skysight-inc/HackerNews huggingface dataset:
> It's disappointing that in 2017 no Linux vendor ships with a default-denial Internet firewall configuration but I suppose stories like this explain why.

I don't believe that's accurate. On openSUSE and SLE you have SuSEFirewall2 which has such a configuration (from memory) and I would be surprised if RHEL doesn't have such a configuration.
It's done through Lloyd's, so many different companies in a risk pool.
I never said or implied that I believe it is science based. I highly doubt it is. However I hadn't played it so I'm not going to argue about that.

What I said is that your argumentation is absolutely incorrect and wrong in this context.
Is Your VPN Leaking?
Trunk Based Development was broken for us. This is how we fixed it with Koritsu
I'm thinking that both Facebook and Twitter has lost that early adopter, frontier mindset that initially drew us to it. Reddit had it for a few years but has lost it now and HS has some of it in a niche way.

I think that there's a huge space, a huge potential for a new social network which we, early adopters, will jump in and love.
One word: GitLab
I think that productivity is a tough thing to measure...yes there are metrics, but do any of them give an accurate picture of productivity? What do you think is an accurate measure of productivity?
Related: Dig into your language's source code and code of major libraries! Your standard lib is probably the best examples of idiomatic code and efficient code that you're going to have access to, written by the authors of the language itself. You'll notice bugs, inconsistencies and poor docs which gives you opportunities to contribute upstream, at the same time making you read more and learn how particular features work under the hood, which might give you new perspectives in your own code.

In Java, this might be java.util.Collections package, or java.util.Concurrent. or in C++ that might be Boost. In Elixir, I start with Kernel.ex[0]

https://github.com/elixir-lang/elixir/blob/master/lib/elixir...
Yes to PLoS One. I think Scientific Reports (as a NPG journal) still tries to be somewhat selective, but I'm not sure.

My proposal is a bit different because it establishes a preliminary and public review process that is separate from "publication." You cannot take your PLoS One article and now get it published at Nature or Science. But you could do that if your paper was "reviewed" at bioRxiv, meaningfully improved and corrected, and then submitted for publication elsewhere.
They're definitely a real product. Popular with campers; someone was selling a backpack with integrated solar panels.

Achieving those numbers does require the panel to be aimed at the sun and the sky to be clear, though; cloud or off-axis aiming drops the efficiency dramatically.
If Amazon didn't host Netflix, Netflix would have been hosted on a competitor's platform. Nothing would have changed about Netflix and Amazon, plus many others, competing in the production and delivery of entertainment content.
Reminds me of DHH's talk about having just a "nice italian restaurant" : https://www.youtube.com/watch?v=0CDXJ6bMkMY
Then you apparently don't work on PCI grade machines. Many particular industry security standards dictate you put a 'if you are not authorised disconnect now' message in the motd.
Its a simplification of "there's no way to objectively measure productivity in software that doesn't introduce bad moral hazards".

If you thank thats not true the industry would love to see what you've got as its one of the central problems in software development.
This article missed a great opportunity to enumerate the advantages and disadvantages of either model.
Off Topic. I find it funny that you would have a hard time watching "HBO's Silicon Valley" on an Ubuntu machine legally. HBO still uses flash based DRM.
I never thought such kind of money is possible in Poland, except in one shitty company that shall remain unnamed here. Could you tell what do you do to earn such a salary ?
Or, AFAIK, you can build Turing-complete stuff.
However, I prefer to avoid adding games so complex/advanced.

Science has to be its main part of mechanics, rather than some subpart, as:

"Any sufficiently advanced game is indistinguishable from a science-based game."

(Saw somewhere on HN "Any sufficiently advanced text editor is indistinguishable from a dedicated app." Yes, I know it's from https://en.wikipedia.org/wiki/Clarke%27s_three_laws.)
Let's bring ourselves back then to what was being stated. You said :

> The US, UK, and Japan are all currently fighting deflation with QE policies, which seem to be working fairly well.

... and I said :

> If by working you mean rapidly transferring wealth into fewer sets of hands, yes.

... and then you said :

> Are you saying that avoiding deflation and volatility is what consolidates wealth?

I was talking about the effect of QE. That effect being the objective fact that money has transferred from people with less to people with more. You were inventing a strawman about the theory that if the people who were doing this didn't get what they wanted, we would have 'deflation and volatility'? Seen the house markets over the past 30 years? Looks pretty volatile to me, so it doesn't sound like whoever is making policy has their fingers on the pulse, do they? Sounds more like a marketing gimmick to me.

I had to write a paragraph of crap to answer a BS premise that had no relationship to the argument at hand. So. Strawman.

> Furthermore, I don't know how to make heads nor tails of the statement that the "concept of value itself" has been "perverted"

Maybe you got fixated on your strawman.

> but at least the dollar isn't suffering from deflation and extreme volatility

Yeah. Theft is much better. Here is a gun to your head. Give me what I want or I pull the trigger. But at least you don't have deflation and volatility. Remind me again... how many people went to prison for the GFC?
How to Be Exceptional Rather Than Only Capable
You've made an assertion, but not provided any evidence for it. That doesn't seem, to me, to add much to the discussion.

Would you like to back your statement up?
That's not the only form of advertising. They are advertising themselves. More like marketing.
Point being that most aircraft can fly just fine with one of its engines disabled.
At the various conferences we've attended - EuroClojure in particular - there's a common story amongst the delegates; developers who aren't using Clojure but who want to.

This sounds different from what I remember from last years EuroClojure. At the beginning of the conference, there was a show of hands of who's hiring (a lot of hands went up, I'd estimate[1] roughly half the room) and a show of hands for who's looking (I counted half a dozen hands).

Having said that, I do know that there are people actively looking to work in Clojure. I personally know a few such people (and I myself have also been basing my employment decisions around whether I can work in Clojure or not).

[1] from memory
I've always wondered why this kind of tool wasn't widely available. Is it really that hard to get right? What's so complicated about it?
The FFF forum, to me, was similar to the Unfiction Forums - which was very active at the time the book was released, and both dealt with mysteries and puzzles of online phenomena - with found footage (for FFF) & Alternate Reality Games (Unfiction).

ARG players knew they were playing a game, but there is also a game and excitement about finding out whether an online mystery is actually a game or not.
Time would be an accurate measure, considering the same level of quality is met.
>> Monday/Thursday NFL games

Mondays are on ESPN but Thursday night is on network TV. Not that you'd want to watch a TNF game. And MNF is a good excuse to go to the pub and watch the game.
How to Manage Project Without Project Manager
frankly I've found the utility of my oreilly membership has definitely increased over the last few years as the utility of Stackoverflow and Google searching on an issue has declined. However it's true that I don't buy physical books very much anymore, and definitely not physical technical books.
I love that, seriously. Machiavelli's Guide to PaaS.
They don't need to back it up. It is up to the person making the original claim to back it up.

There's half a century of research and practice into this topic. Anyone in the industry _should_ know about this. Anyone who doesn't can find it on a search engine within 30 seconds.
One was a remote job at a SV startup and now I'm making pretty much the same in an in-office job in an international corp. I filled a niche they badly needed to fill (it's not like I'm some unicorn though) hence the unusally high pay.
I am not sure if your book is DRM protected – if you browse the books at ebooks.com, you will see that ebooks.com is selling books in "EPUB/PDF format" and „secure EPUB/secure PDF format“. Furthermore please take a look at https://support.ebooks.com/hc/en-gb/articles/205639205-Insta...: Most of the ebooks available to download from eBooks.com (but not all) are protected by Adobe DRM…
My plan is to retire in 5-7 years. I could do that sooner if I went into stock market (and prayed that the mythical 4% per year returns will be sustainable in the future) or became a landlord, but I prefer to play it safe.
For Maven, there is a repackaging facility with name mangling that can do this, the Maven Shade Plugin. https://maven.apache.org/plugins/maven-shade-plugin/
Nothing changes. I'm sure the ancient world had the equivalent of Scentsy hawkers. My wife has an essential oils kit and vaporizer. Of course it is sold like Tupperware.
I thought of Minority Report and the precog's dreams wired up to the monitors.
For all, be aware that this kind of money are extremely rare (but doable in some niches) in Poland. Half of that is generally perceived as very good salary for most IT jobs, and median is probably quarter of that.
In software, productivity can pretty much be measured through time spent on a task, while mantaining same quality.
Should we as an industry stop trying measure productivity, or should we measure and try to manage the moral hazards? Is this a case of "perfect is the enemy of good enough?"

(edit: It seems funny to me that many other industries are fine with less than perfect information, yet somehow the software industry can derive absolutely no value from it.)
I think it's not a matter of open source : there's no mean shark behind LISP but there's (a really mean) one behind C# (or Java or Swift etc).
I don't. I assume a deep discount because Amazon uses them as a shining case study, despite only their control plane/front end hosted with AWS.
Well, yes. And thus why this will fail.

I want to read O'Reilly books as PDFs. Properly typeset PDFs. And I don't want to buy from anyone other than O'Reilly. And I tried Safari, but it's not the same as reading their books as PDFs.
Huh, I guess you're right.

My phone has a battery of around 12 Wh and lasting maybe 30 h on a full charge, that's a power consumption of 0.4 W on average. With a surface area of about 70 cm², we get about 60 W/m².

Phone eats 60 W/m².

Sun provides 1000 W/m².

Okay, let's cut that into a fourth because, you know, clouds and nights and stuff. Retake.

Phone eats 60 W/m².

Sun provides 250 W/m².

Essentially, if you find a solar panel with 25% efficiency and the right size, you can slap that on the back of your phone for a very tiny size increase, and you now have a phone that powers itself as long as you put it down in the sun instead of in your pockets when you don't use it!
There is the spoofer project at CAIDA:

https://spoofer.caida.org/summary.php

23% of the address space, about 33% of AS's. It has improved a lot but still some way to go
No, it's a well known problem. The old lines of code joke still applies. You can introduce metrics, but those will just be gamed because software is a multidimensional optimization problem with complex trade offs. So, you can't translate that to a single measurement and call it productivity.
Before which you have to figure out how to measure quality. There are countless ways of course, but choosing your metrics is subjective and pretty much arbitrary.
Why Americans Feel Poor, in One Chart
I'm amused by the fact he thinks `array.push(arguments)` inside the nested function evaluates and pushes the arguments from the parent function.
Bootstrap to CSS Grid
monorepo is very difficult to get right - and once you do, you are pretty much stuck with the language/tool choices since the switch usually takes months/years.

multirepo is a nightmare for changes spanning multiple repos, but the freedom of using the best tool for the job is much easier to achieve.

or so is my thinking about these from experience.
There is no better, there is only tradeoffs, and some people prefer one tradeoff and others prefer another tradeoff. That's just how it is.

So before making any siginficant changes one should discuss what the desired tradeoff is, and then measure the continuous change towards that tradeoff.

For instance monorepo is a goal for people who want interacting tools to be build in their corresponding state without need to consult someone else. Can you do that? Check out the repo (for 2-5 hours depending on your code size) and then just hit "make" and "make test" and it runs through? If yes it's a success, if no something went wrong in the process.

PS: There are actually build tools that are language independent, e.g. make, CMake or Maven. You can just use these.

PPS: I'm personally really happy to see that monorepo in itself doesn't resolve the dependency tracking for internal tools. I still believe in the other way around. A good dependency tracking tool can totally replace monorepos.
Not just allowing raw SQL - allowing raw SQL fragments in your code, mixed in with regular ORM usage! Turn those fragments into a function and you have nicely reusable components with which to build advanced queries.
> The next one is going to be some gaming protocol.

Quake 3 engine game servers have already been used in amplification attacks.
Let's say you receive an EM signal from a sentient specie.

If you pinpoint its origin to light years away, you know they already had a lot of time to progress past this technology. A good response if you plan on eliminating them would not be a fleet: you'd better setup and direct a huge gamma-ray burst in their general direction.

So the destructive response could come at the speed of light with a little delay at first.
No, query planners are generally hopeless; for my use cases, it's trivial to get orders of magnitude better performance with different query structures.

If you have just a predicate, or a single join, most query planners are just about ok; with multiple tables and predicates touching those tables, there's ever increasing risk it will start the join on the wrong table and produce too many rows somewhere in the plan. Engines like PostgreSQL are unpredictably stupid (but sometimes very smart), while MySQL is predictably stupid (but consistently fast when you keep it simple and avoid specific constructs).

When designing for interactive use, you want to design for a maximum run time on the query. If that means using a query which is often not the fastest, but is never slower than X, it's the query to use. Smart planners are more of a hindrance than a help, because they reduce predictability.

The worst case is when a planner starts with a small row set (planners usually like starting with small row sets) and joins against a big table expecting a similarly small joined set, but ends up with an enormous result set because of the cardinality of the join. Estimating join cardinality is a tough problem for database vendors to solve, and it's critical to figuring out the correct join order - particularly since the number of join strategies grows with the factorial of the number of tables to join, so the planner can't spend much time on it. Meanwhile, the application developer may very well know the designed cardinalities and a join sequence that minimizes the chance of a blowup, the most important thing for interactive use.
People don't tend to survive on a raw diet, in the evolutionary sense. I don't see anything scientific at the moment (because studying diet is hard + pre-coffee apathy), but an internet search for "raw food menstruation" indicates that the most common next word is "stops".

"Survival," in the evolutionary sense, doesn't just mean "living into old age" but "reproducing successfully", which paused menses preclude.
From the arguments I've seen, the top highlights of single vs multi repo:

Single repo enables company-wide code sharing and refactoring with the least amount of friction. E.g. A programmer can modify "foobar(x,y,z)" to "foobar2(z,y,x)" and update all the corporate-wide client code that calls it. This ensures all teams are always using the same code instead of Team A on helperutils_v5.2.3 and Team B on helperutils_v6.1.0 which are incompatible with each other.

The biggest downside seems to be slow performance for syncing huge repos. This was one of the motivations for Microsofts GVFS for git. It enables sparse downloads.

If there are good arguments for multi-repos that are not related to performance which override the benefits of company-wide consistency of code, it would be good to discuss them. (I'm talking about companies like MS/Google/Facebook and not consulting firms with a different repo for each customer project.)
It's not magic. I've personally removed dozens of N+1 queries from code written by one of my fellow consultants caused by misuse of Entity Framework. Here's a reference: https://msdn.microsoft.com/en-us/library/jj574232(v=vs.113)....

At least with EF it's possible to completely disable lazy loading. I always recommend doing so -- when you're passing entities between methods it's pretty easy to lose track of what's implicitly 'loaded' on the object. Innocent changes to a method that operates on an entity can cause a database round trip...horrible idea.
Time spent working on the wrong thing is not productive. How do you measure quality in software? If you need to measure quality in order to measure productivity, than one cannot truly measure productivity.
I remember playing the first few levels of this game when I was still new and starting to learn vim. It marked my first foray into programming as it was a requirement for my basic programming module, so vim tutor was quite intimidating back then (huge wall of text). I believe I stopped using vim adventures when I found out about the paywall.

However, googling about vim had convinced me that it was this awesome piece of ancient software that was somehow better than modern editors, so I stuck with it. I ended up doing my assignments in vim starting with only the hjkl/<Esc>/i keys. Then whenever I wanted to do some shortcut I thought vim might be able to do I just googled it, got my mind blown, then internalised it. Or reading up on articles talking about the must-know vim shortcuts.
> are capable of reverse engineering and analyzing Android apps (i.e. WhatsApp).

Did you do that before signing the letter?

> Furthermore, if you can verify that the app does what it advertises...

Without reproducible builds you can only verify the specific version of the app on your device. It's quite a leap from there to say 'Whatsapp is safe for you, too, regardless of your use-case'.
Why the Ubuntu developer portal moved to DjangoCMS (2015)
Eastern Europe is state of mind, not a geographical location.

It just boggles my mind why a young person (like the article author) would choose to think in such a lazy manner and beat that narrative to death -- corruption, local economy, the struggle to run legitimate business, etc.

With all due my respect and w/ the risk of being downvoted -- that is BS; and completely opposite of the SV mindset.

It just shows that the author haven't been exposed to the actual environment (i.e. not the university) in Bulgaria -- there are numerous large-scale companies w/ strong regional presence, as well various small outsourcing shops and at least 5 co-working spaces, where you can find lots of very capable people working in very healthy environments; anecdotally, for the last ~13 years I haven't heard even one founder/c-level exec of being asked to pay anything under the table.
Set up Mosh on macOS: a simple guide
OT, what is it with Medium sites pushing onto my history state? Getting out requires at least two, frequently more applications of <Back>.
> Now, let's say I hook up a printer to a switch in that configuration. Is it smart enough to not respond to UPnP coming from globally routable addresses?

WTF? How would it not be utterly idiotic to not respond to UPnP requests from globally routable addresses? Why should it be impossible to print from some machine, just because it has a globally routable address?
>Bitcoin, however, depends on the black market for its existence.

Do you have anything to back up this assertion?

I'm going to contradict you here, and say that there is no reason to assume that.

Only idiots would use Bitcoin for black market purchases in the first place, there are better alternatives for the majority of purchases, and the biggest sources of black market are still happening with USD.

I'm not sure why it's even relevant since both currencies would function just fine if we magically removed all illicit activity.
I think that's having a single codebase. You can have different projects using different languages on a single repo.
CentOS has the advantage of being 'convertible' in a Red Hat so you can get paid support if needs be.
Have had Safari Books Online for about a year now, got it 50% off last August, love it. There have been several books I started reading in SBO and then ordered physical copies on Amazon. Never even occurred to me to order the books from Safari directly. The books I order are about broad topics and themes (Designing Data-Intensive Applications, Enterprise IoT, etc.). Rarely would I order a book about a specific Language or Framework, they have a limited shelf-life, but I'll absolutely reference the online versions to grab the info I need (more valuable format, can have open on monitor, search, etc.). Their process for alerting authors of this change may not have been great, but it seems like a smart business decision (assuming my use case if fairly typical).
Show HN: Trigger-based social media marketing
> Saw somewhere on HN "Any sufficiently advanced text editor is indistinguishable from a dedicated app."

You mean, "any sufficiently advanced text editor is indistinguishable from an operating system"? :).

And the joke isn't that sentence - the real joke is that such a text editor can offer better UX than your regular operating system...
Neither did humans, for the first 99.856% of their existence.
As a general principle I pretty much agree with your comment. But, in this case, the post is throwing around figures like 7K readers per week. That just isn't a lot for just about any sort of content creation that needs to pay its own freight. These days I'd be really skeptical about just about any business model built around selling content to individuals.
Why are human faces used on monkey subjects? How good are human at recognizing monkey faces?
As many have long expressed this concern, I and others have long done research into "manipulation" of prediction markets. We've done theory, lab experiments, and field tests. We find prediction markets are especially robust in resisting such influence, compared to other institutions and mechanisms.
Safety lapses hobble Los Alamos National Lab’s work on U.S. nuclear warheads
GreatBots.ga+Script
I wish there was a way to know how many evil-doers cancelled their evil plans after reading that kind of MOTD.
It's dangerous because it evokes a specific fear that's likely to inspire action. You could swap migrants and Irish in an area with a sufficient Irish population and it would still be true.

> the migrants suck

Is pretty harmless, while

> Keep the horny Irish teenagers away from our daughters

might well lead to someone assaulting people they perceived to be Irish teenagers who were getting too friendly with their daughters.
Yes, it's a well known problem.