skysight-inc/HackerNews huggingface dataset:
Most of my years spent in the cyber security space revolved around consulting with large companies. The most common activity we consulted on was cyber security related technical transformation. Basically a company would hire a new security manager or CISO who had all their favorite security solutions and vendors. So everything already implemented had to be replaced with the CISO preferred solution. This kept an army of consultants and business analysts and project managers in business as well as gave the security org the feeling they were making a difference.

Might not be the case everywhere but was certainty the norm in the consulting world.
Theatres are not breaking even, that's why they were all bought by the studios which control now everything: production, marketing, distribution. A typical cartel.

And they use their power to distribute lower quality and conquer foreign markets to disrupt that market also. A theatre is only a small part in that chain.
Is Your Company Selling Aspirin, or Vitamins? (2012)
(494) Kubernetes Day India 2019 – Highlights
https://outline.com/xHuVup
> Why is modern web development so complicated?

Although lots of cool stuff is possible, I suspect that very often, it's about profiling and tracking users, and not about delivering content. That's certainly my experience as a user. I routinely browse sites that call resources from numerous sites, and want to run multiple scripts. And all they're ostensibly doing is displaying some text and images.
Yinbi: A Censorship-Resistant Cryptocurrency [pdf]
In SR-71 Revealed, a book written by an SR-71 pilot and squadron commander, the author addressed this and to the best of his knowledge, the USAF and Lockheed both don't know the true top speed of the SR-71.

(Doing this from memory so I may get something wrong here), the SR-71 usually cruised at mach 3.2, it could accelerate to mach 3.3 when fired upon, and could go to mach 3.4 if the pilot felt it was critical to preserve the crew/airframe however the plane needed to return to base after getting out of harms way and needed to be inspected before returning to the flight line. A lockheed test pilot apparently got the SR-71 to mach 3.5 (or maybe Mach 3.6?) but said it started to get scary. If this is accurate, it's probably the case that no one knows what fails first on the SR-71.
I don't get why are you saying it's horrifying. It keeps cached copy of the build graph, among other things, so subsequent invocations of the build systems, there is less to read cold again. It's pretty good design. Also the server dies after some time (controlled by some default). MOC/UIC/RCC would've integrated much easier there, than what's right now.
The Vision Fund is $100 billion dollars, which is ludicrous by VC standards. Investing that sort of money sensibly, particularly if you limit yourself to IT startups (which historically don't need that much capital compared to, say, oil exploration or an iron ore mine), is not easy.
Right, depends on the things AT mentioned, but also on execution: whether the the issues with 10nm are over (now that they've shipped some chips) or if they'll also slow the scale-up to server-sized dies. Intel moving to chiplets could certainly mitigate that risk some, with tradeoffs similar to the ones in EPYC.
Lua, various OS kernels

Like any aspect of writing software, how you approach the problem effects the complexity of the final product. If someone doesn't make a habit of handling OOM, then of course their solutions are going to be messy and complex; they're going to "solve" the problem in the most direct and naive way, which is rarely the best way.

For example, unless I have reason to use a specialized data structure, I use intrusive list and RB-tree implementations, which cuts down on the number of individual allocations many fold. Once I allocate something like a request context, I know that I can add it to various lists and lookup trees without having to worry about allocation failure. Most of my projects have more points where they do I/O operations than memory allocations. Should people just ignore whether their reads or writes failed, too?
$2.99 for me. Not a huge cost, but certainly frustrating considering the non-existent burden to the provider.
Some countries have an agreement with each other where the passport check isn’t required. For instance I believe Norway and Sweden have one because they are part of the Nordic Passport Union: https://en.m.wikipedia.org/wiki/Nordic_Passport_Union
google.com - the best search engine
HackerNews - quality Content
Reddit - something for everyone
Github.com - fantastic for open source code
jonpauluritis.com - its not much, but its mine :)
For non-technical blogs it's unfortunate because the authors don't know any better. For technical blogs it's a feature that lets you know someone is not worth listening to.
Hosting costs are a small part of operating costs, compared to paying a living wage for even a few writers.
Mass death isn't the only way to reduce population. But it's something we may already be too late to avoid.
https://news.ycombinator.com/user?id=sctb is also a moderator and there is a undisclosed number of hidden semi-moderator, and some automatic filters and scripts, and enough flags from users can kill a bad story. So I guess 20%.

If you see something too bad or too good, you can send an email to the mods: hn@ycombinator.com They usually reply soon, but it is a manual process, so use it wisely.
None of the SFBA tech companies I've worked at have classified security engineers and SDEs as the same thing.
I mean... a social science is a science by definition, and making an argument successfully within those fields involves proving it via the same methods that are used in natural sciences. It's just not as easy to eliminate variables and come to clean "laws" as easily, as is possible in say chemistry or physics.

There is a lot of gray area, for example is medicine a science? Many treatments or diagnoses are based on probabilistic or empirical models -- that doesn't make them worthless.
So, yes, GNOME and KDE didn't put a dent in Windows. But that wasn't the argument the anti-Linux folks were making. They were saying that as a process of producing software, open-source development was missing some magical property of the development practice - testing, professionalism, sustainability, security, etc. - that only closed-source proprietary development could provide. The reason Linux desktop failed to displace Windows was none of that: there's no (serious) argument that customers stayed with Windows because it had better stability or security. They stayed with Windows largely for compatibility and because it was free. The only missing feature was 100% compatibility with existing Windows software, which wasn't part of the claim.

As it happens I think that's actually directly analogous to the open access fight now. Universities stick with pricy journals not because those journals provide better typesetting or distribution (or science) but because those journals are the only way to get to existing papers. If Windows had never existed until today, nobody would switch to it; similarly, if Elsevier had never existed until today, nobody would start subscribing to them.
He was working for the cleaning business, though. If the company was letting in anyone who works for that cleaner without further investigation, that's their problem. That's the situation we were talking about upthread, so I assumed
zcrackerz would have said something if it were different.
You have to go meta! Don't just read the news, but try to figure out why they are telling you to buy or sell. ;-)
Well, either that or polyfill. Transpiling to JS may be a product of other motives (Typescript, Svelte, Elm etc.)

While Ruby is pretty and all, I don't find that I'm enjoying the lie that is ES6, and don't even get me started on classes in JS, etc.

Bottom line, JS isn't my favorite language, but I'm not dying reading/writing ES5, (nor does ES6 look lovely when I know that it's lying to me) and the advantages outweigh the disadvantages...

I'm questioning a lot of the group-think decisions.

State management? What is "a variable"?

Many times the cure is worse than the disease...
$100B is way too big of a fund to be able to reasonably deploy. But Saudi Arabia needs to invest in something; they're $45B of that $100B.
Is this true? I've tried to find more depth than this and have admittedly struggled in the past
This is a real problem. While I was working at XBox, we made giant pictures over the windows using colored post-it notes. I remember a really good pixel art megaman that was my favorite. Internal offices sometimes used newspapers to cover over the windows (but maybe that was just advertising, here's someone who works on something you want to see!).
The best metric for determining quantitative product market fit
High-profile well-connected people, friends and peers of executives, and people in a right-place, right-time situation name their own price.

ICs at FAANG get FAANG-level comp. Consultants gladly take dumb money's budget.

"Cybersecurity Pros" get the standard NDA and noncompete.

Until there's a breach.
Provision a new cluster into an existing VPC
Also likely not made to deal with high and low temps, probably components that rust, etc.
Ooh, thanks :) Just after I built a new version of Ruby and everything ...
I think I read recently that buffet is sitting on an equivalent amount of cash, waiting for the right investment
Yeah but AMD should just beg Amazon to remove that instance type. It's hilariously slow. I don't know if Naples was just the beta of Rome or what but if you use it you won't like it.
Well, the environment isn't the only factor, but it's the biggest one. You have to take care of routing, permissions, timeouts, errors etc on the server as well. Data being "an sql query away" on the server is similar to being "an AJAX call away" on the client.

If you have a UI, you're going to have to manage UI state somewhere. Even if you have no client-side code, you've marshal that state into strings to send to the client, and then parse it all out again on the server when you get the next request. Remember hidden form fields? Heck, this very site has some pretty interesting history about attempts to solve that problem elegantly. It was a PITA.

Ultimately, none of that has to do with Javascript; it's inherent in a client-server architecture. The one thing that is specific to JS is asynchronicity. If you don't like that, ok, fair enough, but that's a matter of taste. It has advantages as well as disadvantages, and with Promises and async/await, it's actually pretty elegant. It's certainly not the case that asynchronicity makes you write shit code.
Conversely, why are modern web apps so terrible? Take the Google GSuite Admin Console. This is what I called "Turn based administration" [throwback to the old turn based strategy games]. You start by loading the page and the 15mb of random javascript. Now click on something! Wait. ::Javascript stuff:: Incoherent error. Click Help. New documentation webapp loads 15mb of javascript to display some static text.
This post is way too depressing.

There's nothing in his post suggesting that the way he developed is harder for someone else to pick it up. MVC Frameworks aren't necessarily easier to use than vanilla PHP. Your answer reminds me of people who don't know how to use vanilla JavaScript and have to add jQuery to the project for things that could be one-liners in vanilla JS.

The whole "what if the customer needs something in the future" is just a piss-poor excuse that bad developers make to prematurely optimize. There's nothing in an MVC framework that makes it easier to add new features.

There is nothing preventing him from using official libraries for Stripe or Google Maps if needed.

There is nothing preventing him from using libraries that can be updated, probably with a single CLI command.

There is nothing suggesting his system is unsafe. Quite the contrary.

He didn't outsmart the entire industry. He just built something that works without relying on your favorite tool. Maybe you should try someday, you might actually learn something.
Did this ever get resolved? Does George own the company already?
Supposedly, they will only be shipping to select customers initially (and at 28 cores) in 2020.
Good luck patching all the humans that work at, or with, your organization.
Would it really be worse than having a government agency forcibly ground your planes for safety reasons?
But WeWork seems like an overly stupid investment to make, no? Uber was a calculated risk. But WeWork?? They better hope they can sell some stock at IPO and WeWork’s stock doesn’t totally tank during the holding period. WeWork could pretty easily result in billions in losses.
Isn't that mathematically exponential, just with a larger base?
oxipng got it down to 248 bytes. And yes, PNG has a little more fixed overhead, such as the IEND chunk and some of the required IHDR metadata. That only tends to be an issue in files this small, though, and gets dwarfed by potential savings in larger files.
It's awesome that Google did that. This is the first I've heard of it. But:

> The thing is that the overhead for this process really only makes sense at Google scale.

The software industry is far larger than Google. If we want to claim that software is a discipline of engineering, we all need to have access to that kind of reference data, rather than trying to feel our way around in the dark in comment threads about blog posts about somebody's personal experiences.

I won't go so far as to say there's no such thing as software engineering -- a number of people working for companies with large budgets have well earned that title, I'm sure -- but the extent to which the term is traded like currency in our industry is disrespectful to the discipline.

> So you just assume that if you can get the job done in a way that satisfies the customer, it'll be wildly profitable, and the primary factor to optimize for is developer time.

The fetishization of developer time is one of the problems slowing the maturation of our industry. It ignores end-user time, it ignores management time; it often focuses solely on the initial development time of a project and ignores entirely the ongoing maintenance time for a project.

How many codebases are there out there that are gigantic balls of mud? How much developer time has been wasted on trying to maintain or refactor those codebases? How many really dumb security issues have negatively impacted companies or end users? How many comments has tptacek left on one little forum in one musty corner of the internet over the years trying to explain cryptographic and security-related best practices to an infinite legion of under-trained developers?

How many people have lost their lives to software defects? Not even the really tricky CS stuff, I mean the kind of defects that any other engineering discipline uses as case studies in their introductory courses.

Which case study would you choose for our Galloping Gertie?

Certainly software has done an incalculable amount of good in the world, and its impact is far and away net positive.

But while software has been busy "eating the world", it has rarely paused to also consider the cost and damage it has wrought and whether there are practices that could be standardized to reduce those negative effects. So I disagree wholeheartedly that we're not yet at the point that these things are important. Depending on who you ask, computer programming is between 60 and 180 years old. That's well long enough for us to begin asking questions like, "what data do we have to support this approach or that approach?"

There is still plenty of room for experimentation and research. There is still plenty of room for hobbyists and tinkerers. This isn't an exclusive-or thing.

As much as I really do appreciate blog posts like this one, and the discussion they tend to generate, and especially that there's a new one to read every single day (he said, wryly), I can't help but see every one of them as another indicator of the immaturity of our profession.
Offhand thought of the day. The Motor Industry Software Reliability Association should ban compilers that allow optimization based in UB.

Because seriously these people need to be stopped.
Reproduce a lot.

The sex is a bonus, the problem it solves: we don't have enough smart, talented people having kids. Everyone that is smart/talented seems to only want to have one or two kids, or none at all.
Not really, this kind of thinking is exactly what led to the client-side JS framework mess.

Round trips are just fine. Browsers are smart, servers are fast, and HTML compresses well. The site you're reading right now (HN) requires a reload. Stackoverflow requires a reload. Neither are slow to use.

If your page is really that complicated, then I suggest Vue or Preact which are efficient and designed to progressively enhance pages instead of rebuilding everything in JS.
I'm not sure about of many of your facts (only two pitchers?), but I do agree that the drama is missing in today's game.

One thing that MLB can do, and they have been trying to address recently, is trying to get players to be more expressive during games. For years, the culture of baseball has promoted a certain behavior that goes against today's social trends. For example, after you hit a home run, it hasn't been considered acceptable for a player to be overly expressive immediately after hitting the home run (watch the ball, flip the bat, etc), as its been seen as embarrassing to the pitcher. Honestly, today's fans want to see it, and the apparent conflict that results between the pitcher and batter brings more interest to the game.
I’m aware. The fact that there’s a name for it doesn’t mean it’s allowed in the US. https://en.wikipedia.org/wiki/Trial_in_absentia
My favorite economics quote: "the market can stay irrational longer than you can stay solvent."

Also known as: "you can lose a lot of money by being right at the wrong time."

It's doubly true when the market is as heavily manipulated as it is today. There's no point in trying to game or predict it at the scale of an individual investor, unless you enjoy the thrill of gambling.
> Putting a tram or high frequency buses in southern France for instance would be ridiculous outside of Marseille perhaps.

Yeah, there's no trams in southern France. Except for in Bordeaux, Clermont-Ferrand, Grenoble, Lyon, Marseille, Montpellier, Nice, Saint-Étienne, and Toulouse. And there are plans for trams in Nîmes and Avignon.
OPSEC comrade :)
Exploring Neural Net Augmentation to Bert for Question Answering on Squad 2.0
Either the author is trolling or they are trying to convince us to switch to Microservices, so that once we have a big ball of mud Lightstep can come in to save the day.
How are the industry names classified? Isn't just easier to use NAICS? I imagine enterprise customers are used to that.
Ninite[0] (YC W08) is a useful site for setting up a Windows PC. It allows you to install (or update) your choice of around 100 apps and tools in 13 categories (including Compression, where you can select WinRAR) for Windows 10 (also 7 and 8) in one shot, like so:

- You first check off the apps/tools you want from a checklist on the site -- they are grouped by category

- You then download a custom installer which will install the apps/tools you selected from the checklist.

This custom installer will install the apps/tools you chose, using the latest version, skipping installing toolbars, skipping reboots, doing all the work in the background, etc. -- there's a description of all this on the page.

(There's also a pro version for managing multiple PCs)

[0] https://ninite.com/
The Coming Bond Market Collapse: How to Survive the Demise of the U.S. Debt Market - Michael G. Pento

This is a good read if you'd like to have an understanding on what's coming up next.
> (example: in our color system, wine is red, and a traffic light is red. Yet you distinctly know that a red traffic light does not have the color of wine)

But would you call the green light blue? Because I know some Japanese who do. Green/Blue is not as clear cut in some colors. And for many in Japan, the shinto gates (The torii) is not red. It is of its own color, between red and orange. I see it is often translated into "vermillon", which, let's admit, we would just call red.

So is it possible that in the distant past, a civilization would consider dark red and dark blue the same color? That instead of one "blue" category they would mix several other unnamed colors?

I can believe it. I think most civilizations will differentiate between the color of the blood and the color of vegetation but apart from that, I can imagine a very different palette.

And while I consider it unlikely just given the elements we have, let's not be totally closed to the possibility that the biological color perception changed since then. Arguably, nowadays, color-blindness is a bigger handicap than a slight myopia. It hinders you in several artistic or design-oriented careers. Even had a classmate struggling with resistors color code (in the good old days of the DIP components). Myopia will just be a problem for pilots and is easily corrected. Has it been the case for long enough to apply a selective pressure? I doubt it but am opened to being proven wrong.
I imagine they just need to not lose too much. The whole thing is set up to buy everything for sale in case oil crashes.
I wonder if that's something to do with their famous lack of hierarchy. A bit hard to tell someone to fix it if you are all equals.
Or, you know, you enjoy your work/working
Don't forget helm charts and docker containers. The security/assurance of that supply chain is pretty lacking.

It feels like some people are actively applying the (historical?) Wordpress security model to Kubernetes for expediency.
At one of my previous gigs there was a big push to get out of the colo and into the cloud, part of which because of perceived “cost savings” vs running our own hardware. I think most of it was “everyone else is moving to AWS”.

All I know is we never had a $30,000 “oopsie” in the data center because a dev left a bunch of stuff running they should have shut down.
Then there are the Homeric epithets, which recur and are believed to be a mnemonic device...so "wine-dark sea" is not only a descriptor, but an anchor to remember the surrounding verse.

I believe this was a 20th-century discovery, no less, and even "ancient" texts have dimensions that are easily overlooked
How is that relevant? If the production is happening deep inside Earth, we can capture it before it makes it to the atmosphere.
Clearly an exception could be made in this case. Systems that are part of a passenger jet could hardly be called consumer grade.

Incidentally, my GPS watch (Garmin) was working last time I was on a plane. It was bang on 700kph the whole time IIRC.
They've been working on the transition from QMake to CMake since 2012 (or earlier). It was a topic at the Qt Developer Days when they released Qt5, long before Bazel was an option.
How shrinkflation is playing havoc with economists’ models
Lack of support for X forwarding in Qt5 perhaps? JPEGs are being sent over the network and so the experience when using e.g. X2GO with a recent Qt Creator on a server is crappy.
Ask HN: Interest in analytical report of NPM downloads
I run the service https://npm-stat.com and have a huge dataset of how often any public package gets downloaded on a given day.

Is there interest in a detailed report about growth rates of popular packages, trends, interesting comparisons between competing projects like react vs vue vs angular, etc.? You can basically do this on your own with the service, but you need a lucky hand to find the interesting stuff. I have that data in a local database and I can analyze it more efficiently.

And, would you be willing to pay for such a report? What would you like to see included?
The problem is that there are 100 different tools and they're all hot garbage.