porpoisemonkey

> I have to assume they made similarly confused choices with their Consul and Nomad setups as well.

I found their explanation about why they wrote Corrosion confusing since most Hashicorp services (including Consul) already support data sync via a gossip-based protocol (Serf).

It doesn't sound like this would have helped in this particular case since they were unable to contact the customer.

To reiterate half of what you've said, but maybe in a slightly different way, the defense security clearance process is designed to determine how likely you are to be incentivized or coerced into revealing classified information.

The point of the deep dive is not to prove you've always been an upstanding citizen, but to look for factors that make you an easier target for foreign intelligence services such as:

1. Do you have any financial problems that could make you easier to buy off? (Bad credit, gambling problems)

2. Do you have any (real or perceived) addictions that might impair your judgement or can be leveraged against you? (drugs and DUIs)

3. Are you currently attempting to hide any criminal activity that you could be blackmailed with?

4. Do you have any sensitive foreign connections or other possible allegiances?

Also not a biologist - just an enthusiastic layman.

The Soleus muscle (Soleal pump) is partially responsible for helping to return blood from your legs back up to your heart while upright. [1] This is a fairly critical process so it would make sense that it would be able to metabolize multiple energy sources.

[1] https://www.physio-pedia.com/Soleus

That’s an unfortunate situation, but I’m not surprised to hear this.

I worked in a single-location pizza shop when I was in high school and there is a lot more customer-benefitting coordination going on between the inside and the drivers than may be obvious. (These applied to my shop; I’m not sure if the big chains actually do this kind of stuff.)

* Most shops have a delivery radius of less than 10 miles and it’s pretty impressive how detailed a driver’s address knowledge of the area can get after just a few months.

* The people taking orders over the phone were often delivery drivers waiting between runs and will clarify addresses and locations as well as delivery instructions (drop off locations, gate codes, etc.).

* The inside crew will typically batch deliveries headed for the same area and time the oven to get all the food out around the same time.

* If for any reason a delivery can’t be made (car accident, flat tire, made a wrong delivery and no longer have the right food for the order, etc.) the driver will call the shop which will remake the order and send it with either another driver or an inside crew member.

Not the OP, but in one of the smaller companies (~30 people/~12 engineers) you describe that's currently looking for a tool like this.

I can't actually see the pricing because it's behind a nebulous "contact us" link, but if this is more than about $5/user/month I would definitely balk at the price.

Larger companies already have dedicated platform and tooling teams with enough technical talent and bandwidth to build this sort of solution (I've seen something eerily similar to this at a previous employer that had about ~75 engineers). IMHO it's the small companies that need off the shelf incident management because they have very few people to dedicate to solving this problem and need a way to manage the communication chaos that incidents can cause.

> I hope AWS mitigated this metadata endpoint weakness by now.

AWS offers a version 2 of the Instance Metadata Service (IMDS) API that includes mitigations for many common SSRF attacks.

IIRC both IMDSv1 and IMDSv2 are turned on by default and it's a recommended AWS best practice to disable IMDSv1 when launching new instances.

https://aws.amazon.com/blogs/security/defense-in-depth-open-...

Is this universally true? In the US it appears that it just means there's more restrictions to what types of jobs you can/can't do and the hours you're allowed to work, but AFAIK it's not actually illegal to work as a child.

https://www.dol.gov/agencies/whd/YouthRules/young-workers/no...

> Also, iCloud photos are not encrypted[2].

According to the table on the second link iCloud Photos are encrypted on the server (at rest). Am I missing something?

> Indeed, up until reading these comments I had no idea that iCloud wasn’t encrypted.

iCloud data is encrypted at rest (edit: except for Mail apparently). The type of encryption (service or end-to-end [E2E]) is specified here: https://support.apple.com/en-us/HT202303

It can be argued that from a user's viewpoint not having E2E encryption is tantamount to not having encryption at all, but from a technical standpoint the data is encrypted.

There's a better explanation of the differences here: https://svelte.dev/blog/svelte-3-rethinking-reactivity

  Svelte is a component framework — like React or Vue — but with an important difference. Traditional frameworks allow you to write declarative state-driven code, but there's a penalty: the browser must do extra work to convert those declarative structures into DOM operations, using techniques like that eat into your frame budget and tax the garbage collector.

  Instead, Svelte runs at build time, converting your components into highly efficient imperative code that surgically updates the DOM. As a result, you're able to write ambitious applications with excellent performance characteristics.

I'd like to see them make their customers whole by forcing them to refund the monthly payment for every month that a customer with an "unlimited" plan was capped or throttled.

I think that people perceive being on call and having to work with messy legacy infrastructure as a restriction on their personal freedom and an anti-perk. We also don't compensate well for oncall shifts so that might be part of the reason that people see it as a lesser form of work and not as a special status that's only given to the best engineers. At other organizations it may be different... I hear FAANG companies compensate their on call shifts quite well (typically a percentage of base salary banded by SLA)

> I can't imagine that responsibility for MY code in production (and delivery of the said code to production) lies on a different team/department that are possibly not even on the same floor/building I'm at.

I recently did some interviews with our devs to find out what features we could add to our platform that would provide them with value. The result was interesting and I found that people typically fall into one of two camps: 1) I want to know everything about my deployed service and have tools that alert me and allow me to intervene, or 2) I don't want to know anything about the deployed service runtime and expect operations to handle my issues and alert me when there's a problem.

It sounds like you might be in the former. =)

I recently transferred as a developer to a development operations role at a medium-sized company. This article exactly describes my experience - the main focus of the ops team seems to be on build, deployment and monitoring technologies focused on a migration towards containerization running on AWS.

Code and tooling is built on a "what works" basis and no particular attention seems to be paid to the overall design of the software or testing (likely due to a real or perceived lack of time). On-call rotations (and how to eliminate work for them) is the hot button discussion topic.

The #1 question I get asked by the developers is "Did you really want to transfer from development to ops?" which me think that a lot of developers look down on operations roles and see it as a demotion. I find that quite odd given that 1) ops keeps the product up and the money coming in with relatively little headcount and 2) most of the people working on our ops teams have a formal education in software engineering.

I spent a few minutes of DuckDuckGo'ing but couldn't find anything... does anyone know if there's a way to see how/if these fines are actually being paid?

UPDATE: Looks like most fines are paid to the US Treasury. [1][2]

There seems to be some info on this page, but it appears to be only for sanctions violations (OFAC): https://www.treasury.gov/resource-center/sanctions/CivPen/Pa...

[1] https://minnesota.cbslocal.com/2015/11/05/good-question-wher...

[2] https://www.sfgate.com/business/networth/article/When-govern...

If you get caught for speeding in Michigan, the Golden rule is to always appeal the ticket. Unless you've been excessively reckless they'll typically knock it down to "impeding traffic" which carries a slightly higher fine (depending on your speed) but is not a moving violation and doesn't get reported to insurance. [1]

> Impeding traffic is a civil infraction punishable by a fine. It is also considered a non-moving violation that does not add any points to the offender's Michigan driving record. Non-moving violations are not reported to the Michigan Secretary of State and are less likely to be detected by automobile insurance companies as a basis to raise rates. Municipal attorneys will frequently offer to reduce speeding tickets to an impeding traffic charge which avoids points on the driver's record but usually results in a bigger fine.

It's a pure money making scheme.

[1] https://www.monroecountylawyers.com/blog/2018/12/what-is-imp...

It looks like most 5% cash back cards have a hard limit ($1500/quarter seems to be common limit) to the amount you can get back and offer an "unlimited" cash back at a rate at or lower than 2%.

https://www.magnifymoney.com/blog/best-of/10-best-5-cash-bac...

This way they'll make money after the limit takes effect. My assumption is that they are hoping the consumer will forget there's a hard limit to the amount they can save and always go with their "5% cash back card" when making purchases.

Anyone here a lawyer? I'm wondering if you submit a request to opt-out of the settlement if you could re-litigate a new settlement in the future?

It's hard to gauge, but...

* Before the accident the nerve was 100% (undamaged)

* Immediately after it was 0% (could not feel anything - including the sensation of heat)

* 1 year after ~20% (could feel the sensation of heat and firm presses)

* 2 years to now ~70% (could feel heat and soft presses)

I still only type with 7 of 8 fingers on the keyboard because I have a hard time determining the location of that one finger.

Might have been a neuragen tube.

I had one of these placed in my hand after I severed the nerves in one of my fingers... It took about 1 year before I regained any feeling and 2 before I regained maximum nerve use.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2920394/

More context: They use rack-and-pinion railways in Switzerland [0][1] to accommodate the steep grades.

> The trains are fitted with one or more cog wheels or pinions that mesh with this rack rail. This allows the trains to operate on steep grades above around 7 to 10%, which is the maximum for friction-based rail. [0]

[0] https://en.m.wikipedia.org/wiki/Rack_railway

[1] https://en.m.wikipedia.org/wiki/Category:Rack_railways_of_Sw...

I've recently contacted all of the major airlines that fly the 737 Max as well as my congressional representatives and the FAA to let them know I have serious reservations about a software fix to the aircraft.

If this issue is concerning to you I'd recommend you do the same. To make it easier, I've put the links to all the contact sites below.

United Airlines https://www.united.com/ual/en/us/customer/customercare

Southwest Airlines https://www.southwest.com/contact-us/contact-us.html

American Airlines https://www.aa.com/contact/forms?topic=CR#/

Find your Congressional representatives https://www.house.gov/representatives/find-your-representati...

FAA https://hotline.faa.gov/

There are already treatments like this.

When I was in high school I started a minor computer repair business. One of my customers was a treatment service where they would place electrodes on the head of an individual to measure certain brainwave activity. The electrodes were connected through a device back to a laptop which was playing a video.

I'm explaining it very imprecisely (I'm an expert by no means) but the way it worked is that the video would only play when the measured brainwaves met the pattern(s) established for concentration. The idea being that the person would want the video to play continuously (without pausing or chopping) so badly that their brain would train itself to enter into the "concentrating" brainwave pattern.

I'm not sure what the efficacy of the solution is but the idea was interesting at the time.

UPDATE: Just looked it up and the term they use for this is "neurofeedback" training.

Looks like there are significant criticisms to the approach and study of this treatment so maybe it isn't a viable approach after all.

https://en.m.wikipedia.org/wiki/Neurofeedback

> Similar to how that Tesla car decapitated it's driver a few years ago because it decided a truck trailer was empty sky.

This isn't that different from bad biological sensory input that causes a person to think they are stepping on the brake when they're actually stepping on the acceleration pedal. The main differences being that 1) human beings tend to be able to respond to a wider range of scenarios than software and attempt creative problem solving and 2) we have significantly more sensory inputs and they tend to be quite reliable.

> I'm inclined to put at least half the blame on the people voting with their wallets here.

I don't agree. The sheer volume of information that's available in the public space and the size and scope of large corporations makes "voting with their wallets" impractical.

It's along the same lines but DNA sequencing has very serious consequences in countries that have a history of strict filial piety such as China.

In these countries a family is not just the basis for raising children - families can often act as a sort of "corporation" where everyone is cooperating to enhance the wealth and future prospects of the group.

There was a lot of confusion around family relationships during WWII with the occupation of the Japanese and again after WWII with the Chinese Communist Revolution as children were adopted when their parents went missing or were killed in the war.

If people inside a family are found not to be related to one another there's a serious potential for the social fabric to start breaking down.

Collection of evidence is also another likely place to make a mistake. The issue is that a non-pristine sample taken from a public place (like a crime scene) may have multiple DNA profiles represented in it. I'm not highly familiar with the technology but I've read that techniques like PCR that "amplify" the DNA collected from the original sample by synthesizing copies of the DNA can further exacerbate the issue.

> One of the biggest strengths of PCR(e) for DNA typing is the degree to which DNA can be amplified. Starting with a single DNA molecule, millions or billions of DNA molecules can be synthesized after 32 cycles of amplification. This level of sensitivity allows scientists to extract and amplify DNA from minute or degraded samples and obtain useful DNA profiles. In this context, the sensitive nature of PCR works in a lab's favor, but it can cause problems if great care is not taken to avoid contaminating the reaction with exogenous DNA.

https://www.promega.com/~/media/Files/Resources/Profiles%20I...

> Because extremely small samples of DNA can be used as evidence, greater attention to contamination issues is necessary when identifying, collecting, and preserving DNA evidence. DNA evidence can be contaminated when DNA from another source gets mixed with DNA relevant to the case.

https://www.ncjrs.gov/nij/DNAbro/evi.html

I'm not sure I understand the reference since I don't comment on or look at much blockchain related articles here on HN. (Most of my research has been tangential to my former employment as a web security developer.)

Is there a technical reason that a blockchain isn't suitable as one part of a possible solution to improving the speed, reliability and security of voting in the United States? My understanding of the blockchain concept is that what it provides is a proof-of-effort consensus-based system for creating an open and auditable ledger for transactions which would seem to fit the requirement of having an open and verifiable voting ledger for ballot initiatives.

One option would be to open up more infrastructure initiatives to direct democracy. Arguably the most heavily invested body to getting the subways improved is the people who actually live in New York and use them.

Making this feasible would require a more efficient platform for soliciting ideas from citizens, voting on them and tracking overall execution which doesn't exist today. This isn't, however, an intractable problem - there are distributed trust systems (based on so-called "trust algorithms") that are being designed today such as Ethereum.