skysight-inc/HackerNews huggingface dataset:
It was retired from service largely because the accident was attributed to a critical design flaw.

Sure, that was the only ever Concorde crash, but then they really didn't fly very much compared with conventional aircraft. There are individual commercial aircraft that logged around as many flight cycles as the entire Concorde programme without incident.
https://en.wikipedia.org/wiki/Unsupervised_learning
Goodyear is working on spherical tires
I got skeptical as soon as the PIG group was mentioned. I don't think any company would give one of their groups such an unfortunate acronym in real life - it would be bad for the morale of the people who worked there.

(If there was really a PIG group in some company, I'd imagine that their work space would be known as the "PIG pen", not the "PIG pod".)
Truth is the community knows how much of a relative non-burden it is and the contract was probably bid upon.
Flash drives for freedom – donate USB sticks to be smuggled into North Korea
Problem solving is cultural – EdTech doesn't get it yet
This Survey Is Unwieldy, Intrusive, but Valuable for Understanding Americans
Ugh, no. Bundling should be done at the very end, when you're trying to build maintainable software. It's a mistake to bundle in the middle, because then even loosely-dependent modules will be limited to updating only when every intermediate dependency updates. Don't take these decisions out of the hands of the coders who are actually coding software.
That package is, at best, average...

ducks

(Edit: typo)
Discoverability though is... poor seems like an argument for improving discoverability, not against having small modules.
I've been there. If I recall correctly, I found that a "rmdir /s" from a command prompt does the trick.
Samy Kamkar had a great talk about radio attacks at DEF CON 23: https://www.youtube.com/watch?v=UNgvShN4USU
The Intel chipsets even have an embedded device with complete access to everything, its own firmware and its own integrated flash where malware can be flashed by anyone with Intel's internal documentation and the private RSA key corresponding to the public key that is etched into the hardware:

https://libreboot.org/faq/#intelme
Without addressing the wisdom or lack thereof of including dependencies for small functions, perhaps the problem of disappearing/changing small dependencies could be solved with an option along the lines of

npm install <small-dependency> <destination> --save-inline

Which would just copy the dependency verbatim to <destination>. Maybe have a "<dependency> is 100kb. Are you sure you wish to copy the entire source to <destination> instead of using a 'require' reference? y/n" prompt for the inevitable silly types who'd do it with Angular.
I think in some ways a good standard library is a measure of programming language maturity. I remember when C++ had a lot of these problems back before you had the STL etc. In the early 90's it was a dog's breakfast.

We have a large internal C++ app at my work of that vintage (~1992) it uses its own proprietary super library (called tools.h++) which is just different enough from how the C++ standard evolved that its not a simple task to migrate our codebase. So now every time we change hardware platforms (has happened a few times in last 30 years) we have to source a new version of this tools++ library as well.

I find it amusing Javascript hasn't learnt from this.
19 Pieces of Non-Human DNA Found in Human Genome
When will we get secure PC architecture for the consumer market?
What really helps me stay engaged in conversations with strangers is directing my genuine interest in their "story".

What drew you to get into computer science? How did you end up enjoying accounting? Why did you choose NYC over Tokyo?

When someone asks me what degree I took, the answer is two words: Computer Science. If they ask me why - now there's a real conversation.

Often, also, it may help to tug even further at that story thread - what background brought it around? What did the parents do? What was the formative experience that created the story?
Ah that makes sense. It gave me the impression I had to run my services on there. I don't know if I'm the only person to screw that up or not. Thanks for clearing that up!
I wish you luck, this is a hard nut to crack.
Re-usability is a good concept but can be overused easily.
Not my BMW, it's 25 years old and the driver's side door doesn't unlock even if you use a key :P

All jokes aside (although it's true about my car), it just seems like a fundamental truth that digitally-secured systems always provide convenience at the cost of, well, security.
I could not not-rebuild... All I had was a git repo.
I don't see how your linked comment brings more to the table than the basic arguments for code reuse.

But naturally, with any code reuse there's a benefit and a cost to instance of internal or external reuse.

The Benefits for external reuse include ideal reliability as your describe as well as not having to create the code. The costs for external reuse include having your code tied to not just an external object but also the individuals and organizations creating that object.

I think that means that unless someone takes their hundreds of modules from the same person or organization and is capable of monitoring that person, that someone is incorporating a layer of risk to their code that they don't anticipate at all.
Yep that goes without saying. The model of something will always be a limited, faulty version for the original.
> So what? How do you know Dell/HP/Whoever has not been forced by NSL letters to implement backdoors.

That is not necessary. Just get the shipping company to redirect the hardware to a facility that flashes the Intel ME with signed malware, reseals it and reships it without the recipient seeing anything different. That way fewer people need to know about it, which decreases the chance of detection:

http://www.pcworld.com/article/2083300/report-nsa-intercepts...
https://libreboot.org/faq/#intelme

Not even Intel needs to know if they are compromised successfully, just like Google did not need to know about those fiber taps between their datacenters. That means countries like China that have things being shipped to possible targets can do this too if their hackers gain the necessary secrets.
For many years it wasn't possible to install self signed apps on iOS. But on recent iOS versions, you no longer have to pay $100 to install apps on your own personal iOS device, you just need a matching iCloud account to self-sign from Xcode.
Damn, yeah, that's a totally valid reason. I was under the impression that lodash was more stable than to have that kind of stuff happen.
I guess I can't get too excited - I don't know what the ratio of "terrorists trained and sent to X" to "terrorists that end up not doing anything" is. We know the latter exists: the November Paris attacks suspect Salah Abdeslam apparently changed his mind and didn't blow himself up (http://www.theguardian.com/world/2016/mar/19/paris-attacker-...). My guess is that there's a pretty high drop out rate. But we'll never know, as that kind of statistic is deeply classified.
3001!
2 weeks is great! I think the original N7 was just a prototype device and it showed. For the money it was not bad, but it never had the polish of the iPad.
While in general I agree with the article I must admit that I also strongly DISAGREE with the overall message. Especially with this:
"Finally, stringing APIs together and calling it programming doesn’t make it programming."

Stringing APIs together is what actually programming is. This is building software and for instance when i use .toString() method I can easily forget how it is done, focus on other high level things and don't care about dependencies, as long as everything works fine.

Let's admit that the main problem here is with broken npm, rather than packages themselves. If someone has written the "leftpad" function, it is so I don't have to write it again, and I can save probably 15-40 min programming and checking some corner cases.

Also please note that javascript can be really tricky down in the details. So if there's anything that can help, it's better that it exists, rather than not.
I hear there's movement away from IRC and onto Slack, which is apparently contentious internally. Interesting to hear nonetheless given it isn't FLOSS.
It's definitely not a normal salary for a developer regardless of experience, even as a mid range manager (say managing a team of 20+) it'd probably be on the higher end.

Most likely a contractor, or adding on other considerations like stock grants; when I was at Salesforce.com they gave the stuff away like candy, so while my base salary wasn't too great the full compensation was good.
Ask.rs Your Favorite URL Shortener
Im of the mind most employers are looking for "have you done stuff" "can you do stuff". Veey rarely are they looking for anyone extraordinary, simply a tool that works
It's a pretty recent program, and it's only available if the school has over 40% eligibility, but it exists, and it's great: http://www.fns.usda.gov/sites/default/files/cn/CEPfactsheet....
Interesting, it's perfectly valid and imho clear.
With the acquisition of Ansible, we haven't seen Red Hat releasing the products (Ansible Tower). Is that just a case of they haven't got around to it, or is this a new strategy?
kik actually looks worse after this post. So, they kept bringing up the L-word (lawyer), when they clearly know they don't have a case. Basically, they really are dicks.
Could you say more about those things they should be doing?

I'm naive but it doesn't seem trivial to me.
Could someone please explain to me the attraction in using Oh My Zsh (and similar)? It seems strange to me to use others' configs.

Over time I've customized my bash config and have all the information I want in my prompt. If I ever switched to zsh I'd just learn how to translate what I have in bash. Why would I want to start with someone's big framework for configuration?
Someone mentioned below that lodash had some breaking changes related to the padding functions a couple times, which could be a totally valid reason to avoid using those. I was under the impression that the lodash API was more stable than to have that kind of thing happening.
Virtual Desktop 1.0 Trailer
Hannah Polites, one of sexiest woman on instagram
With s3cmd, don't you have to have a local copy of the backup somewhere although? So you have the content and the backup at the same spot, you can't directly backup to a remote server that way.
Yeah I'm sure it sucks for distro packagers. Why are they using npm, though? It's not designed for their use case.

Actually though you're just talking about some bugs in X, or possibly some design flaws in Y. Passing [EDIT, because bare objects are fine:] class instances around like that is the real code smell. So much coupling, so little cohesion. We call them "modules" because we like modularity.
A little paranoia can be a good thing.
if you're a project fi user (android only) this happens automatically through gmail. was a bit weird the first time my gmail rang :)
In simple mode, Closure Compiler would rename the local variable "prop" but not alter the properties.

In advanced mode, Closure Compiler would globally rename properties and statically eliminate dead code. In your example, it would remove a, b, and c and break the dynamic invocation.

This behavior is all outlined in Closure's documentation with examples.

[1]: https://developers.google.com/closure/compiler/docs/limitati...
Is there a known vuln against all current Androids? Or would it be unpublished if currently true?
Google Analytics Autotrack
No it's noticeable. There is no hesitation in the responses. I recently switched because I setup something for Emacs which needed to run a shell on start up and I noticed just how slow it was because Emacs is not Async and would hang for that shell to boot to run a simple command.

On a side note, while prezto is faster, another culprit of slowness is nvm which when I disabled it made the terminal much faster to load.
> I do expect to be able to call "average" on a list of numbers without writing it myself

Just out of interest, what kinds of functions would you expect to have to write yourself, if you're not happy about calculating the average of a list of numbers?
Top Shopify apps
How does that work for you? I figure it's a good filter - 80% of people think you're a whackball and run away, 20% stay and have interesting conversations.
Emotions aside, this makes perfect sense.

Working in a commodity job means less opportunity. It's the same reason not every company has Uber's valuation. Pay is (roughly) correlated to value.
There is also https://www.reddit.com/r/powershell/
Basic income is like the Ron Paul of HN.

Pensions are too unsustainable, but we're gong to magically pay a wage to everyone. Good luck with that.
Earlier in my career, I worked in prod support for an insurance web application. It had a DB containing reference data. This reference data was maintained in an Excel spreadsheet; a macro would then spit out CSV files, which would be used by command line scripts to populate databases in different environments (test, staging, pre-production). The DB data was totally replaced each time. Pre-production data would be copied into production, every night or so.

One time, I ran the staging and pre-production scripts at the same time. This had the unusual effect of producing an empty CSV file for pre-production.

When I got in the next day, I discovered all of the production data had been wiped out overnight...

Thankfully, it was all reference data, so it was just a matter of re-running the export macros, and pleading with a DBA to run the data import job during business hours.

I ended up writing a replacement using generated SQL, so we could apply incremental updates (and integrate better with a custom ticketing system).
Can we ever achieve this?

We can't exactly search the code to find out what it does, otherwise you'd basically be reading all the code to discover it's true behavior, which negates the usefulness of modules in the first place...

Any search will have to rely on developer-made documentation, and/or meta data. This is great in theory, but documentation is rarely well maintained, and/or someone changes the code but neglects to update the documentation.

This leaves us with the situation we have today. A search that somewhat works kindof, and mostly you rely on googling the feature you need and looking for what seems to be the most popular choice.

I'm not sure how this situation can be made better, especially if we continue down a path of having all these "one-liner" libraries/modules that anyone can make and stick out there into the unsuspecting world. When I need a square root function, and my search returns 800 one-liner modules, how am I supposed to pick one that I know is reasonably well done, and does what it says it will do, without looking under the hood - you'll end up just picking whatever seems to be popular...
I moved from SF to Ohio and kept my pay. Then switched companies a year later and got a raise. I see your point, but I like my version even better :)
This is the answer, 100%. All it takes to publish an npm package, is the command npm publish, and you're done. So of course it is no surprise that there are tons upon tons of seemingly useless or tiny projects (gotta pad out that github profile for those recruiters!), or that there are then plenty of packages that use them.

Add into that the fact that:

1) Javascript has a huge number of developers, and is often an entry-level language

2) The developers on this thread (I like to think of HN as at least slightly above average) are divided whether having small packages / large dependencies trees is a good or bad thing

3) Dependency management is something that matters mostly to long term (professional / enterprise / etc) applications, which is a subset of programming, and I wonder if not a minority subset of node.js projects in general.

4) If I'm writing a throwaway app or proof of concept, and therefore don't care about dependency maintenance, using as many dependencies as possible is a major time savor,

and of course you get this situation, and it seems to make perfect sense.

Personally, I wish there was an NPM Stable, where packages underwent much more scrutiny and security in order to get it, but nonetheless, nothing I've read so far about npm really scares me given the the above context. If you are a dev creating an unmanageable dependency tree for your enterprise app, you're a shitty dev. That doesn't necessarily mean that NPM is wrong for being so open in allowing others to publish their packages, or that smaller / more worthless packages shouldn't be allowed to publish.

That said, I would really like to hear a response to this post, as I have limited experience with different package management systems.
Earnings are revenues substracted by expenses.

The article states, "Analysts estimated Red Hat would make $534 million."
Mods, please edit the title: that's not what the article says. A $2B company is not identical to a company having $2B in earnings.
Scientists Just Removed HIV from Human Immune Cells Using CRISPR
>Another customer service worker I’d talked to from a big software company decided that if she wanted to stick around the Bay Area, it was time to teach herself to code.

Just curious. Is that going to help her get a job in Silicon Valley while competing with grads from top schools for the same jobs?
You mean living with roommates for $1500/no isn't appealing.
It's all about putting in the effort to share the information and doing it consistently, regardless of how meagre the numbers might seem.

Not everyone does that, so anyone that does stands out. If you've been on HN for a while, you might also remember the guy doing the Japanese candy boxes.

Years ago, SEO was easy and many of us built low-effort, recurring revenue as a result. But not all of us capitalised by building a personal brand around it. I can identify with Patrick's path:

- build
- wow, SEO is easy
- this is amazing; money for almost zero effort!
- get distracted, ignore declining revenue
- site becomes mental baggage
I have to login and comment to express my disappointment with the bad reviews this movie has always gotten.

Rotten Tomatoes gives it a 56%, which is really sad. Here are two of the negative reviews.

Corliss:

Most sci-fi movies offer escape, a holiday from homework, but Dune is as difficult as a final exam. You have to cram for it.

Ebert:

This movie is a real mess, an incomprehensible, ugly, unstructured, pointless excursion into the murkier realms of one of the most confusing screenplays of all time.

This movie is Lynch interpretation of a very complex book and he did so while still being faithful to its uniqueness. He gave us visual aesthetics that are very different from our standard views of space travel (ie: arabesque spaceships and gothic outfits) and didn't skip over the less popular concepts of mind evolution present in the book

What can I say? This movie deserves more recognition than a 56% score.
already submitted 20+ times, discussion here https://news.ycombinator.com/item?id=11346845

Please check before submitting!
> You're not going to be in the $1B space selling services

There are lots and lots of companies in the government and huge enterprise services space that have more than a billion in revenue.

A few off the top of my head:

* https://newsroom.accenture.com/fact-sheet/

* http://www.nasdaq.com/symbol/ctsh/revenue-eps

* http://www.csc.com/about_us/ds/29505-company_profile
You just described free software, not open source.

I'm not even a huge defender of free/libre licensing and all that, but in plain English the semantics are just different.
And WebAssembly means that soon it will be practical to use any language on the client or server side.
So... I think because of this, I will buy a VR-Glass :3 <3
Hey everbody, site creator here. I'd be glad to answer any questions or even better get some feedback from all of you!
Excellent point Miles (and as you know I work in GCP too), I would add https://cloudplatform.googleblog.com/2015/05/AppScale-and-Ap... and https://www.youtube.com/embed/2fRTgosMtw4?rel=0&controls=0&s... (in both of which, of course, you feature quite prominently:-)...
Have a little chat with your buddies who grew up in the plains states. They will politely tell you you're full of shit.

Alternatively, go try it. You could take a paycut to go live in bumblefuck any time. Why not today? I think you'll discover pretty quickly that the grass isn't that green over there. They are low rent because there is either nothing to do, or because they're dangerous.
Link to more details on what the OP is working on:

https://github.com/mimoo/Diffie-Hellman_Backdoor/tree/master...
There's a lot of shortcomings in bash. I wrote my zshrc by hand, and I didn't like the fact that most people use oh-my-zsh. For me, writing my own zshrc from scratch taught me the differences between bash and zsh (I ended up writing my own .git and .hg parsers because running the commands is too slow).
So Nashville with a population of darn near 2 million is "the Boondocks?" Am I missing that part of this that had something about a job in someplace that could even remotely be considered Boondocky?
I am not completely sure,but does this help do the same thing as heap analytics (auto capture of events) or do you still need to specify what events to track and this script just provides utility methods for the same
I'd just like to point out that React does not have a dependency on left-pad. React has no dependencies at all[0]. devDependencies have no impact on third party consumers.

[0] https://github.com/facebook/react/blob/master/package.json
This is a good idea but is important to take care and show real interest in the answers. Maybe because I'm also a bit introverted it's hard for me to feel real interest during small talk.
Agreed.
Most development groups should be building a local collection of utilities that contains all of these snippets, and most importantly, some documentation of what they do and some unit tests to demonstrate that they are correct.

No need to have global dependencies on small snippets that really should be in a core library anyway. C has libc, Java and C# have the creator's (Oracle or Microsoft) standard set of libraries, Python has the "batteries included" stuff in all the different distros. And so on. All of these snippets rightly belong elsewhere, not in packages.

And even if you did get them added to the right libraries, I guarantee you that you will not get rid of the need for a collection of small, and somewhat random, in-house functions, classes and libraries.
This is rich coming from Uber.
There's a big difference between a "misc" module and a "trigonometry" module.
More Go centric, but they are similar. So there may be some ideas that could cross-pollinate.

https://github.com/artktec/gopkgr
If I understand correctly, this data was recorded in 2011. It amazes me that it could take NASA this long to sift through its own (massive) data. As datasets are getting ever larger (outpacing gains in computing power, I feel) I wonder if some similar discoveries will take decades (centuries?) in the future.

Does anybody know if these teams make it a point to keep datasets "small enough" to be manageable in reasonable time frames?
> You just described free software, not open source.

Someone hasn't read "the open source definition". But in either case, free software is what matters here. What you describe as "open source" is actually proprietary software.
How Third Man’s giant Detroit location is becoming the ultimate D.I.Y. ecosystem
Oh, and one other memorable detail that I couldn't make up.

The database went down DURING the CEO's 50th birthday party!
I'm going to keep writing stuff in JS, and I'm going to keep loving it.

Why do you like it? Serious question.
You see, San Francisco is where the Internet is. You might think it's a globally interconnected network of computers, but in fact it's really all in one place, and so the further away from it you are, the less you can channel its power into disrupting markets.