skysight-inc/HackerNews huggingface dataset:
We can trust math because it is trivially verifiable. Its relation to physics is somewhat complicated (e.g. verifying physics is not as trivial), and yes - you can understand a lot about physics without math - by combining direct observation with trusting the "philosopher".
Stop pointing your package managers to the public registry.

Unfortunately with NPM this is still awkward, because as soon as you try to shrinkwrap your project, it doesn't just pin the version numbers, it also pins the full source location. That's in direct conflict with (and apparently takes precedence over) using one of the local caching proxies that would otherwise be a useful practical solution to this problem, and the situation gets even more complicated if you have people building at multiple locations and want each to have their own proxy.

Yarn seems to have a better approach to this. It has a few problems of its own, notably surprising, quiet updates to the lock file when using the default options (IMHO a mistake since the big selling point of Yarn is its deterministic, reproducible behaviour) but at least you can do something resembling a local cache combined with something resembling version pinning, which is the ante for any sane build system.
I always planned to live in Lititz, but I've only made it to neffsville so far as permanent residence wise. Sadly it's not walking distance to the bulls head.
An ipfs model would help. People would use a strong hash if the package or something.
A public package manager and a public source code management tool, both of which are outside of your control. You should be able to deploy from a local [verified and audited] cache of your dependencies.
Your question posits a scenario that is fairly rare, and assumes that it's common enough that it's an issue. You again ignored my direct rebuttal in the parent comment as well, which was that there is large amounts of regulation that goes into making sure that a treatment actually works and is effective.

The original argument was never about 'should the government pay for fringe treatment that is not confirmed to work' but rather 'should the government pay for people who have fringe diseases or issues'. Your hypothetical scenarios and arguments have been drifting from the latter and into the former.
Literally any of them, that's the point.
You can use this technique to build interesting levels for games. By constructing a set of tiles with known edges, and laying them out using this technique, you can see some fascinating, aperiodic dungeons.

http://nothings.org/gamedev/herringbone/
Any chance of a technical write-up so that we can all learn from whatever happened?
Honestly, if there are diseases like this- im for a all in approach, every human being free to try whatever might stick.

The thing is, we dont have that one type of humans. We have many - different Neuro-types, and what might be a salvation for one, might send another to a different hell altogether.
I find this problematic not really addressed in most studies. Thus i take them with a grain of salt that is- find out first, via a independet third observer, whether you are a similar type of neuro-type to the one who recived the mircale cure.

Last but not least:
Be aware that some drugs might prevent negative experience testimony by rendering the person unable to testify. If you are send over the edge and become a schizophrenic living in a cardboard box- you are unlikely to ever testify against the remedy you took.
Why hasn't anyone brought up Django Haystack?

http://django-haystack.readthedocs.io/en/master/tutorial.htm...
What would you gain by storing the commit in the lock file?

You can reference commits in package.json already.
I remember a friend paying around $800 (USD) for a 32 meg 72-pin DIMM back in 1994. I think a year or so later, RAM prices really spiked up...
To understand what they're talking about?
> If everything is a house of cards, then why don't i hear the same stories about PyPI or gems or crates?

npm is roughly twice as big as PyPI, RubyGems and crates.io together.
Samba is GPL, but there are other options. I Googled 'smb client library' and saw at three viable-looking libraries on the first page:

https://github.com/naxos/SMBClient

> SMBClient is a small dynamic library that allows iOS apps to access SMB/CIFS file servers.

https://github.com/videolabs/libdsm

> lib Defective SMb (libDSM) is a SMB protocol client implementation in pure old C, with a lot less features than Samba but with a much simpler, and a more permissive license

[…]

> The initial goal of this project is to have a library that can access most SMB shares to read files and that has a license compatible with the iOS/Android/WinRT appstores in order to integrate it into VLC for iOS and VLC for Android.

https://jcifs.samba.org

> JCIFS is an Open Source client library that implements the CIFS/SMB networking protocol in 100% Java. […] This client is used extensively in production on large Intranets.

(Java would be annoying to run on iOS, but probably doable, perhaps using Google's Java-to-Objective-C translator.)

There's also Apple's own SMB implementation, which used to be included in opensource.apple.com source drops, although it seems to be gone as of macOS 10.11; here's the latest version:

https://opensource.apple.com/source/smb/smb-759.40.1/

Or you could go to the BSD SMB implementation that it was based on. I'm not sure how difficult it would be to port either of these to run as a standalone library - it looks like parts are already a library, but smbfs itself is a kernel module - but it's probably viable. In fact, 'fs-utils' from the rumpkernel project, which is an existing effort to port filesystem modules from the BSD kernel to userspace, seems to have a version of it:

https://github.com/rumpkernel/fs-utils/blob/master/lib/exter...

…Forgive me for the wall of links. I guess one example library would have been enough, but I was curious what options were out there.

I don't know how these libraries compare to each other and to Samba in terms of quality and compatibility. Most likely Samba is the best, but they all seem widely used enough that I'd expect them to do the job in most cases.
Related: this Analytics attack has actually happened

https://www.reddit.com/r/btc/comments/7dsmvd/my_analysis_of_...
Right, but a very small pension.
That's some extreme cherry-picking. What about sugary drinks versus house construction? There are good and bad consumables, and there are good and bad durables.
It's not clear to me that he's behaving like he did in the past:

> According to filings, on Nov. 29, Krzanich exercised and sold 644,135 options and sold an additional 245,743 shares that he already owned.

-- https://www.bloomberg.com/news/articles/2018-01-04/intel-ceo...

Sure, he sold most of his 279k grant, just like he sold most of his previous (much smaller) grants, but he also flipped a huge pile of options. This strikes me as the behavior of a man who never had much confidence in the company he ran, and suddenly had much less.
"The Well-Tempered Synthesizer" is still one of my favorite albums, although it is a bit obscure. I had to wait for many years before it finally came out on CD.

Tomita's "Snowflakes Are Dancing" is the other classic synth album as far as I'm concerned :-)
typical JavaScript engineering
I don't really understand any public package repository that fails to have immutable package versions and publisher-namespaced package names.
Could we have a better title perhaps, giving at least "[npm]" or something as a hint?
You sound very agitated and sensitive about this topic. Have you considered eating several grams of psilocybin mushrooms and involuntarily thinking about how your behavior is or isn't serving you for a few hours? I hear it increases amygdala response!
This is very poorly understood.
Couldn’t this be solved in the future by npm storing packages with user names? I.e. “MaxLeiter/example” instead of “example”
That's actually even more scary than what's going on now... At least most of us are noticing and can check what's going on...
It also modifies the reset (trap instruction) in place and makes it a no-op.
And the implied tax of maintaining the corporation.
> My research into LED

> technology turned up

> the fact that it is a

> bit of a technological

> challenge to dim an LED.

This is complete nonsense. While pwm can indeed be used, many of the nicer LED drivers are actually variable current. While adjusting the voltage directly indeed does not work as expected for LEDs, a constant current driver does indeed produce a constant brightness. Varying the current varies the brightness. Only the cheapest displays and lighting installations use pwm for brightness control.
Title should have (2008). (Also is there some current relevance that I'm just out of the loop on?)
Saved you a click: by starting a shared Slack for their teams to collaborate.

Neat factoid but this article is not exactly information-dense.
I work for a cloud computing company that would have benefitted (and hopefully contributed) from being on that Slack. If you have the time, would you mind reaching out to me with details? My email is in my profile.
Rules against insider trading do not prevent executives from trading the company's stock. They can set rules with their financial advisors like "sell x amount of stock every y weeks" which will be executed regardless of insider knowledge the executive has.
Advancing #MeTooMovement/#TimesUp via my Amazon-/Microsoft-/VC-praised biz plan
This is utter madness...
Nope, as far as I can see there is no reason for this to get posted. Seems almost like OP is trolling for karma because it has a controversial title and links to Apple.com.
Another Wang tiles problem I've always been fond of because of its deceptive simplicity is the following:

If a finite set of tiles can tile a quadrant of the plane, it can also tile the full plane.

One would guess that there is a constructive proof, but in fact the proof relies on a weak version of the axiom of choice (see for example this proof https://caicedoteaching.wordpress.com/2009/08/24/502-konigs-... ).
Interesting, but don't CCFLs also "flicker" just at a much higher rate?
Absofuckinglutely. It's being done as we speak.
Those standard libraries are typically widely used. In many cases, the source can be examined. In most cases, there's a large professional team at a reasonably reputable organisation responsible for maintaining them. In almost all cases, there are no transitive dependencies not managed by the same people. Once installed on your system, they generally don't change unless you actively change them. While there is some risk in any dependency (cf. Reflections on Trusting Trust) the level of risk is on an entirely different scale in this sort of situation compared to what much of the JS world does every day.
I recently had a problem with a package that doesn't have its npm releases tagged in git. It surprised me how hard it was to figure out which git revisions corresponded to specific npm releases. I had tracked down the npm version of the package that introduced the bug I was trying to fix, but without getting in and doing some real diffing, I couldn't figure out which commit introduced the bug.

At the time, I'd never added anything to npm, but since then, I have. It dawns on me that npm versions aren't tied to git revisions at all!
It's evident that this sensitivity is pretty rare. But with essentially everything LED-backlit these days, living with that sensitivity sounds hellish!
Trump calls himself a 'stable genius'
We're working on a full post-mortem now. Until then we don't want to give out misleading/partial information.
sounds just like a New Yorker
i'd argue that it's much easier to write bad Bash than bad Python
Miller 5.3.0 – data comments, documentation improvements, and bug fixes
The thing that stood out for me was all the cigarette advertising.
Your example shows that advise to "use /bin/sh" doesn't help but creates problem. If someone wants to write portable script, then he must test it on significant subset of target systems.
Windows users to remain unpatched against Meltdown/Spectre until January 9
Worse than that, I think. You can claim the npm account that published the package has zero relation to your github page that hosts the untainted source.

The amount of times I've gone to npmjs.com, looked for the "official" version of a package only to get lost in a web of conflicting version and ownership "signals" is staggering. And yet... if it's on npmjs.com, then it's going into your package.json. No one audits that thing. Unless there is an obvious bloat issue. And dependencies of dependencies? NEVER. We have something like 400MB of shit in our node_modules folder. There is no human on earth that could go through that. This is a few times the size of the entire Linux kernel, for context. And it's minified.
Not sure about the backlighting or a post from 2008, but on the topic of eye strain... the diminutive text sizes and obsession with low contrast throughout the redesigned bleached UI certainly causes me eye strain. I've heard similar complaints from others, and about the new system fonts and anti-aliasing too.
Largely because Javacsript is so broken by default that it is almost required to depend on a whole slew of dependencies for functionality other languages contain in their built-in standard libraries. And furthermore, NPM dependencies are broken down into stupidly small units, versioned rapidly, and enforces very little consistency among transitive dependencies.

Other languages and package management systems don't encourage this kind of insanity.
I completely forgot about good old LILO boot.
From a “Business” That Made No Money to a Real One
New Android malware attacks 232 banking apps
You can manage your VPS over SSH using our management console.[1] Since most of our users access their VPS using SSH, it's nice to use the same protocol for powering a machine off and on or accessing the serial console.

By and large our customers know what they're doing. That lets us provide IRC and email-based support that has been described more as working with a colleague than interacting with a vendor. This can be helpful when, for example, a user self-hosting email receives a complaint or has a delivery issue.

Most of the time though we just get out of the way and let you work on your VPS.

1: https://wiki.prgmr.com/mediawiki/index.php/Management_Consol...
Can you be more specific? What aspect of how Intel managed this are you referring to?
First ever HODL use in bitcointalk.org (2013)
This is one of my favorite resources on garbage collection techniques. It's opinionated in favor of the tried-and-true approaches (generational tracing GC), which is a very welcome stance.
“Most people could be immune to CRISPR”
That stripping-away of context is a common effect. I find it fascinating.

It allows you to view things with fewer of your own biases and default thought patterns coloring your perception.
Another difference to me is the lack of cabs. When comparing this shot: https://youtu.be/fT4lDU-QLUY?t=127 and any number of Google Maps images of the same location (looking North towards St. Patrick's) https://www.google.com/maps/@40.756666,-73.9786279,3a,75y,27...
it's striking how there are way more black cars and fewer taxis today.
New: Easy email encryption with Autocrypt and OpenPGP header
How Coinbase could disrupt brokerages and dominate the investment market
We do it even at home. Not full dep-server but local backup.
Openjdk-7/unstable_changelog
When you view the moon landings as a technological advance, it seems a bit sad that we've not progressed (for some value of "progressed") further in these original pioneers' lifetimes.

However if you view the moon landings as an exploratory advance, it's a small miracle that we're already talking of going back. Yes, the moon landings may be our modern-day Roanoke Colony, but look at what's come of that colony's original foray in the generations since!
Do you mean 40 percentage points? In other words, tripling?
Wow thats a rough read.
Could something similar be done to django sites ?
It is not a requirement for Java it is just standard practice.

Also Maven does not allow you to remove packages once they are pushed, I think that is what he meant by Java being unaffected.
That seems like an implausible explanation for a comment trying to make a political issue out of two disjoint things: a package manager design flaw and an editorial control policy for package names. "Publishers" having a level of interest in what goes out on there platform is as old as anything, and so is flawed software design.

So I stick by my stance that it seems like tying to try those things together ("you screwed this up because you're morally in the wrong as shown by your focusing on the wrong things") to advance a personal political agenda is the more bullying behavior, here.
... and many car/truck taillights. I think PWM taillights should be illegal. The artifacts are distracting.
For more information on that 'device', look hard at the tech used in his 1898 demo of his remote-controlled boat at an expo in Madison Square Garden. The boat and remote combined several amazing innovations. Technically it's on the same level as Englebart's demo.
Here is where I asked to join:

https://twitter.com/prgmrcom/status/949023633581592576

Following up to @scaleway on Twitter in the same manner would hopefully work out.

I've sent you an email with a bit of elaboration on this.
>Is there any chance we'll have another person on the moon before these guys are gone.

Yes, but it probably won't be an American.

We only went to the moon to prove something to the Soviets, now the rest of the world has something to prove to the US.
The problem with acid is that you believe everything you think, so be careful what you think :)

Aside from LSD's longer duration[^1] and increased potency[^2] acid also has a dopaminergic action, whereas psilocin[^3] is primarily a serotonergic drug. It is the dopaminergic action that can result in the obsessive quality or "looping" experience of LSD trips.

When you eat magic mushrooms, you are essentially taking yourself for an existential ride by voluntarily staring into the abyss. The trip itself is primarily "weird" and euphoric, but IME, what many people refer to as a "rough trip" is actually the existential rebound that begins 1.5-2 hours in. During this serotonin recoil, you can face the heart of darkness: the realization of all potential simultaneous chaos and creativity.

This state can include a ton of beauty, but also a reminder of your own inevitable demise. This visitation to a more "eternal" mode of thought has the same effect as surviving a face-off with any dangerous unknown: radical personal transformation. Self-knowledge necessarily feeds back into your world-view, thus changing you (usually for the better, but not always).

Nowadays, when I embark on a shroom trip, I do so in the knowledge that I will have to stare into the abyss. Sometimes you have to chew glass while doing so, e.g. a friend enters a psychotic state, or somebody dies and you have to be useful. Nevertheless, you become vulnerable and have the opportunity to learn something, help someone, or be helped and form new relationships.

Advice for brave mushroom eaters:

- be well-rested, preferably in nature
- don't trip alone, but keep it under 6 people
- have music, or an instrument nearby
- don't eat more than you can handle (0.7g is potent. 2.4g is effective. 4g is high. 10g is godlike and dangerous)

[^1]: LSD duration is 8-12 hours. Anything less than 8h is not LSD.
[^2]: psychoactive LSD dose is 25µg and up, hence LSD-25.
[^3]: the primary psychoactive metabolite of psilocybin
I'm particularly fond of "Secrets of Synthesis". It gives you some idea of the difficulties she had to overcome to create this amazing music using such early versions of the hardware.
Convenient End-To-End Encryption for E-Mail
The PWM backlight driver frequency should be much higher. This kind of effect is only perceptible at sub-kilohertz LED switching. The LEDs themselves are happy to be cycled into the megahertz, so the only reason for this on the Macbook is poor electronic design. A low frequency does provide reduced cost, slightly higher efficiency, and reduced auditory/RF noise emissions, but visual effect has to be top priority.
Insider trading happens all the time. But usually you don't read about it in the news. So that the Intel CEO's insider trading got him in trouble shows there's someone fighting against him. Thus, no that's not the full story. I know it's hard to accept but the official scape goat is rarely the trouble maker. Or do you believe that the 2008 crisis was just the doing of that one banker that got jailed?
Again?!?
I'm still wrapping my head around Spectre. To me it does seem possible to create a sandbox secure against Spectre, but you have to recompile every program with retpoline to mitigate variant 2 and run in a separate process to mitigate variant 1. This way even if something breaks in a sandbox it will be able to see something else only from similar broken sandboxes, but not from other programs. Although there is a possibility of other side channel attacks.

(hoping for someone to correct me if I'm wrong)
So it boils down to your personal taste.
Apple displays are always poor quality.
Signing won't help unless the end user specifies the signature or certificate that they expect (signing would only help ensure package upgrades are from the same author).

If you're going to have clients specify a signature anyway, then you don't need to sign packages, you just need strong one way hash function, like SHA-1024 or something. User executes "pkg-mgr install [package name] ae36f862..."

Either way, every tutorial using npm will become invalid.
I think it's commutative :-)

Eating first is by far the more common usage. The Wikipedia article has a surprisingly thorough exploration of the historical usage of both variants: https://en.wikipedia.org/wiki/You_can%27t_have_your_cake_and...
Code Bots and Win Bitcoin
Well, kind of. Node was not a general purpose tool as conceived initially. You would write some I/O bound servers in it. And PHP too is not a general purpose tool, it is for writing interactive web pages (in its pre-Web2.0 sense) easily. Though Node.js was way more intellectually designed. I don't know much about PHP, but there's lots of literature (see https://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/).
Javascript is a very handy language, it's held back by all the gymnastics it needs to do to get over browser/www limitations, and an influx of low skill developers with no diploma.
That’s it. I’m using yarn.
I don't think the actual technical "how" is of much importance so the article doesn't spend much time on it. They communicated effectively, and more important openly, over company boundaries. Many tools would have worked for that.

This is about "how" they banded together to reduce their disadvantage compared to the big cloud providers that had advance warning and insider knowledge/access to the vendors long before the rumors started.
The ones I've spoken to lament the fact that no one has gone beyond low Earth orbit since 1972. They yearn to go out, and to learn on longer missions the things that are currently being learned on the #ISS, and more.

The ones I've spoken to think it's wrong that so much is being done within 400 km of the Earth's surface, when they went so much further.

The ones I've spoken to acknowledge that the #ISS is a wonderful thing, and that excellent work is being done. But it's clear that they think there's more to do, and we're not doing it.
I would say we should be signing packages but...