skysight-inc/HackerNews huggingface dataset:
> It is not sufficient security to only bind to 127.0.0.1 (the “loopback interface”)

What would be a better, more secure thing to do when you have multiple web servers on one machine behind a SSL-terminating reverse proxy?
High Schools Host Amazon Future Engineer 'Graduation' Ceremonies
More probably, it's just that there is a lot of money to make in taking total control of the user experience. Up till now, we had to deal with this pesky OS, those package dependencies, long cycles, and complicated installation process. But with the Web, you can inject your code almost in real time on the user machine, they don't have to understand anything, they don't have to wait, and you don't have to care about what's under the hood. In fact, the user doesn't even know or accept it's running a software.

Now the browser is pretty limited, sandbox and all that, so companies making bank with it want to widen what they can do with it, again, and again, until the browser becomes an OS under their control, and the user machine just a terminal to access it.
FreeBSD has used SVN since ~2012-2013 I believe.
Just restrict yourself to "available in store" if that's what you want then.
I'm actually using pollen to create my online book[1] and it's been very good.

While I write my blog in markdown it's super nice to be able to mix real code with in your markup language. For example if you want to create a special layout for a specific page or if you want a table with subtly different properties than the rest, it's easy.

It's also very powerful to extend the markup itself. I added support for Tufte style sidenotes[2] which I use extensively throughout the book. This is the markup for the sidenotes:

Lisp is a pretty nice◊sn{cult} language.

◊ndef["cult"]{
Some may say it's the language to rule them all.
}

The way it uses X-expressions to represent text is really intuitive and easy to work with. I do think there's merit to do this in lisp instead of say Python, because the modeling maps so well to lisp.

[1]: https://whycryptocurrencies.com/

[2]: https://www.jonashietala.se/blog/2019/03/04/pollen_sidenotes...
And it comes with the trade off of 3000 (batches) messages per second (and I bet some reduced potential availability). Sure, it’s a lot of messages for most people but non-FIFO SQS is one of the truly limitless services offered by AWS. No limits to raise, no soft maximums AWS staff ask you not to exceed. Just limitless scaling.
I'm not so sure about politicians but there have been studies that showed that there are more psychopaths as CEOs and people at the top of businesses. Politicians in reality do a lot of soft people work - more so than a business man would - and they are often more motivated by and need empathy for their job.
I don't doubt that while some "psychopaths" will be detectable ahead of time, and maybe mitigated (whether or not that's ethical), there may be many with "correct" views read as possibly psychopathic that will get strawmanned into oblivion due to their diagnosis.
WhatsApp users will start seeing in-app ads within ‘Status’ feature from 2020
> expose a UI with a local web server

I'm not talking about UIs hosted on local web servers being able to send requests to themselves, I'm talking about UIs hosted on REMOTE web servers being able to send requests to local ones. It seems far worse than a random cross-origin request to me and for the life of me I can't imagine uses cases.
The Guardian is one of the few places I still trust. Their funding model insulates them more than other organizations (I’m not saying they’re perfect).
Is there a python equivalent to php's apcu? Apcu, in the PHP world, leverages mmap to provide a multi-process kv store, with fast, built in serialization. So it's simple and very fast for single server, multi-process caching.
>Strongly disagreed on that. Not everything is about outperforming the rest of the world.

Indeed. Come over to /r/leanfire or even /r/financialindependence, most of us just want to have stable 'average' returns via funds like VTSAX so that we might retire as soon as possible without betting the farm.
Finding out what thing meets the criteria is sometimes hard.

I wanted to buy a set of nail clippers the other day. I wanted a nicer set than the last one I had, which had slowly loosened up while I used them which led to me twisting and ripping my nail a few times. There is also this feeling that there might be better designed products than the cheap $3 ones you buy at CVS. So many basic products have been improved recently (or perhaps we just have greater access to better products that always existed before), at least in my opinion, that I thought there might be some overall better option.

Well, there are options on Amazon, as you will see, but it is very difficult to tell which is better. The reviews are a disaster. Many fake reviews, many products with multiple distinct and unrelated products under the same listing. Even when I found some that I thought seemed good, I would find a review saying that the machining was off with a picture of the front of the clipper misaligned, which caused their nails to be bent instead of cut... etc.

It was not clear at all, even ignoring price, which was the best option.
Can anyone with a background in quantum information theory tell me how QI models the distinction between a quantum system being measured or unitarily evolved? Nicole Yunger Halpern talks about these things as if the measurement process were a well-defined thing happening at a specific instant in time. How and what do quantum information theorists think about the measurement problem these days?

On another note, having read John Preskill's article (https://quantumfrontiers.com/2015/11/06/wouldnt-you-like-to-...) on the whole topic, including his reference to the zebrafish (https://www.nature.com/news/flashing-fish-brains-filmed-in-a...): Assuming that quantum mechanics does influence cognition as proposed by Matthew Fisher, wouldn't mapping the (zebrafish's) brain then influence how it works?
Or send everything to SNS and have two SQS queues subscribed to the topic.
Yeah, a lot of the stuff I have listed is stuff I don't mind owning but if someone wanted to offer the right price I would let go of them.
There are so many lessons from reading this. The biggest one is that soldiers and sailors are considered "cannon fodder" people and the military commanders didn't really care who lived or who died, so they would feed them the most minimal rations they could get away with until they lost so many that they had to actually do something. I have witnessed this same style of thinking in governments and in large corporations. Also, it reminds me of how the US treats its veterans--as soon as they are used up, they are forgotten about, written off, and "someone else's problem." The US Govt. pays lip service to veteran care but then cuts as many corners as possible and tries to deny benefits to as many as they can get away with denying in order to cut costs.

One ought to question one's loyalty to any such system.
After writing XHTML for several years (giving it a full-faith attempt) I never understood the point. You keep repeating "semantically sound" but I can't fathom what that means in your context. I never saw any indication that XHTML brought significant practical semantic information or standardization over what HTML5 can do. It did add significant gratuitous verbosity that made XHTML documents much harder to read and edit.
I am very confused by your comment--are you claiming that the chemical attacks were faked at the behest of Israel?
Docker can be run via a linux vm nowadays on OpenBSD. Obviously this isn't ideal, but it's roughly how docker functions on macOS and Windows.
Create and Publish a Python Package with Poetry
Treating the symptoms and not the cause.
Good examples are critical. Examples are not a substitute for a thorough explanation, but they can make utilities so much easier to understand. If you're writing technical documentation, please include some examples starting with the simplest use cases.
> By your logic, why use HTTPS in the first place? (Or at least why care about certificate validation at all?)

Privacy is valuable and relevant, and you need some modicum of authentication to get privacy. The main threat here is "someone who's watching all the traffic go by on the coffee shop wifi"
Most people over 50 find it hard to get a job.
It doesn't have any cascading feature for now. @ring.redis_hash can be helpful for certain cases, but it is not a generic solution.

In future, there is a plan for indirect invalidation. It will use another key to decide expiration. Though this is not designed for cascading, but it will probably work for a part of them
To me, unit tests only make sense for pure code.

For impure code, it made no sense to make a unit test.

Ability to separate pure vs impure code determines your test suites, where should be put in unit test, where should be put in integration test.
Ask HN: How to go from (software) consulting to building your own product?
What's been your experience? Is it feasible? What to keep in mind and what are some of the obvious pitfalls?
I recently took Poetry for a spin when releasing Flake8 Markdown[1], and I thought it might be helpful to walk through the process of making a package using Poetry, from start to finish.

I found it more straightforward than using setup.py and twine, which I used for other packages.

How are you publishing to PyPI these days?

[1] https://github.com/johnfraney/flake8-markdown
They are talking about technical people, not blue collar jobs.
I found jk to be the best. If I use it in normal mode it is a no op (cursor up and down). The english language (and most all programming languages) don’t have words with a jk sequence in them (unlike kj). It works universally across all keyboards and terminals. My fingers are already there (unlike esc which is just as bad as lifting my hands to use the mouse). Plus in the rare case I do need jk inputed (very very rare) first the default is a safe default (esc) and second the mental load to pause while typing (pressing j wait past the half second timeout then press k) is no different then the mental load to choose to accept the expansion of abbreviations or delay typing to get around the auto expansion triggers.

Jk for the win!!! (Also jj works well to).

I also set my mapleader to <Space> you would be surprised how useful that is. Not to mention , (comma) is a valid and useful vi movement key.
We have writings about how they lived and what they loved to do. We also know that humans adapt quite easily to the environment.
The late, great Christopher Hitchens spoke frequently about this subject -- and it's as good an introduction as any to the hypothesis.

Do a web search on, say: christopher hitchens empowerment of women

... and watch a few videos where the explanation is eloquently and humorously laid out, along with some reasons why certain parts of various societies are not keen on it happening.
I agree with incorporating negative externalities into the cost of a product, but if the money isn't actually going toward paying for those externalities then it's just profit for the owner.
I came here to recommend Manufactum too. Often, I've noted they offer the same products I have arrived to after extensive research elsewhere. E.g. SNS Herning jumpers.

What is more, after talking to SNS Herning owner, I discovered Manufactum sells a unique version of their jumpers with organic wool. Because they explicitly requested this.

On the other hand, I have also noted a few, but not all, items have big markups vs buying directly from the producer.

Aside, what drives me totally insane about current online and offline shopping is complete dishonesty about refurbished items. Many many sellers and Amazon warehouses have absolutely no ethics and they repackage and reseal used and returned items to sell them as new. It sucks big time.

The scam is so widespread that, for example, Leopold mechanical keyboards are sent to EU and US retailers without any seals. So that returned items never have damaged boxes. Whereas if you buy them straight from the manufacturer, you get some nice tamper proof seals.
The situation for the environment is that bad; far worse, in fact, than most media is willing to honestly report. The Earth is undergoing a mass extinction event, as nonhuman species are pushed out to make more room for humans and our emissions.

Maybe instead of struggling to feed another 4bn people, we should be trying to educate girls and women and give them the tools they need to control their own reproductive choices.
Show HN: Create a personal website to showcase your work as a developer
It’s a bit brushed over and sprinkled in the article but this part was brutal:

> Last year, when Fukui Prefecture was hit by the heaviest snowfall in decades, it was discovered that a 7-Eleven franchise store was banned by the parent company from closing temporarily even after the store owner’s wife fell ill from overwork.

> He lost his wife in May last year and he “was on the verge of falling ill or dying from karōshi (death from overwork),” he said.

It summarizes for me how extreme the relation is between franchise and the owners, how little escape they have from that abusive bind.
We've had a couple of cases of flaky tests failing builds over the last two years at my company. Most often it's browser / end-to-end type tests (e.g. selenium-style tests) that are the most flaky. Many of them only fail in 1-3% of cases, but if you have enough of them the chances of a failing build is significant.

If you have entire builds that are flaky, you end up training developers to just click "rebuild" the first one or two times a build fails, which can drastically increase the time before realizing the build is actually broken.

An important realization is that unit testing is not a good tool for testing flakyness of your main code - it is simply not a reliable indicator of failing code. Most of the time it's the test itself that is flaky, and it's not worth your time making every single test 100% reliable.

Some things we've implemented that helps a lot:

1. Have a system to reproduce the random failures. It took about a day to build tooling that can run say 100 instances of any test suite in parallel in CircleCI, and record the failure rate of individual tests.

2. If a test has a failure rate of > 10%, it indicates an issue in that test that should be fixed. By fixing these tests, we've found a couple of techniques to increase overall robustness of our tests.

3. If a test has a failure rate of < 3%, it is likely not worth your time fixing it. For these, we retry each failing test up to three times. Not all test frameworks support retying out of the box, but you can usually find a workaround. The retries can be restricted to specific tests or classes of tests if needed (e.g. only retry browser-based tests).
Huh? Oberon has both structs and constants.
These aren't American companies. America's actual position is something more like this:

"If you do business in any way with any Americans at any point, regardless of who you are or where you're based, then you will be thrown in jail the moment we can get your hands on you, if you do business with anyone on this list, or with anyone who does not implement our rules either"

See how companies like ARM are being forced to stop doing business with Huawei despite not being American companies. It's massive overreach.
Each thing you remove from your tests reduces the results value by some amount.

For some programs, testing without external dependencies is basically useless. Other times, you can remove them without much loss. But it's always better if you can keep them.
There's usually a fairly long list of things you can't legitimately ask an employee to do on pain of being fired. Like go on a date with you. Or move to another continent for a year or more.
That GNU hates man pages and instead provides documentation in an obscure and long-winded format is part of the problem, not an excuse.
A Guide to Evaluating Closed- and Open-Source Libraries
You don't come from print design by any chance?

You've not been doing that whole web design thing for very long, by any chance? Those of us who have been around for a while do remember the inadequate layouting capabilities of CSS of bygone eras. While I was on the semantic markup side of the debate at the time, it's not as if the pragmatists that just went with the table for convenience's sake did so for no reason at all...
CVS may be "bad", but it's clearly working for the OpenBSD project and they have released roughly every six months like clockwork.
It’s bitter because it’s actually quite poisonous, and your tongue is warming you about that. Dave Arnold’s excellent Liquid Intelligence has a section on making your own tonic with pure quinine powder, and he admonishes the reader to mix with a blender, because an ubcombined chunk of pure quinine could actually hospitalize someone if it ended up in their drink.
Sometimes its just perception from stress, but there can be very unprofessional people out there.

I began using mirroring and calibrated questions I picked up from a negotiations book. I find it to be a very helpful approach that helps me keep the ball in their court so to speak.
Biometrics: A Gift, a Curse?
Show HN: Comfygure – A small CLI to manage application configurations
This is an interesting post to see alongside There Is Too Much Stuff[1], which is also on the front page at time of writing. Many parallels between our collection and hoarding of junk, and our collection and hoarding of junk data.

1: https://www.theatlantic.com/health/archive/2019/05/too-many-...
Show HN: Agent Sift – A search engine to find eCommerce companies
> US is different, here private property rights are part of the constitution and can't be taken away for social good like in some European countries.

That's... not at all true.

https://en.wikipedia.org/wiki/Eminent_domain_in_the_United_S...

Hell, it doesn't even need to be for social good.

https://en.wikipedia.org/wiki/Kelo_v._City_of_New_London
The user experience of docker-via-VM on the BSDs (well, FreeBSD at least) is really sub-par compared to Macs or Windows, and all three are pretty rough in some areas compared to native linux.
I have the same thing and this more likely a laryngospasm caused by GERD. By now I got used to it and after the incident I calmly go to sleep but every time it is happening I wake up terrified and in panic. Again this is caused by acid reflux and can be prevented by not eating before going to sleep, sleeping at an angle exercises to strenghten the upper stomach sphincter. Sleep apnea doesn’t fully wake you up and silently killing your brain cells by depriving them of oxigen.
Lehman's is great — but there's a visible quality line between the items they sell to Amish people who use it every day, and the other stuff they stock for dabblers. The gadgetier the item is, the less good the quality is likely to be.
Profit = income - expense. The other way to maximize profit is reduce wasteful operating expenses.
Gross Scientific Output by Country – Natural Science (2018)
What do you recommend if you're running a local server? Eg, I've developed programs before with the assumption that the user will be running it either for their local machine, or perhaps for their local network.

Think self hosted Wiki/etc. I was never sure (and thusly have yet to properly implement it) what would be secure, but also a good UX. A normal auth + self signed https would be simplest I imagine, but I'm not clear if browsers widely accept that. I recall Sandstorm having issues with this area, and required a domain to fully run properly. Which seems.. complex for a minimal install requirement.

Thoughts?
Steps for Turning a Difficult Situation into a Productive Conversation
I really don't like their series of blog posts of flaky tests. The first one literally used the phrase "fact of life" and implied that nothing could really be done about it (suggesting avoiding high level tests as a result, which was dangerously bad advice) while this one reports a rate that is staggeringly high (16%!) and assumes an intrinsically hard problem ("world class engineers did this!") rather than a fault in their approach.

They could do with being a little more humble and focusing on improving their engineering practices.
I in particular am interested in the vitamin K2, which comes almost exclusively from organ meats. If I had to bet on one nutrient that’ll get the “duh you should’ve been eating X” in a century or two, it’d be K2.
Changing from CVS to something else would mean updating a lot of documentation ... which perhaps is an example of a downside to the BSD way of doing things (the way things are built from source I mean, actually having documentation is good).
Different person.
The Facebook Hacking Tool That Can Hack Accounts, But
That's good to know, but that wiki article was last modified in 2018. It's a bit confusing...
Have you considered creating or contributing to an open source project?

If your strategic in your choice, you can build some experience in what you want to do for your side project.

After you get a little bit of experience at the day job, you can always switch to a new position that is more friendly to what you want to do.
I'm less likely to try OpenBSD after reading that.
To be fair to Google every company in every industry is doing this more and more. It's one of the first things that happens when a merger or private equity takeover happens- aggressively purge full time and move to temp workers for all non-core services to save some money.

Of course the companies that pay more attention to data do this more extensively and aggressively, why wouldn't they?

The army of temp workers/janitors/contractors/uber drivers convene and sleep in the same parking lots at night. It's a whole community of a semi-permanent underclass drifting around, saving the spreadsheets a few points here and there.

In related news, I'm not sure I want to be an American anymore. This is not the country I grew up in.
Because it is prejudicial, which is unfair because it fails to take into account the person's individuality. Such traits do not simply equate to behaviour, the relationship is complex, incomplete and the mechanics not understood. A person's membership of a class which they neither chose to be in, nor can choose to remove themselves from (in this case a genetic brain anomaly), can not infer a fact about their mind or behaviour.
No Raspberry Pi inside?
Are you really saying that a family should spend 96% of their income on food alone and also buy each of those children a car? That seems incredibly detached from a reality of emergency room visits, unexpected damages to house or vehicles, and childcare / educational expenses.

Regardless, it's obvious from the article that the family in question is from a wealthy family.
Theo's GCC criticisms aren't wrong though. Other large projects have publicly criticized GCC in the past too...FFmpeg rings a bell here.
I'm sure one of the end products will include pie.
I really don't think the problem was "belligerence towards pre-scientific human knowledge" - the problem was that the Army did not want that knowledge because it came from the navy, and used "it doesn't meet scientific standards" as an excuse to ignore it.

You see the same in lots of discussions, where people make a claim and, when presented with evidence to the contrary, reject it because it's too small a sample - without holding their own claim to the same standards.
Things can go on for very long periods of time until they suddenly burst. What happens when the current developers retire? I doubt there's any software dev born in 1990 and later that wants to touch CVS, especially for a hobby project.
"worlds first" seems to be a misnomer here. There are machines for tractors that can pick raspberries. The machine works by shaking the entire raspberry bush and collecting the berries that fall.

https://www.youtube.com/watch?v=dOG85YtZhII