skysight-inc/HackerNews huggingface dataset:
This is an unfair go at the poster. He said "I'm not arguing that npm install logs should be packed full of ads (it shouldn't)."

That's clear as can be. He's asking the same question I am, how do we get sufficient funding for these projects. Re your patreon suggestion, I thought we recently had an article where someone got little to nothing on that.

> or getting hired by FAANG

So one way to support foss software is to get hired by a closed source company. Kind of defeats your point.

This is the problem right here, "I want but I'm not personally going to pay". We get ads (funding model of the modern web) or foss remains underfunded while non-foss companies get the cash they need. The problem is human nature. And yes, I've personally opened my wallet for them, and will again.
How would they be know whether data have been indeed taken? Computers and phones (especially Android) get malware all the time, no vendor goes and informs the users...
I don't like terminal ads either, but I wouldn't mind them if they meant that the creators of popular libraries can keep maintaining their work without giving up their personal lives.

Monetization is still a huge taboo in the open-source community and is badly viewed by many of it's biggest beneficiaries, developers who make their entire living out of skills that consist of knowing how to use these open source and free technologies.

Shouldn't the creators of these libraries that bring so much value not be able to make a decent living maintaining them, instead of working for some company maintaining a silly CRUD application during the best hours of their day, while their side project which is much more valuable to the world only gets the odd final hours of the day, at the expense of their family?

If more open source maintainers could make a living doing directly open source, this would mean better quality libraries, better documented, and more overall libraries that solve more common problems.

People would be able to contribute to open-source well into the end of their careers, and not stop due to family life imcompatiblity.

If terminal ads would the price to pay for that, I would not mind at all having them.
Of course they could, but the Implant according to Google didn't make any attempt to hide itself.

I'm the tech lead for my company's in-house mobile app crash reporter. Every so often we get reports that make no sense. Sometimes they are corrupted in strange ways which I just chalked up to bad device memory or storage, but who knows if something like this wasn't the cause. Semi-related, but I used to have jailbreak detection in the crash reporter SDKs but I had to remove it. Just attempting to detect a jailbroken device was in some cases causing the SDK to crash because the anti-jailbreak detection code injected into the app was buggy.
Fundamentals of Front-End Django
You should say "In JIRA your performance could be measured"...

We use JIRA and we find it extremely useful, although we never use real-time values for estimates or reporting. Story points, which I believe are recommended by the Agile framework, are used to estimate and draw burn down charts and reports. We can then use these to adjust our estimates for future sprints.

JIRA really is a tool and just because some managers use it poorly, doesn't mean that is why it was created. Those managers would be bad regardless of the tool.
If you want experienced candidates, you can't bottom fish.

In the embedded space, I regularly see listings that say "Senior Embedded Dev needed: 3+ years experience in C and blah blah blah"

So what you're telling me is either A) you have no idea what a senior developer carries in terms of experience because the market has compressed the experience bands or B) you want senior competence at a junior rate.

Almost always, without fail, it's B. So I'm going to ignore the ad.
Sounds like someone is trying to play a prank on Echo owners. I doubt an actual child is trying to contact you and I'm not sure why Amazon would want to generate such a message to users.

Your device hasn't been paranormally occupied either, it's merely just playing audio that someone felt like sending to you (and possibly others).
Can Firefox users on macOS be affected or is it just Safari?
Transhumanist Resources (2000)
I wouldn't paint Canonical with that generalization. It's not unheard of that they have dropped projects, but I wouldn't say it's common. But looks like their primary use is LXD, which doesn't seem to be going anywhere...
He's referring to people who open issues on random projects asking the project owners to RIIR. These people often don't create much on their own, so they're pushing a "I can't help this cool project because it's not using a language like Rust that would make me capable of contributing, if they rewrote it in Rust then they'd have the reward of my presence in their codebase" when in reality language choice is a small hill to climb

I was recently having someone do this on a web project of mine that's written entirely in ES6 Javascript
> Are you trying to say that this is also not acceptable?

Not OP but I think it's acceptable. I'm happy to see my favourite free (as in freedom) projects' developers being supported. If someone doesn't like it and if it's truly free software then anyone can fork it to remove that ad and we don't have a problem. That's how free software works, if you can't, then it's not free software. If one just won't fork and opposes what a free software project does then that's just entitlement.
Actually it's not bad at all much less "horrifying", that's all old wives tales...

It's not bad for the phone, and whether it's bad for the battery depends on the battery technology. In fact previous battery technologies were recommending the occasional full drain!

For lithium-ion batteries the kind used in the iPhone draining to 0% can indeed strain them (though less than you think, as shown by research), but the iPhone doesn't let them go to 0% anyway. It switches off way before that (even if it shows it as 0%). Mind you that regular use cycles (defined by Apple as using 100% of a full charge, even if it's broken down as going from 100% to 80% for five days and recharging) also strains the battery. You cannot not strain it, all current technology batteries degrade over time.

Also note that getting lithium-ion batteries to 100% and keeping them charging can also harm them (although modern devices have mechanisms to prevent that). In general it's advisable to keep going from 80%-20% and back, than to go all the way to charged (or down to 0). Same, one should not store long term fully charged.

But most of this is irrelevant micromanagement unless you plan to keep your phone for years and don't ever consider replacing the battery. Even so, the battery lifespan vendors like Apple give is around 3 years of cycles.

All in all, you can fully drain your lithium-ion iPhone battery as often as the average person does (e.g. just avoid doing it all the time), and you'll see no special degradation. It will run its cycles and will degrade by regular use after a few years even if you never let it drain (and you can trivially replace it with a new one).
This is actually super useful sha666sum! It's interesting looking at the difference between the two too. Where Visual Studio IDE is super direct, and Visual Studio spans a number of use cases. I feel like that's where I'm getting caught in the middle of.
For example there is a concept visual attention. You plot which areas of the image the model pays attention to when making it's decision.
> because the government can't dictate what you do with your body.

Except for the military draft?
They could do that silently or at least in some optional privacy-oriented way, e.g. like Telegram or Signal.

Instead they are actively implementing features to disclose everything to everyone.
I think, they are already banning many of the malicious apps. As nobody cares about those apps, these removals don't make any news and therefore it seems google is not punishing malicious apps.
Sprints also have a specific meaning in Agile/Scrum vocabulary which should be pretty common around here. That's like suggesting github promotes physically aggressive behavior because it's centered around pushing. Nothing about a sprint in Scrum terminology is meant mean an unsustainable pace.
You buy 2-3 slices of bread every morning? Or are you buying some kind of roll or smaller unit of bread? The smallest unit of bread most people are able to buy is a loaf, and for me, it takes a week or two to go through a loaf of bread.
Never happens to me, I charge pretty much everywhere. In car, at my desk, etc

Seems people are going out of their way to let Apple off the hook for not disclosing to the user a major risk and silently fixing it.
I am being thick; what's the relevance of that?
Also not to pile on, but the world "hello" is misspelled in every single usage on the page.
If the private one is the main module, you don't have to do anything, it doesn't get sent anywhere because it's just what's on your disk. Indeed, you can call it "module foo", which is not a go-gettable name.

If you _depend on_ private modules, you need to follow these instructions: https://tip.golang.org/cmd/go/#hdr-Module_configuration_for_...

In any case, private modules never show up in the index, mirror, or checksum database.
Every iOS update I've had has resulted in a reboot.
His vehicle ideas are also fascinating:

https://daten.digitale-sammlungen.de/~db/0001/bsb00013084/im...

https://daten.digitale-sammlungen.de/~db/0001/bsb00013084/im...

https://daten.digitale-sammlungen.de/~db/0001/bsb00013084/im...

https://daten.digitale-sammlungen.de/~db/0001/bsb00013084/im...

https://daten.digitale-sammlungen.de/~db/0001/bsb00013084/im...

https://daten.digitale-sammlungen.de/~db/0001/bsb00013084/im...

I interpret the last two images as controlled projectile vehicles that move along with the usual ship traffic, but with the power of fire!
> can refrigerator design help

or perhaps a software solution can help. Your fridge could recommend you eat certain things which are about to go mouldy.
Curious, what industry are you working in now? Do any skills from the ad industry transfer over?
That's not really the definition of 'food desert' that I think about when I hear the term.

I always figured it applied more to super-poor city dwellers.

10 miles in a rural area is nothing. Like, I'm 10 miles from the nearest town right now, and that feels pretty close.
Yes, I don't mind if it shows up in the index. I have nothing to hide.

That just seems wasteful and clutterish. If too much of that occurs, the index could be littered with it. Sort of like old PGP keys that never go away.
> Think of it like a newspaper classified ad.

Consider also the quality of advertising those organizations (newspapers, magazines, etc) submit their readers to in the digital domain. The worst sort. That newspapers printed on paper lack telemetry is not attributable to pure motivations on the part of the publishers. Rather, print newspapers lack telemetry simply because nobody has figured out how to put telemetry in them. Were it's possible, those same organizations eagerly adopt telemetry because of the nature of the economic incentives in the advertising industry.
How does that analogy work? You're keeping your fridge overstocked in case of an outbreak of .. hunger? Unexpected guests?
Okay? So you probably also don't trust Microsoft.

Well then if you use Linux, it's pretty secure. But most money goes into headless servers.

Do you trust the GNOME project, is it well funded? Or KDE or whatever.

Actually fundamentally. Do you trust the X Server?
Sure, but the toxic cesspool that is undermining civilization has less to do with software and more to do with the way that we have organized civilization.

I can understand what you mean, though. It's really lame to hear "that's how we've always done it". My personal opinion, however, is that language's like Rust are still taking the wrong approach because we should be making the computers manage the memory for us. Much of the guarantees from Rust's type system could also be gained by more advanced garbage collection or designing hardware in conjunction with garbage collectors to get around some of the thornier issues in that field.

If you could take out the perceived drawbacks of garbage collection, then there isn't a reason to do manual memory management. That's my personal soapbox, though, and I could go on.

Cheers.
Well grocery store trips are a time consuming hassle (and I have a decent grocery store within walking distance). So it makes sense to save time by stocking up, even if that results in a little food waste.
In the public sector, management has very little they can do about raises. Raises are an act of legislature or the governor. The number of people at each level within a bureau is likewise an act of legislature or governor.

Likewise, the pay isn't anything hidden either. This number is well known https://projects.jsonline.com/database/2019/4/Wisconsin-stat... (much of the technology side gets classified as IS SYSTMS DEVMNT SVCS ...). Compare those numbers to the averages for the area https://www.payscale.com/research/US/Location=Madison-WI/Sal...

People applying and taking the job know exactly what they are getting and going to get for compensation and benefits. Pay is a bit on the lower side, vacation is on the higher side, the pension is fully funded (actually at 102.9%).

Thus the ability to juggle things to retain a person is very limited - especially when that person hasn't been there for a full year.

Consider then, that the person is accepting the job, knowing that this is the public sector, knowing the wage history, and looking for another job elsewhere (many have left to move out west). It is not exactly practical for state government to try to match west coast compensation.
Hey ljw - I get it, but don't you feel like user testimonials are better as a section of a landing page rather than the header?

We're had some people pretty stoked on twitter lately, but it feels awkward throwing their testimonials front and center.

Have you seen or tried this?
>Is there any country where everyone lives comfortably working full time at any job?

I was probably a bit hasty in asking this question, it's a bit silly.

That being said, I don't know if you can compare NL and US as it's population is 10x lower and as you mentioned has much higher taxes and government programs.

Also, for some reason I can't find recent poverty statistics for NL later than 2015, and I saw stats going from 11.6% to 14% which puts it fairly close to US 12.3%. I would expect given the massive social programs and minimum wage for this to be lower.
My parents have been doing that since I was young. This way they could avoid going to the bakery in the morning like many people in germany do.

But frozen bread is not quite same. It has a strange crispiness to it.
Woof. That is a flaming hot take my friend. Allow me to counter: We no longer require children to produce labor for our living. This allows for all sorts of different outcomes. Some good (more time for education in a wider variety of matters, development of different social skills, etc) some bad (less time focused on the development of "cause to effect" production education, more sedentary lives, etc).

Some parents are bad parents. Some people on simple 3rd world farms abuse their children. Some people in developed metropolises focus on teaching their children to learn and enjoy life. The world is changing, and it's generally a mixed bag. You want to call it sad and depressing, that's fine, do you. I don't see it so cynically.

As the saying goes: You take the good, you take the bad, and then you have...the facts of life.
I only gave it a passing mention, but the software that drives the car itself (not just the central console) had some serious security vulnerabilities last year: https://www.zdnet.com/article/over-a-dozen-vulnerabilities-u...

But in general, the car companies take a little more care with those life-critical systems, for liability reasons, if nothing else.
Totally! But very few of those articles focus on developers

...which feels like a totally different BEAST
That apparently costs $50/mo to read. But it seems to discuss iPhone only. The universe of iOS devices is not limited to iPhones.
The sad history of Unicode printf-style format specifiers in Visual C++
They actually do try to enforce it, but right now it's a losing battle. You can spin up a new voip company and start blasting scam calls from an overseas call center in a weekend, then spin that company down before anyone has any idea who you are.

Customers complain to carriers, who then either get the offending voip provider to block the scamming customer, or just threaten FCC action. But the whole cycle is so slow and you're fighting a never-ending shapeless horde.

I think STIR/SHAKEN will help with this if it ever gets fully implemented and enforced, and voip providers are always trying to come up with better fraud detection to avoid the man-hours associated with assuaging carrier concerns, blocking the customers, etc, etc.
Could we have universal standardized hardware interfaces for basic functionality of hardware devices? For example at least get the same programming interface for basic functionality of Wifi chips. Then one could have more accelerated drivers which makes use of all the specific hardware features of chips.

Network chips has started to offer a common programming api as far as I understand Switch Abstraction Interface (SAI). Could one do this for more different than network hardware classes?
Most Go projects are hosted on Github. Github is backed by a global CDN and can handle significantly large projects. I don't think the focus of this project was to address slow network access. It was primarily driven by the need to analyze dependency usage and perhaps add redundancy to some extent.
TL;DR

People like you if you wouldn't sacrifice them for the benefit of the group.
Its game theoretic framing of group decision making is seminal.

I've participated in a handful of standards committee type orgs. I so wish I had read Logic of Collection Action earlier. It might have saved me a great deal of heart ache.
The reasons aren't obvious to me, but I'll try to keep this in mind.
Update to het. male dating best practices: Be tall, confident, and deontological.
Midwest US. It's right at 40 miles from my door to the store, so like 65km?
> The price of gold currently implies inflation of ~8% p.a. since 2005

Looking at the chart. have we been experiencing deflation since 2011?
So far as I understand it the existence of a magnetic "North Pole" is a weird temporary coincidence, like if you discovered a friend's phone number is the same as yours but in the opposite order of digits. It doesn't mean anything and it might change also for no particular reason, so you should probably avoid depending on it if possible.

Magnets are more or less bound to point somewhere on a planet containing a core of molten iron, but my understanding is that it could easily have been towards Australia, or Mexico or anywhere.
I hope it gets even more popular soon to keep it from getting killed. Even in the valley, very few people I know are aware of Google Voice let alone use it. Google deprecation is always on my mind which causes me to stay away from any new Google products.
Then don't complain if you get hacked and your bank account gets drained.
These software failures expose the folly of outsourcing all software development to Indian contractors.
>How many households had two Model Ts, and how many households today have two cars?

Like my response above, I think that's a valid and interesting point that should be factored in. I'd also be curious to see how much this plays into the overall debt load of consumers. I.e. does the necessity of dual-incomes force the need for multiple vehicles which in turn forces a higher debt load than previous generations? Where I come from, taking on vehicle debt is considered as much of a given as mortgage debt.
Someone else mentioned it in another thread, but the propagation of issues related to code in unsafe regions to other sections of code that are nominally safe is an ongoing research area. It sounds really cool, though. Would love to hear more about it.
> What's more, every time you download a banking app on your phone, you have to place a little bit of trust in the competence of whoever the bank outsourced the programming job to. At least with a laptop, a poorly designed website site is not (by itself) a threat to everything on your computer or other sites you visit.

Both would require a 0-day exploit to be a threat.
Google finds evidence of attempted mass iPhone hack
defrost on colander.. pat dry.. cook..
Any site hosting any sort of popular blogging or forum software would've been a potential vector.
Rental fashion startups are gaining serious traction in the industry
"Foreign functions are assumed to be unsafe so calls to them need to be wrapped with unsafe {} as a promise to the compiler that everything contained within truly is safe. C libraries often expose interfaces that aren't thread-safe, and almost any function that takes a pointer argument isn't valid for all possible inputs since the pointer could be dangling, and raw pointers fall outside of Rust's safe memory model."

https://doc.rust-lang.org/nomicon/ffi.html
Yup, just this week I noticed the npm package `core-js` used by the Babel transpiler was polluting my build logs.

It listed opencollective and patreon as possible channels of support. That I didn't mind so much, but then there was a message (repeated countless times in the logs) that the author was looking for a job. That's just spam in my terminal, unacceptable.

Background and heated discussion in the following GitHub issue (since closed without resolution):

Get rid of postinstall message

https://github.com/zloirock/core-js/issues/548

I believe some irate users reported it to NPM, which could have triggered or contributed to the policy decision to ban terminal ads.
Can someone explain to a C/C++ newbie why the iPhone is so vulnerable to overflows? My understanding is that tools exist to check your code and identify overflow-able areas or general unsafe pointer areas. Am I incorrect here?

Also, from a broader point of view - is there any way to perform static code analysis and enumerate all code paths that access sensitive resources? For example, create a graph of functions and search for edges to and from the keychain. If one path ends up in a WebGL content renderer, that’s a vulnerability. I feel like this especially would help you enumerate most exploits and zero-days.
Alternatively the person getting the request could put it in a queue.
I think github.io is explicitly registered as a shared second level domain (similar to co.uk), which also ensures browsers don't allow cookies spanning multiple subdomains.
I agree, but this seems to be driven by people wanting more car features. You can still get manual transmission/manual window cars for $11k.
I'm with you on that 10 miles is nothing. I would love to have a store within 10 miles - that's biking distance even.

But to me - because food deserts have a larger impact on low-income folks, I think about it in their context. If I didn't have access to a reliable form of transportation, 10 miles would be a super long way to have to travel.
Well, if we are talking about funding FOSS projects that people rely on, we should first establish what projects people rely on. When installing a package is so easy that you do it a hundred times without even knowing it, the download numbers don't really convey that information. It's more of an indicator of dependency penetration.