skysight-inc/HackerNews huggingface dataset:
Hi, I'm gauging interest on the topic and building up service audience.
Please sign up if you're interested!
Can you explain what you mean here?

> maxi long risk assets

I think you mostly mean "own assets", but would like to understand this phrase precisely.
So I think heroku has stagnated a bit, and I am definitely very open to "better herokus".

But the idea that something you did in five minutes is going to be better than heroku (in all ways?) is.... I don't know what the adjective is. Heroku is very mature and polished software, that almost always does what you expect -- it's a very non-leaky abstraction, I guess. You can almost always get away with ignoring the details. (Yes, not 100%, but almost always). And there's pretty high quality documentation explaining how all the parts work, when you do need to figure out something.

This is unlikely to be a "better heroku", that solves all the problems heroku solves with as little time/energy from the customer -- if it really is, this post definitely didn't convince me of it, I still don't totally understand what it's even demo'ing. And it just makes gitlab look rude and/or desperate to have a heading that's simply "Do not use Heroku" -- because it's not open source, is the argument, i guess? Plus a vague and sarcastic tweet? How would we feel if heroku (or github) had an article titled "Do not use gitlab" with no more of an argument than that? It's just... childish.
UK Telephone numbers for use in TV and radio drama programmes
> Everything? I thought it was supposed to be Git hosting, but I'm not even sure anymore.

They're losing to GitHub. While they advertise that they have 2/3 of the self-hosted git server market share, they just barely have a double digit share of the total VCS market, which is where the real enterprise money and value is. I don't have figures on hand, but I'd guess they have a single digit percentage of actual enterprise market share. GitHub has the same domination over its space that Google has over search, and Microsoft is excellent at competing on enterprise partnerships.

Tech companies usually scale out their products eventually anyway, but in GitLab's case it's probably existential if they want to maintain status as a high growth, VC-backed company. They need to find another of their competitors' moats which is easier to chip away at, or they need to change the game and introduce something original.
Lex (Fridman) has been trying for a while in his latest podcasts to invite scientists to investigate the phenomenon. Treat it like any other scientific exploration, with an open mind and led by data and evidence. Evidence of UFOs does not equate necessarily to alien life. This could be a unique natural phenomenon.
s3, Google equivalent storage. Less cost for just about the same effort.
RSA is rarely actually used for doing the message encryption. Instead it is used for negotiating other keys. Perfect-forward-secrecy enables you to get message confidentiality even if your key is leaked after the message is sent.
That doesn't stop 99% of the mind share and language design from being "Java with lipstick".
and now we’re evolved enough to have brains capable of giving us a competitive advantage against diseases!

unless you think that brains somehow aren’t part of our biological machine.
I will if government requires it but it was not my free will.
User Defined Ordering Made Easy
> “Or traveling at speeds that exceed the sound barrier without a sonic boom.”

Physics noob here so be gentle. I initially thought that the sonic boom is caused by the compression of the sound of the aircraft's own engines, but then realised that couldn't be correct as meteorites can also create sonic booms and they have no engines.

The boom is caused by the air being compressed in front of the object? Is the loudness of the engines irrelevent to the intensity of the boom, it's all due to speed?

So these sonic boom-less aircraft - if they're real - must be doing something to the air in front of it?
Counterpoint: Parallel programming isn't very hard.

Seriously: try fork() + wait(), or spawn in bash / cmd line. make -j offers parallelism (and Ninja is "make -j by default").

OpenMP's "#pragma omp parallel for" is extremely easy to use.

Things get harder with thread libraries, but the "parallelism" part of pthreads is pretty easy. pthread_create(&thread_id, NULL, function, args);, at least if you're fine with the default settings.

C++ Threads are even easier than pthreads.

-----------

The hard part is:

1. Communication / Synchronization -- But really, condition variables are the most complicated thing most people need. fork() + wait() push the difficult communication part to the wait() or to pipes. But if you stick with wait() / waitpid() as your main communication mechanism, its pretty easy to think about.

2. High performance programming -- This is just hard, especially if you begin to reach for the highest performance "memory barrier / lock-free programming" styles. This is where "false sharing" comes in (your code correctly executes under false sharing, but slowly due to how the L1 cache handles multicore architectures).

---------

However, if you stick with a simple fork-join communication model (ex: pthread_join, or wait()/waitpid() based synchronization)... its really not too hard at all. Just try to stay away from the high-performance techniques unless you really need them.
I edited my post to clarify
Missing every delivery target counts for you as success? Your business partners/managers will likely disagree.
Netz: Discover internet-wide misconfigurations while drinking coffee
You might be happy to die needlessly but you endager others who don't want to.
An easy way to execute Git operations in multiple repositories
You can use OTR [1] with some IRC clients to get E2EE. That said, you can also get E2EE on Discord if willing to violate their AUP using BetterDiscord [2] + DiscordCrypt [3]. That it violates their terms should be a signal they need your data to have value.

[1] - https://otr.cypherpunks.ca/

[2] - https://github.com/rauenzi/BetterDiscordApp

[3] - https://gitlab.com/leogx9r/DiscordCrypt
Driving an FP-First Company, with Serokell CEO Arseniy Seroka
> Lots of CLI commands involved, and it did not run in a CI/CD pipeline with additional tests before deploying it. Now the web application is deployed into a black box.

That's just the other side of coin. If you want a simple "push and it's up!" interface then Heroku is a shiny coin. If you want to sell multiple levels of CI pipelines then it looks rusty.

> Want to use Let’s Encrypt and your own domain name?

I've never seen a platform that is easier to add Let's Encrypt domain validated TLS than Heroku's. Yes it's manual steps, but it's manual because you have to set up your DNS to point to their load balancer. I fail to see how much simpler it could be than that.

> How about adding the deployment natively to GitLab to have a single application in your DevOps workflow?

> # A better Heroku: The 5 minute production app

> ... The documentation says to create a new AWS IAM role with credentials for automation.

Nothing that involves creating AWS accounts or IAM role creation would take five minutes for someone unfamiliar with AWS. And if does happen in less than five minutes than I guarantee you that new user either has no clue what they just created or (boolean, not exclusive) they've left some gaping wide hole in their IAM permissions.

I'm not saying that it can't be done. I'm saying there is no way that creating all of that from scratch can be done simply, securely, and quickly for a new user.
A bit more backstory:

https://grahamlinehan.substack.com/p/ashton-challenor-the-bo...
That's not how this works.

An attacker can record the key exchange. That is not using RSA, today it's usually some variation of elliptic curve diffie hellman. But that is just as vulnerable to quantum attacks as RSA.
So you're attacking the key exchange, not the RSA signature.

What you're probably alluding to here is the forward secrecy property of TLS. But that is only true under the assumption that the key exchange is secure. In a quantum attack scenario it is not.

So a store-and-decrypt-later attack is still a very valid concern around TLS and quantum computers.
You're leaving out that he mentioned that a lot of his friends weren't really into their work and used shopping as a way to alleviate that form of suffering, at least that's what he seems to believe.

Maybe I read too much into that part, I've certainly seen it with some of my friends. Some of my friends hate their job, other friends of mine are okay with their job. In any case, it isn't hard to imagine a big group of his friends being unhappy with their job.

After having read this, I kind of come to the realization that some serious research needs to be done to the psychological state of people in general and working. The results are all over the place [1]. For example, Pew Research Center seems to claim that Americans as a whole are pretty satisfied with their jobs [2], whereas an article about a Gallup poll claims that 85% isn't [3].

[1] https://www.google.com/search?q=statistics+us+people+unhappy...

[2] https://www.pewresearch.org/social-trends/2016/10/06/3-how-a...

[3] https://www.staffsquared.com/blog/why-85-of-people-hate-thei....
Mine doesn't look anything like that.
Everyone has their own frontpage based on their subreddit subscriptions so I have no idea what you're talking about. Maybe post a screenshot?
One server. I use Beaver Builder for the homepage and laying out any PHP dynamic pages (log in, log out, contact us, etc), and then either enqueue scripts or a custom rewrite rule to serve any javascript apps e.g. React.
My posture’s improved since i built a proper desk, but i suspect it’ll improve more once the erg is finally out of backorder and i can torture myself at home.
I don’t disagree with your point however Jurassic Park was mostly animatronics so not the best example to use.
But if you're not "weak", you could inadvertently spread it to someone who is "weak", and they could spread it to many other "weak" people, and then they all die and don't pass on their genes. It's true that this is a form of eugenics and natural selection, but it's not the kind that's compatible with the values of most humans.
You augment your memory with Google searches and your running speed with cars, why not augment your natural immune system with vaccines.
What does "hyper cloud" mean in this context? Searching only shows a headset with the name "HyperX Cloud" but I'm sure that's not what you are referring to.
The campaign was a unique event in decades of party history and the Wikipedia page for the campaign lists 4 different theories for political motives. I'm not sure you can view it as a sign of a culture of healthy accountability.

https://en.wikipedia.org/wiki/Anti-corruption_campaign_under...
Check the username...
> If anything, I think many folks would say “whatever, make the two requests in parallel and zip them together in the application”

That was my first reaction.

Keep in mind that high load applications have limited database connections. Running queries in parallel will be an anti-pattern in such applications.
Discovery+ Sets GameStop Documentary Hosted by Jordan Belfort
… whoah. That’s not someone I’d trust to help run a website that promotes free-ish speech.
This post appears to be a comparison between deploying something on Heroku from scratch in 5 minutes, all-in, and someone knowledgeable about GitLab, GitLab CI and AWS, with accounts and credentials already created and configured, deploying something trivial in 6 minutes.

That's quite a straw-man.

If I were GitLab, I wouldn't be criticising the UX of companies known for excellent UX like Heroku while GitLab's UX is in the state its in.
> I feel like Gitlab is going in a direction of AWS...

It turns out, if you host the source, you hold the keys to the world of DevOps, too. It is completely natural then for GitLab to venture in to an ever expanding field of GitOps and eventually the Cloud computing market. I mean, Microsoft plonked billions on GitHub for Azure more than anything else.
GitLab customer here. Sometimes I also feel like they are adding a lot of stuff instead of improving their core services. BTW I already gave up on using GitLab's native caching in favor of doing all my CI/CD with Kaniko + Multi Stage Dockerfiles

I would not care about new features if they had granular billing like AWS, GCP, etc... But here I am paying for Devsecops and a lot other stuff I don't use.
> What they'd most likely output is a "report" with "findings" that "point to" or "suggest" certain things like bad protocols or insecure procedures or disconnected safety sensors etc. Hardly evidence, and not really actionable even if they were allowed to get there and eventually publish it

The WHO team wasn't even allowed near the labs, much less enter it. They got a very curated tour of Wuhan (which isn't surprising).
I'd love to hear that from you when you're going to die.
You do understand that nature/evolution's plan or 'solution' can be to eradicate you?
In this context "Hyper Cloud" means one of the major cloud vendors - AWS, GCP, Azure.
no no no, you need high performance enterprise grade http on port 80 listening on all interfaces for a power plant portal
> I have been a backend focussed developer in the past 20 years, web development is often fighting with Javascript and CSS. Especially Heroku as a deployment platform is a new area for me.

No editing either...
This.

Political activism is important. Stand up for what you believe in. But political activism does not mix with an inclusive, warm, welcoming hobby community. If you feel so strongly about your political beliefs that you can't let them rest even in your knitting club, then for the sake of the knitting club you're going to either have to turn it into a political knitting club or watch it fall apart. Maybe that's a sacrifice in pursuit of a greater cause.
Germane: https://news.ycombinator.com/item?id=22240041

I like the model proposed. But... unherd. Read critically.
Instead of checking the TLS certificate or the domain, you are depending on fak3b00k.com not implementing the same title tag as Facebook?
There is the personal "front page"(stuff you subscribe to). Then there is the public "front page" which is just the most popular posts on reddit sans some controversial or NSFW subreddits.
Ironically, the founder of my company and I spent over an hour breaking apart this exact page yesterday talking about its UI. There are a lot of really good things that this page does right (shows tradeoffs between different tiers in a way that's not confusing at every tier), but... yikes. Sorry to hear about this.
You can really see that all these areas look like natural flood regions.

I suspect the real issue here is whoever gave people over the last 100 years permission to build on/own nature's flood plane...
The key thing to understand is async doesn't replace sync. There is still the need for human connection, they is still the need for synchronous comms. It just turns out one flat medium of either text or video on their own don't work well and no one is playing with the video format. We're all staring at 4:3 squares or black boxes. When you actually shrink the video and make it all about "presence", the experience drastically changes. That's our finding anyway, and thats why you're seeing many others go down this same kind of bubble photo/video route. But thanks for the history lesson.
The React Native Guide I Wish I Had
There are browser plugins and script-injector-modifiers that help with this. "Don't Fuck With Paste" is one I use.

But yeah, that's infuriating.
We don't know the circumstances. Maybe he didn't have that many options, and needed money badly? It's easy to criticize people for their choices, but I always wonder what the critics would actually do in exactly the same circumstances. I personally am not so sure I can always justify my life choices as 100% ethically pure.
That would still be your free will. You'd still be presented with a choice:

A) Don't do the thing you don't want to (Vaccination)

- or -

B) Don't do the thing that having a vaccination would let you do.

That's still freedom of choice - you're free to decide what you want more. Having constraints on you isn't removing your free will.
I am probably deeply biased, having spent decades in finance including massive funds, but I'd like to think you're wrong.

On the most simple level - ETFs and passive investments only work because they "invest along" with the rest of the market. With the rest of the market being the active investors, of which the large institutional ones make the most impact.

If they weren't there - then the passives would stop working. The dynamics take a while to visualize but think about the word - passive implies you're following someone who's active. My metaphor for this is water-skiing. The water-skier is MUCH more efficient than the boat that's towing them. However it would be wrong to think that the world would be a better place if everyone just had the skis and nobody had boats - w/o boats, the people are back to having generate their own energy (trading ideas/analysis) and we're back in the worse spot.

Then - on the very concrete level - there's a LOT of state teachers, firemen, policemen, etc. that are able to give their pensioners the what they promised them only because they made wise investments in funds that worked their asses off to provide returns required for that.
"steal"???

Who's "stealing" who?

Hasn't a contract been signed, and haven't the vaccines been actually paid for?
Furthermore, who banked the cost (and risk) of the Fundamental Research that led to viable vaccines in record time - months, instead of years?
(free hint: it was mostly European taxpayers money)

By lifting the patents, the EU would only be helping pharma fulfill their own contractual obligations and restore legality. Obviously, it should still pay the agreed price per dose.

Or are you suggesting that, sometimes, the Law is not supposed to be followed? ...specially if we are afraid to upset important people?
Doesn't this, instead, create the moral hazard that the Law, in fact, is actually optional?

I'm genuinely curious to hear your (and other's) thoughts on this.
My problem is I don't have a dedicated area at home for "work". And even if I did, I'm the one paying for it. My work desk is also my computer desk. So by the end of the day, maybe I want to play a PC game, but the last thing I want to do is spend more time at the desk.
Every time I read these stories I wonder if they arent, just that, stories, then I realize it would be kinda fun to create one of these lowlevel compiler infecting things, and realize nah there are atleast a few out there written for shits and giggles. If nothing else, just because of the stories.
It seems like he did. (Or may be someone else's. I didn't check the repo.) Common Lisp is the second slowest on his results table.
Hyperscaler = Google, Amazon, Microsoft, Alicloud
This is poetic, but I don't think it's true. The world is too complex to model perfectly. It's easy to feel like a digital lens is the whole world, but it really, really isn't. Twitter != Voters

The small sat revolution is a big deal, but much mystery & magic remains.
Yes, NASA is working on reducing sonic booms, but there is still long way to go. Typically that reduction is achieved through change in aerodynamic shape so that sonic waves created by aircraft are modified/nullified. UFO's from reports typically look very unomptimised aerodynamically.
Diffie-Hellman over finite fields or elliptic curves is just as vulnerable to Shor's algorithm as RSA. I believe ECC might even need fewer qubits to break at the same classical security level, since the numbers are smaller.

There is a small benefit, because now an attacker needs to attack each session separately, instead of attacking a single key to break all sessions with a particular sever. But that's hardly something you want to rely on.
As Justice Scalia pithily put it: "I do not enjoy writing. I enjoy having written."
The article isn’t clear about it but the 5 minute production app is an ambition, not a reality.

Setting up IAM is indeed hard. The most workable idea we have so far is having the user run as CloudFormation script to set it up, see https://gitlab.com/gitlab-org/5-minute-production-app/deploy...
"Boring" languages almost always equal more boilerplate.

Personally, I'll take an expressive, GC'ed language, but write "boring"-ish code when I'm on a short time-frame and I have few developers.

EDIT. Just realised this sounds needlessly antagonistic; the point I'm trying to make is that "boring" is too coarse a measurement. Java 1.8 is more "boring" with it's required explicit type declarations, but I would /always/ pick a newer Java version to avoid the boilerplate.
This actually happened to an app I'm invovled with too.

Turns out heroku started requiring SSL for postgres connections on "hobby" tier only last month. (It had already been required for "standard" and "professional"; and the blog post says they had been advertising the deprecation for a while, although I hadn't noticed either -- the thing about heroku is it makes it so easy to just ignore it mostly, that you can just ignore it mostly).

https://devcenter.heroku.com/changelog-items/2035

Is there some way to encode this in the postgres DATABASE_URL? I'm not sure. With my particular app, it would have been ignored anyway, my app was deconstructing the DATABASE_URL into components to feed into the database connection configuration, and was not paying attention to any hypothetical part of it that would have specified ssl. This was per the instructions of the framework being used.

I could believe there's a way heroku could have done this better though... lately I do notice more and more things where heroku doesn't seem to be "dotting all the i's" [USA expression for attention to detail and perfection] as much as I used to count on them to.
I think the negative reaction comes from thinking that, vaccinating an 80 year old Indonesian is the same as vaccinating a 22 year old American. One has a much higher chance of having a severe, deadly, case COVID than the other.
The example for how to count Unicode characters (actually graphemes I think) is incorrect. It won't catch more complicated things like emojis with skin tone modifiers. Currently the best way I know to do this is to use the uniseg library.

https://github.com/rivo/uniseg
> or Chernobyl (“Don’t worry, the cloud didn’t reach France” - It did),

This is a huge urban legend, which has been thoroughly debunked.

I'm not in the mood to look for sources, but the gist is that the "clouds stopped at the borders" meme came from a few specific TV reports that were extremely misinterpreted, not from any sort of official communication.
Funny, I’m the opposite. I would have no significant reservations if it wasn’t for the creepy fascist vibe oozing from beneath the facade of “science”.

As it stands, I’ll go to war today and die to guarantee my and your and everyone’s right to refuse, should TPTB actually try anything that stupid. Shouldn’t be a problem though, the people in favor seem to be mostly bullies making noise. They tend to shut up when you let them know that their only path forward is to start, and then try to win, a war.
Seems like this post has likely been quietly downweighed and pushed off the front-page. I do wish there'd be a bit more transparency over those decisions though I understand they are common and do usually have reasons behind them.