skysight-inc/HackerNews huggingface dataset:
It's actually pretty good analogy, when you're searching for an analogy of something being technically accurate while missing literally the entire point.

Making your code "more intuitive" does not result in a better product. Making a better product does. The argument is that software development is one of the few jobs where the employees' experience seems to be equal or more important than the client experience. Sacrificing a restaurant goer's experience (taste) because it makes the restauranteur's experience (customer LTV) better is a decent analogy.
I believe the expectations of having 0 downtime was not expressed until the day of the transfer.
Organization warns children “may be hurt” and separated from parents
In a time where so many people are looking for jobs, this is gonna be a race to the bottom.
For N=1 failure can be catastrophic.
Funniest written angry comment I've read recently, thank you. If the topic was not sad, I'd probably laugh by now.

The problem is, that many big ones including government and also in consequence smaller fish wont quit the Googlenet, but for the sake of short term profit will stay in it, no matter how much it stinks. (Oh, you got no Google shopping card? How are we going to check your identity then? No, we cannot deal with you here, we are sorry!) This might make it very difficult for people to get official service without involving big corp.
I went to a talk of him once (I think at Heidelberg University) and can confirm: He is an outstandingly good speaker.
yes, i agree completely.

but! how many keys to your car or to your home have you got? i'm willing to wager that you've got more than one. in the same way you never should have one key to your account, especially with hardware keys, but 2fa code apps should also apply.
> do you really believe that people will begin taking delivery of their physical gold positions in their garages

They could set up a trusted storage facility to hold the gold in a vault for them. It isn't that hard to imagine. They could call it a "bank" if they really wanted to be traditional.

Just because you don't feel like being imaginative doesn't mean that people won't be when large amounts of money are on the line. People are downright ingenious when it comes to securing their wealth.
Known in liquid fuelled rocketry as a BFRC.
I think Julia would be a better choice, especially since you can directly use R & Python from it. This way you can implement the methods in a scientific language yourself and still use the original R methods.
But the goal was zero downtime, not minimum downtime. The client made it clear that 5 minutes of downtime was equivalent to catastrophic failure. So they correctly found a solution that reduced the chance of "5 minutes of downtime", at the expense of an increased risk of catastrophic failure.
I guess servers have gotten a lot more robust in the last decade...there's no way any server I ever managed would survive something like that.
How effective two-factor auth is in reality
How much can they possibly burn immediately upon delivery and which other fuel would it replace?

I don't know for sure, but my hunch is that it's insignificant in terms of extra carbon emissions.
If the hidden data is encrypted anyways, then wouldn't it be indistinguishable from truely random data? What would then be the point of distributing it randomly or in order?
Don't hold your breath.

Azure officially has IPv6 support, but like every other cloud vendor, they are 100% native IPv4 with IPv6 bolted on as an afterthought.

For example, it's impossible to create an IPv6-only Azure vNet.

The metadata API endpoint is IPv4-only (169.254.169.254).

So on, and so forth...
Censys, a search engine for internet devices, raises $15.5M Series A
No good reason for C/D/... other than the wanting to learn the particular language. Otherwise, use R or Julia to stay in the scientific domain.
Broadcasting Vinyl to a Chromecast
Out of curiosity and without any condescention implied, are you saying this because the business you're currently working on seems less important / relevant / urgent, to you, than space exploration ?

Because, "these guys are making rockets in tents", sure ; but, meanwhile, someone is "fixing up human beeings in an hospital", "teaching kids how to read in a school", "writing poetry in a basement", etc...

There probably isn't any objective way to rank pursuits (or at least, no "objective" way that does not end up in a dystopian society and / or Golgafrincham [1].)

And it's not like anyone is actually counting score (unless you're Chinese. Someone is counting score on you at the moment. Deities have mercy on you.)

Those precautions aside, if such an event is triggering you to pause and reconsider you life choices, than go for it ! Maybe you actually need to branch and try and get to work in space exploration after all.

And if you're not clever enough, educated enough, US Citizen-enough, etc... there are opportunities to inspire others, educate others, help others...

And in the end, just plain looking at the sky. This thing is darn cute.

Enjoy the journey.

[1] https://hitchhikers.fandom.com/wiki/Golgafrinchans
Ten takeaways from ten years at Retraction Watch
Reminds me of this - https://www.youtube.com/watch?v=vQ5MA685ApE

'Moving online webserver using public transport'
My company does the same thing, our "meet some of the company" video features 90% of our non-white employees, while only showing about 10% of employees. The sane thing to do seems to just ask who wants to go to career fairs/be in other recruiting efforts, and not base race in the decisions.
> construed as Instacart assigning orders to their shoppers

Uber & Lyft assign rides to drivers. [You can still cancel them after they ping you, but it's discouraged.] It seems to me like it works extremely well overall compared to what Instacart is doing.
Lungs Can Fill Up with Jell-O: A New Pathway for Covid-19 Inflammatory Response
Olric v0.3.0-beta.1 is out: Embeddable Distributed Topics in Go
Yes. Working self driving.
It's no different until raiders show up at your door. Your million dollars can be stored in assets outside your home.

Also, IIRC, gold quickly lost its trading value in post WW2 Germany because, uh, you couldn't eat it.
A number of large companies are quietly moving towards reproducible build. Sorry if I cannot name the names.

As a side note, reproducible builds implemented in Debian were also useful to spot various other problem: small differences in build environment that would make debugging more difficult.

Sometimes the same application will have different performance depending on the build due to memory alignment, data ordering, cache friendliness.

Finally, the article is making some claims that are, frankly, incorrect:

> Q. It’s easier to audit source code than binaries, and this will make it harder for vendors to hide malicious code.
> I don’t think this is true, because of “bugdoors”. A bugdoor is simply an intentional security vulnerability that the vendor can "exploit" when they want backdoor access.

Adding a backdoor and compiling a new "custom" binary might take 10 minutes and a lot of people in a company could do it and leave no traces.

Writing a "bugdoor", committing it and passing code reviews is very different. You might have to justify why you are touching a product / component / library that might be completely unrelated to your usual work.

Plus, you leave a very clear record of your action, giving up a lot of deniability.

> Q. It’s easier to tamper with binaries than to write a bugdoor, so reproducible builds do improve security.
> I absolutely disagree, every programmer knows how to write a bug or short circuit some logic. Hiding malicious activity in a binary, with a multi billion dollar malware industry determined to find it is more difficult.

This implies that the malware industry is somehow unable to detect a "bugdoor" or unexpected behaviors a runtime but able to detect a change to the binary...

> In addition, once you’ve produced and signed the malicious backdoor, it is not repudiable - you can’t deny you wrote and provided it.

Most organization track source code changes in a VCS but don't require employees to sign binaries with keys bound to each individual. If anything, this makes a point in favor of repro builds.
Sure, let's throw the framework out of the window along with its built-in CSRF protection, sensible security headers, templating language (which escapes input properly by default) and well-defined interfaces which enable me to e.g. access Request information. What could go wrong? For 99% of web applications, you probably need these things.

I hate working on codebases that have been built without a framework. There's rarely any proper organisation of code. The quality of the code that the developer has rolled themselves is usually poor. At least if folks use something like Symfony or Laravel it's harder for them to shoot their foot off.
I suspect you're conflating/confusing subsistence farming with industrial "farming". As someone who has lived a "subsistence" lifestyle for a long time, now (decades) one can live really quite well on a "sub-poverty-level income" simply because you're quite decoupled from conventional-money economies. I've heard it called "abundance poverty" (not "abundant poverty", to be sure! :) )

It's worth a disclaimer, though: I practise this subsistence (aka "self-sufficiency") living outside the USA. USmmv.
probably because proper architecture (clustering, HA etc) and planning would have never made this an issue. This is still an extremely risky operation, hot swapping power and switching interfaces on the fly all while sitting on a cart in a corridor. In any disruptive work there is never a guarantee of no downtime for affected assets. I know the OP came in as a consultant, but If I was the MSP tech, I would have demanded a paper trail a mile long to cover my ass if this went sideways and If i was the account manager for the client, I would have refused the work. Its not good business to agree to do work where you know there is a better than good chance there will be an outage and your client is saying they wont pay if there is an outage. Even agreeing to it puts you in a bad spot for future work.
I guess as an outside consultant, bewilderment is a better reaction than ranting, but this is the kind of shit that drives ops folks crazy
In addition to that the customer runs a single server but expects the guys to maintain a property not even feasible at Google scale: Zero downtime. Overall the whole thing was just ridiculous, but luckily the customer got a nice bill in the end.
There is a typescript for lua: https://github.com/teal-language/tl
> Numerous manufacturing delays

SpaceX has that and they have Gwynne. So do pretty much all other car manufactures, specifically with electric cars.

Having great service while scaling is insanely difficult. Just having some other influentual manager is not gone magically solve that incredibly difficult problem.

Overall the company has been anything but messy, rather they have been executing pretty well, better then most people expected.
Path MTU Discovery is broken in Azure's IPv4 stack as well, which is even more sad. Similarly to you, I had to report to them that their VPN tunnels only send PMTUD in one direction, so you get this wonderful experience where TCP streams with big packets work in one direction, but not the other! With most ACK packets being small, this can take a surprising amount of time to discover and troubleshoot.
This is a great point, so how do you handle this?

Rails doesn't have any separate facility for migration account vs production account, by default. Which because our deployment paradigm also doesn't have any such separation, resulted in an awkward conversation with our DBAs where we explained that our production login requires the DDL permissions they thought should be reserved for an admin user.

I think they're right, but there's only one place for setting the value of DATABASE_USER in each environment. So do you handle migrations by hand, out of band with a different user than production uses? (How should a regular Heroku user handle this issue, I guess is where I'm looking for a straightforward answer to this common issue that I think you're absolutely right about...)
Yeah, this is exactly the sort of thing I'm talking about. Lots of additional overhead and work, and — again, speaking as a home user — no apparent benefits for dealing with it all.

I get all the concerns about CGNAT and so on, but that's something for the ISP to figure out. If I get a message one day saying that my connection speed is about to drop 30% because of my insistence on IPv4, I will of course react!

The question for me is not, "why would I block it?" but instead, "why would I enable it?". There needs to be a reason, and right now I'm not seeing it.
Hint: You didn't read the link. It has nothing to do with the N child policy. Here:

"The Chinese government has deployed a mass sterilization campaign against Muslim ethnic minorities in the country's western provinces, according to a new report, which argues the tactics could amount to genocide."

"Those camps are used as a form of threat and punishment, with officials detaining women and families who fail to comply with pregnancy checks or forced intrauterine contraceptive devices -- more commonly known as IUDs -- sterilizations, and even abortions."

> The original question is how the situation is communicated and discussed in China

I was responding to your delightful comment...

> what if XJ works?

And I pointed out your hideously lack of morality which is the point. So let's ask, how would you like it if your wife was sterilised against her will or had a forced abortion?

ANSWER THAT QUESTION PLEASE. Because that is what morality is about. If you don't like it, don't do it to others.
Take a look at teal, it does exactly that.
If you would sell every time something reaches all-time high, you would really not make any money.
This may help https://github.com/FiloSottile/mkcert
Interesting read, makes me wonder as a thought experiment if it counts as downtime if the latency of commands on the machines rises to 5 minutes?

You could clone the VM to another instance and record commands going to VM1 and replay them to VM2 after 5 minutes.

This whole brain fart of mine doesn't make much sense but if you play along with it, does it still count as a downtime or just very high latency?
Here's a hypothetical but a realistic scenario that not having reproducible builds is a major issue:

1. I create an app for a client.

2. Client installs the app on their 10,000 enterprise mobile devices and trains the users.

3. Month passes. I've changed everything in the app.

4. Major security or outage event happens. I need to change a line in the app and those 10,000 devices need to be updated ASAP.

5. If I can't checkout the old version, change the line and ship it without wondering "what else will change in this build" - then both me and my client are going to have a bad time.

It will take two weeks for a full qa/audit of the app and there's no time for that.
I have successfully used “has my mother heard of this” as a reason to sell a few times, notably Bitcoin and selling out a political bet position on Pete Buttigieg — essentially at the point my not-especially-well-informed mother has heard of something, I no longer have any kind of information advantage.
Am I just missing it or doesn't npm link to the repo behind it?
I think there is something to be said for when one first discovers Bayes; not least because its often presented like this article as a sort of enlightenment. Perhaps the finest work on the topic is probability theory by Jaynes; if the underpinning of the Bayesian sect was to have a bible that would be it and BDA3 would be its practical counterpart. I say this both owning and having read both and having invested a a lot of time purveying, learning and applying the Bayesian perspective.

What Bayes makes possible, from an applied statistics perspective, is a kind of unification of a large variety of modelling approaches into a single framework fitted in the same way: simple regression yes, but also hierarchical models, mixtures, pooled, partially pooled, hurdle, regularised, horse shoe, and so on. So when you learn Stan or PyMC3 or Nimble or whatever, you're enabled to go forth and make myriad custom models: this is powerful, and it is enough to respect Bayes.

Various results show that lots of other models can in principle be expressed in a Bayesian way given the right prior; hinting in some theoretical sense that Bayes is a universal modelling approach: the panacea you've been looking for young statistician.

However, Bayes has many epistemological problems and for the actually interested reader see here for a summary:

https://plato.stanford.edu/entries/epistemology-bayesian/

There are thus lots of reasons to believe that we do not think and should not think in a Bayesian way.

For other mind expanding papers consider Andrew Gelman (very prominent Bayesian) and Cosmo Shalizi (of 3 toed sloth fame):

https://arxiv.org/abs/1006.3868

and Breiman (of random forest fame):

https://projecteuclid.org/euclid.ss/1009213726

For those, like myself, that are out there (like Breiman was) trying to actually solve real world problems; you find yourself quickly limited by the Bayesian approach. The data generating process of the real world is totally not obivious MOST of the time but you are forced as a Bayesian to pretend otherwise. As much as I love problems where Bayes does work well; they are fairly few and far between for me.

So as a closing comment; lets not "Bayes all the things", as tempting as it is. It is in many respects the first part of the journey for many avid evangelists and self confessed "how I became a Bayesian" converts, but its not the end all.
You are mixing up two related issues.

Trump may be a terrible source for actual facts. You would be nuts to use his statements as advice for running your own dockyard, for example.

Nevertheless, what he thinks about this is relevant because it will shape how the US reacts.
I am so scared to imagine what would happen if there was any issue during the move (very likely when dragging live cables and powers over hundreds of meters).

The client would immediately refuse to pay anything because he was very clear he wouldn't pay a thing if there is downtime.

Then, the next contractor would be super quick to judge you and the situation, reinforcing that you were an incompetent idiot and the client was right to kick you away on the spot and not pay a dime.

Glad it went well in the end. There is so much to lose for the person trying to help.
To be fair, Google maintains zero downtime for small time scales like this a lot. Most of the time, actually.
I understand that even without efficiencies in routing it makes senses from an operational perspective it doesn’t mean that the privacy implications are quite horrendous.
They've internalised their constraints.

RFC1918 was forced upon the cloud providers only because there weren't enough IPv4 addresses to go around.

If Amazon had started in 1980, they would have simply allocated a /8 for each region and be done with it. No NAT, no gateways, no address translation of any sort. Everything routing to everything else natively.
Because the dollar is the reserve currency of the world, it will hyperinflate if and when the international community begins transacting en-masse in other currencies or even in gold, and dumping us bonds. Then all those dollars outside the US, which are most dollars, will go back to the US and hyperinflate. This could happen if the current instability in the US continues.
"We have a very good relationship with the people of Lebanon and we will be there to help. It looks like a terrible attack," Trump told reporters at the White House.

"I've met with some of our great generals and they just seem to feel that this was not some kind of manufacturing explosion type of an event ... They seem to think it was an attack. It was a bomb of some kind."
I want to integrate your service to remove background for product images. However, not everything works well, especially when background and foreground color are close.

that's fine. The thing is that on the website, there is a tool to fix imperfect results, but with the api, there is no such tool.
Good thing the server had two power supplies. There was a YouTube video (which I can't immediately find) of people moving a server across town, on the train, without powering it off, and, IIRC, they had to splice the UPS into the power cable.

When it's done for pay rather than for fun, and payment is conditioned on zero downtime, I hope they charged a premium to make up for the risk of no pay. Offhand, I don't know what's a good way to do that -- I've never had a consulting client demand terms like that for billed-by-the-hour work.
Wouldn't requests time out on the client side long before five minutes?
The work women did is very different from today, it wasn't programming we thinknof today. Majority of women I know in my life don't want to fiend their lives in front of computer doing weekend projects, skip social interactions like nerds do. But I also think it's not good or healthy for them either.
I am confused by the criticisms "a superimposed set of abstractions. Nothing more." and "nothing to do with its processes". Surely that is exactly what this kind of framework attempts to achieve? ie ways of abstracting to make better decisions when the problem is too complex or soft for process-level understanding.
The weekly picks of top dev news are here
Announcement of LibreOffice 7.0
What if... we don't really defeat it? no, maybe that's too pessimistic... What's the worst case scenario in case we have to live with Covid-19 for a few more years?
In the error message, it looks like the OS is too sure that it is malware. And the autochecked report is weird.

For comparison when Chrome [1] or Edge think a site has malware, the error message says something like "This site may harm your computer. Go back to the previous site. (But if you think it is legit click the (tiny) button to go to the potentially unsafe site anyway.)"

[1] https://www.google.com/search?q=This+site+may+harm+your+comp...
WebGL Fluid Experiment (2014)
>> The goal is not so different from OOP, which is about structuring programs as reusable components (AKA design patterns)

And it is exactly the overuse of design patterns that is one of the reasons that OOP has become less popular over the years. I see a lot of similarities with FP there.
Once you learn a new design pattern it opens your eyes to new and beautiful solutions for existing problems. And of course from then on you want to use it wherever you can. To repeat a cliché: If your latest tool is a hammer, every problem looks like a nail.

This overuse of abstractions leads to software that is hard to understand and because of that, it actually becomes harder to maintain or extend, while the whole point of design patterns was to make it easier.
This doesn't mean that design patterns, either in OOP or FP, are bad, no they still are really powerful but only if used when they are strictly needed; they should most of the time not be used to introduce some opportunity for reusability if reusability is currently not needed.
File Descriptor Transfer over Unix Domain Sockets
> Me: You didn't notify them of scheduled maintenance like we discussed on Friday?

It appears that the client didn't have the specific requirements on initial consult.
Reddit (for reasons related to user demographics and feedback loops) rewards certain types of writing and implied viewpoints. Following best practices and rules is one of those things. This server migration clearly runs counter to established wisdom so OP using a writing style of "look how terrible and asinine this was" will be rewarded and gain traction much more than a "look how interesting this was" writing style.
Is it actually a TS for Lua or does it use the annotations to improve performance?