skysight-inc/HackerNews huggingface dataset:
I think the only reasonable answer is "it depends".

After the new updated base OS images for our systems after Meltdown and Spectre were out, it literally took us ten minutes of human and about an hour of machine time to recompile all of our containers, run the tests and deploy them to production on our Kubernetes cluster, replacing the old insecure ones.

At the scale of our systems, any grumpy sysadmin would have spent at least several days untangling the dependencies and carefully restarting all servers in the correct order after some manually `sudo apt-get`ing (and probably forgetting a few of the lesser used systems).

Sure, typing "FROM ubuntu" (which by the way is a trusted and cryptographically image, contrary to the OPs concerns) leaves me at the mercy of whoever I trusted compiled that image.

Then again, what difference does it make to trust whoever compiled that ubuntu-17.04.iso image I put on my CD?

Or, as Brian Tracy taught me to say in these situations: "You may be right."
AWS IoT 1-Click
That is absolute insanity...
Can you expand on this? Having done a pretty decent bit of JVM development, I've never really run into issues even doing some not-out-of-the-box stuff.
Stellar’s first (and hopefully second) USD anchor
How will that mechanic learn about the options?
As one of my mentors said, "It's not about you knowing the proficiency 100% when you pass, it's about knowing it 100% when you're teaching it to others."

I wasn't 100% when I turned mine in, but they passed me anyway - after many hours of studying and working with others, they knew I KNEW it, but just froze up a bit during the official presentation.

I'd had some extenuating circumstances (wife passing away, etc) and was running up against the time limit to prove MM prof (otherwise we would have had to file papers with GL to ask for an extension, etc). I was told "We KNOW you know it, we're going to pass you, but promise me you'll get at least a C certificate when you can." The certifications are basically the Masonic equivalent of "teacher certifications" that prove you know the work 100% backwards and forwards.

In Texas, none of the work is ever written down (its all by word of mouth). At least in my Lodge, nobody ever gets to the "sit in Lodge to prove proficiency" stage without spending hours and hours working with others and the Deacons have already unofficially "passed" you - the sitting in Lodge for it is just a formality at that point.
Language specific build tools will usually behave predictably across all development platforms supported by the language. Once you start building on a third party, developer experience will be bounded by the quality of platform support of that third party. You don't want to send everybody off on a hunt for the right version of Python unless you are Python.

(Just picking Python as an example because of the recent xkcd. The same is true for everything else, e.g. a Windows computer will rarely contain exactly one make.exe, it's usually either none or a whole bunch of them)
Yeah, project disclaimers like "We do not recommend building from source" are big red flags for code quality or dependency hells.
So you are saying you couldn't apply your skills as a java developer anymore because of salesforce?
eBay v Newmark hinges very much on the specifics of the contract, and how it was structured to create this sort of duty on Craigslist's part to eBay, rather than being some general bit of case law that codifies the tired — and wrong — "'fiduciary duty' == 'maximizing shareholder profits'" trope.

We can have a great, and factually-based discussion on whether Newmark, et al violated their contractual duty, under the terms of that specific contract; extrapolating from that to "but fiduciary duuuuty!" (for these narrowly-construed notions of "fiduciary duty") is unsupported by the facts, or the case law.

Dodge v Ford is also, afaik, generally considered a weak precedent for the notion — which was specifically articulated by the state supreme court, and therefore doesn't bind peer state courts, or any Federal courts. ("Persuasive precedent" != "binding precedent".)

Several states' courts have also rejected the same argument in later cases. "The general legal position today is that the business judgment that directors may exercise is expansive. Management decisions will not be challenged where one can point to any rational link to benefiting the corporation as a whole." [1]

(IANAL.)

[1] https://en.wikipedia.org/wiki/Dodge_v._Ford_Motor_Co.
I agree with parent, but I think you're taking it too far. I don't think there are enough skilled generalists to pull off your ideal, and I think software/infrastructure is too complex to allow for generalists in the breadth you describe.

I'm a security person who knows pretty good Python and simple database stuff (SQLite). I think I'm in the top 50% (humbly) of my field, probably higher.

But I don't know front-end, containers/CICD, or disrtibuted systems worth a damn.

I do believe parent, which is the idea that teams should have embedded resources. A "VM security team" operating firewalls and infrastructure and policy auditing should not only have security experts, but their own devops group that automates the crap out of everything, using 2018 best practices. Currently, my team's "dev" group is a separate team in another area whose work queue is fed by multiple, distinct teams. It makes learning and understanding our requirements really tough for them.
Emulating classes hierarchy using prototypes while always keeping on mind what "this" means right here right now at this very call stack/context, without async/await basically any resource loading (unless you use some lib that is hiding nasty pieces from you), no enforced object structure/properties and passing them arbitrarily and then in the next version needing to add/remove some property everywhere, and many more.
It's a joke. Here's how it was done:

1. Write a song.

2. Find a real and recent CVE.

3. Make a website that satirises branded security vulns and refer to said real CVE.

4. Don't forget about that song. It's catchy!
Literally every one of those goes against current case law, which can be seen in eBay v. Newmark; plus "LMGTFY" isn't really an explanation.
Runtime size depends on a few things. The biggest is JIT vs native. If you're willing to dedicate the time to making (or interfacing with) a completely native compiler, then the runtime penalty isn't that large. In contrast, any halfway decent JIT is going to be several MB of code (and unlike an image, has to be parsed and executed -- potentially on slow phones).

In both cases, the GC issue is non-trivial. LLVM has finally started to make performant GCs possible. Wasm (to my knowledge) doesn't have similar capabilities and guarantees (I suspect the are actually impossible with untrusted GC code). The only viable solution IMO is the addition of GC primitives and hope that your particular language maps well on that specific browser's GC.

https://medium.com/dartlang/dart-on-llvm-b82e83f99a70
At the very minimum.
1. Can you give me an exam of something that is trivial in another lang, but requires "sailing to Africa and back" in JS?

2. What sort of scalability issues related to Node.js are you talking about? Isn't node.js (thanks to V8, and async IO) much more performance friendly than other scripting langs?

3. Regarding web-stack changing quickly, this hasn't effected me on server side yet. It has effected me on the mobile apps and web app side of things where I am using react 15.x, but it'll make sense to tackle that after raising meeting the next few business milestones.
Do you have a job that pays you with funds generated by marketed goods and services?
So, this is what they’re going to ask Tweetbot and the rest of the alternative Twitter clients to switch to?
The upstream comment said marketing is evil - a broad ranging statement. The comment you're responding to picked an example of marketing - not an unusual instance, just a common example of the thing the parent called evil. This seems like a reasonable response.
>And since nobody is still able to compile things from scratch

Is is true that we had better security when we had to "compile everything from scratch" whatever that means? Did people compile the OS from scratch?
You are completely missing the point here. It is not the question if JavaScripts wins - humans are not great at writing software to begin with regardless of the language. Soon, machine-learning assisted programming will be a thing and JavaScript will be a non-issue - applicable to any other language for that matter.
I think the context on this is http://apps-of-a-feather.com/ on the recent changes to their api for app developers.
The site you visit can still use that information with an ad blocker.
Back when I discovered how flexible the number 12 was this was something I thought would be awesome. (120 "hour" days). So much better than the metric proposal for 10 "hour" days (so called "decimal time").
I think its important to qualify “users” in this case. Technically, its 250 subscriptions, whether or not theres a one to one mapping between subscription and user depends on the use case, although for a an app where each user requires their own unique stream, this is likely the case.
https://www.merriam-webster.com/dictionary/riffraff

Apparently the common noun doesn't have a space in it but proper noun does.
Don't tell them: show them. I've found they get quite a reaction to the mess underneath illustrated by the PHK article below.

https://queue.acm.org/detail.cfm?id=2349257
Yes. We are learning from our mistakes.
Not to attack you personally, but it seems like you have never written software professionally. All the available packages you mention quickly become useless as soon as you have a use case that is not in the package's, often very short, README. More often than not, you need functionality which is at the intersection of what is provided by 2 or more packages with no easy means to make them work with one another nicely, so you basically have to write one for yourself. And when you remove all these useless packages, you get a set of useful packages which are not unique to javascript but can be found in any mature language.
3.1536 - thats way to inaccurate to be of any interest imo. Even 22/7 is a way better approximation
The individual citizen has practically no power against large institutional actors.
And somewhere, Gary Bernhardt is shaking his head in disbelief.

https://www.destroyallsoftware.com/talks/the-birth-and-death... was supposed to be satire... but "asm everything" might actually kind of happen.
the border between non-type and type check languages is getting diffuse these days with typescript going one way and C++ the other way http://en.cppreference.com/w/cpp/language/auto
Depends on your input. If non-ASCII strings are frequent and likely to contain a non-ASCII character fairly close to the start of the string, then it makes sense to short circuit.
Out of all the solutions suggested - this is the most practical. This would actually fix the problem at hand. Make it illegal for them to either obtain and/or sell this data.
People with multi monitor setups with different DPI, how is your experience?
I'm thinking of getting a 43" 4k monitor. The real estate is going to be AMAZING.

The only thing I'm worried about is the DPI. I use a 2017 MBPr w/ a Dell P2415Q, both of which are ~180+ PPI

I used to have a 24" 1080p and side by side, it became unbearably blurry. For those that have the same rough setup, do you think I would find the LG monitor blurry? or do you find putting it further back helps?

On the other hand, anyone here who have experience 32 inch 4k with 24 inch 4k? That would put the PPI at ~150PPI - ~180 PPI.

I'd love to get the 43", but I'm not sure if I'll find it 'blurry'. No retailer in my area has it, and I have to ship it internationally so I really want to know if it's going to be feasible before I jump the gun.
Would be interested to get your opinion on Puppet/Ansible/Chef/CFEngine/SaltStack
Why SQL? Edit: Joking aside, I had read the information on REST. I did give it more than a few minutes' thought prior to posting. But I still did not quite understand its prevalence today; perhaps that speaks to my inability to comprehend or analyze information. Regardless, I decided to post on HN in the hopes that someone would help me out - I wasn't arguing for, nor against, REST. Could you suggest another forum where to post? What else should I do when I've read the available information and still don't "get it"?
Point taken, but I really do think that's another way of saying people really aren't all that good at tasting wine.
That’s really not true at all. DMP was a very recent acquisition, as was Marketing Cloud and Pardot.

Core Salesforce is a company data store often requiring human data input. It’s where your information goes when you fill out a “Contact us” form on somebody’s website.
I’m just going to sit and wait until Twitter falls into the irrelevancy black hole.
The hype could pull a 787
https://newsroom.fb.com/news/h/shutting-down-partner-categor...
I have no baseline to go by, but my gut feel is that the price is quite high. If it isn't, that means my data is worth $12 a month. Think of how many services are scraping/selling/aggregating/whatever-ing your data. Each one aught to be paying you the equivalent of $12 a month, either in straight cash for something you pay for, or in services.

I know I'm not getting my value.
New Privacy Rules Could Make This Woman One of Tech’s Most Important Regulators
Fragmented IPv6 router advertisement handling on different operating systems [pdf]
Best advice ever.
Path ways to become a Future Physicist
I disagree that it is the wrong question. "Every other language" doesn't matter because I don't value homogeneity and I think that homogeneity of programming language is a fool's errand. I am comfortable shipping production code in most of the languages in current use; in my estimation, none of the major build systems out there are as opaque or difficult to use correctly as make/shell.

(And I am what a current sysadmin would be if we did not call ourselves "devops engineers" now.)
Here's Sean Heber's response to this: https://twitter.com/BigZaphod/status/996794900208287744
In the case of Openstack though, the community made it really easy to build docker containers from source.
With Guix you get full introspection of your entire package dependency graph, you can check and manipulate every aspect - and it is still simple and easy to work with. With GuixSD you get this same introspection and overview, but of your entire system. creating a container, vm or even a docker image is a simple '$ guix system <container|vm> config.scm' away. And your config.scm is as complex as you like it to.

The simplest way would be to package the app for guix and you could just run '$ guix environment <name-of-package>' and you would be dropped into an environment with all your dependencies and whatever else the application requires in your path ready for hacking, get your sources and editor and start working.

If you need a vm or similar though I'd translate your example above into a system config where:

- packages include python-2.7 and whatever is in requirements.txt (this may mean you have to package a few things, but again this is usually super easy)

- users and groups are added to the config, as they always are, no extra step necessary.

- exposing ports and networking is available as options for qemu script guix produces to launch the vm.

- CMD ./notify.py: create a "simple" service that can be autostarted by the system on boot.

- filesystem access is also handled by arguments to the qemu script.

As always though there are several paths to Rome, and these are just two of them.

Zeromq and libsodium are already packaged on guix, czmq and zyre looks like they would be simple to package, guix is really quite simple to work with, which I think is the reason so many of the users and devs are running it as our daily drivers, even though it is strictly beta (0.14. I think is the last release).

And pointless, come on - what does that even mean? Does it mean you don't value them? I was quite happy to read about a neat new thing I can use my favorite tool for.
You know, I tried politely setting Do-Not-Track in my headers to express my preferences. The marketers and publishers laughed and ignored my expressed preferences. So now all I can do is fight back any way I know how.

What I really want is an extension that somehow corrupts the UTM data so that the trackers have bad data.
"Any application that can be written in JavaScript, will eventually be written in JavaScript." -- Atwood's Law
So what are you doing these days.
> I'm guessing you've never written heavily concurrent code.

Guess again.

> C/C++/Rust are totally fine when you have a single thread. It's concurrency and parallelism where object ownership and who gets to destroy what and when becomes a real problem unless you have GC.

Given that one of Rust's main shticks is concurrency and parallelism it's an odd thing to say. You can always use an Arc<> if you want reference counting between threads which is sort-of GC but opt-in and perfectly deterministic.
Be aware that this might be short term thinking. What you gain in getting features done fast by mid level developers will probably cost you later in the form of technical debt. I'm not saying you can't write good and maintainable software in JS, but the features and practices other languages offer (strong and static typing, interfaces or traits, ownership reinforcements, monadic entities like list comprehensions) aren't there just to make things harder. They are usually worth the perceived extra complexity for bigger projects
Across multiple operating systems (unix and windows)? Does it fetch and install 3rd party dependencies? Can a noob maintain the makefile without pulling their hair out?
Yeah, but this time we actually seem to have some half-functioning ML in form of Deep (Reinforcement) Learning, which we didn't have before. You can't expect all issues will be automated away, but more like a gradual process when more and more tasks will be, and companies competing with each other on who finds a new way to automate something, like we saw with any explosive R&D in the past.
Could we link to the canonical url [1] instead of the tracking shortened url please?

[1] https://www.salesforce.com/company/news-press/stories/2018/5...
And perhaps in our lifetime the next hyper factorial (6^6 * 5^5 * 4^4 * 3^3 * 2^2 * 1^1) will be a lifetime (127.8 years (approximately)
Lol. Its just because its a highly divisible number. Saying basic multiplication is "esoteric" shows how little you expect of ancient civilisations. They estimate the circumference of the fuckin earth and you say its "esoteric" to think 108 is holy.
Everyone will be running on AWS, Google Cloud and Azure, who know how to operate infra that doesn't crash all the time.
In a typical bid entry there are between 500 and 5000 bits of information relating to an individual, per the definition of GDPR. And that's not including the dreaded "IFA", which uniquely identifies the individual.

I don't agree with your claim that "the geodata is often fraudulent".

Anyone can read the linked pdf specification (above), download sample data from the exchanges, and judge for themselves.
It seems like they're waiting for enterprise pricing: https://techcrunch.com/2018/05/15/tweetbot-3-arrives-with-a-...

I'd pay $10/month for Tweetbot. It is an ad-free twitter experience after all.
Utter coincidence, and it only works at all if you throw in the milliseconds term, which makes it seem forced.

A lot of our numbering systems are inherited from early mathematics that dealt mainly with ratios of low whole numbers. And so selecting bases with many prime factors made the rational math easier. When your base is 60, it's easier to divide by 2, 3, 4, 5, 6, 10, 12, 15, 20, and 30.

You might as well divide up the mean solar day into 10! = 1 * 2 * 3 * 4 * 5 * 6 * 7 * 8 * 9 * 10 = 2^8 * 3^5 * 5^2 * 7 = 3628800 chunks, which are each 1/42nd of a second. Or maybe make the 7 represent the 7 days in a week, and use 518400 chunks per day, each 1/6th of a second. You could divide up your time by so many whole factors.
The Life Span of a Photographer’s Marriage (possibly NSFW)
simd support in Rust was only recently accepted and is being implemented so it currently relies on the vectorisation abilities on the compiler (it might get revisited soon-ish I guess).

As for the assumption of mostly-ascii, the validation function has a "striding" fast path for ascii which checks 2 words at a time (so 128 bits per iteration on 64b platforms) until it finds a non-ascii byte: https://doc.rust-lang.org/src/core/str/mod.rs.html#1541
see also https://www.proxmox.com/en/news/press-releases/proxmox-ve-5-...
Man Dies After E-Cigarette Explodes – Why are we still using this?
Y'know, I hesitated. I admit I'm somewhat ambivalent about VSauce, because Michael's somewhat wandering style makes it closer to entertainment than the usually more focused topics the other channels on my list work with. That said, Vsauce is definitely interesting and great for fostering curiosity and an inquisitive mindset.

Also his new channel DONG ("Do Online Now Guys"... wut?):

https://www.youtube.com/channel/UClq42foiSgl7sSpLupnugGA

Also I should've mentioned Veritasium:

https://www.youtube.com/channel/UCHnyfMqiRRG1u-2MsSQLbXA
You still can't be sure. Your car may contain a SIM card nowadays, always connected, for your protection, sure thing.
I feel like there has always been a contingent of sysadmin / ops folks who preferred the "Better to ask for forgiveness than permission" model. They still hate when things break, (so not quite fans of developers with a "move fast and break things" philosophy) but they care more about big picture improvements and ease of upkeep than enforcing any particular process. Detecting problems and being able to roll back is typically more valuable than preventing mistakes in many cases. It may be somewhat driven by laziness, but it actually works out pretty well for collaborating with the fast-moving developer types. It also does depend on being in an environment that is tolerant to occasional mistakes or outages.

It makes sense that these types naturally gravitated towards the devops models. I'm really not sure where this leaves the more compliance-minded systems folks though.
Again: sh, not bash. If I have the freedom to specify bash, I can specify something better than bash or sh.
Or a legislator or a citizen.
* Contains some (artistic) nudity.
Clunky is subjective -- I think we can probably agree that there are clunkier, more opaque, and harder to work with constructs in programming than a slightly different syntax for array declaration.

What are these build systems where you need to install Bash? Bash 4 was released in 2009: it's been in every major Linux distribution for at least two major versions, ditto for FreeBSD... heck, even Solaris ships with it now.
Legal sports betting is coming but will there be enough money to share?