skysight-inc/HackerNews huggingface dataset:
This looks amazing. Not just for the software (which itself looks very nice), but for the philosophy described in this post.

Some quotables:

> Abscissa applications are Rust libraries. One of our eventual goals is to allow several Abscissa applications to coexist in the same binary, allowing for things like embedding subcommands/subapplications.

Yes! I hate how often functionality is locked away behind a UI (whether GUI or command-line). It drastically hinders composability, and hence reuse. (Yes, you can recover some of this with shell scripts, but you're working with text streams or files, and not the richly structured data that you'd normally have within a process.)

> As David Heinemeier Hansson says, “Great frameworks are extractions, not inventions”

Yes! Don't create "a pluggable, reusable framework for everything" -- create things, then extract the common parts. It's reusable because it's already in multiple places. You don't waste time thinking up possibilities for reuse and customization, because you're already generalizing pre-existing patterns.

> Abscissa borrows some ideas from Entity-Component-System design (though we insist that it is not an ECS and should not be described as such)

I love that they have the wisdom to take ideas from ECS (which is a tragically less-known form of architecture), and the self-restraint to not use that label when it doesn't apply.

Ignoring the technical merits altogether, this post is really well-written and considered. I appreciate the level of detail (and humor) here, and it really makes me very keen to use Abscissa. This is all the more, perhaps, because most of what I've used Rust for has been exactly the kind of command-line tooling Abscissa is targeted at, rather than microservices or embedded software. (I think all of those things are really cool, and we definitely need Rust in that space, but pay some mind to us folks doing the unstylish command-line stuff!)
Steamline 3.0: The World's Largest Icon Library
Taking care of old or sick relative is not selfish. Staying in the same job is not selfish. No more selfish then changing job because some perk.
>even if that means telling someone that their question is stupid – which means breaking a rule that is essentially the cornerstone of any other Q&A setting.

Although I'm sure that happens, the site is explicitly designed to be a pseudo-wiki (Jeff counted Wikipedia as one of its inspirations), so if you ask a question that's too specific to your use case (i.e. that other users will not be able to put into practice) or a matter of opinion, then there's a legitimate reason to close it as not an appropriate question for Stack Overflow. Most other Q&A settings, such as Quora, are not trying to be pseudo-wikis, so these questions make more sense for those contexts.

For example, if you asked, "Should I use MySQL or SQLite", that's not a great question for Stack Overflow. You might instead ask, "What are the key differences between MySQL and SQLite" which can then provide the insight to answer your original question as well as help other users.
Same tangential relation: Ivanpah is amazing. Note that the tribute mirrors are just 1/3 of the total installation.

Had a partial tour of it a few years ago, before they accidentally focused the mirrors below the steam boxes and destroyed the towers. They rebuilt with molten salt so they can supply the generators at night.
Nah, it is just startup culture. A world where a company that produces AI enhanced user tracking for ad purposes can have a tagline of "improving humanity" or some such nonsense.
When I go to work there are 500 people in the building, but less than 10 that I consider close enough to care about. That can be zero in different conditions. Having over 7 billion people on the same planet has no impact on loneliness, the discussion is not about physical loneliness.
Thank you. That makes sense. I appreciate the answer. I camp outside that area sometime -- I'll try to get a good look with my binoculars the next time I'm there.
You realize the site redesign isn't why Digg failed, right? At least not the literal UI part, anyway.

They formalized power users by giving them outsized control of content, and that is what drove people off the platform, not because the site was less pretty...
That's an easy one, you sell #IStandWithIlhan shirts. Next ad? MAGA hats, so you can sell to both sides.
There is a Name Constraints extension in X.509[1] that does exactly that, but to my knowledge no browser implements it.

[1] https://tools.ietf.org/html/rfc5280#section-4.2.1.10
It turns out that children are inherently well qualified for the job of chaos monkeys.
Ask HN: How ready is this form builder for launch?
Internet provider will be able to read all your data in plaintext.
Logins, passwords, anything you send.
How to Know He Only Wants a Casual Relationship
1. I act in the interests of society, rather than my own. It's the issue of the prisoners' dilemma; I'm not going to be the sucker.

2. I honestly don't know what you mean here. I will almost certainly not draw much in the way of health expenses; this is exactly the way insurance is supposed to work. What is wrong with not billing every thing to insurance and not paying for the privilege? If every one did this, consumers would be price-sensitive and costs would drop.
I have a somewhat different intepretation of the value StackOverflow provides. To me, part of what makes SO useful is the somewhat inconsistent, but still fairly obvious, requirement to do significant personal research, before asking a question. If a Here, let me google that for you link to the top result answers a users question, shouldn't there be some sort of negative feedback to cull those types of questions from the platform?

My point is, by discouraging behavior that the community is "generally" opposed to, SO helps in ways beyond just answer questions. That said, if they can make it a little nicer to ask a question, without losing the core value they provide (IMO - quality questions & quality answers), then by all means lets give it a try.
>...To summarize the issue: we have a mixed economy. We do not have what advocates of capitalism want: a purely capitalist econom ...

I agree. I asked for an example in my message, since, as you point out I've never heard a "pro-capitalist" singling out the 2008 crisis as "oh that wasn't real capitalism". People might want to narrowly define the meaning of a capitalist economic system but that is a bit different than what it looked like the OP was writing.
It allows for more questions for the team leads and ad-hoc pair programming, which likely cuts the productivity of the team lead (or more knowledgable workers) while benefitting the members on the team with less experience.
How to make millions: Identify an interesting problem, make a totally random solution and conflate that as being intrinsically linked to your perceptive capabilities of identifying the problem.
The government and ISPs will have access to everything people do on the internet in Kazakhstan.
Hello HN, I'm part of the team that's prepping this new online form builder. It's been developing for almost a year now and we know that the features we wanted to be ready, are ready.

I'm hoping to get a user's insight on their experience using the builder, like: were you able to use all features, what features you want next, what do you most need an online form for, that kind of thing.

We added a survey on the app, but got zilch feedback through it.

Beta users sign-up is free and get 2 months free after the launch. We want to launch soon so I really appreciate any feedback.

Thanks in advance! :)
Agreed. I'm also in the US, but my family of four's food budget is about $100 per week and we eat very healthy. Lots of fresh fruit and vegetables. Meat tends to be the most expensive thing, but you can get cheap cuts (<$3/lb = <$3 for 2.5 servings) and always supplement protein with beans.
I was unsure as well. Given this later tweet, all indications are that he was serious:

https://twitter.com/skirani/status/1150019060467240960?s=20

"I am surprised by extreme views on 10x engineers. They are great individual contributors. They may not be good with teamwork. So what? They can be phenomenal in the early stage of the product cycle.

Find the best in each & get the best out of them. That's what good managers do."
The only requirement to be a VC is to end up in control of a huge bag of money and a checkbook.
Explanation for the Absence of Extraterrestrials on Earth (1974)
> Twitter now has obfuscated CSS classes for everything

Non-deterministic class names have been popular for a while, especially in React; open up Chrome inspector on a Gmail tab. Sometimes they are used for minification. This might not be a (strictly) hostile change.

It annoys me too, I write custom CSS for any site I use a lot.
On a tangent, do you know off-hand what browser support for name constraints is like? The last time I looked was a few years ago and at the time it wasn't well supported but if that's improved it'd be a good step for intermediate certs.
NYTimes style, 'nuff said
These are not leading questions. "Single payer" definitionally means there is a single entity which pays, meaning no insurance or private pay. You're using it like it means a government plan; it doesn't. The reason I'm asking is because some politicians are crazy enough to want to prohibit any thing but a government plan, and I don't know where you fall.
The state of Kazakhstan is intercepting all encrypted web traffic. They may filter it, block it, inject nasty things (malware etc) or just spy on the populace.
Interestingly, wikiwand is exactly what was looking for. Thanks! Unfortunately, it is not open source.
hmm, certificate pinning will not allow this gov-ca to work for a lot of high profile web sites. i wonder if these sites with cert pins are whitelisted by the kz gov?

--

somehow i missed that HPKP is dead and will be removed from chromium and all the derivative browsers. now google is focusing on Expect-CT
This is so useful! Thank you for this.
1930s
My parents were born very poor (they were both taken out of school and put to work at 11 years old - yeah let this sink in for a minute). They did work all their lives until they retired though, specially my mom that having no job formation kept picking up any jobs she could find. My father went to school at night (started studying again while he was forcibly conscripted for war) and had two jobs.

We always did eat very healthy at home. First because my parents saw that as one of the priorities (they never went to dinner out, lunch out, even coffee out in my early years, since they couldn't afford that lifestyle and keep their finances in a proper state... I guess the only luxury we had was having a dog - for which I am very grateful), second because they would take the time and effort to prepare a proper meal (yes, even after arriving home from working all day in their physically demanding jobs) and the ingredients to a healthy meal are cheap, but it takes effort to put that kind of meal together.

All this happened in what is today a somewhat rich western European country.

It really bothers me (and I guess other people like me), this culture of constantly dismissing people lack of self responsibility. In the EU (and I would go as far as saying, in the all 1st world), if you are willing to work and to watch how you spend your money (and this means closely, no 5$ latte like another article today just talks about, or ordering pizza because you don't want to prepare dinner), anyone can end up having a comfortable life.
The Govt of KZ in this case can monitor all internet traffic over HTTPS.

https://en.wikipedia.org/wiki/Man-in-the-middle_attack
How subversive! How subversive!
The argument here is that enabling HSTS can be dangerous because if you enable it and then later become unable to serve HTTPS for some reason, you will have no way of turning it off. Even if you get your clients to manually edit their bookmarks to use HTTP again, their browsers will just rewrite the url to HTTPS anyway.

There's no issue with switching FROM HTTP to HTTPS: that's easy, just redirect them. The issue is if you have to switch back.
ah yes, meetings, that famous bane of the hunter-gatherer lifestyle
Question to local readers: Is Kazakhstan also blocking VPNs and SSH?
Would someone with network access in Kazakhstan check if Caddy's MITM detector catches this please? https://caddyserver.com/docs/mitm-detection - or https://mitm.watch (Cloudflare's unofficial deployment of the same tech).

If it does not, could you file a bug report with a complete packet capture (and exact browser version - multiple browsers are preferred)? https://github.com/caddyserver/caddy/issues

(Edit: Reportedly, "not all Internet providers have started MITM attacks yet" so if you do the test, make sure you are on an intercepted network... if safe to do so.)
Dang, I was hoping the blog would go into a little bit about how they accomplished this! Either way though, insanely cool tribute.
That's the thing about a trick... if you reveal it, it's gone. I suspect there are a few Spotify engineers who read this; wouldn't want to give it away.
HN is far more hostile than stack overflow :)
My understanding is pinning will not block this, locally installed trust anchors bypass pinning.
https://groups.google.com/d/msg/mozilla.dev.security.policy/...
Is the navigation on mobile for you on the left or on top? No matter how small I make the browser window on desktop it still shows the navigation on the left side as a vertical bar but on mobile it always shows as a top bar. It's a big difference in my opinion and I am curious which version you like.
Onions actually! They keep pretty long, they go well with a lot of dishes, and they have a fair bit of vitamin c!
A Certificate Authority is an entity that verifies the identity of websites for your browser. There are only a few CA's in the world and their integrity is crucial because of how your browser trusts them. By making users install a government-issued CA, and also controlling their internet provider, the Kazakh government can pretend to be any website and therefore see all HTTPS traffic from the affected users.
The only people who come to mind when I think of famous programmers are John Carmack, Grace Hopper, and Linus, maybe Ada Lovelace if you want to include her. Though Grace and Ada didn't use version control so they wouldn't be able to make the list anyway.

Who are the other famous women/minority programmers that people don't know about?
I wouldn't be putting bread on the list of stuff to buy if we're aiming for healthy things, but yes, that's also really cheap as well.

I'm not sure I understand your point about the intersection of readers and those buying food at Walmart. I get that the overlap is probably not large, but I don't see the connection to the claim made by the article. Whether or not a low-income person reads that report they are probably still shopping at a place like Walmart so the prices are what they are. And that claim from the report is still bullshit either way because however they are measuring it is clearly designed to fulfill the desired outcome so they could write it up this way.
Chips with fewer working cores or lower frequency are definitely easier/cheaper to produce and customers have a range of different needs. Xeon SP is ~90% of the server market so that's a pretty large and diverse market.
> Isn't it also reasonable to think that people consider the information they take in?

We started this conversation talking about people who believe the earth is flat.
C++2a Coroutines and Dangling References
Wow, that license agreement it brutal. What sucks is that because they have access to the whole photo library, even if I don't want my face on it, they can still get my face via my friends' (or parents') phones that have taken pictures of me in the past. Because we are all connected, it makes it really hard to not be sucked into this (even if you don't participate)
> You might instead ask, "What are the key differences between MySQL and SQLite" which can then provide the insight to answer your original question as well as help other users.

I'm pretty sure if you ask that exact question, an even if nobody has asked it before so it isn't a duplicate, someone will find some reason to shoot it down.
I think there's a real truth there - the most lauded 10x programmers are typically the "face" of a group of talented and productive people. As their legend grows, more and more work of the group gets attributed to them.

I think Elon Musk is another good example of this phenomenon.

Certainly, there are programmers vastly more productive than the average, but I think when you think of any legendary programmer (Linus, Carmack, Knuth), you're also likely impressed by their significant supporting cast.
I believe that about as much as I believed the actors who all said they'd go to Canada if Trump were elected. (they are not in Canada now)

Money talks. Most actors are desperate for money.

It's not as if actors constantly get abortions during filming... I hope.

Actors constantly go to on-location filming in places that don't meet Hollywood standards. They go to countries where women are property and there is a death penalty for willingly receptive gay men. If the actors will go to those places, this is just posturing. It'll all be forgotten when there is a paycheck being offered.
Here, even in super expensive CA, In college I got by with less than 2-3$ per day on rolled oats (70c per lb), Onions, potatoes, flax seeds, green peppers, bananas, whole wheat flour etc, all of which were less than 1$ per lb if you go to the right stores (for example Sprouts).

Going to McDonalds is much more expensive, something like 20$ per day!

With the proper education, you can eat cost effectively and very healthily. And, I know it's really controversial to say this because of the decades of conditioning we've received from the dairy and meat industry, but Meat and Dairy aren't needed in the diet, and have been shown to even cause cancer, heart disease and heart stroke for many. (source Forks over Knives, the documentary, plus the China study -> check it out, seriously.)
Identity Theft on the Job Market
Theoretical quedtion: would a VPN in Kazakhstan allow you to test this?
There is a 36.7%(or ~1/e) chance that you don't get any of them.
Note that they _do_ heat the plant with natural gas overnight, so there is a huge fire in there somewhere.
and you think that lifestyle is sustainable?
But it is a feature, there's a few different (good) reasons to do that. Here its almost surely tied to CSS-in-JS/React.

HTML class names would not affect accessibility.
> this type of approach is only possible for a certain set of applications which take the form of y = f(x), where f(x) is some type of data transformation /computation operation (e.g. calculate the GCD of these ints, find the shortest path through a given graph, sort this set etc)

These days I'm trying to be mostly an embedded guy, and 100% understand what you're talking about re: problems that don't lend themselves well to mathematical modelling. Figuring out that your SPI bus is going slow because you've got the wrong multipler in a clock domain isn't a math problem :)

What I'd like to add to your y = f(x) examples though is that many Business Problems can (and probably should!) be modelled as y=f(x) type problems. I've seen a ton of business logic over the years that modifies objects in a pretty ad-hoc manner and is incredibly hard to reason about, especially in the big picture. The vast majority of the time, those problems can be modelled roughly as:

new_state = f(old_state, event)

When you start modelling the business problems more formally like that, you can start using things like TLA+ to do model checking and find gaps in your formulation of the problem. Maybe you've got an state/event pairing that you haven't thought of. Maybe there's a way to get a model into a state that it can't escape from. TLA+ is useful for a lot more than verifying "calculate the GCD of these ints, find the shortest path through a given graph, sort this set", and I want to make sure people reading this don't write it off as a mathematical curiosity.

I've done a few embedded implementations that had pretty complicated state machines under the hood (off the top of my head, a LoRaWAN implementation). I modelled the states in TLA+, and it was a wonderful platform for discovering the flaws in the model I'd put together. It took a couple iterations before the model checker was happy, and from there the implementation was mostly mechanically translating my TLA+ model into code. There was some housekeeping stuff to keep track of (the TLA+ model was an abstraction), but it pretty much worked first try.
> I've been a journalist, analyst, and corporate executive, and have chronicled the rise of the mobile economy.

Thats because he needs to be able to be contacted to gain outsized benefits from society. Writing about this stuff "first" gets you tapped for corporate executive roles or lucrative expert witness roles in judicial proceedings. It is called "thought leadership"

He is much more objective about doing this than malleable people fearing missing out
Do you make a distinction between stealing a pack of gum and stealing a car?
I don't see any evidence that the market has given a 5-figure value, let alone a 7 figure value, to temporary access to an Instagram account.
Satellites and rockets have a lot of regulation. SpaceX for example needed FCC approval before launching test satellites for it’s internet project.

Satellites seem largely unregulated because they impact such a small number of things. It’s not not like the FDA is relevant when it’s all photons being sent back and forth.
A deep dive into Linux namespaces, part 3
You can disagree with their guidelines, but the food you listed definitely wouldn't be following "Public Health England’s eating advice."

> Also, sausage is usually very cheap

Almost no one is going to recommend that you make processed, preserved, and likely sweetened meat a significant portion of your diet.
When you connect to a website via HTTPS, your browser downloads the certificate from that website and validates it by checking that the website's certificate was cryptographically signed by an entity that the browser trusts. If the certificate is valid, then you can assume that your data will only be decrypt-able by the website owner, so the connection is secure. Your browser will display a happy green banner showing that the connection is secure, so you can feel safe sending private data to that website without it being eaves-dropped along the way.

The browser checks for validity by ensuring the website certificate is signed by a certificate that is shipped with the browser. These "root certificates" are usually owned by Certificate Authorities, such as Verisign or any other number of CAs. CAs ought to verify that the entity creating a new certificate is who they claim to be (the website owner) before signing a certificate. This way, you trust Verisign to tell you that you can trust the target website.

What Kazakhstan has done is create their own root certificate and asked people who live there to install it in their browsers. They are also intercepting any connection to facebook.com and giving your browser a Kazakhstan-created certificate, which is then verified against the Kazakhstan-owned root certificate. Since it will pass this check, the browser shows a happy green banner, even though the certificate is owned by Kazakhstan and not facebook.com. In other words, the data people in Kazakhstan send to facebook.com is now being intercepted and decrypted by Kazakhstan before being forwarded to facebook.com. Facebook is the example used in the linked bug, they can perform this with any other website, too.