skysight-inc/HackerNews huggingface dataset:
I'm sure some changes are upstreamed (assuming they're even accepted) but there's no requirement for them to do so.

Again this seems like a random example. What is so important about this particular change over all the other open-source contributions?
> Haha “I have a hard stop” is a great alternative to DUI.

Truth
It seems like part of that case hinged on economic impact. If you're using copyrighted books and show snippets of the book that's one thing. But using copyrighted material to build something that is attempting to replace the copyrighted material seems like it could have gone the other way.
How would that explain Troutdale, OR, which has a much higher rate than the NY location? Portland is an order of magnitude smaller than NYC. I would hope the rate of injuries would likewise be lower.
Real instances of the dependant class.

A "unit test purist" would likely shun this, but I take more of a realist approach; in many real-world cases, mock-heavy tests make for brittle tests that don't give confidence of correctness.

I tend to focus on integration tests, as I find these provide the most value while still executing very quickly (depending on the stack, obv).

That doesn't mean I don't use unit tests, or that I never use mocks - I just use mocks very sparingly.
I can't think of a reason other than encouraging customers to continue to pay.

In a 'fail closed' scenario like this one, customers not only lose the DRM protection, but SecuROM gets a customer's end users to harass the customer, which punishes the customer for not paying.

In a 'fail open' scenario, the customer can choose to end their relationship with SecuROM with basically no side effects; they lose the DRM protection, but end users don't notice and can still play the game.

Another point is that in both scenarios, SecuROM has to spend cycles handling auth requests for people playing the game while not receiving any money to do so. From their perspective it's better to make customers remove SecuROM vs. 'fail open' and authorize games 'for free'.
You've missed rayiner's argument, which is that the household income is more than the sum of the median man and the median woman. That is: two married people make more than two single people.

There are a number of arguments you could make as to why (for example: married people tend older and so are farther in their careers), but it's not just "married households have two incomes and single households have one".
Sounds sensible. I don't see any evidence that personal data has any in-depth protection guarantee - its all best efforts "we'll try". I don't have a solution but its always useful to remember. That and the fact your personal data will be mined mercilessly for every possible linkage possibility that can be monetised.

(For those now fuming about how great their own service is and how strong their security has been, please re-read the word guarantee. Consider the implications of what it would mean if you were required to face a fine for each breach. Now you know what I meant by guarantee/warranty and why I said I don't have a solution)
1Password X 1.17: New brain written in Rust, new menu, and even more accessible
"shift away from liberty."

We have the freedom to choose a company like Ring/Amazon. It's not forced on us by the government.

"We didn't have a major terror attack in the US using airplanes before 9/11 either"

We also didn't have the terrorists with that level of sophistication. We still do today. Increased security definitely has a role in a decrease of terror attacks, but how much or how little would be needed to maintain this level? That much is unknown.
Sure, I agree we should have a local storage option: however, if we are concerned about population level problems then a local storage option isn't going to help because the vast majority of people wouldn't use it.
Yesterday: https://news.ycombinator.com/item?id=21693797
I see this all the time on corporate desktops, but on your own hardware? I’d point blank refuse. I’d rather just not use it for work.
The reason people didn't buy these is because there isn't enough continuous color anywhere to put text on top of.
New Kallithea – Self-hosted open source GitHub with mercurial and Git support
As did millions of other users and companies. If you give away source code then people will probably use it. Don't do it if you don't want that to happen.

If they're changing licenses now then good for them, but you could say they also took advantage of the free marketing from open-source and now put most of the development into enterprise versions. There's no right vs wrong side here.
Yea. I can't figure out why the "Law Enforcement Neighborhood Portal" is supposed to be so terrifying. It lets police see which addresses have Ring cameras running so the police can request footage directly from a nearby resident when there's been a crime in the neighborhood. I can't tell if I'm supposed to be afraid because this leaks the bit of info that the resident own cameras, or because police might get the footage "without a warrant" by, horror of horrors, asking the resident for it:

https://www.vice.com/en_us/article/43kga3/amazon-is-coaching...
Someone on another HN thread about Lyme disease described curing their persistent treatment-resistant infection with a long fast.

I wonder if these folks who are stinging themselves have already tried something like that.

If memory serves it was a fast long enough to significantly weaken the immune system, to the point that the person said they were the sickest and weakest they had ever been in their life. Then when they resumed feeding, their immune system went into overdrive and cleared the infection.

Edit:

Found the comment

https://news.ycombinator.com/item?id=20494464

Their linked writeup seems to be down, archive.org:

http://web.archive.org/web/20190820205143/http://www.smashco...
The pricing on this takes a bit of mental processing.

So take us-east-1; normally you pay $0.000016667 for every GB-second + $0.20 per 1M requests.

By my reading if you turn on reserved concurrency 1 to keep a low-usage Lambda hot it changes to:

$0.000004167 for every GB-second: so $10.80 for a 30-day month.
Requests are $0.20 per 1M requests - same.
Duration changes to $0.000009722 for every GB-second for the Lambda-that-is-kept hot.

OK I have to put those on lines next to each other to see it, too many zeroes for my eyes:

$0.000016667 on-demand
vs:
$0.000009722 reserved concurrency

Alright, so that's 58% of the normal cost, so you can draw a graph and find some crossover point of duration where that gets cheaper - exercise left to the reader - but that fights against the Lambda already being kept hot by usage. I can't process intuitively whether this is a good deal or not.

It's awkward - Lambdas spinning a microVM in 1-2s for cold starts (NodeJS, maybe dotnet, I don't use it but I understand other runtimes can stretch well past this) is pretty impressive, but in a chain of calls multiplied up it adds up fast.

Using this with autoscaling to try to get ahead of predictable usage patterns, looks potentially useful, I think.

With lots of separate Lambdas, using this to avoid cold starts on low-usage functions, I don't know, that $10 each adds up fast.
What about Axis Cameras? (https://www.axis.com/en-us/products/network-cameras) expensive but run some POE cable and you can own everything.
Layer Name and Layer Arn (the Layer Version Arn without a version suffix) are interchangeable in APIs that require a Layer Name parameter. I understand that you're trying to extract the "LayerName" field returned in the API response in ListLayers, but you can do it more concisely.

If you just need the Layer Arn to call other APIs:

a) You could eliminate steps 1 and 6, and use the Layer Arn value from 5 to call APIs that require a layer name.

b) Alternatively, you could yourself chop off the version number from the Layer Version Arn string(s) in step 4, and skip the GetLayerVersionByArn call in step 5 all together.

If you explicitly require the name, not the Layer Arn:

c) You could parse it right out of the Layer Version Arn yourself.

When it comes to doing your own string manipulation for (b) or (c), there are many ways to skin a cat ... but you could use regex (the pattern is in the API documentation), or split on colons and index the second to last element in the array.

Is it useful to return the Layer Name in more APIs? What is your use-case?
Your post shows the tension between science/medicine and the people who suffer from chronic problems. I know someone who had/thought she had Lyme’s. She ran from doctor to doctor, got dozens of different drugs and was often treated with disbelief. This while a person who had been pretty active before had repeated periods when she barely could leave her home or do anything else. It’s no wonder that these people try everything possible if regular doctors can’t help. What else are they supposed to do? When I taught yoga I met people with fibromyalgia or chronic fatigue. They all had stories of doctors questioning the validity of their symptoms. It seems if a problem isn’t documented in textbooks they have a tendency to deny its existence.
Would your point still stand, if the baseline of being able to bench press 160lb was just a starting requirement, with a possibility that requirements can change at any point and you might need people who can be trained to bench press 260lb instead?

Also, if you are buying a car with the goal of being able to accelerate from 0-60mph in under 4 seconds, and you have to choose between two cars priced exactly the same, but one can do it in 3.9 seconds and another one in 3.1 seconds, why would you pick the 3.9 car over the 3.1 one, even though the 3.9 one meets your requirements of under 4 seconds just as well (assuming all the other relevant characteristics are equivalent or about the same)?
I might be wrong about plenty; which is why I asked for some more information (which I’ll note you did not provide).

I’ll also note that you are yourself not accurate in stating that “ICE doesn’t conduct border operations” - in fact, ice.gov/about says specifically:

> The ERO directorate upholds U.S. immigration law at, within, and beyond our borders.

Thus it is not accurate to say that “ICE doesn’t conduct border operations” - they themselves say they do.

I think what you’re trying to do is set up then knock down a straw man: I never said anything about patrolling borders, and I’m well aware that CBP is the agency literally patrolling the border. You picked a specific interpretation of a broad statement in a blatant attempt to make me look dumb, which goes against what HN ostensibly stands for.
I actually said the opposite. Any tool of sufficient power is going to more abused than a tool with less power. You can do more damage with a backhoe than a shovel.

But the fact that you can do more damage with a backhoe than a shovel doesn't mean there is anything wrong with a backhoe or anything good about shovel. Same is true of OOP.
Winning a benchmark isn’t winning. Winning sales is winning. Last I heard most sales still go to intel.

But exciting times if this flips, competition is good for all
Yeah I'm saying that doesn't make any sense and is untrue.

So agree to disagree then.
I think a turn-key solution for people living in not US/EU will still help the general health of the archive.
Typescript: Putting the Java™ in Javascript
I read this in Gilfoyle's voice.
None of my OpenBSD machines (on which I do things) are remote-holed by this.
> There are 100 ways to steal credentials if you manage to convince the user that it’s safe to start typing in the page, since you can serve malicious js that way.

That's true, but it's completely independent of SXG. There's no way to trick SXG into showing a URL that it's not signed for. You would have to steal the private keys.

> At best it is able to say ‘the content is signed with x’s key’

Remember that x's key is cryptographically associated with their domain - that's how web certs work - so the browser can also say that "this content is signed with domain x's key". That's exactly what happens with https today, but with https, the chain of attribution implied by the signature stops at the webserver, since it holds the private keys for signing the content.

SXG allows the chain of attribution to be completely independent of the transport mechanism, https or otherwise. Of course, you should still use https to encrypt during data transmission over the internet, but that's orthogonal to content signing.

This is also directly analogous to how app stores distribute cryptographically signed apps. For example, it allows an iPhone to open a local native iOS app in response to a URL click in web content [1]: The app and the URL are both cryptographically signed by the same entity, so iOS can conclude that they are from the same origin, and allow the app to handle the URL.

1. https://developer.apple.com/library/archive/documentation/Us...
tying it to a domain name (which is the typical use of the URL) breaks the web though. i could understand if the key is used to show that the origin is a twitter account handle or something, but breaking the semantics of the domain by signing the content doesn't make any functional sense. Other than putting lipstick on a pig (AMP) of course
Believe it or not our only TV set is from 1985 (Blaupunkt Scout T8 [1]) and we use it daily :-) We didn't have a TV by choice for the last several years and just used laptop when we wanted to watch a movie, but as I got more and more interested in stuff from the 80s, I started looking for an old TV as a fun project to try connect HDMI to it, play NES and so on. Long story short (because I could talk a lot about it) the TV somehow stayed with us for 2 years now and we don't plan to get rid of it anytime soon. It has a beautiful form factor, the image and sound quality is surprisingly good and we simply don't feel the need to change it for a modern one.

[1] http://www.hifi-archiv.info/Blaupunkt/1984-85/17.jpg
Tame foxes taught us about animal domestication. But did we get the story wrong?
Four Layer Architecture
No, turning it off globally does not work as expected. the iphone will continue to contact *.ls.apple.com
> Would German environmental NGOs have blown the whistle on something like this? Maybe?

I think yes, it's just that they expected the regulatory system to work. Companies intentionally defeating emissions tests, unthinkable! ... just as unthinkable as the FAA rubberstamping whatever Boeing puts in front of them :(
Maths, as I understand it, is merely an a priori deduction from an initial set of assumed-true axioms. In some ways, you can do whatever the heck you like, as long as it's consistent with your axioms and whatever laws govern your deductive process.
cant overstate the importance of accounting knowledge for founders. its how you will communicate results to investors, and how you will effectively plan for the future.

if you have never managed your own P&L, i would definitely recommend taking some Khan Academy courses or something. understanding depreciation, cash flow, AP & AR are all absolutely necessary when starting a business.
It was news worthy and neither the article nor anything I've seen described this as a common or repeated occurrence, the article is pretty poor in quality but I think it's reasonable to read it as implying that this was a rather outstanding event. It is somewhat hard to judge but it seems a reasonable reading.
Facial Recognition, Why Worried?
What? Australian consumer law has a limitation on 2 years or reasonable lifetime. Games don’t last forever and get obsoleted by newer operating systems.

Sure I can run wine/VMware but I can also keep my 100 year old washing machine running with regular repairs which isn’t fixing the issue of deprecation or end of life.
This is very nice, and I've shared it with some colleagues.

I've dealt with distributed meetings my whole career, and it's ranged from "wall-pounding waste of time" to just "meh". My current job has a pretty great system, but the weak spot remains WebEx, with people not muting by default or forgetting that they're on mute.

This article is a good list for any host/moderator to enforce.
Yes, sure. In my opinion, these are the main features:

1. You can have all the benefits of a static-strongly typed language such as C#. Which implies: better tooling, less prompt to type errors, and more suitable for enterprise software.

2. You get the full power of .NET in the browser

And, if you are already using ASP.NET for your backend:

3. You can reuse a lot of code. This means almost no class duplication (like when you work with TypeScript).

Extra:

4. Blazor is pretty similar to Angular +2, so the learning curve is smooth if you either have experience with Angular or C#.
It's a plausible mechanism but a bogus study. With most of their confidence intervals including hazard ratios of 1.0 (or very close to it), they need to rule out even slight correlations like smoking and (low) income. Recall bias of the survey participants is another major factor in cancer cases. Overall this reads like they collected data of a bunch of chemical exposures setting their p to < 0.05 and found this one that they could publish on.
If Intel makes it out of the current soup with its dominance intact it will make for an interesting case study. Think they are facing the perfect storm on multiple fronts.

a. The 10nm process fiasco

b. Missing the chiplet concept

c. ISA fragmentation - AVX512 which was supposed to be the next big thing was server CPU side only till recently and downclocks the entire chip when used making it extremely hard to reason about whether it makes sense to use it for mixed workloads.

d. With a move to more distributed programming models the network is often in the critical path now, making cpu performance less relevant for many workloads

e. ARM eating their lunch in mobile

f. Nvidia eating their lunch with GPGPU

g. Big players are increasingly building accelerators for critical workloads that offer better power / performance

h. Strong execution from AMD for the first time in over a decade

i. GUIs moving to browsers and a lot of compute moving to runtime based languages like Python/JS means that any new ISA features are initially hard to utilize in killer apps on the client side. So if Intel ships a killer new set of instructions there is a significant lag between it doing something useful for the user.
There ought to be a VC shop named Hubris & Humble Pie LLP
We also set up pgbouncer, but after testing we realized that running it in a container added extra latency so went with ec2 instances behind ASG.

For load blanacing we used ELBv1, we also tried to use NLB, but 350 second timeout, and broken behavior when after timeout it just silently closes the connections was a no-no. ELBv1 doesn't silently close connections, and idle timeout can be set to 1h. After that we configured pgbouncer to close idle connections after 55 minutes. ELBv1 also doesn't have the timing issues with health checks.

IMO NLB is maybe performant, but that's the only good thing about it, in every other category it is crap and for this use case ELBv1 isn't a bottleneck.

If you will plan to revise your setup, be aware that pgbouncer is single threaded so throwing multicore machines at it won't do much good. If CPU ends up being a bottleneck it is better to use a large single core instance and then adding more instances. The only problem with that is that as you're adding more instances you're increasing number of connections to the database, but you could have additional process that could monitor ASG and set the number of instances and dynamically adjust number of server-side connections (doesn't require restarting pgbouncer).

BTW: Since version 1.12.0 you can also run multiple pgbouncer instances listening on the same port so that can help make a better use of extra cores if you chose multicore instances.
From the article:

https://www.sciencedirect.com/science/article/pii/S001393511...
Running everything in containers seems to make sense.
Hardware tokens usually have three slots for keys. That's enough for a full set of signing, encryption and authentication keys. It is not wise to keep the primary certification key there, though. Hardware tokens can fail or be lost or stolen. Subkeys are expendable but the primary key is important enough for special treatment.

The best way to keep it offline is to make a paper backup with the paperkey tool and store it in a safe:

http://www.jabberwocky.com/software/paperkey/

In addition to this, it's a good idea to QR encode the key. QR codes are quickly and easily restored with a laptop camera and they support even 4096 bit RSA keys.

The zbarcam program can be used for this purpose but current versions have binary data decoding problems and aren't easy to interface with. I sent some patches to that fix these problems but they haven't been reviewed yet:

https://github.com/mchehab/zbar/pull/64

https://github.com/mchehab/zbar/pull/60
Probably historic compatibility. If making a breaking change this might be a good time to implement a design benefiting from decades of real world experiences.
Which version of Smash was that?
The only piece of software from DOS/Windows I miss on Linux is an analog to Far Manager - THE descendant of Norton Commander app. No other 2 panel file managers come close, and mc just doesn't cut it. All those hotkeys are ingrained in my memory despite not using the application for more than 15 years.
> I have argued in the past the Intel "lost" the smartphone CPU war because Apple decided not to wait for them to come up with some high margin processor compromise and instead to re-invest profits into the development of bespoke processors that gave their products an edge over their rivals. Others like Samsung followed suit with own processors for Android.

Kind of a weird way to phrase it given that iPhone 1 through 3GS ran on Samsung SoCs. It wasn't until the iPhone 4 that Apple used their own SoCs. Not sure how Samsung could be following suit in that case.

Edit: also, Apple was never going to wait around for Intel. Apple is actually one of the early investors in ARM, back in the early ninties, had used ARM.in the whole iPod line (as well as the ill fated Newton), and iPhones lined up with ARMs in mobile TDPs starting to have full MMUs.
I imagine modern technologies like gsync or freesync have solved that problem for modern games, but there's probably no way to weave that into the pipeline of old arcade hardware.
I interviewed at Carbonite back in 2014ish. I walked out of the interview absolutely perplexed what they do and where the leadership was. Before I even got the rejection email I started the process to give me the option to short stocks because I was sure CARB was going to go out of business in short order based on what I saw.

I didn't end up following through but the stock has been solid and increased a fair amount and here they are selling for a billion dollars. So... goes to show what I know.
If someone built an emacs plu-(pardon me a moment, * googles furiously * , * laughs * )

Okay, someone built an emacs plugin for slack[1], it doesn't look like a very usable version of slack, but I'm pretty sure it'd be quite possible to fix this up a bit, prettify the UI, and end up with a much more performant version.

1. https://github.com/yuya373/emacs-slack
The fact that this civil suit wasn't settled out of court before trial is absurd. The only reasonable explanation is that Musk views the trial as pure entertainment. He loves the attention he gets from the press and the opportunity it gives him to thumb his nose at the legal system.