skysight-inc/HackerNews huggingface dataset:
The likely result is that two year certs will just cease to be available, even if other clients don't decide to make an equivalent rule.

And yes, the de facto standard is that for the general purpose web you can't sell certificates based just on, for example, getting an OK from Microsoft (whose trust stores includes a tonne of governments and government agencies whose inclusion a cynic might assume is not coincidental to those governments agreeing to purchase Microsoft's products...) because those certificates don't work on an iPhone or in Firefox or...

The relationship that is symbolised by the CA/Browser Forum has always been asymmetrical like this, it was this way before the CA/B Forum was created, and if the two groups aren't able to reach common ground the CA/B will just gradually go away.
Reminds me of the classic "Wheel of Reincarnation" paper: "On the Design of Display Processors"
http://cva.stanford.edu/classes/cs99s/papers/myer-sutherland...
Dunno, but if you're going to do that you pretty much might as well turn it into a CHP setup and use the waste heat to warm the greenhouses as well.
ab is broken by design.

wrk, h2load, boom, vegeta are more sound load testing tools.
They're hardly useless, and if the current virus is killing the same percentage of people as the 1918 flu despite all of our medical advances, that's a strong indicator the current virus is significantly more potent, which makes the blithe assertion that "the mortality rates aren't all that high" even more dubious.
Yeah, this is the email that a lot of the Quora-esque answers have. The product I put in my OP is still up with the reviews, despite sending a message containing the link + evidence to that address. I was hoping for a way to reach out to a real human being, and it doesn't seem like that address is the way to do it.

But thanks anyway.
Sorry if this is offtopic, I was planning to buy a Google Pixel 3A from Amazon in a week (It's cheaper than from Google Store). Are mobile phones also forgered on Amazon? or they don't aim to forger stuff like that? Thank you. (I am from a 3rd world country and travelling to USA next week)
With Let's Encrypt it's cheaper than ever to host a personal website over HTTPS with a certificate that updates itself.

Due to Let's Encrypt, free hosting services like Netlify or GitHub Pages are now providing HTTPS certificates and installing it on your own server is pretty painless, if you're into managing your own server. And if your hosting provider doesn't support Let's Encrypt, you can always put Cloudflare in front of it.

So I don't really understand what you're talking about, when the price and ongoing maintenance of HTTPS certificates has gone significantly down for hobbyists.
Maybe those goals are more mainstream than you think (such thoughts don't lead to top comments, however).
The Electronic Symphonies of Video Game Scores
On the theme of visualizing audio, Audacity has a built-in Spectrogram.

https://manual.audacityteam.org/man/audio_track_dropdown_men...

https://en.wikipedia.org/wiki/Spectrogram
I suspect that there are exemptions from licensing restrictions for military applications. But I'm having no luck finding anything except re driving.
Hi, thanks for the reply.

As I mentioned, I use milestones the way that you envision epics right now. I group all issues that somehow belong together, for which I want to track progress (and burndown/up over time) in a milestone. The milestone detail view is perfect for this.
It has a description, a timeline, start and end date, unstarted, ongoing and finished issues, etc.
All they lack to be even more "epic-ish-ly" for me would be a comment thread (as issues and epics have).
Essentially, we use milestones as a well-integrade epic-surrogate, while compromising our ability to perfectly track progress on the current sprint (which will probably be resolved soon, with multiple milestone types and multi-assignment).

Also, a way to drag issues into a sprint milestone would be great. (Unless the issue list reflects the priority sorting that is established in the open column of unfiltered boards by dragging issues up and down, then a multi-edit would suffice).

For disclosure, we are a team of ~10 developers working mainly on a single project within a single group. So, switching between the 'group' and 'project' views is not something we do often, since we plan mainly for the project that we work on. So, we barely have visibility of the 'Epics' view in the first place (in fact, when we upgraded to Silver, I didn't even know where to find Epics).
I think that I'm also lacking something that screams "CLICK ME TO GET TO THE GROUP THIS PROJECT YOU ARE VIEWING BELONGS TO" other than the breadcrumbs. At least I am _always_ looking at the sidebar first, then using the top navbar (completely ignoring the breadcrumbs, every time)

Anyway, integrating epics with milestones seems difficult.
I think a first great step would be to be able to assign a milestone to an epic (i.e. epics belonging to milestones). That could have two immediate effects: The milestone inherits due and start time from epics, and the epics and sub-epics automatically inherit assignment to that milestone.
This presumes my view that milestones progress when epics belonging to that milestone progress, and epics progress when sub-epics or issues belonging to that epic progress.

This, combined with the ability to have boards for epics, as I have boards for milestones right now, would probably suffice for me to feel comfortable with using epics at all.

But, I doubt that, even if the aforementioned is implemented, I will get to see the features since I assume they will have Gold-level pressure on infrastructure (they are similar to some of the features that multi-level epics currently implement, and those are gold-level, too).

Since I'm already in the flow: A really funky feature would be boards that are scoped to Milestones. I.e. not boards filtered by Milestones, but boards that belong to a milestone and not to the project. Currently, I have a board for every milestone (our pseudo epics) with our column workflows, and the ritual of creating that could be avoided and made predictable.

In any case, I'm waiting patiently, and observing the gitlab-org epics.
> Solar is very geographical

No, it's not. As already pointed out, Germany is full of PV, even very large systems.

Deploying solar systems everywhere is very important to decentralize energy creation (and in the future: energy storage). The future of our electrical systems lies in decentralized systems, to minimize the need for huge infrastructure to get power from A to B and also to "harden" the grids against failures.

So, it's a good idea to have solar on every house. And if it only takes care that your fridge is running on "your own" energy from the PV system that's a good start as well.
Swift on Windows is much needed.

I’m working on a Swift Cookbook on Github.

https://github.com/melling/SwiftCookBook/blob/master/README....

Swift is the kind of language that you can master the basics in a couple days, assuming you already know how to program.

It has some functional features built in too:

https://github.com/melling/SwiftCookBook/blob/master/functio...
The use of PRs ties you to Github. That's the biggest drawback.

While it's easy to solicit random PRs, the workflow is IMHO unintuitive for new Github users to discover (just my opinion) and the quality of random PRs tends to decrease with ease of access.

IMHO the whole code review thing is overly formalized for anyone who is not a 100% distributed team.
HashiCorp stack is pretty good for this.
Having PoE powered devices often lets you place things in more creative locations, than the need to put things near an AC wall outlet. In certain cruise ship cabins I imagine that optimal placement for wifi signal may not be near where the wall outlets are located.
> E.g., not only do emulators introduce lag, also modern systems tend to be laggier than vintage ones.

Some emulators have run-ahead now, which removes internal processing frames from games. Combined with an adaptive sync monitor, 1000hz USB polling, and other tricks, emulators can actually respond to inputs faster than the original gaming consoles did on CRTs. It's pretty much the closest thing we have to magic.

Here's a video demonstration I made: https://www.youtube.com/watch?v=1AvOa8yt6Vc

An an article of mine explaining the concept: https://byuu.net/input/run-ahead
You can ignore an error in Go simply by ignoring its return value. Sometimes it's difficult to tell a foot-gun and land-mine apart.
Should be 1994, not 1984
What a great time to be alive for music electronics hobbyists! When people say immortality would get boring I just think of all the things I could add MIDI to for centuries.
Non-production environments are useful for more than testing application code. Changing underlying infrastructure (Upgrading a database, networking shenanigans, messing around with ELB or Nginx settings) requires testing too. Having the same traffic / data shape in pre-prod is not as important.
I stopped reading when the author started trashing linked lists. If you don’t like linked lists, just say so instead of stating a lie as a fact.
It's not difficult to fix. It's just that corporations want you to throw out and buy a new phone every year. This is what happens when you let the same company make the software and the hardware.
I have left old phones plugged in because I used them with wifi in the workshop. More than once I had to quit using a certain phone because the bulging battery started getting hot.

Granted they were 5+ years old but its there.
What Makes Food Tech Different
What can be done to reduce the bounce rate for a website?
Well, if you look from the outside, the USA seems to have a huge problem with the construction of houses in general.

Start building houses out of bricks and mortar. They will last for a century, provide shelter to your children and grandchildren and in that case, 10k for a solar system do not really make much over the time.
Again, that and the nascent optic fibre industry was killed by government regulation.

The Conservative government of the time decided that they wanted to open up the cable tv market.

They didn’t want the incumbent BT dominating the market so they banned them from carrying TV services.

No TV, no products requiring fibre to the home.

BT quietly dismantled all of the infrastructure they’d put together to manufacture fibre products. Like Europe’s largest cleanroom for instance.

The market ended up split between two foreign companies, Telewest and NTL, using coax.
A barn might have a lot more surface area compared to a typical home...
Calling your coworkers "incompetent" in the second paragraph is.. a look. Especially when talking about false dependencies and over-engineering an MVP. A complete lack of pushback from engineering will lead to teams taking a dependency on engineering building the whole world, but this problem isn't just a "them" problem - pushback on expensive asks is a necessary part of business.
Yeah, being able to do structured queries quickly is the key. I don't think Elasticsearch is actually that great at that; it really feels designed for fulltext searches and suffers in terms of speed when dealing with the semi-structured nature of logs. (Overall, the cardinality of log messages is not as high as you'd think, but ES doesn't know this.)

I also agree that operating your own log search is kind of a pain. Often the node sizes are much larger than what you're using for your actual application. I wrote a bunch of go apps and they use 30MB of RAM each, then you read an article about making Elasticsearch work and find that you suddenly need 5 nodes with 64G of RAM each... when you can fit a week of log data in just one of those node's RAM. It's hard to get excited about paying for it when it's your own node, and it's even harder when someone else offers it as a service (because that RAM ain't free).

That is why I like some sort of mapreduce setup; you can allocate a small amount of RAM and a large amount of disk on each of your nodes, and these queries can use excess capacity that you have laying around. When your data gets big enough to need 320GB of RAM... you can still use the same code. You just buy more RAM.

Basically, the design of Elasticsearch confuses me. It's designed to be a globally-consistent replicated datastore with Lucene indexing. How either of those help with logs confuses me. You write your logfile to 3 nodes... if one of them blows up, now you only have two copies. A batch job can get the replication back at its leisure, if you really care. But in all honesty, you were just going to delete the data in a week anyway. (If you're retaining logs for some sort of compliance reason, then you do probably want real consistency. But you can trim down the logs to the data you need in real time, and write them to a real database in an indexable/searchable format.)
Gutsy for them to write such an article when they rely so much on affiliate links. Definitely makes me respect The Wire Cutter much more.

Maybe does their article imply that as long as you purchase through their recommended links you'd be safe(er)?
Well there's your first mistake ;)
Have to second this. ASP.NET Core is awesome. Probably wouldn't try to learn it as a first web framework (Django or Rails are better at this), nor is it quite as batteries-included as those other two, but it has a very "grown up" feel to it I like.

Relative to other frameworks, ASP.NET Core is sort of like the tooling maturity of Java (great editor/libraries, rock-solid VM, everything typed and static) combined with the simplicity / "start from scratch" feel of Padrino, Sinatra or Flask, with the expressiveness of a really nice language with type inference, good functional primitives (e.g. LINQ). You can probably serve hundreds/thousands of customers on a single Heroku dyno or three due to extremely robust non-blocking I/O, faster code execution, and much better memory management than Python/Ruby.

Give it a shot. I really like it.
It's not ugly, it's beautiful.
This hasn’t been my experience. I’ve been involved in the language and community for nearly a decade and I’ve never seen an incident where the grievances against the language weren’t seriously overblown. The most credible one has been dependency management. There’s still plenty of room for improvement of course, but the idea that Go’s flaws make it anything short of one of the most productive languages is generally nonsense.
I mean, ms has released net core 3.0 (fully open source), blazor, and ml.net. F# has always been open source. They also made private repos free on github, released vs code, released zero and deepspeed for pytorch and published the state of the art NLP model along with it. So I'd say your circles probably have a justified chip on their shoulders from the old days.
Maybe he likes writing blog posts about how goroutines behave at scale ;)
That would be quite the dystopian interview nightmare.
For the latter - that's because I can find better domains than the ones on your front page for free by looking at expireddomains.net every so often. Also, many have given up on .com, in which case they may use something like park.io for a shot at prime singleword.io domains.

Domains are a tough business.
Digital Business: How to Compete and Remain Competitive?
First question: How much of the cost of a house is the cost of the land, and how much is the cost of the construction?

Second question: if the PV is part of the construction, and not bolted on afterwards, what can you save?

Third question: given that these save money and are a net economic win after a decade even when they are bolted on as an afterthought, even if the answer to #2 is “none” and even if the answer to #1 is that purchase prices go up rather than land owners can’t sell for as much, surely it’s still a win?
There's a follow on question that I'd like to raise, which is: "Are you rich enough to care"? In the race to the bottom on prices, it becomes a mark of wealth when you have the time and money to verify your own purchases, or to shop at more reputable retailers. I'm in that category, but could easily see myself being too cash strapped / too busy to do anything about a fake product being shipped to me from Amazon. I'd probably shrug.
If multiple sellers sell the "same" item and use amazon as warehouse, they can be binned together and you get one at random from any one of the sellers no matter which one you actually bought from.
> fad overpriced gloves and toothbrushes.

That description is unfair.

Regardless of whether the product is overpriced or fashionable, I want the correct product, without the shortcuts taken by a fake: unsafe paints, plastics etc.

I don't mind "Philips-compatible" brush heads being listed, but the description should be clear.

Otherwise we may as well repeal all trademark, copyright and product safety laws.
that's a good point. I guess healthcare has a uniquely complex interplay between insurance payout and actual billed cost (eg, your car insurance does not negotiate with the mechanic for you).

I'll rephrase my statement. medical insurance/billing is too complicated to reasonably expect a doctor or patient to fully understand. this being the case, there should be someone working at the hospital/practice whose job it is to actually understand this shit and give me an estimate at each step of the process. doesn't really fix the underlying problem, but at least then I could make an educated choice between receiving care and being able to afford retirement.
I've been relying on the command= syntax of .authorized_keys to restrict what's possible, but I'm not 100% confident in that being impervious to intrusion should someone get access to the on-camera SSH tunnel private keys.

Wireguard is somewhere on my mental todo list for possible replacement of these tunnels, but they do the job and SSH is going to be listening either way to admin the VPS.
Genuine questions as someone with no experience in dealing with large sclae log aggregation: Can you share some details on what kind of issues you ran into in production with Elastic Search that needed a dedicated team to manage ?
> EDIT: Hmm, according to another comment here, some CAs will offer to generate both halves of the keypair for the end user. Yikes.

I wasn't able to find this comment, but perhaps I didn't look hard enough?
EDIT: Wait, I think I found it. I will reply there.

In the Web PKI this is prohibited but there are or at least were resellers who'd offer this service to their customers. You should not use this service of course, and some CAs have pledged to tell their resellers not to offer it.

In S/MIME it's more common because often the end user is both technically unsophisticated and not given real control over their client in order to mint their own keys anyway. But S/MIME is... probably not important, certainly it isn't what Apple's change is about.
You can but only in the repo itself not on a site wide scale.
at the risk of upping the amazon paranoia (which i think is valid but blown out of proportion), i also had a little fake product issue recently with amazon.

i had bought two glass (kitchen) storage jars a year ago and decided in november to order one more. the new one was about 10% smaller with slightly different markings, just similar enough that it wasn't noticeable on first glance, but was obvious when placed next to the other two jars.

initially, i assumed it was a warehouse mix-up, so i requested a replacement. the replacement was exactly the same smaller jar and not the original. mind you, the original was already a chinese-made & branded item. the replacement was a cheaper knockoff of what was probably already a ridiculously marked-up import. luckily it was only a minor hassle to return both and get a refund.

i'm not a big amazon shopper and avoid their own electronics like kindles and echos (don't need more plutocratic surveillance in my life), but for anything of (at least moderate) value, i'll sometimes double-check against photos on amazon and manufacturer's sites. fakes have generally not been a significant problem for me.
I too learned that the best way to get your problem solved with Amazon is to resort to threats. It took ages to get my account closed -- I was sent by 5 different chat agents to the same "click here and send an email to confirm" page -- until I threatened to complain to the California Attorney General under CCPA. Then suddenly the agent had all the power in the world to close my account.
I don’t know why you’re accusing me of having an entitled attitude. I worked to develop two of the largest solar power stations in California. And I happen to know that utility-scale solar makes a hell of a lot more sense that rooftop.

If you’re worried about pollution tax the emissions, like any civilized country would. Mandating rooftop solar is way too indirect and exposes the public to corruption of the construction trades. Of course, that’s why the parties that stand to benefit from the corruption are going around the country pushing these laws.
A lot of those bad WebAssembly decisions are carried over from Emscripten/Asm.js and don't have any real rationale behind them beyond that.

Obviously, since JS doesn't support arbitrary control flow, Emscripten/Asm.js would need to convert to some simplified form of control flow (although not necessarily fully structured). It seems that this solution was carried over to WebAssembly without much deep thought given.

There does seem to be some backwards association with Java's bytecode verification complexity issues (which are the result of a bad design, not unstructured control flow). In the big GitHub Issue (https://github.com/WebAssembly/design/issues/796) on the topic, one of the core V8 developers even claims that the Java experience justifies the WebAssembly decision. However, the funclets proposal for WebAssembly (https://github.com/WebAssembly/funclets/blob/master/proposal...) shows that you can support arbitrary control flow with linear time verification if you choose a different design than Java.
"Getting the fake gloves removed from Amazon can be a long process, Hirsch said, taking weeks or even months of playing whack-a-mole with counterfeit sellers"

That's the brand owner saying that. I'd love to see an Amazon response to that.
It is really hard to interpret this. Opening the windows doesn't make the chemicals flee to the walls to wait out the exposure, or stop outgassing from surfaces. It seems like what matters is how long you leave the windows open, but it doesn't say how long they did. There ought to be a half-life of the surface reservoir for each chemical. They should say what they found it to be.
I'm not accusing you directly (that would be rude), but the idea in general when someone says "this makes housing more expensive!". It doesn't make the total cost of ownership more expensive, but it does front load some of the energy costs while still being cheaper in the long run for the homeowner. In some jurisdictions (California, the sixth largest world economy), it's been deemed a reasonable policy strategy.

Utility scale makes sense, but so does rooftop solar at scale (if you can streamline soft costs; permitting is unnecessarily expensive AF in the US versus someplace like Australia). A pollution tax will take time to implement, if at all tenable in American politics. Unfortunately, indirect methods are needed at times due to the political landscape. I will take a decent solution today over the perfect solution when it's too late.
Sure you built app on multi 20 core machines with functionality to search hundreds of millions of lines of code almost instantaneously, but are you someone I'd drink a beer with?
Jeez man their mission wasn’t to solve world hunger or bring peace to the Middle East. It was a credit app that refered people to credit products. They sold to a financial company. Seems pretty consistent.