skysight-inc/HackerNews huggingface dataset:
Really solid post.

I've helped a lot of people with Dockerfiles ranging from horrendous security issues to simple bad practice making lives hell, and much of this is solid advice.

A lot of what I tell people boils down to: keep your container lean and clean. Don't do things in the container that you wouldn't do on the host (like curl-ing from the internet into bash as root :-D, or using questionable base images).

My deployment life has been vastly improved by shipping in containers, but I have seen a lot of security regressions because people feel safe to be reckless (like running the app as root) due to the container guard rails. Don't think this way.
> an average electricity cost of 13.19 cents/kilowatt-hour

Source? The link supplied uses 5 cents/kWh, which is also an assumption on their part that they do not explain either.

There are lots of reports of 'seasonal mining' occurring in China, where mining operations are occurring in areas with very cheap or completely free electric, generally because the costs of producing the electricity are fixed, rather than scaling up or down with demand (geothermal / hydro / other renewables).
I've enjoyed Alyx a lot.
I'm not so sure. If you're still speaking about the UK then we'd have to have a spectacular rise in temperatures to make AC a problem. The UK is much cooler than the USA and continental Europe in summer, so it's very rare to have AC at home.
> Using ENV to store secrets is bad practice because Dockerfiles are usually distributed with the application

Nevermind Dockerfiles, env variables are preserved in stopped containers that are hanging around even when you use docker-machine AFAIK, you can easily `docker inspect` them.
> But presumably you don't know how good they are at predicting topic D until topic D actually occurs at least once?

No, that's not right. The general idea is that you have forecasters who make predictions on multiple topics A, B, C, and D that have all not happened at the time of the prediction. Then, by looking at the outcomes of A, B, and C you can judge the ability of the forecaster to make prediction on topics what have not yet occurred at the time of prediction. You can then become confident on their ability to predict topic D before it occurs.

The argument you're making is the classic skeptical argument about the philosophical problem of induction: just because some procedure (e.g., an astronomical model of the solar system) has made successful predictions in the past, we cannot rule out the possibility that the sun will not rise tomorrow.

You can see where the problem with your argument lies by noticing that it depends heavily on the definition of what a "topic" is. If we have made successful predictions in the past on (say) the tides, and I make new predictions in the future, one can always point to some feature of the new predictions that could arguably make it a different topic, e.g., maybe El Nino is this year, or maybe the tides were for a slightly different region, etc. New predictions always differ from previous predictions in some way, but this does not mean the predictions are useless.

The resolution is that "topic" is not a precise idea. Rather, if a forecaster is successful on topics A, B, and C that are all in a natural reference class, and D is also in that reference class, then this is evidence — not incontrovertible evidence, but strong compelling evidence —that they are likely to be accurate on D too.
100% this.

You'd have thought FB learned from the whole bolting on Google+ to Youtube fiasco.

I won't even start on Facebook in terms of just not wanting to be associated with every other scum-sucker thing that company does ... (Hi Facebook employee, I don't mean you personally, but you know I'm right).
What is a User Journey Map and why is it important when building a new digital
Wordpress or JAMstack? Why not do both?

I did... as an experiment for my blog:
https://www.louiechristie.com/blog/

The secret sauce is https://github.com/henrikwirth/gatsby-starter-wordpress-twen...
Dutch woman dies after catching Covid-19 twice, first reported reinfection death
That's a good way of looking at it, thanks.
Usenet was a peer-to-peer 'forum' system that used the NNTP protocol.

An NNTP server had a list of discussion forums: clients connected and got the list, and the user could selectively subscribe to the one's they were interested in. The client would keep track of which messages were read, and so when new ones were posted you'd only see new messages by default.

Each NNTP server could talk to other NNTP servers. They would exchange a list of forums each had, and then the articles had in each forum. Each article/post had a unique ID (basically like the Message-ID in e-mails), and so each could request articles from the other that they did not already have. New messages could be posted to either server and they would 'cross pollinate' (multi-master basically).

Each NNTP server could technically talk to multiple other NNTP servers, so cross-pollination could be very wide, but in the early days with low-kbps modems and expensive long distance, there was a lot of local hierarchical hubs.

There were a few key hubs that had fancy long-distance T1 and such that could transfer across continents and oceans as a bit of a service for the community.
How can you "lock" someone into an ecosystem that's literally just a bunch of open standards and an architectural pattern? Heck, my own Jekyll-based static blog is technically a "JAMstack" website and I've never had any interactions with Netlify.

What are you implying?
Which is unsurprising given that its goal never had anything to do with terror in the first place.
Good cliffhangers work with the plot, using a limit like a weekly release schedule or break between seasons to lengthen tension. I would say most American television is really bad at this and likes to create fake tension between episodes that otherwise has no impact on the plot.
My trusty graphing calculator, a TI-85, also was Z80-based.
> Instead of having to get one person, who knew literature, to believe in his work, an author has to convince a whole committee of people.

I think that the "one person who knew literature" system is largely a myth. People who "know literature" often resort to promoting the same canon and authors of the same background. I'd wager that a random lottery would produce a more interesting, dynamic, and varied list of books than one curated by a single expert.

If you truly want unrestrained creativity, then organizations like NEA need orders of magnitude more funding so they can throw cash at people trying to make something new. That will produce wild, interesting, and experimental works. But it won't produce Mad Men or other kinds of works that promote polish over boundless creativity. It is a trade off.
Remote Go Developer

We are looking for a backend engineer to help craft the future of Teamwork Desk. We are a self-funded and privately owned Irish company with employees all over the world.

Check out our role here:

https://careers.teamwork.com/jobs/backenddesk
This is a principle, not a paradox. The principle is simply that there is an inherent complexity to any construct, and, that the burden of complexity can be shifted to optimal domains.

As an analog, consider analysis of harmonic systems. A complex wave form in time-domain, vs the same signal considered in frequency-domain, via Fourier Transforms.

https://en.wikipedia.org/wiki/Fourier_transform

(So, here, quite a lot of the time-domain complexity is handled by very complex mathematical machinery that supports FT. The new picture in frequency domain is “simple”, but the FT machinery is hardly that. The total system complexity is asserted to be equivalent.)

The name of the game with complexity is to shift the burden of complexity to a capability domain that is within one’s reach.
There's still coal in the UK and it is high quality compared to say Germany - but it was initially a political decision by Thatchers government to switch to Gas, to hobble the NUM.

You right that the federal nature of the USA is holding it back - might have been ok for 18th century rich farmers a twenty-first century supper power not so much.
It depends on the show of course, but there is a middle ground. For example, both The Good Place and Glow were canceled but their last season finales work well enough as series finales. I have no trouble recommending either of those. Of course, it's harder with some shows.
One use case I had at a previous job was that they used word press for daily logs, inventory counts, hr portal, etc... Basically a form wrapper that would email the related departments with whatever the employees inputted.

Very simple and more then did the job. It costed basically nothing to use and pretty much anyone could maintain the site.
it is on HN because it is a YC startup
Seems like this might put focus in the wrong direction. Hacking for points from this community could detract from focus on client needs. IME a hacker type community will value things much different than GenPop and for sure your SAM/SOM.

The sites UI is very slick.
I mentioned several noteworthy people and institutions making an investment to demonstrate a trend. "its mostly a popularity/buzz game" yeah thats how value networks work. From gold to cash to facebook.
>The US is incapable of suffering a fall of Rome. America's geography makes that impossible.

That’s true if you look at America’s rivals on the world stage, i.e. Russia or China. But Rome wasn’t sacked by the Persians, or the Egyptians, or another Great Power of the time. It was sacked by tribal Gauls and migrating tribes of Visigoths.
Hardware requiring an online account to work must be outlawed.

As well as the "We have already reviewed this decision and it can't be reversed" bullshit. For every ban they should be required to issue a very specific clarification on why exactly were you banned and let you to speak to a real person.
You'd think if it had stopped any attacks, the program's proponents would be shouting it from the rooftops. But no- nothing. Not even attempts to lie ("oh, we stopped several attacks, but we can't tell you anything about them...")

PRISM is a phenomenal waste of trust and money.
> I don’t see any upside to option 2.

That's because you're stopping too soon with option 2. There are actually two sub-options to option 2:

2a. Some of the laborers are fired, and they can't find any other work so they now aren't producing anything (time and production stay constant, laborers decrease).

2b. Some of the laborers are fired, and that means a pool of unused labor now exists, which entrepreneurs hire to do new jobs that couldn't be done at all before because there was no labor available (time and laborers stay constant, production increases).

Outcome 2a will virtually never happen in a healthy economy because there are always more things that people want, so there are always additional things that could be produced if labor were available. So what actually happens, at least in a healthy economy, is outcome 2b. If you're seeing outcome 2a, it means the economy is not healthy: something is preventing the natural process of labor that is no longer needed for existing production being redirected into new production. Almost always that something is the government.
It's always because people posted and they upvoted. Nothing special.

Good search is extremely hard. They provide "ok" & "fast" search very easily.
What are the basic principles on which they base their recommendation?

A statement by them a few days ago:
"The most compassionate approach that balances the risks and benefits of reaching herd immunity is to allow those who are at minimal risk of death to live their lives normally to build up immunity to the virus through natural infection, while better protecting those who are at highest risk"

There's a very obvious problem here. Those at high risk have to intermingle with everyone else, and most at high risk don't know that they are.

You don't just 'gain herd immunity'. You get the virus, be contagious, give it to anyone else you come in contact with, and they go out and do the same. People can't afford to quarantine and refuse it. People will not wear a mask, they don't care. Americans whom won't die from the virus will not take it seriously.

In reality barrington is advocating that people die. Which if they're doctors they've violated their do no harm promise - not that it ever meant anything.

As far as I can tell barrington has no leg to stand on. It doesn't matter if they're supposed 'experts', if they're right then they can prove it.
Warp for Desktop and Cloudflare for Teams
No one should be surprised by this. This program was simply another extension of the US's march towards authoritarianism. Much like the patriot act and our secret warrants, founded on a dubious premise that over the last 20 years have largely borne no fruit in terms of protecting our freedoms and safety but have instead eroded them. This is a system designed to protect the larger system from any civs who may be getting a little too rebellious.
My SEGA (sold in the EU) shipped with Sonic installed, it booted Sonic if no cartridge were detected, interesting that it started as a hidden game.
Ask HN: Why OSS from Big Corps is not treated as predatory pricing?
This is an honest question. I am genuinely curious why for example VS Code is not treated as predatory pricing. I imagine it severely impacts small SMEs like Sublime Text.
It's only (potential) fraud if he doesn't disclose his stake as a potential conflict of interest.

I'm not suggesting that Twitter investing in BTC is or isn't a good thing, but the CEO having a personal stake should not prevent the company from investing if there's suitable expectation of positive returns for the business.
Except, of course, that they've paid quite a lot of money to show popular US sitcoms with 22-24 episode seasons, since people tend to watch them over and over and over.

That's really the gap, I guess: They're benefitting from broadcast networks letting shows run 100+ episodes, but not creating additional shows with more than 16-20 episodes. It seems reductive.
A vaccine is special in the sense that it lets you get the disease without incurring the downside of the disease. So it lets you get to the herd immunity without incurring the deaths. Similarly, a new effective medicine can change the expected outcome (it's possible the Vitamin D supplementation has that property, for example).

Herd immunity doesn't mean the disease disappears completely or that everyone is immune. It means, however, that if someone does get, the number of people that they can transitively infect is limited by a constant independent of the population size. If US, UK, Australia, Sweden, ... have herd immunity due to disease, and NZ doesn't, it means that NZ cannot afford travel (and many kinds of exports) to or from the rest of the world.

> Doesn't one universe have half as many people infected?

You insist on misreading and/or misrepresenting my claim. I specifically said "other than vaccine", which you obviously did read because you asked "what makes a vaccine special". Why would you do that?

Take those two universes, but in which there is no vaccine in two years, or in which "x" does exceed the number of infectable people. Does lockdown, or even masks, change the overall outcome? Or just the speed over time in which the dead and long-term residuals accumulate?

A handful of countries (New Zealand, Vietnam, and a few more) have some chance to stay in your universe. Most of the world already has, after 6 months of serious (and economically catastrophic lockdowns), over 10% infected. It is not unreasonable, that if an effective vaccine is not effectively administered within those two years, we'll have 50% infected.
Some time ago, I built this website because I was tired of quora asking me to sign up all the time, and then the idea came that I should make a website, where registration isn't a possibility (with exceptions). Pretty much anyone can ask and answer questions in there, and it is not strict on Tor/VPN users.

Some answers can get marked as answered by "Some know person", to attract people with a social profile to comment as well. This can only be done if they email me telling me which question they answered, and i'm still working on that feature. What do you guys think?
Ministers spent £64m on post-Brexit ‘British GPS’ scheme before it was shut down
Yes of course, I get the point of the reference, it looks super interesting, I wish I could read quickly enough for it to actually make it on my list.

I appreciate your point about political change but that's not something I view as being 'outside of government'. The political leadership and the bureaucracy are 'government' - if they are failing even primarily due to arbitrary change in direction ... then we can at least narrow the scope of where we point our fingers, but it doesn't mean that 'building a subway should be impossible' in 2020.

The US engaged and defeated the Nazis, and the Japanese, and built the first Nuclear Weapon, along with designing several new weapons and building them at large ... in the term of a single presidential cycle.

Without being overly cynical, I do believe that incentives matter, and if the bureaucracy doesn't have to produce much of real value then it just won't.
Disclaimer: I work for Red Hat as an OpenShift consultant so I'm biased

There are competing pieces of advice for secure distribution of secrets, but my current preference comes down to one of these ways, depending on the organization:

1. OpenShift/Kubernetes Secrets mounted into the Pod at runtime.

2. Hashicorp Vault (has a really well designed API. It's very usable just with curl, which makes using it a joy)

3. Sealed Secrets (less experience here but it's looking positive right now) - https://github.com/bitnami-labs/sealed-secrets

If you're using a different PaaS besides OpenShift, it may also offer options worth considering (although do think about portability. These days apps move platforms every few years on average, though I think that may be changing now that K8s is becoming the standard).
Turning old rotary phones into music streamers
>The NSA phone surveillance program was illegal and expensive: And it did not stop a single terrorist attack

"Was" illegal?
The most compassionate approach that balances the risks and benefits of reaching herd immunity, is to allow those who are at minimal risk of death to live their lives normally to build up immunity to the virus through natural infection, while better protecting those who are at highest risk. We call this Focused Protection.

This is the problem with the declaration. We can see from recent events in the UK that most of the transmission was amongst younger people but a couple of weeks later and it has spread to vulnerable parts of the population and the death rate is increasing.
The CDC put out guidance in March (not April), but it was in February that anyone involved with US supply chains knew shit was hitting the fan. If you were involved with global supply chains you knew shit was hitting the fan by January at the very latest.

https://en.m.wikipedia.org/wiki/Timeline_of_the_COVID-19_pan...

Also, where do I suggest Apple is fixing a pandemic? I’m saying they failed at design years ago and have stuck to that failure.
> efficiency (e.g. no database joins)

This is WRONG. I was in a team that somehow think that could make a decent software without using postgresql as-is. Is wrong: How many devs know how implement, CORRECTLY, ACID?

ALL OF ACID?

Then if "remove" for "efficiency" the single piece of software that ACTUALLY implement it, CORRECTLY, what exactly them expect?

Well, them were running in circles, avoiding ACID, being very efficient running 12 docker images (!) and not implementing actual features. I left because I point to this and was deemed not good fit.

With relation to microservices and all their past selves (n-tiers variations) the best advice is:

Use a rdbms, properly

Maybe, add a cache as redis.

End.

This is all you need for the vast majority of apps. And it will scale, and will perform very well. If it NOT scale and not perform very well, then is MORE likely that the app code is wrong than PostgreSQL/Redis to be wrong.

MORE.
Cloudflare Gateway now protects teams, wherever they are
Live Tech Event: Runtime Discovery of Kafka Streams Using PubSub+ Event Portal
Audio fidelity! CDs were better than cassettes, even the later metal coated tape! CDs had no easily-discernable hiss for the most part (although a few early tape to CD transmissions were very hissy). Having said that, cassetes were far more robust and I regret getting rid of my Walkman with Bass Boost, that's for sure.
If you're on windows, you may also want to check out https://www.getpaint.net/

It's great and free (as in beer) even for commercial use.
>GLOW is unfortunately in this boat.

Don't really agree. No, you wouldn't choose to wrap-up the show that way but it's a fairly natural break point.
A deal-breaker indeed. I am not buying any device I can't use to reasonably full extent without an online account and a cloud connection.
Yes, NetlifyCMS.
One of my favorite series (S1).

Good observation the lack of sex and violence in the second one. Could be true. I thought the new "sleeve" actor killed the second. The one in the first season was much much more convincing.
Gridsome is the one that I use (VueJS version of Gatsby). What are the sorts of things you found it couldn't do?

I want to get our team using it for simpler projects, and I haven't really hit any blockers with Gridsome, whereas I've hit plenty with Wordpress when we need a specific url structure.
Here's my all-time favorite from the 8-bit era: https://www.youtube.com/watch?v=Ls7rlhjazGo

Pictionary, of all games, had a fantastic soundtrack.
Room-Temperature Superconductivity Achieved for the First Time
Do you have any concerns about the so-called 'right' to be forgotten? Are you concerned that anyone who was active back then might lose a job now due to his postings a couple of decades ago?
https://github.com/GetPublii/Publii

https://www.netlifycms.org/

https://github.com/sanity-io/sanity
I very strongly recommend reading Dark Mirror by Bart Gellman.

https://www.indiebound.org/book/9781594206016

It's a look at the reporting of PRISM and other Snowden leaks by the guy who first broke the leaks. Pet jarring look at how the program can't to be, and how it evolved.
It’s clear that the addition of money can incentivize some great community standards.

Are you focusing on any specific kinds of companies at first? Ie. IndieHackers or ProductHunt type?

Also, do you plan to run any competitions or challenges from the platform side?
I prevented one terrorist attack by myself. Nobody knows that, because attack was prevented.
I must accept I am out of touch with the kids, like Principal Skinner...

"why not" is quite a good question though. I will ponder, thanks.
Funny detail: Magic the gathering hits very close to home by accident.

One of the (back then) dominating bitcoin exchanges used the domain mtgox.com which was an acronym for "magic the gathering online exchange".
> Btw... Usenet was incredible for in-company communication. Used to have a private newserver for our employees with names like .customer.help .hr.questions and so on. Was super useful until someone decided to try to put all the things in Outlook.

Jon Udell's 1999 book "Practical Internet Groupware" was an excellent resource on how to set up this sort of infrastructure by gluing together various protocols:

https://g.co/kgs/ExEfcX
Why I’m Glad I Left America
I am not aware of any work that has gotten a good timeseries of neuromodulator response. So much speculation is thrown around about how these hormones respond to real world experiences, but the evidence has been coarse grain from things like PET scans or sparse assays. Even if the tech used is not that new, the kind of data is. I am unaware of any data like this. Maybe I missed something. Is there another way neuroscience has managed to get an actual neuromodulator signal?
Oh look free marketing for both of them