jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
I work developing an internal company app that's already a little trigger-happy on the e-mail alerts (which are not at all life-and-death) and a lot of it boils down to an organizational/political malaise.

The most common problem is when the people setting alert policies are divorced from the people receiving them. The managers have no direct incentive to keep the alerts sane or moderated. On an individual basis, every alert that exists shifts potential blame from the manager to the employee. ("It's all the employee's fault for not following the alerts.")

In this way, over-alerting is often "automated micromanagement", but without even the feedback-loop and mutual-accountability of actual micromanagement. Until the people acting on alerts have some feedback into the alert-configuring process, the problem will continue.

Another dysfunction is when people ask for alerts purely for an independent paper trail, either because they're paranoid about assigning blame, or because they want to use their e-mail client as a half-assed searchable database.

P.S.: We've already had managers asking us if we could have e-mail alerts that users must confirm receipt of by visiting the website... and for the site to continuously e-mail followups until they do. Meanwhile, the IT staff have their own horror-stories of ancient inboxes grown too large to reliably read data from.
Too late, someone already did that and measured the overhead of up to five interpretations layers: "Scheme benchmarking with a meta-circular" interpreter http://yinwang0.wordpress.com/2013/11/04/scheme-benchmarking... Archive: http://web.archive.org/web/20140105145428/https://yinwang0.w... HN discussion: https://news.ycombinator.com/item?id=7045734 (25 points, 443 days ago, 9 comments) (The main critic is that it should compare more scheme implementations.)

Many modern schemes (and similar languages like Racket and Clojure) have many optimization, use bytecode and jit compiling, so the abstraction overhead is not as big as in the naive versions. And you get nice code and powerful macros in exchange.

IIRC Stalin is faster than C in some benchmarks, but the compiling time is very big. "Stalin: a global optimizing compiler for Scheme" https://github.com/barak/stalin HN discussion: https://news.ycombinator.com/item?id=8214343 (85 points, 220 days ago, 70 comments)
Microsoft ate IBM and others from the bottom, because the margins were too low on PC vs mainframe and minis. And now, you're suggesting Microsoft should accept being eaten from the bottom because the margins are too low (I guess that's what you're arguing). Classic innovator's dilemma scenario.

Those who don't learn from history will repeat it. Even those who made the history in question.
How many functional programming languages do you cross of the list of functional programming languages if you make that claim? At the very least anything Lisp related, all the ML languages as well. You are pretty much left with Miranda, Haskell, and a few related languages.
Great to see article putting it all together. Also going to be great to send this to people who think that using AWS cloud means that you can skip hiring people with skills in systems administration.
don't forget Amazon (for shipping).
I'm not coding because there are more important things to be done. For example:
- I have to groom tasks and interfaces across team boundaries.
- I have to review others code.
- I have to help someone with their problem so they can proceed and deliver.
- I have to onboard.
- I have to make sure processes are working well.
- I have to make sure the team works well.
- and so on and on...

Some programmers are much more valuable to their employer than just for the code they write. You don’t become a 10x engineer (if such thing even exist) by writing 10x more code but you can enable others and make sure things work and easily deliver multiple times more value.

Good managers understand this very well.
How is that K8s fault?
This is having a knock on effect on HEROKU deployments with custom buildpacks, as I believe the deployer fetches the buildpack from github.
To be considered an act of war the USA should have something to gain such as oil or destroying a small communist coutry.
The Aluminum-Air batteries are rechargeable, but they wear out faster than
lithium-ion batteries. Eventually, both Aluminum-Air and Lithium-Ion batteries
will wear out and need to be replaced, but the Aluminum-Air batteries need
to be replaced more often since they wear out faster.

From the ComputerWorld article:

> "The recharge of the aluminum-air [battery] is user-friendly and consists of refilling water and replacing aluminum when depleted," a spokesperson for Alcoa said in an email response to Computerworld. "The water refill is an easy task that can be performed by using tap water on average every one or two months according to mileage driven." The battery's aluminum replacement is also a "quick operation" that will be performed at periodic maintenance checks at a local service station on average once a year according to mileage driven, the spokesperson added.
That could be a good argument for Facebook explaining why they ask for a permission before prompting, as many apps do. but it’s hard to believe this is their reasoning when they’ve strenuously avoided both asking permission and honestly explaining what they intend to use it for. They’ve had years to be more transparent and have presumably thought about why they’ve spent millions fighting it.
Programming, maths & science, etc. are acquired tastes. Not things you can enjoy from the get-go. I think many friends and family of mine would make far better programmers than I, or great scientists, but they've never had the need to venture out of their comfort zone to try something new. The age of constant distractions and an easy lifestyle is not conducive to breaking out of the norm.
The things I enjoy most took me years of studying.
That depends by what metric you measure the cost. It may be the cheapest up front in terms of dollars, but hideously expensive in terms of lost effectiveness of employees.
Given you mentioned Smalltalk, you might be interested in this LtU post: http://lambda-the-ultimate.org/node/2606
V8 needs to be as fast as possible because the running time is dominated by processing.

Python only needs to be fast enough because the running time of a typical program is largely affected by i/o time.
Also true, however I think a basic ranking algorithm should still be fine for most cases if you have 100% spam eradication. Good content left over should bubble to the top.

I tried building a small search engine with a very basic algorithm and it worked very well for 90% of searches.

I agree with you in part but I also believe if you got the others 100% right you would have a respectable engine by itself.
What makes this quote really interesting is that Wirth was Martin Odersky's (guy who designed Scala) PhD advisor!
I don't necessarily disagree with any of that, but I think it's a delicate balance.

If two people cancel one morning because, I don't know, a storm knocked down a bunch of trees in their area, and you've tried your future appointments list, do you now have to phone the other six patients and ask them to reschedule too? Or do you have a nurse go out and find two people off the street who want a COVID vaccine, and bring them to the office asap? Remember that the vaccines have a limited shelf-life even in the freezer, and that the ultimate goal is to get shots into arms as quickly as possible.

You can optimize for speed, or you can optimize for equity. I don't think we should throw out equity, but we should lean towards speed.
the main point is that people think they way they are comfortable with is what's saving their money and freedom, while its not
Reminds me why I trust Go's mod and dependency management system so much. This type of attack is just not possible.
> “But nobody writes production applications with SQLite, right?"

We've been doing it for 5 years now. Basic tricks we employ are:

Use PRAGMA user_version for purposes of managing automatic migrations, a. la. Entity Framework. This means you can actually do one better than Microsoft's approach, because you don't need a special unicorn table to store migration info. A simple integer compared with your latest integer and executing SQL in the range is all it takes.

Use PRAGMA synchronous=NORMAL alongside PRAGMA journal_mode=WAL for maximum throughput while supporting most reasonable IT recovery concerns. If you are running your SQLite application on a VM somewhere and have RTO which is satisfied by periodic hot snapshots (which WAL is quite friendly to), this is a more than ideal way to manage recovery of all business data while also giving good throughput to writers. If you are more paranoid than we are, then you can do FULL synchronous for a moderate performance penalty. This would be more for situations where your RTO requires the exact state of the system be recoverable the moment it lost power. We can afford to lose the last few minutes of work without anyone getting yelled at. Some modern virtualization technologies do help a lot in this regard. Running bare metal you need to be a little more careful.

For development & troubleshooting, being able to copy a .db file (even while its in use) is tremendously powerful. I can easily patch up a QA database I mangled with a bad migrator in 5 minutes by stopping the service, pulling the .db local, editing, and pushing it back up. We can also ask our customers to zip up their entire db folder so we can troubleshoot the entire system state.

Being able to use SQLite as our exclusive data store also meant that our software delivery process could be trivialized. We use zero external hosts, even localhost, for our application to be installed or started. We don't even require a runtime exist on the base operating system. Unzip our latest release build to a blank Win2019 server, sc.exe the binary path, net start the service, and it just works. Anyone can deploy our software because it's literally that simple. We didn't even bother to write a script because its a bigger pain in the ass to set powershell execution mode.

So, its not just about the core data storage, but also about the higher-order implications of choosing to use a database solution that can be wholly embedded within your application. Because of decisions like these, we don't have to screw around with things like Docker or Kubernetes.
I have no source. Idk if it actually happens that "ordinary" people go to jail for being bad at filling out taxes. But people think it happens, people worry it happens and that's completely fair.
I thought most "netbooks" had Intel Atom processors?
All respect? Sheesh. He still makes great content even if you don't agree with that single video.
Somehow I had missed hearing of Fravia. For the curious, Wikipedia has a good article on him: http://en.wikipedia.org/wiki/Fravia
Does this mean if a sports fan comes into my forum about programming and starts making sports threads, I cannot moderate that away, or else face legal action? Does it also mean HN could face legal action according to its current rule set?
Which makes zero difference in principle.
I ran through a few trial periods of Tidal and found it a great high-quality alternative to Spotify. Glad to see it gaining ground/support.
Based on the way things went down people took the second tweet as a “don’t come to school tomorrow if you know what I mean” type of message.
> Those correspondents are middle-men between him and his audience, that get to choose how to portray what he actually said.

This is true but also a bit of a reach. Firstly, whatever they report, people can just go straight to the Whitehouse Newsroom website and confirm and get the news straight from the horse’s mouth.

Secondly, of the news orgs, several are legally bound to report neutrally (BBC), several just will because that’s their business model (AP, Reuters), and then there’s enough there with polar opposite agendas that you’ll be able to determine an accurate picture pretty quickly.
> For security purposes, we recommend you include these dependencies with your app, rather than trusting a public CDN. (Although we do love jsDelivr! It is free, open source, and give us download stats!)

Isn't this the point of subresource integrity?
You are not going to change the world with this but you can contribute to neocities to promote an alternative web :

https://neocities.org/

https://github.com/neocities/neocities
Thanks.. that was quite entertaining, and eye opening.
Lol read this which was just posted today and makes my claims seem stupid:https://threatpost.com/firefox-chrome-edge-bugs-system-hijac...

Well it still may be harder to attack this than Flash, but still...
I think this matter has been conversated enough in HN.

I don't believe this subject is gratifying majority's intellectual curiosity.

It might be provoking lots of feelings, but this is not Feelings News nor Moral News but Hacker News.

I'm not saying anyone has been posting badly. I'm just saying that I've seen these "TSA sexual assault" twice now, and I don't think any new ideas will come along third time.
> Does a visit to the gynecologist count as sexual assault. Of course not, but why? Because, implicitly or explicitly, the patient has consented to being examined.

In accordance with a medically necessitated test. If a gynecologist is sticking a finger in a womans vagina, whether s/he has implicit or explicit consent is sexual assault if performed under misinformation.

If a doctor gropes my testicles or sticks a finger up my ass without medical justification for doing so, it is sexual asault.

Given that the 'pat down' is the least effective screening procedure in an airport, it has very little reason to be performed for the reasons given. The real reason the pat downs are performed is to find drugs concealed on the body.

Why is a pat down used, when a dog can more easily be used with less harassment of passengers and more verifiability in courts. Bloodhound evidence is permissible in all courts (IIRC) generally without any question because of the safe guards. The bloodhound will detect if you have an illicit substance on you, even if it is in an unverifiable quantity by an officer. If you aren't actually carrying, you won't be arrested as you're not prosecutable. So why isn't this used? Mostly because a bloodhound isn't intimidating to people who know they won't be busted.

Airline security is designed to add pressure, to make people feel nervous because people with a reason to be nervous simply walking past an officer will be panicking. This allows them to catch all the one-time mules who are doing it out of desperation, it may also work on amateur (AKA idiot) terrorists.

However, as we can see the 9/11 terrorists all managed to board a plane without panicking or looking suspicious, because they are all believed to have received paramilitary or military training. These trainings inevitably involve keeping calm under duress. Normally military training involves mock interrogations to train the soldier to withstand questioning and thus keep them calm about the risk of being questioned.
It could be worse, at least the team you're on is succeeding. I'm in a situation where I'm a silent investor, the technical people are not completing anything, the CEO is not selling anything (he has TONS of stuff going on, costing 10 to 30 thousand dollars per month at least, but the results are damn near zero), and it seems they have stopped responding to my emails.

So, on the bright side, it could be worse, at least you're not losing money.
Which others? Give some examples.

Gmail won't. Hotmail won't. Yahoo won't. In fact I can't think of a single authenticating mail service that doesn't also validate authorization (e.g. you can only send as you).

Now maybe you're going to point out micro-mail servers, but that's kind of beside the point because very few other people share it with you. e.g. you used gmail as your example, but services like gmail aren't vulnerable to that.
I don't think he missed your point at all. Would you say that GCC as one of the debian apps others here have mentioned was less successful?

It arguably helps power Facebook, Ebay, Google, Amazon,... and any number of other of those sites you mentioned. Or perhaps Python? is it less successful?

Or perhaps you defined successful in terms of revenue only? In which case that's a very narrowly defined term and the case could be made that such a narrowly defined definition of success adds "zero additional value" to the conversation.
Just created a space for Android.

http://area51.stackexchange.com/proposals/7418/android

I just can't stop my android development craze and needless to say the official Android support community is on SO and just depends on questions tagged "Android" :(
Within 4 minutes you received the correct reply:

http://meta.stackoverflow.com/questions/54264/search-doesnt-...

"how" and "to" are stop words, so they're stripped from your search.

In the tag box on the create new question form it tells you to use the tag "bug":

http://meta.stackoverflow.com/questions/ask

I have no idea why editing your profile failed, but it works fine for me.

Your accounts were not automatically associated because Area 51 is new and does not auto-associate with the other sites yet.
>You can still use the password for your account to forge the sending address of another user in the domain.

Very few mail servers allow you to that. Once you add sender authentication, it generally comes with sender authorization.

>Besides, the fact that your domain requires a password is only meaningful to you

Almost all SMTP servers are locked down now, most requiring authentication. Those that aren't get blacklisted pretty quickly.

SPF tells you that the sender is authorized to send on behalf of that person.

It solves 99.9% of the issue.
This guy has done an admirable job of appropriating the visual style of Scott Hansen, of iso50.net / Tycho, who has been making design in a similar vein for many years.

Here are two designs I was immediately reminded of; both because of the style and, for these two in particular, the subject matter.

http://www.merchline.com/iso50/productdisplay.3969.p.htm /
http://www.merchline.com/iso50/categorydisplay.2586.c.htm

I enjoy Scott's work and have purchased a few of his posters. This one is my favorites:

http://blog.iso50.com/wp-content/uploads/2008/12/iso50-north...

Even further back in the aesthetic pedigree of this work you'll note similarities to the work of Shepard Fairey, who created the OBEY giant phenomenon and, more recently, the iconic, 3-color HOPE poster for Obama's presidential campaign.

http://en.wikipedia.org/wiki/Shepard_Fairey
Not just Firefox - all HTML 4 forms support only GET and POST (though XMLHttpRequest supports any method.) HTML 5 forms do support PUT and DELETE though not HEAD. (I think this is accurate. Corrections appreciated.)
This gave me a weird déjà vu of reading about some software that solves all the problems elegantly and performantly and that I've never otherwise seen and will forget in a day. The other software might've been a build system too.
Actually, all those things can be handled by a competent window manager. If you had the ability to have tags on your windows, and quickly change your view based on those tags, that would be Awesome.
We're not fighting back. The point of the quote is that power comes from the people. If the people don't give the tyrant anything then the tyrant is powerless. As long as the Tyrant knows that if he shoots at us, we shoot back, he can demand and demand and we give nothing and thus he becomes moot.

Same with the TSA. We need a 100% national opt-out day. Not scanners. I mean same statement as the guy made. EVERYONE. The airlines will go nuts as most their passengers will be missing from the flights. Or something to that extent. Its not fighting back, its just refusal to give them power. And I bet we can ask for refunds. Nowhere on the ticket does it say that a delay in the airport due to constitutional rights violations warrants a no-refund.

Just like with 9/11 now is the same issue and we must handle it as Americans, like we did threats before it. Never surrender even an ounce of freedom, they will take our freedom from our cold dead hands only.

I have to quote Franklin on this one "They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety."
This is exactly why I have a Scansnap (s1300) on my wish-list this december.
"Lifestyle management programmes which include sleep hygiene and care should be incorporated as a policy matter in the IT industry."

Yes, because adults need other adults to tell them when they should go to sleep..

All you really need is management that knows a thing or two about software engineering and a bit of a "don't worry, we'll fix it tomorrow, go home"-attitude. If you're a manager and your team is constantly stressed out, you should be fired immediately.
In the United States, this varies depending on the state.

As of January 1, 2007, 14 states and the District of Columbia ban underage consumption outright, 19 states do not specifically ban underage consumption, and an additional 17 states have family member and/or location exceptions to their underage consumption laws.

http://en.wikipedia.org/wiki/National_Minimum_Drinking_Age_A...
Friend comes over with content you don't have. 'Bout it without an API for additional sources.
saying "you're too young to have a valid opinion on this, come back when you're older" is a good example of ageist attitudes

its popularity here shows how endemic ageism is even on HN

of course designers and programmers in their teens have a lot to learn. so do designers and programmers in their 20s ... 30s ... 40s ... 50s ... that doesn't invalidate their opinions.

EDIT: and people downvoting this post is another example of ageist attitudes here :-)
This is a very, very deep topic.

Everything I know about web vulnerabilities in a sentence: User input cannot be trusted. Do I have room for two sentences? Assume every string in the application is user input unless you've got provable chain of custody back to God Almighty, who is the only entity I would trust to handle whitelisting correctly.

There is a regularly published list of the most common web vulnerabilities. Most have had well-understood fixes for years or decades, and will have much better developers than you or I shoot themselves in the foot today.

http://www.owasp.org/index.php/Top_10_2007

Happily, you can pick some of this up as you go along, because insecure web applications (three words which could be two words without compromising informational content) can still produce meaningful business results. Don't let this be the reason you don't write something, unless something is nuclear power plant control software or the like.
Given the project management triangle they kind of are - the goal should be to achieve the required defect rate at minimum maintenance cost. A lot of people talk as though more tests or more verification is always a good thing, but zero defects is usually not a business priority if it means slowing down feature work. So adding more different kinds of verification should be a last resort, only when you actually require a lower defect rate than you can achieve with one method alone - which is pretty rare IME.
I am still learning web dev but my guess would be that there probably just isn't a very big market for custom webdev agencies anymore, due to social media like Instagram and Facebook pages acting as de facto websites for many businesses, as well as generally most businesses being happy enough with a basic, and relatively inexpensive, website using a Wordpress templates (of which there are of course many to choose from). That's just my guess anyway.