skysight-inc/HackerNews huggingface dataset:
For fundamentals, that list is missing:

- Some sort of firewall or network access control. Being able to say "allow http/s from the world (optionally minus some abuser IPs that cause problems), and allow SSH from developers (by IP, key, or both)" at a separate layer from nginx is prudent. Can be ip/tables config on servers or a separate firewall appliance.

- Some mechanism of managing storage persistence for the database, e.g. backups, RAID, data files stored on fast network-attached storage, db-level replication. Not losing all user data if you lose the DB server is table stakes.

- Something watching external logging or telemetry to let administrators know when errors (e.g. server failures, overload events, spikes in 500s returned) occur. This could be as simple as Pingdom or as involved as automated alerting based on load balancer metrics. Relying on users to report downtime events is not a good approach.

- Some sort of CDN, for applications with a frontend component. This isn't required for fundamental web hosting, but for sites with a frontend and even moderate (10s/sec) hit rates, it can become required for cost/performance; CDNs help with egress congestion (and fees, if you're paying for metered bandwidth).

- Some means of replacing infrastructure from nothing. If the server catches fire or the hosting provider nukes it, having a way to get back to where you were is important. Written procedures are fine if you can handle long downtime while replacing things, but even for a handful of application components those procedures get pretty lengthy, so you start wishing for automation.

- Some mechanism for deploying new code, replacing infrastructure, or migrating data. Again, written procedures are OK, but start to become unwieldy very early on ('stop app, stop postgres, upgrade the postgres version, start postgres, then apply application migrations to ensure compatibility with new version of postgres, then start app--oops, forgot to take a postgres backup/forgot that upgrading postgres would break the replication stream, gotta write that down for net time...').

...and that's just for a very, very basic web hosting application--one that doesn't need caches, blob stores, the ability to quickly scale out application server or database capacity.

Each of those things can be accomplished the traditional way--and you're right, that sometimes that way is easier for a given item in the list (especially if your maintainers have expertise in that item)! But in aggregate, having a cloud provider handle each of those concerns tends to be easier overall and not require nearly as much in-house expertise.
At my company we have seen a massive increase in bot traffic since LLMs have become mainstream. Blocking known OpenAI and Anthropic crawlers has decreased traffic somewhat so I agree with your theory.
> I couldn't find a time between 1980 and now where part of 1831 was a London number.

What about when outer London numbers started 081? Dialed from another country with the 00 international call prefix the number if could be a fragment starting from the second digit (i.e. 0044 1831xxxx)?

the change form 01 was a big deal, and BT ran some very amusing ads playing on snobbishness about where in London one lived.
Prompting only works if the training corpus used for the LLM has critical mass on the concept. I agree that the model should have alternatives (i.e. preface the comment with the tag 'Nit:'), but bear in mind code review nit-picking isn't exactly a well-researched area of study. Also to your point, given this was also likely trained predominantly on code, there's probably a lack of comment sentiment in the corpus.
I would disagree. Blocking typically implies permanence (without more action by the blockee), and since 429 isn’t usually a permanent error code I wouldn’t call it blocking. Same applies with 403, it’s only permanent if the requester doesn’t authorize correctly.
For what it's worth, my inner voice is only part of my "inner life".

I sometimes note that my thoughts exist as a complete whole that doesn't need to be converted into words, and have tried to skip this process because it was unnecessary: "I had already thought the thought, why think it again in words?". Attempting to do so creates a sense of annoyance that my consciousness directly experiences.

But that doesn't require the inner voice to be what's generating tokens, if indeed my thought process is like that*: it could be that the part of me that's getting annoyed is basically just a text-(/token)-to-sound synthesiser.

* my thought process feels more like "model synthesis" a.k.a. wave function collapse, but I have no idea if the feelings reflect reality: https://en.wikipedia.org/wiki/Model_synthesis
Much of this is still required in cloud. Also, I think you're missing the middle ground where 99.99% of companies could happily exist indefinitely: colo. It makes little to no financial or practical sense for most to run their own data centers.
OTOH:

1. big clouds are very lucrative targets for spooks, your data seem pretty likely to be hoovered up as "bycatch" (or maybe main catch depending on your luck) by various agencies and then traded around as currency

2. you never hear about security probems (incidents or exposure) in the platforms, there's no transparency

3. better than most coporate stuff is a low bar
As someone who works for a company that’s transitioning out of the cloud into their own data centers, the supply chain factor is difficult. You have to be really good at forecasting and planning with a large upfront cost. But the savings are substantial (up to 70%)
Good comment. When we parse, data science, and algo a barely structured brawl, sports are donezo and we get too far away finally from being human.
If you're not already familiar with it, you might get a kick out of Mark Twain's "The Awful German Language": https://faculty.georgetown.edu/jod/texts/twain.german.html
I generally use storyboards, but I do need to occasionally do programmatic stuff. That's a pain, but I can make it work.
Yep, you're right. One way to make this less of a problem is to make this distinction at the type level, having both an owned_string and a string_view for example. You can even make owned_string store its length inline.
Spoken like someone who trusts “experts” pretty completely.

If you are left-leaning, suppose the “experts” are former oil company lobbyists.

If you are right-leaning, suppose the “experts” are Marxists hired by President AOC.

That is why the “trust the unelected experts” idea fundamentally bothers people.
The way I read his post is that categorizing and differentiating is fundamentally not possible, because sensory input cannot be trusted, period. This makes sense to me because part of what can drive you mad is the constant questioning, so one way to short-circuit this is to simply not play the game.

It's zero trust networking for your brain, and you're asking "but how do you decide which ip addresses are safe?". That's the neat part, you don't.
Of computer magazines today, I can only think of Hello World. Not a gaming magazine, but still.
I would argue that Scala drove Kotlin. And over the last 10 years at least, it's been Kotlin driving Java.

What I saw happen was Kotlin taking over the mantle of "better java" from Scala, and aiming for an 80/20 type language compared to Scala. And for the most part, it's those 80% that are finding their way into Java.
Everything needed for high performance was ratified in 2021, just two years after the base spec.

That's RVA22 and Vector 1.0.

Low-end hardware implementing the spec already exists (Milk-V Jupiter). High end implementations (e.g. Ventana Veyron V2, designed for servers) will be deployed in 2025.
A Forgotten Manifesto: Mozilla Betrays Its Own Values on Open Source AI
Exactly! When your savings are 2-3x per unit, you have more room in the budget to over-provision. Now you have increased headroom for growth, and improved redundancy.
Maybe a better question: What questions could be answered with your service, that could not be answered with just cURL + Git + the GitHub API?
I have also written about my "worklog" [1], what I call my own changelog at work.

It's a simple Markdown file, versioned on my own Gitea instance.

The worklog contains all notes about everything I spend my time at work. That is project work, meetings, discussions, todos, long-term todos and investigations, and anything I need to be able to check back later.

I cannot count the number of times I went back and searched this file to find information that others forgot, the meeting notes did not capture, and in general things that I need.

Keeping this kind of log makes performance reviews trivial too. Just scroll through the worklog for the period you want, copy paste bullet points, and then spend some time cleaning them up and rewriting them as necessary.

If anyone does not keep a worklog, start now :)

1. https://www.lambrospetrou.com/articles/the-worklog-format-1/
From: James Guthrie interview

> Another piece that worked better than expected was the telephone operator. Roger was keen to illustrate the personal disconnect of being on the road. We were in L.A. at Producer’s Workshop so I phoned my neighbour, Chris Fitzmorris in London. He had the keys to my flat and I asked him to go there and said that I would call him through an operator. “No matter how many times I call”, I said, “just pick up the phone, say ‘Hello’, let the operator speak and then hang up”. I placed a telephone in a soundproof area, got on to an extension phone and started recording to ¼” tape. It took a couple of operators – the first 2 were a bit abrupt, but the 3rd was perfect. I told her that I wanted to make a collect call to Mrs. Floyd. “Who’s calling?” she asked. “Mr. Floyd”, I replied. Chris’s timing was terrific, over and over he would hang up just at the right moment and she became genuinely concerned. “Is there supposed to be someone there besides your wife?” I was playing her along saying things like “No! I don’t know who that is!” “What’s going on?” and she would try the call again. Unwittingly, she was helping to tell the story. Afterwards I went through the ¼” and edited my voice out, just leaving her and Chris. I sometimes wonder if she ever heard herself on the record.

Source: https://www.brain-damage.co.uk/other-related-interviews/jame...
There's no ethical consumption under capitalism.
Good comment! I see all these arguments in this post, and then think of the most talented journeyman engineer I know who just walked away from Google because he knew both AI was coming for his and coworkers jobs and he wasn’t good enough to be past the line where that wouldn’t matter. Everyone might be the next 10x engineer and be ok… but a lot aren’t.
There is no stdlib. Its a very specific proprietary purpose built language thats been around since like the 90s. It has a super limit set of standard functions that operate on an underlying proprietary data structure and every thing else is just a thin vaneer over a very limited set of c functions.
> surely banning social media or not moderating content aren't options

Why not? What good has social media done that can't be accomplished in some other way, when weighed against the clear downsides?

That's an honest question, I'm probably missing lots.
Rss is pretty light. Even if you say it's too much to be re-sending, you could remove the content from the rss feed (so they need to click through to read it), which would shrink the feed size massively. Alternatively, remove old posts. Or do both.

Hopefully you don't have some expensive code generating the feed on the fly, so processing overhead is negligible. But if it's not, cache the result and reset the cache every time you post.

Surely this is easier than spending the effort and emotional bandwidth to care about this issue?

I might be wrong here, but this feels more emotionally driven ("someone is wrong on the internet") than practical.
Being good at both is twice the work, because even if some concepts translate well, IME people won't hire someone based on that. "Oh you have experience with deploying RabbitMQ but not AWS SQS? Sorry, we're looking for someone more qualified."
Intelligence is an egoistic concept, almost by definition. Something intelligent is something that acts like us.

And intelligence can be turned into a scientific concept, more or less. It is no to the case for consciousness, it is a purely subjective experience, you can only guess (not prove) that something else is conscious based subjective criteria.

Is the sun intelligent and sentient? Today, we don't think so, but some people think is. And it was likely more common in ancient times.

Now we associate intelligence with brains and we tend to give intelligence to things with brains, like elephants and apes, but not stars, and not computers. But maybe that's just because they have organs similar to humans.
I think you just accept the risk, same as not doing code review. If you're doing something Serious™ then you follow the serious rules to protect your serious business. If it doesn't actually matter that much if prod goes down or you release a critical vulnerability or leak client data or whatever, then you accept the risk. It's cheaper to push out code quickly and cleanup the mess as long as stakeholders and investors are happy.
As with everything, "it depends."

It's entirely possible to have unique branding, yet maintain consistency with standard Apple UX.

Just takes flexibility and compromise. Many designers aren't so good at that.

On a related note, did you ever try out Kai's Power Tools[0]? Now that was a nonstandard UX. Some folks really loved it, but it was an acquired taste.

[0] https://mprove.de/script/99/kai/2Software.html
> On the other hand, a business of just about any size that has any reasonable amount of hosting is better off with their own systems when it comes purely to cost

From a cost PoV, sure, but when you're taking money out of capex it represents a big hit to the cash flow, while taking out twice that amount from opex has a lower impact on the company finances.
> AWS infrastructure is vastly more secure than almost all company data centers

Secure in what terms? Security is always about a threat model and trade-offs. There's no absolute, objective term of "security".

> AWS has a rule that the same person cannot have logical access and physical access to the same storage device.

Any promises they make aren't worth anything unless there's contractually-stipulated damages that AWS should pay in case of breach, those damages actually corresponding to the costs of said breach for the customer, and a history of actually paying out said damages without shenanigans. They've already got a track record of lying on their status pages, so it doesn't bode well.

But I'm actually wondering what this specific rule even tries to defend against? You presumably care about data protection, so logical access is what matters. Physical access seems completely irrelevant no?

> Very few companies have enough IT people to have this rule

Maybe, but that doesn't actually mitigate anything from the company's perspective? The company itself would still be in the same position, aka not enough people to reliably separate responsibilities. Just that instead of those responsibilities being physical, they now happen inside the AWS console.

> The AWS KMS is vastly more secure than what almost all companies are doing.

See first point about security. Secure against what - what's the threat model you're trying to protect against by using KMS?

But I'm not necessarily denying that (at least some) AWS services are very good. Question is, is that "goodness" required for your use-case, is it enough to overcome its associated downsides, and is the overall cost worth it?

A pragmatic approach would be to evaluate every component on its merits and fitness to the problem at hand instead of going all in, one way or another.
I understand the point of your comment—why do Germans who see few migrants care about it more than Germans who see many migrants?

The answer is that parts of the country that have enjoyed homogeneity the longest are the most upset about having that homogeneity violated. If one lives in Berlin, which has been heteregenous for a long time, the introduction of mass migration was less upsetting. If one lives in a village or small city that was 100% German for a long time, and now has the pleasure of “welcoming” strangers with a higher crime rate, alien social customs, and different appearance—your response is different.
The AI appeared to be absolutely right, however. There wasn’t a single round where Fury landed more punches.
I don’t have nearly so much in mine, but the motivations the same. There are certain tools I use all the time when I’m in the REPL, so I make it as comfy for myself as possible.
> All the pro-cloud talking points... don't persuade anyone with any real technical understanding

This is a very engineer-centric take. The cloud has some big advantages that are entirely non-technical:

- You don't need to pay for hardware upfront. This is critical for many early-stage startups, who have no real ability to predict CapEx until they find product/market fit.

- You have someone else to point the SOC2/HIPAA/etc auditors at. For anyone launching a company in a regulated space, being able to checkbox your entire infrastructure based on AWS/Azure/etc existing certifications is huge.
PID reuse is the classic example here. There is no neat solution other than process handles, which Unix/Linux does not historically have.
like terraform! isn't pulumi 100% better but there's no way out of terraform.
> People like Söder, who now want nuclear energy back, threatened to resign if the shutdown is delayed.

Hardly anybody would have considered Söder's resignment to be a threat. :-D Many Germans rather would have been happy if he had resigned.
I just wish it would be more widely available.

Anyone using GNUstep successfully?
I want to see an article like this, but written from a Fortune 500 CTO perspective

It seems like they all abandoned their VMware farms or physical server farms for Azure (they love Microsoft).

Are they actually saving money? Are things faster? How's performance? What was the re-training/hiring like?

In one case I know we got rid of our old database greybeards and replaced them with "DevOps" people that knew nothing about performance etc

And the developers (and many of the admins) we had knew nothing about hardware or anything so keeping the physical hardware around probably wouldn't have made sense anyways
Sure but then you at least have basis to complain instead of “that’s just how the game is now.”
It's basically Kerberos and an LDAP server, which are technologies old and reliable as dirt.

This sort of FUD is why people needlessly spend so much money on cloud.
Look at Wikiquote for some of St Augustines most well known quotes with what I am saying in mind- if you can’t see a dozen examples you’re not going to agree with a specific one I point out either. I am refusing to give a specific example for a reason- you will almost certainly disagree immediately with the specific example - because they are written with an alternate interpretation possible on purpose - and then think my whole premise must be wrong as a result without looking at the bigger picture, and seeing how often this plausibly deniable concept keeps coming up.

> You are suggesting for example that there is no redemption or afterlife

I am suggesting no such thing, only that dwelling on this issue is to miss the point, and even worrying about it would be an obstacle. One must deeply feel these ideas and practice accordingly to follow this spiritual path- even getting stuck on arguing that they are true would be an obstacle to that.
I didn't say it's rocket science, nor that it's impossible to do without having practical server experience, only that it's more difficult.

Take disks, for example. Most cloud-native devs I've worked with have no clue what IOPS are. If you saturate your disk, that's likely to cause knock-on effects like increased CPU utilization from IOWAIT, and since "CPU is high" is pretty easy to understand for anyone, the seemingly obvious solution is to get a bigger instance, which depending on the application, may inadvertently solve the problem. For RDBMS, a larger instance means a bigger buffer pool / shared buffers, which means fewer disk reads. Problem solved, even though actually solving the root cause would've cost 1/10th or less the cost of bumping up the entire instance.
> The cloud is someone else’s computer

Isn’t it more like leasing in a public property? Meaning it is yours as long as you are paying the lease? Analogous to renting an apartment instead of owning a condo?
Being cloud compatible (packaged well) can be as important as being cloud-agnostic (work on any cloud).

Too many projects become
beholden to one cloud.
GP didn't talk about killing
Okay. If the call was from within the UK then I think the 0441 code would have been Swansea, but that would have required 3 numbers being cut from the middle.
Get two servers (or three, etc)?
They removed a backend. Rustls and QUIC are still an option
Wouldn't it make more sense to do a massive refactoring given the situation is as you described? And, if needed, rewrite to Kotlin later. This would just cause the same problems to be reproduced in a different language.
Three Bricklayers parable and origins
Plans to build the first grid-scale fusion power plant in Virginia
Using a commercial cloud provider only cements understaffing in, in too many cases.
My comment has nothing to do with that.

My point is that EMF has shown affects on people, but we know almost nothing about the implications ("unknown clinical significance").

https://jamanetwork.com/journals/jama/fullarticle/645813
KiCad 9.0.0 Features
> but where do you draw the line?

How about grouping the jobs into two categories: A) Causes PTSD and B) Doesn't cause PTSD

If a job as a constantly high percentage of people ending up with PTSD, then they aren't equipped well enough to handle it, by the company who employs them.
I missed the cost of the network gear.
The confusion is around space complexity vs auxiliary space complexity (extra space).

space complexity is O(n) but auxiliary space complexity uses Theta for notation instead.

But people aren't too picky on the notation and usually say something like "O(1) extra space" instead of using theta.

https://en.m.wikipedia.org/wiki/Space_complexity
Wins? What does this mean? Do you have any results? I see the claims that Claude is better for coding a lot but using it and using Gemini 2.0 flash and o1 and it sure doesn't seem like it.
You are getting the details wrong (I was there). This was the single DEX limit, and Google would just bump it in AOSP every time their own apps hit it (as their apps didn't support older OS versions). FB at the time was supporting back to froyo, which had a much lower limit than "modern" apps needed. See this note for more info: https://www.facebook.com/notes/10158791578712200/
In the modern era, most of the things the commons come across have been "sanitized"; we do a really good job of hiding all the unpleasant things. Of course, this means modern day commons have a fairly skewed "sanitized" impression of reality who will get shocked awake if or when they see what is usually hidden (eg: butchering of food animals).

That you insist on contriving one zany situation after another instead of just admitting that people today are detached from reality illustrates my point rather ironically.

Whether it's butchering animals or mining rare earths or whatever else, there's a lot of disturbing facets to reality that most people are blissfully unaware of. Ignorance is bliss.
Dynamic Video Chunking: Scene Detection
A boy in north Georgia went for a walk down the road, lands his mother in jail
It's also the type of gore that matters. Some of the worst stuff I've seen wasn't the worst because of the visuals, but because of the audio. Hearing people begging for their life while being executed surely would feel different to even a surgeon who might be used to digging around in people's bodies.