, the speed is there.
Show HN: PyOrbs – A Lightweight Pipenv Alternative
Also, subscribe to bury CO2: https://www.climeworks.com/
Study shows that dropped cigarette butts harm plants
The problem is that there will _always_ be prosecutors that abuse their power. It's the nature of people. It just so happens that certain professions abusing their power are far more devastating to the people they impact (lawyers, police, etc). As such, we should be making laws that are harder for them to abuse. We have many "we'll give them more power, so they can use it where needed and just not abuse it" laws that constantly get abused.
As another commenter pointed out, a lot of the knowledge for developing nuclear power plants has faded since they were mostly built decades ago. And while they're smaller projects, looking around where I live (San Francisco) I see a leaning skyscraper, a bridge that was way, way overbudget and many years late and an ongoing debate about its longterm safety, and a transit center (also late and overbudget) that still hasn't opened due to safety concerns.

It seems obvious that it's possible to build safe nuclear power plants - we've done it. But I think it's like building airplanes. Despite flying being the safest way to travel, all the planes were built decades ago and our attempts to change that in the US, ie the 737-MAX, have shown obvious examples of corruption and incompetence that have led to unnecessary deaths.

I think where we disagree is whether or not the US government is competent enough to build a nuclear power plant today, not whether or not the project itself is viable. I realize my original comment doesn't reflect that, so I apologize for the poor communication on my part.
I'd much rather see Firefox use miTLS[0]. They already use HACL[1] (miTLS and HACL are part of Project Everest[2]) in NSS[3], so I don't think it would be too big of a leap. Rust is really cool, but if you want to ensure that the implementation adheres to the spec, a language with formal verification is much better. That said, miTLS isn't finished yet, so of course it's going to take a while until anyone can actually use it.

[0] https://mitls.org/

[1] https://github.com/project-everest/hacl-star

[2] https://project-everest.github.io/

[3] https://blog.mozilla.org/security/2017/09/13/verified-crypto...
OAuth doesn't have a monopoly on bearer tokens. And it is literally the definition of a bearer token: you shall know the messenger who presents this token, a concept old as history itself.
LOL, coolest thing I've learned today... didn't know windows even had an emoji picker built in.
Or planes that fly at Mach 3.
A lot of the benchmarking focused on handshaking, which is asymmetric cryptographic performance. As far as I know acceleration for asymmetric algorithms specifically is uncommon, although general SIMD instructions can improve performance.
Is there some open source version of something like this? I would be interested in monitoring some non-tech topics and it would be useful to have something with most of the basic features in place to do so, even if it's a library
It is interesting how often I see companies that refuse to make back-ups of their cloud hosted data on the assumption that this is now someone else's problem. I also have a - recent - case of a very large manufacturer of storage solutions that managed to fuck up a restore of a raid array to the point that a whole pile of companies lost their data.

Backups are so simple, and yet the only times people seem to realize their true value is when they don't have any.
I know this is a cheap potshot, but who has a keyboard setup like that? https://images.wsj.net/im-90409?width=1260&size=0.6666666666...

And the caption:

Diana Hubbard, working from her home office in Texas, says she does not communicate about her private life on work devices at all. PHOTO: JONATHAN ZIZZO FOR THE WALL STREET JOURNAL
I don't know if I made it up or you did, but invoking "slave morality" in a Hacker News argument was certainly a new one.
You can’t predict what will happen when you send a nude image of yourself to someone else and if it goes wrong, there is no undo. It isn’t much fun to go to school if the talk of the day is a set of your private pictures and it can go on and on with image macros and editing and even if you move to a new school you are easily found in today’s connected world and it starts all over again.
Keeping duplication metadata around doesn't scale well, though it may be sufficient for their typical case. A strategy I've seen many times that scales better is to (1) only check for duplicates when some part of the system has a reason to believe duplicates could occur, with the assumption that duplicates are relatively infrequent, and (2) design the storage engine such that you can directly search for the record in previously ingested data inexpensively without any extra deduplication metadata. Note that this is not as easy to achieve if your data infrastructure is a loosely coupled collection of arbitrary storage engines, databases, and processing pipelines -- which may be a practical limitation for the case in the article.

If the storage engine is well-designed for the data model, a duplicate check against existing data should only touch a handful of pages in the worst case, it is an inexpensive query that rarely or never touches the network (detail depending). For ingestion of records where there is no risk of duplication, presumably the bulk of the time, this is a zero overhead model as there is no duplication state to be maintained or checked. For most scenarios that create potential duplication, this model is also quite cache friendly as a practical matter.

The pathological case for this design is when you need to check every single record for duplication (e.g. cleaning up a giant offline mess of agglomerated data that may contain an arbitrary number of duplicates), but those scenarios usually don't involve real-time stream ingestion.
Oh yes. This is industry tested technology.
I think one way of assuaging these types of concerns in ensuring that the contents are not externally accessible.

I've heard similar privacy rumblings about putting 'dashcams' in cockpits, but as long as they're not streaming and only accessible either (a) in post-crash debris, or (b) some kind of NTSB 'warrant' for near-misses, I think that may lessen concerns.