skysight-inc/HackerNews huggingface dataset:
New milestone, 100 influencers on board
Would a captcha have helped?
I get where you are coming from, but “reproducible build” is a well-define term especially in the realm of kernels / OSes
That's an interesting response, thanks! I think where I disagree is that I think people are pretty smart, at least in one thing, which is survival -- the proof of that is that those who were not, quickly exited the gene pool. That is a powerful filtering that tunes our estimators.

I agree with your last paragraph, but I think it supports my point. I wear a mask because it has zero cost, and it may save my life. When I took this decision, I didn't estimate any probabilities and I haven't used Bayes theorem. Understanding what a mask does exactly and how aerosol transmission of viruses work precisely is almost irrelevant to my decision -- I could be improving my knowledge ("my priors") by studying virology, but there would still be so many uncertainties, that it would hardly influence my decision.
We've been experimenting with Azure's IPv6 support at work recently. The fact it uses NAT is insane - though we could tolerate that. Even worse is that the NAT is broken - it doesn't update the ICMPv6 checksum when it rewrites the source/destination address, so the machines on both ends drop all ICMPv6 traffic that passes through Azure.

This is rather bad considering the importance of ICMPv6 in IPv6 (for Path MTU Discovery, for example).

Their support is being rather useless, despite us having to pay for the privilege of reporting a bug in their own infrastructure to them!
Call me old fashioned, but what about a large capacity iPod or phone storage? And then just store the "master" on your laptop and sync as appropriate.
This sounds interesting. My use case for a SAAS video editing product would be to do some video screen captures, then edit them together, then add voiceover, subtitles etc (are interactive hotspots on your roadmap?) to get a half-decent final cut I could add to my site or share on YouTube.

Also: excellent website. I wish you much fortune in your endeavour!
This reminds me of a famously obtuse and obdurate boss who asked for things that were utterly impossible. He had delusions of grandeur which left him convinced that he and only he was qualified to challenge the “cheap, fast, good - pick any two” triangle.

Naturally, I did my best to explain the laws of physics to him, but he wouldn’t hear it. In a spectacular display of Stockholm syndrome I did my best to appease him for four years, but, as many of you can surely predict by this point in the story, I failed in every possible way and eventually gave up. Just wish I could have my four years back.

I was glad to read that OP at least got paid well for his efforts.
Possible to make this work on LuaJIT as well? If this is transpiled to Lua 5.1 it should be possible to make this work with LuaJIT runtime. Combined with Openresty and gradual typing this could be a quite a good language for writing Backend services.
Seems very risky. Not something I’d want to do if minimum downtime was the goal. One wrong piece of gravel ends up with catastrophic failure instead of 5 minutes of downtime.
Overcoming the Evolving DevOps Skills Gap
Didn't they also brick old Nest devices?

The reasons not to want Google to take over Fitbit go beyond Google's control over data.
https://www.theverge.com/2017/1/7/14200210/amazon-alexa-tech...
From https://www.splcenter.org/fighting-hate/intelligence-report/...

> "Truth language:
A complex and bizarre set of language rules designed to mimic the secret language of the law. All sentences must start with the preposition "for," have a minimum of 13 words, and use more nouns than verbs. Punctuation rules are just as complex."

Minimum 13 word sentences seem to me to be the sort of aperiodic crystal framing under which one could easily hide a saner payload at a reasonable bit rate. But it's probably more amusing to imagine a "sovereign stegocipher" than to go looking for one that somehow uses PACER as a covert channel.
That's good to know!

Edit: Lol, why would anyone downvote this!?
I really think IPv6 is the future but,

Devices configuring without DHCP as a network administrator is really hard. There is no longer a single method to be given an IP6 address, and with the auto methods, there is no log either. Only some clients will do dhcpv6 which means you often have two different auto configuring services on a network.

Similarly, to see devices on a network I now have to use neighborhood discovery whice gives me a bunch of IPs, but very hard to figure out which IP is for that raspberrypi next to me. Port scans are much harder.

Public IP address are great, but now a filtering firewall is always required at the edge, since I don't want my printer being reachable on the internet. There isn't a upnp for IP6 to punch wholes automatically either. Ironically P2P over ipv6 is harder because the firewalls are so unforgiving.
A large part of the problem with IPv6 is that most developers and SA's don't have a lot of knowledge about it. This is why everything new is still built with IPv4 in mind, instead of thinking forward to IPv6. I think we could easily blame lack of IPv6 support at cloud providers to lack of knowledge with the developers and SA's they attract.

If more developers and SA's would have access to IPv6 at home, the practical knowledge of how to work with IPv6 would build up more quickly. I would experiment with it more, and build up more knowledge.

Unfortunately, my ISP does not support IPv6. This severely limits experimentation with it, since all experimentation is locked behind my home network.
Sad that some IoT frameworks (ie Particle) do not (yet) support IPv6.
"The issue was caused by my account being erroneously flagged by automated processes as malicious and was put on hold."

This practice by all the tech companies need to stop. We need an online Bill of Rights. Nobody should be able to put you out of business without giving you a chance to see the accusations against you and respond to them. There needs to be due process. The economy is increasingly becoming online, and thus we're increasingly losing our rights, as the tech companies give us summary judgment and execution.
It's not a good advert for their services, and won't encourage anyone to buy into anything new they create if they just keep closing down services, including paid-for services. You just can't trust them to keep the service running.
Arguably this is what caused the Great Depression. A Gold Standard artificially constrains the money supply, which leads to a drop in economic activity - often after a bubble.

The real problem isn't the amount of money in the system, it's the amount of useful work being done, and the way the gains from that work are distributed throughout the economy. The ideal is a virtuous circle where distributed gains create more activity which creates more opportunity and invention which creates more gains.

The current system is based on control of the money supply, and is the opposite of that. Effectively it's just the Gold Standard without the gold. It leads to the same kind of hoarding and rent-seeking, both of which are economically destructive.
This was the aftermath of 15 kilotons: https://upload.wikimedia.org/wikipedia/commons/a/a0/Hiroshim...

Despite 2750T of ammonium nitrate the yield of explosion was around 0.2-0.3KT TNT
I would call it "inheritance" of discrimination rather than "replication" of discrimination: the skin-colour bias arises because of the Ivy-League bias.

Quotes below:

> "[...] Facebook staffers say that despite adding more schools to the recruiting lists, White managers continue to select from the same Ivy League and West Coast schools they’d attended.

> Many of these institutions act as another racial filter because Black students are often under-represented.

> “Companies will give unfair weight to a school like Stanford, dipping down to the top 20% of students, but might pass on a student in the top 2% of their class at Penn State [...]"
There are a lot of reasons to prefer reproducible builds, and many of them are not security related... It seems a bit presumptuous to argue that noone needs reproducible builds because one particular security argument is flawed.

First, a non-flawed security argument: it only takes one non-malicious person to build a package from source and find that it doesn't match the distributed binary to spot a problem. Sure, if you don't compile the binaries yourself, you might not find out until later that a binary was compromised, but that's still better than never finding out. The reality is that most people don't want to spend time building all their packages from source...

More generally, reproducible builds make build artifacts a pure function of their inputs. There are countless reasons why this might be desirable.

- If a binary is lost, it can be rebuilt exactly as it was. You only need to ensure the source is preserved.

- If a particular version of the code is tested, and the binary is not a pure function of the code, then you haven't really tested the binary. Bugs could still be introduced that were not caught during testing because your build is non-deterministic.

- It provides a foundation for your entire OS image to be built deterministically.

- If you use a build cache, intermediate artifacts can be cached more easily, and use less space. For example, changing the code from A -> B -> A will result in two distinct artifacts instead of three.
> If the dollar hyperinflates, where would people go?

The dollar is inflating right now, where are people going, besides gold? Why would the dollar hyperinflate?
So you just have one giant file full of unrelated procedural utility functions that you include to your new projects?
> take home pay shouldn't be reduced to how well you can click a touch screen or whether you happen to be aware of app automation

Could not agree more. I attempted to do Instacart at one point, and noped out as soon as I saw this asinine, medieval, 'race to grab an order before someone else' bullcrap. I am not playing that stupid game.

If a large number of drivers are using automation software, Instacart should announce it to everyone and provide basic instructions on how to do this so the playing field is leveled. Make it part of the job. Or, better yet, get rid of this awful mess and institute a more fair system.
Doesn't Japanese television have a lot of reaction shots too?
There are other catastrophes pending than COVID-19. It can't really compete with the repression of schooling or church service or bars or thrift stores or, or, or...

Krugman's first piece post 9/11 was about how getting to rebuild a skyscraper was somehow going to be a tremendous economic stimulus, as if the loss of so many knowledgeable and wise people being murdered all at once didn't occur to him... AT ALL!

In college I read the NYT everyday, thought it was the best paper in the world. Then one morning I opened my copy to see a full color photo of my rapist attached to a hagiography of how she had been elected to public office.

Now the NYT CEO is still Mark Thompson, who got the job because as Director-General at the BBC he covered up Jimmy Saville's... I don't have a word for it yet.

Walter Duranty won a Pulitzer for using the NYT to cover up Stalin's genocide of Polish people so that American media didn't seriously cover it until the 1980s.

Don't get me started on how many people with Gilead financial ties are acting as if financial incentives might somehow statistically significantly effect their behavior because it seems to just give me sleep deprivation.
I don't know anyone who would agree with this article, at least publicly. I want my 5 minutes back.
Most large companies in the valley are actively discriminating... They’re not trying to avoid discrimination, they’re using it (unsuccessfully in most cases) to achieve a desired demographic outcome in their workforce.
I’ve often said the same thing. South Pole and underwater cities would be easier than mars or even moon colony. As much as I want the later to happen- I think 1 million people on Mars or Moon will require something that makes them more appealing than even the worst Earth locations. That has to be something pretty drastic. Elon says motivation will be “it’d be cool”. I don’t think that is enough motivation. Still, I’d rather have the capability developed than not, and hopefully those motivations present themselves without being too dire (like a comet heading our way)
> Historically, gold isn't that great, but that's past performance.

Crikey. What performance counts as good in your eyes? Gold has been a pretty rewarding investment for the last 20 years. I think the median annual performance for the last 20 years has been something like 10% in USD (worthless metric for an investor I know, but the point is that most years are very solid up years). That is a pretty reasonable performer in my low-risk book. 2010-2014 represented an unusual bad time to buy gold in a decade long trend of great years to buy gold.

In terms of actual return it depends when you pick your start and end date; but the fact that we sometimes have major crisis was always totally predictable and the major governments responses have been reasonably predicable. The only surprise at the moment is the specific fact that it is a pandemic and in 2020. The price pattern on the charts is not surprising.
To be fair to NASA, they would never have been allowed to pursue a Starship-like strategy. Look at the Space Shuttle, which had all kinds of requirements ladled on top of the program, such as DoD requirements.
Too many people in this thread are mixing build systems vs security.

The author is talking about Reproducible builds about security and only security[0].

https://en.wikipedia.org/wiki/Reproducible_builds
We ought to condemn China for it's human rights abuses. We should also condemn Israel for similar abuses, which it's doing out in the public. Keeping 2 million people in a virtual concentration camp in Gaza, with no hope.
When I first saw the initial video, I immediately assumed a nitrate explosion. A bomb that large would be too hard to place or even deliver (if a plane), and fireworks would not explode with a such a perfect shockwave. The red color of the original smoke is rather telling as well and that it occurred in a dockyard.
> Stupidest thing I've ever had to do.

I don't really understand the "ranty" tone. The client had very specific requirements and the author came up with an effective solution and was fully paid to deliver it. Sounds like a win for everyone.
Randall Munroe, not Randall Hyde is xkcd. Hyde is assembly language. Brain is mush, apparently...
There's little demand for half-baked support.

There would be a lot of demand if IPv6 wasn't an "also ran", a "tack on", some checkbox to tick.

Think about how much network complexity would simply vanish if everything used only public routable IPv6 ranges.

No more split DNS. No more NAT gateways. No need for a separate "public IP" and "private IP". No need to carefully "carve up" the 10.x.x.x range to carefully avoid overlaps... even with future business partners. No need to worry about the "size" of subnets or accidentally running out of addresses in the cramped /24 subnets most people allocate.

It goes on and on.

And on.

But none of that is possible in the public cloud, because it is IPv4 first, and 99% IPv4 by default, and if there's IPv6 support, it's broken, or incomplete, or half-arsed.
In IPv4-land, it's not an 'internal network' if every device must have an externally routable address - if it is required, IPv6 has an obvious advantage.

In the requested scenario (internal Enterprise network), the proper comparison should involved IPv4's 16 million private addresses; I can't see any practical advantage to IPv6 there.
I applaud you for being able to stand four years of this.

I usually get fired from such positions in less than two.
Or just buy the real thing? The problem is since we can't know the future, it's hard to tell if it's a dip or not. I've bought a small amount in the past year by deciding on a price that I'll buy at if it drops below that. It worked out for me, buy it could have equally not dropped or plunged. #prettyMuchGambling
> What complexity?

1. What the hell is DHCP-PD and is it better on or off?

2. What are 6to4, 6in4, 6rd, etc. and should the user care?

3. When should autoconf be stateless vs. stateful? I thought the point of IPv6 was to allow things to be stateless?

4. When should DHCPv6 be enabled vs. disabled? Why the hell is this even a question on some routers if devices are supposed to be "autoconfigurable without DHCP"?

5. What are the more subtle implications of all of the above that are not necessarily mentioned?

6. Give one good reason why in the world every single one of every user's devices should be reachable from anywhere on the internet for even a single moment in time? Why exactly do you feel you should even have a reachable path to my computer, and everyone else's too? Common sense precautions would suggest this shouldn't be possible by default.

Note: I personally don't need responses to all of these. I'm just listing some examples of questions that come up for people configuring it to illustrate why the choice to use IPv6 is hardly as simple as you depict it to be.
It's natural because AWS/GCP/etc are against internet style system architectures (=natural IP addressing of your components), they are all about RFC1918 subnets, NAT gateways and L7 proxying. AWS even tells you it's bad architecture (or at least not "Well Architected") to build internet-style systems.
A Woman Who Was Sold Repeatedily
right, maybe they'll make some sort of funny statement somewhere about Google is not in the habit of closing down services that many people rely on.
ITunes / Apple Music should work.

https://en.wikipedia.org/wiki/Comparison_of_online_music_loc... only lists a few alternatives and a lot of defunct services like Amazon and Microsoft’s shutdown cloud player and Groove Music...
"More often, attackers want signing keys so they can sign their own binaries"

Isn't the idea that you don't have trust signing keys anymore because you rely on consensus? An attacker would probably have a much harder time compromising 10 vendors instead of one.

You are right, about complexity and issues, and you certainly don't "need" reproducible builds, depending on what you are after but it can be beneficial.

Also, you're arguments often seem to come out of thin air:
"reproducible builds are not for users" Why? Maybe not for the average user (yet).
It's actually quite funny that the Zoom auto remove background does a pretty good job. I can't get the same results easily in Adobe Premiere actually.

Snapchat filters are even more impressive and it is magnitudes more difficult and time consuming to get similar results in After Effects.

I really wondered if I was missing something so watched a lot of YouTube tutorials on background removal and object tracking and all I see is that it is very laborious and even than not always a good enough results with edge/transparency artifacts etc.

Adobe really needs to implement new features for this because the expectations are changed by these apps and the bar is much higher.
Harry Potter with Guns
Chrome, Safari and Edge are also implementing SameSite...
At my first job we were starting up the company and didn’t really know what we were doing; one early server was sitting on a folding table and its power cord was wrapped around a leg, so just to replace the table with something more robust involved downtime.
I heard once that their still finding caches of gold from the fall of the Roman empire. It didn't help those rich papos, why would it help you?

I truly don't see gold being of any use in a collapse where suddenly food is the most valuable asset.
Maybe, but non-abstracted code is not DRY, becomes difficult to maintain, and is time consuming to write.

So a good programmer will start to abstract those things, and at that point you're going down the road of creating your own framework.
Wow what a well crafted counter argument!
Sorry was refering to C in that comment with no lambdas, with the GCC extension.
With Chrome you can go to chrome://flags, find “unsafely treat insecure origins as secure”, and allowlist your dev server.
Semantics of execution can vary wildly. Node is somewhat usable except for the "REPL is not async context" which leads to annoying tricks, but for example Python is very non interactive due to code reload behaviour
Really useful. Great project!
In the corporate context, we can discuss all good social causes like diversity, human rights, environmental responsibility at the same time.

Companies need to face real external forces to change or it's just PR level cosmetic changes.

The real change comes from the unions, customers, competition, government or the labour market.

It's not good corporations vs. bad corporations, it's just corporations. Running a company is demanding and corporate decision making has limited bandwidth. They hire some HR manager and offload all good causes for them and separate them from the main business. They affect decision making only in small ways.
I haven't read the article, but I'm reminded of that episode of Seinfeld and the frogger arcade game
> Many also incur what’s referred to as a “Black tax”—additional work such as representing the company at career fairs or conducting new-hire interviews, implicitly distorting how diverse the company is.

Ok, so how can a company show some semblence of being diverse if bringing non-White or Asian employees to the forefront is considered a 'Black Tax'?

> Small wonder, then, that many tech companies lose more Black employees through attrition in a given year than they manage to hire

So Black employees are leaving because they're being asked to help encourage more recruitment from the Black community?

What's the middle ground here? Should they be excluded from these things? Compensated more than their non-PoC colleagues for doing the same work?
This should be further up, for proper context.
Ah no, I strip out the unused functions once the project is finished - I can always put them back in if needed later on from another copy.

Tbh, I simplified slightly - depending on the language, I can have many support source files full of functions, separated based on function type - so networking, IO, calcs etc.
I'd like to see you draw. The capital investment is almost zero. You just need a pencil and some paper. You can get both for $2. Meanwhile you can just go on fiver and hire someone to draw something for you for around $30 (number pulled out of thin air) at a level of quality that would take you hundreds of hours of training.

High skill labor usually involves lots of expensive one time costs. I don't see how there is an opportunity to save money.
Particularly when the exact opposite seems true; without conscious effort, inequality seems doomed to reinforce itself.
> Food spoiles too fast.

Depends on what you mean by food. If you have enough time, food can be multiplied. One potato, properly handled, can turn into a field of potatoes. One walnut, properly handled, can turn into a forest.
My understanding of reproducible builds seems to be different. I always thought of it as a way of ensuring people couldn't deploy edited code from their workstation.

You would ask trusted system A build the code at a particular code-reviewed snapshot. It fetches the code itself, builds, and codesigns. Then you hit deploy on system B, which is the only system with credentials to modify prod. That system looks for A's signature. There's no vendor involved, so maybe I'm missing a better understood picture of what a reproducible build means.