skysight-inc/HackerNews huggingface dataset:
Docker (and docker-compose) is super useful for local development environments. Sure, there are problems with docker on windows and with non-root containers. But docker is way better then most of the other tools I used for this (vagrant and whatnot).

A main problem in my opinion is, that old images are no longer published (or removed from dockerhub). I doubt very much, that you can build docker images that are written now in 2030.

But I assume the same happens with Packer + Terraform. In both cases you need to make sure the image is saved and accessible at a place you control, because the build will stop working at some point in time. Also the nice thing about docker is, it runs local (developer machine) and in production. I am not sure how you archive that with AMIs.

Building fat binaries is only easy for some specific languages and tools. In docker, it is easy for everything. At the end docker gives you a standardized way to deploy (image, environment variables, network, volumes and off you go!).

Now about docker in production. I had lots of problems with that. But if you use docker for local and don't have a ops department, it is the natural way to go. You run your integration tests with the same image that later runs on prod, so you don't need to worry, what stack is running on in a different environment. As a developer with a fully automated CI chain, I can control the entire deployment from my IDE (Dockerfile, Jenkinsfile, ...). My college can review the entire deployment in the PR (code-changes and infrastructure changes). And also docker has for most external software a ready to use image. Those are big benefits for small dev teams in small companies.

Also cloud providers offer docker tooling like a private image repository and docker support in most CI tools. I mention all of this, because the tooling around a container solution is important. You may dislike docker, but it integrates in most cloud providers and has images for almost everything.

The argument about complexity is true. If something doesn't work and you have no idea about the parts under the docker layer then its game over. But this is a very general argument against complexity. Complexity in software makes everything easy until you need to go down an abstraction layer. Nobody forces you to run your MySQL or Elasticsearch in docker container. This is definitely an unnecessary (and potentially dangerous) layer of complexity.

But to run the 10 years old PHP 5 application that needs memcached version 0.1.5, docker is very very useful: you spend a week to put all that legacy stuff in an docker image, push the image and all the team members can run it locally. Even the designer that knows a bit of jquery can run "docker-compose up" on his windows machine.
Yeah, trust is just a way to break into the market. Sorta like the old saying "it takes a poor genius to become rich and a rich idiot to become poor"
You mean the watchdog integrated into the BCM2835? That's a good question, we haven't tested that yet, but I've added it to the todo list now.

One particular product in the Revolution Pi lineup called "Connect" has an additional hardware watchdog which is also capable of resetting attached devices via a relay. That one works even when the BCM2835 has locked up completely. However, the CPU needs to have cooled down a bit to reboot successfully.
Do not provide backups and don't have backups aren't the same thing. If you have triply redundant local disks, you can probably afford take half of them and use them as backups for other systems and achieve better availability results (I'm assuming it's not triply redundant for performance).

While I did say S3, what I was really thinking about was Ceph. I don't think it's a silver bullet (almost certainly way more maintenance than a bunch of ZFS nodes), but if you're big enough to have multiple storage nodes with 100's of customers each (and again, triply redundant disks), then you could have built around the eventual failure of a node with what you already have. I'm not expecting them to hit S3's 11 9 availability, just taking a glance at what they have said about their design and proposing that basic changes to how they allocate what they already have would have avoided their problem in the first place.

I don't know what their exact situation looks like, or how they got into this situation. I see a post-mortem that says they spent 5 days trying desperately to recover customer data because they don't have backups, and they're not going to change anything about how they do things to eliminate the problem, even though it appears they have the raw storage capacity to have a backup. A sister comment says that brand damage, customer costs and recovery costs are just hypotheticals. They were, right up until this incident. Hopefully their internal postmortem has more details about what the costs were.

Clearly if they're trying to recover the customer data, it was important enough to the business to do so, and maybe it's time to re-evaluate 'no backups'.
https://www.simongriffee.com/ ~ Time, light, movement & distance.

Hand-made HTML and CSS plus a little JavaScript.

Published with Hugo static site generator.

Sending love to https://indieweb.org/

Todo: Add a page called ”Links” with links to other independent sites I like, similar to the ”Blogroll” sidebars from years ago.
>> Or, to put that another way: what are AWS and GCP using in their SANs (EBS; GCE PD) that allows them to take on-demand incremental snapshots of SAN volumes, and then ship those snapshots away from the origin node into safer out-of-cluster replicated storage (e.g. object storage)?

As far as I know AWS does not use SANs because they consider it as anti-pattern. Most backups land on S3 because of reliability and price.
You don't need to learn Erlang to learn Elixir. You can just use some what Erlang provides when you need it. Some people want to approach things very ground-up but I've taught people Elixir. It's fine to learn Elixir and you'll get to OTP and all the good stuff.
Zfs

Btrfs

See various "Private Cloud" Linux distributions for implementation examples of this. Such as Proxmox which does it out of the box on ZFS and soon on btrfs too.
I'm fairly certain (minus Linefeed Printers of the old days) most modern printers are either Host-rendered (ie, the host renders text and tells the printer what to print) or use something like PCL, which even in the most plaintext mode, still requires some setup to describe and format the page.

You can't just pipe a textfile into printer port and hope your printer spits out anything useful.
This is Erlang function notation that Elixir inherited. The format is: `{ModuleName}.{function_name}/{arity}`
Managing processes on Linux with kill and killall
Record Low Number of Startups in 2019
Education, Disrupted
Make crawlers not scrapers.
Those are the original names of those cities... The British Raj changed the names when they took control, and the residents of those cities wanted to go back to their original names.
Depends on the community, more and more communities are proving to be more reliable when it comes to core tech pieces.
If you have more than 5 employees or make more than $100k/year (i.e. even in a low wages section of the US, you pay more than one developer) - it's the old price of $5500/year/developer.
Excerpt

"If you statically link an application with glibc, such as is often required in embedded systems, you cannot keep your application proprietary, that is, the source must be released. Both the GPL and LGPL require any modifications to the code directly under the license to be released."

Did not know this until now! Interesting!

glibc comes with its own built-in gotcha for commercial vendors...

I'll bet 90% of them are unaware of that...
If you're installing through a package manager, you're probably installing something built from source rather than downloaded as a binary from upstream.
Fair enough, but if you have reached phase 3, you would undoubtedly know that Auth logic is fairly complex and rolling your own half baked solution will put your users at risk?

I can't think of a situation where OP's solution makes sense. Except for the obvious cases (app will never be in production, will never have real users or contain valuable data, etc)
> Why would he expect aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa to be less random than for example acatgagacgtctaatgttagacatgcatgac?

Can we really consider any part of a genome random? I means your second example isn't part of it, so I guess it's "random" but if you compare any part, it would come from evolution and without this, the virus wouldn't survive most probably (or at least, not like it does currently).

What makes special aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is that it's a pattern that we can spot easily. I'm pretty sure that any other patterns would make us curious about whether it's important or not. It seems like something that is graspable.
The modern world with its social networks makes it so much easier to do on a large scale, though.

https://medium.com/@francois.chollet/what-worries-me-about-a...
Here's mine: https://paulstamatiou.com/

Been running it since 2005 (and posting mostly regularly.. about 1200+ posts now but the vast majority of that was me posting about tech news back when I had first started it).

It's a mix of tech, design, photography and generally whatever personally interests me at the time from fido2 security keys to NAS storage for my photos and so on. I recently wrote a bit about how I built it: https://paulstamatiou.com/about-this-website/
is it considered better than ZFS?
It's called "arity":

https://elixir-lang.org/getting-started/basic-types.html#ide...
Why desktop as opposed to a server (headless) image?

I would suspect it would be more common to connect via ethernet from a PC or laptop, vs local console. Especially for field servicing, carrying a laptop is simpler.

In the case HMI is needed, installing the desktop is just some additional packages.

This raises another question: what repository are you using? How are (security) updates handled, if at all?
> Put a real plan together in the legal sense

Is "hey government, don't steal people's money just because they have it" an unreal plan now?
You can't write ASCII NUL characters from portable shell, that's why this task cannot be done correctly (for all possible filenames) from shell. You need to use tools like find(1)

So, no, it's not easy, at least not if you want to handle all cases without wreaking havoc.
You are right, I remember talking to Bitcoin core and lightning network developers before the segwit/bitcoin cash fork. They were quite depressed as the social/marketing attacks on Bitcoin core were quite successful in hindering Bitcoin's development by a few years.

At the same time as Bitcoin core won (by market share), now Bitcoin is a state where everybody accepts that Bitcoin won't have any hard forks in the future (even if it would be technically warranted).

For many things change is a good thing, but for creating a new monetary system it's only good if it fixes a huge flaw in the previous one (unlimited money supply and limited international money flow in the case of the current financial system).
Friendly advice: in your README.md you should use some hash function that hasn't been hacked. I am a fan of sha384() and sha3_384(). The sha384() variant is better than most of the SHA-2 variants because it is resistant to common-prefix attacks.
It's like a visualization of an HDD.
> The P trap under your sink isn’t to catch valuables that go down the drain. It’s there to hold water so that gasses and critters can’t come through

Yeah, I have a P-trap in the kitchen space of my single-room flat, in theory for the dishwater; but since I don't have a dishwasher, there's no water and I got sewer smells until it was plugged by rags.
Certainly the sheer volume of fake information available today is orders of magnitude different.
Are S3 and EBS not hosted on the same underlying storage subsystems?
I write about clean energy, data science, how to live a good life, and more! Any feedback is welcomed

https://ericvanular.com
Imagine having someone that makes money disparaging a particular technology in charge of the "truth" about the technology. I've challenged him to a debate on livestream, which he accepted, and then was never heard from again.
I think there's several different underlying causes to Windows feeling more secure (not needing antivirus) these days:

1. Security on desktops has been improved quite a bit. You can no longer simply email someone a .exe file that's the equivalent of `sudo rm -rf /` and have it work, multiple levels of safeguards (from the browser, to the email virus scan to windows defender catch it). OS's also simply won't run unsigned binaries anymore unless you force them to which is (maybe?) a good thing.

2. Piracy has been on a downtick, and people seem to be more open to paying for software since App stores made it somewhat more acceptable. Less likelihood that people download sketchy binaries off the internet and run them on their PCs.

3. More hours spent on mobile OSes which are inherently more secure. casual PC usage at home is declining.
I'm pretty sure about the definition of HIIT. The interval lengths vary wildly in definitions but one thing everyone can agree on is that each interval is at near maximum possible intensity and bannister was hitting the zone of training equivalent to research studies on HIIT.

I don't know if you ever did 400's but sub 60s is a maximum intensity sprint even if the interval is longer. Basically his training regime isn't recommended by the first article because 10x 400s is basically near impossible for even the top amateur athlete. I consider myself athletic and my interval only involves a single 400 (likely not even sub 60s). 400s are basically the most painful and intense track and field event ever. A sub 60s 400m dash is like 4 100m intervals without the resting period between them. Across the spectrum of HIIT definitions, Bannister is doing more intervals for longer so the intensity is even greater. Your average after work athlete can't even do a single 400m without vomiting.

I suspect maybe you're just training at a different level. Perhaps a sub 60s 400m dash isn't a maximum intensity exercise for you?

The other stuff you bring up is new. I'll agree with it for now as I don't know much about it. Do you have scientific studies that show dual training of combining HIIT with standard cardio is more effective than HIIT alone for something like a marathon? Is this factor well established in science or is it just a regime common with coaches? Also what would an example of such a training regime look like in your mind?
not op, but I think OP is talking about:
https://en.wikipedia.org/wiki/Psychoanalysis

and not:
https://en.wikipedia.org/wiki/Psychotherapy
If profit is orthogonal to a core value of the brand, then that value is not important to the market. That's just knowing your customers.

As well, near term profit and long term brand goals are never decoupled. You don't one day decide "our brand is X" but "our brand will be X" and you need to do Y and Z today and every day following to build up to X.

And I firmly reject the idea that near-term profit is disjoint from long-term consumer trust, at least for professional products and tooling. If they don't trust you not to screw them today or tomorrow, they won't pay you. I think this is why Google and Facebook can't make money from anything but advertising, they have to give away everything else for free or at a loss because no one trusts them at all.
Sure, but that's true of XML as well. There's got to be a point to the new thing, right?
Reminds me of the traditional "gimme gimme gimme" easter egg.

https://unix.stackexchange.com/questions/405783/why-does-man...
In my country we don't call that a bathroom. You can't take a bath in a "half bath". It's just a toilet.

A typical Dutch house has a toilet + sink downstairs for guests or for convenience of the owners. Upstairs there is a bathroom with a toilet, shower, sink and shower for the owners of the home to use.
This is a very arbitrary definition of serious effort. I learned one language to the point of being reasonably fluent without ever "drilling". I just listened and spoke in class

You also conveniently ignore the countless people (including adults) who reach fluency without even studying, instead just picking it up from immersion: work, media, etc.

Duolingo is a specific tool. Like any tool, it's best for specific uses. Your judging its users as "lazy" is both baseless and unhelpful
I would much rather not deal with jira tbh. Some companies take it too far and use jira as a micromanagement tool.
Not a great strategy against people reading books or the newspaper. Two things that are pretty easy to get used to.
> Installation of Qt binaries will require a Qt Account

I've used Qt in professional environments with commercial licensing at previous gigs. I'd considered using Qt for personal projects using their open source licensing. But this is a killer requirement. Goodbye, Qt.
Microsoft can collect information through their OS, why bother with doing it in AV.
I suppose i should say that they make more sense than solid tires -- at least in some circumstances.

Different world, but tubeless-with-sealant has more or less taken over mid- to high-end mountain bikes. Lower pressures help prevent rim blowouts as well as allow you to fully exploit grip on unstable terrain, and then you don't need to care about sharp rocks or thorns or goatheads or whatever as much. The idea doesn't translate as well to road bikes, which have (even now) very high pressures -- usually 75 -- 120 psi.

The "sealant spooges you in the face" problem is certainly a real one. I don't have sealant in my car or motorcycle tires, but if i did i would warn the mechanics beforehand!
Can someone ELI5 how these numbers fit together? It costs me $3/hr to 51% DeepOnion, which has a market cap of $1.95M. In practical terms, what does that mean?
> You won't find a new house in South Florida built out of wood.

Interesting, what do they build them from?

> In Texas you will find a lot of new houses with internal wooden frames, but the outside walls are made of solid brick, I think this is called "brick veneer".

Brick veneer is just a decoration. It’s not structural in any way. There is usually an inch wide gap between the veneer and the actual wall for drying purposes.
There was confusion with this. Originally they thought they lost all data, which is why a lot of people went crazy at them via Twitter, they later said there now might be a chance to recover data - luckily they ended up finding a way to recover it.
$705k per hour for Bitcoin - these numbers sound very expensive.

Do they take into account that during an attack the attacker will earn block rewards and transaction fees?

Because if not, then they vastly overestimate the costs.

This sounds like it is based on the some energy price that would be needed to do 51% of Bitcoins hashing.

Doing so could very well be profitable.

The reason it would be hard to do is that the attacker would have to gather a ton of hardware that way way exceeds the energy costs.
You should send this to the Vice authors.

I emailed some journalists about Jumpshot a few years back. It’s good that everyone now understands what is going on.
This issue has its own wiki page on the BTRFS wiki:

https://btrfs.wiki.kernel.org/index.php/RAID56

So, no, that particular issue hasn't been fixed.
Since it took a while for me to understand this. A 51% attack doesn’t let you steal money from anyone. It essentially lets you block all transactions from making it to the blockchain. Nodes will still verify all transactions and ignore transactions that are invalid.

Edit: you can also create multiple forks and switch between them. External viewers will see both forks and if they don’t or can’t handle the difference they could experience a double spend.

That being said any miner has the ability to sort transaction any way they want which can give them an advantage. So if someone has a lot of hashing power they can use that ability to delay certain transactions or to give preference to others.
I have not been affected but I heard some teams where a QT rep was interested to understand how they were using QT. Skip fast forward 2 years later, they now have to pay QT licenses while they where using the open source version before.

It might have been a good business decision to get more support, or to use some non GPL components, but I can't help to think that the not so friendly push from the QT rep was also a reason...

So I got the feeling this is just another step in that same direction.
Make open APIs, not scrapers.
There are some big caveats there. https://btrfs.wiki.kernel.org/index.php/RAID56
My personal site is where I review music I like. Good opportunity to practice design ideas that wouldn't otherwise find its way into my work-related material.

http://fuzzcrush.xyz

Yes, there's no SSL.
Being on the other side, there are plenty of times that I have to tell the customer, “this world is only going to happen if you make the proper investment in setting this up specific to your needs...” and then they complain when an already overworked employee they threw it over the fence to can’t make it sing.

Good enterprise software is almost never one size fits all, and there is responsibility on both sides to end up with something great.
http://www.matthewherman.net
This is sarcasm, but it really is: with crypto, there's strength in numbers.
Just enough to get into trouble, not enough to avoid disaster
By far the #1 committer and founding engineer of Swift for Tensorflow also recently left the project: http://rxwei.me/about/ . From the committer list, it looks like Dan Zheng is the only individual who is actively working on it, and he's was an intern until he formally started January 2019. I don't know the ins and outs of Google culture, but it looks at least like every senior engineer has moved onto something else.
Yes, your average Swede would rather live in the woods than have 80's tiles. Meanwhile an average american would perhaps rather have 4 80's baths than 2 new ones. And that's exactly the cultural difference the article is about I think. It goes part of the way to describing why I only have 1.5 bathrooms.

I also suppose there is a difference with wear. If you have e.g. one or two baths instead of 3 or four for a large family, then it might be in worse condition after 15 years.
Yeah people always assume the buyers of the data are companies like Google, and not some group who wants to blackmail you if you don't give them five Bitcoins.
1) If a big crypto-community notices an attack, the cost of a 51% attack would rise

2) There are mechanisms to offer smaller cryptocurrencies Bitcoin level security, like Komodo's Delayed Proof of Work (https://komodoplatform.com/security-delayed-proof-of-work-dp...)
Can we discuss how ridiculous PCI compliance is to require anti-virus softare? Particularly in mac OS where anti-virus software is the primary surface area for introducing viruses.

Why hasn't this requirement been updated to somthing more sensible?