skysight-inc/HackerNews huggingface dataset:
> However, 22 year old me would have looked at those things and run away. If we make it so that you have to understand programming to even start, then we take something open and enabling, and place it back in the hands of those who are already privileged.

I am not sure I understand what exactly the argument is (as is often the case for me when feminist concepts of power, enablement, and so on are involved).

Is she talking about hobbyists (someone who just want to play with technology and make a website for themselves) or people who want to enter web development as a career?

I would expect hobbyists to have enough time and curiosity to be able to start with the basics. There is also nothing preventing hobbyists from building their sites with pure HTML and CSS. These web technologies still work today just as great as they did 20 years ago. And there is no pressure from the lists of required skills on job boards.

If she is talking about people who already know that they want to get into professional web development just starting from scratch, then they have all the motivation in the world, numerous tutorials, online courses, and bootcamps. They have different goals than hobbyists, they need quick results geared towards job requirements. (Although I am having hard time imagining a person who would want to get into professional web development without going through the hobbyist stage first).

The "something open and enabling" argument makes total sense to me only in the context of hobbyist web development. It’s a wonderful thing that everyone who so wishes can learn how to build and publish a website and participate in the global sharing of ideas. But why is this criterion even mentioned in the context of professional web development? Is it incumbent on a profession to be "open and enabling" for everybody?

And what is she arguing as a solution, exactly? Stop using CSS-in-JS or JavaScript frameworks for professional development, because newcomers may find them hard to understand? Even though these technologies may be perfectly suitable for many situations? Why?
I find it amazing we have to repeat this again and again. People act like this never happened.

I'm really wondering what's the cognitive mechanism that allows people to just discard enormous informations like this one.
I've been shopping with them for nearly 8 years, haven't had that many issues.

I heard this warehouse only accounted for a small percentage of their capacity but I guess it's a big blow for customers who were primarily served from that location
Transactional memory doesn't help you here. Everything will be cleared, including whatever you were trying to do with the secret.
Can Bezos get a US court to impound the photos? Something akin to the UK 'super injunction'?

That would make being caught leaking the photos perjury. The stakes are so high that AMI might well not dare to do that.

Its easy to imagine that Bezos, whatever he is saying publicly, is also getting excellent legal consul privately and that two can play at the games that AMI is so infamous for.
Yes.

Humans are fallible. That is an immutable truth.

There’s no great wisdom in relying on human discipline alone to produce reliable software.
That is a lot of buzzwords.

I don't really trust Helm to do anything that's actually useful in the long term. It will get something running very quickly, but whether or not it's maintainable, I am yet to be sure of. For example, very early on, I installed the helm chart for prometheus. Now I want it to live in the kube-system namespace because I am tired of seeing its resources in the default namespace. For some reason, I highly doubt that changing values.yaml to change the namespace is going to do anything other than give me a fresh instance of prometheus running in another namespace. It's not going to use the already allocated storage volume to satisfy the persistent volume claim in the new namespace. It's not going to update the other stuff in my cluster to refer to prometheus-pushgateway.kube-system.svc.cluster.local. It's not going to update my Grafana dashboards to refer to the new namespace, even though I installed Grafana with Helm! So what did I really gain? Helm isn't giving me the ability to manage the long-term lifecycle of third-party software. It just explodes some API objects all over my cluster and lets me delete most of them automatically. That's all it does.

I get why Helm is popular. You can get some piece of software running in Kubernetes with minimal effort. I would have never successfully made some random complex piece of software work correctly in Kubernetes on day 1, especially using something that assumes you deeply understand the core API objects like kustomize does. What that boils down to is that Helm doesn't go far enough, and in its current state, just encourages people to make mistakes early.
About annotations, a new proposal has been submitted a few days ago. It's not the first time so I don't want to be too optimistic, but it looks great.

https://wiki.php.net/rfc/annotations_v2
Waitrose do pretty well where I am (and Ocado dont cover my area). Although they dont have an app so you have to use the website.
The OP you asked worked at an Investment Bank. This is not exactly the pinnacle of algo trading (at least in US/Europe) as they are hampered by regulations about prop trading etc.

I work at a big quant/algo prop trading firm. The reason you can't compete is that most successful algorithmic trading relies on economy of scale.

Yes capital to trade with is one aspect, but more importantly is the amount of knowledge needed to carry this off. Building a safe, robust strategy is hard even if you have a working idea.

It requires probably top 1% knowledge in distributed systems, Linux admin, networking, database administration, security and more.
The chance that any individual (or even team of less than 5 people) has those skills covered in addition to the quantitative know how to actually come up with a strategy is quite small.

There is a reason why algo trading is dominated by large firms. Working at somebody like Citadel or Optiver, if you say "oh damn, there's this weird effect on our server. When x happens I get a period of noticeable slowdown" they will turn around and say "Ok, well John here is a core dev on the Linux kernel, he'll come to your desk and help you figure it out".

Imagine that but with every problem pretty much. Running trading strategies you will hit problems. The level of work to overcome all of them satisfactorily whilst not degrading your edge is so much work for an individual I suspect you would burn out pretty sharply.
Oh that sounds great. Apparently they also have a real Buran prototype, for anyone that's still not convinced.

I'm surprised that Lufthansa would just donate them such a complete looking aircraft though. Apparently the 747-200 was still in production until 1991, and Lufthansa donated it in early 2002. They were in regular passenger use until 2016 and there are still a handful being used as cargo jets - and Lufthansa had an air cargo subsidiary that used 747-200s at the time.
A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software
Gladly when I moved to Scandinavia I was very interested in pickup and NLP. To my surprise, what I discovered is that lack of social "practice" makes people very susceptible to "sales tricks".

So what I found out is that most women in Scandinavia preached one thing, but had no problem throwing their principals out the gate just to get what they want. Wich in term point me to the conclusion that they have urges that the social system does not satisfy.

But here is the funny thing that makes Scandinavians truly unique. It is possible to have sex with someone, and have a great time, only for them to completely avoid you if they cross you randomly on the street.
obviously, its a rather abstract concept thats very subjective at best, i dont suppose Hitler saw himself as evil
Very long comment for something you don't care about!

2 things that I find interesting are.

A. Humans are often seen as the weak link, and cause of accidents. That obviously didn't happen here.

B. As the article points out, humans would probably have smelt the smoke, and maybe the fire wouldn't have been so damaging, a human work force has useful soft benefits.

So no it isn't a human tragedy, but its a useful case study.
This advice seems nice but I assume you wrote it as a response to the article title.

The article itself is actually only doing TLS 1.3 downgrade in passing, and probably only because if they don't some people will say TLS 1.3 fixes this magically (it couldn't).

It's a Bleichenbacher Oracle, again. So the effect is you get the server to do RSA operations for you. You don't learn their private key, but the server uses it and you eavesdrop on the process.

A TLS 1.3 ONLY server isn't vulnerable (no Oracle) and a client isn't vulnerable even in TLS 1.2 if it refuses to use RSA completely. But unlike your suggestion to disable much older versions, those options aren't very practical today.
I was surprised to read that as well. I have gzip compression "turned on" in all of the nginx servers I administered. Didn't even know it could be an attack vector.

https://www.acunetix.com/vulnerabilities/web/crime-ssl-tls-a...
"Most McDonald’s restaurants are operated by franchisees and its goods are bought from a wide range of suppliers, so three or four layers may separate the McDonald’s head office and the cattle-rancher who supplies the firm’s beef."

Really? It used to be that every customer-facing element (including all consumables) had to be purchased from Martin-Brower, McD's own distribution arm.
In the context of what you're doing with PHP, that one-fits-all data structure is all you need. I sincerely doubt you had hurdles in your career because of PHP's array :)

However, let's prove once more that languages evolve: http://php.net/manual/en/book.ds.php

The "classic" you're referring to is far from something objective. There will always be problems with languages. That's why we have the human factor who is supposed to be intelligent and work around the apparent issues and make the computer do useful work despite apparent tool glitches.

Sadly, we're just creating better idiots who are only getting better at whining.
Of course. That's the only reason to invent languages: to take care of stuff people are not good taking care of, and move the work to the computer, allowing us to work on the level that we're good at taking care of.

Else we'd all be using assembly.

There's absolutely no pride or glory in doing things nicely and securely that the computer could have automated in the first place.

Anything the language allows that it could refuse while allowing devs to express the same features, and that results in bugs is a mistake in the language (e.g. the sorry state of strings in C).
Yep exactly.
use an IDE
Rich people will be fine, I suspect. The urgency will hit when rich people in powerful nations feel it, by which time poor people in a lot of nations will have had a pretty miserable time. I suspect that the steps then taken will involve protecting rich people's lifestyles, rather than really doing anything about the problem, while poor people's lifestyles adapt to the new conditions (and indeed, many of them die).
-> What other web platforms can do this?
Kinda all Java Webstuff is capable of doing this (Eg. installing Plugins in Atlassian products)
Cell companies can more or less directly translate $ = bandwidth with no meaningful limit.

You have effectively unlimited RF bandwidth assuming ever smaller cell locations. Bluetooth is the equivalent of a new cell in under every 10 meters. And that’s with a tiny slice of the RF spectrum.
I appreciate that "robotic warehouse" makes for a good headline but I just wanted to point out that only the part the retrieves the goods from the shelves is robotic. Humans are still packing and dispatching the orders.

It's amazing how many people in this thread are looking at the headline and jumping to the conclusion that there were no humans present at all.
This isn't strictly true. I know in South London that Tesco orders are not "picked from local stores by hand" - they're packed in and dispatched from the same enormous warehouses and depots that supply the stores, and there's some degree of automation involved (although not to the same level of Ocado.)
Seems useful, but it’s yet another of those frameworks that introduce spurious CLI tools for „initializing“ the project by generating dozens of files that one either doesn’t need at all or has to replace anyway. I don’t need a tool to generate CSS boilerplate, I can just copy it from somewhere myself if I decide to use external CSS.

One of the reasons PHP was appealing initially was that all this boilerplate and extra files were unnecessary, you just wrote something in the .php file (in Apache’s hierarchy) and could load the web page. As problematic as that was, it let you focus on getting stuff done instead of overwhelming you with ad hoc conventions and dozens of files with no immediate use.

Go is a language with sane defaults and little boilerplate. It would benefit from a web framework with similar principles.
My 'local' credit union does. They dont sell mortgages/loans to anyone and keep them 100% in house. Its why even after moving to Germany I keep that bank for US assets. They just dont seem as criminally motivated as other banks.
Agreed. Bezos gained more respect (in my eyes, and I'm delighted to see a lot of others too!) by the way he's handling this than anything that could be lost by the "reveals". (My own carefactor is zero).

In fact offering the full text of the extortion attempt shows true courage, and at the same time claims back all the power the items might have had.

It just makes me despise these dickheads even more and totally root (the Australian version) for Bezos - go get them!!

I'm super interested in what happens next.
Show HN: Sorts Evernotes, Automatically
That's true but I'd say it's less about appearing lowly educated than about reinforcing your foreign-ness.

A lot of Germans are to varying degrees prejudiced against foreigners, especially if you're brown or can be read as Turkish/Arabic or Eastern European. If you pass as white European you're more likely to be read as educated but still learning the language whereas otherwise your language problems are more likely to be attributed to a general lack of intelligence and education.

I'm not saying all Germans think this but there are certain cultural clichés around uneducated "southerners" (generally Italy, Greece, Turkey but also Arabs and everything West of France) and Eastern Europeans speaking broken German the same way Americans have stereotypes about people speaking AAVE.

In other words broken German has a cultural stigma but depending on how you are read you may be less impacted by it. If your career is going to involve speaking German a lot, it's probably advantageous to speak it well.
Even if that happens, people will now blame AMI for any published or leaked photos that fit the description, regardless of their denial.
I'm open to the possibility if could describe that system in concrete terms which wouldn't implicitly favor the powerful.
I love Go, for many situations, but definitely not for a typical user facing website.

The community seems bent on the whole "all you need is net/http", but that just isn't practical in modern web development. People like ORMs, easy to handle html forms, security as a default, easy session/cookie handling etc. In the end, web developers want ease of life.

Go is a great language for many things, but if it's going to take on the web at large (outside of HTTP APIs), the community needs to grow out of this "net/http or nothing" approach.

There is some hope, some frameworks like https://gobuffalo.io/en are showing up, but the Go ecosystem is dying for a Rails/Django solution.
Perhaps it's time to force financial companies like this to "fail open".

Ie. If their computer systems are down and can't find a reason to deny a transaction within 5 seconds, then the transaction is allowed to succeed.

It can be reconciled later, and the consumer can still be held liable for spending beyond their limits.
He's comparing a language (w/ extensive standard library) with a web application framework.
They're not asking for money
If someone wants to trade their employer's secrets, there are MUCH easier ways to do so than creating their own side business. This looks like a straw-man argument.
You say it exactly as you wrote, thankfully we have stopped translating that kind of term. Translations are only found at the extreme edges of the formality spectrum: in very formal writing, you use whatever is defined in the glossary of your organisation, and informal chitchat might occasionally be spiced up with ridiculous translations spontaneously made up on the spot.

Even when I was a child, with no or very little education in English under my belt, the chapter "E/A-Anweisungen" in my trusty GW-BASIC manual confused me to no end. I'm pretty sure that I would have grasped the meaning of "IO".

Where those terms still rule unchallenged is in MS Excel formulas. All the function names are translated. When you are a native speaker but used to programming vocabulary, Excel expressions read like hieroglyphics: you can easily identify most of the symbols, but the semantics remain unknown.
>>It's certainly a filter.

Absence of that filter is the reason almost all of the programming crowd today is locked into advanced beginner mode all life.
Hi, Jelastic founder is here. Thank you for mentioning our product. Vertical scaling is not a marketing :), it's reality.

Jelastic public cloud providers offer automatic vertical scaling with pay-as-you-use billing model (please do not confuse with pay-as-you-go). Except this our team helps related technologies to become more elastic, for example Java https://jelastic.com/blog/elastic-jvm-vertical-scaling/

Regarding the docker support, there are two flavors inside Jelastic:
1) Native Docker Engine - you can create a dedicated container engine for your project in the same way as you do on any IaaS today, for example “How to run Docker Swarm” https://jelastic.com/blog/docker-swarm-auto-clustering-and-s.... An advantage here is the vertical scaling feature. In Jelastic unused resources will not be considered as paid while at any other cloud provider you will have to pay for the VM resource limits.

2) Enhanced System Containers based on Dockerfile - there is no need to provision a dedicated docker engine or swarm. This solution provides even better density, elasticity, multi-tenancy and security, more advanced integration with UI and PaaS features set compared to #1. It supports multiple processes inside a single container, you can get an SSH access and use all standard tools for app deployment, write to local filesystem, use multicast and so on. It supports traditional or legacy apps while images can be prepared in the same familiar Dockefile format. Unfortunately it's not fully compatible with Native Docker Engine due to specifics limitations/requirements of docker technology itself.

Thank you for pointing out this issue. In the upcoming release we will clarify the difference between two and provide more tips which one is better to use in various cases.
That's not a word :P

You probably mean Blinklicht(er), actually used to describe flashing lights.
Adblock blocks all the buy now buttons..
If you have 2 million academic papers in PDF format and the deliverable is a table of p-score by school. HTML is a compromise between ease of use and keeping metadata in the document.

That's why we tried UML to model the relationships of the data as distinct from design choices, like the (x, y) of the image on the third slide. Either party likes stripping all the metadata from the other, so HTML is now the standard so we can share inefficient, festering hunks of shit over the internet.
That’s why one of the Amazons is made illegal — so that individuals don’t have to make this choice. That’s what regulation is for.
From my limited experience it seems the game is less about "predicting" price - which seems to be impossible, and more about placing strategic bets that will give you a positive return over a long period of time.
BBC open-sourced tools to make visuals with rstats and ggplot
What happens often here is that a word has a clear gender that just feels right to basically all germans. But an alternative gender gets used by a group that does not trust its language feel and instead relies on logic to derive the gender. Blog is a good example: It's obviously "Der Blog", but because some people think "blog is short for weblog, and log is neutral" they use "das Blog", though that just sounds wrong to everyone else.

But you're right: It's a consensus process and with time words can get completely integrated and then tend to have only one gender.
The Final Encyclopedia?
I was there just before lunch. I spoke with the guy who put together the PiCade they had out for demo. He was very helpful. The one thing that surprised me was that so many of the kits they had on sale require soldering. I would have thought that if you’re going for a more general audience, that’d be something to avoid. But I really don’t have anything negative to say about the place. Nice space, good inventory, pleasant staff.
I can see the general strategy there though: it's easier to be excessively stringent then improve and relax through iteration and emergent discovery of use cases than the other way around. E.g accessing the filesystem used to be downright impossible in the MAS, preventing apps like Coda or DaisyDisk from even existing due to stringent sandboxing, but now it's perfectly possible.
> why can't I filter to MotoGP or what have you?

I find Google actually does a good job at curating the news for me once I've told it what my interests were. Additionally, it seems to automatically pick up my new interests automatically - for instance I get news updates on the television shows I like, for sports - it's pretty much all the teams and sports I follow. Sometimes if I'm researching a topic, I'll start getting news on those topics as well...sometimes months later even if something newsworthy happened. Whether it's getting that from search or google analytics..I'm really not sure but I can tell you I really enjoy it.
The desktop/webapp version has notes, and they're even pretty good. The mobile app doesn't, and IMO is mostly useful for rehearsing.
To Be or to Do?
its really not...
cache is the equivalent to /tmp

check permissions there sometimes.
These things are very generic and apply to both lua and asp.

Invisible characters are a problem in every language, configuration file, file period, trying to suggest that its specific to php is just silly.
Worst are the ones that add protection on their pdfs so I can't highlight and add notes to the datasheet. What are they afraid of? In any case, here's how to bypass that (quoting myself): https://news.ycombinator.com/item?id=16448044
It's also sometimes fun to play with this kind of prejudice: I'm from the UK, but if I'm having a bad language day, a bad hair day, or I'm wearing my work clothes, I get some people being very unfriendly, often rude, because I'm clearly Eastern European. As soon as it comes up that I'm from the UK, the reactions totally change.
Most of Stanisław Lem's work, starting with "The Cyberiad". Some of it may be 70 years old now but universal books don't age, really. For English readers, I strongly recommend Kandel's translations.
> The syntactic mistake of XSLT was writing it in XML, XPath was a redeeming feature. Imagine if XPath was also written in XML...

Yes, I didn't mean to imply that XPath itself is bad (although it also has to handle XML quirks like element/attribute/text, etc.).

Rather that the reason to write XSLT as XML in the first place is that it's machine readable, we can mix and match elements from different vocabularies, etc. yet most of the heavy lifting ends up as opaque string attributes :(

PS: I've done a few projects which make heavy use of jq; it's really nice, but as you say it's more of a pipeline.