skysight-inc/HackerNews huggingface dataset:
You can pin your certificate in your app bundle such that your app only allows certificates you specify or ones signed by CA's you specify. That clearly isn't the case here. Normal iOS operation will verify the certificate chains up to a trusted root certificate and it is indeed possible to load your own trusted root CAs on to a device for purposes of MITM. Again, some apps may pin their own certificates, but that clearly wasn't happening in this example.

I deal with this virtually every day.
Of course in hindsight I realize that resigning was the dumbest decision ever, although there were others factors involved beyond the offshoring experience that I described. It was a company with a toxic culture that created too much stress over little things that shouldn't matter. I resigned as a pre-emptive measure because I had a good sense that they were about to fire me, because I had went straight to the CTO and told him that I was uncomfortable with picking which of my coworkers to fire. Then I found out from him that the offshoring plan was his idea all along, and that the consulting company I was contracting for had been brought in by him to take the blame for the plan. They moved me to 3 different teams in less than a month. That's a clear signal in corporate bureaucratic culture that they are building a case to fire you, by putting you on already late projects and under performing teams.

But I don't look back and say "well, I dug my own grave by resigning, therefore I deserve to suffer the consequences." Nobody deserves to be long-term homeless in the wealthiest country in history.
This is how Military promotions work for officers. No one wants to work smaller projects because performance is measured by "Led X number of troops". I see it as a contractor.
I have this idea for a new framework/language. I'm sure if it either already exists or it's a dumb idea in practice but anyways.

You build a monolithic application. Everyone works on the same code base. Things are broken up into modules/classes/packages. From the programmers point of view it's just like working on a standard Java project or something similar.

The magic happens at the method and module boundaries. When the application is first started everything works normally. Methods call other methods using addresses. As the application runs some parts of it become hotter than other parts. At some trigger point an included process starts that spins up 1+ cloud instances. Only the hot code is deployed to the instances. If necessary the instance is load balanced on multiple nodes. You configure the triggers and whatnot as part of the applications config. The framework/language would either come with support for popular cloud services or allow you to create whatever system you need to create the instances.

My hypothetical language/framework would proxy all method calls and remap object instances to the new instance(s). If the extracted code cools down enough it is integrated back into the main monolith. At that point proxying is turned off and the methods use address again.

Using this approach you get the all the advantages of a monolith (interface compatibility checked by compiler, not needed EVERY service writing their own http code, etc). Of course you can't optimize latency as easily and merging is harder with monoliths. There's undoubtedly a hundred other reasons why this is a terrible idea.
This isn't really a problem with SPAs. SPAs can be fast (and if done right, can be very fast). SPAs can be bookmarked. SPAs can have full support for forward/backward controls.

These problems aren't unique to SPAs, either. Many server-side rendered applications have the exact same problems.

The problem is just that these applications are being designed poorly. Nothing else.
https://wiki.openstreetmap.org/wiki/Beginners%27_guide

It's pretty easy, you just make an account, pick an editor and start making outlines and tagging stuff
At first I had written "His name is Avery Pennarun" but that was way too Fight Club.
As someone who has a noncommercial side project and has been using SendGrid's free 100/day plan, I'm actually thinking of switching to this. I've always been a bit concerned with what would happen if my app got a sudden burst of signups (since email verification is required to sign up), and have been looking for an uncapped plan, but don't want to spend $10 a month or more just for that possibility.

The key here is that with the $0.80/1000 emails PAYG rate, you can still do like 2000-3000 a month for less than $5, which no one except SES will provide. Everyone else has a gulf between "free tier 100/day" (or even 100/month with Postmark) and their first actual paid tier ($10/month for Postmark, $15/month for SendGrid). No one else except SES has this PAYG for low rates as far as I'm aware. I think if your hobby project needs more than 625 emails a month, it's reasonable to spend a dollar or two on a month to handle that.
living up to it as best I can
95% of academia is unnecessary. The part that makes this notably different from Sturgeon's law is that we know which parts that is and if we ever go through a resource crunch we'll find out.

Ask yourself how you'd allocate money as the sum available becomes less and less. The answers are obvious.
> Obvious cautious tip-toe is obvious.

Yes and no. The guidelines for declaring a (Phase 5) outbreak is to have person to person transmission in 2+ regions of the world. https://www.who.int/influenza/resources/documents/pandemic_p... So, yes, it is about what's happening outside China.
> Economics 101, which insists that the way for a company to be successful is to be the best for the market

No it doesn't. I don't know which Economic 101 you had, but you may want to ask for a refund on the money you paid for it. Economics says nothing of the sort. For a company to be successful, its services should find willing consumers.

> the dominant market is not a company's customers, it's the company ownership.

Can somebody translate this to English for me? I recognize all the words, but I can't make any sense of them being arranged this way. What does it mean "dominant market is the company ownership"? It just doesn't compute.
What's worse for consumers in the end though?

One profession missing in the parent comment are the researchers innovating on differential privacy. Apple has taken great pains to figure out ways to improve their maps without storing massive amounts of private user data, to the extent that they split routes in half, fuzz addresses, and analyze the start and end of trips independently.

There's an argument that Google had such a huge head start on maps, that without Apple having the capacity to set defaults (on a platform that is not even a plurality of users), Apple Maps wouldn't have gotten enough users to justify improvements to where it is now. Apple also didn't get serious about having its own maps until Google attempted to exercise their at-the-time near-monopoly power to jack up licensing costs. Now the mere existence of Apple maps puts pressure on Google to improve the privacy features of its own map products as we've seen recently.

Apple funds map development through device sales, and Google does it through targeted advertising, map services for third parties, and profiling users. Do we value competition only of mapping products, or should we also value a diversity of business models for mapping products? It's no small decision to bring in the Kommissar.
I dunno, driving is not a good context in which to take risks.

My impression is that the United States is remarkably good in being able to manage risky technologies.

One example would be the development of the liquid metal fast breeder reactor.

We built the first one, it suffered a meltdown, it was small, really no big deal. (e.g. if you have liquid sodium around, radioactive iodine is going to react with it and the NaI dissolves in the Na or forms non-volatile molten salt droplets.)

We build a demonstration plant at Detroit, it had a partial meltdown, they fixed it, got it running again, decided it wasn't worth the trouble a few years.

After that we ran EBR II which had very little trouble, and we ran the FFTF which only got in the news because somehow Karen Silkwood died mysteriously making fuel for it. No nukes never talk about those two because there was no drama.

France built SuperPhenix and it was a screw-up from beginning to end. They couldn't even build a good roof for the turbine building.

Japan was the world leader in nuclear accidents in the 1990-2010 time frame with the criticality accident at Tokaimura and multiple problems at the Monju reactor. There was the time that a sodium fire burned for a long time before they noticed it, when they finally got it running again after a few years they dropped the refueling machine on top of the reactor, took a year to pick it up, and then lost their permit to move fuel around it.
Great news! Yubikeys are priced at 50€, these thingies are 5 times cheaper.
You hit the nail on the head. If I could quietly do research the rest of my life I would probably do that, but only if I’m paid what I earn now year after year, I’m not going to be satisfied with some pitiful grad student level stipend.

The alternative is what I do now, building software that probably contributes to the degradation of society in exchange for generous money. I’m ok with that because I am insulated from most of the effects of my work.
> It is difficult to get a man to understand something, when his salary depends on his not understanding it.
Just as a heads up, Saito has a quantifiable cost of attack (for attackers) while still paying for a form of useful work (tx routing / fee collection) so waste and security are not intrinsically related.

https://org.saito.tech/saito-economics

The approach works exactly because money is guaranteed to be pulled away from the block producer. Given that it always costs more money to produce blocks than attackers can earn from them, only honest nodes (who spend other people's money) have am incentive to do so. Cost of attack is the money attackers cannot get back if they spend their own money to censor the network. Check it out!
Common Core Is Dead. Long Live Common Core
> To be fair, anyone buying that likely knows what they're getting into.

True, I'm just dwelling on the possible consequences. I have some Silbersalz film myself that I haven't used yet, and I'm actively imagining everything that could go wrong.

> Yes, there is B&W C-41 film as well

Ilford XP2 - it looks a bit different from typical B&W film, with very flat whites.

I used to love XP1, which came out sepia when processed C-41.
I think it's fine for tools to be complex internally if they make things easier for people externally.

Is it though? https://www.jwz.org/doc/worse-is-better.html
Really have to give kudos to Google for basically inventing this design language, because this Maps update really looks like a "catch-up" to much of the design language Google Maps has been using for a long time now. Honestly, looking at these images, Apple Maps looks like a desaturated/less colorful Google Maps (and that's not necessarily a good thing either).
Why is it counter-intuitive that people who interview well may still not function well in a specific organization?
I feel like asking the site to take something down ... is effectively caring about who sees it. Otherwise you wouldn't do that.
Well if you go to "high paying low risk" on your tombstone will be written He lived the same year 70 times and called that a life. For a lot of people that is not their desire. So I think that there will always be supply of smart risk takers.
I'd say customer impact, even without regressions. As an example of something that I'm currently working on:

- there is a need to add a single link to a page

- some percentage of the customers will not like this change (perhaps 5%), because it links to a non-whitelabeled area of the product

- as a result, a list of customers that will be upset has to be assembled, and then each one reached out to, which a different department, that doesn't really care if the link is there or not, has to do

I'd say that doing the above will take a month or so. All for a link.
I never understood why there aren't performance requirements in government contracts. Same thing with infrastructure construction here in DC... new offices go up in a year, but changes to the intersection in front of said office take 5 years and cost multiple of the office itself. [hyperbole, but only just]
There are some very nice opinions here about going the Quixote way and coming out empty-handed with good reasons against it.

This is one of the reasons I read HN daily, most of the time going straight for the comments and not to the article itself.

So thank you all who contribute and pour your hearts out around here!
then how do the email services , who post massive amounts of emails and many of them are spam manage to get through? do they have some kind of deliverability deals with gmail?

(btw my mails also seem to get through and i haven't even set up DKIM)
I don’t imagine there are many users that would be willing to pay more for a laptop preinstalled with a Linux distro.

The Windows license is still valuable even if all I do with it is run a couple programs in a VM. Some people might bite for a discount but it seems silly to pay more!
Sounds like you have a billing department problem.

I think one big issue is that the US subsidized EHRs for a while. So non-US non-billing-focussed EHRs never really developed.

Now those US EHRs are getting dumped on the rest of world, with all of that carefully developed billing tech disabled out-of-the-box.
The previous thread about this: https://news.ycombinator.com/item?id=21876818
I am an Xer and I think we had our opportunities crowded out by boomers, grew up listening to boomer music, etc.
In a way, the opposite can also be said, but only if you have no kids.

If you're not rich, that also means you don't have much to lose. Whereas, if you've got a personal empire to maintain, with a husband/wife, kids, a home, 2 cards, etc., you're less inclined to do anything to upset the balance of that system.

But if you have no kids and you aren't rich, the worst thing that can usually happen is having to sleep on a friend's couch for a while and eat lots of ramen noodles, which may not be far off from the lifestyle you're used to.
Yes! Completely agree that it was the best and nothing has filled the gap since. Such a shame.
GAO projects that JWST will have another round of launch delay, cost overruns
"Users are always allowed and able to switch to another device/ecosystem."

Google would like you to have a discussion with the EU on their behalf.
Modules help some, but being tied to a deployment cadence with say, hundreds of other developers, can be very painful. Having to delay my team's features because another team broke the build doesn't help my customers. Isolating CI pipelines by team can help that somewhat, but you still end up sharing fate with teams with whom you might have no real interdependencies.
Wouldn't continuous deployment and rolling forward be better than switching your entire application architecture?

In this scenario, you deploy ~30 times a day. If there's a bad commit, you revert it, and then do another deploy. So there's no rollbacks, you don't lose as much velocity, and since deploys are safe and a reverted commit is just a new commit, the revert is safe too.
Ajit Pai promised faster broadband expansion–Comcast cut spending instead
Do you have any unprotected shared folders?

It's surprising how many people have unprotected shared folders. And for some reason they very often are full of music.

Spend a few days on a hotel's wifi and you can slurp up thousands of other people's MP3's.
Are you really GPU training on your home laptop? I absolutely get why CUDA support for MacOS isn't a priority
B12 deficiency happens even when you eat meat. Humans used to get B12 from bacteria in the dirt that accompanied much of the food we ate. Eating meat these days doesn’t give you enough B12 and has to be supplemented.
Epidemiological and clinical characteristics of 99 cases of 2019 coronavirus
Oh god.. Onedrive.

First of all, this was about 2-3 years ago.. not sure if things have changed.

(1) Onedrive "for business" was completely different than OneDrive personal. It still worked under some archaic office sharepoint or whatever thing to some degree.. so first when I tried to use it there was some terrible path/file limitation (lower than normal windows) and it didn't like some special symbols.

So let's ignore that nightmare above, maybe it's changed.

(2) Even with onedrive personal and the business version I used.. it COULD NOT manage a lot of files. I mean even 50k-100k files it would just stop working basically. It would just sit there stuck, never do anything etc.

On Dropbox we have well over a million files and it works fine. Some chunk of files change all the time and it still works.

tl;dr if you have a LOT of files.. Dropbox is the way to go- nothing else I have tried comes even close to it.
That's true, if you're buying OEM ram for Dell or HP servers, it's more like $10-20/GB. However you can buy Crucial ECC DDR4 ram for $6/GB, so there's a hefty OEM markup.
It wouldn't be worth the cost of the letter.

This code's as valuable as a Blockbuster card by now.
Apple doesn’t have sufficient market share to be considered a monopoly. That’s generally how they’ve skirted around the issue, and by positioning themselves as a premium brand, they can raise prices on their hardware to the point that market share remains sufficiently small to not be subject to monopoly laws.

At the time of the MS/IE lawsuit (2001), Microsoft Windows had well over 95% of desktop operating system market share.
Most databases fit in memory though.
It's been about 4 years since I've been in this world, but I remember there being several products all doing a very similar thing: Presto, Hive, SparkSQL, Impala, perhaps some more I'm forgetting. Is the situation still the same? Or has Presto "won out" in any sense?
> These programs offer grants and other benefits to 'the right kind of startups' - usually ones that are fashionable because the subject is currently hyped - ai, climate change, etc.

> I imagine there's a lot of 'who you know' going on, too.

Isn't this pretty much everywhere? US/India/China? And it's probably not limited to just government programs but even Angels/VCs/press are prone to hype?

The current product I'm building[1] doesn't excite a lot of people in my immediate vicinity but people thousands of miles away from me are looking forward to the launch. It's a question of positioning and product-market fit at the right place, right time with the right idea.

If the mom-test book and building this saas has taught me anything, you should always be evaluating the intent/point of view of the person you are talking to.

In this case, if it's a bureaucrat or a politician, it is all about optics. They have to justify every decision made, so implicitly their aim is to gain brownie points with the population and an average population does not really evaluate ideas based on pure merit but on what feels good which is, almost always, hype.

[1] https://getliste.com
SourceGen Disassembly Projects
> One way to mitigate this would be to increase the size of the house to around 700 members. (But that isn't going to happen either.)

That won't mitigate it. Who gets to confirm judicial appointments? The Senate, not the House.

> Eventually, we will have to have another constitutional convention to correct the imbalance. Heaven help us then.

Yeah. I'm not sure that a constitutional convention is what I want to see. One good thing that could come from it is confirming that the 10th Amendment actually means what it says, not what it's been interpreted to mean. Or (perhaps the same thing) that the Commerce Clause is not the blank check that it's been interpreted to be. In my view, those would be good. But a lot that's bad could also come...

The other way to do it would be a constitutional amendment. For that to happen, you'd have to get 3/4 of the states to ratify it. For that to happen, they'd have to decide that they'd be, at least, no worse off under the new system. Building a new system where the Senate doesn't confirm judges (or where the Senate is per-population instead of per-state), and still leaving the less populated states no worse off... what are you going to give them in exchange?
Whoa. Thank you so much for telling me this. I am literally in the middle of a one-day project to send nearly 10k emails and have been using the free tier for years with no issues. I was just thinking today about how good the free tier is. I am not surprised they are making this change. I will gladly upgrade, Mailgun provide a great service and I have never had an issue.
Are you happy about that
Apple doesn't have the market share MSFT did back then.
This doesn't make any sense if I step through it mentally. If you're a carrier of a virus and you have to hoof it to my end of the world, it's going to take you a whole lot longer to get there than if you flew. This is absolute fact. The faster vectors you give to something to transport a thing, that thing will move to its destination that much faster.

You don't need science to grok this.
Same boat, same feeling.
Some of a competing EMR is PowerBuilder. Hopefully not the one you made ;-)
Evented has some difficulties in practice:

* On Unix, only socket IO is really evented; this can be solved by using a thread pool (the Flash paper describing this problem and solution for httpds dates to 1999[1]) but is inelegant. This is the approach Golang takes behind the scenes.

* How to scale event loop work across cores; this can be solved, but adds complexity. In contrast, threads are quite simple to scale.

* How to share accept() workload across cores; this can be solved, too, but not portably. I.e. your 100 core server may very well be accept-limited if you have a single-core accept loop, or highly contend on a single socket object.

* Threadpools are definitely inappropriate if you have a ton of relatively idle clients (long-poll server, or even typical webserver), but are less wasteful if you have relatively few, always-busy clients.

I don't disagree that the synchronous threadworker design isn't the best choice for high performance services that can afford a lot of engineering time to design and find all the bugs. But thread-per-client is often a completely acceptable place to start.

[1]: https://www.usenix.org/events/usenix99/full_papers/pai/pai.p...
Painted bike lanes are really unreliable, but otherwise that sounds like a great idea.

Most of the painted bike lanes I see in suburban Washington are painted in some of the least safe bike routes. There's a ton of bike lanes that are just painted along major thoroughfares with actual top speeds of 40 or 45 miles per hour.

They should really do it by speed limit and presence of features that obstruct car traffic. Streets that are a pain in the ass to drive on are the best streets to bike on.

Even some of the Bike Routes in Seattle are on roads that I wouldn't feel safe biking on because traffic typically clocks at 10 or 15 MPH higher than the speed limit around the curves on the route.
This is standard jargon for investors. The charge is to the company and a hit directly to their earnings.

Similar wording can also be used with respect to debt that will never be collected.

https://en.wikipedia.org/wiki/Charge-off
Not always though, for example here in Michigan [0]. At least around here some of the streets are NOT the kind you want to ride your bike on, and there's only a few pedestrians on the sidewalk (so it's not a big deal even if you stopped and walked your bike around them).

> Bicycles may be ridden upon a sidewalk, but cyclists must yield the right-of-way to pedestrians and are required to give an audible signal before overtaking and passing a pedestrian.

And to make it even more complicated:

> Further, official traffic control devices or local ordinances may restrict bicycles on sidewalks in some areas.

[0] https://michiganbikelaw.com/michigan-rules-of-the-road/