skysight-inc/HackerNews huggingface dataset:
Show HN: Obort) Attempt to build a generic accounting system platform on Django
https://getyarn.io/yarn-clip/81c3a625-0f20-42db-be36-3f3b39d...
Why don't you tell us how much you make?

People get killed in some places for $100. $1000 is enough to kidnapped in some places. Besides if people know how much you make, you will get custom pricing. Do you know there are countries that have 2 menus, one for foreigners and one for locals? Because they foreigners make much money so are charged higher prices?
My point was simple, the family fled one country's laws that were oppressive to "them" to another country where they were not.

I think it's fair to argue that any country that has fewer restrictions on what you can do is more free than another. And any country that has more restrictions is less free.

If you prefer restrictions that are justified to protect for yourself and others, it doesn't mean you free (or the kids living there), it just means you willing to accept control from others.

Maybe you live in a totalitarian government yourself? And have gotten used to being "protected" by the government this way?

edit: clarification.
If you take the "social" part serious frind's data is essential. When playing a game it should compare to your friends on the high score list. When using a birthday calendar you want to see birthdays.

Having to ask the friends for approval doesn't scale.

There is the fundamental conflict between a social network platform and privacy.
I don't understand this autonomy angle for several reasons. One is of course that legally (and technically) full autonomy is a long, long time away so we'll still have drivers in cars that want to be paid, but more importantly, Uber doesn't even own autonomous cars.

Are they really, in addition to all their other costs, going to stock up on millions of expensive autonomous vehicles? That's unrealistic. And if they don't, what stops for example peer-to-peer solutions to emerge that let's people rent out their cars directly? It's very possible we don't need a middleman here when autonomy is ready.

I'm usually sceptical of all the decentralised, smart-contract stuff, but renting your car to some agreed upon destination or for some time through a open-source free application sounds actually doable.
I had read somewhere a while ago that the Dropbox clients were written in wxPython. Not sure if that was right then, or has changed since I read it.
Oh! I'm sure that won't be exploited by hackers... thanks google.
.NET is tied to Microsoft, so I'd avoid it 100% of the time.

Yes, yes. I know that Microsoft theoretically open sourced and ported it. However the way that this always works is that there is a base that can be written in, but anything non-trivial will have pulled in something that, surprise surprise, is Windows only.

Otherwise I agree that it is a better Java.
This is super cool, but I worry that we've basically let a proprietary closed-source service be the de-facto standard for open source software. That really hampers my enthusiasm here.
I think cats have gotten a bad rap relating to how much they care about their owners. They don't show their everlasting love like dogs do but they love their owners just as much. Cats are independent by nature vs dogs that are pack animals so they behave differently.

In terms of intelligence, cats are usually a top predator so they by definition have to be smart to be able to outsmart all their prey.

In terms of social smarts, they are geniuses. How many species live in people's houses and are completely cared for and it goes on generation after generation? Cats are one of the top ones. If they didn't have social smarts that would not be the case.

None of what the article says should be a surprise to anyone.
Interesting. You're right NYT only mentioned the book in passing in one article. And I can't really find many references in any media I recognize, either.
Rust has if let. It can't chain them yet, but the proposal to fix it (RFC 2497) was accepted and implementation is in progress.
This is big. For a while we have needed a simple, intuitive and centralized artifact storage system for the modern age. I’ve been wanting to build something for ages but never made the time.

I also think that this will also have the side effect of exposing a lot of people to package/build/dist tools from other ecosystems, which might help disseminate best practices outside of their walled gardens. Github helped do this with code, helping to put the spotlight on less popular or more cutting-edge languages

This is going to solve a lot of problems for a lot of people.
Justice Department’s unprecedented intervention in the FTC case against Qualcomm
So... does this basically put Gemfury out of business?
Why not? Dive in, the water’s great.

https://vapor.codes
Do I want to use Github for this? I kind of like the npm model where they say "don't cache it, we guarantee as much capacity as you want to re-download packages". I use a lot of go modules, and each of our container builds ends up fetching them all. Github rate limits this and you have to either vendor the modules or provide a caching go module proxy (Athens, etc.). Meanwhile, npm just uses Cloudflare which seems happy to serve as many requests as I desire.

In general, I find that caching/vendoring dependencies is the most sane thing to do, but it's not what, say, the Javascript world appears to be doing. Do we want to move towards a service that already rate-limits package fetches when we already have a service that doesn't?
Same reason I requested $0 salary this year...

Seriously, this argument doesn't make sense to me? How can them spending more money help them make more because of taxes?
I'm disappointed it doesn't support Python. There's not a lot of options available for private Python package hosting, it would have been good to have another one.
I feel tests like these are odd. The theoretical conclusions you could draw, at best, are vague curiosities.

I also think they should not treat all cats equally. Maine Coon cats, for instance, have always struck me as an order of magnitude more intelligent than average cats.
It's always odd to me that PHP is left out of things like this. What do these other package managers have that Composer doesn't?
Yes, it has a package registry feature for NPM and Maven:

Maven: https://docs.gitlab.com/ee/user/project/packages/maven_repos...

NPM: https://docs.gitlab.com/ee/user/project/packages/npm_registr...
Swift is like JavaScript/TypeScript only if you don't know Swift that well...

They are so different, only very superficial comparisons of syntax would lead to such a statement.
sum = (1 to 100).map(x => x * x).reduce {case (x, y) => x + y }

sum = 0
for i in 1..100 { sum += i * i }

I personally find the second one easier to understand. Performance is much better unless the compiler does some magic to convert the first version to the second one.

Adding more logic to the loop also doesn't make the code more complex.
Ask HN: Why not rethink Web Identity with browser sync and push?
The primary (benign) reasons why websites/webapps needed account creation / registration were two;

- So that users could access their account from multiple devices at home / work, desktop / mobile etc.

- The Site/app developer had some way to reach the user for various reasons. They needed not just an identity but also a communication channel.

But today's browsers already support syncing across multiple devices AND push notifications.

Combining both of these, we can do away with signup and login forms - simplifying the UX a lot AND avoiding privacy dangers that come with server-side registration using email address / phone etc.

We may need to provide the users more control on filtering, searching, and archiving browser push notifications, but this would be a one-time effort per browser and would actually be much more empowering. We could even support multiple accounts using containers in browsers.

Has this been attempted? As a user, will you prefer this?
A really good open source Tableau alternative, maybe the best IMHO. In contrast to for example Apache SuperSet this can actually be used by business people because it supports joins of datasets.
> Uber isn't rolling profit back into the company like Amazon

They kind of are. It’s just a matter of timing. They are rolling future profits, bankrolled by VC.
> Lots of attention to detail on the wrong things before they have the basics, IMO.

thanks you pretty much perfectly summarized KDE
Bit like security alerts which were initially just JS and Ruby. Indeed odd.
Yes, they could have, but they had to leave everything behind, and they just happen to have help from the government in the US. Not every country will help people.

And if you don't think Germany's recent past is horrific, I suggest you read about the holocaust and some recent wars. Not an exaggeration at all. Germany's WWII era leader is considered to be one of the worst in known history.
Is there a way I could let some CI service like Travis CI to ONLY publish the packages to this GitHub Package Registry? ONLY means I don't want to expose the entire GitHub account to Travis CI but allow only publishing to the registry. So if the GitHub key/access-token leaks somehow the possible damage would be limited by registry publishing scope. So something like scoped access tokens.
sigh yes

I had to help a passenger once. I didn't think it was important before that.
Lack of price transparency hurts the person with less negotiating power in a transaction. Most people are not VIPs who can demand compensation, so the employer benefits by knowing more about the market since they are constantly hiring vs someone who only looks for employment once a year, if not once every few years.

Additionally, lack of price transparency hurts the market as a whole, since prices are how the market conveys information as to where supply is needed. Restricting this supply is good for those benefiting from the extra profit, but not for society overall.
Yes, nuance.

Just saying Facebook had 10x the user as Uber is meaningless.
Good to see them catching up on GitLab in terms of features.
Why would the painter accept a job where they lose money?
This has not been my experience. I've been using Firefox for a while now with way too many tabs open and I've not encountered a crash. Or at least not one I remember. It could perhaps be some hardware it doesn't work well with? Or maybe it struggles with certain sites that I happen not to visit?

I hadn't heard of Fenix but it seems I'll have to try that soon.
One of my cats understood a small vocabulary. I first noticed it when I mentioned "catnip" in a sentence and she got excited. She learned a number of words during her life, mostly - but not all - food related. She had no problem picking them out of a sentence, so we learned to avoid saying certain words when not appropriate.
Precisely my point.
Advertising is a high margin industry with poorly understood issues.

Logistics is a low margin winner-takes-all industry which is fairly well understood.
I like java. Java 8 streams are particularly interesting. Its fast too. I took a hadoop class (which taught java 8 and ironically discouraged hadoop use excepting exceptional cases..).

The hardest part that everyone struggled with was getting a Java environment up and running. Gradle, maven, ant... You almost need and IDE. Its almost like they don't want people using it. I stopped when I didn't have too.

Plus the acronyms. Ones I didn't know from your post:

AOT, GCJ, Excelsior, Graal, OpenJDK, JakartaEE
Unfortunately, none of the porcelains caught on, because all of the power users use plain git.
> You also need to realize that it wasn't a negotiation between Oracle and some grassroot project, but among multi-billion-dollar corporations, some of whom have fought Java standards for over a decade, so the process was both legally and politically complex.

Yes exactly, I think that is what makes if feel like not the safest choice for many companies.
OTOH GitHub is already in the position to require that only accounts that have 2-factor auth enabled can publish to public repositories. You can already require on organization level that only users who have 2FA enabled can be members of the org, which is great feature for orgs that host private code on GitHub.

AFAIK most cases where npm etc. have been compromised are scenarios where maintainer of a popular package re-used a password, and the password became compromised in some unrelated hack. Other attack vectors (compromising access tokens on maintainer's computer, compromising 2FA, compromising a git repo) really are a notch harder.

Even if these hacks are not the fault of npm per se, they make them look bad, and looking bad security-wise is really really something you don't want to happen to you when your whole business model is founded on user trust (public package repo).
I'll give you 10:1 odds Uber doesn't declare bankruptcy in the next 5 years.
Maybe "lying" isn't the best term to use here, because it seems like you're using it to mean "not providing all information in a way that is morally bad." Of course you're not providing literally all information. Heck, I conceal a lot of information about my development process by testing and changing code before I even make a commit. But I think that's preferable to, for instance, providing a video screen capture of my entire development process for review.
or maybe the spirit of a free and open society, where everyone is subject to objective evaluation and performance of his/her own work instead of opaque decisions in HR?
Only major gotcha is when renaming fields: it'll drop the old field then create a new field, by default. You have to do the renaming by hand, trivial but can't be forgotten... Which is why you always test on staging first of course.
Hey Microsoft, if you're listening, you should throw Sonatype or other Maven-related organizations a few bucks. They deserve it.
You are absolutely right. I am incredibly thrifty, and it took me YEARS to figure this out.
Blackmail. Begging relatives. Begging friends. Unending charity contact. Unending "I've got a business idea" (but really no idea, I'm just a dreamer) requests. Repair shops / high end retail shops other shops up prices when you go there. Meeting people is harder because many people alter their behaviour radically when they know you're wealthy and become very disingenuous.
Bay Area job listings live on Employbl
As a contrary view, I find the boilerplate helps when I revisit a Rust project months later.
This. It can allow you to see the google results and navigate from them seamlessly without actually leaving the top-level domain. It effectively captures the entire audience. There will be no more Internet, it's going to be a Google portal (like AOL) with Google keywords, and will "borrow" the content from everybody else.
I used Norelco for 30+ years and when the quality of replacement blades went to crap I switched to a Panasonic Arc5 and, wow, that thing is so much better than the Norelco. I used to shave ever other day. Now every 3rd day. I shave my head with it, too, and the total time is about 10-15m, which I do while watching sports or some other thing that doesn't require my hearing.

I absolutely hated shaving with razors, but that might just be me.
Transgenerational inheritance is what this is technically called, and is a contentious topic about whether or not it exists in humans and to what degree. There's been studies from people who's grandparents have gone through famine and those grandchildren tend to be shorter or leaner than those who haven't, but AFAIK these are just associations and nothing causal has been found in humans to suggest what happens to you might affect your grandchildren. That being said, being exposed to pollution is not going to be great for your sperm or eggs.

And I know you are worried about what the next generation breathes, but consider that what you were exposed to was much worse, and what your parents were exposed to was worse still, and if your grandparents lived in cities they experienced awful pollution, second only to perhaps what your great grandparents may have been exposed to during the industrial revolution. Air quality has gotten better than it was in 1980 and much better than 1880, but there is still a long way to go to reset the damage of rampant consumer culture on our environment and health.
Arguably, the market seems to like revenue more than profit, at least for young-ish companies.
Don't forget also, it's believed that "being profitable" = "you're done with hypergrowth", at which point the whole band of capital looking for 100x unicorns moves on.

Remaining unprofitable is a part of maintaining the illusion that the company has huge upside in the future.
> Do you know there are countries that have 2 menus, one for foreigners and one for locals?

It's very nice that they keep special menus written in English. Well wroth the extra cost, which is cheaper than eating out in LA anyway.
Are sites likes Glassdoor (for most companies), Linkedin jobs (with salary ranges), and tech (levelsfyi, etc) already doing this in an anonymous way?
> the actual language & core libraries are incredibly slow to react to anything.

async/await being the obvious example. Still no sign of it in the Java language, nor any expectation of it, unless I missed something.
I am guessing that you are probably not using Python/Django... but is this any different than what Django offers?

Django allows you to define your models (schema) and then run a command that will generate the migrations. If you don't like the migration that was generated, you can modify it. You can customize up and down operations.

There are also tools that will take an existing database and generate the Django models for you.

All of these operations can also export the exact SQL that will run on each supported RDBMS platform in case you want to be extra sure on what exactly will be executed.
I think you would be surprised how close the Panasonic Arc5 is. I was blown away by it compared to any Norelco I've used (and I have 30+ years on them).
What is Go style in this context? Isn’t it CSP?
That isn't a valid "business" reason, though.
isn't JUCE single-developer too? it's been around forever and seems pretty featureful
I worked in a state govt office in Virginia some years ago and the local paper did a FOIA request for everyone's salaries in the state...and published an online database of the upper 50%. http://data.richmond.com/salaries/

My coworkers, by-and-large, were furious. I found it really helpful. I found out where I was relative to my peers (I was only behind by a few hundred bucks/year - we were all basically equal if we had the same title, except for one guy that had abused the state 10% raise when switching departments). One guy in our DBA/Ops team discovered he was getting a relatively paltry amount while his peers were all getting 6 digits (which was all on the bosses - his peers were also bothered by this). One or two people had very questionably high salaries and were suddenly held by others to be delivering at that level. Mostly, though, it calmed people down about salary differences.

Honestly, it was awkward for some people, but honestly I think the benefits outweighed the costs, at least within the office. Much of my coworkers' outrage was about people OUTSIDE the office finding their salaries, such as friends, family, neighbors, people wanting money, etc.
Location: San Francisco Bay Area
Remote: Yes

Willing to relocate: Yes, TX or CO

Technologies: JavaScript, Python, MERN, VBS, VBA, SQL, a little Angular and TypeScript

Résumé/CV: http://databirchtree.com/resume/rob_birch_resume.pdf

Email: rob.w.birch@gmail.com

Book a call: https://calendly.com/rbirchtree/15min?back=1
Not just "not traditionally been thought to cover", but which existing precedent said DID NOT cover.

Does it surprise anyone that this case was decided by the Federal Circuit? The rogue court most consistently overturned by the Supreme Court, which also is responsible for most of the disastrous software patent cases out there.

The only bright light is that the Supreme Court has reopened the question. Given how often they overturn the Federal Circuit, we have real hope that we'll return to the previous precedent. Which is that since matching APIs is a functional part of how code works, and things that are functional are by law not copyrightable, APIs are not copyrightable.
I wrote the book on user-friendly design. What I see today horrifies me
> do you want to know all my wrong tries to make a thing work?

Yes. A failed attempt is still a useful signal that people shouldn't try to simplify back to that way in the future (and why not). It's also a useful starting point in case the reasons it failed no longer apply.
Knowing other people's salaries gives you a stronger negotiating position. Other people knowing your salary gives you a weaker negotiating position.

Should you tell the world how much money you make? Are you altruistic?
Someone is going to have to put up the money to buy the fleet of autonomous vehicles.
> we need to understand why they acted how they did and how we can stop it from happening in the future.

I agree, but a deterrent might be part of a strategy to improve passengers behavior in such situations. "In case of evac, leave your bags or you'll get sued" might help a few people remember this line in the safety video. I'd obviously only advocate for something like this if studies show it to be effective.
Plenty of enterprise technologies have lasted more than 16 years. People are still paying good money to get help with software that's been running since the 60's. Less IT will be running on Java 8 by 2030. Maybe.
Maybe my area isn't rural enough, but isn't that what animal control officers are for?
My point exactly. It's not terror that's the problem. It's people.
While the technical side of the news is interesting, the organisational repercussions worry me. Microsoft (who owns GitHub) is already one of the largest tech companies, and I would not be surprised if this move was intended to weaken NPM and Docker in an attempt to acquire them.

I fear a future where everything one requires to develop "socially" depends on a single super-entity. GitHub and VSCode were the first steps in that direction, and now package management. My guess would be for CI/CD to be next on their list, with more integration of Azure somehow (potentially under the hood).
About GitHub Package Registry
The soda aisle in my grocery store has about 30 feet of shelf space for Coke and Pepsi, 10 feet for it's own no-name brand, and another 10 feet for the craft hipster pop.
The blog post says something about serving via a cdn. Are they also rate limiting?
There are lots of comments to this effect in the NYTimes article, but large swaths of the population already have their salary data public: many (most?) public sector workers' salary is public knowledge, oftentimes searchable on a website, military pay grades are public, highly paid executives report most of their compensation in SEC docs, etc.

Thus, I don't really buy the myriad of reasons presented here for why this is such a bad idea.
I'm at Google. I don't have a degree. It came up once with the recruiter, and then only because I brought it up. It's generally a non-issue.
What if they clash (eh user/package exist both on npmjs.com and GitHub)? Does it go through each of the configured repositories in sequence looking for a match?
It takes a lot of power to push something that large. A lot of brain power to grock the ecosystem.

Outside of the Java bubble, the view is quite a bit different.

All that sophistication looks like a wasted effort.

Take something as simple as admining the garbage collector. Java has a big selection of GCs, and each has their bunch of knobs for tuning. And you have to pay attention to that stuff.

After working with Go for several years, at large scale, we never once had to touch any knobs for GC. We could focus on better things. Any of the Java stuff we deploy and deal with we have this extra worry and maintenance issue.

And that's just the GC.