skysight-inc/HackerNews huggingface dataset:
I wasn't going into this with the intention of critiquing it, but, style-wise, this is a pretty difficult read for me. It seems extremely long, very repetitive, takes ages to get to the actual point, and then repeats the point over and over with little added. I think it would come across much clearer, with nothing lost, if you were to remove 80% of the paragraphs. If this is intended as an intro post for this website, I suspect a lot of people are going to start reading and stop well before the end, and not use the website again.

Others may feel differently; this is just one data point. I agree with the message, but to me it just felt like a tortuous route to get to it.
Farmers can learn anything. Still laughing over Mike Bloomberg’s instructions for growing corn “1. Dig a hole..”

Show me a guy who digs a hole to grow corn..and I will show you someone who has never farmed before.

Don’t need gray matter for that..
The author of this article is a 10x self-promoter for using a hotly debated precept to humblebrag about his accomplishments.
For those who are wondering what happened, an attacker loaded malicious JavaScript through some compromised third party library.

This isn't unique to cryptocurrency, although the permanence of crypto transactions makes it pretty concerning there. Similar Magecart type attacks have been stealing credit card numbers from websites including British Airways, Ticketmaster, or Macy's, right off the checkout page.

Most sites still would have no idea if this were to happen to them today.

That’s why I’ve developed Enchanted Security (https://enchantedsecurity.com/) - a client-side firewall that tracks the network requests and even blocks malicious ones. It’s like a network firewall but running on your users’ browsers. It can run on other JS platforms too, like Electron or React Native, which are commonly used for crypto wallets. Get in touch if you’re interested in learning more.
What do you mean? I asked because I constantly hear that running my own server is better and cheaper on HN, and also that running a server is really hard if you didn't grow up memorizing binders of man pages.
This was literally a five-minute exercise with google queries and Calca, so I won't be surprised if you're right. For this trip I used 991 air miles, vs 1177 driving miles.

Co2PerMile = 53 (for a plane)

AirTravelMiles = 991

PeopleOnAirplane = 189 (average passengers per plane)

AirTravelCo2PerPerson = Co2PerMile * AirTravelMiles / PeopleOnAirplane => 277.8995

VehicleGramsPerMile = 411 (average gas car)

DriveMiles = 1177

GramsPerPound = 453.592

Co2PoundsTrip = VehicleGramsPerMile * DriveMiles / GramsPerPound => 1066.4804

1066 is roughly 4x 277.

Or, very roughly, a plane is about 50 lbs/mile, and a car is 1 lb/mile, so it depends on number of passengers in each.

As for an electric car, they say an electric car is currently equivalent in emissions to an 80 mpg car, and the average gas car is 22mpg, so... about 4x.

So again very roughly, for that distance, air travel is better than car travel (in terms of CO2) unless you have a 4-person carpool for gas cars. If it's a one-person electric car, it's roughly equivalent.

Anyway still, the takeaway is that it's the travel distance that has the CO2 impact. Car vs Plane isn't really the point.

(Lemme know if you see a 10x error.)
Yes. “Serverless” is an overly strong term that means you don’t even have a dedicated portion of a server.
I'm disappointed not to see any consideration of "tons of freight" replacement intervals for roads versus rails.
The biggest problem of old companies is that even their cash advantage is getting less useful as their market cap is going down relative to Tesla's.

Tesla with its valuation can afford to scale up aggressively as long as it can continue decreasing manufacturing prices with Wright's law.
Hmm, are there any plans to solve this problem for mobile?
> is there a reason you need fast internet at home? now imagine being some place that isn't home.

My internet needs away from home are vastly different then at home, so I don’t understand how this is an answer.

> crushing poverty?

It is highly likely that the same poverty is going to prevent locals from using Starlink. Besides lacking infrastructure in large parts of Africa and Asia has often been the result of bad policy, or wars, not poverty (or poverty as a result of war). A lot of African nations are catching up on their infrastructure projects, and I see no reason why they will skip internet connectivity as they build up their infrastructure (given that most African nations have infinitely better policy—and a lot fewer wars—now then say 30 years ago).
this shouldn't be news. this isn't news
At risk of inviting ridicule, I went through a phase where I read everything I could find on the subject of UFOs. Jacques Vallee stands out as one of the most sober and interesting researchers on the topic. Some cases that I think are worth checking out:

* Colares, Brazil

* JAL 1628

* O'Hare airport

* Green fireballs, Los Alamos

* Black triangles in belgium

* Solyut golden sphere (maybe soyuz, I don't recall)

* Gordon Cooper

Controversial but compelling:

* Phoenix lights

* Rendlesham

* Ariel school

* Nuremberg 1561
Because there needs to be something for 330mil people to do and providing each other with more options for having a quality life is a valuable pursuit. We need doctors, engineers and a life outside work. Soda has its place as an entertainment and socializing drink.

Arguing against adtech and work are two separate things. Distribution of resources will always be controlled. Currency used to buy things is a method of directing resources to people who behave in a way that continues the system. What system do you think works better? I don't know what your goals are, maybe they are achievable without working for the man.
Careful not to equate the presence of false negatives with the absence of true positives. Just because there are accredited investors who were tricked doesn’t mean that there wouldn’t be even more unaccredited investors who could have been tricked.
Yes, and if a somebody is offering ad-clicking as a service, how is Google supposed to know who paid for the clicking?
Only makes DRAM and flash AFAIK. Huawei/HiSilicon needs a logic foundry for their SoCs.
> Those who enhance the security were never the targeted audience to begin with.

This is pretty insightful. Statistically, attackers are probably mostly looking for badly configured machines which are easy to exploit rather than hardened systems that take a long time to penetrate.

State actors and obsessed attackers are different, of course. But statistically even taking care of using the simplest precautions keeps one out of the reach of the broad majority of such attacks.
https://support.google.com/adspolicy/answer/7520318?hl=en

Locksmiths are now a restricted business as grey hat marketers figured it was an industry with a high ticket price and autonomous demand, and the search term was always "locksmith <city>" - so they set up sites that would flood the results, demand payment upfront for a call out, and then have a virtual assistant forward the business on to an actual locksmith in the city - essentially scooping hundreds of dollars for doing nothing but obfuscating who the real locksmiths are and forwarding the leads on them.
Uhhh no. The innovation cycle will be the only thing keeping us alive in +4C world we've locked ourselves into.
Yeah, but sometimes it gets you fired. Different company, different situation. Careful with this kind of advice.

People like to think that the world is this magical place where in the end you get what you deserve when you collect enough good karma and do the right thing, but it isn't really the case.
Proposal comments to post: all current and former FINRA and NASD license holders should be eligible as accredited.

A new unsponsored FINRA test for this specific purpose should be created as well (doesnt need to be in a federal proposal, just what can happen)

Finance and econ degree holders eligible too

I think this still sets the bar too high. There needs to be some way to opt out of the paternalism and take a chance in the securities market.

People are going to lose their shirts, just add a little disclaimer just like in public markets and on gambling posters.

Sometimes this will be an efficient allocation of capital for issuers that VCs dont share affinity for.
You can't create/edit firewall rules via apis in some vps providers?
I'm inexperienced, but relatively confident if I use an off the shelf login module to protect everything but the login page, the handful (literally) of users with creditials are internal to the organization and trusted with underlying the data anyway, and the data itself is essentially worthless to outsiders, I'm pretty safe.

My thinking is that even if I for example fail to sanitize inputs to a database or displayed to other users that won't lead to an exploit absent a bug in the off the shelf login module or someone attacking their colleagues (in which case there are other weaker links).

The organization I'm building this for has other moderately sensitive systems on an internal network, but the server I'll be managing will on the public internet. The site I'm building will export CSV files to be opened with Excel, so I suppose if the site I build was compromised it could be used to get an exploit onto a computer in the network. Still I presume if they're facing that kind of attack they'll have plenty of other weak links like documents spearphished to people and I'm pretty sure the sensitive systems are on a separate internal network.

Is my confidence crazy?
I work from home 1 or 2 days a week and am extremely comfortable with a 2019 MacBook Pro (15 in) and two Dell P2415Q monitors (24 in / 4K). I wish I had gone with the 27 in model but had limited space in my office.

My personal laptop is a mid-2015 MacBook Pro. For connectivity, I use both DisplayPort (DP) and mini-DisplayPort (mDP). DP goes to the 2019 MBP and mDP goes to the mid-2015 MBP.

I run everything from the latest MacOS to Windows 7 and 10 to multiple flavors of Linux via an unRAID box that pulls double duty as a media server. I've had very limited issues with driver support.

Very affordable and reliable solution.
Bezos commits $10B to climate change research
You guys realise that all crypto currencies can be programmed with rollbacks and shit using hard forks if they do find an extreme zero day exploit or something? The only difference between the decentralised ones and the centralised ones is that no one can actually stop a compromised chain from functioning while they deploy a hard fork.

You can wake up one day to a severe ECDS bug and bitcoin will have to rollback anything that gets compromised afterwards (assuming it isn't a bug that makes the scheme trivially crackable and hence invalidates everything from the genesis block) as they patch up the software. It's not an unforeseen problem. You have to rely on the fact that the attackers also don't compromise your media outreach capabilities so you have no way of informing the world that the chain is no longer secure.
For those interested in learning formally, there is an online course in Max/MSP available through the Kadenze online school:

https://www.kadenze.com/courses/programming-max-structuring-...
Train capacity is also sharply reduced during a downturn by stowing cars to keep prices elevated. Having an alternate option (an option with capital overhead that makes it more difficult to park during a downturn) will hopefully force more competition during those times.
Hey root_axis, I see you pop up pretty frequently on threads like this where people really don't understand the consequences of forcing companies to host speech and removing their legal protections if they decide to moderate. Personally I've seen the same dialog hash out so many times it's become exhausting to even reply to them.

I just want to thank you for continuing to fight for what's right.
Use CSS to style the same site for different device sizes
DC/OS is dead, Jim. Well, kinda. Mesosphere changed their name to D2IQ and is now supporting kubernetes.

You can, however install the banzaicloud kafka operator with only a few commands and very little config and yield a production-grade kafka cluster pretty quickly.

https://github.com/banzaicloud/kafka-operator
For a upcoming project we're using AWS Marketplace + Cloudformation in combination with the community edition of Chef Habitat to try to solve this problem. Once someone deploys the cloudformation template, it sets up:

- Email (SES)

- SSL certificates + renewal (ACM + lets encrypt)

- Backup + Restore (RDS snapshots + AWS Backup for EFS)

- ALB (if desired)

- CDN (Cloudfront)

- Firewall

- Auto scaling database (RDS pgsql serverless) with automatic pausing

- Auto scaling storage (EFS)

You can adjust capacity by just dialing up or down the ASG, and our Elixir app auto-clusters using the Habitat ring for service discovery. Packages are upgraded when new versions are pushed to our package repository. All binaries run in jailed process environments scoped to Habitat packages, with configuration management and supervision handled by Habitat.

This is a non-container approach, focusing on VMs. However, the theory is that this will be pretty much turnkey for a scalable self-hosted product on AWS, including software updates. It's hard to say how well the theory will fall out in practice, but I'm optimistic. Avoiding a mess of microservices was fairly important in making this kind of thing possible, we have a few services, with a dominant monolith in Elixir.
Oh, it was so futuristic! I was young and easily impressed. It was the last time for me that the present felt like a prelude to the future. A few years later and the progress of time meant little more than a constant dribble of new codepoints getting added to the emoji set.
> I have enough servers, adding nginx and certbot to one isn't hard.

I think this is key. If you have resources that are already serving things, the marginal cost of serving something else is low.

For a typical person not running servers for personal services, the upfront cost does not seem justified, when its so easy (and cheap) to setup and use the alternatives.
Static site? You can serve insane amount if static content with cheap vps box. Are people now only using so called serverless tech and forgotten how it works underneath all the buzz words? 5 dollar digitalocean box can serve double the HN traffic and more.
I always find apps like this bizarre. How about practicing willpower? The shortest answer between A (wanting it) and B (having it), is to just do it. And when you fail, non-judgmentally self-analyze and try again.
> Or you let people try to moderate them, have them filter out 95% of the garbage, and don't punish them for the 5% they inevitably miss.

Yes? That sounds great? That's how it currently works today?
Terminating after 1 offence, 2 offences, or n offences only changes how long a competitor / blackmailer / disgruntled former employee or ex-spouse / random bored idiot with a stolen credit card needs to continue paying for clicks.
The new business of AI and how it’s different from traditional software
20% is a relatively small move for most crypto currencies. I don't follow iota's price history, but I'd assume this falls well within 2 sigma or something (even assuming returns follow a normal distn which seems suspect for most of these assets).
This is hilarious. All this complicated and unneeded stuff for a static website. It completely misses not just a point but multiple points.

Maybe you want a static sites so that it'll 'live' forever and not be effected by future changes in software stacks. You definitely don't get that by doing this.

Maybe you want a static site so that it's simple to set up. It's not this.

Maybe you want a static site for security, all the complexity and accounts here make it less secure than a random site running random php.

This is just buzzword bingo for someone's resume.
I think the problems are mostly around configuration that is so complex and redundant that we need programmatic abstractions to deal with it—we need something like a general purpose programming language to DRY up and simplify that configuration, but the powers that be are clinging desperately to YAML (despite encoding a shitty, half-baked AST on top of it a la CloudFormation or “generating” YAML with text templates a la Helm) as the human/configuration interface presumably because the “it’s as easy as YAML!” is such a good marketing schtick.

A certain amount of configuration complexity will always be there, but there’s still a lot of incidental complexity that could be cut away if we just generated these config a with a general purpose language.
Apparently Keystone did/does something like that.
Yeah almost every brokerage provides access to historical exchange rates
Infographic: Coronavirus-impacted economy brings opportunities to tech sectors
You're missing my point completely.

When the complex system of people and laws and org charts and incentives and procedures that is the organism known as Google makes a decision, whether or not a particular decision is virtuous or not is insignificant.

Even if it was, trying to change their behavior through occasional social interaction is as unlikely to make Google provide good customer service as brushing your teeth without water is unlikely to fix California central valley aquifer depletion. There's a system that rewards Google with billions of dollars and a system that sprays water into the desert that you're fighting against. Ignoring that system, and advocating that people pour emotional effort into ineffective responses, is so unhelpful as to be counterproductive.
The technology driving an over-architected job board site
A platform offering you more of it's own services feels distinctly different from a platform selling your data to advertisers or displaying their ads. Does Win10 still have casual gaming ads in the system menu?
If you stop using Twitter you stop being able to communicate with people using Twitter. There are many organizations who would love nothing more than to stop using Twitter, but they cannot because Twitter has a captive section of their audience. And it is a huge section of Wikileaks target audience, which is why this is a problem.
There's literally millions of college students in that position every year. Its absolutely not common for most of them to start _a_ successful business, let a lone several. I've worked at companies who had far more money, more connections, and more advantages, that ended up with less. OP's an outlier irrespective of their advantages.

> the mental and physical degradation that starts as early as your mid-twenties

Degrading in your twenties (in any meaningful sense) is _highly_ atypical.
I find that I am a 10x developer when I compare myself to other versions of myself. I have had days where I honestly feel bad because I got almost nothing done, and other days where I get a ton done.
If I was able to correctly channel my focus and effort, I would be 10x then I used to be.
Now sure, maybe the time spent not as focused allows me to have those bursts of productivity.
Pollution processors (from Master of Orion). I think the closest thing we have to them are carbon capture plants, which are pretty cool too.
https://news.ycombinator.com/item?id=22350209
There are countless examples of products that help people who can't "just do it". Nicotine patches, non-alcoholic alcohol, direct deposit savings programs, exercise buddies, etc. Everyone needs help, everyone has weak points. No shame in using technology to assist you in one of the hundreds of points in your day that require willpower.
"Any flying object is a UFO if you're bad enough at identifying flying objects."
I wrote a twitter thread on the key points on the article: https://twitter.com/stormtroper1721/status/12295782794320199...
Any statically types, general purpose programming language would do the trick—just generate YAML. I’ve been playing with typed-Python and it works really well. The only issues are that Python’s type system is pretty immature (can’t represent JSON, can’t constrain generic types to a particular interface/protocol a la Rust traits, type annotations in a class share the same namespace as member variables, etc). I would like to try Go for this, but it would be a fair bit more imperative.
I hope this is satire, but I’m not sure if it is.
I'm within line-of-sight of Google HQ (I can literally see their campus from my porch, less than six miles away) yet my only wired internet option is AT&T DSL. Comcast offered to add my home to their network for a paltry $22,000. I look forward to Starlink creating a universal competitor even if I'm not a customer. It'd be even better if rockets needn't be involved in creating a competitive marketplace, but that doesn't seem likely.
> the IOTA Foundation shut down "Coordinator,"

If a single org can shut down a cryptocurrency, you might as well use PayPal.
I wonder if the analogy "software architect" isn't being stretched too thin.

What are the essential or characteristic traits of the architect as a professional and of architecture as an enterprise that translate or have direct equivalents in the software world? Are trained architects expected to be better sofware-architects than trained physicists or... chess masters?
That's actually similar to what my other co-founder told me when I tried to make this! It turned out, however, that our own willpower can be supplemented by tools. For example, sometimes I don't realize I've been on Twitter for 30 minutes - and as soon as I'm made aware of that, I leave. I think often times, it's about awareness rather than being forced by a piece of software.
CIA Programmer Culture of Nerf Guns, Office Drama
Let's go another step. Move parsing into a mandatory class on automata theory, where you can properly dig into the machine models underlying different parsing algorithms.
So because you made it despite the odds everyone else has to live or die in a Mad Max free-for-all?
You Stole My Heart and You've Been Served
Show HN: A website for connecting Founders and Investors through Fortnite
Is there a chrome plugin that prevents this?
"decentralized"

> the IOTA Foundation shut down "Coordinator,"

FIFY: centralized
I never though of the red dot around on my service menu (get iCloud) to be an add. Now, I’m pissed because it is exactly that. I still have a Gb free, why is it notifying me that I need more space. I will never use that space.
And different countries are being fed different narratives, which is why discussions are so polarized and volatile.
Agreed; it's definitely not trivial. We will definitely tackle mobile very soon, and this is a potential solution. Thanks!
It could be:
-1920x1200 (WUXGA)
-2560x1440 (WQHD)
-2560x1600 (WQCGA)
Your guidance is true. However our industry is unfortunately also littered with well intended refactorings that resulted in any more bugs, feature changes, and customer impacts than the original developer intended, or even conceptualized as possible. So it matters a lot.

For example, refactoring "to provide abstraction so future work is easier" is 90% of the time an error.