jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Several points:

1) It feels like you are exaggerating population densities. Outside of some ultra high density areas in Manhattan, you aren't going to have 100,000 people in a few blocks. The density of most cities is about 3 to 4x that of suburbs, not orders of magnitude greater. (Note: I'm going off Bay Area data here).

2) Agreed on environmental costs not being accounted for. Developing suburbs would cost more if they were; how much I can't say.

3) On your thought experiment, here's something to think about: The entire world's population can fit in Texas (270,000 sq miles) at density levels found in SF neighborhoods. You'd need just over 3 Texases (or a Texas + Alaska) to do suburban density levels (~900,000 sq miles). But you would need about 19+ million sq miles for farming (russia + canada + us + china + brazil); in other words, the land use savings gained from going fully urban is a rounding error.

3a) On top of that, you already have to build out roads, wires, etc. to get to the farmland. When also given that the land everywhere can absorb some waste with little effect (septic tanks), it actually is efficient to spread the population more evenly throughout this hypothetical world.

4) Again the cost does matter. The interstate highway system has a lower cost per person and higher average utilization per person (defined as US residents) than San Francisco's Central subway does per person (SF residents). Ongoing maintenance still looks the same; San Francisco needs to spend about $51M a year on road maintenance. Sunnyvale is at $4.7M with a 6th of the population and a 3rd the density. There might be some resources saved in higher density, but something is dragging the per capita costs higher in highly dense areas.
Autocomplete and debugging with clojure works. The problem is most clojure developers don't use common java IDEs. So it appears like it doesn't work or exist. But recently there has been an explosion of plugins to help everyone that isn't familiar with emacs & slime.

Autocomplete:

http://stackoverflow.com/questions/4289480/how-to-do-automat...

Debugging:

http://clojure.org/getting_started

Plugins:

https://github.com/swannodette/textmate-clojure

http://code.google.com/p/counterclockwise/

http://plugins.intellij.net/plugin/?id=4050

Options:

[emacs is too hard on windows] http://clojure.bighugh.com/

[but I use a mac] http://aquamacs.org/

[but I write ###.NET] https://github.com/richhickey/clojure-clr https://github.com/jmis/vsClojure
I'm curious - do you have any data supporting this? I see it on HN based on anecdotal evidence (or none) all the time. It would obviously have different effects on different market segments, but I would love to see some analysis on this.
Done.

Something got past the adult filter - it's now gone. Sorry about that.
Here's the sort-of: it's a multi-user web browser rather than full fast-user switching but (at least for me), that's 90% the same thing.

It's implemented with some nice UI and cookie swapping.
There are no known deaths or crippling longterm effects of THC, as opposed to alcohol.
There was quite a pornographic picture top of the page when I visited, a couple of minutes ago (there's a new top picture now).

You probably need some sort of warning for that..
How does it matter how much they're spending if they are indeed spending on something fruitful? It's not like they're wasting those $25m away. It's been properly invested in education. As you pointed out on those .pdf, they're transparent enough to make it clear what they're doing with the money. Specially on page 30, where they detail each top spending increase.

It's very clear from visiting their site and the sister sites, that they are indeed improving.

It's an important investment in education. For those of us who believe more investment in education is needed on a global level, but can't rely on your government for that. Donating to wikimedia is a great alternative.

I donated and I'm sure it was a great move.
How have you implemented the 'adult filter'?
In Ubuntu, libraries are actually included in either the main binary package or a lib* variant. The -dev package is usually just a pile of .h include files (text files), that aren't linked against anything. When the package maintainer builds the mysql package, it actually builds all the different sub-packages (mysql-client, mysql-server libmysqlclient, libmysqlclient-dev) at the same time and as such would have all of the updates pushed out simultaneously.

What you are suggesting would be near impossible to have happen without the user manually downloading deb packages, force installing using dpkg, and even then apt would shit itself over conflicting packages and broken dependencies. If someone manages to actually do that... well, they're going to have bigger problems than just "PHP isn't working right."

Rarely do packages need a particular kernel version, just ask anyone using xen or openvz where the kernel is often quite old (2.6.18) and not quite as easily upgradeable. The only time I've known of conflicts arising are when you need to use 3rd party binary drivers, or when an application is using bleeding edge kernel calls which is usually a bug upstream.

You may have a small point with glibc, but I imagine they'll just pin it to a major update every 3 to 6 months and give themselves time to test the heck out of it.
Thanks..But i think some other one has already on the front page..So safe to add NSFW :)
Unless of course it's a custom kernel or another ridiculously large package in which case you may have to wait the 10s of minutes for it to finish compiling. :P
You're not missing out on the quality of the tools. You're missing out on connectivity. Some people can't be accessed without Facebook. The quantity of those people is growing.
It appears that the new one is not part of Derinkuyu, but a different site:

"Nevşehir Province is already home to Derinkuyu, an 18-story underground city that was once capable of housing around 20,000 people, but if early size estimates prove correct, the new site may be even bigger. Nevşehir mayor Hasan Ünver told the Hurriyet Daily News that the complex was so vast that other underground cities in the region would be the size of a “kitchen” if placed within it."
Depends on your shell, but you can try this yourself -- for instance:

$ ssh localhost -o ProxyCommand="ssh localhost 'pstree -a \$PPID >&2 ; nc %h %p'"
sshd
`-bash -c pstree -a $PPID >&2 ; nc localhost 22
`-pstree -a 6703

Bash invoked this way will be non-interactive. Often bashrc will test "$PS1" to bail early in this case, but the point remains that it does run. I also tried my command with echos before and after that test in my bashrc to confirm what happens.
If my wife and I had lived in one of those for our first two years of marriage, we could have saved up one heck of a down payment for our first house.
hey, that causes some immediate stir in my mind as a user of Authy. Could you share any reference to the incident you mentioned?
Its about how much time it takes less to order from Amazon then it takes to either grab an additional item when you are already at the store, or make a trip to the store just for one item.
I have occasionally applied for (non-academia) software development jobs at universities, usually in relation to the health care sector.

It takes all of them at least a month to even set up an initial phone screen, and some can't even manage that. Also, they tend to pay way below market wages.

It's not just the hiring practices for researchers and professors. That idiocy likely extends all the way down to the part-time gardeners. You can't afford to endure the process unless you already have a job.

The only reason universities can get away with this is because they are largely protected from competition, and are usually the largest single employer in whatever city they may be in.
I enjoy this argument in favor of negative interest rates: http://sacred-economics.com/sacred-economics-chapter-12-nega...
Thanks for the link. This is a great idea and I'd love to see it get some traction so that I can use it for things.
That's for locally sourced income or if you have a real office in HK.

To pay no tax all your income needs to come from outside of HK in addition to not having a local operation.
> Encrypted by default

However, it does not use the end to end encryption "by default".

Relevant: https://www.haystacksoftware.com/blog/2014/10/its-not-about-...
It wasn't left out. You must have missed it.

Will he continue to bankroll the business -- or does he see revenue opportunities? "We will become financially sustainable at some point," he says. "It will most likely involve third-party paid apps built on the Telegram platform."
> Why force programmers to figure out how variables should be captured in a lexical closure instead of just always capturing by value (if you want capture by reference, why not just capture a reference by value?)?

I agree with most of the points but this one seems suspect to me. This would break code like (forgive the possibly wrong C++11 syntax):

auto sum = 0;
std::for_each(my_vector.begin(), my_vector.end(), [](x){ sum += x; })

We actually made the mistake in Rust of making closures capture by reference or by value depending on what type of closure it is, which confuses newcomers immensely. It's scheduled to be fixed by making all closures capture by reference (and if you want to capture by value, use an object instead).
This is pretty cool.

I just wrote my first bit of Go last light. Loving the language so far, though I still feel like I am tripping up on managing dependencies.
Has any body heard of TIBCO? They've been doing this (flow-based programming) for years(>10).
It actually was changed from stdlib RNG -> xorshift -> this RNG when the previous (non-parallel) article was posted.
where does one find these contracts?
How could they have gained access to passwords? Do they mean, rather, gained access to your secure password hash, or did they simply store passwords in an unencrypted format? Being a member of PSN, this has me concerned. I'm making it a point to change all of my security questions and passwords all throughout all websites I use.
In case anybody is wondering, here's some information about Common Lisp that should make it easier to get started.

Use SBCL; it's the most common and well-supported implementation. It works fine on most OSes (and has done so for years, and will continue to do so for the foreseeable future), though it's a bit dodgy on Windows. If you're using a Unix (including OS X), you'll be fine:

http://www.sbcl.org/platform-table.html

The place to look for libraries is CLiki.net, and if you'd like to get started with minimum effort, then Quicklisp is exactly the library collection you're looking for:

http://www.quicklisp.org/beta/

Quicklisp has all the common libraries, with easy installation and dependency management.

For editing and debugging, it's hard to beat slime-mode in emacs. It's very slick and pleasant to work with. (Incidentally, this is also the most common way of editing Clojure, but it works more smoothly with Common Lisp. Much better stack traces, for example.)

I'm enjoying using Clojure right now, but please don't be scared away from Common Lisp. It's got a lot going for it.
> When a company has profit margins of 24.27%, as Apple does for the last quarter, they are not competing on price. Companies that compete on price typically have profit margins down around 5% (see Dell, Walmart).

The iPad is seriously competing on price. This both elated and worried AAPL investors, who are worried about gross margin as well as sales.

So, Apple can and will compete on price in one market (iPad) while being nosebleed premium in other markets (Mac Pro).

Regarding iPhone, there are no BOGO (buy-one, get-one offers) while every other manufacturer offers those, and the Average Selling Price (ASP) is a nosebleed $600+ and hasn't come down over 3+ years... this is money that Apple makes per unit.

Apple is both luxury AND competes on price - they're incredibly flexible for such a large company.
Frankly I'm more concerned with their words about changing credit cards if you've made a purchase through PSN. This seems to be an admission that they were storing CC#'s in plain text.
I doubt turning off the PSN was a "difficult business decision". More like their lawyers said "KILL IT NOW" and pointed out the ramifications of not actively preventing such wholesale personal information theft.

There will already be a lawsuit of some sort. Imagine how bad it would be for them if they hadn't shut it down.
I thought Anonymous apologized to PSN users for the collateral damage? Makes me wonder if they're just trying to save face after realizing the users were turning against them too...

"We realize that targeting the PSN is not a good idea. We have therefore temporarily suspended our action, until a method is found that will not severely impact Sony customers." -- Anonymous

Then they went on to say something about how Anonymous is a diverse group and they can't control everyone, blah blah blah.
Ohh.... it's a library as in "read", not as in "include".
Nothing. Might makes right is the way nature works. People that harvest cocoa in Africa can't afford to eat chocolate. It's the same situation between rich/poor in the US.
A company that goes fully remote might simply choose to close offices in the 4-6x places.

> As someone who works in the Midwest USA, I don't see anything but upside for people like myself.

I worked for a large tech company that started going remote before COVID. Once they started pulling out of expensive cities and opening offices in cheaper foreign countries, it became an uphill battle to hire anyone in the United States at all. Why hire a $100K Midwest US engineer when you can hire two good international engineers for the same salary and not have to pay for their health insurance?

There will always be some demand for US engineers and time zones put some limits on outsourcing, but opening the floodgates to full-remote companies means that even engineers in the cheapest US cities are now competing against increasingly qualified engineers who will happily take half the compensation to do the exact same work.
Tom Scott had a TV career I think? I doubt he'd be interested in taking it up again, seeing that he does quite well for himself on youtube.
Python string semantics are very strange, as the way Unicode was implemented. The internal representation can be one, two, or four bytes per character, depending on the widest character. Plus I've heard that there's sometimes a UTF-8 representation in there, too.

Python strings have to be indexable by integers. But, in fact, most indexing is iteration. So a UTF-8 representation could work. You can index forwards and backwards through UTF-8 with opaque cursors. The search, match, and regular expression functions can all work on UTF-8. Returned indexes would be opaque cursors. Addition and subtraction of small integers to a cursor can be handled by indexing forwards and backwards through UTF-8. If a program does does random access indexing, or uses an opaque cursor in a context where it really has to be convereted to an integer, the implementation has to build an index of the entire string. Index building costs O(n), but should be rare.
I think his point is that neither of those are secure.
But you don't need to be a fucking lawyer to...?
> I updated my laptop. I have been running the development
> version of FreeBSD for 18 years straight now, and
> compiling even my Spartan work environment from source
> code takes a full day, because it involves trying to
> make sense and architecture out of Raymond's
> anarchistic software bazaar.

ahh, you should've tried Plan 9, phk. 130 seconds to compile all software and libraries, 6 seconds to compile a new kernel. no bazaar there...

of course, this didn't appeal to you back then, did it? ;)
I have the band, it's awesome.
The first load is the important thing: it's when people first see your website. I've done plenty of speed testing of less.js, and on large CSS files it's seriously slow. I'll post the exact numbers elsewhere in the thread.
I drafted a longer response, but to keep it brief:

Production and markets are sufficiently captive. Time to tighten the screws.

(Possibly related: To what extend has the recent labor unrest been tolerated if not actively encouraged?)
No.

My grandfather got into programming in his late 70s. He was a fund manager and just wanted to do it by himself.

Now he is dead but I keep source listings of his code.
Just curious, in what instances have you experienced a client request something technically infeasible? What was the feature or project?
Absolutely. Notice how Gabriel Weinberg is spamming his DDG search-engine. Nothing against DDG, but this is a shady tactic for promoting your business.

https://www.quora.com/profile/Gabriel-Weinberg
Congrats @plehoux and the rest of the team, and I wish you continued success!!
They’re going to try. A lot of tech “benefits” revolve around quirky office space. When you remove that you have something missing. Furthermore if they didn’t press it, there would probably be an even greater collapse to the real estate market.
The telecommunications act of 1996 basically allowed for media conglomerates and non-media companies to buy up and basically propagandize media orgs. Like for instance: Comcast buying NBC. It took us from > 500 nationwide media orgs to < 6 that control 95% of the media on the web or tv.

That's all on the "free market" and "unregulated capitalism" the right "loves" so much.

Maybe the answer is end that bill, split up all the media, and maybe have a max # of "users" per social media company so that they need to basically "spin" out other companies for the next 10 million users, and each block of 10 million users have their own group so that no groups have max control... seems like the equivalent of 500 media orgs with different agendas at least they have some differing opinions.

Now Sinclair Broadcast group basically sends the exact same word-for-word script to thousands of local tv stations, and we just accept it as truth.

Twitter and Facebook are the least of our problems... media is broken in America period, and that's because of lack of anti-trust against media conglomerates as well as repealing the fairness doctrine. Not sure what a good solution is, but twitter/fb/etc are small wheels. If there's no newsweek, fox, brietbart, cnbc, nbc, msnbc, cnn to post news stories there'd be no sharing of news period on these platforms, of course then htere's just no news online...

Ideally it'd be nice if media ads were overhauled to guarantee that media doesn't get blind-sided by special interests... like Humana pulling ads if they're too supportive of medicare for all, it'd be nice also if we ended lobbying in congress and enacted anti-corruption laws at every level of government to ensure money stays out of politics and the the U.S. government self-funded all elections and at an "equal" level. If I ran against Bernie Sanders, we'd get equal $$ and that's that, no donations etc.

At least then how far someone gets is more on merit, organization, and how well they can budget -- things that are admirable in an elected official. Ability to fundraise has no bearing on how you can govern because you don't hold fundraisers for social projects, the military, etc - you tax the people or print new cash.
and why are you geofencing in this way?
>"if the FSB considered her even moderately worth pursuing"

Following your logic they've contacted her just for the fuck of it. Looks like grasping at straws trying to prove that russian asshole got to be worse than the american asshole.
> Once all your software runs on the GPU,

That's a pretty big "if" and often not a workable.
This is management's opening negotiating position.

In the fight for talent, however, it is not clear that they have the upper hand, because, I, for one, will be more that willing to offer your employee the ability to work from home. I will ask that the team work out an appropriate culture, which probably includes coming to the office at least once a week -- but certainly not on the other hand four days a week.

And I work for a bigco, so either you are going to have to throw even more money at them to show up to your dumb box everyday, or I will win. :)
Indeed, citizenship is not required. You just need to be a resident.

It would be hard to argue that privacy is a human right and then limit the protections to citizens.
Feels like a gut punch, I feel horrible asking people to switch to signal after buying into signl marketing, all of that now seems to be a ruse for their ecoin business.
This articles points out the obvious: security engineers are fewer, it'd be cool if devs could run and maintain their own threat models, you can help people with trainings, STRIDE can be useful for beginners.

What it doesn't address are what I think are the important points of a threat model:

* What tool or format do you use for threat modeling? There's unfortunately not many solutions. Sure you can do whatever, but uniformity helps (as opposed to every team using a different format) and spreadsheets really suck. I think there's really a need for a tool/SaaS in the space.

* How do integrate threat modeling in your processes? Doing a threat model once is nice, but you need to re-visit it often and make sure it's up to date.

* How do you analyze the outcome? Threat modeling is the perfect tool to identify gaps and prioritize security work, unless people discard it as soon as they're done with it. How do you milk what you've done, and how do you make sure others prioritize what came out of the threat modeling exercise?
Also all the endless roads and parking lots which make the environment much less pleasant, and they exist because of cars.
lstopo (1) on linux machines is quite instructive. if you have not used it before.
Yeah, it kinda is, unless you're a total shitbag with no empathy.
How can it be 'complete wilderness' if reachable by car? Isn't there some sort of infrastructure necessary in order to reach it by car which ultimately destroys nature?
Its at least consistent - which, IMO, is better than just getting a random version. I do, however, think it's a bit unfortunate that it prevents picking up bug / security fixes in transitive dependencies.

Imagine that you depend on library A of a particular version which itself depends on library B. With minimal version selection, as long you don't bump you dependency on library A (or some other library that depends on library B), you'll continue to get that same version of library B. But, then library B releases a critical security fix. With minimal version selection, there isn't a great way to pick up that fix. You can _hope_ that library A releases a new version that requires the fix - but that may or may not happen and could take a while. Or, you could add an explicit dependency on the new version of library B - which is unfortunate, since, your main package doesn't depend on library B directly.

Lock files solve this problem. You can depend on whatever version of library A that you need and lock the transitive dependencies. And once library B releases its fix, you can update your lock file without having up bump the version of library A.

Tools like poetry providing the features to automate this workflow.
The only reason we use pyproject.toml is because of the stupid black formatter that refuses to support setup.cfg, which every other python tool under the sun supports.
Discussed once in 2018: https://news.ycombinator.com/item?id=17532003. But you should repost it!