skysight-inc/HackerNews huggingface dataset:
I agree that webhooks have their problems, but, as somebody maintaining software that uses long-polling heavily, I will say that long-polling is quite difficult to handle reliably "over the internet".

ISPs have very different views on how long a connection is allowed to be kept open, and will absolutely kill long-polling connections without remorse. This extends beyond ISPs, too. Practically all network infrastructure between API consumer and API will have to accommodate long TCP connections, which is unfortunately not as trivial as it sounds.

The next cool feature of long-polling is that the server might not know that the connection is broken until it actually tries writing to it, so if the back-end relies on having or not having a connection, this will make for some interesting edge-cases.

Load-testing products using long-polling also has interesting implications, such as hitting the "65k" problem on test clients and network infrastructure.

Add another layer on top (or below, like Kubernetes, OpenShift, whatever) and you should be getting a prescription for anti-depressants from the very beginning, because you WILL need them.
Back when this happened and the article was written, (really - 12 years ago now!) they didn't have the full story, but it was pretty much the first of this sort of thing that Amazon had to handle. They did review, admitted they'd handled it badly and stated they'd not repeat it, as I recall...
Actually hacking systems is easier than (some) individuals. It's pretty obvious if you think about it. ICS are operated by group of people, they have well defined accessibility and availability requirements, some sort of documentation exists, internal processes have large inertia.

On the other hand individual security professionals might have wildly different ideas about risk tolerance and convenience, which they also have privilege to change on the whim.
Hardly world-changing, in the grand scheme of things (and I say that as a Swede).
Apple does have pretty great security story. On ios, it’s like state of the art, and it’s ok on macos as well. And no, walled garden is not the security of apple, but proper sandboxing is.

So even without extensive app review (which is frankly, not extensive at all) a rouge application should not be able to do much damage.
it could be done with codec2, but duty cycle of 1% would limit it to push to talk brief sentences every minute or so, it might be better to stick to text. Perhaps handy when someone had a mountain accident and can only push and talk. Use a speech to text decoder and limit expressions to 140 characters, should be enough for every piece of conversation including this comment (with vowels stripped out).
o wait, that's to little - make it 300 characters.
What apt timing. I'm trying to do the same thing with Ruby; anyone knows a good Ruby gem dealing with Excel?
Detecting Data Bugs
1. Same site:

> The inactivated polio vaccines are very safe

2. Do you have to worry about polio now?, no, why?

3. We have processes in place to verify vaccines, that's why you got news about janssen or whatever throwing away millions of doses due to contamination.
If you look at all sorts of limitations on the M1 macs (less ports, only one external screen except on Mini where its one DP and one HDMI) it's plain that it's paying the price for using a phone SoC in a general purpose computer - no generic expansion buses, connectors optimised for phone use case, etc.

And they are banking hard on unified memory model in all sorts of marketing zbut it's unclear if it's the cause or effect of ring unable to use external GPU.
Ah, but we do. Tax carbon emissions (cf EU) at a proper level and you'll solve the core incentive issue.

Follow (policy) research on how to implement this and it should be fine. The biggest hurdle is will, especially to take the first step.
The NSA is an agency with a yearly budget of approximately 10 billion dollars. There are not many companies that can match that.
Since when is a quarter “most of”

You’re disagreeing with yourself
Oh boy ... You must not know anyone in India...

I know people that have lost family members there. They were struggling to get them spots in hospitals, everything is mess of corruption, under reporting, overflowed hospitals.

They're not even testing properly... See the airplane full of corona positive people with negative 'PCR' tests.
Back to money flows I think - if your business has significant venture backing then your view about it is correct. The driving force in the business will be to satisfy the investors, not the early customers. Many businesses are not like this though - they start out as a consultancy gig gone good and then scale up from there. Investment comes from a workable functioning business in these cases. A new investor isn't going to be hugely interested in "vision" but much more in "the business" - what is the potential for selling more of the same?
The Guide to Browser-Side Storage
My current job didn't come via HN, but around the time I took it I got several contacts for several very promising opportunites otherwise.

In terms of ratio between effort expended to leads generated, those hiring threads are A+.
WandaVision was a pale imitation of Legion.

https://en.wikipedia.org/wiki/Legion_(TV_series)

Both very much the same template.
No. Trig functions can be defined independently of geometry. One way is by considering the differential equation above. Another is through the Taylor expansion of the sin(x), which is periodic as a completely emergent property.

Likewise, it's hard to imagine what would happen to that very famous equation e^iπ + 1 = 0 if π were something different.
My Nissan has a center console that cedes ALL controls to the rear camera app when the car is put in reverse.
So if you have music playing you can twist the physical volume knob all you like while in reverse and nothing will happen!

If you parallel park daily you'll probably experience this every time:
You jump in the car, start it and put it in reverse.
The music will start playing after a couple of seconds at the level that you had during your noisy commute.
You now have the choice to put your car in neutral, change the volume and then go back to reverse and exit your parking spot OR try to navigate out of your parking spot with music blasting.
And you can get a 10gbit/s uplink for ~€45/mo. Traffic is not unlimited anymore then but with €1/TB still cheap.
Never heard of it before and will give a shot. Thank you.

Pricing seems to be similar to DigitalOcean, however there seems to be more resources allocated.
Aivitex is hiring lead developer
No they do not replicate like classic mirrored queues do. They are much more similar to quorum queues in that they only
(asynchronously) replicate the delta after a disconnection. After all both streams and quorum queues use log replication. They are also both quorum systems in terms of availability.

W.r.t quorum queue features set we are working on Message TTLs. Priorities we'll have to see. We want to provide something there but it may not be a priority queue as provided by classic queues as this isn't the best way to do priority based messaging.
If a non-technical user runs his/her banking and some malware in the same VM, qubes os does jackshit about that.

It’s not security in itself. You have to configure each app to the tightest set of permissions it can run with and also have to trust said application no matter what. Apple does both of it via proper pre-configured sandboxes for apps, as well as revokable credentials. The latter is needed when eg there is a new serious vulnerability without a fix yet.
I remember interviewing someone who worked on a DNS platform where IIRC the DNS zone files were propagated by SMTP to DNS servers. The details on this were that there was a 5-minute SLA (I believe) on the loading of zone records, essentially that the DNS servers were polling the mailbox and parsing new records since some last loaded time stamp.
One pattern I like to use is to have a regular /events endpoint, which works for polling. The endpoint also checks the accept header though, and if it sees `text/event-stream` it'll act as an EventSource endpoint.

EventSource is also nice because you can add cursors, so if the connection drops the source naturally catches up when the connection is re-established. While the interface is browser oriented, there's no reason not to use it in other contexts.
It's not just an unlicensed version though, it's a version that someone sold without permission. This doesn't say Orwellian to me, it says Amazon living within the prevailing legal environment that they operate in.

Correct me if I'm wrong but you can still add 1984 as a document directly to your kindle without any problems.
I used to look after a bunch of Sensu clusters (a system that lets you define monitoring checks on clients and send keepalives/results/metrics to the server) and it used Redis to store state and RabbitMQ to handle messaging. The clients would put messages directly onto the server queues, and the server(s) would proceed the queues watching for missed keepalives, failures in check results etc. It was amazing until I decided to cluster it. It would work fine for weeks, even months. Then, for reasons unknown (possibly bad hardware, noisy neighbor, reboot) one of the nodes would drop out, some fool would "fix it" without understanding how it worked and we'd get a split brain and end up with two Sensu queue systems, but only one is getting keepalives. So if there is a Sensu server instance pointing at the other one, it alerts on every single client (hundreds) because "their keepalives have expired!". That throws hundreds of additional messages per minute onto the alert queue in that part of the fracture. Since we were practicing DevOps, all teams were responsible for their own production assets, so this would end up with a P1 incident and 20 people on a call (maybe at 4am) thinking that there's a major platform outage. And it's a nightmare to fix because you essentially have to ignore your alerting system (and it's swamped in bullshit messages anyway). I ended up working a script that replaced the alert handlers with a dev null, nuked RabbitMQ, recreated the cluster and waited for the clients to find it (or run another script to bounce all of them). Once everything settles, enable the alert handlers.

I switched to Sensu's experimental Redis queue config and never had that issue again. Ended up running 3x small Sensu servers in each region, each running Sensu + Redis in HA mode. Bulletproof, if properly configured.

Maybe clustering has improved, but having to use it as part of Sensu cluster put me off it.
AFAIK there is no proper standard streaming protocol which is why we went with a dedicated protocol that works really well with our approach to streams.
Security is orthogonal to good code. Especially when you run untrusted code on your computer regardless of its quality.
I do not buy the economic argument.
Academia is aiming at individual excellence whereas the industry is, at large, about employee replaceability. This may be a valid economic argument in itself, but I believe there is another appeal to technical mediocrity in the reassurance it provides to management.
> Research has repeatedly shown that facial recognition technology is fundamentally biased against women and people of color, leading to errors like this.

It’s not fundamentally biased. Many implementations have had imbalanced training sets, which is a different conclusion. But you can’t say CNNs are fundamentally biased against women and people of color. That’s just plain wrong and makes the entire argument look poor.
With regular spherical and hyperbolic geometry, yes, it is flat-ish if you look at a small enough area. On the other hand, if you have a different distance metric, the ratio of a circle's diameter to circumference can be a different constant. For example, in taxicab geometry, it is 4
Literally no one wants a logarithmic scale to interact with though. '50% volume' should definitely be in the middle of the slider. The OS should translate that in to decibels. The maths behind it has no place in the UI.
The issue is flatpaks. They want to be a sandbox as well as a package management solution at the same time, while being good at neither of them.

The nix model would be so much better for the latter.
Examining Crypto and Bypassing Authentication in Schneider Electric PLCs
I didn't assert any of that. I think you got users confused.
For me one of the nicest things is that you can have both "traditional" messaging _and_ streaming in the same system. Feeding messages published to exchanges into both queues (for processing) and streams for archiving, auditing and analysis.

Best of both worlds :)
I work in devops and would like to know more. Do you know any good resources for learning or starting out?
Oh my. I actually used something kind of like the third one (array of buttons for each volume level).

I wanted something more convenient than the Denon app for changing inputs and volume on my Denon A/V receiver, poked around a bit and found that the receiver has an HTTP API that the app uses, and decided to make a simple web page that could use that API. I could then add that to favorites in Safari and then control the receiver from the browser.

Here it is: https://imgur.com/a/ExkhOgO
According to Der Spiegel (a German newspaper):

> “In Israel, the effectiveness of the Pfizer/Biontech vaccine against coronavirus has declined significantly in recent weeks, according to the Ministry of Health.
[...]

> Since June 6, the vaccine's effectiveness in preventing infection and illness with symptoms in Israel has dropped to 64 percent, he said. However, the vaccine still wards off severe illness and hospitalization 93 percent of the time, according to the report.
[…]

> Israel is considered a model country in the fight against coronavirus because of its successful vaccination campaign.”

https://www.spiegel.de/wissenschaft/medizin/israel-impfschut...
Sorry, i forgot to mention that i also have a Netusbee (a Ethernet / USB Card for the ROM-Port of the ST), so its no big deal to write directly to USB Sticks.
Isn't it not entirely out of reason to wonder if Apple could also want to monetize their user data ?
This is what I was asking for, many thanks! By the way, my background is BSc in CS, so there surely are a good amount of things to learn.
Ah yes, deploying a technology with obvious potential false positives and operating without the assumption that it has false positives. Geniuses right there.

I remember a story where after 9/11 and during the dirty bomb panic that ensued, a network of radiation detectors was deployed around New York. Authorities identified many dirty bombers. It seems Al Qaeda had recruited cancer patients for some reason, and they all congregated around radiation therapy centers for some nefarious purpose.

Those people shouldn't be fired for infringing upon this gentleman's civil rights, they should be carted off to a secure facility for the severely mentally impaired, for the good of society. I don't want any of them to be allowed to operate heavy machinery (including vehicles and elevators), matches or knives; the risk is too great.
Why would I mention it? It’s not relevant, the issue is about inappropriate censorship and incompetent moderation. What difference does it make if they’re transgender or not? There’s no aspect of Challenor’s personal identity that makes a difference to the fact Reddit’s hiring and moderation practices are apparently utterly substandard.

I’m not interested in fanning what’s rapidly spiralling into the inevitable flamewar that this topic creates, but I will say that there’s never anything to be practically gained from making a fuss over other people’s (and particularly stranger’s) personal identities whatever they may be. I’m not saying that for the sake of a “chilling effect”, I’m saying it because in most cases personal identity genuinely isn’t relevant and only serves to distract from the issues at hand as has clearly happened here. Why would I include an irrelevant fact about Challenor’s identity that instantly derails any thread it comes up in?
Does Bay Area have that problem even theoretically? They are quite high up. It's the flat near sea level areas like Florida that are in danger.
Your username checks.
At least he was not murdered in a bathtub: https://en.wikipedia.org/wiki/Jean-Paul_Marat

If you look at what marat published, one can recognize the paper-civil-war-rage-culture, that is alive and hell on twitter.
The Genome of a Human from an Unknown Population Is Recovered from Cave Dirt
Sorry, was threw off by the wording and misreading between the lines I guess.
Projectium iOS app was found in App Store before release
I like brew, but am ever aware of the risk of supply-chain hacks, such as https://brew.sh/2018/08/05/security-incident-disclosure/.

It's one of the reasons why I like Ubuntu. Of course, there is also the possibility here that a package could be compromised, but I feel there is more scrutiny, especially as it is based on Debian.

I've become increasingly uncomfortable with running brew ruby scripts on my work machine, and try to keep usage of brew to a minimum.
Mine was the Sony Ericsson M600i and then P1i: the rocker dual-letter QWERTY was the absolutely best input method I’ve used on a phone.
We do business in the US financial sector, and the sentiment we are getting with regard to cloud vs on-prem seems to be growing into a bimodal distribution.

I would say it's nearly a 50/50 split until we have conversations about how our product actually works and the incredibly sticky problem that is PII...

Once the risks are reviewed in open and honest ways, we find that virtually all of our clients would prefer to keep our solution on-prem. Only those who have already made a full step into cloud compute have to continue to take exception for obvious practicality reasons.
I feel like this aligns with the cartoon of big tech in my head, which goes something like this:

- Apple is the designer: I want to make everything beautiful and perfect. Sometimes that pesky messiness of reality gets in the way, but if that's the case, it's reality which should change.

- Google is the engineer: Yeah cool this project sounds good, let's replace that old technology with this new thing that will be so much better! We'll release the prototype in a month, and six months from now we'll have the whole thing done. Hmmm 4 months later, some of those details that took years to refine in the old version are actually pretty tricky, and these weird users like actually want to keep them... Yeah details are hard, let's put this project on back burner because now I'm excited about new project!

- Microsoft is the MBA: Products don't matter! They're just interchangeable widgets the grunts working below me have to concern themselves with. The important thing is what I can sell to upper management with my power-point presentation. We're data-driven, so as long as my KPI's improve, that means I have made the morally correct decision. If I can leverage or trick users into using the product the way I want, it means I'm good at my job!
This is brilliant! I even love the additional information added such as 'you don't have to avoid sugar completely' (are these coloured boxes also visible on the label or is it just for illustrative purposes?).
Well, originally astrophysics involved staring at the sky for long periods and coming up with hypotheticals and maybe even theories about the movement of celestial bodies? it was very inexpensive and led to the fame of people like Galileo. Later, staring at the night sky was eclipsed a little. Folks like Gerard P. Kuiper used telescopes and made more detailed observations. The feild then rapidly became more complicated, but staring at the sky and eventually mastering the skill of designing and building your own detectors (what we in the feild refer to as "remote sensing") remains a proven method.

I wish you all the good luck in the universe :)
No. Apple could change directions. The only way to guarantee data won't be used is to not put it on anyone else's computer.
For precision work using inches, decimal thousandths of an inch ('thou') are typically used - for what I assume are similar reasons.
You are being aggressively profiled. They have taken steps to profile even when safari etc put in hurdles.
Silicon Valley before the silicon: a boy’s own story – in pictures
I remember there is a thread on this exact issue. The problem is more that there is no one nixpkgs channel, but several.
Europe not only lacks military power, but also ability to reach consensus to use its military.
But Apple also makes money by selling you access to content. By extension, they are motivated to motivate you to buy said content. Having no goodwill left for any of them, I see no reason to assume that they would not resort to other forms of manipulation. In fact, from their own past, we know they are very happy to employ shady tactics as seen in for example the Apple-Google-Intel-Adobe Collusion case, the Batterygate lawsuits, ongoing right of repair cases etc.
Nix search package-name does work actually. These are the older CLI tools and there is WIP for a newer interface.
People just are not prepared/don't understand how even very low level of false positives looks like in real world.

If a vaccine kills 1 in a million people, that's still hundreds of people in US and thousands in entire world.

But now, see, how most people just don't understand the concept of very large/small numbers and can't interpret what it means exactly.

There are tests with very high false positive ratio. For example, pregnancy test.

Now, you don't do pregnancy test all the time. If you did it 5 times a day every day, basically at least once a week you will find out that you are pregnant and the test would be useful. And then you go to a real doctor to confirm.

The way to use test like that is to use it combined with some other knowledge/process/situation. In case of pregnancy test you only do pregnancy test when a) you show other early symptoms of pregnancy and b) you had sex with possibility of getting pregnant.

Facial recognition could be useful but as any high false positive test, looses its usefulness when deployed on large scale, indiscriminately.
Best Home Appliance Repair Service to Contact in Westminster
Dishwasher Repair in New Westminster is the solution to all the repairs required for the home appliance. Sometimes there is a minor issue that can even be solved by the owner, while other times it needs professional handling. It is recommended to not try to fix it without consulting as it can create even more problems.
Misread this. "An alternative to Hebrew? That's rather bold."