skysight-inc/HackerNews huggingface dataset:
Containerization and cloud services are applications of CS, not CS. They are to CS today what typesetters were to CS of the 1970s - pretty boring to consumers, but behind the scenes created an economy where things like Unix weren't just toys or research but projects backed by capital investment.

If you take a step back and look at the technological developments that the products you use every day are built upon, there is a lot of exciting things going on.

Just off the top of my head, immutable data structures and functional paradigms are becoming increasingly useful to real products, and performant implementation of them is an exciting area of development.

There's also a lot of exciting development in programming languages themselves, and with the (hopeful) propagation of things like the Language Server Protocol developing and using new languages is getting easier, distributing them is easier, and people are more receptive to using them. There's a new language craze going on right now and it's fun to be a part of.
I agree with everything you said, but I must point out that Lean comes from Toyota. While most people know about the production system, which is indeed applied to factories, Toyota applies this to the product development too.
Product development is much closer to what software development is.
Unfortunately there is a lot of misinformation on the topic, but there is a very good book, called "Toyota Product Development System", which describes how Lean is applied there. There is an insane amount of valuable information in there, every software company should be at least aware of those engineering practices.
A Collection of Coding Horrors
We are paying for our own tyranny. It's time to stop.
I wonder how difficult it would be to make a programmatic BAT to BASH converter that only had to handle these scripts. It would probably get more traction that way.
Digital Restoration and Typesetter Forensics
UK has been quietly and steadily adding wind over a longer time, and modernising the grid without so much as a hiccough, reaching around 35% (ignoring biomass). The grid is still underfunded and lacking in some respects though. The Nordics have progressed similarly, but further, though I think Denmark had a couple of missteps. Sweden is over half renewables by now, Finland not far behind, Norway and Iceland (OK, they have their geothermal advantage) up near 70%.

All over the last 15 or 20 years.

Sure, I'd like everyone to go that fast, or faster, but trying for the speed of Australia's solar rollout seems to be asking for trouble. Don't know enough to say if there was anything unavoidable, or unique to Australia in their problems...
How are the relationships determined? Is do those just come directly from the Spotify API? Is there some threshold user here to determine which ones show?

I ask because poking around I noticed what I thought were some strange absences, such as one band not showing a relationship to other bands that share members.
No, I built it for this project.

The canvas diagram was plain JS and for logos we used SVGs from company official PowerPoint icon pack to make it look consistent.

The backend was Node.js that ran Ansible playbooks that provisioned things via Proxmox API and then configured the VMs as needed.
It's not trivial if you're forced to conform to an interface which has a narrower "throws" clause than what you need. It's an issue of contravariance vs. covariance. Implementations of an interface/superclass are typically more concrete, and so they need to be able to throw more more types of exceptions... but throws clauses work in the opposite way: You're only allowed to narrow them, not expand them in subclasses/implementations-of-interfaces.

It's simply broken.

EDIT: Just to add: What happens in practice is that either

- you just give up and declare "throws Exception" on the interface (in which case: why bother? You might as well just remove checked exceptions at that point), or

- you wrap checked exceptions in RuntimeException, but now you have a new problem: Consider a method that calls methods f and g where f declares a "throws Foo", but g doesn't declare any exceptions[0], but may throw Foo's at runtime by wrapping. Now you're totally screwed, because a "catch Foo" will not match exceptions from g. The Guava people have written a whole Throwables utility class to help with this, but using that consistently requires discipline that no team can handle, and it only handles a small subset of the problem.

This is just a small sample of the problems with checked exceptions in Java.

[0] g may be used in contexts where it's not "allowed" to declare checked exceptions in a throws clause, e.g. lambdas or just higher-order functions in general.
I use adblocking on Safari(mobile and desktop), so the web experience for me is very good. On the iPhone App, the ads are annoying but I do understand that this is how the content is paid for, so I am O.K. with it.

The main difference is that with many websites things jump around when on Youtube the design is clearly defined. There's no cognitive load in trying to find the content between those "subscribe" popups and menus etc.

They clearly designed their experience with the understanding that you are there to watch a video.

Actually, YouTube's website is so good that the first thing that appears on the page is the video and it starts playing when the rest of the page(like, subscribe buttons suggested videos etc.) is still loading and not rendered.

Most websites on the other hand act as if the content was the bite to lure you there and try to make you subscribe/create an account/ allow notifications/show you ads and it's their failure if you actually happen to consume the content that was promised to you from the link you clicked.

Completely different experiences.
"AWS, the biggest of the existing cloud providers released an Arm-based offering in 2018 and now in 2019 catapults that offering to a world-class spot. With results comparable to x86-based instances and AWS’s sure ability to offer a lower price due to well known attributes of the Arm-based servers like power efficiency, we consider the new M6g instances to be a game changer in a red-hot market ripe for change."

I'm not sure how that conclusion follows from the numbers presented? Yes, the new ARM processor has become much faster than the older one, but clearly looses against x86 in cpu-heavy benchmarks.

Might be a good option for I/O limited workloads, as the NVMe storage is newer and therefore faster.
Are you a lawyer? This sounds like clever advice, but inexperienced cleverness can be worse than doing nothing in highly complicated and specialized domains like the law.

For example, it could be interpreted as stalking judge to intimidate them into ruling for you (dumb, but morons have tried this) and the court system responds with overwhelming force to anything smelling of possibly threatening a judge.

This is just a random person on the internet's speculation. It'd be useful to know if your comment is similarly just armchair speculation or if you either have expertise or can cite an example of this working out well.
Definitely cool... although AWS is really entrenched and Azure's getting there too for a lot of orgs. Especially historically MS oriented shops and those with some apps tethered to windows where others can be containerized.
Taking it a bit too literally. 10+ years is a lifetime in the tech and gaming industry.
Almost every adblocker out there is free and open source for a reason.
Of course there's the old adage of "Vote with your wallet" by buying a privacy-respecting phone, you're incentivizing manufacturers to make privacy-respecting phones. And $2000 is quite a vote
Imagine if Cox or Comcast came up with AMP. Same technology, same idea.

If websites use the Comcast AMP framework, Comcast will cache their sites and make them faster for users. See, it's about the users! Because the Comcast AMP framework is open, and has nothing to do with the business interests of Comcast. Comcast will give a bit to open source and have a few conferences per year to make sure developers know that it's not all about the company.

I believe the fight against AMP will not be won by users or individual action -- it will be won with legislation. What are users going to do? Plain HTML pages are on the 10,000th page, below a hundred thousand AMP tracker loaded piles of shit. It is a de-facto content restriction.

Even if I use an alternate search engine -- it's results are polluted by those of Google, because 90% of search is Google. We do not have a choice.

I'm sure a Google lawyer will successfully argue that I can recieve IP addresses in the mail via U.S. post for any odd, esoteric plain text HTML pages I'd like to visit, though.
It's a single course. I think no one, not even the author, expect a single course to cover enough ground to ensure that students can write secure applications moving forward. For instance, the author has a "formal verification" category on their blog: http://www.pl-enthusiast.net/category/formal-verification/

But they do think (like Daniel Bernstein and Edsger Dijkstra), that the usual "pentest & patch" does not work. http://www.pl-enthusiast.net/2015/09/30/penetrate-and-patch-...
I love when other people get to define happiness for me.
Effort to stave off Detroit foreclosures leaves many deeper in debt
It seems funny that he's trying to argue about the word "pedo" when he double/tripled down on his accusations by hiring investigators.

Elon Musk is a brilliant, broken and fragile man. While I hold a great respect his professional accomplishments, I have little love for the man behind them. His success in the technical world is harshly contrasted with his failings in the humane one.

He might as well start making an arc reactor and a metal suit.
There are many countries where I would expect a conscientious citizen to make the public aware of such a compromise. The United States is among them; Lavabit's actions provide precedent.
> Isn’t figuring out whether warning was happening pretty straightforward?

Not exactly. There are two ways that it can be ambiguous:

1. We don't measure the entire earth to measure its temperature, and combining the sensor readings from various sources to get a calibrated total energy content can be difficult.

2. It is difficult to take a time series, and with a short history, decide whether something is a significant deviation from the trend or just random variation. Humans instinctively underestimate how often a random sequence of coin flips will have consecutive strings of heads of a given length, and the same tendency causes us to see a "pause" as a deviation from the trend, when it's really just random variation causing a bunch of consecutive heads.
Crawlers are smart enough to measure various types of slowness; images/video are non-blocking so although they're bandwidth-heavy, adding a bunch to your site is probably less "damaging" than a slow initial server response or first paint.

> I don't want to be directed to to a webpage about an artist (for example) that has the crappiest, smallest and fastest loading images, I want the one with the best images.

There are several technologies available for progressively-enhanced images, and Chrome is experimenting with lazy-loading all images[1]. This argument does not exist in practice.

[1] https://web.dev/native-lazy-loading/
Who is worthy of love?
We thought about this pattern for a while and ultimately decided we didn't want app compute to directly provision supporting infrastructure.

You end up in this weird place where your compute nodes can, at any time, assume super powerful roles that can change nacls, security groups, completely destroy database clusters or what have you.

It feels like running your app as root and database admin, but more. I guess if you completely trust your kube control plane?

Like everything I'm sure it has a use somewhere.
Because nobody has a good idea where the brain (hardware) stops and where "the mind" (software) starts [1]. And nobody has any idea what "information" is beyond the Mathematical equation which define it.

They are just linguistic/conceptual distinctions - useful models, but that is all they are - models. The map is not the territory [2]

[1] https://en.wikipedia.org/wiki/Mind%E2%80%93body_dualism

[2] https://en.wikipedia.org/wiki/Map%E2%80%93territory_relation
I seriously doubt it. It's most likely to maximize margins from their first few low volume supply runs as they begin to scale up.
There are certain things about military command structures that don't apply outside the military, sure.

But people are people, communication is communication and at the end of the day, regardless of what else they are, armed forces are large complicated organizations. It would be foolish to assume that because your organization(s) have different goals and mandates, they have nothing to learn about communication, leadership, training, etc. from decades (at minimum) of well documented armed forces experience.
That's if you use your own _server_. You don't have to point your DNS records to a server you own.
Why would I engage in an argument premised on how unreasonable the argument is? You said: "you couldn't have meant input validation is useless". You're right.
It is, but you'd need to verify the difference somehow, with fluorescent markers for example. But they appear to have only counted the surviving cells.
Those who love, wholly.
The VPN is dying, long live zero trust
fwiw "enmnews" surfaced on news.google today (not logged in).

I'm wondering who owns them. It's speculation but I wonder if it is part of the Macedonian InfOps orchestrated by ex-FoxNews exec Ken LaCorte:

"A Former Fox News Executive Divides Americans Using Russian Tactics": https://www.nytimes.com/2019/11/21/technology/LaCorte-editio...

I bet this site will eventually pivot from copy-pasting to putting their own spin on things or by amplifying radical messages from other websites part of the collective.
Ah, that makes sense. I probably shouldnt've even raised that point.
Can you meaningfully benchmark stuff in the cloud? It seems to make any claims on price/performance you'd want to use two local servers dedicated to the benchmark, with as near identical hardware as possible (apart from the CPUs of course), and you'd want to know the full cost of both servers.
Creating a new name database that people can choose to use is not a "MITM attack".
And I'm critiquing the premises of the single course. What's your point?

I've talked to more than one university professor in the last 2 years about what a first and second course in software security should look like, and if there's a theme to my feedback, it's "not like this; this is what people thought it might look like in 1998".
Ruby Literals You May Not Know – Citizen428.net
So the very person trying to drain this swamp, is, to you, the giant threat? That's unfortunate. Anyways, it's going to take the people rising up to stop the corruption. If you value freedom over comfort you will have to act.

As far as pardoning that Navy SEAL goes, I think he got railroaded by a system that ties people's hands. His act saved lives in a war zone but what they were angry about was that he acted outside of his authority, which to the military is the biggest crime there. It is duplicitous to on the one hand require men to do terrible things and then on the other hand prosecute them for doing those same terrible things.
And has been. Look at how well that worked for mobile web.
Your personal experiences sound very interesting and I don't mean to detract at all from the effect they've had on you and many other people. However, I was a neuro Phd student and did many 'default mode network' studies using fMRI and it is -very- early to be making claims about the nature and/or purpose of this network, or how it's perturbed by any experience: psychedelic or not. The level of temporal and spatial resolution of data gathering of this and other brain networks is entirely too coarse to make legitimate inferences. At this point in the literature it is a very good story with a few compelling examples but not nearly complete enough to make real claims.
Shingeki No Kyojin
Yep, same here -- switched to DDG a couple years ago and back to FF from Chrome [except when required for the job] a few months ago. Results excellent. I understand that a lotta folks are dissatisfied with DDG's search performance, but it's been plum dandy for me. In particular, since most of what I'm searching is development-related, my experience has been that DDG results are usually _better_ that goog, i.e., I find that sites with reasonable content and SO usually rank above ad-sodden or rubbish-quality-SEO-trap site.
Buffer overflows are best mitigated at the language level. Other vulnerabilities aren't.
Hey,
I really like your contribution with such a great collective approach, I loved reading them, l would really appreciate it if you add me in your collection to lend me a thumbs up also and keep up the good work though.
besides, I'll be reading them whether it would be yes or no :)
https://studioelitechicago.com/

Thank you
The Siege of Carrie Lam
I tried ARM servers in Scaleway and honestly, unless your profile is sort of a sysadmin or you're motivated, it's just dealing with some issues and less power overall.

Also, AFAIR they were around the same price of X86 instances.

But then again, I have almost no sysadmin skills, so maybe it was my lack of knowledge.
Ask HN: How do you cultivate positive memories?
I'm not that kind of person who recalls past events spontaneously or on a regular basis. Actually I forget quite a lot and have in general a very bad notion what occured when in my life.

I recently finished reading the book "The Art of Making Memories"[0] which underlines how positive memories contribute to an overall sense of wellbeing and how they become quite important at a later stage in life. I really like the practicality of the tips given in the book and can really recommend it.

I myself keep some kind of audio gratitude journal. Usually I record my voice reciting a circumstance I'm grateful for while sometimes capturing some sounds in the background (for instance waves at a beach or birds in a park or people playing music in the background). Some years ago I made a simple Bash script on my Raspberry Pi which would play a random recording in the morning in order to wake me up. I really love that sensation of recalling a bright memory while lying in the bed, still on the verge between the dream and conscious state of mind.

What is your strategy to cultivate (good) memories? I'm not talking about systems retaining technical knowledge like Anki or org-mode which we already discussed quite a lot here.

[0] https://www.penguin.co.uk/books/311273/the-art-of-making-memories/9780241376058.html
why shouldn't, in this case, security be binary? either there is a threat or there isn't. if someone in china is adding additional monitoring malware to librem's phones then isn't the whole privacy/security thing out the window?

either they believe in their chinese supply chain or they don't. and it's not like their usa manufacturing is done in-house by librem so they still don't have 'control over the entire assembly process" because they depend on a 3rd party to make their boards for them.
This is very strange. I’m viewing the article on Chrome iOS and after a few seconds it keeps redirecting me to a spam site. I don’t ever recall seeing such aggressive browser redirects on iPhone and certainly never from a mainstream site. Am I the only one experiencing this?
Ask HN: How would you solve the spam problem at Gmail?
Imagine for a moment that you are on the GMail team and you need to solve the problem of deciding whether an email intended for one of your customers (@gmail.com user) is going to go to the Inbox or Spam folder.

The world is full of actors - both good and bad - who are hungry to get their message into Inbox.

So how would you ensure only the good actors land in the Inbox?
Let me answer that question with another question.
Should we demand that Github ban the account of everyone who is not a vegan?
There are a lot of people who disagree with the murder and ingestion of innocent animal embryos.
Is it time to demand that Github stop facilitating that lifestyle?
Mandy Moore announces first tour in more than a decade
Chaos at the Top of the World
Ya - the NSA calls this "LINK MASKING". Makes a communication channel look busy 100% of the time at at predefined bit rate. Pretty much worthless to traffic analysis, at the cost of burning extra bits on the wire when not actually sending traffic. Mostly only used in Military applications, and specifically where you think an advanced adversary is going to do things like traffic analysis, etc.
Assuming you're in a city made for humans:

You pass by the bakery. You're not hungry… but it does look delicious. You go back, look through the windows again -- and decide you are hungry!

If you're in a car, you don't stroll around. You drive where you want to drive. Even discovering new things is hard since the people behind demand you don't slow down.

(this is loaded with personal experience and preference, I can perfectly understand this doesn't match yours.)
This one is very annoying and has been there for 8+ years now: https://stackoverflow.com/questions/29986977/firefox-ignores...
Under the Weather – Believer Magazine
Matt Stoller wrote a really interesting book giving a history of monopoly power in America: https://www.amazon.com/Goliath-Monopolies-Secretly-Took-Worl...

On my winter reading list :)
Would be cool to see an addon for NAS services in Proxmox... I'm setting up a home server when I get the chance and just want it to run a VM, a handful of docker containers and provide NAS storage at home. In the end, will probably add Docker support, run the NAS in a container or vm and leave it at that.
That depends on how you look at it. You could also call it a great success: https://en.wikipedia.org/wiki/Life_expectancy#/media/File:Li...
The transportation mode is critical for a commute. The time spent commuting can be mitigated somewhat if you are active in the process.

As an example, I live relatively close to my office in the suburbs, and most days I walk ~50 minutes each way for my commute. I could drive it in 10-15, but my family has reduced from 2 to 1 cars this way (owning a car is expensive and a massive headache). I also spend far less time at the gym because I walk many miles per day just commuting, plus I feel fresher when I get to work. I can definitely say I am much more satisfied with this arrangement than if I was driving for the same duration. The major negative is less time at home with the family, which I admit is a challenge but one I've been willing to put up with for the other advantages.
Trains benefit the poor a lot more than a road ever could. Trains enable cheaper mobility, opening up way more job opportunities and access to services in the process.

The article alludes to the enterprise being state/private partnership anyway, the federal government doesn't need to pay for it. Many high speed rail systems are public/private partnerships.

The rail network in the article is proposed at 50billion. There are individuals worth more than the US. The US spent 55 billion developing a single fighter jet platform, and that was just the R&D. If the US needs to cut from anywhere, it's definitely not infrastructure initiatives that should be cut. Infrastructure creates jobs, and increases economic opportunities for everyone.
IP geolocation is imprecise. You can grant permission to use more accurate HTML5 geolocation, which will even use GPS if available, or you can manually specify an address.
I'm not so sure: they wrote "extended" which makes me think they're thinking about copyright or something?