skysight-inc/HackerNews huggingface dataset:
Show HN: Tier.run – Terraform for Stripe
Hi HN, we are Jevon, Blake and Isaac, we've been working on Tier for a little while ( http://github.com/tierrun/tier )

Tier is "Terraform for Stripe" but it goes further and gives you feature flag style access checks, and allows you to count/report usage which can be used for metered billing.

When we started Tier, we knew that there was something interesting in the SaaS pricing and packaging space. Adjusting price is the single most effective lever a business can use to achieve product/market fit, and there's a strong correlation price nimbleness and market success.

In spite of overwhelming evidence of this, most startups pick the price for their product once and then never change it, opting instead to invest in less effective levers like CAC, sales efficiency, "virality", churn, etc. Why?

It's just too hard. Any change you make to the pricing model means refactoring not just the entire product, but sometimes the entire company. The path of least resistance leads to a place where there's no single source of truth, and changes anywhere require changes everywhere.After over 50 or so customer conversations and user research chats, this represents our third or fourth implementation (depending on how you count them), and our conception of how best to solve it has been refined and adjusted along the way.

The concept of "PriceOps" came out of those conversations, looking at where mature companies end up after several expensive rounds of iterating on how they implement their prices for flexibility and order. https://priceops.org

What we're releasing now is an open source tool you can use to set up your Stripe system that keeps everything organized around a single source of truth. With this, changes to your pricing model don't require changes to your application code or business processes.

As a bonus, I think it's actually easier to integrate with than integrating with Stripe the "normal" way. Use the identifiers for your customers and features that you already have. Define plans and subscribe customers to them. No ever-growing pile of object ids to manage.

If you are just starting to think about adding pricing to your product, or if you've built something custom but would like something less maintenance intensive, then please give Tier a try and we'd love your feedback.
> Even just XORing the address with a hardcoded, pseudorandom bit pattern would have alleviated the issue.

Erm, no it wouldn't. Two addresses with identical index bits will still collide after you XOR those identical indexes with the (same) random pattern.

You would need to do some bit mixing. The simplest would be to multiply the non-offset bits by a prime. But a multiply is still a lot slower than physically wiring the index bits to the mux.

The problem is a little more nuanced than the article suggests. Notice that you don't actually need any of the data to stay in the cache during the loop—you read and write an address, then never return to it again. So the fact that you overflow your associativity doesn't specifically matter; you're happy to have it evict any or every entry.

I often get these things wrong, but I believe what's happening is that it's getting blocked on the writeback from the cache evictions (because they're now dirty from the fresh write). Which means that the 256 vs 257 distinction is a tiny bit fake; if you have a large enough array, both will eventually slow down to at best the speed of the next lower cache layer. The 257 stride will postpone the reckoning longer if the cache starts out partly clean, since the writes will just pile up in the cache for a while. (Shorter version: the 257 stride will indeed probably go faster, but it's probably better to think of the effective size of the cache rather than thinking of it as just faster vs slower.)

The article carefully sets N to 2*21 to demonstrate the behavior. (The overall conclusion is still correct!)
Nothing is sustainable. The universe eventually goes cold. Are you saying anything more?
What?? You never moved a photo off your phone?
The very first Sveriges Riksbank Prize in Economic Sciences in Memory of Alfred Nobel winner Paul Samuelson[0] makes the argument here[1] when discussing how lighthouse economics works that anything with zero marginal costs that has a price other than free is by definition an economic loss. Therefore you should find other ways to fund lighthouses, and by extension, all media and software.

If an economic loss is currently occurring, that means that, if copyright is abolished, an economic gain will accrue. Where that economic gain is captured is therefore the core focus. What we want to occur is for society and the author to share in this increased economic gain, what we don't want is for monopolistic rent-seekers to grab all of this value for themselves.

I am not yet sure of this, but I think a land value tax would accomplish this goal. One would then discover some method to find the weight for each artist or piece of software through a market means that might only be an approximation and take from the land value tax revenue and distribute it to artists and other creators. I think a decent way to find this value is through a revenue neutral(or slightly negative) opt-in sortition process in which, when you go to use an artists work, you are entered into an auction wherein the 50% who bid more than the median value get to use the work at the median price, and the 50% who bid less do not get to use the work, but receive their bid in cash. This is surely not the full system, but it is just me working out how we can move forward from such an unjust system like copyright.

[0]: https://en.wikipedia.org/wiki/Paul_Samuelson

[1]: https://courses.cit.cornell.edu/econ335/out/lighthouse.pdf - page 359, first paragraph
I see. I was interpreting the line as “is stored in the cache from” when it really means “can be stored in the cache at”. Using directed arrows might help some. Thanks!
Interesting time to be a fintech company in India. the tech was already decades ahead of the west (I have never seen anyone use a cheque in my life)
It seems rather symbiotic to me. twitter has nothing to offer without people of note. People of note use it to become more popular. I think generally people of note don't need twitter to be successful but twitter needs them
> which has the benefit of being 5-15kb per photo

Unlikely. You mean mb not kb.
The only people with phones not on silent are the ones that can’t read the room in my experience.

Invariably also same crowd using laptop speakers in an open plan.
Location: Manila, Philippines

Remote: Yes, remote only

Willing to relocate: No

Technologies: Go, Python/Django/Flask/FastAPI/Celery,SQLAlchemy,ES6, Nodejs,AWS/Azure/GCP,Docker,kubernetes,helm,Linux,bash,git,Postgres, Mysql/MariaDB, SQLServer, MongoDB, Redis, memcached, cassandra, kafka,REST, GraphQL, Github Actions, DevOps(CI/DI)

Im a software developer and devops practitioner with experience in backend development from concept to production mostly helping startups build their businesses and products.

CV/Resume: available upon request Email: ltanalas [at] gmail {dot} com LinkedIn: https://www.linkedin.com/in/f117a
Mastodon is Ruby on the backend ... as was Twitter in the beginning, and Twitter also fell over when it reached a certain size and had to be reimplemented. So present Mastodon won't scale to Twitter size, no.

It's also not the goal, people seem to assume that Mastodon is a Twitter clone that has exactly the same experience and feel the need to post how shocked and disappointed they are when they discover this is not in fact true. Fediverse is a different model for social media which prioritizes decentralization over ease of use, where "ease of use" means being able to easily be spoonfed entertainment in bite-sized pieces. I personally don't feel it will ever be a majoritarian platform and that's perfectly fine. There are plenty of ways for people to find out what BTS is doing and not every platform needs to optimize for this purpose.
Yes exactly :)

Somehow I trust the law is going to work out ok though, despite all the hot takes from people who don’t really understand ML or copyright.

It’s scary to see so many people not understanding the distinction between an input and an output.
...it makes no sense to consider someone's history when predicting their future performance?

If that doesn't make sense to you, not much will.
Oh right, forgot I needed to download 1 MB of stuff (incl. 750 kB of JS) for a tiny 6-line article [1].
Performance is absolutely abysmal. If you really want to use a JS framework that much, just use Astro so you don't ship all the unnecessary JS that bloats and slows down a tiny page.
Until this is fixed, anyone would be much better off going for Bear Blog [2] or Mataroa [3].

[1]: https://nicheless.blog/post/learn-one-thing-well

[2]: https://bearblog.dev/

[3]: https://mataroa.blog/
The software aspect was outsourced to a dev shop overseas
So two things about this: (1) Twitter verification was started as a way to dodge lawsuits about people registering fake Twitter accounts.[1] Verified Twitter was a way to ensure you couldn't register yourself as "realLocalPolitician" and be mistaken in a way which made Twitter liable.

So turning it into a paid-for service puts Twitter in a weird spot, where they can probably be sued again about this because "verified only if you pay" is alternatively interpretable as a shakedown racket - and Twitter knowingly allowing people to misrepresent their identity to defame people makes Twitter liable again.

But (2): this just isn't worth any money to anyone. There just aren't that many people for whom Twitter-verified is a worthwhile expense. Word-of-mouth verifies accounts easily, and once everyone knows @nyTimes is the New York Times official account or whatever, then its entirely unlike something like TLS where the process provides an active component in validating or securing the content or link. Optimistically this is worth like USD$30 million a year to Twitter...out of about USD$5.5 billion of year-over-year revenues. Or about 47 hours of revenue.

[1] https://www.hollywoodreporter.com/business/business-news/ton...
Every maintenance task is a requirement, in the light of which you should evaluate the quality of existing code! Maintenance isn't just something that hangs around in the air: it is made up of specific goals and activities.
I always think it’s nuts Elixir was a small project Valim was working on that I tried to get some open source points for helping on in high school, and fast forward several years and I own books on it now. Wish I had something more meaningful still left in the codebase. I initially found Erlang/OTP a year or two before, printing out the pragmatic prog book in its entirety. It’s amazing how far the project has come.
Is it a modern diesel with DPF and SCR? The smell from the exhaust of my 2021 6.7 liter cummins diesel motorhome is actually almost undetectable to me while my 2016 V10 gas motorhome had a very noticeable smell.

Perhaps the diesel is not ULSD https://en.wikipedia.org/wiki/Ultra-low-sulfur_diesel
Better than having to jailbreak your device, opening it to all manner of attacks, to install an app you want.
> But if the people on the safe space instances are happy with that, and the people on the free speech instances are fine with that, then what's the problem?

I don't think people on either side are fine with that. Most just keeps their heads down. It's mostly fine if you're not into engaging into politics overall, but it does get annoying when, every couple weeks or so, some event happens that turns half your feed into inane political drivel, and you can't even comment on it for the fear of getting kicked out of the instance.

The main reason I'm talking about this is because I dislike false advertising, and the most touted feature of the Fediverse - the ability to individually choose who you peer with - isn't actually usable. It's a bit like gimbal lock[0] - technically you still have three axes of rotation, but in practice, the system reached a state in which it lost one degree of freedom. Yes, you can theoretically choose who you peer with - in practice, you'll either align your blocklist with the main branch or end up on everyone's blocklist.

> If you really find it upsetting, you could set up your own instance which won't be on anyone's defed list yet, then just be careful not to post anything that will piss off either side.

That's what I'm already doing as a user of a large instance; setting up my own instance has the same risk profile of getting kicked out, for a lot of extra work involved with maintaining an instance. And note that just being "careful not to post anything that will piss off either side" is not enough - you have to be careful to not follow (as a user) or federate with (as an instance) or keep users that follow (as an instance with many users) the instances on the "unwanted" list, or else you get banned/defederated by association.

----

[0] - https://en.wikipedia.org/wiki/Gimbal_lock
As a society we have gone through great pains to protect the software developer's incompe and job, source code was given copyright and patent protection - no other industry gets both protections at once.

Now you seek to deny others such protection while taking advantage of it yourself.
No. His last major film, from 2019, had the second-highest opening weekend of any horror film in history. His work might not be relevant to you (it's not especially relevant to me), but we're back in motivated unreality when we start talking about him being culturally irrelevant, or that "nobody knows he's still alive".
Who is the "you" in this? The party that knows the truth of your personal data isn't the same party that you want to rely on your personal data.

The idea here is, say, the DMV in your state knows your age. But you don't want to show your driver's license credential which includes your home address and exact birthdate at a bar, because it's not their need-to-know.

So you can ask the DMV to issue you with a "drinker's permit" which only has your photo and ageOver=21. A bar just validates you match your picture and knows you're of legal drinking age.
Worldwide treaty to impose import duty carbon tax based on average country-level per-capita emissions. So exports coming out of Australia or Canada would cost the most. These two countries lose their international competitive advantage. Companies in these countries get angry at their local government. Local government acts to reduce emissions.

A nice thing about this is it doesn't even punish poorer countries that much, despite the fact that they haven't transitioned as quickly as richer countries. Because they're poor, their economic activity is lower and they don't generate as much emissions, so the import duty would be lower.
The first time I submitted an article on lobste.rs, I picked a tag that was apparently disallowed for new users. I then selected a different tag (thinking I was abiding by the systems in place) and posted the article.

Mods sent me a nastygram about it - apparently they checked the logs to see that I had originally submitted with a “disallowed” tag - as if I should have known that the message actually meant “you may not post this article now at all because you initially picked a tag that is disallowed for newcomers.” My bad, what a totally intuitive unwritten rule you have there - “any error from the system means you should just go away.”

Said nastygram also threatened to ban me for self-promotion. I didn’t write the article in question, so I’m really not sure what they mean over there by “self-promotion.”

I replied to the nastygram seeking some clarification on what I was doing wrong, but never got a reply. Haven’t bothered to interact since, because apparently a mod is pissed at me for reasons I truly cannot understand, and I don’t want to get my friend’s account banned for having invited me.

Doesn’t seem like a great place to me.
I'm a big SpaceX fan, but I know the prices are published for the fans (they make good PR). For those looking to launch things into space calling the three existing providers is not a serious barrier to entry.
I wouldn’t have gone on the hiking trip if I had to lug fullsize camera with me ;)
> Judged by his reputation, I would expect them to be delivered rapidly.

Ha! He’s not known for his timing. I appreciate your positive tone and details though
Going to nerd out on you here and point out that in a six-degrees-of-separation situation, you'd need 7! retweets to reach everyone. Carry on!

Edit: or maybe 7! - 1
I have heard of such cases.

The situation regarding the difficult recipe could be handled under the Uniform Trade Secret Act, as adopted in various states, or under common law related to tortious misappropriation of classified information.

This might be a place where restrictive covenants not to compete aren’t really relevant, and if they disappeared, employees might still have all the tools they need to protect their interests.
My dream is combining a simple self-hosted programming system like smalltalk-78 with the kind of experimental notetaking systems demoed here and in other inkandswitch work (crosscut and untangle) on an e-paper based tablet (like the PineNote).
Depends on how you define market rate construction costs. If the market rate is defined as median cost per unit area of new construction (within defined timeframe and geo), then by definition half of your sampled construction projects came in below market.
>Ratio of the sensor size has nothing to do with the ability of the light entering the front lens.

I'm aware of that – that's the point I made in my post that I linked. But DoF considerations entail that you can't just keep arbitrarily increasing the size of the opening.
I am not happy or unhappy about it. I just don't have a moral problem with it.

I did the same thing to get into the logo industry. In the process of learning I've analysed hundreds of logos made by other artists. I've tried hard to understand how they work, copy the best practices and styles and do the my best effort so my logos could be as good. I've trained on this dataset and got to be successful enough to become a part of it.

I don't have a moral problem with AI doing the same. It will probably be hard to compete with it, but for now I manage. If I won't be able to compete anymore - I will adapt and apply my skills elsewhere.
I’ve stopped flying southwest because of this
Speaking as another copyright abolitionist,

> How do you propose to keep artists able to pay their bills and live a decent life if you're completely cool with training AIs on them?

1. Software being able to imitate artists doesn't mean people will stop wanting art from other people.

2. If it does, I would say that it's unfortunate, but it's the world we live in. Nobody has a guarantee on being able to make a living doing any conceivable profession whatsoever, and artists are no different. I would very much like to make a living from working on my personal projects, but people don't seem to want to take me up on my offer.
First, you didn't address my point that you cannot detect AI output.

I already have Stability running on my PC. I generate an image with it. How do you know the output comes from Stability? Answer that, please.

Second, a worldwide draconian ban on AI image training and generation just isn't going to happen. Very few legal things are coordinated worldwide, and copyright law is incredibly low on the list.

Even training without consent can be addressed. Google trained some of their AI from Google Photos. Which they made free for unlimited use so that us fools would produce billions of images, accept the terms we don't even read and voila: AI legally trained.
Be aware that there are a few classic piano brands which are now that brand in name only. For instance old Richard Lipp & Sohn pianos were German-made, but recent ones were made in China by a different company just re-using the name. This isn't to say that a Chinese piano will be worse than a German one, just that they are not the same and don't sound the same.
Build tools: when I interview candidates I ask them to explain what things like Webpack do. I don't care if they can write a config for it (but it's nice).

Runtimes: a lot of frontend JS engineers don't know what these are. Being able to explain them (and the difference between Node and Deno for ex) is a good answer. For backend jobs this is a hard requirement, but when I see "Node" in a frontend job listing I assume it means "can install packages from Node."

Frameworks: (like Next) it depends. If I'm hiring for an app already built in one, maybe. A general answer like "SSR is a problem with React" and "this framework solves that problem this way" is useful.
So the same argument should advacate for having no patents, the advantage of just stealing everyone's patents is too great and not all countries enforce patents
Oddly don't recall seeing EasyPost on here very much, but I do see BuildZoom a lot
I've been using Resh[0] for the past 6 months or so. A rich and queryable shell history is a massive boost in day-to-day productivity. The syncing described here is a pretty cool feature.

[0]: https://github.com/curusarn/resh
Sorry I just read this exchange again and I totally misread your first comment. Tbh I'm a bit tilted at the moment. I'll take a break.
> What is the minimum failure of any CA required for me to get popped?

They need to issue an intermediate with this weird constraint, for most CAs that's a major business decision, maybe bringing in auditors to witness the ceremony, and then it's advertised, which seems like we'd go "Er, why does it have this really strange constraint" and the jig is up.

> Do you know every CA your OS and each browser trusts out of the box?

Yes.

> Have you done an audit of each one of them? Does an audit 100% prevent a breach from happening in the future?

No, I have not performed an audit of any public CAs. My observation, over years more and less actively overseeing the Web PKI (sometimes as a contributor to m.s.d.policy) is that the CAs are on the whole not malevolent but they're sometimes incompetent and lazy, like most humans.

I think you're imagining this is an end entity certificate needed, but the end entity certificate isn't interesting here, OpenSSL is (mis)parsing data from an intermediate, the end entity certificate is just a trigger and not an interesting one. I don't see any way you could get such a "trigger" certificate from Let's Encrypt, but I wouldn't expect it's hard to buy something suitable from a for-profit CA, however the problem is that there's no malformed intermediate to act as the explosive for you to detonate.
Sounds like Fazioli is Ferrari then?
He owned and operated a convenience store. Hated it. Sold it for a premium, found some other properties, and bought some (via loans, so he has debt). Over time, he took the cash flow and rolled it into new loans and bought more properties, etc.

He loves the shuttle job and makes good money— I tipped him well, for example.

I ended up grilling him about his commercial properties and how he did it, and it checks out. I know the town where he operates pretty well, and a familiar enough with the business he’s in to see that he knew his stuff.

He hates the single family homes. Way more hassle. So, he’s looking to exit that. The commercial properties are net leases with pretty long lease periods. No hassle at all: just cash flow.

He’s got a convenience store, a restaurant, a church, a strip mall, and I forget what else.

Anyway, I know a handful of people like him who are for a fact millionaires, with lots of cash flowing businesses (such as storage units) but who still hold down jobs that might surprise you.

¯\_(ツ)_/¯
> without new knowledge entering via changed requirements, is just fiddling with aesthetics.

or simply reducing technical debt
Can you explain what you meant to say here?
Not until you have enough users!