skysight-inc/HackerNews huggingface dataset:
I should have clarified. I'm not talking about micro-optimizations. Bash doesn't scale operationally. You might be a bash wizard who never fucks up, but you're never going to be able to keep non-wizards from having to use your awful bash codebase.

Bash is not at all meant for "system administration task automation", the very idea is ludicrous. It has to be the most singularly ill-purposed invention ever to be applied towards task automation.
But this isn't a website hosting a binary. These are binary repos hosted by Apache, who self-hosts their VCS repos as well. The idea that Apache can be trusted to host one safely but not the other is absurd, and the idea that you are more likely to notice malicious tampering via MitM attack on 2.9 million lines of code than you are a binary is laughable.
> On the other every model of iPad/iPhone on the same OS version should have the same fingerprint

Not quite. For example, they might be on different networks, have different zoom levels set, etc.

> Doesn't Safari do this already?

Last I checked, Safari "blocks" (not quite; it's double-keying, not actually blocking) some third-party cookies, but not all. In particular, it doesn't block third-party cookies from sites you have visited in a first-party context. So for example it doesn't block Facebook or Google trackers.

The Firefox "no third party cookies" mode, which actually blocks all third-party cookies, is quite different from the Safari behavior...
Show HN: Churchhill – Browsing History Garbage Collector
Run your own artifactory, have that as your docker repository too, only allow the use of jars that have been vetted ... it's what we do where I work, it's not hard, and it solves 99% of these gripes.
Seems like this is little more than an end around the fair housing act for landlords.
Marketing is evil.

It is lying on a massive scale.

If I want something I’ m go to look for it not the other way around.

If you track me I will dispise you and will root you out. Sort of /r
Whuffie
No, but they are specifically asking about the US.
Not all employers are as broadminded I suspect I didn't get past a screen for one of the FANGS. I suspect the Spanish recruiter saw I had not got a degree. But ignored the fact my fist Job was on the campus of Cranfield at a world leading RnD organisation - Cranfield being a Masters and Phd only University at the time :-)
Okay so sending graphic/abusive porn in place of referrer tags to every website you visit is just such a disgusting, fucked up thing to do. Like, if you do this you're objectively a bad person.

If you're doing "guerrilla advertising for those sites" - I just think you're a wanker. It's ineffective and silly.
> Making impossible for company to track their marketing effort doesn't protect your privacy.

Yes it does.
This is very true. Having a mental map of how things work is vital for correct (and good) troubleshooting.

Also, a ton of people use abstraction as an excuse to not learn a body of knowledge that contains fundementals (especially on the systems side).

In comparison to network engineering for instance, where having (quite) low level knowledge of how protocols work and interact with each other is vital.
Thanks for the correction. The female version is called Order of the Eastern star in case anyone is wondering where to join. I just met one recently actually. Really sweet lady.
Does that Dockerfile build a container that only has that app in and it's required dependencies? Almost all of the ones I've seen given as examples seem to have an entire copy of the OS in.
Show HN: A complete Bash parser in JavaScript transpiled from Go
The packages that Exodus produces are actually quite similar to those introduced in this announcement. Both tools generate simple tarballs that can be extracted anywhere to relocate programs along with their dependencies, and both tools bootstrap the program execution using small statically compiled launchers written in C. They contrast guix pack against Snap, Flatpak, and Docker, but Exodus would probably make a more apt comparison in many ways.
The author should have grabbed the .sdeb or the debian build scripts and tore them apart if they really wanted to make a point (if, upon examining the build, there was one to make).

I mean there is a lot of cognitive load/disconnect we're talk about. As an ops guy, I can't look into every package. That's why I trust the package manager (apt-get, yum, whatever) and all the build maintainers who either volunteer or work on for Redhat/Canonical/SuSE/IBM/whoever.

Things get through. That's why we have all those security people out there who are digging around for bug bounties and find crap like the recent Ubuntu Snap package craziness.

Docker containers can be good. You can use an official Ubuntu or Alpine image, build your base, and create scripts to make sure your base containers don't go out of date. Most people don't do that. The official Docker containers are kinda a mess, but at least they're maintained. Grabbing some random container off Dockerhub? Yea that's not going to end well; unless you just use their source to build your own. Or if it's a container continually maintained but the person/company who wrote the service.

Docker containers do need better security introspection and that's going to be a big deal going forward. But this article is all rant and some, but not enough, substance.
Regardless of your take on the article, could we, at least, agree that all build tools suck in their own special way after a certain level of complexity is reached?
Many of these are tools which download code dependencies from package repositories and integrate them into a codebase or build. Make doesn’t do that, even configure doesn’t do that.
You handle multiple bytes at once; it's fractional on average.

He's using vectorized operations to handle 16 bytes at a time, basically:

__m128i has_error = _mm_setzero_si128();
__m128i zero = _mm_setzero_si128();
for (...) {
__m128i current_bytes = _mm_loadu_si128(src);
has_error =
_mm_or_si128(has_error, _mm_cmpgt_epi8(zero,current_bytes));
}
return _mm_testz_si128(has_error, has_error);

Each of the _mm* "functions" becomes 1 (?) vector instruction.
It doesn't really read like it's meant to be praise or a compliment the same way, "eh, it was okay, but I wasn't blown away by it," isn't necessarily a compliment--a statement which I think is probably an accurate "synonym" to his original statement.
On what basis is your gsuite support -- Google's rep is "amongst the world's worst support unless your spending $millions" ...
CrossOver Lifetime
Anil!
The rule you mentioned is for unpaid interns only. Paid interns can do any work that full time employees do, and that's exactly what all big tech internships are about.
Crystal Brawl is HTML5 and shipping on several platforms

Posting a video because the game requires 4 game controllers and is 4 player only

https://www.youtube.com/watch?v=y4DVApqA9MY
When the parking lot at the transit stops are overfull, it's clear that people want to be there, so they might want to live there

I don't think that's necessarily true - there are lots of transit stops (even busy stops with busy parking lots) in areas where I wouldn't want to live.
Shared hosting - $1.99, here's your server, good luck

Managed hosting - $29, you get your own server, app, automation, backups, and 24/7 support to make sure everything is working great

Centralised, multi-tenant application - $0-$9, you get no server. You get access to our app for your use. You cannot modify it or run any third party code.

We do managed hosting - and managed WP hosts... also do managed hosting. That's why it's a reasonable comparison point.

WordPress.com is not managed hosting. It's a heavily modified centralised multi-tenant application which loosely resembles WordPress. It does not run the open source codebase at all.
>Up to about a yard, divisibility for imperial distances is pretty good, but you're absolutely right that past yards, it doesn't make much sense.

Seems to work well with miles

miles	ft
1/10	528
1/11	480
1/12	440
1/15	352
1/16	330
1/20	264
1/22	240
1/24	220
1/30	176
1/32	165
1/40	132

miles	yds
1/2	880
1/4	440
1/5	352
1/8	220
1/10	176
1/11	160
1/16	110
1/20	88
Any good interview process will allow—even encourage—candidates to ask questions. I've found that most interviewers are very open to me turning things around and asking them something; and judging by the way interviewers tend to love talking about their companies, I think it's been to my advantage to do so.

Yes, good interviewers often have a script; but a good script will provide time for questions and other free dialogue.
The timing of this is an amazing coincidence — I recently “lost” my domain in the same way. I bought it originally on Namecheap but have since transferred all my domains into a singular Google Domains account. My main domain, where I have my personal site and all my important emails, disappeared without notice on Wednesday the 9th last week. No expiration notice sent, no information as to what had happened.

I contacted Google as soon as I noticed and hey have been alright to deal with. Fortunately I am a Gsuite customer. I had to pay a fee to renew and another fee to restore, which was over $100. It’s been in “restoration” mode, ie offline, for days now and I am unable to even touch the DNS records until it’s back. I’ve already lost a week of uptime with zero recourse. FWIW I use a .co domain, and my site was throwing (for 24hrs or so) a splash page saying the domain was suspended.

Eagerly awaiting for it to come back but I’m totally in the dark as to timing.
Updated the post :).
All the C derivatives are getting closer to one-another. How different are Typescript, C-sharp, and Java? When JavaScript adds gradual typing, interface, etc. won't all these languages be nearly the same? The runtimes will differ but the language features and syntax will be almost the same.
This is very cool! I built something very similar about a year back [0] -- yours looks like it supports some things that mine doesn't but that I've been wanting to add, such as providing the commit hash of the offending commit, which isn't something mine does due to the git diff parsing package I'm using.

[0]: https://github.com/ezekg/git-hound
And thank god for that...
If you're willing to have your name attached to this, if / when it does finally blow up, please make an effort to talk to news organizations about who and when you initially reached out to congress people.

If you're not comfortable with your name being publicly attached, at least give news orgs the information and request confidentiality.

Part of the reason congress people can punt is that the cost of inaction < cost of action before it penetrates media.

A big part of shifting that equation is starting to publicize "You had all the information available now on X date and did nothing" as loudly as possible. Naming and shaming has been healthy for vulnerability disclosure.
Wait a sec - it's solar powered and the posts hold the batteries, but the pods have to charge? Also, the 100lb pods seat 5, but theay're barely big enough to seat 2 people who are apparently carry little to nothing?

There's no way a 100lb pod contains batteries and a drive mechanism capable of moving 5 people and their stuff up and down hills, so is the drive mechanism in the tracks? If so, why would the pods need to be recharged?

Seems like a neat idea, but it's clearly vaporware if even the marketing stuff is contradictory and/or impossible with today's tech.
> If I want something I’ m go to look for it not the other way around.

And how are you going to find it? And how will you know that it's the right solution to what you need? And how will you compare it against other alternatives?

Marketing is about all these things--not just advertising.
Theory hacks for machine learning research – Ian Goodfellow
Anonymous attestation protocols is a thing
Ehhhhh, sort of? But more: "surprisingly close to one day", because if you want to do correct time-keeping, a real day (or rather, a sidereal day, the time in which the earth makes one full rotation wrt "fixed" stars) is currently 86164090.7 milliseconds long.

You could also look at the solar day (the time it takes the earth to rotate such that the sun appears in the same place), in which case a day is actually a little longer than 86400000ms.
> There just shouldn't exist problems that relatively untrained eyes can spot and fix in short order

Many companies have big glaring inefficiencies that employees become blind to over time. Often times, new hires will be acutely aware of them, but won't speak up because they're new. Within a few weeks or months, they just become acclimated to the situation and work around it.
But one thing that's cheaper than building parking lots and garages for thousands of cars is to use zoning to encourage developers to build dense offices and housing close to transit so you don't need to build parking at all.
I agree. For me tracking is an annoyance, but this particular practice should be regarded as bad web design. It should be roundly denounced by the tech community. Why are so many web developers so willing to mess up their URLs in this way?
The term the RFC (RFC 2616, Section 14.18) uses is "MUST" with 3 exceptions (HTTP 100/101 responses, which are message-less; HTTP 500-class errors which are indications that the server is malfunctioning and during this malfunction it's inconvenient to generate a date; and finally HTTP servers without clocks), which are all referencing exceptional cases -- in general HTTP/1.1 responses MUST include a Date header from the Origin server, and proxies MUST add the Date header if the Origin server failed to do so (due to 1 or more of the 3 exceptions).
Yours isn’t a popular opinion in the UI world but I agree with you fully and there are a handful of interaction designers who question the dogma on animations.

I think animations is one of the places where a smart smartphone company could attack Apple on a UI basis...

Apple is wedded to a rich multimedia UI. It’s so tightly connected to their brand they have no voice.

But someone who came in with a low-media, animationless UI could best Apple on speed, General “UI mess”, and energy consumption. An interesting UI brand could be built around that.
A whitelist assumes you'll always want all media on a domain to autoplay all the time, which is very likely not the case. I have autoplay disabled in Firefox, even animated gifs have to be started manually, which is exactly what I want, it's the only way to completely avoid surprises. I've heard this is not currently possible in Chrome which seems crazy to me.
Well you use the right tool for the job. I hope to god you're not using a Makefile for a Java or Scala project. You better be using Gradle, SBT or Maven.

If you're building in Elixir, I hope you're using Mix and not a Makefile. If you're building in Rust, I hope you're using Cargo, or some other Rust specific build tool.

And Makefiles do get stupid complicated when you need things portable and to work on Linux, Mac and FreeBSD; or allow them to have optional dependencies. That's why we have autoconf and all that ./configure && make && make install craziness.
Interns are great. It's really the only interview process that doesn't suck right now, and I have a newfound respect for new college grads after working at a company with a solid intern pipeline.
Ex Amazon here. Most grumpy system engineers did not disappear: we got hired by Google/Amazon/etc to build large-scale infrastructure... and sometimes sell it back to you as a service.

Believe me or not, most of the underlying infra does not run on the popular technology of the year. Far, far from it. That's why it works.

Modern devops, with its million tools that break backward compatibility every month sometimes becomes the running joke at lunch.
that you care so much about things so unimportant makes me think you should probably not be on HN, but taking care of whatever is making you so cranky
>That'd require hashing every file on every run to figure out what changed. Not a good idea.

it is using time stamp to check whether to hash to check for changes.
As a fellow Canadian, you're way overstating things. Canada might not have the same problems as the US, but oh boy, do they have problems.
Before you do that, you might want to research GC 'throughput' vs GC 'latency'. Go chose to optimize for latency, not throughput. And for very good reasons.
Bash, but...

> --show me its arrays

declare -a

> Show me hashes.

declare -A

> Show me sets.

See above

> Show me the basic building-block primitives of software,

thing() {
local localVar
# Yes, it would be nice to have lexical scope as well as
# dynamic scope, but...
}
That's exactly it, though. What studies like this indicate, is that the discernible differences in wine are generally overwhelmed by such distorting features. And those features don't have much to do with our tastebuds or features of the wine itself.

(And this also extends to food & drink as a whole, to some degree)

Romantic vineyard lore... signaling ones status by drinking the expensive stuff... signaling ones refinement by having tastes that align with the experts... these are also all distorting features that overwhelm discernible differences in wine.

How well a wine taste to most, tends to be fixed on those types of things, rather than the actual wine.
> GNU Make, just using hashes instead of timestamps

Sounds like you're describing make on a system with ccashe installed. Hashing incurs a significant performance hit. The first build with ccashe is 20% slower than building without it[1]. Your modern make would likely be slower for people who just build something from source once and aren't doing incremental development.

https://ccache.samba.org/performance.html
I do often think about how, by using large JS packages, it's very feasible that in the daisy chain of NPM dependencies, somebody's managed to slip in malware.

I'm not sure what to do about it other than just not using NPM at all!
An evergreen as a topic and specific question (couple of threads about it in the last 2 months or so). Sorted for recency:

https://hn.algolia.com/?query=remote%20work&sort=byDate&pref...
I'm pretty comfortable in both, but I'll pretty regularly use Ruby via Pry for stuff I know I can do in bash. It's easier to write, much much much easier to write correctly, and it presents a unified interface to other developers.
A quick FYI, Gobolinux operates much the same way.

1. Binary packages are simply compressed archives (tarballs) of the relevant branch in the /Programs tree.

2. branches do not have to actually live inside the /Programs tree. There are tools available to move the branches in and out of /Programs.

All this because Gobolinux leverages symbolic links as much as possible.
Honestly, I don't care. I just don't trust that companies won't covertly use them for tracking.

I don't plan on using this extension, though, because I block all of the Google Analytics javascript files.
Articles like this are pointless. I get that guix and nix are neat, and I think that every single time something about one of them is posted, but I don't have the slightest clue how to use either one of them.

Do you want to convince people that something like guix is better than docker? Then take something that is currently distributed using docker and actually show how the guix approach is simpler.

i.e. I have a random app I recently worked on where the dockerfile was something like

FROM python:2.7
WORKDIR /app
ADD requirements.txt /app
RUN pip install -r requirements.txt
ADD . /app

RUN groupadd -r notifier && useradd --no-log-init -r -g notifier notifier
USER notifier
EXPOSE 8080/tcp
CMD ./notify.py

How do I actually take a random application like that and build a guix package of it?

Another project I work on is built on top of zeromq, and it would be great to use something like guix to define all the libsodium+zeromq+czmq+zyre dependancies and be able to spit out an 'ultimate container image' of all of that, but all this post shows me how to do is install an existing guile package.
> But I just don't understand why we have to have 47 half-built over-complicated build systems

> Everyone repeat after me.

I don't mean to pick on you specifically here because this attitude comes up a lot. In short, a lot of people are doing a thing, a thing that you aren't familiar with, and your gut reaction is to say "everyone: stop doing that, and do what I say!".

Wait a second and consider that maybe there is a reason why this incredibly large number of developers are using these tools. That perhaps they evaluated various different options and decided that what they are using is more suitable than make. Maybe you could find out.
It's worse than that. Article 29 Working Party (WP29) - which deals with data protection has said since 2003 (well over a decade!) that Whois is not compatible with EU law [0]. They just didn't have a way to enforce it before GDPR.

But ICANN are delusional idiots, maybe because they get so much money from US intellectual property interests. They did nothing, and then seemed to think that they could get a moratorium on enforcement. But even their own Non-Commercial Stakeholders Group basically told them to get lost [1].

It's a fascinating story of just how terrible ICANN is. As always, the Register has a great write-up [2].

One thing it clear, they deserve it. I do feel bad for registrars though, and hope they had more sense than ICANN and developed a plan B.

[0] http://ec.europa.eu/justice/article-29/documentation/opinion...

[1] https://www.icann.org/en/system/files/files/gdpr-comments-nc...

[2] https://www.theregister.co.uk/2018/04/25/icann_whois_gdpr/
i’m not quite following. are you saying that individual,identifiable location data is being collected and sold?
The memes that capture candid reactions to post–Hurricane Maria Puerto Rico
Sure. All of which are clunky, opaque, and harder to work with than any other language I have used in the last decade.

And besides: if I can install bash, I can install something specifically better for whatever I'm doing instead.
Although, it might a wildly unpopular opinion here, if US does not innovate in AI, someone else (and you know who) will and US will have to follow the suit. Regulations are healthy as long as they are well understood and not over-reaching.

Sounds like he wants to have regulation for all the aspects where their company innovate
I think that is the author's logic. Except it's not very logic, since Hadoop (or Bigtop) doesn't use either.
But is that rarity cause or effect?
Raise a glass for a GDPR solution built on Site-lokd brewery technology
Given the popularity of Node.js, I doubt this. JavaScript is still winning when people have the option to use C# or C++ or Scala or whatever else.
Here is the obligatory post about how bad .io treated security less than 1 year back [1]. Someone was able to take over the whole .io zone just by registering a few domains.

1: https://thehackerblog.com/the-io-error-taking-control-of-all...
What he probably has access to is people who review his feed and replies and curate that for him. So he's not responding to tweets he's found himself; but rather to tweets that have been highlighted for him to respond to (if he so desires). Heck, his team might actually include possible response ideas.

The fallacy is thinking Elon uses Twitter like any other person uses Twitter. Sitting on his device, manually scrolling through it and replying sequentially. He's probably outsourced much of this to his media teams or other people he trusts to provide relevant material to engage with.
Live in a cabin in the woods and never have contact with anyone. Now your surveillance worries are solved.
Rust is still figuring out its "async" story. Go figured it out, and went full steam ahead before the language was even made public - day 0, basically.

I'm not holding my breath for Rust dethroning non-perf-critical Go projects anytime soon.