skysight-inc/HackerNews huggingface dataset:
I think the author is over dramatic. Like when he says this:

>I've been burned a number of times by folks putting a Non-Production JWT or an Open Banking Sandbox certificate into jwt.io.

He hasn't been "burned" by that at all. No security breach occured because of that. He does have somewhat of a point, but he goes off into fantasy land trying to justify it.
A station wagon full of tapes hurtling down the highway...
It is a very funny story when your own money is not involved.

In addition with the company "blurry" explanation, the real technical error is described in one of the comments:

<<
mikehhhhhhh
14 points
·
2 years ago
As far as I can see, Paypro were left to fill out some basic JavaScript config files, some of that being addresses.

They've removed quotes from these addresses so the full address has been interpreted as a number by JavaScript and rounded because it is too big.

On GitHub, the config was supplied with empty quotes so it seems like it's unfair to blame the supplier.
>>

I discovered this story because of the company exit announcement of last month:
https://medium.com/@paypro/code-release-7ee7f5cb81d2
I have no idea. I think it should grow with mass loss, but I think there were measurements the have shown that it currently somehow doesn't really change its size.
Show HN: A chess game-application written in python, has many cool features.
In some cities, like the one I live in, rents reached in the latest years their highest level, which was becoming unbearable for most workers. At the very least, after the unfortunate situation the world experienced this year, some good came out of it.

Related to what the article says about NY, here's an interesting article explaining the rent situation there --> https://www.nytimes.com/2020/06/18/realestate/why-rents-have...
Not less straightforward than any other system upgrade, which you need to be able to do confidently, anyway.
Simple Time-Lapse with a Raspberry Pi
With the new average inflation targeting monetary regime made official last week, P/E ratios may become permanently higher.
HN's minimalist UI designed to make elements unobtrusive and sometimes difficult to see, and new features being mentioned only in a single thread means most users will just not notice. It also doesn't help that HN is a conservative culture generally antagonistic towards any change to the layout, and people wouldn't want to notice those changes to begin with.

I've seen people not notice thread folding or the hide feature despite those also being "in plain sight." People don't know threads can span multiple pages - dang has to go out of his way to point that out because despite the UI being exactly the same as on the list pages, a "more" link at the bottom of the page, no one ever reads past the first thirty links on those pages to begin with.
> ...relegated to third world when it comes to participating in global leadership/trade.

Because when given more civilized tools, they nonetheless alienate the world. They could have annexed Crimea peacefully, at least the part that they actually needed, but chose instead to engage in a semi-hot war while sending mixed signals with the referendum.

Then President Obama completely shut the door on them, which did not have the effect of changing their behaviour; this in Russia after all. What the Obama Administration did in response to the annexation of Crimea was close off most avenues of reconciliation; and the subsequent propaganda about President Trump has kept those avenues closed.
If there is margin on the service, it isn't really a subsidy, it's capacity utilization (building a hospital that can do 100 surgeries a year instead of a hospital that can do 45 knee surgeries a year and filling the slots with other services).

I guess you can probably re-frame your argument using some other similar measure though.
In another case, they took family's car because teenage daughter was driving under influence. How is parents to control their children when they borrow family car.
Google and Apple Change Tactics on Contact Tracing Tech
I can reliably zoom in the text here on my Pinephone. No left/right scrolling is ever required.
Akamai uses something similar to perform trace routes in-band of HTTP TCP sessions to clients: https://datatracker.ietf.org/meeting/94/materials/slides-94-...
BigQuery public dataset https://news.ycombinator.com/item?id=19304326

Most active was defined by comment count.
The network console isnt going to tell you if the site's exfiltrating data via websocket or webrtc.
For the people who can't hear the vacuum cleaner noise from their PC because they use headphones yes, getting 7200 rpm at the price of 5400 might be nice.

For the people who want to run cool, quiet and less power hungry devices, they'd like to get exactly what they ordered. Nobody buys a 5400 rpm hard drive for speed.

Stick a 7200 rpm drive in a console and see how the cooling system copes, for example. Or a low power PC with a PicoPSU. Or a NAS.

Some portable hard drives can be powered off USB. If you get a 7200 advertised at 5400 drive, it won't run because it's not getting enough power.
Why are LIGO and Virgo not mechanically capable of detecting the collisions of supermassive black holes?

Is it because the amplitude is so big it "pegs the needle" above its limit?
I don't think those jobs losses were caused by the gig economy, though. Rather the gig economy arose out of the glut of labor available.

It's an important distinction to make. Although Uber et co may be predatory on underutilized workers, I don't think banning them is going to bring back the better jobs that used to exist.

The best way to make Uber pay better would be to have compelling other options for these workers; easier said than done though
They're comparable because the value is based on faith/hope in the future, not fundamentals.

The existence of factories is irrelevant if those factories are not spectacularly profitable.

And right now they're barely - not spectacularly - profitable. And the innovator's dilemma applies equally to the rest of the industry, which is already making EVs of its own.

Like everyone else I have no idea if Tesla is a reasonable bet. But it's clear the price today has become completely and irrationally detached from fundamentals to the point where the value might as well be from trading virtual items.
You’ve piqued my curiosity. Please explain.
Excluding kernel bugs, CPU limits just provide an upper bound on burst capacity. That controls oversubscription of CPU on a node. As with any other kind of oversubscription of a resource based on variable demand, there is a tradeoff. Allowing one pod to burst over its request is both unreliable and potentially impacting other neighboring pods. Whether that improves your cluster efficiency or introduces intolerably high variability in service latency and throughput depends on your mix of workloads and how the scheduler distributes your various pods.

Buffer's solution of having different flavors of node, onto which mutually compatible workloads are scheduled in isolation from incompatible ones, is a very reasonable thing to do, even if this particular case is a bit of a head-scratcher.
Some of these guy's videos have been taken in Dubai, even one where he flies next to a commercial plane.
Can't tell if sarcasm...? What I mean is that the globe should rotate towards the East, not towards the West. This is of course assuming a stationary camera!
Redux basics in less than five minutes
Wow, I read Groklaw daily back then, and had forgotten about it and her completely. What a resource that was!
Even in Go, concurrency is still not easy
How to check JavaScript errors in console on mobile Chrome
I have memories of a Microsoft evangelist in the 90s. He told us "IE4 is good but everybody uses Netscape." IE4 wasn't that good IMHO, IE5 was probably better than Netscape (the company was starting to collapse) and IE6 was the better browser by far, until it stagnated and Firefox appeared.
Show HN: One tool to view your website analytics, SEO, uptime, and security
That's a very nice twist, and would go a long way to solving this problem.
If you are a fan of chess or a fan of python programming, then surely you got to check this out.
I am open to any suggestions on how to improvise this app.
Type myintranetsite/ instead, this is faster than http:// in front.
> Also you mentioned in another comment there being 2 browser-engines. There are in fact 3 major browser-engines.

Fair enough. I was thinking in terms of browser-engine families (WebKit-based, Gecko-based) and tried to keep things simple, because I didn't want to overcomplicate my comment.

You're right though that there's Google WebKit (Blink) and straight WebKit and that does make a difference which matters in this context.
According to a recent post, they are in Germany.
Doesn’t browser hit suggestions API on every type stroke anyway?
For anyone interested in how a database works underneath the hood, I could not recommend a better MOOC than Andy Pavlo's database courses. His intro to database course is so freaking good.
That really helped. Inconsistent RAID arrays was a super helpful example, thanks.
I just say that China or India (to put two bulky examples) have terrible civil rights AND environmental protection history and yet they aren't featured under a negative light on a daily basis in media.
Yeah - great point. I'm actually working on a way to detect if a set of IDs are being used on the same workbook. This is possible technically via some environment variables inherent to the spreadsheet - but it opens up another can of worms on the privacy side of information I'd have to collect.

I think the short-term solution will be to throttle unique ID creation to 5 / email - not perfect, but I'm a one-man team so will have to bite at this problem step-wise :)
Events in Discord.py
The positive experience isn't drama filled :)

We, along with other unions, negotiate a collective agreement with my employer and then do our jobs. The agreement is renegotiated every 3 years or so. If that's the end of it then we're happy. Industrial relations doesn't _have_ to be a fight to the death.
That's the whole mystery right there isn't it? No one has ever had a solid explanation for the apparent unity of the stream of consciousness. I suspect it has something to do with the composition of oscillatory patterns, similar to a sound wave being a combination of many individual sounds which get combined through wave interference into a unified pressure wave. But that leaves many questions unanswered. Better to be puzzled by this than assume we should know the answer right now. We just don't.
That's author's words, I'd say it's stuff like narrowing conversions, arrays and memcpy. Though the author doesn't claim that memcpy is a C idiom, and indeed it's used broadly in C++.
That's pretty similar to my Wiki approach: https://jlelse.blog/posts/wiki-approach/
You filled the numerator and want to switch to denominator - how do you specify that with keyboard? You could use TAB or something, but that denominator could be nested in 10 levels of other stuff so you probably use mouse or jump for 5 seconds randomly until you get to the right place.

The problem is that you have to jump which "by hand" is natural (start writing slightly lower) while with keyboard requires switching to mouse and back or remembering shortcuts and modeling the tree structure of your formula in your head to know where the shortcut will jump.

Same with introducing new levels of nesting.

That's why I prefer just writing code for formulas over graphical editors.
What a nice little tool! I have two random no-name adapters at work for my two monitors. One is DisplayPort, and the other HDMI. I wasn't expecting this to work, but sure enough, it does! Both monitors show up and promptly respond to my brightness settings.
Because they have military legacy of a superpower and everything else of a authoritarian developing country?
A Brand-New Interview with Jose Valim, Creator of Elixir
How to Tell the Difference Between Good and Great Developers – Codementor Blog
Impossible Colors
> If they keep growing at
And that's where the falacy is. Nothing keeps growing forever. Past performance is no guarantee of future results.

You don't need great analysis to see that something that has appreciated 131 times in less than a year is a bubble, unless they cured cancer or seriously undersold at their IPO. And no one undersells by that much.
Why the problem with C++, it was designed by a committee.
>Maybe a good fix would be to have proceeds go to education or social welfare.

No. A good fix is not one that continues to allow assets to be seized from people not convicted of any crime that were not used in the commission of, or directly related to the proceeds of, that crime.
>this one will inevitably deflate (hopefully not pop)

If the Fed is unwavering enough to keep its new average inflation targeting scheme credible, it should not pop (though things may still cool off at some point).
they are brok AF. someone needs to pay for the litigations they found themselves in by censoring their own creators before they go under. lol. only dumb mofos pour they money into this black hole.
I was extremely (I think justifiably) skeptical of async I/O on Linux for the longest time but now I legitimately think with io_uring Linux is actually somehow the gold standard for (1). They really got their act together. io_uring is really good.
I haven't dug into the engineering behind this yet, but my main concern with any custom Linux distribution is it often ends up as a waste of engineering.

It's pretty easy to write your own Distro and pair it down to the essentials, and pairing it down that way allows you to strip out complexity, making it easier and more reliable to patch it. But that then means you are now maintaining this custom thing forever. If you're Amazon, that might be fine, but I suspect that this will be dropped when it is no longer profitable or a competing project supplants it - meaning in 5 years this thing might be gone. (A common theme of custom Linux distributions)

And then there's troubleshooting. With a stripped-down distro, you will eventually need more tools to debug the thing, meaning you have to build and maintain packages to do that. Bottlerocket's answer to this is "run them in containers and use our API!", but I'm not sold on this. Have you ever tried to do debugging between host and container, or container to container? There's a lot of b.s. you have to hop through, and most Unix tools were not written with it in mind. I highly doubt that it will magically work for everything. If that's the case, then this "don't worry, because magic" idea is not really saving you work over maintaining a traditional OS.

Moreover, you don't need a custom distro to do live patching. There are simple tricks you can use to juggle files and processes during a live patch, to say nothing of "checkpoint process && 'mv old_file new_file' && thaw process", etc. Kernels support live patching too. So if the argument is "well it's easier to patch", i'm not sure you're not trading away "easy" in one place for "pain in the ass" in another (see above). All of this also argues that it's just as effective to treat live-patched systems as you treat immutable infrastructure, and I'm not convinced of that argument either. The former is just more complex, and complexity attracts failures.

Ultimately I think what you'll find is Bottlerocket will get a niche following, but also some people will get annoyed by it and go back to regular distros which already have well defined methods.
You could just use a microphone and record it’s sound. You will see different frequency modes depending on the RPM.
Man flying a jet pack spotted at LAX
In Germany, dumpster staff is disallowed from taking cash tips due to corruption concerns: https://www.br.de/radio/bayern1/weihnachten-trinkgeld-postbo...
Disdain for the Less Educated Is the Last Acceptable Prejudice
Dunno, even javascript knows, where an array ends, C++ doesn't.
That's one of the best political ideas I've ever read. They provide our society's best known defense against the abuses of police power, and they are unconscionably underfunded.
And party donations.
Got a source for that one?
Location: Bishkek, Kyrgyz Republic (from Melbourne, AU)

Remote: Yes

Willing to relocate: Yes, (Australian Citizen) Technologies: Power BI, SQL, Python (Pandas, ML libraries), R, Azure Data Factory. Data Processing and Analysis

Résumé/CV: https://www.linkedin.com/in/arietd/ email me for a full CV

Email: ariet.dzhumashev@gmail.com

I am a data analyst/ BI consultant with 1 year experience in a Microsoft partnered consulting company (SQL server/Azure/Power BI). Worked on processing and visualising metrics for businesses. Worked client-site for multiple projects, working with clients or other team members is a plus. Projects involved lots of data cleaning, data quality issues and finding insights. Forecasting and Machine learning would be a plus but not essential.
It's a single command that is safe and straight forward especially if you use a LTS distro.
Great question...

Amazon’s offering wasn’t really about containers, even though it was.

It was about maintaining the heterogeneity of their brand and offerings by requiring competitors to allocate resources to compete in a space that really didn’t exist. It also provides AWS even more “stickyness” with their customers, giving those same customers LESS choice due to the scope of the offering which really can’t be found anywhere else, for now.

It’s happened before, many times, just with different scope.

Look at cloud. Before cloud, there was no AWS, no GCP, just virtual servers. Now everyone in the game is copying everyone else. The difference here is in the direction of scope. In the cloud scope, it’s getting bigger. Adding container support to tradition EC2/VPS is just making cloud bigger and harder to compete with for new entrants.

The question is, was AWS container OS release a red herring, or a signal that Amazon has even more interest in binding customers to its platforms by offering AWS platform compatible layers and versions of existing tools.

Their OS already exists in Rancher and CoreOS. It’s nothing new, except that it’s designed to only work with AWS services.

No reason to assume it won’t be the same on the container front.

What I would like to see is more network transparency, allowing locomotion of containers across the various cloud providers, but that would require the big players to work together to make their offerings compatible with each other’s, and I don’t see that happening any time soon.

It will be a 3rd party player who provides a cloud overlay across all the major cloud services, much like overlay networks subsume nodes, and that player will be acquired quickly because they present a threat to the heterogeneity and branding of the major players.

I don’t see FaaS taking off as it’s too atomic and 10x harder to maintain individual functions across the cloud than services as a whole, so I expect more brand-vertical offerings to be seen along with competition-stifling patents to keep the competitors from duplicating them.
Anti-Money Laundering (AML) Fines in 2020
I like the idea but it's probably a conflict of interest. As a defense attorney, am I going to fight as hard to invalidate a warrant and get property returned to my client if I know otherwise the money will go to my office? Maybe, maybe not, but we aren't supposed to put ourselves in that position to begin with.
Crypto Legal Compliance and Taxation Outlook of Africa
HN's hall of shame.
Ok how about instead of Bitcoin, we compare it with CSCO ? It was bubble back then and the value never recover.
Hints and Principles for Computer System Design [pdf]
Bitcoin is supported by billions of dollars of servers burning electricity. Environmentalists aren't pleased, but there is infrastructure.
>For JWTs, I agree with this stance, since they are security credentials and therefore basically all of them are sensitive information.

As long as it's prod env and your expiration time is somewhat reasonable, then I don't think it is sensitive at all unless you're storing an actual sensitive informations in them.
If I buy a burger in the US for a dollar, but it's half cardboard, and I buy a burger in the EU for $1.50 but it's a quality cut of meat, you might say that the true value of the burger in the US is maybe $.10 but the true value of the burger in EU is $1. But if I wanted to buy that EU burger in the US, I would have to pay $15.

So the dollar burger is an illusion. The burger is actually $15, and is hyper inflated all along.
There is a LOT that happens psychologically to both parents immediately after birth, especially mothers, and some of it can seem insurmountable at first. Postpartum depression (and other conditions) are no joke. My sincerest condolences, and best wishes for an outcome that is in your child’s best interest. I hope you and your partner also get any help you need beyond the legal aspects of your situation. Don’t be afraid to seek help!
It's a microkernel with even the drivers running in userspace, and has its own graphics stack. Seems the ideal setting to go for realtime requirements for the UI. I don't know if they've done anything in that direction but it seems the most well positioned to fulfill the requirements jacquesm was hoping for.
If they do, I have never seen it, and I watch a lot of YouTube.
Previous discussion: https://news.ycombinator.com/item?id=24342063
Remind me again how Dr. Disrespect could do pretty much anything on stream and not get banned.

Dude did nothing and got banned.
Cool writeup! I agree with this sentiment 100%: "the web is poised to embrace 3D en masse". And with the heady webgl adoption that threejs brings, we see sites with decorative elements that hog resources, inhibit user interactions, and make finding the actual information you are looking for a nightmare. It's a power tool, use it judiciously ;)

Post fails to mention how they are actually rendering the "dots". But I feel perhaps they are executing excessive draw calls. 100K is not egregious. ThreeJS docs include many instanced geometry samples. As well as library level particle systems and materials. All anim logic handled via shaders. Raw webgl points without textures are also very performant for things like starfields, etc.

Wanted to link up the original "webgl-globe". Visualization originally used at Google to see where in the world search requests were arriving from:

https://github.com/dataarts/webgl-globe
WD provides a data sheet with the power and noise specs for their individual drives. If you are buying to use in a situation where these matter shouldn't you be consulting the published specs instead of just choosing 5400 vs 7200? After all these can be greatly variable even between drives of the same RPM.
> these are sensitive in of themselves, as they have implementation details for our services, and as mentioned, certain things could be used outside of Capital One.

I imagine these JWTs will find their way into a frontend application in prod (because what else would they be for?), at which point any actual user of theirs could pull the token down and get access to these implementation details. The only thing sensitive about a JWT should be its ability to authenticate a user; encoding actually sensitive data inside that token, such as anything you want kept secret, would be a huge mistake.
Yep, it's possible P/E will be higher for a time. Not sure about permanently higher. The US has had dovish and hawkish central bankers in the past. If a hawk is appointed, P/E ratios might go lower.

You provide a good starting point for a back of the envelope calculation. Suppose you think Tesla's long term sustainable P/E is 25. Then they need to start making 18 billion a year to justify their current valuation.