skysight-inc/HackerNews huggingface dataset:
Fun to read. Thanks for sharing!

With the risk of sounding a bit arrogant, am I the only one who immediately thought about a timeout issue on the first description of the problem?

As a fan of online gaming I'm painfully aware that ping (and distance to server) matter. Especially when I was in Japan and tried to play with my friends in Germany, the fact that packets were routed over the US to Europe resulting in ~250ms pings was a constant annoyance.
I don’t think they’ve published anything specifically on S3’s architecture (someone please correct me if I’m wrong, I last looked into this a long time ago), but

1. they came out with S3 soon after coming out with their Dynamo paper (before releasing DynamoDB, even); and

2. there’s a good constructive proof, as a studyable FOSS system, for how to build object storage on top of a Dynamo architecture, in the form of Riak CS (object storage) which is built atop Riak KV (a Dynamo impl.) Riak CS seems to make pretty much the same set of guarantees (in terms of time/space complexity of operations, possible durability numbers per scaled number of copies, etc.) that S3 does, so it’s a fair guess that they’re similarly-architected systems.
This is most likely due to their acquisition of AppSheet which will likely become the "replacement"

https://blog.appsheet.com/appsheet-acquired-by-google-cloud
I'm beginning to think that a majority of high-altitude balloon experiments are facilitated by amateur radio APRS transmitters. Balloon launches are also huge PR events and great for students to get involved into science (and ham radio!).

You can see almost every balloons with a ham radio payload currently in the air, in real time at https://tracker.habhub.org/
No, this won't cause a fork. To be specific, little forks happen all the time as different clients get information about new blocks at different times. So blockchains are very resilient to that kind of thing. Clients only continue from the longest legit chain they have seen, so whichever side of the fork has more hashpower on it will win in a way that's pretty transparent. So the attacker did cause a fork, so that they could spend coins once on each side, but all clients other than the attackers' would agree on which side was legitimate. So once the attack is over, it settles down immediately.
Added both of them, thanks again!
The market cap does not fit into the equation on how an attack works ; it just gives you idea on how big/small is this blockchain

Blockchain don't have a centralized entity to "validate" and secure each transaction, so had to come with a solution to securely do so in a decentralized manner... Most blockchain use Proof of Work to do so : to participate on the validation process you have to "pay", by working on some mathematical problem... If you control more than 50% of the working power you can "control" the validation process...

In the case of DeepOnion, it costs $3 to buy enough computer power to control the validation process for one hour(by controlling more than 50% of the working power). You can use it to rewrite some transaction, and spend 2 times the same crypto.
The issue with saying how much a 51% attack "costs" is that ALL cryptocurrencies (and, really, ANY currency) is just based on the trust that the currency has "value", meaning that it would be accepted as payment for real goods and services.

A 51% attack on bitcoin would be easily noticeable. If a 51% attack was really "viable", it means that essentially bitcoin would have $0 value, because all of its value is based on the trust that the blockchain is real and verified. The community at large would essentially just ignore the rogue chain, or rather probably boost other existing resources to back it out.
¯\_(ツ)_/¯

Raidz2+spares, compression, snapshots and send/receive are very useful. And zil and cache are easier than lvmcache..
> I have not been affected but I heard some teams where a QT rep was interested to understand how they were using QT. Skip fast forward 2 years later, they now have to pay QT licenses while they where using the open source version before.

Do you mean they weren't compliant with the open source license, or that the rep sold the commercial support?
> * For data, it should be safe as long as a scrub is run immediately after any unclean shutdown.*

That’s unfortunate. Does the scrub run automatically in those situations? Consumer hardware will be the most prone to intermittent power failure.
Video: Haetal, the Feline Bodhisattva
The advantages of using an API like these on JAM it would be that very sophisticated application could be written completely client side. Which is quite interesting IMHO.

What is your project?
> No data was lost though, true?

What about any data that would have accumulated in those 5 days? This was storage for their IAAS and PAAS products, so anyone using those lost access for 5 days?
I agree, it feels way too cheap to be true.
Not specific to Elixir I think.

There are not a lot of people proficient (or even having some experience) in functional programming, and there are not a lot of companies using functional programming neither (1/100? 1/1000?). The chicken and egg problem.
This is the same logic motivating me to (infrequently) buy Windows computers from the Microsoft store. They don't benefit from a brand-new Windows PC that runs like molasses so they don't have any bloatware* or other performance slowing software like a Dell PC or worse, your typical Best buy computer. The prices are on-par despite not getting the kickbacks where most manufacturers generate the majority of their profit.

* except for that which is or comes with Windows. Unfortunately this has grown substantially - Windows 7 seems like something of a high-water mark for performance/polish/lean...
The good solution is to not use such a dumb technology to represent money.
The bit that matters:

> Due to the specific source code used for App Maker, you can’t directly migrate your apps to another platform. We recommend that you explore these options

There must be some kind of demand curve model whose independent variable is the ability to move to another service. A highly specialised PAAS might solve all your problems but be so unique that it's too risky to spend too much money on.
> Culture Fit

Totally agree. "Culture fit" is a synonym for "evaluator bias" in practice.
We'd need to blast a radio signal at about 100 million watts for it to hit the closest star with the same strength that Voyager is sending to us right now. Something like 4 light years away. If we consider how quickly signal strength decays, it's pretty easy to picture just how quiet we are. Our loudest tv stations are like 5% of that.

We think we're blasting a firehose off into space but we're spitting from a straw.
He removed a bad-faith message that needlessly brought up political issues. Good for him. One of the reasons I avoid many of these communities is the hateful, bad-faith political posturing. (One of my 4 grandparents was born in Gaza City, and expelled in 1929 [1], so I believe I have a right to an opinion on this.)

You wonder if there would have been a problem if he had said simply, free of political prodding, "I plan to give the same talk again in Ramallah. Is anyone interested in attending?"

[1] https://www.jewishvirtuallibrary.org/history-of-jewish-settl...

Edit: So Hacker News are downvoting an actual descendant of a Gazan refugee for having a polite opinion on this? That's insane.
Good idea :)

https://brokensandals.net (philosophy, book reviews, programming challenge walkthroughs & other tech posts, my music)
I'm not sure if there's a good guide, maybe I ought to try to write one. I would say the simple things to keep in mind are just to buy cameras that are ONVIF compliant, since this more or less guarantees that you will be able to use them with any "open standard" NVR you want. tbh the ONVIF spec itself is frustrating and not that much help, it's just that ONVIF compliance guarantees you that there will be RTSP streams available and that an NVR will more-or-less be able to configure automatically.

When it comes to NVRs, there's a million options and I couldn't produce reviews on all of them... but Blue Iris is probably the most popular commercial NVR and ZoneMinder and Shinobi the most popular open-source. I would describe ZoneMinder as hopelessly obsolete and Shinobi as unstable and hard to get running on other than their supported platforms, but Blue Iris is Windows only so everything has its problems.

The only "big" NVR solution I've worked with is Milestone, and I'd say it's very good and actually not that expensive, but it is pretty heavy to deploy (e.g. needs MS SQL Server) and you have to buy through a VAR which is kind of a huge hassle to go through for a license that is only around $100 (for the lowest-end package).

Also, if you run cheap no-brand Chinese made IP cameras like I do... the cameras are often pretty damn good very a very low price, but sometimes it's a real adventure figuring out how to configure them (e.g. firmware not completely translated to English, often shared between many models so half of the settings don't apply to your device) and I recommend blocking them off from the internet because some have management/cloud recording features that you can't disable and it's a little sketchy having them connect out to some white-box overseas cloud management solution all the time.

It's a best practice to put IP cameras on their own VLAN anyway and it's not really that expensive to get home equipment that can support this, e.g. Ubiquiti's routers/switches and/or the TP-Link "Easy Smart" switches (which are 'semi-managed' and handle VLANs and QoS for well below the cost of a managed switch). But the machine I run Blue Iris on right now just happens to be a weird x86 single-board machine with 2 GbE interfaces, so I have the cameras on a physically segmented network just because it was easy.
What a wonderful effort to prevent Qt popularity from growing.

Read the title and thought "perhaps this is time to explore more into Qt, beyond the classic Qt widgets...". Read the news - "no, this seems more like time to forget about Qt altogether and explore the alternatives".
> Mostly true.

Where lies the falsehood?
Also, why do american houses have so much damn pavement? i mean every single house i go to there's these massive driveways sometimes even wider than the garage itself! with even more pavement on the side for god knows what and behind that some more pavement along the side of the house.

and it's not even nice pavement, it's just concrete, like a big airport.

it's especially bad in CA because the lots are so small making the pavement look even bigger proportionaly.
Local Caching in Distributed Systems Can Be Effective
On the other hand, choosing to use GPL would prevent it from being integrated anywhere else. You'd also lose the patent protection granted by CDDL.
https://jolvera.dev
You can also set such an attribute on files and subvolumes in btrfs.

https://wiki.archlinux.org/index.php/Btrfs#Disabling_CoW
A presumably legal and profitable 51% attack can be to simply ignore other miners. Effectively someone with 45% hashing power get’s 45% of the block rewards + fees. However someone with 55% hash power can get 100% of the rewards plus fees a significant bonus. Alternatively, double spends let someone sell the same coins to multiple people though at legal risk for doing so while also theoretically collecting all block rewards.

However, the largest risk is from the software side. The physical owner of the hardware spends money, a hacker only spends their opportunity costs.
A lot of the complexity you see in that image is the trap. It holds water in it to prevent sewer/septic gasses from entering the home. Sinks also have them.
Feature Engineering with Random Forests (Part1)
CircleCI automates Continuous Delivery to multiple clouds
Confucian Social Media: An Oxymoron?
I am missing one important information - is it a web app or a native (desktop only?) application? What devices are supported?

> Desktop First. Take back control of your time and read only on your desktop, don't let news follow you on your phone.

I understand the reasoning, but I personally love having Feedly and Pocket (apps that I could consider replacing with your product) on my mobile phone. I can in fact go faster through my RSS feeds than on my computer.
I mean, you could certainly describe it as frivolous, but I like being able to shower or use the toilet without worrying about my wife doing the same thing.
How a Twitter fight over Bernie Sanders revealed a web of fake accounts (2018)
Thank you. I totally forgot about degaussed hulls...
> Due to the specific source code used for App Maker, you can’t directly migrate your apps to another platform. We recommend that you explore these options

I couldn't help but recall the song, "There she goes again" [1], when I saw this. Google propose partial alternatives, but I wonder how long until those are also shuttered. Is it even worth migrating to another Google product? if you have to do the work yourself, migrate to a different (or open source) vendor.

[1] https://www.youtube.com/watch?v=68MKLkNSMN4
Also, a lot of smaller (and mid-sized) companies end up with tons of instances and all kinds of complex server infrastructure because their code is mind-bogglingly inefficient and falls over without it. You either fix their mountain of broken shit or you throw "cloud" at it.

Relatedly, I've seen a lot of "we need to avoid & transition away from SQL database servers, they're slow and don't scale" in the wild when the problem is actually that the way SQL is being used is not simply not-advanced, but incompetent. Hundreds to thousands of queries per page load for no good reason, useless caching, little attention paid to indices, that kind of thing. Often Rails is involved. :-/
Intelligent Heuristics for the Game Isolation Using AI and Minimax
Approachable it certainly is, I'm not disputing that at all. The less functionally aligned a language is the more approachable it is to developers with little to no exposure to FP.

Personally, learning Elixir didn't really help me understand many fundamental FP concepts such as function composition & higher order functions, algebraic data types, referential transparency, functional purity, currying etc. It was only after spending time learning Elm and Haskell that many of these things dawned to me.

So I'd say if your aim is to really learn about the functional programming as a paradigm, there are better alternatives out there.
But if it costs only $3 to break the system, how come the market cap is so high?
When something important gets removed (which is happening at an alarmingly increasing pace across the board), it doesn't matter at all to me why the feature was removed. What matters to me is that the software has become less suitable for my use.
> I didn't get that impression from linked Qt blog post. I parsed the blog post to mean any/all binaries built. Eg if you build your own binaries from the open source license, you can't distribute them without a commercial or distribution license.

They can't add such limitations without modifying the open source license, which they aren't doing.
Could you explain what happens there?
My opinion is that they should provide 10 years of security and other similar updates for free.

They largely have been doing this, but their decision to keep the original Play 5 on sale for so long means that some people may have bought it within the last five years, despite being a really old device.
And it isn't like this problem wasn't foreseen ahead of time. I repeatedly tried to convince people that it was a real issue back seven or so years ago only to be met with (apparent[0]) scepticism that it's a real attack vector.

[0] Lots of millionaires came out of the cryptocurrency era. Sock puppets are cheap in comparison.
"14 day free trial available"
Yeah, no. No subscriptions. I'm done trusting companies to support services for at least 5 years.
Would be nice if they make it open source.
The calculations you cite and what the linked page are fundamentally different. The numbers you're citing are roughly what it would cost to buy hardware that would continuously be capable of mounting a 51% attack. The linked site is estimating how much it would cost to rent existing capacity to mount an hour-long 51% attack.
Not sure if this is good or bad news to MS PowerApps (less competition? Or bad business idea?). What does the HN crowd think?
I’ve found jira dysfunction often reflects the dysfunction of the underlying corporate structure.
Nintendo's corporate logo has been consistent and predates the company's pivot to video games. But each console they've released has had its own logo, many of which have incorporated the word "Nintendo". So while this is accurate from a corporate standpoint, Nintendo fans have seen the company rebranded in a variety of fonts over the years. To many gamers' sensibilities, the official logo is actually retro, and reminiscent of the NES era.
fsync is still a bit slow on BTRFS (on ZFS too, but to a smaller degree). For example, I just did a quick benchmark on Linux 5.3.0 - installing Emacs on fresh Ubuntu 18.04 chroot (dpkg calls fsync after every installed package).

ext4 - 33s,
ZFS - 50s,
btfrs - 74s

(test was ran on Vultr.com 2GB virtual machine, backing disk was allocated using "fallocate --length 10G" on ext4 filesystem, the results are very consistent)
The Future of Data Ownership
Was this around the same time Canonical had phone ambitions?

> non-techie computer users

MS made the same bet, but is this really your userbase?
My bad, I was thinking we talked about Europe (and not only the EU).
The National Cyber Security Alliance’s Data Privacy Day Honeypot
Why is washing dishes as you cook so much easier than washing them a week later when the crust is difficult to remember what your code meant when you wrote it?
There are medium sized teams at Google for each of MLIR and s4tf. There's a weekly open design meeting for each of them. Many different folks have presented their work at both meetings.
No, any reasonable user would start completely removing themselves from Google (really any corporate SaaS environment that they don't completely own the source code of). This seems like killing the goose that laid the golden egg, I'm sure on a balance sheet these products are loosing money, but that basically tells any client who wants to build a service that you aren't trustworthy in the long term.
The downside is it's quite flammable. There are a comparatively high number of these going up in construction, before mitigation measures such as sprinklers are in place, in particular.
Where Are the Hacking Simulators?
I made a joke once that the Godot open-source game engine had 'accidentally' become an amazing alternative to Qt (Godot's own editor is itself a Godot application and quite nice for a desktop UI).

Notwithstanding what Qt offers in the embedded space, I think it's interesting to ask the question more seriously. For rich, cross-platform desktop applications, is a game engine a better choice than Qt?
Show HN: Email Data Report – Beautiful, Easy-to-Grok MailChimp Reports
https://emaildatareport.com

PH description: "Email reporting never really caught a break. We're still exporting and spreadsheeting (and in some cases, SQLing) campaign data like it's 2010. Email Data Report helps you take control of your email data with beautiful, actionable Mailchimp reports."

Created this MVP after a few months on interviews with marketers. Use Mailchimp? Would love to know how the app works for you!

P.S. If you do login via Oauth, apologies for the terrible UI, creating a dashboard + datatable this week to replace this.
Until it's also shuttered in 18 months, sheesh.
Fun Fact: The N64 Logo has exactly 64 faces and 64 vertices
Even if cost is no object, every commercial electronic entry system I've ever seen has had at least one door with a bypass with a conventional key, in case the electronic entry system fails. And any electronic lock with a manual lock in parallel with it can never be more secure against attacks like lockpicking than the manual lock alone.

Of course, there are security benefits if you have a cleaner/dog walker/whatever and want to give them access you can revoke without the cost of changing your lock. Or if you're running a commercial installation like an office or AirBnB.

Still, I don't think electronic door locks will become mass-market until someone makes one so reliable it doesn't need a mechanical bypass key, which might be impossible.
For photos on your website, are you talking about resizing, presentation, or stripping metadata?

For resizing and metadata stripping, try the "sharp" npm package. It's fast, well documented, and based on libvips.

For pulling metadata, try the "exiftool-vendored" npm package (or just use exiftool directly as a CLI).

For presentation, know that srcset is now widely implemented. https://developer.mozilla.org/en-US/docs/Learn/HTML/Multimed...
This is one of those projects that I keep telling myself I’m going to do ‘next summer’. There’s just enough detail for a successful flight that you really have to start working on it months in advance, which is why I never seem to be able to get my balloon off the ground.

One thing I really would like to do is get a stabilized camera and experiment with some rigging that reduces payload rocking. A steerable parafoil recovery is also rolling around in the head. All of these ideas exacerbate the procrastination situation lol.
Starred.
Well done, I think this would be a good codebase to learn react.js from
Ask HN: Rails Devise Auth Equivalents for React, Angular, Vue.js etc.?
What libraries exist which give an out of the box auth & login solution similar to Devise for Rails?

I like the devise library as for very little configuration you get registration, confirmations, account management, oAuth integration, lockable accounts and password reset without having to reinvent much yourself. So what else exists out there that would work with React / Angular / Vue etc in a similar way?
And then someone wipes their behind and have to open/close two doors before washing their hands. Nice!
The block which includes double-spent is invalid. When an honest node chooses the "strongest" chain it should check block If it's valid, not just look at a number of confirmations.

This is also true for blockchain browsers(and their api), which apps use to confirm the transaction(most of users don't run full node). The only way how 51% attack can be successful in the long term is that honest nodes(and blockchain browsers api) are re-configure to ignore double-spent(at least for a particular time period).
Google, by thinking so short term, has knee-capped any developer and engineering good will for their platforms. Today's version of Microsoft is who Google should be right now, but somehow we wound up in a different timeline. Could you have imagined these roles switched back in 2005?

Imagine if someone comes along and takes away Google's search business? At this point, their results are such a trash fire it can't be that hard. And if that happens, they've got nothing, because they've been lazy and arrogant (or at least appear that way to an outside observer).

I'm long MSFT, but definitely not GOOG. It feels like the unhealthiest FAANG. Their culture is in turmoil, they rely on one product that can be duplicated, and they routinely spurn the rest of the world.

Edit: this might be my most controversial HN comment to date. It's constantly bouncing between 2 and -2.
Sounds more like some companies you’d rather not deal with then.
The Bay Area is definitely an extreme, but millennials nationwide are doing worse financially than their parents, even though they're working more. Here's one of my absolute favorite articles on the topic, which addresses everything from work/health/education/housing.

https://highline.huffingtonpost.com/articles/en/poor-millenn...
Agreed - that's better than my initial conclusion: pee in the sink.