skysight-inc/HackerNews huggingface dataset:
> Even the guys on our Node team joke that the node modules folder is abhorrently large. More massive than a black hole is the most common meme.

This "argument" gets brought up every time there's an article about NPM. The STD library for node is relatively small so a lot of that work is outsourced to third-party libraries. The node binary is 17mb for mac os x, the node modules for a project end up 100-800mb maybe? So let's say binary + library size reaches 1GB. Now go and download visual studio to work on a C# project and wait for 15GB to be downloaded. I'm not arguing that relying on a third-party ecosystem is great as it does have legitimate security issues, but filesystem size is not the problem here.
I think it's funny how so many people have an allergic reaction to using a package manager to add fragments of small but non-obvious code to their codebase, but have no issue with frequently using Google to track down one-liners on Stack Overflow, which they then copy-and-paste into their codebase.

Why is you acting like a slow, biological package manager for small bits of code better than using a real package manager for the same purpose?
FileGator – free, open source script for managing online files
We're talking about hundreds of billions of dollars here. How confident are you that you could 'easily' do that without major undesired effects?
Boy do I have the page for you...

https://wiki.debian.org/WhyTheName
Congratulations.

A HD-failure in 1998 gave me the opportunity to try out FreeBSD before re-installing my GNU/Linux work environment on the new HD. After a week it was clear I'm not switching back and ever since I am a FreeBSD user.
Yeah, I guess that's what I'm starting to see.

Like I said, "This is why we can't have nice things."
Lean in or lie down? Balancing jobs, side projects, and hobbies
Unfortunately, you would fall afoul of their license doing this as well. They only allow you to virtualize two instances of macOS per host machine.

(iii) to install, use and run up to two (2) additional copies or instances of the Apple Software within virtual operating system environments on each Mac Computer you own or control that is already running the Apple Software, for purposes of: (a) software development; (b) testing during software development; (c) using macOS Server; or (d) personal, non-commercial use.
That design, in this context, seems bad for security...
They keep saying this is a "stablecoin" but there is no way it can be stable. First, the basket of currencies in the reserve is chosen by Facebook and will fluctuate against the value of the Libra as Facebook (or the verifier nodes, other tech giants) decide.

Secondly, it's a fractional reserve with only 10% of the floating Libra expected to be held in reserve currencies. That amount could also change anytime and definitely will change as this concept is the basis of modern banking.

Third, not all of the reserve has to be in fiat. FB will have some of it in other financial instruments and these, too, will vary over time, so says the documentation. This is another staple of the banking industry.

In other words, your Libra is only worth what FB says it is worth today in trade for some other currency. Those exchange amounts can and will change from country to country, from user to user (never possible before; the ultimate in demand pricing), and fiat to fiat. This gives FB an unprecedented role as an arbiter of global exchange rates and an arbitrageur who profits from a spread that they themselves create.

FB doesn't care about being a nation because, as one of the Rockefellers supposedly said, it matters not who makes the laws if you can control the supply of money. FB's policy documents already divulge that they will control the supply and value of Libra.
I've used this as a hidden criteria for judging a company during an interview cycle. I always ask to use the bathroom and then see how clean it is, and if it looks like it's been maintained.

I visited one private company where I talked to the owner - his office was plastered with pictures of his racing Porsche but the bathroom had rusted metal and peeling paint. Took me about 5 seconds to see where his priorities lay and I bugged out of there.
> Should employers really be asking about mental health history during the hiring process?

There should be some disclosure of potential mental health risks in the job description. no? i.e. Screening for this at a later stage in the hiring process would be reasonable (No idea on the legality, however)
Because EA somehow got exclusive licenses to things they should not be legally allowed to have exclusive licenses for.

Some other game maker would crush EA in the market if they were allowed to use NFL logo's and names.
One-line NPM packages promoting naive excessive code-reuse are eyebrow-raising but not as bad as it gets.

How about fundamentally inane things like giving a cutesy obfuscated name to swallowing exceptions?

https://github.com/electerious/nice-try/blob/master/src/inde...

https://www.npmjs.com/package/nice-try

Used by 1.1 million other packages apparently.
>Money transfers between countries in particular poorer ones is absolutely not a solved problem.

Money transfers in some poorer countries are done successfully via sms messaging and have been for years. You are basically trying to sell people a payment service on their phone, when they already have a payment service on their phone that is backed by the phone company, which would seem less risky to the average user than having the same thing but backed by a marketing scheme.
One of the guys had a name a bit like satoshi and one of the guys had a name a bit like nakamoto. That's all I can remember.
How does Clojerl compare to Lisp Flavored Erlang (http://lfe.io/)? LFE looks like a quite mature project and it maps Lisp directly to BEAM. Interestingly, LFE has a collection of Clojure-like macros (https://github.com/rvirding/lfe/blob/develop/doc/lfe_clj.txt).
I thought this was a post about Emacs. ;-)

Seriously though, really cool. What other non-C languages have been used to make operating systems?
The Reader/Writer interfaces are beautiful in their simplicity, but they're only useful if you want to stream raw, non-Go data. If you want to iterate over a slice or a channel, basically as soon as your data is fit into Go datastructures you don't have a simple and beautiful pattern for working with them as a flow of data.
Queue up the next Verge article in 6 months: "Facebook discriminates on the basis of mental health"
Ok, but lets say you're doing something that requires an isWindows() function. You search NPM, you find this package. At this point, do you not even look at the code? Like, even a glance would make you aware that all it's doing is comparing with "win32", which you can trivially do yourself. So why use the package at all, then? All it adds is overhead.

No, clearly the people who use this package has not taken even a second to review the code, because it if they had, they'd know that it was trivial. Security-wise, that's deeply troubling.
Here's an idea. Why doesn't NPM or some big guy maintain a node "standard library" which pulls top 1000 most used small npm packages into a single one?
How often are you using a new device you need to enter your password in that you can't plug a Yubikey into?
Please excuse me if this is a dumb question, because my primary job isn't in web development, but what is really the benefit of using javascript code from a CDN rather than hosting it yourself? The way I see it, you're opening yourself up for massive potential trouble by essentially giving someone else a free pass on running whatever code they wish on your website, and you're giving up this privilege for what? I honestly don't understand, but it's so popular that I'm assuming I've missed something.
How corrosion inhibitors protect metal: synthesis in the lab and testing [video]
and if you're only looking at the people around you in your own country, that can undersell their influence even more. The entirety of India runs on WhatsApp these days. I was in Cartagena earlier this year, and even their taxi cab dispatch was running on it.
The reply by @mcclure111 [1] is good:

> When I write code, I want to write things semantically— I want to call an isWindows() function, not idiomatically compare a string process.platform (node only) to a string that could change in the future.

> If I have "semantic" functions like isWindows, I want it in a library, not one-off in my project. And if I have a library management system, it's great if the libraries are highly granular— IE, a standard library where each function is one library sounds great.

> …It's just that, instead of maintaining a standard library set containing many small granular sublibraries, the javascript community decided to make every single one-function library an attack/vuln injection surface OH WELL

[1] https://twitter.com/mcclure111/status/1140007877547106305
The quick way to fix this is to open a complaint with your state’s insurance regulatory body, which begins a paper trail and starts a clock ticking for your insurance provider.

Always Be Creating A Paper Trail
I don't know if it's happening here, but I suspect this has happened before:

1) write actually useful package, get 10k weekly downloads

2) split out 100 utility functions and use them as dependencies

3) magic - your packages now have ~1M weekly downloads. You are now a JS superstar.
is-odd's behavior is also extremely odd. It depends on "is-number" (why would this need a dependency to begin with?), which checks in the most bizarre way imaginable if the input number or string(??) is finite. is-number, and by extension is-odd, also doesn't support BigInts.

These projects seem to have been created and promoted just to boost the author's "npm score" / package count. These micro-modules must cause more problems than they solve.
I was just thinking that. 4chan janitors are volunteers. Of course, the payoff is helping 4chan exist, not helping Facebook make a few billion more, so the incentive is still vastly different. Still, that might be the right recruitment pool.
High schoolers are so innately passionate about tech today. May be best to let them figure out where their own passion lies. And just be there to sign off on the purchase orders.

In the past year I've witnessed:

Student run AR / VR clubs producing award winning interactive digital content

OS development in Rust for a robotics competition

Computational cinematography for programmable drone swarms to produce short form content for a YouTube channel

Functional design in CAD of a Martian habitat

CV object recognition and tracking app using Core ML

And an automated burrito making machine!

VR edtech content is particularly effective in classroom settings, with near 100% interaction rates. I'd say producing 3D VR / AR content is probably the skill they are most anxious to acquire. And it involves not just getting Oculus type hardware into classrooms and training instructors. But also Blender skills, narrative voice for the new medium, and thinking about localization for global distribution. There's no downside to being able to express one's embodied teenage reality in an immersive imagined world.
Node works fine when multiple versions of the same package are imported. Python doesn't, and very few other interpreters do either. Multiple version imports become increasingly likely with increased dependencies, so python has a natural brake on dependency numbers. That's why you don't see popular python packages that themselves have lots of dependencies. Even the most popular Node packages can go wild with dependencies, and their dependencies can do the same in turn.

Node has this phenomenon that some people consider harmful because it is more capable in this particular sense.
I hate NPM with a passion but even I concede you could argue that this kind of extreme "plumbing" work is an experiment in world-wide collaboration. I mean technically you probably could make a fix in one package and everyone who uses the package benefits from it even without knowing they use the package. While I want to know how stuff works for my personal satisfaction, that's not what business cares about.
The Worst Sorts
Welcome to the times when we import code by semantics, rather than it’s pragmatics. We’re getting to the next step of evolution in engineering.

Suggestions: series of wrappers for Array renamed as possible applications of Array for those who don’t know what an Array is.
In Hyderabad which is in a neighboring state to Bangalore, most people speak both Telugu and Hindi.

Among white collar workers English is pretty common.
You've used democratically in a positive sense in which I would contest. I don't think it's a force for good and in many cases it has ended horribly. A company is "elected" in the sense that they have to generate revenue (people have to willingly give them money in order to function). The same cannot be said for governments who forcibly extract resources from the people living within their geographic region. One is voluntary and one is forced. We are hiding under the guise of ethically contentious concepts like "social contracts" in order to justify the use of force as a proper mode of operation. Facebook hasn't murdered millions upon millions of people in their name, but governments have.
For whatever reason, "alternative" languages seem to have weird naming issues.

See also - Rust
> It’s only a zero-sum game when their network is at 100% capacity. If they were playing games to optimize usage at peak times I might not care (although they should increase capacity in that case) but when they do this at 5AM it’s clearly bullshit.

I don't know exactly how PowerBoost works. I'm going off the description in the article you linked. The article says that PowerBoost uses up excess capacity on the network when it's available. It follows that you can't PowerBoost everybody, even at non-peak times, without lowering the maximum amount of boost.

> I don’t understand why you’re carrying Comcast’s water here. Nobody else does this nonsense.

No offense, but to most people on HN the physical network is an abstraction that magically delivers bits from point A to point B, and they say crazy things like "networks shouldn't be oversubscribed." I spent my engineering career sitting around layers 2/3, so reading this stuff tends to put me into rant mode.
It's the best of times and the worst of times, all in one.
Also this cute "demand more more or move out" idea isn't even close to reality. You just said there's poor people everywhere. Why move out of a city to be poor when you're just going to be poor somewhere else? To be away from what support network you might have? Because you feel like incurring all the costs associated with moving?

Also, your original post implied that the city doesn't "need" these jobs. People need janitors and food service workers for their companies. Why these people aren't paid wages where they can afford to exist is a whole rats nest of economic theory that we don't really need to get into.

I'm just pointing out, that the idea that a single individual will be able to demand more money if their job is "important" runs contrary to what we've seen historically.
What a stupid name. Why don't they call it libmwfup (lib-make-work-for-unimaginative-plagiarists).
Australians don't use the word 'neat' and Satoshi did.
Facebook really doesn’t need to exist.
My process for requiring it would be as follows:

* need to figure out if platform is windows

* stack overflow search (via google) unfruitful

* npm search - popular lib for this!

* it's got a lot of stars!

* yarn add is-windows
I found Python's standard library to be generally excellent. Not perfect, by any means, and certainly not "all-encompassing", but that's an impossible standard. But it covers the areas you'd want a standard library to cover, and more besides.
When to Use (and Not Use) Emojis in Work Emails and Correspondence
Oh wow am I glad to read that! What is the python equivalent of "npm publish"? What do I need to install and configure in order for that to work?
Humans are stupid and cannot learn anything

https://www.davidhaney.io/npm-left-pad-have-we-forgotten-how...
This one year old reddit discussion [1] seems to indicate that the package was used in another, pretty popular and more complex, package by the same author. The dependency doesn't look current anymore but it might be downloads of previous versions.

As for justification and usage I couldn't tell you, apparently it was only used once in that whole codebase anyway (also according to that thread).

[1] https://www.reddit.com/r/programming/comments/886zji/why_has...
he also modified his blog post from 2008 to insert a reference to some cryptocurrency paper he's working on, compare content of last paragraph in "Tonight" post here (captured jun 2nd 2014):

https://web.archive.org/web/20140602022658/http://gse-compli...

and here (captured nov 22nd 2015):

https://web.archive.org/web/20151122172143/http://gse-compli...
There's also more to it than checking process.platform: 'process.platform === 'win32' || /^(msys|cygwin)$/.test(process.env.OSTYPE)
Surprised it's not OCaml; they've invested highly in OCaml.
"From Middle English -ish, -isch, from Old English -isċ (“-ish”, suffix), from Proto-Germanic -iskaz (“-ish”), from Proto-Indo-European -iskos."

https://en.wiktionary.org/wiki/-ish
Why are you comparing the size of application dependencies to the size of an IDE that includes several compiler toolchains and tons of other build-only stuff?
I like your list, but one thing that would be helpful for me is in the alternative languages available on the BEAM, make the distinction between those implementations which are "BEAM languages" vs those that are simply implemented on the BEAM.

For example, Elixir is a proper BEAM language that targets the BEAM directly in a compile step.... but Luerl is not: Luerl is basically a Lua interpreter written in Erlang. I would expect different trade-offs from Elixir vs. Luerl as such. For example, I have a project where I need a limited, embedded scripting environment inside of an otherwise Elixir project. Using a BEAM language seems to be difficult to impose the desired limitations for such scripting environment, but in Luerl it seems I can do just that... limiting the scripting to a-less-than-system-wide scope. Of course... I expect a fairly substantial performance penalty for that... but trade-offs :-).
When I started working with Class 3B lasers at my lab, I had to undergo an initial medical exam, and then periodic ones to make sure my eyesight wasn't being affected. Guess what the company should be doing?
Also F#'s computational expressions.
I am thinking the onerous part of learning to use Clojure is not the lisp parts but the Java/JVM part, to the point I felt, if one is new to Java/JVM it is very difficult to use Clojure.
From the article (and the others on the subject linked at the end of the article), there are many rules, many exception and edges cases and even mandates for current events (for example, there's been a shooting 15 min ago, do you ban or keep the videos?); in addition to judging if content is infringing the rules, the moderator has to select the right rule being broken ("Do I delete it for terrorism? Do I delete it for graphic violence? Do I delete it for supporting a terrorist organisation" from https://www.irishtimes.com/culture/tv-radio-web/facebook-s-d...).

Some of the decisions taken by the moderators are then reviewed by a "super"-moderator and the match between the two decisions (including the rule chosen) is used as a performance indicator, which has to be above 90% to avoid troubles.
Visual Studio is an IDE.

A better example would be the .net SDK which is a few hundred MB, but is far more featured.

The npm ecosystem is more comparable to nuget packages, but they are generally at a far more sane scope.
They should pay users small amounts of Libra for accurately moderating content. It completely solves the problem and they get to pay their new, more willing, contractors in what basically amounts to monopoly money (in the near term at least).
and lets not be clever, if its a libcurl api for this cronet thing, call it cronet-libcurl or libcurl-cronet or something
What's exploitative about a cryptocurrency?
I thought m68k/nommu exists and is used?
Yea, I agree completely. While I tend to reinvent plenty of wheels, I don't find the idea of importing a package designed for one small task, bad. (edit: missing word)

_Especially_ if it's used by a ton of repos. If, as your example says, something changes where `is-windows` needs to be updated it's likely to either be updated or break so many codebases that someone will update it.

There's a bit of chaotic safety in relying on a web of dependency trust like this. On one hand more people invested in the behavior of a simple package gives you more confidence. On the other hand, it means more developers are depending on more packages, introducing possibly more brittle behavior.

The latter (brittle behavior/deps) has been my experience fwiw. While I don't dislike the idea of `is-windows`, I do dislike introducing more points of random failure. In general if I don't have the idea that my own implementation of something like `is-windows` is likely to need maintaining then I'm happy to do it myself and remove a dependency.

Coming from Rust mostly, but I wonder if the safety of the language aids this problem too. For example, I imagine `is-windows` level of dependencies is far less problematic in Rust than NodeJS.
If You Build It, They Might Come – How to Build a Product That Sells Itself
Widespread and rapid thermokarst development in cold permafrost [ ]
What would that solve?
Facebook's Libra: CRITICAL security vuln fixed
Why don't you have a look yourself? https://maimai.cn/

Does it resemble LinkedIn to you?
Security of Mobile OAuth 2.0
It seems that epic have begun offering a lot of money for studios to port former exclusives to PC to sell on the Epic store, resent examples have been Jouney which was an exclusive for the PS3 and Detroit: Become Human is listed as coming soon.
No, it's pure titlegore.
Agree. And in a richly-typed language you can be more specific:

getUserDetails :: UserID -> DBAction (Maybe AnyUser)

This type says a lot already. The definition of `AnyUser` would specify the parameters that the comment only says in prose. Or we could be more specific

getActiveUserDetails :: UserID -> DBAction (Maybe ActiveUser)

We could also include the authorization specification in the type constraints on the `DBAction`:

getUserDetails :: (DBAction m, HasAdminContext m) => UserID -> m (Maybe AnyUser)

This is what I mean when I say that a rich type system can enforce a lot of what you might traditionally use comments for in a weaker type system. Now my hypothetical comment might highlight some salient points about this function, such as performs N queries to validate all of the available authorization contexts, use with a user role that has a limited number of contexts for best performance.
I heard commentators make the same argument when Facebook was trying to push a Facebook-preferring free "basic internet" in India, which India rejected. It turns out the terms of these ostensibly beneficial deals generally only benefit the western corporation pushing them and aren't great for the people of the recipient country. Yet then too there was this sentiment of "Poor people in India should be grateful they're getting any kind of internet at all!"
Full title is
>Climate change drives widespread and rapid thermokarst development in very cold permafrost in the Canadian High Arctic

But 80 character limit

Its the paper that went through the media recently

https://www.theguardian.com/environment/2019/jun/18/arctic-p...