skysight-inc/HackerNews huggingface dataset:
GitLab released integrated packaging back in 2016 - starting with a Docker registry - and adding Maven and NPM in 2018. You can find our plans for adding further packaging capabilities on our public packaging roadmap https://about.gitlab.com/direction/package/

We are also embarking on making package management more secure and auditable for the users of packages with a Dependency Proxy https://about.gitlab.com/direction/package/dependency_proxy/ GitLab users will be able to block and delay packages that are suspect and trace where vulnerable packages were used. This will increase performance, cost efficiency, and the stability of your tests and deployments.
Exactly. Technology exists to solve problems. One of the greatest problems in today's world is the metaphorical tsunami of advertising sewage flooding our mental shorelines. Browser-based adblockers neatly solve that problem.

As for the "But how do we pay for all these free things then?" counterargument, I'd suggest voluntary restraint on the part of website creators. I can live with a few modest JPEG-only banner ads hosted directly from the site I'm visiting. If a site promises to not use animated images, streaming video, streaming audio, any sort of trackers, any sort of third-party content, and if they keep the screen-real-estate ratio of ads to content relatively low, then I'll whitelist them in a heartbeat.
I get that, as odd as it is. But my understanding was that Uber wasn't doing that at all. I haven't heard of them using slightly dubious accounting tricks to pay more money to shareholders while showing no paper profit. I thought their expenses were simply way ahead of their revenues with no clear way to bridge the gap, and the shareholders are losing money and being diluted too.
I get that with some queries, you're not sure how the data is going to be retrieved, and letting the database figure all of it out for you is a good strategy. But with a lot of queries, particularly the ones that I'm doing in the milliseconds of a pageload, I want to be very sure that all my joins are hitting efficient indexes. I hate that someone can change my schema, and that can turn my efficient index lookup into a horrible scan, without breaking tests.

Folks who know more SQL than me: Is there a good way to say "I would rather this query fail than try to scan a table?"
https://social.libre.fi/objects/140ca2e8-addd-4dbb-8e03-8d6a...

Gnome dev ended his contract with Purism over their inept management of the Mastodon instance they are selling accrss to: https://wandering.shop/@KelsonV/102057489260188127
ah... but unless it's a spear-phishing attack they're not gonna guess that I'd first open the archive with 7-zip and thus most likely won't build it with that in mind.
Is this a joke? The donate button takes you to blood donation...
Kentucky’s $1.5 Billion Information Highway to Nowhere
Who knows what the future holds. Once upon a time all the power users used assembly language.
It's an unfortunate name to be associated with eyes!
Clearly. A fairly bizarre one too.
Nobody ever changed the world on 40 hours a week
Yes, this is a joke.

> Copyright 2019 3 Dumb Idiots. Please don't sue us.
Show HN: My PerfMatters 2019 talk about speeding up web apps with WebAssembly
> I've never understood why so many people were/are so bullish on Uber.

Uber is bullish, maybe that's why?
This is one of the things I love about Packagist. Technically Composer doesn't care where the source is from, but the official Packagist repository actually just uses Github as the storage and CDN for downloads. You have to link a repo to publish it, and Packagist will only publish source committed to your repo (no build steps, etc). Packagist then uses the zipball downloads for each package for it's source.

Downside of this approach is that almost any PHP project requires you to configure Composer with a personal access token for Github due to the amount of API requests causing rate limiting. Folks sometimes end up wondering why Composer needs an API token to download otherwise public code. (https://getcomposer.org/doc/articles/troubleshooting.md#api-...)
Ah, interesting. I had the vague impression that the beard oil helps with that, but wasn't actually sure.
pip is the default package manager for Python, and while anaconda knows how to install from PyPI, you just pip install things into anaconda environments. So, the answer is "pip".
Huh, so it is. And looking at our schema, it looks like the UUID/hash tables we've got don't use pkeys at all.

Looks like I have a conversation to have. Thanks. :)
The red eyes on the top picture were not enough of a hint?
I agree with most of your comment. However, I don't think the claim that Google is launching a new element is ridiculous (even if I'm sad about it). That's more or less how it worked during the IE vs Netscape war. Remember those fancy <marquee> and <blink> tags for example. Standardization came second.
Or know how to quick sort in C?
Every time I let a barber trim my beard I was very happy with the result, and I got the same impression that I would not be able to replicate that on my own anyway, so maybe that's just the answer.

Overall, I still feel that a beard is much less hassle. Unlike a clean shave, I have to go a pretty long time without a trim for my beard to really become "unsightly".
Ask HN: Is there any advantage in using Oracle Linux?
My company wants to move to Oracle Linux. As this OS is not used in our company so far and not used much around the world neither, I am very sceptical about this. Do you feel any advantage in using Oracle Linux? What could be benefits or drawbacks?
...aaaand, Uber (meaning, the owners of Uber pre-IPO) has less ownership in the business afterwards.

Sure, you can argue that the $8.1B is something "real" that the owners of Uber have more of, afterwards.

But you also have to acknowledge that the business of running Uber is also something "real" that the owners of Uber have less of, afterwards, having traded it in a heavily-scrutinized auction.
There is also https://www.elementscompiler.com/elements/default.aspx which is a pretty good compiler and webassembly is one of the compile targets.
For cats in the wild, not murdering you is a sign of respect if not affection.

Many wild species will aggressively defend their territory and instinctively go into murder mode when they even see another cat. They only chill out just enough to procreate, then go back to angry "get off my mountain" cat.
There’s actually tons of other costs besides renting the space. Many exhibits require large amounts of electricity and space. Not every exhibitor can fit within a small booth. Not to mention liability insurance, since some exhibits have things like fire.

As a exhibitor myself, I've seen how the event has changed over the past few years, and the loss of sponsors such as Intel have definitely hit them. I just hope the event can continue, it's really the highlight of the school year for me and my peers.
Banks are the worst but they are in the game for centuries and there are thousands of laws and jurisprudence for banks. And mark my words, laws will be too little, too late. We need to stop the "move fast and break things" now, we should put ethics side by side with "because we can" otherwise people will suffer the.consequences
Yeah that wasn't for the faint of heart. Pretty disgusting to be honest.
What was the name of the company that delivered? Any chance they’re making progress on better output?
Submission title is editorialized. “Why connect everything unreliable?” is, besides a confusing sentence in English, text absent from the linked article.
Successful IPOs are successful. A tautology.
As someone with Fuchs Dystrophy (which is slowly blinding me), and writing style aside, I'd like to see the aging billionaires of Web 2.0 throw money at more ideas like this instead of at Hail Mary passes to immortality. Is that so much to ask for? I think it's realistic to live to 100 with 90+ good years. Without fundamental breakthroughs in science, it seems like a hard trek to get beyond that.

https://www.allaboutvision.com/conditions/fuchs-corneal-dyst...
Not to belabor the point, but... "copyrightable".
I feel like this comment reflects a growing embrace of, for lack of a better term, state-ism in the tech industry that makes me feel really sad.

As an engineer working at my second job in the FAANG group, I always loved the tech industry because it was at least better than other industries about pursuing individuality, creative thinking, self-determination, etc., even if it couldn't always succeed in realizing true "meritocracy" or whatever.

Lately, though, it feels like all the money and attention on the industry is making it hard to distinguish Bigh Tech companies from Big Law. Who actually wants their hiring criteria to include "a willingness to get often arbitrary work done on schedule with acceptable quality"? Seriously?

Maybe that's inevitable, but that just makes me so sad if so. And honestly, having met a fair number of "industry pioneers" who were very early workers at some of the most important (and successful!) tech companies around today, I'm fairly sure they agree with me more than the growing conformist movement.
> > When you can't opt your children out of being indoctrinated, it's pretty clear that you're not free.

> True, but then indoctrination of your children might be the least of your problems.

I have never been in such a position. However, I suspect that I would not regard that as the least of my problems. It would be closer to the worst of them.
> a text language with lots of different overlapping rules and syntax.

Could you elaborate more on this? What are those overlapping rules?

> unnecessary complexity just to get a layout heirarchy and dependencies.

I have no idea why you think it is so complex...

DOM element is this:

class Element {
weak_ptr<Element> parent;
vector<ptr<Element>> children;
map<...> attributes;
}

And you will see EXACTLY the same structure in any GUI framework/system.
A totally valid point, but I'd argue those should be handled by a separate tool or process. Data migrations tend to be fully programmatic; tools and frameworks can help reduce the code required, but cannot handle every possible case. (having performed numerous multi-billion-row data migrations, I learned this painfully first-hand...)

For simpler cases, where it may make sense to run a data migration immediately after a schema change, a good generic middle-ground may be configurable hook scripts. A declarative schema management system can then pass relevant info to the hook (which tables were changed, for example) and then the script can run any arbitrary row data diff/apply/migrate type of logic.

I do understand your point though; for relatively straightforward data migrations, an imperative system can capture these much more cleanly by just coupling them with the corresponding schema migration code.
It seems like the title should be something like "Dark Matter Sighting Get Reprieve". Dark matter is pretty well established, it's just a supposed direct sighting that now seems to be getting a second look.
Indeed there is very little. Just some mumble mouthing about "intentions."

""But unlike those exchanges, ultimately our intention is that when companies list shares on LTSE for sale to the public, they will adopt a set of governing practices that are designed to help them build lasting businesses and empower long term-focused shareholders.""

Utterly indistinguishable from the Wooden Language heard from every such grandee.

I am not one to indulge the sort of naivety that might allow me to pretend that powerful investors are going to tolerate any more impediments to their desires than legally required, or at least enforceable, so unless there are concrete differences imposed by SEC et al. I expect this is -- or eventually will be -- simply Wall Street West.
This was helpful to think about, thanks.

I've rarely encountered logical merge conflicts with migrations, but I could see it happening.

I used to be on the SQL Server team at Microsoft and had some exposure to the customer support teams. So data integrity and eliminating any potential for errors was huge.

So while I love the idea of migrations being generated on the fly from actual state in Production-System-5 to desired state of commit 27a73e, I'm skeptical of it working that well in practice. Certain cases come to mind where there might be intermediate migrations from [full name] -> ([first name] [last name]) -> ([first initial] [last name]). The system would have to be smart enough to know A -> C may require A -> B -> C or prompt the engineering team for a better DML migration script.

Also, you will want there to be documentation about what was performed whether that is a migrations table that points to a .py file... or a .json output... or a log file.
Most of AWS, a lot of Google - as far as I know.
<blink><marquee>yes</marquee></blink>
How do you define "actually leaving"? Because after navigating to the portal, it occupies the whole viewport and becomes the main document with your site's URL.

Even if we assume you use AMP, package it with signed exchange, and Google SERP displays it then, yeah, your site could appear with no extra network request to your site. The lack of network requests isn't that different to old school HTTP proxies but with better specs and security. AMP has analytics and stuff so if you want to count visits, go do that.

I think the problem these technologies are meant to solve is making navigating between pages take under a hundred milliseconds and appear much faster by being able to preview/animate them. That would be good.

Yeah, new technology is not without cost and risks but Google turning the web into a walled garden isn't high on my list of risks.
New York Is Advertising Itself *in* New York
LinkedIn seems like a good fit
Even statements like this can become ambiguous depending on the speaker. E.g. is the speaker speaking literally or metaphorically? Maybe the speaker feels like they walked a lot and so they chose a distance which represented a lot to them. Also, is one mile a lot or a little? Maybe its the opposite and they feel like they barely walked. Science makes every attempt to be unambiguous, people do not.
You can buy puts on robinhood fairly easily.
I’ll openly admit that we don’t have everything ironed out. In fact my next big project is to tackle derived columns (rename is a column where the transformation is the identity function).

It requires a bit more finesse and integration into our code base as it requires multiple deploys with code that knows how to handle both columns.
There are, broadly, two kinds of collisions. In the first kind, you can pick an arbitrary prefix P shared between the collision pair; the algorithm spits out a pair of (essentially random) blocks of data C1, C2 in the middle that are different but yield the same hash value (H(P+C1) = H(P+C2)). In the second kind, you can pick two arbitrary (equal-length) prefixes P1, P2, and the algorithm outputs collision blocks C1, C2 such that H(P1+C1) = H(P2+C2). Because of the Merkle–Damgård construction common to MD5 and SHA-1, you can add arbitrary (equal) suffixes without affecting the collision.

With the first kind, you don't have much control over the collision blocks, and the prefixes and suffixes have to be the same. This can still be useful - file formats can be carefully rigged so that the differences in the collision blocks are noticed somehow (e.g. misaligning length fields, changing testable field values, introducing different code). With MD5, these collisions take just seconds to compute; with SHA-1, the one known example (Shattered) took 2^63 hash evaluations to compute.

With the second kind, you can do a lot more evil, since you can pick two completely arbitrary prefixes. This was abused (for example) to create a rogue CA certificate from an ordinary signed website cert. With MD5, this takes several hours with a good GPU and CPU; with SHA-1, it was previously thought to take around 2^77 evaluations - more than 16,000 times harder than the first type of attack.

This paper describes a method that would take only 2^69 evaluations for the second kind of attack on SHA-1, only 64x harder than the first type (in the worst case). This would be feasible for a big institution like Google or a government.

All of which reminds us that, yet again, SHA-1 deserves to be laid to rest.
Looks to me as an effort to make any user visiting google.com to not actually leave google.com FOREVER.

Users will get portal-ed to a result page (with the browser's url bar showing foo.com, instead of google.com), but the user will be tracked the entire time from google, since they would be still on google.com.
I had the same thought/hope: that someone else will use this as an opportunity to step in and re-raise the bar, for trustworthiness and supply chain integrity. Competition is good.

In the meantime, I've recently been experimenting with buying from other vendors for things I normally buy though Amazon, and with which I'd had trouble: particular brands of clothing, computer parts, water filter cartridges.

I've also been trying brick&mortar, and anecdotal results so far are that it's so-so or bad for selection, good for assessing quality and expected item and condition, and good for lead time.

Separate from browsing store inventory in-person, in-store pickup of online orders is consistently poor-to-ridiculously-bad so far (5 out of 5 times). The anecdotally worst major retailer thus far is surprising.

(Incidentally, I also realized, given the distinctive look of the Walmart shipping box in the lobby of a condo building of about 100 people, that I'd never noticed any of my neighbors buying from Walmart before. I suppose there's some stigma and general objection to Walmart to overcome, though Amazon hasn't been doing so great on reputation either in the last couple years. My two Walmart orders thus far have been wholly positive experiences.)
Pensions and 401k funds are not required to do any sort of short-run trading, and the asymptotic value of a security on each exchange will be the same. It won't meaningfully impact any sort of long run value of a pension fund or 401k (that is passively managed)
Delta anti-union poster: Spend on video games over union dues
I wrote a quick article on the differences between portals and iframes: https://medium.com/@bluepnume/google-chromes-portals-like-if...
I have not heard a whole lot about Oracle Linux, I have heard a little bit good, but nothing bad.

Here is a specific claim that they make for it:

"Oracle Linux is the only Linux distribution that supports live, non-disruptive patching, both in the kernel space and in the user space."

My take on Oracle is that they are good at systems programming, the Oracle database is excellent in its own way, they have kept the Java legacy from Sun alive (at least on a technical basis, they may have screwed up the politics.)

I would not trust Oracle to do applications programming and I think they've bought a random stable of second-rate bizapps, but if there is no UI involved I think they do good.

If your company would rather deal with Oracle for support than with IBM/Red Hat or somebody else then that is also a positive. Also I would take the claim seriously that their Linux is well tuned for their database, they have been barking up that tree since 2000 or so.
I disagree with you. It is absolutely authoritarianism at the root of these issues. (As an American who has been observing this for some time.)

A few hours ago I was summarizing this article to someone in person and concluded with "but this country is very authoritarian", the implication being that the letter and spirit of tennant laws are not widely known, and the more authoritarian cultural norms, biased towards landlords, end up as the de facto rules.
I'm really loving the way in which Gitlab and Github are looking to diversify their value-add offerings and auxiliary services without sacrificing any existing basic git functionality or UX, and without aggressively directly competing on the same feature set.

This makes it less of "gitlab or github?" and allows developers to more easily decide to use just one for each project based on whichever service better focuses on the project's primary long-term goals.

If you find yourself in a 2-way split market on a core offering, I think this strategy by both parties is net beneficial for everyone rather than trying to directly compete on all the same features and offerings.
We use dbmate [1].

SQL migration management with in-database version tracking.

Super simple, but works for us.

[1] https://github.com/amacneil/dbmate
I wasn't able to get how it went badly from that article. It seems like there were some management concerns, some factionalization (that didn't turn into anything worse?), and the entire thing looked like a boondoggle, but the major problems seemed to be they got some of the numbers wrong and had to hot-patch it? The takeaway I get from there is that it's theoretically possible, results are promising, but we don't yet have full formulae.
Yes. Just about to say the same thing. I just clicked back and came to the comments hoping someone would explain what the content is all about.
Please tell me more about the bubble backpack, I have a cat that might like traveling with me.
People are generally quite skeptical of New Glenn, because not only has it not launched, but there's also no public evidence of construction of any non-engine hardware. Might just be that they play it closer to the vest than SpaceX and ULA, but the eternally-slipping timelines for New Shephard do not inspire confidence in their ability to get New Glenn into orbit soon.
a lot of time writing down migrations? why was it so hard?

I use https://fluentmigrator.github.io/ and also used dbup..

I generally like the up/down better, and both the up and down is remarkably trivial to write generally, the downs are useful during development you might change your mind about the DB structure. Never used a down in production.
Ask HN: Good, experienced engineer but suck at interviews. Looking for a coach
I am an experienced engineer(10+) working as software engineer.

I know all the CS basics and concepts. I can 80% of the puzzles/coding
questions in interviews. But I have few blindspots that I am hoping to
use a coach for. As I am not a beginner, most online portals are not useful for me. I want to use my time efficiently.

If you guys know anybody who can coach an experienced engineer, let me know. I will probably need a time commitment of 1-2 hours per week from you. I am happy to pay for the service.

All you have to mostly do is curate a few questions in my weak areas and pester me to solve them.

Something like youneedaboss.com but for software engineering interviews.

Please let me know how I can contact you. If you have experience hiring people before, it is even better!

My contact is in the profile.
Data team sharing how to improve release in production
Federal judges have a way to make investigations disappear
I honestly don't see the point of this unless it gets widely adopted by other browsers (which is an obvious point). Mobile is already a huge market and on iOS at least, even chrome and safari simply use the iOS built in WKWebView with a UI wrapper around it. So unless Apple decides to include <portal>, wouldn't this not work on any iOS browsers?
I also use Android but don't use Chrome due to it's lack of extension and content blocker support. So other browsers on Android will also need to adopt this.
A former Finnish military island is to play host to Europe’s latest biennial
Well they're already owned by Microsoft, so same deal =P
I wonder if Chrome browser could survive if it was spun off from parent company.