skysight-inc/HackerNews huggingface dataset:
This is a really bad decision on npm's part. Kik's laywer has pulled a fast one on them. Kik has no right to enforce the Kik trademark beyond the limited set of goods and services listed in the trademark application [1]. Kik is a registered word mark for mobile messaging software only. That's why the trademark database contains many entries for just the word Kik, other companies own the use of that word for other goods and services.

I'm really surprised that npm didn't push back against this. It's not like npm isn't full of trademarks:

https://www.npmjs.com/package/pepsi

https://www.npmjs.com/package/coke

https://www.npmjs.com/package/kfc

https://www.npmjs.com/package/virgin

https://www.npmjs.com/package/sprint

https://www.npmjs.com/package/nba

https://www.npmjs.com/package/nfl

https://www.npmjs.com/package/google

https://www.npmjs.com/package/yahoo

https://www.npmjs.com/package/skype

https://www.npmjs.com/package/word

https://www.npmjs.com/package/excel

https://www.npmjs.com/package/unix

https://www.npmjs.com/package/windows

https://www.npmjs.com/package/osx

[1] http://tmsearch.uspto.gov/bin/showfield?f=doc&state=4804:lir...
This is an awesome concept video.

Autonomous sailing, which sounds like a natural next step after self-driving,autopilot etc would be easier, but probably more points of failure and less chance of repair.

I definitely don't know the complexities of shipping vessel navigation/maintenance but it seems like a somewhat quick way to try this out could be try this with motors/sensors and have repair crews ready in ports (on standby) and just airlift them to ship, in case of failure.
Uber’s bug bounty program
Here Are Google, Amazon and Facebook’s Secrets to Hiring the Best People
Dutch Authorities May Close Five More Prisons Due to Lack of Criminals
Fond (but painful) memories of playing through Maniac Mansion and I remember seeing DOTT for the first time at a CompUSA display showing off this fancy new CD-ROM thing. That and Tie-Fighter were jaw dropping for the time. It's funny because VR is supposed to be this incredible new thing but even the most impressive demos haven't given me that same amazement as seeing games like this for the first time.

This looks much better than the Monkey Island "Remasters" but looks like they broke "lipsyncing"? What a step backwards.

I'm surprised this game even needs a remaster. Played it a few years back and it still holds up -- timeless style more than makes up for a little bit of pixelation.
No it isn't. No one flip-flopped here.
That's what Starfighters is up to.

https://www.starfighters.io/
Link to more of an overview / documentation without having to fork over an email address? Silly.
About a year ago I tried to unpublish a version of a library I'd pushed to Elixir's hex.pm package manager but the API rejected it. Turns out they only allow you to revert publishing for an hour after you push.

It was a little inconvenient at the time but in light of this I can very clearly see the wisdom of that decision.
Appreciate the recommendation (I wrote that)! Honestly the book is very old at this point, it may still be an approachable way to understand what's behind the algorithms but there are much better ways to write the code now.
People can still just use the older versions that are immutable.
Here's how it could be done:

Spin up a hefty AWS instance and connect to every single IPv4 IP while sending a HTTP get request on successful connects with a Host matching that of the domain. There are only 4 billion IPs. Look for successful code 200's with the same headers and content as the original website. Easier said than done though.

Btw, this attack can be prevented if you run a drop-all firewall and only whitelist the IPs listed here: https://www.cloudflare.com/ips/
Level Up Your Batteries
Rob Ford, Who Admitted Drug Abuse in Stormy Toronto Mayoralty, Dies at 46
What if Kik uses Node and they broke their own builds inadvertently by enforcing their trademark. 0_0
Oh god it's so cool to see Platzi in HN! (I learned a lot from you guys when it was mejorando.la).

Thanks for the post. Just wanted to say thanks for your work and how happy made me read about you guys.
While you have more autonomy in some ways, you have less autonomy in others. Instead of a boss, you have clients you need to satisfy if you want to remain in business. And not everyone can be picky when it comes to clients, especially in a competitive market.
https://news.ycombinator.com/item?id=11337330
0. Arrived at site

1. Entered HN URL

2. Entered email reluctantly

3. Checked email, nothing received

4. Started writing comment on HN, frustrated

5. Checked email again, still nothing

6. Posted comment, disappointed
I agree. And if they are further down their growth curves then they need to be further along the road to normalised profitability. Otherwise they too will get smashed in public markets.

My view is if the startup has stopped doubling year on year then it's no longer opportune..
I'd forgotten all about the ESP8266 but this project is about 95% of what I'm aiming for. The rest should be relatively trivial programming work, so thanks!

Can't speak for the other guy (who wants a portable monitor+keyboard system), but what I'm mostly looking for is a terminal that I could carry around/outside the house (i.e. potentially high-glare conditions) and program while connected to wifi, while not recharging for as long as possible, so this is perfect.

Maybe I can embed some stuff like vim or emacs on the device itself to help reduce utilization of the wifi. Is there any sort of "smart" protocol that could handle buffering files while editing on a remote host? I can probably do it, but I'd rather not reinvent the wheel, caching can be non-trivial.

Secondary use-case: RTTY or PSK31 or other amateur-radio textmode terminal, that could idle for as long as possible on a portable (QRP) battery pack. When you're schlepping the gear around, every ounce counts. Something that can talk serial is probably good enough, wifi is redundant there.
You have the same amount of choice. There's no reason that you have to use the other hundred pieces of the package. In the Unix world, there's nothing precluding you from deciding to use the FreeBSD version of tar but keeping the rest of the GNU utilities there.
Why yes, depending on a third-party, external package manager is a huge risk. I have always believed that open source projects should be fully inclusive of any and all dependencies. This event has not changed that opinion.
Studies show that Colemak reduces foosball efficiency.
npm does not work fine if packages can be trivially removed (even by those who posted them), breaking everyone's builds.
Why on earth would someone pay for that if the code is already open source?
If they fall into the formal specification category, I've found Writing Effective Use Cases by Alistair Cockburn to be very helpful.
> even the most impressive demos haven't given me that same amazement as seeing games like this for the first time.

You have probably matured out of the easy amazement age.
Let it suffice to say that Linux distributions (and some closed OSes) try very hard to prevent package fragmentation.
Experience has shown many times that excessive fragmentation leads to proliferation of unmaintained libraries.
Our response to the Brussels bombings requires patience and restraint
Have you ever actually experienced that?
Feel free to show a smaller implementation that's more efficient.

I've seen several "one liners" in this thread already, and most of them either blow up when something that's not a string is passed in (regardless of how you view strict typing, js doesn't have it and this shouldn't happen), or are extremely slow comparatively (most of them creating and destroying an array every time they are called).

Plus this has 100% test coverage (even as trivial as it is, it still counts), and is "battle tested" (something like 2.5 million installs per month counts for something).

Sorry, but i'll stick to left-pad vs 20-seconds of thought one-liner.
Leadership, good Principles and Theory
While I can appreciate this sentiment, I'm also not sure that removing any sort of interpretation is a good idea. Look at the horrible impact mandatory minimum sentencing has had, for example. Flexibility can be bad, but it can also be very good.
Vikings were not spurred to Greenland by warm weather, research shows
There's no inherent definition of VR that by its very nature means it can't be more impactful than the smartphone.

VR isn't going to be a novelty if people switch to experiencing life primarily in a virtual manner due to the vast expanse it will offer. That includes travel, art, gaming, social, shopping, media.

With today's technology? No. With the technology we'll have in 30 years? Yep. And particularly the technology that will gradually evolve over that time. It'll be far more impressive and useful than the smartphones we have today, in every regard.

If you had told someone in 2003 that billions of people would use their cell phones for so much today, and that people would practically be attached at the hip 24/7 to them, I don't think you'd have been believed - the notion that everyone would have their face buried in large glass screens for hours each day, socializing, shopping, etc.
7 degrees? Holy shit
Also, this doesn't support zero padding with ch=0.
Thank you so much for that, Ramiuz. I hope you still learn from us now that we're Platzi.
The overhead is in your management of your dependencies. The size of the module isn't the problem, it's the fact that you end up using so many of them (especially recursively).

Consider this specific case. This author moved all their modules from one hosted location to another. Now, if you want to use these modules from that author, you need to update the scripts and configs that install them (some package.json files in this case). In a better world, like the C or Python world, you might need to update one or two urls which point to a couple of this author's popular libraries (maybe one you use directly, and one used by one of your handful of direct dependencies).

In this crazy npm world, this author has 272 modules. Maybe 20 are in widespread use ... it's already a lot of work to figure that out. Maybe you use a couple directly, and your dependencies have private recursive sub-dependencies on additional copies or versions of these or other of this author's modules! Maybe you have to cut your own versions of some of your dependencies just to change their package.json to refer to the new URLs! Anyway, you probably have to sift through hundreds of your dependencies and sub-dependencies to see if any of them are included in these 272 moved modules.

I've seen npm dependency trees with over 2000 modules (not all unique of course). That's totally unmanageable. I think that's why privately versioned sub-dependencies is a big feature in nodejs: so you can try to ignore the problem of an unmanageable dependency tree. But if you need to make reliable software, at some point you need to manage your dependencies.
Chrome app launcher for Windows, Mac, Linux being removed in July
Woah woah. Hold on there. Lets not throw around strong words like "worked", "concept", "entire", "fine", "did" when discussing NPM.
Or why copyright should not be effectively forever. Not one new artwork is produced by still allowing copyright on Picasso's artwork.
Or is it irresponsible from the company to let loose your lawyers on a FOSS project because it uses a three letter word as a package name?
This is what happens with Clojars. It is possible to remove packages, but it requires a manual email to the admins, along with an explanation, e.g. published internal lib accidentally. This prevents scenarios like this, but also cases where people want to 'clean up' things they no longer need, even though others are depending on them.
Hey, this is pretty sweet. Makes me think of http://www.jfugue.org/
Cool, I like the Math.max. Two liner then
str = String(str);\n...
It's defence in a war of patents, but offence in a war against patents.
Perhaps the reason for lack of 3D Touch on the iPad Pros is that it is too much space, and the sensing technology doesn't scale well enough?
I would argue that hiring isn't broken at all. It's WAI.

I would also argue that WAI isn't good enough, and that too often stupid hire/no-hire decisions are made.

Thirdly, the tooling that exists to facilitate the recruiting & onboarding processes are largely horrific. There's still space to make a bunch of money in this area.
Article and most recent comments are over 6 years old... has nothing changed?
The problem here is that NPM is a private company in an institutional role.

You will always have some very common dependencies which, if brought down or altered, could compromise a lot of projects.

The problem is that npm has to act like an institution, not like a private company.
My background is in 20th century Anglo-American philosophy, which spent a great deal of time seeing how far one can push formalization or quasi-formalization of interesting concepts. I wish I had a good capsule version of why I think this won't work, but it won't. Formalization is a tool, and an important one, and there probably are areas where a more formal approach to law could pay off. However, attempting to remove all ambiguity, vagueness and subjectivity is liable to leave you with paradoxical results.

Perhaps you could start with this: to formalize any set of laws and criminal procedure similar to the actually existing law, you'll have to define knowledge, and that is a quagmire (http://www.unc.edu/~ujanel/Gettier.htm--you don't have to read the entire paper, but at least read the first section for a feel of how nasty the project gets. If you need more background, here is the description of what the Gettier problem is: https://en.wikipedia.org/wiki/Gettier_problem).
I guess it's a philosophical difference.

But to be fair this would have the same outcome if left-pad were part of a library that included another 50+ libs (that he also wrote and published, and subsequently un-published today).
What is π? (and while we're at it, what's e?)
Show HN: Nestor – Hosted Hubot for Slack
It's high time people publishing packages on NPM audit their dependencies. I bet 80% of them are unnecessary.
> Look at the horrible impact mandatory minimum sentencing has had, for example. Flexibility can be bad, but it can also be very good.

That is rather an argument why in doubt one should not put such harsh punishments into the law - a thesis which I support.
Hacking the Samsung Galaxy S7 Edge to fit 3 cards in 2 slots
That's not the point, of course no one would pay $100 for a string pad function. The point is they own the source of code that thousands of people will potentially pull from without realizing it's a different owner who might have different intentions. Not trying to say what they did is wrong or bad (it saved a lot of people's butts I'm sure)--it's more just highlighting the massive issue with NPM package publish & unpublish.
Cloud API to convert sounds between various formats
"Those days are dead and gone and the eulogy was delivered by Perl" - Rob Pike (2004)
Any basis to this?

Every single article on the site has titles that would give Buzzfeed run for its money.

http://thecooperreview.com/
Thanks for the GitLab mention, so much good advice in this, I agree with all of it.
Signing using private key?
Ability to set down the fun and desirable nature of coding. To put priories and your focus in hiring, direct-report development, meeting collaboration and product organization.

To ask your direct reports where they want to be in 5 years and help them get there - without disregard of what that means to the day's need
See: Intel vs. Hamidi

https://en.wikipedia.org/wiki/Intel_Corp._v._Hamidi
Mistakes, rewrites, late nights, firefights, and deadlines.

Core dumps, memory leaks, hardware faults, and plain bad luck.

Big O, data flow, always learning -- or out you go.

Manager metrics, schedules hectic, methodology hegelian dialectic.

Taking the heat, feature creep, open office, uncomfortable seat.

Holy wars, revolving doors, carpal tunnel, all you can take? There's always more.

Fucking suits, random reboots, and the ever present "thousand language stare".

Oh yeah, pressure -- lots of pressure. And time, time, time.

Metric shitloads of time.

Time, man. You gotta do your fucking time.
Introducing a New SaaS Metric: The Hype Factor
Here's a really good Quora answer talking about how engineers get promoted at Google. I think Google is a good example to look at for promotion (but not necessarily for every issue) because they're known to have a very well-defined process for promotion.

https://www.quora.com/How-do-engineers-get-promoted-at-Googl...
So this I guess

module.exports = function leftpad (str, len, ch) {
str = String(str);
if (ch === 0) { ch = '0'; }
return Array(Math.max(0, len - str.length)).join(ch || ' ') + str;
};
Perhaps it's not about direct crew costs, but the additional security needed to keep an onboard crew safe[0]? Without humans aboard, hijacking may become far less of a risk, since the ship doesn't need to be human-pilotable at all. With that resistance to hijacking, not to mention the fact that no crew lives would be at stake in a piracy event, the shippers may be able to pay less for insurance and security services.

[0]: http://www.theigc.org/project/the-economic-costs-of-piracy/
This is clearly a satire website
I'm a known downer of npm and node in general and this illustrates how bad npm is about this... You can't just change owners to kik on npm without the previous maintainer's permission. NPM has violated the trust of the community and will continue to do so until someone forks npm and makes an honest community out of it.

What's next? If I have foo.bar domain, can kik come and say I can't have foo.bar/kik or kik.foo.bar? To the people who think npm is right, what if you owned foo.bar and Google decided they didn't want to deal with kik lawyers and redirected kik.foo.bar to kik.com?
But TFA's "Kik" seems to be sort of a "project generator" like yeoman or something. There is no overlap between that and even the generously expanded description of the litigious "Kik" that you cite.
> Recursive dependency resolution is nice and all but isn't this going to create a massive technological debt that needs to be maintained?

Spot on. Imagine deploying an application, in 2018, that pulls down 1000 libraries, 300 of which are 6 years old versions and contain vulnerabilities (or just bugs) involving data on transit.
Who is going to do all the work to backport fixes in every affected version of each library?
Even workers cooperatives have investors (the workers themselves). Unless you have a business with no capital requirements then you must have investors.
How would they enforce security?
Remember that pirates exist, would the savings on human captains be enough that they could sail around dangerous areas?

I know this is a planned concept, but surely security is a major concern. Can anyone with further shipping industry knowledge chime in?
Nobody is going to pay anything for a package name when NPM Inc. can just yank it out of your hands at their discretion.
And I did not notice the 0 check in the original code either :-D
Scientists Say Sea Levels Could Rise Much More Than We Thought
Wow!!! You are so right. I wish somebody from Apple could read this. They could pull this off and it would push them off the stagnate phase they are currently in as well as pull back all the design and high end customers they have losing.
Purescript's equivalent is Pursuit: https://pursuit.purescript.org/search?q=a+-%3E+f+a+-%3E+Bool...
Compaq also made x86 server equipment, which is one of the reasons they were assimilated by Hewlett Packard. Compaq developed the initial versions of the Smart Array RAID controllers, and were working with Intel (amongst others) on the thankfully defunct Intelligent I/O Architecture (I2O) on which the Smart Arrays appear to have been based.
You know something is wrong with HR when people can't tell the difference.
Are you sure those aren't the reasons such company misses great talents?
I honestly wouldn't have a problem with them removing that option, and only
allowing packages to be removed by contacting support with a good reason.
(Accidental private info disclosure, copyright violation, severe security
bug, etc.)

Even Rust's Cargo won't allow you to revoke secrets [1]. I think this is the correct policy.

[1] http://doc.crates.io/crates-io.html#cargo-yank
Gotta love this gem: "Perhaps the most important achievement of UNIX is to demonstrate that a powerful operating system for interactive use need not be expensive either in equipment or in human effort: UNIX can run on hardware costing as little as $40,000..."
Traditionally, in quantum mechanics a measurement "breaks the system": the state of the system is instantaneously modified in a way that does not follow the normal equation of motion (the Schrödinger equation). This is known as the "collapse of the wave function". The paper shows that there is a way in principle to include the measurement apparatus also within the quantum description, in such a way that the interaction with the system causes the system to eventually evolve into a state that corresponds exactly to the one that results from the traditional collapse of the wave function (but without a "break" in the description). It therefore supports the idea that classical behavior is an emergent phenomenon from the underlying quantum behavior, and that there is no fundamental classical-quantum divide
Their slogan is "Funny because it's true". So, while I didn't quite get the humor, it must be both funny and true.
Yes, huge slowness.

I don't think all the cards are loaded anyway. I think Trello loads them as they are needed. Since the extension reduces the size of cards, it is as if the list was scrolled down, then more cards are loaded. Is that a possibility?
You can't go wrong with probing questions on the toilet
> The notion that anything other than a state (read: leviathan) can administer justice is a dangerously misleading notion since unless both parties agree to abide by the system then there is no consistent notion of justice (note that accepting your citizenship is tacit agreement).

Well, how Hobbesian! Of course, this is not the only possible conception of justice, which is, as Plato put it (in Jowett's translation), "sometimes spoken of as the virtue of an individual, and sometimes as the virtue of a State." But in either case, if we want to get all philosophical about it, I share your skepticism... if justice is a virtue, can we really have a virtue as a service (VaaS)?

Seriously, though, I don't think the OP's point is to propose administration of justice outside the state, but rather that certain tech advances can make it economically feasible for small, individual claims to be given a "fair shake" within the state system; claims which currently are too small to be worth a lawyer's---or even the claimant's---time without said tech.
Of course! We did our first technical live class in English thanks to you guys <3
"This is not a knee-jerk action"

Yes, it is. The fact you did not know about a company branded "Kik" does not make you excempt from the law. A law which, surprisingly enough, is being used in a reasonable situation here. Your package and their segment are closely enough related in context that people could assume they are actually related, giving you the power to essentially break their business if you do bad stuff.

In this case it's not really a trolling coming from them. You don't just brand your new beer brew "Coca-Cola" - there's no reasonable argument to do that besides being a troll.

P.S.: holy crap npm is so broken I'm glad I'm on the backend side of life.