skysight-inc/HackerNews huggingface dataset:
It’s a bit more involved than that…

Suppose you wrote a program to go and create your cloud infrastructure. Using AWS’ APIs you write an app to spin up a VM, setup a load balancer, and provision a database. You run your program, it works like a charm. Now you have all the infrastructure setup just the way you want it!

The problem is what happens when you want to _update_ that infrastructure? The program you wrote, using the aws.CreateVM(..) and aws.CreateLoadBalancer(..) API calls is no longer applicable. Instead, you probably want to use a different set of APIs, like aws.UpdateVM(…), to update your existing cloud resources. For example, change some port settings on your load balancer. So your app needs to be smart enough to check if the resources already exist, and if so, update them. Otherwise, create them fresh.

And it gets even worse. What if you want to create some new resources, such as attach an SSL certificate to your load balancer… but still keep all of your existing infrastructure as-is. Or what if you want to update an IAM usage policy that is already in-use by several other resources… Somehow your app needs to know the impact of that change, and how it will ripple out across other cloud resources.

Does that start to make sense? You don’t really want a “wrapper” for cloud APIs. You really want something that allows you to effectively describe your cloud infrastructure, and “make it happen”. And leave the specifics of “how” as an implementation detail… accomplished by a cloud provider’s APIs.

That is what Pulumi does — and other Infrastructure as Code tools, like Terraform. It provides you a way to describe your cloud infrastructure in a programming language, so that every time you run your app it will make the cloud reflect that target state. It will:

- Create resources if they don’t exist.
- Update existing resources if they do.
- Delete any resources that you no longer need.

I work at Pulumi and am happy to go into details about the joys of not dealing with cloud APIs directly, and just using Pulumi :)
Apple's response would be that AirTag isn't designed for that use case, and that you should purchase a "Find My network enabled" collar for your cat from a third party (it's only a matter of time...)
The device itself probably uses CEC to do volume control, which can be a bit of a crapshoot with all the different vendors involved.
I would love to see this model made feasible with a carbon tax, so that companies that couldn't meet a carbon goal could just buy their way down artificially or pay the government the taxes.
Orgasms and Investing
I'm not disagreeing with you, but picking a tech stack and sticking too it kinda sucks. You never know when the manufacturer is gonna do something to screw you (MacBook keyboards from 2016-2019). And then you're stuck.
I agree. Very considerate, I love it, thanks.
As I understand it, the CCC's Digital Key specification is what actually powers tech like Apple's Car Key and Samsung's Digital Key. Is there a list of cars that support this spec anywhere? I haven't been able to find any information outside of a couple of press releases.
> But, does it really matter?

This is a great line of thought, I'd encourage everyone to take it. There's a huge amount of crap people get up to that is mostly about performative debt balancing - people feel that they're owed something just because <fill in the blank>, when it really didn't matter. Just another gross aspect of a culture overly reliant on litigation for conflict management.

But. the question is meaningless without qualifying, for whom?

Because I can absolutely imagine situations where an Auth0 outage could be extremely damaging, expensive, or both. Same for a lot of other services.

> Life doesn't have an SLA

Nope. Which is a part of the reason why people spend money on them for certain specific things. It is just another form of insurance against risk.
The Steering Council is Microsoft, Google, Bloomberg and has already stifled free development and opinions.

I expect that corporations will get even more power with full time employees and very little will be accomplished.
According to [1], "Native providers are built directly and automatically from the cloud provider’s API...", and are not hand-coded, unlike Terraform's providers.

I'm surprised this is possible. If it was, why didn't Terraform follow this approach a long time ago?

The cloud providers' APIs provide the endpoints for creating, updating, reading and deleting resources. Terraform and Pulumi's value is to provide an idempotent abstraction on top of that. And that abstraction is not straightforward to write, because it has to handle numerous nuances and anachronisms in the underlying APIs. For example, in the event of updating an existing storage bucket, the abstraction has to determine whether the bucket can be simply updated, or if it needs to be re-created (say if you were changing the name or location). And the underlying API will not necessarily reveal this kind of information.

Hence one would think completely avoiding handwritten code is incredibly difficult if not an insurmountable problem.

[1]: https://www.pulumi.com/blog/pulumiup-native-providers/
Thanks very interesting. I agree. And if we end up killing our civilation maybe we'll be burying new oil for some future peoples to get similar explosive growth from basically free energy - and hope they learn from our mistakes ;)

Though seems like a tree can easily be more than a tonne and way cheaper than that. Even if worried about keeping the carbon in the forest could bury it too!
I seriously don't understand this disconnect. You know the word autopilot because it is a technology in airplanes. That is the only reason you know of the word.

Statistically speaking, 100% of people know that 1. Airplanes can have autopilot 2. Passenger jets still have multiple pilots in the cockpit, even with autopilot.

You don't need to know the intricacies of how autopilot functions to recognize the significance of those two facts (which I'm sure you knew) and apply the same to Tesla.
It's like a Twitter thread in here.
On the fiction side, I can recommend the Mars trilogy by Kim Stanley Robinson.
It can just as easily mean that nobody knows the solution to its novel problems yet. It potentially means nobody wants to touch it in a few years once the largest problems have revealed themselves en masse.

If something has hype it's worth investigating, absolutely. But it should also be treated with a great deal of scepticism; there's often a lot of money in it for businesses and individuals moving you onto the latest shiny tech.
How to Secure Your Asp.net Core WebApi with Azure Ad and OAuth 2.0
Yeah I don't want to cast too wide of a net. My mom is a nurse in florida and isn't unionized and adjusting for cost of living, makes basically the same as a kaiser unionized nurse and has great job security. So it is not always necessary or they don't always work. But it seems like they are great for bringing the baseline work environment up.
And for some, the reason they're billionaires is because they constructed this boat. They don't mind.
No, because the oil isn't fungible. We're getting high quality, grade-A organic, family-owned oil out of the ground and putting the bottom of the barrel sludge back in.
Minneapolis ex-policeman Chauvin convicted of murder in Floyd case
Possibly off-topic, but the "a bug is cheaper to fix the earlier on it's discovered" idea came from a since-debunked bit of research, and even if it were true in 1995, has since become untrue through tech advances in how we execute modern deployments

That seems like quite a stretch.

The cost of fixing a bug isn't just the deployment effort. It's also the investigation, the impact analysis for any potential fix, and the mitigation of any unwanted side effects on other code that is related to wherever the bug is.

I think the original point of the idea was also that a bug may also have cost real money by making it further through your pipeline or even into production before someone fixed it. A bug only found in some sort of QA or code review exercise took the resources to do that exercise, when a bug found by a developer shortly after writing the code did not. A bug that made it to a staging server might have tied up shared resources or interfered with someone else's deployment before it gets backed out.

If a bug makes it all the way into production, there might be customer relations or PR fallout for having the bug in your software and affecting your customers negatively as a result. There might be regulatory consequences if the bug caused a breach of some kind. If the bug caused something serious like personal injury, damage to equipment or loss of important data, that could be catastrophic.

Of course, a lot of software today also isn't online systems that can be readily redeployed, and it's obvious that if you have a more demanding deployment process like serving millions of software updates to unhappy customers, possibly through a significant marketplace that you don't control where you can't just push out your change whenever you want, or physically recalling a dangerous hardware product deployed halfway around the world to update its firmware, that's going to be far more expensive.

I'm not sure what since-debunked bit of research you were referring to, but the idea you mentioned is far broader than any single bit of research and I think it's still a pretty good rule of thumb even today. The relative ease of new deployments for online systems running on servers you control just reduces the damage a bit in that one specific area.
Or, how about we just don't publish everyone's legal identity in the same exact place? Sure, they won't be breaking into Geico to steal drivers' license numbers anymore, but just wait until this wonderful "centralized database" gets compromised....
Something equivalent to hierarchical state machines.
Out of interest, what are peoples experience like with self hosted identity management options? I've been evaluating keycloak recently, and it seems pretty good.
With E2E encryption you need to trust the developer of the software and the distribution channel (apt, App Store, web server). The GP comment is parroting the claim that browser based E2E encrypted systems are inherently less secure than native apps because web servers are untrustworthy systems for delivering software.

Does native software have fundamentally more trustworthy distribution channels than web servers? I see the argument in some cases - apt always delivers the same binary for the same request (I assume). And the App Store does binary signing, rather than just TLS. But plenty of native software is just installed via the developer’s website anyway. And if the developers host the website, they’re already a party you have to trust. Giving them more trust doesn’t change much - they could just slip something nasty in the binary if they wanted your data.

I still don’t totally buy it.
It's truly the only way we'll be able to curve carbon emissions and CO2 ppms. We need a carbon tax now, to create a framework for companies to become accountable for their emissions.
Still no big MacBook Pro?
(Sorry folks, 13 inch is not "Pro" in my eyes)

Will we even ever get one? What's happening?
Still destined to fail as it's too late by now but I do like these changes.
Agreed, although I wish that animated gif was instead real text, using something like playterm[1] or asciinema[2].

[1] https://playterm.org/

[2] https://asciinema.org/
Gotta be a billionaire to know for sure.
Mostly I find the app to be really pushy on sales.
> How do you lower the cost of housing in desirable place

If there is fixed and relatively small unmet demand, you can build to accommodate it.

Otherwise, you can just make it less desirable. If you mistake a case where the earlier condition doesn’t apply for one where it does and start chasing it with runaway density, you’ll probably achieve this accidentally, so, one way or another, “build more” works
Precursor Update: Software, Pre-Boot, Testing, Certification, and Time Lines
My submission and others' keep getting flagged, so I re-read the FAQ:

> Off-Topic: Most stories about politics, or crime, or sports, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic. https://news.ycombinator.com/newsguidelines.html

It sounds like we aren't supposed to discuss this here. :/
This is rather notable given the high burden usually required given qualified immunity and how difficult it has been in the past to convict police of excessive violence.

(hence I think its HN worthy)
I sometimes plug in my Android Phone to a USB-C dock (with a keyboard, mouse and monitor) and use it like a desktop. Android has a desktop mode that is actually surprisingly nice. It's like Dex, but doesn't do the remote desktop via USB thing... It just displays on the monitor.
My personal opinion (and it is really just that - I cannot prove anything I say here) is that for a lot of those companies it is actually the risk of not being able to tell exactly what the AGPL would affect that is the main factor.

As I said, I'm explicitly not mentioning any alternative here because they all have issues, but the AGPL's wording is much more complicated than most and that (perceived) insecurity around it is my main criticism.
Ask HN: What Happened to Indie Hackers?
I was a huge fan back in its heyday but in recent years the site has become a complete disaster. Discussions are dead, nobody that actually makes money posts there, and the newsletter seems like its written by a 16 year old "maker." I could go on and on. I don't get what happened. Am I the only one who feels this way? Did csallen exit?
I'm just loving this AskHN. Most of the comments make me laugh. I've seen some great pages and programs, even installed one already. Ask more questions on HN please!
This is going to get buried today with the verdict news but Steinman really was an incredible songwriter. I encourage you all to listen to Bat Out Of Hell if you get the chance today.
The FSF and other similar organizations have lawyers too. What do you think their opinion is?
The mob won, let’s hope for mistrial or appeal.

When a US representative incites violence on the streets to intimidate the jurors, and the president ‘prays’ for guilty verdict it is a travesty of justice.
Is the need for a project manager or a product manager?

I’m pretty sure that python is going to have an ongoing need for attention to be paid to its packaging ecosystem. Approached holistically, this would include the documentation and other aspects of developer experience.
Space stations like the ISS might be like the space shuttle or hydrogen dirigibles - a really cool technological achievement that seemed promising for a while, but in the end not the best way to achieve any sort of practical goal, so not something that gets really scaled up as part of a growing industry.
Sennheiser HD600 are definitely worth the money.
There's a difference though between farming out to a SaaS product like Auth0 and rolling your own. You should absolutely not try and write your own Oauth2 server unless you really, really know what you're doing. But there are a lot of options for self-hosted auth services that are rock solid and battle tested.
He means Obama
You've never upgraded because it has a non-upgradeable RAM and SSD. :-|
AirTag shows what Nokia tried to achieve with their Treasure Tag system back in 2014. Hopefully they work more reliable and that the Find My Network Accessory program will be implemented by more manufactures. Stuff like this can be useful for some people.
Yep. M1 changes nothing for iPad, it has been limited by software not CPU for years now.
imho, if you think typecasting the AWS api in your local code repository is useful, than Pulumi is the way to go. Maybe one day someone will find an api that AWS didn't properly typecast before releasing and then the hundreds of hours of typecasting in your local repo will be worth it.

Other than that, it's really annoying way to keep infrastructure. I prefer the Terraform DSL myself, but I'm certain there is an audience that disagrees with me.
Note to Self: Create Non-Exhaustive List of Competitors
I don't see how any of these things are connected
Notion shares a large amount of code between the front-end and back-end. We have many algorithms, collections, helpers, etc that we share. Here's an example, we have a shared loadPageChunk function that takes a cursor and a loader implementation, then traverses our data graph to gather the data needed to render part of a page.

// shared code - implement the algorithm
export async function loadPageChunk(
args: LoadPageChunkArgs,
loadRecordValue: loadRecordValueFn
) {
// ...
}

// client code - use the algorithm, provide client-specific IO
// eg on Android we'd use Sqlite.
const records = await loadPageChunk(cursor, SqliteService.loadRecordValue)

// Server code - same, but use the server's data stores.
// Behind the scenes, these loaders batch, etc
const records = await loadPageChunk(cursor, useCache ? CacheService.loadRecordValue : PostgresService.loadRecordValue)

Even if we only shared types, there's a significant benefit. We try to push as much logic into the type system as we can; for example we use discriminating unions to define different groups of related types. Eg, we have a union type called ContentBlock that has all the specific block types that can have children, `Page | Text | Column | ...`, sharing this type and its helper functions like `isContentBlock(block: BlockValue): block is ContentBlock` means both our front-end and back-end code rely/expect/enforce the same invariants.
It is not P2P. The place where they most clearly state that as far as I can find is actually the documentation for their game SDK[1], but you can check that this is the case with netstat. In general it’s hard to get good voice or video chat with P2P connections because of the low upload of most residential internet connections, so few serious chat apps do it.

[1]: https://discord.com/developers/docs/game-sdk/networking
It's still used milsims like ArmA and DCS (where there are plugins for radio simulation integration).
They know they're frauds pushing a political agenda, and they know if they and their conspirators repeat the same lies over and over, the masses will believe them.
Accord Communications: Enterprise Edition
That seems very feasible
GPLv3 also added patent grant which is super important if you deal with software built by corporations.
I don't think it makes sense to flag, given:

> unless they're evidence of some interesting new phenomenon

It's pretty rare that police are convicted around excessive force in the US. So to me this is a rather notable / interesting new development.
> I did not mean to say that open-source software (broadly, MIT-licensed) and free software (broadly, GPL-licensed)

Sorry, but free software IS open-source software. I take issue with how you're presenting these. Perhaps a better term would be liberally licensed software, as opposed to copyleft.
Copyright law is not just distribution. Read 17 U.S.C. §106.
The keyboard probably has a T2 or similar chip, or even basically an apple watch without a screen.
416 tons of CO2e is what... The amount emitted by a single family in a few days?

I reckon I could turn my thermostat back a few degrees and save that.
I'm really glad it's going to stay independent. I'd hate for it to be gradually degraded into another Skype.
No, it is not yet back. Quote from the article: "the company announces that it will reinstate Parler in the App Store as soon as it releases an updated version."
> In addition to what others have said, it is important to point out that the CDK is AWS specific.

As mentioned in other comments here, CDK for Terraform is another option and it's not AWS specific - it should work with any Terraform provider and there are heaps available.

https://github.com/hashicorp/terraform-cdk
The post shame era
Yeah I’m surprised more people aren’t mentioning this: I’m really not a fan of being an involuntary participant in Apple’s mesh network.

I guess I could monitor my Bluetooth status more often, but the Control Center toggle (intentionally) doesn’t turn it off entirely...
I agree with you. Sometimes things break, such is life. What I don't fully understand is that when people choose to outsource a critical part of their infrastructure and then complain when it happens to be down for a bit. It was a trade-off that was made.
No, I don’t think so. The api [0] only returns metadata and Spotify urls that are played in their player. There’s no way I can find to get the actual audio file or audio stream on binary format.

Of course it also requires a Spotify dev account so that’s limiting too.

I’m discounting the publishing and distribution part because we have examples of podcasts that moved from regular to Spotify (eg, JRE) and the content didn’t change at all.

Podcasts are pretty awesome as the distribution costs are low and are pretty similar whether your distributing via Spotify or your own CDN.

With regular you get discoverability via Apple and many others so that’s bigger than Spotify.

This is a “solved” problem in that creators have been easily doing this for 10 years. The technical aspects are minimal and completely abstracted through many services available that are dollars per month.

[0] https://developer.spotify.com/documentation/web-api/referenc...
Mastodon Renaming “Toots” to “Posts”
It’s just my opinion and I’ll be happy to be wrong (because it means something better will have supplanted it).

But I don’t think there’s a significantly-simpler, mature abstraction for doing container orchestration, than K8s.

K8s’ main advantage/stickiness factor, is how abstract and modular it is. It’s an opinionated Kernel that gets most things right and has a huge ecosystem of tools built around this kernel.

It has a very similar set of stickiness factors to Linux, imo, although the origin story couldn’t be more different of course.

I think if anything replaces K8s, it’ll take a Linux-like shape. But K8s gets enough things correct (licensing, api, modularity) that it’ll be hard to replace it wholesale.
Well its not really. There are a lot of places to get podcasts from now, but there wasn't then.
In my experience,

Good organizations have scheduled updates for critical outages. No one pesters anyone, and everyone knows that a five minute update is expected periodically, e.g. at the top of every hour.

Great organizations instantly spin up a response team which includes a communications liaison, who is technical enough to participate in the reponse, but is not presently leading it. They assist and communicate, either to the PM or to customers directly.

...and other organizations burn through humans until they get a handle on how to be better.

That said, in these days of AWS and GCE, you can go a loong time without running into the kinds of failures that used to cause critical, extended outages.
I'm in the same boat, and it's pretty abysmal. I've had to cut back so much of my workflow to fit into this computer that it can't justify itself, not even if the battery lasted a hundred hours.
Under (default) investor rules, you recognize income (or losses) only on sales or dividends (or taxable reorganizations), and can get long term capital gains, have a low limit on offsetting losses against ordinary income, can carry forward excess losses forever, and have the wash sale rule.

Under trader rules, you must recognize gains (or losses) at the end of each year, and don't get capital gains rates, but you can offset income with losses all the way to $0, loss carryforward is time limited, but you can also carry back a few years.

I'll keep my tax deferral and long term capital gains rates, thanks; but if I were a frequent trader, it seems like the alternate regime is simpler.
"It might be a sign that Susan does not have a fully trusted team around her ..." => It might be a sign that team around her is afraid to tell her how ridiculous this is... Maybe they made good proposals in the past and where turned down and they now don't want to make good suggestions again...