skysight-inc/HackerNews huggingface dataset:
The three main factors are probably:

1) There is (just like with any bespoke product) a real risk that it won't be completed (at all / on time / for a profit).

2) It's very capital-intensive (so even the biggest defense contractor is going to need to borrow). Even civilian ships cost tens or hundreds of millions of dollars.

3) The capital is tied up for a minimum of 1-2 years (depending on the size of the ship).

Re 3: Even during WWII, with "all hands on deck" and less complex ships, the US wasn't able to build a fleet carrier in less than 24 months (authorization through commissioning). "Liberty ships" (mass-produced, unarmored transports) took about 2 months through commissioning.

So the Navy would probably have to arrange some sort of loan guarantee... and now we're back to the supplier not having a strong incentive to do things right.
> that developing software and testing it on AWS is an order of magnitude more expensive than doing things on-premises

Is there any truth to this? Every time I see this claim, it is actually comparing the price tag for servers in the on-prem case with the price tag for compute on AWS/etc (which includes a whole lot of engineering and data center management costs). It's a pretty meaningless comparison.

My guess is that AWS has the economies of scale to outperform your average private data center on a total-cost-of-ownership basis.
It's not appropriate unless you're a multi-millionaire, and it's not that easy to transform yourself into one.
No, tesla s with ludicrous mode is doing 0-60 in 2.28 today. The new roadster is aiming for 1.9 and probably less with the SpaceX package.
really? what do you suggest that is faster? Our shop has tested a number of compression formats (xv, bz2, gzip, etc) and gzip is good enough and faster than the others we tested.
Fine, the surface is very radioactive (but it's safe under the ice) and there aren't any exposed mineral deposits so you can have it. :)
Can you share a link?

How precise is the genetic analysis? Could it distinguish between if this individual is patient zero, or if they caught it from another theoretical individual on the same plane from Wuhan to seattle, who did not quarantine?
Svelte is absolute trash.

It actively encourages mutability, which is a one way avenue to bugs bugs and more bugs. ie, shit like this is all over the official documentation:

<script>
let mutable = 1;
function f1() {
onMount(() => {
mutable = /* do some complex shit here */
});
}
function f2() {
onMount(() => {
mutable = /* do some complex shit here */
});
}
</script>

<Component onclick={f1}>
<Component2 onclick={f2}>
</Component2>
</Component>

Complete non-deterministic state changes. Absolutely abhorrent stuff. Cannot believe my coworkers and others actually like using this absolute garbage of a framework.
I expect colonizing the solar system will not be completely practical without genetic modification of the colonists to partially adapt to local environments.
Indeed. A text-based language makes no sense in 2020. WASM already took the approach of going binary-first.
> Honestly, the scenario I had in mind was intrastate travel restrictions, especially around cities.

Also covered by the Commerce Clause, since 1937.
I like what I see from Svelte but I'm afraid it's going down the exact same road Meteor did.

Too many options, not enough Blessed Solutions for basic things.

Take routing for example, in Svelte you have a lot of options but no real #1 "Svelte Recommends (tm)". They should solve this problem before it gets out of hand. It killed Meteor.
The paid features are the same whether you self-host or not. The only difference is whether you're using publicly hosted servers or your own.

Search for "Organization Accounts" on https://bitwarden.com/ – either a) $5/month for first 5 users in a team + $2/user/month thereafter, or b) $3/month per user for enterprise (teams + premium for TOTP + user groups). If I understand correctly, the teams version allows users to manually share what they want, while the enterprise version allows finer-grained permissions based on predefined groups of users (including optional integration with LDAP).

I haven't used teams/enterprise, but based on the feature list ("User Groups: Use groups for easier user management and greater control across departments and teams", and "Access Control: Implement fine-grained access control policies and organize your vault with collections"), I assume it's possible to setup permissions to the shared collections however you want. I would hope it's possible to have read/write owner(s) to manage credentials, with an option to allow other users to be readonly if desired.

Based on my experience with the personal edition of Bitwarden, and how well the developer handles his community and GitHub issues, I expect it's now as mature and flexible as anyone needs. You likely need the enterprise ($3/mo/user) for the most flexible use cases. Don't quote me on that though. :)
That's handled by redirects with HTTP 301 messages, not JavaScript hijacking links on the referrer page, which is what Google search pages do.
Lots.. however, best bet is to search for your language, platform and use-case. The performance can vary widely by platform and language. JSON is actually faster in some platforms or libraries, binary options faster in others. Connection interface and overhead are also an issue.
I don't think that will fly. Emergencies trump the law. Hence the term 'emergency powers'. It is an illusion to think that given the choice of upholding old law that was not made with those circumstances in mind or letting a bunch of people die needlessly that the law would prevail unchanged.

What will happen is that the law will pending the emergency be rescinded and re-instated afterwards. Judges aren't stupid, nor are they robots.
Svelte isn’t reaaaally a framework in the way React is, although they do share some commonalities.

It’s pretty innovative in that it’s not really big JS bundle, but more of a compiler for what is essentially quite vanilla JS code. In the end, if you use Svelte, then your final product will be pure HTML/CSS/JS.

I love it because it lets me bundle logically related markup, styling, AND javascript in the same .svelte file. Plus, it’s blazing fast.
Yeah seriously! My employer pays 100% for a blue shield PPO with no deductible and fantastic coverage. It’d be pretty tough to leave them for a more frugal employer haha.
Yeah it's crazy. I suggested in the thread that they should take this a little more seriously and was immediately attacked for being a doom mongering idiot.

Oh well, I tried.
I would love to hear more about your experience! could you please email me at Shimon [AT] Datree IO?

I believe that now is the right time for a solution like Datree. I think so because of the way we develop software has evolved, companies moved from Waterfall into Agile, there is developer autonomy and the move towards distributed micro-services has brought many companies to the reality of having hundreds and thousands of git repositories, each one with its own configuration files for CI, Docker, Kubernetes, etc.. its really hard managing all of those distributed pieces :)
I'm not sure this is a fair apples to apples comparison. Some thoughts:

1. msgpack + gz would be a more fair comparison to json + gz when comparing file size

2. have you run any time comparison? It would seem to me that msgpack gets pretty close to json + gz with far fewer resources, time
Did AWS lift an embargo this week?
I can't believe people use redux in any capacity but here we are.
Ask HN: How to protect online videos from being stolen
Looking to create a my very own Netflix / YouTube like platform, but run into an issue about protecting my video content online.

I was thinking how Netflix does it and has any fellow hackers on HN tackled this problem before.

Thanks.
Why would you make a comparison by gzipping one and not the other? Running gzip on the msgpack example reduced it from 304 to 248 bytes.
Up to 1 week ago in California they did not let you test people that did not have contacts with people that were tested positive to COVID-19 or that have travelled in counties that have the virus.

I know a person in Menlo Park that the whole family "had CODVID-19 symptoms" (Stanford doctor's word) and they were diagnosed with viral pneumonia but they were refused of being tested (after asking permission to the CDC) and sent home asked to be in "isolation and do not tell anybody because it may spread panic." The first person to get it in the family was one of the child in school that started have symptoms at the end of Jan.

I supposed that they were not the only ones.

Even nurses dealing with patients were refused to be tested according to this video: https://youtu.be/DiqVCQv__pE
Do any tools exist for easily benchmarking one's workload across various instance types?
Gzip'ing the msgpack encoded example results in 238 bytes.
Absolutely. I spent time reading a book next to my dad who was reading a different book and enjoyed that. It doesn't count under my definition of QT though.

Watching TV might though, particularly when we talked during the commercials.
I just stopped called it 2fa, and just otp for “one time password”, the URI standard calls it otp:// as well

see problem solved, no need to debate how single or two factor a thing is and you can just focus on the attack vectors it actually still solves for, objectively

yes the password vault is a single point of failure if someone knows your vault password or key logs it.
Gretchen: Making Fetch Happen in TypeScript
Depression Part Two
It's most deadly to older people.
On the chance of non-sarcasm :)

You get into the limits of being able to transfer the rotation of the axle to the tire patch.

Mental picture time, if you will:
1. Axle spins, which rotates the metal wheel
|> since the metal wheel is metal to metal with the axle, we will consider it to be one unit, even though technically, it is not

2. Metal wheel rotates the part of the tire near the rim
|> There is only so much force which can be applied to join the tire's bead to the metal of the wheel. "Bead locking" can be done, but this is esoteric and, at least in the US, is mostly not legal for road-going vehicles. Also, the amount of space necessary for bead locking components is a complex challenge for the passenger car wheels, and is usually reserved to far larger wheels found in off-road-like vehicles.

3. The tire rim has to transmit the rotation to the tire contact patch, which happens via the tire sidewall.
|> This sidewall has to stay flexible otherwise the ride would be nigh impossibly jarring. Check videos of sidewall flex of drag tires for a practical example of this, a-la https://youtu.be/rw3LE78gwhg

There are plenty of other things in play, top, but these are the big limiting factors.
Some incredible 1989 video of the Fulton Recovery System/Skyhook at https://www.youtube.com/watch?v=qkNiOjJvlS4&feature=youtu.be...
Why would you need 0-60 accelerations of less than 2.28 sec? And anyway the new roadster next year should do it in 1.9 sec.
I'm in a similar state of mind as you. Any time I start a web project now I just write vanilla JS and none of my hobby projects has yet to reach a point where I wanted a framework. There have been a couple times, particularly dealing with interactive forms, that I found myself writing a lot of the same code over and over again. I think this would be the first place I would start to build my own little framework. But it hasn't yet made me want to introduce React or Angular to the project. Especially when I consider the hours of free time that I would spend on setup rather than building the actual project itself.
As far as I know there has never been an enclave attack found in a rootkit in the wild. This is probably because there hasn't been anything publicly obviously worth stealing in an enclave yet.
I would choose Venus. The depth of the gravity well is less important when the colonists are being lowered into it from above rather than thrown out from the bottom. If you need something in orbit, you don't drop it down to the planet in the first place.

But as things are, the relative effort to terraform Venus, compared with Mars, is absolutely colossal. It essentially requires a full-blown robotic asteroid mining industry, wherein olivine asteroids are diverted directly to Venus, and magnesium and calcium are mined, sent to Jupiter to produce saturated hydrides, and those sent on to Venus. It will take 1000 years, minimum.

Mars can get realistic results within 200 years, just by diverting water-ice comets and managing temperature.
What a civilized way to express your opinion.
Which of those would you have cited if you didn't have the benefit of hindsight?
I suppose current options aren't optimal. Or at least that could be a valid motivation to create one.

If the motivation is to replace SPIR-V itself, then it's not valid.
Golang netscanner made without dependencies
Sure, but if performance is the actual issue, then you'd likely pick an even faster and more compact wire format (proto, avro, thrift).

I guess the ability to have a schemalass and no type checking format (just like JSON), while enjoying some performance benefits? It just feels like a weird niche to me.
I tried to work with MessagePack last year while teaching someone who was building it into their product. Absolute nightmare.
I wish the updates for Spectre/Meltdown were optional on my Windows machine. They posed no real risk to my single-user gaming machine and the fixes had an unacceptable performance burden IMHO.
Remote access to a ZFS gives you much different guarantees from your average S3-lookalike, so an integer price difference does not seem unreasonable to me.
This is a great bit of journalism. Best layman's accessible article I've read on this subject.
I've worked with capacitors that were designed to dump their charge in a few us. You really do not want to mess with that stuff without proper precautions, nothing scares me more than a couple of hundred volts power source with an Ri too low to measure. You need to forcibly restrain your cabling or it will jump all over the place during a discharge.
I want to buy one... I doubt Amazon will ever sell Graviton chops directly to consumers, but the article says the chip is essentially an underclocked reference design using ARM N1 cores, so other vendors could offer essentially identical chips.
Missing links to benchmarks.
Also, Json is not really a good baseline for comparison. If you support binary data natively in the format, you should compare it to Bson.
Do all these vulnerabilities mean that manufacturers will have to remove those optimizations, rendering the cpu slower?

It seems to me that extracting or injecting data that way is very hard to do, and is likely to return very little information.

Is the tradeoff something like: we should prevent the one in a hundred billion chance that my cpu leaks a critical password to some intruder one day at the cost of rendering all my processes 30% slower?
Can't you ask your organization to get rid of its policies?
Starve the beast is either (charitably) a way to encourage efficiency by introducing necessary scarcity or (uncharitably) a way to deliberately create artificial failure to leverage the phenomenon being described here where people will conclude that because something doesn't work, it can't work, and therefore should be abolished.

It's related, but it's not the same thing.

EDIT: Note that I'm assuming that prematurely leaping to the conclusion isn't deliberate on the part of the reporter here. If it were, then maybe it would be the same thing.
Are you familiar with dialectical behavior therapy [1]? A lot of what you describe as important in your journey (dealing with feelings, mindfulness) are a focal point in DBT.

[1] https://en.wikipedia.org/wiki/Dialectical_behavior_therapy
I've got you beat; neither SSRIs nor gabapentin nor any other of a variety of on- and off-label meds worked for me.

Despite that I don't think it's a good idea to recommend or disrecommend any specific drug; it is very much a biochemical roll of the dice as to whether a med will work on a given individual and the odds aren't even particularly good. My suggestion to the depressed is to try as many as you can withstand to increase your odds of finding something that works, with the understanding you might be among the unlucky ones that nothing works on.
I remember speed of light (299792458 m/s) but no birthdays or anniversaries of family or friends. No need to ask why I suck at relationships.
Initially, we started as a CLI tool, but as you said, it is part of the problem, how do you make sure all of your developers are using the CLI/pre-commit hooks?

This is why we choose to integrate on the pull-request level. It is not perfect, but at least your plain text secrets will not be merged into master and go in onto your developer's laptops and your servers(less). :)

We try to find a balance between perfect and achievable in an easy way for our customers
Works for me, maybe the issue is specific to the site linking to Twitter.
How much data center does one really need for a build server?
They are paper masks, not computers. It's trivial to produce them in adequate quantities, if a large enough actor really wants to.
"Render useless" makes me think of something more like the F00F bug - hard lockup until a reboot.

https://en.wikipedia.org/wiki/Pentium_F00F_bug

OS vendors worked around it in software.
That used to be a good source of income. Buy up old analog synths, categorically replace all the caps and they'd usually work again.
I had a similar bad habit of mindlessly visiting sites I consider time sinks from the browser. I learned I could edit my hosts file to override the DNS lookup from a comment on HN. Just be sure to cover variants of the url you wish to block, otherwise if you're anything like me you'll start prepending 'www.' to bypass the block.
For that matter, is there a link between depression and feeling overwhelmed with tasks all the time? Does one cause the other, is it a two way feedback loop, or is there sometimes a separate common cause?
Supplements, or "supplements"? I've heard that this is one of the dangers of the use of any kind of substantially-effective PED: not necessarily that their use will disrupt physiological systems so greatly (though many do when abused), but that the difference in performance or physique while on vs off is so great that it discourages either working out while not using them, or else never getting off them.
> "...I saw several Scientology ads. I know Facebook doesn't have an agenda per se [...] but I was still struck by the brazenness of advertising something whose ethical dubiousness has been so thoroughly publicized."

scientology is certainly ethically dubious. it's a tax shelter and MLM to financially benefit it's leaders disguised as a religion, which attacks its detractors publicly. that some people find meaning and belonging there is incidental to it's purpose. so no love for scientology.

but why would you expect facebook to ban advertising from them? and why would that be the last straw that made you quit facebook?

facebook (particularly zuckerberg) itself has poor ethics, and that's as good a reason to quit facebook as one should need.
No.

This approach affects how you build training sets.

Beyond a certain point there is no benefit from adding more "easy" cases to the training set.

If you're going to build something that handles the hard cases you need to build tranches of examples that cover the hard cases, and the methodology I'm describing requires that.
They just seem to be slowly onboarding people for m6g.
Is Lurking Hurting My Brain?
Covid-19: Coronavirus or Computer Virus? – Between the Hacks
I like it! Sort of the unholy love child of XDR and JSON :-).

Now we need an IDL that will let you define a structure and have it produce <language> marshalling and unmarshalling routines.
The energy used to mine metals, to forge steel, to move parts and people around, the production needed to sustain settlement happens on earth, not in space. Any significant program to live outside earth will require investment never seen before on the ground.

If this investment is done using current tech, the impact on carbon emissions won't be sustainable.

It doesn't mean we should not do it, but a clean source of energy is a prerequisite to a successful space settlement.
The compute-focused AMD instances (c5a and c5ad) based on 2nd gen Epyc were announced as launching "soon" back in November, haven't heard anything about them since.
That's the conventional wisdom, but as I mentioned in another comment on this thread, I'm not convinced that's the case, especially with a contagion that is most dangerous to less active people.
We're seeing the exploration of a new surface through speculative execution and related hardware techniques. There is basically a backlog of exploring this surface that researchers and security folks in industry are working to process. Eventually will settle into a more steady state, but takes a long while to push through the new territory.
"listening to stereotypically upbeat music is sure to make me feel down"

It doesn't have to be stereotypically upbeat music. It should be music you actually enjoy and make you feel more energetic and lifts your mood up. If listening to depressing music does that for you, great.

"I can never bring myself to believe this, depressed or not. Some people are born a certain way, and there's no real cure for whatever condition they have."

I can't speak for everyone. I can only speak for my own experience, and in my experience with time I've always eventually felt better. Maybe I wasn't "cured" of my depression, and I'd always feel depressed again eventually too, but at least for some time I'd find relief and my feelings of gloom and doom would be behind me. I could even smile and laugh for a time, and enjoy myself. For me depression comes in cycles and waves.. I've learned to ride them out.

"I was reading Johnny Got His Gun the other night, which is probably an antithesis to this statement. Imagine you're a veteran, no arms, no legs, no mouth or eyes or ears or anything really except one's own mind. All of it blown off by shrapnel. Nothing but your own thoughts to pore over the details for the rest of your existence. Can time literally heal such wounds?"

Oh, come on. That's a super extreme example. Do you have your limbs, sight, speech, and hearing? If so, you're much better off than Johnny. He'd have probably have given anything to have a fraction of what you have for a single day. You should try to appreciate that and be grateful for it.

There's a way of looking at life that helps you and a way that hurts you. Focusing on how miserable and unlucky you are will inevitably lead you in a downward spiral. Count on it. Instead, do everything in your power to focus on the positive aspects of your life and how you can improve your life. That way leads to healing. Your choice.

Also, I'd strongly recommend you watch some videos on Brooke Ellison and Kyle Maynard. Ellison was paralyzed from the neck down when she was hit by a car when she was 11 years old. Maynard was born a congenital amputee, missing half of each arm and leg. Ellison wound up going to Harvard and becoming a professor. Maynard became a champion wrestler and climbed Mount Kilamanjaro.

These are people who've overcome adversity the like of which most of us can not fathom. They're far from alone, either. I like to seek out stories like this, because they put my life and my problems in perspective, and really inspire me to appreciate what I have and make the most of my life.
Approaches to 1:1 Meetings from Top Tech Leaders
I agree - family trips (even long car rides) can be quality time if everyone is listening to the same songs and singing along together, or listening to a book together and discussing what's going to happen (ok, we're strange) or wasted time as everyone escapes into their own devices.

We go to a lot of sporting events and our rule is that when a ball or puck is in play, no devices - these have been the best way to share quality time with our teens.