skysight-inc/HackerNews huggingface dataset:
Maybe sandbox is the wrong technical term, but JS as a language runs with constraints. It can't manipulate pointers, mainly. As far as I know there's no such thing as a buffer-overflow attack in the context of Node.js.
I actually appreciate the skepticism of flat-earthers. Everything should be challenged. What I have noticed about the flat earth theory, however, is that the arguments are very weak.
Fun exception to Betteridge's law of headlines
https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline...
An online account is a different thing from a physical object like a letter or journal, which can be freely transferred from one living person to another living person. (The right to reproduce the contents of letters and journals is another matter!) An online account is a contractual relationship. I don't know about Facebook, but most online accounts are explicitly non-transferable. So it's not at all obvious that Germany should make these things transferable on the contractee's death regardless of what's written in the T&Cs, if that's what's happened.
Yes, there are also a wide variety of opinions on climate change.
> I think it would be wise if someone started a new JavaScript package manager which was run more like a Linux distribution is

I started one but dont have the time to maintain it. If anybody wants to take it just fork it and go: https://github.com/prettydiff/biddle
13” inch non touch bar is last year model, no upgrade to keyboard and with 7th gen CPU. This refresh updates only the touchbar models with new keyboard design and 8th quad core CPU, which could means significant CPU performance improvement.
Why can't the team agree on some norms of behavior for this very situation

Who is going to assume the authority when a company is promoted as having a flat hierarchy, or holocracy, etc.? If the CEO is speakerphoning or fomenting adhoc floor meetings in an open-plan, nobody is going to say it's bad.
You can change desktops very easily on the popular linux distros. Try r/linux and ask about what you want specifically. It's very likely there is a desktop out there for you. If you just want a macOS copy, most of that can be done by configuration. The development environment is really good on arch linux bdw.
Maybe 2019 will be the year of the Linux desktop? :)
It's usually a very painful 3-6 months and then business as usual for companies where the number of developers is <20% of the total employee head count.
npm doens't take the code directly from the github repo, so far it looks like the new code was publish directly to npm, so there is no git commit to look at as it never was part of the official github repository
I have little insight on spying issues (or how MS compares to what Apple, Google or everyone else is doing regarding that nowadays) but coming from Windows 7 I have zero practical complaints about using Windows 10 over it. I like the WSL bullshit a lot, too.
Don't compete on features
Also, it's still easy to detect fetch/XHR/img requests that appear out of nowhere and scrutinize them as points of interest. No matter how much your code is obfuscated and minimized, it still has to go through those APIs. There's no way around that.
Yup, The 32GB version should really be called Slackbook Pro.
Yeah and what kills me is how ubiquitous tellocomms are for multi-site corps. I can't tell you how many meetings I've been in where everyone was at their desk, headphones on and each was playing the mute/unmute game in order to not blast everyone else on the meeting with the surrounding noise.

Then, given all that, you get the coworker two seats down Slacking you. If you're Slacking folks within 10 seconds walking distance then what's the point of being in the office at all.

I think the ideal would be commuting to the office one day a week to take care of meetings which are more productive in person such as sprint planning, grooming etc.
This has been posted here before, but your comment put me in mind of http://www.davidbrin.com/nonfiction/dogmaofotherness.html. Might be worth a quick read.
War and Peace by Tolstoy. it is far from 'recent' but i read it only this year. it is particularly interesting because it is not overly intellectual in nature yet still written around the time it portrays.

Robin Hobbs latest Fitz and the Fool trilogy are also great books i read this year. as are all her works really.
For a lot of people, "taking calls" is a major part of their job. I usually work remotely but, when I am in the office, hunting for a free enclave every time I need to have a phone conversation isn't practical and certainly doesn't scale if everyone were to do it.

I do think that it's on management to try to segregate groups that don't talk much and prefer quiet from groups whose jobs involve a lot of phone conversations but it's not practical for many roles to avoid talking on their desk phone. That's why they have one.
Explicit whitelisting for network access.

Explicit whitelisting for fs access.

A programmatic way to tell if the publisher of a module has 2FA enabled. I’m a fan of public shaming to enable 2FA, if not making it mandatory (again tricky if you have automated builds).
We’re dumb in comparison to the systems we’ve created. Increasingly, the disparity between what our technology is capable of and our own limitations as animals will become a pressing issue.

One thing that always bothers me is how we have this myth of personal responsibility that supposes an individual is equipped to defend their own interests against a multinational corporation on their own.

“Well I just don’t get why the baby didn’t defend itself from the bear.”
Yeah, I wondered if there was some new controversy I wasn't aware of...
New Features in Firefox Focus for iOS, Android – Now Also on the BlackBerry Key2
I've been looking for a google news replacement and this looks really promising. It would be useful to have a little bit more info/transparency on where the data is sourced from and how it's ranked. Also many terms don't yield results (e.g. searching for terms like Linux, Google, AI or very common terms returns nothing when there are obviously a lot of news every day).
Life is hard, it's harder if you're stupid. - John Wayne
These are very commonly recurring rules indeed, but that does not make them absolute nor are they universal.
Yeah I definitely played Pokemon in all of those places at least as far back as 2003 (when I was in the third grade).
Get Karabiner-Elements and you can map press-and-hold on caps lock to control and press-and-release on caps lock to esc. Massive win for emacs users and most vim users I have introduced it to seem to like it.
> who inherits the facebook messages ? Is it the sender or receiver

I'd argue both, for the simple reason they both have a copy of the message.
I'm sure this is just anecdotal, but we all kind of like our open office layout. We're not just at desks sitting shoulder to shoulder. They're more of these horseshoe-esque things, and you have plenty of room between you and the next person. We have an open ceiling, so the A/C provides some good, loud background noise to drown out conversations. And lastly, we're pretty strict about having people IM you before they come to your desk, so interruptions aren't as intrusive.

I really think open office layouts can be implemented correctly, it's just that managers don't take the time to really tailor them for their development teams. We all wanted the lights off to work in? Lights are off. We wanted standing desks? We got standing desks. We wanted 2 monitors? We got 2 monitors that have adjustable heights. I think the problem with open offices is that managers are just using them as a way to save money on office space. If you really want a good office area for your developers, I think you can accomplish that with an open office layout if you really try.
He literally talked about CAS right before that, here's the whole quote: 'The core part of git is a content addressed store. I quite like the term “value store” for these.'
Thanks. I agree with Julia, it's a weird name: `x` is often associated to Xorg tools, and there's this scary `rm` at the end that evokes some kind of remove tool.

EDIT maybe "X" to mean "cross/transform" is an American-ism. Going for the first time in the US, it took me a while to compute that "Ped Xing" street signs should be read "pedestrian crossing" :D (and immediately think: why not a simple evocative symbol of a road with someone walking on it?!)
I believe some legal systems consider privacy to be a non-issue once someone has died. That thinking seems implicit in the judge's mention of the way diaries are handled after death.

Also, the age of deceased may mean it's treated differently. From the article:

> the parents had a right to know who their child, a minor, had spoken to online
If the cost of energy is free (PV source already paid for); there's no point in programmable thermostats.
Even before I opened the link I had an inkling that this would be Michio Kaku level good for a documentary kind of sensationalism filled piece. I was not wrong.

While glancing through, I didn't come across any mention of "intent to communicate". Not sure if any of the links have. It seems like too much is made out of the act of "dropping off things", and perceived as communication. While it is something that we all have done in high school (or at work, sheesh) while analysing the actions of our crush to check for signals, I am pretty sure it has no place in science.
This reminds me of this story https://hackernoon.com/im-harvesting-credit-card-numbers-and...
Diamonds with water ice in them suggest lots of water in the mantle
This link doesn't work for me.
Cognitive Walkthrough for SaaS Startups
There was an interesting NPR Planet Money episode about Richard Thaler back in November. https://www.npr.org/sections/money/2017/11/01/561421807/epis...
Just go for vanilla Gnome, the UI is solid.
I agree, but I'm not too sure about that, but I also don't know enough chemistry to convincingly argue for the opposite..

Are there many varieties of self-replicating molecules? (which I understand is needed to start life) Maaaaybe there's only so many ways that this can get started and RNA is the "only" way to do it. In a similar way that we have a hard time imagining non-carbon life since no other element behaves in the ways that carbon does
An edition with an Nvidia GPU would certainly be appreciated, even after years of Apple exclusively pushing AMD GPUs there's still a non-trivial amount of software that doesn't work on them.

There's been a mass-defection from Mac to Windows in the motion graphics industry just because they want/need Nvidia GPUs to run their preferred renderers.
Why didn’t they keep both the touchbar and the F keys. That would have been so awesome for developers, it would have enabled so many usecases without killing existing ones.
Anyone who uses a keyboard to navigate their computer and has not already re-mapped their keyboard to put esc into a more RSI-friendly location is going to be paying for this choice in a decade or so...
As a counterpoint, the 13" finally now has a quad core processor - that's a game changer.
Completely unrelated, but maybe I can use the deep knowledge of HN.

Browsing from the article I ended up in the page of tis-interpreter that says "You can also use TrustInSoft to maintain compliance or reach certification according to the norms EN-50128/IEEE 1558." [1]

How does this compliance process work? Some of you have experience?

[1]: https://trust-in-soft.com/industries/rail/
A huge part of the problem is that social media is built of bite size chunks that fit into small amounts of time much better than long form pieces.
Just thought of another ZKP - my niece can prove to me that she knows the password to a device by logging in, without me ever knowing the password myself.
What problem do you have with alt-tab? For me it goes exactly to the last window that was open/had focus.
How Snowflake Fits into Your Existing Azure Environment
Personally I prefer story points per card, and then calculating the average velocity of the team per sprint vs. the number of story points left in the backlog. This presumes a deadline more than a sprint away, though, since it's a little fuzzier. Mostly it keeps people away from saying "Hey, we said this card would only take X hours!"
I don't understand why they don't have the same CPU/RAM spec for both models. The 13" is the perfect size and it's not like they can't make it happen. dumb.
I'm a frontend hobbyist. I noticed a lot of node_modules use eslint. Are they able to hijack stuff all the way down the dependency chain?
From what I read, the code is not in the github repository. What happened was that the npm publish credentials were compromised, and someone published their own code instead of code from the github repo. So they don't have commit logs of who published the bad code, but npm may be able to help them track down which credentials were used to publish it. Npm's server logs may also point in the direction of where the malicious publish came from, but it's likely that the IPs in the server log are proxied or otherwise useless.
nitpicking, but switching off images gives a lot of errors in the browser console due to invalid html:

XML Parsing Error: mismatched tag. Expected: </img>.
Location: http://spidr.today/c/d739b08923d798d62c2e5fe8ff17a76d
In addition to the other advice here, regarding how to handle this politically and from a communication perspective, I think you need to quantify to what extent you're not going to make the release.

- You need to write down all the things that need to be done, the granularity of task should be between half a day and two days. (Anything larger than 2 days will be a task like "refactor this system" that hasn't been though through enough, and thus likely to be completely wrong.) Do this in a meeting with all your team members, they will be telling you what they foresee they need to do.

- If you can't estimate things, because e.g. the system design hasn't even been started yet for those things, you need to design them, at least on a very high level. So that you know, at least to some extent, how long you think they're going to take.

- Write down estimates for the aforementioned tasks, in person-days, by getting your team members to estimate these tasks.

- Ideally use some kind of task planning system such as MS Project, LiquidPlanner, manuscript.com or some JIRA plug-ins that can handle this sort of stuff. But even a Google Spreadsheet shared between your colleagues will be better than nothing.

- Now you'll know an end date. How far out is it? 4 months rather than 3? 12 months rather than 3? That makes a difference. If you're going to be late, you management may wish to give you an extension. If the project's going to take another year, management may wish to cancel or change the requirements significantly. You have to provide them with the information to enable them to make that choice.

- If it's decided to continue, then update that spreadsheet all the time. Get your team members to update it, and if they don't do that, then talk to them every few days and get them to tell you what they still need to do. Focus only on the future: remove tasks when they're done, add new tasks as they arise, change estimates on tasks as they're partially completed. So even if you decide to continue, maybe in one month it becomes apparent you haven't made as much progress as you'd like, or there have been unforeseen difficulties resulting in more tasks. Know if it's going off track again as soon as possible.

Estimate will be wrong. Things always take longer. This is a minimum bound. But if your spreadsheet says you need another 12 months on a project that only has 3 months to go, you can be sure that it won't be done in e.g. 2 months, that's useful information to have.
Not recent, but last time I bought a new MacBook Pro, it was $1800. Now starting price is $2400. Is there similar inflation for other laptop manufacturers or it's just Apple?
mehhh... 32GB of RAM might have been interesting in my laptop 5 years ago, but with cheap and nearly infinite VPS instances at the execution of a script, large amounts of local memory is hardly a requirement for developers anymore.

For creative professionals it will help; but as a software professional I see no reason to be interested in Macs anymore.

I'm sure the top tier model will push nearly $4000. frankly Apple lost me to Fedora/Gnome-Shell about 4 years ago with slow or no updates to their core software applications (Terminal.app... really?), less than impressive hardware when compared against Dells or Thinkpads, and a vertically integrated walled garden model that I just didn't want to be part of anymore.

But.... hey look, more clock cycles. Wooohooo, I guess
$5-10k saved yearly to produce an unproductive $150,000+ employee... I don't think the scales are balanced even then.

And, from personal experience, companies do it even when the cost per square foot is 1/10th of that of NY.
But they had their rules too. Are you suggesting their rules were somehow "wrong"? Funny how the societies left to the dustbin of history are never the "right" ones. It's almost as if the survivors are the ones who choose who was wrong.
publishing is separate to the source code. If someone stole the publishers credentials, then they could publish [1]. Only NPM servers would be able to know something special (not the credentials) about who did the publish, e.g IP.

[1] https://docs.npmjs.com/getting-started/publishing-npm-packag...
https://www.netdevconf.org/0x12/session.html?toward-an-ebpf-...

This will be great, power of XDP in simple interface.
> i haven't done any real research

You've seen pictures of the earth from orbit, right?

You probably mean that you haven't engaged in all of the crazy theories and arguments put forth by flat-earthers. But that's doesn't make your very simple observation-based opinion any less justified. Direct observation can and should eliminate the need for lots of hemming and hawing.

> Of course i believe in global warming, though ive never read a single paper / study on it.

There are many accessible descriptions of global warming and the evidence for it written for different levels (uneducated/child; HS-level; university-level).

> Of course i believe in evolution, i went to a school where they told me to believe it.

That sounds like a bad experience, and maybe that explains some flat earthing. When I was in school we were presented with a lot of concrete evidence for the evolution of the species, and Darwin's original was even required reading.
Show HN: Hasura: Instant GraphQL APIs on New or Existing Postgres
How does she do that?!
Or, as Androider said, put it in the break room. Where I work, that's exactly what they did: there's a TV in the break room that's on all the time, so for world cup it was tuned to that. No problem: if you want to watch it for a few minutes, go do it in the break room. If you want to not be bothered while you work, don't hang out in the break room.
Then make it an option, or risk losing the segment. When my company gave me a 2015 MBP I was really impressed with it, it seemed like the perfect hardware. I knew when I upgraded my personal laptop it'd be a Macbook Pro.

Then they started handing out post-2015 MBP to others and so I've used them a bit. There is zero chance now that a MBP will be my next laptop.
HHKB users probably haven't as that key is Ctrl on their keyboard.
Someone will need to, yes. Hopefully it would be a more centralized, trusted auditor.

But flip it around -- without such audits (the status quo), you don't know what code runs in your own codebase. Is that acceptable?
On my Thinkpad the whole touchpad depresses like a giant keyboard button. Yes, there is slightly more force than on an apple Touchpad, but you don't accidentally click by tapping, which is nice.
Are the former still studied and used?

The evidence suggests ASP is still actively being researched, yes.

https://www.google.com/search?q="answer+set+programming"+sit...

The activity on the Prolog subreddit suggests Prolog is still being used, yes:

http://prolog.reddit.com
> When I use Groovy, I'm not doing it because "Java is bad", I'm using it because "Java is good" but "Groovy is better". When I code in Scala I keep feeling bad every time I divert back to Java-style and constantly struggle to figure out what paradigm is right and when to switch between them.

Take it slow, and don't expect to be using every Scala feature/library/pattern from day 1 - there is a lot of depth to functional idioms, the learning curve of something like Haskell has less to do with syntax than you might think. Write code that does things that are useful to you - even if you're only writing "Java without semicolons", you're getting value out of Scala - and adopt the fancier features one step at a time. I've been working in Scala for 8 years and there are still places I'd fear to tread (why do I care if my profunctor has strength?), but every year I've produced more concise, clearer, less buggy code than the year before, and even in year 1 I was doing as good as I had been in Java or Groovy.
Hi HN!
Super happy to announce the first open-source release of the Hasura GraphQL engine. This is a standalone service that gives you GraphQL on Postgres.
It comes with fine-grained access control that can integrate with any auth provider. It can also work with any existing postgres database as is, and allows you to expose select tables/views across your postgres schemas over GraphQL.

Looking forward to your feedback!
Completely agree. Nvidia's typical performance is also way ahead of the GPUs Apple is integrating.
Familiarity.
Well minors can’t enter into contracts to grant FB distribution rights, therefore, those contracts are void as a matter of law.
That doesn’t mean simplicity is more important than correctness. The simplest program ever is an empty file, and it doesn’t solve any problem.
Do you per chance look/glance at the keyboard while you type? That's the only way your comment makes sense.
Empathy and self-control are not rights. They may inform rights, but different cultures see those as creating very different rights.

parents' authority over children is sacred

That's completely false, many societies (ours included) have imposed restrictions on how parents can raise their children, and sometimes in quite extreme ways (e.g. the Agoge[1]). And the child protection services in our modern Western societies take away plenty of children.

The rights of parents over children are more like the authority of the king in the Little Price - absolute, as long as they only use it in certain ways.

[1] https://en.wikipedia.org/wiki/Agoge
>I'm forced to wear headphones all day.

Didn't you know that you shouldn't use headphones in an open-plan office, because it prevents you from collaborating with others? /s
What happens if there is a long chain of different, tiny methods going from, say, 0 to 100? I guess the last, method number 100, the "leaf method" gets inlined in method number 99. Then we have a version of method number 99 with a method number 100 inlined. Now what happens to method 98? Does it inline the version of method 99 that has inlined method 100? When does it stop? Do we end up with a huge method 0 that has all subsequent calls inlined or did I completely misunderstood inlining?
Internet hearsay (Apple store/reseller staff quoted in podcasts etc.) often mentions that the MacBook Air is (was?) their best-selling laptop. It has no TouchBar, more keyboard travel, a smaller trackpad, arguably more useful ports, and longer battery life. If the trade-offs in the latest MacBook Pro were universally loved, why wouldn't they spread into Apple's other, more popular product lines?

I honestly don't see how their current laptop line-up makes any sense for consumers (and shareholders). If the TouchBar really makes it easier for non-nerds to find shortcuts, why only offer it in high-end laptops?