skysight-inc/HackerNews huggingface dataset:
Did we read the same article? Automattic is not worried about the license. Automattic is worried about how others perceive the license and how that will lead to WordPress being perceived. They see no risk in the license, they see risk in how they will be perceived for being associated with the license.

The license is ONLY a problem if you intend to initiate litigation against Facebook and can't swap out React (or a React-using product you rely on) with something else. Something tells me the number of companies that a) will ever be in a situation to sue Facebook over patents, b) rely on React or React-based products, c) don't already infringe upon any other Facebook patent without using React, AND d) would be severely harmed if sued over React patents, is exceedingly small.

Google, Amazon, Microsoft and Apple only fulfill conditions a and b (although React is non-vital to their businesses). Most startups only fulfill conditions b and d. In order to meet all four conditions, your company would have to be built entirely on React (or other FB open source technologies), be small enough not to be able to replace React, not infringe on any of the many other patents FB holds and yet somehow own patents FB infringes on and want to actively sue them.

Deciding against React because of the patent situation for most companies is the equivalent of worrying about someone stealing your second million before you have even made a single dollar.
This is why I am not a huge fan of using package managers. I like to understand the code we put into our platform, and vet it. And not have it change under us automatically, after that, but review the changes manually before accepting it.

I felt a bit curmudgeonly but we have a responsibility at https://qbix.com/platform for all our apps being secure. I wanted to use repos for each package and manually git pull or hg pull them when they changed.

I was finally convinced by our developers to just use package managers with version pinning. Honestly it's really hard to avoid package managers, especially for all the newer functionality such as Payment Requests or Web Push. Luckily there is version pinning.

We want our clients to feel secure that we vetted ALL the code that went into the platform. So our package json (and composer.json) uses version pinning. We'd rather take a bug report and manually fix it than NO bug report and have a SHTF moment.
we've probably seeded it now with bacteria from earth.
Firefox Multi-Account Containers
No, the EU sets the laws, member countries implement and enforce them. If they don't, you can appeal further up the EU. See here https://ec.europa.eu/info/law/law-making-process/overview-la...
Five of My Favorite Command-Line Utilities for Automation
This is very helpfull. I never know that js has linq. Very similliar. Also using lambda. Just rename select keyword to map keyword
This visually reminds me of some of the Federated Wiki concepts Ward C has been working on for awhile [1]

[1] - http://sandbox.fed.wiki.org/view/welcome-visitors
There's a certain amount of work (and therefore money) required to do this. That incremental difference is small for a well designed application, but - someone must actually vet and curate the contents of the repo. That tends to slow down execution, leading to scenarios where things like docker a year or two ago from the canonical "trusty" repo were hopelessly behind the "real" docker since docker was evolving so quickly and trusty was by design slowing down.

Each commit that went into trusty required a team to submit and a team to approve. That costs money. ;-)
> Scientists [were] worried that when [Cassini] loses power, it could crash into a pristine moon, contaminating a place where we might someday search for life

Why is this so bad? Moons are pretty big compared to spacecraft, why are they so worried about the environmental damage of a single spacecraft weighing a few tons?
PX-2000 Portable communication terminal
> I wonder what the overall affect on noise of the city will be: you can hear more birds than you thought existed in the city?

More audio spectrum for AC units and the screeching of garbage truck loading mechanisms. I would not expect too much difference.
> anyone uttering the word gets in.

Right. That's how a speakeasy works. It's the most basic form of authorization
That means they're going to expect a lot of revenue. Which they plan to take on money that people give freely. I don't see that ending well.
I disagree, we absolutely can. Bounty and Charmin don't aggressively shove cookies onto my machine, or execute arbitrary javascript on anywhere near the same scale that ad networks do.
"The person or persons responsible are unknown, but let’s assume that CrowdStrike is correct and the responsible party are Russian hackers employed by one or more of Russia’s intelligence services. They used APT28 malware developed and maintained by a Russian lab."

Another out-of-context quote from the same article...this is fun ;-)

No informed person is claiming Russia did it merely because it was "written in Russian". They're all basing it on many pieces of circumstantial evidence.

Don't crime investigators also look at the criminal history, motivations, and opportunity of the suspect?

I'd say you're doing a disservice to that author by taking his quote out of context. He's very clearly not making the simplistic straw man argument that you are.

It sounds like he suspects the Russians did it, as is rational, but wants real proof -- and not just circumstantial evidence. That is a totally reasonable demand.
‘False Peace’ for Markets? A Trader Is Betting Millions on It
My more pressing (no pun intended) concern is with the press' coverage of these suits, when they don't lay bare the underlying machinations they are basically choosing sides.
> That way, it's clear what I'm doing and what my intentions are.

It's the exact opposite since you're defaulting to the most permissive binding style.

Defaulting to `const` would actually make it clear what your intent is: you use `let` if you need mutable bindings and you use `var` if you need hoisting.

If you default to `var` your intent is apparently to make use of mutable bindings and hoisting everywhere, at which point I can only expect that you put your variable declarations at the bottom of your function blocks after the `return` statement.
No more than are harmed every day by regular space debris impacting Saturn. Plus, we're fairly sure there are no people there.
60 miles is practical when both warehouse and delivery locations are within city limits.
"Often humorous and witty comments are my favorite parts of HN"

Then you'll find far better on Slashdot where free speech seems to actually happen, as opposed to here where you're not allowed to joke about anything.
Let the new experiement begin.
> yellow probably existed already as well then

Apparently Japanese traditionally only had the four - what the article calls "red" was used for any warm color, and "ao" covered any cool color.

Interestingly, the usage was pretty fluid. Now that I read up about it, it seems that "ao" was used for anything from pale gray all the way to dark purple overlapping with black. This survives curiously in some quasi-archaic usage - 青毛 (lit. "blue fur"), meaning a black horse, and 青馬 ("blue horse") for a pale gray or white horse.
That one is even more malicious, it uploads contents of your ~/.bash_history and system profile. But at least it notifies you afterwards...
Imperial War Museum in London seems to employ something like those in their exhibitions. They have black rectangular plates affixed in various places with very localized sound fields underneath them.
Show HN: Playing Runtime Control-Flow Patterns of Source Code inside a Game
That's actually an interesting question - are there layers of Saturn's atmosphere where Earth-borne bacteria could survive? Someplace where the temperature and pressure are capable of supporting life, and where there might be some nutrients for them to feed on?
What if we did something like a mix of password + finger print, by using multiple fingers in a pattern?

Like, say, middle - index - ring.

It would be doubly unique.
> Yet another attack vector that doesn't exist at all in Linux distributions but invented by language package managers, sadly.

https://www.schneier.com/blog/archives/2008/05/random_number...

A.K.A., the Debian openssl Fiasco.

Just one example of distros fucking up the packages from upstream and causing major havoc.
I'm skeptical too. But if I think like a sci-fi writer I can vaguely imagine ways for it to actually happen. That open source maintenance happens at all is pretty remarkable, so I think this thing, with an appropriate concept and some good tools (with emojis in their command line output), is at least vaguely plausible...
Most of the time when I try that, the site's form validation complains that + is not a valid character. Very annoying. I think most of the time it's due to an over-specific whitelist, and sometimes it's due to url-escaping turning + into a space. Or maybe there's a regex and someone doesn't know how to escape literal + characters.
They are worried Earth microbes on the satellite might eventually be confused for life on the moon.
For local delivery, 60 miles is good enough. DHL (see other comment) is providing 80 miles range on his truck and it is widely used by the German Post which has depot inside the cities.

It is of course not adapted if your depot is outside of the city and you need first to drive 20 miles to reach the city and deliver and drive back. This is the current state for parcel delivery with relatively large parcel hubs a bit outside of the cities. But just doubling the range to 140/150 miles should be good enough.
Can you name an instance in Haskell where newtype is conceptually unnecessary but required by the language? In the sense that you may be able to derive the same set of logical guarantees that newtype gets you without using it, in principle.
I respect their stance, but if I were a contributor I'd be bummed. This issue still strikes me as much ado about nothing.
Trump's antics aside, I wonder how much more turmoil will it take for cutting off the Internet to become an acceptable solution for a significant minority of people in the West. Both sides of the political divide are becoming increasingly frustrated with it: the Right see it as a terrorist recruiting tool, the Left fear the Russian influence/trolls/hackers, and everyone seems to despise fake news and echo chambers. Some sort of a semi-popular anti-Internet/Internet Reform movement is bound to spring up sooner or later.
Angular with NGRX is not bad. Vue if you don't like typescript.
Yes, well said and observed.
Struc2vec: learning node representations from structural identity
heh... This is not how Trump works. He's all about the simple answer ( which is why I think he got voted in because many people seem to think the simple answers are the way to go )

Terrorists use the internet to organize themselves...well obviously cut off the internet and they can't communicate.

Lots of illegal immigrants from Mexico crossing the border? Build a wall!

The economy is a mess? Get leaders from big business to run the country!

Pretty sure any problem you put to Trump he'll "solve" it within 30 seconds :)
Perhaps they have a zero day telnet client or browser exploit. :)
Sorry, I'm just not buying that it's about the file size of data.

Right now I'm working on an app that works with tweets. I want to find all tweets that link to iTunes.

When I was using:

> select * from `tweets` where `url` not like '%twitter.com%' and `url` like '%itunes.apple.com%'

I could scale my server up to 16 CPUs, it would still take several minutes to search a few million tweets.

Yesterday I added another field to the database, `is_audio_url` where I pre-compute whether the URL is an itunes link (by string matching in the app code) when I insert the record into the database. So I can do:

> select * from `tweets` where `is_audio_url` = 1

And now it's blazing fast. It is just my most recent of many experiences that MySQL really struggles with text matching.
> The patent grant is also worded a bit unclearly

It's not unclear at all. Here's the file. Note that it's separate from the LICENSE file that grants a copyright license.

https://github.com/facebook/react/blob/master/PATENTS

> The license granted hereunder will terminate, automatically and without notice, ...

There is no reasonable logical or legal context in which "hereunder" refers to anything except the PATENTS file itself. What lawyers have had to clarify is what should never have been an issue because it was already clear. They're not the ones muddying the waters. Opponents are. We should be asking who is so determined to put this meme out there, and why.
That's an awfully convenient choice of what can regulated and what can't be regulated. Regulations can be imposed to regulate what 7.4 billion people can do with a piece of land, but applying them to one additional person is beyond the pale?
I forgot the design of template strings, very nice. I think this should be adopted in most other languages.
Show HN: Egg Toggle
Better Saturn than Enceladus. That was the point of the exercise.
It needs to be part of PyPi directly, I would have a difficult time trusting and unknown third-party.
I don't think there are any maintainers that verify upstream code, they only manage packages and updates. Which is actually safer to do without maintainers, completely automatically, as it will eliminate a huge attack surface introduced by a maintainer.
Except that the implicit licence couldn't be terminated if you sued Facebook: https://i.imgur.com/geUPyXl.png
Think fifty years in the future. The Herschel probe lands on Enceladus, armed with instruments that can sample the water and test it for presence of biological life. A hit! A world-changing discovery, we've detected DNA!

...but wait, hang on a second, check the records. Isn't this really close to where we predict that Cassini crash-landed after it ran out of fuel and contact was lost in 2023? Shit. Shit shit shit. We have no idea whether this DNA is actually from the oceans of Enceladus, or if it's from a hardy bacteria that hitched a ride on Cassini all the way from Earth, and thrived in the oceans of Enceladus.

If it's thriving in Enceladus, it might be out-competing the life that's already there. We may never know, we can't know what native Enceladus life was like, or if it even existed!

They're not worried about knocking down some space-trees; they're worried about it being impossible to assess scientific results with accuracy.
ABB's Robot YuMi Conducts Andrea Bocelli and Lucca Symphony Orchestra
Wow, you formulated that better than I ever could. Thanks :-)
That's why they crashed it into Saturn, to avoid possibly infecting the moons which might have life
Not entirely random, since it's about a language (albeit non-Germanic) unifying blue and black.
Love the idea. Reminds me of Workflowy (which has focus on task list in trees).

Check it out: https://workflowy.com/
Because their mission isn't to generate income like a traditional business. But if the income went back to the foundations, like Python Foundation, I think that would make sense.
You should probably replace that oven ASAP, or get rid of it completely to be a retro hipster. :)
Anyone know if this is also an issue for Java? I've used Maven repository for ages, and I know many big cos depend on it.
I can't even put into words how happy this makes me. I don't object to ads in general, but automatically playing anything with audio leaves me with something just short of pure blood-lust.

Muted video? Sure, fine, go for it. Just don't mess with what's going into my headphones and all is good.
I used to think this until I worked on a large C project at scale.

C++ definitely has some improvements over C, but it definitely does not have a "massive improvement over straight C in pretty much every practical way". It's pretty bad that you have to avoid many parts of the language.

I've also noticed from various projects that C projects tend to have less code to grok than C++ projects while achieving the same thing. Who would've thought.
Well if there are any tardigrades on board they'd probably be able to survive:

> Individual species of tardigrades can survive extreme conditions that would be rapidly fatal to nearly all other known life forms, including complete global mass extinction events due to astrophysical events, such as supernovae, gamma-ray bursts, large asteroid impacts, or passing-by stars. Some tardigrades can withstand temperatures down to 1 K (−458 °F; −272 °C) (close to absolute zero) while others can withstand 420 K (300 °F; 150 °C) for several minutes, pressures about six times greater than those found in the deepest ocean trenches, ionizing radiation at doses hundreds of times higher than the lethal dose for a human, and the vacuum of outer space. They can go without food or water for more than 30 years, drying out to the point where they are 3% or less water, only to rehydrate, forage, and reproduce.

From Wikipedia: https://en.wikipedia.org/wiki/Tardigrade
Adding a Boolean Column to an Existing Table with Alembic and SQLAlchemy
Well, YouTube seems to be punishing any mildly controversial topic, so the positive side is that Nazis and other crazy people can't use it as a viable platform, but on the flip side you can't really talk about anything really serious without getting your ad revenue cut.
Does he avoid banks, too?

I don't really see how his scatter-brained approach to login management is any less of a problem there, or on literally any other system that uses an email as a username or a password recovery mechanism.
There's written to check the package name and not to go through whole source code.
You aren't missing anything. What you've pointed out is also the reason I find this all so fishy- it has been the same for years, the risk has been the same for years. No one who was really worried about the patent risk would have accepted a "wait and see" approach. Because... that would be risky to do.
Same here. I've tried most Windows SSH clients, and XShell is by far the best I have used. It has a lot going for it. It's really well designed, frequent updates, and packed with features.

https://www.netsarang.com/products/xsh_key_features.html

It's worth checking out.
If you wanted to, you could even use a trigger to compute that field, and then backfill it - no changes to app code required!
> same goes for those defending a guy who makes jokes about Jews and uses the n-word

Why? Perhaps we should read the article first?
> Do digitally signed certificates fit into this usage scenario??

No, because either the package author would have to sign them, in which case you have to choose to trust each package author, or the repository would sign them, in which case there would be no improvement for this current issue, since the repo would sign the fake packages as well.
I remember reading that the Mars rover went through "planetary protection" which is basically a decontamination process. I wonder if a similar thing happened here and how thorough this process is.
They probably have the biggest platform for paying creatives, I wonder when they'll ditch YouTube to get more control over their user base and increase their 5% margin.
A more likely candidate would be Saturn's largest moon, Titan, which contains ammonia, a number of complex chemicals, and possibly water.
Thank you.
I use gingko, it is perfect but not self hosted. And tiddlyWiki with graph map extensions got too much extra stuff I do not need.

Not sure how I feel about mongo as backend but, if this app got same export features as gingko I am sold.
npm is a commercial organisation, they offer paid subscriptions but don't offer a curated package signed option...
Not sure if a fireball trailing through another planet's atmosphere leaves much behind.
This is incredibly useful. It's basically like Chrome's 'profiles', except per-tab rather than per-window. So I can now have my personal gmail, my work gmail, and the 3rd gmail account for a client set next to each other, and colour coded.

This, along with the speed improvements (both the UI and content processes) in Firefox 55 have made it my default browser for the first time since Chrome was released.
I don't have a microwave at home. I cook and freeze batched. use the oven at work.
I've been reading different articles about code reviews lately and I found it strange that so many of them focus on the best ways to identify your teammates' mistakes, but say very little about the exact means of communicating that feedback. Having worked for several large software companies, I think developers struggle much more with the latter than the former.

I think this article describes what's important about code reviews better than any other article I've seen.

A couple very nice quotes I think are worth highlighting:

>The best software engineers I have known actively sought out reviewers, having learned early on how much they can help. Indeed, the input from many reviewers over their careers was part of what made these developers the best at what they do.

I've definitely found this to be true as well. I'm generally known on my teams as a tough reviewer, so my favorite people to work with are people that seek me out for reviews because they see it as an opportunity to learn.

>Egoless programming enables an author to step back and let others point out places where improvement is needed... Similarly, the egoless reviewer should have compassion and sensitivity for his colleagues, if only because their roles will be reversed one day.

I liked this point as well. So many articles about code reviews completely miss how significant a factor your relationship with your teammate is to a code review. If you sour that relationship with accusatory, tactless feedback, it doesn't matter how great a developer you are because your future code reviews and interactions with that teammate will be tremendously weakened.
There are over 100,000 packages and PyPI is run by volunteers. This is not practical.

PyPI is not a curated distribution.
Show HN: Treetop – Accurate linux process tree CPU & memory usage (dotnet core)
Nigeria Army insist they won't go out of aba,Umuahia
'Strange' depends on your frame of reference. In my (European) country, you would be ridiculed for suggesting that the middle colour on traffic lights should be yellow instead of orange.
I am not selling anything to you :) You can scale your server to even 100 vCpu or whatever blackbox name the provider is using and still have same speed mainly because MySQL does not have parallel query :). BTW you none ever mentioned MySQL but you keep brining it up.
Do you have a link? I could not find it here: https://lists.archlinux.org/listinfo/
I'm all for using a password manager. I also think it's not user-friendly for a single application to force one to use multiple email addresses. It's unnecessarily confusing and annoying.
I'm not convinced this would be a good thing. Some of the sites I post on, I do so because of the community.

Imagine Hacker News and Reddit both implementing this, and Reddit commentary leaking here.