skysight-inc/HackerNews huggingface dataset:
> It has the same wear-out process as a CPU or RAM.

This isn't really true-- flash isn't really like DRAM; leakage currents tend to increase even if you don't reprogram things (and to properly fight leakage-related data corruption, you really need to periodically rewrite and do the erases that further compound dielectric breakdown). And it's especially not true of board-level assemblies, where capacitor failure and solder joints become important.

> A hard drive will wear out based on power-on hours and start/stop cycles, regardless of how much you use it.

Some failure modes look like this in SSDs, too. Studies have shown that SSD age is a much better predictor of failure probability than usage. Depending on how firmware handles things and the cell characteristics, -insufficient use- of a SSD can cause failure, too.

I mean, I did some work on firmware for early SSDs and error rate / lifetime analysis and I've had SSDs lose data in a drawer unused, but maybe you know better. Yes, SSDs are better than HDDs, but not as drastically so as one would think.

I <3 flash. But I also like having big dumb spinny disks. I'm rather glad I can have both.
There's a section in India who consider anything anti-Hindu and anti-India as free speech but anything anti-Muslim as hate speech. They want to muzzle any discussion of ethnic cleansing of Hindus from Kashmir, Pakistan, and Bangladesh by claiming it's hate speech. But they want to have complete freedom for claims denigrating India or Hinduism. E.g. Twitter was accused of censorship when it removed anti-India tweets.[1]

I regularly see posts in Facebook denouncing Hindu gods and Hindus without anybody batting an eyelid. But if someone wants to discuss regressive Islamic practices like polygamy or halala marriage[2] (both of which remain legal in India) then they cry hate speech. "Free speech for me, not for thee."

[1] https://www.aljazeera.com/news/2019/10/twitter-accused-censo...

[2] https://en.wikipedia.org/wiki/Nikah_halala
Facebook Quietly Ends Racial Ad Profiling – Revue
Why not focus on building better and cheaper helicopters?
It's mostly true.
Ok Cosmo Kramer..
Blog-Post-Driven Development
I might be wrong here, but can someone comment on the process required to add additional nodes on Vitess?

Every time I start reading about Vitess, I fall into a hole about manual resharding, hosting multiple vitess instances per host (I think 250GB of storage each?), and that cross-shard reads may be inconsistent.

I am taking a quick look at the documentation of TiDB, and they have automatic data re-balancing, 2PC Raft-based-transactions, global snapshot isolation, and actually some nice dashboards to analyze cluster health.

Vitess just does not seem nice from an operations perspective.
I found a freeware program ScreenBright a few years back and use it so that I type “b 0” in my command line to set the brightness to zero. (I tried it out to confirm that this DDC/CI thing would actually work, before I bothered delving into the Windows APIs to write my own CLI; but then figured, since it had a CLI, why bother? and just wrote a batch file around it that contains `@%~dp0\screenbright.exe -set brightness %1 -set screen 2 -set brightness %1` to do both monitors at once.)
That number sounds like really bad advise to me. Should be more like 99.99% in my experience.

Internal services have extremely low response time during normal operation (p99 around a second) but then the database will start a snapshot or a large analytics query hits on the week end (high IO) and the latency is through the roof for a short while. Too bad if services have short timeouts, they're all failing all requests now for no reason.

p99 is normal operation. Services shouldn't be configured to systematically fail for 1% of operations.
We just had a SOC 2 (type 1) examination for Security, Availability and Confidentiality. [1] We believe independent audits for compliance are more meaningful than any words of assurance.

At an architectural level tidb cloud (managed TiDB) currently dedicates infrastructure for each tenant although we are working on developing lower cost options with less isolation.

[1] https://pingcap.com/blog/pingcap-successfully-completes-soc-...
I’ve really liked home workouts for that reason. Much more time efficient. I prepare my breakfast during the breaks between sets.

It’s maybe not as effective as barbells, but I also hurt myself sometimes with those. My home routine hasn’t hurt me yet.

Basic equipment:

* Chinup bar above doorframe. I like the rogue jammer. You can still shut the door.

* Dip bar, for dips and rows

* Exercise bike, for sprints

Other exercises are pushups, planks, and bodyweight squats. I have a weight vest for when I need to add more to squats, but don’t need it yet. Am doing 50 squats, and they’re still hard just with bodyweight.

Also have a powerblock, but haven’t used it recently. However, it’s a great addition to a home gym, and would go well with a bench.

Cost of equipment I am using was $400 or less. Comparatively affordable, especially if it cuts a gym membership.

Time savings:

* No commute, changing

* No waiting for machines

* Can use rest breaks efficiently preparing food, a mindless task that doesn’t interfere

Will not go back to gym
Well, it doesn't look urban or suburban to me. But, hey, you're the expert.

https://www.google.com/local/place/fid/0x808e2f6cead39bb3:0x...
There’s a fourth option: intentional vandalism that isn’t terrorism, like the fire on the USS Miami.
Thank you for the correction.

I just saw a video by a vintage computer collector who had one of those Ethernet-Localtalk bridges, then realized I used to own one!
My sentiment as well. This was an overly too deep a dive into an otherwise uninteresting subgroup. An article 8th its length would have sufficed.
Well, if we're doing actionable conspiracy theories then:

- it caused $15 million in damage, and $100 million in updated security -> contractor needing work

- it was a "domestic terrorism" event -> what legislation or policies were on the table at this time?

Those would be my starting points.
Beware of gamification. There is a great talk[1] discussing intrinsic versus extrinsic motivation as it applies to video games, with the key insight being that extrinsic rewards decrease intrinsic motivation.
The speaker references a lot of research that seems worth digging into too.

[1] https://www.gdcvault.com/play/1012290/Achievements-Considere...
Facebook, Microsoft, and Malware
Antenna Analysis from Ham Radio to PCBs
The whole idea behind Sendgrid is a joke.

It's become popular for some providers since the move to the Cloud to block outgoing port 25, but apart from that, you literally don't need Sendgrid. Any senior engineer can write a local "Sendgrid" in about half a day. Sendgrid doesn't even support all the RFCs properly, so, you'll likely get dropped mail if you move to Sendgrid from Postfix/Sendmail. Besides that, Sendgrid's UI/UX was terrible the last time I've played with it. It's literally the lamest startup there could possibly be.

As a customer of some unrelated service, I've already converted said service away from Sendgrid in just a couple of emails to the owner. (Sadly, they've moved to one of the many Sendgrid's competitors, not to Postfix/Sendmail, but the switch was obviously painless.) That's how horrible Sendgrid is, and how easy it is to make other people switch.

P.S. I often send mail through shell scripts. Try selling me Sendgrid when my laptop already comes with Postfix/Sendmail, with spool support. Does Sendgrid even work when you have no internet connection? (Rhetorical question: no, Sendgrid does not when internet is not available; but Postfix/Sendmail works just fine even without any internet, and will spool all your mail until you get connected to an internet with port 25 not blocked.) Sendgrid is a downgrade however you look at it.
Maybe somebody trying to sell physical infrastructure security solutions to PG&E?
Not exactly. For example during an automated download, if an http status code is not 200, it's perfectly fine to yield, delete the incomplete data from the failed download, and try the download again. Same thing with checking data integrity. If such fails, one can simply delete, redownload, rehash, and set a variable upper bound on the number of retries.

Of course nothing in space, keeping astronauts alive, should be using the web.
I read the article.

Nope.
This isn't true.

All state you need to keep track of is purely the input state: e.g. whether a button is pressed, keys are pressed, etc. And very importantly, you also need to store the edges of the input signal. That is, you need to store whether left mouse has changed from not pressed to pressed this frame, and whether it has changed from pressed to not pressed.

Then, the Button(...) call computes the hitbox of the button, checks whether the left mouse button has changed from 'not pressed' to 'pressed' this frame, and if yes, whether the mouse coordinates are inside the hitbox. If yes, it returns True, else it returns False.

No widget state needs to be kept.
I assume there's a minimum required so the landlord has all upside and no risk. That sounds like a super bad deal. The only way I can see that being practical is if you're getting space in a super exclusive location where the clientele are mega rich and the margins are insane.
Look into proxy wars in the Middle East and it will be clear.
Based on my experience and people I know, everyone seems to react to every drug differently, and if you read studies, you will find assertions about what it does that contradict individual experience.

I found that 75 mg twice a day made me feel ready to wake in the morning like I basically never have been, but it also had intolerable side effects. Going back to 75 mg/day, halving it, is bearable, but also reverted my sleep pattern.

I am taking melatonin at the moment, because why not, but I don't notice much effect except an increase in dreaming (or remembering it).
You can directly fund you account in the app, no website needed.

I think the real answer here is that Apple considers a stock a physical good.
Nevada lab confirms first coronavirus reinfection in the US
>lower back pain

How low?

I've had a terrible pain in my tailbone going on a few months now. I finally relented and got one of those donut shaped memory foam pillows. 40€ for a block of foam with a hole in it is criminal, but after using it for a week now, I must admit it does help a lot.
The article indicates a 50% reduction in area for a given inductance (last figure). These are planar spiral type inductors found on RFICs, which they're saying take up potentially 50% of the die area. So overall pretty impactful if you can lop off 25% of your die area.
I should have stated my implicit assumption, that the program will tell me that it’s retrying. If I decide it’s not worthwhile I can stop it, sure.

For any user-initiated action, automatic retry seems strictly better than failing on a single timeout.
As far as I can piece together, Casey Muratori first described the approach in an early YouTube video in 2005: https://youtu.be/Z1qyvQsjK5Y

The basic approach certainly existed far earlier, though. Early "graphical" command line applications, for example, most likely all took an immediate mode approach. It's just that no one thought it was worth making the distinction until after living through the hell that is retained mode GUI programming.

In a way, React (along with other vdom-based GUI frameworks) is another rediscovery of immediate mode GUI techniques, but with more of a functional (reactive) programming influence.
> If you live in a city and want to live somewhere affordable, you're often looking at 1hr+ of commute each way.

Reading your comment and others beneath you, I sense many of you have a weird idea of what a city is.

What you describe is true only for a minority of cities. I live in a city with above median housing prices. I live a 10 minute drive from my work. My house is not expensive - in fact, the expensive neighborhoods are farther away.

Initially you may not have much of a choice on where you work, but if you go through your whole career not having that choice, you probably need to work on your career a bit. For everyone I know, they decided to make that compromise (don't want to leave awesome city, etc). For them, not having enough time in the day definitely is a choice.

I agree with the rest of your accounting, but will note that there are weekends. As for gym, I just figured out exercises I can do at home with minimal equipment. It's a lot more flexible (and takes less time) than going to a gym.
> M$FT bad, therefore anything they do is bad

That's backward; it's actually "anything [rather, most things] Microsoft does is bad, therefore Microsoft is bad".

And (most of) Annex K is a example of that.

(The strncpy/_s one is bit odd though, because strncpy was specifically for initializing a fixed-length buffer, which is not nul-terminated, but rather nul-padded. strncpy works fine for that purpose, although nobody uses nul-padded buffers anymore. Using it as a size-aware strcpy was always wrong; you should use strlen+memcpy or a separate str[lzc...]cpy (or strcpy_s I suppose) instead.)
That moment when your iPhone says “your usage is down 30% to 4 hours a day”
I mean perhaps seafood is linked to less obesity.
> For example, let's say that I've got a new algorithm for calculating the cosine. Just to be safe, I add an assertion that the return value is in [-1, 1], and return an error if it isn't.

I believe the idea here is that, if you've tested your code correctly, the assertions are never triggered and therefore your constraints are met and you don't need the checks anymore.

Somewhat interestingly, the Chromium code base does something similar. There are `DCHECK` macros everywhere that are assertions that crash if the condition is false (for instance if a variable is null or some such) but they're disabled in production builds
> Personally, I freed up an enormous amount of time by tightening up my schedule. Learning how to get out of bed, get dressed, eat breakfast, and get out the door in under 30 minutes was a game changer for me, and it wasn't even that difficult.

How do you do that? Am assuming you include a shower. It seems like there is not enough time to do all those things unless breakfast is just milk/cereal or eaten on the go. Or prepped (you allude to that)

> Likewise, learning how to consolidate my chores and meal prep into small windows of time was an enormous improvement.

Got any tips in the chore department or meal prepping?
The abstract [1] states that the technique is "purely material-enabled" but that they still laid out their kinetic inductor in a spiral. It would seem to me that a big advantage for these inductors in RF chips would be the lack of coupling to and from external magnetic fields if you used another layout.

One of the major limitations of existing planar spiral inductors is that their external magnetic fields will couple them to other nearby inductors creating a transformer. The big space saving for these could be the ability to lay down snake shaped inductors next to each other with very low coupling. Do they mention this in the article?

[1] I was unable to read the full article.
HP EliteBooks. For convertibles even a matte and touch option.
Preprint paper referenced in the article:

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3681489
I was referring specifically to the claim the podcast made that non-iphone messages were subtly made to look ugly or out of place
However, passwords are a shared secret, so you actually don't necessarily know who was responsible for the secret leaking, you or the other party.

Most proposed replacements or supplements are no better except (you can guess I'm about to say) WebAuthn. WebAuthn is built out of public key signatures, so a Relying Party has no idea how to present valid credentials even for their own system. Obviously you could just add a back door if you want one, but the WebAuthn credentials you're storing aren't like a password, or a password hash, or a TOTP seed. They're just an opaque ID and a public key.
I replaced an Aeron with a a gaming chair that was much more affordable (although it was back-ordered for a few months). What a huge improvement! It feels like I'm in a bucket seat in a car, which is basically what it is.
What happened to the glider hacker emblem? A pity it never took off..
Yeah, the algorithm is only thousands of years old but it's very useful on the 6502. See 'Fast Signed Multiply' at http://www.ffd2.com/fridge/chacking/c=hacking9.txt for an implementation in C64 3D routines.

Also note that this algorithm was used in analog electronics to multiply.
https://patents.google.com/patent/US2906459A/en
Ask HN: What’s the most effective developer onboarding you’ve gone through?
My company is planning to do a refresh of our SWE onboarding, and there are so many approaches we could take - I’m looking at this almost from a pedagogical perspective.
Delete the mobile apps. I scrolled reddit to infinity on my phone going through news that would make me depressed. I deleted the app and have been happy ever since. I come here twice a day for 10 minutes instead and my screen time reduced by 40minutes at least. I don’t feel gloomy all the time because of news too
I was paying about $1.5k / mo for a terrible plan for just a family of two in NC under ACA. The public risk pool is completely terrible and large corporate employers’ risk pools are separated from the general public and self employed.
Cs631apue – Class CS631 Advanced Programming in the Unix Environment at Stevens
> We need to start over and build a truly open internet.

I want to agree, but email is actually an example of an open and federated protocol achieving success. It's pretty much everything that could have been hoped for as far as openness and interoperability go at the protocol level. Unfortunately, balkanization still occurs at the social (ie network) level.
2PC =
two-phase commit

https://en.m.wikipedia.org/wiki/Two-phase_commit_protocol

For anyone like me whose neural net had a cache miss due to lack of caffeine activation function ;)
They aren’t saying it is difficult without giving away trade secrets, they are saying it is difficult because the software has dependencies on internal services, which themselves have dependencies on other internal services. Basically, in order to run it you need to also run the entirety of Google’s tech stack. This doesn’t work for an open source project.

They aren’t worried about ‘giving away the idea’, they just don’t have an easy technical way to open source just the one component.
The whole idea behind Sendgrid is a joke.

It's become popular for some providers since the move to the Cloud to block outgoing port 25, but apart from that, you literally don't need Sendgrid. Any senior engineer can write a local "Sendgrid" in about half a day, if not less. Sendgrid doesn't even support all the RFCs properly, so, you'll likely get dropped mail if you move to Sendgrid from Postfix/Sendmail. Besides that, Sendgrid's UI/UX was terrible the last time I've played with it. It's literally the lamest startup there could possibly be.

As a customer of some unrelated service, I've already converted said service away from Sendgrid in just a couple of emails to the owner. (Sadly, they've moved to one of the many Sendgrid's competitors, not to Postfix/Sendmail, but the switch was obviously painless, and actually improved reliability.) That's how horrible Sendgrid is, and how easy it is to make other people switch.

P.S. I often send mail through shell scripts. Try selling me Sendgrid when my laptop already comes with Postfix/Sendmail, with spool support. Does Sendgrid even work when you have no internet connection? (That was a rhetorical question; the answer is, No, Sendgrid does not work when internet is not available; but Postfix/Sendmail works just fine even without any internet at all, and Postfix/Sendmail will spool all your mail until you get connected to an internet with port 25 not blocked.) Sendgrid is a downgrade however you look at it. When they move to MFA, it'll probably be easier to just switch to one of their plentiful competitors than deal with any new restrictions; that's why Sendgrid will probably be very careful around any new requirements; because their service is 100% disposable.
I think the missing piece here is the core charge, which makes the average user think of the battery as something of value that shouldn’t just be thrown in the trash. Currently, I think a lot of users with an obsolete phone with a smashed screen would just throw it in the garbage.
Phone 2FA is broken by default.

Yes, it broke SMTP and it also broke all API access until they kinda-fixed API keys. Pretty much anything you used basic auth for at a touch point.
So all the important things?

As a human, i care mostly about the things that i subjectively judge good. Pretty much by definition.
In the article the attacker simply pays a higher fee to have their call executed first. How does verification help you in this case?

It sounds a bit like it would just tell you that your design sucks and you need to change it, but that's not really helpful if it does that for all designs you can come up with.

I'm not convinced you can spend 500k and make the problem go away. If it turns out the problem can only be fixed by changing the underlying platform, rather than your contracts, you will spend years talking to stakeholders and advocating for the necessary changes. Which you still have to come up with yourself. Unless your solver somehow finds the correct solution?

Another reason why that budget is suspect is that you'd have to develop most of that from scratch. There certainly isn't an existing set of mature tools like there might be for verifying properties of C++ code.

Unless you make the problem go away, you are not going to be better off hiring people. Front runners let one know there is a problem just as well as a verification consultant.

Proving that an attack is unavoidable might at least save some time. Proving that a specific solution doesn't work doesn't really help you find the correct one (?)
Variable refresh rate monitors don't solve hitching due to variable computation. In order to render an animation smoothly, you have to know precisely when a frame will be displayed ahead of time, so that you can render the simulation precisely at that point.
No, they’re being handled from within Windows, somehow—it shows a screen brightness adjustment popup thingy in the corner, same as it does if you adjust the volume by key. I think it must just be some driver or something consuming them and turning them into something else.

I do wish I could intercept it, not just for external monitors’ sake, but also so I could make it logarithmic or similar, like I did in Arch Linux + i3 with XF86Brightness{Up,Down} mapping and an xbacklight wrapper script. On my Surface Book, the smallest effective brightness change is 2%, and each 2% step between 0% and about 20% has at least as much effect as 40–50% or 80–100%, yet the seemingly-hardcoded behaviour is that the brightness keys just adjust the level by a flat 10%, which is what every platform does (OK, I can actually only directly attest to Android, Ubuntu from some years ago, xbacklight by convention and Windows, but I think the rest do it to), even though such a linear scale is obviously stupid and wrong. On my phone, two millimetres of adjustment on the left has about as much effect as the whole right hand side of the scale (several centimetres).
DevOps HQ
> WG21 is striving to reduce the known cases of UB

Citation? The last I heard the standard was fully defending compilers that actively seek out undefined behaviour as a excuse to inject bugs and vulnerabilities into working code under the pretense of optimization. It would be very good news if they were walking that back towards "undefined behaviour is solely for cross-platform compatiblity".
Rule number one includes no recursion, which I get but is also really interesting to me. I feel like I could turn any recursive algorithm I'd use in production into a loop, but I feel like it would trip me up