skysight-inc/HackerNews huggingface dataset:
Google ads are, nowadays, designed to look like a regular search result. They subtly show a tag "Ad" in a box instead of https:// in the URL. Once upon a time, they were separated.

If a person were searching "basecamp alternative" or even "basecamp review", such competitor results would be well justified. If it were "management tool", of course, that would be good too.

As it is, it is effectively designed to confuse a user who is specifically looking for a specific company's website. Very few people have memorised the URL of every company they want to visit. Google is the way from a product name to your front door. This is like when you go to a tourist trap country, hop in a taxi and say, "can I go to well-recommended-restaurant" and the taxi driver takes you to "restaurant-that-is-crap-so-they-pay-me" instead and says "oh, the place you want is not good/closed/something, but this place is better". It is not the behavior of an ethical business. It is not the way to earn trust. If people seriously thought they had an alternative to Google, this kind of behavior would spur them on to use it.
It’s easy to find people who want to exit capitalism. I find them all the time. But I want to work to build institutions that will help people do that, at least to a large degree even if not entirely.
I think ORM vs concatenated strings is a false dichotomy. Prepared statements or stored procedures also protect against sql injection.
I'm not going to say Amazon in the UK are some paragon of virtue, but this article does seem to make it sound much, much worse in the US. While I do see plenty of delivery vans (for the likes of DPD, UPS as well), they certainly don't clog up the streets. Is it a lot worse in places like London?
You had a problem. You added TCP/IP and all its associated kludges like mDNS, SSL, etc. Now you have two problems!

Plus now your mouse has 2 gigabytes of RAM inside and burns your hand when you touch it. And your monitor has stuttery motion.
The industry has decided that it is more profitable to make you buy adapters or a new device every couple of years (and create more e-waste in the process), hence the accelerating churn. And each new revision of the standard will introduce its own set of problems, guaranteeing them something to do for the next revision after that; but the churn situation with USB isn't actually that bad:

USB 1.0 - 1996
USB 1.1 - 1998
USB 2.0 - 2000
USB 3.0 - 2008
USB 4.0 - 2019

Also, the vast majority of devices are still 1.x/2.x speed, so it might be more of a diminishing returns type of situation.
I spend lots of time with my teenage nephew—it’s all iMessage, Snapchat, Discord, GroupMe (surprisingly, because I’m old enough to use that!), and sometimes even Instagram DMs. Granted, he lives in the US, so that might change things.
You may not like the ruling, but it is intellectually dishonest to spread misinformation about something that the highest court in the land has made very clear.
variable interpolation doesn't happen at the ORM level, it happens at the driver level

pymysql / psycopg2 is doing this piece of it
Unfortunately, all the proposed routes for a better reality start off by heading through a worse one, and no one's really made the trip successfully yet. But people still talk about the utopia just a little bit farther than the previous group went...
BIOS update, not a huge deal. If it was a hardware issue that would be way more catastrophic.
> That the theory presented (inserting a microcontroller INSIDE a circuit board) is absolutely the hardest way to do things, especially when the article (esp. the article's graphics) heavily implied this chip was implanted right next to the empty pad of an SOT-8 footprint that was used for boot flash for the BMC. You could just put a chip on that empty footprint and hardly anyone would catch it.

Except if they were looking for it. An implant inside the board would be persistent across swapping out or re-imaging the the flash, _and_ wouldn't benoticable unless you were x-raying the board.

And yeah, the graphics weren't perfect, welcome to journalism.

> Or there are the specific quotes from the Bloomberg piece -- "the microchip altered the operating system's core so it could accept modifications" -- is so obtuse that it not only fails to inform the reader, but also sounds like some sort of pseudo-technobabble from someone who doesn't know what they're talking about. Ostensibly, if this story were true, the sources would say something like, "this chip contained a code that overwrote settings, allowing remote access". You know, something that seems like it passed through an editor.

IDK, it sounds like the implant would override one of the keys built into the image, whether that's an update key or a remote access key.

> Or there is the fact that the source checking on the story amounted to going to one guy, asking a question, having him say, "yeah, that's possible", coming back a few weeks later with another question, having the source say, "yeah, that's possible too", and assuming these possibilities add up to a certainty.

> The bloomberg big hack story is the worst researched and most poorly presented piece of writing in recent memory. It is idiocy in the classical greek sense -- it is disconnected from the polis and any semblance of reality. The authors are still writing for Bloomberg, too.

I still haven't heard a legitimate reason from you what doesn't make sense here other than vague "this doens't make sense, I'm so much more intelligent than them".

And I'm an FPGA developer who's personally screwed up SPI flashes via a very similar mechanisms just from bugs.
Scribd | Software Engineers, Engineering Manager, and more | San Francisco, Toronto, Amsterdam | ONSITE or REMOTE | VISA

Scribd is a reading subscription that gives you access to the best books, audiobooks, magazines, and more. Our mission is to change how the world reads. At the beginning of the year we hit 1M paying subscribers (https://techcrunch.com/2019/01/28/scribd-1-million-subscribe...)! We are one of the oldest YC startups (YC ’06), operating one of the largest Ruby on Rails sites.

Scribd has a very friendly, engineering-driven company culture with competitive salary and great benefits. We are ambitious but at the same time we value a good work life balance.

We are hiring software engineers across the board. Open positions we focus on right now:

* The Content Engineering team is in need of both software engineers and senior software engineers, onsite in our new San Francisco office, onsite in our Toronto office, or remote within the United States. The Content Engineering team was newly formed with the dual mission to own and update Scribd's existing content metadata pipeline and build new metadata that can be used by the search, recommendations, data science, and frontend teams to build more useful and intelligent features. The work includes building data pipelines, data engineering, and a touch of machine learning.

* The Search team is constantly striving to improve Search at Scribd in various dimensions - Quality, Relevance, Speed, Costs, Real-time indexing, Uptime, etc. We are looking for software engineers with experience working with Search systems. Experience with Elastic Search is a strong plus. (More details at https://jobs.lever.co/scribd/0de0db4b-971a-4d1d-ac90-9681f97...)

* The recommendations team is looking for a strong Technical Lead to help define the future of our recommendations system, providing technical guidance on algorithms and technology, mentoring engineers and collaborating with data scientists and product managers.

We have hired many people from these HN threads, including myself (back in 2012!). If you have specific questions you can reach out to me directly at adrian at scribd.com (I'm the Head of Technology and happy to answer questions related to these roles - recruiters/agencies: please do not contact me).

Please apply directly via https://jobs.lever.co/scribd?lever-via=ze1h-jCbee
Sure, if they were advertising places to go camping maybe. But in the field of project management tools, it has a specific meaning. Trademarks are always field specific. J. R. McDonald could start a carting business called "McDonalds Carting" with no real problem. But they would struggle to get away with starting a burger restaurant called "McDonald's Fine Burgers".
In most languages ecosystems I've used have paramatized queries or prepared statements which do this anyway...
You're outsourcing your thinking to an organisation that's looking at specific definitions. Might be better to read the licensee and compare it with the previous one.
The whole point is that the right to self-defense, which means the right to bear arms, pre-dates the Constitution and the formation of our nation. The 2nd Amendment only makes it clear that the government is not infringing upon the right which already exists.

For a deeper look at the issue dive into the positive rights vs. negative rights discussion which has been going on for ages. Sometimes it's phrased as positive vs negative liberty.

The short version, or my understanding of it, is negative rights means your rights were not given to you by your government, they are inherent, or given to you by God, or they are somehow a part of your very existence. This means your government can only take rights away from you but it doesn't have the power to ever grant you a right.

Positive rights on the other hand is the idea that rights are granted by your government. And since they are granted to you they may also be taken away.
Seeing red: Why cars are killing more people
Just bookmark https://www.bbc.com/news and you'll be happy.
BackbonePLM (https://backboneplm.com/) | Fullstack Engineer, Devops Engineer | Boulder, CO | ONSITE | Full-time | Benefits + Equity

My team at Backbone is looking for mid/senior fullstack engineers (node, angular7+, mongodb, react, typescript), and engineers with devops experience (Docker, typescript, node, AWS, convox) to help build product lifecycle management software for direct to consumer brands like Warby Parker, Stitch Fix, and Kith. Willing to help with relocation.

Read more:

https://angel.co/company/backbone-plm

(We currently don't have any jobs listed there, but I promise we're hiring!)

Feel free to reach out to austin at <companyname> .com for more info. Put HN somewhere in the subject, and put a brief description of what your skills are (web/devops).
Proof, or just another wild claim? You can not only disable Internet access to GBoard, but you can completely use it without Google Play Services.
The name needs a 1 in it too. Maybe "USB4 Gen 3x2 1st Class", so people can answer "yes, I guess?" when you ask whether it's USB 1.
This is a bit tautological, but the definition of bribery includes doing something that’s illegal. If donations to a school—along with the expectation of advantage—aren’t illegal, then it isn’t bribery.
I'm still not - um - disabling, ah, hyperthreading, because, I'm paying for, ah, 4 cores on a 2 core ah, processor.
> No reason we can't have a thunderbolt icon next on a USB port.

In fact, my ThinkPad X1 Yoga has two USB-C ports with Thunderbolt icons next to them. They support USB 3.1 Type-C Gen 2 with Thunderbolt 3 (including DisplayPort).
What’s nice about ActiveRecord is that while it obviously does hook into the Rails object-oriented style, it’s actually more relational and functional than oo in how it works underneath. It’s a fairly thin layer of abstraction over SQL. I think of it more as a way to build and compose SQL statements than a true ORM—at least when it’s used well.
At my last position we simply did sprocs and dapper. When you take as true that the database is the source of truth, it only makes sense to put the queries in the database. The only exception is dynamic queries or modifications.
I hope I can find a job through this portal
>the calendar applications from Apple, Google and Microsoft are set by default to accept calendar invites from anyone.

That's insanely dumb.

Why not at least limit calendar invites to contacts or contacts of contacts?
> hardware vendors optimizing Linux for their hardware

This makes sense for component vendors that want their customers to use the hardware with their customer's existing OS (Linux).

If it's a hardware vendor that also controls the software (e.g. mobile phones, appliances), then this doesn't apply. Keeping modifications to themselves can serve maintaining competitive advantage, reducing liability, or simply reducing costs of publishing code (either getting it merged upstream or mirroring a fork).
So you know one guy that quit over having and ORM instead of using SQL... do you have any idea how many quit due having to deal with thousands of lines of SQL string concatenations because some genius that also hates ORMs decided to do a giant project that way?

Then you call your alternative anti-orm and it generates... orm specs, and then you say "migration commands based on the git history"... what does that even mean? What does git history has to do with the database?
Maybe try reading the release notes before ranting non-sense.
This succinctly says the things I have been trying to communicate to other developers for years.

Bookmarking it so I can reference it.
Just a guess as I am not in the industry but I would imagine has to do with the photoresists and masks - perhaps we don’t have ones that work with X-ray. Not much good using a wavelength that passes through or is unabsorbed by the resist material!
Ted Neward's The Vietnam of Computer Science is an interesting read on the topic of ORMs.

http://blogs.tedneward.com/post/the-vietnam-of-computer-scie...
> OS updates for two years and security for 3

OS updates for 2 years assuming you buy it on launch day, for the vast majority of owners it will be significantly shorter than 2 years.

Also as a Nokia 3 owner, don't count on those updates actually working, mines been getting stuck in a boot loop when updating for a year now.
Who Is Afraid of Greta Thunberg?
Complete aside, but "black swan" is a terribly bad metaphor. 5 minutes drive and I can see hundreds of black swans, and not a single white one...
The noise problem can be mitigated by using a proper directional microphone/headset. It's a worthwhile investment if you are recording videos or are in conference call.
Ask HN: Best SVG Drawing Apps for iPad?
Anyone have any recommendations? New to the pencil.
https://support.google.com/adspolicy/answer/6118

Sounds like Google considers it OK as long as the ads don't mention Basecamp by name.
Passive reversible USB-A is actually rather common, as a quick search will show; I first noticed this on USB drives (double-sided tongue), but cables are available with those connectors too. The reversible females look quite a bit more fragile than the males; the latter is simply a double-sided tongue, while the former has the contact block thinned to a double-contacted septum.
Nuna (https://www.nuna.com) | San Francisco / DC | Full-time | ONSITE | Visa Transfer

We build data and analytics solutions that will help shift the US healthcare system to one based on value and quality. Our technical challenges are complex and compelling, and the work we do has the potential to impact millions of lives. We partner with healthcare plans, providers, and the government.

Data can be a powerful driver of change—but only when it’s acted upon with empathy. Our technology, data, and analytics solutions help healthcare payers, and providers get the answers they need to make quality care more affordable for millions of people.

Open positions include:
* Infrastructure Engineer (SF or DC)
* Software Engineer - Web Engineering (SF)
* UX Designer (SF)
* Senior Product Manager, Enterprise (SF)

Jobs Board: https://bit.ly/nuna-jobs

Backend Tech Stack: AWS/GCP, Java, Spark, Scala, R, Python, Bash, Go
Web Tech Stack: Python backend (Django), React, Typescript

Compensation: market salary & equity. We are well funded.

Questions? Contact via email: recruiting+hn@( our domain )
Besides, look at how many reddit submissions are just an image of a headline, or an image of a picture + caption. Not even a link to a source. Yet thousands of upvotes and reactions to it, taking it at complete face value.

To worry about fake photos/videos seems out of touch with the current state of the internet. People will upvote and bicker about a screenshot of the text of a tweet. Why even bother with ML when an image of an outrageous sentence is enough?
Apparently HN doesn’t like sarcasm
You gotta love both.

I just use ORM for OLTP and raw SQL for OLAP (Better for being more expressive).

Migrations saves a lot of time.
API-Gateway can return HTML?
The Intel ‘486 had the FP coprocessor integrated, but they split the line into the DX and SX models. The only difference was that the SX had the FP unit physically disabled.
As per the docs on the front page of the EBS product site, they experience an annual failure rate of 0.1-0.2%.

Amazon are very upfront about this and provide multiple means of ensuring data is resilient.

If you’re not using those, it’s on you. The cloud is not magic.
> This is different. It’s a proxy in front of others repositories

It's not all that different.

It's perfectly possible to use gems in ruby without ever using the rubygems server by setting every gem to be something like 'gem foo, :source = "https://github.com/foo/bar"'

However, people want to use this centralized repository in the ruby community because it allows for easily updating gems and for convenient caching.

The go proxy is not just a proxy. It also pre-parses out go.mod/go.sum to provide metadata faster and to provide security guarantees.

In a similar way to how centralized repositories are helpful in other languages, the go proxy adds actual legitimate features.

If you look at the public information on its development of this feature, all the motivations cited are about security, performance, and useful features, not information collection.

> This is different

There is a difference. Other repositories, like npm, require someone to opt-in to code being available via it (e.g. type `npm publish`, whether the publisher owns the package or not), while the go proxy default opts-in everyone that publishes a go package publicly and uses the newer go toolchain.

In practice, with how the npm/rubygems/etc communities work, everyone does opt-in if they wish their code to be publicly used, so the difference doesn't seem meaningful to me.

Other than that, the difference seems vanishingly small. In both cases, a 3rd party exists that serves downloads, and it exists to provide performance and discoverability benefits (with the go proxy also does due to supporting version-related operations), and in some cases security benefits.
ORMs are amazingly useful in the limited case that you're performing basic CRUD operations or simple joins.

In any sufficiently complex codebase you'll be doing more than this, however, and the work to support the ORM properly then outweighs the work of simply coding the raw SQL and preparing statements as appropriate.

Raw SQL also tends to be much more performant.
Yes, Go is in many ways a DSL for writing servers. IMO it should be the default language you reach for when starting a new server project.
perl, which does that with cpan

CPAN doesn't do that, because CPAN is a series of mirrors that neither collect nor report aggregate download numbers.
Ask HN: Why does Gmail sign in POST to accounts.youtube.com?
I have noticed for a while that when I login to Gmail via the multi-account selection screen, the sign in posts to accounts.youtube.com, while signing into youtube results in a post to accounts.google.com.

Do any googlers know why this decision has been made?

It makes me wonder GOOG makes any interesting infrastructure/cost decisions based on how it will help their financials. E.g. have YouTube take the costs of providing certain services to the rest of Google, etc.
I always have 7 Firefox windows open across 4 virtual desktops with over 100 tabs across them. Never crashes on Linux and never eats all my 16 GB of RAM. Right now it's using about 4 GB of RAM. When I run Chromium in 1 window with 4 tabs, within hours it's using all available RAM and the tabs start crashing, one at a time, as they fail to allocate more RAM.
Multiprocess was and is a huge win for performance, stability and security. In the post-Spectre world it's essential.
Maybe a spike on one side of the drone, and it flies into the target. Or a spike shoots out one side, along with a counterweight motion, and then retracts.

Edit: on second thought, it’s likely less practical to impale the things than to inject a small dose of poison or electrocute them or something, and it’s probably easier to use a ground-based robot for such precision tasks, with less energy and mass constraints.
Holding a vote on a specific course of action when all other methods of deciding have failed is not "repeating until you get the right answer". It's not like the result had been ignored, it's dominated the political world for years now.

There was a vote, we've spent the last 3 years dealing with it and the result (the deal) was roundly rejected. "Ok, what now?" Is not an unreasonable question to ask people.
Location: Greater Boston Area

Remote: Yes

Willing to relocate: No

Technologies: OCaml, C++, Rust, Elixir, Typescript, Scala

Github: https://github.com/anuragsoni

Email: hackernews@sonianurag.com

Linkedin: https://www.linkedin.com/in/anuragsoni13/

Résumé: Available on the Linkedin page. I can email a pdf copy on request.

Currently working as a full-stack engineer. I'm looking to transition back to a more backend focussed role. Most of my work experience has been using C++ to build backend systems, but i've recently been using Typescript (with Angular) and Java for my current team at work.

Outside of work my current interests have been OCaml and working on improving the OCaml story for web usecases. example: https://github.com/anuragsoni/routes
My Hifi system is 22 years old now, and going strong. Rotel and Infinity built some seriously good stuff back then.

I'm afraid of how much it'll cost me to replace it when it eventually breaks, if I can't fix it. Have already refurbished the speaker surrounds once, about 10 years go.

Guy at Speakerbits (Melbourne AUS) said the speakers would be worth more than when I bought them, as the mid range quality market just didn't exist anymore - either cheap throw away after a few years crap, or you'd have to go really high end.

I thought I'd check, and it seems like Speakerbits have now closed down. That's such a shame, they did a most excellent job. I guess that's a reflection of the times, people aren't willing to repair anymore. :(
Tiny habits (free course for a week) + never skip 2 days.
Nope, and I recently experienced this fun first hand.

My work desk has a built-in USB-3 C port, and says it supports USB Power Delivery. The desk is plugged into the wall. Excellent, I can use that port to charge the MBP, right? No! Plugging into that port will cause OS X to believe it's connected to a power supply — so the battery is "charging" according to the OS. Even more fun, is after leaving the laptop in this setup for some time: there's no visual indication in OS X that the battery is about to die and AFAICT, OS X would happily take no action, since it believes it's connected to a power supply¹.

Why? Because the USB "power delivery port" only delivers 10 W. (A normal MBP power adapter, connected to a wall, can deliver like 80 W. How much the laptop needs is dependent on use, but in my case, it's >10 W.) And AFAICT, the desk is compliant with the letter of the spec; USB PD ports are allowed to negotiate whatever power they can deliver; it just allows a device to draw as much as possible/needed, but doesn't guarantee any max rate.

Why anyone puts a max 10 W port on a desk basically hand-tailored for the SV 4-ft desk open office "experience" is beyond me, though.

¹and, technically, it is.
Why are you spending so much? There are many ways to get bandwidth for less. AT&T Home Wireless (doesn't have to be used at home) is $1/GB. There are many resellers of unlimited hotspots. Sometimes deals come up, like Verizon's now discontinued prepaid unlimited hotspot for $65/m.