skysight-inc/HackerNews huggingface dataset:
Perhaps it sounds a bit odd, but in most business settings, I'd rather be paying double and have service like this than be paying half without that customer service.

Generous policies like these avoid headaches, and headaches are much more expensive than machines.
I've never used them myself, so in all honesty I have nothing to say about them! :p

That said, I support free software and I believe a proprietary compiler is not a good idea :(
What I do: Write pure functions, but don't shy away from mutating lexically scoped state in order to improve performance. For global stuff, wrap it with classes since objects are a commonly understood way to reason about state.
I wonder if we’ll start to see Comcast and other large snooping ISPs start to filter the resolution of this domain in the name of stability...
It's ambiguous. "Not supported" might mean "we aren't going to write APIs in that language, and if you manage to hook in via FFI we don't promise stability. Also, since Fuchsia is security oriented, it probably will block various low level tricks for accessing system resources that don't use official APIs.

Reading between the lines, it seems Dart isn't better than Go from a performance perspective, but Dart is great for UIs so it is worth paying it's cost on an embedded device.
Bitcoin’s Race to Outrun the Quantum Computer
https://support.mozilla.org/en-US/kb/canary-domain-use-appli... You can use this if you run a DNS server
My girlfriend's first "Free Tier" hosting build was $5200 for ingesting a single document on Kendra. After nearly a month of working with the service team she was able to get the bill removed (even the service team did not know how to delete the app). Its insane that an overage charge on a "Free tier" service can be the price of a used car or multiple months of rent.
I'm not down on encrypting DNS, I'm down on moving DNS from a network/system level to an application level.
Thanks, I did read the article. I clarified my post with an additional point.
Socratic vs. Euclidean Forms of API Documentation
With k8s, you just create a service of type NodePort and it assigns a free external port for that service, which is mapped back to a specific port in the Lisp container.
Doing it once is R&D. Doing it multiple times is a service. Having the capability if it's needed for something more valuable? Priceless.
AWS blog on Firecracker, November 2018 (source: https://aws.amazon.com/blogs/aws/firecracker-lightweight-vir...)

> Today, Lambda processes trillions of executions for hundreds of thousands of active customers every month. Last year we extended the benefits of serverless to containers with the launch of AWS Fargate, which now runs tens of millions of containers for AWS customers every week.

> Battle-Tested – Firecracker has been battled-tested and is already powering multiple high-volume AWS services including AWS Lambda and AWS Fargate.

That doesn't sound like a half-finished incubator project.
Outside of k8s, which I'm not familiar with, ssh can do port forwarding.
Seems relevant to the discussion...

> There is no bigger achievement than waking up before 6PM every day. That's why it's important that we get up early & get things done earlier than 6PM, otherwise we'll fall into routines that make us miserable & unhappy.

https://twitter.com/real_human_vc/status/1231451118430904320
> Microsoft has lots of state-of-the-art dynamic and static analysis tooling for Windows.

Right. If you look at the linked article, the Microsoft Engineer claimed 70% of security bugs in Microsoft products are caused by memory errors. Does Microsoft apply the same tools to all their products or only Windows? Do these tools even exist for other products?

> A bold claim to offer without evidence.

If one writes a new C++ program, tested with > 75% code coverage, tested with valgrind, the program passed coverity checks and clang static analysis, and they followed the best practices for hardening the host kernel, and told me that they still had an exploitable memory bug, I would be surprised. Notice that performing all those steps is still less effort than learning Rust and building the program in that. And you’d still have to harden your kernel and test anyway.

The evidence? NGINX and Linux is written in C. If the situation was so dire, why isn’t every computer in the world compromised right this second?
It's in the blockchain space so it requires deep technical knowledge (or trustworthy social contacts with strong understanding of the space which is basically impossible to find right now with all the noise and scams) and some understanding of economics to evaluate different nascent decentralized business models. Most blockchain projects just waste money and are backed by nothing with no real strategy to generate continuous demand for their tokens. It's 99% speculation right now but investors are throwing bucket loads of money at wasteful projects simply because they're already valuable.
Experion receives ‘2020 Software Companies to Watch’ award
Since the very beginning AWS has been an adversary to their own customers.

Either you invested your time/money in deeply knowing their ins and outs ( And you're fine spending your life that way ) or you're just a cog inside someones else's big wallet and don't care.

If you're not a big corp or don't have VC money to burn, there are much better options than AWS. The feeling of not getting f"#$ed over every step of the way is priceless, Azure is barely any better.
Something similar happened to me (https://twitter.com/Citationsy/status/1156626811398307840) when I posted a link to Sci-Hub on my blog. In the EU it’s apparently copyright infringement to link to copyright infringing URLs.

I ended up removing the links because I didn’t want get into more legal trouble with Elsevier. More details here: https://news.ycombinator.com/item?id=20606362
That's not unlike a lot of other companies --- if you complain they'll be nice to you, but otherwise they'll eat all they get.
So far no vaccine has ever been developed for a human coronavirus. That includes SARS-COV (2003), MERS and the two common cold coronaviruses. So I wouldn't be counting on a vaccine being developed for SARS-COV-2 any time soon.
It's worth pointing out that Monzo and Starling are bona fide banks with UK banking licenses, with the legal protections and deposit guarantees which that entails.

Revolut and TransferWise, like PayPal, are not.
Ohh nice. Very LCARS-y!
Since we're on anecdotes: I've interviewed people who wanted to leave Google because they were bored of not having any interesting work to do.

If you truly believe that "no one is writing basic CRUD apps at Google", then their marketing has been incredibly effective and explains why their interview process remains the way it is
Sure but a lot of that still ends up on github (or so.) The feeling I get with chemistry is that these journals are their equivalent to our github.
"This site" as in ctvnews.ca? That fragment is quote from Chinese state media.
Thanks for the fset link.

I understand your comment as a bit judgmental, if not rude.
Please keep the tone friendly, it helps if we want to have constructive discussions.
I'd be happy (as well as everyone around here I'm sure) to discuss what you find questionable.
I'd guess that the overwhelming majority of Mozilla's users do not have a "network administrator" looking after issues like this for them. All they have is an ISP, and the ISP is not on the user's side.
Sure, I know general techniques and k8s-specific ones (and have used production SSH-to-programming environment REPLs with twisted). I’m asking partially because my job these days is to secure setups like these :)
Its possible in the London to get close-ish to these crazy US salaries, you just have to join a Silicon Valley based company with operations in London (e.g. FAANG, and a few others)

Source: I did that, and my comp is around ~£120k + options (unsure how to calculate the value of them) for an L4 engineer

My previous salary was £67k...
https://en.wikipedia.org/wiki/Neobank lists two US companies. Interestingly enough, it doesn't list Revolut, even though I think it qualifies.
Agree with you that the emphasis on UX has driven a ton of use.

I'm also afraid to think about how folks will react to the next crash.
>(1) I'd like services like RDS or similar on a pay-as-you-go fashion, rather than based on spun-up servers. I'd like SQL-as-a-service where I pay for actual storage and operations (without dedicated machines).

Seems a somewhat hard problem due to latency constraints and advantages of memory caches. For big data you have AWS Athena and Google Big Query. There's also auto-scaling if you're large enough of either read replicas (AWS Aurora) or the whole thing (Google Spanner).

>and be able to track what I'm paying.

Amazon does provide a nice billing dashboard which updates what you're going to pay throughout the month. Telling you ahead of time what the price will be per month of something would be nice.
This logic makes no sense to me. Can you imagine if AT&T or Spectrum made a statement like this?

The “network administrator” is an untrusted 3rd party who should have basically 0 say in how my device operates.

The device administrator, ie the owner of the machine, is the one who should have the final say over when DoH is used. The use-application-dns record is for businesses that want an easy way to stop DoH on machines they administer. If random “network admins” start deploying it as you say then Mozilla will have no choice but to ignore the record entirely.
You have twenty different applications using DoH for “increased security” and you need a custom profile for each? Why not a single line in resolv_doh.conf?
Yes, if you press the network and proxy settings in the preferences page, you will see a DNS over HTTPS setting. You can also use this to set your own resolver in case you dont trust cloudflare.
I started with a combination of Raspberry Pi + Pi camera running motion - and then moved towards Ubiquiti with their PoE cameras and their NVR software.

This was when their NVR software came as a Debian package, and was well supported. It meant I could run up syncthing against the local instance to (near) instantaneously share new videos across from my remote network, on a satellite connection, back to my home network.

Ubiquiti now appear to have abandoned support of the run-your-own NVR approach, and instead are pushing dedicated devices, which remove a lot of the flexibility to use them as you see fit. Their motion detection is also done within the NVR, not the camera module itself, so you need an NVR close to the camera(s).

I mention this as the price in Australia for the entry-level Unifi camera devices is about the same as a raspberry pi + camera + microSD card. Power consumption will be higher with the latter, but the tradeoff is that it's a proper GNU/Linux host, not just a blackbox appliance.
I was a big fan of ReiserFS “back in the day”.

While many are no doubt aware of the trial and conviction for his wife’s murder, I find that almost nobody is aware that a successor (Reiser4) was also in development: https://en.wikipedia.org/wiki/Reiser4
You have signed up on HN just to defend your employer, right? Please tell us about yourself.
You have to rush to disseminate it. If you don't, the topic drops off the front page and eventually it gets locked. Hacker News has many pros, but it doesn't exactly facilitate slow, careful and thorough discussion. (Old fashioned mailing lists might've I guess, but I'm not aware of any contemporary platforms that do.)
Shining a Light on Shadow IT in Data and Analytics – Episode 121
I know of NodePort, but last i checked it’s a low-level constrict that doesn’t do anything like, say, authn—so that doesn’t seem like a complete answer.
If you haven’t done so already, get a Popsocket or similar device and give it a solid week’s chance.
Fascinating. Any reputable source you recommend for someone like me who wants to understand vertical spreads better?
Reducing the Friction of Embedded Software Development with PlatformIO
For immutable data structures, there is this helper library which can help: http://quickdocs.org/immutable-struct/
No more so than expecting westerners to be scared out of all the dangerous things we do.

Even to the extent that most of us don’t smoke or have lots of unprotected one night stands with strangers, there’s enough who do that they and their illnesses are still a major part of our health systems.
> The Raspberry Pi also has Pi-Hole installed which I configured to block all IPs and domains being used by the IP cameras thereby limiting its access to local network only.

You might have to be careful here. My understanding is that PiHole is just a domain lookup blocker so it won’t block a device which phones home with a straight IP address.

Happy to be corrected.
Are you aware of any memory-leak issues with fset? I once used it in a game where I updated an fset sequence in real-time. I let it run for a while, after coming back I noticed my computer was completely frozen (out of RAM).
Here are the instructions to do it, straight from Mozilla: https://support.mozilla.org/en-US/kb/firefox-dns-over-https#...
I prefer Digital Ocean, at least I know what it will cost, and working with the product is straightforward. Even huge company like the one I work for gets stressed out over bills when we do anything new with AWS (our budgeting process is scary too). At least they usually will help us out when things go wrong given how much dinero we give them.
Not sure what they used, but even a Raspberry Pi + a Pomona clip will do the trick. Have a look at the flashrom wiki, see https://flashrom.org/ISP.
The overhead of setting up and using an https connection is massive compared to DNS which can fit in a UDP transaction.

Do they establish a connection and leave it open for a long period? Supporting that would be a big commitment on the part of the resolvers.
This is addressed in TFA: The fact that there are multiple problems and solving any one of them doesn't help much until they're all solved, should not be an excuse to refuse to solve any of them.
>slow compile times

Since when is C slow to compile? C++ is worse but the abuse of templates combined with the header system is the primary cause of the problem, not manual memory management. Just look at the include tree of a conventional application. Even a moderately complex file will only have around 100 included headers in total but once you add boot filesystem you will suddenly see 1000 headers being included into your project into every single file. The header system is necessary because the compiler has to be aware of the sizes of all data types but this can be avoided with the pimpl pattern which again does not require a GC.

The downsides of garbage collection can't be understated. A GC globally influences the entire application including sections that do not use the GC. Therefore there is no opt out way of avoiding the GC in critical sections. If just one section of your application is generating too much garbage it will directly influence critical sections like audio or rendering. Therefore the goal is to do as much as possible without a GC and then add an embedded scripting language that is running a GC. A GC cycle inside the embedded VM only stops the computation that happens inside that VM but since we have already ensured that all non critical sections are running outside of the VM the impact is minimal.

You want things like animations to be smooth and your attacks to hit but it doesn't matter to you if a quest progress bar or quest reward is getting delayed by 30ms.

I want non global GC heaps.
I remember those times. Things like DHTML clocks.
I believe it is still in active development and they refuse to change the name for some odd reason. It’s like if kdenlive was named “Weinstein” wouldn’t you want to change it?
For context https://en.wikipedia.org/wiki/Social_Democratic_Party_(Roman...
On Scaling Mental Models
Didn't know about this, it looks very cool indeed! Thanks for sharing!
Rather, there is no law that forces them to give a reason.

It's like any business relationship: One party may decide to terminate the relation as long as they respect the contract. They don't have to provide a reason (why would they?)

That said, usually contracts state a minimum notice period.
Rust doesn't have a stable ABI, so it's sensible to always go through C bindings anyway. The other things you mention are just a matter of what their future Fuchsia Studio chooses to support.
> The comment about having “no plans” to enable this outside the USA seems a bit disingenuous

The comment actually very clearly says "we do not have plans to roll out the feature in Europe or other regions at this time".

Also I have mixed feelings about this. On one hand yeah, encryption is great and someone sitting between me and my ISP will no longer be able to monitor my DNS queries. On the other hand I don't feel like this is protecting me from anything at this time. Instead of trusting my ISP, I have to trust Cloudflare. And in the meantime my ISP still knows where I am connecting to, between looking at the IP and the SNI (they mention ESNI but we're not there yet and it still just a partial fix).

DoH (in general, not Mozilla's problem) just enables any piece of software or hardware on my network to bypass any security controls I have in place. No more filtering DNS with things like PiHole, no more blocking DNS port on your firewall. This tends to work out great for Google and any random IoT device manufacturer. I could cover this with more enterprisey setups but that's the last thing I want to do at home.

So the average user probably sees no difference either way, nothing lost, nothing gained. But for me it's a clear regression because I lose the little control I had over that traffic and I just spread more data around to yet more companies. Some may even be in legal jurisdictions that are even less trustworthy than where my ISP is located.
I am a bit skeptical regarding your claims. Without any detail, if you're talking about companies whose business justifies $100k credits from AWS then you're not talking about normal businesses that have at best a local presence. If your company has a global presence then Hetzner doesn't quit cut it, as they only have data centers on Germany and Finland[1] and the added latency of accessing their data centers from non-european space is something that easily adds 100-200ms to each request.

Hetzner is indeed excellent if you are a cost-conscious european client that is willing to absorb the cost of self-managed bare-metal or quasi-bare metal servers and cares about saving on bandwidth costs. However, if your goal is to provide a world-wide service then you are compelled to look elsewhere. Even competing european service providers such as OVH[2] or scaleway[3] fare better than Hetzner on this domain.

[1] https://www.hetzner.com/unternehmen/rechenzentrum/

[2] https://us.ovhcloud.com/about/company/data-centers

[3] https://www.scaleway.com/en/datacenter/
Amazon have entire teams of people who's job is to optimise customer's bills so that you end up paying less, and they're incredibly good at it. You need to become a big enough customer that they assign an account manager to you for that to become apparent without doing some digging, but I'm pretty sure if you open a support ticket asking about this they'll help you out.
>at least I know what it will cost

Yep until you go over the traffic limit and they start charging you more
I'm a little surprised not to see any mention of the Levenshtein Distance[0] here. It's the standard way of comparing strings, there are libraries to do it[1], and it seems to be exactly what's happening here.

There's value in deriving code from scratch to understand the algorithm and the language, but not to mention it at all seems a little odd.

[0] https://en.wikipedia.org/wiki/Levenshtein_distance

[1] https://duckduckgo.com/?q=Levenshtein+distance+python+librar...
If they do that, Mozilla will probably immediately update the check or remove it all together.

I don't understand why systems administrators don't just use their existing policy management to disable DoH if it really causes an issue. There's a group policy specifically for DNS over HTTPS [1]

The only reason I can think of is that they can't because of BYOD or Firefox being part of the company's dark IT. The DNS workaround doesn't help much in those cases because the underlying problem is a lack of oversight, not an issue with Firefox.

[1] https://github.com/mozilla/policy-templates/blob/master/READ...
I have a QNAP NAS device with a bunch of storage. PPoE gigabit switch. A few ReoLink hardwired cameras pointed at all the entrances to my house. My QNAP device has a free NVR app that detects the cameras on the network and saves the recordings to the NAS. It's pretty simple and I don't have to worry about shady cloud-based devices.
Actually our immune systems recognize COVID-19 virus too well and cause damage removing it.
It's not the virus causing damage on its own - which is probably why small children are not affected by the worst of it.

The virus is known to cause cold-like symptoms, with just somewhat higher rate of pneumonia. (About 10-20x higher.)

It is exactly just a cold, but a rather bad one, just like Spanish Flu was just flu.

Do not underestimate cold nor flu.
Paul Graham, on the front page for more unsubstantial Paul Graham content.

I mean, his essays are decent but this was a snooze-fest of an interview. And recent Paul Graham blog posts that have shown up here have been obvious nonsense.

I think we need to stop encouraging personality cults. This is a guy who’s a decent writer and also happened to ride the dot com boom to wealth. There’s nothing really admirable about it. You can’t gain any magical advice from someone like this because they stumbled into success. All the self-help style advice offered is basically either already obvious or impossible to replicate.

All you gotta do is make a product that Yahoo! will buy off you for millions of dollars and you too can spend most of your time writing essays and starting venture capital funds.

If I ran my own venture that had a community forum I’d probably be creeped out by people talking about me like I’m a savant of advice all
the time...
No they don't. GC language, for example, are more sensitive to memory pressure to reference counting overhead.
Tapping Talent in 2020
What sort of encryption and authentication can I expect if I do that? Can anybody who guesses the port dump code into my running Lisp instance?
Show HN: Machine Learning Development Studio Designed for Non-Experts
I'm not sure how firefox could implement this entirely on their end. There would need to be cooperation on the OS (or dhcp client) side to expose that option somehow.

We're in this mess because OSes haven't acted and Mozilla has had to take matters into their own hands. Unfortunately any solution that requires cooperation from other software is going to take a lot longer to land.

I do hope it happens eventually, and I'm sure that when it does Mozilla will change Firefox again to respect that.
I'm not a network admin working in a business, but I am the network admin of my home network, and I really do not want applications starting to effectively contain their own VPN clients and subverting my control.
I had the "please tell us where your money comes from" message and my app continued working just fine (I use Revolut for all my personal transactions). Once I sent them a copy of my bank statement and some invoices between my company and me, they restored full access to my account super quickly.
Not sure about motionEye, but the specs for the Raspberry Pi Zero are pretty powerful so I don't see why not.

This is what I used to set up a home surveillance with notification alerts.

https://www.bouvet.no/bouvet-deler/utbrudd/building-a-motion...

====

I just wanted to add, while I have an Arlo Pro as well, I've found the Raspberry Pi Zero solution cheaper and more reliable. The Arlo's camera quality is better, but the software often fails to capture someone walking by. I'm also more skeptical about how safe my videos are on Arlo's servers.
Asynchronous array functions in JavaScript: map