skysight-inc/HackerNews huggingface dataset:
We actually tried this as well. It never made it out of testing. We ended up with copies of data in many places, which was annoying. We duplicated a lot of work for consuming the same events across multiple services and making sure they updated the "projection" the same way.

However a much larger problem was overall bad tooling. Specifically the data storage requirements for an event stream eclipsed our wildest projections. We're talking many terabytes just on our local test nodes.

We tried to remedy this by "compressing" past events into snapshots but the tooling for this doesn't really exist. It was far too common for a few bad events to get into the stream and cause massive chaos. We couldn't find a reasonable solution to rewind and fix past events, and replays took far too long without reliable snapshots.

In the end I was convinced that the whole event driven approach was just a way of building your own "projection" databases on top of a "commit log" which was the event stream.

Keeping record of past events also wasn't nearly as useful as we originally believed. We couldn't think of a single worthwhile use for our past event data that we couldn't just duplicate with an "audit" table and some triggers for data we cared about in a traditional db.

Ironically we ended up tailing the commit log of a traditional db to build our projections. Around that time we all decided it was time to go back to normal RPC between services.
Automation: Last Week Tonight with John Oliver (HBO)
No screenshot on mobile. Where is it?
I saw so many places falling for this fallacy.

Instead on working on the core products, engineers would have "fun" adding more microservices, redundant Kubernetes clusters, istio controllers etc etc. (all of that with less than 10 users).
I think you missed my point. Hard problems are not solved at whiteboards (usually). But the ability to "do whiteboards" seems to correlate with the ability to solve hard problems.
Shouldn't remuneration depend on the amount of work done? Gender issue shouldn't come into it.
https://medium.com/@the_jennitaur/how-to-do-nothing-57e100f5...
Here's a "me too:" I'm working on a small-ish Java application with a couple of former FORTRAN developers. Last Thursday we got a bug report from our integration testers saying that some data from earlier messages was showing up in later, unrelated messages.

Sure thing, the data buffers are objects being re-used with mutation rather than being built from scratch per new message. Immutable objects, or a kind of "FP light" would have made this particular problem impossible.
What are some of the worst academic papers ever published?
While acknowledging the problem mentioned, I still believe in microservices, but in my opinion, it needs to be done with simpler tools. For example, next time, I will use firejail instead of docker.
Doesn't have to be threads, different contexts.
Any task that you can accomplish in a programming language is possible in other languages too, but sometimes it requires less or more effort in another language.

Clio is a micro-services based programming language. Functions you define in Clio are isolated, they capture the outside scope when you define them, this scope is frozen for them, that means they cannot change the outside scope and they will not receive any updates from it. This reduces side effects and allows us to fork the process and be sure all functions return the same results for the provided arguments.

It has a host utility that you can use to host these functions. This host utility forks the process containing these functions. It listens to the port you provide and hosts the functions as microservices. These hosted functions can be imported and used remotely in some other Clio code. The host utility also supports sending event emitters and events over the network and allows to have a reactive stream of data.

I'm writing a remote call protocol specification for Clio, with this protocol you can write your microservices in any other language and import them in your Clio code, or import them in any other language of your choice and use them just like regular functions. In languages supporting asynchronous function calls, you can map these remote functions to a set of data and do your computations simultaneously. Clio runs in the browser too and all these features can be used on the browser.
wrt "Chrome's dominance in test automation", I'd like to point out that the puppeteer team is working on Firefox support.

https://www.npmjs.com/package/puppeteer-firefox
https://aslushnikov.github.io/ispuppeteerfirefoxready/
> The flavor of burnt-out that I had was that of constantly thinking of work-related problems and how to solve them; that feeling went away after a few weeks. Being outside in nature during the workweek and during business hours really helped.

i've found a similar thing after exiting work situations where i'd gotten into a bad rhythm of too-much-thinking-about-the-day-job .

can take a few weeks for your brain to switch. i agree that nature helps, doing physical exercise out in nature can be even better (swimming, jogging, cycling).
Skinny Fresh
D 2.085.0 has been released
I think mathgeek is talking about descent in use not descent in price.
The reason doesn't matter. I can't think of one reason for which the delay in patching justifies not following the 90 day policy.
Sounds useful. It's unfortunate that google voice still isn't available outside North America. I don't know if that is for technical reasons or for (European/Asian) political reasons. But it sure would have been nice to keep separate numbers the same way it's sometimes necessary to keep separate google accounts.
Even though it turned out to be perfectly explainable why this seemingingly random password is used so often, I find it a great opporturnity to self promote my more secure version of passwords:

https://news.ycombinator.com/item?id=19290613
That WaPo article is great. I'd never heard of "Batwing" before. Sounds like it may have been a radiothermal generator reminiscent of those used for long-duration space missions http://large.stanford.edu/courses/2012/ph240/belanger2/ . The Soviets were known to be liberal in their use of small-scale atomic power sources elsewhere.
But maybe they do for Odwalla, Smart water, Dasani, Minute Maid, Vitamin Water, Zico Coconut Water, Nestea, Poweraid... The list goes on.

They are wealthy and have unprecedented massive distribution. They can buy up any new upstarts before they even think about becoming a real competitor. And physical drink distribution is much, much more expensive to scale than something like an software competitor. It took Coca Cola 100 years to build their current network.
Hombre Beef Jerky and Other Sites
Hombre Beef Jerky (https://hombrebeefjerky.com/) is my favorite brand, and there are a few great review sites out there as well for discovering new brands.

https://www.bestbeefjerky.org/
http://jerkyingredients.com/
https://jerkyjawing.com/
https://www.jerkyholic.com/
"Before I learned the art, a punch was just a punch, and a kick, just a kick.
After I learned the art, a punch was no longer a punch, a kick, no longer a kick.
Now that I understand the art, a punch is just a punch and a kick is just a kick."
-- Bruce Lee
How Important Fungal Antigens Test Are
I really enjoy C#, .Net and VS features, but man VS2017 has been broken for a while. Numerous 5 year old bugs either not fixed or coming back. (SQL Schema compare not authenticating, Intellisense not working, compilation errors not displaying in the errors window, winforms designer messing up form layout when opened on high DPI screens, slowness and freezing on medium-sized projects and decent hardware, the list can go on and on)
One problem is that such people will the occasionally not get the job done, but have committed fully to the “part time” part, so they’ll continue a low effort schedule but not hit the targets. Other times they’ll get their parts done but be really har to get a hold of for other employees which might impede them. Sometimes you’ll just have issues with other employees being angry that they seemingly make the same but put in a lot more effort which tanks the moral of all the other employees.
Tons of other issues come up.

It really shouldn’t be difficult to grasp that a full time employee working only part time is a problem, even if they are talented.
Seems like a self-fulfilling prophecy in that scenario. Equal wages is supposed to result in improved production... isn't it?
Unless you're only tracking the pageview events, it's not an additional request. Most of the analytics SDKs use either XHR or Pixel tracking. It's often easier to build up a separate analytics pipeline rather than using the backend server logs.
I had this experience as well, but then I began to realize that, as the codebase got bigger (let's say, for your metaphor, I was exercising more) that I really actually did want unit tests (that I needed more water).

As the codebase gets larger and more complex (and interesting!), I want unit tests to fail because of small changes. That's actually useful feedback, whereas the simple, brutal failure of an integration test is just not granular enough to quickly help me understand the details of the change.
Well, as a lot of developers use OSX, i could see the potential of making code / token / authentication sniffing malware that sniffs out git credentials and other authentication tokens. This could then be used to gain access to backend servers and/or injecting backdoors and malware into software.
Per day if you're drinking a couple literally of water. Basically it would take like 2,000 liters of water to equal a single daily dose of lithium.
>Ahm, Rust is much worse than SPARK in case of covering errors, and its runtime overhead is no less than that of Ada.

Can you elaborate? It's not often that they see valid critiques of Rust on HN, and it would be interesting (to me at least) to add to the data bank.
No, the algorithms are bad as well. Transformed dictionary is hardly any better than dictionary if the transformation isn't unique.

All those annoying rules about required character classes are mainly there to prevent dictionary attacks, but "s3cr3t" is not much of an improvement over "secret" ("s4cr5t" would, because it's not the result of a popular transformation).
They don't need to grandfather anything - it's similar to the GDPR in the sense that you can give companies time to prepare, and then it comes into force.

Prepare the law, give companies 3-5 years to prepare, and after that, anything is fair game. If your company is accepting plaintext passwords there should be something that makes you say "oh we have 3 years to change this, let's hire someone to fix this". If a system is live and in use, it -should- follow some -minimal- standards for security.

That doesn't preclude your data breach fine idea - that'd be useful for more advanced security situations that can't be predicted (as you said, based on expert opinions).

But something as basic as "you're not allowed to pretend it's 2FA if it's just password + questions" or "you're not allowed to store passwords in plaintext", that sort of thing should be the minimal baseline that companies should have to adhere to, surely.
It's funny because I had one of these I put in my bathroom above the toilet paper to resupply bulk orders of cottonelle and wet wipes. I took it down after 2 months.

I like that it was smart enough to dedupe multiple presses. I didn't like that guests were compelled to push the button. I realized it was time to kill the experiment when I had a year's supply of toiletry.
Meat, seafood, eggs, milk, nuts, legumes and high water content plant foods (fruits and vegetables) are a generally good dietary sources of Lithium. Fats, grain-based and sugary foods are poor sources. If you're not lucky enough to live in an area with a high Lithium water supply, a low calorie density paleo-type or plant-based diet is probably the best way to ensure an optimal Lithium intake.

(Tomatoes are a particularly good source IIRC).
Yes, that's a famous one. I got a chuckle out of the photos of Pelosi and Schumer leaving the White House after meeting with Trump a while back ( https://twitter.com/cbouzy/status/1072563584796909568 ). It's as if the Russians aren't even trying to hide their bugs anymore.
Realistically, how could you know if it's still any good if you haven't used it since 2.2? It's basically a different language now.
Anecdotally, from several sources teaching in tech, it’s the significant white space that makes python much more approachable to non-nerds. For some reason matching nested braces isn’t palatable to them. I attribute Python’s wide adoption in the non-nerd world in part to this (the other part being the ecosystem).
There's no convincing research that establishes causality on such complex sociological matters, since you can't create clean experiments, and observations are not useful since there are too many confounding factors.

However, you don't really need research on this, it's obvious that surveillance offers meaningful safety benefits. I think the problem some people have with surveillance is that its costs may outweigh its benefits.

For example surveillance can be used to shift political system in the authoritarian direction, by suppressing political opposition. It can be used to sustain inequality since it provides those with money or power a powerful leverage to entrench their positions. It can be used by corrupt officials and hackers to commit serious crimes (partly offsetting its crime reduction benefits). Finally, even if surveillance isn't abused, it can be uncomfortable to some people who just don't like being watched.
Think of it this way: assume someone is trying to brute force your password. For simplicity let's say they know nothing about it, except that its characters are randomly drawn from a 50 character pool. As they guess passwords starting with 1 character, each added character takes 50x longer than all previous guesses put together to guess all possible passwords of that length. Put another way, if they knew the length beforehand, it would only save them from testing about 2% of the overall possible combinations.
”I don't see how you can prevent passengers from going away as soon as the train stops.”

Stop the train between stations, in an area with free views all around for at least a hundred meters, put two terrorists with a gun and night vision devices on each end of the train, one on each side.

Because of the height of the step down to the track, many people would already find it difficult getting out of the train if there is no platform, even if they wouldn’t be shot at.
This is happening at my place right now. Leadership has dictated that priority is now to even out gender imbalances rather than giving raises. Since the women in our company are heavily skewed towards lower-paying roles (QA, customer support), this means the company will avoid giving raises to the roles that actually are in demand and have strong salary growth elsewhere. Needless to say, those of us with options have started looking.

Of course, everyone who gets a competitive offer elsewhere will get a counteroffer, so this policy only applies where it’s convenient.
>but a lot of them are reused when a subscriber changes provider

OT, but I had a not-so-nice experience with that. Some years ago I got myself a data-only phone number/SIM card for my 3G dongle.

It turned out that the number was reused, and the previous owner of that number had subscribed to a pay-for message service for upcoming events (concerts, movies, etc). And they kept arriving to my data-only dongle, and I didn't notice for a while. Had to pay for it, though.

I don't remember how I eventually managed to turn that off (the software for accessing/manipulating that part of the dongle was Windows only).
I do believe higher levels of surveillance will have higher levels of inhibition for petty crime.

But it will not inhibit white collar crime (such as corruption or fraud etc). It won't inhibit crimes of passion. And it won't inhibit premeditated crimes that require lots of planning and hardcore execution (like drug/human trafficking etc).
good thing is unca Sam doesn't have a monopoly for indian arms contracts. India's arms contracts are spread across Russia, France, Israel, USA. And quite a lot of indigenisation is in progress.
How typical is it for the Chinese to use English headers in their DBs?

Could this “solution” be off the shelf, or developed by non-Chinese?

The front-end users wouldn’t see the backend structure.

Along with some native English speaker names like “CertificateNo” for certificate number.
My own intro to FP happened via Ruby and Clojure.

I wrote a rinky-dink Web application while teaching myself Ruby and Ruby on Rails. It turned out most of the pages were constructed from a database query returning a batch of results which then needed filtering, sorting and various kinds of massaging. I ended up really enjoying doing this work by applying a series of higher order functions like for() and map() to the data set. This got me started on thinking functionally.

Years later, I decided I wanted to do more with Lisp while continuing to work with the Java ecosystem. Clojure is a Lisp that runs on the JVM and is rather solidly functional. It's possible but very awkward to do mutation. If you don't want to run with shackles, you need to embrace immutability and FP. I found myself fighting FP until eventually I saw the light and was able to productively embrace it.
6x Space does not show up as pwned password
https://haveibeenpwned.com/Passwords

If you type in spaces (any number, I used 6 here), they are not detected or evaluated as pwned passwords. I thought that was curious.

Seems this could possibly mislead some to think they are being clever by entering just spaces as a password.

Does anyone know the exact reason for this? Is it simply impossible to query this as a record in their DB? Would a password field usually not accept spaces?
Which is ironic, given that people tend to forget that it was C++ which made OOP mainstream, there wasn't any Java or C# back then, two fully OOP based languages.

The other part is that component oriented programming is actually a branch of OOP, from CS point of view, with books published on the subject at the beginning of the century.

"Component Software: Beyond Object-Oriented Programming"

https://www.amazon.com/Component-Software-Beyond-Object-Orie...

First edition uses Component Pascal, Java and C++, with the 2nd edition replacing Component Pascal for C#.
I'm not really actively using Facebook anymore, but when I did, the threshold for becoming a "Facebook friend" was a lot lower than that for regular friends, or people I shared my phone number with.
That’s why you use proper tooling that supports automated refactoring.
Yep. That is why I can not ever interpret the term "OOP" anymore.
Thank you for mentioning that, I up voted this with the hope it can be higher up in the comments. There were lots of comments threads about the vague "addiction" and less vague alcohol problem [1], but after reading the article, I went straight to the photography website and really liked much of it. His photos are very accomplished and beautiful, I particularly liked http://otierney.net/lights. I didn't know the guy from Adam, but was happy to stumble on his works and imagine they are a fitting legacy. I understand the importance of the addiction threads for others, but I was more moved by his art.

[1] I have to say that the HN community repeatedly amazes me with its caring and thoughtful and helpful discussions.

Edited to fix issues with asterisk footnote mistaken for emphasis markup/down
I once read an interesting thought experiment about this, adapted to this story it goes like this:

We assume:

- Greedy capitalist bosses (wanting to pay less for more work)

- Same productivity of men and women

Now if there's an 18.9% pay gap, then women are on average 18.9% cheaper to employ than men.

Greedy capitalist bosses should therefore only employ women, closing the gender pay gap by driving womens' wages higher (and those of men lower).

Yet this doesn't happen, so one of the assumptions is wrong or the gender pay gap difference (the 18.9%) is not correct.
It's possible but I really doubt it, considering the sheer volume of message being generated every moment. It would be much easier and less likely to have hiccups like these if they just give them server access on demand, rather than having a live data feed replicated to 18 separate locations. Moreover the tweets actually show names and addresses of various internet cafes in one of the pictures. This information should not be available if the data is coming from the service provider's backend.

Contrary to popular opinion on HN and other forums in the Anglosphere, surveillance in China is a nuanced problem and tech companies are far from completely passive. Local police are often denied when they request information because technically they lack jurisdiction on companies located in a different town or province. As a result they resort to catch-all interception using devices like these makeshift DPI systems(there is no clear legal requirement, but internet cafe owners are easily coerced into installing them or risk having their business hut down over various infractions) and Stingray-like fake cell sites (a constant source of conflict with major telcos because they are often poorly installed and would interfere with normal cell sites).

These ad-hoc schemes are usually put together by the lowest bidder, so they tend to be horribly inefficient and insecure like what's been shown in this case. But to local LE it's still preferable to going dark, not to mention there is usually little accountability when their system breaks.
For those like me who had no idea - Denisovans diverged from the branch that became
Modern humans 600-744,000 years ago. https://en.m.wikipedia.org/wiki/Denisovan
This article has led me to Shapiro & Preguiça (2007) https://arxiv.org/pdf/0710.1784.pdf

The whole idea that commutativity gives you a better-behaved transition to consistency reminds me of how the theory of patches gives DARCS/Pijul better handling of branches than Git. Cf. Mimram & Giusto (2013) https://arxiv.org/pdf/1311.3903.pdf
https://en.wikipedia.org/wiki/Beijing–Shanghai_high-speed_ra...
The HSR between Beijing and Shanghai has 87% length are elevated.
Well I suppose if you subsist off of one product, that would work ok.

I'd need one for milk, eggs, bread, pasta, rice, cous cous, onions, peppers, etc, etc, etc.

So currently I just have a piece of paper hanging on the back of the kitchen door, that things get added to.
React for a js front end makes a lot of sense. But, for the back end, what advantages did they expect by moving to node - besides having the same language in the back end?
Public APs don't require ID for login. Only the IM services require ID.
I totally agree, there is some historical importance to this whole blockchain hype. I remember the "ICO hype", where seemingly 1000s of ICO projects emerged out of the blue. All projects had websites, "whitepapers" and the like. There was a lot of attention, money and scams involved (at least from a personal perspective).

Nowadays many of these ICO projects are vanished: websites are down, "whitepapers" are gone, team members are in jail... Somebody in the future might want to reason about this phenomenon. As this was mostly an internet thing all data and information lived on the internet only. I think even today it might already be difficult to research about this, as lot of information is already gone.
I think there's a "Sign up with email" link on Twitter.

Though of course, every time I created a new account there it was quickly blocked, only allowing me to unblock it by providing a phone number. That might have to do with a number of privacy-enhancing browser extensions I've got installed.

That said, thanks to GDPR, I'm relatively confident that they've actually deleted my phone number when I asked them to after verification.
Where are these leaks available?