skysight-inc/HackerNews huggingface dataset:
One of the most popular Micro ORMs for C# is Dapper which is used by Stack Overflow.

There is no real abstraction. You write standard SQL and it maps your recordset to an object. You know exactly what code is running.

There are extensions that will take a POCO object and create an insert statement and I believe updates, but where ORMs usually get obtuse and do magic are Selects. It’s hard to generate a suboptimal Insert or Update.
Bloomberg was rightfully dragged through the mud (IMHO), and like the parent I am immediately distrustful of any technical stories they put out. The issue was not that the BMC hack was implausible, but rather Bloomberg's refusal to supply solid evidence backing up their claims in the face of strong denials and perceived issues with the reporting.

A subset of the perceived issues with the reporting:

- How do the exploited servers phone home to China, when they were not connected to the open Internet? Not impossible, but it's asking for a lot of trust without more information. [0]

- One of the only named sources, Ryan Fitzpatrick, saying the details in their big hack article are identical to an example he constructed for the journalists to show that type of attack is plausible. The entire podcast is a great listen, but here is a direct quote: "In September when he asked me like, 'Okay, hey, we think it looks like a signal amplifier or a coupler. What’s a coupler? What does it look like?' […] I sent him a link to Mouser, a catalog where you can buy a 0.006 x 0.003 inch coupler. Turns out that’s the exact coupler in all the images in the story." [1]

- An accusation that the journalists who authored the Big Hack have had a previous story that made a big claim, they had many anonymous sources that back up their claims, but in the end there were extreme doubts of the veracity from people in the know. [2]

- Bloomberg sent another reporter, completely separate from the Big Hack article, in their tracks to discreetly talk to sources / involved parties to figure out the truth. [3]

Sources:

[0] https://daringfireball.net/2018/10/bloomberg_the_big_hack

[1] https://risky.biz/RB517_feature/

[2] https://threadreaderapp.com/thread/1049617855396933632.html

[3] https://www.washingtonpost.com/blogs/erik-wemple/wp/2018/11/...
Can't you just make sure that your allocator only uses the bottom x bits? (Of course you still need to be careful when interfacing with code that maps memory in some other fashion)
Housing supply is a factor. I haven't managed to read it, but I think the title says plenty about one of the ways America is different from other countries:

Why Are American Houses So Big?
https://news.ycombinator.com/item?id=20990409

Another significant factor is health care. Most developed countries have better coverage for their people than we do.

We are also the only developed country in the world without a good national maternity leave policy.

We are also very car dependent. In the US, housing is the single biggest expense for most people and their car is their second biggest expense. It's hard to live without a car in the US. I've done it for more than a decade, but I do freelance work. Trying to hold down a normal job without a car is tough in most places in the US because we don't have walkable neighborhoods and we don't have good public transit.

It's much easier to live without a car in many other countries. This helps make life affordable for people with jobs that don't pay that well. They can support themselves because they can get to work without a car, whereas carless Americans have trouble getting a job at all.
Penalizing overhead is actually a huge source of dysfunction at non-profits:

The problem is, those overhead tasks don’t disappear just because you don’t spend money on them. Someone has to monitor the accounts, find new donors, calculate taxes, organize the holiday party. Centralizing these tasks in dedicated departments, hiring specialists, getting good at them, that would have looked like bureaucracy. So instead, we spun them out to the entire staff ... No one had any expertise in writing grant proposals, conducting impact assessments, or managing high-maintenance funders like the European Commission—training courses would have counted as overhead spending.

https://newrepublic.com/article/120178/problem-international...

Overhead is only inefficient if the charity isn't getting results. And charities that have low overhead but still don't get results are by definition still inefficient. Don't worry about overhead, focus on results.
I absolutely love reading. I can't make it through four seasons of TV (my most recent failure is Battlestar Galactica '04) and I can't seem to get myself to suffer through repeated failure at video gaming for more then thirty minutes at a time, but I absolutely love books. My trio of hobbies are coding, writing, and reading and it's a really happy and productive combination!

I prefer fiction, generally hard science fiction and high fantasy (less so the latter), but occasionally if I come across a truly exceptional historical fiction book I'll and that to my TBR list as well (Shogun, Silence, and Pillars of the Earth, for example). I also prefer longer books, since if I'm sitting down to read something I really want a lot of detail and meat there. Even irrelevant details are welcomed, I almost just enjoy the act of reading. When it comes to selecting books, I value some kind of novelty of uniqueness above almost anything else, but it also has to have a sense of craftsmanship.

I must confess I'm addicted to buying physical books, as well. I have quite a few books on Kindle, and do read them, but whenever feasible (and it isn't always) I prefer to buy books from Amazon. Specifically, Mass Market Paperbacks, which I find to be the perfect form factor (and cheaper than Kindle books, too).
>Major concern I have is that every game will "become a subscription service".

we'll see the first netflix-like delivery of games take off in popularity. I think one of playstation's offerings works like this and either EA or ubisoft has this too. It never would result in 'price to play per hour'. This isn't <1995

Alternatively, it on steam it could operate the way a lot of valve's dlc already operates. You end up with a gun in CS:GO and you can transfer it to whomever. The only issue is, the source of that DLC is from 'lootboxes'.
> The joins I do in the ORM are completely transparent to me as a developer and there is no mismatch whatsoever.

Care to provide any examples with comparisons to ANSI SQL or any major SQL platform?

*take note that “SQL became a standard of the American National Standards Institute (ANSI) in 1986, and of the International Organization for Standardization (ISO) in 1987.” the same cannot be said for any ORM.
I’ve never seen a homegrown ORM that was better than a third party one. Whenever there is an issue - and there are always issues - you have to dig into the code, because they are never documented well.

There is usually a feature that no one thought about and then you have to make modifications to the custom ORM and you get an even bigger mess.
Um, PL/PGSQL and et al for stored procedures exist, OOP is optional.
Ask HN: Language Cloud Costs
What are people's thoughts on the cost of running certain languages in the cloud. (e.g. .Net Core vs Java)

I have also been wondering the cost differences of running blocking vs non blocking code in the cloud.
Cuba's 'sonic weapon' may have been mosquito gas
The key is to just put it down and move on to another book if you’re not enjoying it. Many people have a completist attitude towards reading - they continue to slog through to the end of a book once they’ve started, even if they don’t like it. They’ll make slow progress, and it blocks them from picking up a new book.

Cut your losses early - your total reading throughput will be much higher, and most nonfiction books aren’t worth reading all the way to the end anyway.
Similar concept: cheat.sh
Does this work? Is this just a splash page.

If you want to use something like this today, check out (mine) https://github.com/eraeco/party.lol it works with your existing email, just encrypts it end to end. It uses modern cryptographic curves, not PGP.
What's the legality of using a vulnerability to monitor someone if you have a warrant?

Seems like it would still be illegal.
Opposite; an in-house solution is almost always worse than an external dependency when that dependency is something as important to get right as an ORM.
There is hardly ever a time where an in house solution is better than a third party one for cross cutting concerns. Most of the packages are open source.
I guess I don't know enough Perl to understand how this differs dramatically from something like SQLAlchemy in Python.
My experience with Redmine was that it was simpler than Jira.
That’s nice rhetoric but I didn’t pick the survivor examples.
I understand your argument but struggle to accept a charity where $0.80 on the dollar of my donation goes to fundraising.
It is also disingenuous to pretend all of Latin America is a dangerous cesspool of crime and murder, unfit to live in, and the US is the sole shining beacon of safety and prosperity. People are so quick to point out how very wrong Trump was to call them 'shithole countries', but immediately adopt that position when it's time to justify increased immigration.
Docker in production is a potential disaster, it runs everything as root from the daemon, we are heavy k8s users, and we are transitioning to rootless cri-o containers specificaly because of this. Investigate podman which is a docker cli clone that builds cri-o containers from docker files and allows you to run them under a designated user id, the only restriction is that in rootless mode you cant map ports that are less than 1024, for that you need to run them under sudo which defeats tbe purpose. Howver we use an ingress controller to map inbound requests to containers so it can do the port mapping. We used to use traefik, but now we use nginx as ibgress, becuase we can run the excellent lua-waf module.

We run on multiple clouds, so vendor apis and k8s implementations are not usefull to us.
If money alone fixed social problems, white people wouldn't have burned down Black Wall Street. Blacks there had money. It in no way protected them from racism.

https://www.colorlines.com/articles/its-been-96-years-white-...

That in no way is an argument against social programs per se.

But I would personally much rather see our housing supply issues remedied rather than see more funds earmarked for "the homeless." If you need to be out in the street before you qualify for help, society is doing something very wrong.
SQL is to much software development what rivets, bolts, or even beams are to the construction of skyscrapers... if you’re going to be in the software business, you should really get comfortable with SQL, after which you’ll likely find the friction and headaches caused by ORMs to be a deal breaker.
How much is 'enough'?
Simple Online Form Builder
You’ve obviously never met a San Francisco homeless advocate, which is a heartbreaking job on many levels
I've ripped out broken ORM on multiple projects with over-engineered domain models designed by people with no apparent knowledge of how to do a proper database design. This is the key problem with ORM. It leads to lots of unnecessary joins just so you can pretend databases do inheritance or all those tiny objects you will never query on need dedicated tables with indexed columns. It's stupid. It's also stupidly slow, fragile, and hard to maintain such systems.

I've been on a project where we had 20+ tables. After I made the point that the sole purpose of this database was producing json documents through expensive joins that were indexed and searched in Elasticsearch (i.e. this was a simple document db), we simplified it to a handful of tables with basically an id and a json blob; got rid of most of the joins and vastly simplified the process of updating all this with simple transactions and indexing this to elasticsearch with a minimum of joins and selects.

We also ripped out an extremely hard to maintain admin tool that was so tightly coupled to the database that any change to the domain made it more complicated and hard to use because the full madness of the database complexity basically leaked through in the UI.

ORMs don't have to be a problem but they nudge people into doing very sub optimal things. When the domain is simple, the interaction with the database should be simple as well. We're talking a handful of selects and joins and simple insert/update/delete statements for CRUD operations. Writing this manually is tedious but something you do only once on a project. With modern frameworks, you don't end up with more lines of code than you'd generate with an orm. All those silly annotations you litter all over the place to say "this field is also a column" or "this class is really a table" get condensed in nice SQL one liners that are easy to write, test, and maintain.
Omitting a job is not lying on a resume -- it's very common to prune your jobs to respect a one-page limit, and the resume is supposed to present what is relevant and persuasive to the hiring manager.
"WSD" is apparently "Web Services Discovery", which is part of the dreadful "SOAP" ecosystem/specification.

Just when you think that SOAP has not inflicted enough pain on the world at large, someone discovers this. Wow, SOAP just keeps on giving.
Bolt, Uber, etc. raise their prices relative to your battery level
Here is a more up-to-date doc on the security model: https://developers.google.com/web/updates/2019/08/native-fil...
I’m scratching my head too. This isn’t even handwaving, they’re just vague marketing claims.

Email is notoriously insecure, and hard to get right. If this is decentralized and “self-sovereign”, why do I need this service? What even is this service? Is it just email? If so, how is it doing encryption? Do I control my keys? Why don’t I just use PGP (usability issues notwithstanding)?

What about metadata? Is this secure if I have to communicate with non-Tildamail users? How do I send an encrypted Tildamail to someone with a non-Tildamail email address?

Sorry, color me skeptical. I see vague marketing copy and a field for my email address, which I assume will be sold to the highest bidder in 18 months when the venture capital dries up.
Mozilla's statement regarding Manifest V3 hints that Mozilla is likely to follow the same path at a later date. They face the same security and privacy issues surrounding plugins that have driven Apple and Google to make the changes they have.
I did a deep dive on Ramses II about a decade ago when I just randomly found a book about him on the streets of San Francisco.

He's definitely an amazing historical figure.

However, we DO know that a large number of his statues were usurped from other great figures.
Oh, I've had that at one of the place I used to work at. The git commit tree is signed, and once a team member left no one can create branches any more because all of his commits are now insecure.

Yeah that was fun.
They tried - a big chunk of Trumps platform was isolationism. The military-industrial complex pushing foreign meddling, and people calling for less immigration, are not the same.
Basic Economics, by Thomas Sowell[1]

There seems to be a requirement that policy makers not have read this book.

[1] https://www.amazon.com/Basic-Economics-Fifth-Common-Economy/...
Not that I'm aware of, sadly. There's New Scientist from the UK but that's more of a weekly newspaper and thus a bit shallow. There's some great online magazines of course (Quanta is pretty good) but for longform writing I still like hard copy cause I'm old.
I posted something similar on the author’s site, but I wonder if this is just “revealed preference.”

Perhaps people don’t really care nearly as much about the outcome of elections as they say they do.

I think most people suspect the outcome of an election won’t affect their lives nearly as dramatically as people claim, there’s too much inertia in the system.

Also, maybe, just maybe, people are subconsciously more intellectually humble than they let on, and realize that predictions about the impact of policy and elections are notoriously unreliable.

Taking a political position can serve to identify yourself with a certain social group, or as part of your personal identity, or if you are feeling somewhat metaphysical it can indicate the structure of your ethical system.

In all of those cases there is no need to actually spend money to achieve the goal.

If I am an “Apple person” I need to spend $1,000 on a phone to demonstrate this.

But if I’m a Sanders supporter I can do all this signaling by expressing outrage on Facebook and at dinner parties without spending a dime.

If this theory is correct, a political movement that could somehow get people to feel they have to contribute money to be a “real” supporter with associated social status would be drowning in contributions.
Until you have a grid with a filter in your UI where the user can create a dozen different queries on the fly....

Why does your database structure have to be structured by your ORM?

The only ORM that I have used are LINQ based ones and they can model any database relationship.

Don’t get me wrong, my first instinct when starting a project is to use Dapper - a Micro ORM written by Stack Overflow that just maps a sql query result to object and doesn’t generate sql.
I bought Nvidia Jetson Nano Dev Kit in India as soon as it became available for (~$125), in USA it's bit cheaper at ~$110 (incl. shipping).

Please note that there is also Nano Module, which is a SOM (System on Module) with 16GB EMMC storage sold for $150. I think this is intended for clusters.
You're going to love this: about the time I left one place I worked one top engineer did a meeting on using Hibernate for... drum roll... analytic queries. My brain fried with questions of why, how is this better, and this is definitely the result of someone that hasn't touched real SQL in a while and just wanted to use the same hammer for everything.
Well the real cost of bandwidth is cents...
Two Widely Used Ad Blocker Extensions for Chrome Caught in Ad Fraud Scheme
>You can (and should) use them for simple queries.

This is not a very compelling argument to use ORMs. It is saying "it makes easy things easier". This doesn't really buy you much value. The simple things are already simple. Bringing in a very large, complicated external dependency to make simple things simpler, is not a good idea.

>If you're loading data into objects then you're just creating your own personal ORM anyway.

By this definition, the Postgres driver I use for node is an ORM as it takes a row of string/type identification codes and turns them into javascript objects and javascript types. It isn't an ORM though, that is not what an ORM does. An ORM converts one paradigm into a completely different paradigm, which is why it fails and is a terrible idea.
Sure, but:

> I'm sympathetic to concerns about people who don't know what they're doing, but if I'm a Safari user, I have to value keeping myself safe first.

This change still means that Firefox will have better adblocking and privacy tools than Safari. It's a tradeoff -- and if I'm a user that's already conservative about granting extensions permissions, I don't see how I get any benefits from this. I only get the downsides in the form of less effective blockers.
Same situation, and actually Infinite Jest also started a half a year long drought that was only broken by the Three Body Problem trilogy.

Agree with the cut your losses strategy.
Browsers need a bright line between documents (HTML and CSS) and applications (electron-like, notifications, complex APIs, access to features that affect the user's security).

Glad that somebody else sees this. This muddling together of a perfectly good hypertext browser and a poor man's operating system is really not a Good Thing.

Just think about the difficulty web "applications" have dealing with something like function keys. If I press F5 in my browser, and I asking the browser to reload the page, or telling the page to do something? And how would I know ahead of time if the page has hijacked a given key combo that I intuitively expect the browser to respond to (ctrl+w maybe).

Whether we separate out the application runtime from the browser altogether and have a handoff mechanism, or add some way for a page to request something like an "application mode" to the browser, it really feels like we need a way to make this "page" vs "application" distinction.

And yes, of course, the line appears a bit fuzzy. I'm not saying figuring out an answer to this is easy, but I hope there are people out there thinking about it.
There are less drastic ways to reduce SQL boilerplate, though - such as simple SQL dialect implementations, in your language of choice. I'd almost always prefer that kind of interface, when there's a decent one to use.

Of course, your database may come with features that can help too (views, udfs, etc)

I'd generally only reach for an ORM in one circumstance - when my team already knows it well, and can move fast with it. It should also be popular, so that its likely new team members already know it, and can move fast with it. Otherwise, you're just putting unnecessary obstacles in front of your team, in most cases.
Was this https://openacs.org/ ?
Store business documents in a place. Got it.
I seriously don’t think I have worked with a single developer in 20+ years that didn’t at least know simple sql and joins
Literally some of the most influential journalism of all time has been sourced from anonymous informants that weren't vetted by third parties. We didn't find out who deep throat was until over thirty years later, after he was in a nursing home with dementia.

Remember that anonymous doesn't mean unvetted.

And that leak was over literally millions of lives, so it's not like an intelligence arm of a Nation state doing its job in peace time is so more serious that the standards are higher.
I had the same problem. I got follow on requests flooding, then overwhelming me to the point of frustration and then annoyance.

Much later I listened to a podcast or ted talk of someone who talked about charity. I believe she worked with nonprofits as her day job.

I was listening to her expecting to understand altruism, to find out how and why people donate money, and how they find worthy causes along with decent organizations to donate to.

The one thing that stuck with me was when she asserted that the number one reason people will donate to your charity is: Have they donated before.

This gave me an unexpected glimpse behind the curtain at what motivates organizations to over-contact their previous benefactors.

It made me a little sad too, reminding me a little of the petting zoo. You take a young kid to the petting zoo to interact with the animals. But then they see this tiny child has a handful of food, and you are surrounded by crazy goats that chase the helpless youngster until she throws the food and runs away.
Writing SQL is a lot of work, not type safe (in the programming language static typing sense), often not re-usable, and hard to test. There are libraries that solve these parts for you (or at least help with them). For me the optimum is libraries that do only these parts but actively try to NOT introduce any new layer of abstraction over the database model itself. The problem is that in this whole ORM discussion, the baby gets thrown out with the bathwater.
How TiVo is trying to make a comeback