skysight-inc/HackerNews huggingface dataset:
Providing one helicopter per student would be cost-ineffective for flight schools.

Providing one office per knowledge worker would be cost-effective for companies.

Flight schools have a hard time surviving if they make grossly wasteful or negligent expenditures for the sake of politics and optics, because they are low-capitalized businesses with often much lower revenue per employee and less growth opportunity than highly capitalized tech companies.

A high capitalized tech company, on the other hand, can piss away money on dipshit open floor plan offices, roof decks, $500,000 Christmas parties, etc., and the executive committee doesn’t care. They have very little incentive to optimize that spending and often make spending choices based on the capricious and whimsical desires of an adult-baby CEO who is more like Veruca Salt than a competent business person.
The repository root has a file named LICENSE containing the MIT license. But the file GateOne/terminal.py says __license__ = "AGPLv3 or Proprietary (see LICENSE.txt)"
and doesn't include LICENSE.txt. I wonder what went wrong?
Dry air also increases the probability of static damage. They probably can't use outside air exchange to cool the server room.

I imagine just circulating your nice toasty air into a larger area filled with moist humans who want to be warmer would work, but it depends on your building layout.
Are those criticisms in response to claims of his otherwise? Does he blame current problems programmers have on not listening to him more? Or make some other critical claims to trigger what kind of sound like ad hominem* responses?

I will google these questions also, but am always interested the HN crowd's take. Like the original question I didn't know he'd ruffled any feathers.

Edit: top hit was Alan Kay himself addressing criticism on a Quora question: https://www.quora.com/Has-anyone-criticized-Alan-Kay, but on further read it obliquely addresses criticisms other than his role in developing OOP.
I am using a 9570 also (same specs as yours) but have an annoying audio issue with crackling/static at random times. Also some coil whine. tbh I don't expect this on a £2000+ machine. I have already had one replacement and I have ordered a new MBP as I don't think I can deal with another replacement from Dell.

Have you had any issues with your 9570?
You may end up being right, but here are my premises:

1. People are dying to stop writing JS. The evidence is CoffeeScript, TypeScript, and the million other compile-to-JS options.

2. Wasm is in every major browser, and direct DOM access is in the roadmap.

3. There are lots of people who don't want the context switching that's been required in web frontend programming. They want to use a single language on the front and back ends. If wasm can access the DOM, this becomes possible with any language that compiles to wasm (Rust, .NET family, probably others).
A bit tangentially related, but on macOS people might be interested to learn that TextEdit [0] is open source [1]. It'd be interesting to see Microsoft open sourcing a bunch of their core applications.

[0] https://en.wikipedia.org/wiki/TextEdit

[1] https://developer.apple.com/library/archive/samplecode/TextE...
This is, by the way, a problem I see with a lot of public policy - in a market system, what's good for companies is not necessarily what's good for the system.

Steve Eisman puts this well in [1] when talking about why he's investing in bank stocks even though he thinks prospective rollbacks in Dodd-Frank reforms are a bad idea: "There's two issues. There's what I think about the financial system and what I think about financial stocks, and the two don't necessarily correlate."

[1] https://youtu.be/NJodqhzqPKQ?t=4m10s
Can't stress enough how great Compute is compared to EC2. A lot of the (enterprise) companies I work with are weary of going all-in on a particular cloud and prefer to hand-roll open source solutions instead of consuming cloudy services; the most they'll use is VMs, basic networking and storage (although GKE seems quite popular as well nowadays). GCP nails this use case IMO. It's fast to provision, reliable, rarely if ever fails during setup, and you don't need a separate start-up company to predict your costs. It's very much quality over quantity though, so whilst this is great and manages to capture a particular market I do think they need put out way more (perhaps lesser quality) stuff to stay competitive with AWS and to a lesser extent Azure.
Great advice. I tell people that using a password manager is almost always better than not using one. Pick one that works for you and your devices and just use it.
You'll have a very hard time selling early-stage software. People tend to buy revenue streams and customer relationships, not web software.

Specifically, there are lots of companies selling customizable Uber clones right now.
The Future Relationship Between the United Kingdom and the European Union
I used to be one of the biggest HN proponents of dunking on Node. I would give it a thrashing second only to the windmill dunks I would line up on Go.

These days, with ES6, TypeScript, and React...it's actually all pretty nice.

But NPM is still and forever a mess that just plain didn't learn from its predecessors--and my only guess as to the cavalier treatment of security issues is that the NPM crew's a bunch of premillenial dispensationalists banking on getting raptured (or bought, I guess, but that's way less fun) before the chickens come home to roost, 'cause just about anything else seems implausible.

I am thinking about getting in on Deno only and strictly because maybe that can have a package management solution that is not held captive by an irresponsible venture-backed entity. It's not like anyone's breaking NPM's grip anytime soon. (Even if you tried, their API is so awful as to be functionally incompatible unless you literally just copy their internal structure, so...yeah. Great. Hooray.)
If you know Ansible/Puppet/Chef K8s platform doesn't require a complicated mess of scripts to manage.

Sincerly,

Platform Engineer former DevOps guy, former SysEngineer, former SysAdmin for the past 24 years.
I am in the exact same boat. I am still on an older MacBook Air because I need those shortcuts for visibility.
Why was this flagged? Men using violence to enforce a preferred policy is exactly authoritarian. A simple factual description is in no way pejorative.
Yeah I am thinking more something like linting+ for packages. And for published code, not code from the git repo.

% analyze-some-npm-package some-package@2.1.1
→ some-package/foo.js contains a syntax error
→ some-package/bar.js calls eval() on line blah blah
→ sub-dependency@2.3.4 is only 2 hours old

...that sort of thing. I suppose it would be a pretty big undertaking.
>Malls in general are hurting badly.

I guess I'm getting old, because I've been hearing that malls are dying for at least the last 20 years. The suit is back?
Well, churn is just capitalism at work.
The only stock you gain for loyalty is the laughing-stock, of everyone else who gets rewarded for double-jumping every ship.

This is the world they wanted, when they dissolved unions and other pillars of stability, one mans grape-vine over "Unreliable mercenaries" is another mans freedom of choice.

Here's to Sienna and Florence, their high towers may stand a thousand year or crumble under the siege tomorrow, no-one cares only the chests in the deep cellars are whats important.

All those walls build to create synthetic loyalty- be it out of fear of being law suited for knowledge transfer, or cartels to avoid the rising prices of mercenary's - if history tells us one thing - in the end the war always wins.

https://en.wikipedia.org/wiki/Italian_Wars

"Wes Brot ich ess, des Lied ich sing,
wes Gold ich trag, des Tod ich bring."
Do you think the ESLint maintainer does not visit HN?
Nobody invests, specifically in these coins. Everyone speculates, even in bonds :)
Do most non-institutional/non-professional traders even know how to price options other than some gut feel? Are they familiar with Black-Sholes and the Greeks? From my personal experience most of them don't. Plus to properly model these things requires quite a bit of research and calculations. At the hedge fund where I worked, there were well over 600 top of the line Xeon servers running to constantly pull in data and crunch the numbers. This was in the early 2000s. Things are probably even more lopsided now. Trading and finance are professions in the same sense software engineering is (there's quite a bit of overlap in skills too). Unless you're a professional who has the time and resources to do it, you're at a severe disadvantage and are going to lose in the long run.
No Paper Is That Good
The production databases on the project I build and support around are around 100GB in size - tiny. But if they didn't work correctly - ambulances wouldn't arrive at the correct location on time, nor fire engines nor emergency services workers.

Covering an area of 1.25 million square kilometres, supporting 40,000 first responders helping to protect 8 million people.

Of course the databases are not the only important part of an emergency services network such as ours, but they are a critical component.

I would rather work on a project like this any day than working to prop up some faceless advertising/data collection behemoth such as Facebook or Google.
Local control of communities and migration to an amenable community for your desires instead of trying to force your preferences on others with the barrel of a gun.
Agreed, most of this is in the "how you build your apps."

Setting up all of the special networking tricks to get to the bloody JVM in a container can be annoying. Especially because I guarantee those weren't setup until they were needed.

But yeah, most of my complaint is with folks that dropped the old way of making applications because they wanted to use the new tooling. Completely missing all of the "hidden" use cases the existing applications were made with.
Guido van Rossum Quits as Python Benevolent Dictator for Life
Cloud SQL itself is fine...it's just hosted SQL. That said, there is a lot of google-bespoke code for interfacing various parts of their cloud with it. Cloud SQL Proxy has a lot of gotchas and hard to debug. For example, the per-instance connection limit between app engine and cloudsql is 5, and it's impossible to know how you're bumping against that. Tuning is a frustrating process, and google support hasn't been too helpful.
there are heaps of samples on that page.
Real time systems can have different scheduling metric based on utilization and/or deadlines.
Show HN: Fabricator – API clients in just a few lines of code
You should try switching to decaf.

And also disabling Face/TouchID and instead using a 6 digit PIN which has been available as an option since the beginning. For the rest of the convenience of FaceID outweighs the minimal risk of a security compromise.
The 'sample' thing is a result of the era, where people wanted to streamline language diffusion. I think it became a bit too much of a reflex for people to expect the same first piece of information about a language.

I too need more than a sample and prefer a larger explanation.
They are probably wasting more time being on hold and explaining the problems to someone else. Also problems repeat, so if you know how to solve it yourself you save time.
I have been using Notepad 3 for a while, and it works great in the meantime.
Notepad++ is great for handling config files and other miscellaneous files. I seldom use it to write code other than one-off Python scripts - that's VSCode's job. But it's pretty great for inspecting and making light edits. It also has lightweight capabilities for regex search/replace, diffing, and other batch capabilities. And multiple tabs are great.

If you map Notepad, Vim, Emacs, and heavyweight IDE's on a spectrum, I use Notepad++ as a replacement for Notepad and the simpler half of Vim/Emacs, and I use VSCode for the heavier half of Vim/Emacs and typical web dev, and I use heavyweight IDE's for heavyweight dev work (C#/Java/C++ mostly).

> Who knows how you explain to your grandma over the phone how to add some IP address to her hosts file so she can see your development site.

These days with how easy it is to load a container into a publicly accessible site, I feel like that's a solved problem in most cases?
Said it once before: do not link your bank account on RH with Plaid (i.e. bank login). Plaid is the API they use that includes access to your account balance and entire transaction history! (https://plaid.com/products/transactions/)

RH Privacy Policy: https://d2ue93q3u507c2.cloudfront.net/assets/robinhood/legal...
> if you give someone free food and it makes them sick, are they justified in getting mad at you? I think most people would say yes.

It's is more like people having an allergic reaction to otherwise perfectly safe and free food and complaining that you didn't take their allergy into account. And that you should go buy them some more food but made without the offending ingredient and with the sauce on the side.
You can see a list of all npm packages uploaded between the time that the first compromised eslint package was uploaded and the token invalidation time here:

https://gist.github.com/thenewwazoo/0306aa06aafe7807497ed1db...
> Yes, but a committee (or a community if that term has too many bad connotations) can at least argue about the design principles and on occasion decide to change them using a well-defined process (e.g. rough consensus or voting).

The underlying assumption here must be that this somehow leads to better results overall, but where's the evidence for that? "Design by committee" has a negative connotation for a reason.

> The original plan of the W3C TAG was to pull the foundations and make a fresh start with XHTML2. The browser vendors objected to that and chose to instead evolve the original HTML into what we have today.

That's because "the market" doesn't want things to break. Like I said, it should've been thrown out, but for obvious reasons it wasn't. The point is, you can't blame "the market" for having created the mess in the first place.

> But that's the point. Those trend-hopping junior developers and their bosses are the market...

They are a force within that market and it just so happens that so many new people come into the industry because "web stuff" is needed now, but it won't be growing like that forever. These young programmers will grow old and tired (and so will their bosses) and at that point conservatism will settle in, like it has in many other areas as well. It's a market fluctuation.

> The market apparently didn't bother much that HTML is now a "living standard", browser release cycles are measured in weeks and generally a software is considered dead if it doesn't receive any more updates.

The pace at which new browser features are adopted is actually rather slow, but more importantly, old stuff usually doesn't break. For example, jQuery might be outdated from a developer perspective, but it still powers a lot of stuff.
Blockbuster never "censored" or "cut" videos as you said. Blockbuster chose not to carry NC-17 or x-rated movies. There are alternate cuts of just about all movies and TV shows for different venues. I see people complain about Netflix having a different version than the one they remember. Some SNL episodes on Netflix run only about 30 minutes. It's not Netflix or Blockbuster doing any editing, they just buy what's available, probably the cheapest version or they take what they're given by default.

Outside of their choice not to carry "adult" programming the casual censorship you're accusing Blockbuster of doesn't exist.
Brings to mind a recent quote that goes something like "Many of our brightest scientists are trying to figure out how to get you to buy one more thing or stay on a website a few seconds longer, instead of spending their time and genius tackling pressing issues desperate for more attention."
That's assuming dosage has a linear relationship with instances of cancer. Scary regardless, though.
How does Ali G keep conning famous guests? (2004)
This implicit contract idea is bunk and can’t be proved by analogies.
I'm not seeing that and I'm pretty sure we won't. it's extremely hard to get new features in the core of kubernetes and in fact it's moving to a micro services architecture.

Neither helm or istio are part of the core.
Interesting. One thing they leave implicit is the amount of work that parsing requires.

The result is that you can parse in time O(log n) if you use O(n) processors, so parsing requires O(nlogn) work. (This is probably to be expected.) I think this means that, if you have o(n) strings to parse, you're better off with the good old DFA solution which uses O(n) work and parsing the different strings in parallel.
Ok, then why I do only run into this issue on hardware running OS X? This is across machines (I worked at Apple btw, and had to dogfood Mavericks at the time) and across time. Same problem, it was never fixed.

I run Chrome and Slack on Windows and I never have had memory issues. Using Occam’s Razor, it has to be an issue with memory management at the OS level. I’ve also run Chrome and Slack on Linux - 1/10th of the memory footprint. I will write a blogpost in the future about it.
Motor sequence learning
And we apologized, paid money, and took responsibility.
kb? Are people really abbreviating the word keyboard with "kb" now?
I am very surprised they stopped at just grabbing your .npmrc. They could have grabbed basically anything they want like ~/.aws/credentials, your whole .bashrc (which often contains a whole slew of API keys and access tokens), and even your whole ~/.ssh
In case anyone is wondering about why this project puts so much importance on things being inlineable, GPUs often don't support function calls or have an extremely shallow return stack.

In this way it reminds me of http://futhark-lang.org/ somewhat, though Futhark is explicitly targeted at producing extremely efficient GPU code.
* dream of an editor w/ the speed & implementation quality of Sublime, with the flexability of emacs, that'll still run in a terminal. And a pony. I want that too.)*

And configurable in language that can also be used outside the editor (unlike vimscript, elisp), it could be js, python, scheme, lua, I don't care ;)

JS or Python being the most appropriates IMO.
ieee link includes an interstitial and then fails to load the article for me, probably my ad blocker. Alternate reporting:

https://www.npr.org/2018/07/12/628142995/a-4-billion-light-y...
Can anyone recommend an introduction to web architecture in the more general and less complex sense? I would like to learn about how the browser interacts with the server (I don't care about load balancing or caching for now), how JS interacts with HTML and CSS, how API's work?

I know a common architecture is JS in the browser making requests to the server and receives JSON and then renders it somehow. Sometime the server renders stuff itself and sends it to the browser, right?

And then there's possibly a database attached to the server.

How does all that work?
can't nodejs run default as user "node-<project-name>-<username>"? ie. run the process as "node-react-whatcanthisbee"?

(or provide option to do so using "isolated-node" versions/flags/etc)

that way, a lot of malicious stuff can be blocked with unix/linux basic permissions

(though spectre/etc stuff will be much harder to catch...)
I was working on a PR for a Node project when I read about this. My changes added some new dependencies and I wanted to make sure I hadn't pulled in any packages that were updated after this incident began (since the authors of those packages might have had their credentials compromised and used to push malicious updates to their packages).

I wrote a script to extract all of my changed dependencies from package-lock.json and retrieve the publication date of the resolved version from registry.npmjs.org. It's hacky but here's the steps:

First run this pipeline. You can change the first two lines if you're interested in the whole package-lock.json; I was just interested in my changes.

git diff master -- package-lock.json \
| grep '+\s*"resolved":' \
| awk '$2 == "\"resolved\":" {print $3}' \
| cut -d '"' -f2 \
| perl -pe "s/\/-\/(?:\\S+-)((?:[0-9]+)(?:\\.[0-9]+)+\\S+)\\.tgz/ \1/" \
> dep-urls-and-versions.txt

You now have a file which contains on each line a URL, then a space, then a version string. I ran this python script on the file.

import requests

with open("dep-urls-and-versions.txt", "r") as f:
for line in f.readlines():
url, version = line.strip().split(" ")
res = requests.get(url)
body = res.json()
print(body["time"][version], body["name"])

Run it as `python script.py | sort` and you'll get the most recently published packages in your package-lock.json. Just check that the last (bottom-most) timestamp is older than 2018-07-12 10:25 UTC when the first compromised package was published.

Hope that helps someone.
Really? I have used sublime for years for log files, Atom and other web based editors would just crash. Hard to imagine that JS would be better at handling viewing large text than C++ (which I think the core of Sublime is written in)

Edit: Benchmarks appear to back this up: https://github.com/jhallen/joes-sandbox/tree/master/editor-p...
I'm sure this has been said before but this reminds me of https://www.youtube.com/watch?v=CJQU22Ttpwc
IANAL but here are a few things to consider.

Every person has a duty of care to minimize the possibility of harm to others. In some professions the standard is higher and may be codified into statute and/or bylaws of their professional association e.g. medical and legal professions. What this means is that, for example, in certain jurisdictions a doctor is bound by his Hippocratic oath and has to render medical assistance to a person who is in urgent need of it, as quickly as practicable. Ignoring this exposes him to liability. So in the particular case of software, a malware author could in theory be found liable by posting his proof of concept in the public domain.

Secondly, in certain jurisdictions, there is an implied warranty of merchantability and also of fitness for a particular purpose. In the US this is under the Uniform Commercial Code.
Enron didn't have any last mile broadband capability. How did this deal get done?
Which ones have you read? I liked Eknath Easwaran's translation.
Foundations Machine Learning
There's a good article here:
https://arstechnica.com/features/2012/04/coolest-jobs-in-tec... and a video here http://www.datacenterknowledge.com/archives/2010/07/23/the-d...
but you're right, it doesn't mention the reason I give (and says now they do import some external cold air).
The trick is not to max out in RAM, but to use all the channels. So for a processor with 4 RAM channels, instead of a single 32GiB DIMM, you should use four identical 8GiB DIMMs.
Nah, don't let that discourage you. You can probably start with a Postgres backend that will serve as your db, full text search, data warehouse, and even job queue. Load balancers in front of your stack are available from aws, etc. and are easy to set up. The rest, like a caching redis server, actual job queue, etc. you can add as you go if it becomes needed. Some language stacks let you run async operations and queues in the server itself which may be enough. There is no need for containers or complicated deployment processes. If you're on the JVM, for example, just create an uberjar and run that. Focus on things that actually bring value to your business and use the simplest, most minimal solution everywhere else. Don't give up on your idea because you feel overwhelmed. Good luck.
A pity some of our new billionaires don't make a hobby out of funding genuine science research. Rather than, say, adventures in space tourism.
Kicking Off Collaborative Fund IV – What We’re Looking For
Why Do People Use the Wrong Email?
Do you know Kakoune?
I've used a month and like it. Fast, lean, work with other unix tools well, extend by sh,
we don't need to victim blame here. we can both practice security best practices and also try to find and prosecute those responsible.