skysight-inc/HackerNews huggingface dataset:
This is not an unreasonable point, but I will note that I was partly using “AWS” metonymically to refer to a whole cluster of technology decisions surrounding the current wave of “cloud” everything, and I was also partially referring to the purer “have you been part of a full-scale service deployment with real users” aspect—there's a bigger difference between “operating a service when there's hundreds of thousands of requests from real people hitting you and they really count” and “operating a service for a random who-cares project” than there is between, say, “having a precise understanding of how Ruby behaves in a business-critical backend” and “having a precise understanding of how Ruby behaves on your laptop”. Lacking experience or even just lacking legibility of experience on the former seems to close a lot of doors, and that means you run into the “need experience to get experience” cyclic dependency on a critical subset of what's needed, regardless of how good your other skills are.
I've recently been using Habitica again after a long hiatus (as this article predicts) and I have to agree. For those who don't know about Habitica, it tries to address the reward component of the problem by gameifying the TODOs; completing tasks rewards you with XP for your character and gold to spend on items, whilst failing to complete daily tasks or succumbing to bad habits damages your character. The problem is, the reward is meaningless unless you're invested in the game. If the RPG doesn't interest you or, like me, you lack the time to make sense of what exactly you're spending your virtual gold on and why, it doesn't feel like a reward at all.

That said, what does give me a real sense of reward is the streak tracker for daily tasks. Seeing how many days in a row I've managed to do a task _is_ rewarding to me, but as soon as that streak is broken, I lose a lot of the motivation to maintain it (which I believe is, again, a problem predicted by this article).
I obviously meant “free” as in “I pay nothing.”
I'm at a FAANG-like company with 1m USD TC because of stock appreciation.

Where would I get a job like this?

I hate my job a little but the hate is not strong enough for me to leave a 1m TC job for a lower TC.

I'm stuck basically. I'll be gone after 4y definitely
What kind of numbers do you want? Last month we used 200TB+ in bandwidth across all our sites, no bandwidth charges from CF.

120TB of that is our CDN backed by a Cloud provider, we had to only pay them for 3TB in bandwidth charges.

During peak traffic they serve 35% of our pages because of their cache, with some site improvements we will be able to up that to 60% soon.

Edit: I must add that we are on the Pro plan and do use multiple paid features like Workers and Load Balancers.
the business model is that BNPL will eat the risk, they won't sent a debt colector after you, they simply won't loan you more money. It's much more humane than credit score which is a form of social credit.
> I reckon a good deal of Oracle sales force now works at AWS. Thomas Kurian, GCP CEO, is ex-Oracle and has likely hired more in leadership positions.

Sorry just want to clarify: did you mean to say "reckon a good deal of Oracle sales force now works at GCE", so a typo? Or are you saying that a lot of the Oracle sales staff now work at AWS (even though Kurian who is ex-Oracle works at GCE)?

Not critiquing, just a honest question since I couldn't tell if it was a typo or not.
> If you configure your own private DNS server over DNS-over-HTTPS, and have your own logging on it, you can review your DNS logs across any devices configured to use it, rapidly.

Pegasus can always DoH its DNS queries to a server of its choosing bypassing any and all network-wide / os-wide DNS settings. Granted IoCs can be set to flag such behaviour. Besides, DNS and ICMP can be additionally be used to siphon off data too.

When used carefully, IP firewalls make for a good defence.

> ...if you're concerned about skilled attacker threat models - code execution in the browser via a delivered ad isn't something you want to make easy!

True. If NSO group is in your threat-model, it definitely warrants extreme paranoia and caution.
This is so true. In general, enablers do have a moral obligation over whatever they enable. People shouldn't ignore that.
The Internet wasn't meant to be used for outrageous amounts of fraud and abuse. Sometimes you have to put a captcha on ASNs or CCs because many of them simply don't care about keeping the bad guys off their networks.
Did you consider PyCQA/RedBaron (which is based upon PyCQA/baron, an AST implementation which preserves comments and whitespace)?
https://redbaron.readthedocs.io/en/latest/
Oh right, seems I've been bitten by this yet again. Thank you.
Google used to be well-liked too!
This is a very good question and one to check - merely having crash logs disabled (at least for an HN audience) isn't a high information signal.

I've got crash logs and as much analytics and telemetry disabled in a custom provisioning profile just to save having to navigate through menus to turn everything off...

Would need to test this on one of those devices to see if there's a false positive as a result though. But it's possible this is a false alarm if it's just checking for existence of this file. Has anyone checked through the logic the tester uses?
Financial firms, especially anything related to automated trading.
These types of articles with a list of problems and no solutions are always a bore to read. Many of them don't really appear to be a problem with lists at all.

"I bought this hammer the other day. Every time I hammer a nail in, the hammer doesn't vibrate and play a tune to give me a sense of accomplishment. What gives?"

Has anyone considered that if you're looking to external means to feel a sense of accomplishment, you're relying on meaningless short-term gratification?
You mean Kodak actually still makes something that you can buy?
> Up until the last week I thought the problem was in myself (you probably think so too). After all, David Allen seems to have figured this shit out.

It's worth pointing out that David Allen is very outspoken on his position that you should NOT use a todo list. He writes it out clearly in his book. This is probably the most common misconception about GTD. I've even heard people say they gave up on GTD because todo lists don't work for them. Okay...

I use a task manager but I don't have a todo list. The standard usage of a todo list, where you dump any task that may or may not be worth doing at some point, is at best a distraction from real project management. To get things done, you have to decide on the one or few things you should be working on at a point in time. A todo list doesn't help with that.
This is also part of my workflow, that I use git commit -p instead. Seems weird to only use a tool for that part when git's included workflow is perfectly capable
Does anyone have a good resource on writing compiled languages? I'd like to join this Jam but I don't know where to start.
> Everyone still needs an IPv4 to the outside world for compatibility, and pretty much all the time 24/7, so they wouldn't be saving money at all.

Yes, but a more and more services pass to IPv6 you can start to resize your IPv4 infrastructure, and arrive at a point where you will switch it off entirely, as it was done for the transition from analog television to digital one (of course we talk about at least 20 years, but if we don't start it we would never see it).

> And why do they need a NAT? My NAT only happens on my personal router, not at the ISP level. It's not something that concerns the ISP at all.

They need a NAT because they don't have so many public IP address to give one to each customer. So they introduce a second level of NAT, where a group of customers share the same IPv4 public address. That of course causes a lot of problems, especially for online gaming where it's required to open ports, or in general for applications that use p2p protocols.

And so if you want a public IP address dedicated to your connection you have to pay more. I don't know the situation in the US, perhaps your IPS have a ton of public IP addresses they purchased in the past so they can afford to assign to each customer one dedicated address, in my country it's no longer the case with most home connection ISP (and all the mobile ones).

> (And if there are legal requirements around recording connections and ports and whatnot, you'll still have to record each connection made under IPv6 as well right? And may I ask where you live that every TCP connection you establish gets logged for 5-10 years? Recording your assigned IP address is one thing -- and for most people's home connections it rarely changes -- but I've never heard of recording every connection.)

No you don't. The law requires you be able in case of a crime to identify the customer that originated a particular connection. It means that the police goes to the ISP with the time, IP address and source port of the connection and the IPS has to tell the identity of the customer. The method how this is achieved depends on the technology used.

With an IPv4 with public dynamic address, they have to maintain the log of the PPPoE connections, to know at one time the customer that had that address. Not that difficult.

With an IPv4 with a NAT, a group of users shares an address, thus the information of only the address is not sufficient to identify the customer that did that connection. So they have to log all the connection opened by the customer, so they an know, from the IP address and the source port of the connection from which customer originated the connection.

With IPv6, you don't have any of these problems. With so many addresses you can just statically allocate a /64 block of IP addresses to each customer, and basically don't keep any dynamic record.

Of course it's also better for the customer since he has a static IP address if he wants to self host something at home, without using unreliable dynamic DNS services. And nowadays with all the new IoT and domotic stuff having a public address is important (for example just think about accessing security cameras remotely).
Yeah. Not wanting to pay them motivates me to not fail.
Not to mention, suing a former employer can impact your future hirability.
This just isn't true. A lot of Node.js/Django/Rails/React devs know pointer arithmetic and memory allocation pretty well because these are all taught in every CS program which most of the devs you despise have gone through.
You can always choose some qualitative attribute or perk about your job, just like businesses use, and put a monetary value on that to you. The value becomes subjective and you can use that as a reference if you decide you do want to disclose or inflate your salary to negotiate higher for a new position. This is more difficult if the person happens to be familiar with a given businesses rates but businesses are often so secretive about comp rates (for their own advantage) that even management within companies may not know how much you're paid.
It took me a full 10 seconds to figure out what I was looking at here.
... or to lie to the app?
This was exactly what irritated me and sent me over to this thread-- there's basically no comparison shots to get an idea of how this should look.

For something that's so visual, you really REALLY need to draw the eyes to something that shows why you need to download it.
Bit of related history about password-cracking tools...

A bit before L0pht was founded, one of the open source crackers for Unix passwords was called Crack.

https://en.wikipedia.org/wiki/Crack_(password_software)

At the time, SunOS was distributing the encrypted passwords for an organization over the LAN via YP (aka NIS). I worked for a company with lots of Suns and other Unix workstations, and I'd gotten almost all of the non-Suns also configured to use and trust the YP maps. (The goal was to reduce friction to engineering work, and we weren't directly connected to the Internet.) So I ran my site's passwords through Crack one evening, and it easily got many people's passwords. (I don't remember how many SPARCstations I threw at it, but it was probably only a few, less than 100 MIPS total.)

Things like running Crack were within the scope of the sysadmin side of my job at time, I dutifully reported the concerning results to the head sysadmin, engineers were asked to change weak passwords, and all was good.

Some people who ran Crack at some other companies, however, got in big trouble, when there was ambiguity or misunderstanding, about their authority or intent. Besides all the mischief-or-worse uses of Crack that presumably went on. (Disclosure: One of the net.famous people who got a career footnote by running Crack happened to be an acquaintance for a while, years later; I didn't ask them about what must've been a pretty upsetting event, and I just now read on Wikipedia that their case was expunged in the end.)
It was less than six months between Grantland shutting down and The Ringer starting, and less than a year between Simmons leaving and The Ringer starting. I was definitely not the only one who hoped The Ringer would continue what Grantland was.

I do not have strong feelings about whose "fault" Grantland's failure was. I didn't intend for what I wrote to be an attack on Bill Simmons.
The original "science" is hard to accept & so is the rebuttal. In cases like these I defer to anecdata and that tells me what you'd call my willpower is finite.
Remote work will make it worse. Having worked for a remote-first company for over a decade, one thing I noticed is that every position was effectively senior level. Because you need staff able to work mostly autonomously, and at a minimum you need people experienced enough to pick up what they need to learn quickly from peers at the other end of a text chat or phone line. I'm sure we will work out how to do this better, but I think it is still a work in progress.
Just to add to the pile of anecdotes, also in the midwest, Chicago city limits.

Mentioned in another comment but I've had a noticeable increase in interviews (locations have included Chicago predominantly, Minneapolis, San Jose and DC) the last few weeks, I've made a point of asking about remote and I've been consistently hearing "we don't care where you work". Even of the local companies.
That's an interesting perspective. Also, since Google runs several of its services on its own cloud platform [1][2], I wonder if they are just moving data center and similar CapEx costs into their GCP budget, thus removing those cost line items from the rest of Google's quarterly and annual earnings results.

[1] https://en.wikipedia.org/wiki/Google_Cloud_Platform

[2] https://www.cnbc.com/2021/06/04/google-is-moving-parts-of-yo...
A new animal reservoir for covid
Whatever issue you're facing right now, we can help you. From SEO to Malicious Attacks, our Emails are open to Assist Contact...... Support @ hacker4wise com OR hacker4wise @ gmail com.
I worked a contract at Amazon. If the managers were doing anything other than lying about timelines, I couldn't see it.

Also the dev stack was horrifyingly opaque. Every time an Amazon recruiter contacts me I have to push down the urge to explain how awful it is to work there and no thank you.
Whether it's very top-level salaries or not (or necessarily developers), lots of people take good opportunities in at least somewhat less expensive areas that are very much in keeping with their interests and that are perfectly in keeping with their goals.
The OP's advice was the right advice for a long time. Occasional users were far better off with a laser, because of the reasons he gave.

But the advent of continuous ink printers has turned that on it's head. Continuous ink jet are colour (not marvellous colour, around the same standard a laser - but still), cheaper than the laser equivalents, cheaper per page and to address the direct concern about longevity some come with 12,000 pages of ink in the box which means they require 0 maintenance or supplies (except paper) for the life of the printer.
CF are doing a remote canvas/input.
Why doesn't remote audio/input work for screenreader case?
In sociology, we've previously explored how a child often finds changes challenging. Then I produced a review on this topic, but putting it together and, to some extent, marking the final material to present it was difficult. That's why I came across essay writing service uk https://www.rushmyessay.co.uk/ , where you promptly assisted me and made everything perfect. I hope I was able to assist others who aspire to write professionally.
Yeah, possibly. There are most likely multiple, overlapping things happening at once… some inflationary, some deflationary, etc…
As is common, the article uses "antifragile" to mean "robust", despite claiming not to.

> it’s antifragile thanks to a diverse mix of strong products.
And now, it's in the retirement home.
The project also includes wasm3 for WASM, curl and libuv. That's probably what's taking space.
I'd be interested in pointers to prior art of things which started asinine, and wound up literally deadly.

> I haven't bothered with 4chan for a decade now, but it definitely tickles me to see something so purely moronic now so heavily politicised and even feared.

"tickles"
Because the screenreader is set up and runs on the users local PC, unless you expect users to use whatever unknown-to-them screenreader setup CF happens to choose to run remotely.
I love workflowy for keeping organised, because zooming in and out is fantastic for focus. Dragging tasks up and down lets me prioritize.

Managing my todo list also organises my brain and lets me relax knowing I won't forget things.

Working just fine for me and I'm not sure I would want a bunch of 'smart' features being all clippy on me.
I read your earlier post which is why I asked you to comment further, saying what you do think. I was looking to go deeper into the question of why futzing the question is even necessary.

The reason I raised this issue is that solitary confinement in this circumstance, for a kid who clearly has shown some remorse and insight, and is a product of bad circumstances, doesn't seem very advanced.

To me, an advanced nation is one that minimises the suffering of all its people, maximises their potential for happiness, and is well regarded by the other nations it engages with.

A compassionate nation would take a kid like this and give him a second chance. An advanced nation would give him the coaching and the resources he'd need to succeed at it. How? It wouldn't happen in a vacuum. It wouldn't happen in solitary confinement. He'd need mentoring and coaching and some opportunities that only come through the social connections he didn't start with.

If being advanced was only a matter of being rich, people might say nah, that would cost too much.

But how much does it cost to leave things the way they are, with kids being locked up in solitary confinement, and ordinary citizens buying guns to protect themselves because they live in fear?

You can do the math. Well, I suppose society has done the math, and that's why it is like it is, and "advanced nations" have nuclear weapons, space programs, and sophisticated financial derivatives.

But what if the assumptions underlying the valuations of each of those things are broken? What if a more sophisticated social intelligence could rejig the value table in favour of a prison system that rehabilitates prisoners more than it rewards shareholders? Who would win from that?

Quite possibly everybody. The nation in 20 years might be more advanced than it is today. Can you imagine that?
Data wiping (deletion) attack, not windshield wiping attack.

Strange to call vandalism/terrorism "epic troll".
on the contrary, the person is trying to get closer to you than a over the counter by the book host.
We can't get chips in anything resembling reasonable quantity.

Computer security is a joke. The hardware and software is too complex to analyze, too complex to reason about, too complex to secure even if you could. All you can do now is wait for either attackers or researchers to find a hole, patch it, and hope the patch works (see "Windows Print Spooler" for how that sometimes doesn't work).

And the concept of "Hey, maybe we can do things without x86 processors running Windows" is never discussed. Do train networks actually need full on Windows workstations, or can they work on things like microcontrollers? The conversation isn't even being had.

But we've got problems from complexity created to solve the problems from the previous wave of complexity, running on top of complex hardware that's trying desperately to be fast enough to run the ever-more-complex software that... largely does about the same things we did 20 years ago, just far less efficiently.

I don't see a good path forward here. :/
> Except most customers only pay when it goes live, or...

But with (real) agile, it went live early on, didn't it?
One way it could adapt is by doing exactly what this article is talking about: Giving commands for common operations where name and behavior matches user intent.

That you can't tell the difference between "let's make software more usable" and "nobody should learn anything ever again and just soften into blobs of undifferentiated protoplasm" seems like a you problem.
That depends. Are you in the business of building, or in the business of using?

It's the age-old management dilemma: It's cheaper and easier to 'Buy-Built' but it leaves you dependent on the manufacturer. It's more costly, more difficult, and takes a lot longer to 'Build It Yourself', but you have complete say over everything in the acquirement process.

The US recently shot itself in the foot regarding banning the the sale of semiconductors to China.

The US manufacturers had been making a killing, selling hundreds of billions of dollars worth of semiconductors to Chinese companies every year. The Chinese were getting lots and lots of good and cheap semiconductors. A win-win situation.

The US is now forcing the Chinese managers into the policy of 'Building Their Own'. Yes, it will be costly for the Chinese. Yes, it may take them a few valuable years to catch up. But when the Chinese get around to 'Building AND USING Their Own', those US manufacturers will be in big trouble. Why should the Chinese new fabs just produce for Chinese companies, when they can undercut and take over all those markets that the US chip manufacturers used to have?

Just like Ford was displaced by Toyota, Intel will be displaced by some Chinese-named chip company. Like the Toyota-Ford displacement, that semiconductor-company displacement will happen more quickly than many people realise.
I like to believe that willpower is like a muscle - it takes work to build it up, and you need to maintain it. Though unlike the human body's limitations, I agree that it can be nearly unlimited.
When I read the article at first it resonated with me, but your solution solves it, just delete them. So I better add a task to my TODO to delete tasks once a month.
1. It doesn't matter the name you give to what is happening , if they can't access the internet, in practice they are blocked.

2. People use cloudflare not because it is the best product but because they have a good marketing and offer free tier. It is Silicon Valley 101.

3. PR is just people manipulation and you saying they helped privacy and information access says their PR is very effective.
No problem. I did indeed mean that per my estimates, AWS sales is likely bustling with ex-Oracles; while GCP may have them too, since the CEO himself was, by some accounts, #2 at Oracle.
Oops, this made me realize that my sites don't support IPv6. Or they didn't until just now -- luckily DigitalOcean makes it pretty easy.

EDIT: Or maybe I spoke too soon. My site includes direct links to nyc3.digitaloceanspaces.com, which apparently does not support IPv6. Ugh.
I have been fired because an employer was unwilling to negotiate reasonable accommodation per the ADA. Tech is insular. I chose to make zero noise for the sake of the future of my career and I wouldn't be surprised if most do the same.