skysight-inc/HackerNews huggingface dataset:
I think no pinning and just taking the latest package every time is a really bad idea.

Bugs can creep into software even with the best of intentions, and it is useful for consumers of packages to have a choice whether to upgrade immediately or maybe wait until they have done some risk analysis. Also, the ability to roll back is invaluable.

I don't think forcing everyone to upgrade is going to force package maintainers to make zero mistakes.

Also the package-3, package-4 thing seems odd to me. I use Nuget and have used NPM / Gem / Haskell Stack on spare time projects. I would find it annoying to use this scheme because you have to hunt around searching in a different way to look for major upgrades compared to what you do for minor ones.

But most of all: I want my build to be reproducible, going back into history. Having the pinned version numbers committed to source control in ensures this (As you keep an onsite cache of the packages, or you trust the package repo to stay available and for published versions to be immutable).
Hey!

We do it with a few speech to text APIs.

We've only tested with English so far but it should be able to handle a bunch: Arabic, English, Spanish, French, Portuguese, Japanese, and Mandarin.
Moreover, barring total ecosystem overhauls (Python 2v3, AngularJS vs Angular), people don't spend any effort wondering which version of a package they should use. In my experience, you install the latest. You may pin (or let yarn.lock do it for you) to avoid implicitly consuming a breaking change the next time you install from scratch, but that's to be able to explicitly test if the upgrades break your application. It's not likely because you presume the newer version is worse than the one you already have.
why though
You can also encrypt the data then throw away the key if you are required to remove the customers data.
Certainly its worth taking a look at another javascript library which works for fuzzy search called, fuse, http://fusejs.io/.
>I have always argued that your stakeholders should be able read your code

That doesn't sound plausible.
I stopped at 'Anti Malware Software for your mobile device'
Python
http://buklijas.info/blog/2017/02/01/automate-the-boring-stu...
Moderation has been a job, if you can even call it one, since the dawn of internet. Discussion forums had their own moderators ensuring content quality.

Podcasts, curation and automated content farms have also existed for a long time to actually qualify for the list. The content farms were previously heavily focused on low quality blog posts have now moved towards video.

As for gig economy, check this discussion from yesterday: https://news.ycombinator.com/item?id=15669454
Do you know that you can hack any ATM machine !!!

We have specially programmed ATM cards that can be used to hack any ATM machine, this ATM cards can be used to withdraw cash at the ATM or swipe, stores and outlets. We sell this cards to all our customers and interested buyers worldwide, the cards has a daily withdrawal limit of $5000 in ATM and up to $100,000 spending limit in it stores. We also have credit cards for online shopping, we give the credit cards details to our interested clients worldwide including the credit card cvv.if you are in need of any other cyber hacking services, we are here for you at any time any day.

Here is our price list for ATM cards:
BALANCE PRICE
$2000 ----------------$150
$5,000----------------$300
$10,000 ------------- $650
$20,000 ------------- $1,200
$35,000 --------------$1,900
$50,000 ------------- $2,700
$100,000------------- $5,200
The price include shipping fees,order now: via email...braeckmansj@outlook.com
Linux distributions have been including the major version in the name for a long time; when we started doing this at Red Hat I wrote down the rationale at http://ometer.com/parallel.html in order to convince upstream projects to do this upstream, as many now do.

For non-system package managers like npm, always using a lockfile is the best current option IMO, for those package managers that support it.
https://blog.ometer.com/2017/01/10/dear-package-managers-dep...
The echo is louder in your bubble Facebook creates for you.
This is a ridiculous strawman. Brainfuck has a tiny grammar, yeah, but its deliberately designed so as not to be readable. It also has an odd method of execution (I.e. your program is a big tape of memory and you manipulate the cells to do stuff) that makes doing anything worthwhile impossible to reason about, especially with the opaque syntax added on top.

Scala neither has opaque syntax (see: many/most new languages borrowing its name:type format, smartly choosing [] over <> for type parameters, etc) nor does it have some weird execution model. Its a perfectly reasonable metric to use when talking about a normal/popular language, especially when people who don't even use the language complain about it being bloated and compare it to C++ which has a grammar twice the size of Scala. I really wish people would stop spreading FUD over these kinds of things :/
No version pinning means no repeatable builds. A build from a month ago when ran today should use exactly the same version of any libraries it references, not something that was published in the meantime.
How on earth did you go from "I saw this thing once" to "everyone does it"?
> Result: best practice of pinning major version using the twiddle-waka or pessimistic operator all over the place, and Steve Losh shaking head sadly.

I'm not sure why this is potentially seen as a bad thing.

Call me crazy but I enjoy version locking every dependency because it lets me know exactly what I'm using and it's something commit to version control so other people know as well. It becomes a form of documentation.
Ask HN: How do Go and Rust binary file sizes compare for the same app?
E.g. if you write and compile a simple Unix-like wc (word count) program in both Go and Rust, how do sizes of the resulting binaries compare?
And similarly for a few other apps, to get a rough idea of binary file size differences between them.

For example: this simple test Go program compiles to an EXE of ~2 MB on Windows 7 with Go 1.9:

// From: https://gobyexample.com/reading-files

package main
import (
"bufio"
"fmt"
"io"
"io/ioutil"
"os"
)

func check(e error) {
if e != nil {
panic(e)
}
}

func main() {

dat, err := ioutil.ReadFile("dat")
check(err)
fmt.Print(string(dat))

f, err := os.Open("dat")
check(err)

b1 := make([]byte, 5)
n1, err := f.Read(b1)
check(err)
fmt.Printf("%d bytes: %s\n", n1, string(b1))

o2, err := f.Seek(6, 0)
check(err)
b2 := make([]byte, 2)
n2, err := f.Read(b2)
check(err)
fmt.Printf("%d bytes @ %d: %s\n", n2, o2, string(b2))

o3, err := f.Seek(6, 0)
check(err)
b3 := make([]byte, 2)
n3, err := io.ReadAtLeast(f, b3, 2)
check(err)
fmt.Printf("%d bytes @ %d: %s\n", n3, o3, string(b3))

_, err = f.Seek(0, 0)
check(err)

r4 := bufio.NewReader(f)
b4, err := r4.Peek(5)
check(err)
fmt.Printf("5 bytes: %s\n", string(b4))

f.Close()
}
It's similar for Bundler (the de facto official Ruby package manager). After the initial install, you'll only get new package versions if you run the update command.

The complaint seems to be that the update command is not sufficiently safe by default (though the `--conservative`, `--minor` and `--strict` flags help there), which is fair enough, but why not just fix the default behavior?
I don't know about cursive writing but practising calligraphy is very deliberate and involved. I get into a trance like state when I do it.
This isn't higher management's fault in any meaningful sense. Maybe they should educate themselves so they can stop hiring fad chasers. That's about the extent of their responsibility.

Things like what this blog describes exist because the technical people hired are engaged in one long, giant act of bike shedding and resume padding. They're supposed to be educated and experienced enough to know better. They often do, but because the fad chasers are also the interviewers even the ones who know better go along with the silliness.
Solution that’s like 0 lines of code: namespacing. This way there’s e.g rails/rails-5 and rails/arel-3, or whatever. And if the project foo/name-41 gets abandoned it can recover at bar/name-42.

Note that rails is (officially) hell bent on not using semver at all as significant breakage happens even at minor versions.
Not actually true. It’s a common misconception that gave us fake pseudoarchaic old English like “ye olde whatever”.

That comes due to the confusion of the old thorn character Þ or þ which got all mangled and misread.
Not sure what that even means.
Agreed. Anything that renders the previously invisible (state surveillance techniques) visible via consumer availability is anathema to state surveillance.

The majority of these techniques are allowed in the US because Congress doesn't know / care.

The more popular exploits of insecure technologies we get, the more security becomes an economically beneficial differentiator. And the more concerned calls your local Congressperson receives.
7 Takeaways from MLconf SF
Your numbers on US online spending are way off. US online spending was about $400B in 2016. In 2017 Amazon alone has posted about 120B in revenue (low 100s minus AWS) year to date with guidance for 55-60B in Q4 alone.
>https://www.reddit.com/r/technology/comments/2hwlrk/new_wind....

source: msft employee who isn't even close to the windows team.

that explanation ignores the fact that windows spoofs the windows version number for all applications by default (defaults to 8.1 i think), unless you have a special entry in your application manifest. so old applications will still work by default. not to mention that windows has compatibility shims to deal with this exact issue.
I've also compiled small programs that I wrote in D and Free Pascal (not equivalent to the program above, but simple command-line utilities), like wc clones or similar, and their size is quite a bit smaller than the Go binary size above, e.g. in the range of 50 to 100 KB (IIRC). And similar programs in C were ~22 KB. I know there can be many reasons for the differences, such as what libraries are included by default, maybe transitive dependencies, etc.
Governance models for crypto tokens
That would be just as invalid an overgeneralization. It seems more likely that three drivers are failing. It is less likely that it could be three makes of cars. Generalizing to all cars is ridiculous, generalizing to all of transportation off the charts.

Maybe these patterns are being misapplied. Most likely, that's because people misapply stuff all the time. (Paraphrasing Sturgeon: sure 90% of software is crap. That's because 90% of everything is crap). Now it is also possible that these particular architectural patterns are prone to misapplication, though there is little evidence of that. Maybe there is a general tendency to apply over complex architectures (see architecture-astronauts), but even that doesn't mean that "architecture has failed".

At best: over-complex up-front architecting is maybe not such a good idea. But any competent architect will tell you that. Minimal, evolutionary architecture is just as much (and in some senses more) "architecture".

Every software system has an architecture. There is good architecture, bad architecture, big-ball-of-mud architecture etc. Citing examples of bad or badly applied architecture and claiming "architecture has failed" is a category mistake.
tt-rss has a plug-in that lets you specify which part of the linked article is the actual content and then, when it pulls the feed, it replaces the feed content with the text of the specified element.
"would you ever get a USB data cable from a public officer of any sort?"

Nope. But if somebody replaced the cable while you weren't looking ...
The problem with this article, and with semver, is that every change is either a new feature or a breaking change. Some new features are also breaking changes.

A bug is encoded in the behavior of the program. "Fixing" a bug is changing the behavior of the program - breaking it if someone downstream was implicitly or explicitly relying on the bug.

Most people want the bug fixed, and would tag the change as 1.0.1 rather than 2.0.0; but in someone's dependency tree is version 1.0.0 of your project, and upgrading to 1.0.1 will break them, even though semver tells us that ..1 is a minor change for most consumers.

Incidentally, this is also why evolving the web platform is so hard. Among the uncountable sites on the internet, even if the current behavior seems totally broken, someone is shipping code that relies on it.
SO_REUSEPORT Scaling Techniques for Servers with High Connection Rates [pdf]
People understand the platform better, no need to lure famous people to the site, there are other ways to verify (e.g., link to twitter account on web page), many more people across the spectrum of "famous" so it's hard to button down who/what is famous enough for the checkmark, global audience means famous in one place != famous in another, no consistency in how verified actually works, verified accounts became Star-Bellied Sneetches, etc.
Google has control over the map, which listings show on (and below it), etc.

Back in the "10 blue links" day, the organics that showed, above the fold, were driven by factors that didn't include "Google's cut".

Similar for Google shopping. It's predecessor, Froogle, weighted on consumer factors. The replacement does not.

If the organics are basically bad now too, the blame goes to the same place. In fact, crappy organics encourage more ad clicks.
This is definitely spam...
I'm aware of all of this, but my point was that Google does exactly what you described, but on a much much more pervasive level that's almost impossible to opt out of.

Again, I'm not defending Facebook. I'm only stating that Google is worse terms of pervasive unavoidable tracking. What each of them do with that data (e.g. emotional manipulation) is an important, but slightly separate topic.

To address some of your references:

3 and 4 are real problems and probably the only thing you can never really opt out of with any provider.

8 is actually an old article on a feature since (thankfully) removed. However, even when it was there, it still only involved sharing data you had already volunteered to Facebook.

6 is aggregating data on who you are but not explicitly tracking, unless/until it's actually cross-referenced with 3 and 4, so isn't a problem in isolation

The rest are trivially blockable with any content blocker (some of which even come built in to some browsers these days)
Why would anyone want a grey marker?
Snapchat is very confusing and poorly designed. 100% agree with you on the intuition part.

But I don't think spectacles really has much influence on future of company; that is, Snapchat will fail or succeed for other reasons entirely. It might look expensive on paper, but the glasses project is more of a marketing stunt than a mass market product. If people don't want to use Snapchat, they won't use a device that is designed for it. So problems with the platform will make people not buy them.

The app is being copied by others, and their app also is getting worse. More features, more bugs, more ads. People promote their image and show off happiness and wealth on their stories. It has all of the negative experiences of other social networks, and it's got the sexual harassment aspect, too. Many many female friends of mine receive unwanted dick pics.

It's easy to see why they're struggling to grow. My first impression was that it was a messaging solution. Then it morphed into a social network, and some people expect to add you as a friend as casually as they would on Facebook.

In my opinion, Snapchat was more intimate and not something you just add everyone.

As a result of people adding hundreds of low-intimacy relationships to an app that was intended to be a 1-to-1 messaging solution, they are becoming disenchanted with the novelty. It's no longer fun to use Snapchat like it used to be.

Looking back, if paying $5 for the app would have kept Snapchat from doing their media stuff and led to making it a secure, encrypted platform, I would've gladly bought it. Just sad that it's become Facebook.
Good luck with that: http://www.zdnet.com/article/minix-intels-hidden-in-chip-ope...
Just without the callbacks. At least you could abstract over error handling with callbacks...
A friend of mine from China was showing me an article in Chinese about the Huawei website (huge site like Amazon + Apple + FedEx) . They have 300 sub stores/warehouses just in his city they are for stock piling popular items. A man ordered something from the Huawei website at midnight and he received the package 12 minutes later.
Would $5 have been too big a barrier-to-entry for the youngest Snapchatters?
The sellers are often negotiable and will give you discounts and photos of the actual product if you ask nicely.
Some of you are commenting that asking OVH to randomly restart customer servers would be silly. I agree.

My comment was about servers managed by OVH. The post-mortem specifically says: "Since then, we have been working on restarting services. Powering the site with energy allows the servers to be restarted, but the services running on the servers still need to be restarted. That's why each service has been coming back gradually since 10:30 am. Our monitoring system allows us to know the list of servers that have successfully started up and those that still have a problem. We intervene on each of these servers to identify and solve the problem that prevents it from restarting."

The language used suggests that these are servers monitored and operated by OVH, not by random customers.
Malwarebytes Anti-Malware 3.3.1 Crack and License Key Download
Let’s say you’re my father in law. Let’s also say you get most of your news from your biker friends in their 50s and 60s. You might then be surprised to hear that the border wall has not been funded, that Trump does, in fact, not make us appear as the leader of the free world. That illegal immigrants are not the reason for soaring health insurance premiums.

These are problems you face when you interface only with people who share very congruent values and obtain their news from the same source. If Facebook uses Skinner Box techniques to keep you on the site as long as possible, it’s not interested in outcomes that are good for you but might make you leave, like challenging your beliefs and values.
Technologies like immutable log-structured storage do have advantages from the business perspective, such as lower defect rate and speed of development. Few people use technologies just to play with them when something serious is on stake (or so I hope).

OTOH not understanding business requirements before picking technologies is indeed a problem. You have to ask a lot of questions to extract the relevant info from the business side before you can make a choice. This is especially important for tacit, "obvious" assumptions that business people honestly forget to mention. (Like, water is wet, daytime sky is blue, and a kilobyte is 1024 bytes; these are facts that everybody surely knows, right?)

Another thing is that requirements constantly but slowly change. A key assumption of the architecture that was correct a year ago may be challenged due to business considerations, legislation, etc. You have to make your architecture flexible enough to allow for unexpected shifts, but this does come at a price of its being less simple, less elegant, and less error-resistant. Yes, it contradicts other business interests (less downtime, faster features rollout, smaller IT team headcount, etc). You have to strike a balance, and ideally be able to shift the balance without a major rewrite if need be.

So the problem is not in the architecture chosen, to my mind, but in the (wrong) process of choice.
And about 300km to the north of my location in Gaspe today winds were 132km/h (82mph).
eight years a-go? :)
We know how the human brain will react. We already know how the human brain reacts to lack of good parenting and social environment, and how beyond a certain degree it reacts to it like it does to more active abuse. It's not like this isn't being studied for ages by people who genuinely care, but we as "non-professionals" just refuse to seriously understand and tackle the spectrum of psychopathology without also risking all the relationships and the houses of cards ultimately built on it respectively (i.e., a more than fragmentary understanding would require us to reorder our own lives and relationships, and tackling it in earnest would endanger financial interests), so once again we try to make this a special case and see where it gets us. Spoiler: it will get us nowhere.
> Is Zuckerberg actually a True Believer? I've never gotten the sense that he's an idealist or really thinks Facebook is a force for good. I think he just says these things because, as the founder and CEO, he has to publicly defend the product. When the cameras are off, he's all about the money.

I don't think this is (so much) about money for him. If he weren't a 'true believer' his ego would have to come to grips with the idea that he has created sorrow for millions of people all around the world his whole adult life.
LXD 2.0: Blog post series [0/12]