skysight-inc/HackerNews huggingface dataset:
S3 isn’t a hard disk; that’s EBS. S3 is ~17 copies on object-level-mirrored hard disks (allowing a choice of different mirrors per object, preventing overloading and rebuild degradation) attached to a lifecycle event queue, a load-balanced webserver cluster, and an async tape archive.

S3 costs pretty much what that infrastructure costs to run yourself.

But certainly, go ahead and run a Riak CS cluster (plus those other things) on top of some Herzberg servers, and try to outcompete S3 on price. I—and many others—will be waiting. :)
Exact reason why we migrated a webflow site to Next.js/GraphQL/Contentful/Hasura stack.

Webflow is an awesome design tool, but the exported code is very messy to work with. If are a designer or plan to stay on webflow for simpler static sites, it wouldn't matter though.

However, It does create a technical debt if you happen to scale up and your needs grow.
I find the best for headaches is to wrap a flexible icepack around my head. Gone in 15.
From the original 2015 article about the hack:

"Miller and Valasek’s full arsenal includes functions that at lower speeds fully kill the engine, abruptly engage the brakes, or disable them altogether. The most disturbing maneuver came when they cut the Jeep's brakes, leaving me frantically pumping the pedal as the 2-ton SUV slid uncontrollably into a ditch. The researchers say they're working on perfecting their steering control—for now they can only hijack the wheel when the Jeep is in reverse. Their hack enables surveillance too: They can track a targeted Jeep's GPS coordinates, measure its speed, and even drop pins on a map to trace its route."[1]

The wheel control only working in reverse kind of makes sense. They're probably using some kind of self-park feature to control the wheel, and some engineer (sensibly) put in some kind of interlock to prevent the wheel from moving on its own when travelling at speed.

The wording of the article implies that these particular attacks only work when the car is travelling at low speed, but earlier in the article they did mention that they could (and did!) throw the transmission into neutral while the Jeep was driving on the highway. The driver was unable to recover without turning the car off and back on again.

In a followup a year later, they showed that they were able to do these attacks at any speed, including turning the steering wheel.[2]

[1] https://www.wired.com/2015/07/hackers-remotely-kill-jeep-hig...

[2] https://www.wired.com/2016/08/jeep-hackers-return-high-speed...
So what's the alternative to not using CDN's for those of us who don't have 100% of our customers in or near Germany?
It also means there are popups, sticky headers, and sticky footers. All combined together to make the actual content as hard to read as is possible.
Congratulations!

We built a similar product:

https://projectpiglet.com/

Except it appears we do filtering very differently. Our system also suggests points to enter and leave a given asset based on the information.

It’s a pretty hard and crowded space. Feel free to look at some of my repos and blog posts, might shed some light on how to improve your system. Although your UI/UX is far superior
Show HN: We turn your digital footprint into an automatic journal
I use smartphone as camera. The single most important reason to upgrade smartphone for me is better camera because all the photos you take most likely going to live forever, probably spanning multiple generations. I think there is still lot of juice left in this area. If someone came out with new AI camera that started producing amazing super resolution wide lens images with professional colors, night vision, infrared, UV photography etc - that would be a huge deal. Battery is next most important issue especially when you are travelling and taking pics all day. If someone cracked battery issue or made this more power-efficient that would be huge case for buying a new phone. Headphone jack, non-slipper surfaces, not having to put ugly case on it - is 3rd most important reason to buy new phone. Peripherals, ability to use smartphone for other devices etc is probably the 4th.

But you see the problem... Folks have been rapidly increasing prices while giving nothing that customer wants.
Incredibly ironic that your perfectly useful & reasonable reply is being downvoted.
But how many companies are never going to have scaling issues, and also have the resources to hire a good in-house sysadmin to manage their servers? And sure, maybe you have somebody on staff who can handle the sysadmin duties now, but what if they leave? Do you still have the resources to maintain your own servers?

The author's advice is good for basically one scenario: a personal hobby project run by somebody who already knows they would prefer to run their own servers instead of use a cloud host.
> It takes forever for Dell or HP to ship your stuff.

Not a problem for this guy, he uses hetzner's cloud. Did I say cloud, sorry I mean server rental.
Yes. In fact the tax law as the authorities apply it probably is code in the sense that they probably shove some inputs into some Excel spreadsheet to calculate your tax return.

(I'm exaggerating, they probably have bespoke software which they can use for auto-generating their spreadsheets).
Ask HN: Are there pre-configured redundant storage solutions I can use at home?
Aah. That makes sense.
I agree, this guy looks like he's referring to startups with less than 1M views/month. You can get a $20 vps with scaling for that kind of traffic.
Natural grass is the feed.
Approaches for serverless without vendor lock-in
With a really stupid precedent established by this, what could possibly go wrong?

Tit for tat can be a rather nasty unintended consequence

A warning: The US hopes that these revelations will act as a deterrent against any future attacks by Russia on its systems. But there’s always the risk that it could fuel an escalation instead.

Why is it that the US thinks it can cause damage to others with impunity, but others won't dare to hit back?

When I was young, this was called "Cruisin' for a Bruisin'."
Anything coming off developers.google should be avoided like a plague.
What's the methane etc produced by rotting grass equivalent to bovine intake? Plans die; everyone seems to forget this.
It's not the image, it's the 3rd-party script they use.
Presumably, because they swapped to a non-approved person on their schedule.
I find using the cloud too close to the metal for me. I'm using Netlify for hosting. I get impression they might be using AWS under the hood.
Almost seems like this source should be open.
Agreed on most points except in some cases where CISOs are actually people who rise up through the ranks within security and actually know their shit. But I concede that its not very common.
No recruiters or agencies, please.
Not that Microsoft Flight Sim or X-Plane aren't awesome and relatively high fidelity simulators, but I don't think that's a feasible QA loop, as a) they're not simulating all flight systems on a 1:1 basis, b) even if they did have a fully to spec simulation of the flight control software, it's still insufficient because the real thing runs on specialized hardware, which is not being simulated in flight sims of this tier, and most importantly c) the external environmental inputs are also being simulated so it would be of limited value.
It might happen! IE and Edge were the last holdouts and now MS is switching to Chromium.
Hello HN! I'm one of the creators of Eternalist. We started Eternalist with the fundamental belief that it was an utter shame how much of your life you simply forget. If you think back, I bet you can't even remember what you did last week.

We've been working on this for about a year, and we're ready to see how we can improve the product! Please feel free to ask questions or share feedback.

We pull the data from apis and store copies from the api call in our database. For images, we just store baseURLs, not the images themselves.
Would certainly consider a 'fewer bigger boxes, more hands-on' approach, BUT ONLY for clients that had good administration talent in-house and were already debugging the managed services a lot anyway bc they're pushing the envelope.

Managed services aren't perfect and I've seen them go bad, esp for things like failover. When they hiccup (either perf-wise or downtime) it's hard to debug effectively depending on what logs / stats the vendor makes available.
>MMO's were the propaganda to sell you the same RPG's without having to give you ownership, if you can't see that when Guild wars had 8 player multiplayer but jury rigged a login/drm system on their PC RPG, you're clueless.

I downed your post because resorting to personal insults is against HN's guidelines.

To your point, there exists MMOs that are validly massively multiplayer, online games. There are also many games that didn't need to be architected as an MMO and, from a cynical viewpoint, that could be seen as a land-grab taking control away from the consumer.

You have glossed over a lot of other facts in your pursuit of black-and-white here. For example, Quake 3 and UT2004 had CD Keys. Likewise in regards to Steam, it's not that there are zero benefits to that delivery mechanism over how things were beforehand. Automated install and patching is a far cry from the messing each person had to do previously.

It's certainly debatable whether these things are a net positive or negative, and IMO it's becoming increasingly a negative as time moves on.
Yup conveyor belts in food processing factories have paper lining containing phthalates and other nasty compounds that the food is moved around on throughout the food processing machines. This stuff is not even on the radar of most people, I only found out from reading a book on how processed food is made.
The definition of "full webpage" can be scaled out of that price point, but yes. I wish you best of luck.
Where did you read about these non-linear changes? Do these represent the climate change consensus, like e.g. IPCC?
I tried writing a breakdown of image formatting for the web (specifically ecommerce) that mostly focused on JPG vs PNG. It's still WIP but if anyone wants to check it out or has feedback please reach out. It's specifically not blogspam, more of a working document that I hope to be able to share with clients: https://aloagency.com/blog/preparing-images-for-web
hereabouts, banks adopted new procedures after some incidents involving staff's families being kidnapped.
RDS might be one example. No forced upgrades from AWS on it? Or AMIs? K8S versions in EKS? Etc.
Tesla's statement is actually accurate in crashes with fixed objects. Yes, vehicle weight must be accounted for in multi vehicle crashes, But there's no way to do a comparison if you do that. Who knows if you're crashing into a semi or into a smart car?

I am willing to bet the real issue is that the major car companies are putting pressure on the NHTSA to clamp down on Tesla.

I am glad Tesla is sticking to its guns and not backing down.
Just my personal opinion, but I think the best leaders set the table to allow those closest to the problem come up with the solution. They frame it in a way to align with the organization's strategic goals, help facilitate collaboration for those solutions to get proposed/worked out, provide the tools and resources to implement them, and give the right people credit. Rarely do I see them actually create the idea, it's more about managing the energy of the organization as cliché as that sounds
These changes are very welcome, but in my opinion are too little too late. Qt has missed the boat with the current developer mindset. While I want Qt to 'win', as the end result is superior to say an electron app, most developers are willing to sacrifice usability and add bloat by using electron. Or simply paint them selves into a corner with a native SDK.

Qt has a massive uphill battle to try and stay relevant. Like it or not, there's a reason why electron apps and native ui sdks become the zeitgeist. While reusability is often cited as the main reason why electron has become the cross platform defacto, there's a lot more to it than that.

Personally, the difference between using electron and Qt is black and white. Looking at setting up alone, With Qt you have to struggle to compile a massive library which inevitably won't work. After sinking hours into compiling it, you're confronted with a unknown markup language and toolchain just to get a window displaying. And the documentation is incomplete, and to top it all off the minor versioning differences will cause your app to break in spectacular ways. Compare this to electron, where everything just works out the box, and with npm you have every single library you could ever think of. Microsoft and Apple roll out the red carpet for developers to make ui development super easy, so making two apps with a shared library is often just as tempting.

The way I'd try and save qt would be to make a react-native binding a first class citizen and ditch QML/js engines. I'd also remove the custom tool chains and release extensions for VSCode/Atom that outputted jsx that could get interoperated by a virtual dom. developers would kill for that.
I knew it was going to be Levine just from this comment
How secure is the source integrity of all your dependencies?

All your software vendors?

How likely are you to get malware on an employee laptop?

Phish employee credentials?

Have somebody sneak into your office late at night and install keyloggers on everyone's keyboards?

Kidnap an employee's family and blackmail them into giving you access?

Go through your recruiting pipeline and join as an employee with the motive to steal your data?

Get two people to do the same and bypass peer review controls?

Of course those are getting outlandish and unlikely, but that depends how "motivated and skilled" your attacker is.
If you make sure that login/registration pages have no ads, that's not enough to be secure.

One example: you've probably clicked the "login" (or register) link from a page that does have ads, and a malicious script could've hijacked that click and presented you with a perfect replica of a login (or register) page, and then captured your input. And I'm sure there are many other such tricks.
TL;DR: yes.

They suggest mitigating this by putting ads in a sandboxed iframe (unlikely and probably not foolproof) and not having ads on a login page, but ads can probably still steal your credentials.

It should be obvious that loading untrusted third-party content compromises security, but apparently that is unimportant to sites that use third-party advertising services.
* eliminates the need for front-end development on static sites

I have been using it since its beta days for my blog and some mockups and am not sure I agree. It is one of the finest 'web design tool' that I have ever used. But one that will create a technical debt for the 'real front end developers' in the future.
If you google the paper (the PDF isn’t hard to find), you’ll learn it is a bit longer than one sentence (about ⅔ of a page)

You’ll also learn how much many maths papers leave “to the reader”.
Tomty Is a Tomtit Based Perl6 Test Runner
Tomty is a Tomtit based Perl6 Test Runner.

https://github.com/melezhik/Tomty

Easy to write command line utilities tests!
Opinion: Speeding Up Baseball to Save It
Thanks for the amazing work you guys are doing! I'm keeping an eye on the progress and it's amazing to see: https://boilingsteam.com/proton-keeps-making-its-way-in-comp...
Does anyone have a good cloud cost calculator that they can recommend?

Web searching shows a few but I'd love some recommendations.
Ideally an online spreadsheet, but excel would do too.
The lifetime of a modern ship is only 25-30 years. I think when the parent comment mentioned electrifying bulk cargo shipping,they were referring to building new electric ships, not converting existing ones.
That depends on your definition of 'cloud'. If your app fits into existing PaaS models (Google App Engine, Heroku, et al) then you can dispense with the ops/devops team entirely. Yeah, they're expensive, but nowhere near as expensive as hiring.
My first day at my last job as an attorney, I was told to submit 3000 files to a team of paralegals to have them manually convert them to PDF and rename them using a standard exhibit convention (eg EX-2019-001). This activity consumed three FTEs annually. I wrote a script to automate it in ten minutes.

If anyone there had even the slightest sense of how easy that would be to automate, they'd have saved hundreds of thousands of dollars by paying some random kid $200 to write them a bash script.

That's just a simple example, but I ran into issues like that on a daily basis. Databases full of evidence that were discarded because no one knew how to access them or run queries on them. Whole inboxes of emails in ost files thrown away because no one knew how to open them. Hundreds of hours spent manually reviewing documents when OCR and a decent text search tool could have gotten the same result in minutes. It was just never ending.
This is incredible and it looks like it could affect massive numbers of sites - unfortunately the article doesn't summarise the problem very well.

The vector is subtle differences in HTTP header parsing between your front end (reverse proxy, load balancer etc) and your back end (web server).

"New Relic deployed a hotfix and diagnosed the root cause as a weakness in an F5 gateway. As far as I'm aware there's no patch available, meaning this is still a zeroday at the time of writing.".

Edit: other major companies he revealed were affected were: PayPal, Trello, Redhat.
This one? http://johanneskopf.de/publications/pixelart/index.html

It might be apropriate in some cases at least.
The problem is, even if you try to contribute negative LOC, every other week your boss/customer/PM sees a new feature in their dreams or hears about a new technology at a conference and demands you put it in there right now.

Every system that I've built so far has started out with a simple, obvious set of rules (both new systems and replacements for old systems). Then the customer/PM/whatever notices just one more edge case. And another. And another. And another. The truth is that reality is frustratingly complicated. Especially if the reality you're mapping contains the internal bureaucracies of large companies.
you send IT

*ISK

and i send double ISK
no scam
And indeed more and more communities are stacking houses nearly right on top of each other, but building an above average number of community parks.

I get it. It makes sense.

---

Personally, it's not for me, since

(1) I just don't like being gutter-to-gutter crowded. If I had my way, I'd see nothing but grass and tree, with not a single neighbor in a straight line of sight.

(2) I like entertaining family/friends in the intimate setting of kitchen/backyard rather than a public park.

(3) A park lacks certain things, e.g. a trampoline, which my kids love.

(4) My young children (ages 1, 3, 5) can't yet go to the park independently, even a nearby one, but they can open the back door to the fenced background.

(5) Same as #4 but pets (dogs, ducks, chickens).
Even between closely related cultures using the same language, there are color differences. Even though both the British and Americans have the words "pink", "magenta" and "purple", the British use the word "pink" over a larger range that includes colors most Americans would call "purple" or "magenta".
>The main benefit of cloud providers is that you don't have to learn and pay attention to all the stuff he lists, [...] I'm surprised more mid-size companies - those with AWS bills in the 6-figure-per-month range - don't leave the cloud, get physical hardware, and pay some sysadmins.

$12 million/year for cloud seems like a high enough threshold to go internal but I'm not even sure that's enough money to sway executives away from cloud.

The main issue is that internal IT departments at corporations have slow service from the IT staff compared to AWS/GCP/Azure and its engineers. Corporate IT departments typically don't treat their coworkers in other departments as internal customers. Instead, they treat them as adversaries and a nuisance.

That's why at non-tech corporations, the first group that experimented with the new AWS cloud service were the development teams. They got fed up with IT service backlogs waiting for new dev/sandbox/text servers. They got tired of waiting for IT to requisition a server and then install the os, db, etc. If the programming manager then asked IT to install an Oracle update, the IT department might say "well, Susan our db admin is on vacation till next Monday so we'll get to it then." Those kinds of inter-department interactions were frustrating to the internal customers of the IT department. With AWS, the programmers got their sandbox servers in spun up minutes instead of weeks or months. Once the dev teams were sold, the more risk-averse and mission-critical production workloads eventually moved to AWS too.

The author of this article doesn't seem to understand the dysfunctional relationship between internal IT and their coworkers they serve. It's more about responsiveness and iteration speed of the AWS/GCP/Azure employees' vs the IT employees than expensive AWS EC2 compute power vs cheaper internal racks of cpu.

E.g. The Guardian pays AWS more for cpu+diskspace+network than what they can build on their own. That's the raw hardware costs. But it doesn't matter because Guardian's internal IT staff with an internal cloud stack just can't match AWS: https://www.computerworld.com/article/3427004/the-guardian-g...

To me, it totally makes sense for Dropbox to migrate off of AWS to save money. They're a tech company and have the engineering culture to do it. A lot of non-tech companies (like The Guardian) don't.
I thought Asset Management was the next sexy thing in security - heard about a lot of security startups that facilitate in Asset and inventory management - BitDiscovery, Senrio etc.
Still working through it, but I found the time ironic since the author is "oneminutejs"
You’ll have infrastructure deployment engineers no matter what you do. But you’ll only need infra ops staff (as opposed to application ops staff) if you’re running your own infra.

There’s nobody you pay, in your own company, to sit around watching S3 or Lambda or SQS for degradation. That ops service is part of AWS’s job that you pay for through each service’s fee structure.
I’d want to know why we are translating that word to mean green? Is is used to describe other green things, if so What? Did they have a word for yellow, and if so what was that used to describe?
It's silly to do a round trip to the server just to change some local UI state, right?
Incredible to think that rap music would never have existed or become a popular genre if this law existed in the 80's and was weaponized against artists.

Ultimately this will strengthen a labels position as signed artists will be "allowed" to be influenced by songs the record label already owns.

Anyone else will be stuck in court.

There's a fantastic documentary on this called Copyright Criminals that breaks down this area and just how intertwined the entire music industry is as artists are naturally inspired by each other. The conclusion from this film was that innovation and creation will then come from places where these laws do not exist.
I always wondered what crap chemicals is leeching into my coffee using my plastic electric kettle for my plastic aeropress or plastic Keurig machine using plastic disposable pods.

Anyone have a safer method of brewing coffee? Like boil water in a glass Pyrex beaker and some sort of glass French press/glass aeropress?
The world's largest hybrid ferry [1] has just been launched to run between Sandefjord (Norway, on the West coast of the outer Oslofjord) to Strömstad (Sweden, on the Eastern side of the Oslofjord) [2]

[1] https://www.ship-technology.com/projects/color-hybrid-ferry/

[2] https://www.colorline.com/sandefjord-stroemstad
Lack of evidence of hacking is not evidence of lack of hacking.
Could you point me towards some modern-looking websites that don't use JS?