skysight-inc/HackerNews huggingface dataset:
> The centralized naming scheme is to blame here

It would have been better just to use URLs, so if you see "npm install https://github.com/dominictarr/event-stream" then it's clear you're trusting "github.com".

(Yes, DNS is centralised. That can be fixed independently.)
That isn't so much your absence being noticed/cared about directly, though, as it is that your lack of carrying-out some expected duty of yours is impugning upon someone else's duties.

I don't find it very cheering to think that I'd only be discovered dead in my home because someone got angry that they couldn't fit any more mail in my mailbox, and complained to their manager about it. (Or because someone got grossed out by the scent of decay coming from my apartment, or because I never paid my bills and the repossessors attempted to visit me, etc.)

It's quite different in kind from even the most casual positive memory, e.g. a barista who makes note of the fact that a customer who they used to see every day at 3PM, isn't coming in any more.
> Agree, except that windows is a clearly de-emphasized product.

huh? Windows licensing revenue is up 15% YoY

Agree, it no longer is the marquee product brand for Microsoft but every shipping product at the heart is still based around Windows (Xbox, Surface, HoloLens, Azure).
Exactly. That is why Rust does so many more things, but Go compiles so fast.

Even with two wildly different approaches to language design, each has their place, and their own set of drawbacks.
Lookup up the 'z pinch' or more generally 'pinch machines'

I suspect that or a similar methodology is in use.
I don't see how this problem is limited to just NPM. This is a problem of any package manager. Or any software distribution system in general, really. Look at all the malware found on the Play Store and the Apple Store.

Unless you're willing to meticulously scrape through every bit of code you work with you're at risk. Even if you can, what about the OS software? How about the software running on the chipset? This is exactly why no one in their right mind should be advocating for electronic voting. There's simply no way to mitigate this problem completely.
Sometimes I feel that it can be a lucrative trap to become invested in a single person, and then accumulate expectations that far outweigh the responsible obligations of any friendship.

As I have gotten older, a pattern that is working much better for me is the campfire model - I just try to keep a metaphorical campfire going, for people traveling through this life to stop and warm themselves upon while I tend it. I cannot know which direction people are traveling from, or to, or how long their journey has been or will be. But all people need to warm their calloused hands and feet, and I can keep this fire with a bed of rosy coals.

Sometimes someone will stop at my fire and warm themselves without my ever having paid attention, but to them it may have meant all the difference in the world. By keeping this obligation in mind, to simply expect people to need a place to sit a spell, I can at least believe I am helping.

The campfire is a nice way for me to remember we're all suffering, that not a one of us is unique to loneliness. Because sometimes that person who sits down at your fire is the person you have been waiting for, and only by making a seat for them were you able to ever meet.
Cyber Monday Best VPN and Hosting Deals – BestLeap
"For years, the payments went out of the woman's bank account. Nobody batted an eyelid. Bills were paid. And life went on as normal in the quiet neighborhood of Pontiac, Michigan. Neighbors didn't notice anything unusual. The woman traveled a lot, they said, and kept to herself. One of them mowed her grass to keep things looking tidy.
At some point, her bank account ran dry."

https://www.cnn.com/2014/03/07/us/michigan-mummified-body-fo...
> Never have I seen evidence of a lasting consumer-hostile monopoly that existed without the involvement of the State. As far as I can tell, natural monopolies are a myth grown from mistaken economic theory.

I disagree, not with your premise but with this conclusion, because there's also little evidence of monopolies that broke down without involvement from the state. One also has to consider industries and states are all different.

In a country like the US with a codified anti-monopoly law, yeah, you need collusion with the state to turn the blind eye. But precisely cause this anti-monopoly law exists, it's that monopolies HAVE been broken down, by the state.

There's industries like software where a random developer can create something that grows into a huge corporation, or a OSS project that completely changes the industry, etc. because the cost of entry is so low. But there's also industries that are ridiculously hard to get into and require massive investments that only other big companies can make. The free market IS rich-gets-richer territory.
Let's say the company gets acquired for $20M. Is it still possible for the other 90% to make $0? Or is the preference amount exactly equal to the invested amount?
If you've got board control after the Series A and are profitable, they have zero leverage over your future decisions.
There is no way it can be stopped. Most of the development is secret and much further along than people believe. I think we need to regain community control over those who possess this technology - it will be deployed whether we like it or not. And, even more frightening, whoever deploys it first wins, and it will be so effective that it can no longer be defeated. This issue is more serious than global warming, jobs, healthcare, or World War 3 - it is about having any freedoms beyond those provided by whoever deploys these monitoring devices.
> walking into a new Forth application is potentially like walking into a new language

This is how walking into an application in any language (but yes especially Forth and Lisp(s)) is supposed to be but most are doing it wrong by repeating a lot of boilerplate.
Shallow learning in the form of a quick, correct grasp of almost anything new (and interesting) is easier to me now than 25 years ago because of good foundational skills and broad industrial experience. On the other hand, deep focus on something alien for a long and sustained period is a no go: I have not the time, not the patience, not the need to find my place in life at this stage, so I can just take what helps me directly and move on.
For Captcha, you are pointing out the one or several pictures that doesn't belong to certain category, so that seems to me the service needs to know the answer beforehand, doesn't it? It could be used for QA purpose though.
But wouldn't that look like:

var s Settings
if s, err := load_settings(); err != nil {
s = defaults()
}

Where is the unhandled error?
I always just figured Wile E. Coyote was on staff at the time and had his ACME catalog handy.
Right, you need a remedy for the inherent insecurity of credit cards. Is it always a charge back though? In other words, are merchants eating all the costs of fraudulent credit card transactions? I guess either way the cost really gets passed on to us consumers in the end.
From Amazon's perspective, it doesn't have to work for you; it has to work on average.
I didn't say it was necessarily a good point, just that it was their point.
Google, Amazon and Apple to an extend are all making money by exploiting the internet community spirit.

Every time Amazon sends an email for you to “review” the product, they are asking for free labour :-)

Same with google here.
Today’s JavaScript trash fire and pile on
How are you envision using it.
That is a terrible regulation then, if it is less safe than the current situation that keeps getting people sick, we need to do better than that.
Forth can do real time. That does require a bit more kernel.
This was, from the eyes of npm Inc. and everyone else a completely legitimate ownership transfer.

There was a "human error" (Domenic trusting the wrong person) that was completely unpreventable by technological means.

There was no hijacking involved.
I was going to write about how often I saw the res, _ := … error handling punt and wanted to confirm that lack of even a warning but https://play.golang.org/ really shows how deep the cognitive dissonance goes. The very first example many people are going to see doesn't even acknowledge the possibility of error handling.

That would be safe in a language which uses exceptions or something similar or in a language where the type checker forces you to do something with the return value but Go has this odd mix of learning from C and ignoring its most important lessons and treats ignoring errors as less of a problem than an unused import. Simply having an implied if-error-than-panic check any time someone assigns a value which is never checked would go a long way towards turning subtle hard-to-debug failures-at-a-distance into clear failures at the source.

Edit: none of the examples on the golang.org homepage handle errors. You appear to have to go into the fourth section of the language tour to find error handling first being discussed 19 pages into the ”Methods and interfaces” section to find error handling discussed at all and even after that point I only saw a couple of subsequent lessons where this looked like a thing which every working developer should be routinely handling (i.e. the web crawler acknowledges that fetching network resources can fail).
It's weird. It really looks like Steve Jobs kept the vision clear and what we're seeing now are his people cargo-culting what they saw him do.

I don't know much about Steve Jobs, but I imagine he cared more about making a great product than optimizing earnings. I also think he cared more about making a great product than about forced innovation

And I think that's different now, and ironically that's one of the things holding the share price back.
You're being pedantic. You know I'm using the term "listening device" figuratively. I'm explaining why people refer to it as "spyware". There's nothing ideological about that.

>>But in all seriousness, I imagine you're talking about the auditability aspect of GNU Taler. GNU Taler only allows auditing of people receiving money

So Taler is designed to not provide people with privacy of how much they receive. You can try to justify it as much as you want, but it doesn't change the fact that its privacy is deliberately handicapped to allow government surveillance.

>>Bitcoin (which I assume you are a proponent of)

Bitcoin has terrible privacy. There are efforts to provide real privacy in digital/crypto currency. Taler is not one of them. In fact, limiting the financial privacy people have is one of its design goals.
The question isn't whether people will notice if you die. It's whether people will notice if something bad happens. It's not a euphemism:

> One in nine didn't feel like they had anyone in their lives who they could rely on in a crisis.

It's entirely unsurprising that lonely people think other people won't notice if they're in a crisis -- that's what being lonely is.

There's a song called "How Do You Get That Lonely?", about a boy who committed suicide, in which the last lines of the chorus are:

How do you feel so empty
you want to let it all go
How do you get that lonely
and nobody know

But this has never made any sense to me -- surely, if the problem is that you're so lonely that the best option available to you is killing yourself, it's to be expected that other people weren't familiar with your situation.
> The woman's mummified body was sitting in the back seat of her car, parked in the garage. The key was halfway in the ignition.

Truly macabre.
Half of All Phishing Sites Now Have the Padlock
I’d argue that even in NYC, people associate less value with equity compensation. But, when most of the multi-billion exits have happened in SV, isn’t this entirely justifiable?
> "not the need to find my place in life at this stage,"

I appreciated this perspective. My primary motivation for pursuing deep work is due to an insecurity with my current ability to be useful to the economy. If this was validated or I solved the mental part of it, I suspect the anxiety would lessen a bit.
The "stock market" as most people imagine it has two major features IMO:

1) The "distributed ownership" bit – purchase shares representing fractional ownership of something.

2) The "collaborative price finding" bit – use liquidity and misc market forces to find the market price of most things in a fast, continuous, and least painful way.

You're talking about 1, which yes, totally irrelevant. They're talking about 2, which is very relevant.

I'll concede that if you want to be pedantic about semantics, "market" is better than "stock market", but would counter that people think of a "market" as a place where you go to buy lettuce, rather than a conceptual price-finding environment. The stock market concept better matches this abstraction in laypeople's minds.
I'd like NASA to develop reusable, landable rockets rather than a private company, and to be answerable to the American people.
Remember that you don't need to use it often precisely because every party knows that you have that option. So people don't try to scam you because they know it won't work. They know it is a solved problem, a means of security they can't breach. They know that if they misbehave, the other party won't be harmed (they'll get their money back, if harming them was their intention) and they themselves will be punished instead.
Float Exposed
The problem is that this does pretend it is "already fixed": the attitude that we have legal mechanisms in place to try to make "users do this thing that will never ever ever actually be secure" somehow legally protected means that people think it should be ok and keep doing it.

I mean, seriously: why would the law make it so illegal to allow passwords to be dumped, with technical people coming out saying "these passwords might protect something really important as the user is using the same password on more than one thing", if that wasn't at all how you were supposed to use passwords?

Imagine if the opposite were the case: if banks were not liable for any money lost by a user if it could be shown that the user was using their banking password for any other service. That would be a very different conceptualization of the risks and how passwords work, and frankly "fits reality" better than what people seem to want out of this situation (which is the exact opposite of that) :(.

If you don't want to claim that the issue is "already fixed" by "a bunch of websites that know what they are doing hash passwords and hopefully never have code bugs or people tapping their web servers or employees who can modify the code or debug logs that dump POST requests accessible to anyone or any other number of ways this password could be leaked because you sent it to this company's web server (which quite often might have used some SSL termination from some third party and so who knows how many people have access to your password!)", we might come up with actual solutions (or maybe spend the effort to educate users, as right now I don't know anyone who really tries).
How many people here seriously thought “Gee, I was trusting Dominic, but now he's broken my trust”?

So who were you trusting?

What's the risk for Scuttlebutt, Dat and the Knight Foundation? Dominic will be the only maintainer of a project and he'll foolishly hand over maintainership to a government spook?
Publicly traded, perhaps. I'm pretty sure PetroChina and Aramco are "valued" at more than Microsoft is, by the public.
Woman's Dead Body Lies in Flat for 35 Years

https://www.foxnews.com/story/womans-dead-body-lies-in-flat-...
And then attackers would just wait that N days before pushing exploits.
As far as I can tell, its an intentional modification (makes the show look "better"), and I only usually see it on the more expensive, newer home TVs. Whats your TV model/brand?
Google is being vague with disclosure in early real-world Duplex calls
As for structures...

It all depends on what words you want to define and whether they must operate on the stack or not.

Words do not have to always work from stack.

High complexity is entirely possible. I have seen that done too.
Can you elaborate? I mean a plain CentOS server running SFTP, S3FS seems about as set and forget as it gets.

And each? Surely chrooting users would let you consolidate all of those servers into one (or one cluster for HA I suppose).
The issue is: $2.99 and your problem isn't really solved.

It would be worth $99 if it was a comprehensive sweep of all major social networks and search engines, with some AI to look at not just obvious F words, but also something that might be bad in context. And also embarrassing pictures etc.

Something like an 'anti virus' or 'spam filter' for your online profile. It isn't perfect but you feel a lot more secure with one installed.
You could measure the entropy of single lines and determine if the entropy is high. Although you'd probably get a lot of false positive.
> NPM is one of the reasons we've moved to Go for our server side code.

It's one of the reasons, but far from the only reason. With Go, Python, Rust, Swift... is there any reason to use Javascript on the backend? Most attempts I see to "share" code between the browser and the server end up adding needless layers of abstraction and complexity.
Me neither! I'm going to try to get it set up on my Chromebook running crouton.
I looked at what I could about the courses on the "Developer" path (mostly just the titles of the different sections of each course), and there's obviously a very heavy focus on AWS ML services. Also my general impression is that the courses are too short to actually cover in depth what they say they're covering. Probably good for an overview.
I was standing next to one of the engineers who wrote the software for the landing while we were watching on the big screen at Twitter. A few moments after it landed he announced that his code worked and was being deleted to make room for surface operations code.
I remember typing in a whole game from COMPUTE or maybe another magazine on my Apple IIe. It almost worked but was slightly buggy. We went over line by line making sure we didn't have a syntax error. Never found it- I think it was published buggy :(
He is just grumpy and doesn't like the term, for whatever reason.
$200 a month is nothing for a business. Anything that we don't have to manage ourselves or worry about reliability, scalability, and we can just use our AWS business support plan is a win.
> NASA did start to develop a space pen, but the costs soon spiraled and when the agency came up against public opposition the astronauts reverted back to using pencils.

http://www.physics.org/facts/apollo-nasa-pen.asp
Do you even know what a natural monopoly is? Have you ever seen anywhere in the world where the business of a natural monopoly is actually not a monopoly? Is there anywhere in the world where a can buy a house and can have 5 different companies with 5 different sets of pipes attached to my house in fierce competition with each other offering me water service? I would really like to check out such a place.

This is one of the things that is really annoying about economics. Because the result of economics depends on money, even the simplest most obvious things will be disputed. In physics nobody will seriously say that gravity on Earth makes things fly up, but boy in economics there will be an endless supply of serious scholars writing books and articles and earnestly arguing on TV shows that up is down and down is up.

Because of course if you convince people that up is down and down is up in economics, you can get really rich. If you can convince the public that there is no such thing as a natural monopoly, there will still be natural monopolies but they won't be treated as such by the government, and then you have a license to print money.
Look at evidence planting, lying in police reports, refusal to prosecute those bad apples.
Easy Products to Make and Sell and Why Do This?
Maybe consumers can rise up to demand the change if the government doesn't.

Boycott all growers who do not test their waters. If one farm can start testing and do marketing around that and consumers show a preference, the rest will follow.
Want to redirect output? Redefine a word...
Ideas and perspectives you won’t find anywhere else – Join the future of writing
FTPS is FTP over TLS and is pretty much dead. Any time someone says SFTP it's SSH.
The problem with Reason is non-automatic understanding 3rd party Javascript codebase. It's the pain to implement correct type to use in Reason program with existing JS codebase.
Actually in such a case Domenic would have transferred the ownership of the package anyway, probably retaining some power in the process, but the major harm would have been done already.
...but what they are doing will never actually be secure no matter how hard we all cover our ears and scream into the void so we don't hear it when they keep getting screwed over and over again. We can't actually make that secure no matter how many passwords we hash, we can only attempt to mitigate some fraction of the eventual carnage.

What we need to be doing is spending our time either on a massive education campaign or on technological solutions (like challenge response passwords, which HTTP never added even while every other old protocol was carefully adapting to get this right), not entrenching the position that users should be allowed to do the thing that will never ever ever be secure by putting up laws that somehow make it look sane.

The point here isn't "shame on the users": the point here is "shame on developers and lawmakers for working against users by encouraging them to do this horribly insecure thing rather than doing something sane". Seriously: how about we instead make a law (with a GDRP-like lead up of multiple years to "get ready for it") which says that "handling passwords at all isn't legal, even in transit (whether on a third-party SSL termination service or on your own servers)", and lets see how many mere hours it suddenly takes the Chrome/Firefox teams to come up with a real solution to this problem?
Not really, they didn't take the money to mars, the green papers we created to symbolize value are still hanging on here on earth, on the hands of the people that one way or another helped to create this probe.
Very nice product.

Which lib is used for pdf processing ?

Is epub support in the roadmap ?
Of course congress could amend the constitution, which I understood, but that takes 2/3rd of the states to support it. They can't make a regular law to overturn the supremes, right?
LOL this is what I love about Cloud Guru. 1.75 normally, 2.0 when I'm caffeinated and ready to chug from the firehose.
In my experience, retrieving external data is not the point at which Typescript is useful – it's usually safe to the make the assumption that whatever data you retrieve meets the contract you've already agreed. But it does prevent whole classes of bugs that I found were pretty common in plain JS:

- "This thing was null but you didn't account for this case"
- "You should have a number here but something returned a string"
- "You have made an invisible typo in a property name"
- "You have not handled all possible values in this function"
- "You accessed some data internal to a class that wasn't meant to be changed"

Basically my experience is that is substantially cuts down on the number of stupid bugs that end up in my code. The code completion is also fantastic!