skysight-inc/HackerNews huggingface dataset:
It would be nice if someone implemented a clone of Bugzilla functionality using modern tech. Jira is the wrong thing to copy imho.
The first step in a transition like this is to make sure you actually enjoy and are good at DevOps. Ask yourself what someone in the role you're interested in is most likely to do on a day-to-day basis, and then practice doing those things for a few weeks and see if you actually like it. One thing I've learned time and time again is that my perception of what X is like is often very inaccurate to the actual experience of doing X.

Look up a few folks on LinkedIn in your area with the title you're interested in getting, and ask to buy them a coffee. Pick their brain on how they like what they're doing, where they see the field going, and what their frustrations are.

To take this to the next level, find a friend with a side project they're trying to launch, and offer to help them out on some of the DevOps aspects. Try it for a few weeks to months and then evaluate what you learned.

Once you're sure you actually like the work, you can start thinking about how to actually pivot into DevOps.
Note “ Felt like on-prem kind of stuff that I was reliably told the cloud solved.”

That is - why did cloud just give you the foot guns to produce the same bad outcome that took a similarly long time to resolve?

Why wasn’t this a click button change with zero interrupt ?
Can someone actually read the image? I'm on desktop and I can't get it in a readable resolution. https://miparnisariblog.files.wordpress.com/2023/03/aws-netw... is still a web page and the image is, sure, larger, but no more legible. :(
One of the first uses of film, too. In fact one of the earliest uses of writing -- mosr Egyptian writing fragments are either receipts or (text) porn.
It’s time to bring back a credible editorial board to the Wall St Journal.
Because for the average user it is still significantly easier to download some app to use in combination with a password they have a mnemonic for rather than having to figure out their own system for storing and retrieving long tokens in a reliable way. Also, most users are not obsessively clearing out their cache, so device recognition based password flows work seamlessly a lot of the time.
Sorry, I meant that the implication is human induced changes causing bigger swings in extremes will be pushed a little further by the natural cycles of the sun that is the baseline perturbing the weather - we are exiting a relative lull and like a pendulum that is pushed a little bit further, the swings in weather will be even more extreme than predicted.
Painful for me to watch. Rambles on and on.
This is beyond!
A bunch of people with admin access used a setup like this for a while shortly after the china hack years ago. It’s not that bad.
Here's why: the world is not able bodied Americans, so let us decide what password is best for us through our input methods
You'd be surprised how common this is. You gotta remember the managers are people playing the career game too. And if it's one of the large corps with a lot of turnover, they have to move fast.

Speak with people who work in large corps and you might here similar stories. Problem is people online naturally can't go too deep to avoid doxxing.
Pibb isn't bad but it certainly isn't in the same category as Dr Pepper. They aren't even remotely the same
Just a note I believe this is a reference to the book "what I talk about how when I talk about running" by mirakami
I loved Redmine. Best issue tracker and planner I've ever used. Even the git integration was servicable!

But these days everything (work related) is on Github and while it is pretty mediocre for issue tracking, it is better then having to maintaining a seprate service.
Scientists: Fishing boats compete with whales and penguins for Antarctic krill
> A given website might obnoxiously refuse to trust in my ability to set a secure password, assume the 24-character randomly generated password I keep in my password safe is insecure, and demand I complete an email challenge every time I login

...because it's easier and cheaper to apply one rule for every user and you're an outlier. Most users don't have password safes - they have passwords like 'Messi123' that they use across multiple sites, and therefore benefit from a second factor since their first factor is more or less non-existent.
Former Redmine user here; well, I get around so I see a lot of different systems.

Back, c2005 I think, I was CTO-ing for a company that was going through some management changes. The outgoing CTO was a "build it all in-house" type (which I get!) -- however, this dude was extreme -- so in addition to building their own App to make money, they had their own Framework and ORM and X and Y an Z -- which included a bug-tracker. Naturally, it was SHIT and nobody had time to work on it -- cause well the App needed to work and Framework (and ORM and X...) all needed actual things.

One of my first steps was to drop that dead weight. One of the juniors had recently heard of Trac so we dropped that in place and migrated all the tickets (give this junior some stake). A few years later the team was not excited about Trac anymore and that same junior (now medior) was pushing for Redmine -- I was not excited to switch (I love stability).

So I made them do the migration testing, cloning, writing the guides for migration, writing the quick-starts for the team -- sort of "run the whole project". It was not trivial, there was a lot of pre-Trac legacy BS that had just been jammed in from that migration; so we wanted to clean some of that as well. Great learning experience for the team member -- managing and coding/digging in arcane/foreign systems, integrations, etc.

Blah blah right...

Well, that company now has that same junior, now senior in the Big Chair; and they still use Redmine. It's been there for like 15 years! I'm not a daily redmine user (anymore) but Redmine has a nice place for me -- less as a bug tracker and more as a give-a-junior-some-growth-opportunity.
We probably will stop one day, but that day isn't yet for many services. There are people who would be unable to use those services if that can't set the password to either the same or a variant of one they always use.

In the tech wold we often forget that there is a wide disparity in people's ability to use tech. Take my father, there is no way he could use a password manager, or two factor, it's just never going to happen. He has a notebook of passwords, that's how he works and he won't change.

We cannot change everyones behaviour, no matter how much it would be better for them. That's a very well learnt lesson, over and over.

The world in 30 years time will be very different, the eldest generations will have grown up with passwords and the internet. Many will have been using password managers, 2 factor, other authentication systems and devices for much of their lives. It's going to be a slow, trickle down change, from "high tech" services down to everyday sites and systems.
>His website is the best designed website

The forced R and L margins suck for people with oldster eyes who have to increase the text size.

Kids these days!
Bugzilla still exists. And if you think something is the wrong thing to copy, just copy the "right" thing yourself.
How would you share the password with the users without revealing it to others?

How would a users use different devices?
I'd second the recommendation for Zulip. It's pretty similar to Slack/Discord, but unlike those it has good support for making the archives public. It also has much better threading support, which is a nice bonus.
My first foray into distributed systems was by reading Designing Data Intensive Applications. It's a tough read, especially the middle parts, if you're not coming from a distributed systems background already, but eye opening and really shines a light on many areas you can continue learning about afterwards. It's also one of those books you read multiple times and get a bit more out of it each time.
In healthier environments results are better. For instance, if a qualified person applies to a useful and growing company, they are going to be treated with respect and offered good pay.
> And yet nobody seems to be aware of it, and both the popular and scientific press continue with the “where are they?” Fermi paradox headlines.

A reasonable explanation here is that the paper is not correct because it relies on unfounded priors, which is generally where most Bayesian work falls flat.
Ikea effect. People are more likely to complete the new user funnel if they felt they had a role in building it.
With passkeys they won’t. Let’s move on already!
> sometimes describing exactly the same problem we're having, with a promising resolution

Exactly!

I've been trying to perfect my tomacco grafts for 20 years at this point and was unable to find any information.

The nerve of the author!
There is an overwhelming amount of superfluous text in this article.

The author's solution:

> Rather than allowing a user to set their own password, passwords can be issued in exactly the same way as API keys are now: a high-entropy password is randomly generated by the issuing website, and the user is shown the password once only and asked to record it. If the password is lost, a new password must be generated using the same process. The user cannot choose their password, but can get a new randomly generated one in the event of compromise. The password essentially becomes indistinguishable from an API key.
Also in Europe.

I wrote my first lines of BASIC code on one as a kid.
> Usually the story of IBM PC and Microsoft paints Paterson as a victim of Gates’s licensing machinations

Slight offtopic:

I'm always amused by 'Gates had nothing [aside the money from his parents] and M$ was successful only because he ripped Paterson' story.

When I point to what MS already did by then I only hear crickets.

> The 1980 year-end sales total $8,000,000. The 1980 Calendar Year employee headcount totals 40 people.

> Other products released in 1980: Basic Compiler 5.3, TRS-DOS COBOL and Basic, muLISP and muMATH, TRS-80 Editor/Assember, XMacro-86 Cross Assembler, COBOL-80 Compiler 4.0, BASIC Interpreter for Z8000, Olympic Decathlon (game), M/SORT, FORTRAN & COBOL for Apple II, RAMcard (memory expander for the Apple II)

https://learn.microsoft.com/en-us/shows/history/history-of-m...
Everything is using the MFT as well.
The Drake equation does let you model numbers you think you know with some certainty, numbers that known to be very large, and some known unknowns. But even leaving aside unknown unknowns, the modeling of some known unknowns can boil to making models that assume numbers that are very small but (obviously) not zero because we're sitting here.
The advice on passwords very much depends on the level of control that a system operator has on its userbase, and the threat model of the site.

In an end-user B2C style website, whilst passwords (and MFA) etc are needed for Authentication, the operator has limited control over users and if you annoy your users too much, with things like mandatory system generated "high entropy" passwords, they'll stop using your site (assuming there are other options available).

In a corporate style service it's different as the operator can mandate things like the use of MFA and the use of password managers.

I've seen systems that did the "system controlled password" thing in the past and, if done incorrectly, it just leads to users writing their passwords down somewhere (e.g. sticking them to a post-it note under their keyboards).
I really felt like shaking this person like the xkcd comic guy shakes the screen...

It's one thing to talk about something and just casually never following up. That's bad enough already.

But giving a precise date, and promising a follow-up, then never doing it... that's purely evil! Only valid excuse is a life-altering accident or something serious like that. Otherwise I'll hate you and will want to call you things

...shouting at my screen in my room's solitude.
A fun thing to play :)
What I learned was that just figuring out the right answer is indifferent to change people’s minds, even in science.

The further from experimental confirmation some question is, the bigger chance that people will ignore evidence in favour of their pet belief.

There's a kind of people that likes to believe that we're too far away from our nearest neighbors, that we'll never spread to other stars, nobody will come and that we'll get extinct soon.

Not sure why they think this way. What I do know is that somehow they find comfort believing that.

Fermi paradox is music to their ears because it seems to confirm their mindset.
If you want api keys to replace passwords then users need a built in mechanism on their device that stores it, since the majority of people are not going to be able to or want to copy some long obscure token and store it somewhere for later access. Some devices already have password managers and similar mechanisms built in, but it needs to be universally implemented and accepted before you could do something like this. Then there's still the question on do you share the api keys across devices?
Seems pretty reasonable for someone doing their own high level research. Notably missing any references to telegrams and telephone systems.
Something like that also happened at one company I worked for. While Redmine served the company for more than 10 years, and it was still doing great, the new management decided switching to Jira was a must. Maybe it can help other workflows, but for us, it didn't really improve anything, it only made people angrier. That was one of the reasons why I switched jobs.
Ancient 'Unknown' Script Is Finally Deciphered
Same with H&M. 10+ years ago H&M was decent quality for the price. Both the style and quality have withered away.
Green bubbles are annoying because they’re just way less feature rich, and are entirely antiquated. Every green message is logged and listed on my phone bill and the transcripts routinely are revealed in court proceedings?

Sorry it’s got nothing to do with classism, just objective differences.
Average users are also unlikely to enter passwords often enough for them to remember or develop mnemonics. For them forgot password emails are the defacto login method.
Take a look at courses from A Cloud Guru, they are great. Consider studying and passing kubernetes certifications, like CKAD or CKA. Probably also consider the AWS ones. After that, you start being more attractive to perform a devops role. You don’t really need the certifications, but they might help you. What you’ll need is somebody willing to give you work involving that kind of experience, after you gain a base of knowledge thanks to courses, practicing on your own, etc. In small startups or companies work is less compartmentalised and there are probably less impediments to start exploring work that’s more devops than front-end. You might have to get less compensation, perhaps, but that would allow you to progress towards your professional goal. Ultimately, everybody’s case is different, so who knows. Good luck!!!
People like you make me want to code only in Brainfuck.

This sort of gatekeeping over programming culture and aesthetic is only causing the community to further splinter between people with sticks up their asses and people who just want to have fun and enjoy life.
It's ripe for YouTubers cum science communicators to jump on.
They have yubikeys, so unless they only use nfc it is likely. Also, chromebooks and usb-c.
Login PIN by email is a much better pattern along the same lines. Forcing a specific, impossible to remember string on the user is weirdly hostile.

If you want to avoid a password, just email the user a PIN every time they need to login. This works great for apps which don’t need high security.
Same, I was using it at an old job around that time. I think it was the fact that I we were using it alongside SVN which made me hate it a lot as a side effect. Funny enough, I feel like I'd still take it over jira - the ui is fast which ticks my number one box as a developer.
Show HN: Trivia Book made with GPT-4
Free for the next 5 days.
These links never open on my iOS devices. Is there some necessary trick?
> when the alternative is decarbonizing using cleaner technologies

There (might not be) enough fossil fuels left, and EROI is falling fast, so the question is whether we'd able to do this before the energy runs out and our economy will be forcibly reduced by nature.

> carbon capture once that technology matures

I'm worried that's just a technological pipedream. No such technology will probably exist for decades at the scale needed. We'd need millions of such factories. In fact, we already have such "technology", it's called forests ... but we're not doing that either.

> Carrying capacity isn't fixed

No, it's not. We've extended it in the past, but now it seems that it started decline ... and might enter freefall soon. I'd suggest this for more info: https://www.youtube.com/watch?v=qPb_0JZ6-Rc

> energy isn't fixed either

Yes, and it's heating the planet and oceans 100x more than what we're consuming now. 5 atomic bombs every second now, is it? I'm aware that 254x254 km2 of solar panels would be enough for all our energy needs (except storage) ... but we're far from that. Even in the most optimistic scenarios we're targeting 25-30% of renewable energy in 2050 ... not really enough.

> science fiction scenario where we become a type 2 civilization

I'd like us to get there. But we might as well be at the end of the runway, looking at the great filter with our own eyes right now.
It is trivially done with compute shaders in two passes, one vertical, one horizontal.
> instead of allowing small groups of narrow-minded do-gooder elites to do so.

Isn’t that the entire history of UK governance? They literally have something called the House of Lords.
This is a pretty good example of the false dichotomy that most people perceive about food—it’s either highly processed garbage or you need to get everything organic from a farmers market. It doesn’t help fix the problem and people who don’t want to bother with all that hassle could be dissuaded from trying to be more healthy.

It’s true that the more you pay attention, the more you realize a lot of stuff in a typical US grocery store is just bad for you, but the solution is easy and doesn’t have to be extreme: just don’t buy those things. The healthy stuff is sitting right in the next aisle.

Going organic is only a way to signal consumer support for a specific type of production, and has very little to do with being more healthy. Is an organic cookie significantly more healthy than a regular one? No, it isn’t. It’s far more healthy to choose the factory-farmed broccoli or raw chicken from the local grocery store.
That’s an interesting POV. Thanks!
We don't even know if there is life on the moons of planets in our solar system. If we find life on Europa, Enceladus, Ganymede or any of a handful of other potential relatively local moons then the odds of life being rampant in the galaxy are pretty high. We just haven't reached the technological level to know one way or another.
Check the readme on this:

https://github.com/Konamiman/Nextor
> Rather than allowing a user to set their own password, passwords can be issued in exactly the same way as API keys are now: a high-entropy password is randomly generated by the issuing website, and the user is shown the password once only and asked to record it. If the password is lost, a new password must be generated using the same process. The user cannot choose their password, but can get a new randomly generated one in the event of compromise. The password essentially becomes indistinguishable from an API key.

GitHub does this now. you cannot push with your normal password, only a Personal Access Token. I am fine with this, but perhaps the process of setting and getting the token could be streamlined. Currently, you have to:

1. click profile

2. click settings

3. click developer settings (the last item of 24 items)

4. click personal access tokens (again the last item in the list)

5. click tokens classic (again the last item)

6. click generate new token

7. click generate new token (classic)

8. enter password

9. click confirm

10. enter note

11. choose expiration

12. choose scope

13. click generate token

thats just way, way too many steps for the average user.
Maths is held back by having to get as much mindshare and reach the lowest denominator schoolchild, to have as many people able to add up as possible, so a niche branch which might have been very productive is ignored and then child reaches maturity and leaves. We should not teach anyone basic math, it should be reserved for those who can do advanced math from a young age, we should circle the wagons around an in-group and exclude all the others, the inferiors, who can't do what we can do, and spend time patting ourselves on the back about how clever we are instead of building things which improve the world.

Rumour has it there's people using sums to keep track of their money, trade, measure their houses for furniture, weigh ingredients, count attendance levels, count votes - just adding and subtracting! crying laughing emoji Imagine being that dumb. crying laughing emoji. Millions of people who haven't even heard of {niche clever idea I love} making their lives better using {simpleton idea I scorn}. It's a disgrace, it should be stopped. They haven't heard of {niche clever idea I've tied my identity to} and it rankles that they aren't even aware how dumb they are. angry face emoji.

> "we strive to dumb everything down."

No you don't, you strive to keep everything elitist so you can feel clever; when it comes to making things easier and more accessible you don't talk of it as as positive thing, - simplifying, clarifying, explaining - you call it "dumbing down" - for dumb people who are beneath you. Instead of raising the floor with the idea that a rising tide lifts all boats, improving the situation for the lowest, you scorn the lowest; you want your genius for being able to use the dark arts to be known, not for the dark arts to be taken apart, explained clearly, widely known and considered blasé. The last thing you want is for all the web developers to use LISP, heaven forbid they might find the Holy Grail. You want them to stop programming entirely and worship you for using LISP. Maybe if they do that enough, you'll deign to make a CRUD app once in a decade to appease them, before going back to your true calling - writing a new LISP which fixing all the stupid decisions of the previous LISPs.

Meanwhile, trillions of dollars of value and joy are added to the world, fraud is detected, trade is eased, family members stay connected, by people doing the lowly work of trucking bytes around with tools which are merely 'good enough' but not approved by the high priests.
would you mind elaborating on the nat gateway part? are you insinuating that nat gateway as mean to provide oneway internet access for instances in private subnets are misguided or suboptimal?
Start out free and get people "hooked". Then start offering upgrades and limiting the free plan after awhile.

So, at first. Totally free. Watch your users. How many sources they connect, how many times they search, etc.

Then after a few months, set it up to be 'free for X sources' or something. Everyone else must pay.

I would use it, but not often. It's pretty rare that I can't find 'something' I'm looking for and could use a global search tool (if that isn't what this is, then that also might be part of the problem -- marketing).
In my experience, hacked together arduino projects easily exceed a 25 year MTBF (if you exclude day-1 failures because someone did something stupid like wiring it backwards).

However, ESP32's do not (they seem to require a power cycle every few months - and in my view, that is a failure). R Pi's certainly do not (they require human attention for software updates, which IMO is also a failure - and even if you don't update them, there is almost certainly some tiny memory leak and it'll need a reboot in a year or two anyway).