skysight-inc/HackerNews huggingface dataset:
> I certainly don't condone rioting, looting, and setting random buildings on fire. But the police created this situation.

This specific situation? Ya, sure, maybe.

What about the rioting, looting, setting buildings on fire, etc. in Berkeley because some students opposed Ben Shapiro giving a talk? How did the police create that situation?

> The only thing the police should be doing in this situation is standing down, admitting their wrongdoing, and accepting punishment.

How exactly are the police being "punished" by my store being looted by people who don't even know why the riot started in the first place, let alone give any damns about someone being murdered by one police officer.

How is people carrying off 6 new televisions, freshly robbed from a local store, going to stop the rioting and "heal" the police-citizen divide?
> I assume the business owner had insurance?

He wasn't, he was just about ready to open when the pandemic hit.

> ...it’s probably a blessing in disguise that may save him from bankruptcy, who knows?

Of course, so what are your dreams in life? When you're about to reach the culmination of a lifetime of hard work and sacrifice, we might as well just arson your project, save you from your own ineptitude. What kind of reasoning is that?

> He has a job still, he’s luckier than a lot of people.

A lot fewer people will have jobs in the rubble heap left in the wake of these selfish opportunists, operating under the colour of social justice. And now when he goes back to that job, he'll still have all that time stolen from him by the handful of callous pricks you seem so quick to defend.
CALEA, FISA, and PATRIOT allow for that together.
When this article was first posted on Hackernews the title was different. Why are the titles getting changed?

It is still a clickbait title so i don't understand why the change was done in the first place.
The origin of the virus can help immensely- for tracking, vaccination formulation, etc.

We have handled it atrociously here in the US, and the reasons were myriad. But it's disingenuous to compare nations, we all operate differently.
Naive does not even begin to describe it. You do not save money by writting software cheap. You are borrowing it from the future as tech debt & hidden bugs. All debts are owned and paid for - one way or another.

Managers who claim to have overcome this - are paying one credit card with two new.
So you dont need a lockdown. You simply need mosquito nets.

So when you have a cheap solution that works, why would you want to do something expensive that does not even work any better than the cheap solution?

Other than making a nonsensical ideological statement, that is.
Yes that is true, and one of the major failures of the Ottoman Empire. They couldn’t instill any sort of nationalism in Greeks and other minority subjects. The cultures were too different. Hence why the empire fell and Balkanized.
Facebook applies dubious “false info” fact-check label to Patriot Act video
The semantics required for double entry are essentially that multiple records are being added to different tables, and there are math rules that have to get applied to the values in specific fields across those tables (e.g. to ensure that the individual account transactions balance). It's not just an atomicity problem, there is a correctness issue specifically around the data.

These rules are not expressible in what SQL databases consider to be field-level constraints. They can be expressed in triggers, but doing that is the path of pain.
Woops, fixed it.

Thanks for noticing!
> Might as well rent bare-metal servers. It will cost you less.

Long term, but up front costs are what make cloud services appealing.

FWIW, it's possible to minimize your idle VM costs to an extent. For example, you could use one or more autoscale groups for your cluster and keep them scaled to one vm each. Then use tools like cluster auto scaler to resize on demand as your workload grows. You are correct that idle vm costs can't be completely avoided. At least not as far as I am aware.
Funnily enough, just the other day I was thinking of a wood gas generator. It would be interesting to see an efficiency comparison, as the wood gas generator also gives out a lot of waste heat. The internal combustion engine is itself not more than 25% efficient so you won't get great efficiency there either, if you add up the losses from generating the wood gas.

But it should still be much better than these thermoelectric generators.
What specifically do you think this CBP UAV is equipped with that should preclude it from flying over a city? Cameras?
Using Kerberos as originally intended, meaning that you exchange AP messages (or GSS-API security context tokens) to authenticate and set up session keys, which you then use for session protection using KRB messages (or GSS-API per-message tokens), then it turns out the vast majority of applications don't even need replay caches. The reason is simple: most application protocols follow up the exchange with data that is not sensitive to replays.

Relatively few application protocols actually use Kerberos as originally intended though. Many SASL apps run over TLS and don't use Kerberos for session protection, for example, in which case you have to make sure that the server certificate PKI is as good as Kerberos (this is not a big deal in corporate networks). And HTTP/Negotiate uses Kerberos as a bearer token. There are some extensions to do channel binding of Negotiate tokens to TLS, but those are not universally easy to use because of complications to do with reverse proxies and less-than-universal client support.

Anyways the "dialogue" exposition is pretty neat and stands the test of time.
> To be honest, how you make the jump from looting and destroying property to someone's life being threatened is beyond me.

From "this is calling for summary judgement and execution without trial. Whatever happened to innocent until proven guilty?"

> Destroying or stealing property doesn't justify killing

This is not some universal truth as you try to make it to be, but rather your personal morals.

> Having your property taken away doesn't imply a threat to you

As I said before "Sure it does. If it did not everyone owning property would go to the entrance and physically block it. In addition it implies imminent threat to the well-being of these that have their property taken away from them."

The looters are looting while using the threat of violence.

> if that's the standard then we should just execute every petty thief and vandal

As I said before "Under normal conditions I would support shooting them only if it is the only/safest way to stop them (either from committing the act or from running away)."

What is the point of repeating the same statements over and over?
> And yes, software developers do go from contract to FTE. The interview process may become somewhat pro forma in that case,

This whole paragraph sounds very weird to me. It runs completely opposite to my experience.

I have never worked at a place which made contractors go through technical interviews. That sounds like a huge waste of time when you already know how they perform. Interviewing is costly.

In the field I used to work for, hiring contractors was seen as a major pain because you had to be careful about not spoiling your relationship with their current company and contracts tend to have clauses about "poaching". It was never done unless you really wanted the guy.
Twitter feed of the top videos posted to HN
The async nature of internet routing, bonding, traffic sharing cold vs hot potato, against the rumoured capabilities of these rooms has always bothered me.
You would have to be in a position to decrypt or store both directions of the async flow, then correlate that flow between locations that could be for example an alternative landing station on the other side of the country.
Or am I completely wrong and are both directions of flow somehow easy to gather or simply not important for the level of detail needed to spy? Eg. You only need to see the request for an A record, not the response, or you only need to see traffic going to target A have suspicion and you work back to access or sync traffic locations with ISPs?
I'm not saying they're wrong, hence the use of "currently". I'm figuring it out in the other subthread.
Who's performance has been abysmal, and they've proven to be the lap dog of the CCP. I totally agreed with the funding hiatus, this is a surprise move to me. There's a lot we don't know.
This has been explained on HN ad nauseam. It leaks less metadata than anything else, the phone number is the only metadata that it leaks (only to people you’re messaging, mind), and they’re working on a solution to that problem right now. It works that way because the developers wanted to avoid holding a central server with metadata for their entire user base. Instead it uses your local contact list to discover other users. I would say that being unencrypted by default and having a centralized metadata directory in plaintext is more of a cock-up in secure messaging than taking a rigorous and cautious approach to metadata leakage.
Nothing. We use Terraform to provision a simple auto-scaling cluster with loadbalancers and certs, does exactly the same thing but there is no Docker and k8s. Few million lines less Go code turning yaml filed into seggfaults.
Which are 12 & 10 year old features, respectively.
For load balancing you can just run one of the common LB solutions (nginx, haproxy, Traefik) and pick up the services from the Consul service catalog. Traefik makes it quite nice since it integrates with LetsEncrypt and you can setup the routing with tags in your Nomad jobs: https://learn.hashicorp.com/nomad/load-balancing/traefik

What Nomad doesn’t do is setup a cloud provider load balancer for you.

For persistent storage, Nomad uses CSI which is the same technology K8s does: https://learn.hashicorp.com/nomad/stateful-workloads/csi-vol...

Logging should be very similar to K8S. Both Nomad and K8S log to a file and a logging agent tails and ships the logs.

Disclosure, I am a HashiCorp employee.
Video: Using Trailing Commas in Python
One way to test if your playbook is declarative is try to rearrange the states and have them in different order. If the playbook breaks with different order it is imperative.
Check out Cluster AutoScaler: https://github.com/kubernetes/autoscaler/tree/master/cluster...

This tool allows you to autoscale the cluster itself with various cloud providers. There is a list of cloud providers it supports at the end of the readme.
Microsoft ignored the same exact point (official multiple UI) for C# for years, despite having it at some point (Silverlight out of browser). So I can totally understand what you are expressing there, yet I think there are even less chance Apple act on and provide such framework in the future.
Sure, some folks enjoy them. I'm not arguing this at all: It is just that it is hard to say that folks actually prefer them if they cannot comply with a standard university's requirements - class times, for example. Which really is the reason the colleges would go after older learners.

I'm going to guess that there are a few schools that do specialize in this segment - I know Ivy Tech in Indiana use to make an attempt. Not every campus offered non-traditional class times, not all degrees were offered at those times, and I'm not sure you can get more than an associate's from there.

There are other weird quirks as well. So many people cannot drive to the school locations (and keep their jobs) and many jobs simply won't work around a college schedule, especially not one that changes from semester to semester. (To be fair, 'traditional' college students have this problem all the time, but it is easier to switch jobs when young than when one has a family and insurance to consider).
I don't think the police of that city hold a high enough social credibility to be given the benefit of the doubt right now. There is a long and well documented history of racism in that department. So when they do something that might be driven by racism, and the only information we have to go in is past behavior, it would be foolish to assume that racism didn't play a part in their decision.
What part of Kerberos is currently the scaling limit?

One of the problems with WebPKI is that it's just for the web! Things like SSH and eMail can still benefit from a common, managed authorization infrastructure.

Kerberos is largely transport agnostic: it has been integrated into many protocols such as telnet, ssh, ftp, http, anything that can use SASL or GSSAPI, even stuff like Hadoop.

Kerberos realms also closely resemble DNS names and discovery can be tied into SRV records and well-known-names.

Kerberos tries really hard to do authentication and rely on other, existing systems for the other bits. If your resolver supports DNNSEC then it'll check your Kerberos-related DNS records as well.

On the other hand, I don't see any clear evidence that users want a global hierarchy in their authorisation. Corporations and other entities typically use Active Directory on local domain that's not otherwise used on The Internet. SSH keys are trusted on a per-key basis, so I don't see a great need for it to be tied into the Web/SSL CA systems because trust is established in other ways and it's almost always with an entity that you already know or have a relationship with.

Of course, there's a case for delegation, etc within an organisation, but that's a different problem to delegation in global DNS.

I also see a small need for some kind of probabilistic uniqueness to avoid namespace issues with mergers and acquisitions. Most existing solutions that have a namespace at all (AD, Kerberos) handle this reasonably well already without guaranteeing global uniqueness.

So what part of Kerberos is at its scaling limit and how could it better mirror the DNS without adding too much complexity or taking on too many more responsibilities other than auth?
Sounds like the exact nightmare a previous employer was living. AWS' (awful) web UI convinces the faint of heart to click through wizards for everything. If you're not using version control for _anything_ related to your infrastructure...you have my thoughts and prayers.

+1 for "click-ops", perfectly put.
Those are the advantage and the problem of nomad. We're using it a lot by now.

Nomad, or rather, a Nomad/Consul/Vault stack doesn't have these things included. You need to go and pick a consul-aware loadbalancer like traefik, figure out a CSI volume provider or a consul-aware database clustering like postgres with patroni, think about logging sidecars or logging instances on container hosts. Lots of fiddly, fiddly things to figure out from an operative perspective until you have a platform your development can just use. Certainly less of an out-of-the-box experience than K8.

However, I would like to mention that K8 can be an evil half-truth. "Just self-hosting a K8 cluster" basically means doing all of the shit above, except its "just self-hosting k8". Nomad allows you to delay certain choices and implementations, or glue together existing infrastructure.

K8 requires you do redo everything, pretty much.
In CA specifically if you accept a better job and quit, then later this other job never materializes that is good cause and you would qualify for unemployment.

Per https://www.edd.ca.gov/uibdg/Voluntary_Quit_VQ_5.htm on whether a voluntary quit qualifies for unemployment

>[T]he quitting must be for such a cause as would reasonably motivate in a similar situation the average able-bodied and qualified worker to give up his or her employment with its certain wage rewards in order to enter the ranks of the . . . unemployed.
MCAS was not a bug. The software behaved excatly as specified.

The issue was the specification itself, which assumed pilots would reliably catch the uncommanded trim down, diagnose it and disable the whole electric trim subsystem within seconds of the problem behavior arising.

That assumption turned out to be massively flawed.
> I thought we appreciated freedom of speech in the US, and that includes freedom to ignore speech.

That's precisely the problem: freedom of speech.

It's starting to seem pretty clear that people with certain views are getting moderated, censored, sanctioned, and generally have their speech policed and restricted on Twitter.

People with different views are not being policed in the same way, even when they violate the same rules (see for example the Iranian president who never got moderated despite tweeting genocide ethnic cleansing threats on a regular basis).

Freedom of speech is precisely the issue, precisely what's at stake here.

Twitter is restricting the freedom of speech of right-wing users, then pretending they're just a neutral user-content platform.

They can't have it both ways.

Personally, I think free speech protections should apply to big platforms like Twitter, or else we risk the de-facto elimination of free speech in our time, since the contemporary town square happens to be owned by a private corporation.
You are about 100% right on the mark here. There is only one slight problem: people don't want to pay for very high quality software except in a very limited number of fields.

In a way every real software improvement (not fancy language flavor 'x' of the year but entirely new ways of developing software) have always been with the main goals of writing software with fewer bugs faster.

That's the whole reason we have abstractions, compilers, syntax checkers, statical analyzers and so on. In spite of all those, software still has bugs and budgets are still not sufficient to write bug free software.

On another note: this problem is getting worse over time. As tools improved codebases got larger and the number of users multiplied at an astounding rate resulting in many more live instances of bugs popping up. After all, software that contains bugs but that is never run is harmless, only when you run buggy software many times does the price of those bugs really add up.

Somewhere we took a wrong turn and we decided that more of the same is a better way to compete than to have one of each that is perfected and honed until the bugs have been (mostly...) ironed out.
For most of my day-to-day projects, there is no TS transpiling happening at all, .ts/.tsx files are supported by many toolchains in the very same way .jsx files are supported (without any additional overhead over the regular transpiling that is required for any modern JS project). TypeScript is really only active within my editor, not during bundling. This gives me reliable intellisense, code completion, jump-to-definition, rename-symbol, and other IDE features across the whole project.

> Typecasting along with Webstorm introspection virtually eliminate may of the issues that TS was designed to solve.

I personally don't want to stop at /virtually/ eliminating issues that arise due to type errors. I want to /reliably/ eliminate them. And the only way to eliminate type errors is to run a static type checker over the project. (I know the TS type system is not 100% sound, but most definitely better than manual typecasting at runtime).
Well, set me up one. :P
This syntax might look like it require less magic, but you still have to implement everything react does for hooks that takes care of re-rendering cycles.
Let's say you can increase your own salary, and no one is going to stop you from doing so. While some may not want to because it's a non-profit, others will happily nudge their pay upwards.

Eventually the universities that hesitated to raise their pay will be well below the pay of the others, and feel forced to raise their pay to something comparable to attract decent talent.

Same sort of trend occurring with CEO pay, just with a lot less hesitation because no one feels like they're robbing a charity.
> One approach involves using libraries or frameworks such as Flow or TypeScript that require transpiling or otherwise prepocessing the code.

This is a crucial premise of your article, and it's untrue. TypeScript[1] and Flow[2] both support using their static typing without transpiling anything (i.e. the full power of the type systems in plain JS files).

As far as type-cast functions, I've never found that I needed them after switching to TypeScript because the compiler checks that for me.

If you use type guards on all un-typed input (JSON requests/responses, for example), then you don't need type casting at all because you always know your variable's type. That's the whole point of static typing.

1. https://www.typescriptlang.org/docs/handbook/type-checking-j...

2. https://flow.org/en/docs/usage/
Unfortunately, most pellet stoves depend on electricity for the fan and controller and stop if the power goes out.

Gravity fed pellet stoves exist but have problems with consistency (and avoiding backdraft fires).

I've thought about building a pellet stove with an integrated Stirling engine generator, but it's a bigger project than I have time for. It should be more efficient than thermoelectric.
It has enough energy to burn down a house in minutes.

Meh, so does every electrical outlet, matchbook, and cigarette lighter in your house. Unless and until I start to hear a lot of horror stories about people who burn down their houses with homebrew lithium battery packs, I'll refrain from clutching my pearls.

What does seem to happen frequently are fires caused by sketchy prefabricated battery packs that are commercially available but probably shouldn't be. I'll put my soldering, electronic assembly, and spot-welding skills up against some random Chinese wage slaves any day.
This list isn't really fair. Mosquitoes don't actually kill people, they are just vectors for a disease which does kill people. So then humans should get a point for every death due to flu, AIDS or COVID-19, right? And all the accidental deaths too, because I'm pretty sure the mosquitoes are just living and don't intend to kill anyone. So I think human should be number 1 by a very long way, followed by mosquito.
"We Kill People Based on Metadata", General Michael Hayden, former director of the NSA and the CIA.

https://www.nybooks.com/daily/2014/05/10/we-kill-people-base...
Not necessarily. There are different styles and reasons for money laundering. Selling overpriced items (and colluding with buyers) is a good way to "launder" the provenance of money. Works perfectly fine in online, electronic transactions. The clean money comes from legitimate sales.
Luckin Coffee growth-hacked their way to a $12B valuation
Contract with a union can’t come in conflict with criminal law.
Constant vigilance and restrictions work if a vaccine's coming, it will slow down the process if we are waiting until "enough people have achieve immunity by getting sick". Overall, I agree with you though, partly because I'm moderately optimistic about the prospect of finding a vaccine.

Moreover, thinking about this a little more, I think one other thing we are waiting for is effective protocols to minimize the mortality rate (not sure if I'm using that term right). I'm not necessarily talking about a cure, but also things like when to use a ventilator vs not use a ventilator, etc. I think we're still in the learning phase on that, and even if the end solution is letting the disease run through the population, I'd be more comfortable if the patient care science of covid patients was further along before we ease restrictions.
> For a start, let's cut any administrator that was not considered needed for the proper running of a university 30 years ago.

What makes you so sure universities were sufficiently well-run 30 years ago? And what makes you so sure other people agree with you?
Good cause is not limited to those reasons. Leaving for another job is good cause in CA, NY, MA and many other states depending on the specifics.

Per https://www.edd.ca.gov/uibdg/Voluntary_Quit_VQ_5.htm on whether a voluntary quit qualifies for unemployment

>[T]he quitting must be for such a cause as would reasonably motivate in a similar situation the average able-bodied and qualified worker to give up his or her employment with its certain wage rewards in order to enter the ranks of the . . . unemployed.