skysight-inc/HackerNews huggingface dataset:
Its a superior concept, that regularly failed when realized in powerplants. Its part of the long list of experiMental reactors. With beautys like this concept:

https://en.wikipedia.org/wiki/Sodium-cooled_fast_reactor#Dis...

We had several attempts, and always the alternative medium causes more problems then trouble, corroding material, being flammable when escaping and other funny side-effects.

https://en.wikipedia.org/wiki/Molten_salt_reactor#Disadvanta...

(TL,DR): It falls apart when under neutron bombardment.

Of course, most of the proposers being theoretical physics enthusiasts, just ignore the long list of dangers, or even worse, love the addition of new problems to solve with experimental methods (the equivalent to problem solving by recursion on a labyrinth of depth n) and ignore the century long experience we have with hot water cycles.

My suggestion to solve these sort of problems, is to build these reactor-prototypes on the roof of physics departments in university's.
A bookmarklet to translate and save new words on webpages
Would it be possible to put compromised package in Debian repository? Or has something like this happened in the past?
> To me, this begs a question

No it doesn't :-)

https://en.wikipedia.org/wiki/Begging_the_question
Node could implement something like an "ethical transfer of responsibility for packaging" clause for their code of conduct. I'd like to see that.

I'd also like to see something like StavrosK mentioned in his comment[1] about https://codeshelter.co made a part of this. When a maintainer gets an email for a long-dormant project of theirs, the maintainer needs options. One of those should probably be to yield the package back to the community. A "code shelter" is one way of doing that.

Then the question of, "How do we vet maintainers at scale?" comes up. All I really know is it'd take a financial & human capital investment in Node community infrastructure to make it happen.

I think it's in Node's best interest to do so. These highly prolific maintainers like dominictarr are prime targets for black hats. Overworked, underpaid, huge product portfolio they manage. Who among us wouldn't be grateful for the interest & help?

So Node should invest in fixing this.

1 https://news.ycombinator.com/item?id=18534741
My experience with an iphone had me convinced Apple=AOL.

Less features, more expensive, and anti-consumer practices?

This is the example of short term profits to drive up stock prices. Squeezing current users, spending limited money on improvements, and charging more money will work temporarily.

That said, Nintendo has been doing this for a decade, and they somehow survive. Marketing might be more powerful than competition...

EDIT: Due to HN whales(or apple marketing teams), Anti consumer practices-

>Intentionally slowing down old OS

>Proprietary connectors

>Luxury pricing

>Limited to App store and removal of apps

>Limited hardware

An argument could be made for 'safe apps', but the rest of that list is a hard 'No, that is bad for the user'.
Not sure if you still can, but you used to be able to find 4 hooks for primitives in early Smalltalk images. 1 for lifting the hard drive head. 1 for setting down the hard drive head. 1 for moving it out one cylinder. 1 for moving it in one cylinder.

On my dad's old Apple ][+ 48k, I used the same REPL to get the CATALOG of what was on the floppy disk and to program in BASIC. What's the line between OS and a REPL?
15 minutes about our online privacy
Note that Microsoft's P/E of 43.6 is higher than Alphabet (40.7), Facebook (20.4), Apple (14.49) though of course lower than Amazon (87.3). This is presumably due to their incredible growth in Azure / cloud.
the 20T will have to be paid back. Unlike personal debt the fed can just print the money. There is currently around 6T in existing money supply (though I havent checked recently).

The question is how will the debt translate to increased money supply over time (inflation).
One can also implement SFTP on top of anyting just like HTTP apis if you make your own backend, e.g. https://github.com/pkg/sftp
I'm pretty sure they'll be legally liable for intentionally inserted malicious code, no matter what the license text says.

I'm not talking about the original maintainer (who didn't introduce malicious code intentionally), but the person he turned it over to (who seems to have).

Legal liability and ethical responsibility are not always the same thing, although it's generally only the first that matters in court.
A video website to record natural and cultural landscape
No, rsync over ssh requires the rsync binary on the remote side. Possible for Amazon to add but I don't see it mentioned.
Chem engineer here.

I dont think precious metals will survive our lifetime.

Nuclear chemistry might be around the corner with either tech advancements or energy advancements. Only 1 needs to come true and it would kill the price of gold.
In addition to the time factor, focus can get harder as you age https://www.health.harvard.edu/mind-and-mood/how-memory-and-....
Early am seems to be the best time for optimal concentration/focus, so your suggestion is a good one. It also heads off decision fatigue, which makes it harder to focus later in the day: https://www.nytimes.com/2011/08/21/magazine/do-you-suffer-fr...
> Why do you abhor elitism? It's elitism (not group thinking) which yields progress. For instance, da Vinci, Newton, Einstein, etc. and all the Nobel price winners were all outstanding elitists.

We're here because of mass progress, not because of a few "chosen people". The "great man" theory of history fell by the wayside a one century ago.
Would be interesting to hear discussion on why one might consider doing this.

My take is that it's most likely just being asked for the theoretical details, and few people would practically benefit, but does anyone think this would be practically useful?

Presumably you'd potentially cut overhead from anything you didn't explicitly want happening on the host, but as soon as I start to think about most of the uses typically have, the advantages quickly sink below the disadvantages of having to actually manage everything. It's reminiscent of that person who set out to build a toaster from scratch.
Do they? I'm not 100 percent sure about the npm package lock (because I don't typically use it), but I'm fairly sure that yarn's lockfile will lock the full dependency tree, including the dependencies of your dependencies. I believe npm's package lock will as well, but I'd have to double check that.
> Marketing might be more powerful than competition...

Or infinite choice and configuration is actually an anti-feature.
> They're already a special type to an extent

This is news to me. How so?

> since Go's MRV are not first-class it could add builtin facilities applicable to any 1..n-ary return value whose last value is either an Error or an Error-implementing struct or somesuch.

MRV is "first-class" for the purposes of this discussion. Your proposal still depends on treating `error` as a special type, so my criticisms still apply--the juice just isn't worth the squeeze. That said, if another mechanism is introduced (for example, a trait-like system for hanging sugar off of a la Rust's), then the calculus changes; however, as previously mentioned, error handling sugar is not a good reason to add such a system.
It’s using S3. S3 already has access logs - off by default - and for logins you have CloudTrail.
Yeah, FORTH is really good at this. You can start exercising stuff at the hardware level in just a few hours. It's fantastic for system bring-up, and I've used it several times for this.

FORTH is terrible at scaling to large systems, though. It's also terrible at hard real-time tasks (like games) or anything requiring much in the way of data structures (FORTH's memory management is about as primitive as you can get).
David Gelernter has a book on (mostly? not sure if I remember correctly) industrial and software design, in which he brings up the bakelite telephone as an example of such an object. Weird shape - check, functional - check (the handset's size and placement matches the distance between the ears and the mouth). It became a literal icon of itself.

https://en.wikipedia.org/wiki/Model_302_telephone
> why was USA so inept in not making use of Wikileaks themselves?

The USA is inept as an organization. In some areas, by design (eg Patent Office, various Courts, Gerrymandering). There are very few areas where it's not completely hypocritical and demonstrates externally rational behavior. "Using wikileaks" would require multiple departments coordinating. That's been impractical for decades.
SFTP is not a filesystem, though; to get a rename to be atomic, you must pass SSH_FXF_RENAME_ATOMIC, and the server can return SSH_FX_OP_UNSUPPORTED.
I think browsers show how to migrate away from insecure defaults successfully. The client software should start showing big obvious warnings. Later stages should add little inconveniences such as pop-ups and user acknowledgement prompts, eg. 'I understand that what I'm doing is dangerous, wait 5 seconds to continue'. The final stage should disable access to unsigned packages without major modifications to the default settings.
> So where did the emails come from? If it was not the Russians then it is time to look at the time stamp meta data, which I have not done myself but I believe it points to places outside of the Russian time zones.

They appear to have been downloaded at about the speed of a USB stick, but that leaves a lot of unanswered questions.
"Less features and more expensive" has been Apple's modus operandi for decades. So there's nothing short-term about that.

I don't agree with "anti-consumer practices."
Get. It. In. Writing.

I will say this much. People have bad memories. That includes you. You think you remember that conversation perfectly? You probably don't.

Get. It. In. Writing. And don't trust anyone who won't commit to writing.
Looks like the sleuths on github just found out it targets a bitcoin wallet called `copay-dash`

https://github.com/dominictarr/event-stream/issues/116#issue...
I've only ever heard of one company with a public cap table. After a bit of googling, I found them again: https://open.buffer.com/buffer-open-equity-formula/ . EDIT: lol the same link is in TFA.

The problem with a public cap table is that it amounts to a public salary database. Usually companies (and employees) don't want everyone to publicly know everyone else's salary. When people do jobs you don't understand (like marketing, for the tech crowd here), or are perceived as underperforming, removing all doubt about their compensation breeds contempt.

Anyway, even buffer doesn't publish enough information as they don't publish the "preference stack". Whether by design or an oversight is hard to say. And you can't really publish it as it will lead to difficulty recruiting as candidates get soured by the prospect that investor's real equity is better than their sweat equity.

Sure, VCs talk but (speaking as a not-VC) I doubt they are going to share cap tables and such. They are busy people. If you, as a VC, care, talk to the company yourself. Even if they would share peer-to-peer, you are not a VC so you are not going to be privy to this VC-public info.
I have grown weary of statements based on truthiness.

Shackleton's failed expedition goes around in business circles because it was a successful failure. No one died, despite the ship being caught in the ice, the men holed up on Elephant Island, and the incredible voyage of the James Caird to South Georgia and trek across the mountains to the whaling station.

The mythical ad builds on pop culture resonances, like the 2003 book "Shackleton's Way: Leadership Lessons from the Great Antarctic Explorer", and "Leading at The Edge: Leadership Lessons from the Extraordinary Saga of Shackleton's Antarctic Expedition", plus scores of other books and movies.

Tell me, downvoters, why don't we see 'mythical ads' for real failures, like the Scott's Terra Nova Expedition? Presumably they would have been just as heroic, no?

Or, would you interpret that fake ad the same if you replaced Shackleton's name with Scott's?
If you're using auto-updating external packages, aren't you effectively giving the package author commit access to your derivative project too?
Cost. Building huge magnets and a huge vacuum vessel is simply expensive.

Fusion scales very well with two parameters: size and magnetic field strength.

Size works great, but it's just too expensive. Even if you could justify the costs in theory, ITER is demonstration that the political will to invest that much capital with such a long payoff time just isn't there.

Magnetic field strength is the new hope of the fusion industry: 'Cheap' high temperature superconductors have been commercialized and could make smaller fusion designs practical and economical.
I guess this is a sort of:

> Unix is user-friendly — it's just choosy about who its friends are.

> Anonymous, in The Art of UNIX Programming (2003) by Eric S. Raymond

At the end of the day, each community chooses its path. If Ocaml makes you happy how it is now, more power to you :)
What's up with the "equal sign with a slash" being used in place of the literal "!="? I realize it's reference, but why abstract the code away like that? Seems unnecessary, and potentially confusing for new programmers.
Please don't haul internet hostility tropes in here. That's just what the site guidelines are asking you to avoid.

https://news.ycombinator.com/newsguidelines.html
Azure yes, Windows and Office no. TypeScript and VSCode make it easier to migrate AWAY from Windows.
Port was done by Chucklefish.
More specifically, I’ve accepted an offer from Chucklefish in which they will handle the porting, localization, and the technical side of multiplayer. This will allow me to focus on creating new game content for version 1.1, which I will continue to do entirely on my own.
http://stardewvalley.net/post-launch-progress-update-version...
It's more like anyone who doesn't leave a disclaimer (and some of those who do) have angry partisans jump down their throats.
Practical tcpdump Examples
That’s quite literally AWS’s playbook. Fill the vendor hall with tech, learn it, see what sticks and then crush it.

This is why I’m bullish on cloud agnostic tech. These practices don’t typically fair well in the enterprise space. This is why companies like MSFT are interesting to me. They partner and rarely kill. Amazon is the complete opposite.
This isn’t about Dominic, this is about using node for anything secure (for example, somehow people use node in cryptocurrency projects)

If you have any security requirements whatsoever, and you are using node, you need to do your own audits of the (hundreds of) packages you use. If that’s not practical then node isn’t practical
A related question: I'm a NodeJS, Python and Java user/developer; can anyone explain why this problem appears more frequently in the npm ecosystem than in Maven, PyPi, etc?

Is it the Github-ization of package creation and maintenance? Is it the pervasiveness of left-pad style packages? Is it npm's governance? Is it the community's perspective and culture? Have the malicious just not made it to other repo systems yet?
If you attack anyone like this on Hacker News again, we will ban you.

Please review https://news.ycombinator.com/newsguidelines.html and post civilly and substantively, or not at all.
Free Cloud Computing Course – Introduction to OpenStack
On the other hand, traditional licensing provides an incentive for companies to hold back feature enhancements and bug fixes to encourage users to pay for an upgrade to the next version.
An alternative to doing file based SFTP is to just treat SFTP like an API.

A company I work for implemented an SFTP service where every operation simply translates to some SQL DB lookup. And a file download kicks off a larger SQL query and generates the report on the fly, streaming the result straight through to the SFTP client.

Works great! SFTP can be an API just like HTTP. Under the hood the protocol is reasonably contained and doesn't require a filesystem backend at all.

Depends a lot on the usecase of course.

See
https://github.com/pkg/sftp
Landing Day for InSight
I'd like to try out the community edition, but the license seems restrictive. It sounds like if you make more than $5,000 (from anywhere - not just through use of the software) you have to buy a license? I don't really get the point of a community edition if (almost) no one can use it without paying.

From https://www.embarcadero.com/products/rad-studio/rad-studio-e...

> For example, a developer who receives payment of $5,000.00 for a single project (or more than $5,000.00 for multiple projects) even if such engagements do not anticipate the use of the Community Edition, is not allowed to use the Community Edition. In addition, a developer building solely an app store application would not be allowed to use the Community Edition once the app store revenue reaches a revenue of $5,000.00 or more in a year. If Licensee is a company that has a cumulative annual revenue which exceeds the Threshold, then Licensee is not allowed to use the Community Edition, regardless of whether the Community Edition is used solely to write applications for the business' internal use or is seen by third parties outside the company or has a direct revenue associated with it.
Yes, please. The current title is quite misleading: I thought it was a “methods and history of GR tests” survey article when I clicked on it.
Vendor lock-in and network effects.
The current debt is 20T, the current money supply is about 6T. The inflation is guaranteed to happen.

One reason why it has not is that we are the reserve currency so other countries have to have large US dollar reserves to buy oil.

As the world is weaned off oil, demand for US dollars will drop. At the same time we will have to print money to pay off the debt.
Yeah, I'm not sure why you're being downvoted. We also use Python at work and reviewing code is an absolute nightmare because you end up needing to dive deep into each function call to see if there are any exceptions being ignored. We're trying to enforce adding all possible exceptions in the docstrings but it's difficult because third party libraries (and even the standard library!) sometimes don't document them. Typically we have a catch-all Exception in our main loop and recover from there in case there's something we missed in dev and staging. I'd much prefer being able to know which functions have the ability to fail and why.
Apple also has 15% on subscriptions.
You're just moving the problem. Why would a bank built on top of bitcoin be better or more valuable to a bank built on top of the existing system?
If I am allowed some sarcasm as well, that is anyway the "old" approach, a more modern one would involve (besides the connection to the cloud) a camera, a database of "known" chickens and an AI (possibly a neural network) to identify (besides matching the actual authorized chicken wanting to enter with the image in the database) "chicken like" animals from "fox like" and similar ...
>> Relying on documentation is not a silver bullet either: poor documentation is still very much a thing.

>> It makes sense always to check the documentation to find out whether an error type is a part of the function signature.

O_o. So on the one hand you don't know if a function will throw an exception and can't rely on the docs, while on the other you don't know if it will return an error code so you should check the docs.

I don't write Go yet, although I look at a fair bit of it. A friend of mine who works a lot in it tells me he was put off at first but basically decided to trust the language's idioms for now. Until I have more personal experience my outlook is: "man, I think I would really miss exception handling" with a smattering of "boy that sure looks more error prone to me."
Game Programming Primer (2012)
Is it ethical to use code while not agreeing to the license it is provided under?
it's kind of impressive this compromise was discovered _at all_. Anyone know the story of how it was? There seems to be a lot of back story before the linked issue begins.

I'm interested in who noticed the compromise, when, and how. Because with open source, noticing the compromise is about the _best_ we can expect from a "worst case".
I learned much of what I know about product marketing from Tien (CEO of Zuora); as this thread demonstrates its hard for a lot of product / developer folks to understand why its such an important part of any non-consumer offering, as so much of customer development culture is focused exclusively on metrics and optimization.

Immodestly I did a presentation on the topic at Heavybit a few years ago for those that are interested in the topic: https://www.heavybit.com/library/video/platform-marketing-wi...
YouTube #SaveYourInternet – Article 13 campaign
Dominic is the same kind of random stranger to most of the people whose codebases he's in.
Wendelstein 7-X plasma video
Those aren't one-off for the same product (full catalog unlimited access); those are pay-per-use instead of pay-per-calendar-month
Elon Musk Admits Everyone Was Right About Tesla
Gladstone Institutes Genome Surgery
You're right about a significant proportion of sales presentations, but not everybody in a company being presented to is necessarily fully in agreement about the scale and imminence of that need.

The "insight sale" format - where you attempt to show something very big is happening to their industry which you just happen to have part of the solution for - works in some situations better than others. It's a much more interesting presentation at an industry event than simply talking about your product. It's good at persuading a sceptical senior management that the underlings who want to implement your solution are focused on the right priorities. It can be a snappy introduction to the "??? -> Profit" part of the presentation with the more relevant benefits and technical details when your presentation is targeted at more motivated customers (but it's not a substitute for nailing that bit and if you're still waffling on a high level about subscription economies when their tech team wants to understand why integrating your service is better than rolling their own, you probably screwed up)

Sure, on the many occasions where the potential client is going to have a far more specific reason why they want a subscription model and why a third party SaaS solution might be the most efficient way for them to implement it you can do a lot better than the generic example material in the article. A presentation/discussion which opens by understanding the client's specific Big Relevant Changes will be further ahead than one with a cool buzzword and examples as generic as Dollar Shave Club and IBM. But the killer bit isn't the buzzword or trend line, but emphasising that there are potential losers and winners (in that order) from business decisions related to buying your product, and not taking for granted that the client has already figured that bit out.

Bonus points for being able to amaze them with a stat when you switch from talking about losers to talking about winners (I bet Zuora's full client presentations have some compelling and market-specific figures showing client's sales revenue growth after switching billing model)
That’s assuming those are the alternatives. If the alternative is instead to show you something you’ve already ordered or nothing, the odds of you ordering again if you see the thing you’ve ordered already are small, but nonzero.
> Rust's trait system does the heavy lifting for enabling this operator

Are you sure? I thought that try! was a simple macro: https://doc.rust-lang.org/src/core/macros.rs.html#299
Developing chatbots for financial services companies
Explain how you would be able to evaluate the trustworthiness of a person asking to transfer ownership to.