skysight-inc/HackerNews huggingface dataset:
Ask HN: Node stack for production web app in 2018
Hi folks,

Having played for long with Node on toy projects (mainly web targeted as the question suggests) I have always enjoyed the freedom of composing packages for everything, in a light Flaskish way and it turned out to always be sufficient for my needs.

Today, however, I am considering launching a more ambitious app, and I am feeling doubtful about my koa + sequelize + passport traditionnal backend setup for this use case.

Still, if React and Vue owns all the attention on the web right now, I haven't managed to find out a thread on the usual/accepted Node stack for backend, currently in use on production web app, as the prod and cons associated.

Are Frameworks like Meteor the usual way of going as in other languages like Python or Ruby, is MEAN still a/THE thing for Node considering the drawbacks associated with NoSQL, do you rather externalize services to PAAS like Firebase ?

Having, again, no experience with Node business apps, I would be eagerly curious and thankful for you to share your stack and opinion :)

Thanks !
Author here: I noticed that pretty much nobody checks PGP signatures. I'm hoping this plugin helps prevent hostile code injection in your environment. Cheers!
I'd really like to learn some woodworking and make some stuff some day. I recently found myself admiring the grain on the wooden train track my kids were playing with...
Going to second the write-only COBOL thing. I've read real-world COBOL code that generated reports with legions of impenetrable variable names. Without the context of the business logic it was nearly impossible to understand at times.
op get item <name or UUID> | jq '.details.fields[] | select(.designation=="password").value' | sed 's/"//g' | pbcopy

will put the password for <name or UUID> on your clipboard on a Mac. (I'd probably wrap everything before `| pbcopy` in a function so it's easier to call and use directly if you don't want to copy the value)
it is true that pumped storage and great solar locations are often in different locations.

maybe there is a possibility for retrofitting some existing dams that are used primarily as resevoirs and not power plants, since pumped-storage are net-neutral on resevoir storage.

example: https://en.wikipedia.org/wiki/Parker_Dam

...but i am NOT an expert by any means, and it's probably way more complicated than that.
Bulletproofs – Short zero-knowledge arguments of knowledge
A web UI and iOS app that supports Face ID and TOTP codes.
I need an eli5 for this, attempt at reading makes it sound like i would be able to infer an approximation of encrypted data in the examples that they provide.

Basically, if this works as the headline suggests, and my poor understanding of the paper implies we can take their example of competing financial institutions:

Two banks share data, that is intended to be secret, and they use this technique to compute some property over the data. Each bank can then do the same computation over there data alone, and compare the resulting model over their data and the result over their competitor’s. From that they can infer the properties of their competitors portfolio, which seems to be leakage of data that is not intended to be possible.

Hence I am clearly missing something, which isn’t unexpected as HE is unintuitive to me.
If anyone wants to help make US government systems better:

https://code.gov/#/help-wanted

https://www.codeforamerica.org/
>>First: there are lots of places that actual police officers conduct administrative searches; for instance, any time you go to court.

This is where we start threading the needle on what a "search" is, the courts rules awhile back that a Metal Detector is not a search and I have never been to a government building where I had to do through more than Metal Detector and they did not Search me beyond that basic metal detection,

TSA however is employing much more than simple metal detectors which should be (and I believe is) considered a search, that is not even talking about the extended "pat down" these are far far far far more invasive than anything done at a court house

>>Do a Google search for [administrative search fourth amendment] for more details.

yes I am aware the Supreme Court has failed in its duty to uphold the constitution as written, and have more or less made Swiss cheese out of every protection from government intrusion in to a citizens life where police and government more or less have unlimited powers today... That has no bearing on my point.

The Constitution today is a document with no authority because the Supreme Court has granted the Government soo many exemptions to every single provision to it that we might as well not even have a Constitution...

Lucky they are starting, slowly and painfully, to claw back some rights for citizens, but the reality we find ourselves in for the US is one of where the Government has far far far far more power and authority than the constitution plainly allows, the TSA is a prime example of that
This FTP server supports TLS:

211-Extended features supported:
LANG EN*
UTF8
AUTH TLS;TLS-C;SSL;TLS-P;
PBSZ
PROT C;P;
CCC
HOST
SIZE
MDTM
REST STREAM

I didn't check if aria2 would actually use it, but I doubt it.

Re alternatives to FTP: as far as only downloads are concerned, HTTPS should be way easier to set up than SFTP.
The other property of aluminum that is relevant for some uses (but likely not ladders for most uses) is that, unlike steel, it doesn't have a well-defined fatigue limit. Therefore, it can eventually fail after a large number of even relatively small loads that don't visibly deform the material. That's one of the main service limits on airframes.
Scaling Microservices with Message Queues, Spring Boot and Kubernetes
Also remember that if you hire a lawyer and involve the marketplace, you will surely be permanently banned.
Yeah, its tough to understand how people think of a word on a case to case basis. Everyone will have different connotations. There is murkiness that exists as part of its use as a noun or an adjective.

My point of erasure relates to making the use of Hawaiian as a noun specifically relating to anything native Hawaiian.

The football thing doesn't feel entirely on point for me, an analogy of Europeans seeing Tex-Mex and calling it Mexican food seems closer to the idea. It is technically right, but some people from Mexico would disagree with that being _real_ Mexican food.
Which plants use a lot of water is irrelevant to the discussion. Unless illegal cannabis growers in California were somehow having their water subsidized, which I do believe to be parent's main point.
Magic Leap Reveals Developer Demo, Confirms Nvidia TX2 Hardware
> Won't upgrade a single Apple product in my house until we get a resolution on MacBook Air.

Just curious, what's the problem and resolution? (I'm not familiar with recent Apple hardware.)

My wife is considering switching from Win8 to OSX for various reasons and the Air looks like the best bet. The show-stopper against buying a Pro was the lack of normal USB and HDMI, and at least the Air has full-sized USB3.

There don't seem to be any good options for us. She wants to switch away from Windows but Apple seems to oppose that idea. We might instead get a refurbished laptop and throw Ubuntu on it. (Gotta keep the existing Windows laptop for specific software needed when working from home.)
If you are creating files, and these files depends on other files, Make will do the dependency resolution for you. This is difficult to do with Bash and a huge reason to use Make.

Once you start abusing the ".PHONY" targets, the value starts to decrease.
> Kudos to twitter

Kudos? I wouldn't hand over a kudos to twitter.

The article triggering this bot ban wave [1] was written by the Times and included behavior analysis that Twitter easily could (and may have) done on its own years ago.

Facebook's actions and marketer value has nothing to do with Twitter's own lack of action to prevent infiltration and manipulation of its platform.

Twitter's action on stopping spam, bots and hate speech at best can be described as slow. I believe Jack Dorsey has repeatedly said the company hasn't / doesn't do enough.

[1] https://www.nytimes.com/interactive/2018/01/27/technology/so...
The argument here is about how zoning can create dense cities with tall buildings in an affordable way. At a fifth of the population density of course Des Moins is going to have cheaper land.
Wow. This looks like a real deal. You just need more contents and you are good to go. Keep it up.
This (almost) exact story seems to resurface every couple of years. Given that Google has to allow (or perhaps) initiate the story and access, I wonder if there's a specific type of situation in which Google's PR team decides that it's time for another "Inside X" story.
Umm this is an internet problem .. as long as their isn’t a verified identity system on the web then fake comments/news will remain an issue.

Either govt mandated or something the public embarrasses something commercial like twitter verified identities where posting anonymously no longer holds any weight vs. using your verified Twitter identity.
I keep imagining that somebody will invent a way to transform cheap renewable energy into some kind of fuel that can be used by existing combustion engines. If there some way to use atmospheric CO2 in the process, then it could be a zero sum game.
Have you seen this: https://www.youtube.com/watch?v=ETUVcm5rU_4&t=13s

Might be a simple way for you to get it done.
Oh for sure they'll have all sorts of application but they can already do that one well with parachutes and some special forces even deploy with mountain bikes.

Evacuating casualties though keeps you from having to land a 6 million dollar medevac black hawk with a crew of 4 and support like 1 or more Apache (36 million) and/or Kiowa (5 million) as support gunships.

Depending on the condition of the casualty you could send it in alone or with 1 medic on it. Depending on the distance you could just have it drop in, have the person loaded on and have it hop a short distance out to where a medic is waiting with a more traditional medevac.

You aren't likely to get one of these carrying more than a couple of people due to range and battery weight so primary usage I see is for medevac.
I don’t really get that. Macbook Air is essentially replaced by Macbook. Any future “Macbook Air” would have butterfly keyboard, new ports and Retina as well. What do you want them to release?
Yeah, there aren't that many complaints because they throw them away and most people know there's no point in filing a complaint in the first place. You get assaulted or molested by the TSA, you live with it.
It is #8 on that list if you sort by homicide rate though. I'm not saying that makes OP's comment accurate as they did just say "higher crime" and not specifically homicide rate. But I do believe that blending murder rates with property crime rates gets a little muddy. The only "skyscraper city" that the article mentions that ranks higher in homicide rate is Washington D.C.
You should see some streets in San Francisco. No way that a fire engine is fitting on those.
It also introduces interesting financial arrangements. e.g. rather than profiting on the electricity directly, they make more money by selling options to sell at a fixed price at peak times.
They’re also going to drop unofficial complaints against ISPs. You’ll have to pay the $230 to make an official complaint if you think they’re doing something illegal.
Make has a dependency system. You can tell it how to create file A, and that it depends on file B, and tell it how to create file B. Then if you request file A, it will check whether file B exists, and create it first if it's missing or outdated.

That's very valuable for building things. If you change a file, you only need to re-build the files that could reasonably be affected by the change. And things happen in the right order without micro-managing.
https://news.ycombinator.com/item?id=17502346
Top Continuous Integration Tools (2017)
Mac mini in a body of AppleTV would be really fun.
Take a look at the pictures from the Trump-Kim summit in Singapore. I was amazed both Trump and Kim survived being outdoors in that humidity while in a suit. I figured someone of their girth would be sweating bullets seconds after stepping out of doors.
That's exactly what you don't want if you can't trust your ISP.
The authors should do a comparison with recent work on HE for inference on other model types. Logistic regression is a subset of neural network inference, and there is significant prior work that appears to be competitive with their results.

Recent work [0] shows that MNIST, for example, can be done in a model secure/data secure way with online 30ms inference latency. For ~500,000 samples, evaluated sequentially, that's roughly 5 hours, which beats their time by about 3x. Perhaps I'm missing details in my read of the paper.

[0] Gazelle: A Low Latency Framework for Secure Neural Network Inference https://arxiv.org/abs/1801.05507
you think boston is bad, try this:
https://www.google.com/maps/place/Varanasi,+Uttar+Pradesh,+I...
They can produce the same result but they do it in different ways and require you to express it in different ways.

Make has you describe a graph of outputs and how to produce them. It then traverses the graph to produce the requested output.

Bash is just a regular sequence of commands, with functions and loops if you wish.

If the pipeline you need to run can easily be turned into a dependency graph, I think make is a great fit. It's easy to use, comes with most of what you need built in and has some fun extras, like -jXXX, which allows you to parallelise things and built in caching so you don't regenerate the same asset twice if you don't need to.

You can do all that in bash but you'll have to write it yourself, which takes time you could spend on other things.
What is the problem with keyboard especiially after the extended warranty program?
Thanks for the comment, Josh.
C++Now 2018: Matthew Butler “Secure Coding Best Practices”
The later parts of Boston are grids, too. Back Bay (which was literally a bay, and that's part of why Fenway Park is sinking) is a slightly lumpy grid, and South Boston (a landfill-widened neck) is too.
I guess I'm beholden to 'the man', but I just use google docs these days. I'm not really a fan of markdown. I'd rather write HTML than remember more syntax. Before Google Docs, I just used text files.
I'm sorry, but this idea really doesn't make any sense to me. $1 on every project doesn't make any meaningful difference--every project that would have failed without it will still fail, and every project that would have succeeded will still succeed. Your contributions have zero impact if you do it this way.

If you instead looked for promising projects that would fail without your ~$2000 contribution and "save" them, you really could make a huge difference.
iFixit confirmed that 2016 and 2017 butterfly keyboards are just a little different. They’re replacing with 2017 now and there’s no any data on their actual failure rate except for the fears on Twitter.
Exploited Amazon workers need a union. When will they get one?
Actually maybe a well insulated house could be considered a "thermal battery". If you look at the CAISO reports, a significant chunk of the duck curve is related to heating/cooling. If you had a super well insulated house, you could do the heating/cooling during the day.

Instead today, people fire up the AC on overdrive when they get home in the evening to cool/heat the place down/up. What happens if your Nest could just fired it up at 3pm while the sun was still shining.

In fact the opposite is done today to take advantage of early morning peak pricing, commercial buildings cool/heat at 3am to get optimal energy pricing.

https://www.greentechmedia.com/articles/read/retired-cpuc-co...
There's a lot of "lumpy" demand that peaks during the day, requiring no storage. E.g. all air conditioning would be perfect as a consumer of solar energy.
although he doesn't state this

Yes, he does, right in the first paragraphs.

I'd start with the source code.

He started with the formal specification of the RPM format, which includes relevant pieces of the source; how is that not a good place to start?
We're still learning, but so far we've had overwhelmingly positive feedback from folks that feel encouraged by our pledges. We're also working to raise more funds so we can increase the amount of each pledge. It's in the article, but 100% of the funds we raise on Patreon will go towards that goal.
Surely Twitter would raise their price per click when they increase the average quick quality. Caring about the value per click is ridiculous for a customer -- you should be willing pay whatever rate you think is is worthwhile for the aggregate value of the traffic you see, a number determined by experimentation.
All she had going for her is famous parents, a sister with a tape, and being on TV since she was 9.
I helped build Apple 1's. I had a Lisa. I've owned nearly every generation of PowerBook and MacBook and I've had enough. I bought a loaded Surface Pro tablet last summer and I ordered a new 15" Surface Book 2 w/ Nvidia GTX 1060 to replace my MacBook Pro. Not the new one with TouchBar, that one was so bad I sold it back to Apple for a substantial loss. It was a good run.
What's wrong with even 99% robot engagement is 1% human engagement pays the bills?
Yes. The hope is that you run this analysis as part of your development workflow. e.g., on every merge into master. Charge up like AWS and use as frequently as you need. The current alternatives involve hiring a firm for $20-500k for a manual audit that happens at the end of years long development. I will work with you to get this into your hands as soon as I can.
Nice app. Hopefully, you will add more contents and publicize it more to get users.
You misunderstand the sense of "true" here.

The point is not that the "true" price in the sense of what it ought to be. It is the "true" price in the sense of what the market is actually paying for the service.

When people put out the number $23, they compare it with the cost of power and wonder why, if it is so much lower, it doesn't already swamp the current solution.

So the purpose of the comment is to explain that it is not a complete solution, and not reflective of the total ("true") bill.
Do you have any Mac indie games to recommend? Ones that you've particularly enjoyed? Been outta the scene for a bit. TIA!
Would it make sense to combine California's ability to produce solar and need for water? Build solar plants that run during the day that power desalination plants that fill reservoirs in the western mountainous area which then releases the water at night downhill to the main canal system while turning turbines on it's journey?
Just finished this write up documenting my latest side project. I've been a bit obsessed with this problem for the past few weeks. Hope you like it! Be sure to check out the puzzle database and let me know if you do anything cool with it.
I think the tough part is deciding who should be the arbiter or whether information is intentionally malicious. Censorship can be a real issue.

For the DIRT protocol, if want to remove information, you also need to deposit tokens and put forth evidence to convince voters in the network to side with you. If you lose the vote, then you would also lose tokens. We put forth an economic penalty for being inaccurate.
Here’s why I switched from 1Password—

I recently picked up a Pixelbook and have gone all in on ChromeOS. Its replaced my MBP. But unfortunately, that meant parting ways with 1Password.

I needed a new password manager with the following:
Self hosted
TOTP support (have since decided not to use this)
A web UI
IOS app with face/Touch ID.

I tried the 1Password subscription but 1Password X just felt too clunky and I wasn’t in love with storing on their server.

Keepass/XC/whatever was a hot mess for me. I really wanted to use it and the idea of keeping and syncing a single db file still really appeals to me, but the ecosystem is such a mess. I tried running a self hosted container for Keepass Web but I kept having to enter a Dropbox API key on every client. I also couldn’t find an iOS app that supported Face ID or the option for storing TOTP. Maybe it’s a better experience on Android. On top of that, the UI was pretty jarring all around.

Bitwarden still has some work in the UI department. The lack of keyboard shortcuts and a native app adds some resistance but it’s manageable for me.
Steam is crap but they have a captive audience. Can't transfer your Steam account to a competitor so your years of gaming history is stuck.
What's wrong with APFS?
In a toy model, the ether and Aristotlean mechanics worked ok too. I am not saying we should give up the notion altogether, but that causality as we intuit it may not be the best way to understand the universe.
> If you'd ask any of my colleagues what they'd do if there was a new policy saying use of debuggers were no longer permitted on a daily basis, the answer would more likely than not include the word "riot".

I’d imagine you’d have the same effect if you mandated the use of debuggers.

And hey, I’m not arguing against their use, just saying they aren’t needed for most debugging. I would bet the vast majority of bugs in managed languages have bugs that are easily discernable if you have decent type/assertion boundaries. Needing to use a debugger is certainly a smell about your code.
More and more most rights seem to in theory only, for example a person is suppose to have to right to be free from searches unless there is probable cause they have committed a crime... except <<<insert a list 1000 miles long of other times government can search you>>>
Reminds me of a story.

A wise man was called to solve a problem for the Emperor, and he did so. The Emperor asked what he could give him as a reward. The wise man said humbly, "I do not ask for much. I wish for a chess board with one grain of rice on the first square, two grains on the second square, four grains on the third square, and so forth." The Emperor agreed. Any idea on how the story ends?
Plants can grow very fast as long as the part that's growing has not yet turned to wood. Look at grapes to see how fast it can go.
> 2-factor authentication through phone calls or texts.

isnt this bad? Tying to your phone number (while more convenient) provides another vector of attack (social engineering the telecoms to get device changed)
This has been the elephant in the room for Social since the beginning.
India will have net neutrality
"Nobody has tried because nobody has ever been arrested by the TSA. The TSA calls the airport police or local police and they arrest you. It's hard to imagine a scenario where airport police will not take the TSA's word for it."

I was in a situation very shortly after (as in, Oct/Nov 2001) 9/11 wherein the TSA (or whatever they were at that disorganized point) called the police over and the police officer openly derided and made fun of them for both not being actual law enforcement and having no idea what to do with the situation at hand.

Things are different now, of course ...
Any suggestions for getting graphs on a TV in the office? I usually have monitoring tools like New Relic open in my browser but I'd like to have these aggregated on a wall mounted TV for the team to look at together.
So the goal is to pat people on the back with token amounts of money? Well, it's not my money...
Agree.

Yes, ability to explore and understand the project via debugger is a great and useful skill.

However, if it takes debugger to understand that project, then, I'd say, it is a badly written and poorly documented project.
San Francisco is listed as a client
Show HN: Hop – An AMQP client wrapper that provides easy work queue semantics
Bye bye chrome. You were useful until you started pushing your agenda on everyone