skysight-inc/HackerNews huggingface dataset:
Notepad++ has its fans but it falls between two stools.

It is a bit overblown for editing your /etc/hosts file and a bit underweight as an IDE.

People get stuck using Notepad++ and never give themselves the opportunity to invest that time in a tool that best suits development. This could be a grown up IDE, vi(m) or Wordpress's admin editor.

Being lightweight is all well and good if you have a 486/DX33 running Windows 3.11 but most computers have Pentium chips inside them now.

One thing that will probably remain just as useless with Windows Notepad 2018 is use case number one - editing your /etc/hosts file. What else is Notepad really for?

In the rebooted edition of the classic text editor they will still make /etc/hosts only save if you are an administrator, or 'root' user as it is on more conventional operating systems. This is fine and good for security but it does not let you just type in the 'admin' password after you have opened the file and made your changes. With Vista they got the UAC mostly right but not for Notepad and /etc/hosts.

They also hide the /etc/hosts file in some subdirectory that only a young person could possibly remember the file path for. It is not in the conventional place that is expected. c:\wwindows\system32 is as far as I can remember. Then, when you have found the magic folder, it requires a change of the file type in the file dialog window before you can see it, and that is presuming you have file extensions enabled. There is a confusing hosts.isam file in the same folder. Who knows how you explain to your grandma over the phone how to add some IP address to her hosts file so she can see your development site.

Really the line endings problem should have been fixed a long time ago, actually with Windows 95 as it was apparent even that far back that users might want to open files created on systems that were not 'Wintel' (as it was known then as everything else used different processors).

With Windows 2000 - no winsock.dll needed - they should have made efforts to make /etc/hosts editable that bit more easily. That would have sorted out 90% of real world use of Notepad.

Unix philosophy should apply to Notepad - do just one thing - and the Windows Write product should have been where to go for fancy line numbers and such like. That could have made a neat and basic Notepad++ style product with a print view and raw text mode like what early versions of Word had.
The npm team's lack of responsible action here is astonishing, if not surprising. If a token for these very popular packages was compromised, then every user of those packages could conceivably have had their tokens compromised, not just those that have it as a downstream dependency. That means every single package published between the vulnerable packages and the mass token invalidation is suspect and should be unpublished until it can be audited. npm's position that "a very small number" of packages were compromised is minimizing a potentially massive issue. Their promise to "[conduct] a deep audit of all the packages in the Registry" both misses the point and is ineffective.

I have come to expect no less from npm, and by extension, nodejs.
Where are you testing?
Sadly I already remap caps-lock to ctrl. Don't worry though, this SB2 is so nice I'm no longer feeling any pain. Literally my only complaint about it so far is that the headphone jack is in the wrong place (it's on the edge of the screen in the upper right, which is sort of an odd place for a wire to be coming out. It should be on the lower edge either left or right.)
> i just wonder why jquery is still there?

You may not need it! Go to [1], then click on "Show components requiring JavaScript" to see which components require it. You don't need jQuery for the CSS part of Bootstrap, for example.

[1] http://getbootstrap.com/docs/4.1/getting-started/introductio...
Massachusetts allows school to continue with electric shocks
Adding a font no longer uses that dialog. It was fun though - an Easter egg in the time beyond Easter eggs.
I will add from my personal experience that GKE has come a long way, and it is probably the best managed K8s experience now. Still has some warts - a lot of the stuff you'd expect out of the box is still beta, or preview. And until this year, I wouldn't have used GKE for any significant installs, at least not without a really good support contract.
fwiw a password manager doesn't have to be such a single point of failure.

I use `password-store`, which means to get a password I just need access to my gpg key.

My gpg key lives on 3 yubikeys and in 1 bankvault as a paper backup.

If my main yubikey is destroyed or I somehow forget the pin to it, I just need to go to the bank vault.

If I wanted to err on the side of being more able to access it, I could leave an unencrypted copy of the gpg master key with a trusted friend.

Since there are many password managers with different models, I think it's difficult to quantify exactly the failure mode of each.

However, the reality is almost all security experts recommend password managers, and almost everyone who uses 1password for a while doesn't want to go back.. so clearly there's something to it.

The only people I see doubting are people who have uneasy feelings but haven't really written down their threat model nor consulted security professionals.
European commission asks citizens and companies what to do with DST
>Before the incident: The attacker presumably found the maintainer’s reused email and password in a third-party breach and used them to log in to the maintainer’s npm account.

Password managers and MFA, people! Please use them. There's never a reason to not use a password manager for every website, application, and service that requires credentials. And MFA isn't everywhere, but for places that support it: use it. Ideally non-phone based if that's an option, to prevent risk of phone number/voicemail-related compromises.
Agreed. I would urge caution, even if I am "pro crypto"

Only play with money you can afford to lose without even a sad face
You don't need to know a lot to change league though. Most kitchen appliances, tools are basic geometry and a bit of time. It's damning when you open them to see how there's nothing to it. It's damning to see that kids get to learn geometry in the abstract and unless they go for some kind of technical or engineering career, will never know "life critical" use of it.

Also a surprising amount of devices are overly complex because there's this historical separation between business and users (and because economic incentives are compiled into the implementation).
Why Your Static Website Needs HTTPS
When I heard about the 2018 MBP today, my initial thought was that I would consider investing the cost and time of migrating from my 2017 MBP just to have a reliable keyboard. That Apple prioritized quieting the keyboard over fixing its reliability issues seems crazy to me.
I get the point. However I also really enjoy it when a fellow developer makes the time to get their point across in a friendly, compassionate tone. I see that rants tend to be the way we phrase our complaints, perhaps because most of us feel rushed and we kid ourselves we are discussing purely technical matters? I need to keep reminding myself that there is an underlying/social purpose to my work.
Maybe not the same thing but the settings app is promoted as a faster way of doing everything compared to the control panel but I find it the opposite. The only thing is it's harder to open the control panel than it used to be
Same here, I often find myself writing a loop-and-a-half and will on occasion repeat expressions to get around extra lines (if I cared about performance, I wouldn't be writing it in Python).

I feel like a lot of the resistance is from people who think this is somehow bad style, because it's associated with a source of bugs in other languages. The same kind of people will argue endlessly against having 'goto' in a language, even when it can clearly make for cleaner code (eat it, Dijkstra!) in some cases.
I always found this odd. Maybe civilization as a group has progressed in knowledge of the universe, but the populations are in yet another form of religion. A reincarnation of plato's cave.
Does ctrl c work in a terminal window, either cmd, powershell or putty?
Nevis: how the world’s most secretive offshore haven refuses to clean up
The future we were promised when we bought into what lisp would/could be, with all the practicality we see now in python. Norvig wrote about it more here: http://www.norvig.com/python-lisp.html It was from that article when I gave python a serious try and it stuck with me as a go to language for all the small things one does often, but also exploratory programming as well (with iPython/jupyter).
I admittedly live in an AWS bubble when it comes to infrastructure and netops. I’m mostly a developer whose only expertise at modern netops and infrastructure is AWS. I could see where TF would be a better solution for infrastructure that spans providers.

As far as what CF can’t do with respect to AWS, most if not all of the missing pieces can be remedied with custom lambda backed resources and/or Python scripting with troposphere.
Only the malls around rich people are doing okay. You can spot these by searching for Apple and Nordstrom’s, also where you will find the wealthier side of any urban area.
> Through experimentation they have arrived at these algorithms to maximize the probability that you find what YOU were looking for.

Depending on the query, 60-80% of Google Image results point to Pinterest, which no one is looking for and is not the original source of anything that shows up.

For regular searches, in the past few years there has been a continuous and significant decline in both the accuracy of results and the ability to communicate to Google what you're looking for in the first place.

Quoted phrases are frequently reinterpreted, destroying the intent.

On a query with 3 words, Google will frequently ignore one of them entirely, based on an opaque and constantly changing set of rules, and will return results for the other 2 words that have no relevance whatsoever.

Perhaps most frustrating is the constant irritating battle to trick Google's many different query "filters", not all of which are NSFW "safe search" filters, to avoid the very strange situations where a query with a small number of common english words somehow returned no results whatsoever, despite Google's clear willingness to throw away even the most important words in a query in order to return something.
Disagree. It killed it.
On a related note - I've started having gitattributes files to * text=auto eol=lf, ie just LF everywhere. Works fine for us

Is there any possible reason in 2018 to keep CRLFs? Even bat files work with LFs
"I started working at McDonald’s making the minimum wage of 85 cents an hour. I worked hard and earned a promotion to restaurant manager within just one year, then went on to hold almost every position available throughout the company, eventually rising to CEO of McDonalds USA."

Howmany people didnt make it up that far?
That's an absurd statement.

The job it replaced doesn't just go away. The people who made the machine can either sell it or lease it for a profit. That's where the job goes. To the machine-maker.
There is a "HIPPA"[0] law that is often referenced in the US when seeking medical services. Presumably it really only applies to interstate insurers, but is often believed to "protect" some information from being shared without a "patient's" consent.

[0] https://en.wikipedia.org/wiki/Health_Insurance_Portability_a...
What amazing timing! I'm expecting to receive a shiny new Dell XPS today, and switch back to Linux after ~8 years on a MacBook Pro running MacOS...
I'm upvoting you because even though you turn out to be wrong, you appear to have been sincere about it. You shouldn't be punished, even in fake internet points, for offering a hypothesis in good faith.
Middle click to paste is an unrelated thing that drives me up the wall in Linux. Many of the programs I use on a daily basis have specific actions triggered by a middle click that I use often, but if I miss my target and hit a text area instead, it injects whatever I had in my clipboard into the text, often without me realizing it until later. (In one instance, my clipboard contents made it into an email I sent out. Thankfully, it was minor enough that it just looked like a typo, but it could have been much worse.)

Unfortunately, I'm not aware of any way to turn off this behavior.
It is just selection bias. People that start and maintain OSS are on average more helpful and nice than people that don’t, hence the interaction.

A similar effect exists in relationships. If you are ‘nice’ then your potential partners include both other nice people and horrible people, because generally a horrible person will not tolerate another horrible person. Hence, you see nice people in relationships with horrible people more often than one would hope.
Slightly off topic, but this could happen in any language, not just node. I saw Maven does not check pgp signatures.

So, I just finished a Maven plugin that verifies each artifact in the build has been signed by a pinned pgp key. This would make it now difficult for an attacker to hijack another artifact's namespace.

https://exabrial.github.io/pgp-signature-check-plugin/

I tried to make the code AS straightforward as possible, using dependency injection to make testing easy. My Hope Is you start using this in your open source projects and at your job
Why doesn’t npm extremely restrict public packages?

For instance, file operations could be limited to the root of the project and not access .git; it must not spawn sub-processes and http connections are limited to non-internal IPs.

I’m aware that most of these defenses could be defeated easily by using native modules et al. — but this needs to be dealt with ASAP. There’s just too many incompetent people in control of this and it’s just a matter of time until a company will pay big for this kind of horrendous engineering mistakes.

(How about an npm module hijacking a Mesos cluster by connecting to a master and deploying a service? We built a PoC of that in a hackathon and it was pretty disturbing how well it worked: running as root on all servers!)
How does that play out today because it is very lucrative to be smart in today's world. You don't get to work at FAANG or on Wall Street by pretending to be less intelligent than you are. The same applies across many industries like Academia, Healthcare, Law etc. You may have to suppress opinions that go against the grain of the industry you are in but I don't see that as being the same.
More broadly, I think this point touches on the idea that you cannot trust code that you did not write yourself. Ken Thompson's Turing Award speech talks about this (https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...).
One person who understands and writes extremely well about this dynamic is Eliezer Yudkowsky. From the incomparable Harry potter and the Methods of Rationality: [0]

""I was going to be a hero, once," said Professor Quirrell, still looking upward. "Can you believe that, Miss Granger?"

"No."

"Thank you again, Miss Granger. It is true nonetheless... I was not naive, Miss Granger, I did not expect the power-holders to align themselves with me so quickly - not without something in it for themselves. But their power, too, was threatened; and so I was shocked how they seemed content to step back, and leave to that man all burdens of responsibility. They sneered at his performance, remarking among themselves how they would do better in his place, though they did not condescend to step forward...Perhaps, by taking on himself the curse of action, that man removed it from all others?...

"So -" Hermione's voice sounded strange in the night. "You left your friends behind where they'd be safe, and tried to attack the Dark Wizard all by yourself?"

"Why, no," said Professor Quirrell. "I stopped trying to be a hero, and went off to do something else I found more pleasant.""

This might be hard to grok without reading the preceding 83 chapters but it is the first thing that came to mind when I see how people treat open source contributors.

[0] http://www.hpmor.com/chapter/84
>"With the option to add up to 32GB of memory on the 15-inch MacBook Pro, users can run more apps simultaneously or load larger files into memory."

So the 13 inch models are stuck with 16 Gigs. Is there a technical reason why they couldn't put 32 Gigs of RAM in the 13 inch model?

I feel like the 13 inch is the workhorse for most devs and by extension a significant portion of the 13 inc MBP user base no?
Also, the paid vs. unpaid is a BS argument. Even if you were paid, it's not the complaining user who's paying you so how can they feel entitled to your time? Some people...

That said, when someone open sources something there isn an implicit "contract" between the developers and users. The users' feedback helps the developers and in return they get something valuable. It's more of a group effort rather than some one directional flow of power. I've seen projects where these relationships weren't properly managed or where one group didn't appreciate the other and the end result is always the same: dead projects.
I am excited about this update since I am stuck using notepad a lot on systems at work where I cannot install applications without a change order and getting something like notepad++ approved is basically a non-starter.
> Many of them rarely realize how crappy the selection of Netflix streaming is, as they've been brought up on a diet of crap, and are only vaguely aware that there's a whole world of fantastic movies out there beyond Hollywood blockbusters and TV shows.

I like science fiction and well done period dramas (i.e. historical fiction or alternative history). I am not really into high-brow art movies, as I don't really have the education to get them. Is there really a wide world beyond Hollywood for the type of movies I enjoy? If yes, how does one go about exploring this world?
This makes 0 sense. I must be missing a major piece of the story somewhere.

They are the last institution to continue using Electric Shock for behavior modification.

They have had at least 5 law suits in the past decade where they have to defend the practice, not to mention all the bad press. Congress almost passed a law in 2016 to stop them in particular.

What advantage are they getting that could possibly be worth all this hassle, even if they believe Electric Shock is not cruel, and is effective? It's not even like they are trying to finish a study proving its effectiveness.

Why not just discipline the Autistic children another way?
Notepad++ loads more or less instantly so there is little point to going down the scale.

The #1 useful feature is just multiple tabs. Sure, syntax highlighting is also great for reading files and simple edits, but need not be part of windows.
Being stuck in the 70's isn't that bad, many avantgarde things from that era still have to make it to mainstream adoption.
I was going to say the same thing. Free users are famously bad users in general, and open source stuff is often free too.
I thought the most important lesson here is that npm is a horrible single-point of failure with a terrible security track record and obtuse leadership, but has somehow become the backbone of an entire ecosystem within our industry.
I signed up for Robinhood earlier this year and provided all my personal info including SSN but was notified afterwards that cryptos were not available for trading in California.
I don't see the problem? Holding at an angle and using compressed air is the most sensible way to dislodge a small foreign object from under a key.
Many people use the ELK stack which is Logstash. I imagine you can swap out Fluentd for Logstash.
The only recommendation for users is "you should avoid reusing the same password across multiple different sites. A password manager like 1Password or LastPass can help with this."

Seriously? No help to tell me if I have been affected?

If someone here knows a JS linter that does not require npm/yarn, even ten times less powerful than eslint, please share. It's astonishing that linting C++ requires one file, https://github.com/google/styleguide/blob/gh-pages/cpplint/c..., but linting JS requires MBs of dependencies.
I've been running a production project in Google App Engine for three years with six figure active users and can mostly agree with this. A few comments:

1. Stackdriver gets a bad rap. Maybe there are better solutions out there, but it hasn't been our weakest link. It's gotten very expensive, though.

2. Google recently deployed a new HTTP load balancer that is way better than the old one.

3. Instance usage on app engine is a little opaque and very hard to tune. A lot of it is trial and error.

4. Cloud SQL is garbage and the author is being generous if anything. Haven't had a chance to try Spanner, but it seems a lot better. App Engine + SQL has a lot of little hidden gotchas that are impossible to debug. I'd never recommend anyone use it in production.

Google Cloud has come a LONG way, and one of the biggest reasons we continue to invest in it is they keep improving based on feedback. Their product team is very engaged. Their IAM additions, improved load balancing, and additional availability zones have been huge for us.
Intermittent keyboard problems are the early signs. But I haven’t heard of it affecting just a single key.

The trackpad and keyboard both use the ribbon cable, so when it fails completely, both the trackpad and keyboard will stop responding.. With the exception of the power button.

It’s a toss-up if it’s the same issue with only one key being unresponsive. Could just be a bad key. But I’d give it a shot since it’s only a $10 fix with a t6 screwdriver. Or if you want, mail it to me and I’ll fix it and use the laptop as a secondary computer to run my data visualization computations =D
And in Cupertino Vallco is rotting.
On a semi-related note: You know what would really get me excited? A GPU accelerated, highly optimized text editor, that could display several gigabytes of text with several thousand columns wide rows, smooth scrolling, zooming and text-highlighting. That would be a real step up from current text editors. The only thing that comes close (that I know of) is still Vim minus the smooth scrolling and zooming. Meanwhile system default text editors often crawl to a near halt when selecting several rows which are a few thousand columns wide.
I'm afraid this will be Python's demise. I've seen many non-Pythonic idioms that I question PEP's rationale at this point.
Because the costs involved are tiny compared to lost productivity based on developer salaries and, more obviously, because these same companies spend millions on coffee stations, roof decks, alcohol-focused parties, etc.

People who think cost drives open plan office choices seem to think corporate management are too stupid to ask, what is 10% of our total salary base for these workers. It makes no sense. People have been measuring productivity and morale in knowledge work for a hundred years. Of course they can directly compare cost savings on floor space with metrics correlated with productivity lost to worse workspace, and tie it to the bottom line.

The observable spending habits of companies suggest cost utterly cannot be a driving factor here.