skysight-inc/HackerNews huggingface dataset:
There's a principle in security called "defense in depth". Your servers shouldn't be SSHable from the public Internet, but even if that's bypassed somehow, there should still be other layers of security. Each layer of protection adds security.
While the starvation behavior of cooperative green-threads isn’t ideal as native threads, the idea is that

1. Properly written code will perform well, whether async/await or Go style.

2. Making async easy makes one use it in more places. In additon having caller decide to run something sync or async also makes it way more useful. In Async/await model that can only work if all methods are declared async - very costly in complexity
Every post has a context. Every post may be an opportunity to shed more light than is immediately necessary, if you like to shed light.
New Theory Suggests ‘Oumuamua Is a Nitrogen Ice Pancake
But there's so much more to it than this, e.g. upgrading, failing over, point in time recovery, monitoring.

I manage both a cockroachdb cluster and a few PG setups. Out postgres' have streaming replication to a standby with barman running on the standby. They are night and day.

Sure 2021 PG is way better than 2010 PG. But relative to available options, it's much worse.
Naked decathlon
I just happened to mention ones that would resonate with HN readers. Usage caps, filtering sites, and requiring modem rental are things that ordinary users care about. Remember that Comcast was rated "worst company in America" twice at Consumerist, and was runner up twice, and appeared in the final four two more times.

As far as impact on cost, do you mean "cost to the consumer" or "cost to the company"?
Will always upvote this whenever it pops up on HN. Bless this OS project and sincerely hope it gets the recognition it deserves. Have it installed on an Acer Aspire netbook and it just feels right! super snappy and everything mostly works.

Its my new BeOS5 :)
Unfortunately, it tends to be a bit "squishy" - task completion (by the PE or by junior team members), team velocity, etc can all be used, but using them exclusively is just asking for the team to game those metrics. Much better to have regular 1-on-1s with each person and just discuss progress - team progress, individual project/task progress, and any career goals. If somebody is actively seeking promotion, we'll use a job progression matrix (HR puts them together) and talk through the differentiators and what that employee can do to fill the gaps.
How does one program something like this directly in assembly?

Do you use an IDE that makes things easier?

I remember doing very simple programs in asm during college, but it wasn't anywhere near this complex.

Any resources or articles that touch on this topic would be appreciated!
The only thing it would show is that he was either at his computer when it happened, or wasn't at his computer. Either is so weak it's worthless.
Its not just that. The experience of the teams also counts.

For this kind of project its more important to have people with pratical experience in kernels, than experience in a particular language.

These people will have a experience in languages they used before, so even if the decision was taken today, you wouldn't find enough people with experience in kernels AND Rust, but will have much more people with experience in kernels C and/or C++, so C++ would still be a good default in comparison to C.

It would be pretty amateurish to get the kernel expert folks to learn Rust while implementing it, as it would probably mean that the end result in Rust would be worse than the end result in C++ as they were more comfortable and experienced in that language.

It will take more time to form specialists in some key areas so that decision can be made with less side-effects.
Doctors still do house calls, but if you’re poor then you’re lucky to be seeing a doctor at all. Neither of these things have changed.
I've been putting things behind wireguard. It seems to scale nicely and is more resilient against attack by the nature of the protocol.
Some enterprise data model links here:

https://dba.stackexchange.com/questions/12991/ready-to-use-d...

Instead of soft deletes, move records to a history table

I agree w session issue. Had to rebuild sessions before and is a pita compared to just recording them at source
FYI 大きい (ookii) is an い adjective, not a な, so 大きな赤いボール is incorrect. I suspect you know this though since you got it right for the second example, but what you wanted is 大きくて赤いボール (ookikute akai booru) I believe. And additionally, for な "adjectives" (so to speak, since it's not a direct analog and have characteristics of nouns), you wouldn't just string な with the next adjective, but replace it with で. like, 静かで可愛い人。

But as you mentioned, as far as I understand, the ordering is much more about emphasis than some set rule - to put it with some contrived conversations:

A: I saw a big blue ball
B: Eh? It was a big RED ball!

vs

A: I saw a big red ball
B: Eh? It was a SMALL red ball!

then either ordering could sound natural in context. But I'm not Japanese so I can ask my wife later if that's really the case.
It is, to say the least, not conventional wisdom among security engineers that simply having network segmentation is detrimental to security. The concepts you're alluding to --- "Beyond Corp" and "Zero Trust" --- are subtle, and heavily cargo culted.
Seems possible. https://iwaponline.com/jwh/article/13/2/285/28303/Impact-of-...
That certainly is not clear to me, and in any case not reason to be dismissive and rude about a good answer.
Seeing wasmtime as the problem makes my brain itch a bit.

Wasn't there some big kerfuffle that the owner of wasmtime won't maintain it but won't hand it over?
Did you know netflix has virtual youtuber promoting their anime channel?

:D

https://youtu.be/pTF_b_9q5o8

I am hyped about increasing use of virtual mascots by corporations.
Fail2ban is also theater on properly configured SSH servers and has been since it was written.
The version of recap that has verb stress means to cap again. The shortened version of recapitulate ordinarily takes the stress on the first syllable. As for absent as a verb, it's rarely used in the present tense, though absented isn't all that uncommon ("I absented myself.").
You need to experience challenges and overcome difficulties to build a strong character. The same way the immune system needs to be exposed to bacteria and dirt to become strong. When you aren’t, the result is a weak fragile personality that can’t cope with the slightest unexpected derivation from how they expect things to be.
1979 Volkswagen Elektrotransporter EV Bus Being Restored by VW America
This is a great example of why if you’re learning a language, once you pass the beginner stage you should be spending the majority of your time reading and listening, some time speaking and writing, and almost no time trying to learn grammar and other things. Even if you could somehow learn all the little rules like this, your brain won’t integrate them in a way you can use naturally. Unfortunately a lot of formal language courses and schools still focus on learning grammar, word usage etc in a top down way.
Are there any modern glassblowers who will touch uranium glass? The few I talked to thought I was insane for thinking they'd consider it. (In my defense, cadmium is very toxic but glassblowers don't seem to mind blowing cadmium glass.)
A random sound with a typo. Lol.
It is not just your opinion. Read the book “antifragile”.
Because no business or country wants to upset China (e.g. NBA, Apple, Nike, Disney media conglomerate, etc).
India doesn’t have such influence.
Previously https://news.ycombinator.com/item?id=27190249
"The reason why many very hard jobs pay so low is because there’s lots of people who will do them."

There's a hell of a lot more to it than that. From hiring bias, to school bias, to class bias, to name bias, to area bias - from sheer propaganda to straight up coercion. From lobbying, to perverse subsidies, to externalization of costs, etc, etc, ad nauseaum.

"Understanding how wages work at the macro level gave me some mental peace."

Are you quite sure that said mental peace isn't blissful ignorance... Because ignorance is only blisfful to the ignorant. America's wages at the macro level are deeply, catastrophically, even systematically unjust, in horrifically short-sighted ways.
> Often the first trick is having children. It turns out to be a good way to spend a lot of money.

After hearing this for years, I assumed we’d be hemorrhaging cash once we had kids. As it turns out, kids have been surprisingly much cheaper than I thought.

It’s very possible to spend exorbitant amounts of money on children, but it’s not a necessity. Obviously, plenty of families are raising kids at the median US income which is vastly lower than what we can make in tech careers.

The internet narrative that kids will destroy your finances has been greatly exaggerated for those of us in tech careers. I suggest everyone considering children take some time to talk to actual prenatal around them rather than assuming the worst from internet anecdotes.
This is a well-known phenomenon around subjective well-being. It plays out in very interesting ways, for example, most millionaires don’t view themselves as wealthy.

People untrained in escaping these dark thought patterns usually aren’t as happy as they could be.
this.

django debug toolbar (or similar) should be the first thing you go to because these tools understand the django ORM well.

the other thing that comes to mind is enabling query timing in your django shell. i believe you might need an extension for this.

then you can look at the postgres itself. but i would keep it at the django layer at first because it might reveal something about the ORM.
Oh hey, Mike Hearn! I've long been a fan of yours in Bitcoin. It's good to see you're interested in 'bad science' lately as well -- this is a topic I've also been working on for the last N years along with Bitcoin. I hope we get to interact more in the future. :)

My envisioned solution is similar to yours, here. But rather than "privatize science", which I think most people will interpret as "move to industrial research", my rallying cry is a little more like "hey scientists, stop depending on public funding, let's find creative ways to get the science done."

I also like to point out that money is often not the missing factor as much as community. This has always been true. Mendel discovered genetics by experimenting on beanstalks in his garden at his monastery. It cost him very little to do it, and he only stopped the research when his community told him to stop wasting time on beans and get back to the important accounting work that impacted the church's politics at the time.

You might think that maybe science was cheap in the past, but that today you need lots of money, to get the lab equipment, etc. However, science always has a cutting edge of cheaply evaluable questions. We recently hosted a DIY Synthetic Biologist (currently on the homepage of https://invisible.college) who showed the actual costs of his work, and his laboratory equipment was far, far, cheaper than the "cost" of his time. We can get far more science done with "amateur scientists" (remember that "ama" means love, and an amateur scientist is one doing science for love) by creating a scientific community outside the institutions for interested parties to work together, pool their brainpower and resources, and come up with great novel work.

And if anyone else agrees with me on this, please let me know so we can forces. I'm toomim@gmail.com, and am doing work on invisible.college.
Law enforcement has not demonstrated a willingness to spend its resources on these concerns, and frequently will disregard threats of bodily harm and murder. Expecting them to respond to requests from a web forum, my go-to litmus test for solution viability, is laughable in the United States and I suspect most of the rest of the world as well.

The entity delivering service to the abusive customer is profiting from that delivery. Terminating service to that customer hurts their bottom line. They have strong incentives to not only refuse all requests for help, but to resist even the most serious of requests, in order to protect their bottom line.

I’m sorry to rain on your parade - it’s nothing personal! I wish I could be more supportive! - but there is overwhelming evidence that every entity that is positioned to help will do whatever it takes to avoid helping.

If this remains unsolved, we’re going to end up losing anonymity on the Internet. Several online food delivery systems in the US already permanently block Cloudflare’s 1.1.1.1 VPN product by IP, using Cloudflare’s own CDN protection tools! Because it turns out that effective anonymity for all comers protects abusers from accountability.

That’s why this is a billion-dollar problem.
If it ain’t happening in 5 years, it likely won’t ( not counting medicine or law of course). Something artistic like music or stand-up, 5 earnest years should yield at least a hint that you are not wasting your time. It’s also helpful to get brutally honest feedback, whether or not we want to hear it.
A table is an extension of a grid and therefore actually in the same ballpark as the proper tool for layout whereas using <blockquote> to create margins is totally random (though perhaps someone could stretch an explanation).

It's of course pedantic to discuss all this now as those days are thankfully long gone :D
Strength is the ability to deal with difficulties and different opinions. Weekness is being threatened by anybody thinking even slightly differently.
> Very interesting thanks for the update - how great is the Internet to hear directly from the developer!

I see the names of a few people that also work on Postgres on this thread. We're not all that hard to get a hold of if you're a user that has some kind of feedback or question, for what it's worth. The culture is very open in that sense.

> Do you know if anyone is turning their attention to this or is it not currently being tackled by anyone?

This is one of the goals of the zheap project. I myself have some very tentative ideas for tackling it within the standard table access method, heapam. I have not specifically committed to working on it on any timeframe. I haven't completely convinced myself that the approach I'm thinking of is truly robust and practicable. It's pretty complicated, especially because I cannot really know what will break and need to be fixed until I spend significant effort on the implementation.
A lot of people want to have done big things. Few want to do the pain in the butt work required to achieve them. More important, talent is a thing and one must have loads of it to reach those extra dreamy goals.
Switching to a threaded model would be a lot of work, but there is a simpler solution that retains most of the benefits: using a process-per-connection model for active connections only, and allowing a single process to have multiple idle connections.

I follow the mailing list because I'm interested in this exact issue. Konstantin Knizhnik sent a patch implementing a built-in connection pooler in early 2019 that uses a similar approach to what I just described. The work on that has continued to this day, and I'm hopeful that it will eventually be merged.
Business leadership culture.
I'm not aware of a single project, ever, that has gotten their data model right up front and not had to iterate on it countless times as it grew/evolved. Except maybe NASA. Even the best early data models fail after years of updates and evolution.
Very cool idea, but my first thought is a worry that this will turn into Trojans-as-a-service. The last thing I want, as a developer, is to hand over binary build to an untrusted third party that's injecting unauditable code into my app. You need to provide transparency to hit the market you're after.
The term is "Suppressive Person" https://en.wikipedia.org/wiki/Suppressive_Person
See recent Codecov compromise for how this can go wrong.
Yes. Being a frustrated musician gave me a great appreciation for just how special the greats really are.
> Local buyers bid against one another as well as against investors who now comprise about a fifth of annual home sales nationally.

Have any places tried implementing residency laws requiring the owners of a home to actually spend some minimum out of time there? I imagine that the existing homeowners would oppose such a law, since it would reduce the pool of potential buyers, and thus the values of their own homes. And I imagine there's other collateral damage that would result from that kind of half-baked rule. But there is something gross to me, maybe illogically so, about wealthy investors crowding out young families who would actually ... use the house.
10:1 some manager or product/salesperson told the engineer to rush it.
asceticism. I think we can all agree aestheticism is the highest moral accomplishment of all.
iOS: booting iOS is pretty much moot since this is in fact for devices that remain on most of the time for weeks until the next upgrade.
Ah I see, thank you for that.
Yes shift shift searches everything in JetBrains IDEs. If you just want actions it’s ctrl shift A.
Roaming around has been highly discouraged in any case. Social distracting, limited table booking at restaurants, limited admissions to public places, group sizes at five, limits of how many can attend the office in person - all these were restrictions in place until a few months ago. The restrictions were replaced slightly a few weeks ago. With a recent upsurge, restrictions have been reintroduced.

There aren’t that many places for dorm workers to roam. The most popular place is Little India, where they can procure goods that they are familiar with. I do see dorm workers regularly buying provisions at the same neighbourhood stores that I go to.
That’s interesting, I remember taking a negotiations course at MIT, and the professor noted that when she was teaching Mormons, they had ridiculously high social and human capital compared to most of their urban peers, especially because of the travel to other countries in many cases.
Have you read The Eyre Affair? A quirky, humorous, combination of Jane Eyre with a scifi world obsessed with literature. Lots of fun.
How do you deal with PCs that have disabled USB drives ?
You were lucky. In my day, we were still being taught that the grammar of Latin somehow applied to English. There is a species of English usage that can make a certain sense as English, but which more or less follows rules that can be applied when learning Latin or Greek. That set of rules was taught in schools for a couple of centuries because the aim was to teach the student Latin at least, and perhaps Greek. Somewhere along the way, people who had been taught that system began to believe that this Latinised English represented proper English grammar. It's only recently that the educational consensus has become, "well, that's a load of old bollocks." The first comprehensive descriptive grammar of the actual English language wasn't published until 2002 (The Cambridge Grammar of the English Language).
It's cool to see this written in shell in a "that's clever" kind of way, but it's still not a good idea. Shell is good at gluing together calls to standard tools, and for interactive use, but anything this complex is a much better fit for something like python.

axiolite points out some apparent escaping bugs (https://news.ycombinator.com/item?id=27250215), which would be much easier to catch/fix in a language that was less of a Turing tarpit.
I gotta be honest, I don’t really feel like I have a purpose. I just kinda exist and try to be happy by surrounding myself with activities and people I enjoy spending time with. Im not saying its all roses all the time, I get depressed (badly so sometimes) but I get through it and return to a happy stable existence.

I have a brother, I think we both disappoint our parents a great deal because we are both kidless (by choice in my case, I do not speak for my brother). They would love grand kids and I think they would be wonderful grandparents.

I dont have a partner but I would love to find someone with the same easy-living philosophy. I like working on interesting things, I like playing golf, and I like traveling. Its honestly hard to find someone like that and that causes me the most sadness sometimes... so maybe my life goal is to find my other?

My biggest fear in life is not having enough health or money to maintain my baseline standard of living (admittedly I am more frugal than this post hints at). I actually do not give a damn if I die tomorrow but I would be immensely unhappy with a life altering injury or loss of wealth.

I dunno if I would say I grew up on Boardwalk, but whats the green ones just before Boardwalk? That always felt more fitting.
Non-native speakers navigate the world of 'good' and 'bad' English
The biggest issue is that stories posted by people with high karma hit the front page even if they're off topic/dupes/garbage, while good new submissions often fail to get much promotion.
It's literally exactly what you said...?
That’s a dream of mine (astronomy and SWE) but alas earning money is a higher priority right now and unclear when that will change
I am stuck at the same place. Not sure what is wrong!
> There is actual research in the domain of language complexity! (Which, to be fair, is still a somewhat more niche topic in linguistics)

I know little about this as well, but there’s been some research done by…… John McWhorter, I think? A quick search through my Big List of Things to Read (3000 articles and counting!) gives https://elementy.ru/downloads/elt/mcwhorter_creole_grammars.... and https://benjamins.com/catalog/slcs.71, which you may want to have a look at if you’re interested. David Gil is also well-known for his insistence that Riau Indonesian is simpler than most other non-creole languages.

> https://journals.plos.org/plosone/article?id=10.1371/journal...

Ah yes, this one. I remember carefully reading it a while ago, and I ended up very sceptical about its conclusions. For one thing, I don’t agree with rankings such as ‘Isolating > Concatenating’ and ‘Agent > Agent & Patient’ (though these do admittedly seem to be common assumptions). The ranking as a whole is a bit weird also — I’d love to know how they concluded that Tiwi is less complex than Dyirbal, for example. But I’m more suspicious of the linear fits, which appear extremely bad — I’m not convinced you can conclude anything from a fit of R²=8.9% (for Afro-Asiatic) or R²=14.1% (for Sino–Tibetan). In fact, only one of the graphs has R²>90% at all. And I note that they very carefully avoid giving p-values — except for the overall ‘complexity against population’ graph, a very significant correlation which however disappears when languages are split into groups by family (Simpson’s Paradox again?).

(Though keep in mind that I’m not great at statistics and any of the above could be incorrect.)

Also, they rely entirely on WALS, which isn’t a great source of linguistic data. It’s good for other things, but I very regularly find that a good proportion of its data is incorrect. It’s fine if you want to, say, see roughly what proportion of languages use active–stative alignment, but not for much else. (Though I suppose you could argue that the CLT applies and the errors will cancel out. But as I said, I’m bad at statistics and wouldn’t know how correct this is.)

(Personally, I’m sceptical that there’s a link between complexity and population. Witness Swahili, the lingua franca of a good chunk of East Africa. Or Quechua, the language of the Inca Empire. The main reason most widely-spoken languages are ‘simpler’ is that they disproportionally come from IE, ST and Austronesian, which aren’t the most morphologically complex families anyway.)
Oof a Chinese land grab after a mortgage crash. That's a bad future. I really hope that doesn't happen.
And milky ways are assets too (inventory I suppose). Doesn't mean you won't go broke putting all your money into milky ways.