skysight-inc/HackerNews huggingface dataset:
AWS, and possibly GCP only allow 1:1 mapping of volumes (publicly, I know AWS allow it under the hood. )

Which makes synchronising snaphots a lot easier (and caching too, but thats another thing entirely.)

They are treated as block storage, so on the outside don't have to worry about what filesystem is running on it. (in practice they have to be a bit aware, so that they don't snapshot unbootable or dirty images, but I assume thats mostly handled by an OS plugin)

TL;DR:

AWS et al snapshots are at the block level. Linux has poorly documented primitives for this.

If you put your VM images on a Filesystem provided by ZFS or BTRFS then you can snapshot your images, without having to buy a SAN, or expensive controller.

ZFS has by far the best documentation. BTRFS's documentation has improved, but the tools are still difficult to use.
zfs remove is not a very good implementation - it keeps the old blocks around (as a virtual device) and redirects them to new locations. This is fine for "oops I accidentally added a device" but not great otherwise.
The Self-esteem scam: The curse of selfies/participation trophies/self-esteem
For any kind of discussion where there are multiple conflicting ideas, it is likely that an argument based even at least partially on opinion can be disturbing to one or some of the parties.
(2018), and previously discussed https://news.ycombinator.com/item?id=17484206
I have been an engineer or in engineering leadership most of my life. Now CTO of a large company. Nobody wants to say it out loud, but what we really need to do is treat engineers with respect. Give them a quiet place to work and leave them the fuck alone. Agile is just a watered-down compromise. We still get to have project managers, we just call them scrummasters and they get to bother the engineers slightly less.
Poster is probably referencing this BGP attack on a mining pool.

"BGP Hijacking for Cryptocurrency Profit" - https://www.secureworks.com/research/bgp-hijacking-for-crypt...

An attack like this could be repurposed to perform reorgs with 51% of the mining power as the stratum pool server decides what previous block to mine on. No idea if mining pools or the stratum protocol has added countermeasures to prevent such an attack in the future.
Any chance your sister was in/near Pittsburgh or the surrounding coal-country?

The "Pittsburgh toilet"[1] is a relatively common basement feature in older homes of steel and coal industry Appalachia. Often there would be a showerhead nearby as well, and the room was intended for the worker to come home through the basement, clean off the day's grime and 'do their business' rather than dirtying the proper upstairs house. The showers are removed pretty easily but the toilets are not.

[1]: https://en.wikipedia.org/wiki/Pittsburgh_toilet
I wanna know how FeedBurner (2004) hasn't been killed yet? I used it for quite awhile and kept waiting for the email saying it's being shut down.
https://feedburner.google.com
I spent a lot of dough on a master bathroom renovation (large steam shower with elevated seat, THREE showerheads and 3/4-inch pipe direct from the boiler), double sinks, all-LED lighting, WC room with this Toto: https://smile.amazon.com/gp/product/B009IJ2JQW/ref=ppx_yo_dt... and a jacuzzi tub)

... and it's just been a fantastic place to start and end the day in. The universal response people have when they walk into it is "wow". It's a significant quality-of-life improvement IMHO.
Notice that even this post on ycombinator is flagged 1 hour in!!
> I would claim the opposite: CD makes each developer responsible for their own mess.
> You make a mistake, it will end blowing up in production.
> Without CD you have a batch of changes, and the responsibility becomes diffused.

If that's the case, then the project is too small and CD is a overhead.

If the teams are large and CD is used for deploys then you need to have the supporting infrastructure on every step i.e. end-to-end integration tests, instrumentation, monitoring and automatic actions based on the instrumentation and monitoring. That's the unsexy part that's missing.

> The main gain I see from not doing continuous deployment is to manage the expectations of customers on reliability during a deployment. (We are deploying every X, at Y, expect some turbulence).

Making deploys hitless should be a step taken before going into CD.
yeah probably it's not expressed very well. You don't need to learn the syntax of erlang to understand Elixir. You can call any erlang code from within Elixir in a format that almost completely looks like elixir (the difference is that Erlang modules have a colon and start with a lower case and Elixir modules are upper case).

You might need to learn to read erlang documentation. But I've done quite a bit in Elixir, from standing up websites to writing a VM orchestration engine, and the only things I've needed to read the erlang docs for were:

1) writing an Elixir library that wraps the builtin erlang :ssh module with a more elixirish syntax

2) writing an Elixir library that wraps the builtin erlang :gen_statem module with a more elixirish structure and syntax

3) writing an Elixir library that fixes and wraps the builting :tftp module with a more elixirish syntax

4) figuring out how erlang uses SSL so that I could write a two-way encrypted SSL rpc library.

I did them for fun, but all of these are either in prod or used to make production artifacts, and all of these are of course open source and available, so you can use them and not have to do what I did.

Also FWIW, I have read exactly zero of those books.
To Build Truly Intelligent Machines, Teach Them Cause and Effect (2018)
Has the blog been hugged to death perhaps? I get a "The connection has timed out" error.
Hackers acting in Turkey's interests believed to be behind recent cyberattacks
This is exactly how it works! Most miners are connected to pools like slushpool, f2pool, etc over unencrypted an unauthenticated links. If you can modify this traffic you can steal the hashrate, because you can modify the work being sent to the miners before they do any hashing.
I don’t believe this is correct; when I look up the details of transmitters, they’re often 100kW+, e.g., https://fccdata.org/?lang=en&facid=62331 for an arbitrary example in Montana
"Demanding" anything from a superior is a bit of a no-no in Japan, even if it's something as simple as a phone call.
> Paracord is popular among preppers, but it's pretty unclear why

Rambo cosplay.

More charitably, paracord is a known quantity, and they idolize ex-soldiers, who are of course familiar with its uses.

If you wanted to maximize strength to weight ratio, you'd be a lot better off with gel-spun UHMWPE braid, like Dyneema or Spectra, in your pocket; nylon breaks around 200 MPa, while Dyneema is 3–4 GPa, about 15–20 times stronger. For the 249-kg load of type-III paracord, you can use 1-mm UHMWPE instead of 4-mm type-III paracord, so you can carry 16 times as much of it by length, or 20 times as much if weight was the limiting factor.

It's not a simple drop-in replacement, though. UHMWPE is much more vulnerable to ultraviolet degradation, is much more slippery, and is enormously less stretchy than nylon. Also, it floats in water and melts at a much lower temperature. These can be disadvantages, but they can also be advantages; for example, due to the elasticity difference, if the limiting factor is shock absorption, nylon is vastly superior, but if it's a matter of holding things in place, UHMWPE is vastly superior.

> giant Bowie knives

Yeah. Your choice of a 17-gram Cro-Moly knife with a titanium handle is clearly more reasonable if your objective is to cut things. But the Bowie knives fit better into the Rambo cosplay.

In both cases, though, some of what you're seeing is conservatism and tradition: people are choosing a particular article because it's been used for three generations and its weaknesses are known. Paracord isn't going to surprise you by melting when you pull it around a tree branch too fast, and UHMWPE can totally do that.
Mainly because plastic is not nearly as cool as stone or bronze. Plastic also has connotations of disposability and superficial qualities that unfortunately seem to describe the worst of this era also.
Good luck to Brad. It sounds like the last twelve years of his life were pure Google, it's a big change.

> I don't want to get stuck in a comfortable rut. (And Google certainly is comfortable, except for open floor plans.)

It's oddly comforting that even programmers of Brad's caliber are forced to cope with open offices. When can this fad end.
Shortest incubation period 1 day, longest 14 days, current average as of Jan 26 2020 was 10 days of incubation.
ZFS is mature/stable, its feature set is basically unmatched (data checksums, compression, atomic snapshots, RAID(0,1,10,5,6), send/receive) by any other option on Linux, and what competition it does have is unstable in some configurations (BTRFS), essentially dead in the water (reiserfs), in early development (bcachefs), or far more complex to manage (gluster, ceph, LVM+XFS). Other than the licensing issue, ZFS is basically a silver bullet.
> For such builds there is a question how trustworthy they are (afaik there are no reproducible builds for Qt)

To their defense, very few organizations have reproducible build systems and when they have, it's not compatible with the package manager of the Linux distros anyway
journalist's thread https://threadreaderapp.com/thread/1221837856622153733.html
I’ll second this, it’s fantastic. The time it takes to expand when adding a second 16TB is deeply average (8 days) but that’s about it for downsides. It’s the best computer I’ve owned.
Cups Printing System Lead Developer Has Left Apple, Begins Developing “LPrint”
In our environment we have a CI process that stars out the package.json then runs and npm update, executes end to end tests and logs tickets along with version numbers as technical debt tickets. This keeps us fairly up to data as far as library dependencies go. The problem with not updating is that after a period of time the upgrade path becomes almost impossible without a significant rewrite. Whereas front running it with CI allows us to see the train coming before it hits us and allows us to digest it in smaller manageable bites.
Practically speaking, you can write NUL from shell because bash is everywhere, busybox ash emulates a lot of bash, etc.

However I won't claim it's pretty or easy for people to use, so the point of Oil is basically to clean up patterns like this, e.g. find -print0 | xargs -0 and more.

This post uses a related problem and solution as design motivation for Oil:

How to Quickly and Correctly Generate a Git Log in HTML

http://www.oilshell.org/blog/2017/09/19.html
The plural of anedcote is not data, but there's more to financial better/worse off-ness than comparing the percentage change in Consumer Price Index.
When I was toying around with mining some alt coins with GPUs a few years back I had the thought when joining a mining pool on say supernova, what is to prevent someone from doing an attack and convincing the pool to send my coins to them instead at a level 'under the hood' and beyond my understanding. Or get the entire pool to act in a way that is for their own personal gain.

I know there had been guides on how to set up your mining rigs, setup the batch files etc. These were all guides written by other people and I could see how in this newly created space there was room for nefarious actors to try to convince people to mine in a pool, but not give them the rewards they deserved or scammed them in some other way.

I also thought about someone hacking entire pools' hash-rates to be used for their own purposes rather than trying to figure out the next block on whatever chain it was running. This would allow someone to 'steal' the hash power of expensive rigs and redirect the power to their own wallets.

My understanding of all these protocols is very limited to what is regurgitated from others. When it comes to reading the bitcoin whitepaper I was only able to comprehend up until section 11 on page 6 where it got into the calculations, at which point I got lost as I am not that good at math.

Thank you for the insight.
What to Consider When Choosing Your Next Work Destination in Europe
I'd argue that housing and education today are better on average than in the past as well.
Congrats Brad. You rock
If You Start Believing Everybody Else Has It Better, This Is a Reality Check
These private mining datacenters typically get their block templates from pool servers. Miners communicate with the pool servers over the internet. Control the pool server control the mining power.
Not sure why you're getting down voted. I completely agree.
As an outsider to your field your name sounds a little ominous. Like a room full of psychotic people. Explain to some people you don't know in person what you do and then have them tell you back what it is you do. The results are surprising sometimes.
KnightOS was an interesting operating system
There are plenty of takes on this space now.
I’ve been running a website for over 10 years and have, at various points, made use of all those packages (mogileFS, memcache, gearman). Brad’s influence is enormous.

Thank you, Brad.
The most recent bug (that we know of) that allowed double-spend was in production for over a year [0] (~Sept 2017 to ~Sept 2018). I don't think it is possible to accurately determine the probability of this bug being exploited (because you are right, it is "all probabilistic"), but this inability to determine the probabilities is precisely why PoW is security theatre. PoW has always been painted as a mathematical model of the security of the system (see featured article), but in reality this model is not accounting for the much more realistic attack vectors. Hence it fails to be an accurate model.

If you're just saying that PoW isn't painting the whole picture, I agree with you.

[0] https://bitcoincore.org/en/2018/09/20/notice/
The last I looked at them for either hosting or domain, they had a provision in their TOS that basically said they could terminate my account at any time if I did anything they felt was morally wrong. I emailed them and asked if what I was reading was true and they confirmed it. I never looked at them again.

They probably thought their no-BS morally-right stance was supposed to comfort me, and it's not like I host anything that would likely meet that criteria. But who is to say a blog post has cursing in it that they decide, at their sole discretion, to be bad? Or speak up on abortion in a way they don't agree with? Or any of the other morally-charged topics out there? I'm not hosting with the thought police and it's always made me wonder how others felt comfortable with them.
No frills data pipeline with Go
> No idea if mining pools or the stratum protocol has added countermeasures to prevent such an attack in the future.

Not really. There's some discussion about Stratum2 having stronger authentication, and systems like BetterHash to take away a lot of the centralizing impacts of pools by having people create their own work, and only centralizing the payouts for that work. It's a bit of a challenge because there's such a huge range of hardware out there with incomplete implementations of stratum in closed source forks of mining software. You basically have to wait for it to just be obsolete and replaced because there will never be updates.
> Don't hear about them much these days

I hear about Brad every single day because I follow him on Twitter. It's just a question about where you consume your information from.
China Closes Foxconn, Johnson and Johnson, and Samsung Factories Amid Virus
Yes exactly, see my sibling response. This is a perfect use case for the "xargs $0 dispatch" pattern I mentioned, and maybe I will use it in that blog post.

Your example does have some quoting problems which is understandable / common, but in Oil the obvious way should be the right way. That's not true in shell!

https://news.ycombinator.com/item?id=22161847

Thanks again for the encouragement!
Remember, it's a called a standup because it's a comedy.

(I genuinely thought the article was gonna be about comedy. I was disappointed.)
I'm really curious though where you end up now :)
AMP must be included in the investigation. Google's latest tactic is the introduction of Signed HTTP Exchanges [1], which still forces publishers to create AMP sites that are delivered from a Google server in order to appear at the top of Google Search results.

Nobody should not be forced to create AMP sites in order to appear at the top of search results.

Mozilla opposes the implementation of the Web Packaging specification [2], which includes Signed HTTP Exchanges, mainly because it can be used to take away control from publishers over the distribution of content.

> The question remains about whether this fundamental change to the way that content is delivered on the web represents a problematic shift in the power balance between actors. We have to consider whether aggregators could use this technology to impose their will on publishers.

If you're from the US, please write to your representatives and let them know about AMP.

[1] https://developers.google.com/web/updates/2018/11/signed-exc...

[2] https://www.iab.org/wp-content/IAB-uploads/2019/06/mozilla.p...
Once you get far enough north in Michigan, like the Upper Peninsula, they switch from salt to sand for the most part. It gets so cold up there so regularly, salt doesn't work as well.
That's why FS integration into the kernel would have been so important for the whole software ecosystem.
And yet UWP still lives on, and is being improved to be independent of the actual Window 10 version, and to have Win32 and UWP on the same process.
You shall not talk about what Israel does.
Recs – app discovery platform that helps Shopify merchants find the right apps
Ask HN: Fastest/easiest framework to build a web application in 2020?
I asked this same question a couple of years ago -> https://news.ycombinator.com/item?id=15715547

Since then a lot has changed. I'm curious what people consider the fastest/easiest way to build a full-stack SaaS app in 2020.

Assume the following:

- Can be picked up by almost anyone (assume basic HTM/CSS/JS understanding), doesn't require any deep CS understanding (think how easy Rails was in 2006)

- Has full-stack capabilities, not just front-end

- Is open source and can be deployed anywhere

- Is complex enough to rule our no code solutions like Bubble or Webflow
Specialized is necessary due to business requirements.

User requests aren't always "here's a problem + the data, solve this to optimal". Here are other examples:

1. "here's the problem + data, solve it well enough within 10s"
2. "here's the problem + data, solve it well enough with a subset of the data"
3. "here's the problem + data, solve it partially, and then when near real-time updates come in, update solution to take new information into account"
Right, but Qt builds one can probably trust. Some random account on GitHub less.
There is no opinion here. Just someone who advances a pretty harmless proposal.
I'm building this https://histre.com/ It has Hacker News, Telegram, and web browsing (notes, bookmarks, history) integrations already. Up next: Emacs org-mode exports, integrations with Pocket and Pinboard.

Here is a bit longer comment on that which I made earlier today: https://news.ycombinator.com/item?id=22160026
I've followed Brad Fitz over the years because I also started in Perl and ended up in Go. His intellectual curiosity and interest in doing cool things well shines through. He is a great example of the leader-by-example category.
One of the worst things of the Trump era is this nihilistic "both sides!" attitude. The EPA is being run by an oil lobbyist. The Dept of Education is run by someone who doesn't believe in public education. The Interior Department is pushing to sell public lands to private entities. These are all very much not "business as usual".
In that case Square is the payment processor. The vendor using the Square reader is not required to be PCI DSS compliant, only Square is. Same for accepting Paypal, Stripe, etc.
Yes, eventually one will be able to migrate those apps into Blazor, thanks WebAssembly.
> In my country we don't call that a bathroom. You can't take a bath in a "half bath". It's just a toilet.

What do you call a room with a toilet, sink, and stand-up shower? That's what one of the full bathrooms in my house is.
Sure, but assets can be commingled, and I would think one would want to have a very clear understanding of what would and wouldn't be commingled, and what happens to earnings during the marriage (which would be community property in CA).
In the case of free versions, keep updating it so they can sneak Google Chrome onto your system using dark patterns (which Google pays them to do).
I'm using Duolingo to learn Hindi, but not alone; I also have a couple of (Snell's) books.

I find that a good combination - I favour reading as a means of study anyway, and that gives an understanding of the grammar, tips, gotchas, etc., and then Duolingo puts it into practice, tests me on it, and instills vocabulary and recognition of sounds and characters through repetition.
I've Always Wanted to Go Bald
SAN and s3 are different beasts.

EBS is very much a SAN, if you read the docs, the Nitro HBA Controllers have dedicated bandwidth allocation for doing just EBS.

As there is a dedicated network for just servicing block storage, that sounds suspiciously like a Storage Area Network to me.

S3 for backup makes lots of sense, its ubiqutous, reliable and smeared over lots of regions. It also works well with large files. Its also orders of magnitude cheaper than EBS to run.
^ yes, penalties in the solver. Above post is correct.

IRL they just get rolled and we treat it as a new problem with a different set of schedules.
Fun fact the blender cycles renderer used sRGB for a long time which was just throwing away huge amounts of dynamic range
Because people rarely click Yes, even if it's rare.

Plus it means little to the end user, and outside of HN, Slashdot, or other tech forums, most folks don't even know what telemetry means in an OS context. They click No, and move on.
See:

https://groups.google.com/d/msg/perkeep/Kqvh2dJVmoo/9N4YXAuX...

I no longer pay Mathieu to work on it full time, and my time is tempered by 2.5 and 0.5 year old kids.

I still use it, but don't have time to add to it much. Others work on it a bit. Mathieu and I did work on https://github.com/perkeep/gphotos-cdp just recently, to fix the Google Photos importer. So it's still moving a bit. Others still work on it too.

I'll pick up my involvement again as kids get a bit older. (One is almost potty trained and starting preschool soon! :))

We have no plans to abandon it.
I don't think that's nearly as close to Carbon5's logo as the SiFive logo is to Carbon5's, but fair point, there's always overlap in these... when I posted that I actually couldn't see the difference between their logos and was genuinely a bit confused if they were connected, but I see a small difference at the bottom of the Pentagon now... so it seems unlikely there's an intentional connection, but was genuinely confused at first!
Hey thanks for checking it out. It's a web app.

Yes, Feedly and Pocket was what I used before Monocle too, they're awesome. You can use Monocle on mobile too but it's not optimized for it, since I believe you shouldn't be reading the news or your online content on the phone but rather more confortably on a computer. Yet, the possibility exists if you want to.

Also, since you mentioned Pocket, I made a companion browser extension for Monocle which allows you to save articles to read later. So basically merging Feedly and Pocket into one app.
Everything I write about (journal + other things, task lists and what not) is written in plain markdown files currently (about to move it to TiddlyWiki, one of these days...) and to get search, I just use `the-silver-searcher` which searches the entire directory of my files. Simple and scalable (got around 9k documents by now)
Nor Greed.
Understanding What the Coastline Paradox Is