skysight-inc/HackerNews huggingface dataset:
This itself is a good point: contrary to the assumptions a lot of us made in the 90s, cyberspace really isn't an entirely new plane of existence, and there's a lot of overlap with ideas & concepts which already exist offline & with which we're already familiar.

We already have a process for what happens to a person's belongings after death; a person's online accounts are belongings; therefor we already have a process for what happens to a person's online accounts after death. Yes, each jurisdiction will have its own rules, but again we already have a process for determining what happens to possessions in other jurisdictions upon the owner's death.

(as an aside, this is part of why '… but with a computer!' patents shouldn't be patentable: they're obvious)
As a user/developer how do you even mitigate against this kind of attack? Audit all source that you or your dependencies use?
"so in summary, don’t use filesystems for large distributed systems."

Don't use a _normal_ filesystem for large distributed systems.

Being able to seek() on a file (without having to download it first) is something that is very underrated these days

just like databases, clustered filesystems also conform to CAP. You need to pick which part of the triangle you need.

I really like GPFS, as it has lots and lots of hooks (like S3) for events. It also has "HSM" which allows you to optimise which part of CAP you want based on arbitrary parameters (for example I've seen a rule that was if the file was an image, larger than 1000pixels and red, put it on long term storage.)
"Hey Siri"'s increasing presence in Apple's lineup is very problematic, at least with it's current implementation, especially with the wildly varying capabilities between devices.

The HomePod is very greedy with Hey Siri, even for things that it can't handle. I'll be in my living room and try to "Hey Siri" something to my phone, and my HomePod in the kitchen will somehow here me, take the request, and then fail because it's incapable to doing it. Throwing a Mac into the equation just makes things harder.
Just Read is great, and I would be using it a lot more if I wasn't a Firefox guy. Great work, though!
What you really need is one of these fashionable carrying bags for the 27 inch iMac.

https://www.amazon.com/Lavolta-Carrying-Case-Apple-27-inch/d...
Better yet, why don't they go back and grab the 2006 17" form factor?

That was the best developer laptop I had. The missing 2" on the 15" just makes the IDE too narrow.
Facebook should make it in the preference if i will allow my account to be opened by my parents or any family member after i die, that will make it easy for them. and definitely i will allow this.
This is great news for me personally as it means that I will never have to see anybody complain about how you can only get 16gb RAM in Apple laptops.
Agreed, especially when you're dealing with external clients. I've been in situations where internally we've been fine with a slipped go-live date, only for a CEO at a client to send an email at 4:50pm putting everyone on blast and demanding that all developers stay at the office until it is live, or else (no lie, literally had that email, quote for quote, in my inbox less than a year ago).

Corporate culture includes everyone involved in a project. You can't be calm if you have someone outside of your office going mental over something being a day or a week late.
I think the article goes beyond hyperbole, this is approaching the realms of esoteric pseudoscience.

The actual phenomenon of intra- and interspecies communications in the plant kingdom is absolutely fascinating - unfortunately, not much actual science shines through in this writeup.
Whilst not applicable in this case (because the deceased is a minor), this always reminds me of how important it is to also make arrangements for your digital heritage.

Facebook allows you to set a legacy contact [1], who will have some basic rights, or you can request to then have your account deleted. This has to be initiated by someone/anyone after you pass away.

Google allows you to predetermine some basic actions [2], and share data from your account with other persons. This is triggered by not using the account for a set period of time (between 3 months and 1.5 years), so it activates automatically, but likely some time after you pass away.

[1] https://www.facebook.com/settings?tab=account&section=accoun....

[2] https://myaccount.google.com/inactive
Coming from windows to mac I just love the simplicity. In windows you have so many options, so many updates, preinstalled apps which I never use. I open the mac, click the app in the dockbar, that's it. All apps scale nicely on the screen, unlike windows on a 4k display, terminal is great.
It depends on if you're loading from multiple origins (multiple TCP connections), HTTP 1.1 vs 2 (multiplexing, push, HOL blocking), but generally speaking: yes. If you can fit the content needed to render the page in the initial TCP congestion window, the page will be noticeably faster on high-latency connections.

This unfortunately means, for most websites, some amount of CSS in a style tag in the head to get a basic structure of the page together to start rendering. Then you also include a full stylesheet with the high-fidelity version.

I'm leaving out a lot of details here :)
I've heard this before too, that the Surface Book is the best replacement MBP you can get right now, even if you never plan on separating the tablet.
I can only speak for myself but it makes me unconformable because it makes me feel like I must be super productive for 8 hours straight lest the big boss happen to walk by for the 3 minutes I'm taking a mental break to read something interesting and completely unrelated to work.
Check our BetterTouchTool it has a 40 day free trial so you give it a proper work out and let's you customise the touch bar completely. It's brilliant and worth every cent.
After you smash the scooters please put them into a recycle bin
Also that the current-gen Surface Book solved a lot of the shortcomings of the first-gen
Either by pressing the virtual "Esc" key displayed on the TouchBar (that's what I do), or by using Ctrl-[, or by remapping any other key to ESC
Will it be released under an opensource license? It would be nice to try to improve, especially because it is an educational tool.
Open plan offices have been known to be bad since at least 1987, when the first edition of Peopleware was published. A good portion of the book discusses issues with employee distraction and its inverse relationship to productivity. They use evidence from the field to discuss office layout, and also other issues like office wide paging systems (that used to be a thing!), phone calls, and email.
There wont't be one :(
I wonder if the previous model keyboard repairs will get the third gen keyboard at some point (didn't see any info about this)?
Looking at the specs on the sales pages:

https://www.apple.com/shop/buy-mac/macbook-pro/15-inch
https://www.apple.com/shop/buy-mac/macbook-pro/13-inch

It's interesting to me that they've widened the gap between the 13" and 15" -- it looks like the 15 has been updated to use DDR4 while the 13 is still on LPDDR3. I get where they're coming from in that the 15 has notably more battery to work with, but it seems surprising that they'd widen that gap between devices.

At this point (assuming no issues with gen3-keyboard) I think a lot of people will find the 15" to be a great pro laptop and the 13" will still be rather disappointing to many. Here's hoping some reviewers do a meaningful comparison between the two.
The honest answer is a hard truth: you don't use npm at all. The npm ecosystem is out of control and beyond saving. I think it would be wise if someone started a new JavaScript package manager which was run more like a Linux distribution is - trusted third-parties that independently audit and publish new packages.

Retracted: I wanted to audit the rest of npm to see if this payload had made it into any other packages, since if it steals your npm credentials it seems like it could easily become viral. But because npm is a centralized, proprietary service, I can't just download all of the packages from a mirror and examine them myself.
Echoing this sentiment, got a precision 5520 pre-loaded with Ubuntu and it's been a real champ. The build-quality is on-par with Apple and the fact that I still have HDMI/USB-A has been a life-saver a whole bunch of times.

There's one other thing that I like too; it's linux.

If I bought a macbook I'd definitely leave OSX on it, OSX is a decent system but the lack of decent window manager, the fact that I can't navigate with just a keyboard and the fact that I don't have the ability to mount linux-y/windows-y filesystems except fat is an annoyance too. But they're not annoying enough to make a good Mac Laptop a half-decent linux laptop.
> It is well known that Ubuntu is going through a phase of rapid change at the moment. I understand how you feel but I'm pretty sure the quality and consistency will only increase from here on.

People have been saying things like that about various Linuxes for over 20 years, and it still isn't close.
"the soccer game on and you're bombarded with constant cheering, which is my current situation" You are lying, the game was yesterday.

EDIT: I get the point, that was a joke.
Thanks, I see - on the Tech Specs it's easy to miss since it's nowhere the default config.
I'm holding on to my 2013 mbpro with a real keyboard, but if it dies... looks like they only have emoji keyboards now. I'll have to join the exodus then.
>however given this is an hardware exploit

Lots of what I listed are hardware exploits - cache timing leaks information, integer shifting and overflow behavior are hardware dependent, stack issues and exploits are hardware dependent, and to make secure C/C++ code on a specific target takes understanding of all these issues. This is only the tip of the iceberg.

There's lots more, depending on platform. It's nearly impossible to make C/C++ code robust across platforms to all of these. Chip errata (Intel, AMD, etc.) list thousands more hardware bugs, many exploitable to some degree, and every platform has them. Hypervisor, secure instructions failing, lazy fp restore, Intel Management Engine, biased (or backdoored) RNG generation, and on and on all have security issues.

Yes, Spectre is a pretty big one, but so we/are many of the others, and the only reason many people think Spectre is the only one that is important is because they are unaware of how prevalent hardware holes are.

I suspect integer overflow alone has caused more severe security issues than these speculative execution attacks will get close to doing. But all these exploits exist because of hardware bugs or designed behavior that C/C++ programmers are unaware of or ignore.
Do we need a “days since last NPM-related security disaster” tracker?
Maybe that works for you, but headphones do nothing for me for the stress caused by having my back exposed to people walking around.
This was resolved in about an hour, looking at the issue linked. All things considered, that's great turn-around time for a fix.
I tracked my iPhone usage for a week and this is what I learned
> The argument of "increased collaboration" that I keep hearing is kind of negated when people have the soccer game on and you're bombarded with constant cheering

Is there anything less professional than watching a game at work? I really don't get why people do this, and why they think it's okay.

Granted, I don't like sports — but I like TV, and I wouldn't watch TV at work. I like computer games, but I wouldn't play computer games at work. It's just odd that sports fans think it's okay to distract people during work hours.

At least pop off down to the pub or something.
It's also counter to many legal systems to say that they generally do not have rights.
Recent releases of Ubuntu use regular GNOME 3 with the Dash to Dock extension installed by default.
Scientists Think NASA Caused a Mars ‘Proof of Life’ Anomaly 40 Years Ago
"with backs to the hallway" - depending on how far away the hallway is this can be distracting. In the past I've sat with my back maybe a 1.5m from a wall, and the space between was used as a standard route by countless people - distracting.
Writing straight to the DOM is pretty fast - faster than a high-speed internet connection. It's the core idea behind a side project - write webpages in JSON, and have a small Javascript engine add these to the DOM.

It still has some bugs, but when it works, it's faster than calling the server for each page. This is because the entire site is loaded into the browser, and each page is deleted and rebuilt when a link is clicked. https://www.sparational.com
Please give me back the escape key. I have a 2012 Macbook Pro it is very good.
Has anyone gotten this done at a Authorized Repair partner or is this an Apple Store thing only? How about via mail-in to Apple?

Nearest Apple Store is 4 hours away...
Order is open: 32 GB Top CPU 1TB $3899 US. 2TB and 4TB are insanely priced.
Demystifying WebSockets for Real-Time Web Communication
If you needed to debug, it is a sign that you have made a mistake. Who wants to admit to making the mistake? :-)

Seriously though, I imagine that the junior devs would have such a view of debugging. But the matured devs would plan for it as they know their limitations.
Is it possible that this is a npm virus, or semiautomated train of compromises, and the eslint-scope project npm credentials were compromised the same way? Given it was eval-ing code off pastebin, it's hard to tell what has been going on.
It is all what you're used to. I switched from a Linux KDE desktop to a Mac 11 years ago. I ended up switching back to Linux & KDE after about 6 months of use, and giving the Mac to my inlaws.

What it came down to for me is that I've been using the same window manager shortcuts since the late 80s, and I can't make them work with OSX. Eg, I use focus-follows mouse, and some strange mouse-button + ALT key combos to move/raise/iconify windows. The loss of focus follows mouse is what really drove me nuts. I was forever deleting emails because I'd move my mouse to a terminal or emacs window and start typing, like I'd done for the last 20+ years, but without a click "random stuff" was happening in Mail, which was still getting the keystrokes.
Being from Chicago, "what ChicagoDave said", except go Bears. ;P
Salesforce is really an overpriced, over complicated, awful UX and full of quirks kind of software. Anyone with any decent taste in software would probably write their own or use something else.
Why do you say that? I've used emacs for years and use the escape key very infrequently. (Although I do swap control and caps lock, and have for years.)
It is telling that there is not a mention of this on the front page of Apple.com . So much for caring about the Mac!
Isn't it scary that this seems to have been discovered only because the backdoor code was buggy?
I don't know why you're being downvoted. Rogan is a good proxy of Hollywood creatives, which in turn has an enormous impact on how often Macs show up as default movie props.
I still eat too much chocolate as an adult sometimes- the stomach aches remind me not to indulge too much.
The dead still deserve privacy
These articles keep being written, I guess as individuals each eventually discover this for themselves -- is it having any positive effect as far as any HNers can tell?
Ha, yeah, fair point, I was just informed that it's almost over. Don't worry, there always seems to be more sports to watch. They'll probably move onto curling or something today.
According to the thread, as of about 30 minutes ago the malicious version has been unpublished.

Despite this, it seems that a lot of high profile packages were vulnerable to an automatic minimum version bump. There have been quite a few close calls with non packages, and at some point I feel like it will actually do some damage.
You‘d need a legal reason for the contract between user and Facebook to be terminated.

The heir enters the contractual relationship in the decedent‘s stead, with all privileges and obligations.

At least in Germany.
They say the package didn't come from their pipeline, so it's most likely published with stolen credentials. So it's not far-fetched to think those credentials were stolen the same way. More packages may be affected.
It's not completely resolved until everybody who was potentially compromised audits everything their credentials gave them control over and changes the credentials.
I recently switched from macOS High Sierra to Fedora.

I felt that Fedora was smoother, way more responsive on the same hardware (and yes, comparing fresh macOS to fresh Linux install), more consistent and more intuitive, and more usable. The only thing I can think of that's better on macOS is the touchpad, which to the best of my knowledge is a gift given to us mortals by the gods.

Oh, and the macOS default wallpaper is better.
Yeah, the whole Unity look and feel was always terrible for me. My first experience with Linux was the last version of Ubuntu with Gnome2, then I did a system update and everything changed and back then I didn't know about changing DEs. Now I avoid Unity whenever possible, as even the Gnome lookalike Ubuntu has now seems so much slower than XFCE or i3.
Mid-2012 MBPs have the nice bonus features that (a) you can actually upgrade them and (b) matte screens were still available.
> Few managers have a schedule that allows, or even requires, long hours of uninterrupted time dedicated to a single creative pursuit.

More on that in Paul Graham's Essay: http://paulgraham.com/makersschedule.html
No refresh on the non touch bar model. I guess a new Macbook Air is coming.
Ideally yes.

This is doable with some languages but the issue with Javascript is that your dependency graph usually ends up containing 100+ packages.
Broadcom announces plans to acquire CA Technologies for $18.9B
We did it before Facebook was even a twinkle in Zuckerberg's eye, and it's still a stupid idea. All that happens is the level of conversation goes up, and they suppress it with white noise generators. Dumb.
> So what you're suggesting is that this person should not complain. Instead he should set up his own business, offer better salaries

Yes. Either yourself or maybe find someone else who does.

But if you find no one who solves it for you, the question stands whether the employer is indeed an evil guy or just doesn't have a lot of margin to hand out higher salaries. It's easy and lazy to assume evilness without ever having been there.

> and single-handedly change the labour market of an entire country. Great suggestion. Why didn't I think of that?

No.
Not a MacBook user, but being in a US university campus for almost 5 years now there is one change that I noticed with the latest crop of Macbooks. Everyone seems to carry their chargers. 2-3 years ago really I don't remember any Mac user carrying a charger.
There are absolute rules that we should adhere to, to imply that they are a social construction is to embrace nihilism and anarchy.

There is a set of universal standards and expectations have existed for millennia in many forms. There has always been an implicit set of common rules -- common across all cultures and generations -- that we as a species live by. Implying that everything is a social construction mental laziness and a desecration of our fore-bearers at best and malicious destruction of the bonds of society at worst.
I am no lead, and never will be with my attitude towards these things. But sound the alarm immediately, realize that the business doesn't care because they have deadlines, watch it burn, then leave such a toxic environment. The order of the last two steps is interchangeable.

Sadly, everyone thinks removing yourself from bad environments, especially as a lead, is selfish as though the company isn't. Also, many assume leaving is impossible/difficult, but in our industry at this time, that's rarely true.
I'm taking this course now. Your annotations explaining each command are very useful. Thanks for sharing them
Unless they release a video depicting how the new keyboard has improved, I see fewer people trusting Apple on this one.
My biggest issue with my open floor office is that it seems like everyone just takes calls at their seats. We have private spaces and enclaves for that, but I am just bombarded with 4 people within 10 feet of my workspace on their phone. To counteract I throw on some Ambient music on my headphones, which sort of works but I still find I prefer to work in silence.

Does it not seem like open-office etiquette to take a phone call in a private space when other people are trying to work?
I agree. When I suggested putting on a low-budget 50's monster movie on as background noise (e.g. Gamera, Godzilla, The Giant Claw, something that's amusing to look at for thirty seconds, laugh a bit, but not overly distracting), people act almost offended that I would waste company time like that. But if the TV has some form of ball on it, drop everything.
Sounds like Apple could fix by allowing a more specific name:

“Hey Mac”

“Hey HomePod”
As the court pointed out, diaries and letters would have gone to the parents in the past (I mean, they still would if people wrote letters). However, the magnitude of the data makes things a bit different. If I write something down in my diary, I know someone else might crack it open one day. If I write a letter to a friend, I know that that friend might give it to someone else or let them read it. But this isn't just letters and diaries. This is every page you liked, tons of post history, and every message you've ever sent.

Sure, the parents would have gotten letters she possessed, but in ye olden days (ie, 20 years ago) those would have been letters to her, not from her. And it wouldn't have included letters she threw away. Or maybe hid somewhere. This is everything. So it's a bit complicated.

In the end, I actually do agree with the courts... I think it's the most reasonable course. But I also think platforms like Facebook should give us the ability to delete data for this exact purpose, and we should use services like Signal for things that are truly sensitive that we never want to get in anyone else's hands.
The downtown Denver grid was aligned parallel or perpendicular to the approximate course of the South Platte River there. It covers a small area--I recall it as something under a square mile. However, I would never say "effectively 100%" along cardinal directions, for a lot of places one might want to go are in downtown.
I keep wanting to buy a 17" and then walking back from it after seeing/handling 17" laptops in physical stores.

All the bezel-shrinking R&D being done for phones has to reach laptops at some point. I'm seriously losing half an inch of luggable-but-not-lookable space on each side of the screen, plus a good inch below. (I have like the most common 13" Dell in the world; just walking around in the study room of the library I see three more.)
I like the name of the post, full of passion. From the first look, you can see how the writer "enjoys" open spaces and couldn't hide his feelings. What deals with open offices itself, I found it appealing, but that's just what people prefer, we all have different preferences.
You can’t overrule an inheritance law by adding some preference. Maybe in the USA, but in many country’s you can’t even write your children off their rightful inheritance.
I wouldn't care about the touch bar if the esc+(sleep key) were still regular hardware keys. Those are the only ones that I actually use.

But an even bigger problem for me is the price increase. The base TB version costs 200€ more (or 400€ if you'd buy the nTB 128gb version). With ne nTB version not getting the update, the updated MBP is too expensive compared to non Apple machienes.
Beginner's Guide to Email CTA
How is a molecule different from a word? How is a spatial and temporal sequence of molecules different from a sentence?

I think language, like consciousness, is one of those things that a lot of people have a chauvinistic definition for...