skysight-inc/HackerNews huggingface dataset:
> "From a design perspective, the thin bezelless/buttonless slate makes it difficult to differentiate your product."

this plays directly into apple's strengths (build quality, UX, etc.), and i'd be very impressed if it had been a conscious strategy employed by apple over the years (apple still captures the majority of industry profits). by collapsing the feature space along (roughly) one dimension, it's easier for consumers to recognize the premium positioning of apple's iphones.
Lead times on server orders are non trivial once you are buying a large quantity with specific configurations.

Want to scale up? 5 weeks minimum. Your opportunity may have been lost by then.
Why is an article from 2018 being submitted like it was new?
Seeing How Computers Think Helps Humans Stump Machines and Reveal AI Weaknesses
Most people are making CRUD apps that aren't all that special.
I think about what is the number 1 priority for a piece of code, am I gonna use it once and forget it? Will I use it all the time?

I've gone in the opposite direction in my career.

Overbuilding the initial version of something for a bunch of anticipated (rather than actual use/failure scenarios) is something I now work very hard to avoid.

The key IMHO is really being nimble enough to extract and/or refactor and/or refine as soon as it is needed. Not before, not after.

"Overly robust" code is actually a huge problem sometimes. All that unused code is in there, giving the appearance of being robust, but is not actually battle-tested....
People forget that "front-end development" is just "client development" which isn't simple nor trivial on any platform.
Manning’s sentence was commuted, not pardoned.
In many cases, using the cloud is a business and staffing decision more than it is a technical one. It's a decision to accept a monthly cloud bill above a certain threshold instead of maintaining an expensive and perhaps extensive operations staff.
Hooray! I am glad to be wrong. For others looking to test this,

$ codesign -dv /Applications/xyz.app
...
Sealed Resources version=2 rules=13 files=122
...

For version=2, all resources are signed.
I get your arguments and when I think about it, I agree with you. It is similar to Tesla roof tiles: they are expensive, not so efficient, take longer time to install than regular solar panels. They just look good on your roof (also disputable). You pay extra for the aesthetics ;-)
They don't really have read from it, they may just use keydown event, for example.
I’m a co-author and would be happy to answer questions about our work!
Didn't you see? You're just supposed to learn some sysadmin skills yourself.

The trick is to make yourself the linchpin, so that once the site grows large enough you can never leave, as you're the only one able to keep that writhing mass of wires up and running.
https://bugzilla.mozilla.org/show_bug.cgi?id=1567114
> CDNs increase your complexity, they creep into your deployments and
the way you think..invalidation of objects

I've never seen invalidation in decades. you just have unique names.
The statefulness of jQuery is a massive cognitive load.
Did you miss the Asiana 777 at SFO? Or is that engine-related?
https://itnext.io/whats-in-your-bucket-36ecaa4e0df5
Isn't this in itself a big story? How the hell are they being so lax with their source code?
Ugh, what kind of opinion is this? He neglected to mention all the drawbacks:

* It takes forever for Dell or HP to ship your stuff.

* Your co-lo can physically ran out of space.

* Your predecessor will inevitable have tons of one-off unversioned changes in prod.

* Repetitive manual work when scaling multi DCs.

* Making unscalable database choices (non-master-master) because you are not in the cloud mindset.

* Don't worry about CDN? AWS S3 comes with CDN automatically.

* Too many more bullet points to mention.
That job doesn't go away, it just changes focus. See DevOps. Generally it is a net positive in my book, but don't believe that operations goes away.
There is an endless supply "infosec specialists" and "ethical hackers."

But there is a massive shortage in motivated experts that ensure packages are up to date and fluent enough in code spelunking to ensure the app isn't trusting user input or allowing privilege escalation.

There's also a shortage in technology leaders willing to spend money on the mundane aspect of security. It requires regular work, not compliance effort and periodic audits/pentests that check off boxes.
This part struck me as well:

> But, no, the main constraint on MoviePass’s growth seems to have been the actual production of plastic prepaid credit cards, which it couldn’t print fast enough:

Given how much money they were losing, it wasn't possible use digital cards that could be added to phone wallets? Or am I missing something here?
I use the host he mentioned - they have an API, and my average time to deploy a baremetal physical machine is under 60 seconds via API.

They don't really do custom specs, iirc part of the low pricing is because of how much useful automation they have. Sure, it's not cloud cloud, but if I have a personal side project that I need a few terabytes of ram for, there is no way I can afford AWS/GCP/etc.
Even today, we often refer to cats or dogs with grayish fur as "blue", even though there's nothing blue about that color.
Alongside a host of other issues ("Don't use CDNs because they increase your complexity" is a wild idea coming from someone advocating bare metal boxes) I think there's a confusion of terms when it comes to "cloud"

I prefer renting virtual private servers from Digital Ocean (or, yes, EC2 instances) and configuring them myself. Doing so is perhaps more involved than buying into the AWS/GCP/Azure ecosystem, but I already know the tools involved, and I value the safeguard against vendor lock-in/buy-in enough to spend more time on them.

Those VPSs are "cloud" solutions in my opinion, and a happy medium between AWS and the author's unnecessarily-profanity-laden proposal that everyone should rent/buy metal. You can be "pro-cloud" and "anti-closed-cloud-ecosystem" at the same time.
It seems people are still angry on the internet. These number seem made up and the advice is not realistic. "Avoid big data" What does that even mean?
What's different between managing a VPS and an actual server?
I know, also png can be transparent. However, most of the things are useful for newbies.
not buying into aws and not having a cdn are completely different questions. I'd downvote your comment even before reaching the ad hominem attack at the end.
Those who think they won't need sysadmins and/or SREs with the cloud are delusional.
Note that lying under oath is also a crime, so also not a good plan.
He lost it on "don't use CDN". Asia/Europe/America ... if you run a little bit more world wide you will be thankful for every sort of CDN when it's not just text.
Is it a photo?

Yes: JPG

No: SVG

If you're uploading bitmap diagrams logos etc. they should be vector.
Thanks for the kind words, Andrew!
One of my favorite moments in this book that brought this concept to light for me, is when Severian describes a painting of a knight in a desert wearing a featureless orange helm. It's a painting of an astronaut on the moon.
A $200 DIY hardware cost (equivalent cloud price quoted as $5000 in the article) suggests that, for $4800/mo, you too can do Dev Ops yourself. For a lot of people, that proposition is a hard pass. You want enterprise-grade backups. If your availability drops, your business will lose credibility.

Also, good luck finding a Dev Ops engineer for $57,600 a year.
There more benefit than that. One example...development teams can't force the same level of tech debt that they can on-prem. If Amazon's upgrading some service or competent, there isn't any bargaining or exceptions.

Many similar benefits when you have a huge for-profit entity running the infrastructure at their scale. They optimize a lot for you.
You can grab new metal and have it all up and running in 60 seconds? That's amazing.
Part of me wonders if this is a troll or just a green sysadmin.
Sorry, replying to you while responding to the parent because their post is already flagged.

Annatar, both the Rust compiler and ripgrep are available as packages in pkgsrc. The number of hoops one needs to jump in order to use this tool on your niche platform is exactly one. And that hoop is not even on fire.

Keep moving those goal posts though. Hopefully you can move them far enough to keep the Venn diagram of your mistruths and people who recognize them completely disjoint.
Types of Managers: Janice, the Consultative Manager
Blame 300 the movie
I hope they help.

You might also be interested in my books, which teach the social and emotional skills of leadership, initiative, and entrepreneurship, based on courses I teach at NYU.

Initiative: https://www.amazon.com/Initiative-Proven-Method-Bring-Passio...

Leadership Step by Step: https://www.amazon.com/Leadership-Step-Become-Person-Others/...

One of my past students used the Initiative skills to teach the Leadership material to youths in Gaza https://leadpalestine.com. Every situation is unique and it's just one project, but his project shows promise of teaching youths before they get caught up in violence. He tells me that the program helps change views of leadership from command-and-control, authoritarian to based in understanding and support, though I'm oversimplifying. I'm just sharing one example.
Looks fantastic, and very good to hear (related to my neuroscience courses in college) that you found filtering to be a primary issue -- you're on to something.

At first glance, the subscriptions seem to offer certain numbers of new trends. Is there a way to say that we're looking for new trends in some type of topic, vs whatever trends come up in your general scan? (feel free to tell me to read further if I've missed something)

Looks very cool - thanks!
Series A Term Sheets: What to Know and How They Compare to Other Rounds
Yeah, been there, though against my will. Boy was I happy when the system (which actually worked extremely well) was shut down and replaced with a SaaS-based product.
Kind of along the vein of someone telling me I am paying to much for my fancy luxury sports car and completely ignoring the reasons that I find value in it.
I think the point is that the carbon in the synthetic fuel came out of the air. So, yes, you're correct that burning it gives off greenhouse gasses, but the idea is that the net effect is much smaller than taking carbon out of the ground and burning it.
Everytime I discover the meaning of Life, they change it. My point is, Life isn't a well-defined problem, and it shouldn't be, so it is more like a never-ending puzzle that you are free to go as deep as you want.

But there are parallels, and for example, multiple solutions can apply for the same issues, with plenty of different outcomes, positive or not.

Work, usually, comes with well-defined requirements which require specific solutions. Working on well-defined problems, and solving them, gives you knowledge and experience, which you can often apply to solving Life problems as well, but in a more systematic way than you did before.

It's an exercise for the mind which generalizes, the mind can then reuse those new skills out in the real world. Even more, solving difficult problems in a team environment, requires certain levels of communication, coordination and accommodation, which are also very important, if not the most important skills you can reuse to understanding and solving the puzzle of Life.
https://nypost.com/2019/08/01/mechanic-switches-gears-to-bec...
Boeingspeak: "IOActive's scenarios cannot affect any critical or essential airplane system and do not describe a way for remote attackers to access important 787 systems like the avionics system."

English: "This random guy on the internet discovered real vulnerabilities and we're scrambling like hell to fix them. We hope this carefully worded statement written by lawyers will keep the public and the FAA off our back until we can fix the problems."
> it’s in not having to pay a sysadmin so you can work on business problems.
...
> that benefit only improves with scale.

That's hard to derive from the same statement - there's a point after which you can afford your own 8 member SRE team across 3 timezones.

The cloud is incredibly attractive when you consider your scale problems as unknown (as a startup, the blitz scale day isn't a good time to go rack nodes yourself) & mostly as way to scale down the costs faster than physical infrastructure + associated human costs can.

I've started looking at this as slightly different model - I'm no longer hiring a good operations manager for those 8 people, I'm hiring a decent programmer who can automate and have code handling deployment tasks instead of a human being taking orders (i.e rack an NVMe + reboot this).

Honestly, even with your physical infrastructure, the trend is towards API based deployment models.

My time at Zynga working on ZCloud, migrating off EC2 to on-prem, that is what I saw.
The API based deployment model + reactions from machines (on failure), was worth building everywhere - now that applies to k8s.
> if you're not using any PHP frameworks or external libraries you might have to implement some crypto of your own to store passwords securely, just for starters. I don't think PHP offers a standard library to do that, does it?

It does, actually:
https://www.php.net/manual/en/intro.password.php
> I use the host he mentioned - they have an API, and my average time to deploy a baremetal physical machine is under 60 seconds via API.

What makes you think it’s a “baremetal physical machine”? This description sounds very cloud-y to me.
Haha that's not going to work for typical models that have millions of parameters. Besides, it's not the code that's important (except for verifying that it's a good method) it's the actual method, it's description, why it works, how it works, how it can be improved, adpated, etc.
Yeah, I just saw that today. I don't know what to say.
So... let me get this straight. You are making a website. You do need to load some changing data into it, so just a static site will not cut it. But we want to keep things simple. All we really need are a few AJAX calls and some DOM updates. And just like the author mentioned we don't want to write old clunky JS, we want to write beautiful ES6 code. So we install babel for ES6. And we install jQuery to do our AJAX and DOM stuff. Turns out that if we want to make AJAX calls to our API server, we cannot just load the file in the browser, it expects a server. We look briefly at installing nginx or apache and it seems like a lot of trouble. But we do discover webpack dev server. That's perfect. So we install webpack and configure the dev server. Since we are doing it, we might as well make it run babel for us. And while at it, we might as well do the bundling. Especially, since we would like to use a couple of other NPM modules. Nothing major, just convenience things. And since we are using the dev server anyway, we add hot-reload support. And a minifier, so we can have a minified production build.

So now we are using HTML, CSS, jQuery, babel, webpack, webpack dev server, webpack hot reload plugin, webpack plugins to load resources and a minifier. But hey, keep it simple, right?
As someone mentioned, YMMV. That's all I have to say. Fun side project and learning experience though.
This article ends up being a good reason for using cloud. Reads like it was written by "I could write Dropbox in a weekend with rsync" guy.
Perhaps for an SPA, though lots of what I see React used for doesn't need to be, or isn't, an SPA.
Also sounds like in the old days and somewhat similar to 'nobody ever got fired for buying IBM'. Why? Well by throwing money a great deal of money to hire the experts (if that is the case) nobody can be called out as they can if they didn't pay for that insurance.
I think he would model that as POSTing. Server side PHP would render document from scratch from the state.
> She also noted the state "did not perform a study to determine the appropriate size router that would most effectively and efficiently meet" each site's needs. Instead, it just bought 1,164 routers

What would that study have cost? At the end of the day, would I rather have W Virginia not wasted money? Sure. But it wasn't that bad, and seems no worse than what I see in corporate America. Then there's this:

> Still, despite the millions overspent on one particular piece of the much larger West Virginia grant project, outright fraud has been minimal, and waste generally appears to be controlled through federal audits and site visits.
Most Expensive Math Paper
> I really wish awareness of this reached a wider audience

1) it will not happen, not even Cambridge Analytica did and Facebook plans for more "privacy" took the media, Facebook did nothing or too little and now people think they are safer

2) People will not help making digital security and privacy any better, I can't explain why, but it must come from trully ethical developers

Privacy must be set by default. Ad tech co. have an conflict of interest in this privacy matter and can't lead the way. Developers from ad tech will always truly believe they are doing what's better for users but they just can't for many reasons.

Privacy by default is not a dream, it is not utopia, but it requires another business model. Ads will simple not allow privacy.

My opinion anyway
Likely because the list of repositories changes infrequently, so it's a better candidate for caching. They serve what then can quickly, quickly, then pull in the naturally slower stuff later.
Yes. The API call is here: https://robot.your-server.de/doc/webservice/en.html#get-orde...

The thing is that most baremetal hosts are exactly as the parent described - annoyingly slow, manual, etc.

Hetzner is a little gem here, where they have a large selection of pre-specced machines that are ready for automated deployment, and they also show you a pool of cheaper machines that were returned by other customers/terminated/cancelled and automatically wiped with varying specs that you can also automatically pick out via API (this includes random upgrades that the ex-customers added).

If you manage to fit in the square hole that their automation occupies, it's a great fit.
In the context of web development, they are generally considered as distinct.
PHP isn't the problem, the claim that there are no security issues despite hand rolling every feature is the issue, and it's in no way accurate.

A lot of bad software engineering going on in these comments, downvotes don't change that...
I Learnt Web Development
Carbon neutral energy is what we need.

Renewable energy defies physics.
Also see https://www.dailycodingproblem.com/
heroku create; git push heroku master; and use my mouse to scale up.

But yeah, sure, the cloud is a piece of shit. Just a beautiful, magical piece of shit.
The New York Times Company tanks 20% after saying ad revenue will decline next Q
Not surprising. At Netflix, despite the already high salaries, the security engineers were paid a premium for their skills. The highest paid engineers at Netflix were security engineers. They did stuff like invent entirely new security protocols[0][1].

[0] https://medium.com/netflix-techblog/message-security-layer-a...

[1] https://github.com/Netflix/msl
According to the first source I found, helium escapes into space at about 50 grams per second, for the entire planet. It seems at least possible that it is being produced at a greater rate than that, by radioactive decay.

http://faculty.washington.edu/dcatling/Catling2009_SciAm.pdf
I can KVM into it with a Lantronix Spider. I have dozens of them, and none of them have shown to be anything other than a physical machine; I can set up RAID myself, all the hardware data is passed through (there are no hypervisor layers in between).

I would be incredibly impressed if it was not baremetal.

I do have one dislike, which is how harshly they enforce mac addresses (so spinning up new VMs and bridging them into the network gets that mac blocked until you register it in the API or panel). And I guess the other dislike is that they're only in Europe, which is 200ms from me.
To be fair, those are cheaper because they want to make you more reliant on AWS and because those are more idyllic for Amazon to run, as with Lyft. Same with AWS Activate and etc.

But for most people, it's simpler to just use them and get it over with, and I'm glad it worked for you.
It causes more RSI than using ^ in its regular spot?

I like your Esc idea though. I know someone that remaps it to esc when pressed alone and ctrl when chorded.
Are there residential filtrations systems able to filter it out? I wonder if the effects are reversible
The biggest areas for growth for Cyber at the moment are of the not-so-sexy jobs. The asset inventory, patch management, vulnerability management, third party management, risk management, etc. If you are good at any of those and are innovating in any of those areas, you are as close to naming your own price as you can get in Cyber.

As for the most "needed" areas of Cyber, it comes down to education. Not your bachelors degree, but educating and raising awareness to your business, your IT staff, and even your development teams. It's extremely tricky to measure your return on investment, but almost always it comes down to a lack of knowledge causing one massive hole in the fence, leading to a breach.

No amount of controls will stop someone truly motivated and skilled, so you're better off raising the fence a bit higher and hoping that it deters the truly malicious.

Disclosure: I run Vulnerability Management and Assessments globally for one of the largest companies in the world, so my answer may be a bit bias :)
It's out of date, but that's OK when talking historically. And it was no more colonial than saying "Germany" instead of "Deutschland". Personally I prefer the term "Iran" even for historical usage because it is both older and (usually) more accurate.

But "Persian" is not something that foreigners imposed. It was originally the name of a particular Iranian nation that took over the empire thousands and of years ago. Their name then stuck around in some contexts long after that dynasty was gone, which is why the language is called "Farsi" (anglicised to "Persian").
> The only reason I didn't use even stronger language is that there are, in fact, significant genetic differences between the Khoi San and the rest of humanity (that's how we know they diverged so long ago)

We have no evidence that the differences are particularly significant to everyday life. But in any case, your statement here makes no sense. The fact that the Khoi San are (to whatever minuscule extent) genetically different from “us” does not make them any less modern than us. Divergence is symmetrical: as we diverged from the Khoi San, they diverged from us, and there’s no sense in which they’re “older” than we are. So I still don’t understand why you are only willing to credit them with being modern “to a moderately high degree”. There’s nothing to qualify. They’re humans just like we are.
A lot of the slowest stuff on websites are trackers that are being foist on developers to foist on the users (if the developers even have control over the trackers, like with GTM)
But you usually also have to wait longer for new versions of services -- which might not be a problem for the majority, but can be a show-stopper for some.
AMC's been at it for a year and is still committed to it.
Regal's corporate parent has been at it for decades and just expanded it to the US (via Regal), so I assume they have the data to make the numbers work.

Also important to note is that both AMC and Regal subscriptions are twice as much or more per month as MoviePass was...closer to the original/sustainable MoviePass pricing (when it was a lot smaller and not very popular).
Yeah, I realize. Perhaps we just read Homer in English. Either way, translating epics like the Aeneid was thrilling.
CBP’s Social Media Surveillance Poses Risks to Free Speech and Privacy Rights