skysight-inc/HackerNews huggingface dataset:
> No Front-End JS Library should actually make your backend vulnerable.

FUD. Most SPAs keep the authentication token accessible to JavaScript so it can be sent to the API server. And XSS in the FE JS can permit an attacker to steal the user's authentication token and then the attacker could impersonate the user and take any action as the user.
In this case you could say that cryptocurrencies are the asset bubble.

The problem with deflation is that it prevents the thing from doing it's job as a currency. People have an incentive not to conduct transactions with it. And insofar as that prevents people from making transactions, that harms the economy.
Background:

"1,300 women in Swedish politics allege harassment 'in the corridors of power'"
https://www.thelocal.se/20171120/me-too-swedish-women-politi...

There currently are several parallel news stories like that, each focusing on a different industry. It's essentially now a daily topic in the major TV news.
Stephen Fry has a documentary on his relationship with Wagner on Netflix. Well worth a look if you're interested in Wagner.
This is gorgeous. I love how simple and clean the UI is; so many music and audio tools are just skeuomorphic hell (and don't support scaling so are even worse on HiDPI displays). This looks great without trying to look like a real device. It very effectively simulates a modular synth experience, without the limitations. It even simulates the quirky waveforms found on analog synths in a pretty convincing way. This is just impressive as hell on many fronts.

I don't see how to use it as a VST, though I see VST mentioned in the docs as a thing that will be implemented as a plugin, so I guess it's on the radar. It looks like it'd be possible to hook it up to an existing sequencer/DAW as a MIDI device, though I don't currently have any MIDI software or hardware on my Linux system, so can't test that theory.

All around, though, I can't believe I'd never heard of this. It's a great piece of work and sounds great ("great" in the sense of, "it's fun to tweak the knobs and the sounds that result are roughly what I would expect based on my experience with real analog synths and modular synths) in the few minutes of tinkering I've done. I love it.
You can try to code each exercises on your own just by reading the GitHub repos. Eg https://github.com/gophercises/quiz

If you want to see my solution and how I coded it then you have to watch the video and there aren't any transcripts yet :(

There are branches with solutions for each exercise tho, so you could just look at the diff to see if that is enough.
It's exciting to see things like this come to Linux, Ubuntu studio out performs windows 10 by a wide margin so it's great to be able to play with this outside the os duopoly where usually only Mac and windows are supported.
But doesn't the ISP know what the Netflix servers' IP addresses are? How could you fake a Netflix server?
It is all a matter of actually knowing how to write proper C++, or just using a C++ compiler to compile code that looks like C.
It's pretty late in the western world.
Good points - where one comes from really makes a difference.
I lived in Austin for 2 years after being in Boston, NY, Hong Kong and LA. Have to say I was bored out of my mind in Austin. The "music scene" is typically a guy with a guitar hopping up on a stage somewhere at 11pm. The outdoors = one lake in the middle of town and a very few hiking trails. NO arts scene or galleries to speak of. The culture revolves mainly around drinking. It's a city for obnoxious Millennials and all the people who got sick of CA and and now bringing all that to Austin. Sorry, but many people I know who lived in Austin for years have left for Utah, Idaho, Colorado - even places like Nashville and Columbus. Hope Tim likes it more than I did!
You can load in new code interactively, it has a JIT compiler, and physicists can use it.
If your job as a programmer is being measured by the hours you're putting in every day, you are experiencing a conflict of mission. I have a co-worker who never seems to be working yet he's one of the most productive people in the office. He works for 1 hour in the morning untangling a hairball in the code that creates 22 hours of productivity for the rest of the team. He's been programming since the 1980s. Stop this madness of applying 19th century industrial England's work "ethic" to the job of a programmer, please.
The Django Rest Framework library has taken this very approach [1] offering both corporate and individual monthly subscriptions which is then used to fund development. It appears to be quite successful in that it's allowed the lead developer to work on the project full time (at a salary of £50k [2]).

[1] https://fund.django-rest-framework.org/topics/funding/

[2] http://www.encode.io/reports/february-2017
I'm glad that the obsession with IPAs has started to fade some.

The craft beer scene in Dallas has exploded recently, and somehow the local scene had ended up focusing on milk stouts. That's a wonderful thing IMO; I can't stand the taste of hops, and I detest IPAs, so I consider myself blessed to live in a city where the local craft beer scene cares mostly about creating something thick, dark, and sweet.
> has done so in the past

Which?
> If it's not actually re-used then it's just making me jump around to see what's actually happening rather than reading straight through the code.

Firstly, you only actually create a function either when it is being reused, or because it's functionality is a logically separable responsibility and so you factor it out for understandability.

Either way, the function should also have a meaningful name describing its purpose so you don't have to jump around to understand what's actually happening.
> Honestly, being thanked in any shape or form does nothing for me

So a genuine "hi there, thanks for all your work, I've been using your lib for months and its awesome" is an annoyance to you? You must be fun at parties.
But I agree 100% with Tim. You couldn't pay me to live in SF or California again. Liberal leftist gestapo run wild have destroyed the entire state. SF in particular.
It's pretty cheap to send money internationally in a lot of places, and pretty quick too.

The oft-touted benefit of BTC is not that new or appealing to the whole world. In fact a lot of the selling points I see boil down to flaws in the US banking system, and skewed views of how the rest of the world operates.
> ...will also reduce costs by not having to run a Windows and LiMux client side-by-side.

Mind that this means "reduce costs in comparison to moving to another non-Windows OS". They still do not have a cost calculation that would promise long-term savings and I'd call it unlikely at least that there will be savings, as the previous city mayor reported huge savings after the migration to LiMux.
I agree. These are good questions to ask, which everyone should at least consider.

Some quick comments on some of your points:

A + B) Bitcoin is currently congested because the Core development team refuses to raise the block size which forces up the fees. They instead want scaling to happen systems (like the Lightning Network) which are far from ready, if they work at all. They even state that Bitcoin doesn't work without full blocks because they are worried about hypothetical scenarios decades into the futures.

They want Bitcoin to only become a "store of value" instead of money. Completely disregarding that something that is only a store of value only becomes a ponzi like scheme where everything hinges on greater fools pumping in more money to the system.

This is of course insane and other cryptocurrencies tries to solve this. Bitcoin Cash is a direct result of this behavior which I believe is either incompetence, maliciousness or both.

C) Yes scaling isn't "solved" and likely cannot be completely solved. The only way forward is small steps at the time until an acceptable level is reached or the system fails. The limits of on-chain scaling for Bitcoin has never been tested (or even sufficiently researched) and then there's off-chain scaling which may help.

D) As with all things "decentralization" is an elusive term. It is in my opinion sufficiently decentralized because not one single actor can dictate the network.

We must never forget why decentralization is so important for a system like Bitcoin. It is to allow secure peer to peer permissionless transactions which cannot be censored. Bitcoin still fulfills this. Decentralization for decentralization's sake is inane.

Bitcoin's security also relies on a single miner (or a gang of miners) control >50% of the hashrate as they can then attack the network by starting to rewind transactions or block newer transactions.

E) Agreed.

For the uninitiated there are cryptocurrencies who tries to alter the coin emission schedule controlling how many coins are created over time. For example Monero has a tail emission which makes sure there will always be some amount of new coins, although it may not completely avoid the deflationary side.

F) Agreed.

You must be very careful if you want to truly stay anonymous on Bitcoin. A single misstep will leave a permanent trace on the blockchain allowing someone all the time in the world to analyze all breadcrumbs which may lead to you de-anonymization.

Bitcoin isn't fungible either as you can tell two coins apart. This can potentially completely undermine Bitcoin as a currency if some coins become tainted and significantly less valuable. Say for example after a hack. Fungibility is a fundamental property of money and cash is actually made fungible by law.
Not a super helpful article, but I don't regret reading it. Well written.
yeesh, that wasn't what he was saying at all
I'd love to be shown an example, because I honestly don't believe it is doable, let alone doable easier than just making several different applications.
Not jblow, but the video game industry is extremely dependent on big splash releases. Something like 50% of sales occur in a game's release week.

A few games have managed to become huge hits growing only organically in early access (factorio and rimworld come to mind), but they are extremely special games. That's not something you can replicate with a relatively generic title.

To be fair, I'm not sure there is any path to success for a solid albeit generic game these days. There are just too many releases.
exit status and cleaning should be just fine, logging or something else would need to not do it, yeah. continue and break would be weird outside of loops.
Yes, it is in the same way. In both cases you keep enough state to verify future transactions but not enough to rebuild up to the current state if it were to get corrupted. I don't see anything in your links that says otherwise.
How many hours of reading does this amount to?
> Incidentally this is the problem that Prop. 13 in California set to solve initially.

It's the problem Prop 13 was sold as solving, but not at all tailored to specifically address.
ME had the new (from NT) WDM driver model, which caused quite a bit of issues when mixed with older drivers. It was an end-of-the-road hybrid.
Interesting - I wonder if a much thinner, simpler library is the answer here.
The part with websocket on same port is interesting, did you hear reasons why that hasn't been done?
Yes it comes from taxes, where else. There is no reason German union rules wouldn't work elsewhere. But I believe other companies simply do not want it. They want to delegate to the workers what they want with little feedback. German companies take worker feedback into the cost and rate of production. Therefor, no one is surprised. Workers no what they are expected to produce and management knows what to expect from labor.

This is why Walmart has utterly failed to expand into Germany. They thought they could take their abusive worker policies into Germany and when that didn't work they pulled out.
American people allowed Trump to win. Its a democracy and there is no government media control, so American people had access to all the information they wanted and they made an active choice.
I find it equally hard to read that sentence and assume they're actually spending €50m to create a new OS when whole point of the article is that they're switching to an OS that already exists. the only assumption i can make is that the author of the article doesn't know what they're talking about.
fvwm4lyfe
> "coffee problem"

It's pretty common to accept small payments with zero confirmations. Maybe there's some fraud, but overall that's minor.
I think they mean the internet in general, built originally by the US government.
This reminds me of an amusing post that is... Well, not exactly a rebuttal as much as a re-framing:

>
Every friend I have with a job that involves picking up something heavier than a laptop more than twice a week eventually finds a way to slip something like this into conversation: "Bro, you don't work hard. I just worked a 4700-hour week digging a tunnel under Mordor with a screwdriver."

https://gizmodo.com/programming-sucks-why-a-job-in-coding-is...
It's the same kind of technology, though here they actually always load the interpreter into the process even when not used interactively, to allow things like dynamically loading additional code. They also use it to automatically compute file format layouts from C++ struct definitions, and it provides a C++ equivalent of eval().

One thing that I think is under-appreciated in this kind of thing is that a proper C++ repl is significantly less frustrating than a debugger. GDB's C++ mode is at best a poor emulation of the C++ language. LLDB does better because it reconstructs an actual C++ AST and runs it through clang but there's still a ton of limitation (e.g. you can't call any templates or inline functions from header files).

Interactive C++ is pretty fun, especially for prototyping. The biggest problem I generally run into is that APIs in C++ are not really designed to be used in that way (esp in libraries whose user's don't use these kinds of tools). Libraries in languages with interactive prompts tend to have APIs designed in such a way that you can get the simple thing done with very little code (one call, only the arguments you need, etc), while in C++ it's a lot more common to expect user's to copy/paste a snippet from the doc and adjust all the options they want to change. That works fine in an editor, but is pretty annoying in a prompt. The other thing I often run into is error handling. A lot of C++ libraries' error handling is to just call abort() (at best) or segfault, which again is mostly fine for a compiled problem, but is annoying in an interactive setting. You can work around that of course by catching the error/resetting state, but even then you often leave libraries in the wrong state.
Not caused us any yet over 3 years. You've got to think of it as the opposite, when we find a missing method because we at some point updated a library, we update the ts definition.

So it's not that it's a source of errors as most libraries are backwards compatible.
put the mnemonic on a piece of paper in a safety deposit box
Wait, what? You can’t fire people who refuse to work? That sounds absolutely crazy.
I used to work on a crowdfunded adult video game. That one was hard to explain to family.
If MS built their HQ in Munich because of that then it's an absolutely amazing deal for Munich.

Just the tax on salaries from those 1900 people working there will pay off the costs of switching to Windows in a very short time.

And as a nice bonus I'm sure that 28% of users that "have severe issues related to software, which could be solved by migrating these users to Windows and MS Office."[0] will also be happy.

[0]: https://blog.documentfoundation.org/blog/2017/02/14/statemen...
The templates are really well-designed. Did you play around with pricing? I'd say you could ask a few dollars more
I also don't really trust Apple to keep my data secure, I'm sure they have plenty of security measures, but I feel safer putting my data on my own servers via Nextcloud and stuff.

So why do you think that your servers using third party software is more secure than Apple's? Have you personally audited every line of code in NextClouds software or every line of code in Android for security vulnerabilities?
> Is it not a problem in practice when TS type declarations and their associated JS code are written by different people at different times for different versions of a library?

It can be. But most popular libraries have very good version syncing, or even include definitions in the module itself. In the worst case, or if there are no typings available at all, you can just import the plain js, and use it untyped, which can be acceptable if it is not used in a lot of places.

> didn't seem to have any formal reference to a specific version

Yeah. It mostly works if you install the latest version of them both at the same time. Sometimes I've had to fiddle with backing the definition or the module back a version to get them to match.
I actually did some experiments with Elixir, and my conclusion from benchmarking them was that Elixir is in fact significatively faster and consumed less memory than Node. In any case, Elixir is a great language, and even if BEAM was slower than Node I would still suggest to choose Elixir (+Phoenix) over JavaScript.
> In practice I'm not really sure what you mean?

Meaning, your future needs are ever changing and often unclear. Your present needs are immediate and usually obvious. Meet your present needs first and foremost without sacrificing flexibility to meet future needs. Factoring code into functions accomplishes this.

> I've come across plenty of small functions that I couldn't understand without checking the calling functions for context.

Sure, happens to me too when I don't assign meaningful names, or the functions don't actually encompass a small, meaningful set of responsibilities, or the functions use deep side-effects that require reasoning within larger contexts.

The problem with such programs isn't factoring into functions though. If anything, this step reveals latent structural problems.
Architectural security until at least Vista was, hm, let's say weak.
I am not too familiar with TypeScript (I only know that typing is optional for backwards compatibility).

What are some practical examples of strengths it has over Go?
What I feel strange about default export is that you can actually mix it with named exports.

export default class Foo { }
export const Bar = "";

and then

import Foo, { Bar } from "./module"

I would expect if a module has a default export, then it should not have named ones. Why? At least it puts more structure in your code architecture.
No, but you would have to do with subpar/immature third party ecosystem AND you'd have to port all your Python code to Julia before you can get to resort entirely to it.
Only this year the syntax for importing modules at runtime has been worked out. Current behaviour is exactly the same as commonjs and only useful for static analysis, 7 years later.
Difficult, or awkward?
That is what they're wanting to move to. They asked the Microsoft partner Accenture, who could sell a lot of Windows clients here, to evaluate their IT situation and not even they dared to throw their reputation away and somehow suggest that Windows is a necessity. They also just suggested a thin-client architecture.
There are some legitimate reasons to dislike loop. It's a high level construct, yet it has unspecified behaviors. A program can be nonportable on account of some manner of using loop. It's been the case in the past that Lisp applications ended up carrying their own private loop implementation which would behave the same way everywhere.

Today there is a related discussion in comp.lang.lisp: https://groups.google.com/d/msg/comp.lang.lisp/U5LqiM5nKq8/M...
That's why I encourage Elon Musk to save us all!
https://www.reddit.com/r/elonmusk/comments/7f1utt/em_should_...
My router has an option to turn itself off after a specific time for "power saving". Since so much happens by an internet connection nowadays it basically has the same effect.
It’s simple economics. The workers believe that they have the leverage to demand more pay. Even if they are making the most of any non-skilled labor with leverage wouldn’t you try to make more?
Security updates would only be patches against coding errors and the like, but the architectural security until Vista was defective, and no amount of patches (without changing the OS so much it would have to be considered another one anyway) could fix that.
> First, if your code is the same, you're not going to have two different bugs in the two copies of it.

No, but you might see two different buggy behaviours due to contextual differences in how the code is used.

> Second, trying to change the number of lines of code in your project without making deeper changes is the sort of thing that very directly confounds the analysis.

Except refactoring into smaller reusable functions is precisely a deep structural change.
Privacy not included
Yeah, and I think that's the interesting divide to me: I did receive a formal education, and even a Master's, in CS.

Despite that, there's very little difference between myself and another developer who has no formal education at all.

I guess I always thought of myself as a white-collar worker because of that, and this whole discussion is making me re-evaluate that. Not that the distinction is super important obviously, or that I think of myself as "better than", but I always thought of my peers as attorneys and people in finance, not construction workers.
Your comment on skeuomorphism no sense. All of the modules shown there are replicas of real hardware ??
The net neutrality farce
Unlike iOS, virtually all of the Android userland, and all of its SDK, is also open source: AOSP is the name of the project containing it all.

IIRC only two major things aren't included: binary blob-only drivers, and proprietary Google apps: Play store, Maps, etc.

Despite those limitations, you can practically just `git clone` and build the entire OS for your device. :-)

https://source.android.com
It seems like every SMB who needed search had a GSA on premise in the mid-00s. Those things were expensive!
I'd speculate that all modern humans were capable of forming civilizations, and like a supercooled fluid would crystalize into one around any workable nucleation site.
I'm glad to hear it. I've built an automated lighting system to encourage good sleep habits [1], which has helped a lot. But I'd still like to do better. Maybe the star is bigger and brighter with good sleep, and ends up a brown dwarf if you don't get enough?

[1] https://github.com/wpietri/sunrise
This is super interesting. This needs more exposure.
I'm happy about this article, not because of what it says, but because of the popularity it got. NodeJS is not as bad as people think and I'm really excited about when it will regain status in the "pros" community.
>That what James Damore said that really cut to the core was that a lot of us women in tech were only there because a bar was lowered to get us in to meet some quota.

I don't think that is what he was saying, he was saying lowering the bar is of limited utility if not that many women are choosing tech careers. Maybe addressing the reason that tech is not attractive to women is a better solution?
It certainly does not look like it is one way or the other; it is something you have to know. If you don't know anything about loop, but have a belief that it is doing a Cartesian product, or a belief that it is not doing one, your belief has no rational basis either way. You can infer which one is right from the output.

loop doesn't do cross-producting; if you know that, there is no mistaking it. All the clauses specify iteration elements for one single loop.

"for x from 1" means starting at 1, in increments of 1.

"for y = expr" means that expr is evaluated on each iteration, and y takes on that value.

y could be incremented on its own, but then that example wouldn't show the "for var = expr" syntax, how one variable can depend on a combination of others.
Chevron/Texaco Techron Advantage Cards Are Issued by Synchrony Bank