skysight-inc/HackerNews huggingface dataset:
This is not a great analogy, because you are paying for the trash to be taken with your taxes.
HelloSign Is Hiring a Senior Salesforce Engineer (SF or Remote – USA)
Move to San Francisco, get a job with a well paying company.

Move to NYC. Become a quant that can code.

Start your own business.

Move into VP/CTO role.
I think what you're saying is true in the case of someone just throwing up some code they wrote online without any plan of supporting or developing it further.

But once you call it an open-source project, and you have docs and a roadmap and an issues page and stuff, you're making an implicit contract with people who use it that it will do a reasonable job of solving the problem it claims to solve. The user is choosing to use it over other alternatives and investing time learning and integrating it, so it doesn't seem at all unreasonable to me for them to be frustrated when they realize that due to some bug or limitation it doesn't actually solve the problem for them that it claims to.

As an analogy, if you give someone free food and it makes them sick, are they justified in getting mad at you? I think most people would say yes. IANAL but I'd imagine that if you got food poisoning from Ben & Jerry's free cone day due to negligent sanitation practices or something, you could probably sue the company just like if you had paid for it.

Or, if a member of some sort of volunteer community board is doing a bad job, people will complain about it. An open source maintainer is basically in the same position.

Of course, that's no excuse for being rude to them, but you also shouldn't be rude if you paid for something and it doesn't work. I'm not saying we shouldn't do anything to reduce hostility towards maintainers when it happens. But it's not true, in open source software or anywhere else, that just because something is free there are automatically no expectations around it.
Downvote? What is in there to downvote? I'm doubling-down.

I LOVE those things.
It generally means "ops work that is done with the best practices of dev work".

Yes, that means infrastructure as code, including code reviews, frequent deployments, etc.

No, it doesn't require that the developers working on the devops code are the same ones who work on the app code. At a small company (e.g., three devs) they will be, but at a large company, you have a dedicated "devops team" who exclusively works on infrastructure (as code).
Yes, it is free. However, there is no way to get these registry files from the API yet.
how is python like lisp?
I turned away from the mac, first because the HW, second because prop. software is creaping me out more and more. I bought a lenovo T480 (big battery, higres screen, good keyboard, only the trackpad is shitty) and I installed the shiny ubuntu 18.04 and I have to say, it's the best setup I ever used. It's super stable, with some tweeking(https://github.com/erpalma/lenovo-throttling-fix) it's crazy fast, 7h+ battery life when doing web development. Even the LG UltraFine works great under linux. I never regretted it.
Open ST3.

Launch a terminal.

Start Emacs.

M-x term

Run vim.
You're probably right re load balancing, data pipelines and some services, but i think security is important regardless of scale, esp if it's an enterprise app.

Even simpler concepts like structuring and deployment of larger apps, database migration, creating dev, staging and production environments, test development etc would be really useful. These things are important even at low scale, and generally absent from tutorials. Learning this on your own without mentors or CS background creates lots of issues
If machine is capable of doing the same job as human, then machine should be paid salary that could be then used for healthcare, electricity or education.
Ask HN: What's the most unique web app architecture you've seen in the wild?
Doctors have stories about cures they didn't think would work that did. Writers experiment with the narrative craft. Artists and architects have tons of examples of creative people taking unique approaches to difficult problems.

I'd like to hear about what systems you've built yourself, seen, or heard about that solved an important problem in a simple, unique, or elegant way that took you a long while to arrive at or understand.
VSCode is an electron app and it's pretty amazing.
Last time (perhaps the previous football World Cup?) my manager simply said I could go home once the game started, as no-one else was going to do any work so that was fair.
I thought the same thing until I actually used it. Turned out to not be that big of a deal.
same here, even with my light emacs running I still have the reflex to Win+R notepad RET and paste..

then I run M-x doctor to talk about it because I'm conflicted
There is also the relatively young https://github.com/randy3k/Terminus

Unlike TerminalView it also supports Windows and its various shells (cmd.exe, powershell.exe, wsl.exe).
Yup. I don't like the old hospital because it seems to be made of ornament, which is too much. Some of the modern buildings look nice.

Also, the author seems to be saying that Walter Gropius only created jarring monsters, which isn't true. I'm not sure about him personally, but the Bauhaus, the architecture school he co-founded, produced plenty of pleasant-looking though minimally ornamented buildings. The original Bauhaus stuff looks so much better than the bland stuff that hack imitators created later.
28 if you want the exact number. :) Guido started developing Python in December 1989 and went public with it on Usenet in February 1991 (Unicode 1.0 was standardized in October later that year to give perspective of how far back that was in the tech world).
Apple says new MacBook Pro keyboard won't fix sticky key issue
My bad, I forgot to specify... Yes, Restricted Stock Units. A new grant usually vests over 4 years. It starts with your one year anniversary when 25% of your grant vest. Then after it's every 6 months you get 12.5%. Every year they may give you another round of RSU's (on a new 4 year vesting plan)
That’s just to deter people from stealing. In public spaces and semi-public spaces consent does not need to be given. A store is considered a semi-public space. There is no expectation of privacy in a store. Anyone can take pictures of you and record you if they want and you legally cannot do anything about it. You do not have to leave the store if you do not give consent unless you don’t want to be recorded. You’re still going to be recorded in the parking lot.
> You can now even search for words on Bing through Notepad by simply right clicking on them to get a new option.

That's great I suppose, for people who will use it. My bet is that this is the biggest driver of the update to notepad.
Same here! I had very faint tinnitus (from headphones in the office all day), but after we moved offices (open office space) and I started wearing earplugs UNDER my hearing protection earmuffs, my tinnitus started going wild.

I think it's because when you double-stuff like I did, the only thing you can hear at that point is the ringing in your ears (and high heels on concrete floors). My brain seemed to lock in on the ringing at that point.
Sometimes it's a mistake to think about how these companies could pivot to adapt to new technology. A major feature of capitalism is that companies are (relatively) unimportant and it's the market and society that really matter. Without companies collapsing, it can be really difficult to recycle the manpower and capital invested in obsolete business models.

Blockbuster's organizational, legal and physical infrastructure was wholly devoted to video rental via physical stores. Decommissioning those organizational components and creating the systems necessary to spin up and run an online video portal would have required changes in the company so massive that it would effectively be a different company.

Even if Blockbuster had bought Netflix early on, Blockbuster would have been left running an organization they did not understand in a market that only vaguely resembled something it was familiar with. Even worse, and totally contrary to modern management theory, management skills alone are necessary but not sufficient to operate a growing and dynamic company on the forefront of technology. The entire management organization of Blockbuster would have been totally unequal to the task of operating Netflix competently.
It seems so bizarre - a rental company would stream video, through an energy company's fiber optic cables. Didn't this seem incongruous to anyone at the time?

https://youtu.be/5sMXR7rK40U?t=6m8s
It does feel weird paying more for RAM than you do for your CPU.
I used f.lux for 2-3 years. Then I stopped, and I haven't used f.lux for 2 years now.

The problem with f.lux is that it makes reading on the computer at night TOO comfortable. I was consistently staying up way past my bed time, and suffering for it.

Removing f.lux made it easier to go to sleep earlier. Sometimes comfort isn't worth it. I prefer getting my sleep.
It's definitely a memory bandwidth issue, since ThreadRipper 1 has two dies, each of which have direct access to two DIMMs. So if you only have two DIMMs total, one die has to go through InfinityFabric to the other for all memory accesses.
Not having done an npm install today at all is why I'm confident.

EDIT: For those who have done an npm install today, I think those commands are still useful and catch the most probable way one could be affected.
I'm a former OpenShift (Red Hat's distribution of Kubernetes) consultant and currently I work at Red Hat in a different position and I have to disagree on the "won't work at all without an army of consultants".

While it's true that some of our customers have an army of consultants, the vast majority of our customers don't use consulting at all or that only use it very infrequently. If you don't want a lot of customization, have the right amount of people and the right people and realistic expectations you don't need consulting at all.

When people want to get a highly customized experience (often, for the wrong reasons), or want to get in production after 2 months, when their people have no experience in kubernetes and didn't do adequate testing (load, fault-tolerance, etc) it will give lot of problems. But that's the case for everything, not only for kubernetes

In my opinion (mine, not Red Hat's) getting someone to deploy it with you the first time, showing how it's done and why things are done, and after that and do a workshop explaining the basic concepts has great value, saves a lot of time and isn't expensive.
Since you were already at Amazon, I assume you compared Firebase to AWS Lambda? Could you tell us why did you end up prefering Firebase?
DL Optimization – How to choose an activation function for your network
I use Cloud9 for 100% of my dev needs. It made switching to a Surface Book pretty easy.
Become a consultant.
https://news.ycombinator.com/item?id=17482666
Show HN: Help fight biased reviews on Amazon with Reviews Extension
When shopping for products on Amazon, many consumers are overwhelmed by the large selection of what used to be a simple product that solved a simple problem. Ever find yourself looking for tags such as “Amazon’s Choice”, “Best Seller”, most reviews, highest reviews, or a combination of them all? Guilty! I typically lean towards most reviewed because when there’s 30K 4-star reviews, that’s a lot of satisfied customers and that’s not even counting the majority of those who don’t often post reviews. It’ll soon be a snowball effect as more consumers by the same product and the reviews continue to soar through the sky. Some may wonder, just how did these products gain so many reviews while the others are still struggling to break 1K reviews. The answer is in the seller’s marketing strategy, while Amazon turns a blind eye. It is common practice for sellers to reimburse buyers for leaving a good feedback on their products. Many may ask what’s wrong with this if the product is as good as expected. Nothing. But what if it’s not? Let’s say the next 500 orders left customers unsatisfied and they left 1-star reviews. Those reviews would barely alter the 4-star reviews as 500 is only a fraction of the 30K existing reviews. Hence, more consumers would buy the product expecting it to be great but soon to be disappointed.

Reviews Extension is simple yet effective. In the click of a button, it will open a popup window
with reviews of the same product left on third party retailers such as Walmart. These reviews are often unbiased and true to the product as buyers receive no incentives to give good feedback. Provided with a solution to the broken reviews system of Amazon, buyers no longer have to shop in the dark.

There are millions of shoppers that go Amazon for their shopping needs. Reviews Extension is up and running but it needs your help to scale and help more people. To contribute to the project, please visit my repository (https://github.com/scwong93/reviews-ext).
There will be explanation for that. Something like that managers are afraid people would slack, or they feel they would be redundant, because people wouldn't need their supervising.
So, not knowing what BDFL was, does wikpedia https://en.wikipedia.org/wiki/Benevolent_dictator_for_life now need to get updated?
ok. Bought :)
"The market" took over after a long period of "design by committee" that had "strong design principles"[1] resulting in something that was both inadequate for what people wanted to do and didn't evolve at a promising pace (likely because of said principles).

When the market did take over, the problem was that those poor foundations weren't thrown out completely. You can only do so much by strapping turbines on a camel (no offense to camels). At least we can actually write (mediocre) applications with HTML/CSS/JS now.

The other part of the mess is caused by the ever-growing amount of trend-hopping junior developers
that want to try out new things - and their superiors letting them do it. If the foundation wasn't so bad, there would be less incentive to try and re-invent anything. Other platforms are fully market-driven, they didn't produce such a mess, because the market rewards stability (hence the low initial adoption rates of Python 3).

[1] https://www.w3.org/People/Bos/CSS-variables
I really like the fact that 1x micro VPS is included in their "Always free" allowance. A free *nix VPS in the cloud is a pretty awesome deal no matter how you look at it.

I'm currently hosting websites with it & despite being underpowered it seems to be hanging on thanks to cloudflare caching.
I made an animated gif in the spirit of your joke a while ago: https://atom.io/packages/script-runner
TV cameras originally produced color by taking black-and-white video through 3 different filters, transmitting these as a bundle, and outputting these to the electron scanner. The colors didn't get mixed until after they hit the TV screen, as the photons were traveling to our eyes.
Fire and Ice
It happens all the time with large companies.

Motorola is another, mostly forgotten example. They invented digital radios for cell phones, but they were so entrenched in analog radios at the time that they gave the technology away to a small company called Nokia. A few years later, they collaborated with Apple on an iTunes equipped cell phone, and shared their own internal designs of a full screen phone.

I think this phenomenon is one of the few ways a big company can die.
Yeah, I thought it would be bad, but it is not.

The key actually extends to the edge of the touchbar even though the graphic for it does not.
Relegated to Tools → All results → Verbatim.
'A labor of love' keeps NCAA Football video game alive
Other lessons could be taken from this. For example:

When you build a package management system that has user-configurable exec scripts, run them in a secure sandbox/container by default. If you provide an override, require a user to approve it and show them the command that will be run on their system.

If npm package.json scripts only ran in a lightweight linux container with no access to the filesystem, the mere act of doing an `npm install` could not pwn your box.

Another possible takeaway would be that everyone should use Qubes, or some similar project, such that the machine where they use npm doesn't contain any important credentials, and then all publishing is done in CI or in another qubes vm dedicated to the purpose which publishes a shrinkwrapped artifact rather than installing locally.
Of course. That's why Windows 10 ships with a voice assistant and ads in the start menu, but no decent text editor. /s
Isn't a joke "alive" until the explanation? So those that 'got' the joke would've enjoyed the joke, before moving onto read the next line. So reading the explanation of the joke wouldn't interfere with their enjoyment of the joke since they already enjoyed it prior to reading the explanation.
Regarding password managers, I feel uncomfortable, especially when it comes to high-value targets like developers of important software.

If you're a potential target for malicious actors, is it a good idea to have a single point of failure for your logins? I certainly see the point about the realities of password reuse, but can we quantify the risks of one approach vs the other somehow?
I think theres absolutely zero implicit contract that implies that open source software maintainers owe ANYone ANYthing at ANYtime.

That's the reason it's open source because everyone can fix it, all an open source maintainer owes you is a P.R. review.

Therefore if an open source project maintainer is giving you their time and patience then you better be extra polite and grateful to them.

If Ben and Jerrys left a bunch of ice cream on the sidewalk and a bunch of people ate it and got sick then there would be zero liability on Ben and Jerrys.
This create a case for pay for software believing a guarantee is granted just for paying
At the demarcation points is where power is measured. If you have losses you can tell which side they are on, and then that side can decide whether they are worth investigating or not.
They actively reject ideas like package signing.

When I was Django's release manager, I started our tradition of ensuring that every single package we put on PyPI was also accompanied by us publishing signed checksums of the file.

So. Django signs its packages. Now, what good does that do you? How do you know my key (or, these days, Tim's or Carlton's keys, since they roll the releases) is authorized to release Django?

"Just support package signing" is one of those things that sounds super easy. And in fact, PyPI technically supports it -- you can upload a detached signature along with your package!

But you don't "just" support signing. Signatures, absent a gigantic infrastructure of key management, indicating whose keys are trusted for what purposes and by whom, are basically useless. So when someone says "just support package signing", they don't really mean "just let us upload signatures!" What they really mean is "develop and maintain that web-of-trust infrastructure for me", but they don't like to acknowledge that's what the request really is.

Why are there no incidents where installing an apt-get package stole credentials

Because Debian grants package-releasing privileges only to a tiny group of people who are vetted before they get to release. Systems like npm and PyPI, by design, let anyone who wants to sign up and start publishing packages. That's a deliberate tradeoff, and one that comes with both risk (you'll get some bad actors) and reward (you'll get a larger and richer ecosystem of things being published).

I eagerly await your next set of soundbites that have come up, and been rebutted, in every single discussion of npm and PyPI that's come up on HN in the past five years.
Use the mouse to select and middle click to paste. Right-click copy if you want the primary clipboard.
Customers who liked this Recommendation Engine may also like its Dequantization
I would say a part of it is clickbait kind of thing. In the abstract they say that they have investigated currently existing advanced civilization that have made significant advances in harnessing the energy from stars in their Local Group. When you read their entire paper, you realize they have only made strong guesses.

Rest of the paper is good enough.
- OmniGraffle

- Magnet (OS X missing window manager)

- IA Writer

- iTerm2 with ZSH

- Atom

- SletchApp
YouTube's system doesn't even require a DMCA complaint AFAICT, it just requires you to tell YouTube that you own the copyright.
Or Atom
Former IceCube winterover here. Things at Pole often don't go smoothly, and detector uptime is very valuable considering the cost of building and operating it.

Video chat isn't a realistic option - not the greatest connectivity down there...
I think Linus's main point is that if he seems happy about something he's actually uncomfortable with, developers can sink a lot of work into something he ultimately doesn't like and doesn't want in the kernel. So the aggressive approach is to stave off that outcome, which is fair. I suspect he also enjoys it - which is also fair enough.

A lot of people actively enjoy and seek conflict.
These things were taught at my university (Information Systems major), but the info was pretty out-of-date and not as practical as this article.
It did, but it does not make his argument less valid.
No, your using a language, and if you know the language enough you begin using a tool
It kinda sucks that NPM auth tokens never expire
They did. It is called vscode.
Notepad++ UI is really far from what you would expect for a Windows built in application. It would basically need to be rewritten. Then there's the professional translation, etc, etc.

I think the ship on built in apps has sailed. Everybody expects to open a web browser or app store to get anything of any use now. Heck, they even stuck ads in Minesweeper.

It made more sense when downloading software was slow or you might not even have an internet connection. I'm sure many Mac owners enjoyed playing Chess before going out and buying some software.
>Your broader point is correct but I think you're mischaracterizing Devops

You are right. What I should have said is that using DevOps as an excuse to make application developers do complex infrastructure design, automation and maintainance as a side-job is an unsustainable practice.
He fought for it because he thought it was the right call. The role of a BDFL is to make those kinds of calls for the benefit of the language and community. It's really tough to fight the "tyranny of the majority" and go with what you think is right versus what everyone is screaming and yelling at you about.
Hi there! We use Plaid for instant bank account verification and for balance information (to ensure we don't accidentally trigger an overdraft). We don't utilize the Income / Assets / Employment APIs. We don't use them for ACH - We build our own NACHA files in house.

Plaid itself takes user privacy really seriously (part of the reason why we're working with them). They don't resell any of your sensitive data.

A secondary checking account is A-Ok with us. Many of our users do this. The only thing I would say is to be careful to use a bank that doesn't assess overdraft fees. We also are allowing micro-deposits for our more security conscious users on a limited basis (drop me a line bo@privacy.com and I'll set you up). Lastly, card top ups is something we're also looking hard at.

As you can tell, unfortunately there isn't a perfect solution yet - we're trying to be a part of that solution.
>It's amazing he managed to not explode at somebody.

Like a certain other BDFL occasionally does?
Incident report: npm, Inc. operations incident of July 12, 2018