skysight-inc/HackerNews huggingface dataset:
From the American perspective, they still have too much to spend on corrupting politics and justice hiding behind "spending money is free speech." There needs to be a 90% tax bracket and we should subject capital gains to normal tax brackets if percentage of gross income is, say, 50% or higher. This makes more sense to me versus total wealth tax. Also reinstate a meaningful inheritance tax (aristocracy-prevention tax)
The point was that you didn't have the ability to spawn new threads at all. async lets you pretend you have threads, at the cost of everything being run through a hidden event loop.
They seem to have migrated across to Cloudfront - working now.
Loss of trust in a service provider and the afterwards loss of business is quite an incentive. Having someone drawn and quartered just provides an incentive to scapegoat.
Down
https://yarracity.vic.gov.au
Bitcoin price might take a hit or two.
What makes sense in the world is what puts bacon on the table and not what actually make sense.
These issues are in your control - not for the centralised service but your use of them. You can build appropriate redundancy for the components/providers in your stack and the budget you have.
Seems to be back online
That wiki references the Varnish version.

I think it's an intentional alteration of the original, given the context.
> I disagree. People implemented those systems, so if you are correct that it is the systems fault, then it is also a persons fault.

How do you make sure that mistakes don't happen, then? Do you blame and fire people who make mistakes, and hope that the next person put in the same spot doesn't make a mistake? Or do you figure out what caused that person to make the mistake and ensure there are processes in place so that next time this is less likely to happen?

Extrinsic motivators like 'we will give you a bonus' or 'we will fire you' are surprisingly bad at getting people to not fuck things up.
True. But the vast majority of use goes via "WWW".

For example email - the other big "internet-user" is technically not part of the WWW, but most (? I don't have any stats, just a guess) of our mailclients run on the WWW, nonetheless.
Lightroom Classic 10.3 runs natively on Apple Silicon
The article is fairly thorough on this point. Among the available strategies is taking out loans against your shares, as ProPublica asserts Ellison and Musk have done.

I'm surprised at the extent to which some people appear to have mortgaged their shares. Musk, in particular. The article suggests that he has placed ~$57B of his shares out of a (net worth of ~$151B) as collateral. If TSLA begins to fall, he may face one heck of a margin-call.

You'll still have to pay at some point (basis step-up aside), but the bill can be deferred or, in the case of a decrease in share value, perhaps avoided to some extent.
ZFS is a much better option.

btrfs still ate my data as recently as 2-3 years ago. The main thing it has going for it is that it's in the kernel tree. If you don't care about that, ZFS is the right choice today. And if you do care, my money would on bcachefs turning out to be a better in-the-tree contender to ZFS.
You're looking at this in isolation instead of in the context of a diagnostic process. Thinking of medical ML models in terms of benchmarks does not make much sense, you're interested in whether they actually change the process.

So yeah, maybe you get a model with 5% false negatives where humans have 10% false negatives. That's good. However, when you go to apply that model in reality, what happens to those 5% where model and doctor disagrees? First, we should think about the kind of disagreement. In most of those cases I'd bet that the doctors see something wrong but can't say what, not that the model says "this is bad" and the doctor "it's not".

Second, we need to think about what happens when doctor and model disagree. As the model is not 100% accurate, the doctor doesn't know if the model is mistaken or if they're the ones mistaken, so they'll probably order more tests anyways. If it can be something serious, it's worth it to do an extra test to make sure. They'd probably ordered those tests anyways if they weren't sure of what was happening, model or not.

So what did the model for a single test change? Did it really change the diagnostic outcomes? What's the actual benefit of the model? How much it's worth to get from 10% to 5% false negatives with a model for a single test if just adding more tests (say, with the same 10% false negatives) to the mix can give you a 1%, 0.1% false negative rate?

That's my point. Unless accuracy is really high, ML models are not going to remove uncertainty in diagnostics, few diagnostics consist of just a single test. Benchmarking models against human performance in a single test is not a metric that can drive implementation in the real world.
Wonder what other chat apps like Encrochat and this one does exist. Might be fun to take a closer look.
For one dose. For full vaccination, the US is (slightly) ahead according to that same site.
> How long did it take to find Bin Laden?

Bin Laden used couriers in place of digital communications. And the trail that led to him began with his most trusted courier.

Allegedly, al-Kuwayti was uncovered, some of his communications were intercepted, and then he was followed up to Bin Laden's refuge.

> Who would download some random chat app that nobody uses?

The only thing that slowed the capture was using a courier network. Are you a criminal? Do not use a phone.

Seriously, criminals should know better, whether they are petty drug dealers or major terrorists.

Misplaced faith in cryptography is the gift that keeps on giving.

... https://en.wikipedia.org/wiki/Crypto_AG
Many sites do this; Amazon's failed over to their own servers for images for me, it appears. It typically just takes some human intervention, I suspect.
This seems like it's intentional given the context.
Just use recordflux for binary parser proved absent of runtime errors... ;-)
That's the fallback, but the original stack is not designed with the volume of traffic in mind. So it gets overwhelmed very quickly and makes the website practically unavailable.
Believe it or not, but there are developers out there that read the docs.
Extremely long call, but what are the chances this turns out connected to the raids on organised crime using the An0m app that started today?
Heyoo Internet are you there?
A real-world Chaos experiment!
Sure it lives a single file, but considering the length, wouldn't it actually be better to split it into multiple files? I'm not that familiar with C, it seems to be a "thing" in C to just have giant files.
The BBC.com site was down for about 10-15 minutes.
The number of serious CDN outages in the world are incredibly rare.

In fact, you can probably remember most of them if you were given dates.

Plus, going around the CDN can be very complex (depending on the type of content), very expensive (all of a sudden you have a massive data out network traffic that didn't exist previously), and not guaranteed to work (DNS updates can take longer to get to everyone than the actual CDN outage lasts).

There are places where it is worth it and useful, but for a lot of the sites listed it's not useful.
I'm working on a side project that does exactly that: translate everything except some words.

When I will have something ready I will add a comment in this thread
> Or outages are so rare that it’s not worth the trouble?

This, I can't remember the last Fastly outage in this dimension, so the time spent on setting up a secondary server serving your assets is probably not really worth it for small-medium companies. Although i'd think otherwise for a company like Shopify.
Reddit, Stack Overflow, Spotify, all back for me. Good job Fastly engineers!
It is time to remove that "100% uptime guarantee" claim from the website :grimacing:
Gov.UK is back up too. They have a mandate from government to be able to provide emergency communications so I expect they did have a backup and have managed to switch over, but just took 30 mins to do so.

Gov.UK is supposed to be a bit like BBC 1 or Radio 1 – in a national emergency they can be taken over to disseminate critical information, like if there was a nuclear attack launched on the UK.
> . It is a bit scary that we are putting so many eggs in one basket.

We said the same when AWS was down. Same when fastly CDN is down. It turns out we are not putting eggs in one basket but we are putting all our (an organization's offerings) in one basket (cloud provider). That seems to be the core issue IMO.
this is devolving quickly into an r/something
I’d love to see a breakdown of what single point of failure causes these worldwide network outages. They even brag about redundancy in their marketing materials. I hope we see a post mortem on this
Thrilled to see the iPhone 6s will be supported at least one more year [1] and older versions of iOS will receive security updates [2].

[1] https://www.macrumors.com/2021/06/07/ios-15-iphone-ipad-compatibility/
[2] https://www.macrumors.com/2021/06/07/apple-wont-make-you-upgrade-to-ios-15/
Can be stopped? Doesn't sound like this is what happened here, the company paying the ransom is what stopped the hostage. The FBI simply recovered the ransom (and some more), but probably can't cover for the economic damage from the hold-up.
Atleast I cited data (there is no reason to sling insults towards the data either). If I'm so wrong, it should be easy to disprove with less biased data from a "professional non-hipster website".

It is not my task in life to disprove my own opinions formed from available data either. If you want to change minds, don't ask others to "do the research yourself", that's just rude.
I can talk much faster than I can type, but I have much higher standards for precision and language quality when writing. When I write in natural language, I almost always carefully read through my message once or twice before sending. I don’t think doubling my typing speed (currently around 80 wpm, I guess) would save much time.
No need to imagine! Just search HN for "cloudflare outage" and you'll see that it happened several times over the last few years
See my comment below for the same discussion: https://news.ycombinator.com/item?id=27433368

My point isn't that you need 100% accuracy. It's that a diagnosis is a process, not a single test. If your model applies to a single step of the process, and if it doesn't remove enough uncertainty about that step, you're still going to continue the diagnostic process and the model is not going to change anything really.
Yes it is. It's not just stuff like Visual Studio or Adobe Illustrator lacking touch optimized programs that aren't available on iPad, it's lacking key basics like Kindle, Comixology, Disney+, etc. They either expect you to use the website or the desktop app which isn't as good an experience as an iPad or Android tablet when only using your fingers.
They are not "preventing" anyone from doing anything, they are simply, until now, refraining from improving their competitors devices by releasing their software for it.

Of course they prefer people to buy iPhones for their kids, there is nothing wrong with that, and there is absolutely nothing wrong with not actively working to make the experience of mixed Android-iPhone families slightly better.

There are literally dozens of cross platform messaging and video calling apps. Banning these would have been wrong, and possibly illegal, but they are not doing that.
I was surprised to learn Amazon don't use their own CDN
Lack of syntax highlighting is the reasoning in SQL, I think.
No mention of outage on https://status.cloud.google.com/, and I wonder why, because apparently this is a GCP problem.
We've got Cloudflare sitting in front of our Firebase/GCP instance (which I've just found out is Fastly-cached :/). Getting 503s at the origin but we're up on our URL with an always online notice thanks to CF. Double dip isn't all that bad.
It's because they weren't good enough for the thousands of concurrent requests of C10k or the millions that came after it with C10m.

Granted, 10k concurrent requests is a problem for the 1% of websites, so processes were (and still are) good enough for the long tail of personal or small-scale websites.
Sure you can; people game land/house value assessments all the time.

I live in an area with high property taxes, and there's an entire little industry of firms who will fight your assessment battles.
800 Arrested in Biggest Ever Operation Against Encrypted Communication
Is this a call for competition? I regard Cloudflare as state-of-the-art in terms of security and ease-of-use. I certainly hope their knowledge replicates across other organizations. As of now they're still building highly impactful tools that are easy to use and that noone else quite provides. I don't really expect another organization to match them given the strength of their current leadership. I think they've built in a head start for awhile.
I don’t think that’s the case at all - that would be a memory leak and considered a bug.

The JVM does have a “do nothing GC” for short lived apps, where not collecting is ok.
You might be right. Here is another update from fastly:

The issue has been identified and a fix has been applied. Customers may experience increased origin load as global services return.

Let's see
Looks like Fastly did not work as advertised, very misleading.
5G Enterprise Network: Taiwan Eyes the Global Market
One thing I've noticed is that package signing has a bit of an issue. It lacks metadata about the package.

I'll use archlinux as an example but the same applies to PPA's in Ubuntu:

Say you add a public key of a third party because you want to install a certain package or add a certain repo. The keyring then trusts that key. But it doesn't trust the key for a specific package. It just generally trusts the key.

From a security aspect your system is not compromised, because the security of your base packages now depends on whether random key for third party is compromised. I.e. you can now install backdoored software because that package you wanted to add is compromised.

It's not really limited to linux repos though, imagine you install a driver on windows and it asks you to trust the signing key. That signing key can now be use to put random malicious software on your windows system.

Is there any reason why this metadata couldn't be added to something like pgp other than it requiring a lot of changes in the tooling?
They used to use AWS CloudFront and switched to Fastly, someone shared this in another comment:

[https://www.streamingmediablog.com/2020/05/fastly-amazon-hom...: CDN Fastly Wins Content Delivery Business For Amazon.com and IMDB Websites)

Quoting:

> "But with small object delivery, like images loading fast on Amazon’s home page, it’s the opposite. Customers will pay for a better level of performance and in this case, Fastly clearly outperformed Amazon’s own CDN CloudFront. This isn’t too surprising since CloudFront’s strength isn’t web performance, or even live streaming, but rather on-demand delivery of video and downloads."
While I respect the publication of this idea in a research journal, I'm fairly disgruntled by how Avi Loeb is now spending so much of his efforts promoting his book on the matter (i.e. profiting). The vast majority of astrophysicists reject the light sail theory as an explanation for the anomalous acceleration that 'Oumuamua experienced, now that we have better physical models.
That's a sure fire way to get a CYA culture, and it's a reason why the most successful tech firms don't do it.
One big mistake Toronto, Canada, did was getting rid of its trolley buses in the 1990s https://transittoronto.ca/trolleybus/9503.shtml
Thank you for taking time to answer this in depth, and for sharing what you learned from it, besides the other details. I really appreciate it.
Researchers Propose Graphene Overcoats for HAMR HDD Platters
that looks neat, does it store the files locally?
interesting thought ... a new type of 'to big to fail' ?
Can you name a few such countries. I live in the EU, but when you have a business in my country you are always breaking some rules no matter what, and a lot is up to the discretion of the tax people.
> It's everything we've already known.

> A more interesting question is how did ProPublica get a copy of Jeff Bezos' tax returns. Seems like a leak at the IRS?

Yes the actual tax records are what make the story interesting, even if the data only confirms what “everyone knows” — at least there’s actual data and empirical analysis of the scope.

According to this accompanying explainer, the leak is anonymous:

https://www.propublica.org/article/why-we-are-publishing-the...

> A second question certain to arise is the motives and identity of the source who has provided this data to ProPublica. We live in an age in which people with access to information can copy it with the click of a mouse and transmit it in a variety of ways to news organizations. Many years ago, ProPublica and other news organizations set up secure systems that allow whistleblowers to transmit information to us without revealing their identity.

> We do not know the identity of our source. We did not solicit the information they sent us. The source says they were motivated by our previous coverage of issues surrounding the IRS and tax enforcement, but we do not know for certain that is true. We have considered the possibility that information we have received could have come from a state actor hostile to American interests. In particular, a number of government agencies were compromised last year by what the U.S. has said were Russian hackers who exploited vulnerabilities in software sold by SolarWinds, a Texas-based information technology company. We do note, however, that the Treasury Department’s inspector general for tax administration wrote in December that, “At this time, there is no evidence that any taxpayer information was exposed” in the SolarWinds hack.
Call me naive but when you are accused by the state of wrongdoing I think that you should be able to say whatever you want in your own defense. Its fine for the judge to instruct the jury on the law, but it doesn't seem fine to me for the judge to prevent you from presenting whatever defense you see fit.
it's centralization because they all use the same provider. Why do you care about incentives here? The result is the same, just like capitalism and free market tend to monopolies in the long run.
...and naturally someone has already updated the page today to include (and highlight) its use and mispelling on Varnish.
I think we can agree it's certainly not "far behind"
Naive-UI – A Kinda Interesting Vue 3 Component Library
Seems like another single point of failure. What is a solution to not be affected by such an outage?
If you click on toxic content, algorithm is going to feed it to you. Twitter is perfectly fine if you unfollow and block toxic influencers. There is propably even keyword based filtering.

For news you can watch international news stations from India. Very realistic and refreshing.
Time to develop CDN for CDNs.

It seems like a pattern that CDN have overly centralized the web and lead to issues like this.

Maybe its time to build a CDN that distributes your static assets to multiple CDNs and has a set of fallback states for service outtages.
> However removing the device suffix (the colon) is really what causes this to be a bug.

I never thought about it, but when you consider ‘:’ as the device suffix, this makes directory structures make more sense to me on Windows.

C:\foo\bar makes more sense to me if it is the ‘C:’ device. Calling it a ‘C drive’ with a separate namespace never made sense to me. Somehow thinking of it the ‘C:’ device in an anonymous global hierarchy makes more sense to me.
That edit was added after today's fastly outage began.
AWS Charges You Should Monitor Closely
I personally believe Raspberry Pi made the wrong decision in using non-free hardware which required non-free firmware to operate key features such as video encoding/decoding.

Why would we encourage Firefox or others to do the same and develop a business model based on patents? Especially so when these patents are owned by huge conglomerates of corporate psychopaths (hello MPEG-LA) and the software editor we're talking about (Mozilla) had to lay-off a lot of staff during the confinement by lack of funds.

To be fair, Firefox is more than capable to encode/decode into free codecs and there's no reason why a third party plugin couldn't support H264 encoding as well. It falls on Apple to support proper standards for their communications platform and not on Firefox to support every piece of proprietary tech they can come up with.

But well, we all know what Apple thinks of standards. With their AirPlay, iMessage, iCloud and other Apple-specific solutions. If only we had free-software, standards-compliant solutions to all these computing problems. /s
To be fair, this is how the web has changed too. High-value content has been duplicated and hidden behind pay walls when in the early days (ie my early days on the internet/web) everyone seemed to come with their own content and share freely.
>The issue has been identified and a fix has been applied. Customers may experience increased origin load as global services return.

Is fixed
Interesting thought. I had not thought about this before. If there is a cyclic dependency (not saying there is at the moment) how would things play out? Do you just ssh into your own servers to deploy the fix?
That explains the spotty container build failures over the last half hour. Good thing I decided to procrastinate instead of debugging the issue!
>As alleged in the supporting affidavit, by reviewing the Bitcoin public ledger, law enforcement was able to track multiple transfers of bitcoin and identify that approximately 63.7 bitcoins, representing the proceeds of the victim’s ransom payment, had been transferred to a specific address

does it mean that "tainted" BTC can be seized any time, even if the current holder may have no relation to the original crime?
I'm sympathetic to your point on step up basis, even though I don't have an issue with the current US exemption on estate tax.
The Fed doesn't print money, and the fact that so many people on HN repeat that falsehood is just sad. The Fed expands the money supply through the banking system, and they also decrease the money supply the same way. It is entirely different from printing money.
WinXP 64 bit version is actually WinServer 2003 64 bit...

But you can use over 4G limit on x32:
http://vm1.duckdns.org/Public/Windows_XP_SP3_Remove_PAE_Limi...
or other versions too:
https://wj32.org/wp/
I don't think Nginx was out then, so I was using Apache HTTPD. Maybe Dwayne considered that too heavy for what he needed to serve up.
Random people making "I build a clone of X in a weekend" posts is not that rare?
> Monitoring
The issue has been identified and a fix has been applied. Customers may experience increased origin load as global services return.
Posted 4 minutes ago. Jun 08, 2021 - 10:57 UTC

Looks to be working again my end.
Yes, so it's precisely another case of "we tested on chrome and it works", which falls under "don't care" software development best practices.
The issue is open so it can only mean that it needs to be fixed.
Why food inflation has skyrocketed out of control
I was thinking more like ultrasound. If some crude scanner was cheap enough for every GP's office to have, and an AI could decipher the noisy signal which is perhaps too messy for a human to read, it could be used routinely like blood pressure measurement and stethoscopes are.

If it's a regular screening test rather than a response to the patient's complaint, then false negatives wouldn't be as much of a problem because at least it's better than nothing.
Pentoxyfylline
I got a push notification from the CNN app telling me a bunch of the internet was down due to a cloud provider. I clicked the link only for the app to open to a 503. In hindsight not surprising, but quite amusing.