skysight-inc/HackerNews huggingface dataset:
I'm using Terraform to maintain identical staging and prod deployments. Grafana is difficult to deploy statelessly, so this adds yet another Terraform deployment stage:

1. Deploy host running dockerd

2. Deploy Grafana server

3. Configure Grafana server admin password, organizations, users, and passwords.

If Grafana would just support file-based configuration then a whole stage could be eliminated.

"Loki does not come with any included authentication layer. Operators are expected to run an authenticating reverse proxy in front of your services, such as NGINX using basic auth or an OAuth2 proxy."

https://github.com/grafana/loki/blob/master/docs/operations/...

Unfortunately, this means that any process that can write logs can read all logs. This violates the principle of least privilege, a core part of system security. Prometheus suffers from this, too. To put this into concrete terms: When someone uploads a malicious image through our app which exploits our image resizing server, they will obtain log-writing credentials. Those credentials should not allow them to read all the logs and steal the user data in them. That would be catastrophic for the users and the company.

ElasticSearch supposedly has ACL support, but it is mostly undocumented and full of foot-guns. For example, their security doc omits a necessary flag which enables password enforcement. After following the guide, I discovered that the passwords I had set up were not being checked. I immediately lost all confidence in ElasticSearch as a tool to safely store user data. I deleted it.

I used InfluxDB since it lets me create write-only user accounts. Unfortunately, Grafana's integration with InfluxDB is problematic.

The lack of useful debug logging in Grafana makes troubleshooting especially difficult.
Seventh Amazon worker dies of Covid-19
What makes you so certain a house fly doesn’t have a form of rudimentary consciousness? It might be a spectrum.
Low interest rates helped produce one of the best labor markets in living memory before covid19 hit. This was a huge boon to lots and lots of people outside of the 1%.
Perhaps related: "How come someone notarized my app?"[0]

It mentions that anyone with an apple developer ID can notarize a qualifying app and submit this notary to the Apple Notary Service. However, the proof of notarization—the notarization ticket—might not be stapled to the application.

In the case of no stapled ticket, Catalina contacts the notary service to see whether a ticket exists. If so, the app is good to go.

[0]: https://eclecticlight.co/2020/05/22/how-come-someone-notariz...

EDIT. More informative link here[1]. It specifically outlines what happens on first run of an app. (and there's a great diagram if you scroll down)

[1]: https://eclecticlight.co/2020/01/27/what-could-possibly-go-w...
> That said, I know how I'd manage multiple projects via NX, and knew the rules to effectively maintain this project for the foreseeable future.

I believe NX is aiming to bring in Vue support through their plugin system, but yea, I understand that it would make it easier in your case since it already supports Angular. If you like the monorepo setup and looking for a more generic solution then checkout lerna (https://github.com/lerna/lerna).

> I really do love Vue, but I need structure, because as a human I have terrible memory. I don't love unit testing, and I barely love integration testing, so strict typing and good naming is key to my style of coding.

Vue, as simple as it is, can have structure and easily adopt to large scale projects. As I mentioned in my previous comment, you would have not had any issues using TypeScript with it.

> I hit a wall with Vue, which I've similarly hit with AngularJS, at some point I hit a level of complexity that Angular doesn't allow, but Vue does.

What exact issues did you have with Vue? Just curious as nothing you've mentioned so far are actual issues, but rather, you having better experience with using Angular.
Has anyone been able to get decent performance for Unity Builds out of VMWare Fusion VMs on MacOS?

We are using 2018 Mac Minis which (AFAIK) cannot install VMWare ESXi without a bunch of trouble, but Unity builds within VMWare Fusion take 2-3x as long as running on bare metal (I assume because there is no 3d acceleration support for MacOS?).
Agreed, L over R then R over L is a square knot or reef knot.

L over R, L over R would make a granny knot.

But maybe in the UK both are called a granny knot?

Interestingly, when a granny knot is collapsed (the cord on one side gets pulled taut), it becomes two half hitches. When a square knot is collapsed, it becomes a larks head or cow hitch knot. In the balanced state, the granny is a weaker knot and the square is stronger. In the collapsed state (then cleaned up a little bit), two half hitches is a stronger knot than a cow hitch.
See also: https://news.ycombinator.com/item?id=23278734
> Why does anyone care it's in C# if they're not looking at it anyway?

Garbage collection probably. Some games have noticeable stutter. But I assume there are ways around that, similar to using Java in HFT.
See also: https://news.ycombinator.com/item?id=23278712
How to Create a Micro-SaaS
If the connection fails it goes ahead and grants permission.
they spend a lot of time with these requests i think. “sing me a song”, “are you insane” etc
I look forward to in browser DLL hell /s

I'm cautiously optimistic about blazor, it definitely makes streaming data to the Dom much easier
Sysdig [1] great monitoring platform for containers on K8S

https://sysdig.com/
Yeah I figured as much. Moto G5 Plus if anyone cares.

However, if it carries the Android brand I think it's fair to put some of the blame on Google. Atari learned that lesson in the early 1980s.
If you can't tie a knot, tie a lot?

Also, it's a taut-line hitch:

https://en.wikipedia.org/wiki/Taut-line_hitch

taut, meaning tight, not taught, the past tense of teach.
I feel the same way about Apple these days, and the fact that Apple is secretive and doesn't provide roadmaps makes it harder for me to feel at ease with Apple. My last straw is Catalina's notarization policies, but my discontentment with Apple started back in 2012 with the introduction of soldered RAM in the MacBook Pro.

After a few years of seeing the writing on the wall, I am slowly coming to grips with this and I'm planning to migrate to Linux and FreeBSD by 2022. My 2013 MacBook Air is aging, and that will be the first device to be replaced. I'm slowly reacquainting myself with the flexibility and the large array of choices that the FOSS ecosystem provides. I'm going to miss Keynote, Preview.app, and the Omni Group's software, but in exchange I get an environment where I have more control.
https://www.darkpatterns.org/types-of-dark-pattern Maybe one of these?
I have a 2019 Macbook Pro 16in and I hate it. It runs exceptionally hot (leading to massive performance problems), doesn't get enough power from the adapter to start with no battery, doesn't play nicely with my display, needs restarting every couple of days so Chrome doesn't crash and takes forever to boot.

That's just the technical problems. I'm willing to give the UI a break, since it's probably as much me adjusting as it being bad.

This is my first Apple anything, and if this is what "just works" looks like, I don't want it. I could be more productive on an Android tablet at this point.
Thankfully containers are the exact opposite then.
Istio Developer Portal
This has been bugging me as well for years. Only found an app called Sharedr recently which replaces the sharing dialog. It's not perfect and has a limitation with sharing files, but it's a million times better than the default option.
There seems to be a hate bandwagon that everyone is jumping on; I've seen it on Reddit for about the last year or two. The one guy who talks about the issues with Atlas being the only platform which gets the latest versions does seem quite concerning though.
Ah but Nine Inch Snails is a classic https://www.youtube.com/watch?v=S0qQ1pomYzk
Definitely comes down to file access, above all.
Chinese Entities with Rights Abuses in Xinjiang Uighur Autonomous Region
Related:

https://news.ycombinator.com/item?id=23278712

Original title was too long. It was:

Commerce Department to Add Nine Chinese Entities Related to Human Rights Abuses in the Xinjiang Uighur Autonomous Region to the Entity List
FPGAs have been around for quite awhile. Is something changing?
Which makes a mockery of the whole security angle - how can this be utterly essential for security while connected and then just tossed aside as optional as soon as you exit Wifi range? It can't be both.
Huh, I've forgotten that I have the same problem with my address. If you look up my address, Maps will point to my house (let's label it X St. 36), but the street segment in front of my house has the name of the parallel street (Y St.) a block south of it. On Google Maps, X St. incorrectly changes to Y St. 100 or so meters before reaching my house...
It comes down to a truism about generally anything: it's inefficient to figure out how to do a thing without some amount of doing a thing.

It's not a huge surprise someone building games makes a better game engine than someone building a game engine. Because they solved the problems they ran into!

You see this time and time again with businesses. Dogfood, and you'll have a lot better idea of where the warts are in your product. (And most importantly, waste less time fixing things you're convinced are warts, but nobody ever noticed)
people who generally speak up for doing the right (pro-social) thing, even in the face of gain from doing the wrong (anti-social) thing, or even just letting others slide by doing wrong things, are such out-of-sync 'loners' who are a form of bet hedging against social collapse.

it doesn't need to be many of us, but some of us have to pay the social cost of keeping sociopathic behavior in check. it's often thankless and ostracizing (whistleblowers, for instance), and why we often give those folks titles like 'hero', to provide some measure of social compensation most of us aren't willing to take on.
I feel like that merely reduces the problem to figuring out how to mount a 10"/25cm wide Al extrusion on a piece of potentially arbitrary width. Where would you mount that on a stretched canvas, for instance?
You didn't confront what I said in any way.
Although I'm favorable to this opinion, I don't treat anything in the 9th circuit as consensus anymore. Especially at federal district courts geographically within them. 2nd and 4th circuit rulings just have so much more weight in the direction of the country. 9th circuit just reminds you how irreconcilable 40% of the country's land mass is with the winning administration.
I wonder if the Korean office workers were already wearing masks? By March, when they picked up these infections, Korea had already been dealing with this for weeks. And masks were already a thing in Korea.

I assume most of them would have been, but maybe not in the office? Or maybe the masks are not that effective in an office environment?
I'm not high up the ladder, but like many others here, I am a boss myself. I don't think all of us have such terrible motives. I know my boss doesn't.

And yes, we also were in an open office before all being sent home. Though I may be missinterpretting, and you may mean more high level c-suite types. But even then, my impression of them is more busy than anything else.
Megadiverse Countries
We need more rulings like this and then we need to grant Snowden clemency.
Sure but the Elastic Fabric Adapter is only on the top tier of instance types.

Hoping it trickles down for us normal people.
I think the common counter-argument is to ask whether it's cheaper when purported productivity drops are factored in. A lot of people work more poorly with distraction but it's dressed up as collaboration.

Even if the floor space itself is open, that doesn't mean that decently high cubicles (or even floor to ceiling dividers) had to go along with it. How much is it really saving to shave 1-2 feet off cubicles for your six-figure staff? Smart workplaces don't think twice about $400 for a second monitor.
Default install; a default Debian install has about 3x running.
I just started writing up a big spiel about the constant daily agonies I endure while using my older Apple hardware, but after a half an hour of it, I abandoned it.

It would take me a few days to write out the list of grievances that started when the iPhone arrived, and how Apple splitting its attention between desktop and mobile began the long, slow decline, and how it is reminiscent of the old Apple/Macintosh internal wars that almost brought down the company.

Basically what it comes down to is that Apple has a trillion dollars, and that's great and everything, but it means that it's the establishment so it can't innovate anymore. The bottom line is now its top priority.

For Apple to save its reputation in the eyes of geeks everywhere, it would have to listen to any geek anywhere. It would have to stare at the ground quietly as the grievances are aired, and then have the maturity to grok what it's heard and do something about the problems.

I know it has teams of engineers working on this stuff day and night, and even has a great CEO and everything else. But sometimes in spite of all of that stuff, companies flounder. It's just especially tragic when it's this dream company that got countless millions of people interested in tech initially.

Seriously, take a break Apple. Put all the grand plans aside for a while and listen. I guess that's it. Sorry this came out kinda harsh, I'm not mad, I'm just disappointed.
The open office plan is only there so that employers can control their employees. There is literally no other reason for it, it removes psychological safety which most people need in order to think while they are working. It allows obnoxious employees to create distractions in order to slow productive employees down. It allows clever employees to waste the executive function of people they don't like by flooding them with behavioral cues, gestures and body languages that has inherent meaning (This is particularly dangerous and devastating if done in a targeted fashion). I'm sure if you talked to a psychologist they could give you a million more fun games you can play with people in open office environments. They were never good for people to begin with or for getting work done. In small startups they are perfectly fine but in medium to large sized corporations they are only abused.

(BTW, none of the above bothers me in particular but I know this happens on all the time and I've watched people in large corporations play psychological games with extremely good employees just to make them miserable in open office environments.)
I can't help it that you tried to build a strawman to avoid what I said.
Not really. "Reject all forms of identity politics" is both a political statement and, being the first (coherent) comment you've made after creating this account for this thread, clearly a statement of self-identity.
First of all, I’m not sure I’ve ever seen peasant used as a slur with that much venom, so congratulations. There are plenty of children of immigrants in this country who want to slam the door shut behind themselves. Always have been, always will be. The immigrants I see around me work hard, do their jobs well, and contribute enormously to the economy. Perhaps the immigrants that you see in upvoted r/the_donald stories behave differently.
Maze Generation in React
> "Unpaid concept testing" is the next simplest.

Shutup and eat your dogfood like a good consumer ; )
Commerce Department to Add Nine Chinese Entities Related to Human Rights Abuses in the Xinjiang Uighur Autonomous Region to the Entity List

https://www.commerce.gov/news/press-releases/2020/05/commerc...

Commerce Department to Add Two Dozen Chinese Companies with Ties to WMD and Military Activities to the Entity List

https://www.commerce.gov/news/press-releases/2020/05/commerc...
Weird tangent. The ruling was not handed down from the 9th circuit. It was the Western District Court of Washington State. (https://www.wawd.uscourts.gov/). 9th circuit is an appeals court.
Why can’t they have their walled garden App Store and also allow me to install other app stores?

It’s an authoritarian usurpation of the spirit of property rights. I should be able to decide for myself what software to run on my hardware, Apple HQ’s opinion should be irrelevant.
> Wikipedia frequently asserts, in its own voice, that many of Trump’s statements are “false.” Well, perhaps they are. But even if they are, it is not exactly neutral for an encyclopedia article to say so, especially without attribution. You might approve of Wikipedia describing Trump’s incorrect statements as “false,” very well; but then you must admit that you no longer support a policy of neutrality on Wikipedia.

What? No. Objective truth exists and stating it is absolutely not an indication of bias. If Wikipedia is incorrectly referring to his statements as false then those cases should be fixed, but his argument is that it doesn't even matter if these assertions are correct or not.

His "Encyclosphere" is going to be an absolute disaster if it adopts his conception of neutrality as described here. It sounds like he rejects any evaluation of the factuality of the subjects at hand and his preferred standard for inclusion is "some people believe." That sounds like a great way to create a catalog of falsehoods and misinformation.
Sam Altman-backed housebuilding firm Atmos wants techies to leave SF
> He ate it does not necessarily imply he ate it all.

But it implies it.

> I ate chili last night, but that doesn't mean I ate all the chili.

That's a bit different isn't as you are referring to a general unquantified food ( chili ) as opposed to a quantified amount of food ( one whole salmon ). What if someone gave you a bowl of chili and you ate it. Most people would assume you ate it all. Because it's a singular item like a whole salmon. Someone game me a bag of chips and I ate it. "All" is implied. Someone gave me a hershey's bar and I ate it. Most would assume they ate it all.

Also, you are missing my point. My point is that most people don't appreciate how big salmon actually are and also how expensive they are. I didn't realize how big they got until someone gave me a whole salmon. My intention wasn't to start a petty semantic argument.
Compared to the option of not converting, it would help everyone, reducing annoyance.

Also I'm not sure if you can generalize from your one relative to 99% of users.
How are they close?
Second, awwapp is awesome
How do you know when someone’s a vegetarian? Just wait, he’ll tell you.
That potentiality has been there for many many years, I don't see 'the thing' that provides the critical mass necessary to make it work in reality.

Web Assembly is one of the more misunderstood technologies in terms of it's real, practical application.

At its core, it crunches numbers, in limited memory space. So this can provide some 'performance enhancements' possibly for running some kinds of algorithms. It means you can also write those in C/C++, or port them. Autodesk does this for some online viewers. This is actually a surprisingly narrow area of application and it still comes with a lot of complexity.

WA is a black box with no access to anything and how useful really is that?

Most of an app is drawing 'stuff' on the screen, storage, networking, user event management, fonts, image, videos - that's literally what apps are. The notion of adding 'black box for calculating stuff more quickly' is a major afterthought.

At the end of the day, JS keeps improving quite a lot and does pretty well, it might make more sense to have a variation of this that can be even more optimized than building something ground up.

WASI - the standard WA interface is a neat project, but I feel it may come along with some serious security headaches. Once you 'break out of the black box' ... well ... it's no longer a 'black box'.

WA will be a perennially interesting technology and maybe the best example of something that looks obviously useful but in reality isn't really. WA actually serves as a really great Product Manager's instructional example to articulate 'what things actually create value and why'.

It will be interesting to see how far we get with WASI.
Heh reminds me of assembly.
Would you feel comfortable with a health insurance company buying that dataset and charging higher premiums for those who habitually undercook their meat?
you might not know where the timezone boundary is - they move, or you're new to the area. alternatively, there could be a daylight savings boundary in between, so it is only in the same timezone for half the year.

the fact that americans are inclined to say the state name as part of the name of a place could also help - since they might say london ohio, london might be more likely to mean the real london.
A dark pattern is intentional, most of the stuff I'm talking about seems to be from ignorance or indifference.

Asynchronous element loading saves time overall but it costs time when key UI elements rearrange. It's probably difficult to pull off but linear/blocked/sequential loading for the current viewport and offscreen asynchronous loading is probably what we need to avoid this (or ugly placeholders).
Why hong kong is not dead yet
Jailbreak apps are bad for Apple. Walled gardens are bad for users. It's not complicated.
Precedents are interesting:

> Bond v. United States, 529 U.S. 334, 337 (2000) (concluding Border Patrol agent searched a bag by squeezing it)

> Arizona v. Hicks, 480 U.S. 321, 324–25 (1987) (holding officer searched stereo equipment by moving it so that the officer could view concealed serial numbers).

The idea seems to be that pushing the power button is what constituted a search, not taking a picture of the lock screen. Presumably if the lock screen was somehow already on at that point (which normally it wouldn't be) then it might be fair game to take a picture without a warrant.
For anyone looking for more information on what happens on the first run of an app in Catalina, see [0]. Here's a direct link to the diagram [1].

[0]: https://eclecticlight.co/2020/01/27/what-could-possibly-go-w...

[1]: https://eclecticlightdotcom.files.wordpress.com/2020/01/appf...
That's another piece of the mistaken middle class buy in - labor is not an end unto itself. At the same time we have massive technological progress focused on the goal of reducing human effort, the Federal Reserve is optimizing to keep everyone working full time. The entirely predictable result is a load of meaningless bullshit jobs, especially concentrated in the sectors that receive the new money.
We had the space shuttle 20 years ago.
As soon as wages get depressed and people start talking about unions, remote work will be the new hot thing.
So many interesting links. This post should be a regular on HN.
Low-level stuff & Linux: RISC-V, Vulkan, Wayland, Sway WM, Wireguard, Zig.

Web or high-level stuff: deno, Svelte, Vue, Webassembly, WebGPU, Flutter.
> incentive spirometer

I want to try this. If you're happy with yours can you link to it? (everything I'm seeing is either under $10 or over $20 so I'm not sure which way to go)
I am surprised that Costa Rica did not make the list, as I was under the impression it had a higher biodiversity density than any other country.
And SSL is a cinch! I have been very happy with Dokku, I'm surprised I don't see it mentioned around here more often.
Here's how I do it: https://store.wsj.com/shop/US/US/wsjuelns20/
Absolutely, but there's been plenty of technologies where the time wasn't right the first time around, but it was the second, or third, or fourth.
Law is not morality. I know that, you know that, evidently the high ups in the Republican Party who hire teams of illegal immigrants in their personal lives know that. People who think law is morality castrated Turing because it was the law, stone victims of rape to death because that’s the law, turn in escapes slaves because that is the law. I don’t associate with them.