skysight-inc/HackerNews huggingface dataset:
Fair point. I just feel like it doesn't cost much to learn about open source licenses, and developers would benefit from it.

I managed to open source a lot of code just by convincing managers (sometimes in a manipulative way, but that's the game: they do that, too). It did not imply any bureaucracy.
This is the kind of breach that really should be company-ending, but will sadly instead likely result in a slap on the wrist.

It is high time for the US to have a privacy law with real teeth, and to enforce it with vigour.
So just import them from Dubai? Or you could start a company and start selling long lasting lightbulbs yourself. Its not like you need a team of super scientists to design a LED board with a bigger heat sink. Its weird how so many peoples' first thought is always to have the government micro manage everything through legislation.
The best advantage of cloud was never price: It was not having to argue with your data center organization, which often lead to taking months to provision anything, even a very boring VM. If those companies were good at managing data centers, and could hire people actually interested in helping the company run, they'd have had little need for the cloud in predictable compute loads.

Until you get quite big, all necessary interactions with the cloud provider are just bills. It's just much easier, even though it is often expensive
You're Not Powerless in the Face of Online Harassment (2020)
It’s a 50% reduction in startup time, and each “run” for a pod is fairly quick.
I understand cigarettes in the context. They just wanted Marlboros more than other brands. Some of the others in the group has Camels and some other famous British brand, but they were not as popular as American Marlboros.
Don't anthropomorphize the company.

It's not the legal entity which represents your employer that tells you that you're part of a family to try and manipulate you into working for a lower salary. That's done by the hiring manager and your bosses because a) presumably the lie works often enough that it's still worth using, and b) because they are paid a little bit more when they can get away with paying you a little bit less.

It's also one or more people who decide that despite being a loyal, hard-working employee for X years that it's time to let you go so you can be replaced by a fresh grad, an overseas hire, or simply to close your position to pad the yearly bonuses of those higher up the chain.

The entire concept of a corporation is to act as a shield for blame to prevent any landing on the individuals within - don't fall into that trap. Every decision made by a business, no matter how amoral, immoral, or even illegal it is, was ultimately made by people.
Disagree. It means that their streak, which had been running for quite a while, has ended. “streak” here is a noun referring to the specific successful launches.

Much like saying a sports team’s 10-game winning streak is over does not mean they will never win 10 games in a row again.
These lecture notes[1] goes into some details of what makes hypersonic aerodynamics different.

Similarly to how the supersonic regime is different enough from the subsonic regime that it's useful to distinguish the two, the hypersonic regime is different enough that it warrants its own name.

There's no exact definition, but typically around Mach 3-5 things start to behave differently enough.

[1]: https://archive.aoe.vt.edu/mason/Mason_f/ConfigAeroHypersoni...
> Spending serious engineering time to wrangle with the complexities of cloud orchestration is not something that should be taken lightly.

Bare metal and datacenter orchestration is leaps and bounds more complex. You're paying for the abstraction.
That's why I argue that eggs should fight back :-).
Version control coincided with programs being stored on tape as opposed to punched cards (the shift to tape was gradual over the 1960s, and the first VCS around 1969).

So before version control came along, companies were only running programs small enough to fit on a deck of punched cards.
Will the EU investigate itself for pushing disinfo all the time on its citizens?

This "disinformation and toxicity" needs to get eradicated from the law.
It's nothing to do with LaTeX. Anything you can make in Word you could make in LaTeX.
Don't you find yourself having to constantly add sites to the whitelist because they fail to work without JS?
> Snowflake blamed the data thefts on its customers for not using multi-factor authentication to secure their Snowflake accounts, a security feature that the cloud data giant did not enforce or require its customers to use.

So AT&T put all our call information somewhere and hid it probably behind a weak password with no additional factors. IMO that's actionable negligence and I hope they get sued to oblivion.
Slightly longer: having many versions of the same SDK required added to startup time.
Hopefully someone gets inspired by this and implements a thin wrapper using CF workers.

Edit: CF already did it https://github.com/cloudflare/serverless-registry
With the help of many devs, and those that keep shipping applications wrapped in Chrome shells, Google has managed to turn the Web into ChromeOS for all pratical purposes.

How quickly a new generation has forgotten the IE learnings, in exchange for shinny toys.
Option 2 and 3 for sure. I can't say whether option 1 applies. But my opinion on them is not just informed by keeping me on for longer than necessary, but rather many additional supporting experiences. Like actually getting to talk to the C levels and bringing in suggestions/asking questions and such.

My understanding of your messages indicates to me that you think I was saying that the company doesn't care about numbers. While I was meaning that the company treated me as an actual valued human and did well to me.
The reports said celltower-level location data associated with calls and texts (but not datestamps). That would allow inferring their homes, job location, commute, family members, social graph.
Where does this come from? The Torah I first assumed, but then I say mention of thebtarot.
It's still amazing there is just no all in one solution for viewing and sharing media between people. Having to hook Sonarr/radarr whatever into something to track indexers than a client then some kind of all in one interface that might not even be a media player....
AWS has a three day course on the technicals of efficient cost management. Believe it or not...I heard is one of the least requested classes....
There are many experimental space startups in Europe experimenting with different engine designs (like hybrid engines, love those) and material (plain steel).
Direct link to the arXiv abstract page, where one can download the PDF: https://arxiv.org/abs/2109.05237
I really don't understand spinning up a whole pod just for a request

Wouldn't it be cheaper to just keep a pod up with a service running?

If scaleability is an issue just plop a load balancer in front of it and scale them up with load but surely you can't need a whole pod for every single one of those millions of requests right?

> Checkly is a synthetic monitoring tool that lets teams monitor their API’s and sites continually, and find problems faster.

>With some users sending *millions of request a day*, that 300ms added up to massive overall compute savings

No shit, right?
When you have salaried staff, it's very easy to ignore their cost when they do various background work because it seems to happen for "free." That's not to say that cloud services are always a good value but it's also the case that it's easy to ignore the full cost of doing everything in-house.
Do you believe in real numbers?
Oh. Interesting! I haven't thought of that. It sounds super cool, although my gut reaction is that it would be a lot of work for not much bang.

My childish imagination pictures the proposal as the Agena target vehicle from the Gemini IX test flight. There the fairing did not separate correctly leaving the docking target looking like a hungry space alligator:
https://www.nasa.gov/wp-content/uploads/2016/05/5-s66-37966-...

One could imagine the aligator gobling up a drifting second stage. :D It would absolutely not look like that in reality, but if life were a cartoon that is how it would happen. :)
I think heart rate spikes might not always correlate with seizures yet I think it can be the answer
> seems like an awful waste downloading from the npm registry over and over

Pondering this question across every organization in the world and the countless opportunities for caching leads to dark places. Would be interesting to see CDN usage for Linux distributions pre and post docker builds becoming popular.
A native Docker-like solution for macOS developed by Okerew
If future scientists listen to people like this then there really won't be any progress. Pessimists that destroy the human spirit.
Brute force attackers seem to switch targets rapidly if you block them
The combination of low salt intake and {exercise/sauna/hot weather} is poor advice.

If your salt intake is low, and you start sweating due to hot weather, exercise or a new-found interest in saunas, you probably need to bump that up.
> The web, has never developed a sufficiently workable "micropayments" solution

Is this just because payment processors make it non-viable? I used to think crypto would come and rescue us in this regard, but it hasn't yet. I also liked the old readability model (pay a fixed monthly amount which gets distributed among sites you visit) but that didn't make it either.
I'm more stunned that AT&T knew back on Apr 19 [UPDATE: Mar 20] yet feels it had neither an SOX violation or SEC obligation (share price effect) to notify timely. Like, by Apr 22. Not three months later [UPDATE: 4 months later].

Remember the massive Yahoo 2014 hack which Yahoo management failed to notify its own users for 2 years?

If SOX violation only literally covers users' own passwords getting breached, but not 2FA or other passwords to access the same data, will Congress amend it urgently?

EDIT: apparently they're hiding behind the 3/20 disclosure [0] which is all they disclosed until [1],[2] today.

[0]: March 30, 2024 - "AT&T Addresses Recent Data Set Released on the Dark Web" https://about.att.com/story/2024/addressing-data-set-release...

> "AT&T has determined that AT&T data-specific fields were contained in a data set released on the dark web; source is still being assessed...

> "AT&T has launched a robust investigation supported by internal and external cybersecurity experts. Based on our preliminary analysis, the data set appears to be from 2019 or earlier [incorrect], impacting... approx 7.6m current and 65.4m former AT&T account holders"*

> "Currently, AT&T does not have evidence of unauthorized access to its systems resulting in exfiltration of the data set.... As of today, this incident has not had a material impact on AT&T’s operations."* [but did it have a material impact on the customers/ex-customers?!]

[1]: Jul 12, 2024 - "AT&T Addresses Recent Incidents Regarding Access to Data" https://about.att.com/pages/data-incident.html

[2]: Jul 12, 2024 - "AT&T Addresses Illegal Download of Customer Data" https://about.att.com/story/2024/addressing-illegal-download...

> "Based on our investigation, the compromised data includes files containing AT&T records of calls and texts of nearly all of customers of [AT&T’s cellular and (MVNOs) using AT&T’s wireless network], as well as AT&T’s landline customers who interacted with those cellular numbers between May 1, 2022 - October 31, 2022. The compromised data also includes records from January 2, 2023, for a very small number of customers. The records identify the telephone numbers an AT&T or MVNO cellular number interacted with during these periods. For a subset of records, one or more cell site identification number(s) associated with the interactions are also included."
Great post. The ethernet section is especially interesting to me.

I'm building a cluster of 16x Dell XE9680's (128 AMD MI300x GPUs) [0], with 8x 2p200G broadcom cards (running at 400G), all connected to a single Dell PowerSwitch Z9864F-ON, which should prevent any slowness. It will be connected over rocev2 [1].

We're going with ethernet because we believe in open standards, and few talk about the fact that the lead time on IB was last quoted to me at 50+ weeks. As kind of mentioned in the article, if you can't even deploy a cluster the speed of the network means less and less.

I can't wait to do some benchmarking on the system to see if we run into similar issues or not. Thankfully, we have a great Dell partnership, with full support, so I believe that we are well covered in terms of any potential issues.

Our datacenter is 100% green and low PUE and we are very proud of that as well. Hope to announce which one soon.

[0] https://hotaisle.xyz/compute/

[1] https://hotaisle.xyz/networking/
>Their testing and certifying are definitely not very expensive

If you're referring to the 737-Max, that's a different animal because: 1) it's a different division than their aerospace and 2) it was taking advantage of a previously certified airframe. It doesn't mean they got rid of all the upstream quality requirements. Also, you might need to qualify what you mean by "not very expensive" because I don't think they would agree.

If you're talking about Starliner, there is no "certification" process like what the FAA requires. And NASA was heavily involved in the testing, especially after the mishaps with the Demo flight. They (NASA) felt the need to levy on many more requirements after the fact because of the (real or perceived) increase in risk.

>But I'm guessing that $1k bolt wasn't strictly from design/testing costs as much as managerial costs being a large factor.

That's my point. A large part of the cost isn't R&D but administrative. The difference I think we're making is you're considering the "managerial" costs to go to some C-suite, but I'm saying there are lots of quality requirements that would also go into the bucket of "adminstrative" or "managerial" costs. Look at what it costs to ship a flight article: you have to have a quality engineer inspect it and a photographer document it. There's all kinds of tracking documentation. You have to have special packing and labeling. Of course, the shipping itself is more expensive; it may have to have be shipped in a certified/refrigerated/climate-controlled truck and have accelerometers attached to the package to measure g-forces in transit. Then once it's received, you have to have a quality engineer open it, a photographer document it, more tracking paperwork, and a climate controlled, secured warehouse. All that paperwork has to be managed for the duration of the mission (and beyond). And this isn't just for the big items like a assembled satellite; this is often the case for the small parts too. You can get rid of all those requirements and just drop it to the UPS guy, but then you might risk being back in the same place after a mishap, like SpaceX.
I'm betting autogenerated file like protobuf definitions.
So where/what is my compensation? (I know there is no recourse).

When no one is on the hook for secure practices, like enabling MFA on your effin data stores that contain massive amounts of customer PII, this is the result. Not even an apology, just report it and move on. woops! those gosh darned cyber criminals.
Beyond Dumbphones: Building a Minimalist yet Functional Phone
The dark web and info stealing malware are the source of the hacks.

My worry is not only that consumers get numb to breaches, but they consume rampant misinformation and have no idea how to hold appropriate parties accountable.

How many times have you held AWS accountable for stolen access keys?

Was it AWS fault when rabbit leaked their own keys?

Is it snowflakes fault when you lose your creds to infostealing malware?

How should snowflake enforce mfa on machine service account credentials?

The answers are no, no, and they can not possibly. Not even hyperscalers have this magic.
If your scale is crazy, or your product doesn't allow you to use battle-tested pieces, then orchestration is complex in both cases.

In most cases, managing software on bare metal is more complex in exactly one case: when engineers only know cloud abstractions.
> it would be a lot of work for not much bang.

I don't know. Surely it will be a sellable feature of Starship eventually to service and/or return aging sats from orbit. Grabbing an F9 second stage feels like the perfect way to demonstrate that capability. It's not like they're going to have a shortage of Starships returning from orbit in the future.
Do you exclusively use signal? Do your friends also use signal? Do you have friends who only use signal to communucate with you?
How to mail an SD card with gummy glue
> I'd say that perhaps Git is unsuitable above certain thresholds on numbers of files

Scott Chacon in a recent talk about git[0] said that Microsoft uses git to version control Windows. They have ~3.5 million files in the repo, which is about 300 gigabytes in size. There are some tweaks to improve git performance in those scenarios; but still, I'd say it's a pretty impressive threshold.

[0] - https://www.youtube.com/watch?v=aolI_Rz0ZqY
would chloroform work as well? it is easyer to produce.
FWIW, I was exploring teaching color in K-2 using spectra. Here's[1] an old development snapshot, showing a color "wheel". Intent was a correct 3D perceptual color space (that snapshot isn't quite it), coupled with perceptual ("color") and physical ("light") spectra. Sort of the old art-school teaching from Munsell, but able to deal with materials and light. Absent an existing pedagogical perceptual color space (pedagogical: one without lots of "first thing you notice" features that are all bogus model artifacts), I kludged CAM16UCS with JzAzBz hue linearization and tweaks.

The author isn't wrong about current color instruction having dreadful content and outcomes. Ask first-tier non-astronomy physical-sciences graduate students what color the Sun is, and you commonly hear answers like "it doesn't have a color" and "it's rainbow color". Kids attempting to apply the models taught to their paints and pens and programs get... mixed results.

[1] https://imgur.com/a/zOtxQwe
what do you think about notifications when your favorite topic gets mentioned?
You know? "Make the impossible, possible, but do not make that which is possible any more complicated than it needs to be".-

PS: Edited. Gonna make me a T-shirt with that :)
I agree that they can do things that don’t require too much logic - websites being a prime example, where much of the challenge is in the design and layout and where the response to clicking a button is fairly standard.
But if you want to write really complex software like Monte Carl simulations involving highly customized financial products, then you have no choice but to tell it EXACTLY what you want. Free form language requests are never going to get you there.
Also, ChTGPT can no doubt find plenty of code snippets dealing with the pressing of a button but there will be precious little available for complex requests.
And if the code starts to stretch into tens of thousands of lines, then someone needs to look it over.
You mean this?

A Docker registry backed by Workers and R2.

https://github.com/cloudflare/serverless-registry
Show HN: BoilerplateHub – Find the perfect boilerplate for your next project
BoilerplateHub is a curated collection of ready-to-ship boilerplates for various tech stacks and projects. I want to help developers compare and choose the ideal starter kit to ship faster.

Key features:
- Easy comparison of different options
- Regularly updated with new and trending starter kits
- Covers multiple tech stacks and project types

I built this to solve the problem of spending too much time setting up project foundations. Would love to hear your feedback and suggestions for improvement! Thx!
In chrome I can even link to https://labs.pdfa.org/FragmentTest.pdf#Back%20to%20lower%20l... but can't see where spec allows for that.
I'd say that also reflects my experience with dating.
Your care for Yuri is commendable, and your proactive approach to using technology to monitor his health reflects a deep love and commitment to his well-being. You can attach small motion sensors or accelerometers to Yuri's collar or harness. These devices can detect sudden movements or changes in position.
What is the fuss about ? Of course if you have root access you have access to any process memory and also can intercept communication before encryption takes place.

We use similar approach in Coroot to get fantastic observability insights with zero configuration
The author speaks to this also, the "Chromification" of the web ...
> if running NPM to install dependencies on pod startup is slow

Loading the AWS SDK via `require` was slow, not installing. As sibling comment says - collapsing different SDKs into one helped reduce loading times of the many SDKs.
Stars don't really say that much, for me it's a bookmark for projects I might (but probably won't) take a closer look at later. Don't trust them and do your due diligence.
This is related to the snowflake breach. Snowflake is blaming customers for not enabling MFA.
$5k/month was 25% of his pods, so the total was ≈$20k/month. It's entirely possible that self hosting would cost much more than that, particularly as they wouldn't be able to save costs by scaling down.
Windows NT for Power Macintosh
Where X=Forth
For expert-ish and well-informed failure analysis, I've noticed that Scott Manley ( https://www.youtube.com/c/szyzyg/videos ) usually does a very good job.
A bit unrelated - I use Hookmark[0] on my MacOS to deep link local PDFs. I can link to specific sections within a page, although it works only when the PDF is viewed with Skim reader[1] and not the default Preview app

[0] https://hookproductivity.com

[1] https://skim-app.sourceforge.io
These both look like great tools. I'll give them a spin!
How would that differ from having the 50 microservices cloned separately? Maybe you want to say that perhaps some of the microservices were not that useful and didn't need to be versioned as well? If that is the case I think you could benefit from Scalar [1]. Microsoft created it because of similar problems with size and binaries

[1]: https://github.com/microsoft/scalar
> Of course, command economies exist (and may again), and those tend to shortcut many of the niceties eh?

Command economies like corporations?
> Snowflake blamed the data thefts on its customers for not using multi-factor authentication to secure their Snowflake accounts
Photography Application lists
IIRC one of the initial animations had a landing second stage, but it was probably harder than expected (or it was just marketing material).
Companies aren't people. Even if your current direct boss wouldn't do this, they won't be your boss forever, and there's always somebody further up the chain who can overrule them (or fire them too).
There's a lot of "tweaks", they implemented a whole toolchain for virtualizing large repos: https://github.com/microsoft/scalar
> After all, the poorest people in your city, state, country, and planet are the ones having the most children.

That's because the poorest people are also the ones having the most sex, because sex is a cheap form of entertainment. Poor people are also the least able to afford birth control. More sex plus less birth control equals more children. No one, however, would argue that these children have the brightest future with the most opportunities ahead of them.
After taxes, but before healthcare and the fact that most employment is at-will.

I'll take higher taxes, healthcare through general taxation and relatively strong job security over a fixed dollar amount any day. Everyone is different though.
Ah, that's great! I'll have to look into it :)