skysight-inc/HackerNews huggingface dataset:
I'm sure companies would pay for it. The service needs to be part of the main package service, not some third party.
Would someone use this? I think a text editor is a pretty good tree editor as it is but then again, as a programmer I see everything as parse trees anyway :)
I use to use PuTTY and then later MOBAXterm. PuTTY was a bit too simplistic for my taste and MOBAXterm way too much bloat.

These days I just SSH out of WSL using ConEmu (https://conemu.github.io/) as the console. Seems to fit my overall workflow the best and gives me a mostly common experience between my Windows and Linux systems; including essentially a tabbed terminal experience. I still use plink.exe from the PuTTY distribution so tools like Git on the Windows side can still behave like they do on Linux using ssh-agent.
I'm curious how this will affect trucking productivity. Drivers need to be in their vehicle to be making money. Most trucks, I imagine, have a range of about 300 miles. A 60 mile range is very short. Since recharging could take hours(??) what is the remedy? Can these batteries be swapped? Does the maintenance cost outweigh the productivity cost?
Using Web Components with Angular
This link is inserted completely randomly in the discussion tree, but it made my morning.
This sounds more like a scene from Agent007 movie than real world events. I'm interested what techniques are used today, as we have so many advanced technological means..
Well not always but for a wast majority of cases it's a very strong option.
I'm doing fulltext search on 270 million rows in postgres (with textvector indices) in below 65ms on commodity hardware (sub 8€/mo).

And it works better than ElasticSearch, just due to the lower additional overhead.
The least they can do is create an alias system for common libs or disallow some lib names.

Another easy thing to implement would be a popularity check: "This package was only installed nnn times. Did you mean xxx, or do you want to proceed with the installation of yyy by author dev@g00gle.com?"

Email verification is a must.
Yes, with a lot of issues.

They are open issues and being actively worked on, but it isn't exactly stable enough to use everyday, at least for me.

---

Almost all the issues are intermittent, and you might not be affected, but my luck has been bad:

* Hangs till return, sometimes. [0]

* v-flag can hang. [1]

* Alt sends \0. [2]

* Authentication fails. [3]

* Nmap fills the hard drive when sshd is running. Sometimes. [4]

* Git compatibility isn't quite there. [5]

---

[0] https://github.com/PowerShell/Win32-OpenSSH/issues/874

[1] https://github.com/PowerShell/Win32-OpenSSH/issues/879

[2] https://github.com/PowerShell/Win32-OpenSSH/issues/865

[3] https://github.com/PowerShell/Win32-OpenSSH/issues/855

[4] https://github.com/PowerShell/Win32-OpenSSH/issues/787

[5] https://github.com/PowerShell/Win32-OpenSSH/issues/752
I don't have a anything to cite either, other than personal anecdotes.

This has happened many times to folks in my workplace. They come across the PuTTY download page and think that it's a shady looking site, and then continue looking elsewhere.

We instead just deploy putty.exe to everyone's machine directly now.
Sounds like directional microwaves that heated up the brain.
I was thinking the users could set their own thresholds, just like they do when searching with date and resolution ranges.
Those service already exit, e.g. https://www.sourceclear.com/ whilst I hope they're doing well, I don't think they've made significant in-roads into the volume of people using open source software library repo's.
I can't possibly conceive of any circumstance in which the typical American might possibly miss a payment. Or find themselves unable to launch a legal challenge.

Your phone number is unlikely to be distributed to another person immediately on expiry, or before expiring. Not so Internet domains.

https://www.fool.com/investing/2016/06/05/guess-how-many-ame...

https://www.avvo.com/legal-answers/can-i-be-fired-from-work-...

40 million results for a Google search on lost Internet domains:

https://encrypted.google.com/search?hl=en&q=lost%20domain%20...
Maybe you're right, but I see one possible downside that is quite important.

I have encountered the case "the package has an important bugfix but is not yet published on PyPI" way more than once or twice.

With the intermediate maintainers, that's going to get worse.

I believe namespaces and signatures are the way to go. With a special privileged namespace for the curated widely known packages (e.g. SciPy or Django) - a little like it's on the Docker Hub, where curated mainstream images are just "debian" or "python" but anyone can upload e.g. "jdoe/debian" if they need some customization.
China's Bitcoin Exchanges Receive Shutdown Orders and Closure Timeline
Absolutely agree.

We have a constitution that guarantees our right to free speech.

And then we have a number of individuals in government who find every possible way to explain that right away, and throw you in jail.

It's like saying, "everyone has the right to not be searched without a warrant...

... but I swear I smell marijuana somewhere around here so let me call a judge and in 15 minutes we'll be kicking down your door."
Ask HN: For those moving away from React what options are you considering?
With the patent clause taking up much of the discussion when React is brought up and following that – that it may be in many companies' best interest to migrate to a different tech – what frameworks or approaches are you considering for larger frontend applications.
When you go this adress http://121.42.217.44:8080/

"Hi bro :)

Welcome Here!

Leave Messages via HTTP Log Please :)"
Interesting if you think that npm/Rubygems/PyPI are leaving a load of money on the table, why do you think they haven't introduced those services so far...
As an avid tmux user I rarely find the need for a tabbed Putty. Though if I had to choose an alternative Putty fork, Kitty would get my vote..

http://www.9bis.net/kitty/
my name is a killing word
Hmmmm it's one issue.

Micronutrient deficiencies.

We can solve this issue today at cost Y. Or we can pay 10*Y to reduce 1/10 of the issue in 50-70 years time.

This thesis,'if true' is a small part of the nutrient problem, it won't even touch the poorest of the poor in the western world for instance. Because once you pull people a little above poverty nutrients in foods are meaningless.

Micronutrient deficiencies are solvable today at 'low' cost (~zero cost compared to the global warming issue)

They are considered perhaps the leading problem in the world today.
You are confused.

"Site Delivery" is purged globally within 7 minutes.

"Fast purge" enabled products (site delivery) is purged globally in under 20 seconds.

All assets for websites are site delivery. Only media services family of products are not site delivery. Those purge within a couple of hours. If you are someone who uses media services products, you know how to force Akamai to go back to origin globally instantaneously and how to trigger invalidation. In media services you should never serve stale.
Well they've made a first step to de-cluttering iTunes by moving iOS app management out of the thing, as well as a few other bits, so hopefully it will be less of a dumpster fire in the near future.

As to the fact that you're at Apple's mercy, that's true, but I don't see how that's particularly different with Android and Google, the only difference being with Android you often don't get their latest software update. ;)

And yes, definitely a paradox but I think the primary reason is that people tend to think of Android as being a Google product, when it isn't, Google just bought it. If you use pure Android on a rooted device you could probably secure it pretty effectively, except that software updates then become more complicated, plus the process of rooting a phone, while not as complex as jailbreaking an iOS device, is quite challenging and above what the vast, vast majority of users are willing to do.
In Amish Country, the Future Is Calling
Why is it faster to process a sorted array than an unsorted array? (2012)
> I mean that the code isn't supposed to be fighting the language.

That's the issue: those programs that did best were those that fought the language the most, and those that pushed the closest to the edge of the rules. You can't, in general, look at two programs and assume they approach the problem the same way.
My case as already been said better by others:

"In the physical world of crime investigation, common sense dictates that the perpetrator of a crime may use any weapon and not just one made in the country of his birth, and that the developer or manufacturer of the weapon most likely isn’t the criminal.

And yet, those seemingly crazy assumptions are made every day by cybersecurity companies involved in incident response and threat intelligence.

The malware was written in Russian? It was a Russian who attacked you.

Chinese characters in the code? You’ve been hacked by the Peoples Liberation Army."

https://medium.com/@jeffreycarr/the-dnc-breach-and-the-hijac...
Oracle joins CNCF as a Platinum member
Meet Ukraine Self-Sacrificing Military Drones Running Open Source
History of Vending and Coffee Service
I think it might just not have happened yet. The npm community can be pretty creative and enthusiastic!

I don't think IRL identities are necessary for what I imagine. It's more like establishing a basic set of packages that have been around, have communities of committers, reverse dependencies, etc.

Maybe we would even make a starting assumption that the transitive closure of dependencies originating with a set of high profile packages are "approved".

I'm thinking aloud but I think there could be a reasonably pragmatic way to get this started...
Transitioning to a Cloud World
My take on this is that it's not aimed at coding but more like a way to map ideas.
I think the author's goal was quite obviously to have strong sum types with compile-time safety and branch resolution. In other words, to make it impossible to use the value stored in the variant in a manner inconsistent with its type because doing otherwise is a compile-time error.

The above parts of the standard library don't help in achieving this goal.
The current Watch offering certainly wouldn't, as I've said elsewhere all the guidelines on how we developers build things for the Watch is a strict "anything that can be done on the phone, should be done on the phone" policy, meaning without the phone the Watch becomes pretty useless.

That could change though, it would make sense if they manage to pack in enough guts while preserving the battery to make the Watch more stand-alone, no reason it couldn't happen.
It always worries me when I install a well-known or large package from npm and it ends up downloading dozens of dependencies maintained by disparate and unaccountable github users.
There is no single company behind PostgreSQL, there's a foundation which manages development, but there are a number of well established businesses offering commercial grade support. Some of these companies employ some of the major contributors to PostgreSQL.
Wait, what? How in the world does anything you mentioned relate to that ending protestation written in capital letters?

All diversity efforts that I've ever seen are the exactly opposite of profitable and result in sexist/racist/otherist selection of candidates. The unfortunate end result of worse selection is that worse candidates were hired.. every. time.
"It is interesting that the idea of get up early has become so pervasive."

Early to bed and early to rise. Also, our ancestors used to run more polyphasic sleep cycling.
Considering how much we supplement our nutrient intake through eating processed foods (e.g. enriched flour) I doubt a human study would even be possible.
Are you a Jake Pauler?
This would be more useful if like project gutenberg (wordpress editor redesign) each card/block could be "structured data" (image, text, table, etc) - it would be pretty neat tool to use for a Knowledge base.
In case anyone doubted the pure purpose of terror is to control the masses.
I've been using Xshell[1] and Xftp[2] (both are non-free licensed, free for personal/"home" use). Updated often, great interface, lots of features. Xshell comes with Xagent, its version of pageant/ssh-agent.

[1] https://www.netsarang.com/products/xsh_screenshot.html

[2] https://www.netsarang.com/products/xfp_screenshot.html
Because a Japanese woman could never type on a Chinese typewriter?
Very Nice Info About Cloud computing Keep It up
They 'll apologize and put it back in 2 months or so.
The conda package manager is free and generally feels like a professional package manager like yum or apt-get.
Data Science Bill of Rights
I'm all for security but this hit a nerve with me:
"Success of the attack relies on negligence of the developer, or system
administrator, who does not check the name of the package thoroughly."

Package managers need to do more. If they had an enterprise version that you could subscribe to monthly/annually invoice that you would get enterprises onboard, they are concerned about security and will pay. Developers like us will help encourage it. I'd rather not see some third-party "secure" package managers but make them part of PyPi and send funding to the Python foundation. They are seeking donations but that doesn't work well with businesses. Make it a monthly/yearly service.
Only good match is bitstream vera sans. I prefer Hack because it is lighter (cf. i) The only thing I prefer in Vera is the 0. The dot inside the zero in Hack is too big.
NASA crashed the $4B Cassini spacecraft into Saturn. It was awesome
WOW! The website looks so shiny just for hosting a single font. Almost thought it was some website advertising Hack the language related stuff. Great web devs behind the site. Kudos to you.
I think the original app that inspired it was gingko[1] but it's nice that we can see the source of this one[2]

[1] - https://gingkoapp.com

[2] - https://github.com/raymestalez/nulis
I'm just writing this to help support your comment and ConEmu. I've been a windows-desktop linux-server dev for years and I haven't found a better experience than WSL on ConEmu. The common CLI experience between bash and powershell and the latest interoperability improvements of WSL have been a _massive_ improvement.
I can assure you that Pinterest's dataset is vastly bigger than 100GB :) at certain scale RDBMS will obviously experience issues and might no longer be the optimal solution. For PG (hard to generalize) but beyond 10-20TB things become painful. Now the thing is that "limit" is constantly shifting so if you are starting with 100GB datasets and it is growing at 200GB a year you can basically stay on single instance RDBMS forever.
As I understand it, "deep state" is just a scary-sounding phrase used to mean "unelected career officials". It doesn't mean "shadow government" or whatever you're suggesting might be going on in Cuba.
The bomb that changed my life (2011)
Yet another attack vector that doesn't exist at all in Linux distributions but invented by language package managers, sadly.

They solved the issue 2 decades ago by heavily vetting packages before accepting them into repositories. Users are allowed to add and use packages from 3rd party repositories.

Maybe solution to this is creating curated repositories based on publicly open ones and using them by default (and requiring opt-in for using other repositories). Conda for Python and Stackage for Haskell seems like relevant solutions.
I am in a number of different slack orgs. With one email address, I join whatever org I want.

> I have multiple email addresses and don't use a specific one every time... I just can't remember which email address I [use]

I think I see the problem. I'm not sure how this approach allows you to function on the internet at all.
Many comments are saying that the article is not good as it is not accurate. (e.g. @masklinn)
I agree. The author could have spent a bit of time reasarching this since bullet-point-articles are probably the easiest to write down.

However, it's interesting (yet sad) how its catchy title "Top ES6 features by example" is making darn popular.
Implementing sso idp requires pretty good crypto support - last I looked ruby, python, node don't have anything built in and use external native libraries (OpenSSL etc) that are a pain to setup and use securely.
I bet there are quite a few malicious NPM packages that we do not know about.

Is Node is used in government and military solutions? If so then the NPM ecosystem is likely targeted by state actors, and it is a sitting duck.
This is why we are working on integrating TUF (The Update Framework) signing into the OCaml OPAM package manager. See https://github.com/hannesm/conex-paper/blob/master/paper.pdf for the talk from last year. There's one more iteration required on the implementation before we're happy with it, but we are aiming to get this live on the OPAMv2 package repository some time in 2018 for all the publicly available OCaml packages.

OPAMv2 also exposes sufficient hooks during the build process for using OS sandboxing during builds, and disconnecting network access/etc. It would be nice to factor this out to be more OS independent (e.g. for all the `unshare` tricks on Linux, or the sexp-format for sandboxing on OSX) in the future.
I don't think you understand how indoor vertical farming works. In 1/8 of an acre you can produce an entire acre of crops, utilizing upwards of 99% less resources.

To boot, you don't even need tractors to harvest. You can just pull the entire tray yourself once the NFT solution's drained from the channel.

I can take 1/8th of an acre of land, and produce a full acre of wheatgrass in two weeks and harvest it myself with no mechanical methods required in less than a couple of hours.

https://www.youtube.com/watch?v=9ZTikdxj8AI

I was doing this 20 years ago in high school horticultural science class.
https://en.wikipedia.org/wiki/Better_Call_Saul
Open Source License FAQ – Facebook Code
if you know someone who might be a good fit, you can refer them to the job here https://ref10.com

you'll earn a referral bonus once they're successfully hired
I wonder how many people of the the planet Saturn were harmed during this operation.
I'm just going to go out on a limb here based on personal experience and say like 95%+ have a bachelor's degree or higher.
The worst in my opinion is working with someone who whips up cool shell scripts/utilities, invariably used in production, and uses a "non standard" shell. Usually checked into source control too. It's just a PITA for everyone else. Same goes for "non standard" command line utilities. If you're writing stuff for your own use fine, but anything shared should be bin/sh, imo.
I agree that the article needs some work, but there really is nothing wrong with still using var. I'm in the Kyle Simpson camp and just use var for everything except if I'm actually creating a constant or block scoping comes into play or I need to prevent the hoisting of a variable. That way, it's clear what I'm doing and what my intentions are.
> potentially thoughtful commenters who don’t want to become targets

I almost never discuss politics, philosophy, important personal subjects or really anything of substance on Facebook. It's become purely for staking a tether to a few hundred key individuals I want to keep track of but don't need/want to talk to more than very rarely. Most of these contacts are not close friends or people I see any point in arguing with (especially after seeing the content of the most prolific posters).

Do you remember when Google actually encouraged people to use anonymous user names? [What a 180 they did!] This was the default, established early on, for good reason. It is a true democratizer, casting aside all to distinguish anyone but their words and/or choice of posts. With one stroke, it eliminates racism, sexism, ableism, name recognition bias, fashion snobbery and all other means of discrimination by appearance or public life. It also raises the bar for one to be taken seriously, as anything you say can be fact-checked immediately.

The cult of personality infecting user representation on the internet has been a tragedy to watch unfold. People would rather copy and paste words (usually out of context) from someone on a pedestal to glorify or vilify than take the extra step of vetting or responding meaningfully to what they say. I guess I should have expected it, but it's still hard not to be disappointed.

TL;DR edit-- I meandered a bit, sorry. My point is that user anonymity results in a more level playing field for discourse. Certain discussions of substance benefit greatly from this. In the world of real names, ad hominem attacks or hero worship all too easily derail productive debate. This can happen in anonymous forums as well, but from my experience it's much better corrected for in those places.
Google Chrome will block autoplay video starting January 2018
Transportation as a Service
Frankly, I don't get it why so many people in tech are so biased against smaller independent businesses such as taxis and mom-and-pop shops, so that the shareholders have more money (and they already don't know what to do with their money and beg entrepreneurs to take them to beat index funds returns). Like everybody has to be a corporate slave otherwise doesn't have right to exist. It's obvious those smaller/independent companies are the target of Uber/Lyft, sucking life off another class of people that would otherwise have bearable conditions of their existence. This is frankly a highway to hell for everyone.
Whoa urlib & urllib3. Those are pretty popular packages, especially to newbies. Hundreds of websites that teach web-scraping use those libraries.

Wonder what is an effective form of protection against such attack vectors?

Do digitally signed certificates fit into this usage scenario??
Unlikely. The affected diplomats explained that they left their beds immediately when hearing the sound, which would have been difficult for someone experiencing sleep paralysis. Nor would sleep paralysis have inset again when the diplomats returned to their beds so quickly.
So, apologies for being a bit cynical here, but I don't see this one being addressed any time soon.

it's been at least 5 years since npm started getting scrutiny relating to security weaknesses https://blog.andyet.com/2012/03/08/compromising-the-integrit...

and 4 years since Rubygems was compromised http://blog.rubygems.org/2013/01/31/data-verification.html

and yet, I don't see substantial movements relating to package security and trustability in these repo's. To be clear I'm not suggesting these two are any worse than others, they're just large repo's who have had incidents in the past.

The problem here (to my view) is that increasing the security of package repo's will slow down releases (additional checks take time) and cost money (additional security, hosting etc) and until there's a market demand for those service, they won't happen.